
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@trapi/client
Advanced tools
Important NOTE
This package has been replaced by another package, called: hapic.
This package contains a simple API-Client based on axios.
Table of Contents
npm install @trapi/client --save
To create a configuration for the Client, a configuration must be specified,
like described in the following:
Client
import {
setConfig
} from "@trapi/client";
setConfig({
driver: {
baseURL: 'http://localhost:3000/',
withCredentials: true,
},
}, 'key')
A configuration is always identified by a key,
so multiple configurations can be registered. The default key is named: default
In the upper example, the driver property is used to pass information to the underneath driver (axios).
A singleton instance associated for a given configuration key, can be acquired like described in the following:
Client
import {
useClient
} from "@trapi/client";
const client = useClient('key');
client.setAuthorizationHeader({
type: 'bearer',
token: 'xxx'
})
(async () => {
const {data} = await client.get('users');
console.log(data);
// [{id: 1, name: 'Peter'}]
})();
The main purpose of the header utils, is to parse and build HTTP headers.
AuthorizationHeader
import {
parseAuthorizationHeader,
stringifyAuthorizationHeader
} from "@trapi/client";
const basicValue = Buffer
.from('admin:start123')
.toString('base64');
const value = parseAuthorizationHeader(`Basic ${basicValue}`);
console.log(value);
// {type: 'Basic', username: 'admin', password: 'start123'}
// -------------------------------------------------
let headerValue = stringifyAuthorizationHeader({
type: 'Basic',
username: 'admin',
password: 'start123'
});
console.log(headerValue);
// Basic xxxxxxx
headerValue = stringifyAuthorizationHeader({
type: 'Bearer',
token: 'start123'
});
console.log(headerValue);
// Bearer start123
FAQs
A REST client based on axios.
We found that @trapi/client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.