Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@brightcove/dynamodb-sessionstore
Advanced tools
DynamoDB based session store for use with express-session
DynamoDB based session store for use with express-session. This allows sessions to be stored in an existing DynamoDB table and provides flexibilty for tables that contain range/sort keys.
.npmrc
file with the proper auth tokennpm install @brightcove/dynamodb-sessionstore
const session = require('express-session');
const sessionStore = require('@brightcove/dynamodb-sessionstore');
const DynamoDBStore = sessionStore({ session });
...
app.use(session({
secret: 'keyboard cat',
resave: false,
saveUninitialized: true,
store: new DynamoDBStore(options),
...
}));
Param | Type | Description | Required |
---|---|---|---|
database.table | string | Table name | yes |
database.client | DynamoDBDocument | Instance of DynamoDBDocument client | yes |
getKey | function | A function that should accept a session ID and return an object containing the primary key and range/sort key (if necessary) for the session item | no |
expires | number | How long the default session should last (in milliseconds).By default it's 1 day | no |
FAQs
DynamoDB based session store for use with express-session
We found that @brightcove/dynamodb-sessionstore demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.