Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
@upstash/qstash
Advanced tools
Official Typescript client for QStash
QStash is an HTTP based messaging and scheduling solution for serverless and edge runtimes.
It is 100% built on stateless HTTP requests and designed for:
QStash is the message broker between your serverless apps. You send an HTTP request to QStash, that includes a destination, a payload and optional settings. We durably store your message and will deliver it to the destination API via HTTP. In case the destination is not ready to receive the message, we will retry the message later, to guarentee at-least-once delivery.
npm install @upstash/qstash
Go to upstash and copy the token.
import { Client } from "@upstash/qstash";
/**
* Import a fetch polyfill only if you are using node prior to v18.
* This is not necessary for nextjs, deno or cloudflare workers.
*/
import "isomorphic-fetch";
const c = new Client({
token: "<QSTASH_TOKEN>",
});
const res = await c.publishJSON({
url: "https://my-api...",
// or topic: "the name or id of a topic"
body: {
hello: "world",
},
});
console.log(res);
// { messageId: "msg_xxxxxxxxxxxxxxxx" }
How to receive a message depends on your http server. The Receiver.verify
method should be called by you as the first step in your handler function.
import { Receiver } from "@upstash/qstash";
const r = new Receiver({
currentSigningKey: "..",
nextSigningKey: "..",
});
const isValid = await r.verify({
/**
* The signature from the `Upstash-Signature` header.
*
* Please note that on some platforms (e.g. Vercel or Netlify) you might
* receive the header in lower case: `upstash-signature`
*
*/
signature: "string";
/**
* The raw request body.
*/
body: "string";
/**
* Number of seconds to tolerate when checking `nbf` and `exp` claims, to deal with small clock differences among different servers
*
* @default 0
*/
clockTolerance?: number;
})
See the documentation for details.
FAQs
Official Typescript client for QStash
The npm package @upstash/qstash receives a total of 40,320 weekly downloads. As such, @upstash/qstash popularity was classified as popular.
We found that @upstash/qstash demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.