
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@ackee/antonio-utils
Advanced tools
@ackee/antonio-utils
Custom Saga effects with built-in cancelation of API requests.
Effect creators
Auth utils
yarn add @ackee/antonio-utils -S
takeRequest(actionTypes: TakeRequest, saga: Function)
actionTypes: TakeRequest
REQUEST: ActionPattern
- action type that launches the sagaCANCEL: ActionPattern
- action type that aborts the running sagasaga(requestAction, signal: Signal): Function
- the actual API request is made hereimport { takeRequest } from '@ackee/antonio-utils';
export default function* () {
// Works same as the Redux saga take effect, but on top of that, it cancels the API request.
yield takeRequest(
{
REQUEST: 'FETCH_TODO_ITEM_REQUEST',
CANCEL: 'FETCH_TODO_ITEM_INVALIDATE',
},
fetchTodoItem,
);
}
takeLatestRequest(params: TakeLatestRequest, saga: Function)
params: TakeLatestRequest<RequestAction extends AnyAction, CancelAction extends AnyAction>
REQUEST: RequestAction['type']
- action type that launches the sagacancelTask<A extends AnyAction = AnyAction>(requestId: RequestId, action: A): A;
- Redux action that will cancel the
running sagarequestIdSelector?(action: RequestAction): RequestId;
- A function that receives request action as 1st arg. and returns unique ID of this action, e.g. user ID.saga(requestAction, signal: Signal): Function
- the actual API request is made hereimport { takeLatestRequest } from '@ackee/antonio-utils';
// The 'signal' must be passed to the request config object:
function* fetchTodoItem(requestAction, signal) {
const response = yield* api.get(`todos/1`, {
signal,
});
return response.data;
}
const fetchTodoItemInvalidate = () => ({
type: 'FETCH_TODO_ITEM_INVALIDATE',
});
export default function* () {
// Works same as the Redux saga takeLatest effect, but on top of that, it cancels the API request.
yield takeLatestRequest(
{
REQUEST: 'FETCH_TODO_ITEM_REQUEST',
cancelTask: fetchTodoItemInvalidate,
},
fetchTodoItem,
);
}
If requestIdSelector
function provided, instead of cancelling of all previous requests and taking only the last one for certain action type, take the lastest request for certain user, i.e. identify the request by action type and by an ID.
import { takeLatestRequest } from '@ackee/antonio-utils';
// The 'signal' must be passed to the request config object:
function* fetchUser(requestAction, signal) {
const { userId } = requestAction;
const response = yield* api.get(`users/${userId}`, {
signal,
});
return response.data;
}
const fetchUserInvalidate = userId => ({
type: 'FETCH_USER_INVALIDATE',
userId,
});
export default function* () {
// Works same as the Redux saga takeLatest effect, but on top of that, it cancels the API request.
yield takeLatestRequest(
{
REQUEST: 'FETCH_USER_REQUEST',
cancelTask: fetchUserInvalidate,
requestIdSelector: action => action.userId,
},
fetchUser,
);
}
setAuthHeader(headers: Headers, tokenValue?: string, tokenType: TokenType | string = TokenType.Bearer): void
Sets or deletes the Authorization
header with provided tokenType
and tokenValue
:
const accessToken = 'eqwo123490ewqj123njir43';
const headers = new Headers();
setAuthHeader(headers, accessToken);
console.assert(headers.get('Authorization') === `Bearer eqwo123490ewqj123njir43`);
FAQs

The npm package @ackee/antonio-utils receives a total of 112 weekly downloads. As such, @ackee/antonio-utils popularity was classified as not popular.
We found that @ackee/antonio-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.