Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
feathers-blob
Advanced tools
Feathers
abstract blob store
service
npm install feathers-blob --save
Also install a abstract-blob-store
compatible module.
const BlobService = require('feathers-blob')
blobService = BlobService(options)
options.Model
is an instantiated interface that implements the abstract-blob-store
APIoptions.id
is a string 'key' for the blob identifier.returnUri
defaults to true
and indicates if the service output a data URI on create/get operationsreturnBuffer
set it to true
if you only want a buffer output instead of a data URI on create/get operationsTip: returnUri
/returnBuffer
are mutually exclusive. If you need both extract the buffer from the data URI on the client-side to avoid transferring the data twice over the wire.
blobService.create(body, params)
where input body
is an object with either:
uri
pointing to data URI of the blob,buffer
pointing to raw data buffer of the blob along with its contentType
(i.e. MIME type).Optionally, you can specify in the body
the blob id
which can be the file
path where you want to store the file, otherwise it would default to
${hash(content)}.${extension(contentType)}
.
Tip: You can use feathers hooks to customize the id
. You might not want the
client-side to write whereever they want.
returns output 'data' of the form:
{
[this.id]: `${hash(content)}.${extension(contentType)}`,
uri: body.uri, // When returnUri options is set
buffer: body.buffer, // When returnBuffer options is set
size: length(content)
}
blobService.get(id, params)
returns output data
of the same form as create
.
blobService.remove(id, params)
const { getBase64DataURI } = require('dauria');
const AWS = require('aws-sdk');
const S3BlobStore = require('s3-blob-store');
const feathers = require('@feathersjs/feathers');
const BlobService = require('feathers-blob');
const s3 = new AWS.S3({
endpoint: 'https://{service}.{region}.{provider}.com',
accessKeyId: process.env.AWS_ACCESS_KEY_ID,
secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
});
const blobStore = S3BlobStore({
client: s3,
bucket: 'feathers-blob'
});
const blob = {
uri: getBase64DataURI(new Buffer('hello world'), 'text/plain')
}
const app = feathers();
app.use('/upload', BlobService({
Model: blobStore
}));
const blobService = app.service('upload');
blobService.create(blob).then(function (result) {
console.log('Stored blob with id', result.id);
}).catch(err => {
console.error(err);
});
Should you need to change your bucket's options, such as permissions, pass a params.s3
object using a before hook.
app.service('upload').before({
create(hook) {
hook.params.s3 = { ACL: 'public-read' }; // makes uploaded files public
}
});
For a more complete example, see examples/app which can be run with npm run example
.
Copyright (c) 2018
Licensed under the MIT license.
v2.3.0 (2020-10-04)
Implemented enhancements:
Closed issues:
Merged pull requests:
create\(\)
. #76 (davidbludlow)FAQs
Feathers blob service
The npm package feathers-blob receives a total of 3,287 weekly downloads. As such, feathers-blob popularity was classified as popular.
We found that feathers-blob demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.