
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Reusable Omniauth integration for Devise supporting multiple providers. Gives you a User model
Run the installer
rails generate devise_omniauth:install
Follow the instructions output from the installer
Install the database migrations
rake devise_omniauth:install:migrations
Run migrations
rake db:migrate
Mount the engine's routes in your routes.rb. Note: if you change the :as option you will need to customize the paths in the devise views (see below)
mount DeviseOmniauth::Engine => "/", :as => "devise_omniauth"
Now you can access the routes url helpers from this engine in your application using the prefix you cleared in the :as above, for instance:
devise_omniauth.user_omniauth_authorize_path(:facebook)
Install the devise initializer
rails generate initializer devise
Open the newly created config/initializers/devise.rb and customize the following lines with your oauth settings:
config.omniauth :facebook, "[SET APP_ID HERE]", "[SET APP_SECRET HERE]"
To customize the devise views (optional):
rails generate devise:views
For each provider you want to use, add them to your config/initializers/devise.rb, for instance:
require "omniauth-facebook"
config.omniauth :facebook, "APP_ID", "APP_SECRET"
Make sure your model is omniauthable (app/models/user.rb
devise :omniauthable
FAQs
Unknown package
We found that devise-omniauth demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.