
Security News
AGENTS.md Gains Traction as an Open Format for AI Coding Agents
AGENTS.md is a fast-growing open format giving AI coding agents a shared, predictable way to understand project setup, style, and workflows.
github-gatekeeper
Advanced tools
now.sh stateless function for OAuth GitHub flow then exchange authorization code for a token
Exchage temporary code for a token
GET /api/auth?code=<CODE>
Also see the documentation on Github.
Redirect users to request GitHub access.
GET https://github.com/login/oauth/authorize
GitHub redirects back to your site including a temporary code you need for the next step.
You can grab it like so:
const params = new URLSearchParams(location.search)
const code = params.get('code')
Request the actual token using your instance of Gatekeeper, which knows your OAUTH_CLIENT_SECRET
.
const GITHUB_GATEKEEPER_URL = process.env.NODE_ENV === 'development'
? 'http://localhost:3000/api/auth'
: 'https://gatekeeper.YOUNAME.now.sh/api/auth'
const url = new URL(GITHUB_GATEKEEPER_URL)
url.searchParams.set('code', code)
try {
const res = await fetch(url)
if (res.ok) {
const {token} = await res.json()
console.log(token)
}
} catch (e) {
// bad code
}
Clone it
git clone git@github.com:kobzarvs/github-gatekeeper.git
Install Dependencies
cd gatekeeper && yarn
Run local dev environment
First of all you must create .env
file:
OAUTH_CLIENT_SECRET=<OAUTH_CLIENT_SECRET>
OAUTH_CLIENT_ID=<OAUTH_CLIENT_ID>
now dev
Add secrets env variables
now secrets add OAUTH_CLIENT_SECRET <OAUTH_CLIENT_SECRET>
now secrets add OAUTH_CLIENT_ID <OAUTH_CLIENT_ID>
Deploy service
now
FAQs
now.sh stateless function for OAuth GitHub flow then exchange authorization code for a token
We found that github-gatekeeper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
AGENTS.md is a fast-growing open format giving AI coding agents a shared, predictable way to understand project setup, style, and workflows.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.