Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@dplewis/node-deeplink
Advanced tools
Easily create an endpoint in your web server that redirects deep links to mobile apps
Easily create express endpoint to handle mobile deeplinks in your web server
Takes away the pain of forwarding users to the right app store / mobile app depending on their platform.
In ios >= 9, Apple has made it impossible to provide a smooth user experience to redirect user to app / fallback to app store from javascript. Their clear direction is pushing towards using Universal Links instead.
For more details, see issue #9 and this blog post.
To get the best user experience, it's probably better to look at Universal Links for ios and App Links for Android.
If you already started using Universal Links, you can still use this module as a fallback mechanism for older ios versions.
Suppose you have a custom url scheme app://
handled by your mobile apps. You want to create a universal "smart" link that will know where to send the user:
var express = require('express');
var deeplink = require('node-deeplink');
var app = express();
app.get(
'/deeplink',
deeplink({
fallback: 'https://cupsapp.com',
android_package_name: 'com.citylifeapps.cups',
ios_store_link:
'https://itunes.apple.com/us/app/cups-unlimited-coffee/id556462755?mt=8&uo=4'
})
);
This example creates an endpoint GET /deeplink
in your web server.
Assuming your server address is https://acme.org
, you can use the link https://acme.org/deeplink?url=app://account
so when users will open it the app will open with app://account
deeplink or the users will be redirected to download the app in case they don't have it.
Note on url encoding: to avoid problems with url parsing libraries, the deep link (app://...
part) has to be url encoded. node-deeplink will decode the url correctly. So, in the above example, the link is actually https://acme.org/deeplink?url=app%3A%2F%2Faccount
. Here's an example of url encoder/decoder.
node-deeplink currently only supports Android and ios.
Options to pass on to node-deeplink are:
fallback
: mandatory. A fallback url in case the user is opening the link via an unsupported platform like desktop / windows phone etc. In such case, the fallback url will be opened in the user's browser like a normal link.android_package_name
: optional. In case you want to support Android deep links, pass your app's package name.ios_store_link
: optional. In case you want to support ios deep links, pass your app's itunes url. You can get it here.title
: optional. Title for the intermediate html page. Defaults to an empty string.When a request comes in, the following query params a re checked:
url
: mandatory. The deeplink url you want the user to be directed to e.g. app://account
.fallback
: optional. If available, will prefer this fallback address over the one from the options.node-deeplink expects the request to contain a query param url=...
so that the deeplink mechanism will work. If no such query is present then node-deeplink ignores the request and calls next()
so the request will be handled by the next middleware.
node-deeplink works by first sending the user to an html page with a user-agent sniffing script. After figuring out the user's device, it redirects the to the predefined deeplink. In practice, after clicking the link, the browser will be opened for a very short moment and then the redirect will happen.
FAQs
Easily create an endpoint in your web server that redirects deep links to mobile apps
We found that @dplewis/node-deeplink demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.