
Research
/Security News
60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
j-queue-sdk-web
Advanced tools
A TypeScript package to check WebSocket connection status and control web access with a popup
A TypeScript package for managing Socket.IO connections and controlling web access by displaying a customizable full-screen popup when users are in a queue. It integrates with a Socket.IO server to handle queue status updates and navigation restrictions.
Install the package and socket.io-client
via npm:
npm install j-queue-sdk-web socket.io-client
For browser usage, include the Socket.IO client and the j-queue-sdk-web
scripts:
<script src="https://cdn.socket.io/4.7.5/socket.io.min.js"></script>
<script src="https://unpkg.com/j-queue-sdk-web@<version>/dist/j-queue-sdk-web.js"></script>
<script>
Initialize the SDK after including the scripts:
<script src="https://cdn.socket.io/4.7.5/socket.io.min.js"></script>
<script src="https://unpkg.com/j-queue-sdk-web@<version>/dist/j-queue-sdk-web.js"></script>
<script>
try {
// Handle default export
const JQueueSdk = window.ConnectionJQueueSdkWeb.default || window.ConnectionJQueueSdkWeb;
const connection = JQueueSdk.init({
wsUrl: 'wss://queue-server.example.com', // Socket.IO server URL
apiUrl: 'https://api.example.com', // API server URL
option: { storageKey: 'queue_token' },
socketConfig: {
query: {
app_id: 'XXXXX', // Replace with actual App ID
service_name: 'NEWS', // Replace with actual Service name
},
transports: ['websocket'],
reconnectionAttempts: 3,
reconnectionDelay: 1000,
},
popupConfig: {
language: 'en', // 'en' or 'ko'
textColor: '#276bff',
loaderGradientStart: '#276bff',
loaderGradientEnd: 'rgba(39,107,255,0.05)',
},
customEvents: {
'online-queue:status': (data, utils) => {
console.log('Queue status:', data);
},
},
});
// Clean up on page unload
window.addEventListener('beforeunload', () => {
connection.disconnect();
});
} catch (error) {
console.error('Error initializing j-queue-sdk-web:', error);
}
</script>
ConnectionJQueueSdkWeb
as ConnectionJQueueSdkWeb.default
. The code handles both cases for compatibility.onerror
on the script tag and try-catch to handle initialization errors.navigator.sendBeacon
request to the /leave
endpoint with a JSON payload ({"uuid": "..."}
) on disconnect or navigation.wsUrl
(string, required): Socket.IO server URL (e.g., wss://queue-server.example.com
).apiUrl
(string, required): API server URL for HTTP requests (e.g., https://api.example.com
).option
(object, optional): Additional configuration options for the SDK.
storageKey
(string): The key used to store the UUID in sessionStorage
for persisting queue session data (e.g., 'queue_token'
). This allows the SDK to retrieve the UUID across page reloads, ensuring continuity in queue tracking.socketConfig
(object, optional): Socket.IO configuration options.
query
(object): Additional query parameters sent to the Socket.IO server (e.g., { app_id: 'XXXXX', service_name: 'NEWS' }
).transports
(string[]): Transport methods (e.g., ['websocket']
). Defaults to ['websocket']
.reconnectionAttempts
(number): Number of reconnection attempts (e.g., 3
). Defaults to 3
.reconnectionDelay
(number): Delay between reconnection attempts in milliseconds (e.g., 1000
). Defaults to 1000
.popupConfig
(object, optional):
language
('en' | 'ko'): Language for default popup content (default: 'ko'
).style
(string): Custom CSS for the popup.content
(string | (position: number) => string): Custom HTML content for the popup, either as a static string or a function that takes position
and returns HTML.textColor
(string): Color for the popup text (e.g., '#276bff'
). Overrides the default text color.loaderGradientStart
(string): Starting color of the loader gradient (e.g., '#276bff'
). Defines the initial color of the loading animation.loaderGradientEnd
(string): Ending color of the loader gradient (e.g., 'rgba(39,107,255,0.05)'
). Defines the final color of the loading animation.customEvents
(object, optional): Key-value pairs where the key is the event name and the value is a handler function. The handler receives event data
and utilities { createPopup, removePopup, preventNavigation, allowNavigation }
.{ data: { uuid: string, position: number, status: OnlineQueueStatus } }
from the Socket.IO server via the online-queue:status
event.ACTIVE
: Removes the popup, allows navigation, and emits online-queue:check-disconnected
every 30 seconds to maintain connection status.WAITING
: Displays a customizable full-screen popup with the queue position
, prevents navigation, and emits online-queue:status
at an interval of 2000ms (adjusted by (position / 100) * 1000
ms for positions >= 100).EMPTY
: Logs an error to the console and clears any active intervals, taking no further UI or navigation actions.customEvents
.createPopup
, removePopup
, preventNavigation
, allowNavigation
) for custom event handlers.online-queue:status
messages for WAITING
state to maintain queue position.navigator.sendBeacon
to notify the server with a JSON payload when leaving the queue.Compile TypeScript and bundle the package using Webpack:
npm run build
This generates dist/j-queue-sdk-web.js
.
Run tests using Jest in a jsdom environment:
npm test
Tests are located in the tests
directory and cover initialization, status handling, socket events, disconnection, and listener management, with mocked Socket.IO connections.
The default popup content uses direct HTML injection (innerHTML
). For production use, consider integrating a library like DOMPurify
to sanitize HTML and prevent XSS attacks.
MIT
FAQs
A TypeScript package to check WebSocket connection status and control web access with a popup
The npm package j-queue-sdk-web receives a total of 1 weekly downloads. As such, j-queue-sdk-web popularity was classified as not popular.
We found that j-queue-sdk-web demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.