
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
ajsonapi is a Python package for creating a JSON API web server backed by a database from a user-provided object model.
Let's look at a simple object model specification.
# model.py
from ajsonapi import (JSON_API,
OneToManyRelationship,
ManyToOneRelationship,
Attribute,
String)
class Persons(JSON_API):
name = Attribute(String)
articles = OneToManyRelationship('Articles', rfkey='person_id')
class Articles(JSON_API):
title = Attribute(String)
author = ManyToOneRelationship('Persons', lfkey='person_id')
This model contains two class definitions: Persons
and Articles
. A person
has a name and can author zero of more articles. An article has a title and
has exactly one author (who is a person). The only parts in the model that may
be unobvious are the lfkey
and rfkey
parameters in the relationship
definitions. They are abbreviations for local foreign key and remote
foreign key, respectively. Ajsonapi uses these parameters to identify that
Persons.articles
and Articles.author
are each other's reverse relationship
and to persist objects and their relationships in the database.
For a more elaborate (albeit abstract) object model see ajsonapi's model for functional testing.
# app.py
from aiohttp.web import run_app
from ajsonapi import Application
import model # Or directly include the above code snippet
async def make_app():
app = Application()
await app.connect_database('postgresql://user:password@localhost:5432/db')
await app.create_tables()
app.add_json_api_routes()
return app.app
run_app(make_app())
From the above six line model, ajsonapi creates a web server that supports the following eighteen operations (combinations of HTTP method and URI) as described by the JSON API specification.
GET, POST /persons
GET, PATCH, DELETE /persons/{id}
GET, POST, PATCH, DELETE /persons/{id}/relationships/articles
GET /persons/{id}/articles
GET, POST /articles
GET, PATCH, DELETE /articles/{id}
GET, PATCH /articles/{id}/relationships/author
GET /articles/{id}/author
All GET
operations that return a collection support the ?include
, ?fields
,
?filter
, ?sort
, and ?page
query parameters. All objects created and
manipulated through the web server are persisted in a Postgres database by ajsonapi.
pip install ajsonapi
FAQs
Asynchronous JSON API
We found that ajsonapi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.