Important: This documentation covers Yarn 1 (Classic).
For Yarn 2+ docs and migration guide, see yarnpkg.com.

Package detail

security-toolkit

vmwavie44ISC1.1.8TypeScript support: included

A library for implementing multiples security measures in a nodejs application

two-auth, 2auth, auth, 0auth, security, security-toolkit, security pack, auth duas etapas, two factor authentication, segurança, multi-factor authentication, mfa, 2fa, two-step verification, google-login, github-login, social-login, oauth, oauth2, openid, openid-connect, single sign-on, sso, identity provider, idp, authentication, authorization, access control, password-less, biometric authentication, fingerprint login, face recognition, token-based authentication, jwt, json web token, totp, hotp, time-based one-time password, hmac-based one-time password, security key, u2f, fido, fido2, webauthn, passwordless authentication, secure login, identity management, user authentication, login security, authentication factors, something you know, something you have, something you are, push notification auth, sms authentication, email verification, captcha, recaptcha, anti-bot, brute force protection, rate limiting, account lockout, session management, csrf protection, xss protection, sql injection prevention, encryption, hashing, salting, key management, certificate management, ssl/tls, https, secure communication, data protection, privacy, gdpr compliance, ccpa compliance, hipaa compliance, pci dss, audit logging, security monitoring, intrusion detection, vulnerability scanning, penetration testing, risk assessment, security policy, access management, role-based access control, rbac, least privilege principle, zero trust, adaptive authentication, contextual authentication, risk-based authentication, device fingerprinting, geolocation authentication, ip whitelisting, vpn authentication, saml, scim, directory services, ldap, active directory, federated identity

readme

SecToolkit's Logo

Security Toolkit

Enjoying Security Toolkit? Give him a star to show your support 🌟

NPM Downloads NPM Downloads


Website  •  Documentation  •  Npm

[!NOTE]

Version 1 in testing phase 🧪


Why does Security Toolkit exist?

💡 Security Toolkit is a package with the aim of solving your application's security problems, with all solutions concentrated in just one package.

check Concentrates all solutions in just one package.
check Prevents future damage to your user base.
check Helps you find an intruder.
check Highly scalable on any architecture.


Quickstart

check Install

# Node.js
npm i -D security-toolkit
# TypeScript (Node.js)
npm i -D security-toolkit
# Bun
bun add -d security-toolkit
# Deno (optional)
deno add npm:security-toolkit

Features

check Essentials

HOTP HMAC-Based One-Time Password (HOTP) implementation for secure authentication.
TOTP Time-Based One-Time Password (TOTP) for enhanced two-factor authentication.
Validations Comprehensive validation tools, including email verification against extensive parameters and blacklists.
Device Logger Generate detailed logs of user devices, including geolocation, IP address, user agent, and other relevant information.
Trackers IP tracking functionality using popular APIs in the market, such as ipinfo and others, for enhanced security monitoring.
Field Treatment Implement backend masking and field encryption for secure data handling and storage.
Input Sanitization Robust input sanitization to protect against malicious attacks such as SQL injection, XSS, and other common exploitation techniques, enhancing overall application security.

and much more 👇🏻


Documentation and Examples

To see the detailed documentation, please visit the Documentation section in the Security Toolkit's website.


Security Policy

GitHub Workflow Status (with event)

Please check the SECURITY.md.


Contributing

See the Contributing Guide and please follow our Code of Conduct 🚀


Acknowledgements

Contributors

Contributors


License

Security License is under the MIT License.
Copyright © 2024-present vmwavie and Security Toolkit contributors.

changelog

[testing]