Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
auth0-rule-sandbox
Advanced tools
Provides a test environment for Auth0 Rules similar to their sandbox
Provides a test environment for Auth0 Rules similar to their sandbox environment.
Assuming you have a GitHub repository to deploy rules, pages, and custom database connections to Auth0 (see example), then this module will allow you to run your rules locally with controlled inputs.
rule.js
:
function example(user, context, callback) {
// TODO: implement your rule
callback(null, user, context);
}
rule.test.js
:
const auth0runner = require('auth0-rule-sandbox');
const options = {
user: {
name: 'test'
},
context: {
clientID: '123456789'
},
configuration: {
key: 'value'
},
globals: {
request: require('request')
}
};
auth0runner('./relative/path/to/your/rule.js', options, function(err, user, context) {
if (err) {
console.error(err);
} else {
// TODO: assertions
console.log(user, context);
}
});
Exports a function that takes arguments:
path
(string): relative path to your rule fileoptions
(object):
user
(object): represents the logged in user that's passed through the Rules pipelinecontext
(object): contains contextual information about the current authentication transactionconfiguration
(object): key-value settings from the Rules UIglobals
(object): See section belowcallback
(function): send back the potentially modified user and context objects back to Auth0 (or an error)It looks like Auth0 Rules run in Node.js v4.4.5 based on console.log(process.version)
. These modules are provided as part of the global
object but not populated by this module. Instead, you can pick and choose which global modules are populated and how (actual vs mock).
const options = {
// ...
globals: {
auth0: {
users: {
updateAppMetadata: function () { return Promise.resolve() }
}
},
jwt: require('jsonwebtoken')
}
}
These global properties are provided from the parent Node context:
Additional modules can be required but you'll have to roll your own require
shim until one is added here.
FAQs
Provides a test environment for Auth0 Rules similar to their sandbox
We found that auth0-rule-sandbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.