
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
fingerprint-scanner
Advanced tools
fingerprint-scanner makes streaming and capturing fingerprint easier for JavaScript developers by taking the hassle out of working with finding device port streaming and capturing.
Finds available port which the fingerprint SDK is currently running.
Stream fingerprint and makes available for caputure (it helps to visualize the streaming).
Captures and returns fingerprint data in a base64 format.
More details are available here: MDS-Specification
In a node.js environment:
npm i fingerprint-scanner
export const DEVICE_DISC_METHOD = "MOSIPDISC";
export const DEVICE_DISC_TYPE = "Finger";
export const IP = "http://localhost";
export const STREAM_TIMEOUT = '10000'
export const DEVICE_ID = '1'
export const DEVICE_SUB_ID = '1'
export const CAPTURE_BODY = {
env: 'Production',
purpose: 'Registration',
specVersion: '0.9.5',
captureTime: new Date().toISOString(),
domainUri: '127.0.0.1:4503',
timeout: '30000',
transactionId: '1',
bio: [
{
type: 'Finger',
count: 1,
bioSubType: ["Left IndexFinger"],
requestedScore: '10',
deviceId: '1',
deviceSubId: 1,
previousHash: '',
exception: ["Left MiddleFinger", "Left RingFinger", "Left LittleFinger"],
},
],
}
import fingerprint from 'fingerprint-scanner'
const data = fingerprint();
// if successful, data will be returned in a base64 format
stream
, and capture
and the config.js
file contains the payloads for the two requests.{
"deviceId": "Internal Id",
"deviceSubId": "Specific device sub Id",
"timeout": "Timeout for stream"
}
{
"env": "Target environment",
"purpose": "Auth or Registration",
"specVersion": "Expected MDS spec version",
"timeout": "Timeout for registration capture",
"captureTime": "Time of capture request in ISO format",
"transactionId": "Transaction Id for the current capture",
"bio": [
{
"type": "Type of the biometric data",
"count": "Finger/Iris count, in case of face max, is set to 1",
"bioSubType": ["Array of subtypes"], //Optional
"exception": ["Finger or Iris to be excluded"],
"requestedScore": "Expected quality score that should match to complete a successful capture",
"deviceId": "Internal Id",
"deviceSubId": "Specific device Id",
"previousHash": "Hash of the previous block"
}
],
"customOpts": {
//max of 50 key-value pairs. This is so that vendor-specific parameters can be sent if necessary. The values cannot be hardcoded and have to be configured by the apps server and should be modifiable upon need by the applications. Vendors are free to include additional parameters and fine-tuning parameters. None of these values should go undocumented by the vendor. No sensitive data should be available in the customOpts.
}
}
So the ``
import { findPort, stream, capture } from 'fingerprint scanner';
const devicePort = findPort();
async function scan() {
stream({devicePort});
await data = capture({devicePort});
return data;
}
FAQs
Capture fingerprint from IB manufactured devices
We found that fingerprint-scanner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.