Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@vonage/micro-frontends
Advanced tools
A simple solution for Micro Frontends orchestration.
Use the MicroFrontendOrchestrator in your host application, along with the MicroFrontendComponent in the hosted components. Create your custom communication API between the host and the hosted components, and use the built in lifecycle events. Supported Micro frontend implementations are both Iframe and Web Components (native as well as Vue.js compiled web components).
npm install @vonage/micro-frontends
Use the MFO to inject and manage multiple instances of your micro frontend components.
DOM Before Injection:
<div id="someDiv"></div>
import { MicroFrontendOrchestrator as MFO } from '@vonage/micro-frontends';
const myComponentDOMId = await MFO.inject('someDiv', 'myComponent', config); // more info on the config object below
console.log(myComponentDOMId); // prints 12345__myComponent
DOM After injection:
<div id="someDiv">
<iframe id="12345__myComponent" src="https://example.com" />
</div>
Injects a new micro frontend application into the DOM.
parentId - the DOM Id of the element into which the micro front end component is injected.
componentId - An Id/name that represents the injected component.
config - InjectionConfig, explained below.
instanceId - a unique id given to the specific injected component instance.
Shows the selected component instance. All sibling DOM nodes are automatically hidden.
componentId - the DOM Id of the component instance you to be visible on the DOM.
Removes an injected component from the DOM.
componentId - the DOM Id of the component instance to be shown.
Sends an event to the application.
componentId - the DOM Id of the component instance you wish to send the event to.
eventId - a unique Id for the event, the MFO will generate it for you if you dont send any value.
This argument is used to track responses sent back from hosted components.
eventName - a name that describes the type of event sent.
payload - an object passed along to the hosted component. Do not pass along functions since this object is serialized.
Subscribe for any event sent by the selected component instance.
componentId - the DOM Id of the component instance from which the event is sent.
eventName - the name of the event you wish to componentId to.
callback - a function called when the event is triggered.
Unsubscribe a previously registered event.
componentId - the DOM Id of the component instance from which the event was sent.
eventName - the name of the event you wish to register to.
callback - a function called when the event is triggered.
Get all instances Ids belonging to a specific componentId.
componentId - the original componentId sent when the component was injected.
parentId - use this argument to search for all instances of a component under a specific parent element.
This is the config object used to define the injected component.
{
// `type` is the type of micro frontend component you want to inject, either 'iframe' or 'webcomponent'.
type: 'webcomponent',
// `url` is the url used to load the remote resource, either a domain (for iframes), or a js file (for webcomponents).
url: 'http://somedomain.com',
// `customElementTagName` the name of the tag represents the webcomponent or custom element loaded.
// Only needed when loading a web component.
customElementTagName: 'my-web-component',
// `customEvents` custom event mapping to their handler functions.
// you can alternatively use the registerEvent function to add custom event handlers later.
customEvents: {
someCustomEventName: (componentInstanceId, eventId, eventName, payload) => {
console.log (componentInstanceId); // The DOM Id of the component that fired the event.
console.log (eventId) // The eventId generated by the component, used to identify rhe specific event response.
console.log (eventName)
console.log (payload)
}
},
// `onBeforeInjected` - Function - called before the hosted component is injected into the DOM (also before the needed js code is fetched - for webcomponents).
onBeforeInjected: (componentInstanceId) => { } // some custom logic before the component instance is loaded
// `onAfterInjected` - Function - called right after the hosted component is injected into the DOM
onAfterInjected: (componentInstanceId) => { } // some custom logic after the component instance is loaded
// `onInitialized` - Function - called when the hosted component calls the initialize method, and is usually used to communicate component initialization and token exchange to the hosted component.
onInitialized: (componentInstanceId, eventId, ) => {
// some initialization logic
MFO.send(componentInstanceId, eventId, null, { userToken: '123', otherData: 'abc' }); // Dont forget to send back to the component it's initialization data. This resolves the promise for the 'initialize' method in the hosted component.
}
// `onReady` - Function - called when the hosted component calls the ready method. Usually when the hosted component is ready to be displayed.
onReady: (componentInstanceId, eventId, eventName, isReady) => {
// some custom logic.
MFO.send(componentInstanceId, eventId, null, 'ACK'); // Dont forget to ack back to the component that it is now dispalyed. This resolves the promise for the 'ready' method in the hosted component.
}
// `onError` - Function - called when the hosted component calls the ready method, or a global error occurred in the hosted component's content window(iframe only).
// Used to show a generic error screen instead of the hosted component, and report errors for the host application.
onError: (componentInstanceId, eventId) => {
// handle errors
}
// `onTerminate` - Function - called when the hosted component whishes to be terminated.
onTerminate: (componentInstanceId, eventId) => {
// Any custom logic.
MFO.remove(componentInstanceId);
}
// `onBeforeRemoved` - Function - called right before the hosted component is removed from the DOM.
onBeforeRemoved: (componentInstanceId, eventId) => { }
// `onRemoved`- Function - called after a hosted component is removed from the DOM.
onRemoved: (componentInstanceId, eventId) => { }
}
Use the MFC in your micro frontend components to report basic lifecycle events, send custom events and subscribe to host custom events.
import { MicroFrontendComponent } from '@vonage/micro-frontends';
const mfc = new MicroFrontendComponent();
const initialData = await mfc.initialize(); // get some inital data from the host app
// do some verification on your end...
verifyInitialData(initialData);
// your component is ready to be presented.
await mfc.ready();
// your component is now displayed.
All functions (except one) return a Promise. All function accept the options object with the following fields:
More options soon...
Tell the host application you want to initialize a new component. This method is usually used to pass some initial verification data from the host application, such as a token.
Parameters: options Returns a Promise resolved or rejected with whatever data sent back from the host application.
const initialData = await mfc.initialize(); // The host application should use the onInitialized hook to respond to this event.
Tell the host application that the component is ready to be presented. Call this function only after the call to the initialize method was successful. Parameters: options
await mfc.ready(options); // The host application should use the onReady hook to respond to this event.
Report an error to the host application. Parameters: options -- error - any
mfc.error(error, options);
Ask the host app to remove the component from the DOM, ending it's lifecycle. Call this function only after the call to the initialize method was successful.
Parameters: options
mfc.terminate(options);
Sends a custom request to the host application. The Promise returned by this function is resolved only when the host app sends back an answer event with the same Id as the event sent by the hosted component. The Promise is rejected when the host app sends an error, or the request times out.
const customData = await mfc.createRequest('myCustomEvent', { payload: { field1: '123', field2: '456'} })
a more common usage would be to extend the MicroFrontendComponent class and use the createRequest function to expose other functions. Example:
class myComponent extends MicroFrontendComponent {
constructor() { super({}); }
someCustomFunction(arg1, arg2, arg3) {
// some custom logic
return this.createRequest('someCustomEvent', {payload: { a: arg1, b: arg2, c: arg3 }, requestTimeout: 500})
}
}
To resolve or reject the promise, the host applicaiton should:
This is the only function that does not return a Promise. Use this function to register to events that were initiated by the host application. The callback is called with the payload sent by the host application.
Parameters:
mfc.registerEvent('someCustomEvent', (eventData) => { console.log(eventData) });
FAQs
A simple solution for Micro Frontends orchestration
We found that @vonage/micro-frontends demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.