Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
gatsby-theme-auth-app
Advanced tools
This is theme which incorporates Auth0, Material-UI for styling components and a sidebar navigation.
This is theme which incorporates Auth0, Material-UI for styling components and a sidebar navigation.
See the live demo
Use the auth app starter
gatsby new my-auth-app https://github.com/ethriel3695/gatsby-theme-auth-app
To use this theme in your Gatsby sites, follow these instructions:
Install the theme
npm install --save gatsby-theme-auth-app
Add the theme to your gatsby-config.js
:
// gatsby-config.js
module.exports = {
plugins: [
{
resolve: `gatsby-theme-auth-app`,
options: {
// basePath defaults to `/`
basePath: `/posts`,
},
},
],
};
Key | Default value | Description |
---|---|---|
basePath | / | Root url for all blog posts |
contentPath | /content/posts | Location of blog posts |
assetPath | /content/assets | Location of assets |
mdx | true | Configure gatsby-plugin-mdx (if your website already is using the plugin pass false to turn this off) |
In addition to the theme options, there are a handful of items you must modify via the siteMetadata
object in your site's gatsby-config.js
// gatsby-config.js
module.exports = {
siteMetadata: {
// Used for the site title and SEO
title: `My Website Title`,
// Used to provide alt text for your avatar
author: `My Name`,
// Used for SEO
description: `My site description...`,
// The login button description (Ex. Login or Login / Signup). Default: Login / Signup
loginDesc: `Login / Signup`,
// isAuth determines if authentication is enabled for your app. Default: true
isAuthApp: true // options: true, false
// Used for social links in the root footer
social: [
{
name: `twitter`,
url: `https://twitter.com/reubenellis8`,
},
{
name: `github`,
url: `https://github.com/ethriel3695`,
},
],
},
};
In addition replace the values in the site's env.development
file with the correct values from your Auth0 account.
If you do not have an Auth0 account create one for free Auth0
// env.development
AUTH0_DOMAIN = domain.auth0.com; // Replace domain with your auth0 domain
AUTH0_CLIENT_ID = secret_client_id; // This ID can be found after creating an Application within Auth0 within the Application tab
AUTH0_CALLBACK_URL = `http://localhost:8000/callback`; //Remove the literal string character when replacing the callback url
/content
: A content folder holding assets that the theme expects to exist. This will vary from theme to theme -- this starter expects a logo directory with either a png, jpg or svg image, an article directory for content and a data directory with a navItems.json object for the navigation items within the sidebar menu. Replace the logo image file, delete the demo articles, replace the navItems.json and add your own! NOTE
If the logo directory is empty the theme will use the title attribute in the gatsby-config.js
file.
/src
: You will probably want to customize your site to personalize it. The files under /src/gatsby-theme-auth-app
shadow, or override, the files of the same name in the gatsby-theme-auth-app
package. To learn more about this, check out the guide to getting started with using the blog theme starter.
.gitignore
: This file tells git which files it should not track / not maintain a version history for.
.prettierrc
: This file tells Prettier which configuration it should use to lint files.
gatsby-config.js
: This is the main configuration file for a Gatsby site. This is where you can specify information about your site (metadata) like the site title and description, which Gatsby plugins you’d like to include, etc. When using themes, it's where you'll include the theme plugin, and any customization options the theme provides.
LICENSE
: Gatsby is licensed under the MIT license.
package-lock.json
(See package.json
below, first). This is an automatically generated file based on the exact versions of your npm dependencies that were installed for your project. (You won’t change this file directly).
package.json
: A manifest file for Node.js projects, which includes things like metadata (the project’s name, author, etc). This manifest is how npm knows which packages to install for your project.
README.md
: A text file containing useful reference information about your project.
FAQs
This is theme which incorporates Auth0, Material-UI for styling components and a sidebar navigation.
The npm package gatsby-theme-auth-app receives a total of 8 weekly downloads. As such, gatsby-theme-auth-app popularity was classified as not popular.
We found that gatsby-theme-auth-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.