Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@coinbase/cbpay-js
Advanced tools
The Coinbase Onramp JS SDK contains helper methods to simplify integrating with our fiat onramp. Wallet providers and dapps can leverage Coinbase Onramp and let their users top up their self-custody wallets.
The Coinbase Onramp JS SDK contains helper methods to simplify integrating with our fiat onramp. Wallet providers and dapps can leverage Coinbase Onramp and let their users top up their self-custody wallets.
See the Coinbase Onramp documentation for instructions on how to onboard to Coinbase Onramp and get started.
With yarn
:
yarn add @coinbase/cbpay-js
With npm
:
npm install @coinbase/cbpay-js
The package is distributed as both ESModules and CommonJS. To use the CommonJS output, the regenerator-runtime
package will also need to be installed:
With yarn
:
yarn add regenerator-runtime
With npm
:
npm install regenerator-runtime
import { initOnRamp } from '@coinbase/cbpay-js';
const options = {
appId: '<Your Project ID obtained from Coinbase Developer Platform>',
widgetParameters: {
// Specify the addresses and which networks they support
addresses: { '0x0': ['ethereum','base'], 'bc1': ['bitcoin']},
// Filter the available assets on the above networks to just these ones
assets: ['ETH','USDC','BTC'],
},
onSuccess: () => {
console.log('success');
},
onExit: () => {
console.log('exit');
},
onEvent: (event) => {
console.log('event', event);
},
experienceLoggedIn: 'popup',
experienceLoggedOut: 'popup',
closeOnExit: true,
closeOnSuccess: true,
};
// Initialize the CB Pay instance
let onrampInstance;
initOnRamp(options, (error, instance) => {
onrampInstance = instance;
});
// Open the widget when the user clicks a button
onrampInstance.open();
import { CBPayInstanceType, initOnRamp } from "@coinbase/cbpay-js";
import { useEffect, useState } from "react";
export const PayWithCoinbaseButton: React.FC = () => {
const [onrampInstance, setOnrampInstance] = useState<CBPayInstanceType | null>();
useEffect(() => {
initOnRamp({
appId: '<Your Project ID obtained from Coinbase Developer Platform>',
widgetParameters: {
// Specify the addresses and which networks they support
addresses: { '0x0': ['ethereum','base'], 'bc1': ['bitcoin']},
// Filter the available assets on the above networks to just these ones
assets: ['ETH','USDC','BTC'],
},
onSuccess: () => {
console.log('success');
},
onExit: () => {
console.log('exit');
},
onEvent: (event) => {
console.log('event', event);
},
experienceLoggedIn: 'popup',
experienceLoggedOut: 'popup',
closeOnExit: true,
closeOnSuccess: true,
}, (_, instance) => {
setOnrampInstance(instance);
});
// When button unmounts destroy the instance
return () => {
onrampInstance?.destroy();
};
}, []);
const handleClick = () => {
onrampInstance?.open();
};
return <button onClick={handleClick} disabled={!onrampInstance}>Buy with Coinbase</button>;
};
yarn add react-native-url-polyfill
import React, { useMemo } from 'react'
import { WebView } from 'react-native-webview'
import { generateOnRampURL } from '@coinbase/cbpay-js'
import 'react-native-url-polyfill/auto'
const CoinbaseWebView = ({ currentAmount }) => {
const coinbaseURL = useMemo(() => {
const options = {
appId: '<Your Project ID obtained from Coinbase Developer Platform>',
// Specify the addresses and which networks they support
addresses: { '0x0': ['ethereum','base'], 'bc1': ['bitcoin']},
// Filter the available assets on the above networks to just these ones
assets: ['ETH','USDC','BTC'],
handlingRequestedUrls: true,
presetCryptoAmount: currentAmount,
}
return generateOnRampURL(options)
}, [currentAmount, destinationAddress])
const onMessage = useCallback((event) => {
// Check for Success and Error Messages here
console.log('onMessage', event.nativeEvent.data)
try {
const { data } = JSON.parse(event.nativeEvent.data);
if (data.eventName === 'request_open_url') {
viewUrlInSecondWebview(data.url);
}
} catch (error) {
console.error(error);
}
}, [])
return (
<WebView source={{ uri: coinbaseURL }} onMessage={onMessage} />
)
}
export default CoinbaseWebView
Review the Coinbase Developer docs for how to produce the parameters for use within an on ramp aggregator.
import { CBPayInstanceType, initOnRamp } from "@coinbase/cbpay-js";
import { useEffect, useState } from "react";
export const PayWithCoinbaseButton: React.FC = () => {
const [onrampInstance, setOnrampInstance] = useState<CBPayInstanceType | null>();
useEffect(() => {
initOnRamp({
appId: '<Your Project ID obtained from Coinbase Developer Platform>',
widgetParameters: {
// Specify the addresses and which networks they support
addresses: { '0x0': ['ethereum','base'], 'bc1': ['bitcoin']},
// Filter the available assets on the above networks to just these ones
assets: ['ETH','USDC','BTC'],
// Aggregator params are ignored unless they are all provided.
// defaultNetwork is the exception - it's optional.
quoteId: '<quote_id from the Buy Quote API>',
defaultAsset: 'USDC',
defaultNetwork: 'base',
defaultPaymentMethod: 'CARD',
presetFiatAmount: 20,
fiatCurrency: 'USD',
},
onSuccess: () => {
console.log('success');
},
onExit: () => {
console.log('exit');
},
onEvent: (event) => {
console.log('event', event);
},
experienceLoggedIn: 'popup',
experienceLoggedOut: 'popup',
closeOnExit: true,
closeOnSuccess: true,
}, (_, instance) => {
setOnrampInstance(instance);
});
// When button unmounts destroy the instance
return () => {
onrampInstance?.destroy();
};
}, []);
const handleClick = () => {
onrampInstance?.open();
};
return <button onClick={handleClick} disabled={!onrampInstance}>Buy with Coinbase</button>;
};
Commit signing is required for contributing to this repo. For details, see the docs on contributing and commit-signing.
[2.4.0] - 2024-11-08
disableEdit
offramp parameterFAQs
The Coinbase Onramp JS SDK contains helper methods to simplify integrating with our fiat onramp. Wallet providers and dapps can leverage Coinbase Onramp and let their users top up their self-custody wallets.
The npm package @coinbase/cbpay-js receives a total of 6,364 weekly downloads. As such, @coinbase/cbpay-js popularity was classified as popular.
We found that @coinbase/cbpay-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.