@pnpm/network.fetch 1100.1.4 → 1100.1.6

package/lib/fetchFromRegistry.js

@@ -1,129 +0,0 @@
-import { URL } from 'node:url';
-import { getDispatcher } from './dispatcher.js';
-import { fetch, isRedirect } from './fetch.js';
-const USER_AGENT = 'pnpm'; // or maybe make it `${pkg.name}/${pkg.version} (+https://npm.im/${pkg.name})`
-const FULL_DOC = 'application/json';
-const ACCEPT_FULL_DOC = `${FULL_DOC}; q=1.0, */*`;
-const ABBREVIATED_DOC = 'application/vnd.npm.install-v1+json';
-const ACCEPT_ABBREVIATED_DOC = `${ABBREVIATED_DOC}; q=1.0, ${FULL_DOC}; q=0.8, */*`;
-const MAX_FOLLOWED_REDIRECTS = 20;
-export function fetchWithDispatcher(url, opts) {
-    const dispatcher = getDispatcher(url.toString(), {
-        ...opts.dispatcherOptions,
-        strictSsl: opts.dispatcherOptions.strictSsl ?? true,
-    });
-    return fetch(url, {
-        ...opts,
-        dispatcher,
-    });
-}
-/**
- * Returns a {@link fetch} pre-bound to the given dispatcher options, so callers
- * that need a fetch function (rather than a one-shot call) can route their
- * requests through the configured proxy / TLS / local-address settings.
- */
-export function createDispatchedFetch(opts) {
-    const dispatcherOptions = {
-        ...opts,
-        clientCertificates: opts.clientCertificates ?? extractTlsConfigs(opts.configByUri),
-    };
-    return (url, fetchOpts) => fetchWithDispatcher(url, { ...fetchOpts, dispatcherOptions });
-}
-export function createFetchFromRegistry(defaultOpts) {
-    const clientCertificates = extractTlsConfigs(defaultOpts.configByUri);
-    return async (url, opts) => {
-        const headers = {
-            'user-agent': USER_AGENT,
-            ...getHeaders({
-                auth: opts?.authHeaderValue,
-                fullMetadata: opts?.fullMetadata,
-                method: opts?.method,
-                userAgent: defaultOpts.userAgent,
-            }),
-        };
-        if (opts?.ifNoneMatch) {
-            headers['if-none-match'] = opts.ifNoneMatch;
-        }
-        if (opts?.ifModifiedSince) {
-            headers['if-modified-since'] = opts.ifModifiedSince;
-        }
-        // Merge caller-provided headers (e.g. content-type, npm-otp) on top
-        if (opts?.headers) {
-            const optsHeaders = opts.headers instanceof Headers
-                ? Object.fromEntries(opts.headers.entries())
-                : Array.isArray(opts.headers)
-                    ? Object.fromEntries(opts.headers)
-                    : opts.headers;
-            Object.assign(headers, optsHeaders);
-        }
-        let redirects = 0;
-        let urlObject = new URL(url);
-        const originalHost = urlObject.host;
-        /* eslint-disable no-await-in-loop */
-        while (true) {
-            const dispatcherOptions = {
-                ...defaultOpts,
-                ...opts,
-                strictSsl: defaultOpts.strictSsl ?? true,
-                clientCertificates,
-            };
-            const response = await fetchWithDispatcher(urlObject, {
-                dispatcherOptions,
-                body: opts?.body,
-                // if verifying integrity, native fetch must not decompress
-                headers,
-                method: opts?.method,
-                redirect: 'manual',
-                retry: opts?.retry,
-                timeout: opts?.timeout ?? 60000,
-            });
-            if (!isRedirect(response.status) || redirects >= MAX_FOLLOWED_REDIRECTS) {
-                return response;
-            }
-            redirects++;
-            // This is a workaround to remove authorization headers on redirect.
-            // Related pnpm issue: https://github.com/pnpm/pnpm/issues/1815
-            urlObject = resolveRedirectUrl(response, urlObject);
-            if (!headers['authorization'] || originalHost === urlObject.host)
-                continue;
-            delete headers.authorization;
-        }
-        /* eslint-enable no-await-in-loop */
-    };
-}
-function getHeaders(opts) {
-    const headers = {};
-    // The abbreviated/full-metadata Accept header is meaningful only on package
-    // metadata reads. Setting it on writes (PUT/POST/DELETE) breaks npmjs.org's
-    // dist-tag endpoint, which rejects the request with a generic 400.
-    if (!opts.method || opts.method === 'GET' || opts.method === 'HEAD') {
-        headers.accept = opts.fullMetadata === true ? ACCEPT_FULL_DOC : ACCEPT_ABBREVIATED_DOC;
-    }
-    if (opts.auth) {
-        headers['authorization'] = opts.auth;
-    }
-    if (opts.userAgent) {
-        headers['user-agent'] = opts.userAgent;
-    }
-    return headers;
-}
-function extractTlsConfigs(configByUri) {
-    if (!configByUri)
-        return undefined;
-    let result;
-    for (const [uri, config] of Object.entries(configByUri)) {
-        if (config.tls) {
-            result ??= {};
-            result[uri] = config.tls;
-        }
-    }
-    return result;
-}
-function resolveRedirectUrl(response, currentUrl) {
-    const location = response.headers.get('location');
-    if (!location) {
-        throw new Error(`Redirect location header missing for ${currentUrl.toString()}`);
-    }
-    return new URL(location, currentUrl);
-}
-//# sourceMappingURL=fetchFromRegistry.js.map

package/lib/index.d.ts

@@ -1,4 +0,0 @@
-export { clearDispatcherCache, destroyDispatchers, getDispatcher } from './dispatcher.js';
-export { fetch, isRedirect, type RetryTimeoutOptions } from './fetch.js';
-export { createDispatchedFetch, type CreateDispatchedFetchOptions, createFetchFromRegistry, type CreateFetchFromRegistryOptions, type DispatcherOptions, fetchWithDispatcher } from './fetchFromRegistry.js';
-export type { FetchFromRegistry } from '@pnpm/fetching.types';