Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
The OAuth2 and Google Drive media upload made simple. The Steer API creates all the necessary OAuth2 URLs to authenticate in Google API. Steer also offers the possibility to create media upload URLs in Google Drive API that offers two types of media upload: simple and multipart.
To install Steer it is needed python3 and pip the python package manager.
pip install steer
Follow the guides at docs to get start with Steer.
The Steer creates OAuth2 URL according to the Google methods encountered here and Google Drive media upload here.
OAuth2 is a protocol that authorizes third-parties applications to access data from other platforms such as google. Let's suppose you want to use google drive to create an application that creates a folder to store its data in the user's Google Drive.
To do so you need a permission given by Google that is your access token, and the user consent to let the user know that you will be using its Drive to store such data.
The Steer creates the URL to facilitate the Google OAuth2 authorization steps. Steer does not send a HTTP request instead it creates the URL to make the request by using you preferred http client such as requests, this enables the use of any http client.
Steer also offers the option to create a model HTTP URL for Google Drive. This means that the Steer creates all the necessary headers, request body, params and URL to make a request right away with any http client.
Three methods are used to upload media according to Google Drive: simple, multipart, and resumable. Steer offers simple and multipart methods.
This project is under the MIT License.
FAQs
Create URLS to use create google oauth2 and drive api requests.
We found that steer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.