
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
For client side implementation
TODO
First install the BexioAPI from npm:
npm install BexioAPI
Then import the BexioAPI into the project:
import BexioAPI from 'BexioAPI';
Create a config object and initialize the BexioAPI:
const config = {
clientID: //your client_id,
clientSecret: //your client_secret,
redirectURI: 'http://localhost:3000/', //your redirect URI
scopes: 'article_show monitoring_show project_show', //required scopes, see: https://docs.bexio.com/resources/ (click on the required resource and then "scopes")
// or see https://docs.bexio.com/oauth/scopes/index.html for a exhaustive list of the available scopes
};
//initialize the Bexio object
const Bexio = new BexioAPI(config); // please use this name convention as best practice
Export the new Bexio object to use it in other components/files:
//source component/file
export const Bexio = new BexioAPI(config)
//other component/file
import { Bexio } from '<PATH TO SOURCE FILE>';
In a react-project, use the componentDidMount() lifecycle to catch the login-token
componentDidMount() {
Bexio.callback();
}
To redirect the user to the Bexio login page, use the login() method from the API
//the button is just an example
<button className="button" type="button" onClick={() => Bexio.login()}>Login to Bexio</button>
Please keep in mind: the callback() has to be invoked before the login() method. Otherwise the token won't be received trough the procedure and the login() method throws an error.
First ensure you've got the right scopes for the requested data. Otherwise the API throws an error. Currently the following data can be requested from Bexio:
users
timesheets
projects
articles
tasks
contacts
business activities
See the following link for an exhaustive list: Bexio documentation: Resources
Use the following method to get your data:
Bexio.getData('<YOUR_RESOURCE>');
//Example
async handleGetData() {
const userNames = await Bexio.getData('users');
}
Please note the async/await keywords: getData is an asynchronous method.
The method throws errors for the following reasons:
First ensure you've got the right scopes for the requested data. Otherwise the API throws an error. Currently the following data can be sent to Bexio:
timesheets
projects
tasks
contacts
business activities
Use the following method to send data:
Bexio.postData('<YOUR RESOURCE', YOUR_DATA);
Please note: YOUR_DATA shall be an object. The method will convert the object to a JSON object. Also note: Bexio can only handle one object at a time. You can't send a couple of informations packed as array or object to Bexio.
The method throws errors for the following reasons:
FAQs
BexioAPI for client side implementation only.
We found that bexioapi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.