![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
dingtalk_suite
Advanced tools
钉钉套件主动调用api, 自带缓存。
回调server API见:dingtalk_suite_callback
##安装
npm install dingtalk_suite
##示例
构造函数:
var dd_talk = require('dingtalk_suite');
var conf = {
suiteid: 'suitexpiygdnz51hsbbhj',
secret: 'C1oXyeJUgH_QXEHYJS4-Um-zxfv_yGSpTs3Yq6un6UV_zAlEpt-6np3fXskv5dGs',
getTicket: function(callback){
//从数据库中取出Tikcet,返回的data样式为:{value: 'xxxxxxx', expires:1452735301543}
//ticket从 dingtalk_suite_callback 处获得
callback(null, data);
},
getToken: function(callback){
//从数据库中取出Token,返回的data样式为:{value: 'xxxxxxx', expires:1452735301543}
callback(null, data);
},
saveToken: function(data, callback){
//存储Token到数据库中,data样式为:{value: 'xxxxxxx', expires:1452735301543//过期时间}
callback(null);
}
}
var api = new dd_talk(conf);
注:本项目自带cache, token的过期时间默认为1小时59分50秒(防止网络延迟,故比规定2小时少了10秒)。
可以在conf.token_expires_in
更改(不可大于2小时)。
##方法
api.getPermanentCode(tmp_auth_code, callback)
//tmp_auth_code字符串,由 dingtalk_suite_callback 处获得。
//auth_corpid和permanent_code由上面接口获得。
api.getCorpToken(auth_corpid, permanent_code, callback)
api.getAuthInfo(auth_corpid, permanent_code, callback)
api.getAuthInfo(agentid, auth_corpid, permanent_code, callback)
api.activateSuite(auth_corpid, permanent_code, callback)
//ip_whitelist为数组格式:["1.2.3.4","5.6.*.*"]
api.setCorpIpwhitelist(auth_corpid, ip_whitelist, callback)
##钉钉文档 http://ddtalk.github.io/dingTalkDoc/?spm=a3140.7785475.0.0.p5bAUd#1-isv接口调用整体流程
FAQs
钉钉套件主动调用api
The npm package dingtalk_suite receives a total of 1 weekly downloads. As such, dingtalk_suite popularity was classified as not popular.
We found that dingtalk_suite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.