Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A restful api server that separates your business logic from the server gears so you can focus on coding stuff.
var hapi = require('hapi');
//create a server with a host, port, and options
var server = new hapi.Server.Server('localhost', 8088, {name:'sample', uri:'0.0.0.0'});
//define the function that returns our value (could be external to this file)
function sampleGet(hapi, reply) {
reply('hello world');
}
//add the route
server.addRoute({
path : '/sample',
method : 'GET',
handler : sampleGet,
authentication: 'none'
});
//start the server
server.start();
Now navigate to http://localhost:8080/sample and you should receive 'hello world'
path
- endpoint (see Director for endpoint matching patterns )method
- http method for routing endpointhandler
- Function to handle requestauthentication
- Type of authenticationtos
- Terms of Service required for that requestquery
-schema
-scope
-Wildcard declaration in routes are handled the same way as they are in Director or Express. Their retrieval on the handler is handled a little differently.
//when you add a route like this:
server.addRoute({
path : '/luna/:album',
method : 'GET',
handler : albumRetrieve,
authentication: 'none'
});
function albumRetrieve(hapi, reply) {
//hapi.params will have the parameter
console.log(hapi.params.album);
reply(albumGet(hapi.params.album));
}
Each handler needs two parameters, usually named 'hapi' and 'reply'.
hapi
- the first parameter. provides request informationreply
- function to call that takes a json body as a responsehapi provides a few places where middleware can be added into the functions being called for each request. They are:
onPreRoute
- gets called before the request is routed.onPreHandler
- gets called after the request has been routed before the assigned handler is calledonPostHandler
- gets called after the request headersonPostRoute
- called after all the routes have been matchedAdd them via the 'ext' portion of the options.
var server = new hapi.Server.Server('localhost', 8088, {name:'sample', uri:'0.0.0.0', ext: {onPreRoute:myPreRouteFunction}});
hapi provides a myriad of util functions for your use
abort(message)
- logs message to console and exits the process.checkEmail(email)
- checks for a valid email addressclone(obj)
- clones an object or arraydecrypt(key, value)
- decrypts value with AES Symmetric encriptionemail(to, subject, text, html, callback)
- sends an email to to
with subject
and content of text
or html
calling callback(err)
when finishedencrypt(key, value)
- encrypts value with AES Symmetric encryptiongetTimeStamp()
- gives a 'now' timestampgetRandomString(size)
- returns a random string of size
hide(object, definition)
- removes hidden keysmap(array, key)
- turns an array into an objectmerge(target, source)
- Merge all the properties of source into target; source wins in conflictunique(array, key)
- removes duplicates from an arrayFAQs
HTTP Server framework
The npm package hapi receives a total of 57,544 weekly downloads. As such, hapi popularity was classified as popular.
We found that hapi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.