
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
contextualize
Advanced tools
A simple tool for lazily bootstrapping any nodejs app into each application context.
A simple tool for lazily bootstrapping any nodejs app into each application context.
contextualize creates an http server for you and provides a mechanism for defining the context for each request, and a mechanism for bootstrapping an application for each unique context.
var contextualize = require('contextualize');
contextualize()
.context(function(request, done) {
// Set the context for this request
done(null, { foo:'bar' });
})
.bootstrap(function(context, done) {
// Bootstrap an application for a context
done(null, function(req, res) {
res.end('Hello World');
});
})
.listen(80);
Here is an example of how you might switch contexts based on environment and locale code in the host name:
contextualize()
.context(function(request, done) {
// Extract the environment and locale code from the host name (e.g. prod.en-US.foobar.com)
var m = request.host.match(/^(\w+)\.([a-z]{2}-[A-Z]{2})\./);
// Return the context
done(null, {
environment: m[1],
locale: m[2]
});
})
.bootstrap(function(context, done) {
// Bootstrap an application for each unique context
done(null, new Application(context));
})
.listen(80);
By default the first request in a context will take the hit of bootstrapping the application for that context. If you want to
preload known contexts to avoid that latency on the first request then you can use the preload
method:
contextualize()
.context(getContext)
.bootstrap(bootstrapApp)
.preload([{
locale: 'en-US',
environment: 'prod'
}, {
locale: 'pt-BR',
environment: 'prod'
}])
.listen(80);
You may want to apply some middleware (e.g. static file serving, cookie parsing, body parsing, user authentication, etc.) prior to setting the context for a request.
contextualize()
// Attach middleware here
.use(staticMiddleware('./public', './static'))
.use(authMiddleware())
.context(function(request, done) {
// Use result of authentication middleware in the context
done(null, {
authorized: request.authorized,
});
})
.bootstrap(function(context, done) {
// Bootstrap seperate apps for logged in or not logged in users
done(null, context.authorized ? new PublicApplication() : new PrivateApplication());
})
.listen(80);
Applications returned by your bootstrap function are either a Function
or an Object
with a handleRequest
method.
contextualizer()
.context(getContext)
.bootstrap(function(context, done) {
done(null, function(req, res) {
res.end('Hello World');
});
});
.listen(80);
or:
contextualizer()
.context(getContext)
.bootstrap(function(context, done) {
done(null, {
handleRequest: function(req, res) {
res.end('Hello World');
}
});
})
.listen(80);
Note that express and connect applications are already functions with this interface so this will work as well:
contextualizer()
.context(getContext)
.bootstrap(function(context, done) {
var app = require('express')();
app.get('/sup', function(req, res){
res.send(200, 'Hello World');
});
done(null, app);
})
.listen(80);
FAQs
A simple tool for lazily bootstrapping any nodejs app into each application context.
The npm package contextualize receives a total of 3 weekly downloads. As such, contextualize popularity was classified as not popular.
We found that contextualize demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.