
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
github.com/zerepl/bookstore_oauth-api
Advanced tools
A Golang microservice that will be used as an OAuth API to centralize authentication.


This service will work as a security layer for other services, basic all requisition will need a token that will be generated and used by the client to make requests to others APIs, these APIs will send a request back to our OAuth in order to verify if this token is valid.
This app collect some data from env, bellow you can find a list of all vars and their values:
| Variable | Description |
|---|---|
| cassandra_oauth_host | Database URL |
| cassandra_oauth_keyspace | Database Keyspace |
Inside this folder you will find a file called migration.cql, run it in your database.
While the same folder of Dockerfile, run:
docker build --tag bookstore_oauth-api:latest .
go run *.go
Starting Cassandra container:
docker run --name cassandra --network host -d cassandra:latest
Remember to run migration.cql in your database
Starting the app
docker run -ti --network host -e cassandra_oauth_host=127.0.0.1 -e cassandra_oauth_keyspace=oauth bookstore_oauth-api:latest
| Function | Method | Path | Expected |
|---|---|---|---|
| Get token | GET | /{token_name} | String |
| Create token | POST | / | JSON |
| Update token | PUT | /{token_name} | String |
return a token
{
"access_token": "abc123",
"user_id": 1,
"client_id": 2,
"expires": 123
}
This microservice is based in this course
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.