HTTP request signature verifier middleware for node.js
npm install paranoikCheck integrity of each request using a custom HTTP header checksum (X-Checksum).
The hash is formed by [request url, request method, request data, request user-agent, secret key] in a MD5 hash function.
``bash`
npm install paranoik
`js
const express = require('express');
const paranoik = require('paranoik');
const app = express();
app.use(paranoik('YOUR_SECRET'));
`
js
const options = {
secret: YOUR_SECRET,
whitelist: [
'/login',
'/recovery'
]
};app.use(paranoik(options));
`
Frontend usage
`js
import paranoik from 'paranoik';axios.interceptors.request.use( async (config) => {
config.headers.XChecksum = await paranoik.checksum('YOUR_SECRET');
return config;
}, function (error) {
return Promise.reject(error);
});
``[npm-url]: https://npmjs.org/package/paranoik
[license]: https://badgen.net/npm/license/paranoik
[dependencies]: https://badgen.net/npm/dependencies/paranoik
[size]: https://badgen.net/packagephobia/install/paranoik
[npm-version-image]: https://badgen.net/npm/v/paranoik