Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@ndustrial/contxt-sdk
Advanced tools
The contxt-sdk
can be installed with NPM:
npm install --save @ndustrial/contxt-sdk
Once installed, the minimum configuration you need to get going is to include the clientId
of your application (from Auth0) and a string with the type of authentication you want to use (auth0WebAuth
or machineAuth
).
import ContxtSdk from '@ndustrial/contxt-sdk';
const contxtSdk = new ContxtSdk({
config: {
auth: {
clientId: 'example clientId from auth0'
}
},
sessionType: 'auth0WebAuth'
});
contxtSdk.facilities.getAll().then((facilities) => {
console.log(`all of my facilities: ${JSON.stringify(facilities)}`);
});
Additional information about configuration options can be found in the API docs.
There are several session types available for different types of applications:
There are times where it is necessary to access Contxt and ndustrial.io APIs that are not currently in the SDK. There are two different mechanisms to extend functionality and allow custom code to act as a first class extension of the SDK's API:
The simplest method for extending functionality is to use an External Module. These modules can be added to the SDK when the SDK is initially instantiated in your application.
Include your information about the module when creating your contxt-sdk
instance:
import ContxtSdk from 'contxt-sdk';
import NewExternalModule from './NewExternalModule';
const contxtSdk = new ContxtSdk({
config: {
auth: {
clientId: 'example clientId from auth0'
}
},
externalModules: {
newExternalModule: {
clientId: 'The Auth0 Id of the API you are communicated with',
host: 'http://newExternalModule.example.com',
module: NewExternalModule
}
},
sessionType: 'auth0WebAuth'
});
contxtSdk.newModule.doWork();
When we decorate your external module into your SDK instance, it is treated just like one of the native, internal modules and is provided with the SDK instance (so you can use other parts of the SDK from your new module) and its own request module, which will handle API tokens if you are working with a Contxt API.
class NewExternalModule {
constructor(sdk, request) {
this._baseUrl = `${sdk.config.audiences.newExternalModule.host}/v1`;
this._request = request;
this._sdk = sdk;
}
doWork() {
return this._request.patch(`${this._baseUrl}/data`, { work: 'finished' });
}
}
export default NewExternalModule;
A more flexible, but slightly more intensive way of extending functionality is through dynamic modules. Dynamic modules are very much like external modules, but differ in that they can be added or mounted to the SDK after the SDK is initially instatiated. An example of a good time to use this functionality is a web application where Webpack's code splitting functionality is used and parts of the application are added with dynamic imports -- not all the code would necessarily available when initially creating a ContxtSDK instance, so extensions to the SDK need to be added when the split part of the application is loaded.
To start, there should be a ContxtSDK instance that is created at initial runtime:
import ContxtSdk from 'contxt-sdk';
const contxtSdk = new ContxtSdk({
config: {
auth: {
clientId: 'example clientId from auth0'
}
},
sessionType: 'auth0WebAuth'
});
export default contxtSdk;
There is also a module that is going to be dynamically decorated or mounted into the Contxt SDK:
class NewDynamicModule {
constructor(sdk, request) {
this._baseUrl = `${sdk.config.audiences.newDynamicModule.host}/v1`;
this._request = request;
this._sdk = sdk;
}
doWork() {
return this._request.patch(`${this._baseUrl}/data`, { work: 'finished' });
}
}
export default NewDynamicModule;
Once both of these things are available, the module can be mounted into the existing SDK instance and the methods of the module can run:
import contxtSdk from './contxtSdk';
import NewDynamicModule from './NewDynamicModule';
contxtSdk.mountDynamicModule('newDynamicModule', {
clientId: 'The Auth0 Id of the API you are communicated with',
host: 'http://newDynamicModule.example.com',
module: NewDynamicModule
});
contxtSdk.newDynamicModule.doWork();
newDynamicModule
namespace, this functionality will overwrite the existing module, but store the existing built-in or external module and it's audience information for future use if the dynamic module was unmounted in the future.More information on mountDynamicModule
There may arise a situation where a dynamic module needs to be unmounted. To do this, the unmountDynamicModule
method can be used:
contxtSdk.unmountDynamicModule('newDynamicModule');
More information on unmountDynamicModule
Gulp is used to build the source code in CommonJS and ES Module distributions that can be used across many platforms. These distributions are both built by running one command: npm run build
. If you'd like to continuously create builds as files are changed (i.e. if you are developing new features and have set things up correctly with npm link
to serve the newly updated files to your app), you can run npm run watch
. Currently, the docs are built by a custom script, but may move to Gulp in the future.
If there is a module that needs to be different between browser and Node implementations, this can be achieved by creating a separate file with a file name indicating it is only for a browser (like module.browser.js
) and adding the source path and replacement path of the files to the browser
section of the package.json
(example below). It will need to be added for both the esm
and lib
directories to account for whether the end user is using CommonJS or ES modules. When the client application is built, Webpack will pick up the browser version instead of the Node version.
{
... other stuff
"main": "lib/index.js",
"module": "esm/index.js",
"browser": {
"./esm/module.js": "./esm/module.browser.js",
"./lib/module.js": "./lib/module.browser.js",
}
... other stuff
}
Some important NPM tasks for running the test suite:
npm test
- Lints, sets up tracking for Istanbul coverage reports, and runs the test suitenpm run test:js
- Runs the test suitenpm run test:js:dev
- Runs the test suite in watch mode, where the tests are re-run whenever a file changesnpm run test:js:inspect
- Runs the test suite in inspect/inspect-brk mode. Insert a debugger
somewhere in your code and connect to the debugger with this command. (Node 8: visit chrome://inspect
to connect. Node 6: Copy and paste the blob provided in the terminal into Chrome to connect. Older versions also have ways to connect.)npm run lint
- Lints the source codenpm run coverage
- Sets up tracking for Istanbul coverage reports and runs the test suitenpm run report
- Parses the Istanbul coverage reports and writes them to file (in ./coverage
) and displays them in terminalSome tools used for testing and ensuring code quality include:
expect
syntax)Additionally, some globals have been added to the testing environment to streamline the process slightly:
expect
- Corresponds with require('chai').expect
. Infofaker
- Corresponds with require('faker')
. Infosinon
- Corresponds with require('sinon')
. Should be used anytime when wanting to create a sinon.spy
or sinon.stub
as it can be easily used to reset/restore multiple spies and stubs. InfoThere are certain steps that should be taken when contributing and publishing a new release of the contxt-sdk
.
We use jsdoc-to-markdown for documentation which should be committed to source control. The docs are set up to build and be added to git on a pre-commit hook using husky so you shouldn't need to run an additional command to build the docs before submitting a pull request.
New versions will be published automatically on merges to main
. The changelog and version will be determined using Conventional Commits. A build will only be triggered for feat
and fix
commit types.
FAQs
## Installation
The npm package @ndustrial/contxt-sdk receives a total of 0 weekly downloads. As such, @ndustrial/contxt-sdk popularity was classified as not popular.
We found that @ndustrial/contxt-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 24 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.