Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
org.tonicsoft.ebay:ebay-shopping-api
Advanced tools
This Java client enables you to use Java to make API calls in the eBay Shopping API, which is an XML API. This maven build is simply the Apache CXF generated client code for the Shopping API WSDL.
This project is an JAX-WS generated java client for the eBay Shopping API. Use it to avoid the unpleasantries of configuring code generators and the manual downloading of WSDL files etc. This project will not help you create an instance of the generated service interface. For this you must choose a JAX-WS implementation such as Apache CXF or Axis2 etc.
Find the latest version of the project in the Maven Central Repository.
For detailed usage help, see the documentation for JAX-WS and your chosen implementation. The eBay Shopping API documentation also needs careful reading to ensure the correct HTTP headers are set. The following is an example of how to create a client and make an API call with Apache CXF. First we create an instance of ShoppingInterface
, then we set up a request context so that standard eBay HTTP headers will be added to each call. Note that you need an eBay APP-ID.
public SimpleItemType getEbayItem(String itemId) {
GetSingleItemRequestType request = new GetSingleItemRequestType();
request.setItemID(itemId);
return buildShoppingApiService().getSingleItem(request).getItem();
}
private ShoppingInterface buildShoppingApiService() {
JaxWsProxyFactoryBean serviceFactory = new JaxWsProxyFactoryBean();
serviceFactory.setServiceClass(ShoppingInterface.class);
serviceFactory.setAddress("http://open.api.sandbox.ebay.com/shopping");
Object port = serviceFactory.create();
ClientProxy.getClient(port).getOutInterceptors().add(new AbstractSoapInterceptor(PRE_PROTOCOL) {
@Override
public void handleMessage(SoapMessage message) throws Fault {
Map httpHeaders = (Map) message.get(PROTOCOL_HEADERS);
MessageInfo soapMessageInfo = (MessageInfo) message.get(MessageInfo.class.getName());
httpHeaders.put(
"X-EBAY-API-CALL-NAME",
singletonList(soapMessageInfo.getOperation().getName().getLocalPart())
);
}
});
Map<String, List<String>> headers = new HashMap<>();
headers.put("X-EBAY-API-APP-ID", singletonList(...));
headers.put("X-EBAY-API-REQUEST-ENCODING", singletonList("SOAP"));
headers.put("X-EBAY-API-VERSION", singletonList("989"));
ClientProxy.getClient(port).getRequestContext().put(PROTOCOL_HEADERS, headers);
return (ShoppingInterface) port;
}
To run the above example you will need the core CXF dependencies, org.apache.cxf:cxf-rt-frontend-jaxws:3.1.4 and org.apache.cxf:cxf-rt-transports-http:3.1.4.
http://developer.ebay.com/webservices/VERSION/ShoppingService.wsdl
where VERSION
is the API version e.g. 989
.Major versions are maintained in a one to one correspondance with the versions of releases detailed on the eBay Developer Program website. For example, version 989.0.0
of this project targets version 989
of the eBay shopping API. Subsequent minor or patch versions of this projects (981.0.1
, 981.1.0
etc) target the same version of the eBay Shopping API.
FAQs
This Java client enables you to use Java to make API calls in the eBay Shopping API, which is an XML API. This maven build is simply the Apache CXF generated client code for the Shopping API WSDL.
We found that org.tonicsoft.ebay:ebay-shopping-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.