Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
@toruslabs/torus.js
Advanced tools
A JS utility library (w/ typescript bindings!) to make calls to the Torus network
The Torus network assumes that n/4 of nodes may be malicious, and n/2 + 1 of the nodes are required for key reconstruction. Given these threshold assumptions, all API calls to the Torus nodes need to be checked for consistency while still allowing for early exits in optimistic scenarios where the first n/2 + 1 responses are from honest nodes.
Also, in order to prevent front-running by nodes, a commit-reveal process is also necessary for share retrieval.
This library handles these checks and allows you to query the Torus network easily through these APIs:
Promises
This module is distributed in 4 formats
esm
build dist/torusUtils.esm.js
in es6 formatcommonjs
build dist/torusUtils.cjs.js
in es5 formatumd
build dist/torusUtils.umd.min.js
in es5 format without polyfilling corejs minifiedBy default, the appropriate format is used for your specified usecase You can use a different format (if you know what you're doing eg. node) by referencing the correct file
The cjs build is not polyfilled with core-js. It is upto the user to polyfill based on the browserlist they target
CDN's serve the non-core-js polyfilled version by default. You can use a different
jsdeliver
<script src="https://cdn.jsdelivr.net/npm/@toruslabs/torus.js"></script>
unpkg
<script src="https://unpkg.com/@toruslabs/torus.js"></script>
This is a plugin that works only on the client side. So please register it as a ssr-free plugin.
Add @toruslabs/torus.js
to your project:
Needs to be used in conjuction with @toruslabs/fetch-node-details
import FetchNodeDetails from "@toruslabs/fetch-node-details";
import TorusUtils from "@toruslabs/torus.js";
const fetchNodeDetails = new FetchNodeDetails();
const torus = new TorusUtils({ network: "mainnet", clientId: "YOUR_CLIENT_ID" }); // get your Client ID from Web3Auth Dashboard
const verifier = "google";
const verifierId = "hello@tor.us";
const { torusNodeEndpoints, torusNodePub, torusIndexes } = await fetchNodeDetails.getNodeDetails();
const publicAddress = await torus.getPublicAddress(torusNodeEndpoints, torusNodePub, { verifier, verifierId });
const idToken = "YOUR_ID_TOKEN";
const keyData = await torus.retrieveShares(torusNodeEndpoints, torusIndexes, verifier, { verifier_id: verifierId }, idToken);
const FetchNodeDetails = require("@toruslabs/fetch-node-details").default;
const TorusUtils = require("@toruslabs/torus.js").default;
const fetchNodeDetails = new FetchNodeDetails();
const torus = new TorusUtils({ network: "mainnet", clientId: "YOUR_CLIENT_ID" }); // get your Client ID from Web3Auth Dashboard
const verifier = "google"; // any verifier
const verifierId = "hello@tor.us"; // any verifier id
fetchNodeDetails
.getNodeDetails()
.then(({ torusNodeEndpoints, torusNodePub }) => torus.getPublicAddress(torusNodeEndpoints, torusNodePub, { verifier, verifierId }))
.then((publicAddress) => console.log(publicAddress));
const idToken = "YOUR_ID_TOKEN";
fetchNodeDetails
.getNodeDetails()
.then(({ torusNodeEndpoints, torusIndexes }) =>
torus.retrieveShares(torusNodeEndpoints, torusIndexes, verifier, { verifier_id: verifierId }, idToken)
)
.then((keyData) => console.log(keyData));
// For Node.js
const FetchNodeDetails = require("@toruslabs/fetch-node-details/dist/fetchNodeDetails-node.js").default;
const TorusUtils = require("@toruslabs/torus.js/dist/torusUtils-node.js").default;
const fetchNodeDetails = new FetchNodeDetails();
const torus = new TorusUtils({ network: "mainnet" });
const verifier = "google"; // any verifier
const verifierId = "hello@tor.us"; // any verifier id
fetchNodeDetails
.getNodeDetails()
.then(({ torusNodeEndpoints, torusNodePub }) => torus.getPublicAddress(torusNodeEndpoints, torusNodePub, { verifier, verifierId }))
.then((publicAddress) => console.log(publicAddress));
@babel/runtime
FAQs
Handle communication with torus nodes
The npm package @toruslabs/torus.js receives a total of 6,141 weekly downloads. As such, @toruslabs/torus.js popularity was classified as popular.
We found that @toruslabs/torus.js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.