From 98c9afaef22730ec9c6627488a5f4b977a2581cf Mon Sep 17 00:00:00 2001
From: sascha <sascha@sascha-lutz.de>
Date: Fri, 14 Aug 2026 10:37:50 +0200
Subject: [PATCH] Eindeutigen langen DNS-Token aus Secure Note erkennen

---
 app.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app.py b/app.py
index db5ebbe..19c164e 100644
--- a/app.py
+++ b/app.py
@@ -989,6 +989,8 @@ def _normalize_hetzner_dns_token(raw: str) -> str | None:
     candidates = []
     labelled = re.findall(r"(?is)(?:token|api[ -]?key)[^\n:=]{0,80}(?::|=|\n)\s*([A-Za-z0-9._-]{24,})", raw)
     candidates.extend(value for value in labelled if value.isascii())
+    broad = re.findall(r"(?<![A-Za-z0-9._-])([A-Za-z0-9_-]{32,})(?![A-Za-z0-9._-])", raw)
+    candidates.extend(value for value in broad if value.isascii())
     for line in raw.splitlines():
         if "token" not in line.lower() and "api key" not in line.lower() and "api-key" not in line.lower():
             continue