
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@accounts/meteor-adapter
Advanced tools
MeteorJS wrapper for using AccountsJS with the original Meteor Accounts package
JSAccounts adapter for MeteorJS: override and extends Meteor methods and publication with JSAccounts authentication.
Start by installing and adding to your Meteor project:
meteor npm install --save @accounts/meteor-adapter
To use with Meteor client-side, use your AccountsClient instance and Meteor instance, and use this package on your Meteor's client-side entry point (usually client/main.js):
import { Meteor } from 'meteor/meteor';
import AccountsClient from '@accounts/client';
import { wrapMeteorClient } from '@accounts/meteor-adapter';
AccountsClient.config({}); // Config your accounts client
wrapMeteorClient(Meteor, AccountsClient);
Now, each time you call Meteor.call or Meteor.subscribe - the JSAccounts accessToken will be appended to your request, and your server will be able to validate it.
To use with Meteor client-side, use your AccountsServer instance and Meteor instance, and use this package on your Meteor's client-side entry point (usually server/main.js):
import { Meteor } from 'meteor/meteor';
import AccountsServer from '@accounts/server';
import { wrapMeteorServer } from '@accounts/meteor-adapter';
AccountsServer.config({}); // Config your accounts server
wrapMeteorServer(Meteor, AccountsServer);
Meteor.startup(() => {
// ...
});
Now, each time you call Meteor.methods or Meteor.publish - the JSAccounts accessToken will parsed and validated, and the user and userId will be available for use inside your callback, for example:
Meteor.publish('myPulication', function() {
const user = this.user(); // JSAccounts user, or null if there is no user at all
const userId = this.userId(); // JSAccounts user id, or null if there is no user at all
});
Meteor.methods({
myFunc: function() {
const user = this.user(); // JSAccounts user, or null if there is no user at all
const userId = this.userId(); // JSAccounts user id, or null if there is no user at all
}
});
Note that if there method is called without an authenticated use in the client side, the user and userId will return null values - so you should check it inside your method.
If the user specified a token but it's not valid - the method/pulication will fail with the JSAccounts error.
FAQs
MeteorJS wrapper for using AccountsJS with the original Meteor Accounts package
The npm package @accounts/meteor-adapter receives a total of 9 weekly downloads. As such, @accounts/meteor-adapter popularity was classified as not popular.
We found that @accounts/meteor-adapter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.