
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
authenticator-browser-extension
Advanced tools
Enables your browser-based automated tests to authenticate with your web app.
Authenticator is a web browser extension that enables your browser-based automated tests to authenticate with web apps using HTTP authentication.
Authenticator generates the browser extension dynamically, so you can easily provide the username and password via a config file or env variables.
Authenticator currently supports:
The best place to look for usage examples is the e2e test suite.
Import the authenticator-browser-extension
in the protractor.conf.js
file:
// protractor.conf.js
const { Authenticator } = require('authenticator-browser-extension');
exports.config = {
// protractor config
}
Add the Authenticator to the list of Chrome extensions:
// protractor.conf.js
exports.config = {
capabilities: {
browserName: 'chrome',
chromeOptions: {
extensions: [
Authenticator.for('username', 'password').asBase64()
]
}
},
}
Chrome running in headless mode doesn't support browser extensions. Chrome developers have decided against implementing this feature in any near future due to complexity of the task.
The best way to get around this limitation is to use Chrome together with the X Virtual Framebuffer (XVFB).
Do you find Authenticator useful? Give it a star! ★
Found a bug? Need a feature? Raise an issue or submit a pull request.
Have feedback? Let me know on twitter: @JanMolak
Authenticator library is licensed under the Apache-2.0 license.
- Copyright © 2019- Jan Molak
FAQs
Enables your browser-based automated tests to authenticate with your web app.
The npm package authenticator-browser-extension receives a total of 956 weekly downloads. As such, authenticator-browser-extension popularity was classified as not popular.
We found that authenticator-browser-extension demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.