
Research
/Security News
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
cross-kafka
Advanced tools
An isolated core of kafkajs implementation based on @nestjs/microservices.
npm install cross-kafka
all settings are common to Kafka except observerTimeout, which is the wait time for an asynchronous response.
import { IKafkaConfigDTO, logLevel } from 'cross-kafka';
const kafkaConfig: IKafkaConfigDTO = {
observerTimeout: 40000,
client: {
brokers: ['localhost:9092'],
requestTimeout: 30000,
logLevel: logLevel.NOTHING,
clientId: 'my-receiver',
},
consumer: {
groupId: 'my-group',
},
};
If you work with the adapter design pattern.
import { IModel } from 'cross-kafka';
export interface IMessagingProvider extends IModel {}
Extend a class from KafkaCore, you can also extend an interface from IModelDTO to implement the class. It is recommended to use the singleton pattern to save resources since the initial connection is expensive.
import { KafkaProvider } from '@providers/KafkaProvider';
export type IKafkaProvider = KafkaProvider;
import { KafkaCore } from 'cross-kafka';
import { kafkaConfig } from '@config/kafkaConfig';
import { IMessagingProvider } from '@models/IMessagingProvider';
import { IKafkaProvider } from '@interfaces/IKafkaProvider';
class KafkaProvider extends KafkaCore implements IMessagingProvider {
private static instance: IKafkaProvider;
private constructor() {
super(kafkaConfig);
}
public static getInstance(): IKafkaProvider {
if (!KafkaProvider.instance) {
KafkaProvider.instance = new KafkaProvider();
}
return KafkaProvider.instance;
}
}
const kafkaProvider = KafkaProvider.getInstance();
export { kafkaProvider };
It is used to send a message in a topic. It is dynamically typed and accepts any data structure.
import { kafkaProvider } from '@providers/kafkaProvider';
kafkaProvider.emit('TOPIC', {
user: { age: 18, name: 'John', surname: 'Doe' },
});
Waits for a message and upon receiving it executes a callback (or a callback array, it has suport to behave like express middlewares).
interface IUserDTO {
name: string;
age: number;
id: number;
}
class UserController {
private readonly users: Array<IUserDTO> = [];
public async get(data: IBaseMessageDTO<number>): Promise<IUserDTO | undefined> {
return this.users.find(user => user.id === data.response);
}
public async create(data: IBaseMessageDTO<IUserDTO>): Promise<void> {
this.users.push(data.response);
}
public async update(
data: IBaseMessageDTO<Partial<IUserDTO> & { id: number }>,
): Promise<void> {
const user = this.users.find(user => user.id === data.response.id);
if (user) {
Object.assign(user, {
name: data.response.name,
age: data.response.age,
});
}
}
public async delete(data: IBaseMessageDTO<number>): Promise<void> {
const userIndex = this.users.findIndex(user => user.id !== data.response);
if (userIndex > -1) {
this.users.splice(userIndex, 1);
}
}
}
Middleware example
export function userValidator(data: IBaseMessageDTO<IUserDTO>): void {
if (data.response.name) {
throw new Error('Name is a required field')
}
};
At your entry point:
import { kafkaProvider } from '@providers/kafkaProvider';
import { UserController } from '@controllers/userController';
import { userValidator } from '@validators/userValidator';
import { isAuthenticated } from '@middlewares/isAuthenticated';
const userController = new UserController();
kafkaProvider.listen('SHOW-USER', userController.get);
kafkaProvider.listen('CREATE-USER', isAuthenticated, userValidator, userController.create);
kafkaProvider.listen('UPDATE-USER', isAuthenticated, userValidator, userController.update);
kafkaProvider.listen('DELETE-USER', isAuthenticated, userController.delete);
It is used to subscribe to a reply to a topic (is used in conjunction with the "send" method).
class Controller {
public constructor(
private readonly messagingProvider: IMessagingProvider,
) {
// It will listen 'SEND-DATA.reply'
this.messagingProvider.subscribeFrom('SEND-DATA');
}
}
It is used to send a message and wait for the message to return (timeout defined by observerTimeout).
interface IMessageDTO {
reply: string;
}
class RequestController {
public constructor(
private readonly messagingProvider: IMessagingProvider,
) {
this.messagingProvider.subscribeFrom('SEND-MESSAGE');
}
public async getMessage(): Promise<IMessageDTO> {
const message: IMessageDTO = await this.messagingProvider.send(
'SEND-MESSAGE',
{
message: 'Hello, send me a message!',
},
);
return message;
}
}
// At your entry point:
import express from 'express';
import { kafkaProvider } from '@providers/kafkaProvider';
import { RequestController } from '@controllers/requestController';
const app = express();
const requestController = new RequestController();
app.get('/message', requestController.getMessage);
app.listen(1234)
At your sender microservice:
interface IMessageDTO {
message: string;
}
class ReplyController {
public constructor(
private readonly messagingProvider: IMessagingProvider,
) {}
public async sendMessage(data: IBaseMessageDTO<IMessageDTO>): Promise<void> {
this.messagingProvider.emit(
data.replyTopic,
{
reply: 'Hello, take your message!',
},
{
replyId: data.replyId,
replyPartition: data.replyPartition,
},
);
}
}
// At your entry point:
import { kafkaProvider } from '@providers/kafkaProvider';
import { ReplyController } from '@controllers/replyController';
const replyController = new ReplyController(kafkaProvider);
kafkaProvider.listen('SEND-MESSAGE', replyController.sendMessage);
It is used to close kafka connection.
import { kafkaProvider } from '@providers/kafkaProvider';
kafkaProvider.close();
FAQs
An isolated core of kafkajs implementation based on @nestjs/microservices.
The npm package cross-kafka receives a total of 2 weekly downloads. As such, cross-kafka popularity was classified as not popular.
We found that cross-kafka demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.