
Security News
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
engine.io-client
Advanced tools
This is the client for Engine.IO, the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO.
You can find an engine.io.js file in this repository, which is a
standalone build you can use as follows:
<script src="/path/to/engine.io.js"></script>
<script>
  // eio = Socket
  var socket = eio('ws://localhost');
  socket.onopen = function(){
    socket.onmessage = function(data){};
    socket.onclose = function(){};
  };
</script>
Engine.IO is a commonjs module, which means you can include it by using
require on the browser and package using browserify:
npm install engine.io-client
var socket = require('engine.io-client')('ws://localhost');
socket.onopen = function(){
    socket.onmessage = function(data){};
    socket.onclose = function(){};
};
browserify app.js > bundle.js
<script src="/path/to/bundle.js"></script>
<script src="/path/to/engine.io.js"></script>
<script>
  var socket = new eio.Socket('ws://localhost/');
  socket.binaryType = 'blob'; // receives Blob instead of ArrayBuffer (default)
  socket.on('open', function () {
    socket.send(new Int8Array(5));
    socket.on('message', function (data) {
      // data instanceof Blob => true when receiving binary
    });
    socket.on('close', function () { });
  });
</script>
Add engine.io-client to your package.json and then:
var socket = require('engine.io-client')('ws://localhost');
socket.onopen = function(){
  socket.onmessage = function(data){};
  socket.onclose = function(){};
};
Engine
The client class. Mixes in Emitter.
Exposed as eio in the browser standalone build.
protocol (Number): protocol revision numberonopen (Function)
open event handleronmessage (Function)
message event handleronclose (Function)
message event handlerbinaryType (String) : can be set to 'arraybuffer' or 'blob' in browsers,
and buffer or arraybuffer in Node. Blob is only used in browser if it's
supported.open
message
String | ArrayBuffer: utf-8 encoded data or ArrayBuffer containing
binary dataclose
open event does not occur (i.e. due to connection error or close()).error
flush
drain
drain event of transport if writeBuffer is emptyupgradeError
upgrade
String uriObject: optional, options objectagent (http.Agent): http.Agent to use, defaults to false (NodeJS only)upgrade (Boolean): defaults to true, whether the client should try
to upgrade the transport from long-polling to something better.forceJSONP (Boolean): forces JSONP for polling transport.forceBase64 (Boolean): forces base 64 encoding for polling transport even when XHR2 responseType is available and WebSocket even if the used standard supports binary.timestampRequests (Boolean): whether to add the timestamp with
each transport request. Note: this is ignored if the browser is
IE or Android, in which case requests are always stamped (false)timestampParam (String): timestamp parameter (t)flashPath (String): path to flash client files with trailing slashpolicyPort (Number): port the policy server listens on (843)path (String): path to connect to, default is /engine.iotransports (Array): a list of transports to try (in order).
Defaults to ['polling', 'websocket', 'flashsocket']. Engine
always attempts to connect directly with the first one, provided the
feature detection test for it passes.rememberUpgrade (Boolean): defaults to false.
If true and if the previous websocket connection to the server succeeded,
the connection attempt will bypass the normal upgrade process and will initially
try websocket. A connection attempt following a transport error will use the
normal upgrade process. It is recommended you turn this on only when using
SSL/TLS connections, or if you know that your network does not block websockets.send
String | ArrayBuffer | ArrayBufferView | Blob: data to sendFunction: optional, callback upon drainclose
The transport class. Private. Inherits from EventEmitter.
poll: emitted by polling transports upon starting a new requestpollComplete: emitted by polling transports upon completing a requestdrain: emitted by polling transports upon a buffer drainIn order for the Flash transport to work correctly, ensure the flashPath
property points to the location where the files web_socket.js,
swfobject.js and WebSocketMainInsecure.swf are located.
These files can be found here https://github.com/gimite/web-socket-js.git
engine.io-client is used to test
engine. Running the engine.io
test suite ensures the client works and vice-versa.
Browser tests are run using zuul. You can run the tests locally using the following command.
./node_modules/.bin/zuul --local 8080 -- test/index.js
Additionally, engine.io-client has a standalone test suite you can run
with make test which will run node.js and browser tests. You must have zuul setup with
a saucelabs account.
The support channels for engine.io-client are the same as socket.io:
To contribute patches, run tests or benchmarks, make sure to clone the repository:
git clone git://github.com/LearnBoost/engine.io-client.git
Then:
cd engine.io-client
npm install
See the Tests section above for how to run tests before submitting any patches.
(The MIT License)
Copyright (c) 2014 Guillermo Rauch <guillermo@learnboost.com>
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Socket.IO-client is a more feature-rich client-side library that provides real-time bidirectional event-based communication, similar to engine.io-client. It is built on top of engine.io-client and adds additional features like namespaces, rooms, and automatic reconnection.
The 'ws' package is a simple WebSocket client and server implementation for Node.js. Unlike engine.io-client, it does not provide built-in mechanisms for features like automatic reconnection and binary data handling, but it allows for more control over the WebSocket connection.
Faye-websocket is a WebSocket client and server for Node.js and Ruby. It provides a simple API for handling WebSocket connections but does not include the higher-level abstractions and fallback mechanisms that engine.io-client offers.
FAQs
Client for the realtime Engine
The npm package engine.io-client receives a total of 5,760,194 weekly downloads. As such, engine.io-client popularity was classified as popular.
We found that engine.io-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.