Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Authentication plugin for the Trestle admin framework
These instructions assume you have a working Trestle application. See the Getting Started section in the Trestle README.
To integrate trestle-auth, first add it to your application's Gemfile, and then run bundle install
:
gem 'trestle-auth'
As of version 0.4.0, trestle-auth now supports multiple authentication backends including Devise/Warden.
Run the install generator to add the configuration to config/initializers/trestle.rb
, and generate a User
model and admin resource.
$ rails generate trestle:auth:install User
(if no user model name is specified it will default to Administrator
)
Then run your migrations with rake db:migrate
and create an initial admin user from within rails console
:
User.create(email: "admin@example.com", password: "password", first_name: "Admin", last_name: "User")
After restarting your Rails server, any attempt to access a page within your admin will redirect you to the login page.
If you already have an existing user model and Devise integration, you can configure trestle-auth to use that instead.
$ rails generate trestle:auth:install User --devise
Replace User
with the name of your Devise user model. If not specified, it will default to Administrator
.
After running the trestle:auth:install
generator, check your config/initializers/trestle.rb
for further configuration options.
The gem is available as open source under the terms of the LGPLv3 License.
FAQs
Unknown package
We found that trestle-auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.