
Product
Introducing Pull Request Stories to Help Security Teams Track Supply Chain Risks
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
moneypenny-mongo-storage
Advanced tools
Authentication Service ( mongo storage for moneypanny authentication service.)
Moneypenny acts as an authentication service that offers multiple authentication strategies to a backend service and sends a JSON web token(JWT) encripted using a shared secret as a response.
Other services in the architecture should also know the shared secret allowing the token to be passed around in API calls to provide user information related to the request.
##Related Projects
##Sample Useage
##API documentation.
An implementation of a moneypenny StorageProvider used with moneypenny-server
See: https://github.com/blueflag/moneypenny
Options
Creates a datastore using mongodb
Kind: Exported function
Param | Type | Description |
---|---|---|
options | Options | to create this datastore using. |
Options
Options that will be passed to the storage provider to set it up
Kind: inner typedef of module.exports
Properties
Name | Type | Description |
---|---|---|
db | mongodb | mongo db to use to store details @see https://docs.mongodb.com/ecosystem/drivers/node-js/ |
userCollection | string | name of the user collection, default of oauth_users |
refreshTokenCollection | string | name of the refresh token collections, default to oauth_refresh_token |
tokenCollection | string | name of the token collections, default to oauth_token |
clientCollection | string | name of the client collections, default to oauth_client |
codeCollection | string | name of the code collection, default to oauth_code |
FAQs
Authentication Server
We found that moneypenny-mongo-storage demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.