
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
node-fetch-cookies-rn
Advanced tools
A node-fetch wrapper with support for cookies.
It supports reading/writing from/to a JSON cookie jar and keeps cookies in memory until you call CookieJar.save()
to reduce disk I/O.
This wrapper uses react-native-fs. Please follow their usage README to save cookies to storage.
import {fetch, CookieJar} from "node-fetch-cookies";
(async () => {
// creates a CookieJar instance
const cookieJar = new CookieJar("jar.json");
// load cookies from the cookie jar
await cookieJar.load();
// usual fetch usage, except with one or multiple cookie jars as first parameter
const response = await fetch(cookieJar, "https://example.com");
// save the received cookies to disk
await cookieJar.save();
})();
import {fetch, CookieJar} from "node-fetch-cookies";
(async () => {
const cookieJar = new CookieJar();
// log in to some api
let response = await fetch(cookieJar, "https://example.com/api/login", {
method: "POST",
body: "credentials"
});
// do some requests you require login for
response = await fetch(cookieJar, "https://example.com/api/admin/drop-all-databases");
// and optionally log out again
response = await fetch(cookieJar, "https://example.com/api/logout");
})();
cookieJars
A CookieJar instance, an array of CookieJar instances or null, if you don't want to send or store cookies.url
and options
as in https://github.com/bitinn/node-fetch#fetchurl-optionsReturns a Promise resolving to a Response instance on success.
A class that stores cookies.
flags
The read/write flags as specified below.file
The path of the cookie jar on the disk.cookies
A Map mapping hostnames to maps, which map cookie names to the respective Cookie instance.rw
, cookies, cookieIgnoreCallback])file
An optional string containing a relative or absolute path to the file on the disk to use.flags
An optional string specifying whether cookies should be read and/or written from/to the jar when passing it as parameter to fetch. Default: rw
r
: only read from this jarw
: only write to this jarrw
or wr
: read/write from/to this jarcookies
An optional initializer for the cookie jar - either an array of Cookie instances or a single Cookie instance.cookieIgnoreCallback(cookie, reason)
An optional callback function which will be called when a cookie is ignored instead of added to the cookie jar.
cookie
The cookie stringreason
A string containing the reason why the cookie has been ignoredAdds a cookie to the jar.
cookie
A Cookie instance to add to the cookie jar.
Alternatively this can also be a string, for example a serialized cookie received from a website.
In this case fromURL
must be specified.fromURL
The url a cookie has been received from.Returns true
if the cookie has been added successfully. Returns false
otherwise.
If the parser throws a CookieParseError it will be caught and a warning will be printed to console.
Returns an iterator over all domains currently stored cookies for.
Returns an iterator over all cookies currently stored for domain
.
Returns an iterator over all valid (non-expired) cookies.
withSession
: A boolean. Iterator will include session cookies if set to true
.Returns an iterator over all cookies currently stored.
Returns an iterator over all cookies valid for a request to url
.
Removes all expired cookies from the jar.
sessionEnded
: A boolean. Also removes session cookies if set to true
.Reads cookies from file
on the disk and adds the contained cookies.
file
: Path to the file where the cookies should be saved. Default: this.file
, the file that has been passed to the constructor.Saves the cookie jar to file
on the disk. Only non-expired non-session cookies are saved.
file
: Path to the file where the cookies should be saved. Default: this.file
, the file that has been passed to the constructor.An abstract representation of a cookie.
name
The identifier of the cookie.value
The value of the cookie.expiry
A Date object of the cookies expiry date or null
, if the cookie expires with the session.domain
The domain the cookie is valid for.path
The path the cookie is valid for.secure
A boolean value representing the cookie's secure attribute. If set the cookie will only be used for https
requests.subdomains
A boolean value specifying whether the cookie should be used for requests to subdomains of domain
or not.Creates a cookie instance from the string representation of a cookie as send by a webserver.
str
The string representation of a cookie.url
The url the cookie has been received from.Will throw a CookieParseError
if str
couldn't be parsed.
Creates a cookie instance from an already existing object with the same properties.
Serializes the cookie, transforming it to name=value
so it can be used in requests.
Returns whether the cookie has expired or not.
sessionEnded
: A boolean that specifies whether the current session has ended, meaning if set to true
, the function will return true
for session cookies.Returns whether the cookie is valid for a request to url
.
The Error that is thrown when the cookie parser located in the constructor of the Cookie class is unable to parse the input.
new CookieJar(flags, file, cookies)
has been changed to new CookieJar(file, flags = "rw", cookies)
.new CookieJar("rw")
can now be written as new CookieJar()
, new CookieJar("rw", "jar.json")
can now be written as new CookieJar("jar.json")
.rw
is used for flags
in most cases anyways.CookieJar.addFromFile(file)
has been renamed to the async function async CookieJar.load([file = this.file])
, which uses the fsPromises API for non-blocking cookie loading.file
is the file passed to the constructor.CookieJar.save(file)
was moved to async CookieJar.save([file = this.file])
now also uses the fsPromises API.new CookieJar()
now doesn't load cookies from the specified file anymore. To do so, call await CookieJar.load()
after creating the CookieJar.CookieJar.load()
will throw an error if the cookie jar doesn't exist or doesn't contain valid JSON!This project is licensed under the MIT license, see LICENSE.
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.