
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
rsa_secur_id_authentication_api
Advanced tools
This_file_defines_the_RSA_SecurID_Authentication_API__This_API_supports_a_REST_interface_to_perform_multi_factor_multistep_authentications__The_caller_must_invoke_the_Initialize_interface_to_start_an_authentication_attempt_and_call_the_Verify_method_until
RsaSecurIdAuthenticationApi - JavaScript client for rsa_secur_id_authentication_api This file defines the RSA SecurID Authentication API. This API supports a REST interface to perform multi-factor, multistep authentications. The caller must invoke the Initialize interface to start an authentication attempt and call the Verify method until the ResponseCode is either SUCCESS, ERROR, or FAIL. Each server response contains CredentialMethods, one of which must be provided in the subjectCredentials of the next Verify call. The server verifies the entered credentials and responds with CHALLENGE or IN_PROCESS if additional information (or confirmations) are required to complete the authentication. The IN_PROCESS status is returned for authentication steps that may not return immediately (often due to user interaction requirements). The caller should invoke the Verify call again using the same referenceID to 'poll' on the result of a previous IN_PROCESS authentication. Alternatively, Verify responds with SUCCESS if all required authentication credentials have been provided, FAIL if the verification of a credential failed, or ERROR for malformed requests. This SDK is automatically generated by the Swagger Codegen project:
To publish the library as a npm, please follow the procedure in "Publishing npm packages".
Then install it via:
npm install rsa_secur_id_authentication_api --save
If the library is hosted at a git repository, e.g. https://github.com/YOUR_USERNAME/rsa_secur_id_authentication_api then install it via:
npm install YOUR_USERNAME/rsa_secur_id_authentication_api --save
The library also works in the browser environment via npm and browserify. After following
the above steps with Node.js and installing browserify with npm install -g browserify
,
perform the following (assuming main.js is your entry file):
browserify main.js > bundle.js
Then include bundle.js in the HTML pages.
Using Webpack you may encounter the following error: "Module not found: Error: Cannot resolve module", most certainly you should disable AMD loader. Add/merge the following section to your webpack config:
module: {
rules: [
{
parser: {
amd: false
}
}
]
}
Please follow the installation instruction and execute the following JS code:
var RsaSecurIdAuthenticationApi = require('rsa_secur_id_authentication_api');
var defaultClient = RsaSecurIdAuthenticationApi.ApiClient.instance;
// Configure API key authorization: client-key
var client-key = defaultClient.authentications['client-key'];
client-key.apiKey = "YOUR API KEY"
// Uncomment the following line to set a prefix for the API key, e.g. "Token" (defaults to null)
//client-key.apiKeyPrefix['client-key'] = "Token"
var api = new RsaSecurIdAuthenticationApi.ClientApi()
var lang = "lang_example"; // {String} Locale of language to be used for prompt text. ISO 639-1 language code followed by an ISO 3166 country code separated by an underscore. For example, \"en_US\". See https://www.ietf.org/rfc/rfc3066.txt
var opts = {
'resourceId': "resourceId_example" // {String} A specific promptResourceId to be obtained by the client.
};
var callback = function(error, data, response) {
if (error) {
console.error(error);
} else {
console.log('API called successfully. Returned data: ' + data);
}
};
api.getResourceId(lang, opts, callback);
All URIs are relative to https://localhost/mfa/v1_1
Class | Method | HTTP request | Description |
---|---|---|---|
RsaSecurIdAuthenticationApi.ClientApi | getResourceId | GET /authn/resources | Provides I18N language resources. |
RsaSecurIdAuthenticationApi.I18nApi | getResourceId | GET /authn/resources | Provides I18N language resources. |
RsaSecurIdAuthenticationApi.UserApi | cancel | POST /authn/cancel | Cancels a previously initialized authentication. |
RsaSecurIdAuthenticationApi.UserApi | initialize | POST /authn/initialize | Initialize an authentication attempt. |
RsaSecurIdAuthenticationApi.UserApi | status | POST /authn/status | Checks status of initialized authentication. |
RsaSecurIdAuthenticationApi.UserApi | verify | POST /authn/verify | Verify authentication credentials. |
FAQs
This_file_defines_the_RSA_SecurID_Authentication_API__This_API_supports_a_REST_interface_to_perform_multi_factor_multistep_authentications__The_caller_must_invoke_the_Initialize_interface_to_start_an_authentication_attempt_and_call_the_Verify_method_until
The npm package rsa_secur_id_authentication_api receives a total of 0 weekly downloads. As such, rsa_secur_id_authentication_api popularity was classified as not popular.
We found that rsa_secur_id_authentication_api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.