npmpackage.info

Gathering detailed insights and metrics for basic-auth-connect

Other packages similar to basic-auth-connect

http-auth-connect

1.0.6

Connect framework integration with http-auth module.

basic-auth

2.0.1

node.js basic auth parser

angular-auth-oidc-client

18.0.2

Angular Lib for OpenID Connect & OAuth2

@octokit/auth-token

5.1.1

GitHub API token authentication for browsers and Node.js

Gathering detailed insights and metrics for basic-auth-connect

basic-auth-connect

Basic auth middleware for node and connect

1.1.0

130

MIT

JavaScript

741.00 B

179,690,695 4.2

Installations

npm install basic-auth-connect

Score

98.6

Supply Chain

77.9

Quality

84.4

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

1

Total

9

Closed

3

Merged

5

Issues

Open

1

Total

1

Closed

0

Releases

1.1.0

Published on 30 Sept 2024

View all 1 releases

Developer

expressjs

Developer Guide

BETA

Module System

Unable to determine the module system for this package.

Min. Node Version

Typescript Support

No

Node Version

22.5.1

NPM Version

10.8.2 Statistics

130 Stars

10 Commits

27 Forks

18 Watching

2 Branches

24 Contributors

Updated on 30 Sept 2024

Bundle Size

1.41 kB

Minified

741.00 B

Minified + Gzipped

Bundlephobia

Languages

JavaScript (98.22%)

Makefile (1.78%)

Total Downloads

Cumulative downloads

Total Downloads

179,690,695

Last day

-1.4%

125,147

Compared to previous day

Last week

4.7%

714,845

Compared to previous week

Last month

6.6%

2,928,374

Compared to previous month

Last year

15.5%

28,629,132

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

tsscmp

Dev Dependencies

connect mocha should supertest

Versions

basic-auth-connect

Connect's Basic Auth middleware in its own module. You should consider to create your own middleware with basic-auth.

API

1var basicAuth = require('basic-auth-connect');

Simple username and password

1connect()
2.use(basicAuth('username', 'password'));

Callback verification

1connect()
2.use(basicAuth(function(user, pass){
3  return 'tj' == user && 'wahoo' == pass;
4}))

Async callback verification, accepting fn(err, user).

1connect()
2.use(basicAuth(function(user, pass, fn){
3  User.authenticate({ user: user, pass: pass }, fn);
4}))

Security Considerations

Important: When using the callback method, it is recommended to use a time-safe comparison function like crypto.timingSafeEqual to prevent timing attacks.

License

MIT

Stable Version

The latest stable version of the package.

Stable Version

1.1.0

HIGH

7.5/10

Summary

basic-auth-connect's callback uses time unsafe string comparison

Affected Versions

< 1.1.0

Patched Versions

1.1.0

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

2

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

Score

4.2

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More