Security News
Oracle Drags Its Feet in the JavaScript Trademark Dispute
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
SFTP over WebSockets - client and server library for Node.js.
SFTP is a simple remote filesystem protocol misnamed as SSH File Transfer Protocol. This package provides SFTP v3, but layers it on top of WebSockets instead of SSH. This makes it possible to run an SFTP client in any modern web browser. Check out my blogpost for more information.
This package is currently in development and has not been sufficiently tested yet.
To install from npm:
npm install --save sftp-ws
The API has been changed slightly in v0.7:
read
callback have been reversed, and rename
method has been extended.The SFTP client provides a high-level API for multi-file operations, but it also aims to be compatible with SFTP client in ssh2 module by Brian White.
Einaros ws module is used to provide WebSockets connectivity.
Sample code is available in this project's GitHub repository.
Stand-alone Browser-based SFTP/WS client is available as well. Check out the web client sample to see it in action.
var SFTP = require("sftp-ws");
// url, credentials and options
var url = "ws://nuane.com/sftp";
var options = { username: "guest", password: "none" };
// connect to the server
var client = new SFTP.Client();
client.connect(url, options, function (err) {
if (err) {
// handle error
console.log("Error: %s", err.message);
return;
}
// display a message
console.log("Connected to the server.");
// retrieve directory listing
client.list(".", function (err, list) {
if (err) {
// handle error
console.log("Error: %s", err.message);
return;
}
// display the listing
list.forEach(function (item) {
console.log(item.longname);
});
// disconnect
client.end();
});
});
var SFTP = require("sftp-ws");
// url, credentials and options
var url = "ws://nuane.com/sftp";
var options = {
username: "guest",
password: "none",
promise: null // you can supply a custom Promise implementation
};
// connect to the server
var client = new SFTP.Client();
client.connect(url, options).then(function () {
// display a message
console.log("Connected to %s", url);
// retrieve directory listing
return client.list(".");
}).then(function (list) {
// display the listing
list.forEach(function (item) {
console.log(item.longname);
});
}).catch(function (err) {
// handle errors
console.log("Error: %s", err.message);
}).then(function () {
// disconnect
client.end();
});
// initialize an SFTP client object here
// download all files matching the pattern
// (into the current local directory)
client.download('sftp-ws-*.tgz', '.');
var SFTP = require('sftp-ws');
// start SFTP over WebSockets server
var server = new SFTP.Server({
port: 3004,
virtualRoot: '.',
readOnly: true
});
This SFTP package is built around the IFilesystem
interface:
interface IFilesystem {
open(path: string, flags: string, attrs: IStats, callback: (err: Error, handle: any) => any): void;
close(handle: any, callback: (err: Error) => any): void;
read(handle: any, buffer: Buffer, offset: number, length: number, position: number, callback: (err: Error, buffer: Buffer, bytesRead: number) => any): void;
write(handle: any, buffer: Buffer, offset: number, length: number, position: number, callback: (err: Error) => any): void;
lstat(path: string, callback: (err: Error, attrs: IStats) => any): void;
fstat(handle: any, callback: (err: Error, attrs: IStats) => any): void;
setstat(path: string, attrs: IStats, callback: (err: Error) => any): void;
fsetstat(handle: any, attrs: IStats, callback: (err: Error) => any): void;
opendir(path: string, callback: (err: Error, handle: any) => any): void;
readdir(handle: any, callback: (err: Error, items: IItem[]|boolean) => any): void;
unlink(path: string, callback: (err: Error) => any): void;
mkdir(path: string, attrs: IStats, callback: (err: Error) => any): void;
rmdir(path: string, callback: (err: Error) => any): void;
realpath(path: string, callback: (err: Error, resolvedPath: string) => any): void;
stat(path: string, callback: (err: Error, attrs: IStats) => any): void;
rename(oldPath: string, newPath: string, flags: RenameFlags, callback: (err: Error) => any): void;
readlink(path: string, callback: (err: Error, linkString: string) => any): void;
symlink(oldPath: string, newPath: string, callback: (err: Error) => any): void;
link(oldPath: string, newPath: string, callback: (err: Error) => any): void;
}
interface IStats {
mode?: number;
uid?: number;
gid?: number;
size?: number;
atime?: Date;
mtime?: Date;
isFile? (): boolean;
isDirectory? (): boolean;
isSymbolicLink? (): boolean;
}
interface IItem {
filename: string;
stats: IStats;
longname?: string;
path?: string;
}
const enum RenameFlags {
OVERWRITE = 1,
//ATOMIC = 2,
//NATIVE = 4,
}
The functions of IFilesystem
interface represent SFTP protocol commands and resemble the fs
module that comes with Node.js.
The SFTP client object implements this interface (and other useful wrapper methods).
The SFTP server object makes instances of this interface accessible by clients.
This package comes with an implementation of 'virtual filesystem' that uses fs
to make parts of the local filesystem accessible to SFTP clients.
However, you can easily implement a custom virtual filesystem and use it instead of the built-in one - just supply an instance of IFilesystem
to SFTP server's constructor as `filesystem' option.
List of things I would like to add soon:
FAQs
SFTP over WebSockets - client and server library
The npm package sftp-ws receives a total of 66 weekly downloads. As such, sftp-ws popularity was classified as not popular.
We found that sftp-ws demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
Security News
The Linux Foundation is warning open source developers that compliance with global sanctions is mandatory, highlighting legal risks and restrictions on contributions.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.