Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: use different port for authentication #171

Merged
merged 8 commits into from
Apr 21, 2023
Merged

fix: use different port for authentication #171

merged 8 commits into from
Apr 21, 2023

Conversation

clarkio
Copy link
Owner

@clarkio clarkio commented Apr 14, 2023

chore: ignore .dccache file
chore: update to latest npm package lock version

chore: ignore .dccache file
chore: update to latest npm package lock version
@socket-security
Copy link

socket-security bot commented Apr 14, 2023

New dependency changes detected. Learn more about Socket for GitHub ↗︎


🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore keytar@7.9.0

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
keytar@7.9.0 (upgraded) install package-lock.json via @types/keytar@4.4.2
Pull request alert summary
Issue Status
Install scripts ⚠️ 1 issue
Native code ✅ 0 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues

📊 Modified Dependency Overview:

⬆️ Updated Package Version Diff Added Capability Access +/- Transitive Count Publisher
@types/vscode@1.77.0 1.31.0...1.77.0 None +0/-0 types
@types/tmi.js@1.8.3 1.4.1...1.8.3 None +0/-0 types
typescript@5.0.4 2.9.2...5.0.4 None +0/-0 typescript-bot
glob@8.1.0 8.0.3...8.1.0 None +2/-2 isaacs
tmi.js@1.8.5 1.5.0...1.8.5 network, environment +8/-15 alca
bufferutil@4.0.7 4.0.1...4.0.7 environment +1/-1 lpinca
@types/uuid@3.4.10 3.4.9...3.4.10 None +0/-0 types
@types/request@2.48.8 2.48.5...2.48.8 None +4/-4 types
copyfiles@2.4.1 2.3.0...2.4.1 None +14/-10 cwmma
@vscode/test-electron@1.6.2 1.6.1...1.6.2 None +5/-5 connor.peet
copy-webpack-plugin@6.4.1 6.0.3...6.4.1 None +71/-64 evilebottnawi
utf-8-validate@5.0.10 5.0.2...5.0.10 environment +1/-1 lpinca
webpack@4.46.0 4.44.1...4.46.0 None +43/-43 sokra
@types/node@8.10.66 8.10.62...8.10.66 None +0/-0 types

@clarkio clarkio merged commit b2049f7 into vnext Apr 21, 2023
5 of 6 checks passed
@clarkio clarkio deleted the fix-auth branch April 21, 2023 19:32
clarkio added a commit that referenced this pull request Apr 21, 2023
* Master (#111)

* 0.2.2 Release (#103)

* HOTFIX: Fixed a registration error with the TreeView containers

* bump version and log changes

* add launch for runnin with extensions

* Major Upgrade (#123)

* Redesigned the entire extension (#112)

* Refactored enum types into an enums folder.

* Generating 'types' so we can provide types for our API we'll be exposing.

* API interface has been added

* Started initial refactor to App and expose API

* App class is now working.

* Twitch chat client is now working

* Old credentials removed by default

* Added an API entry to verify if a user is following the channel

* Fixed an error with the twitch login on linux

* Twitch Authentication server callback port is now a setting

* Fixed inconsistency in command titles

* Fixed bearer token issue

* Removed 'token' requirement for followers check, not required

* Reverted server port back to static 5544. Must match registered app with Twitch

* Updated changelog for 0.5.0

* Context menu support (#115)

* Remove highlights by context-menu

* Updated changelog

* Updated node_modules to fix security vulnerabilities (#113)

* Remove Types folder (#116)

* Ignore types

* Removed types folder

* Cleanup and fixed some issues (#122)

* Fixed a high vulnerability in node

* Fixed authentication issues and updated packages

* Fixed promise issues in the highlight

* Removed declaration generation

* Updated webpack plugins and options

* Redesigned the entire extension (#112)

* Refactored enum types into an enums folder.

* Generating 'types' so we can provide types for our API we'll be exposing.

* API interface has been added

* Started initial refactor to App and expose API

* App class is now working.

* Twitch chat client is now working

* Old credentials removed by default

* Added an API entry to verify if a user is following the channel

* Fixed an error with the twitch login on linux

* Twitch Authentication server callback port is now a setting

* Fixed inconsistency in command titles

* Fixed bearer token issue

* Removed 'token' requirement for followers check, not required

* Reverted server port back to static 5544. Must match registered app with Twitch

* Updated changelog for 0.5.0

* Context menu support (#115)

* Remove highlights by context-menu

* Updated changelog

* Updated node_modules to fix security vulnerabilities (#113)

* Remove Types folder (#116)

* Ignore types

* Removed types folder

* Cleanup and fixed some issues (#122)

* Fixed a high vulnerability in node

* Fixed authentication issues and updated packages

* Fixed promise issues in the highlight

* Removed declaration generation

* Updated webpack plugins and options

* clarify status bar item actions

* No longer alert about saving token, log it!

* Updated copyfiles to 2.3.0 to hopefully solve linux issue

* Fixed some casing issues for references on linux

* fix: change casing of 'twitch'

Co-authored-by: clarkio <clarkio@users.noreply.github.com>

* Bump elliptic from 6.4.1 to 6.5.3 (#124)

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.4.1 to 6.5.3.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](indutny/elliptic@v6.4.1...v6.5.3)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* 💯 1.0.0 Release🎉🎊✨🎆

* Update README.md

* hotfix(correct reading of settings by name)

* remove tmi token from readme requirements

* update version for patch

* fix(only reconnect on config change if previously connected)

* sec: fix deps from audit

* 1.0.2 Release

* fix: adjust whitespace

* AddWebTrends-2020-11 (#131)

* Added Web Trends

* Added Web Trends

* Added Web Trends

* Added Web Trends

* Added Web Trends

* Added Web Trends

* Create codeql-analysis.yml

* fix: move app to use new twitch app client id (#141)

* docs: add parithon as a contributor for code (#145)

* docs: update README.md [skip ci]

* docs: create .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* docs: add MatthewKosloski as a contributor for code (#146)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* docs: add yoannfleurydev as a contributor for code (#147)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* fix build badge

* Bump elliptic from 6.5.3 to 6.5.4 (#133)

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](indutny/elliptic@v6.5.3...v6.5.4)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump ssri from 6.0.1 to 6.0.2 (#136)

Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md)
- [Commits](npm/ssri@v6.0.1...v6.0.2)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump path-parse from 1.0.6 to 1.0.7 (#139)

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump tar from 6.0.5 to 6.1.11 (#140)

Bumps [tar](https://github.com/npm/node-tar) from 6.0.5 to 6.1.11.
- [Release notes](https://github.com/npm/node-tar/releases)
- [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.5...v6.1.11)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump ini from 1.3.5 to 1.3.8 (#142)

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8.
- [Release notes](https://github.com/isaacs/ini/releases)
- [Commits](npm/ini@v1.3.5...v1.3.8)

---
updated-dependencies:
- dependency-name: ini
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump y18n from 4.0.0 to 4.0.3 (#143)

Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.3.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md)
- [Commits](yargs/y18n@v4.0.0...y18n-v4.0.3)

---
updated-dependencies:
- dependency-name: y18n
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Update README.md

* Update README.md

* Update README.md

* Migrate testing from vscode to @vscode/test-electron (#153)

* Migrate testing from vscode to @vscode/test-electron

* add: version bump

Co-authored-by: clarkio <clarkio@users.noreply.github.com>

* docs: add Technickel-Dev as a contributor for code (#163)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* docs: add Technickel-Dev as a contributor for test (#164)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* add: version bump details in changelog

ignore dccache file

* add: github action build and test script

* fix: add github action workflow name

* add: status badge for new github action

* fix: use different port for authentication (#171)

* fix: use different port for authentication

chore: ignore .dccache file
chore: update to latest npm package lock version

* version: 1.0.5

* chore: adjust to ignore ts issues for now

* fix: remove test folder from webpack use

* fix: ci branches used

* chore: include latest branch change details

---------

Co-authored-by: Anthony Conrad (parithon) <parithon@outlook.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bit <brandon@microsoft.com>
Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
Co-authored-by: Technickel <bradlabrador@hotmail.com>
clarkio added a commit that referenced this pull request Apr 28, 2023
* Master (#111)

* 0.2.2 Release (#103)

* HOTFIX: Fixed a registration error with the TreeView containers

* bump version and log changes

* add launch for runnin with extensions

* Major Upgrade (#123)

* Redesigned the entire extension (#112)

* Refactored enum types into an enums folder.

* Generating 'types' so we can provide types for our API we'll be exposing.

* API interface has been added

* Started initial refactor to App and expose API

* App class is now working.

* Twitch chat client is now working

* Old credentials removed by default

* Added an API entry to verify if a user is following the channel

* Fixed an error with the twitch login on linux

* Twitch Authentication server callback port is now a setting

* Fixed inconsistency in command titles

* Fixed bearer token issue

* Removed 'token' requirement for followers check, not required

* Reverted server port back to static 5544. Must match registered app with Twitch

* Updated changelog for 0.5.0

* Context menu support (#115)

* Remove highlights by context-menu

* Updated changelog

* Updated node_modules to fix security vulnerabilities (#113)

* Remove Types folder (#116)

* Ignore types

* Removed types folder

* Cleanup and fixed some issues (#122)

* Fixed a high vulnerability in node

* Fixed authentication issues and updated packages

* Fixed promise issues in the highlight

* Removed declaration generation

* Updated webpack plugins and options

* Redesigned the entire extension (#112)

* Refactored enum types into an enums folder.

* Generating 'types' so we can provide types for our API we'll be exposing.

* API interface has been added

* Started initial refactor to App and expose API

* App class is now working.

* Twitch chat client is now working

* Old credentials removed by default

* Added an API entry to verify if a user is following the channel

* Fixed an error with the twitch login on linux

* Twitch Authentication server callback port is now a setting

* Fixed inconsistency in command titles

* Fixed bearer token issue

* Removed 'token' requirement for followers check, not required

* Reverted server port back to static 5544. Must match registered app with Twitch

* Updated changelog for 0.5.0

* Context menu support (#115)

* Remove highlights by context-menu

* Updated changelog

* Updated node_modules to fix security vulnerabilities (#113)

* Remove Types folder (#116)

* Ignore types

* Removed types folder

* Cleanup and fixed some issues (#122)

* Fixed a high vulnerability in node

* Fixed authentication issues and updated packages

* Fixed promise issues in the highlight

* Removed declaration generation

* Updated webpack plugins and options

* clarify status bar item actions

* No longer alert about saving token, log it!

* Updated copyfiles to 2.3.0 to hopefully solve linux issue

* Fixed some casing issues for references on linux

* fix: change casing of 'twitch'

Co-authored-by: clarkio <clarkio@users.noreply.github.com>

* Bump elliptic from 6.4.1 to 6.5.3 (#124)

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.4.1 to 6.5.3.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](indutny/elliptic@v6.4.1...v6.5.3)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* 💯 1.0.0 Release🎉🎊✨🎆

* Update README.md

* hotfix(correct reading of settings by name)

* remove tmi token from readme requirements

* update version for patch

* fix(only reconnect on config change if previously connected)

* sec: fix deps from audit

* 1.0.2 Release

* fix: adjust whitespace

* AddWebTrends-2020-11 (#131)

* Added Web Trends

* Added Web Trends

* Added Web Trends

* Added Web Trends

* Added Web Trends

* Added Web Trends

* Create codeql-analysis.yml

* fix: move app to use new twitch app client id (#141)

* docs: add parithon as a contributor for code (#145)

* docs: update README.md [skip ci]

* docs: create .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* docs: add MatthewKosloski as a contributor for code (#146)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* docs: add yoannfleurydev as a contributor for code (#147)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* fix build badge

* Bump elliptic from 6.5.3 to 6.5.4 (#133)

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](indutny/elliptic@v6.5.3...v6.5.4)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump ssri from 6.0.1 to 6.0.2 (#136)

Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md)
- [Commits](npm/ssri@v6.0.1...v6.0.2)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump path-parse from 1.0.6 to 1.0.7 (#139)

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump tar from 6.0.5 to 6.1.11 (#140)

Bumps [tar](https://github.com/npm/node-tar) from 6.0.5 to 6.1.11.
- [Release notes](https://github.com/npm/node-tar/releases)
- [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.5...v6.1.11)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump ini from 1.3.5 to 1.3.8 (#142)

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8.
- [Release notes](https://github.com/isaacs/ini/releases)
- [Commits](npm/ini@v1.3.5...v1.3.8)

---
updated-dependencies:
- dependency-name: ini
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Bump y18n from 4.0.0 to 4.0.3 (#143)

Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.3.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md)
- [Commits](yargs/y18n@v4.0.0...y18n-v4.0.3)

---
updated-dependencies:
- dependency-name: y18n
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Clark <clarkio@users.noreply.github.com>

* Update README.md

* Update README.md

* Update README.md

* Migrate testing from vscode to @vscode/test-electron (#153)

* Migrate testing from vscode to @vscode/test-electron

* add: version bump

Co-authored-by: clarkio <clarkio@users.noreply.github.com>

* docs: add Technickel-Dev as a contributor for code (#163)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* docs: add Technickel-Dev as a contributor for test (#164)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>

* add: version bump details in changelog

ignore dccache file

* add: github action build and test script

* fix: add github action workflow name

* add: status badge for new github action

* fix: use different port for authentication (#171)

* fix: use different port for authentication

chore: ignore .dccache file
chore: update to latest npm package lock version

* version: 1.0.5

* chore: adjust to ignore ts issues for now

* fix: remove test folder from webpack use

* fix: ci branches used

* chore: include latest branch change details

* Create deploy.yml

* add: support for open vsx registry publishing

---------

Co-authored-by: Anthony Conrad (parithon) <parithon@outlook.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bit <brandon@microsoft.com>
Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
Co-authored-by: Technickel <bradlabrador@hotmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant