
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@toruslabs/customauth-react-native-sdk
Advanced tools
Fully white-labelled UI/UX paired up to Torus PKI and auth for React Native.
Important
This SDK requires native modules and is designed to bring native experience to your React Native app without you doing any work.
Checkout the example of CustomAuth React Native SDK in our
examples directory.
npm i --save @toruslabs/customauth-react-native-sdk
Please refer to the native SDKs for platform-specific configuration.
Podfile then run pod install from the ios
directory:pod 'CustomAuth', '~> 2.1.0', :modular_headers => true
pod 'secp256k1.swift', :modular_headers => true
libRNCustomAuthSdk.a to your project's Build Phases ➜
Link Binary With LibrariesCmd+RAdd maven { url "https://jitpack.io" } to the repositories block of
android/build.gradle
Append the following lines to android/settings.gradle:
include ':customauth-react-native-sdk'
project(':customauth-react-native-sdk').projectDir = new File(rootProject.projectDir, '../node_modules/@toruslabs/customauth-react-native-sdk/android')
Insert the following lines inside the dependencies block in
android/app/build.gradle:
implementation project(':customauth-react-native-sdk')
Add the following to android/app/build.grade
android {
...
defaultConfig {
manifestPlaceholders = [
//... other placeholders if you have them
'torusRedirectScheme': 'torusapp',
'torusRedirectHost': 'org.torusresearch.customauthandroid',
'torusRedirectPathPrefix': '/redirect'
]
}
}
Initialize the SDK after your app is mounted (useEffect or
componentDidMount):
import CustomAuth from '@toruslabs/customauth-react-native-sdk'
CustomAuth.init({
network: 'testnet',
// Final redirect to your app, can be either custom scheme or deep link
redirectUri: 'torusapp://org.torusresearch.customauthexample/redirect',
// Redirect from browser, some providers don't allow to redirect to custom scheme, you'll need to configure a proxy web address in which case
browserRedirectUri: 'https://scripts.toruswallet.io/redirect.html',
})
Trigger user's login:
import CustomAuth from '@toruslabs/customauth-react-native-sdk'
const credentials = await CustomAuth.triggerLogin({
typeOfLogin: 'google', // "facebook", "email_passwordless", "twitter", "discord", etc
verifier: 'acme-google', // Your verifier registered on https://dashboard.web3auth.io
clientId, // Your OAuth provider's client ID
jwtParams, // Extra params vary by provider
})
I got BigInt not found build error when building for iOS, what should I do?
Add the following snipplet to your ios/Podfile. See example/ios/Podfile
for a full example.
post_install do |installer|
installer.pods_project.targets.each do |target|
if target.name == "web3.swift"
target.build_configurations.each do |config|
config.build_settings["SWIFT_INCLUDE_PATHS[sdk=iphonesimulator*]"] = "$(inherited) $(PODS_CONFIGURATION_BUILD_DIR)/BigInt $(PODS_CONFIGURATION_BUILD_DIR)/GenericJSON $(PODS_TARGET_SRCROOT)/web3swift/lib/**"
config.build_settings["SWIFT_INCLUDE_PATHS[sdk=iphoneos*]"] = "$(inherited) $(PODS_CONFIGURATION_BUILD_DIR)/BigInt $(PODS_CONFIGURATION_BUILD_DIR)/GenericJSON $(PODS_TARGET_SRCROOT)/web3swift/lib/**"
end
end
end
end
This is a temporary mitigation for broken xcconfig in the podspec of web3.swift. You may know more at https://github.com/argentlabs/web3.swift/pull/161. If you are using web3.swift >= 0.8.2 this should be fixed.
Want to know more or implement more advanced use cases? See our API reference.
I got an error on my android build similar to
Failed to transform bcprov-jdk15on-1.68.jar
Add the following to android/app/build.gradle in the android block:
android {
//All other config in the android block should be above this
configurations {
all*.exclude module: 'bcprov-jdk15on'
}
}
and add the following to gradle.properties:
android.jetifier.blacklist=bcprov
FAQs
React Native sdk for CustomAuth
The npm package @toruslabs/customauth-react-native-sdk receives a total of 73 weekly downloads. As such, @toruslabs/customauth-react-native-sdk popularity was classified as not popular.
We found that @toruslabs/customauth-react-native-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.