Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
express-qx-router
Advanced tools
a node.js module for express middleware, about auth,origin cors, body-parser and more, please se readme.md for details
配合Express使用的路由服务分发注册系统,Now , you can use the service !!!! please see the readme.md
_oo0oo_
088888880
88" . "88
(| -_- |)
0\ = /0
___/'---'\___
.' \\| |// '.
/ \\||| : |||// \
/_ ||||| -:- |||||- \
| | \\\ - /// | |
| \_| ''\---/'' |_/ |
\ .-\__ '-' __/-. /
___'. .' /--.--\ '. .'___
."" '< '.___\_<|>_/___.' >' "".
| | : '- \'.;'\ _ /';.'/ - ' : | |
\ \ '_. \_ __\ /__ _/ .-' / /
====='-.____'.___ \_____/___.-'____.-'=====
'=---='
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Buddha bless : : Never BUGs
npm install express-qx-router
or
npm install express-qx-router --save
const qx = require("express-qx-router");
const qxServer = new qx.server();
qxServer.listen(mainPort, mainHostname, cb);
Install auth must be used. add an auth at least. An auth can only be used by one person to cerate client Service to connect the main service.
qxServer.install({name1:pass1, name2:pass2 ...});
create a app
const express = require("express");
const app = express();
create a client service object
const qx = require("express-qx-router");
const qxClient = new qx.client({
port: mainPort, // 主路由的端口,default 1333
hostname: mainHostname, // 主路由的hostname,default 127.0.0.1
auth:{
name: auth_name, // 注册主路由时的auth,作为验证,需要在主路由中先配置此项
pass: auth_pass
}
});
app.use(qxClient.cors(options));
Configures the Access-Control-Allow-Origin CORS header. Options is a json.
origin Array, default [*], set `Access-Control-Allow-Origin`
credentials Boolean, default false, set `Access-Control-Allow-Credentials`
allowMethods String, default 'GET,HEAD,PUT,POST,DELETE', set `Access-Control-Allow-Methods`
strict Boolean, false, set `Access-Control-Allow-Origin` cors model
app.use(qxClient.auth({
name: name,
pass: pass
}));
if didnt set name and pass, qxClient will auto generate a name and pass.
app.use(qxClient.bodyParser(options))
#####Options Parse the request body. options is a json
encoding String, default `utf-8`
multipart Boolean, allow multipart data, default true,
jsonLimit String|Integer, The byte (if integer) limit of the JSON body, default 1mb
formLimit String|Integer, The byte (if integer) limit of the form body, default 56kb
textLimit String|Integer, The byte (if integer) limit of the text body, default 56kb
patchNode Boolean, Patch request body to Node's ctx.req, default false
patchKoa Boolean, Patch request body to Koa's ctx.request, default true
add router-api
app.all("/getname", function (req,res){
res.send("ok");
});
start client service
app.listen(clientPort, qxClient.registerServer(app));
Now, defined a rest Api for http://127.0.0.1:clientPort/getname, access the api you can use curl like
curl http://mainHostname:mainPort/auth_name/getname
use the module must start least 2 service processes. 1 for Main service, others for client service processes.
Main service process is open to the outside world.
Client service processes is closed, not open to the outside world.
Users only through the main service process to access client service processes.
此模块是开发者自主兴趣开发和维护,不参与商业性运作,开发者具有最终解释权,如有任何疑问请在github上创建issue。
FAQs
a node.js module for express middleware, about auth,origin cors, body-parser and more, please se readme.md for details
The npm package express-qx-router receives a total of 2 weekly downloads. As such, express-qx-router popularity was classified as not popular.
We found that express-qx-router demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.