@verdaccio/api 6.0.0-6-next.18 → 6.0.0-6-next.21

package/CHANGELOG.md

@@ -1,5 +1,78 @@
 # @verdaccio/api
 
+## 6.0.0-6-next.21
+
+### Patch Changes
+
+- Updated dependencies [b78f3525]
+  - @verdaccio/logger@6.0.0-6-next.10
+  - @verdaccio/auth@6.0.0-6-next.18
+  - @verdaccio/hooks@6.0.0-6-next.12
+  - @verdaccio/middleware@6.0.0-6-next.18
+  - @verdaccio/store@6.0.0-6-next.19
+
+## 6.0.0-6-next.20
+
+### Patch Changes
+
+- Updated dependencies [730b5d8c]
+  - @verdaccio/logger@6.0.0-6-next.9
+  - @verdaccio/auth@6.0.0-6-next.17
+  - @verdaccio/hooks@6.0.0-6-next.11
+  - @verdaccio/middleware@6.0.0-6-next.17
+  - @verdaccio/store@6.0.0-6-next.18
+
+## 6.0.0-6-next.19
+
+### Major Changes
+
+- a828271d: refactor: download manifest endpoint and integrate fastify
+
+  Much simpler API for fetching a package
+
+  ```
+   const manifest = await storage.getPackageNext({
+        name,
+        uplinksLook: true,
+        req,
+        version: queryVersion,
+        requestOptions,
+   });
+  ```
+
+  > not perfect, the `req` still is being passed to the proxy (this has to be refactored at proxy package) and then removed from here, in proxy we pass the request instance to the `request` library.
+
+  ### Details
+
+  - `async/await` sugar for getPackage()
+  - Improve and reuse code between current implementation and new fastify endpoint (add scaffolding for request manifest)
+  - Improve performance
+  - Add new tests
+
+  ### Breaking changes
+
+  All storage plugins will stop to work since the storage uses `getPackageNext` method which is Promise based, I won't replace this now because will force me to update all plugins, I'll follow up in another PR. Currently will throw http 500
+
+### Minor Changes
+
+- 24b9be02: refactor: improve docker image build with strict dependencies and prod build
+- b13a3fef: refactor: improve versions and dist-tag filters
+
+### Patch Changes
+
+- Updated dependencies [a828271d]
+- Updated dependencies [24b9be02]
+- Updated dependencies [e75c0a3b]
+- Updated dependencies [b13a3fef]
+  - @verdaccio/store@6.0.0-6-next.17
+  - @verdaccio/utils@6.0.0-6-next.10
+  - @verdaccio/core@6.0.0-6-next.4
+  - @verdaccio/middleware@6.0.0-6-next.16
+  - @verdaccio/logger@6.0.0-6-next.8
+  - @verdaccio/auth@6.0.0-6-next.16
+  - @verdaccio/config@6.0.0-6-next.12
+  - @verdaccio/hooks@6.0.0-6-next.10
+
 ## 6.0.0-6-next.18
 
 ### Patch Changes

package/build/index.js

@@ -71,7 +71,7 @@ function _default(config, auth, storage) {
   app.use(_middleware.encodeScopePackage); // for "npm whoami"
 
   (0, _whoami.default)(app);
-  (0, _package.default)(app, auth, storage, config);
+  (0, _package.default)(app, auth, storage);
   (0, _profile.default)(app, auth); // @deprecated endpoint, 404 by default
 
   (0, _search.default)(app);

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":["semver","lte","process","version","global","AbortController","require","config","auth","storage","app","express","Router","param","validatePackage","validateName","use","apiJWTmiddleware","bodyParser","json","strict","limit","max_body_size","encodeScopePackage"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AAGA;;AAUA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;;;AAEA,IAAIA,gBAAOC,GAAP,CAAWC,OAAO,CAACC,OAAnB,EAA4B,SAA5B,CAAJ,EAA4C;AAC1CC,EAAAA,MAAM,CAACC,eAAP,GAAyBC,OAAO,CAAC,4CAAD,CAAP,CAAsDD,eAA/E;AACD;;AAEc,kBAAUE,MAAV,EAA0BC,IAA1B,EAAuCC,OAAvC,EAAiE;AAC9E;AACA,QAAMC,GAAG,GAAGC,iBAAQC,MAAR,EAAZ;AACA;AAEA;AACA;;;AACAF,EAAAA,GAAG,CAACG,KAAJ,CAAU,SAAV,EAAqBC,2BAArB;AACAJ,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsBE,wBAAtB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,KAAV,EAAiBE,wBAAjB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,SAAV,EAAqBE,wBAArB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsBE,wBAAtB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,OAAV,EAAmBE,wBAAnB,EAZ8E,CAc9E;AACA;;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,MAAV,EAAkB,uBAAM,QAAN,CAAlB;AACAH,EAAAA,GAAG,CAACG,KAAJ,CAAU,kBAAV,EAA8B,uBAAM,sBAAN,CAA9B;AACAH,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsB,uBAAM,IAAN,CAAtB;AACAH,EAAAA,GAAG,CAACM,GAAJ,CAAQR,IAAI,CAACS,gBAAL,EAAR;AACAP,EAAAA,GAAG,CAACM,GAAJ,CAAQE,oBAAWC,IAAX,CAAgB;AAAEC,IAAAA,MAAM,EAAE,KAAV;AAAiBC,IAAAA,KAAK,EAAEd,MAAM,CAACe,aAAP,IAAwB;AAAhD,GAAhB,CAAR,EApB8E,CAqB9E;;AACAZ,EAAAA,GAAG,CAACM,GAAJ,CAAQ,0BAAST,MAAT,CAAR,EAtB8E,CAuB9E;;AACAG,EAAAA,GAAG,CAACM,GAAJ,CAAQO,8BAAR,EAxB8E,CAyB9E;;AACA,uBAAOb,GAAP;AACA,wBAAIA,GAAJ,EAASF,IAAT,EAAeC,OAAf,EAAwBF,MAAxB;AACA,wBAAQG,GAAR,EAAaF,IAAb,EA5B8E,CA6B9E;;AACA,uBAAOE,GAAP;AACA,qBAAKA,GAAL,EAAUF,IAAV,EAAgBD,MAAhB;AACA,yBAASG,GAAT,EAAcF,IAAd,EAAoBC,OAApB;AACA,wBAAQC,GAAR,EAAaF,IAAb,EAAmBC,OAAnB,EAA4BF,MAA5B;AACA,qBAAKG,GAAL;AACA,sBAAMA,GAAN,EAAWD,OAAX,EAnC8E,CAoC9E;;AACA,wBAASC,GAAT,EAAcF,IAAd,EAAoBC,OAApB;AACA,sBAAMC,GAAN,EAAWF,IAAX,EAAiBC,OAAjB,EAA0BF,MAA1B;AACA,SAAOG,GAAP;AACD","sourcesContent":["import bodyParser from 'body-parser';\nimport express, { Router } from 'express';\nimport semver from 'semver';\n\nimport { IAuth } from '@verdaccio/auth';\nimport {\n  antiLoop,\n  encodeScopePackage,\n  match,\n  validateName,\n  validatePackage,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Config } from '@verdaccio/types';\n\nimport distTags from './dist-tags';\nimport pkg from './package';\nimport ping from './ping';\nimport publish from './publish';\nimport search from './search';\nimport stars from './stars';\nimport user from './user';\nimport profile from './v1/profile';\nimport v1Search from './v1/search';\nimport token from './v1/token';\nimport whoami from './whoami';\n\nif (semver.lte(process.version, 'v15.0.0')) {\n  global.AbortController = require('abortcontroller-polyfill/dist/cjs-ponyfill').AbortController;\n}\n\nexport default function (config: Config, auth: IAuth, storage: Storage): Router {\n  /* eslint new-cap:off */\n  const app = express.Router();\n  /* eslint new-cap:off */\n\n  // validate all of these params as a package name\n  // this might be too harsh, so ask if it causes trouble\n  app.param('package', validatePackage);\n  app.param('filename', validateName);\n  app.param('tag', validateName);\n  app.param('version', validateName);\n  app.param('revision', validateName);\n  app.param('token', validateName);\n\n  // these can't be safely put into express url for some reason\n  // TODO: For some reason? what reason?\n  app.param('_rev', match(/^-rev$/));\n  app.param('org_couchdb_user', match(/^org\\.couchdb\\.user:/));\n  app.param('anything', match(/.*/));\n  app.use(auth.apiJWTmiddleware());\n  app.use(bodyParser.json({ strict: false, limit: config.max_body_size || '10mb' }));\n  // @ts-ignore\n  app.use(antiLoop(config));\n  // encode / in a scoped package name to be matched as a single parameter in routes\n  app.use(encodeScopePackage);\n  // for \"npm whoami\"\n  whoami(app);\n  pkg(app, auth, storage, config);\n  profile(app, auth);\n  // @deprecated endpoint, 404 by default\n  search(app);\n  user(app, auth, config);\n  distTags(app, auth, storage);\n  publish(app, auth, storage, config);\n  ping(app);\n  stars(app, storage);\n  // @ts-ignore\n  v1Search(app, auth, storage);\n  token(app, auth, storage, config);\n  return app;\n}\n"],"file":"index.js"}
+{"version":3,"sources":["../src/index.ts"],"names":["semver","lte","process","version","global","AbortController","require","config","auth","storage","app","express","Router","param","validatePackage","validateName","use","apiJWTmiddleware","bodyParser","json","strict","limit","max_body_size","encodeScopePackage"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AAGA;;AAUA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;;;AAEA,IAAIA,gBAAOC,GAAP,CAAWC,OAAO,CAACC,OAAnB,EAA4B,SAA5B,CAAJ,EAA4C;AAC1CC,EAAAA,MAAM,CAACC,eAAP,GAAyBC,OAAO,CAAC,4CAAD,CAAP,CAAsDD,eAA/E;AACD;;AAEc,kBAAUE,MAAV,EAA0BC,IAA1B,EAAuCC,OAAvC,EAAiE;AAC9E;AACA,QAAMC,GAAG,GAAGC,iBAAQC,MAAR,EAAZ;AACA;AAEA;AACA;;;AACAF,EAAAA,GAAG,CAACG,KAAJ,CAAU,SAAV,EAAqBC,2BAArB;AACAJ,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsBE,wBAAtB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,KAAV,EAAiBE,wBAAjB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,SAAV,EAAqBE,wBAArB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsBE,wBAAtB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,OAAV,EAAmBE,wBAAnB,EAZ8E,CAc9E;AACA;;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,MAAV,EAAkB,uBAAM,QAAN,CAAlB;AACAH,EAAAA,GAAG,CAACG,KAAJ,CAAU,kBAAV,EAA8B,uBAAM,sBAAN,CAA9B;AACAH,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsB,uBAAM,IAAN,CAAtB;AACAH,EAAAA,GAAG,CAACM,GAAJ,CAAQR,IAAI,CAACS,gBAAL,EAAR;AACAP,EAAAA,GAAG,CAACM,GAAJ,CAAQE,oBAAWC,IAAX,CAAgB;AAAEC,IAAAA,MAAM,EAAE,KAAV;AAAiBC,IAAAA,KAAK,EAAEd,MAAM,CAACe,aAAP,IAAwB;AAAhD,GAAhB,CAAR,EApB8E,CAqB9E;;AACAZ,EAAAA,GAAG,CAACM,GAAJ,CAAQ,0BAAST,MAAT,CAAR,EAtB8E,CAuB9E;;AACAG,EAAAA,GAAG,CAACM,GAAJ,CAAQO,8BAAR,EAxB8E,CAyB9E;;AACA,uBAAOb,GAAP;AACA,wBAAIA,GAAJ,EAASF,IAAT,EAAeC,OAAf;AACA,wBAAQC,GAAR,EAAaF,IAAb,EA5B8E,CA6B9E;;AACA,uBAAOE,GAAP;AACA,qBAAKA,GAAL,EAAUF,IAAV,EAAgBD,MAAhB;AACA,yBAASG,GAAT,EAAcF,IAAd,EAAoBC,OAApB;AACA,wBAAQC,GAAR,EAAaF,IAAb,EAAmBC,OAAnB,EAA4BF,MAA5B;AACA,qBAAKG,GAAL;AACA,sBAAMA,GAAN,EAAWD,OAAX,EAnC8E,CAoC9E;;AACA,wBAASC,GAAT,EAAcF,IAAd,EAAoBC,OAApB;AACA,sBAAMC,GAAN,EAAWF,IAAX,EAAiBC,OAAjB,EAA0BF,MAA1B;AACA,SAAOG,GAAP;AACD","sourcesContent":["import bodyParser from 'body-parser';\nimport express, { Router } from 'express';\nimport semver from 'semver';\n\nimport { IAuth } from '@verdaccio/auth';\nimport {\n  antiLoop,\n  encodeScopePackage,\n  match,\n  validateName,\n  validatePackage,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Config } from '@verdaccio/types';\n\nimport distTags from './dist-tags';\nimport pkg from './package';\nimport ping from './ping';\nimport publish from './publish';\nimport search from './search';\nimport stars from './stars';\nimport user from './user';\nimport profile from './v1/profile';\nimport v1Search from './v1/search';\nimport token from './v1/token';\nimport whoami from './whoami';\n\nif (semver.lte(process.version, 'v15.0.0')) {\n  global.AbortController = require('abortcontroller-polyfill/dist/cjs-ponyfill').AbortController;\n}\n\nexport default function (config: Config, auth: IAuth, storage: Storage): Router {\n  /* eslint new-cap:off */\n  const app = express.Router();\n  /* eslint new-cap:off */\n\n  // validate all of these params as a package name\n  // this might be too harsh, so ask if it causes trouble\n  app.param('package', validatePackage);\n  app.param('filename', validateName);\n  app.param('tag', validateName);\n  app.param('version', validateName);\n  app.param('revision', validateName);\n  app.param('token', validateName);\n\n  // these can't be safely put into express url for some reason\n  // TODO: For some reason? what reason?\n  app.param('_rev', match(/^-rev$/));\n  app.param('org_couchdb_user', match(/^org\\.couchdb\\.user:/));\n  app.param('anything', match(/.*/));\n  app.use(auth.apiJWTmiddleware());\n  app.use(bodyParser.json({ strict: false, limit: config.max_body_size || '10mb' }));\n  // @ts-ignore\n  app.use(antiLoop(config));\n  // encode / in a scoped package name to be matched as a single parameter in routes\n  app.use(encodeScopePackage);\n  // for \"npm whoami\"\n  whoami(app);\n  pkg(app, auth, storage);\n  profile(app, auth);\n  // @deprecated endpoint, 404 by default\n  search(app);\n  user(app, auth, config);\n  distTags(app, auth, storage);\n  publish(app, auth, storage, config);\n  ping(app);\n  stars(app, storage);\n  // @ts-ignore\n  v1Search(app, auth, storage);\n  token(app, auth, storage, config);\n  return app;\n}\n"],"file":"index.js"}

package/build/package.d.ts

@@ -1,5 +1,4 @@
 import { Router } from 'express';
 import { IAuth } from '@verdaccio/auth';
 import { Storage } from '@verdaccio/store';
-import { Config } from '@verdaccio/types';
-export default function (route: Router, auth: IAuth, storage: Storage, config: Config): void;
+export default function (route: Router, auth: IAuth, storage: Storage): void;

package/build/package.js

@@ -7,21 +7,15 @@ exports.default = _default;
 
 var _debug = _interopRequireDefault(require("debug"));
 
-var _lodash = _interopRequireDefault(require("lodash"));
-
 var _core = require("@verdaccio/core");
 
 var _middleware = require("@verdaccio/middleware");
 
-var _tarball = require("@verdaccio/tarball");
-
-var _utils = require("@verdaccio/utils");
-
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 const debug = (0, _debug.default)('verdaccio:api:package');
 
-const downloadStream = (packageName, filename, storage, req, res) => {
+const downloadStream = (packageName, filename, storage, _req, res) => {
   const stream = storage.getTarball(packageName, filename);
   stream.on('content-length', function (content) {
     res.header('Content-Length', content);
@@ -33,68 +27,37 @@ const downloadStream = (packageName, filename, storage, req, res) => {
   stream.pipe(res);
 };
 
-function _default(route, auth, storage, config) {
-  const can = (0, _middleware.allow)(auth); // TODO: anonymous user?
-
-  route.get('/:package/:version?', can('access'), function (req, _res, next) {
+function _default(route, auth, storage) {
+  const can = (0, _middleware.allow)(auth);
+  route.get('/:package/:version?', can('access'), async function (req, _res, next) {
     debug('init package by version');
     const name = req.params.package;
+    let queryVersion = req.params.version;
+    const requestOptions = {
+      protocol: req.protocol,
+      headers: req.headers,
+      // FIXME: if we migrate to req.hostname, the port is not longer included.
+      host: req.host
+    };
 
-    const getPackageMetaCallback = function (err, metadata) {
-      if (err) {
-        debug('error on fetch metadata for %o with error %o', name, err.message);
-        return next(err);
-      }
-
-      debug('convert dist remote to local with prefix %o', config === null || config === void 0 ? void 0 : config.url_prefix);
-      metadata = (0, _tarball.convertDistRemoteToLocalTarballUrls)(metadata, {
-        protocol: req.protocol,
-        headers: req.headers,
-        host: req.host
-      }, config === null || config === void 0 ? void 0 : config.url_prefix);
-      let queryVersion = req.params.version;
-      debug('query by param version: %o', queryVersion);
-
-      if (_lodash.default.isNil(queryVersion)) {
-        debug('param %o version found', queryVersion);
-        return next(metadata);
-      }
-
-      let version = (0, _utils.getVersion)(metadata, queryVersion);
-      debug('query by latest version %o and result %o', queryVersion, version);
-
-      if (_lodash.default.isNil(version) === false) {
-        debug('latest version found %o', version);
-        return next(version);
-      }
-
-      if (_lodash.default.isNil(metadata[_core.DIST_TAGS]) === false) {
-        if (_lodash.default.isNil(metadata[_core.DIST_TAGS][queryVersion]) === false) {
-          queryVersion = metadata[_core.DIST_TAGS][queryVersion];
-          debug('dist-tag version found %o', queryVersion);
-          version = (0, _utils.getVersion)(metadata, queryVersion);
-
-          if (_lodash.default.isNil(version) === false) {
-            debug('dist-tag found %o', version);
-            return next(version);
-          }
-        }
-      } else {
-        debug('dist tag not detected');
+    try {
+      // TODO: this is just temporary while I migrate all plugins to use the new API
+      // the method will be renamed to getPackage again but Promise Based.
+      if (!storage.getPackageByOptions) {
+        throw _core.errorUtils.getInternalError('getPackageByOptions not implemented, check pr-2750 for more details');
       }
 
-      debug('package version not found %o', queryVersion);
-      return next(_core.errorUtils.getNotFound(`${_core.API_ERROR.VERSION_NOT_EXIST}: ${queryVersion}`));
-    };
-
-    debug('get package name %o', name);
-    debug('uplinks look up enabled');
-    storage.getPackage({
-      name,
-      uplinksLook: true,
-      req,
-      callback: getPackageMetaCallback
-    });
+      const manifest = await storage.getPackageByOptions({
+        name,
+        uplinksLook: true,
+        req,
+        version: queryVersion,
+        requestOptions
+      });
+      next(manifest);
+    } catch (err) {
+      next(err);
+    }
   });
   route.get('/:scopedPackage/-/:scope/:filename', can('access'), function (req, res) {
     const {

package/build/package.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/package.ts"],"names":["debug","downloadStream","packageName","filename","storage","req","res","stream","getTarball","on","content","header","err","locals","report_error","HEADERS","CONTENT_TYPE","OCTET_STREAM","pipe","route","auth","config","can","get","_res","next","name","params","package","getPackageMetaCallback","metadata","message","url_prefix","protocol","headers","host","queryVersion","version","_","isNil","DIST_TAGS","errorUtils","getNotFound","API_ERROR","VERSION_NOT_EXIST","getPackage","uplinksLook","callback","scopedPackage"],"mappings":";;;;;;;AAAA;;AAEA;;AAGA;;AACA;;AAEA;;AAEA;;;;AAIA,MAAMA,KAAK,GAAG,oBAAW,uBAAX,CAAd;;AAEA,MAAMC,cAAc,GAAG,CACrBC,WADqB,EAErBC,QAFqB,EAGrBC,OAHqB,EAIrBC,GAJqB,EAKrBC,GALqB,KAMZ;AACT,QAAMC,MAAM,GAAGH,OAAO,CAACI,UAAR,CAAmBN,WAAnB,EAAgCC,QAAhC,CAAf;AAEAI,EAAAA,MAAM,CAACE,EAAP,CAAU,gBAAV,EAA4B,UAAUC,OAAV,EAAyB;AACnDJ,IAAAA,GAAG,CAACK,MAAJ,CAAW,gBAAX,EAA6BD,OAA7B;AACD,GAFD;AAIAH,EAAAA,MAAM,CAACE,EAAP,CAAU,OAAV,EAAmB,UAAUG,GAAV,EAAqB;AACtC,WAAON,GAAG,CAACO,MAAJ,CAAWC,YAAX,CAAwBF,GAAxB,CAAP;AACD,GAFD;AAIAN,EAAAA,GAAG,CAACK,MAAJ,CAAWI,cAAQC,YAAnB,EAAiCD,cAAQE,YAAzC;AACAV,EAAAA,MAAM,CAACW,IAAP,CAAYZ,GAAZ;AACD,CAnBD;;AAqBe,kBAAUa,KAAV,EAAyBC,IAAzB,EAAsChB,OAAtC,EAAwDiB,MAAxD,EAA8E;AAC3F,QAAMC,GAAG,GAAG,uBAAMF,IAAN,CAAZ,CAD2F,CAE3F;;AACAD,EAAAA,KAAK,CAACI,GAAN,CACE,qBADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,UAAUjB,GAAV,EAA+BmB,IAA/B,EAAsDC,IAAtD,EAAoF;AAClFzB,IAAAA,KAAK,CAAC,yBAAD,CAAL;AACA,UAAM0B,IAAI,GAAGrB,GAAG,CAACsB,MAAJ,CAAWC,OAAxB;;AACA,UAAMC,sBAAsB,GAAG,UAAUjB,GAAV,EAAekB,QAAf,EAAwC;AACrE,UAAIlB,GAAJ,EAAS;AACPZ,QAAAA,KAAK,CAAC,8CAAD,EAAiD0B,IAAjD,EAAuDd,GAAG,CAACmB,OAA3D,CAAL;AACA,eAAON,IAAI,CAACb,GAAD,CAAX;AACD;;AACDZ,MAAAA,KAAK,CAAC,6CAAD,EAAgDqB,MAAhD,aAAgDA,MAAhD,uBAAgDA,MAAM,CAAEW,UAAxD,CAAL;AACAF,MAAAA,QAAQ,GAAG,kDACTA,QADS,EAET;AAAEG,QAAAA,QAAQ,EAAE5B,GAAG,CAAC4B,QAAhB;AAA0BC,QAAAA,OAAO,EAAE7B,GAAG,CAAC6B,OAAvC;AAAuDC,QAAAA,IAAI,EAAE9B,GAAG,CAAC8B;AAAjE,OAFS,EAGTd,MAHS,aAGTA,MAHS,uBAGTA,MAAM,CAAEW,UAHC,CAAX;AAMA,UAAII,YAAY,GAAG/B,GAAG,CAACsB,MAAJ,CAAWU,OAA9B;AACArC,MAAAA,KAAK,CAAC,4BAAD,EAA+BoC,YAA/B,CAAL;;AACA,UAAIE,gBAAEC,KAAF,CAAQH,YAAR,CAAJ,EAA2B;AACzBpC,QAAAA,KAAK,CAAC,wBAAD,EAA2BoC,YAA3B,CAAL;AACA,eAAOX,IAAI,CAACK,QAAD,CAAX;AACD;;AAED,UAAIO,OAAO,GAAG,uBAAWP,QAAX,EAAqBM,YAArB,CAAd;AACApC,MAAAA,KAAK,CAAC,0CAAD,EAA6CoC,YAA7C,EAA2DC,OAA3D,CAAL;;AACA,UAAIC,gBAAEC,KAAF,CAAQF,OAAR,MAAqB,KAAzB,EAAgC;AAC9BrC,QAAAA,KAAK,CAAC,yBAAD,EAA4BqC,OAA5B,CAAL;AACA,eAAOZ,IAAI,CAACY,OAAD,CAAX;AACD;;AAED,UAAIC,gBAAEC,KAAF,CAAQT,QAAQ,CAACU,eAAD,CAAhB,MAAiC,KAArC,EAA4C;AAC1C,YAAIF,gBAAEC,KAAF,CAAQT,QAAQ,CAACU,eAAD,CAAR,CAAoBJ,YAApB,CAAR,MAA+C,KAAnD,EAA0D;AACxDA,UAAAA,YAAY,GAAGN,QAAQ,CAACU,eAAD,CAAR,CAAoBJ,YAApB,CAAf;AACApC,UAAAA,KAAK,CAAC,2BAAD,EAA8BoC,YAA9B,CAAL;AACAC,UAAAA,OAAO,GAAG,uBAAWP,QAAX,EAAqBM,YAArB,CAAV;;AACA,cAAIE,gBAAEC,KAAF,CAAQF,OAAR,MAAqB,KAAzB,EAAgC;AAC9BrC,YAAAA,KAAK,CAAC,mBAAD,EAAsBqC,OAAtB,CAAL;AACA,mBAAOZ,IAAI,CAACY,OAAD,CAAX;AACD;AACF;AACF,OAVD,MAUO;AACLrC,QAAAA,KAAK,CAAC,uBAAD,CAAL;AACD;;AAEDA,MAAAA,KAAK,CAAC,8BAAD,EAAiCoC,YAAjC,CAAL;AACA,aAAOX,IAAI,CAACgB,iBAAWC,WAAX,CAAwB,GAAEC,gBAAUC,iBAAkB,KAAIR,YAAa,EAAvE,CAAD,CAAX;AACD,KA1CD;;AA4CApC,IAAAA,KAAK,CAAC,qBAAD,EAAwB0B,IAAxB,CAAL;AACA1B,IAAAA,KAAK,CAAC,yBAAD,CAAL;AACAI,IAAAA,OAAO,CAACyC,UAAR,CAAmB;AACjBnB,MAAAA,IADiB;AAEjBoB,MAAAA,WAAW,EAAE,IAFI;AAGjBzC,MAAAA,GAHiB;AAIjB0C,MAAAA,QAAQ,EAAElB;AAJO,KAAnB;AAMD,GA1DH;AA6DAV,EAAAA,KAAK,CAACI,GAAN,CACE,oCADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,UAAUjB,GAAV,EAA+BC,GAA/B,EAA2D;AACzD,UAAM;AAAE0C,MAAAA,aAAF;AAAiB7C,MAAAA;AAAjB,QAA8BE,GAAG,CAACsB,MAAxC;AAEA1B,IAAAA,cAAc,CAAC+C,aAAD,EAAgB7C,QAAhB,EAA0BC,OAA1B,EAAmCC,GAAnC,EAAwCC,GAAxC,CAAd;AACD,GAPH;AAUAa,EAAAA,KAAK,CAACI,GAAN,CACE,uBADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,UAAUjB,GAAV,EAA+BC,GAA/B,EAA2D;AACzDL,IAAAA,cAAc,CAACI,GAAG,CAACsB,MAAJ,CAAWC,OAAZ,EAAqBvB,GAAG,CAACsB,MAAJ,CAAWxB,QAAhC,EAA0CC,OAA1C,EAAmDC,GAAnD,EAAwDC,GAAxD,CAAd;AACD,GALH;AAOD","sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\nimport _ from 'lodash';\n\nimport { IAuth } from '@verdaccio/auth';\nimport { API_ERROR, DIST_TAGS, HEADERS, errorUtils } from '@verdaccio/core';\nimport { allow } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { convertDistRemoteToLocalTarballUrls } from '@verdaccio/tarball';\nimport { Config, Package } from '@verdaccio/types';\nimport { getVersion } from '@verdaccio/utils';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:package');\n\nconst downloadStream = (\n  packageName: string,\n  filename: string,\n  storage: any,\n  req: $RequestExtend,\n  res: $ResponseExtend\n): void => {\n  const stream = storage.getTarball(packageName, filename);\n\n  stream.on('content-length', function (content): void {\n    res.header('Content-Length', content);\n  });\n\n  stream.on('error', function (err): void {\n    return res.locals.report_error(err);\n  });\n\n  res.header(HEADERS.CONTENT_TYPE, HEADERS.OCTET_STREAM);\n  stream.pipe(res);\n};\n\nexport default function (route: Router, auth: IAuth, storage: Storage, config: Config): void {\n  const can = allow(auth);\n  // TODO: anonymous user?\n  route.get(\n    '/:package/:version?',\n    can('access'),\n    function (req: $RequestExtend, _res: $ResponseExtend, next: $NextFunctionVer): void {\n      debug('init package by version');\n      const name = req.params.package;\n      const getPackageMetaCallback = function (err, metadata: Package): void {\n        if (err) {\n          debug('error on fetch metadata for %o with error %o', name, err.message);\n          return next(err);\n        }\n        debug('convert dist remote to local with prefix %o', config?.url_prefix);\n        metadata = convertDistRemoteToLocalTarballUrls(\n          metadata,\n          { protocol: req.protocol, headers: req.headers as any, host: req.host },\n          config?.url_prefix\n        );\n\n        let queryVersion = req.params.version;\n        debug('query by param version: %o', queryVersion);\n        if (_.isNil(queryVersion)) {\n          debug('param %o version found', queryVersion);\n          return next(metadata);\n        }\n\n        let version = getVersion(metadata, queryVersion);\n        debug('query by latest version %o and result %o', queryVersion, version);\n        if (_.isNil(version) === false) {\n          debug('latest version found %o', version);\n          return next(version);\n        }\n\n        if (_.isNil(metadata[DIST_TAGS]) === false) {\n          if (_.isNil(metadata[DIST_TAGS][queryVersion]) === false) {\n            queryVersion = metadata[DIST_TAGS][queryVersion];\n            debug('dist-tag version found %o', queryVersion);\n            version = getVersion(metadata, queryVersion);\n            if (_.isNil(version) === false) {\n              debug('dist-tag found %o', version);\n              return next(version);\n            }\n          }\n        } else {\n          debug('dist tag not detected');\n        }\n\n        debug('package version not found %o', queryVersion);\n        return next(errorUtils.getNotFound(`${API_ERROR.VERSION_NOT_EXIST}: ${queryVersion}`));\n      };\n\n      debug('get package name %o', name);\n      debug('uplinks look up enabled');\n      storage.getPackage({\n        name,\n        uplinksLook: true,\n        req,\n        callback: getPackageMetaCallback,\n      });\n    }\n  );\n\n  route.get(\n    '/:scopedPackage/-/:scope/:filename',\n    can('access'),\n    function (req: $RequestExtend, res: $ResponseExtend): void {\n      const { scopedPackage, filename } = req.params;\n\n      downloadStream(scopedPackage, filename, storage, req, res);\n    }\n  );\n\n  route.get(\n    '/:package/-/:filename',\n    can('access'),\n    function (req: $RequestExtend, res: $ResponseExtend): void {\n      downloadStream(req.params.package, req.params.filename, storage, req, res);\n    }\n  );\n}\n"],"file":"package.js"}
+{"version":3,"sources":["../src/package.ts"],"names":["debug","downloadStream","packageName","filename","storage","_req","res","stream","getTarball","on","content","header","err","locals","report_error","HEADERS","CONTENT_TYPE","OCTET_STREAM","pipe","route","auth","can","get","req","_res","next","name","params","package","queryVersion","version","requestOptions","protocol","headers","host","getPackageByOptions","errorUtils","getInternalError","manifest","uplinksLook","scopedPackage"],"mappings":";;;;;;;AAAA;;AAIA;;AACA;;;;AAKA,MAAMA,KAAK,GAAG,oBAAW,uBAAX,CAAd;;AAEA,MAAMC,cAAc,GAAG,CACrBC,WADqB,EAErBC,QAFqB,EAGrBC,OAHqB,EAIrBC,IAJqB,EAKrBC,GALqB,KAMZ;AACT,QAAMC,MAAM,GAAGH,OAAO,CAACI,UAAR,CAAmBN,WAAnB,EAAgCC,QAAhC,CAAf;AAEAI,EAAAA,MAAM,CAACE,EAAP,CAAU,gBAAV,EAA4B,UAAUC,OAAV,EAAyB;AACnDJ,IAAAA,GAAG,CAACK,MAAJ,CAAW,gBAAX,EAA6BD,OAA7B;AACD,GAFD;AAIAH,EAAAA,MAAM,CAACE,EAAP,CAAU,OAAV,EAAmB,UAAUG,GAAV,EAAqB;AACtC,WAAON,GAAG,CAACO,MAAJ,CAAWC,YAAX,CAAwBF,GAAxB,CAAP;AACD,GAFD;AAIAN,EAAAA,GAAG,CAACK,MAAJ,CAAWI,cAAQC,YAAnB,EAAiCD,cAAQE,YAAzC;AACAV,EAAAA,MAAM,CAACW,IAAP,CAAYZ,GAAZ;AACD,CAnBD;;AAqBe,kBAAUa,KAAV,EAAyBC,IAAzB,EAAsChB,OAAtC,EAA8D;AAC3E,QAAMiB,GAAG,GAAG,uBAAMD,IAAN,CAAZ;AAEAD,EAAAA,KAAK,CAACG,GAAN,CACE,qBADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,gBACEE,GADF,EAEEC,IAFF,EAGEC,IAHF,EAIiB;AACfzB,IAAAA,KAAK,CAAC,yBAAD,CAAL;AACA,UAAM0B,IAAI,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAAxB;AACA,QAAIC,YAAY,GAAGN,GAAG,CAACI,MAAJ,CAAWG,OAA9B;AACA,UAAMC,cAAc,GAAG;AACrBC,MAAAA,QAAQ,EAAET,GAAG,CAACS,QADO;AAErBC,MAAAA,OAAO,EAAEV,GAAG,CAACU,OAFQ;AAGrB;AACAC,MAAAA,IAAI,EAAEX,GAAG,CAACW;AAJW,KAAvB;;AAOA,QAAI;AACF;AACA;AACA,UAAI,CAAC9B,OAAO,CAAC+B,mBAAb,EAAkC;AAChC,cAAMC,iBAAWC,gBAAX,CACJ,qEADI,CAAN;AAGD;;AAED,YAAMC,QAAQ,GAAG,MAAMlC,OAAO,CAAC+B,mBAAR,CAA4B;AACjDT,QAAAA,IADiD;AAEjDa,QAAAA,WAAW,EAAE,IAFoC;AAGjDhB,QAAAA,GAHiD;AAIjDO,QAAAA,OAAO,EAAED,YAJwC;AAKjDE,QAAAA;AALiD,OAA5B,CAAvB;AAOAN,MAAAA,IAAI,CAACa,QAAD,CAAJ;AACD,KAjBD,CAiBE,OAAO1B,GAAP,EAAY;AACZa,MAAAA,IAAI,CAACb,GAAD,CAAJ;AACD;AACF,GAtCH;AAyCAO,EAAAA,KAAK,CAACG,GAAN,CACE,oCADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,UAAUE,GAAV,EAA+BjB,GAA/B,EAA2D;AACzD,UAAM;AAAEkC,MAAAA,aAAF;AAAiBrC,MAAAA;AAAjB,QAA8BoB,GAAG,CAACI,MAAxC;AAEA1B,IAAAA,cAAc,CAACuC,aAAD,EAAgBrC,QAAhB,EAA0BC,OAA1B,EAAmCmB,GAAnC,EAAwCjB,GAAxC,CAAd;AACD,GAPH;AAUAa,EAAAA,KAAK,CAACG,GAAN,CACE,uBADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,UAAUE,GAAV,EAA+BjB,GAA/B,EAA2D;AACzDL,IAAAA,cAAc,CAACsB,GAAG,CAACI,MAAJ,CAAWC,OAAZ,EAAqBL,GAAG,CAACI,MAAJ,CAAWxB,QAAhC,EAA0CC,OAA1C,EAAmDmB,GAAnD,EAAwDjB,GAAxD,CAAd;AACD,GALH;AAOD","sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\n\nimport { IAuth } from '@verdaccio/auth';\nimport { HEADERS, errorUtils } from '@verdaccio/core';\nimport { allow } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:package');\n\nconst downloadStream = (\n  packageName: string,\n  filename: string,\n  storage: any,\n  _req: $RequestExtend,\n  res: $ResponseExtend\n): void => {\n  const stream = storage.getTarball(packageName, filename);\n\n  stream.on('content-length', function (content): void {\n    res.header('Content-Length', content);\n  });\n\n  stream.on('error', function (err): void {\n    return res.locals.report_error(err);\n  });\n\n  res.header(HEADERS.CONTENT_TYPE, HEADERS.OCTET_STREAM);\n  stream.pipe(res);\n};\n\nexport default function (route: Router, auth: IAuth, storage: Storage): void {\n  const can = allow(auth);\n\n  route.get(\n    '/:package/:version?',\n    can('access'),\n    async function (\n      req: $RequestExtend,\n      _res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      debug('init package by version');\n      const name = req.params.package;\n      let queryVersion = req.params.version;\n      const requestOptions = {\n        protocol: req.protocol,\n        headers: req.headers as any,\n        // FIXME: if we migrate to req.hostname, the port is not longer included.\n        host: req.host,\n      };\n\n      try {\n        // TODO: this is just temporary while I migrate all plugins to use the new API\n        // the method will be renamed to getPackage again but Promise Based.\n        if (!storage.getPackageByOptions) {\n          throw errorUtils.getInternalError(\n            'getPackageByOptions not implemented, check pr-2750 for more details'\n          );\n        }\n\n        const manifest = await storage.getPackageByOptions({\n          name,\n          uplinksLook: true,\n          req,\n          version: queryVersion,\n          requestOptions,\n        });\n        next(manifest);\n      } catch (err) {\n        next(err);\n      }\n    }\n  );\n\n  route.get(\n    '/:scopedPackage/-/:scope/:filename',\n    can('access'),\n    function (req: $RequestExtend, res: $ResponseExtend): void {\n      const { scopedPackage, filename } = req.params;\n\n      downloadStream(scopedPackage, filename, storage, req, res);\n    }\n  );\n\n  route.get(\n    '/:package/-/:filename',\n    can('access'),\n    function (req: $RequestExtend, res: $ResponseExtend): void {\n      downloadStream(req.params.package, req.params.filename, storage, req, res);\n    }\n  );\n}\n"],"file":"package.js"}

package/build/publish.js

@@ -34,12 +34,6 @@ var _utils2 = require("./utils");
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) { symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
-
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(Object(source), true).forEach(function (key) { _defineProperty(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
 const debug = (0, _debug.default)('verdaccio:api:publish');
 
 function publish(router, auth, storage, config) {
@@ -176,8 +170,8 @@ function publishPackage(storage, config, auth) {
     };
 
     const afterChange = function (error, okMessage, metadata) {
-      const metadataCopy = _objectSpread({}, metadata);
-
+      const metadataCopy = { ...metadata
+      };
       debug('after change metadata %o', metadata);
       const {
         _attachments,

package/build/publish.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/publish.ts"],"names":["debug","publish","router","auth","storage","config","can","put","mime","getType","expectJson","publishPackage","delete","unPublishPackage","removeTarball","HEADERS","OCTET_STREAM","uploadPackageTarball","addVersion","starApi","req","res","next","packageName","params","package","createTarball","filename","data","cb","stream","addTarball","on","err","message","end","Buffer","from","done","createVersion","version","metadata","addTags","tags","mergeTags","afterChange","error","okMessage","metadataCopy","_attachments","versions","_","isNil","JSON","stringify","status","HTTP_STATUS","CREATED","ok","success","isInvalidBodyFormat","logger","info","errorUtils","getBadRequest","API_ERROR","UNSUPORTED_REGISTRY_CALL","CONFLICT","firstAttachmentKey","Object","keys","Path","basename","versionToPublish","readme","String","DIST_TAGS","remote_user","name","body","users","_rev","remote","allow_unpublish","changePackage","revision","API_MESSAGE","PKG_CHANGED","addPackage","PKG_CREATED","getBadData","BAD_PACKAGE_DATA","removePackage","PKG_REMOVED","TARBALL_REMOVED","tag","PKG_PUBLISHED","pipe","complete","abort","locals","report_error","TARBALL_UPLOADED"],"mappings":";;;;;;;;;;;;AAAA;;AAEA;;AACA;;AACA;;AAGA;;AAQA;;AACA;;AACA;;AAGA;;AAGA;;AACA;;;;;;;;;;AAEA,MAAMA,KAAK,GAAG,oBAAW,uBAAX,CAAd;;AAEe,SAASC,OAAT,CACbC,MADa,EAEbC,IAFa,EAGbC,OAHa,EAIbC,MAJa,EAKP;AACN,QAAMC,GAAG,GAAG,uBAAMH,IAAN,CAAZ;AAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AACED,EAAAA,MAAM,CAACK,GAAP,CACE,6BADF,EAEED,GAAG,CAAC,SAAD,CAFL,EAGE,uBAAME,cAAKC,OAAL,CAAa,MAAb,CAAN,CAHF,EAIEC,sBAJF,EAKEC,cAAc,CAACP,OAAD,EAAUC,MAAV,EAAkBF,IAAlB,CALhB;AAQA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;;AACED,EAAAA,MAAM,CAACU,MAAP,CAAc,kBAAd,EAAkCN,GAAG,CAAC,WAAD,CAArC,EAAoDO,gBAAgB,CAACT,OAAD,CAApE,EAnFM,CAqFN;;AACAF,EAAAA,MAAM,CAACU,MAAP,CACE,sCADF,EAEEN,GAAG,CAAC,WAAD,CAFL,EAGEA,GAAG,CAAC,SAAD,CAHL,EAIEQ,aAAa,CAACV,OAAD,CAJf,EAtFM,CA6FN;;AACAF,EAAAA,MAAM,CAACK,GAAP,CACE,yBADF,EAEED,GAAG,CAAC,SAAD,CAFL,EAGE,uBAAMS,cAAQC,YAAd,CAHF,EAIEC,oBAAoB,CAACb,OAAD,CAJtB,EA9FM,CAqGN;;AACAF,EAAAA,MAAM,CAACK,GAAP,CACE,8BADF,EAEED,GAAG,CAAC,SAAD,CAFL,EAGE,uBAAME,cAAKC,OAAL,CAAa,MAAb,CAAN,CAHF,EAIEC,sBAJF,EAKEQ,UAAU,CAACd,OAAD,CALZ;AAOD;AAED;AACA;AACA;;;AACO,SAASO,cAAT,CAAwBP,OAAxB,EAA0CC,MAA1C,EAA0DF,IAA1D,EAA4E;AACjF,QAAMgB,OAAO,GAAG,mBAAKf,OAAL,CAAhB;AACA,SAAO,UAAUgB,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACxF,UAAMC,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;AAEAzB,IAAAA,KAAK,CAAC,6CAAD,EAAgDuB,WAAhD,CAAL;AAEA;AACJ;AACA;;AACI,UAAMG,aAAa,GAAG,UAAUC,QAAV,EAA4BC,IAA5B,EAAkCC,EAAlC,EAAsD;AAC1E,YAAMC,MAAM,GAAG1B,OAAO,CAAC2B,UAAR,CAAmBR,WAAnB,EAAgCI,QAAhC,CAAf;AACAG,MAAAA,MAAM,CAACE,EAAP,CAAU,OAAV,EAAmB,UAAUC,GAAV,EAAe;AAChCjC,QAAAA,KAAK,CACH,mDADG,EAEH2B,QAFG,EAGHJ,WAHG,EAIHU,GAAG,CAACC,OAJD,CAAL;AAMAL,QAAAA,EAAE,CAACI,GAAD,CAAF;AACD,OARD;AASAH,MAAAA,MAAM,CAACE,EAAP,CAAU,SAAV,EAAqB,YAAY;AAC/BhC,QAAAA,KAAK,CAAC,uCAAD,EAA0C2B,QAA1C,EAAoDJ,WAApD,CAAL;AACAM,QAAAA,EAAE;AACH,OAHD,EAX0E,CAe1E;AACA;;AACAC,MAAAA,MAAM,CAACK,GAAP,CAAWC,MAAM,CAACC,IAAP,CAAYT,IAAI,CAACA,IAAjB,EAAuB,QAAvB,CAAX;AACAE,MAAAA,MAAM,CAACQ,IAAP;AACD,KAnBD;AAqBA;AACJ;AACA;;;AACI,UAAMC,aAAa,GAAG,UAAUC,OAAV,EAA2BC,QAA3B,EAA8CZ,EAA9C,EAAwE;AAC5F7B,MAAAA,KAAK,CAAC,4CAAD,EAA+CwC,OAA/C,EAAwDC,QAAxD,CAAL;AACArC,MAAAA,OAAO,CAACc,UAAR,CAAmBK,WAAnB,EAAgCiB,OAAhC,EAAyCC,QAAzC,EAAmD,IAAnD,EAAyDZ,EAAzD;AACD,KAHD;AAKA;AACJ;AACA;;;AACI,UAAMa,OAAO,GAAG,UAAUC,IAAV,EAA2Bd,EAA3B,EAAqD;AACnE7B,MAAAA,KAAK,CAAC,2BAAD,EAA8BuB,WAA9B,CAAL;AACAnB,MAAAA,OAAO,CAACwC,SAAR,CAAkBrB,WAAlB,EAA+BoB,IAA/B,EAAqCd,EAArC;AACD,KAHD;;AAKA,UAAMgB,WAAW,GAAG,UAAUC,KAAV,EAAiBC,SAAjB,EAA4BN,QAA5B,EAAqD;AACvE,YAAMO,YAAqB,qBAAQP,QAAR,CAA3B;;AACAzC,MAAAA,KAAK,CAAC,0BAAD,EAA6ByC,QAA7B,CAAL;AAEA,YAAM;AAAEQ,QAAAA,YAAF;AAAgBC,QAAAA;AAAhB,UAA6BF,YAAnC,CAJuE,CAMvE;AACA;;AACA,UAAIG,gBAAEC,KAAF,CAAQH,YAAR,KAAyBI,IAAI,CAACC,SAAL,CAAeL,YAAf,MAAiC,IAA9D,EAAoE;AAClEjD,QAAAA,KAAK,CAAC,yBAAD,CAAL;;AACA,YAAI8C,KAAJ,EAAW;AACT9C,UAAAA,KAAK,CAAC,4CAAD,EAA+C8C,KAAK,CAACZ,OAArD,CAAL;AACA,iBAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED9C,QAAAA,KAAK,CAAC,sCAAD,CAAL;AACAqB,QAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,eAAOnC,IAAI,CAAC;AACVoC,UAAAA,EAAE,EAAEX,SADM;AAEVY,UAAAA,OAAO,EAAE;AAFC,SAAD,CAAX;AAID;AAED;AACN;AACA;AACA;;;AAEM,YAAMC,mBAAmB,GACvB,qBAASX,YAAT,MAA2B,KAA3B,IACA,0BAAcA,YAAd,CADA,IAEA,qBAASC,QAAT,MAAuB,KAFvB,IAGA,0BAAcA,QAAd,CAJF;;AAMA,UAAIU,mBAAJ,EAAyB;AACvB;AACA;AACA5D,QAAAA,KAAK,CAAC,qBAAD,CAAL;;AACA6D,uBAAOC,IAAP,CAAY;AAAEvC,UAAAA;AAAF,SAAZ,EAA8B,0DAA9B;;AACA,eAAOD,IAAI,CAACyC,iBAAWC,aAAX,CAAyBC,gBAAUC,wBAAnC,CAAD,CAAX;AACD;;AAED,UAAIpB,KAAK,IAAIA,KAAK,CAACS,MAAN,KAAiBC,kBAAYW,QAA1C,EAAoD;AAClDnE,QAAAA,KAAK,CAAC,6CAAD,EAAgD8C,KAAK,CAACZ,OAAtD,CAAL;AACA,eAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD,OA7CsE,CA+CvE;;;AACA,YAAM,CAACsB,kBAAD,IAAuBC,MAAM,CAACC,IAAP,CAAYrB,YAAZ,CAA7B;AAEAvB,MAAAA,aAAa,CACX6C,cAAKC,QAAL,CAAcJ,kBAAd,CADW,EAEXnB,YAAY,CAACmB,kBAAD,CAFD,EAGX,UAAUtB,KAAV,EAAiB;AACf9C,QAAAA,KAAK,CAAC,uBAAD,EAA0BoE,kBAA1B,CAAL;;AACA,YAAItB,KAAJ,EAAW;AACT9C,UAAAA,KAAK,CAAC,gDAAD,EAAmDuB,WAAnD,EAAgEuB,KAAK,CAACZ,OAAtE,CAAL;AACA,iBAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED,cAAM2B,gBAAgB,GAAGJ,MAAM,CAACC,IAAP,CAAYpB,QAAZ,EAAsB,CAAtB,CAAzB;AAEAA,QAAAA,QAAQ,CAACuB,gBAAD,CAAR,CAA2BC,MAA3B,GACEvB,gBAAEC,KAAF,CAAQJ,YAAY,CAAC0B,MAArB,MAAiC,KAAjC,GAAyCC,MAAM,CAAC3B,YAAY,CAAC0B,MAAd,CAA/C,GAAuE,EADzE;AAGAnC,QAAAA,aAAa,CAACkC,gBAAD,EAAmBvB,QAAQ,CAACuB,gBAAD,CAA3B,EAA+C,UAAU3B,KAAV,EAAiB;AAC3E,cAAIA,KAAJ,EAAW;AACT9C,YAAAA,KAAK,CAAC,gDAAD,EAAmDuB,WAAnD,EAAgEuB,KAAK,CAACZ,OAAtE,CAAL;AACA,mBAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD;;AAEDJ,UAAAA,OAAO,CAACM,YAAY,CAAC4B,eAAD,CAAb,EAA0B,gBAAgB9B,KAAhB,EAAuB;AACtD,gBAAIA,KAAJ,EAAW;AACT9C,cAAAA,KAAK,CAAC,4CAAD,EAA+CuB,WAA/C,EAA4DuB,KAAK,CAACZ,OAAlE,CAAL;AACA,qBAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED,gBAAI;AACF,oBAAM,mBACJE,YADI,EAEJ3C,MAFI,EAGJe,GAAG,CAACyD,WAHA,EAIH,GAAE7B,YAAY,CAAC8B,IAAK,IAAGL,gBAAiB,EAJrC,CAAN;AAMD,aAPD,CAOE,OAAO3B,KAAP,EAAmB;AACnB9C,cAAAA,KAAK,CACH,kCADG,EAEF,GAAEgD,YAAY,CAAC8B,IAAK,IAAGL,gBAAiB,EAFtC,CAAL;;AAIAZ,6BAAOf,KAAP,CAAa;AAAEA,gBAAAA;AAAF,eAAb,EAAwB,2CAAxB;AACD;;AAED9C,YAAAA,KAAK,CAAC,8BAAD,EAAkC,GAAEgD,YAAY,CAAC8B,IAAK,IAAGL,gBAAiB,EAA1E,CAAL;AACApD,YAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,mBAAOnC,IAAI,CAAC;AAAEoC,cAAAA,EAAE,EAAEX,SAAN;AAAiBY,cAAAA,OAAO,EAAE;AAA1B,aAAD,CAAX;AACD,WAxBM,CAAP;AAyBD,SA/BY,CAAb;AAgCD,OA/CU,CAAb;AAiDD,KAnGD;;AAqGA,QAAI,kCAAqBvC,GAAG,CAAC2D,IAAzB,MAAmC,KAAnC,IAA4C,qBAAS3D,GAAG,CAAC2D,IAAJ,CAASC,KAAlB,CAAhD,EAA0E;AACxEhF,MAAAA,KAAK,CAAC,yBAAD,CAAL;AACA,aAAOmB,OAAO,CAACC,GAAD,EAAMC,GAAN,EAAWC,IAAX,CAAd;AACD;;AAED,QAAI;AACFtB,MAAAA,KAAK,CAAC,uCAAD,EAA0CoB,GAAG,CAAC2D,IAA9C,CAAL;AACA,YAAMtC,QAAQ,GAAG,6BAAiBrB,GAAG,CAAC2D,IAArB,EAA2BxD,WAA3B,CAAjB;AACAvB,MAAAA,KAAK,CAAC,wCAAD,EAA2CyC,QAA3C,CAAL,CAHE,CAIF;;AACA,UAAIrB,GAAG,CAACI,MAAJ,CAAWyD,IAAX,IAAmB,oCAAuB7D,GAAG,CAAC2D,IAA3B,CAAvB,EAAyD;AACvD/E,QAAAA,KAAK,CAAC,+BAAD,EAAkCuB,WAAlC,CAAL,CADuD,CAEvD;;AACA,cAAM2D,MAAM,GAAG9D,GAAG,CAACyD,WAAnB;AACA1E,QAAAA,IAAI,CAACgF,eAAL,CAAqB;AAAE5D,UAAAA;AAAF,SAArB,EAAsC2D,MAAtC,EAA+CpC,KAAD,IAAW;AACvD9C,UAAAA,KAAK,CAAC,mCAAD,EAAsCuB,WAAtC,CAAL;;AACA,cAAIuB,KAAJ,EAAW;AACT9C,YAAAA,KAAK,CAAC,4CAAD,EAA+CuB,WAA/C,CAAL;AACA,mBAAOD,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED9C,UAAAA,KAAK,CAAC,kBAAD,CAAL;AACAI,UAAAA,OAAO,CAACgF,aAAR,CAAsB7D,WAAtB,EAAmCkB,QAAnC,EAA6CrB,GAAG,CAACI,MAAJ,CAAW6D,QAAxD,EAAkE,UAAUvC,KAAV,EAAiB;AACjFD,YAAAA,WAAW,CAACC,KAAD,EAAQwC,kBAAYC,WAApB,EAAiC9C,QAAjC,CAAX;AACD,WAFD;AAGD,SAXD;AAYD,OAhBD,MAgBO;AACLzC,QAAAA,KAAK,CAAC,yCAAD,EAA4CuB,WAA5C,CAAL;AACAnB,QAAAA,OAAO,CAACoF,UAAR,CAAmBjE,WAAnB,EAAgCkB,QAAhC,EAA0C,UAAUK,KAAV,EAAiB;AACzD9C,UAAAA,KAAK,CAAC,6BAAD,EAAgCyC,QAAhC,CAAL;AACAI,UAAAA,WAAW,CAACC,KAAD,EAAQwC,kBAAYG,WAApB,EAAiChD,QAAjC,CAAX;AACD,SAHD;AAID;AACF,KA5BD,CA4BE,OAAOK,KAAP,EAAmB;AACnB9C,MAAAA,KAAK,CAAC,yCAAD,EAA4CuB,WAA5C,CAAL;;AACAsC,qBAAOf,KAAP,CAAa;AAAEvB,QAAAA;AAAF,OAAb,EAA8B,uDAA9B;;AACA,aAAOD,IAAI,CAACyC,iBAAW2B,UAAX,CAAsBzB,gBAAU0B,gBAAhC,CAAD,CAAX;AACD;AACF,GAxLD;AAyLD;AAED;AACA;AACA;;;AACO,SAAS9E,gBAAT,CAA0BT,OAA1B,EAA4C;AACjD,SAAO,gBAAgBgB,GAAhB,EAAqCC,GAArC,EAA2DC,IAA3D,EAAmF;AACxF,UAAMC,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;;AAEAoC,mBAAO7D,KAAP,CAAa;AAAEuB,MAAAA;AAAF,KAAb,EAA+B,6BAA/B;;AACA,QAAI;AACF,YAAMnB,OAAO,CAACwF,aAAR,CAAsBrE,WAAtB,CAAN;AACD,KAFD,CAEE,OAAOU,GAAP,EAAY;AACZ,UAAIA,GAAJ,EAAS;AACP,eAAOX,IAAI,CAACW,GAAD,CAAX;AACD;AACF;;AACDZ,IAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,WAAOnC,IAAI,CAAC;AAAEoC,MAAAA,EAAE,EAAE4B,kBAAYO;AAAlB,KAAD,CAAX;AACD,GAbD;AAcD;AAED;AACA;AACA;;;AACO,SAAS/E,aAAT,CAAuBV,OAAvB,EAAyC;AAC9C,SAAO,UAAUgB,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACxF,UAAMC,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;AACA,UAAM;AAAEE,MAAAA,QAAF;AAAY0D,MAAAA;AAAZ,QAAyBjE,GAAG,CAACI,MAAnC;;AAEAqC,mBAAO7D,KAAP,CACE;AAAEuB,MAAAA,WAAF;AAAeI,MAAAA,QAAf;AAAyB0D,MAAAA;AAAzB,KADF,EAEG,kEAFH;;AAIAjF,IAAAA,OAAO,CAACU,aAAR,CAAsBS,WAAtB,EAAmCI,QAAnC,EAA6C0D,QAA7C,EAAuD,UAAUpD,GAAV,EAAe;AACpE,UAAIA,GAAJ,EAAS;AACP,eAAOX,IAAI,CAACW,GAAD,CAAX;AACD;;AACDZ,MAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;;AAEAI,qBAAO7D,KAAP,CACE;AAAEuB,QAAAA,WAAF;AAAeI,QAAAA,QAAf;AAAyB0D,QAAAA;AAAzB,OADF,EAEG,sEAFH;;AAIA,aAAO/D,IAAI,CAAC;AAAEoC,QAAAA,EAAE,EAAE4B,kBAAYQ;AAAlB,OAAD,CAAX;AACD,KAXD;AAYD,GApBD;AAqBD;AACD;AACA;AACA;;;AACO,SAAS5E,UAAT,CAAoBd,OAApB,EAAsC;AAC3C,SAAO,UAAUgB,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACxF,UAAM;AAAEkB,MAAAA,OAAF;AAAWuD,MAAAA;AAAX,QAAmB3E,GAAG,CAACI,MAA7B;AACA,UAAMD,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;AACAzB,IAAAA,KAAK,CAAC,wCAAD,EAA2CwC,OAA3C,EAAoDuD,GAApD,EAAyDxE,WAAzD,CAAL;AAEAnB,IAAAA,OAAO,CAACc,UAAR,CAAmBK,WAAnB,EAAgCiB,OAAhC,EAAyCpB,GAAG,CAAC2D,IAA7C,EAAmDgB,GAAnD,EAAwD,UAAUjD,KAAV,EAAiB;AACvE,UAAIA,KAAJ,EAAW;AACT9C,QAAAA,KAAK,CAAC,0BAAD,CAAL;AACA,eAAOsB,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED9C,MAAAA,KAAK,CAAC,4BAAD,CAAL;AACAqB,MAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,aAAOnC,IAAI,CAAC;AACVoC,QAAAA,EAAE,EAAE4B,kBAAYU;AADN,OAAD,CAAX;AAGD,KAXD;AAYD,GAjBD;AAkBD;AAED;AACA;AACA;;;AACO,SAAS/E,oBAAT,CAA8Bb,OAA9B,EAAgD;AACrD,SAAO,UAAUgB,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACxF,UAAMC,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;AACA,UAAMK,MAAM,GAAG1B,OAAO,CAAC2B,UAAR,CAAmBR,WAAnB,EAAgCH,GAAG,CAACI,MAAJ,CAAWG,QAA3C,CAAf;AACAP,IAAAA,GAAG,CAAC6E,IAAJ,CAASnE,MAAT,EAHwF,CAKxF;;AACA,QAAIoE,QAAQ,GAAG,KAAf;AACA9E,IAAAA,GAAG,CAACY,EAAJ,CAAO,KAAP,EAAc,YAAY;AACxBkE,MAAAA,QAAQ,GAAG,IAAX;AACApE,MAAAA,MAAM,CAACQ,IAAP;AACD,KAHD;AAKAlB,IAAAA,GAAG,CAACY,EAAJ,CAAO,OAAP,EAAgB,YAAY;AAC1B,UAAI,CAACkE,QAAL,EAAe;AACbpE,QAAAA,MAAM,CAACqE,KAAP;AACD;AACF,KAJD;AAMArE,IAAAA,MAAM,CAACE,EAAP,CAAU,OAAV,EAAmB,UAAUC,GAAV,EAAe;AAChC,aAAOZ,GAAG,CAAC+E,MAAJ,CAAWC,YAAX,CAAwBpE,GAAxB,CAAP;AACD,KAFD;AAIAH,IAAAA,MAAM,CAACE,EAAP,CAAU,SAAV,EAAqB,YAAY;AAC/BX,MAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,aAAOnC,IAAI,CAAC;AACVoC,QAAAA,EAAE,EAAE4B,kBAAYgB;AADN,OAAD,CAAX;AAGD,KALD;AAMD,GA5BD;AA6BD","sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\nimport _ from 'lodash';\nimport mime from 'mime';\nimport Path from 'path';\n\nimport { IAuth } from '@verdaccio/auth';\nimport {\n  API_ERROR,\n  API_MESSAGE,\n  DIST_TAGS,\n  HEADERS,\n  HTTP_STATUS,\n  errorUtils,\n} from '@verdaccio/core';\nimport { notify } from '@verdaccio/hooks';\nimport { logger } from '@verdaccio/logger';\nimport { allow, expectJson, media } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Callback, CallbackAction, Config, MergeTags, Package, Version } from '@verdaccio/types';\nimport { hasDiffOneKey, isObject, validateMetadata } from '@verdaccio/utils';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport star from './star';\nimport { isPublishablePackage, isRelatedToDeprecation } from './utils';\n\nconst debug = buildDebug('verdaccio:api:publish');\n\nexport default function publish(\n  router: Router,\n  auth: IAuth,\n  storage: Storage,\n  config: Config\n): void {\n  const can = allow(auth);\n\n  /**\n   * Publish a package / update package / un/start a package\n   *\n   * There are multiples scenarios here to be considered:\n   *\n   * 1. Publish scenario\n   *\n   * Publish a package consist of at least 1 step (PUT) with a metadata payload.\n   * When a package is published, an _attachment property is present that contains the data\n   * of the tarball.\n   *\n   * Example flow of publish.\n   *\n   *  npm http fetch PUT 201 http://localhost:4873/@scope%2ftest1 9627ms\n      npm info lifecycle @scope/test1@1.0.1~publish: @scope/test1@1.0.1\n      npm info lifecycle @scope/test1@1.0.1~postpublish: @scope/test1@1.0.1\n      + @scope/test1@1.0.1\n      npm verb exit [ 0, true ]\n   *\n   *\n   * 2. Unpublish scenario\n   *\n   * Unpublish consist in 3 steps.\n   *  1. Try to fetch  metadata -> if it fails, return 404\n   *  2. Compute metadata locally (client side) and send a mutate payload excluding the version to\n   *    be unpublished\n   *    eg: if metadata reflects 1.0.1, 1.0.2 and 1.0.3, the computed metadata won't include 1.0.3.\n   *  3. Once the second step has been successfully finished, delete the tarball.\n   *\n   *  All these steps are consecutive and required, there is no transacions here, if step 3 fails,\n   *  metadata might get corrupted.\n   *\n   *  Note the unpublish call will suffix in the url a /-rev/14-5d500cfce92f90fd revision number,\n   *  this not\n   *  used internally.\n   *\n   *\n   * Example flow of unpublish.\n   *\n   * npm http fetch GET 200 http://localhost:4873/@scope%2ftest1?write=true 1680ms\n   * npm http fetch PUT 201 http://localhost:4873/@scope%2ftest1/-rev/14-5d500cfce92f90fd\n   * 956606ms attempt #2\n   * npm http fetch GET 200 http://localhost:4873/@scope%2ftest1?write=true 1601ms\n   * npm http fetch DELETE 201 http://localhost:4873/@scope%2ftest1/-/test1-1.0.3.tgz/-rev/16\n   * -e11c8db282b2d992 19ms\n   *\n   * 3. Star a package\n   *\n   * Permissions: start a package depends of the publish and unpublish permissions, there is no\n   * specific flag for star or un start.\n   * The URL for star is similar to the unpublish (change package format)\n   *\n   * npm has no enpoint for star a package, rather mutate the metadata and acts as, the difference\n   * is the users property which is part of the payload and the body only includes\n   *\n   * {\n\t\t  \"_id\": pkgName,\n\t  \t\"_rev\": \"3-b0cdaefc9bdb77c8\",\n\t\t  \"users\": {\n\t\t    [username]: boolean value (true, false)\n\t\t  }\n\t}\n   *\n   */\n  router.put(\n    '/:package/:_rev?/:revision?',\n    can('publish'),\n    media(mime.getType('json')),\n    expectJson,\n    publishPackage(storage, config, auth)\n  );\n\n  /**\n   * Un-publishing an entire package.\n   *\n   * This scenario happens when the first call detect there is only one version remaining\n   * in the metadata, then the client decides to DELETE the resource\n   * npm http fetch GET 304 http://localhost:4873/@scope%2ftest1?write=true 1076ms (from cache)\n     npm http fetch DELETE 201 http://localhost:4873/@scope%2ftest1/-rev/18-d8ebe3020bd4ac9c 22ms\n   */\n  router.delete('/:package/-rev/*', can('unpublish'), unPublishPackage(storage));\n\n  // removing a tarball\n  router.delete(\n    '/:package/-/:filename/-rev/:revision',\n    can('unpublish'),\n    can('publish'),\n    removeTarball(storage)\n  );\n\n  // uploading package tarball\n  router.put(\n    '/:package/-/:filename/*',\n    can('publish'),\n    media(HEADERS.OCTET_STREAM),\n    uploadPackageTarball(storage)\n  );\n\n  // adding a version\n  router.put(\n    '/:package/:version/-tag/:tag',\n    can('publish'),\n    media(mime.getType('json')),\n    expectJson,\n    addVersion(storage)\n  );\n}\n\n/**\n * Publish a package\n */\nexport function publishPackage(storage: Storage, config: Config, auth: IAuth): any {\n  const starApi = star(storage);\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const packageName = req.params.package;\n\n    debug('publishing or updating a new version for %o', packageName);\n\n    /**\n     * Write tarball of stream data from package clients.\n     */\n    const createTarball = function (filename: string, data, cb: Callback): void {\n      const stream = storage.addTarball(packageName, filename);\n      stream.on('error', function (err) {\n        debug(\n          'error on stream a tarball %o for %o with error %o',\n          filename,\n          packageName,\n          err.message\n        );\n        cb(err);\n      });\n      stream.on('success', function () {\n        debug('success on stream a tarball %o for %o', filename, packageName);\n        cb();\n      });\n      // this is dumb and memory-consuming, but what choices do we have?\n      // flow: we need first refactor this file before decides which type use here\n      stream.end(Buffer.from(data.data, 'base64'));\n      stream.done();\n    };\n\n    /**\n     * Add new package version in storage\n     */\n    const createVersion = function (version: string, metadata: Version, cb: CallbackAction): void {\n      debug('add a new package version %o to storage %o', version, metadata);\n      storage.addVersion(packageName, version, metadata, null, cb);\n    };\n\n    /**\n     * Add new tags in storage\n     */\n    const addTags = function (tags: MergeTags, cb: CallbackAction): void {\n      debug('add new tag %o to storage', packageName);\n      storage.mergeTags(packageName, tags, cb);\n    };\n\n    const afterChange = function (error, okMessage, metadata: Package): void {\n      const metadataCopy: Package = { ...metadata };\n      debug('after change metadata %o', metadata);\n\n      const { _attachments, versions } = metadataCopy;\n\n      // `npm star` wouldn't have attachments\n      // and `npm deprecate` would have attachments as a empty object, i.e {}\n      if (_.isNil(_attachments) || JSON.stringify(_attachments) === '{}') {\n        debug('no attachments detected');\n        if (error) {\n          debug('no_attachments: after change error with %o', error.message);\n          return next(error);\n        }\n\n        debug('no_attachments: after change success');\n        res.status(HTTP_STATUS.CREATED);\n        return next({\n          ok: okMessage,\n          success: true,\n        });\n      }\n\n      /**\n       * npm-registry-client 0.3+ embeds tarball into the json upload\n       * issue https://github.com/rlidwka/sinopia/issues/31, dealing with it here:\n       */\n\n      const isInvalidBodyFormat =\n        isObject(_attachments) === false ||\n        hasDiffOneKey(_attachments) ||\n        isObject(versions) === false ||\n        hasDiffOneKey(versions);\n\n      if (isInvalidBodyFormat) {\n        // npm is doing something strange again\n        // if this happens in normal circumstances, report it as a bug\n        debug('invalid body format');\n        logger.info({ packageName }, `wrong package format on publish a package @{packageName}`);\n        return next(errorUtils.getBadRequest(API_ERROR.UNSUPORTED_REGISTRY_CALL));\n      }\n\n      if (error && error.status !== HTTP_STATUS.CONFLICT) {\n        debug('error on change or update a package with %o', error.message);\n        return next(error);\n      }\n\n      // at this point document is either created or existed before\n      const [firstAttachmentKey] = Object.keys(_attachments);\n\n      createTarball(\n        Path.basename(firstAttachmentKey),\n        _attachments[firstAttachmentKey],\n        function (error) {\n          debug('creating a tarball %o', firstAttachmentKey);\n          if (error) {\n            debug('error on create a tarball for %o with error %o', packageName, error.message);\n            return next(error);\n          }\n\n          const versionToPublish = Object.keys(versions)[0];\n\n          versions[versionToPublish].readme =\n            _.isNil(metadataCopy.readme) === false ? String(metadataCopy.readme) : '';\n\n          createVersion(versionToPublish, versions[versionToPublish], function (error) {\n            if (error) {\n              debug('error on create a version for %o with error %o', packageName, error.message);\n              return next(error);\n            }\n\n            addTags(metadataCopy[DIST_TAGS], async function (error) {\n              if (error) {\n                debug('error on create a tag for %o with error %o', packageName, error.message);\n                return next(error);\n              }\n\n              try {\n                await notify(\n                  metadataCopy,\n                  config,\n                  req.remote_user,\n                  `${metadataCopy.name}@${versionToPublish}`\n                );\n              } catch (error: any) {\n                debug(\n                  'error on notify add a new tag %o',\n                  `${metadataCopy.name}@${versionToPublish}`\n                );\n                logger.error({ error }, 'notify batch service has failed: @{error}');\n              }\n\n              debug('add a tag succesfully for %o', `${metadataCopy.name}@${versionToPublish}`);\n              res.status(HTTP_STATUS.CREATED);\n              return next({ ok: okMessage, success: true });\n            });\n          });\n        }\n      );\n    };\n\n    if (isPublishablePackage(req.body) === false && isObject(req.body.users)) {\n      debug('starting star a package');\n      return starApi(req, res, next);\n    }\n\n    try {\n      debug('pre validation metadata to publish %o', req.body);\n      const metadata = validateMetadata(req.body, packageName);\n      debug('post validation metadata to publish %o', metadata);\n      // treating deprecation as updating a package\n      if (req.params._rev || isRelatedToDeprecation(req.body)) {\n        debug('updating a new version for %o', packageName);\n        // we check unpublish permissions, an update is basically remove versions\n        const remote = req.remote_user;\n        auth.allow_unpublish({ packageName }, remote, (error) => {\n          debug('allowed to unpublish a package %o', packageName);\n          if (error) {\n            debug('not allowed to unpublish a version for  %o', packageName);\n            return next(error);\n          }\n\n          debug('update a package');\n          storage.changePackage(packageName, metadata, req.params.revision, function (error) {\n            afterChange(error, API_MESSAGE.PKG_CHANGED, metadata);\n          });\n        });\n      } else {\n        debug('adding a new version for the package %o', packageName);\n        storage.addPackage(packageName, metadata, function (error) {\n          debug('package metadata updated %o', metadata);\n          afterChange(error, API_MESSAGE.PKG_CREATED, metadata);\n        });\n      }\n    } catch (error: any) {\n      debug('error on publish, bad package format %o', packageName);\n      logger.error({ packageName }, 'error on publish, bad package data for @{packageName}');\n      return next(errorUtils.getBadData(API_ERROR.BAD_PACKAGE_DATA));\n    }\n  };\n}\n\n/**\n * un-publish a package\n */\nexport function unPublishPackage(storage: Storage) {\n  return async function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n    const packageName = req.params.package;\n\n    logger.debug({ packageName }, `unpublishing @{packageName}`);\n    try {\n      await storage.removePackage(packageName);\n    } catch (err) {\n      if (err) {\n        return next(err);\n      }\n    }\n    res.status(HTTP_STATUS.CREATED);\n    return next({ ok: API_MESSAGE.PKG_REMOVED });\n  };\n}\n\n/**\n * Delete tarball\n */\nexport function removeTarball(storage: Storage) {\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const packageName = req.params.package;\n    const { filename, revision } = req.params;\n\n    logger.debug(\n      { packageName, filename, revision },\n      `removing a tarball for @{packageName}-@{tarballName}-@{revision}`\n    );\n    storage.removeTarball(packageName, filename, revision, function (err) {\n      if (err) {\n        return next(err);\n      }\n      res.status(HTTP_STATUS.CREATED);\n\n      logger.debug(\n        { packageName, filename, revision },\n        `success remove tarball for @{packageName}-@{tarballName}-@{revision}`\n      );\n      return next({ ok: API_MESSAGE.TARBALL_REMOVED });\n    });\n  };\n}\n/**\n * Adds a new version\n */\nexport function addVersion(storage: Storage) {\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const { version, tag } = req.params;\n    const packageName = req.params.package;\n    debug('add a new version %o and tag %o for %o', version, tag, packageName);\n\n    storage.addVersion(packageName, version, req.body, tag, function (error) {\n      if (error) {\n        debug('error on add new version');\n        return next(error);\n      }\n\n      debug('success on add new version');\n      res.status(HTTP_STATUS.CREATED);\n      return next({\n        ok: API_MESSAGE.PKG_PUBLISHED,\n      });\n    });\n  };\n}\n\n/**\n * uploadPackageTarball\n */\nexport function uploadPackageTarball(storage: Storage) {\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const packageName = req.params.package;\n    const stream = storage.addTarball(packageName, req.params.filename);\n    req.pipe(stream);\n\n    // checking if end event came before closing\n    let complete = false;\n    req.on('end', function () {\n      complete = true;\n      stream.done();\n    });\n\n    req.on('close', function () {\n      if (!complete) {\n        stream.abort();\n      }\n    });\n\n    stream.on('error', function (err) {\n      return res.locals.report_error(err);\n    });\n\n    stream.on('success', function () {\n      res.status(HTTP_STATUS.CREATED);\n      return next({\n        ok: API_MESSAGE.TARBALL_UPLOADED,\n      });\n    });\n  };\n}\n"],"file":"publish.js"}
+{"version":3,"sources":["../src/publish.ts"],"names":["debug","publish","router","auth","storage","config","can","put","mime","getType","expectJson","publishPackage","delete","unPublishPackage","removeTarball","HEADERS","OCTET_STREAM","uploadPackageTarball","addVersion","starApi","req","res","next","packageName","params","package","createTarball","filename","data","cb","stream","addTarball","on","err","message","end","Buffer","from","done","createVersion","version","metadata","addTags","tags","mergeTags","afterChange","error","okMessage","metadataCopy","_attachments","versions","_","isNil","JSON","stringify","status","HTTP_STATUS","CREATED","ok","success","isInvalidBodyFormat","logger","info","errorUtils","getBadRequest","API_ERROR","UNSUPORTED_REGISTRY_CALL","CONFLICT","firstAttachmentKey","Object","keys","Path","basename","versionToPublish","readme","String","DIST_TAGS","remote_user","name","body","users","_rev","remote","allow_unpublish","changePackage","revision","API_MESSAGE","PKG_CHANGED","addPackage","PKG_CREATED","getBadData","BAD_PACKAGE_DATA","removePackage","PKG_REMOVED","TARBALL_REMOVED","tag","PKG_PUBLISHED","pipe","complete","abort","locals","report_error","TARBALL_UPLOADED"],"mappings":";;;;;;;;;;;;AAAA;;AAEA;;AACA;;AACA;;AAGA;;AAQA;;AACA;;AACA;;AAGA;;AAGA;;AACA;;;;AAEA,MAAMA,KAAK,GAAG,oBAAW,uBAAX,CAAd;;AAEe,SAASC,OAAT,CACbC,MADa,EAEbC,IAFa,EAGbC,OAHa,EAIbC,MAJa,EAKP;AACN,QAAMC,GAAG,GAAG,uBAAMH,IAAN,CAAZ;AAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AACED,EAAAA,MAAM,CAACK,GAAP,CACE,6BADF,EAEED,GAAG,CAAC,SAAD,CAFL,EAGE,uBAAME,cAAKC,OAAL,CAAa,MAAb,CAAN,CAHF,EAIEC,sBAJF,EAKEC,cAAc,CAACP,OAAD,EAAUC,MAAV,EAAkBF,IAAlB,CALhB;AAQA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;;AACED,EAAAA,MAAM,CAACU,MAAP,CAAc,kBAAd,EAAkCN,GAAG,CAAC,WAAD,CAArC,EAAoDO,gBAAgB,CAACT,OAAD,CAApE,EAnFM,CAqFN;;AACAF,EAAAA,MAAM,CAACU,MAAP,CACE,sCADF,EAEEN,GAAG,CAAC,WAAD,CAFL,EAGEA,GAAG,CAAC,SAAD,CAHL,EAIEQ,aAAa,CAACV,OAAD,CAJf,EAtFM,CA6FN;;AACAF,EAAAA,MAAM,CAACK,GAAP,CACE,yBADF,EAEED,GAAG,CAAC,SAAD,CAFL,EAGE,uBAAMS,cAAQC,YAAd,CAHF,EAIEC,oBAAoB,CAACb,OAAD,CAJtB,EA9FM,CAqGN;;AACAF,EAAAA,MAAM,CAACK,GAAP,CACE,8BADF,EAEED,GAAG,CAAC,SAAD,CAFL,EAGE,uBAAME,cAAKC,OAAL,CAAa,MAAb,CAAN,CAHF,EAIEC,sBAJF,EAKEQ,UAAU,CAACd,OAAD,CALZ;AAOD;AAED;AACA;AACA;;;AACO,SAASO,cAAT,CAAwBP,OAAxB,EAA0CC,MAA1C,EAA0DF,IAA1D,EAA4E;AACjF,QAAMgB,OAAO,GAAG,mBAAKf,OAAL,CAAhB;AACA,SAAO,UAAUgB,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACxF,UAAMC,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;AAEAzB,IAAAA,KAAK,CAAC,6CAAD,EAAgDuB,WAAhD,CAAL;AAEA;AACJ;AACA;;AACI,UAAMG,aAAa,GAAG,UAAUC,QAAV,EAA4BC,IAA5B,EAAkCC,EAAlC,EAAsD;AAC1E,YAAMC,MAAM,GAAG1B,OAAO,CAAC2B,UAAR,CAAmBR,WAAnB,EAAgCI,QAAhC,CAAf;AACAG,MAAAA,MAAM,CAACE,EAAP,CAAU,OAAV,EAAmB,UAAUC,GAAV,EAAe;AAChCjC,QAAAA,KAAK,CACH,mDADG,EAEH2B,QAFG,EAGHJ,WAHG,EAIHU,GAAG,CAACC,OAJD,CAAL;AAMAL,QAAAA,EAAE,CAACI,GAAD,CAAF;AACD,OARD;AASAH,MAAAA,MAAM,CAACE,EAAP,CAAU,SAAV,EAAqB,YAAY;AAC/BhC,QAAAA,KAAK,CAAC,uCAAD,EAA0C2B,QAA1C,EAAoDJ,WAApD,CAAL;AACAM,QAAAA,EAAE;AACH,OAHD,EAX0E,CAe1E;AACA;;AACAC,MAAAA,MAAM,CAACK,GAAP,CAAWC,MAAM,CAACC,IAAP,CAAYT,IAAI,CAACA,IAAjB,EAAuB,QAAvB,CAAX;AACAE,MAAAA,MAAM,CAACQ,IAAP;AACD,KAnBD;AAqBA;AACJ;AACA;;;AACI,UAAMC,aAAa,GAAG,UAAUC,OAAV,EAA2BC,QAA3B,EAA8CZ,EAA9C,EAAwE;AAC5F7B,MAAAA,KAAK,CAAC,4CAAD,EAA+CwC,OAA/C,EAAwDC,QAAxD,CAAL;AACArC,MAAAA,OAAO,CAACc,UAAR,CAAmBK,WAAnB,EAAgCiB,OAAhC,EAAyCC,QAAzC,EAAmD,IAAnD,EAAyDZ,EAAzD;AACD,KAHD;AAKA;AACJ;AACA;;;AACI,UAAMa,OAAO,GAAG,UAAUC,IAAV,EAA2Bd,EAA3B,EAAqD;AACnE7B,MAAAA,KAAK,CAAC,2BAAD,EAA8BuB,WAA9B,CAAL;AACAnB,MAAAA,OAAO,CAACwC,SAAR,CAAkBrB,WAAlB,EAA+BoB,IAA/B,EAAqCd,EAArC;AACD,KAHD;;AAKA,UAAMgB,WAAW,GAAG,UAAUC,KAAV,EAAiBC,SAAjB,EAA4BN,QAA5B,EAAqD;AACvE,YAAMO,YAAqB,GAAG,EAAE,GAAGP;AAAL,OAA9B;AACAzC,MAAAA,KAAK,CAAC,0BAAD,EAA6ByC,QAA7B,CAAL;AAEA,YAAM;AAAEQ,QAAAA,YAAF;AAAgBC,QAAAA;AAAhB,UAA6BF,YAAnC,CAJuE,CAMvE;AACA;;AACA,UAAIG,gBAAEC,KAAF,CAAQH,YAAR,KAAyBI,IAAI,CAACC,SAAL,CAAeL,YAAf,MAAiC,IAA9D,EAAoE;AAClEjD,QAAAA,KAAK,CAAC,yBAAD,CAAL;;AACA,YAAI8C,KAAJ,EAAW;AACT9C,UAAAA,KAAK,CAAC,4CAAD,EAA+C8C,KAAK,CAACZ,OAArD,CAAL;AACA,iBAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED9C,QAAAA,KAAK,CAAC,sCAAD,CAAL;AACAqB,QAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,eAAOnC,IAAI,CAAC;AACVoC,UAAAA,EAAE,EAAEX,SADM;AAEVY,UAAAA,OAAO,EAAE;AAFC,SAAD,CAAX;AAID;AAED;AACN;AACA;AACA;;;AAEM,YAAMC,mBAAmB,GACvB,qBAASX,YAAT,MAA2B,KAA3B,IACA,0BAAcA,YAAd,CADA,IAEA,qBAASC,QAAT,MAAuB,KAFvB,IAGA,0BAAcA,QAAd,CAJF;;AAMA,UAAIU,mBAAJ,EAAyB;AACvB;AACA;AACA5D,QAAAA,KAAK,CAAC,qBAAD,CAAL;;AACA6D,uBAAOC,IAAP,CAAY;AAAEvC,UAAAA;AAAF,SAAZ,EAA8B,0DAA9B;;AACA,eAAOD,IAAI,CAACyC,iBAAWC,aAAX,CAAyBC,gBAAUC,wBAAnC,CAAD,CAAX;AACD;;AAED,UAAIpB,KAAK,IAAIA,KAAK,CAACS,MAAN,KAAiBC,kBAAYW,QAA1C,EAAoD;AAClDnE,QAAAA,KAAK,CAAC,6CAAD,EAAgD8C,KAAK,CAACZ,OAAtD,CAAL;AACA,eAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD,OA7CsE,CA+CvE;;;AACA,YAAM,CAACsB,kBAAD,IAAuBC,MAAM,CAACC,IAAP,CAAYrB,YAAZ,CAA7B;AAEAvB,MAAAA,aAAa,CACX6C,cAAKC,QAAL,CAAcJ,kBAAd,CADW,EAEXnB,YAAY,CAACmB,kBAAD,CAFD,EAGX,UAAUtB,KAAV,EAAiB;AACf9C,QAAAA,KAAK,CAAC,uBAAD,EAA0BoE,kBAA1B,CAAL;;AACA,YAAItB,KAAJ,EAAW;AACT9C,UAAAA,KAAK,CAAC,gDAAD,EAAmDuB,WAAnD,EAAgEuB,KAAK,CAACZ,OAAtE,CAAL;AACA,iBAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED,cAAM2B,gBAAgB,GAAGJ,MAAM,CAACC,IAAP,CAAYpB,QAAZ,EAAsB,CAAtB,CAAzB;AAEAA,QAAAA,QAAQ,CAACuB,gBAAD,CAAR,CAA2BC,MAA3B,GACEvB,gBAAEC,KAAF,CAAQJ,YAAY,CAAC0B,MAArB,MAAiC,KAAjC,GAAyCC,MAAM,CAAC3B,YAAY,CAAC0B,MAAd,CAA/C,GAAuE,EADzE;AAGAnC,QAAAA,aAAa,CAACkC,gBAAD,EAAmBvB,QAAQ,CAACuB,gBAAD,CAA3B,EAA+C,UAAU3B,KAAV,EAAiB;AAC3E,cAAIA,KAAJ,EAAW;AACT9C,YAAAA,KAAK,CAAC,gDAAD,EAAmDuB,WAAnD,EAAgEuB,KAAK,CAACZ,OAAtE,CAAL;AACA,mBAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD;;AAEDJ,UAAAA,OAAO,CAACM,YAAY,CAAC4B,eAAD,CAAb,EAA0B,gBAAgB9B,KAAhB,EAAuB;AACtD,gBAAIA,KAAJ,EAAW;AACT9C,cAAAA,KAAK,CAAC,4CAAD,EAA+CuB,WAA/C,EAA4DuB,KAAK,CAACZ,OAAlE,CAAL;AACA,qBAAOZ,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED,gBAAI;AACF,oBAAM,mBACJE,YADI,EAEJ3C,MAFI,EAGJe,GAAG,CAACyD,WAHA,EAIH,GAAE7B,YAAY,CAAC8B,IAAK,IAAGL,gBAAiB,EAJrC,CAAN;AAMD,aAPD,CAOE,OAAO3B,KAAP,EAAmB;AACnB9C,cAAAA,KAAK,CACH,kCADG,EAEF,GAAEgD,YAAY,CAAC8B,IAAK,IAAGL,gBAAiB,EAFtC,CAAL;;AAIAZ,6BAAOf,KAAP,CAAa;AAAEA,gBAAAA;AAAF,eAAb,EAAwB,2CAAxB;AACD;;AAED9C,YAAAA,KAAK,CAAC,8BAAD,EAAkC,GAAEgD,YAAY,CAAC8B,IAAK,IAAGL,gBAAiB,EAA1E,CAAL;AACApD,YAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,mBAAOnC,IAAI,CAAC;AAAEoC,cAAAA,EAAE,EAAEX,SAAN;AAAiBY,cAAAA,OAAO,EAAE;AAA1B,aAAD,CAAX;AACD,WAxBM,CAAP;AAyBD,SA/BY,CAAb;AAgCD,OA/CU,CAAb;AAiDD,KAnGD;;AAqGA,QAAI,kCAAqBvC,GAAG,CAAC2D,IAAzB,MAAmC,KAAnC,IAA4C,qBAAS3D,GAAG,CAAC2D,IAAJ,CAASC,KAAlB,CAAhD,EAA0E;AACxEhF,MAAAA,KAAK,CAAC,yBAAD,CAAL;AACA,aAAOmB,OAAO,CAACC,GAAD,EAAMC,GAAN,EAAWC,IAAX,CAAd;AACD;;AAED,QAAI;AACFtB,MAAAA,KAAK,CAAC,uCAAD,EAA0CoB,GAAG,CAAC2D,IAA9C,CAAL;AACA,YAAMtC,QAAQ,GAAG,6BAAiBrB,GAAG,CAAC2D,IAArB,EAA2BxD,WAA3B,CAAjB;AACAvB,MAAAA,KAAK,CAAC,wCAAD,EAA2CyC,QAA3C,CAAL,CAHE,CAIF;;AACA,UAAIrB,GAAG,CAACI,MAAJ,CAAWyD,IAAX,IAAmB,oCAAuB7D,GAAG,CAAC2D,IAA3B,CAAvB,EAAyD;AACvD/E,QAAAA,KAAK,CAAC,+BAAD,EAAkCuB,WAAlC,CAAL,CADuD,CAEvD;;AACA,cAAM2D,MAAM,GAAG9D,GAAG,CAACyD,WAAnB;AACA1E,QAAAA,IAAI,CAACgF,eAAL,CAAqB;AAAE5D,UAAAA;AAAF,SAArB,EAAsC2D,MAAtC,EAA+CpC,KAAD,IAAW;AACvD9C,UAAAA,KAAK,CAAC,mCAAD,EAAsCuB,WAAtC,CAAL;;AACA,cAAIuB,KAAJ,EAAW;AACT9C,YAAAA,KAAK,CAAC,4CAAD,EAA+CuB,WAA/C,CAAL;AACA,mBAAOD,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED9C,UAAAA,KAAK,CAAC,kBAAD,CAAL;AACAI,UAAAA,OAAO,CAACgF,aAAR,CAAsB7D,WAAtB,EAAmCkB,QAAnC,EAA6CrB,GAAG,CAACI,MAAJ,CAAW6D,QAAxD,EAAkE,UAAUvC,KAAV,EAAiB;AACjFD,YAAAA,WAAW,CAACC,KAAD,EAAQwC,kBAAYC,WAApB,EAAiC9C,QAAjC,CAAX;AACD,WAFD;AAGD,SAXD;AAYD,OAhBD,MAgBO;AACLzC,QAAAA,KAAK,CAAC,yCAAD,EAA4CuB,WAA5C,CAAL;AACAnB,QAAAA,OAAO,CAACoF,UAAR,CAAmBjE,WAAnB,EAAgCkB,QAAhC,EAA0C,UAAUK,KAAV,EAAiB;AACzD9C,UAAAA,KAAK,CAAC,6BAAD,EAAgCyC,QAAhC,CAAL;AACAI,UAAAA,WAAW,CAACC,KAAD,EAAQwC,kBAAYG,WAApB,EAAiChD,QAAjC,CAAX;AACD,SAHD;AAID;AACF,KA5BD,CA4BE,OAAOK,KAAP,EAAmB;AACnB9C,MAAAA,KAAK,CAAC,yCAAD,EAA4CuB,WAA5C,CAAL;;AACAsC,qBAAOf,KAAP,CAAa;AAAEvB,QAAAA;AAAF,OAAb,EAA8B,uDAA9B;;AACA,aAAOD,IAAI,CAACyC,iBAAW2B,UAAX,CAAsBzB,gBAAU0B,gBAAhC,CAAD,CAAX;AACD;AACF,GAxLD;AAyLD;AAED;AACA;AACA;;;AACO,SAAS9E,gBAAT,CAA0BT,OAA1B,EAA4C;AACjD,SAAO,gBAAgBgB,GAAhB,EAAqCC,GAArC,EAA2DC,IAA3D,EAAmF;AACxF,UAAMC,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;;AAEAoC,mBAAO7D,KAAP,CAAa;AAAEuB,MAAAA;AAAF,KAAb,EAA+B,6BAA/B;;AACA,QAAI;AACF,YAAMnB,OAAO,CAACwF,aAAR,CAAsBrE,WAAtB,CAAN;AACD,KAFD,CAEE,OAAOU,GAAP,EAAY;AACZ,UAAIA,GAAJ,EAAS;AACP,eAAOX,IAAI,CAACW,GAAD,CAAX;AACD;AACF;;AACDZ,IAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,WAAOnC,IAAI,CAAC;AAAEoC,MAAAA,EAAE,EAAE4B,kBAAYO;AAAlB,KAAD,CAAX;AACD,GAbD;AAcD;AAED;AACA;AACA;;;AACO,SAAS/E,aAAT,CAAuBV,OAAvB,EAAyC;AAC9C,SAAO,UAAUgB,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACxF,UAAMC,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;AACA,UAAM;AAAEE,MAAAA,QAAF;AAAY0D,MAAAA;AAAZ,QAAyBjE,GAAG,CAACI,MAAnC;;AAEAqC,mBAAO7D,KAAP,CACE;AAAEuB,MAAAA,WAAF;AAAeI,MAAAA,QAAf;AAAyB0D,MAAAA;AAAzB,KADF,EAEG,kEAFH;;AAIAjF,IAAAA,OAAO,CAACU,aAAR,CAAsBS,WAAtB,EAAmCI,QAAnC,EAA6C0D,QAA7C,EAAuD,UAAUpD,GAAV,EAAe;AACpE,UAAIA,GAAJ,EAAS;AACP,eAAOX,IAAI,CAACW,GAAD,CAAX;AACD;;AACDZ,MAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;;AAEAI,qBAAO7D,KAAP,CACE;AAAEuB,QAAAA,WAAF;AAAeI,QAAAA,QAAf;AAAyB0D,QAAAA;AAAzB,OADF,EAEG,sEAFH;;AAIA,aAAO/D,IAAI,CAAC;AAAEoC,QAAAA,EAAE,EAAE4B,kBAAYQ;AAAlB,OAAD,CAAX;AACD,KAXD;AAYD,GApBD;AAqBD;AACD;AACA;AACA;;;AACO,SAAS5E,UAAT,CAAoBd,OAApB,EAAsC;AAC3C,SAAO,UAAUgB,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACxF,UAAM;AAAEkB,MAAAA,OAAF;AAAWuD,MAAAA;AAAX,QAAmB3E,GAAG,CAACI,MAA7B;AACA,UAAMD,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;AACAzB,IAAAA,KAAK,CAAC,wCAAD,EAA2CwC,OAA3C,EAAoDuD,GAApD,EAAyDxE,WAAzD,CAAL;AAEAnB,IAAAA,OAAO,CAACc,UAAR,CAAmBK,WAAnB,EAAgCiB,OAAhC,EAAyCpB,GAAG,CAAC2D,IAA7C,EAAmDgB,GAAnD,EAAwD,UAAUjD,KAAV,EAAiB;AACvE,UAAIA,KAAJ,EAAW;AACT9C,QAAAA,KAAK,CAAC,0BAAD,CAAL;AACA,eAAOsB,IAAI,CAACwB,KAAD,CAAX;AACD;;AAED9C,MAAAA,KAAK,CAAC,4BAAD,CAAL;AACAqB,MAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,aAAOnC,IAAI,CAAC;AACVoC,QAAAA,EAAE,EAAE4B,kBAAYU;AADN,OAAD,CAAX;AAGD,KAXD;AAYD,GAjBD;AAkBD;AAED;AACA;AACA;;;AACO,SAAS/E,oBAAT,CAA8Bb,OAA9B,EAAgD;AACrD,SAAO,UAAUgB,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACxF,UAAMC,WAAW,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAA/B;AACA,UAAMK,MAAM,GAAG1B,OAAO,CAAC2B,UAAR,CAAmBR,WAAnB,EAAgCH,GAAG,CAACI,MAAJ,CAAWG,QAA3C,CAAf;AACAP,IAAAA,GAAG,CAAC6E,IAAJ,CAASnE,MAAT,EAHwF,CAKxF;;AACA,QAAIoE,QAAQ,GAAG,KAAf;AACA9E,IAAAA,GAAG,CAACY,EAAJ,CAAO,KAAP,EAAc,YAAY;AACxBkE,MAAAA,QAAQ,GAAG,IAAX;AACApE,MAAAA,MAAM,CAACQ,IAAP;AACD,KAHD;AAKAlB,IAAAA,GAAG,CAACY,EAAJ,CAAO,OAAP,EAAgB,YAAY;AAC1B,UAAI,CAACkE,QAAL,EAAe;AACbpE,QAAAA,MAAM,CAACqE,KAAP;AACD;AACF,KAJD;AAMArE,IAAAA,MAAM,CAACE,EAAP,CAAU,OAAV,EAAmB,UAAUC,GAAV,EAAe;AAChC,aAAOZ,GAAG,CAAC+E,MAAJ,CAAWC,YAAX,CAAwBpE,GAAxB,CAAP;AACD,KAFD;AAIAH,IAAAA,MAAM,CAACE,EAAP,CAAU,SAAV,EAAqB,YAAY;AAC/BX,MAAAA,GAAG,CAACkC,MAAJ,CAAWC,kBAAYC,OAAvB;AACA,aAAOnC,IAAI,CAAC;AACVoC,QAAAA,EAAE,EAAE4B,kBAAYgB;AADN,OAAD,CAAX;AAGD,KALD;AAMD,GA5BD;AA6BD","sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\nimport _ from 'lodash';\nimport mime from 'mime';\nimport Path from 'path';\n\nimport { IAuth } from '@verdaccio/auth';\nimport {\n  API_ERROR,\n  API_MESSAGE,\n  DIST_TAGS,\n  HEADERS,\n  HTTP_STATUS,\n  errorUtils,\n} from '@verdaccio/core';\nimport { notify } from '@verdaccio/hooks';\nimport { logger } from '@verdaccio/logger';\nimport { allow, expectJson, media } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Callback, CallbackAction, Config, MergeTags, Package, Version } from '@verdaccio/types';\nimport { hasDiffOneKey, isObject, validateMetadata } from '@verdaccio/utils';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport star from './star';\nimport { isPublishablePackage, isRelatedToDeprecation } from './utils';\n\nconst debug = buildDebug('verdaccio:api:publish');\n\nexport default function publish(\n  router: Router,\n  auth: IAuth,\n  storage: Storage,\n  config: Config\n): void {\n  const can = allow(auth);\n\n  /**\n   * Publish a package / update package / un/start a package\n   *\n   * There are multiples scenarios here to be considered:\n   *\n   * 1. Publish scenario\n   *\n   * Publish a package consist of at least 1 step (PUT) with a metadata payload.\n   * When a package is published, an _attachment property is present that contains the data\n   * of the tarball.\n   *\n   * Example flow of publish.\n   *\n   *  npm http fetch PUT 201 http://localhost:4873/@scope%2ftest1 9627ms\n      npm info lifecycle @scope/test1@1.0.1~publish: @scope/test1@1.0.1\n      npm info lifecycle @scope/test1@1.0.1~postpublish: @scope/test1@1.0.1\n      + @scope/test1@1.0.1\n      npm verb exit [ 0, true ]\n   *\n   *\n   * 2. Unpublish scenario\n   *\n   * Unpublish consist in 3 steps.\n   *  1. Try to fetch  metadata -> if it fails, return 404\n   *  2. Compute metadata locally (client side) and send a mutate payload excluding the version to\n   *    be unpublished\n   *    eg: if metadata reflects 1.0.1, 1.0.2 and 1.0.3, the computed metadata won't include 1.0.3.\n   *  3. Once the second step has been successfully finished, delete the tarball.\n   *\n   *  All these steps are consecutive and required, there is no transacions here, if step 3 fails,\n   *  metadata might get corrupted.\n   *\n   *  Note the unpublish call will suffix in the url a /-rev/14-5d500cfce92f90fd revision number,\n   *  this not\n   *  used internally.\n   *\n   *\n   * Example flow of unpublish.\n   *\n   * npm http fetch GET 200 http://localhost:4873/@scope%2ftest1?write=true 1680ms\n   * npm http fetch PUT 201 http://localhost:4873/@scope%2ftest1/-rev/14-5d500cfce92f90fd\n   * 956606ms attempt #2\n   * npm http fetch GET 200 http://localhost:4873/@scope%2ftest1?write=true 1601ms\n   * npm http fetch DELETE 201 http://localhost:4873/@scope%2ftest1/-/test1-1.0.3.tgz/-rev/16\n   * -e11c8db282b2d992 19ms\n   *\n   * 3. Star a package\n   *\n   * Permissions: start a package depends of the publish and unpublish permissions, there is no\n   * specific flag for star or un start.\n   * The URL for star is similar to the unpublish (change package format)\n   *\n   * npm has no enpoint for star a package, rather mutate the metadata and acts as, the difference\n   * is the users property which is part of the payload and the body only includes\n   *\n   * {\n\t\t  \"_id\": pkgName,\n\t  \t\"_rev\": \"3-b0cdaefc9bdb77c8\",\n\t\t  \"users\": {\n\t\t    [username]: boolean value (true, false)\n\t\t  }\n\t}\n   *\n   */\n  router.put(\n    '/:package/:_rev?/:revision?',\n    can('publish'),\n    media(mime.getType('json')),\n    expectJson,\n    publishPackage(storage, config, auth)\n  );\n\n  /**\n   * Un-publishing an entire package.\n   *\n   * This scenario happens when the first call detect there is only one version remaining\n   * in the metadata, then the client decides to DELETE the resource\n   * npm http fetch GET 304 http://localhost:4873/@scope%2ftest1?write=true 1076ms (from cache)\n     npm http fetch DELETE 201 http://localhost:4873/@scope%2ftest1/-rev/18-d8ebe3020bd4ac9c 22ms\n   */\n  router.delete('/:package/-rev/*', can('unpublish'), unPublishPackage(storage));\n\n  // removing a tarball\n  router.delete(\n    '/:package/-/:filename/-rev/:revision',\n    can('unpublish'),\n    can('publish'),\n    removeTarball(storage)\n  );\n\n  // uploading package tarball\n  router.put(\n    '/:package/-/:filename/*',\n    can('publish'),\n    media(HEADERS.OCTET_STREAM),\n    uploadPackageTarball(storage)\n  );\n\n  // adding a version\n  router.put(\n    '/:package/:version/-tag/:tag',\n    can('publish'),\n    media(mime.getType('json')),\n    expectJson,\n    addVersion(storage)\n  );\n}\n\n/**\n * Publish a package\n */\nexport function publishPackage(storage: Storage, config: Config, auth: IAuth): any {\n  const starApi = star(storage);\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const packageName = req.params.package;\n\n    debug('publishing or updating a new version for %o', packageName);\n\n    /**\n     * Write tarball of stream data from package clients.\n     */\n    const createTarball = function (filename: string, data, cb: Callback): void {\n      const stream = storage.addTarball(packageName, filename);\n      stream.on('error', function (err) {\n        debug(\n          'error on stream a tarball %o for %o with error %o',\n          filename,\n          packageName,\n          err.message\n        );\n        cb(err);\n      });\n      stream.on('success', function () {\n        debug('success on stream a tarball %o for %o', filename, packageName);\n        cb();\n      });\n      // this is dumb and memory-consuming, but what choices do we have?\n      // flow: we need first refactor this file before decides which type use here\n      stream.end(Buffer.from(data.data, 'base64'));\n      stream.done();\n    };\n\n    /**\n     * Add new package version in storage\n     */\n    const createVersion = function (version: string, metadata: Version, cb: CallbackAction): void {\n      debug('add a new package version %o to storage %o', version, metadata);\n      storage.addVersion(packageName, version, metadata, null, cb);\n    };\n\n    /**\n     * Add new tags in storage\n     */\n    const addTags = function (tags: MergeTags, cb: CallbackAction): void {\n      debug('add new tag %o to storage', packageName);\n      storage.mergeTags(packageName, tags, cb);\n    };\n\n    const afterChange = function (error, okMessage, metadata: Package): void {\n      const metadataCopy: Package = { ...metadata };\n      debug('after change metadata %o', metadata);\n\n      const { _attachments, versions } = metadataCopy;\n\n      // `npm star` wouldn't have attachments\n      // and `npm deprecate` would have attachments as a empty object, i.e {}\n      if (_.isNil(_attachments) || JSON.stringify(_attachments) === '{}') {\n        debug('no attachments detected');\n        if (error) {\n          debug('no_attachments: after change error with %o', error.message);\n          return next(error);\n        }\n\n        debug('no_attachments: after change success');\n        res.status(HTTP_STATUS.CREATED);\n        return next({\n          ok: okMessage,\n          success: true,\n        });\n      }\n\n      /**\n       * npm-registry-client 0.3+ embeds tarball into the json upload\n       * issue https://github.com/rlidwka/sinopia/issues/31, dealing with it here:\n       */\n\n      const isInvalidBodyFormat =\n        isObject(_attachments) === false ||\n        hasDiffOneKey(_attachments) ||\n        isObject(versions) === false ||\n        hasDiffOneKey(versions);\n\n      if (isInvalidBodyFormat) {\n        // npm is doing something strange again\n        // if this happens in normal circumstances, report it as a bug\n        debug('invalid body format');\n        logger.info({ packageName }, `wrong package format on publish a package @{packageName}`);\n        return next(errorUtils.getBadRequest(API_ERROR.UNSUPORTED_REGISTRY_CALL));\n      }\n\n      if (error && error.status !== HTTP_STATUS.CONFLICT) {\n        debug('error on change or update a package with %o', error.message);\n        return next(error);\n      }\n\n      // at this point document is either created or existed before\n      const [firstAttachmentKey] = Object.keys(_attachments);\n\n      createTarball(\n        Path.basename(firstAttachmentKey),\n        _attachments[firstAttachmentKey],\n        function (error) {\n          debug('creating a tarball %o', firstAttachmentKey);\n          if (error) {\n            debug('error on create a tarball for %o with error %o', packageName, error.message);\n            return next(error);\n          }\n\n          const versionToPublish = Object.keys(versions)[0];\n\n          versions[versionToPublish].readme =\n            _.isNil(metadataCopy.readme) === false ? String(metadataCopy.readme) : '';\n\n          createVersion(versionToPublish, versions[versionToPublish], function (error) {\n            if (error) {\n              debug('error on create a version for %o with error %o', packageName, error.message);\n              return next(error);\n            }\n\n            addTags(metadataCopy[DIST_TAGS], async function (error) {\n              if (error) {\n                debug('error on create a tag for %o with error %o', packageName, error.message);\n                return next(error);\n              }\n\n              try {\n                await notify(\n                  metadataCopy,\n                  config,\n                  req.remote_user,\n                  `${metadataCopy.name}@${versionToPublish}`\n                );\n              } catch (error: any) {\n                debug(\n                  'error on notify add a new tag %o',\n                  `${metadataCopy.name}@${versionToPublish}`\n                );\n                logger.error({ error }, 'notify batch service has failed: @{error}');\n              }\n\n              debug('add a tag succesfully for %o', `${metadataCopy.name}@${versionToPublish}`);\n              res.status(HTTP_STATUS.CREATED);\n              return next({ ok: okMessage, success: true });\n            });\n          });\n        }\n      );\n    };\n\n    if (isPublishablePackage(req.body) === false && isObject(req.body.users)) {\n      debug('starting star a package');\n      return starApi(req, res, next);\n    }\n\n    try {\n      debug('pre validation metadata to publish %o', req.body);\n      const metadata = validateMetadata(req.body, packageName);\n      debug('post validation metadata to publish %o', metadata);\n      // treating deprecation as updating a package\n      if (req.params._rev || isRelatedToDeprecation(req.body)) {\n        debug('updating a new version for %o', packageName);\n        // we check unpublish permissions, an update is basically remove versions\n        const remote = req.remote_user;\n        auth.allow_unpublish({ packageName }, remote, (error) => {\n          debug('allowed to unpublish a package %o', packageName);\n          if (error) {\n            debug('not allowed to unpublish a version for  %o', packageName);\n            return next(error);\n          }\n\n          debug('update a package');\n          storage.changePackage(packageName, metadata, req.params.revision, function (error) {\n            afterChange(error, API_MESSAGE.PKG_CHANGED, metadata);\n          });\n        });\n      } else {\n        debug('adding a new version for the package %o', packageName);\n        storage.addPackage(packageName, metadata, function (error) {\n          debug('package metadata updated %o', metadata);\n          afterChange(error, API_MESSAGE.PKG_CREATED, metadata);\n        });\n      }\n    } catch (error: any) {\n      debug('error on publish, bad package format %o', packageName);\n      logger.error({ packageName }, 'error on publish, bad package data for @{packageName}');\n      return next(errorUtils.getBadData(API_ERROR.BAD_PACKAGE_DATA));\n    }\n  };\n}\n\n/**\n * un-publish a package\n */\nexport function unPublishPackage(storage: Storage) {\n  return async function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n    const packageName = req.params.package;\n\n    logger.debug({ packageName }, `unpublishing @{packageName}`);\n    try {\n      await storage.removePackage(packageName);\n    } catch (err) {\n      if (err) {\n        return next(err);\n      }\n    }\n    res.status(HTTP_STATUS.CREATED);\n    return next({ ok: API_MESSAGE.PKG_REMOVED });\n  };\n}\n\n/**\n * Delete tarball\n */\nexport function removeTarball(storage: Storage) {\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const packageName = req.params.package;\n    const { filename, revision } = req.params;\n\n    logger.debug(\n      { packageName, filename, revision },\n      `removing a tarball for @{packageName}-@{tarballName}-@{revision}`\n    );\n    storage.removeTarball(packageName, filename, revision, function (err) {\n      if (err) {\n        return next(err);\n      }\n      res.status(HTTP_STATUS.CREATED);\n\n      logger.debug(\n        { packageName, filename, revision },\n        `success remove tarball for @{packageName}-@{tarballName}-@{revision}`\n      );\n      return next({ ok: API_MESSAGE.TARBALL_REMOVED });\n    });\n  };\n}\n/**\n * Adds a new version\n */\nexport function addVersion(storage: Storage) {\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const { version, tag } = req.params;\n    const packageName = req.params.package;\n    debug('add a new version %o and tag %o for %o', version, tag, packageName);\n\n    storage.addVersion(packageName, version, req.body, tag, function (error) {\n      if (error) {\n        debug('error on add new version');\n        return next(error);\n      }\n\n      debug('success on add new version');\n      res.status(HTTP_STATUS.CREATED);\n      return next({\n        ok: API_MESSAGE.PKG_PUBLISHED,\n      });\n    });\n  };\n}\n\n/**\n * uploadPackageTarball\n */\nexport function uploadPackageTarball(storage: Storage) {\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const packageName = req.params.package;\n    const stream = storage.addTarball(packageName, req.params.filename);\n    req.pipe(stream);\n\n    // checking if end event came before closing\n    let complete = false;\n    req.on('end', function () {\n      complete = true;\n      stream.done();\n    });\n\n    req.on('close', function () {\n      if (!complete) {\n        stream.abort();\n      }\n    });\n\n    stream.on('error', function (err) {\n      return res.locals.report_error(err);\n    });\n\n    stream.on('success', function () {\n      res.status(HTTP_STATUS.CREATED);\n      return next({\n        ok: API_MESSAGE.TARBALL_UPLOADED,\n      });\n    });\n  };\n}\n"],"file":"publish.js"}

package/build/star.js

@@ -13,12 +13,6 @@ var _core = require("@verdaccio/core");
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) { symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
-
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(Object(source), true).forEach(function (key) { _defineProperty(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
 const debug = (0, _debug.default)('verdaccio:api:publish:star');
 
 function _default(storage) {
@@ -75,9 +69,9 @@ function _default(storage) {
           return afterChangePackage();
         }
 
-        const users = isStar ? _objectSpread(_objectSpread({}, localStarUsers), {}, {
+        const users = isStar ? { ...localStarUsers,
           [remoteUsername]: true
-        }) : _lodash.default.reduce(localStarUsers, (users, value, key) => {
+        } : _lodash.default.reduce(localStarUsers, (users, value, key) => {
           if (key !== remoteUsername) {
             users[key] = value;
           }
@@ -85,9 +79,9 @@ function _default(storage) {
           return users;
         }, {});
         debug('update package for  %o', name);
-        storage.changePackage(name, _objectSpread(_objectSpread({}, info), {}, {
+        storage.changePackage(name, { ...info,
           users
-        }), req.body._rev, function (err) {
+        }, req.body._rev, function (err) {
           afterChangePackage(err);
         });
       }

package/build/star.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/star.ts"],"names":["debug","storage","validateInputs","newUsers","localUsers","username","isStar","isExistlocalUsers","_","isNil","req","res","next","name","params","package","afterChangePackage","err","status","HTTP_STATUS","OK","success","getPackage","callback","info","newStarUser","body","USERS","remoteUsername","remote_user","localStarUsers","Object","keys","includes","users","reduce","value","key","changePackage","_rev"],"mappings":";;;;;;;AAAA;;AAEA;;AAEA;;;;;;;;;;AAKA,MAAMA,KAAK,GAAG,oBAAW,4BAAX,CAAd;;AAEe,kBACbC,OADa,EAEyD;AACtE,QAAMC,cAAc,GAAG,CAACC,QAAD,EAAWC,UAAX,EAAuBC,QAAvB,EAAiCC,MAAjC,KAAqD;AAC1E,UAAMC,iBAAiB,GAAGC,gBAAEC,KAAF,CAAQL,UAAU,CAACC,QAAD,CAAlB,MAAkC,KAA5D;;AACA,QAAIC,MAAM,IAAIC,iBAAV,IAA+BH,UAAU,CAACC,QAAD,CAA7C,EAAyD;AACvD,aAAO,IAAP;AACD,KAFD,MAEO,IAAI,CAACC,MAAD,IAAWC,iBAAf,EAAkC;AACvC,aAAO,KAAP;AACD,KAFM,MAEA,IAAI,CAACD,MAAD,IAAW,CAACC,iBAAhB,EAAmC;AACxC,aAAO,IAAP;AACD;;AACD,WAAO,KAAP;AACD,GAVD;;AAYA,SAAO,CAACG,GAAD,EAAsBC,GAAtB,EAAqCC,IAArC,KAAsE;AAC3E,UAAMC,IAAI,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAAxB;AACAf,IAAAA,KAAK,CAAC,2BAAD,EAA8Ba,IAA9B,CAAL;;AACA,UAAMG,kBAAkB,GAAG,UAAUC,GAAV,EAAuB;AAChD,UAAIA,GAAJ,EAAS;AACPjB,QAAAA,KAAK,CAAC,gCAAD,EAAmCa,IAAnC,CAAL;AACA,eAAOD,IAAI,CAACK,GAAD,CAAX;AACD;;AAEDjB,MAAAA,KAAK,CAAC,8BAAD,EAAiCa,IAAjC,CAAL;AACAF,MAAAA,GAAG,CAACO,MAAJ,CAAWC,kBAAYC,EAAvB;AACAR,MAAAA,IAAI,CAAC;AACHS,QAAAA,OAAO,EAAE;AADN,OAAD,CAAJ;AAGD,KAXD;;AAaArB,IAAAA,KAAK,CAAC,iCAAD,EAAoCa,IAApC,CAAL,CAhB2E,CAiB3E;;AACAZ,IAAAA,OAAO,CAACqB,UAAR,CAAmB;AACjBT,MAAAA,IADiB;AAEjBH,MAAAA,GAFiB;AAGjBa,MAAAA,QAAQ,EAAE,UAAUN,GAAV,EAAeO,IAAf,EAAqB;AAC7B,YAAIP,GAAJ,EAAS;AACPjB,UAAAA,KAAK,CAAC,0CAAD,EAA6Ca,IAA7C,CAAL;AACA,iBAAOD,IAAI,CAACK,GAAD,CAAX;AACD;;AACD,cAAMQ,WAAW,GAAGf,GAAG,CAACgB,IAAJ,CAASC,WAAT,CAApB;AACA,cAAMC,cAAc,GAAGlB,GAAG,CAACmB,WAAJ,CAAgBhB,IAAvC;AACA,cAAMiB,cAAc,GAAGN,IAAI,CAACG,WAAD,CAA3B,CAP6B,CAQ7B;;AACA,cAAMrB,MAAM,GAAGyB,MAAM,CAACC,IAAP,CAAYP,WAAZ,EAAyBQ,QAAzB,CAAkCL,cAAlC,CAAf;AACA5B,QAAAA,KAAK,CAAC,cAAD,EAAiBM,MAAjB,CAAL;;AACA,YACEE,gBAAEC,KAAF,CAAQqB,cAAR,MAA4B,KAA5B,IACA5B,cAAc,CAACuB,WAAD,EAAcK,cAAd,EAA8BF,cAA9B,EAA8CtB,MAA9C,CAFhB,EAGE;AACA,iBAAOU,kBAAkB,EAAzB;AACD;;AACD,cAAMkB,KAAK,GAAG5B,MAAM,mCAEXwB,cAFW;AAGd,WAACF,cAAD,GAAkB;AAHJ,aAKhBpB,gBAAE2B,MAAF,CACEL,cADF,EAEE,CAACI,KAAD,EAAQE,KAAR,EAAeC,GAAf,KAAuB;AACrB,cAAIA,GAAG,KAAKT,cAAZ,EAA4B;AAC1BM,YAAAA,KAAK,CAACG,GAAD,CAAL,GAAaD,KAAb;AACD;;AACD,iBAAOF,KAAP;AACD,SAPH,EAQE,EARF,CALJ;AAeAlC,QAAAA,KAAK,CAAC,wBAAD,EAA2Ba,IAA3B,CAAL;AACAZ,QAAAA,OAAO,CAACqC,aAAR,CAAsBzB,IAAtB,kCAAiCW,IAAjC;AAAuCU,UAAAA;AAAvC,YAAgDxB,GAAG,CAACgB,IAAJ,CAASa,IAAzD,EAA+D,UAAUtB,GAAV,EAAe;AAC5ED,UAAAA,kBAAkB,CAACC,GAAD,CAAlB;AACD,SAFD;AAGD;AAvCgB,KAAnB;AAyCD,GA3DD;AA4DD","sourcesContent":["import buildDebug from 'debug';\nimport { Response } from 'express';\nimport _ from 'lodash';\n\nimport { HTTP_STATUS, USERS } from '@verdaccio/core';\nimport { Storage } from '@verdaccio/store';\n\nimport { $NextFunctionVer, $RequestExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:publish:star');\n\nexport default function (\n  storage: Storage\n): (req: $RequestExtend, res: Response, next: $NextFunctionVer) => void {\n  const validateInputs = (newUsers, localUsers, username, isStar): boolean => {\n    const isExistlocalUsers = _.isNil(localUsers[username]) === false;\n    if (isStar && isExistlocalUsers && localUsers[username]) {\n      return true;\n    } else if (!isStar && isExistlocalUsers) {\n      return false;\n    } else if (!isStar && !isExistlocalUsers) {\n      return true;\n    }\n    return false;\n  };\n\n  return (req: $RequestExtend, res: Response, next: $NextFunctionVer): void => {\n    const name = req.params.package;\n    debug('starring a package for %o', name);\n    const afterChangePackage = function (err?: Error) {\n      if (err) {\n        debug('error on update package for %o', name);\n        return next(err);\n      }\n\n      debug('succes update package for %o', name);\n      res.status(HTTP_STATUS.OK);\n      next({\n        success: true,\n      });\n    };\n\n    debug('get package info package for %o', name);\n    // @ts-ignore\n    storage.getPackage({\n      name,\n      req,\n      callback: function (err, info) {\n        if (err) {\n          debug('error on get package info package for %o', name);\n          return next(err);\n        }\n        const newStarUser = req.body[USERS];\n        const remoteUsername = req.remote_user.name;\n        const localStarUsers = info[USERS];\n        // Check is star or unstar\n        const isStar = Object.keys(newStarUser).includes(remoteUsername);\n        debug('is start? %o', isStar);\n        if (\n          _.isNil(localStarUsers) === false &&\n          validateInputs(newStarUser, localStarUsers, remoteUsername, isStar)\n        ) {\n          return afterChangePackage();\n        }\n        const users = isStar\n          ? {\n              ...localStarUsers,\n              [remoteUsername]: true,\n            }\n          : _.reduce(\n              localStarUsers,\n              (users, value, key) => {\n                if (key !== remoteUsername) {\n                  users[key] = value;\n                }\n                return users;\n              },\n              {}\n            );\n        debug('update package for  %o', name);\n        storage.changePackage(name, { ...info, users }, req.body._rev, function (err) {\n          afterChangePackage(err);\n        });\n      },\n    });\n  };\n}\n"],"file":"star.js"}
+{"version":3,"sources":["../src/star.ts"],"names":["debug","storage","validateInputs","newUsers","localUsers","username","isStar","isExistlocalUsers","_","isNil","req","res","next","name","params","package","afterChangePackage","err","status","HTTP_STATUS","OK","success","getPackage","callback","info","newStarUser","body","USERS","remoteUsername","remote_user","localStarUsers","Object","keys","includes","users","reduce","value","key","changePackage","_rev"],"mappings":";;;;;;;AAAA;;AAEA;;AAEA;;;;AAKA,MAAMA,KAAK,GAAG,oBAAW,4BAAX,CAAd;;AAEe,kBACbC,OADa,EAEyD;AACtE,QAAMC,cAAc,GAAG,CAACC,QAAD,EAAWC,UAAX,EAAuBC,QAAvB,EAAiCC,MAAjC,KAAqD;AAC1E,UAAMC,iBAAiB,GAAGC,gBAAEC,KAAF,CAAQL,UAAU,CAACC,QAAD,CAAlB,MAAkC,KAA5D;;AACA,QAAIC,MAAM,IAAIC,iBAAV,IAA+BH,UAAU,CAACC,QAAD,CAA7C,EAAyD;AACvD,aAAO,IAAP;AACD,KAFD,MAEO,IAAI,CAACC,MAAD,IAAWC,iBAAf,EAAkC;AACvC,aAAO,KAAP;AACD,KAFM,MAEA,IAAI,CAACD,MAAD,IAAW,CAACC,iBAAhB,EAAmC;AACxC,aAAO,IAAP;AACD;;AACD,WAAO,KAAP;AACD,GAVD;;AAYA,SAAO,CAACG,GAAD,EAAsBC,GAAtB,EAAqCC,IAArC,KAAsE;AAC3E,UAAMC,IAAI,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAAxB;AACAf,IAAAA,KAAK,CAAC,2BAAD,EAA8Ba,IAA9B,CAAL;;AACA,UAAMG,kBAAkB,GAAG,UAAUC,GAAV,EAAuB;AAChD,UAAIA,GAAJ,EAAS;AACPjB,QAAAA,KAAK,CAAC,gCAAD,EAAmCa,IAAnC,CAAL;AACA,eAAOD,IAAI,CAACK,GAAD,CAAX;AACD;;AAEDjB,MAAAA,KAAK,CAAC,8BAAD,EAAiCa,IAAjC,CAAL;AACAF,MAAAA,GAAG,CAACO,MAAJ,CAAWC,kBAAYC,EAAvB;AACAR,MAAAA,IAAI,CAAC;AACHS,QAAAA,OAAO,EAAE;AADN,OAAD,CAAJ;AAGD,KAXD;;AAaArB,IAAAA,KAAK,CAAC,iCAAD,EAAoCa,IAApC,CAAL,CAhB2E,CAiB3E;;AACAZ,IAAAA,OAAO,CAACqB,UAAR,CAAmB;AACjBT,MAAAA,IADiB;AAEjBH,MAAAA,GAFiB;AAGjBa,MAAAA,QAAQ,EAAE,UAAUN,GAAV,EAAeO,IAAf,EAAqB;AAC7B,YAAIP,GAAJ,EAAS;AACPjB,UAAAA,KAAK,CAAC,0CAAD,EAA6Ca,IAA7C,CAAL;AACA,iBAAOD,IAAI,CAACK,GAAD,CAAX;AACD;;AACD,cAAMQ,WAAW,GAAGf,GAAG,CAACgB,IAAJ,CAASC,WAAT,CAApB;AACA,cAAMC,cAAc,GAAGlB,GAAG,CAACmB,WAAJ,CAAgBhB,IAAvC;AACA,cAAMiB,cAAc,GAAGN,IAAI,CAACG,WAAD,CAA3B,CAP6B,CAQ7B;;AACA,cAAMrB,MAAM,GAAGyB,MAAM,CAACC,IAAP,CAAYP,WAAZ,EAAyBQ,QAAzB,CAAkCL,cAAlC,CAAf;AACA5B,QAAAA,KAAK,CAAC,cAAD,EAAiBM,MAAjB,CAAL;;AACA,YACEE,gBAAEC,KAAF,CAAQqB,cAAR,MAA4B,KAA5B,IACA5B,cAAc,CAACuB,WAAD,EAAcK,cAAd,EAA8BF,cAA9B,EAA8CtB,MAA9C,CAFhB,EAGE;AACA,iBAAOU,kBAAkB,EAAzB;AACD;;AACD,cAAMkB,KAAK,GAAG5B,MAAM,GAChB,EACE,GAAGwB,cADL;AAEE,WAACF,cAAD,GAAkB;AAFpB,SADgB,GAKhBpB,gBAAE2B,MAAF,CACEL,cADF,EAEE,CAACI,KAAD,EAAQE,KAAR,EAAeC,GAAf,KAAuB;AACrB,cAAIA,GAAG,KAAKT,cAAZ,EAA4B;AAC1BM,YAAAA,KAAK,CAACG,GAAD,CAAL,GAAaD,KAAb;AACD;;AACD,iBAAOF,KAAP;AACD,SAPH,EAQE,EARF,CALJ;AAeAlC,QAAAA,KAAK,CAAC,wBAAD,EAA2Ba,IAA3B,CAAL;AACAZ,QAAAA,OAAO,CAACqC,aAAR,CAAsBzB,IAAtB,EAA4B,EAAE,GAAGW,IAAL;AAAWU,UAAAA;AAAX,SAA5B,EAAgDxB,GAAG,CAACgB,IAAJ,CAASa,IAAzD,EAA+D,UAAUtB,GAAV,EAAe;AAC5ED,UAAAA,kBAAkB,CAACC,GAAD,CAAlB;AACD,SAFD;AAGD;AAvCgB,KAAnB;AAyCD,GA3DD;AA4DD","sourcesContent":["import buildDebug from 'debug';\nimport { Response } from 'express';\nimport _ from 'lodash';\n\nimport { HTTP_STATUS, USERS } from '@verdaccio/core';\nimport { Storage } from '@verdaccio/store';\n\nimport { $NextFunctionVer, $RequestExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:publish:star');\n\nexport default function (\n  storage: Storage\n): (req: $RequestExtend, res: Response, next: $NextFunctionVer) => void {\n  const validateInputs = (newUsers, localUsers, username, isStar): boolean => {\n    const isExistlocalUsers = _.isNil(localUsers[username]) === false;\n    if (isStar && isExistlocalUsers && localUsers[username]) {\n      return true;\n    } else if (!isStar && isExistlocalUsers) {\n      return false;\n    } else if (!isStar && !isExistlocalUsers) {\n      return true;\n    }\n    return false;\n  };\n\n  return (req: $RequestExtend, res: Response, next: $NextFunctionVer): void => {\n    const name = req.params.package;\n    debug('starring a package for %o', name);\n    const afterChangePackage = function (err?: Error) {\n      if (err) {\n        debug('error on update package for %o', name);\n        return next(err);\n      }\n\n      debug('succes update package for %o', name);\n      res.status(HTTP_STATUS.OK);\n      next({\n        success: true,\n      });\n    };\n\n    debug('get package info package for %o', name);\n    // @ts-ignore\n    storage.getPackage({\n      name,\n      req,\n      callback: function (err, info) {\n        if (err) {\n          debug('error on get package info package for %o', name);\n          return next(err);\n        }\n        const newStarUser = req.body[USERS];\n        const remoteUsername = req.remote_user.name;\n        const localStarUsers = info[USERS];\n        // Check is star or unstar\n        const isStar = Object.keys(newStarUser).includes(remoteUsername);\n        debug('is start? %o', isStar);\n        if (\n          _.isNil(localStarUsers) === false &&\n          validateInputs(newStarUser, localStarUsers, remoteUsername, isStar)\n        ) {\n          return afterChangePackage();\n        }\n        const users = isStar\n          ? {\n              ...localStarUsers,\n              [remoteUsername]: true,\n            }\n          : _.reduce(\n              localStarUsers,\n              (users, value, key) => {\n                if (key !== remoteUsername) {\n                  users[key] = value;\n                }\n                return users;\n              },\n              {}\n            );\n        debug('update package for  %o', name);\n        storage.changePackage(name, { ...info, users }, req.body._rev, function (err) {\n          afterChangePackage(err);\n        });\n      },\n    });\n  };\n}\n"],"file":"star.js"}

package/build/utils.js

@@ -15,6 +15,7 @@ function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { de
  * @param pkg metadata
  */
 function isPublishablePackage(pkg) {
+  // TODO: we can do better, no need get keys
   const keys = Object.keys(pkg);
   return _lodash.default.includes(keys, 'versions');
 }

package/build/utils.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils.ts"],"names":["isPublishablePackage","pkg","keys","Object","_","includes","isRelatedToDeprecation","pkgInfo","versions","version","prototype","hasOwnProperty","call"],"mappings":";;;;;;;;AAAA;;;;AAIA;AACA;AACA;AACA;AAEO,SAASA,oBAAT,CAA8BC,GAA9B,EAAqD;AAC1D,QAAMC,IAAc,GAAGC,MAAM,CAACD,IAAP,CAAYD,GAAZ,CAAvB;AAEA,SAAOG,gBAAEC,QAAF,CAAWH,IAAX,EAAiB,UAAjB,CAAP;AACD;;AAEM,SAASI,sBAAT,CAAgCC,OAAhC,EAA2D;AAChE,QAAM;AAAEC,IAAAA;AAAF,MAAeD,OAArB;;AACA,OAAK,MAAME,OAAX,IAAsBD,QAAtB,EAAgC;AAC9B,QAAIL,MAAM,CAACO,SAAP,CAAiBC,cAAjB,CAAgCC,IAAhC,CAAqCJ,QAAQ,CAACC,OAAD,CAA7C,EAAwD,YAAxD,CAAJ,EAA2E;AACzE,aAAO,IAAP;AACD;AACF;;AACD,SAAO,KAAP;AACD","sourcesContent":["import _ from 'lodash';\n\nimport { Package } from '@verdaccio/types';\n\n/**\n * Check whether the package metadta has enough data to be published\n * @param pkg metadata\n */\n\nexport function isPublishablePackage(pkg: Package): boolean {\n  const keys: string[] = Object.keys(pkg);\n\n  return _.includes(keys, 'versions');\n}\n\nexport function isRelatedToDeprecation(pkgInfo: Package): boolean {\n  const { versions } = pkgInfo;\n  for (const version in versions) {\n    if (Object.prototype.hasOwnProperty.call(versions[version], 'deprecated')) {\n      return true;\n    }\n  }\n  return false;\n}\n"],"file":"utils.js"}
+{"version":3,"sources":["../src/utils.ts"],"names":["isPublishablePackage","pkg","keys","Object","_","includes","isRelatedToDeprecation","pkgInfo","versions","version","prototype","hasOwnProperty","call"],"mappings":";;;;;;;;AAAA;;;;AAIA;AACA;AACA;AACA;AAEO,SAASA,oBAAT,CAA8BC,GAA9B,EAAqD;AAC1D;AACA,QAAMC,IAAc,GAAGC,MAAM,CAACD,IAAP,CAAYD,GAAZ,CAAvB;AAEA,SAAOG,gBAAEC,QAAF,CAAWH,IAAX,EAAiB,UAAjB,CAAP;AACD;;AAEM,SAASI,sBAAT,CAAgCC,OAAhC,EAA2D;AAChE,QAAM;AAAEC,IAAAA;AAAF,MAAeD,OAArB;;AACA,OAAK,MAAME,OAAX,IAAsBD,QAAtB,EAAgC;AAC9B,QAAIL,MAAM,CAACO,SAAP,CAAiBC,cAAjB,CAAgCC,IAAhC,CAAqCJ,QAAQ,CAACC,OAAD,CAA7C,EAAwD,YAAxD,CAAJ,EAA2E;AACzE,aAAO,IAAP;AACD;AACF;;AACD,SAAO,KAAP;AACD","sourcesContent":["import _ from 'lodash';\n\nimport { Package } from '@verdaccio/types';\n\n/**\n * Check whether the package metadta has enough data to be published\n * @param pkg metadata\n */\n\nexport function isPublishablePackage(pkg: Package): boolean {\n  // TODO: we can do better, no need get keys\n  const keys: string[] = Object.keys(pkg);\n\n  return _.includes(keys, 'versions');\n}\n\nexport function isRelatedToDeprecation(pkgInfo: Package): boolean {\n  const { versions } = pkgInfo;\n  for (const version in versions) {\n    if (Object.prototype.hasOwnProperty.call(versions[version], 'deprecated')) {\n      return true;\n    }\n  }\n  return false;\n}\n"],"file":"utils.js"}

package/build/v1/token.js

@@ -17,16 +17,10 @@ var _utils = require("@verdaccio/utils");
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) { symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
-
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(Object(source), true).forEach(function (key) { _defineProperty(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
 function normalizeToken(token) {
-  return _objectSpread(_objectSpread({}, token), {}, {
+  return { ...token,
     created: new Date(token.created).toISOString()
-  });
+  };
 } // https://github.com/npm/npm-profile/blob/latest/lib/index.js
 
 

package/build/v1/token.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/v1/token.ts"],"names":["normalizeToken","token","created","Date","toISOString","route","auth","storage","config","get","req","res","next","name","remote_user","_","isNil","tokens","readTokens","user","totalTokens","length","logger","debug","status","HTTP_STATUS","OK","objects","map","urls","error","msg","errorUtils","getCode","INTERNAL_ERROR","message","getUnauthorized","post","password","readonly","cidr_whitelist","body","isBoolean","isArray","BAD_DATA","SUPPORT_ERRORS","PARAMETERS_NOT_VALID","authenticate","err","errorCode","UNAUTHORIZED","isFunction","saveToken","NOT_IMPLEMENTED","STORAGE_NOT_IMPLEMENT","getInternalError","key","maskedToken","getTime","cidr","delete","params","tokenKey","deleteToken","info"],"mappings":";;;;;;;AACA;;AAEA;;AAEA;;AACA;;AAGA;;;;;;;;;;AAQA,SAASA,cAAT,CAAwBC,KAAxB,EAAsD;AACpD,yCACKA,KADL;AAEEC,IAAAA,OAAO,EAAE,IAAIC,IAAJ,CAASF,KAAK,CAACC,OAAf,EAAwBE,WAAxB;AAFX;AAID,C,CAED;;;AACe,kBAAUC,KAAV,EAAyBC,IAAzB,EAAsCC,OAAtC,EAAwDC,MAAxD,EAA8E;AAC3FH,EAAAA,KAAK,CAACI,GAAN,CACE,kBADF,EAEE,gBAAgBC,GAAhB,EAAqCC,GAArC,EAAoDC,IAApD,EAA4E;AAC1E,UAAM;AAAEC,MAAAA;AAAF,QAAWH,GAAG,CAACI,WAArB;;AAEA,QAAIC,gBAAEC,KAAF,CAAQH,IAAR,MAAkB,KAAtB,EAA6B;AAC3B,UAAI;AACF,cAAMI,MAAM,GAAG,MAAMV,OAAO,CAACW,UAAR,CAAmB;AAAEC,UAAAA,IAAI,EAAEN;AAAR,SAAnB,CAArB;AACA,cAAMO,WAAW,GAAGH,MAAM,CAACI,MAA3B;;AACAC,uBAAOC,KAAP,CAAa;AAAEH,UAAAA;AAAF,SAAb,EAA8B,sCAA9B;;AAEAT,QAAAA,GAAG,CAACa,MAAJ,CAAWC,kBAAYC,EAAvB;AACA,eAAOd,IAAI,CAAC;AACVe,UAAAA,OAAO,EAAEV,MAAM,CAACW,GAAP,CAAW5B,cAAX,CADC;AAEV6B,UAAAA,IAAI,EAAE;AACJjB,YAAAA,IAAI,EAAE,EADF,CACM;;AADN;AAFI,SAAD,CAAX;AAMD,OAZD,CAYE,OAAOkB,KAAP,EAAmB;AACnBR,uBAAOQ,KAAP,CAAa;AAAEA,UAAAA,KAAK,EAAEA,KAAK,CAACC;AAAf,SAAb,EAAmC,iCAAnC;;AACA,eAAOnB,IAAI,CAACoB,iBAAWC,OAAX,CAAmBR,kBAAYS,cAA/B,EAA+CJ,KAAK,CAACK,OAArD,CAAD,CAAX;AACD;AACF;;AACD,WAAOvB,IAAI,CAACoB,iBAAWI,eAAX,EAAD,CAAX;AACD,GAxBH;AA2BA/B,EAAAA,KAAK,CAACgC,IAAN,CACE,kBADF,EAEE,UAAU3B,GAAV,EAA+BC,GAA/B,EAA8CC,IAA9C,EAAsE;AACpE,UAAM;AAAE0B,MAAAA,QAAF;AAAYC,MAAAA,QAAZ;AAAsBC,MAAAA;AAAtB,QAAyC9B,GAAG,CAAC+B,IAAnD;AACA,UAAM;AAAE5B,MAAAA;AAAF,QAAWH,GAAG,CAACI,WAArB;;AAEA,QAAI,CAACC,gBAAE2B,SAAF,CAAYH,QAAZ,CAAD,IAA0B,CAACxB,gBAAE4B,OAAF,CAAUH,cAAV,CAA/B,EAA0D;AACxD,aAAO5B,IAAI,CAACoB,iBAAWC,OAAX,CAAmBR,kBAAYmB,QAA/B,EAAyCC,qBAAeC,oBAAxD,CAAD,CAAX;AACD;;AAEDxC,IAAAA,IAAI,CAACyC,YAAL,CAAkBlC,IAAlB,EAAwByB,QAAxB,EAAkC,OAAOU,GAAP,EAAY7B,IAAZ,KAAiC;AACjE,UAAI6B,GAAJ,EAAS;AACP,cAAMC,SAAS,GAAGD,GAAG,CAACb,OAAJ,GAAcV,kBAAYyB,YAA1B,GAAyCzB,kBAAYS,cAAvE;AACA,eAAOtB,IAAI,CAACoB,iBAAWC,OAAX,CAAmBgB,SAAnB,EAA8BD,GAAG,CAACb,OAAlC,CAAD,CAAX;AACD;;AAEDzB,MAAAA,GAAG,CAACI,WAAJ,GAAkBK,IAAlB;;AAEA,UAAI,CAACJ,gBAAEoC,UAAF,CAAa5C,OAAO,CAAC6C,SAArB,CAAL,EAAsC;AACpC,eAAOxC,IAAI,CACToB,iBAAWC,OAAX,CAAmBR,kBAAY4B,eAA/B,EAAgDR,qBAAeS,qBAA/D,CADS,CAAX;AAGD;;AAED,UAAI;AACF,cAAMrD,KAAK,GAAG,MAAM,uBAAYK,IAAZ,EAAkBE,MAAlB,EAA0BW,IAA1B,EAAgCmB,QAAhC,CAApB;;AACA,YAAI,CAACrC,KAAL,EAAY;AACV,gBAAM+B,iBAAWuB,gBAAX,EAAN;AACD;;AAED,cAAMC,GAAG,GAAG,wBAAYvD,KAAZ,CAAZ,CANE,CAOF;;AACA,cAAMwD,WAAW,GAAG,iBAAKxD,KAAL,EAAY,CAAZ,CAApB;AACA,cAAMC,OAAO,GAAG,IAAIC,IAAJ,GAAWuD,OAAX,EAAhB;AAEA;AACV;AACA;AACA;AACA;;AACU,cAAMN,SAAgB,GAAG;AACvBjC,UAAAA,IAAI,EAAEN,IADiB;AAEvBZ,UAAAA,KAAK,EAAEwD,WAFgB;AAGvBD,UAAAA,GAHuB;AAIvBG,UAAAA,IAAI,EAAEnB,cAJiB;AAKvBD,UAAAA,QALuB;AAMvBrC,UAAAA;AANuB,SAAzB;AASA,cAAMK,OAAO,CAAC6C,SAAR,CAAkBA,SAAlB,CAAN;;AACA9B,uBAAOC,KAAP,CAAa;AAAEiC,UAAAA,GAAF;AAAO3C,UAAAA;AAAP,SAAb,EAA4B,2CAA5B;;AACA,eAAOD,IAAI,CACTZ,cAAc,CAAC;AACbC,UAAAA,KADa;AAEbkB,UAAAA,IAAI,EAAEN,IAFO;AAGb2C,UAAAA,GAAG,EAAEJ,SAAS,CAACI,GAHF;AAIbG,UAAAA,IAAI,EAAEnB,cAJO;AAKbD,UAAAA,QALa;AAMbrC,UAAAA,OAAO,EAAEkD,SAAS,CAAClD;AANN,SAAD,CADL,CAAX;AAUD,OArCD,CAqCE,OAAO4B,KAAP,EAAmB;AACnBR,uBAAOQ,KAAP,CAAa;AAAEA,UAAAA,KAAK,EAAEA,KAAK,CAACC;AAAf,SAAb,EAAmC,qCAAnC;;AACA,eAAOnB,IAAI,CAACoB,iBAAWuB,gBAAX,CAA4BzB,KAAK,CAACK,OAAlC,CAAD,CAAX;AACD;AACF,KAvDD;AAwDD,GAlEH;AAqEA9B,EAAAA,KAAK,CAACuD,MAAN,CACE,kCADF,EAEE,OAAOlD,GAAP,EAA4BC,GAA5B,EAA2CC,IAA3C,KAAsE;AACpE,UAAM;AACJiD,MAAAA,MAAM,EAAE;AAAEC,QAAAA;AAAF;AADJ,QAEFpD,GAFJ;AAGA,UAAM;AAAEG,MAAAA;AAAF,QAAWH,GAAG,CAACI,WAArB;;AAEA,QAAIC,gBAAEC,KAAF,CAAQH,IAAR,MAAkB,KAAtB,EAA6B;AAC3BS,qBAAOC,KAAP,CAAa;AAAEV,QAAAA;AAAF,OAAb,EAAuB,sCAAvB;;AACA,UAAI;AACF,cAAMN,OAAO,CAACwD,WAAR,CAAoBlD,IAApB,EAA0BiD,QAA1B,CAAN;;AACAxC,uBAAO0C,IAAP,CAAY;AAAEF,UAAAA,QAAF;AAAYjD,UAAAA;AAAZ,SAAZ,EAAgC,mDAAhC;;AACA,eAAOD,IAAI,CAAC,EAAD,CAAX;AACD,OAJD,CAIE,OAAOkB,KAAP,EAAmB;AACnBR,uBAAOQ,KAAP,CAAa;AAAEA,UAAAA,KAAK,EAAEA,KAAK,CAACC;AAAf,SAAb,EAAmC,qCAAnC;;AACA,eAAOnB,IAAI,CAACoB,iBAAWC,OAAX,CAAmBR,kBAAYS,cAA/B,EAA+CJ,KAAK,CAACK,OAArD,CAAD,CAAX;AACD;AACF;;AACD,WAAOvB,IAAI,CAACoB,iBAAWI,eAAX,EAAD,CAAX;AACD,GApBH;AAsBD","sourcesContent":["import { Response, Router } from 'express';\nimport _ from 'lodash';\n\nimport { getApiToken } from '@verdaccio/auth';\nimport { IAuth } from '@verdaccio/auth';\nimport { HTTP_STATUS, SUPPORT_ERRORS, errorUtils } from '@verdaccio/core';\nimport { logger } from '@verdaccio/logger';\nimport { Storage } from '@verdaccio/store';\nimport { Config, RemoteUser, Token } from '@verdaccio/types';\nimport { mask, stringToMD5 } from '@verdaccio/utils';\n\nimport { $NextFunctionVer, $RequestExtend } from '../../types/custom';\n\nexport type NormalizeToken = Token & {\n  created: string;\n};\n\nfunction normalizeToken(token: Token): NormalizeToken {\n  return {\n    ...token,\n    created: new Date(token.created).toISOString(),\n  };\n}\n\n// https://github.com/npm/npm-profile/blob/latest/lib/index.js\nexport default function (route: Router, auth: IAuth, storage: Storage, config: Config): void {\n  route.get(\n    '/-/npm/v1/tokens',\n    async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        try {\n          const tokens = await storage.readTokens({ user: name });\n          const totalTokens = tokens.length;\n          logger.debug({ totalTokens }, 'token list retrieved: @{totalTokens}');\n\n          res.status(HTTP_STATUS.OK);\n          return next({\n            objects: tokens.map(normalizeToken),\n            urls: {\n              next: '', // TODO: pagination?\n            },\n          });\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token list has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n\n  route.post(\n    '/-/npm/v1/tokens',\n    function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { password, readonly, cidr_whitelist } = req.body;\n      const { name } = req.remote_user;\n\n      if (!_.isBoolean(readonly) || !_.isArray(cidr_whitelist)) {\n        return next(errorUtils.getCode(HTTP_STATUS.BAD_DATA, SUPPORT_ERRORS.PARAMETERS_NOT_VALID));\n      }\n\n      auth.authenticate(name, password, async (err, user: RemoteUser) => {\n        if (err) {\n          const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;\n          return next(errorUtils.getCode(errorCode, err.message));\n        }\n\n        req.remote_user = user;\n\n        if (!_.isFunction(storage.saveToken)) {\n          return next(\n            errorUtils.getCode(HTTP_STATUS.NOT_IMPLEMENTED, SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT)\n          );\n        }\n\n        try {\n          const token = await getApiToken(auth, config, user, password);\n          if (!token) {\n            throw errorUtils.getInternalError();\n          }\n\n          const key = stringToMD5(token);\n          // TODO: use a utility here\n          const maskedToken = mask(token, 5);\n          const created = new Date().getTime();\n\n          /**\n           * cidr_whitelist: is not being used, we pass it through\n           * token: we do not store the real token (it is generated once and retrieved\n           * to the user), just a mask of it.\n           */\n          const saveToken: Token = {\n            user: name,\n            token: maskedToken,\n            key,\n            cidr: cidr_whitelist,\n            readonly,\n            created,\n          };\n\n          await storage.saveToken(saveToken);\n          logger.debug({ key, name }, 'token @{key} was created for user @{name}');\n          return next(\n            normalizeToken({\n              token,\n              user: name,\n              key: saveToken.key,\n              cidr: cidr_whitelist,\n              readonly,\n              created: saveToken.created,\n            })\n          );\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getInternalError(error.message));\n        }\n      });\n    }\n  );\n\n  route.delete(\n    '/-/npm/v1/tokens/token/:tokenKey',\n    async (req: $RequestExtend, res: Response, next: $NextFunctionVer) => {\n      const {\n        params: { tokenKey },\n      } = req;\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        logger.debug({ name }, '@{name} has requested remove a token');\n        try {\n          await storage.deleteToken(name, tokenKey);\n          logger.info({ tokenKey, name }, 'token id @{tokenKey} was revoked for user @{name}');\n          return next({});\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n}\n"],"file":"token.js"}
+{"version":3,"sources":["../../src/v1/token.ts"],"names":["normalizeToken","token","created","Date","toISOString","route","auth","storage","config","get","req","res","next","name","remote_user","_","isNil","tokens","readTokens","user","totalTokens","length","logger","debug","status","HTTP_STATUS","OK","objects","map","urls","error","msg","errorUtils","getCode","INTERNAL_ERROR","message","getUnauthorized","post","password","readonly","cidr_whitelist","body","isBoolean","isArray","BAD_DATA","SUPPORT_ERRORS","PARAMETERS_NOT_VALID","authenticate","err","errorCode","UNAUTHORIZED","isFunction","saveToken","NOT_IMPLEMENTED","STORAGE_NOT_IMPLEMENT","getInternalError","key","maskedToken","getTime","cidr","delete","params","tokenKey","deleteToken","info"],"mappings":";;;;;;;AACA;;AAEA;;AAEA;;AACA;;AAGA;;;;AAQA,SAASA,cAAT,CAAwBC,KAAxB,EAAsD;AACpD,SAAO,EACL,GAAGA,KADE;AAELC,IAAAA,OAAO,EAAE,IAAIC,IAAJ,CAASF,KAAK,CAACC,OAAf,EAAwBE,WAAxB;AAFJ,GAAP;AAID,C,CAED;;;AACe,kBAAUC,KAAV,EAAyBC,IAAzB,EAAsCC,OAAtC,EAAwDC,MAAxD,EAA8E;AAC3FH,EAAAA,KAAK,CAACI,GAAN,CACE,kBADF,EAEE,gBAAgBC,GAAhB,EAAqCC,GAArC,EAAoDC,IAApD,EAA4E;AAC1E,UAAM;AAAEC,MAAAA;AAAF,QAAWH,GAAG,CAACI,WAArB;;AAEA,QAAIC,gBAAEC,KAAF,CAAQH,IAAR,MAAkB,KAAtB,EAA6B;AAC3B,UAAI;AACF,cAAMI,MAAM,GAAG,MAAMV,OAAO,CAACW,UAAR,CAAmB;AAAEC,UAAAA,IAAI,EAAEN;AAAR,SAAnB,CAArB;AACA,cAAMO,WAAW,GAAGH,MAAM,CAACI,MAA3B;;AACAC,uBAAOC,KAAP,CAAa;AAAEH,UAAAA;AAAF,SAAb,EAA8B,sCAA9B;;AAEAT,QAAAA,GAAG,CAACa,MAAJ,CAAWC,kBAAYC,EAAvB;AACA,eAAOd,IAAI,CAAC;AACVe,UAAAA,OAAO,EAAEV,MAAM,CAACW,GAAP,CAAW5B,cAAX,CADC;AAEV6B,UAAAA,IAAI,EAAE;AACJjB,YAAAA,IAAI,EAAE,EADF,CACM;;AADN;AAFI,SAAD,CAAX;AAMD,OAZD,CAYE,OAAOkB,KAAP,EAAmB;AACnBR,uBAAOQ,KAAP,CAAa;AAAEA,UAAAA,KAAK,EAAEA,KAAK,CAACC;AAAf,SAAb,EAAmC,iCAAnC;;AACA,eAAOnB,IAAI,CAACoB,iBAAWC,OAAX,CAAmBR,kBAAYS,cAA/B,EAA+CJ,KAAK,CAACK,OAArD,CAAD,CAAX;AACD;AACF;;AACD,WAAOvB,IAAI,CAACoB,iBAAWI,eAAX,EAAD,CAAX;AACD,GAxBH;AA2BA/B,EAAAA,KAAK,CAACgC,IAAN,CACE,kBADF,EAEE,UAAU3B,GAAV,EAA+BC,GAA/B,EAA8CC,IAA9C,EAAsE;AACpE,UAAM;AAAE0B,MAAAA,QAAF;AAAYC,MAAAA,QAAZ;AAAsBC,MAAAA;AAAtB,QAAyC9B,GAAG,CAAC+B,IAAnD;AACA,UAAM;AAAE5B,MAAAA;AAAF,QAAWH,GAAG,CAACI,WAArB;;AAEA,QAAI,CAACC,gBAAE2B,SAAF,CAAYH,QAAZ,CAAD,IAA0B,CAACxB,gBAAE4B,OAAF,CAAUH,cAAV,CAA/B,EAA0D;AACxD,aAAO5B,IAAI,CAACoB,iBAAWC,OAAX,CAAmBR,kBAAYmB,QAA/B,EAAyCC,qBAAeC,oBAAxD,CAAD,CAAX;AACD;;AAEDxC,IAAAA,IAAI,CAACyC,YAAL,CAAkBlC,IAAlB,EAAwByB,QAAxB,EAAkC,OAAOU,GAAP,EAAY7B,IAAZ,KAAiC;AACjE,UAAI6B,GAAJ,EAAS;AACP,cAAMC,SAAS,GAAGD,GAAG,CAACb,OAAJ,GAAcV,kBAAYyB,YAA1B,GAAyCzB,kBAAYS,cAAvE;AACA,eAAOtB,IAAI,CAACoB,iBAAWC,OAAX,CAAmBgB,SAAnB,EAA8BD,GAAG,CAACb,OAAlC,CAAD,CAAX;AACD;;AAEDzB,MAAAA,GAAG,CAACI,WAAJ,GAAkBK,IAAlB;;AAEA,UAAI,CAACJ,gBAAEoC,UAAF,CAAa5C,OAAO,CAAC6C,SAArB,CAAL,EAAsC;AACpC,eAAOxC,IAAI,CACToB,iBAAWC,OAAX,CAAmBR,kBAAY4B,eAA/B,EAAgDR,qBAAeS,qBAA/D,CADS,CAAX;AAGD;;AAED,UAAI;AACF,cAAMrD,KAAK,GAAG,MAAM,uBAAYK,IAAZ,EAAkBE,MAAlB,EAA0BW,IAA1B,EAAgCmB,QAAhC,CAApB;;AACA,YAAI,CAACrC,KAAL,EAAY;AACV,gBAAM+B,iBAAWuB,gBAAX,EAAN;AACD;;AAED,cAAMC,GAAG,GAAG,wBAAYvD,KAAZ,CAAZ,CANE,CAOF;;AACA,cAAMwD,WAAW,GAAG,iBAAKxD,KAAL,EAAY,CAAZ,CAApB;AACA,cAAMC,OAAO,GAAG,IAAIC,IAAJ,GAAWuD,OAAX,EAAhB;AAEA;AACV;AACA;AACA;AACA;;AACU,cAAMN,SAAgB,GAAG;AACvBjC,UAAAA,IAAI,EAAEN,IADiB;AAEvBZ,UAAAA,KAAK,EAAEwD,WAFgB;AAGvBD,UAAAA,GAHuB;AAIvBG,UAAAA,IAAI,EAAEnB,cAJiB;AAKvBD,UAAAA,QALuB;AAMvBrC,UAAAA;AANuB,SAAzB;AASA,cAAMK,OAAO,CAAC6C,SAAR,CAAkBA,SAAlB,CAAN;;AACA9B,uBAAOC,KAAP,CAAa;AAAEiC,UAAAA,GAAF;AAAO3C,UAAAA;AAAP,SAAb,EAA4B,2CAA5B;;AACA,eAAOD,IAAI,CACTZ,cAAc,CAAC;AACbC,UAAAA,KADa;AAEbkB,UAAAA,IAAI,EAAEN,IAFO;AAGb2C,UAAAA,GAAG,EAAEJ,SAAS,CAACI,GAHF;AAIbG,UAAAA,IAAI,EAAEnB,cAJO;AAKbD,UAAAA,QALa;AAMbrC,UAAAA,OAAO,EAAEkD,SAAS,CAAClD;AANN,SAAD,CADL,CAAX;AAUD,OArCD,CAqCE,OAAO4B,KAAP,EAAmB;AACnBR,uBAAOQ,KAAP,CAAa;AAAEA,UAAAA,KAAK,EAAEA,KAAK,CAACC;AAAf,SAAb,EAAmC,qCAAnC;;AACA,eAAOnB,IAAI,CAACoB,iBAAWuB,gBAAX,CAA4BzB,KAAK,CAACK,OAAlC,CAAD,CAAX;AACD;AACF,KAvDD;AAwDD,GAlEH;AAqEA9B,EAAAA,KAAK,CAACuD,MAAN,CACE,kCADF,EAEE,OAAOlD,GAAP,EAA4BC,GAA5B,EAA2CC,IAA3C,KAAsE;AACpE,UAAM;AACJiD,MAAAA,MAAM,EAAE;AAAEC,QAAAA;AAAF;AADJ,QAEFpD,GAFJ;AAGA,UAAM;AAAEG,MAAAA;AAAF,QAAWH,GAAG,CAACI,WAArB;;AAEA,QAAIC,gBAAEC,KAAF,CAAQH,IAAR,MAAkB,KAAtB,EAA6B;AAC3BS,qBAAOC,KAAP,CAAa;AAAEV,QAAAA;AAAF,OAAb,EAAuB,sCAAvB;;AACA,UAAI;AACF,cAAMN,OAAO,CAACwD,WAAR,CAAoBlD,IAApB,EAA0BiD,QAA1B,CAAN;;AACAxC,uBAAO0C,IAAP,CAAY;AAAEF,UAAAA,QAAF;AAAYjD,UAAAA;AAAZ,SAAZ,EAAgC,mDAAhC;;AACA,eAAOD,IAAI,CAAC,EAAD,CAAX;AACD,OAJD,CAIE,OAAOkB,KAAP,EAAmB;AACnBR,uBAAOQ,KAAP,CAAa;AAAEA,UAAAA,KAAK,EAAEA,KAAK,CAACC;AAAf,SAAb,EAAmC,qCAAnC;;AACA,eAAOnB,IAAI,CAACoB,iBAAWC,OAAX,CAAmBR,kBAAYS,cAA/B,EAA+CJ,KAAK,CAACK,OAArD,CAAD,CAAX;AACD;AACF;;AACD,WAAOvB,IAAI,CAACoB,iBAAWI,eAAX,EAAD,CAAX;AACD,GApBH;AAsBD","sourcesContent":["import { Response, Router } from 'express';\nimport _ from 'lodash';\n\nimport { getApiToken } from '@verdaccio/auth';\nimport { IAuth } from '@verdaccio/auth';\nimport { HTTP_STATUS, SUPPORT_ERRORS, errorUtils } from '@verdaccio/core';\nimport { logger } from '@verdaccio/logger';\nimport { Storage } from '@verdaccio/store';\nimport { Config, RemoteUser, Token } from '@verdaccio/types';\nimport { mask, stringToMD5 } from '@verdaccio/utils';\n\nimport { $NextFunctionVer, $RequestExtend } from '../../types/custom';\n\nexport type NormalizeToken = Token & {\n  created: string;\n};\n\nfunction normalizeToken(token: Token): NormalizeToken {\n  return {\n    ...token,\n    created: new Date(token.created).toISOString(),\n  };\n}\n\n// https://github.com/npm/npm-profile/blob/latest/lib/index.js\nexport default function (route: Router, auth: IAuth, storage: Storage, config: Config): void {\n  route.get(\n    '/-/npm/v1/tokens',\n    async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        try {\n          const tokens = await storage.readTokens({ user: name });\n          const totalTokens = tokens.length;\n          logger.debug({ totalTokens }, 'token list retrieved: @{totalTokens}');\n\n          res.status(HTTP_STATUS.OK);\n          return next({\n            objects: tokens.map(normalizeToken),\n            urls: {\n              next: '', // TODO: pagination?\n            },\n          });\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token list has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n\n  route.post(\n    '/-/npm/v1/tokens',\n    function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { password, readonly, cidr_whitelist } = req.body;\n      const { name } = req.remote_user;\n\n      if (!_.isBoolean(readonly) || !_.isArray(cidr_whitelist)) {\n        return next(errorUtils.getCode(HTTP_STATUS.BAD_DATA, SUPPORT_ERRORS.PARAMETERS_NOT_VALID));\n      }\n\n      auth.authenticate(name, password, async (err, user: RemoteUser) => {\n        if (err) {\n          const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;\n          return next(errorUtils.getCode(errorCode, err.message));\n        }\n\n        req.remote_user = user;\n\n        if (!_.isFunction(storage.saveToken)) {\n          return next(\n            errorUtils.getCode(HTTP_STATUS.NOT_IMPLEMENTED, SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT)\n          );\n        }\n\n        try {\n          const token = await getApiToken(auth, config, user, password);\n          if (!token) {\n            throw errorUtils.getInternalError();\n          }\n\n          const key = stringToMD5(token);\n          // TODO: use a utility here\n          const maskedToken = mask(token, 5);\n          const created = new Date().getTime();\n\n          /**\n           * cidr_whitelist: is not being used, we pass it through\n           * token: we do not store the real token (it is generated once and retrieved\n           * to the user), just a mask of it.\n           */\n          const saveToken: Token = {\n            user: name,\n            token: maskedToken,\n            key,\n            cidr: cidr_whitelist,\n            readonly,\n            created,\n          };\n\n          await storage.saveToken(saveToken);\n          logger.debug({ key, name }, 'token @{key} was created for user @{name}');\n          return next(\n            normalizeToken({\n              token,\n              user: name,\n              key: saveToken.key,\n              cidr: cidr_whitelist,\n              readonly,\n              created: saveToken.created,\n            })\n          );\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getInternalError(error.message));\n        }\n      });\n    }\n  );\n\n  route.delete(\n    '/-/npm/v1/tokens/token/:tokenKey',\n    async (req: $RequestExtend, res: Response, next: $NextFunctionVer) => {\n      const {\n        params: { tokenKey },\n      } = req;\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        logger.debug({ name }, '@{name} has requested remove a token');\n        try {\n          await storage.deleteToken(name, tokenKey);\n          logger.info({ tokenKey, name }, 'token id @{tokenKey} was revoked for user @{name}');\n          return next({});\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n}\n"],"file":"token.js"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@verdaccio/api",
-	"version": "6.0.0-6-next.18",
+	"version": "6.0.0-6-next.21",
 	"description": "loaders logic",
 	"main": "./build/index.js",
 	"types": "build/index.d.ts",
@@ -30,31 +30,29 @@
 	},
 	"license": "MIT",
 	"dependencies": {
-		"@verdaccio/auth": "6.0.0-6-next.15",
-		"@verdaccio/config": "6.0.0-6-next.11",
-		"@verdaccio/core": "6.0.0-6-next.3",
-		"@verdaccio/hooks": "6.0.0-6-next.9",
-		"@verdaccio/logger": "6.0.0-6-next.7",
-		"@verdaccio/middleware": "6.0.0-6-next.15",
-		"@verdaccio/store": "6.0.0-6-next.16",
-		"@verdaccio/tarball": "11.0.0-6-next.10",
-		"@verdaccio/utils": "6.0.0-6-next.9",
+		"@verdaccio/auth": "6.0.0-6-next.18",
+		"@verdaccio/config": "6.0.0-6-next.12",
+		"@verdaccio/core": "6.0.0-6-next.4",
+		"@verdaccio/hooks": "6.0.0-6-next.12",
+		"@verdaccio/logger": "6.0.0-6-next.10",
+		"@verdaccio/middleware": "6.0.0-6-next.18",
+		"@verdaccio/store": "6.0.0-6-next.19",
+		"@verdaccio/utils": "6.0.0-6-next.10",
 		"abortcontroller-polyfill": "1.7.3",
 		"cookies": "0.8.0",
-		"debug": "4.3.2",
-		"express": "4.17.1",
+		"debug": "4.3.3",
+		"body-parser": "1.19.1",
+		"express": "4.17.2",
 		"lodash": "4.17.21",
-		"mime": "2.5.2",
+		"mime": "2.6.0",
 		"semver": "7.3.5"
 	},
 	"devDependencies": {
-		"@types/node": "16.11.6",
-		"@verdaccio/server": "6.0.0-6-next.23",
-		"@verdaccio/types": "11.0.0-6-next.9",
+		"@types/node": "16.11.21",
+		"@verdaccio/server": "6.0.0-6-next.26",
+		"@verdaccio/types": "11.0.0-6-next.10",
 		"@verdaccio/helper": "1.0.0",
-		"body-parser": "1.19.0",
-		"lodash": "4.17.21",
-		"supertest": "6.1.6"
+		"supertest": "6.2.2"
 	},
 	"funding": {
 		"type": "opencollective",

package/src/index.ts

@@ -56,7 +56,7 @@ export default function (config: Config, auth: IAuth, storage: Storage): Router
   app.use(encodeScopePackage);
   // for "npm whoami"
   whoami(app);
-  pkg(app, auth, storage, config);
+  pkg(app, auth, storage);
   profile(app, auth);
   // @deprecated endpoint, 404 by default
   search(app);

package/src/package.ts

@@ -1,14 +1,10 @@
 import buildDebug from 'debug';
 import { Router } from 'express';
-import _ from 'lodash';
 
 import { IAuth } from '@verdaccio/auth';
-import { API_ERROR, DIST_TAGS, HEADERS, errorUtils } from '@verdaccio/core';
+import { HEADERS, errorUtils } from '@verdaccio/core';
 import { allow } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
-import { convertDistRemoteToLocalTarballUrls } from '@verdaccio/tarball';
-import { Config, Package } from '@verdaccio/types';
-import { getVersion } from '@verdaccio/utils';
 
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
 
@@ -18,7 +14,7 @@ const downloadStream = (
   packageName: string,
   filename: string,
   storage: any,
-  req: $RequestExtend,
+  _req: $RequestExtend,
   res: $ResponseExtend
 ): void => {
   const stream = storage.getTarball(packageName, filename);
@@ -35,67 +31,47 @@ const downloadStream = (
   stream.pipe(res);
 };
 
-export default function (route: Router, auth: IAuth, storage: Storage, config: Config): void {
+export default function (route: Router, auth: IAuth, storage: Storage): void {
   const can = allow(auth);
-  // TODO: anonymous user?
+
   route.get(
     '/:package/:version?',
     can('access'),
-    function (req: $RequestExtend, _res: $ResponseExtend, next: $NextFunctionVer): void {
+    async function (
+      req: $RequestExtend,
+      _res: $ResponseExtend,
+      next: $NextFunctionVer
+    ): Promise<void> {
       debug('init package by version');
       const name = req.params.package;
-      const getPackageMetaCallback = function (err, metadata: Package): void {
-        if (err) {
-          debug('error on fetch metadata for %o with error %o', name, err.message);
-          return next(err);
-        }
-        debug('convert dist remote to local with prefix %o', config?.url_prefix);
-        metadata = convertDistRemoteToLocalTarballUrls(
-          metadata,
-          { protocol: req.protocol, headers: req.headers as any, host: req.host },
-          config?.url_prefix
-        );
-
-        let queryVersion = req.params.version;
-        debug('query by param version: %o', queryVersion);
-        if (_.isNil(queryVersion)) {
-          debug('param %o version found', queryVersion);
-          return next(metadata);
-        }
-
-        let version = getVersion(metadata, queryVersion);
-        debug('query by latest version %o and result %o', queryVersion, version);
-        if (_.isNil(version) === false) {
-          debug('latest version found %o', version);
-          return next(version);
-        }
+      let queryVersion = req.params.version;
+      const requestOptions = {
+        protocol: req.protocol,
+        headers: req.headers as any,
+        // FIXME: if we migrate to req.hostname, the port is not longer included.
+        host: req.host,
+      };
 
-        if (_.isNil(metadata[DIST_TAGS]) === false) {
-          if (_.isNil(metadata[DIST_TAGS][queryVersion]) === false) {
-            queryVersion = metadata[DIST_TAGS][queryVersion];
-            debug('dist-tag version found %o', queryVersion);
-            version = getVersion(metadata, queryVersion);
-            if (_.isNil(version) === false) {
-              debug('dist-tag found %o', version);
-              return next(version);
-            }
-          }
-        } else {
-          debug('dist tag not detected');
+      try {
+        // TODO: this is just temporary while I migrate all plugins to use the new API
+        // the method will be renamed to getPackage again but Promise Based.
+        if (!storage.getPackageByOptions) {
+          throw errorUtils.getInternalError(
+            'getPackageByOptions not implemented, check pr-2750 for more details'
+          );
         }
 
-        debug('package version not found %o', queryVersion);
-        return next(errorUtils.getNotFound(`${API_ERROR.VERSION_NOT_EXIST}: ${queryVersion}`));
-      };
-
-      debug('get package name %o', name);
-      debug('uplinks look up enabled');
-      storage.getPackage({
-        name,
-        uplinksLook: true,
-        req,
-        callback: getPackageMetaCallback,
-      });
+        const manifest = await storage.getPackageByOptions({
+          name,
+          uplinksLook: true,
+          req,
+          version: queryVersion,
+          requestOptions,
+        });
+        next(manifest);
+      } catch (err) {
+        next(err);
+      }
     }
   );
 

package/src/utils.ts

@@ -8,6 +8,7 @@ import { Package } from '@verdaccio/types';
  */
 
 export function isPublishablePackage(pkg: Package): boolean {
+  // TODO: we can do better, no need get keys
   const keys: string[] = Object.keys(pkg);
 
   return _.includes(keys, 'versions');