Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/brokenhandsio/vapor-oauth-fluent
This repo contains a Fluent implementations for the required protocols for Vapor OAuth.
Vapor OAuth can Fluent be added to your Vapor add with a simple provider. To get started, first add the library to your Package.swift
dependencies:
dependencies: [
...,
.package(url: "https://github.com/brokenhandsio/vapor-oauth-fluent", .upToNextMajor(from: "0.4.0"))
]
Next import the library into where you set up your Droplet
:
import VaporOAuthFluent
Then choose the implementations you wish to add the provider you add in your Config
. For example:
try addProvider(VaporOAuth.Provider(codeManager: FluentCodeManager(), tokenManager: FluentTokenManager(), clientRetriever: FluentClientRetriever(), authorizeHandler: MyAuthHandler(), userManager: FluentUserManager(), validScopes: ["view_profile", "edit_profile"], resourceServerRetriever: FluentResourceServerRetriever()))
You can choose which implementations to use, or write your custom ones. For instance you may choose to use Fluent for Tokens and Users, but hard code the clients and use JWT to manage Codes.
The following models have Fluent extensions included with this repository:
Note you will need to add these models to your preparations if you wish to use any of these.
As well as models, Vapor OAuth Fluent includes implementations for the Managers required to interact with the models. The included managers are:
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.