Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Unirest is a set of lightweight HTTP libraries available in multiple languages.
To utilize unirest for node.js install the the npm
module:
npm install unirest
After installing the npm
package you can now start simplifying requests like so:
var unirest = require('unirest');
You're probably wondering how by using Unirest makes creating requests easier. Besides automatically supporting gzip, and parsing responses, lets start with a basic working example:
unirest.post('http://httpbin.org/post')
.headers({ 'Accept': 'application/json' })
.send({ "parameter": 23, "foo": "bar" })
.end(function (response) {
console.log(response.body);
});
Transferring file data has been simplified:
unirest.post('http://httpbin.org/post')
.headers({ 'Accept': 'application/json' })
.field('parameter', 'value') // Form field
.attach('file', '/tmp/file') // Attachment
.end(function (response) {
console.log(response.body);
});
unirest.post('http://httpbin.org/post')
.headers({ 'Accept': 'application/json' })
.send(new Buffer([1,2,3]))
.end(function (response) {
console.log(response.body);
});
A request can be initiated by invoking the appropriate method on the unirest object, then calling .end()
to send the request. Alternatively you can send the request directly by providing a callback along with the url.
method
- Request type (GET, PUT, POST, etc...)uri
- Optional; When declared the method will return a Request object.
Otherwise it will return the method below with method
set to the method given.method
- Request type, pre-defined methods, see below.url
- Request location.callback
- Optional;Returns a Request object with the method
option set to GET
var Request = unirest.get('http://httpbin.org/get');
Returns a Request object with the method
option set to HEAD
var Request = unirest.head('http://httpbin.org/get');
Returns a Request object with the method
option set to POST
var Request = unirest.post('http://httpbin.org/post');
Returns a Request object with the method
option set to PATCH
var Request = unirest.patch('http://httpbin.org/patch');
Returns a Request object with the method
option set to DELETE
var Request = unirest.delete('http://httpbin.org/delete');
Creates a container to store multiple cookies, i.e. a cookie jar.
var CookieJar = unirest.jar();
CookieJar.add(unirest.cookie('some value'));
unirest.get('http://httpbin.org/get').jar(CookieJar);
Creates a cookie, see above for example.
mikeal/request
library (the underlying layer of unirest-nodejs) for direct use.
Provides simple and easy to use methods for manipulating the request prior to being sent. This object is created when a Unirest Method is invoked. This object contains methods that are chainable like other libraries such as jQuery and popular request module Superagent (which this library is modeled after slightly).
Example
var Request = unirest.post('http://httpbin.org/post');
Request.headers({
'Accepts': 'application/json'
}).end(function (response) {
...
});
Request Methods differ from Option Methods (See Below) in that these methods transform, or handle the data in a sugared way, where as Option Methods require a more hands on approach.
Accepts either an Object
containing user
, pass
, and optionally sendImmediately
.
user
(String
) - Authentication Usernamepass
(String
) - Authentication PasswordsendImmediately
(String
) - Optional; Defaults to true
; Flag to determine whether Request should send the basic authentication header along with the request. Upon being false, Request will retry with a proper authentication header after receiving a 401
response from the server (which must contain a WWW-Authenticate
header indicating the required authentication method)Object
Request.auth({
user: 'Nijiko',
pass: 'insecure',
sendImmediately: true
});
Arguments
Request.auth('Nijiko', 'insecure', true);
Suggested Method for setting Headers
Accepts either an Object
containing header-name: value
entries,
or field
and value
arguments. Each entry is then stored in a two locations, one in the case-sensitive Request.options.headers
and the other on a private _headers
object that is case-insensitive for internal header lookup.
field
(String
) - Header name, such as Accepts
value
(String
) - Header value, such as application/json
Object
Request.set({
'Accepts': 'application/json'
, 'User-Agent': 'Unirest Node.js'
})
Arguments
Request.set('Accepts', 'application/json');
Experimental
Similiar to Request.multipart()
except it only allows one object to be passed at a time and does the pre-processing on necessary body
values for you.
Each object is then appended to the Request.options.multipart
array.
Request.part({
'content-type': 'application/json'
, body: { foo: 'bar' }
}).part({
'content-type': 'text/html'
, body: '<strong>Hello World!</strong>'
});
When Object
is passed value is processed as a querystring
representation, otherwise we directly use the String
passed and append it to Request.options.url
. If Request.options.url
has a trailing ?
already, we append it with & + value
otherwise we append as ? + value
unirest.post('http://httpbin.org/get')
.query('name=nijiko')
.query({
pet: 'spot'
})
.end(function (response) {
console.log(response);
});
Ease of use method for setting the body without having to worry about processing the data for popular formats such as JSON
, Form Encoded
, otherwise the body
is set on Request.options
as the given value.
By default sending strings with no Content-Type
preset will set Content-Type
to application/x-www-form-urlencoded
, and multiple calls will be concatenated with &
. Otherwise multiple calls will be appended to the previous body
value.
JSON
unirest.post('http://httpbin.org/post')
.send({
foo: 'bar',
hello: 3
})
.end(function (response) {
console.log(response.body);
})
FORM Encoded
// Body would be:
// name=nijiko&pet=turtle
unirest.post('http://httpbin.org/post')
.send('name=nijiko')
.send('pet=spot')
.end(function (response) {
console.log(response.body);
});
HTML / Other
unirest.post('http://httpbin.org/post')
.set('Content-Type', 'text/html')
.send('<strong>Hello World!</strong>')
.end(function (response) {
console.log(response.body);
});
Sets the header Content-Type
through either lookup for extensions (xml
, png
, json
, etc...) using mime
or using the full value such as application/json
.
Uses Request.header()
to set header value.
Request.type('application/json') // Content-Type: application/json
Request.type('json') // Content-Type: application/json
Request.type('html') // Content-Type: text/html
…
The following methods are sugar methods for attaching files, and form fields. Instead of handling files and processing them yourself Unirest can do that for you.
Object
should consist of name: 'path'
otherwise use name
and path
.
name
(String
) - File field namepath
(String
| Object
) - File value, A String
will be parsed based on its value. If path
contains http
or https
Request will handle it as a remote file
, otherwise if it contains ://
and not http
or https
it will consider it to be a direct file path
. If no ://
is found it will be considered a relative file path
. An Object
is directly set, so you can do pre-processing if you want without worrying about the string value.Object
unirest.post('http://httpbin.org/post')
.headers({ 'Accept': 'application/json' })
.field({
'parameter': 'value'
})
.attach({
'file': 'dog.png'
, 'relative file': fs.createReadStream(path.join(__dirname, 'dog.png'),
, 'remote file': unirest.request('http://google.com/doodle.png')
})
.end(function (response) {
console.log(response.body);
})
Arguments
unirest.post('http://httpbin.org/post')
.headers({ 'Accept': 'application/json' })
.field('parameter', 'value') // Form field
.attach('file', 'dog.png') // Attachment
.attach('remote file', fs.createReadStream(path.join(__dirname, 'dog.png')) // Same as above.
.attach('remote file', unirest.request('http://google.com/doodle.png'))
.end(function (response) {
console.log(response.body);
});
Object
should consist of name: 'value'
otherwise use name
and value
See Request.attach
for usage.
The options object
is where almost all of the request settings live. Each option method sugars to a field on this object to allow for chaining and ease of use. If
you have trouble with an option method and wish to directly access the options object
you are free to do so.
This object is modeled after the request
libraries options that are passed along through its constructor.
url
(String
| Object
) - Url, or object parsed from url.parse()
qs
(Object
) - Object consisting of querystring
values to append to url
upon request.method
(String
) - Default GET
; HTTP Method.headers
(Object
) - Default {}
; HTTP Headers.body
(String
| Object
) - Entity body for certain requests.form
(Object
) - Form data.auth
(Object
) - See Request.auth()
below.multipart
(Object
) - Experimental; See documentation below.followRedirect
(Boolean
) - Default true
; Follow HTTP 3xx
responses as redirects.followAllRedirects
(Boolean
) - Default false
; Follow Non-GET HTTP 3xx
responses as redirects.maxRedirects
(Number
) - Default 10
; Maximum number of redirects before aborting.encoding
(String
) - Encoding to be used on setEncoding
of response data.timeout
(Number
) - Number of milliseconds to wait before aborting.proxy
(String
) - See Request.proxy()
below.oauth
(Object
) - See Request.oauth()
below.hawk
(Object
) - See Request.hawk()
belowstrictSSL
(Boolean
) - Default true
; See Request.strictSSL()
below.jar
(Boolean
| Jar
) - See Request.jar()
below.aws
(Object
) - See Request.aws()
below.httpSignature
(Object
) - See Request.httpSignature()
Below.localAddress
(String
) - See Request.localAddress()
Below.pool
&& pool.maxSockets
- Advanced agent technology, that is supported.Sets url
location of the current request on Request.options
to the given String
Request.url('http://httpbin.org/get');
Sets method
value on Request.options
to the given value.
Request.method('HEAD');
Sets headers
object on Request.options
to the given object.
Request.headers({
'Accepts': 'application/json',
'Content-Type': 'application/json'
});
Sets form
object on Request.options
to the given object.
When used body
is set to the object passed as a querystring
representation and the Content-Type
header to application/x-www-form-urlencoded; charset=utf-8
Request.form({
key: 'value'
});
Experimental
Sets multipart
array containing multipart-form objects on Request.options
to be sent along with the Request.
Each objects property with the exclusion of body
is treated as a header value. Each body
value must be pre-processed if necessary when using this method.
Request.multipart([{
'content-type': 'application/json'
, body: JSON.stringify({
foo: 'bar'
})
}, {
'content-type': 'text/html'
, body: '<strong>Hello World!</strong>'
}]);
Sets maxRedirects
, the number of redirects the current Request will follow, on Request.options
based on the given value.
Request.maxRedirects(6)
Sets followRedirect
flag on Request.options
for whether the current Request should follow HTTP redirects based on the given value.
Request.followRedirect(true);
Sets timeout
, number of milliseconds Request should wait for a response before aborting, on Request.options
based on the given value.
Request.timeout(2000)
Sets encoding
, encoding to be used on setEncoding of response data if set to null, the body is returned as a Buffer, on Request.options
based on given value.
Request.encoding('utf-8')
Sets strictSSL
flag to require that SSL certificates be valid on Request.options
based on given value.
Request.strictSSL(true);
Sets httpSignature
Sets proxy
, HTTP Proxy to be set on Request.options
based on value.
Request.proxy('http://localproxy.com');
Sets aws
, AWS Signing Credentials, on Request.options
Request.aws({
key: 'AWS_S3_KEY'
, secret: 'AWS_S3_SECRET'
, bucket: 'BUCKET NAME'
});
Sets oauth
, list of oauth credentials, on Request.options
based on given object.
var Request = unirest.get('https://api.twitter.com/oauth/request_token');
Request.oauth({
callback: 'http://mysite.com/callback/'
, consumer_key: 'CONSUMER_KEY'
, consumer_secret: 'CONSUMER_SECRET'
}).end(function (response) {
var access_token = response.body;
Request = unirest.post('https://api.twitter.com/oauth/access_token');
Request.oauth({
consumer_key: 'CONSUMER_KEY'
, consumer_secret: 'CONSUMER_SECRET'
, token: access_token.oauth_token
, verifier: token: access_token.oauth_verifier
}).end(function (response) {
var token = response.body;
Request = unirest.get('https://api.twitter.com/1/users/show.json');
Request.oauth({
consumer_key: 'CONSUMER_KEY'
, consumer_secret: 'CONSUMER_SECRET'
, token: token.oauth_token
, token_secret: token.oauth_token_secret
}).query({
screen_name: token.screen_name
, user_id: token.user_id
}).end(function (response) {
console.log(response.body);
});
})
});
Sets hawk
object on Request.options
to the given object.
Hawk requires a field credentials
as seen in their documentation, and below.
Request.hawk({
credentials: {
key: 'werxhqb98rpaxn39848xrunpaw3489ruxnpa98w4rxn'
, algorithm: 'sha256'
, user: 'Steve'
}
});
Sets localAddress
, local interface to bind for network connections, on Request.options
Request.localAddress('127.0.0.1');
Request.localAddress('1.2.3.4');
Sets jar
, cookie container, on Request.options
. When set to true
it stores cookies for future usage.
See unirest.jar
for more information on how to use Jar
argument.
Alias for Request.header()
Alias for Request.maxRedirects()
Alias for Request.followRedirect()
Alias for Request.strictSSL()
Alias for Request.localAddress()
Alias for Request.end()
Alias for Request.end()
Alias for Request.end()
Alias for Request.end()
Upon ending a request, and recieving a Response the object that is returned contains a number of helpful properties to ease coding pains.
body
(Mixed
) - Processed body dataraw_body
(Mixed
) - Unprocessed body dataheaders
(Object
) - Header detailscookies
(Object
) - Cookies from set-cookies
, and cookie
headers.response
(Object
) - Original Response from mikeal/request
library.code
(Number
) - Status Code, i.e. 200
status
(Number
) - Status Code, same as above.statusType
(Number
) - Status Code Range Type
1
- Info2
- Ok3
- Miscellaneous4
- Client Error5
- Server Errorinfo
(Boolean
) - Status Range Info?ok
(Boolean
) - Status Range Ok?clientError
(Boolean
) - Status Range Client Error?serverError
(Boolean
) - Status Range Server Error?accepted
(Boolean
) - Status Code 202
?noContent
(Boolean
) - Status Code 204
or 1223
?badRequest
(Boolean
) - Status Code 400
?unauthorized
(Boolean
) - Status Code 401
?notAcceptable
(Boolean
) - Status Code 406
?notFound
(Boolean
) - Status Code 404
?forbidden
(Boolean
) - Status Code 403
?error
(Boolean
| Object
) - Dependant on status code range.Sugar method for retrieving a cookie from the response.cookies
object.
var CookieJar = unirest.jar();
CookieJar.add(unirest.cookie('another cookie=23'));
unirest.get('http://google.com').jar(CookieJar).end(function (response) {
// Except google trims the value passed :/
console.log(response.cookie('another cookie'));
});
FAQs
Simplified, lightweight HTTP client library
The npm package unirest receives a total of 10,094 weekly downloads. As such, unirest popularity was classified as popular.
We found that unirest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.