Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/bertrandmartel/vue-basic-captcha
Template project of a Vue.js application with basic authentication & captcha integration in Go
This template is great for making a quick responsive Vue.js project protected by username/password with captcha with vuetify and vuex out of the box. Redis is used to store the session & the username/password (password is hashed & salted).
./main
or ./main.exe
http://your.host.ngrok.io:6004
Using binaries, you must have redis installed
git clone git://github.com/bertrandmartel/vue-basic-captcha.git
cd vue-basic-captcha
Create docker-compose.yml :
version: '2'
services:
backend:
build: .
environment:
REDIS_HOST: redis
HOSTNAME: your.host.com
CAPTCHA_SECRET_KEY: [captcha secret key here]
redis:
image: redis:6.0
docker-compose up
Create a user using the provisioning tool :
docker exec -it $(docker ps | grep vue-basic-captcha_backend | cut -d ' ' -f1) sh
cd ../provisioning/add
./add
go to http://your.host.ngrok.io:6004
In developer mode, you must have redis installed
git clone git://github.com/bertrandmartel/vue-basic-captcha.git
cd vue-basic-captcha
cd backend
make install
create .env.secret
in backend directory with content :
HOSTNAME=your.host.ngrok.io
CAPTCHA_SECRET_KEY=[captcha secret key here]
Then run the backend :
make run
in another tab
cd frontend
npm i
vue ui
go to http://your.host.ngrok.io:6004
2 programs provide way to add & remove a user to/from Redis :
cd ./provisioning
go run ./add
cd ./provisioning
go run ./delete
2 way of configuring this app :
{
"version": "0.1",
"port": 6004,
"serverPath": "http://localhost",
"hostname": "your.host.com",
"captchaSecretKey": "[captcha secret key here]"
}
Name | Sample values | Description |
---|---|---|
REDIS_HOST | redis / localhost | Redis hostname |
HOSTNAME | your.host.com | hostname to be checked in captcha response |
CAPTCHA_SECRET_KEY | [captchaKey] | captcha secret key |
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.