
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
uport-persona
Advanced tools
A library for creating, updating and reading attributes and claims on uport personas.
A library for creating, updating and reading attributes and claims on uport personas. It's intended as an easy interface to the uport-registry, allowing developers to focus on the actual data instead of the datastructure of the object stored in the registry.
The primary interface for accessing persona data is through the Registry object.
import { Registry } from 'uport-persona';
To use the Registry
instantiate it like this:
const registry = new Registry()
You can pass in various options in a settings object:
import Web3 from 'web3'
const registry = new Registry( {
web3prov: new Web3.providers.HttpProvider("http://localhost:8545"),
ipfs: {host: 'localhost', port: 5001, protocol: 'http'}, // Pass in a configuration object or a ipfs-api compliant provider
registryAddress: '0x...'
})
Simply call the registry.getPublicProfile(...)
method and you will be returned a promise containing the public uport profile.
registry.getPublicProfile('0x06b4915f423117e3c71d671edcbbabd2a0222236').then((profile) => {
console.log(profile)
})
To receive a more advanced Persona object that will let you query the profile based on who issued the claims use
registry.getPersona(...)
method and you will be returned a promise containing the Persona object.
registry.getPersona('0x06b4915f423117e3c71d671edcbbabd2a0222236').then((persona) => {
console.log(persona)
})
Simply run
$ npm test
Class representing a uPort Registry.
Kind: global class
Object
Promise.<JSON, Error>
Promise.<PublicPersona, Error>
Promise.<PublicPersona, Error>
Object
Class constructor. Creates a new Registry object. The registryAddress is an optional argument and if not specified will be at the moment set to the default ropsten network uport-registry.
Kind: instance method of Registry
Returns: Object
- self
Param | Type | Description |
---|---|---|
settings.ipfs | Object | Optional custom ipfs provider (defaults to infura) |
settings.web3prov | Web3Provider | Optional web3 provider object (defaults to infura ropsten node) |
settings.registryAddress | String | Optional ethereum address of a uport contract |
Promise.<JSON, Error>
Gets the public profile JSON object stored in IPFS for the given address.
Kind: instance method of Registry
Returns: Promise.<JSON, Error>
- A promise that returns the JSON object stored in IPFS for the given address
Promise.<PublicPersona, Error>
Gets the the data stored in IPFS for the given object and creates a PublicPersona object.
Kind: instance method of Registry
Returns: Promise.<PublicPersona, Error>
- A promise that returns a new PublicPersona object.
Promise.<PublicPersona, Error>
Gets the data stored in IPFS for an array of given addresses and creates an array of PublicPersona objects.
Kind: instance method of Registry
Returns: Promise.<PublicPersona, Error>
- A promise that returns an array of new PublicPersona objects.
Class representing PublicPersona, extends PersonaInterface
Kind: global class
Object
Object
Object
Class constructor. Creates a new PublicPersona object.
Kind: instance method of PublicPersona
Returns: Object
- self
Param | Type | Description |
---|---|---|
publicProfile | JSON | Public Profile on IPFS |
address | String | The identity address |
Object
A getter which returns a simple Profile Object
Kind: instance method of PublicPersona
FAQs
A library for creating, updating and reading attributes and claims on uport personas.
The npm package uport-persona receives a total of 8 weekly downloads. As such, uport-persona popularity was classified as not popular.
We found that uport-persona demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.