
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
用于第三方登录后获取用户信息
提供给前后端分离的框架使用
只接受前端sdk传回来的第三方 access_token 参数及其它必须参数
支持第三方列表如下:
Add this line to your application's Gemfile:
gem 'social_oauth_api', '~> 0.1.3'
And then execute:
$ bundle
Or install it yourself as:
$ gem install social_oauth_api
require 'social_oauth_api'
weibo_config = {
provider_type: 'sinaweibo',
access_token: 'xxxxxxxxx'
}
qq_config = {
provider_type: 'qqdenglu',
access_token: 'xxxxxxxx',
client_id: 'xxxxxxxx' # => 如果只需要user_id, 不需要用户信息可以不传 client_id 参数
}
weixin_config = {
provider_type: 'weixin',
access_token: 'xxxxxxxxx',
openid: 'xxxxxxxx'
}
weibo = SocialOauthApi::User.new(weibo_config)
p weibo.id # => weibo uid
p weibo.name # => weibo screen_name
p weibo.image_url # => weibo profile_image_url
p weibo.user_info
qq = SocialOauthApi::User.new(qq_config)
p qq.id # => qq openid
p qq.name # => qq nickname
p qq.image_url # => qq figureurl
p qq.user_info
weixin = SocialOauthApi::User.new(weixin_config)
p weixin.id # => weixin openid
p weixin.name # => weixin nickname
p weixin.image_url # => weixin headimgurl
p weixin.user_info
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.