Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@dynamic-labs/passport-dynamic
Advanced tools
A [Passport.js](https://www.passportjs.org/) strategy for authenticating with dynamic.xyz
A Passport.js strategy for authenticating with dynamic.xyz
npm install --save @dynamic-labs/passport-dynamic
yarn add @dynamic-labs/passport-dynamic
The token has to be sent as part of the authorization header with the ‘bearer’ scheme (e.g Authorization: Bearer ${token}
)
When a user is authenticated, the JWT is available through the authToken
method of the Dynamic SDK
new DynamicStrategy(options, verify);
publicKey
The publicKey from Dynamic used by passport to validate the authenticity of the JWT and ensure that it has not been tampered with.
verify
is a function with the parameters verify(payload, done)
payload
is an object literal containing the decoded tokendone
is a passport callback accepting arguments done(error, user, info)Example:
passport.use(new DynamicStrategy(options, (payload, done) => {
try {
const user = { id: 1, email: "hello@example.com" }
if (user) {
return done(null, user)
} else {
return done(null, false)
}
} catch (err) {
return done(err, false);
}
}
npm test
Coming soon
FAQs
A [Passport.js](https://www.passportjs.org/) strategy for authenticating with dynamic.xyz
The npm package @dynamic-labs/passport-dynamic receives a total of 78 weekly downloads. As such, @dynamic-labs/passport-dynamic popularity was classified as not popular.
We found that @dynamic-labs/passport-dynamic demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.