@verdaccio/api 8.1.0-next-8.12 → 8.1.0-next-8.13

package/test/integration/_helper.ts

@@ -1,198 +0,0 @@
-import { Application } from 'express';
-import _ from 'lodash';
-import path from 'path';
-import supertest from 'supertest';
-import { expect } from 'vitest';
-
-import { parseConfigFile } from '@verdaccio/config';
-import { HEADERS, HEADER_TYPE, HTTP_STATUS, TOKEN_BEARER } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-import { Storage } from '@verdaccio/store';
-import {
-  generatePackageMetadata,
-  initializeServer as initializeServerHelper,
-} from '@verdaccio/test-helper';
-import { Author, GenericBody, PackageUsers } from '@verdaccio/types';
-import { buildToken, generateRandomHexString } from '@verdaccio/utils';
-
-import apiMiddleware from '../../src';
-
-setup({});
-
-export const getConf = (conf) => {
-  const configPath = path.join(__dirname, 'config', conf);
-  const config = parseConfigFile(configPath);
-  // custom config to avoid conflict with other tests
-  config.auth.htpasswd.file = `${config.auth.htpasswd.file}-${generateRandomHexString()}`;
-  return config;
-};
-
-export async function initializeServer(configName): Promise<Application> {
-  const config = getConf(configName);
-  return initializeServerHelper(config, [apiMiddleware], Storage);
-}
-
-export function createUser(app, name: string, password: string): supertest.Test {
-  return supertest(app)
-    .put(`/-/user/org.couchdb.user:${name}`)
-    .send({
-      name: name,
-      password: password,
-    })
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-    .expect(HEADERS.CACHE_CONTROL, 'no-cache, no-store')
-    .expect(HTTP_STATUS.CREATED);
-}
-
-export async function getNewToken(app: any, credentials: any): Promise<string> {
-  const response = await createUser(app, credentials.name, credentials.password);
-  const { token, ok } = response.body;
-  expect(ok).toBeDefined();
-  expect(token).toBeDefined();
-  expect(typeof token).toBe('string');
-  return token;
-}
-
-export async function generateTokenCLI(app, token, payload): Promise<any> {
-  return supertest(app)
-    .post('/-/npm/v1/tokens')
-    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-    .send(JSON.stringify(payload))
-    .set(HEADERS.AUTHORIZATION, buildToken(TOKEN_BEARER, token))
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET);
-}
-
-export async function deleteTokenCLI(app, token, tokenToDelete): Promise<any> {
-  return supertest(app)
-    .delete(`/-/npm/v1/tokens/token/${tokenToDelete}`)
-    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-    .set(HEADERS.AUTHORIZATION, buildToken(TOKEN_BEARER, token))
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-    .expect(HTTP_STATUS.OK);
-}
-
-export function publishVersionWithToken(
-  app,
-  pkgName: string,
-  version: string,
-  token: string,
-  distTags?: GenericBody
-): supertest.Test {
-  const pkgMetadata = generatePackageMetadata(pkgName, version, distTags);
-
-  return supertest(app)
-    .put(`/${encodeURIComponent(pkgName)}`)
-    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-    .set(HEADERS.AUTHORIZATION, buildToken(TOKEN_BEARER, token))
-    .send(JSON.stringify(pkgMetadata))
-    .set('accept', HEADERS.GZIP)
-    .set(HEADER_TYPE.ACCEPT_ENCODING, HEADERS.JSON);
-}
-
-export function publishVersion(
-  app,
-  pkgName: string,
-  version: string,
-  distTags?: GenericBody,
-  token?: string
-): supertest.Test {
-  const pkgMetadata = generatePackageMetadata(pkgName, version, distTags);
-
-  const test = supertest(app)
-    .put(`/${encodeURIComponent(pkgName)}`)
-    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-    .send(JSON.stringify(pkgMetadata))
-    .set('accept', HEADERS.GZIP)
-    .set(HEADER_TYPE.ACCEPT_ENCODING, HEADERS.JSON);
-
-  if (typeof token === 'string') {
-    test.set(HEADERS.AUTHORIZATION, buildToken(TOKEN_BEARER, token));
-  }
-
-  return test;
-}
-
-export function starPackage(
-  app,
-  options: {
-    users: PackageUsers;
-    name: string;
-    _rev: string;
-    _id?: string;
-  },
-  token?: string
-): supertest.Test {
-  const { _rev, _id, users } = options;
-  const starManifest = {
-    _rev,
-    _id,
-    users,
-  };
-
-  const test = supertest(app)
-    .put(`/${encodeURIComponent(options.name)}`)
-    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-    .send(JSON.stringify(starManifest))
-    .set('accept', HEADERS.GZIP)
-    .set(HEADER_TYPE.ACCEPT_ENCODING, HEADERS.JSON);
-
-  if (typeof token === 'string') {
-    test.set(HEADERS.AUTHORIZATION, buildToken(TOKEN_BEARER, token));
-  }
-
-  return test;
-}
-
-export function changeOwners(
-  app,
-  options: {
-    maintainers: Author[];
-    name: string;
-    _rev: string;
-    _id?: string;
-  },
-  token?: string
-): supertest.Test {
-  const { _rev, _id, maintainers } = options;
-  const ownerManifest = {
-    _rev,
-    _id,
-    maintainers,
-  };
-
-  const test = supertest(app)
-    .put(`/${encodeURIComponent(options.name)}`)
-    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-    .send(JSON.stringify(ownerManifest))
-    .set('accept', HEADERS.GZIP)
-    .set(HEADER_TYPE.ACCEPT_ENCODING, HEADERS.JSON);
-
-  if (typeof token === 'string') {
-    test.set(HEADERS.AUTHORIZATION, buildToken(TOKEN_BEARER, token));
-  }
-
-  return test;
-}
-
-export function getDisTags(app, pkgName) {
-  return supertest(app)
-    .get(`/-/package/${encodeURIComponent(pkgName)}/dist-tags`)
-    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-    .expect(HTTP_STATUS.OK);
-}
-
-export function getPackage(
-  app: any,
-  token: string,
-  pkgName: string,
-  statusCode: number = HTTP_STATUS.OK
-): supertest.Test {
-  const test = supertest(app).get(`/${pkgName}`);
-
-  if (_.isNil(token) === false || _.isEmpty(token) === false) {
-    test.set(HEADERS.AUTHORIZATION, buildToken(TOKEN_BEARER, token));
-  }
-
-  return test.expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET).expect(statusCode);
-}

package/test/integration/config/distTag.yaml

@@ -1,25 +0,0 @@
-storage: ./storage
-
-auth:
-  htpasswd:
-    file: ./htpasswd-distTag
-
-web:
-  enable: true
-  title: verdaccio
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $anonymous
-    publish: $anonymous
-  '**':
-    access: $anonymous
-    publish: $anonymous
-_debug: true

package/test/integration/config/owner.yaml

@@ -1,24 +0,0 @@
-storage: ./storage
-
-auth:
-  htpasswd:
-    file: ./htpasswd-owner
-
-web:
-  enable: true
-  title: verdaccio
-
-log: { type: stdout, format: pretty, level: info }
-
-# TODO: Add test case for $owner access
-packages:
-  '@*/*':
-    access: $all
-    publish: $authenticated
-    unpublish: $authenticated
-  '**':
-    access: $all
-    publish: $authenticated
-    unpublish: $authenticated
-
-_debug: true

package/test/integration/config/package.yaml

@@ -1,25 +0,0 @@
-storage: ./storage
-
-auth:
-  htpasswd:
-    file: ./htpasswd-package
-
-web:
-  enable: true
-  title: verdaccio
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $anonymous
-    publish: $anonymous
-  '**':
-    access: $anonymous
-    publish: $anonymous
-_debug: true

package/test/integration/config/ping.yaml

@@ -1,26 +0,0 @@
-auth:
-  htpasswd:
-    file: ./htpasswd-ping
-web:
-  enable: true
-  title: verdaccio
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: $all
-    proxy: npmjs
-  'verdaccio':
-    access: $all
-    publish: $all
-  '**':
-    access: $all
-    publish: $all
-    unpublish: $all
-    proxy: npmjs
-_debug: true

package/test/integration/config/profile.yaml

@@ -1,27 +0,0 @@
-auth:
-  htpasswd:
-    file: ./htpasswd-profile
-web:
-  enable: true
-  title: verdaccio
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: $all
-    proxy: npmjs
-  'verdaccio':
-    access: $all
-    publish: $all
-  '**':
-    access: $all
-    publish: $all
-    unpublish: $all
-    proxy: npmjs
-
-_debug: true

package/test/integration/config/publish-proxy.yaml

@@ -1,26 +0,0 @@
-auth:
-  htpasswd:
-    file: ./htpasswd-publish-proxy
-web:
-  enable: true
-  title: verdaccio
-
-uplinks:
-  npmjs:
-    url: https://registry.npmjs.org/
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $anonymous
-    unpublish: $anonymous
-    proxy: npmjs
-  '**':
-    access: $all
-    publish: $anonymous
-    unpublish: $anonymous
-    proxy: npmjs
-
-_debug: true

package/test/integration/config/publish.yaml

@@ -1,24 +0,0 @@
-auth:
-  htpasswd:
-    file: ./htpasswd-publish
-web:
-  enable: true
-  title: verdaccio
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $anonymous
-    publish: $anonymous
-    unpublish: $anonymous
-  '**':
-    access: $anonymous
-    publish: $anonymous
-    unpublish: $anonymous
-_debug: true

package/test/integration/config/search.yaml

@@ -1,29 +0,0 @@
-storage: ./storage
-
-auth:
-  htpasswd:
-    file: ./htpasswd-search
-
-web:
-  enable: true
-  title: verdaccio
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  'private-*':
-    access: $all
-    publish: jota
-  '@private/*':
-    access: $all
-    publish: jota
-  '@*/*':
-    access: $all
-    publish: $authenticated
-  '**':
-    access: $all
-    publish: $authenticated
-
-_debug: true

package/test/integration/config/star.yaml

@@ -1,26 +0,0 @@
-auth:
-  htpasswd:
-    file: ./htpasswd-star
-web:
-  enable: true
-  title: verdaccio
-
-uplinks:
-  npmjs:
-    url: https://registry.npmjs.org/
-
-log: { type: stdout, format: pretty, level: info }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $authenticated
-    unpublish: $authenticated
-    proxy: npmjs
-  '**':
-    access: $all
-    publish: $authenticated
-    unpublish: $authenticated
-    proxy: npmjs
-
-_debug: true

package/test/integration/config/token.jwt.yaml

@@ -1,27 +0,0 @@
-security:
-  api:
-    jwt:
-      sign:
-        expiresIn: 5m
-        # to avoid invalid verification token, more info on JWT page
-        notBefore: 0
-
-storage: ./storage
-
-auth:
-  htpasswd:
-    file: ./htpasswd
-
-packages:
-  '@token/*':
-    access: $authenticated
-    publish: $authenticated
-  'only-you-can-publish':
-    access: $authenticated
-    publish: $authenticated
-
-log: { type: stdout, format: pretty, level: debug }
-
-## enable token for testing
-flags:
-  token: true

package/test/integration/config/token.yaml

@@ -1,19 +0,0 @@
-storage: ./storage
-
-auth:
-  htpasswd:
-    file: ./htpasswd
-
-packages:
-  '@token/*':
-    access: $authenticated
-    publish: $authenticated
-  'only-you-can-publish':
-    access: $authenticated
-    publish: $authenticated
-
-log: { type: stdout, format: pretty, level: debug }
-
-## enable token for testing
-flags:
-  token: true

package/test/integration/config/user.jwt.yaml

@@ -1,37 +0,0 @@
-storage: ./storage
-plugins: ./plugins
-
-web:
-  title: Verdaccio
-
-auth:
-  htpasswd:
-    file: ./htpasswd
-
-uplinks:
-  ver:
-    url: https://registry.npmjs.org
-
-security:
-  api:
-    jwt:
-      sign:
-        expiresIn: 10m
-        notBefore: 0
-packages:
-  '@*/*':
-    access: $all
-    publish: $authenticated
-  'vue':
-    access: $authenticated
-    publish: $authenticated
-    proxy: ver
-  '**':
-    access: $all
-    publish: $authenticated
-
-middlewares:
-  audit:
-    enabled: true
-
-log: { type: stdout, format: pretty, level: info }

package/test/integration/config/user.yaml

@@ -1,30 +0,0 @@
-auth:
-  htpasswd:
-    file: ./htpasswd-user
-web:
-  enable: true
-  title: verdaccio
-
-uplinks:
-  ver:
-    url: https://registry.npmjs.org
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: $all
-  'verdaccio':
-    access: $all
-    publish: $all
-  'vue':
-    access: $authenticated
-    publish: $authenticated
-    proxy: ver
-  '**':
-    access: $all
-    publish: $all
-    unpublish: $all
-_debug: true

package/test/integration/config/whoami.yaml

@@ -1,29 +0,0 @@
-web:
-  enable: true
-  title: verdaccio
-
-uplinks:
-  npmjs:
-    url: https://registry.npmjs.org/
-
-log: { type: stdout, format: pretty, level: trace }
-
-auth:
-  htpasswd:
-    file: ./htpasswd-whoami
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: $all
-    proxy: npmjs
-  'verdaccio':
-    access: $all
-    publish: $all
-  '**':
-    access: $all
-    publish: $all
-    unpublish: $all
-    proxy: npmjs
-_debug: true

package/test/integration/distTag.spec.ts

@@ -1,80 +0,0 @@
-import supertest from 'supertest';
-import { beforeEach, describe, expect, test } from 'vitest';
-
-import { API_MESSAGE, HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-
-import { getDisTags, initializeServer, publishVersion } from './_helper';
-
-setup({});
-
-describe('package', () => {
-  let app;
-  beforeEach(async () => {
-    app = await initializeServer('distTag.yaml');
-  });
-
-  test.each([['foo'], ['@scope/foo']])('should display dist-tag (npm dist-tag ls)', async (pkg) => {
-    await publishVersion(app, pkg, '1.0.0');
-    await publishVersion(app, pkg, '1.0.1');
-    const response = await getDisTags(app, pkg);
-    expect(response.body).toEqual({ latest: '1.0.1' });
-  });
-
-  test('should add a version to a tag (npm dist-tag add)', async () => {
-    await publishVersion(app, encodeURIComponent('foo'), '1.0.0');
-    await publishVersion(app, encodeURIComponent('foo'), '1.0.1');
-
-    const response = await supertest(app)
-      .put(`/${encodeURIComponent('foo')}/test`)
-      .set(HEADERS.ACCEPT, HEADERS.GZIP)
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(JSON.stringify('1.0.1'))
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.CREATED);
-    expect(response.body.ok).toEqual(API_MESSAGE.TAG_ADDED);
-    const response2 = await getDisTags(app, 'foo');
-    expect(response2.body).toEqual({ latest: '1.0.1', test: '1.0.1' });
-  });
-
-  test('should fails if  a version is missing (npm dist-tag add)', async () => {
-    await publishVersion(app, encodeURIComponent('foo'), '1.0.0');
-    await publishVersion(app, encodeURIComponent('foo'), '1.0.1');
-
-    await supertest(app)
-      .put(`/${encodeURIComponent('foo')}/test`)
-      .set(HEADERS.ACCEPT, HEADERS.GZIP)
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(JSON.stringify({}))
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.BAD_REQUEST);
-  });
-
-  test('should delete a previous added tag (npm dist-tag rm)', async () => {
-    await publishVersion(app, encodeURIComponent('foo'), '1.0.0');
-    await publishVersion(app, encodeURIComponent('foo'), '1.0.1');
-
-    const response = await supertest(app)
-      .put(`/${encodeURIComponent('foo')}/beta`)
-      .set(HEADERS.ACCEPT, HEADERS.GZIP)
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(JSON.stringify('1.0.1'))
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.CREATED);
-    expect(response.body.ok).toEqual(API_MESSAGE.TAG_ADDED);
-
-    const response2 = await getDisTags(app, 'foo');
-    expect(response2.body).toEqual({ latest: '1.0.1', beta: '1.0.1' });
-
-    const response3 = await supertest(app)
-      .delete(`/-/package/${encodeURIComponent('foo')}/dist-tags/beta`)
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.CREATED);
-    expect(response3.body.ok).toEqual(API_MESSAGE.TAG_REMOVED);
-
-    const response4 = await getDisTags(app, 'foo');
-    expect(response4.body).toEqual({ latest: '1.0.1' });
-  });
-});