
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
jupiter-auth-manager
Advanced tools
jupiter-auth-manager is a promise-based Node.js auth handler for MySQL using ORM Sequelize. Provides basic auth functions
$ npm i jupiter-auth-manager --save
You can use both ES6 or ES5 syntax to use the package
$ import { auth, userControllers, runMigrations } from 'jupiter-auth-manager' //es6 syntax
// Or you can use es5 Syntax
$ const { auth, userControllers, runMigrations } = require('jupiter-auth-manager'); //es5 syntax
// in your main.js use following to run all the migrations once the server gets started
runMigrations();
// for ACL use
app.use(auth.setAccessControl()); // will protect routes as per permissions
// using for login
app.post('/login', auth.authenticateUser, userControllers.createUser);
//using for protected routes
app.post('/protected-route', auth.verifyUser, yourController)
Create a .env
file in the root directory of your project. Add
environment-specific variables on new lines in the form of NAME=VALUE
. and load it in Node enviroment
Required ENV variables
#update the variables values with actual ones
MYSQL_USER=root
MYSQL_PASSWORD=root
MYSQL_DATABASE=jupiter
MYSQL_HOST=local
MYSQL_PORT=3606
expiry_time = 36000 # jwt token expiry time in miliseconds
SECRET_KEY_JWT = xyz #your secret JWT key
NO_REPLY_EMAIL = adnanshuja3@gmail.com # your email
NO_REPLY_PASSWORD = yourpassword #to send email to user [password reset, signup etc]
$ npm run test // run tests in package directory
FAQs
A package to handle authentications across different applications
We found that jupiter-auth-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.