Gathering detailed insights and metrics for basic-auth-tulios
Installations
npm install basic-auth-tuliosDeveloper Guide
BETA
Typescript
No
Module System
N/A
Min. Node Version
>= 0.8
Node Version
8.9.4
NPM Version
5.6.0
Releases
9
Contributors
33
Languages
1
JavaScript
JavaScript (100%)
Developer
jshttp
Download Statistics
Total Downloads
31,189
Last Day
7
Last Week
190
Last Month
547
Last Year
3,779
GitHub Statistics
704 Stars
130 Commits
88 Forks
22 Watching
1 Branches
33 Contributors
Bundle Size
1.53 kB
Minified
665.00 B
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
2.0.0
Package Id
basic-auth-tulios@2.0.0
Unpacked Size
8.68 kB
Size
3.69 kB
File Count
5
NPM Version
5.6.0
Node Version
8.9.4
Total Downloads
Cumulative downloads
Total Downloads
31,189
Last day
-86.3%
7
Compared to previous day
Last week
6.7%
190
Compared to previous week
Last month
80.5%
547
Compared to previous month
Last year
59.4%
3,779
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
basic-auth
Generic basic auth Authorization header field parser for whatever.
Installation
This is a Node.js module available through the
npm registry. Installation is done using the
npm install command:
$ npm install basic-auth
API
1var auth = require('basic-auth')
auth(req)
Get the basic auth credentials from the given request. The Authorization
header is parsed and if the header is invalid, undefined is returned,
otherwise an object with name and pass properties.
auth.parse(string)
Parse a basic auth authorization header string. This will return an object
with name and pass properties, or undefined if the string is invalid.
Example
Pass a Node.js request object to the module export. If parsing fails
undefined is returned, otherwise an object with .name and .pass.
1var auth = require('basic-auth') 2var user = auth(req) 3// => { name: 'something', pass: 'whatever' }
A header string from any other location can also be parsed with
auth.parse, for example a Proxy-Authorization header:
1var auth = require('basic-auth') 2var user = auth.parse(req.getHeader('Proxy-Authorization'))
With vanilla node.js http server
1var http = require('http') 2var auth = require('basic-auth') 3var compare = require('tsscmp') 4 5// Create server 6var server = http.createServer(function (req, res) { 7 var credentials = auth(req) 8 9 // Check credentials 10 // The "check" function will typically be against your user store 11 if (!credentials || !check(credentials.name, credentials.pass)) { 12 res.statusCode = 401 13 res.setHeader('WWW-Authenticate', 'Basic realm="example"') 14 res.end('Access denied') 15 } else { 16 res.end('Access granted') 17 } 18}) 19 20// Basic function to validate credentials for example 21function check (name, pass) { 22 var valid = true 23 24 // Simple method to prevent short-circut and use timing-safe compare 25 valid = compare(name, 'john') && valid 26 valid = compare(pass, 'secret') && valid 27 28 return valid 29} 30 31// Listen 32server.listen(3000)
License
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
project has 13 contributing companies or organizations
Details
- Info: jshttp contributor org/company found, pillarjs contributor org/company found, LOUISINTERNET contributor org/company found, louisinternet contributor org/company found, stream-utils contributor org/company found, crypto-utils contributor org/company found, nodejs contributor org/company found, mysqljs contributor org/company found, ExpressGateway contributor org/company found, koajs contributor org/company found, expressjs contributor org/company found, houzz contributor org/company found, repo-utils contributor org/company found,
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
0 existing vulnerabilities detected
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/jshttp/.github/SECURITY.md:1
- Warn: no linked content found
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/jshttp/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/jshttp/.github/SECURITY.md:1
Reason
2 out of 7 merged PRs checked by a CI test -- score normalized to 2
Reason
Found 6/26 approved changesets -- score normalized to 2
Reason
dependency not pinned by hash detected -- score normalized to 2
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/basic-auth/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/basic-auth/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/basic-auth/ci.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:166
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:182
- Info: 3 out of 4 GitHub-owned GitHubAction dependencies pinned
- Info: 1 out of 3 third-party GitHubAction dependencies pinned
- Info: 0 out of 2 npmCommand dependencies pinned
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
no update tool detected
Details
- Warn: no dependency update tool configurations found
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 11 are checked with a SAST tool
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18
- Info: no jobLevel write permissions found
Score
3.8
/10
Last Scanned on 2025-01-27T21:26:56Z
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More