npmpackage.info

Gathering detailed insights and metrics for @inrupt/oidc-client-ext

Other packages similar to @inrupt/oidc-client-ext

@inrupt/solid-client-authn-browser

2.3.0

@aws-sdk/client-sso-oidc

3.699.0

AWS SDK for JavaScript Sso Oidc Client for Node.js, Browser and React Native

oidc-client-ts

3.1.0

OpenID Connect (OIDC) & OAuth2 client library

@inrupt/oidc-client

1.11.6

OpenID Connect (OIDC) & OAuth2 client library

Gathering detailed insights and metrics for @inrupt/oidc-client-ext

@inrupt/oidc-client-ext

A client library for authenticating with Solid

2.3.0

NOASSERTION

TypeScript

83.98 kB

4,852,147 7.4

Installations

npm install @inrupt/oidc-client-ext

Pull Requests

Open

9

Total

3,630

Closed

1,036

Merged

2,585

Issues

Open

52

Total

152

Closed

100

Releases

v2.3.0

Published on 14 Nov 2024

v2.2.7

Published on 30 Oct 2024

v2.2.6

Published on 18 Sept 2024

v2.2.5

Published on 16 Sept 2024

v2.2.4

Published on 24 Jun 2024

v2.2.3

Published on 20 Jun 2024

View all 32 releases

Developer

inrupt

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

Yes

Node Version

22.10.0

NPM Version

lerna/8.1.9/node@v22.10.0+x64 (linux)

Statistics

70 Stars

2,816 Commits

42 Forks

16 Watching

23 Branches

31 Contributors

Updated on 26 Nov 2024

Bundle Size

326.64 kB

Minified

83.98 kB

Minified + Gzipped

Bundlephobia

Languages

TypeScript (94.73%)

JavaScript (2.9%)

Python (1.22%)

Makefile (0.71%)

HTML (0.45%)

Total Downloads

Cumulative downloads

Total Downloads

4,852,147

Last day

-13.9%

454

Compared to previous day

Last week

-25.8%

2,160

Compared to previous week

Last month

-19.5%

9,844

Compared to previous month

Last year

-70.1%

118,937

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@inrupt/oidc-client @inrupt/solid-client-authn-core jose uuid

Dev Dependencies

@types/jest @types/uuid ts-node

Versions

Solid JavaScript Authentication - solid-client-authn

This project adheres to the Contributor Covenant code of conduct. By participating, you are expected to uphold this code. Please report unacceptable behavior to engineering@inrupt.com.

solid-client-authn is a suite of libraries to manage the authentication required to access protected resources on Solid servers. The libraries share a common API and include different modules for different deployment environments:

solid-client-authn-browser can be used to build web apps in the browser.
solid-client-authn-node can be used to build server-side and console-based apps.

@inrupt/solid-client-authn libraries are part of a suite open source JavaScript libraries designed to support developers building Solid applications.

Inrupt Solid JavaScript Client Libraries

Data access and permissions management - solid-client

@inrupt/solid-client allows developers to access data and manage permissions on data stored in Solid Pods.

Authentication - solid-client-authn

@inrupt/solid-client-authn allows developers to authenticate against a Solid server. This is necessary when the resources on your Pod are not public.

Vocabularies and interoperability - solid-common-vocab-rdf

@inrupt/solid-common-vocab-rdf allows developers to build interoperable apps by reusing well-known vocabularies. These libraries provide vocabulary terms as constants that you just have to import.

Supported environments

Our JavaScript Client Libraries use relatively modern JavaScript, aligned with the ES2018 Specification features, we ship both ESM and CommonJS, with type definitions for TypeScript alongside.

This means that out of the box, we only support environments (browsers or runtimes) that were released after mid-2018, if you wish to target other (older) environments, then you will need to cross-compile our SDKs via the use of Babel, webpack, SWC, or similar.

If you need support for Internet Explorer, it is recommended to pass them through a tool like Babel, and to add polyfills for e.g. Map, Set, Promise, Headers, Array.prototype.includes, Object.entries and String.prototype.endsWith.

Node.js Support

See Inrupt Solid Javascript Client Libraries.

Installation

For the latest stable version of solid-client-authn-browser:

1npm install @inrupt/solid-client-authn-browser

For the latest stable version of solid-client-authn-node:

1npm install @inrupt/solid-client-authn-node

For the latest stable version of all Inrupt Solid JavaScript libraries:

1# For browser-based projects
2npm install @inrupt/solid-client @inrupt/solid-client-authn-browser @inrupt/vocab-common-rdf
3
4# For Node.js-based projects
5npm install @inrupt/solid-client @inrupt/solid-client-authn-node @inrupt/vocab-common-rdf

Issues & Help

Solid Community Forum

If you have questions about working with Solid or just want to share what you’re working on, visit the Solid forum. The Solid forum is a good place to meet the rest of the community.

Bugs and Feature Requests

For public feedback, bug reports, and feature requests please file an issue via GitHub.
For non-public feedback or support inquiries please use the Inrupt Service Desk.

Documentation

How to run test apps?

Browser

1git clone https://github.com/inrupt/solid-client-authn-js
2cd solid-client-authn-js
3npm ci
4cd packages/browser/examples/single/bundle/
5npm ci
6npm run start

Go to http://localhost:3001/.

NodeJS

Running a server-side app

1git clone https://github.com/inrupt/solid-client-authn-js
2cd solid-client-authn-js
3npm ci
4cd packages/node/example/demoClientApp/
5npm ci
6npm run start

Go to http://localhost:3001/.

Running an authenticated script

See the dedicated example.

Using with jest

Due to a behavior from jsdom, @inrupt/solid-client-authn-browser needs some adjustments if you want to run it with jest. There are multiple options, listed in a dedicated issue. Thanks to Angelo V. for proposing a mitigation.

No vulnerabilities found.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Packaging

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

9

License

Determines if the project has defined a license.

8

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

8

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

7

SAST

Determines if the project uses static code analysis.

5

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 5

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-browser.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/e2e-browser.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-browser.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/e2e-browser.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-browser.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/e2e-browser.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-node.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/e2e-node.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-node.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/e2e-node.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/inrupt/solid-client-authn-js/release.yml/main?enable=pin
Info: 0 out of 16 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 4 out of 4 npmCommand dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

Score

7.4

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More