@pnpm/registry-access.client 1100.1.15 → 1100.1.17

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @pnpm/registry-access.client
 
+## 1100.1.17
+
+### Patch Changes
+
+- `pnpm unpublish` now completes the two-factor authentication a registry asks for instead of failing with `ERR_PNPM_UNAUTHORIZED` while logged in. A 401 that is an OTP challenge starts the web-based authentication flow, or prompts for a classic one-time password. The obtained password is reused by every request of the run [#14464](https://github.com/pnpm/pnpm/issues/14464).
+
+- Updated dependencies:
+  - @pnpm/error@1100.1.4
+  - @pnpm/network.fetch@1100.1.15
+  - @pnpm/network.web-auth@1101.6.0
+
+## 1100.1.16
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/network.fetch@1100.1.14
+  - @pnpm/network.web-auth@1101.5.0
+
 ## 1100.1.15
 
 ### Patch Changes

package/lib/setDistTag.js

@@ -17,34 +17,14 @@ export async function setDistTag(opts) {
     if (response.ok)
         return;
     const body = await response.text();
+    const action = `set dist-tag "${opts.distTag}" on`;
     if (response.status === 401) {
-        throw parseAuthError(body, opts.distTag);
+        throw SyntheticOtpError.fromUnauthorizedBody(body) ??
+            new PnpmError('UNAUTHORIZED', `You must be logged in to ${action} packages. ${body}`);
     }
-    const action = `set dist-tag "${opts.distTag}" on`;
     if (response.status === 403) {
         throw new PnpmError('FORBIDDEN', `You do not have permission to ${action} this package. ${body}`);
     }
     throw new PnpmError('REGISTRY_ERROR', `Failed to ${action} package: ${response.status} ${response.statusText}. ${body}`);
 }
-function parseAuthError(body, distTag) {
-    const parsed = tryParseJson(body);
-    if (parsed != null && typeof parsed === 'object' && 'authUrl' in parsed && 'doneUrl' in parsed) {
-        return new SyntheticOtpError({
-            authUrl: typeof parsed.authUrl === 'string' ? parsed.authUrl : undefined,
-            doneUrl: typeof parsed.doneUrl === 'string' ? parsed.doneUrl : undefined,
-        });
-    }
-    if (/one-time pass/i.test(body)) {
-        return new SyntheticOtpError(undefined);
-    }
-    return new PnpmError('UNAUTHORIZED', `You must be logged in to set dist-tag "${distTag}" on packages. ${body}`);
-}
-function tryParseJson(body) {
-    try {
-        return JSON.parse(body);
-    }
-    catch {
-        return undefined;
-    }
-}
 //# sourceMappingURL=setDistTag.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/registry-access.client",
-  "version": "1100.1.15",
+  "version": "1100.1.17",
   "description": "Low-level helpers for npm-registry HTTP endpoints (PUT dist-tag, PUT user, etc.)",
   "keywords": [
     "pnpm",
@@ -27,13 +27,13 @@
     "!*.map"
   ],
   "dependencies": {
-    "@pnpm/error": "1100.1.3",
-    "@pnpm/network.fetch": "1100.1.13",
-    "@pnpm/network.web-auth": "1101.4.3",
+    "@pnpm/error": "1100.1.4",
+    "@pnpm/network.fetch": "1100.1.15",
+    "@pnpm/network.web-auth": "1101.6.0",
     "@pnpm/npm-package-arg": "^2.0.0"
   },
   "devDependencies": {
-    "@pnpm/registry-access.client": "1100.1.15"
+    "@pnpm/registry-access.client": "1100.1.17"
   },
   "engines": {
     "node": ">=22.13"