Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
lab-orchestrator-lib-auth
Advanced tools
This package contains the lab orchestrator library authentication module.
pip3 install lab-orchestrator-lib-auth
Check out the developer documentation at laborchestratorlib-auth.readthedocs.io.
The library contains one module called auth that contains 3 methods and one dataclass.
The first method generate_auth_token
is used to generate a JWT token. The token contains the user id, and some information about the lab instance for which this token is created. That also contains a list of vmi_names
the user should be allowed to connect to. HS256
is used as algorithm which is a symmetric algorithm, so you need to use the same secret for both: encryption and decryption of the key.
The next method decode_auth_token
decodes the previously encoded JWT token. It returns the information that is contained in the token.
The third method verify_auth_token
contains the parameter vmi_name
and checks if this vmi_name
is allowed. If it's not allowed the method will return none.
See more at: laborchestratorlib-auth.readthedocs.io.
There is one example that shows how to create a token with the library. For other examples you need to look into the LabOrchestratorLib or WebsocketProxy.
Feel free to open issues.
The src
folder contains the source code of the library. The tests
folder contains the test cases. examples
contains some example scripts of how to use the library. There is a makefile that contains some shortcuts for example to run the test cases and to make a release. Run make help
to see all targets. The docs
folder contains rst docs that are used in read the docs.
pip install -r requirements.txt
pip install -r requirements-dev.txt
Your part:
issue/ISSUE_ID-SHORT_DESCRIPTION
)src/lab_orchestrator_lib_auth/__init__.py
(semantic versioning)Admin part:
make release
To generate the docs run: cd docs && make html
.
FAQs
Authentication module for lab-orchestrator-lib.
We found that lab-orchestrator-lib-auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.