
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@quorum/oauth2-server
Advanced tools
Complete, framework-agnostic, compliant and well tested module for implementing an OAuth2 Server in node.js
Complete, compliant and well tested module for implementing an OAuth2 server in Node.js.
npm install oauth2-server
The oauth2-server module is framework-agnostic but there are several officially supported wrappers available for popular HTTP server frameworks such as Express and Koa. If you're using one of those frameworks it is strongly recommended to use the respective wrapper module instead of rolling your own.
authorization_code
, client_credentials
, refresh_token
and password
grant, as well as extension grants, with scopes.Documentation is hosted on Read the Docs.
Most users should refer to our Express or Koa examples.
Examples for v3 are yet to be made.
This module has been rewritten using a promise-based approach, introducing changes to the API and model specification. v2.x is no longer supported.
Please refer to our 3.0 migration guide for more information.
To run the test suite, install dependencies, then run npm test
:
npm install
npm test
FAQs
Complete, framework-agnostic, compliant and well tested module for implementing an OAuth2 Server in node.js
The npm package @quorum/oauth2-server receives a total of 88 weekly downloads. As such, @quorum/oauth2-server popularity was classified as not popular.
We found that @quorum/oauth2-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.