Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
clappform-integrations
Advanced tools
git pull --recurse-submodules git submodule update --recursive --remote
The Itris API wrapper facilitates interaction with the Itris system through both REST and SOAP protocols. It allows users to fetch data from various endpoints and handle cases efficiently.
First, you need to download the Python package via pip::
$ pip install clappform_integrations==1.0.26
from clappform_integrations import Itris
import pandas as pd
To initialize the REST part of the wrapper:
# Formatting of the REST credentials
BASEURL_REST = "https://acc-webservices.itris.net/services/acc-istl-vip"
CLIENT_ID_REST = ""
CLIENT_SECRET_REST = ""
USERNAME_REST = ""
PASSWORD_REST = ""
headers_rest = {
'accept': 'application/json',
'Authorization': '',
}
timeout_rest = 600
itrisrest = Itris.ItrisREST(
BASEURL_REST,
CLIENT_ID_REST,
CLIENT_SECRET_REST,
USERNAME_REST,
PASSWORD_REST,
headers_rest,
timeout_rest
)
Similarly for the SOAP part of the API, initialize the ItrisSOAP object with the following parameters:
# Formatting of the SOAP credentials
BASEURL_LOGIN_SOAP= 'https://acc-webservices.itris.net/services/acc-istl-soap?WSDL'
BASEURL_SOAP= 'https://acc-webservices.itris.net/services/acc-istl-cad'
PASSWORD_SOAP= ''
PLAINPASSWD_SOAP= ''
SOAPUSERID_SOAP= ''
USERNAME_SOAP= ''
headers_soap= {
'Content-Type' : 'text/xml'
},
timeout_soap= 600
itrissoap = Itris.ItrisSOAP(
BASEURL_LOGIN_SOAP,
BASEURL_SOAP,
USERNAME_SOAP,
PASSWORD_SOAP,
SOAPUSERID_SOAP,
PLAINPASSWD_SOAP,
headers_soap,
timeout_soap
)
fetch_data_from_endpoint
.fetch_data_as_dataframe
.Call the desired endpoint directly using call_endpoint
. It will return the data in XML format.
When fetching data from the REST API, several filters can be applied:
$expand
: Retrieve related data along with the main data.$skip
: Pagination for fetching data in chunks or pages.The wrapper includes predefined endpoints such as:
FetchRentalObjectsWithHierarchy
is utilized alongside the "$expand" filter, pertaining to the hierarchy of rental objects. Within this hierarchy, we retrieve both the units and the complexes they correspond to.For example:
qParams = { "$expand": "Hierarchie_verhuurbare_objecten", "$skip":0}
unit_df = itrisrest.fetch_data_as_dataframe("FetchRentalObjectsWithHierarchy", qParams)
Users can interact with endpoints not explicitly defined by providing the endpoint's identifier.
For example the Contracten endpoint is a new endpoint:
qParams = { }
contracts = itrisrest.fetch_data_as_dataframe("Contracten", qParams)
Predefined SOAP endpoints include:
For example to get the complaints from the SOAP part you can use:
qParams = { }
response_GetCaseTypeDefinitions = itrissoap.call_endpoint("GetCaseTypeDefinitions", qParams)
FAQs
Clappform Python API wrapper
We found that clappform-integrations demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.