Socket
Socket
Sign inDemoInstall

cansecurity

Package Overview
Dependencies
63
Maintainers
1
Versions
46
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 0.3.1 to 0.4.0

15

lib/sessionManager.js

@@ -6,3 +6,3 @@ /*global module, require, Buffer */

var AUTHCOOKIE = "authtoken", USERCOOKIE = "userInfo", AUTHHEADER = "X-CS-Auth", AUTHSESSION = AUTHHEADER,
var AUTHCOOKIE = "authtoken", USERCOOKIE = "userInfo", AUTHHEADER = "X-CS-Auth", AUTHMETHODHEADER = AUTHHEADER+".method", AUTHSESSION = AUTHHEADER,
SESSIONEXPIRY = 15, // minutes

@@ -40,3 +40,4 @@ sessionExpiry, hasInit = false,

}
req[AUTHHEADER] = config.user;
req[AUTHHEADER] = config.user || {};
req[AUTHMETHODHEADER] = config.method;
res.header(AUTHHEADER,"success="+tokenlib.generate(config.login,config.password, expiry));

@@ -97,3 +98,3 @@ } else {

if (user) {
session({req: req, res: res, user: user, login: creds.user, password: pass});
session({req: req, res: res, user: user, login: creds.user, password: pass, method:"credentials"});
next();

@@ -113,3 +114,3 @@ } else {

if (tokenlib.validate(auth,login,password)) {
session({req:req,res:res,user:user,login:login,password:password});
session({req:req,res:res,user:user,login:login,password:password, method:"token"});
} else {

@@ -161,4 +162,10 @@ session({req:req,res:res,message:"invalidtoken"});

return that;
},
getAuthMethod: function(req) {
return(req[AUTHHEADER]);
},
getUser: function(req) {
return(req[AUTHMETHODHEADER]);
}
};
{
"name": "cansecurity",
"description": "Authentication, authorization, session manager, single-sign-on (SSO) and security framework for node applications",
"version": "0.3.1",
"version": "0.4.0",
"url": "http://github.com/deitch/cansecurity",

@@ -6,0 +6,0 @@ "author": "Avi Deitcher <avi@deitcher.net>",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc