Fix JWT regex (#246)

Author: RabeaZr

detect_secrets/plugins/jwt.py

@@ -13,7 +13,7 @@ class JwtTokenDetector(RegexBasedDetector):
     """Scans for JWTs."""
     secret_type = 'JSON Web Token'
     denylist = [
-        re.compile(r'eyJ[A-Za-z0-9-_=]+\.[A-Za-z0-9-_=]+\.?[A-Za-z0-9-_.+/=]*?'),
+        re.compile(r'eyJ[A-Za-z0-9-_=]+\.[A-Za-z0-9-_=]+\.?[A-Za-z0-9-_.+/=]*'),
     ]
 
     def analyze_string(self, string: str) -> Generator[str, None, None]:

tests/plugins/jwt_test.py

@@ -35,6 +35,7 @@ class TestJwtTokenDetector:
             # good by regex, but otherwise totally not JWT
             ('eyJAAAA.eyJBBB', False),  # noqa: E501
             ('eyJBB.eyJCC.eyJDDDD', False),  # noqa: E501
+            ('eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJ1c2VyIiwianRpIjoiYXQtdThjZms2YjdncGF1c2tvIn0.ZaYs5sGS90G-ef0qsXFhOPY3RMxEsngldkRSZ1umEIs', True),  # noqa: E501
         ],
     )
     def test_analyze_line(self, payload, should_flag):