
Product
Introducing Socket Scanning for OpenVSX Extensions
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
passport-yj
Advanced tools
Passport strategy for authenticating with YConnect using the OAuth 2.0 API
This module can be used with passport in Node.js. You can integrate into below applications or frameworks. Connect-style middleware, including Express.
$ npm install passport-yj
This YConnect passport module requires your application' id. You can get this id from YConnect admin
var passport = require('passport');
passport.use(new YJStrategy({
clientID : <YAHOO_JAPAN_APP_ID>,
clientSecret : <YAHOO_JAPAN_APP_SECRET>,
callbackURL : <CALL_BACK_URL>,
}, function(accessToken, refreshtoken, profile, done){
// With this accessToken you can access user profile data.
// In the case that accessToken is expired, you should
// regain it with refreshToken. So you have to keep these token
// safely. done will get user profile data such as openid in YConnect
});
With this module, you don't have to do anything to get accessToken. As you see above, you have already obtain accessToken and refreshToken. So this process is not required with this module.
MIT License. Please see the LICENSE file for details.
FAQs
Yahoo! JAPAN authentication strategy for passport
We found that passport-yj demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Product
Bringing supply chain security to the next generation of JavaScript package managers

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies