Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
connect-vtexid
Advanced tools
VTEX ID Authentication middleware for Connect. Written in coffee-script
It automatticaly caches vtexid response and handles errors
$ npm install --save connect-vtexid
Use it as any other Connect middleware
var connect = require('connect')
var app = connect()
var FIVE_MINUTES = 5 * 60
var options = {
ttl: FIVE_MINUTES
}
var connectVtexid = require('connect-vtexid')
middleware = connectVtexid(options)
app.use(middleware)
Can as well be used as a grunt-contrib-connect middleware
Default: false
Enables logging
Default: 1
Controls the desired verbosity level. Available options:
Default: 5 minutes
Value (in seconds) setting how long the cache will live
Default: false
Overrides default route white-list
with an array of strings or regexes
Does not replace if values is false (default)
Default: []
Adds routes to current white-list
.
It can be a string, a regexp or an array containing either strings or regexes
Default: /admin/login?ReturnUrl=
String to vtexid redirect page
It is automatically added to the white-list
Default: /admin/logout
String to logout route
Default: true
Set to false if you do not want to pass the request url as parameter to the redirectUrl
white-list
sets a white list containing every public URI. It receives a publicUris
parameter that is an array containing
all public uris. Each public uri must be either a String or a RegExp
Default:
return-url
sets the vtexid redirect url.
cookie-parser
is a custom lib-independent cookie-parsing function.
redirect
is a custom lib-independent client-side redirect function.
http-errors
is a custom function for rendering error pages:
It receives the res
object, a statusCode
as parameter and an optional customErrorPagePath
, and returns an errorRendering
function.
The errorRendering
function receives an error message body
and the vtexid cookie
as parameters
FAQs
VTEX ID Authentication middleware for Connect
We found that connect-vtexid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.