Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
uk.ac.ox.ctl:canvas-spring-oauth2
Advanced tools
This small project provides some supporting classes for using Spring Security OAuth2 with Canvas.
This project contains a few supporting files for building Spring Security OAuth2 client that work well with the Canvas LMS by Instructure. There is documentation of their OAuth2 setup which may be helpful in understanding this library.
This project is release to the central maven repository and can be added as a maven dependency to another project:
<dependency>
<groupId>uk.ac.ox.ctl</groupId>
<artifactId>canvas-spring-oauth2</artifactId>
<version>0.2</version>
</dependency>
To build this library use Apache Maven:
mvn install
This will build a JAR that can be used as a dependency in another project.
This project is deployed to the central repository, once ready to release you can have the release plugin tag everything:
mvn -Prelease release:clean release:prepare
then if that completes successfully a release bundle can be pushed to the staging area of the Sonatype OSS repository with:
mvn -Prelease release:perform
We don't automatically close the staged artifacts so after checking that the files are ok you can login to the repository and release it.
This project is Apache 2 licensed.
FAQs
This small project provides some supporting classes for using Spring Security OAuth2 with Canvas.
We found that uk.ac.ox.ctl:canvas-spring-oauth2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.