npmpackage.info

Gathering detailed insights and metrics for basic-auth-connect

Other packages similar to basic-auth-connect

http-auth-connect

1.0.6

Connect framework integration with http-auth module.

openid-client

6.1.7

OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

koa-basic-auth-connect

1.0.4

Basic authentication middleware for koa.

oauth4webapi

3.1.4

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

Gathering detailed insights and metrics for basic-auth-connect

basic-auth-connect

Basic auth middleware for node and connect

1.1.0

130

MIT

JavaScript

8.00 kB

184,952,789 4

Installations

npm install basic-auth-connect

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

22.5.1

NPM Version

10.8.2 Score

99.4

Supply Chain

77.9

Quality

82.2

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

2

Total

10

Closed

3

Merged

5

Issues

Open

1

Total

1

Closed

0

Releases

1.1.0

Published on 30 Sept 2024

View all 1 releases

Contributors

Unable to fetch Contributors

View all 25 contributors

Languages

JavaScript

Makefile

JavaScript (98.22%)

Makefile (1.78%)

Developer

expressjs

Download Statistics

Total Downloads

184,952,789

Last Day

125,796

Last Week

581,803

Last Month

2,556,994

Last Year

30,030,099

GitHub Statistics

130 Stars

10 Commits

27 Forks

18 Watching

2 Branches

25 Contributors

Maintainers

Package Meta Information

Latest Version

1.1.0

Package Id

basic-auth-connect@1.1.0

Unpacked Size

8.00 kB

Size

3.44 kB

File Count

NPM Version

10.8.2

Node Version

22.5.1

Publised On

30 Sept 2024

Total Downloads

Cumulative downloads

Total Downloads

184,952,789

Last day

3.4%

125,796

Compared to previous day

Last week

-12%

581,803

Compared to previous week

Last month

4.1%

2,556,994

Compared to previous month

Last year

22%

30,030,099

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

tsscmp

Dev Dependencies

connect mocha should supertest

Versions

basic-auth-connect

Connect's Basic Auth middleware in its own module. You should consider to create your own middleware with basic-auth.

API

1var basicAuth = require('basic-auth-connect');

Simple username and password

1connect()
2.use(basicAuth('username', 'password'));

Callback verification

1connect()
2.use(basicAuth(function(user, pass){
3  return 'tj' == user && 'wahoo' == pass;
4}))

Async callback verification, accepting fn(err, user).

1connect()
2.use(basicAuth(function(user, pass, fn){
3  User.authenticate({ user: user, pass: pass }, fn);
4}))

Security Considerations

Important: When using the callback method, it is recommended to use a time-safe comparison function like crypto.timingSafeEqual to prevent timing attacks.

License

MIT

Stable Version

1.1.0

HIGH

7.5/10

Summary

basic-auth-connect's callback uses time unsafe string comparison

Affected Versions

< 1.1.0

Patched Versions

1.1.0

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

Score

4

/10

Last Scanned on 2025-02-03

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More