Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
cybersource-rest-auth
Advanced tools
This project provides a simple Node.js helper library that simplifies authentication to the CyberSource REST API
Note: Support for building the SDK with npm has been made. All initial libraries were installed with npm, however.
The Authentication SDK works for POST, GET, PUT and DELETE requests. It works with any one of the two authentication mechanisms, which are HTTP signature and JWT token.
"authenticationType" : "http_signature"
"merchantID" : <merchantID>
"runEnvironment" : "CyberSource.Environment.SANDBOX"
"merchantKeyId" : <merchantKeyId>
"merchantsecretKey" : <merchantsecretKey>
"enableLog" : true
"logDirectory" : "./log"
"logMaximumSize" : 10485760
"logFilename" : "cybs"
"useMetaKey" : false
"authenticationType" : "jwt"
"merchantID" : <merchantID>
"runEnvironment" : "CyberSource.Environment.SANDBOX"
"keyAlias" : <keyAlias>
"keyPass" : <keyPass>
"keyFileName" : <keyFileName>
"keysDirectory" : <keysDirectory>
"enableLog" : true
"logDirectory" : "./log"
"logMaximumSize" : 10485760
"logFilename" : "cybs"
"useMetaKey" : false
MetaKey can be used for HTTP Signature and JWT authentication
For HTTP Signature Authentication -
"authenticationType" : "http_Signature"
"merchantID" : <child merchantID>
"merchantKeyId" : <MetaKey merchantKeyId>
"merchantsecretKey" : <Metakey merchantsecretKey>
"useMetaKey" : true
"portfolioID" : <Portfolio ID>
For JWT Authentication -
"authenticationType" : "jwt"
"merchantID" : <child merchantID>
"keyAlias" : <keyAlias>
"keyPassword" : <keyPassword>
"keyFileName" : <keyFileName>
"keysDirectory" : <keysDirectory>
"useMetaKey" : true
Cybersource-rest-auth maintains a complete sandbox environment for testing and development purposes. This sandbox environment is an exact duplicate of our production environment with the transaction authorization and settlement process simulated. By default, this SDK is configured to communicate with the sandbox environment. To switch to the production environment, set the appropriate environment constant in cybs.json file.
For example:
// For PRODUCTION use
"runEnvironment" : "CyberSource.Environment.PRODUCTION"
The API Reference Guide provides examples of what information is needed for a particular request and how that information would be formatted. Using those examples, you can easily determine what methods would be necessary to include that information in a request using this SDK.
$ git clone https://github.com/CyberSource/cybersource-rest-auth-nodejs
$ npm install
$ node src\[CodeSampleName]
For example:
$ node src\GetMethod.js
This repository is distributed under a proprietary license.
FAQs
CyberSource SDK for authenticating to the REST API
The npm package cybersource-rest-auth receives a total of 155 weekly downloads. As such, cybersource-rest-auth popularity was classified as not popular.
We found that cybersource-rest-auth demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.