Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Stake is an unofficial Python client for the Stake trading platform.
This library wraps the current Stake api and allows common trade operations, such as submitting buy/sell requests, checking your portfolio etc...
Please note that, at the current stage, the Stake client is asynchronous.
pip install stake
After you install the package, you will need to authenticate to Stake in order to get authorization to interact with your account.
In order to successfully issue requests to the Stake platform you will need to authenticate to it. Every requests to the Stake endpoints will need to contain a Stake-Session-Token
in the request headers.
You can retrieve one of these Stake-Session-Token
by using the developer tools in your browser (Network tab) and inspecting some of the request headers sent to some of the https://global-prd-api.hellostake.com/
host. (For example, click on the wishlist of dashboard links to see some session-token authenticated requests)
They are usually valid for 30 days (be sure to enable that checkbox on login) and seem to get refreshed before expiry so you should be good to use them directly.
If you already have an existing token you can pass it on to the StakeClient
as such:
from stake import StakeClient, SessionTokenLoginRequest, CredentialsLoginRequest
import asyncio
login_request = SessionTokenLoginRequest()
async def print_user():
async with StakeClient(login_request) as stake_session:
print(stake_session.user.first_name)
print(stake_session.headers.stake_session_token)
asyncio.run(print_user())
NOTE: The default value of the token is read from the
STAKE_TOKEN
environment variable. If you have that env-var set you should be able to just use:async with StakeClient() as stake_session: ...
If you prefer to pass in your username/password credentials to login instead, it's easy to do:
from stake import StakeClient, SessionTokenLoginRequest, CredentialsLoginRequest
import asyncio
login_request = CredentialsLoginRequest(
username="youruser@name.com", # os.getenv("STAKE_USER") by default
password="yoursecretpassword") # os.getenv("STAKE_PASS") by default
async def print_user(request: CredentialsLoginRequest):
async with StakeClient(request) as stake_session:
print(stake_session.user.first_name)
print(stake_session.headers.stake_session_token)
asyncio.run(print_user(login_request))
In this case you need to have your phone around, get the current code from the authenticator app and add it to the CredentialsLoginRequest
as such:
login_request = CredentialsLoginRequest(username="youruser@name.com",password="yoursecretpassword",
otp="Your-authenticator-app-code")
Obviously, this can become a bit inconvenient, since you will need to provide the otp code every time you instantiate a new StakeClient
instance. Therefore, you could probably authenticate once with your credentials, retrieve the session token from the headers(stake_session.headers.stake_session_token
), and store it in the STAKE_TOKEN
env-var for subsequent usages.
Stake can currently trade on the NY stock exchange (default for this library) as well as the Australian ASX. In order to choose which trading market to use you can initialize the client by specifying the exchange
argument:
import asyncio
from typing import Union
import stake
async def show_current_orders(
current_exchange: Union[stake.constant.ASXUrl, stake.constant.NYSEUrl]
):
async with stake.StakeClient(exchange=current_exchange) as stake_session:
my_equities = await stake_session.orders.list()
return my_equities
# ASX
print(asyncio.run(show_current_orders(stake.ASX)))
# NYSE
print(asyncio.run(show_current_orders(stake.NYSE)))
Alternatively you can call the set_exchange
method on the StakeClient
object.
One thing to note, is that the apis for the two exchanges are currently wildly different, and this reflects in some parts of this library as well. You might find that the way you need to perform a trade (as well as the resulting response) is somewhat different when switching between exchanges.
As a rule of thumb the code for the ASX stake api resides in the stake.asx
python package
while the one for the USA one is under the main stake
namespace (for backwards compatibitity mostly, it might get moved to stake.nyse
in the future).
With stake-python
you can do most of the operations that are available through the web app.
Here are some examples:
import stake
import asyncio
from stake.constant import NYSE
async def show_portfolio():
# here the client will use the STAKE_TOKEN env var for authenticating
async with stake.StakeClient(exchange=NYSE) as stake_session:
my_equities = await stake_session.equities.list()
for my_equity in my_equities.equity_positions:
print(my_equity.symbol, my_equity.yearly_return_value)
return my_equities
asyncio.run(show_portfolio())
Which will return something like:
AAPL 80.48
ADBE 251.35
GOOG 559.89
GRPN -13.77
HTZ -10.52
MSFT 97.14
NFLX 263.55
NIO 17.3
NVDA 410.04
OKTA 96.31
SHOP 690.68
SPOT 142.88
SQ 101.75
TQQQ 115.82
TSLA 402.37
VGT 130.08
ZM 331.1
You can send buy/sell orders to the platform quite easily by just issuing trade requests.
Please check the stake.trade
module for more details.
import asyncio
import stake
async def example_limit_buy():
symbol = "TSLA"
async with stake.StakeClient() as stake_session:
return await stake_session.trades.buy(
stake.LimitBuyRequest(symbol=symbol, limitPrice=10, quantity=1000)
)
asyncio.run(example_limit_buy())
To perform multiple requests at once you can use an asyncio.gather
operation to run all the buy trades in parallel.
import asyncio
import stake
async def example_stop_sell(symbol='TSLA'):
"""THis example will add a stop sell request for one of your equities"""
async with stake.StakeClient() as stake_session:
my_equities = await stake_session.equities.list()
tsla_equity = [equity for equity in my_equities.equity_positions if equity.symbol == symbol][0]
stop_price = round(tsla_equity.market_price - 0.025 * tsla_equity.market_price)
stop_sell_request = stake.StopSellRequest(symbol=tsla_equity.symbol,
stopPrice=stop_price,
comment="My stop sell.",
quantity=tsla_equity.available_for_trading_qty)
return await stake_session.trades.sell(request=stop_sell_request)
asyncio.run(example_stop_sell('MSFT'))
These are some examples on how to interact with watchlists:
import stake
import asyncio
from stake.watchlist import Watchlist
async def create_watchlist(name: str) -> "Watchlist":
async with stake.StakeClient() as stake_session:
request= stake.CreateWatchlistRequest(name = name)
new_watchlist = await stake_session.watchlist.create_watchlist(request=request)
return new_watchlist
asyncio.run(create_watchlist(name='My watchlist'))
import stake
import asyncio
from stake.watchlist import Watchlist
async def update_watchlist(id: str, tickers: "List[str]") -> "Watchlist":
async with stake.StakeClient() as stake_session:
request= stake.UpdateWatchlistRequest(id=id, tickers=tickers)
watchlist = await stake_session.watchlist.add_to_watchlist(request=request)
return watchlist
asyncio.run(update_watchlist(id=WATCHLIST_ID, tickers=["TSLA", "MSFT", "GOOG"] ))
import stake
import asyncio
from stake.watchlist import Watchlist
async def remove_from_watchlist(id: str, tickers: "List[str]") -> "Watchlist":
async with stake.StakeClient() as stake_session:
request= stake.UpdateWatchlistRequest(id=id, tickers=tickers)
watchlist = await stake_session.watchlist.remove_from_watchlist(request=request)
return watchlist
asyncio.run(remove_from_watchlist(id=WATCHLIST_ID, tickers=["TSLA", "GOOG"] ))
import stake
import asyncio
from stake.watchlist import Watchlist
async def delete_watchlist(id: str) -> "Watchlist":
async with stake.StakeClient() as stake_session:
request= stake.DeleteWatchlistRequest(id=id)
watchlist = await stake_session.watchlist.delete_watchlist(request=request)
return watchlist
asyncio.run(delete_watchlist(id=WATCHLIST_ID))
For more examples, you can have a look at the unittests.
FAQs
Unofficial https://hellostake.com API wrapper.
We found that stake demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.