Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
The Ding Python library provides convenient access to the Ding API from applications written in the Python language.
Ding: The OTP API allows you to send authentication codes to your users using their phone numbers.
The SDK can be installed using the pip package manager, with dependencies and metadata stored in the setup.py
file.
pip install ding_api_client
Send an OTP code to a user's phone number.
import ding
from ding.models import components
s = ding.Ding(
api_key='YOUR_API_KEY',
)
res = s.otp.create_authentication(request=components.CreateAuthenticationRequest(
customer_uuid='c9f826e0-deca-41ec-871f-ecd6e8efeb46',
phone_number='+1234567890',
locale='fr-FR',
))
if res.create_authentication_response is not None:
# handle response
pass
Check that a code entered by a user is valid.
import ding
from ding.models import components
s = ding.Ding(
api_key='YOUR_API_KEY',
)
res = s.otp.check(request=components.CreateCheckRequest(
customer_uuid='e0e7b0e9-739d-424b-922f-1c2cb48ab077',
authentication_uuid='8f1196d5-806e-4b71-9b24-5f96ec052808',
check_code='123456',
))
if res.create_check_response is not None:
# handle response
pass
Perform a retry if a user has not received the code.
import ding
s = ding.Ding(
api_key='YOUR_API_KEY',
)
res = s.otp.retry()
if res.retry_authentication_response is not None:
# handle response
pass
Send feedback about the authentication process.
import ding
from ding.models import components
s = ding.Ding(
api_key='YOUR_API_KEY',
)
res = s.otp.feedback(request=components.FeedbackRequest(
customer_uuid='c0c405fa-6bcb-4094-9430-7d6e2428ff23',
phone_number='+1234567890',
status=components.FeedbackRequestStatus.ONBOARDED,
))
if res.feedback_response is not None:
# handle response
pass
Get the status of an authentication.
import ding
s = ding.Ding(
api_key='YOUR_API_KEY',
)
res = s.otp.get_authentication_status(auth_uuid='d8446450-f2fa-4dd9-806b-df5b8c661f23')
if res.authentication_status_response is not None:
# handle response
pass
Perform a phone number lookup.
import ding
s = ding.Ding(
api_key='YOUR_API_KEY',
)
res = s.lookup.lookup(phone_number='<value>', customer_uuid='6e93aa15-9177-4d09-8395-b69ce50db1c8')
if res.lookup_response is not None:
# handle response
pass
Handling errors in this SDK should largely match your expectations. All operations return a response object or raise an exception.
By default, an API error will raise a errors.SDKError exception, which has the following properties:
Property | Type | Description |
---|---|---|
.status_code | int | The HTTP status code |
.message | str | The error message |
.raw_response | httpx.Response | The raw HTTP response |
.body | str | The response content |
When custom error responses are specified for an operation, the SDK may also raise their associated exception. You can refer to respective Errors tables in SDK docs for more details on possible exception types for each operation. For example, the create_authentication
method may raise the following exceptions:
Error Type | Status Code | Content Type |
---|---|---|
errors.ErrorResponse | 400 | application/json |
errors.SDKError | 4XX, 5XX | */* |
import ding
from ding.models import components, errors
s = ding.Ding(
api_key='YOUR_API_KEY',
)
res = None
try:
res = s.otp.create_authentication(request=components.CreateAuthenticationRequest(
customer_uuid='c9f826e0-deca-41ec-871f-ecd6e8efeb46',
phone_number='+1234567890',
locale='fr-FR',
))
except errors.ErrorResponse as e:
# handle exception
raise(e)
except errors.SDKError as e:
# handle exception
raise(e)
if res.create_authentication_response is not None:
# handle response
pass
The default server can also be overridden globally by passing a URL to the server_url: str
optional parameter when initializing the SDK client instance. For example:
import ding
from ding.models import components
s = ding.Ding(
server_url='https://api.ding.live/v1',
api_key='YOUR_API_KEY',
)
res = s.otp.create_authentication(request=components.CreateAuthenticationRequest(
customer_uuid='c9f826e0-deca-41ec-871f-ecd6e8efeb46',
phone_number='+1234567890',
locale='fr-FR',
))
if res.create_authentication_response is not None:
# handle response
pass
The Python SDK makes API calls using the requests HTTP library. In order to provide a convenient way to configure timeouts, cookies, proxies, custom headers, and other low-level configuration, you can initialize the SDK client with a custom requests.Session
object.
For example, you could specify a header for every request that this sdk makes as follows:
import ding
import requests
http_client = requests.Session()
http_client.headers.update({'x-custom-header': 'someValue'})
s = ding.Ding(client=http_client)
This SDK supports the following security scheme globally:
Name | Type | Scheme |
---|---|---|
api_key | apiKey | API key |
To authenticate with the API the api_key
parameter must be set when initializing the SDK client instance. For example:
import ding
from ding.models import components
s = ding.Ding(
api_key='YOUR_API_KEY',
)
res = s.otp.create_authentication(request=components.CreateAuthenticationRequest(
customer_uuid='c9f826e0-deca-41ec-871f-ecd6e8efeb46',
phone_number='+1234567890',
locale='fr-FR',
))
if res.create_authentication_response is not None:
# handle response
pass
While we value open-source contributions to this SDK, this library is generated programmatically. Feel free to open a PR or a Github issue as a proof of concept and we'll do our best to include it in a future release!
FAQs
Python Client SDK
We found that ding-api-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.