
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@by-ac/show-me-token
Advanced tools
This project involves an automated workflow for handling authentication and token management for a given API service.
The main goal of this workflow is to prepare a secure connection to the API service and display the authentication token details. The token is necessary for making authorized API calls to a protected service.
Single Sign-On (SSO) Authentication:
The workflow first initiates SSO authentication using the azerion-connect/form-browser-auth
function call. This allows the user to authenticate themselves through their Keycloak credentials.
Get Atom API:
Next, the atom/get-atom-api
function is called to retrieve the Atom API. This API is crucial for subsequent operations within the workflow.
Set Token to API:
Once the Atom API is retrieved, the sys/call
function is invoked to set the retrieved Keycloak token to the Atom API. This token allows for authorized communication with the API service.
After these initial preparation steps, the workflow progresses to display the parsed token and the raw token.
Show Token Parsed:
The parsed Keycloak token is displayed using the form/json-view
form. This provides a structured view of the information within the token.
Show Token:
Finally, the raw Keycloak token is displayed in a read-only text field with the form/text
form. This display of the token also provides a copy functionality, allowing the user to easily copy the token for future use.
By providing a secure and automated mechanism for handling authentication and token display, this workflow streamlines the process of preparing for secure API calls, saving time and reducing potential errors.
Note: This workflow assumes that all the necessary parameters for the authentication process and the Atom API retrieval are provided.
This is a simplified, non-technical explanation of the workflow. Please ensure that all necessary security precautions are followed when handling sensitive data such as authentication tokens.
FAQs
## Overview
We found that @by-ac/show-me-token demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.