Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@slashid/docusaurus-theme-slashid
Advanced tools
The @slashid/docusaurus-theme-slashid
package extends @docusaurus/preset-classic to add authentication to websites generated using Docusaurus.
Key Features:
For detailed setup & usage instructions, please check the documentation in our developer portal. Below you'll find a short summary of steps required to get started quickly.
Theme:
# npm
npm install @slashid/docusaurus-theme-slashid
# yarn
yarn add @slashid/docusaurus-theme-slashid
docusaurus.config.js
After installing the app and signing up with SlashID go through the following steps in order.
Include the login form styles:
// under presets
{
theme: {
customCss: [
require.resolve("@slashid/react/style.css"), // add this line
],
}
}
You can render a button in the navbar to allow customers to log in. To do so, add this item to the navbar.items
field in the themeConfig
:
{
// ...
themeConfig: ({
// ...
navbar: {
// ...
items: [
// ...
{
type: "custom-AuthButton",
position: "right",
className: "button button--secondary button--lg",
},
],
},
});
}
Add the following to the themeConfig
in docusaurus.config.js
:
// docusaurus.config.js
{
...
themeConfig:
/** @type {import('@docusaurus/preset-classic').ThemeConfig} */
({
...
slashID: {
orgID: "your slash id org id",
forceLogin: "boolean flag to determine if login is required",
baseURL: "optional base API URL for the SDK, defaults to the production environment",
sdkURL: "optional base SDK page URL for the SDK, defaults to the production environment",
privatePaths: [
{
path: "a glob or a regex specifiying the path to protect",
groups: ["optional list of groups that can access the path"],
}
],
formConfiguration: {
// authentication methods presented to end users
factors: [{ method: "email_link" }],
// logo you want to display on the login form
logo: "<YOUR_LOGO_URL>",
// customisable text content
text: {
"initial.title": "/id Docusaurus login theme",
},
},
},
themes: ["@slashid/docusaurus-theme-slashid"],
}
}
The configuration options are explained in the following section.
The docusaurus-theme-slashid
theme can be configured with the following options:
Name | Type | Default | Description |
---|---|---|---|
slashID.orgID | string | null | The SlashID organization ID. |
slashID.forceLogin | boolean | false | Make login required. |
slashID.baseURL | boolean | false | Base API URL for the SDK, defaults to the production environment. |
slashID.sdkURL | boolean | false | Base SDK page URL for the SDK, defaults to the production environment. |
slashID.uxMode | redirect or modal | redirect | Behaviour when accessing a private path when unauthenticated. |
slashID.privatePaths | PrivatePath[] | undefined | Optional set of private paths. |
slashID.formConfiguration | object | undefined | Optional form configuration |
As mentioned in the above table, it is possible to customise the login form by passing in the slashID.formConfiguration
object. The values sent here are the same ones that can be passed to the <ConfigurationProvider>
. This lets you specify the authentication methods displayed to your users, customise the UI by swapping the text constants and the logo.
PrivatePath
A private path is a path that requires authentication to access. The slashID.privatePaths
option is an array of PrivatePath
objects.
interface PrivatePath {
path: string; // a glob or a regex specifiying the path to protect
groups?: string[]; // optional list of groups that can access the path
}
The theme can be configured at the page level using front matter to pass sidebar_custom_props
.
sidebar_custom_props:
slashid:
auth: true
groups:
- member
The above configuration will require the user to be authenticated and belong to the member
group to view the page.
groups
property is optional and if not specified, the user only needs to be authenticated to view the page.
Please read SUPPORT.md for details on how to get support for this project.
FAQs
SlashID theme for Docusaurus.
The npm package @slashid/docusaurus-theme-slashid receives a total of 71 weekly downloads. As such, @slashid/docusaurus-theme-slashid popularity was classified as not popular.
We found that @slashid/docusaurus-theme-slashid demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.