Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@outgrowio/reaction-marketplace
Advanced tools
A multi-vendor marketplace plugin for Reaction Commerce
A multi-vendor marketplace plugin for Reaction Commerce. Still in beta — currently unusable until some changes are made to reaction-admin
to support multi-shop setups.
First, install the package in your project's reaction
(API) directory:
npm install --save-dev @outgrowio/reaction-marketplace
Then, register the plugin in your project's reaction/src/registerPlugins.js
, calling the function at the end of the file:
import registerMarketplace from "@outgrowio/reaction-marketplace/index.js";
// Built-in plugin register calls go here
await registerMarketplace(app);
We recommend to use this plugin together with reaction-marketplace-ui
to have a user interface in your reaction-admin
to invite new vendors and manage marketplace shops.
Of course, you're also free to build your own user interface and leverage this plugin's API the way you prefer.
Once the plugin is registered, you get access to the following GraphQL queries and mutations. For testing, call these from the GraphQL Playground at http://localhost:3000/graphql.
mutation inviteShopOwner($input: InviteShopOwnerInput!) {
inviteShopOwner(input: $input) {
emailAddress,
name
}
}
Call with the following variables:
{
"input": {
"emailAddress": "john@doe.com",
"name": "John Doe"
}
}
query shops($first: ConnectionLimitInt, $last: ConnectionLimitInt, $offset: Int) {
shops(first: $first, last: $last, offset: $offset) {
pageInfo {
endCursor
startCursor
hasNextPage
hasPreviousPage
}
nodes {
_id
createdAt
name
owner
productCount
}
}
}
Call with the following variables:
{
"input": {
"shopId": "kspBu62vAyXnnb2v6"
}
}
Don't forget to use an Authorization
HTTP header to authenticate your API calls. Example:
{
"Authorization": "skwL_8jUOkmom7wW_se6_XgfSBtBrUBSR9UL-CUq74A.fwTZ8_G2QTMPf83O6jAOtYxyEU1TYV6spm8abPENutg"
}
You can get the value for the Authorization
header in the reaction-admin
UI (http://localhost:4080). By using your browser's network analyzer in the devtools, look for any recent POST
call to /graphql
or /graphql-beta
and copy the value for Authorization
in the request headers.
When developing a plugin inside of reaction-admin
, your GraphQL calls should automatically be authentified by Apollo.
Need help integrating this plugin into your Reaction Commerce project? Simply looking for expert Reaction Commerce developers? Want someone to train your team to use Reaction at its fullest?
Whether it is just a one-hour consultation to get you set up or helping your team ship a whole project from start to finish, you can't go wrong by reaching out to us:
FAQs
A multi-vendor marketplace plugin for Reaction Commerce
We found that @outgrowio/reaction-marketplace demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.