@backstage-community/plugin-quay-backend 1.14.0 → 1.16.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @backstage-community/plugin-quay-backend
 
+## 1.16.0
+
+### Minor Changes
+
+- d4e8668: Backstage version bump to v1.51.0
+
+### Patch Changes
+
+- Updated dependencies [d4e8668]
+  - @backstage-community/plugin-quay-common@1.21.0
+
+## 1.15.0
+
+### Minor Changes
+
+- 07b8314: Backstage version bump to v1.50.4
+
+### Patch Changes
+
+- Updated dependencies [07b8314]
+  - @backstage-community/plugin-quay-common@1.20.0
+
 ## 1.14.0
 
 ### Minor Changes

package/dist/plugin.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\n\nimport { quayPermissions } from '@backstage-community/plugin-quay-common';\n\nimport { createRouter } from './services/router';\n\n/**\n * Quay backend plugin\n *\n * @public\n */\nexport const quayPlugin = createBackendPlugin({\n  pluginId: 'quay',\n  register(env) {\n    env.registerInit({\n      deps: {\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        permissions: coreServices.permissions,\n        permissionsRegistry: coreServices.permissionsRegistry,\n        httpRouter: coreServices.httpRouter,\n        httpAuth: coreServices.httpAuth,\n      },\n      async init({\n        config,\n        logger,\n        permissions,\n        permissionsRegistry,\n        httpAuth,\n        httpRouter,\n      }) {\n        permissionsRegistry.addPermissions(quayPermissions);\n\n        httpRouter.use(\n          await createRouter({\n            logger,\n            config,\n            permissions,\n            httpAuth,\n          }),\n        );\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","quayPermissions","createRouter"],"mappings":";;;;;;AA6BO,MAAM,aAAaA,oCAAoB,CAAA;AAAA,EAC5C,QAAU,EAAA,MAAA;AAAA,EACV,SAAS,GAAK,EAAA;AACZ,IAAA,GAAA,CAAI,YAAa,CAAA;AAAA,MACf,IAAM,EAAA;AAAA,QACJ,QAAQC,6BAAa,CAAA,UAAA;AAAA,QACrB,QAAQA,6BAAa,CAAA,MAAA;AAAA,QACrB,aAAaA,6BAAa,CAAA,WAAA;AAAA,QAC1B,qBAAqBA,6BAAa,CAAA,mBAAA;AAAA,QAClC,YAAYA,6BAAa,CAAA,UAAA;AAAA,QACzB,UAAUA,6BAAa,CAAA;AAAA,OACzB;AAAA,MACA,MAAM,IAAK,CAAA;AAAA,QACT,MAAA;AAAA,QACA,MAAA;AAAA,QACA,WAAA;AAAA,QACA,mBAAA;AAAA,QACA,QAAA;AAAA,QACA;AAAA,OACC,EAAA;AACD,QAAA,mBAAA,CAAoB,eAAeC,gCAAe,CAAA;AAElD,QAAW,UAAA,CAAA,GAAA;AAAA,UACT,MAAMC,mBAAa,CAAA;AAAA,YACjB,MAAA;AAAA,YACA,MAAA;AAAA,YACA,WAAA;AAAA,YACA;AAAA,WACD;AAAA,SACH;AAAA;AACF,KACD,CAAA;AAAA;AAEL,CAAC;;;;"}
+{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\n\nimport { quayPermissions } from '@backstage-community/plugin-quay-common';\n\nimport { createRouter } from './services/router';\n\n/**\n * Quay backend plugin\n *\n * @public\n */\nexport const quayPlugin = createBackendPlugin({\n  pluginId: 'quay',\n  register(env) {\n    env.registerInit({\n      deps: {\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        permissions: coreServices.permissions,\n        permissionsRegistry: coreServices.permissionsRegistry,\n        httpRouter: coreServices.httpRouter,\n        httpAuth: coreServices.httpAuth,\n      },\n      async init({\n        config,\n        logger,\n        permissions,\n        permissionsRegistry,\n        httpAuth,\n        httpRouter,\n      }) {\n        permissionsRegistry.addPermissions(quayPermissions);\n\n        httpRouter.use(\n          await createRouter({\n            logger,\n            config,\n            permissions,\n            httpAuth,\n          }),\n        );\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","quayPermissions","createRouter"],"mappings":";;;;;;AA6BO,MAAM,aAAaA,oCAAA,CAAoB;AAAA,EAC5C,QAAA,EAAU,MAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,UAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,MAAA;AAAA,QACrB,aAAaA,6BAAA,CAAa,WAAA;AAAA,QAC1B,qBAAqBA,6BAAA,CAAa,mBAAA;AAAA,QAClC,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,UAAUA,6BAAA,CAAa;AAAA,OACzB;AAAA,MACA,MAAM,IAAA,CAAK;AAAA,QACT,MAAA;AAAA,QACA,MAAA;AAAA,QACA,WAAA;AAAA,QACA,mBAAA;AAAA,QACA,QAAA;AAAA,QACA;AAAA,OACF,EAAG;AACD,QAAA,mBAAA,CAAoB,eAAeC,gCAAe,CAAA;AAElD,QAAA,UAAA,CAAW,GAAA;AAAA,UACT,MAAMC,mBAAA,CAAa;AAAA,YACjB,MAAA;AAAA,YACA,MAAA;AAAA,YACA,WAAA;AAAA,YACA;AAAA,WACD;AAAA,SACH;AAAA,MACF;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}

package/dist/services/QuayService.cjs.js

@@ -74,9 +74,9 @@ class QuayService {
   }
   async getTags(instanceName, org, repo, page, limit, specificTag) {
     const params = new URLSearchParams();
-    if (page !== undefined) params.append("page", page.toString());
-    if (limit !== undefined) params.append("limit", limit.toString());
-    if (specificTag !== undefined) params.append("specificTag", specificTag);
+    if (page !== void 0) params.append("page", page.toString());
+    if (limit !== void 0) params.append("limit", limit.toString());
+    if (specificTag !== void 0) params.append("specificTag", specificTag);
     params.append("onlyActiveTags", "true");
     return this.fetchFromQuay(
       `/api/v1/repository/${org}/${repo}/tag?${params.toString()}`,

package/dist/services/QuayService.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"QuayService.cjs.js","sources":["../../src/services/QuayService.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { Config } from '@backstage/config';\n\nimport { QUAY_SINGLE_INSTANCE_NAME } from '@backstage-community/plugin-quay-common';\n\nimport {\n  LabelsResponse,\n  ManifestByDigestResponse,\n  SecurityDetailsResponse,\n  TagsResponse,\n} from '../types';\n\nexport interface QuayService {\n  getQuayInstance(instanceName?: string): QuayInstance | undefined;\n  getTags(\n    instanceName: string,\n    org: string,\n    repo: string,\n    page?: number,\n    limit?: number,\n  ): Promise<TagsResponse>;\n  getLabels(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ): Promise<LabelsResponse>;\n  getManifestByDigest(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ): Promise<ManifestByDigestResponse>;\n  getSecurityDetails(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ): Promise<SecurityDetailsResponse>;\n}\n\nexport type QuayInstance = {\n  name: string;\n  apiUrl: string;\n  token: string | undefined;\n};\n\nexport class QuayService {\n  private readonly logger: LoggerService;\n  private readonly instances: Map<string, QuayInstance>;\n  private readonly defaultInstanceName: string;\n\n  constructor(instances: QuayInstance[], logger: LoggerService) {\n    if (instances.length === 0) {\n      throw new Error('At least one Quay instance must be configured');\n    }\n\n    this.instances = new Map(\n      instances.map(instance => [instance.name, instance]),\n    );\n    this.defaultInstanceName = instances[0].name;\n    this.logger = logger;\n  }\n\n  static fromConfig(config: Config, logger: LoggerService): QuayService {\n    const quayConfig = config.getConfig('quay');\n\n    // Multiple instances configuration\n    if (quayConfig.has('instances')) {\n      const instancesConfig = quayConfig.getConfigArray('instances');\n      const instances = instancesConfig.map(instanceConfig => ({\n        name: instanceConfig.getString('name'),\n        apiUrl: instanceConfig.getString('apiUrl'),\n        token: instanceConfig.getOptionalString('apiKey'),\n      }));\n      return new QuayService(instances, logger);\n    }\n\n    // Single instance configuration\n    return new QuayService(\n      [\n        {\n          name: QUAY_SINGLE_INSTANCE_NAME,\n          apiUrl: quayConfig.getString('apiUrl'),\n          token: quayConfig.getOptionalString('apiKey'),\n        },\n      ],\n      logger,\n    );\n  }\n\n  public getQuayInstance(instanceName?: string): QuayInstance | undefined {\n    return instanceName\n      ? this.instances.get(instanceName)\n      : this.instances.get(this.defaultInstanceName);\n  }\n\n  private async fetchFromQuay(\n    endpoint: string,\n    instanceName: string,\n  ): Promise<any> {\n    const instance = this.getQuayInstance(instanceName);\n    if (!instance) {\n      throw new Error(\n        `Quay instance \"${instanceName}\" not found in configuration.`,\n      );\n    }\n\n    const url = `${instance.apiUrl}${endpoint}`;\n\n    try {\n      const response = await fetch(url, {\n        headers: {\n          'Content-Type': 'application/json',\n          ...(instance.token\n            ? { Authorization: `Bearer ${instance.token}` }\n            : {}),\n        },\n      });\n\n      if (!response.ok) {\n        this.logger.error(\n          `Quay Service request failed: (${response.status}, ${response.statusText})`,\n        );\n\n        // Check if this is an access issue.\n        if (response?.status === 401) {\n          throw new Error(\n            `Quay returned (${response.status}, ${response.statusText}): Please make sure you have access to this repository or have valid access tokens.`,\n          );\n        }\n\n        throw new Error(`Failed to fetch data: ${response.statusText}`);\n      }\n\n      return await response.json();\n    } catch (error) {\n      throw new Error(`Quay Service request failed: ${error}`);\n    }\n  }\n\n  async getTags(\n    instanceName: string,\n    org: string,\n    repo: string,\n    page?: number,\n    limit?: number,\n    specificTag?: string,\n  ) {\n    const params = new URLSearchParams();\n    if (page !== undefined) params.append('page', page.toString());\n    if (limit !== undefined) params.append('limit', limit.toString());\n    if (specificTag !== undefined) params.append('specificTag', specificTag);\n\n    // We only want active tags\n    params.append('onlyActiveTags', 'true');\n\n    return this.fetchFromQuay(\n      `/api/v1/repository/${org}/${repo}/tag?${params.toString()}`,\n      instanceName,\n    ) as Promise<TagsResponse>;\n  }\n\n  async getLabels(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ) {\n    return this.fetchFromQuay(\n      `/api/v1/repository/${org}/${repo}/manifest/${digest}/labels`,\n      instanceName,\n    ) as Promise<LabelsResponse>;\n  }\n\n  async getManifestByDigest(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ) {\n    return this.fetchFromQuay(\n      `/api/v1/repository/${org}/${repo}/manifest/${digest}`,\n      instanceName,\n    ) as Promise<ManifestByDigestResponse>;\n  }\n\n  async getSecurityDetails(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ) {\n    const params = new URLSearchParams();\n    params.append('vulnerabilities', 'true');\n\n    return this.fetchFromQuay(\n      `/api/v1/repository/${org}/${repo}/manifest/${digest}/security?${params}`,\n      instanceName,\n    ) as Promise<SecurityDetailsResponse>;\n  }\n}\n"],"names":["QUAY_SINGLE_INSTANCE_NAME"],"mappings":";;;;AA8DO,MAAM,WAAY,CAAA;AAAA,EACN,MAAA;AAAA,EACA,SAAA;AAAA,EACA,mBAAA;AAAA,EAEjB,WAAA,CAAY,WAA2B,MAAuB,EAAA;AAC5D,IAAI,IAAA,SAAA,CAAU,WAAW,CAAG,EAAA;AAC1B,MAAM,MAAA,IAAI,MAAM,+CAA+C,CAAA;AAAA;AAGjE,IAAA,IAAA,CAAK,YAAY,IAAI,GAAA;AAAA,MACnB,UAAU,GAAI,CAAA,CAAA,QAAA,KAAY,CAAC,QAAS,CAAA,IAAA,EAAM,QAAQ,CAAC;AAAA,KACrD;AACA,IAAK,IAAA,CAAA,mBAAA,GAAsB,SAAU,CAAA,CAAC,CAAE,CAAA,IAAA;AACxC,IAAA,IAAA,CAAK,MAAS,GAAA,MAAA;AAAA;AAChB,EAEA,OAAO,UAAW,CAAA,MAAA,EAAgB,MAAoC,EAAA;AACpE,IAAM,MAAA,UAAA,GAAa,MAAO,CAAA,SAAA,CAAU,MAAM,CAAA;AAG1C,IAAI,IAAA,UAAA,CAAW,GAAI,CAAA,WAAW,CAAG,EAAA;AAC/B,MAAM,MAAA,eAAA,GAAkB,UAAW,CAAA,cAAA,CAAe,WAAW,CAAA;AAC7D,MAAM,MAAA,SAAA,GAAY,eAAgB,CAAA,GAAA,CAAI,CAAmB,cAAA,MAAA;AAAA,QACvD,IAAA,EAAM,cAAe,CAAA,SAAA,CAAU,MAAM,CAAA;AAAA,QACrC,MAAA,EAAQ,cAAe,CAAA,SAAA,CAAU,QAAQ,CAAA;AAAA,QACzC,KAAA,EAAO,cAAe,CAAA,iBAAA,CAAkB,QAAQ;AAAA,OAChD,CAAA,CAAA;AACF,MAAO,OAAA,IAAI,WAAY,CAAA,SAAA,EAAW,MAAM,CAAA;AAAA;AAI1C,IAAA,OAAO,IAAI,WAAA;AAAA,MACT;AAAA,QACE;AAAA,UACE,IAAM,EAAAA,0CAAA;AAAA,UACN,MAAA,EAAQ,UAAW,CAAA,SAAA,CAAU,QAAQ,CAAA;AAAA,UACrC,KAAA,EAAO,UAAW,CAAA,iBAAA,CAAkB,QAAQ;AAAA;AAC9C,OACF;AAAA,MACA;AAAA,KACF;AAAA;AACF,EAEO,gBAAgB,YAAiD,EAAA;AACtE,IAAO,OAAA,YAAA,GACH,IAAK,CAAA,SAAA,CAAU,GAAI,CAAA,YAAY,IAC/B,IAAK,CAAA,SAAA,CAAU,GAAI,CAAA,IAAA,CAAK,mBAAmB,CAAA;AAAA;AACjD,EAEA,MAAc,aACZ,CAAA,QAAA,EACA,YACc,EAAA;AACd,IAAM,MAAA,QAAA,GAAW,IAAK,CAAA,eAAA,CAAgB,YAAY,CAAA;AAClD,IAAA,IAAI,CAAC,QAAU,EAAA;AACb,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,kBAAkB,YAAY,CAAA,6BAAA;AAAA,OAChC;AAAA;AAGF,IAAA,MAAM,GAAM,GAAA,CAAA,EAAG,QAAS,CAAA,MAAM,GAAG,QAAQ,CAAA,CAAA;AAEzC,IAAI,IAAA;AACF,MAAM,MAAA,QAAA,GAAW,MAAM,KAAA,CAAM,GAAK,EAAA;AAAA,QAChC,OAAS,EAAA;AAAA,UACP,cAAgB,EAAA,kBAAA;AAAA,UAChB,GAAI,QAAS,CAAA,KAAA,GACT,EAAE,aAAA,EAAe,UAAU,QAAS,CAAA,KAAK,CAAG,CAAA,EAAA,GAC5C;AAAC;AACP,OACD,CAAA;AAED,MAAI,IAAA,CAAC,SAAS,EAAI,EAAA;AAChB,QAAA,IAAA,CAAK,MAAO,CAAA,KAAA;AAAA,UACV,CAAiC,8BAAA,EAAA,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,CAAA;AAAA,SAC1E;AAGA,QAAI,IAAA,QAAA,EAAU,WAAW,GAAK,EAAA;AAC5B,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAkB,eAAA,EAAA,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,mFAAA;AAAA,WAC3D;AAAA;AAGF,QAAA,MAAM,IAAI,KAAA,CAAM,CAAyB,sBAAA,EAAA,QAAA,CAAS,UAAU,CAAE,CAAA,CAAA;AAAA;AAGhE,MAAO,OAAA,MAAM,SAAS,IAAK,EAAA;AAAA,aACpB,KAAO,EAAA;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,CAAgC,6BAAA,EAAA,KAAK,CAAE,CAAA,CAAA;AAAA;AACzD;AACF,EAEA,MAAM,OACJ,CAAA,YAAA,EACA,KACA,IACA,EAAA,IAAA,EACA,OACA,WACA,EAAA;AACA,IAAM,MAAA,MAAA,GAAS,IAAI,eAAgB,EAAA;AACnC,IAAA,IAAI,SAAS,SAAW,EAAA,MAAA,CAAO,OAAO,MAAQ,EAAA,IAAA,CAAK,UAAU,CAAA;AAC7D,IAAA,IAAI,UAAU,SAAW,EAAA,MAAA,CAAO,OAAO,OAAS,EAAA,KAAA,CAAM,UAAU,CAAA;AAChE,IAAA,IAAI,WAAgB,KAAA,SAAA,EAAkB,MAAA,CAAA,MAAA,CAAO,eAAe,WAAW,CAAA;AAGvE,IAAO,MAAA,CAAA,MAAA,CAAO,kBAAkB,MAAM,CAAA;AAEtC,IAAA,OAAO,IAAK,CAAA,aAAA;AAAA,MACV,sBAAsB,GAAG,CAAA,CAAA,EAAI,IAAI,CAAQ,KAAA,EAAA,MAAA,CAAO,UAAU,CAAA,CAAA;AAAA,MAC1D;AAAA,KACF;AAAA;AACF,EAEA,MAAM,SAAA,CACJ,YACA,EAAA,GAAA,EACA,MACA,MACA,EAAA;AACA,IAAA,OAAO,IAAK,CAAA,aAAA;AAAA,MACV,CAAsB,mBAAA,EAAA,GAAG,CAAI,CAAA,EAAA,IAAI,aAAa,MAAM,CAAA,OAAA,CAAA;AAAA,MACpD;AAAA,KACF;AAAA;AACF,EAEA,MAAM,mBAAA,CACJ,YACA,EAAA,GAAA,EACA,MACA,MACA,EAAA;AACA,IAAA,OAAO,IAAK,CAAA,aAAA;AAAA,MACV,CAAsB,mBAAA,EAAA,GAAG,CAAI,CAAA,EAAA,IAAI,aAAa,MAAM,CAAA,CAAA;AAAA,MACpD;AAAA,KACF;AAAA;AACF,EAEA,MAAM,kBAAA,CACJ,YACA,EAAA,GAAA,EACA,MACA,MACA,EAAA;AACA,IAAM,MAAA,MAAA,GAAS,IAAI,eAAgB,EAAA;AACnC,IAAO,MAAA,CAAA,MAAA,CAAO,mBAAmB,MAAM,CAAA;AAEvC,IAAA,OAAO,IAAK,CAAA,aAAA;AAAA,MACV,sBAAsB,GAAG,CAAA,CAAA,EAAI,IAAI,CAAa,UAAA,EAAA,MAAM,aAAa,MAAM,CAAA,CAAA;AAAA,MACvE;AAAA,KACF;AAAA;AAEJ;;;;"}
+{"version":3,"file":"QuayService.cjs.js","sources":["../../src/services/QuayService.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { Config } from '@backstage/config';\n\nimport { QUAY_SINGLE_INSTANCE_NAME } from '@backstage-community/plugin-quay-common';\n\nimport {\n  LabelsResponse,\n  ManifestByDigestResponse,\n  SecurityDetailsResponse,\n  TagsResponse,\n} from '../types';\n\nexport interface QuayService {\n  getQuayInstance(instanceName?: string): QuayInstance | undefined;\n  getTags(\n    instanceName: string,\n    org: string,\n    repo: string,\n    page?: number,\n    limit?: number,\n  ): Promise<TagsResponse>;\n  getLabels(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ): Promise<LabelsResponse>;\n  getManifestByDigest(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ): Promise<ManifestByDigestResponse>;\n  getSecurityDetails(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ): Promise<SecurityDetailsResponse>;\n}\n\nexport type QuayInstance = {\n  name: string;\n  apiUrl: string;\n  token: string | undefined;\n};\n\nexport class QuayService {\n  private readonly logger: LoggerService;\n  private readonly instances: Map<string, QuayInstance>;\n  private readonly defaultInstanceName: string;\n\n  constructor(instances: QuayInstance[], logger: LoggerService) {\n    if (instances.length === 0) {\n      throw new Error('At least one Quay instance must be configured');\n    }\n\n    this.instances = new Map(\n      instances.map(instance => [instance.name, instance]),\n    );\n    this.defaultInstanceName = instances[0].name;\n    this.logger = logger;\n  }\n\n  static fromConfig(config: Config, logger: LoggerService): QuayService {\n    const quayConfig = config.getConfig('quay');\n\n    // Multiple instances configuration\n    if (quayConfig.has('instances')) {\n      const instancesConfig = quayConfig.getConfigArray('instances');\n      const instances = instancesConfig.map(instanceConfig => ({\n        name: instanceConfig.getString('name'),\n        apiUrl: instanceConfig.getString('apiUrl'),\n        token: instanceConfig.getOptionalString('apiKey'),\n      }));\n      return new QuayService(instances, logger);\n    }\n\n    // Single instance configuration\n    return new QuayService(\n      [\n        {\n          name: QUAY_SINGLE_INSTANCE_NAME,\n          apiUrl: quayConfig.getString('apiUrl'),\n          token: quayConfig.getOptionalString('apiKey'),\n        },\n      ],\n      logger,\n    );\n  }\n\n  public getQuayInstance(instanceName?: string): QuayInstance | undefined {\n    return instanceName\n      ? this.instances.get(instanceName)\n      : this.instances.get(this.defaultInstanceName);\n  }\n\n  private async fetchFromQuay(\n    endpoint: string,\n    instanceName: string,\n  ): Promise<any> {\n    const instance = this.getQuayInstance(instanceName);\n    if (!instance) {\n      throw new Error(\n        `Quay instance \"${instanceName}\" not found in configuration.`,\n      );\n    }\n\n    const url = `${instance.apiUrl}${endpoint}`;\n\n    try {\n      const response = await fetch(url, {\n        headers: {\n          'Content-Type': 'application/json',\n          ...(instance.token\n            ? { Authorization: `Bearer ${instance.token}` }\n            : {}),\n        },\n      });\n\n      if (!response.ok) {\n        this.logger.error(\n          `Quay Service request failed: (${response.status}, ${response.statusText})`,\n        );\n\n        // Check if this is an access issue.\n        if (response?.status === 401) {\n          throw new Error(\n            `Quay returned (${response.status}, ${response.statusText}): Please make sure you have access to this repository or have valid access tokens.`,\n          );\n        }\n\n        throw new Error(`Failed to fetch data: ${response.statusText}`);\n      }\n\n      return await response.json();\n    } catch (error) {\n      throw new Error(`Quay Service request failed: ${error}`);\n    }\n  }\n\n  async getTags(\n    instanceName: string,\n    org: string,\n    repo: string,\n    page?: number,\n    limit?: number,\n    specificTag?: string,\n  ) {\n    const params = new URLSearchParams();\n    if (page !== undefined) params.append('page', page.toString());\n    if (limit !== undefined) params.append('limit', limit.toString());\n    if (specificTag !== undefined) params.append('specificTag', specificTag);\n\n    // We only want active tags\n    params.append('onlyActiveTags', 'true');\n\n    return this.fetchFromQuay(\n      `/api/v1/repository/${org}/${repo}/tag?${params.toString()}`,\n      instanceName,\n    ) as Promise<TagsResponse>;\n  }\n\n  async getLabels(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ) {\n    return this.fetchFromQuay(\n      `/api/v1/repository/${org}/${repo}/manifest/${digest}/labels`,\n      instanceName,\n    ) as Promise<LabelsResponse>;\n  }\n\n  async getManifestByDigest(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ) {\n    return this.fetchFromQuay(\n      `/api/v1/repository/${org}/${repo}/manifest/${digest}`,\n      instanceName,\n    ) as Promise<ManifestByDigestResponse>;\n  }\n\n  async getSecurityDetails(\n    instanceName: string,\n    org: string,\n    repo: string,\n    digest: string,\n  ) {\n    const params = new URLSearchParams();\n    params.append('vulnerabilities', 'true');\n\n    return this.fetchFromQuay(\n      `/api/v1/repository/${org}/${repo}/manifest/${digest}/security?${params}`,\n      instanceName,\n    ) as Promise<SecurityDetailsResponse>;\n  }\n}\n"],"names":["QUAY_SINGLE_INSTANCE_NAME"],"mappings":";;;;AA8DO,MAAM,WAAA,CAAY;AAAA,EACN,MAAA;AAAA,EACA,SAAA;AAAA,EACA,mBAAA;AAAA,EAEjB,WAAA,CAAY,WAA2B,MAAA,EAAuB;AAC5D,IAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,MAAA,MAAM,IAAI,MAAM,+CAA+C,CAAA;AAAA,IACjE;AAEA,IAAA,IAAA,CAAK,YAAY,IAAI,GAAA;AAAA,MACnB,UAAU,GAAA,CAAI,CAAA,QAAA,KAAY,CAAC,QAAA,CAAS,IAAA,EAAM,QAAQ,CAAC;AAAA,KACrD;AACA,IAAA,IAAA,CAAK,mBAAA,GAAsB,SAAA,CAAU,CAAC,CAAA,CAAE,IAAA;AACxC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EAEA,OAAO,UAAA,CAAW,MAAA,EAAgB,MAAA,EAAoC;AACpE,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA;AAG1C,IAAA,IAAI,UAAA,CAAW,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/B,MAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,cAAA,CAAe,WAAW,CAAA;AAC7D,MAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,GAAA,CAAI,CAAA,cAAA,MAAmB;AAAA,QACvD,IAAA,EAAM,cAAA,CAAe,SAAA,CAAU,MAAM,CAAA;AAAA,QACrC,MAAA,EAAQ,cAAA,CAAe,SAAA,CAAU,QAAQ,CAAA;AAAA,QACzC,KAAA,EAAO,cAAA,CAAe,iBAAA,CAAkB,QAAQ;AAAA,OAClD,CAAE,CAAA;AACF,MAAA,OAAO,IAAI,WAAA,CAAY,SAAA,EAAW,MAAM,CAAA;AAAA,IAC1C;AAGA,IAAA,OAAO,IAAI,WAAA;AAAA,MACT;AAAA,QACE;AAAA,UACE,IAAA,EAAMA,0CAAA;AAAA,UACN,MAAA,EAAQ,UAAA,CAAW,SAAA,CAAU,QAAQ,CAAA;AAAA,UACrC,KAAA,EAAO,UAAA,CAAW,iBAAA,CAAkB,QAAQ;AAAA;AAC9C,OACF;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEO,gBAAgB,YAAA,EAAiD;AACtE,IAAA,OAAO,YAAA,GACH,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,YAAY,IAC/B,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,IAAA,CAAK,mBAAmB,CAAA;AAAA,EACjD;AAAA,EAEA,MAAc,aAAA,CACZ,QAAA,EACA,YAAA,EACc;AACd,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,eAAA,CAAgB,YAAY,CAAA;AAClD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,kBAAkB,YAAY,CAAA,6BAAA;AAAA,OAChC;AAAA,IACF;AAEA,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,QAAA,CAAS,MAAM,GAAG,QAAQ,CAAA,CAAA;AAEzC,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAChC,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,GAAI,QAAA,CAAS,KAAA,GACT,EAAE,aAAA,EAAe,UAAU,QAAA,CAAS,KAAK,CAAA,CAAA,EAAG,GAC5C;AAAC;AACP,OACD,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,UACV,CAAA,8BAAA,EAAiC,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,CAAA;AAAA,SAC1E;AAGA,QAAA,IAAI,QAAA,EAAU,WAAW,GAAA,EAAK;AAC5B,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAA,eAAA,EAAkB,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,mFAAA;AAAA,WAC3D;AAAA,QACF;AAEA,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MAChE;AAEA,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,KAAK,CAAA,CAAE,CAAA;AAAA,IACzD;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,CACJ,YAAA,EACA,KACA,IAAA,EACA,IAAA,EACA,OACA,WAAA,EACA;AACA,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,IAAA,IAAI,SAAS,MAAA,EAAW,MAAA,CAAO,OAAO,MAAA,EAAQ,IAAA,CAAK,UAAU,CAAA;AAC7D,IAAA,IAAI,UAAU,MAAA,EAAW,MAAA,CAAO,OAAO,OAAA,EAAS,KAAA,CAAM,UAAU,CAAA;AAChE,IAAA,IAAI,WAAA,KAAgB,MAAA,EAAW,MAAA,CAAO,MAAA,CAAO,eAAe,WAAW,CAAA;AAGvE,IAAA,MAAA,CAAO,MAAA,CAAO,kBAAkB,MAAM,CAAA;AAEtC,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,MACV,sBAAsB,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,KAAA,EAAQ,MAAA,CAAO,UAAU,CAAA,CAAA;AAAA,MAC1D;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,SAAA,CACJ,YAAA,EACA,GAAA,EACA,MACA,MAAA,EACA;AACA,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,MACV,CAAA,mBAAA,EAAsB,GAAG,CAAA,CAAA,EAAI,IAAI,aAAa,MAAM,CAAA,OAAA,CAAA;AAAA,MACpD;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CACJ,YAAA,EACA,GAAA,EACA,MACA,MAAA,EACA;AACA,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,MACV,CAAA,mBAAA,EAAsB,GAAG,CAAA,CAAA,EAAI,IAAI,aAAa,MAAM,CAAA,CAAA;AAAA,MACpD;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,kBAAA,CACJ,YAAA,EACA,GAAA,EACA,MACA,MAAA,EACA;AACA,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,IAAA,MAAA,CAAO,MAAA,CAAO,mBAAmB,MAAM,CAAA;AAEvC,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,MACV,sBAAsB,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,UAAA,EAAa,MAAM,aAAa,MAAM,CAAA,CAAA;AAAA,MACvE;AAAA,KACF;AAAA,EACF;AACF;;;;"}

package/dist/services/router.cjs.js

@@ -48,7 +48,7 @@ async function createRouter(options) {
   const checkInstanceIsConfigured = async (req, res, next) => {
     const { instanceName } = req.params;
     const instanceConfig = quayService.getQuayInstance(instanceName);
-    if (instanceConfig === undefined) {
+    if (instanceConfig === void 0) {
       res.status(404).json({
         error: `Quay instance "${instanceName}" not found in configuration.`
       });
@@ -64,8 +64,8 @@ async function createRouter(options) {
       instanceName,
       org,
       repo,
-      page ? Number(page) : undefined,
-      limit ? Number(limit) : undefined
+      page ? Number(page) : void 0,
+      limit ? Number(limit) : void 0
     );
     res.status(200).json(tags);
   });

package/dist/services/router.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.cjs.js","sources":["../../src/services/router.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  HttpAuthService,\n  LoggerService,\n  PermissionsService,\n  RootConfigService,\n} from '@backstage/backend-plugin-api';\nimport { AuthorizeResult } from '@backstage/plugin-permission-common';\n\nimport express from 'express';\nimport Router from 'express-promise-router';\n\nimport { quayViewPermission } from '@backstage-community/plugin-quay-common';\n\nimport { QuayService } from './QuayService';\n\nexport interface RouterOptions {\n  quayService?: QuayService;\n  logger: LoggerService;\n  config: RootConfigService;\n  permissions: PermissionsService;\n  httpAuth: HttpAuthService;\n}\n\nexport async function createRouter(\n  options: RouterOptions,\n): Promise<express.Router> {\n  const { logger, config, permissions, httpAuth } = options;\n\n  if (!config) {\n    throw new Error('Missing configuration for Quay plugin');\n  }\n\n  const quayService =\n    options.quayService ?? QuayService.fromConfig(config, logger);\n\n  const router = Router();\n  router.use(express.json());\n\n  // Add permission middleware\n  const checkPermission = async (\n    req: express.Request,\n    res: express.Response,\n    next: express.NextFunction,\n  ): Promise<void> => {\n    try {\n      const credentials = await httpAuth.credentials(req);\n      const decision = (\n        await permissions.authorize([{ permission: quayViewPermission }], {\n          credentials,\n        })\n      )[0];\n\n      if (decision.result === AuthorizeResult.DENY) {\n        res.status(403).json({\n          error:\n            'Unauthorized, please ensure you have the correct permissions.',\n        });\n      }\n      return next();\n    } catch (error) {\n      return next(error);\n    }\n  };\n\n  router.use('/:instanceName/repository', checkPermission);\n\n  const validateParams = (\n    req: express.Request,\n    res: express.Response,\n    next: express.NextFunction,\n  ): void => {\n    const { instanceName, org, repo } = req.params;\n    if (!instanceName?.trim() || !org?.trim() || !repo?.trim()) {\n      res.status(400).json({ error: 'Missing required parameters' });\n      return;\n    }\n    next();\n  };\n\n  router.use('/:instanceName/repository/:org/:repo', validateParams);\n\n  const checkInstanceIsConfigured = async (\n    req: express.Request,\n    res: express.Response,\n    next: express.NextFunction,\n  ): Promise<void> => {\n    const { instanceName } = req.params;\n    const instanceConfig = quayService.getQuayInstance(instanceName);\n    if (instanceConfig === undefined) {\n      res.status(404).json({\n        error: `Quay instance \"${instanceName}\" not found in configuration.`,\n      });\n      return;\n    }\n    next();\n  };\n\n  router.use('/:instanceName', checkInstanceIsConfigured);\n\n  router.get('/:instanceName/repository/:org/:repo/tag', async (req, res) => {\n    const { instanceName, org, repo } = req.params;\n    const { page, limit } = req.query;\n\n    const tags = await quayService.getTags(\n      instanceName,\n      org,\n      repo,\n      page ? Number(page) : undefined,\n      limit ? Number(limit) : undefined,\n    );\n\n    res.status(200).json(tags);\n  });\n\n  router.get(\n    '/:instanceName/repository/:org/:repo/manifest/:digest/labels',\n    async (req, res) => {\n      const { instanceName, org, repo, digest } = req.params;\n\n      const labels = await quayService.getLabels(\n        instanceName,\n        org,\n        repo,\n        digest,\n      );\n\n      res.status(200).json(labels);\n    },\n  );\n\n  router.get(\n    '/:instanceName/repository/:org/:repo/manifest/:digest/security',\n    async (req, res) => {\n      const { instanceName, org, repo, digest } = req.params;\n\n      const securityDetails = await quayService.getSecurityDetails(\n        instanceName,\n        org,\n        repo,\n        digest,\n      );\n\n      res.status(200).json(securityDetails);\n    },\n  );\n\n  router.get(\n    '/:instanceName/repository/:org/:repo/manifest/:digest',\n    async (req, res) => {\n      const { instanceName, org, repo, digest } = req.params;\n\n      const manifest = await quayService.getManifestByDigest(\n        instanceName,\n        org,\n        repo,\n        digest,\n      );\n\n      res.status(200).json(manifest);\n    },\n  );\n\n  return router;\n}\n"],"names":["QuayService","Router","express","quayViewPermission","AuthorizeResult"],"mappings":";;;;;;;;;;;;;AAsCA,eAAsB,aACpB,OACyB,EAAA;AACzB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAQ,EAAA,WAAA,EAAa,UAAa,GAAA,OAAA;AAElD,EAAA,IAAI,CAAC,MAAQ,EAAA;AACX,IAAM,MAAA,IAAI,MAAM,uCAAuC,CAAA;AAAA;AAGzD,EAAA,MAAM,cACJ,OAAQ,CAAA,WAAA,IAAeA,uBAAY,CAAA,UAAA,CAAW,QAAQ,MAAM,CAAA;AAE9D,EAAA,MAAM,SAASC,uBAAO,EAAA;AACtB,EAAO,MAAA,CAAA,GAAA,CAAIC,wBAAQ,CAAA,IAAA,EAAM,CAAA;AAGzB,EAAA,MAAM,eAAkB,GAAA,OACtB,GACA,EAAA,GAAA,EACA,IACkB,KAAA;AAClB,IAAI,IAAA;AACF,MAAA,MAAM,WAAc,GAAA,MAAM,QAAS,CAAA,WAAA,CAAY,GAAG,CAAA;AAClD,MAAM,MAAA,QAAA,GAAA,CACJ,MAAM,WAAY,CAAA,SAAA,CAAU,CAAC,EAAE,UAAA,EAAYC,mCAAmB,EAAC,CAAG,EAAA;AAAA,QAChE;AAAA,OACD,GACD,CAAC,CAAA;AAEH,MAAI,IAAA,QAAA,CAAS,MAAW,KAAAC,sCAAA,CAAgB,IAAM,EAAA;AAC5C,QAAI,GAAA,CAAA,MAAA,CAAO,GAAG,CAAA,CAAE,IAAK,CAAA;AAAA,UACnB,KACE,EAAA;AAAA,SACH,CAAA;AAAA;AAEH,MAAA,OAAO,IAAK,EAAA;AAAA,aACL,KAAO,EAAA;AACd,MAAA,OAAO,KAAK,KAAK,CAAA;AAAA;AACnB,GACF;AAEA,EAAO,MAAA,CAAA,GAAA,CAAI,6BAA6B,eAAe,CAAA;AAEvD,EAAA,MAAM,cAAiB,GAAA,CACrB,GACA,EAAA,GAAA,EACA,IACS,KAAA;AACT,IAAA,MAAM,EAAE,YAAA,EAAc,GAAK,EAAA,IAAA,KAAS,GAAI,CAAA,MAAA;AACxC,IAAI,IAAA,CAAC,YAAc,EAAA,IAAA,EAAU,IAAA,CAAC,GAAK,EAAA,IAAA,EAAU,IAAA,CAAC,IAAM,EAAA,IAAA,EAAQ,EAAA;AAC1D,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,+BAA+B,CAAA;AAC7D,MAAA;AAAA;AAEF,IAAK,IAAA,EAAA;AAAA,GACP;AAEA,EAAO,MAAA,CAAA,GAAA,CAAI,wCAAwC,cAAc,CAAA;AAEjE,EAAA,MAAM,yBAA4B,GAAA,OAChC,GACA,EAAA,GAAA,EACA,IACkB,KAAA;AAClB,IAAM,MAAA,EAAE,YAAa,EAAA,GAAI,GAAI,CAAA,MAAA;AAC7B,IAAM,MAAA,cAAA,GAAiB,WAAY,CAAA,eAAA,CAAgB,YAAY,CAAA;AAC/D,IAAA,IAAI,mBAAmB,SAAW,EAAA;AAChC,MAAI,GAAA,CAAA,MAAA,CAAO,GAAG,CAAA,CAAE,IAAK,CAAA;AAAA,QACnB,KAAA,EAAO,kBAAkB,YAAY,CAAA,6BAAA;AAAA,OACtC,CAAA;AACD,MAAA;AAAA;AAEF,IAAK,IAAA,EAAA;AAAA,GACP;AAEA,EAAO,MAAA,CAAA,GAAA,CAAI,kBAAkB,yBAAyB,CAAA;AAEtD,EAAA,MAAA,CAAO,GAAI,CAAA,0CAAA,EAA4C,OAAO,GAAA,EAAK,GAAQ,KAAA;AACzE,IAAA,MAAM,EAAE,YAAA,EAAc,GAAK,EAAA,IAAA,KAAS,GAAI,CAAA,MAAA;AACxC,IAAA,MAAM,EAAE,IAAA,EAAM,KAAM,EAAA,GAAI,GAAI,CAAA,KAAA;AAE5B,IAAM,MAAA,IAAA,GAAO,MAAM,WAAY,CAAA,OAAA;AAAA,MAC7B,YAAA;AAAA,MACA,GAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA,GAAO,MAAO,CAAA,IAAI,CAAI,GAAA,SAAA;AAAA,MACtB,KAAA,GAAQ,MAAO,CAAA,KAAK,CAAI,GAAA;AAAA,KAC1B;AAEA,IAAA,GAAA,CAAI,MAAO,CAAA,GAAG,CAAE,CAAA,IAAA,CAAK,IAAI,CAAA;AAAA,GAC1B,CAAA;AAED,EAAO,MAAA,CAAA,GAAA;AAAA,IACL,8DAAA;AAAA,IACA,OAAO,KAAK,GAAQ,KAAA;AAClB,MAAA,MAAM,EAAE,YAAc,EAAA,GAAA,EAAK,IAAM,EAAA,MAAA,KAAW,GAAI,CAAA,MAAA;AAEhD,MAAM,MAAA,MAAA,GAAS,MAAM,WAAY,CAAA,SAAA;AAAA,QAC/B,YAAA;AAAA,QACA,GAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,MAAO,CAAA,GAAG,CAAE,CAAA,IAAA,CAAK,MAAM,CAAA;AAAA;AAC7B,GACF;AAEA,EAAO,MAAA,CAAA,GAAA;AAAA,IACL,gEAAA;AAAA,IACA,OAAO,KAAK,GAAQ,KAAA;AAClB,MAAA,MAAM,EAAE,YAAc,EAAA,GAAA,EAAK,IAAM,EAAA,MAAA,KAAW,GAAI,CAAA,MAAA;AAEhD,MAAM,MAAA,eAAA,GAAkB,MAAM,WAAY,CAAA,kBAAA;AAAA,QACxC,YAAA;AAAA,QACA,GAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,MAAO,CAAA,GAAG,CAAE,CAAA,IAAA,CAAK,eAAe,CAAA;AAAA;AACtC,GACF;AAEA,EAAO,MAAA,CAAA,GAAA;AAAA,IACL,uDAAA;AAAA,IACA,OAAO,KAAK,GAAQ,KAAA;AAClB,MAAA,MAAM,EAAE,YAAc,EAAA,GAAA,EAAK,IAAM,EAAA,MAAA,KAAW,GAAI,CAAA,MAAA;AAEhD,MAAM,MAAA,QAAA,GAAW,MAAM,WAAY,CAAA,mBAAA;AAAA,QACjC,YAAA;AAAA,QACA,GAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,MAAO,CAAA,GAAG,CAAE,CAAA,IAAA,CAAK,QAAQ,CAAA;AAAA;AAC/B,GACF;AAEA,EAAO,OAAA,MAAA;AACT;;;;"}
+{"version":3,"file":"router.cjs.js","sources":["../../src/services/router.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  HttpAuthService,\n  LoggerService,\n  PermissionsService,\n  RootConfigService,\n} from '@backstage/backend-plugin-api';\nimport { AuthorizeResult } from '@backstage/plugin-permission-common';\n\nimport express from 'express';\nimport Router from 'express-promise-router';\n\nimport { quayViewPermission } from '@backstage-community/plugin-quay-common';\n\nimport { QuayService } from './QuayService';\n\nexport interface RouterOptions {\n  quayService?: QuayService;\n  logger: LoggerService;\n  config: RootConfigService;\n  permissions: PermissionsService;\n  httpAuth: HttpAuthService;\n}\n\nexport async function createRouter(\n  options: RouterOptions,\n): Promise<express.Router> {\n  const { logger, config, permissions, httpAuth } = options;\n\n  if (!config) {\n    throw new Error('Missing configuration for Quay plugin');\n  }\n\n  const quayService =\n    options.quayService ?? QuayService.fromConfig(config, logger);\n\n  const router = Router();\n  router.use(express.json());\n\n  // Add permission middleware\n  const checkPermission = async (\n    req: express.Request,\n    res: express.Response,\n    next: express.NextFunction,\n  ): Promise<void> => {\n    try {\n      const credentials = await httpAuth.credentials(req);\n      const decision = (\n        await permissions.authorize([{ permission: quayViewPermission }], {\n          credentials,\n        })\n      )[0];\n\n      if (decision.result === AuthorizeResult.DENY) {\n        res.status(403).json({\n          error:\n            'Unauthorized, please ensure you have the correct permissions.',\n        });\n      }\n      return next();\n    } catch (error) {\n      return next(error);\n    }\n  };\n\n  router.use('/:instanceName/repository', checkPermission);\n\n  const validateParams = (\n    req: express.Request,\n    res: express.Response,\n    next: express.NextFunction,\n  ): void => {\n    const { instanceName, org, repo } = req.params;\n    if (!instanceName?.trim() || !org?.trim() || !repo?.trim()) {\n      res.status(400).json({ error: 'Missing required parameters' });\n      return;\n    }\n    next();\n  };\n\n  router.use('/:instanceName/repository/:org/:repo', validateParams);\n\n  const checkInstanceIsConfigured = async (\n    req: express.Request,\n    res: express.Response,\n    next: express.NextFunction,\n  ): Promise<void> => {\n    const { instanceName } = req.params;\n    const instanceConfig = quayService.getQuayInstance(instanceName);\n    if (instanceConfig === undefined) {\n      res.status(404).json({\n        error: `Quay instance \"${instanceName}\" not found in configuration.`,\n      });\n      return;\n    }\n    next();\n  };\n\n  router.use('/:instanceName', checkInstanceIsConfigured);\n\n  router.get('/:instanceName/repository/:org/:repo/tag', async (req, res) => {\n    const { instanceName, org, repo } = req.params;\n    const { page, limit } = req.query;\n\n    const tags = await quayService.getTags(\n      instanceName,\n      org,\n      repo,\n      page ? Number(page) : undefined,\n      limit ? Number(limit) : undefined,\n    );\n\n    res.status(200).json(tags);\n  });\n\n  router.get(\n    '/:instanceName/repository/:org/:repo/manifest/:digest/labels',\n    async (req, res) => {\n      const { instanceName, org, repo, digest } = req.params;\n\n      const labels = await quayService.getLabels(\n        instanceName,\n        org,\n        repo,\n        digest,\n      );\n\n      res.status(200).json(labels);\n    },\n  );\n\n  router.get(\n    '/:instanceName/repository/:org/:repo/manifest/:digest/security',\n    async (req, res) => {\n      const { instanceName, org, repo, digest } = req.params;\n\n      const securityDetails = await quayService.getSecurityDetails(\n        instanceName,\n        org,\n        repo,\n        digest,\n      );\n\n      res.status(200).json(securityDetails);\n    },\n  );\n\n  router.get(\n    '/:instanceName/repository/:org/:repo/manifest/:digest',\n    async (req, res) => {\n      const { instanceName, org, repo, digest } = req.params;\n\n      const manifest = await quayService.getManifestByDigest(\n        instanceName,\n        org,\n        repo,\n        digest,\n      );\n\n      res.status(200).json(manifest);\n    },\n  );\n\n  return router;\n}\n"],"names":["QuayService","Router","express","quayViewPermission","AuthorizeResult"],"mappings":";;;;;;;;;;;;;AAsCA,eAAsB,aACpB,OAAA,EACyB;AACzB,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,WAAA,EAAa,UAAS,GAAI,OAAA;AAElD,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAAA,EACzD;AAEA,EAAA,MAAM,cACJ,OAAA,CAAQ,WAAA,IAAeA,uBAAA,CAAY,UAAA,CAAW,QAAQ,MAAM,CAAA;AAE9D,EAAA,MAAM,SAASC,uBAAA,EAAO;AACtB,EAAA,MAAA,CAAO,GAAA,CAAIC,wBAAA,CAAQ,IAAA,EAAM,CAAA;AAGzB,EAAA,MAAM,eAAA,GAAkB,OACtB,GAAA,EACA,GAAA,EACA,IAAA,KACkB;AAClB,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,MAAA,MAAM,QAAA,GAAA,CACJ,MAAM,WAAA,CAAY,SAAA,CAAU,CAAC,EAAE,UAAA,EAAYC,mCAAA,EAAoB,CAAA,EAAG;AAAA,QAChE;AAAA,OACD,GACD,CAAC,CAAA;AAEH,MAAA,IAAI,QAAA,CAAS,MAAA,KAAWC,sCAAA,CAAgB,IAAA,EAAM;AAC5C,QAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,UACnB,KAAA,EACE;AAAA,SACH,CAAA;AAAA,MACH;AACA,MAAA,OAAO,IAAA,EAAK;AAAA,IACd,SAAS,KAAA,EAAO;AACd,MAAA,OAAO,KAAK,KAAK,CAAA;AAAA,IACnB;AAAA,EACF,CAAA;AAEA,EAAA,MAAA,CAAO,GAAA,CAAI,6BAA6B,eAAe,CAAA;AAEvD,EAAA,MAAM,cAAA,GAAiB,CACrB,GAAA,EACA,GAAA,EACA,IAAA,KACS;AACT,IAAA,MAAM,EAAE,YAAA,EAAc,GAAA,EAAK,IAAA,KAAS,GAAA,CAAI,MAAA;AACxC,IAAA,IAAI,CAAC,YAAA,EAAc,IAAA,EAAK,IAAK,CAAC,GAAA,EAAK,IAAA,EAAK,IAAK,CAAC,IAAA,EAAM,IAAA,EAAK,EAAG;AAC1D,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,+BAA+B,CAAA;AAC7D,MAAA;AAAA,IACF;AACA,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AAEA,EAAA,MAAA,CAAO,GAAA,CAAI,wCAAwC,cAAc,CAAA;AAEjE,EAAA,MAAM,yBAAA,GAA4B,OAChC,GAAA,EACA,GAAA,EACA,IAAA,KACkB;AAClB,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,GAAA,CAAI,MAAA;AAC7B,IAAA,MAAM,cAAA,GAAiB,WAAA,CAAY,eAAA,CAAgB,YAAY,CAAA;AAC/D,IAAA,IAAI,mBAAmB,MAAA,EAAW;AAChC,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,KAAA,EAAO,kBAAkB,YAAY,CAAA,6BAAA;AAAA,OACtC,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AAEA,EAAA,MAAA,CAAO,GAAA,CAAI,kBAAkB,yBAAyB,CAAA;AAEtD,EAAA,MAAA,CAAO,GAAA,CAAI,0CAAA,EAA4C,OAAO,GAAA,EAAK,GAAA,KAAQ;AACzE,IAAA,MAAM,EAAE,YAAA,EAAc,GAAA,EAAK,IAAA,KAAS,GAAA,CAAI,MAAA;AACxC,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,GAAA,CAAI,KAAA;AAE5B,IAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,OAAA;AAAA,MAC7B,YAAA;AAAA,MACA,GAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA,GAAO,MAAA,CAAO,IAAI,CAAA,GAAI,MAAA;AAAA,MACtB,KAAA,GAAQ,MAAA,CAAO,KAAK,CAAA,GAAI;AAAA,KAC1B;AAEA,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AAAA,EAC3B,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,8DAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,EAAE,YAAA,EAAc,GAAA,EAAK,IAAA,EAAM,MAAA,KAAW,GAAA,CAAI,MAAA;AAEhD,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,SAAA;AAAA,QAC/B,YAAA;AAAA,QACA,GAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,MAAM,CAAA;AAAA,IAC7B;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,gEAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,EAAE,YAAA,EAAc,GAAA,EAAK,IAAA,EAAM,MAAA,KAAW,GAAA,CAAI,MAAA;AAEhD,MAAA,MAAM,eAAA,GAAkB,MAAM,WAAA,CAAY,kBAAA;AAAA,QACxC,YAAA;AAAA,QACA,GAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,eAAe,CAAA;AAAA,IACtC;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,uDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,EAAE,YAAA,EAAc,GAAA,EAAK,IAAA,EAAM,MAAA,KAAW,GAAA,CAAI,MAAA;AAEhD,MAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,mBAAA;AAAA,QACjC,YAAA;AAAA,QACA,GAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAA;AAAA,IAC/B;AAAA,GACF;AAEA,EAAA,OAAO,MAAA;AACT;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage-community/plugin-quay-backend",
-  "version": "1.14.0",
+  "version": "1.16.0",
   "main": "dist/index.cjs.js",
   "types": "dist/index.d.ts",
   "license": "Apache-2.0",
@@ -36,16 +36,16 @@
     "postpack": "backstage-cli package postpack"
   },
   "dependencies": {
-    "@backstage-community/plugin-quay-common": "^1.19.0",
-    "@backstage/backend-defaults": "^0.16.0",
-    "@backstage/backend-plugin-api": "^1.8.0",
-    "@backstage/config": "^1.3.6",
-    "@backstage/plugin-permission-common": "^0.9.7",
+    "@backstage-community/plugin-quay-common": "^1.21.0",
+    "@backstage/backend-defaults": "^0.17.1",
+    "@backstage/backend-plugin-api": "^1.9.1",
+    "@backstage/config": "^1.3.8",
+    "@backstage/plugin-permission-common": "^0.9.9",
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.36.0",
+    "@backstage/cli": "^0.36.2",
     "@types/express": "^4.17.6",
     "@types/supertest": "^7.0.0",
     "supertest": "^7.0.0"