oauth-sign - npm Package Compare versions

Comparing version 0.5.0 to 0.6.0

index.js

@@ -96,4 +96,14 @@ var crypto = require('crypto')
 
+function plaintext (consumer_secret, token_secret) {
+  var key = [
+    consumer_secret || '',
+    token_secret || ''
+  ].map(rfc3986).join('&')
+
+  return key
+}
+
 function sign (signMethod, httpMethod, base_uri, params, consumer_secret, token_secret) {
   var method
+  var skipArgs = 1
 
@@ -107,2 +117,6 @@ switch (signMethod) {
       break
+    case 'PLAINTEXT':
+      method = plaintext
+      skipArgs = 4
+      break
     default:
@@ -112,3 +126,3 @@ throw new Error("Signature method not supported: " + signMethod)
 
-  return method.apply(null, [].slice.call(arguments, 1))
+  return method.apply(null, [].slice.call(arguments, skipArgs))
 }
@@ -118,3 +132,4 @@
 exports.rsasign = rsasign
+exports.plaintext = plaintext
 exports.sign = sign
 exports.rfc3986 = rfc3986

package.json

@@ -5,3 +5,3 @@ {
   "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "repository": {
@@ -8,0 +8,0 @@ "url": "https://github.com/mikeal/oauth-sign"

test.js

@@ -1,2 +0,3 @@
-var hmacsign = require('./index').hmacsign
+var oauth = require('./index')
+  , hmacsign = oauth.hmacsign
   , assert = require('assert')
@@ -64,1 +65,11 @@ , qs = require('querystring')
 
+
+// PLAINTEXT
+
+var plainSign = oauth.sign('PLAINTEXT', 'GET', 'http://dummy.com', {}, 'consumer_secret', 'token_secret')
+console.log(plainSign)
+assert.equal(plainSign, 'consumer_secret&token_secret')
+
+plainSign = oauth.plaintext('consumer_secret', 'token_secret')
+console.log(plainSign)
+assert.equal(plainSign, 'consumer_secret&token_secret')

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

16077

increased by4.25%

Lines of code

172

increased by13.91%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes