Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
everyauth-cn
Advanced tools
An express
or connect
middleware which allows users to login via most of Chinese SNS sites with the same authorization work flow as everyauth.
The everyauth
open source project is so excellent, it enables users to login via many of sites such as google, facebook and youtobe. It makes works so easy for developers because everyauth works as a middleware for expressjs(or connect) module, one can just use app.use(everyauth.middleware())
to enables anyone to login his web sites and get user infomation from session, for more details please goto everyauth.
This project aims connecting users to most of Chinese SNS sites. It reuse most of everyauth's core authorization code, thanks for everyauth open source project and GitHub!
So far, everyauth-cn enables you to login via: QQ, Tencent weibo, sina weibo, baidu, douban, renren, taobao, it works as server-side mode and uses oauth2 authorization work flow.
It dose also supports password to login.
npm install everyauth-cn
Register your account and app on the authorization sites, such as qq connect if you want to login via QQ, get your own appid and appSecret.
Make some configuration as the example app does.
Just copy any modules(such as google, facebook, twitter, github, etc) from everyauth as you need.
Click to see the example app.
FAQs
expressjs oauth middleware for chinese sns sites.
We found that everyauth-cn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.