Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
lab-orchestrator-lib-auth
Advanced tools
This package contains the lab orchestrator library authentication module.
pip3 install lab-orchestrator-lib-auth
Check out the developer documentation at laborchestratorlib-auth.readthedocs.io.
The library contains one module called auth that contains 3 methods and one dataclass.
The first method generate_auth_token
is used to generate a JWT token. The token contains the user id, and some information about the lab instance for which this token is created. That also contains a list of vmi_names
the user should be allowed to connect to. HS256
is used as algorithm which is a symmetric algorithm, so you need to use the same secret for both: encryption and decryption of the key.
The next method decode_auth_token
decodes the previously encoded JWT token. It returns the information that is contained in the token.
The third method verify_auth_token
contains the parameter vmi_name
and checks if this vmi_name
is allowed. If it's not allowed the method will return none.
See more at: laborchestratorlib-auth.readthedocs.io.
There is one example that shows how to create a token with the library. For other examples you need to look into the LabOrchestratorLib or WebsocketProxy.
Feel free to open issues.
The src
folder contains the source code of the library. The tests
folder contains the test cases. examples
contains some example scripts of how to use the library. There is a makefile that contains some shortcuts for example to run the test cases and to make a release. Run make help
to see all targets. The docs
folder contains rst docs that are used in read the docs.
pip install -r requirements.txt
pip install -r requirements-dev.txt
Your part:
issue/ISSUE_ID-SHORT_DESCRIPTION
)src/lab_orchestrator_lib_auth/__init__.py
(semantic versioning)Admin part:
make release
To generate the docs run: cd docs && make html
.
FAQs
Authentication module for lab-orchestrator-lib.
We found that lab-orchestrator-lib-auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.