
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
lazada-open-api-package
Advanced tools
Generate "signature", "signature by url" and more for Lazada Open Platform.
Generate "signature", "signature by url" and more for Lazada Open Platform.
I am very happy and grateful for everyone's help. These meaningful contributions will greatly help me in expanding the useful library to help people.
Paypal: https://paypal.me/tudinhacoustic
Installation is done using the
npm install
command:
$ npm install lazada-open-api-package
const lazadaOpenApi = require('lazada-open-api-package')
// Example Url.
// The package helps remove the "sign", and the "time" has been decoded.
const url = 'https://api.lazada.vn/rest/orders/get?sort_direction=DESC&offset=0&created_before=2023-10-18T23%3A59%3A59%2B07%3A00&created_after=2023-10-18T00%3A00%3A01%2B07%3A00&limit=10&sort_by=created_at&app_key=12xxxx&sign_method=sha256&access_token=50000200c10tlrxxx×tamp=1697648276136';
const appSecret = 'AGk5JYxxxxx';
const signature = lazadaOpenApi.signByUrl(url, appSecret);
console.info(signature);
Response Data
{
signature: 'EC3C4FE433B16CCD1921D37319F4397A308E0731DA0019773B058DBDE3CFA5E2',
timestamp: 1697648276136
}
const lazadaOpenApi = require('lazada-open-api-package')
// The package helps remove the "sign", and the "time" has been decoded.
const params = {
app_key: '12xxxxx',
code: '0_122xxxxx',
timestamp: '1697642709712',
sign_method: 'sha256'
}
const path = '/auth/token/create';
const appSecret = 'AGk5JYxxxxx';
const signature = lazadaOpenApi.signature(params, path, appSecret);
console.info(signature);
Response Data
{
signature: 'EC3C4FE433B16CCD1921D37319F4397A308E0731DA0019773B058DBDE3CFA5E2',
timestamp: 1697648276136
}
const lazadaOpenApi = require('lazada-open-api-package')
const timestamp = lazadaOpenApi.timestamp();
console.info(timestamp);
Response Data
1697650466818
const lazadaOpenApi = require('lazada-open-api-package');
const appKey = 'your_app_key';
const authCode = 'your_auth_code';
const appSecret = 'your_app_secret';
const accessToken = await lazadaOpenApi.authCodeToken(appKey, authCode, appSecret);
console.info(accessToken);
Response Data
{
access_token: '500003xxx',
country: 'vn',
refresh_token: '50001xxx',
country_user_info_list: [
{
country: 'vn',
user_id: '200xxx',
seller_id: '200xxx',
short_code: 'xxx'
}
],
account_platform: 'seller_center',
refresh_expires_in: 2589988,
expires_in: 604800,
account: 'xxx',
code: '0',
request_id: 'xxx'
}
const lazadaOpenApi = require('lazada-open-api-package');
const appKey = 'your_app_key';
const refreshToken = 'your_refresh_token';
const appSecret = 'your_app_secret';
const accessToken = await lazadaOpenApi.authCodeToken(appKey, refreshToken, appSecret);
console.info(accessToken);
Response Data
{
access_token: '500003xxx',
country: 'vn',
refresh_token: '50001xxx',
country_user_info_list: [
{
country: 'vn',
user_id: '200xxx',
seller_id: '200xxx',
short_code: 'xxx'
}
],
account_platform: 'seller_center',
refresh_expires_in: 2589988,
expires_in: 604800,
account: 'xxx',
code: '0',
request_id: 'xxx'
}
FAQs
Generate "signature", "signature by url" and more for Lazada Open Platform.
We found that lazada-open-api-package demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.