
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
SDK to communicate with the Worldline Global Collect platform using the Worldline Connect Server API
The Python SDK helps you to communicate with the Worldline Connect <https://docs.connect.worldline-solutions.com/>
__ Server API. Its primary features are:
convenient Python library for the API calls and responses
handling of all the details concerning authentication
handling of required metadata
Its use is demonstrated by an example for each possible call. The examples execute a call using the provided API keys.
See the Worldline Connect Developer Hub <https://docs.connect.worldline-solutions.com/documentation/sdk/server/python/>
__ for more information on how to use the SDK.
This repository consists out of four main components:
#. The source code of the SDK itself: /worldline/connect/sdk/
#. The source code of the SDK unit tests: /tests/unit/
#. The source code of the SDK integration tests: /tests/integration/
#. Usage examples: /examples/
Note that the source code of the unit tests and integration tests and the examples can only be found on GitHub.
Python 2.7 is required. In addition, the following packages are required:
requests <https://requests.readthedocs.io/>
__ 2.25.0 or higherrequests-toolbelt <https://toolbelt.readthedocs.io/>
__ 0.8.0 or higherThese packages will be installed automatically if the SDK is installed manually or using pip following the below instructions.
To install the SDK using pip, execute the following command:
.. code:: bash
pip install connect-sdk-python2
Alternatively, you can install the SDK from a source distribution file:
#. Download the latest version of the Python SDK from GitHub. Choose the connect_sdk_python2-x.y.z.tar.gz
file from the releases <https://github.com/Worldline-Global-Collect/connect-sdk-python2/releases>
__ page, where x.y.z
is the version number.
#. Execute the following command in the folder where the SDK was downloaded to:
.. code:: bash
pip install connect_sdk_python2-x.y.z.tar.gz
After the Python SDK has been installed, it can be uninstalled using the following command:
.. code:: bash
pip uninstall connect-sdk-python2
The required packages can be uninstalled in the same way.
There are two types of tests: unit tests and integration tests. The unit tests will work out-of-the-box; for the integration tests some configuration is required. First, some environment variables need to be set:
connect.api.apiKeyId
for the API key id to use. This can be retrieved from the Configuration Center.connect.api.secretApiKey
for the secret API key to use. This can be retrieved from the Configuration Center.connect.api.merchantId
for your merchant ID.In addition, to run the proxy integration tests, the proxy URI, username and password should be set in the tests/resources/configuration.proxy.ini
file.
In order to run the unit and integration tests, the mock <https://pypi.python.org/pypi/mock>
__ backport and mockito <https://pypi.python.org/pypi/mockito>
__ are required. These can be installed using the following command:
.. code:: bash
pip install mock 'mockito<1.3.1'
The following commands can now be executed from the tests
directory to execute the tests:
Unit tests:
.. code:: bash
python run_unit_tests.py
Integration tests:
.. code:: bash
python run_integration_tests.py
Both unit and integration tests:
.. code:: bash
python run_all_tests.py
Note: in the current version of the unit tests, two errors will pop up ([Errno 10053] for Windows and [Errno 32] for Linux), indicating that there was a client disconnect. These errors occur during cleanup of the tests and do not hinder the tests in any way, and should therefore be ignored.
FAQs
SDK to communicate with the Worldline Global Collect platform using the Worldline Connect Server API
We found that connect-sdk-python2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.