Help secure Express apps with various HTTP headers
- javascript
- middleware
- security
- helmet
47,133 repositories indexed
1–24 of 29 · Most stars
Help secure Express apps with various HTTP headers
OmniAuth is a flexible authentication system utilizing Rack middleware.
OAuth Proxy
Manages application of security headers with many safe defaults
HTTP middleware for Go that facilitates some quick security wins.
CSRF protection middleware for Go.
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
Inject OWASP recommended HTTP Headers for increased security in a single line
Middleware for adding security headers to an ASP.NET Core application.
This package provides json web token (jwt) middleware for goLang http servers
Authentication plugin for CakePHP. Can also be used in PSR7 based applications.
This library protects against typical web attacks. It was inspired in rack-protection Ruby gem.
PSR7 Middleware for authorization
A CakePHP plugin which allows you to authenticate using social providers like Facebook/Google/Twitter.
Nginx SSO middleware for protecting your internets.
Middleware to Authenticate and Authorize Requests in Vapor
WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.
Auth Middleware component for Phalcon.
Firebase Authentication Middleware for Go Fiber framework.
Inserts a trap for spam bots into responses.
(module) A Go JWT authentication library with refresh token rotation, Redis-backed revocation, and Gin middleware