@verdaccio/api 9.0.0-next-9.2 → 9.0.0-next-9.4

package/build/v1/token.js

@@ -1,205 +1,104 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports["default"] = _default;
-var _lodash = _interopRequireDefault(require("lodash"));
-var _auth = require("@verdaccio/auth");
-var _core = require("@verdaccio/core");
-var _middleware = require("@verdaccio/middleware");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
-function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
-function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
-function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
-function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
-function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
-function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
-function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
-function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
-function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-// npm expects "cidr_whitelist" for token list
+const require_runtime = require("../_virtual/_rolldown/runtime.js");
+let _verdaccio_middleware = require("@verdaccio/middleware");
+let lodash = require("lodash");
+lodash = require_runtime.__toESM(lodash);
+let _verdaccio_core = require("@verdaccio/core");
+let _verdaccio_auth = require("@verdaccio/auth");
+//#region src/v1/token.ts
 function normalizeToken(token) {
-  return _objectSpread(_objectSpread({}, token), {}, {
-    cidr_whitelist: token.cidr || [],
-    created: new Date(token.created).toISOString()
-  });
+	return {
+		...token,
+		cidr_whitelist: token.cidr || [],
+		created: new Date(token.created).toISOString()
+	};
 }
-
-// https://github.com/npm/npm-profile/blob/latest/lib/index.js
-function _default(route, auth, storage, config, logger) {
-  route.get(_middleware.TOKEN_API_ENDPOINTS.get_tokens, (0, _middleware.rateLimit)(config === null || config === void 0 ? void 0 : config.userRateLimit), /*#__PURE__*/function () {
-    var _ref = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(req, res, next) {
-      var name, tokens, totalTokens, _t;
-      return _regenerator().w(function (_context) {
-        while (1) switch (_context.p = _context.n) {
-          case 0:
-            name = req.remote_user.name;
-            if (!(_lodash["default"].isNil(name) === false)) {
-              _context.n = 4;
-              break;
-            }
-            _context.p = 1;
-            _context.n = 2;
-            return storage.readTokens({
-              user: name
-            });
-          case 2:
-            tokens = _context.v;
-            totalTokens = tokens.length;
-            logger.debug({
-              totalTokens: totalTokens
-            }, 'token list retrieved: @{totalTokens}');
-            res.status(_core.HTTP_STATUS.OK);
-            return _context.a(2, next({
-              objects: tokens.map(normalizeToken),
-              urls: {
-                next: '' // TODO: pagination?
-              }
-            }));
-          case 3:
-            _context.p = 3;
-            _t = _context.v;
-            logger.error({
-              error: _t.msg
-            }, 'token list has failed: @{error}');
-            return _context.a(2, next(_core.errorUtils.getCode(_core.HTTP_STATUS.INTERNAL_ERROR, _t.message)));
-          case 4:
-            return _context.a(2, next(_core.errorUtils.getUnauthorized()));
-        }
-      }, _callee, null, [[1, 3]]);
-    }));
-    return function (_x, _x2, _x3) {
-      return _ref.apply(this, arguments);
-    };
-  }());
-  route.post(_middleware.TOKEN_API_ENDPOINTS.get_tokens, (0, _middleware.rateLimit)(config === null || config === void 0 ? void 0 : config.userRateLimit), function (req, res, next) {
-    var _req$body = req.body,
-      password = _req$body.password,
-      readonly = _req$body.readonly,
-      cidr_whitelist = _req$body.cidr_whitelist;
-    var name = req.remote_user.name;
-    if (!_lodash["default"].isBoolean(readonly) || !_lodash["default"].isArray(cidr_whitelist)) {
-      return next(_core.errorUtils.getCode(_core.HTTP_STATUS.BAD_DATA, _core.SUPPORT_ERRORS.PARAMETERS_NOT_VALID));
-    }
-    auth.authenticate(name, password, /*#__PURE__*/function () {
-      var _ref2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(err, user) {
-        var errorCode, token, key, maskedToken, created, saveToken, _t2;
-        return _regenerator().w(function (_context2) {
-          while (1) switch (_context2.p = _context2.n) {
-            case 0:
-              if (!err) {
-                _context2.n = 1;
-                break;
-              }
-              errorCode = err.message ? _core.HTTP_STATUS.UNAUTHORIZED : _core.HTTP_STATUS.INTERNAL_ERROR;
-              return _context2.a(2, next(_core.errorUtils.getCode(errorCode, err.message)));
-            case 1:
-              req.remote_user = user;
-              if (_lodash["default"].isFunction(storage.saveToken)) {
-                _context2.n = 2;
-                break;
-              }
-              return _context2.a(2, next(_core.errorUtils.getCode(_core.HTTP_STATUS.NOT_IMPLEMENTED, _core.SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT)));
-            case 2:
-              _context2.p = 2;
-              _context2.n = 3;
-              return (0, _auth.getApiToken)(auth, config, user, password);
-            case 3:
-              token = _context2.v;
-              if (token) {
-                _context2.n = 4;
-                break;
-              }
-              throw _core.errorUtils.getInternalError();
-            case 4:
-              key = _core.cryptoUtils.stringToMD5(token); // TODO: use a utility here
-              maskedToken = _core.cryptoUtils.mask(token, 5);
-              created = new Date().getTime();
-              /**
-               * cidr_whitelist: is not being used, we pass it through
-               * token: we do not store the real token (it is generated once and retrieved
-               * to the user), just a mask of it.
-               */
-              saveToken = {
-                user: name,
-                token: maskedToken,
-                key: key,
-                cidr: cidr_whitelist,
-                readonly: readonly,
-                created: created
-              };
-              _context2.n = 5;
-              return storage.saveToken(saveToken);
-            case 5:
-              logger.debug({
-                key: key,
-                name: name
-              }, 'token @{key} was created for user @{name}');
-              res.set(_core.HEADERS.CACHE_CONTROL, 'no-cache, no-store');
-              return _context2.a(2, next(normalizeToken({
-                token: token,
-                user: name,
-                key: saveToken.key,
-                cidr: cidr_whitelist,
-                readonly: readonly,
-                created: saveToken.created
-              })));
-            case 6:
-              _context2.p = 6;
-              _t2 = _context2.v;
-              logger.error({
-                error: _t2.msg
-              }, 'token creation has failed: @{error}');
-              return _context2.a(2, next(_core.errorUtils.getInternalError(_t2.message)));
-          }
-        }, _callee2, null, [[2, 6]]);
-      }));
-      return function (_x4, _x5) {
-        return _ref2.apply(this, arguments);
-      };
-    }());
-  });
-  route["delete"](_middleware.TOKEN_API_ENDPOINTS.delete_token, (0, _middleware.rateLimit)(config === null || config === void 0 ? void 0 : config.userRateLimit), /*#__PURE__*/function () {
-    var _ref3 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee3(req, res, next) {
-      var tokenKey, name, _t3;
-      return _regenerator().w(function (_context3) {
-        while (1) switch (_context3.p = _context3.n) {
-          case 0:
-            tokenKey = req.params.tokenKey;
-            name = req.remote_user.name;
-            if (!(_lodash["default"].isNil(name) === false)) {
-              _context3.n = 4;
-              break;
-            }
-            logger.debug({
-              name: name
-            }, '@{name} has requested remove a token');
-            _context3.p = 1;
-            _context3.n = 2;
-            return storage.deleteToken(name, tokenKey);
-          case 2:
-            logger.info({
-              tokenKey: tokenKey,
-              name: name
-            }, 'token id @{tokenKey} was revoked for user @{name}');
-            return _context3.a(2, next({}));
-          case 3:
-            _context3.p = 3;
-            _t3 = _context3.v;
-            logger.error({
-              error: _t3.msg
-            }, 'token creation has failed: @{error}');
-            return _context3.a(2, next(_core.errorUtils.getCode(_core.HTTP_STATUS.INTERNAL_ERROR, _t3.message)));
-          case 4:
-            return _context3.a(2, next(_core.errorUtils.getUnauthorized()));
-        }
-      }, _callee3, null, [[1, 3]]);
-    }));
-    return function (_x6, _x7, _x8) {
-      return _ref3.apply(this, arguments);
-    };
-  }());
+function token_default(route, auth, storage, config, logger) {
+	route.get(_verdaccio_middleware.TOKEN_API_ENDPOINTS.get_tokens, (0, _verdaccio_middleware.rateLimit)(config?.userRateLimit), async function(req, res, next) {
+		const { name } = req.remote_user;
+		if (lodash.default.isNil(name) === false) try {
+			const tokens = await storage.readTokens({ user: name });
+			const totalTokens = tokens.length;
+			logger.debug({ totalTokens }, "token list retrieved: @{totalTokens}");
+			res.status(_verdaccio_core.HTTP_STATUS.OK);
+			return next({
+				objects: tokens.map(normalizeToken),
+				urls: { next: "" }
+			});
+		} catch (error) {
+			logger.error({ error: error.msg }, "token list has failed: @{error}");
+			return next(_verdaccio_core.errorUtils.getCode(_verdaccio_core.HTTP_STATUS.INTERNAL_ERROR, error.message));
+		}
+		return next(_verdaccio_core.errorUtils.getUnauthorized());
+	});
+	route.post(_verdaccio_middleware.TOKEN_API_ENDPOINTS.get_tokens, (0, _verdaccio_middleware.rateLimit)(config?.userRateLimit), function(req, res, next) {
+		const { password, readonly, cidr_whitelist } = req.body;
+		const { name } = req.remote_user;
+		if (!lodash.default.isBoolean(readonly) || !lodash.default.isArray(cidr_whitelist)) return next(_verdaccio_core.errorUtils.getCode(_verdaccio_core.HTTP_STATUS.BAD_DATA, _verdaccio_core.SUPPORT_ERRORS.PARAMETERS_NOT_VALID));
+		auth.authenticate(name, password, async (err, user) => {
+			if (err) {
+				const errorCode = err.message ? _verdaccio_core.HTTP_STATUS.UNAUTHORIZED : _verdaccio_core.HTTP_STATUS.INTERNAL_ERROR;
+				return next(_verdaccio_core.errorUtils.getCode(errorCode, err.message));
+			}
+			req.remote_user = user;
+			if (!lodash.default.isFunction(storage.saveToken)) return next(_verdaccio_core.errorUtils.getCode(_verdaccio_core.HTTP_STATUS.NOT_IMPLEMENTED, _verdaccio_core.SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT));
+			try {
+				const token = await (0, _verdaccio_auth.getApiToken)(auth, config, user, password);
+				if (!token) throw _verdaccio_core.errorUtils.getInternalError();
+				const key = _verdaccio_core.cryptoUtils.stringToMD5(token);
+				/**
+				* cidr_whitelist: is not being used, we pass it through
+				* token: we do not store the real token (it is generated once and retrieved
+				* to the user), just a mask of it.
+				*/
+				const saveToken = {
+					user: name,
+					token: _verdaccio_core.cryptoUtils.mask(token, 5),
+					key,
+					cidr: cidr_whitelist,
+					readonly,
+					created: (/* @__PURE__ */ new Date()).getTime()
+				};
+				await storage.saveToken(saveToken);
+				logger.debug({
+					key,
+					name
+				}, "token @{key} was created for user @{name}");
+				res.set(_verdaccio_core.HEADERS.CACHE_CONTROL, "no-cache, no-store");
+				return next(normalizeToken({
+					token,
+					user: name,
+					key: saveToken.key,
+					cidr: cidr_whitelist,
+					readonly,
+					created: saveToken.created
+				}));
+			} catch (error) {
+				logger.error({ error: error.msg }, "token creation has failed: @{error}");
+				return next(_verdaccio_core.errorUtils.getInternalError(error.message));
+			}
+		});
+	});
+	route.delete(_verdaccio_middleware.TOKEN_API_ENDPOINTS.delete_token, (0, _verdaccio_middleware.rateLimit)(config?.userRateLimit), async (req, res, next) => {
+		const { params: { tokenKey } } = req;
+		const { name } = req.remote_user;
+		if (lodash.default.isNil(name) === false) {
+			logger.debug({ name }, "@{name} has requested remove a token");
+			try {
+				await storage.deleteToken(name, tokenKey);
+				logger.info({
+					tokenKey,
+					name
+				}, "token id @{tokenKey} was revoked for user @{name}");
+				return next({});
+			} catch (error) {
+				logger.error({ error: error.msg }, "token creation has failed: @{error}");
+				return next(_verdaccio_core.errorUtils.getCode(_verdaccio_core.HTTP_STATUS.INTERNAL_ERROR, error.message));
+			}
+		}
+		return next(_verdaccio_core.errorUtils.getUnauthorized());
+	});
 }
+//#endregion
+exports.default = token_default;
+
 //# sourceMappingURL=token.js.map

package/build/v1/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","names":["_lodash","_interopRequireDefault","require","_auth","_core","_middleware","e","__esModule","_typeof","o","Symbol","iterator","constructor","prototype","_regenerator","t","r","n","toStringTag","i","c","Generator","u","Object","create","_regeneratorDefine2","f","p","y","G","v","a","d","bind","length","l","TypeError","call","done","value","GeneratorFunction","GeneratorFunctionPrototype","getPrototypeOf","setPrototypeOf","__proto__","displayName","w","m","defineProperty","_regeneratorDefine","_invoke","enumerable","configurable","writable","asyncGeneratorStep","Promise","resolve","then","_asyncToGenerator","arguments","apply","_next","_throw","ownKeys","keys","getOwnPropertySymbols","filter","getOwnPropertyDescriptor","push","_objectSpread","forEach","_defineProperty","getOwnPropertyDescriptors","defineProperties","_toPropertyKey","_toPrimitive","toPrimitive","String","Number","normalizeToken","token","cidr_whitelist","cidr","created","Date","toISOString","_default","route","auth","storage","config","logger","get","TOKEN_API_ENDPOINTS","get_tokens","rateLimit","userRateLimit","_ref","_callee","req","res","next","name","tokens","totalTokens","_t","_context","remote_user","_","isNil","readTokens","user","debug","status","HTTP_STATUS","OK","objects","map","urls","error","msg","errorUtils","getCode","INTERNAL_ERROR","message","getUnauthorized","_x","_x2","_x3","post","_req$body","body","password","readonly","isBoolean","isArray","BAD_DATA","SUPPORT_ERRORS","PARAMETERS_NOT_VALID","authenticate","_ref2","_callee2","err","errorCode","key","maskedToken","saveToken","_t2","_context2","UNAUTHORIZED","isFunction","NOT_IMPLEMENTED","STORAGE_NOT_IMPLEMENT","getApiToken","getInternalError","cryptoUtils","stringToMD5","mask","getTime","set","HEADERS","CACHE_CONTROL","_x4","_x5","delete_token","_ref3","_callee3","tokenKey","_t3","_context3","params","deleteToken","info","_x6","_x7","_x8"],"sources":["../../src/v1/token.ts"],"sourcesContent":["import type { Response, Router } from 'express';\nimport _ from 'lodash';\n\nimport type { Auth } from '@verdaccio/auth';\nimport { getApiToken } from '@verdaccio/auth';\nimport { HEADERS, HTTP_STATUS, SUPPORT_ERRORS, cryptoUtils, errorUtils } from '@verdaccio/core';\nimport { TOKEN_API_ENDPOINTS, rateLimit } from '@verdaccio/middleware';\nimport type { Storage } from '@verdaccio/store';\nimport type { Config, Logger, RemoteUser, Token } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend } from '../../types/custom';\n\nexport type NormalizeToken = Token & {\n  cidr_whitelist: string[];\n  created: string;\n};\n\n// npm expects \"cidr_whitelist\" for token list\nfunction normalizeToken(token: Token): NormalizeToken {\n  return {\n    ...token,\n    cidr_whitelist: token.cidr || [],\n    created: new Date(token.created).toISOString(),\n  };\n}\n\n// https://github.com/npm/npm-profile/blob/latest/lib/index.js\nexport default function (\n  route: Router,\n  auth: Auth,\n  storage: Storage,\n  config: Config,\n  logger: Logger\n): void {\n  route.get(\n    TOKEN_API_ENDPOINTS.get_tokens,\n    rateLimit(config?.userRateLimit),\n    async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        try {\n          const tokens = await storage.readTokens({ user: name });\n          const totalTokens = tokens.length;\n          logger.debug({ totalTokens }, 'token list retrieved: @{totalTokens}');\n\n          res.status(HTTP_STATUS.OK);\n          return next({\n            objects: tokens.map(normalizeToken),\n            urls: {\n              next: '', // TODO: pagination?\n            },\n          });\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token list has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n\n  route.post(\n    TOKEN_API_ENDPOINTS.get_tokens,\n    rateLimit(config?.userRateLimit),\n    function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { password, readonly, cidr_whitelist } = req.body;\n      const { name } = req.remote_user;\n\n      if (!_.isBoolean(readonly) || !_.isArray(cidr_whitelist)) {\n        return next(errorUtils.getCode(HTTP_STATUS.BAD_DATA, SUPPORT_ERRORS.PARAMETERS_NOT_VALID));\n      }\n\n      auth.authenticate(name, password, async (err, user?: RemoteUser) => {\n        if (err) {\n          const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;\n          return next(errorUtils.getCode(errorCode, err.message));\n        }\n\n        req.remote_user = user;\n\n        if (!_.isFunction(storage.saveToken)) {\n          return next(\n            errorUtils.getCode(HTTP_STATUS.NOT_IMPLEMENTED, SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT)\n          );\n        }\n\n        try {\n          const token = await getApiToken(auth, config, user as RemoteUser, password);\n          if (!token) {\n            throw errorUtils.getInternalError();\n          }\n\n          const key = cryptoUtils.stringToMD5(token);\n          // TODO: use a utility here\n          const maskedToken = cryptoUtils.mask(token, 5);\n          const created = new Date().getTime();\n\n          /**\n           * cidr_whitelist: is not being used, we pass it through\n           * token: we do not store the real token (it is generated once and retrieved\n           * to the user), just a mask of it.\n           */\n          const saveToken: Token = {\n            user: name,\n            token: maskedToken,\n            key,\n            cidr: cidr_whitelist,\n            readonly,\n            created,\n          };\n\n          await storage.saveToken(saveToken);\n          logger.debug({ key, name }, 'token @{key} was created for user @{name}');\n          res.set(HEADERS.CACHE_CONTROL, 'no-cache, no-store');\n          return next(\n            normalizeToken({\n              token,\n              user: name,\n              key: saveToken.key,\n              cidr: cidr_whitelist,\n              readonly,\n              created: saveToken.created,\n            })\n          );\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getInternalError(error.message));\n        }\n      });\n    }\n  );\n\n  route.delete(\n    TOKEN_API_ENDPOINTS.delete_token,\n    rateLimit(config?.userRateLimit),\n    async (req: $RequestExtend, res: Response, next: $NextFunctionVer) => {\n      const {\n        params: { tokenKey },\n      } = req;\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        logger.debug({ name }, '@{name} has requested remove a token');\n        try {\n          await storage.deleteToken(name, tokenKey);\n          logger.info({ tokenKey, name }, 'token id @{tokenKey} was revoked for user @{name}');\n          return next({});\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n}\n"],"mappings":";;;;;;AACA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AAGA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AAAuE,SAAAD,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAAA,SAAAE,QAAAC,CAAA,sCAAAD,OAAA,wBAAAE,MAAA,uBAAAA,MAAA,CAAAC,QAAA,aAAAF,CAAA,kBAAAA,CAAA,gBAAAA,CAAA,WAAAA,CAAA,yBAAAC,MAAA,IAAAD,CAAA,CAAAG,WAAA,KAAAF,MAAA,IAAAD,CAAA,KAAAC,MAAA,CAAAG,SAAA,qBAAAJ,CAAA,KAAAD,OAAA,CAAAC,CAAA;AAAA,SAAAK,aAAA,IALvE,uKAAAR,CAAA,EAAAS,CAAA,EAAAC,CAAA,wBAAAN,MAAA,GAAAA,MAAA,OAAAO,CAAA,GAAAD,CAAA,CAAAL,QAAA,kBAAAF,CAAA,GAAAO,CAAA,CAAAE,WAAA,8BAAAC,EAAAH,CAAA,EAAAC,CAAA,EAAAR,CAAA,EAAAU,CAAA,QAAAC,CAAA,GAAAH,CAAA,IAAAA,CAAA,CAAAJ,SAAA,YAAAQ,SAAA,GAAAJ,CAAA,GAAAI,SAAA,EAAAC,CAAA,GAAAC,MAAA,CAAAC,MAAA,CAAAJ,CAAA,CAAAP,SAAA,UAAAY,mBAAA,CAAAH,CAAA,uBAAAN,CAAA,EAAAC,CAAA,EAAAR,CAAA,QAAAU,CAAA,EAAAC,CAAA,EAAAE,CAAA,EAAAI,CAAA,MAAAC,CAAA,GAAAlB,CAAA,QAAAmB,CAAA,OAAAC,CAAA,KAAAF,CAAA,KAAAV,CAAA,KAAAa,CAAA,EAAAxB,CAAA,EAAAyB,CAAA,EAAAC,CAAA,EAAAN,CAAA,EAAAM,CAAA,CAAAC,IAAA,CAAA3B,CAAA,MAAA0B,CAAA,WAAAA,EAAAjB,CAAA,EAAAC,CAAA,WAAAG,CAAA,GAAAJ,CAAA,EAAAK,CAAA,MAAAE,CAAA,GAAAhB,CAAA,EAAAuB,CAAA,CAAAZ,CAAA,GAAAD,CAAA,EAAAe,CAAA,gBAAAC,EAAAhB,CAAA,EAAAC,CAAA,SAAAG,CAAA,GAAAJ,CAAA,EAAAM,CAAA,GAAAL,CAAA,EAAAF,CAAA,OAAAa,CAAA,IAAAF,CAAA,KAAAjB,CAAA,IAAAM,CAAA,GAAAY,CAAA,CAAAO,MAAA,EAAAnB,CAAA,UAAAN,CAAA,EAAAU,CAAA,GAAAQ,CAAA,CAAAZ,CAAA,GAAAiB,CAAA,GAAAH,CAAA,CAAAF,CAAA,EAAAQ,CAAA,GAAAhB,CAAA,KAAAH,CAAA,QAAAP,CAAA,GAAA0B,CAAA,KAAAlB,CAAA,MAAAK,CAAA,GAAAH,CAAA,EAAAC,CAAA,GAAAD,CAAA,YAAAC,CAAA,WAAAD,CAAA,MAAAA,CAAA,MAAAb,CAAA,IAAAa,CAAA,OAAAa,CAAA,MAAAvB,CAAA,GAAAO,CAAA,QAAAgB,CAAA,GAAAb,CAAA,QAAAC,CAAA,MAAAS,CAAA,CAAAC,CAAA,GAAAb,CAAA,EAAAY,CAAA,CAAAZ,CAAA,GAAAE,CAAA,OAAAa,CAAA,GAAAG,CAAA,KAAA1B,CAAA,GAAAO,CAAA,QAAAG,CAAA,MAAAF,CAAA,IAAAA,CAAA,GAAAkB,CAAA,MAAAhB,CAAA,MAAAH,CAAA,EAAAG,CAAA,MAAAF,CAAA,EAAAY,CAAA,CAAAZ,CAAA,GAAAkB,CAAA,EAAAf,CAAA,cAAAX,CAAA,IAAAO,CAAA,aAAAe,CAAA,QAAAH,CAAA,OAAAX,CAAA,qBAAAR,CAAA,EAAAkB,CAAA,EAAAQ,CAAA,QAAAT,CAAA,YAAAU,SAAA,uCAAAR,CAAA,UAAAD,CAAA,IAAAK,CAAA,CAAAL,CAAA,EAAAQ,CAAA,GAAAf,CAAA,GAAAO,CAAA,EAAAL,CAAA,GAAAa,CAAA,GAAApB,CAAA,GAAAK,CAAA,OAAAd,CAAA,GAAAgB,CAAA,MAAAM,CAAA,KAAAT,CAAA,KAAAC,CAAA,GAAAA,CAAA,QAAAA,CAAA,SAAAS,CAAA,CAAAZ,CAAA,QAAAe,CAAA,CAAAZ,CAAA,EAAAE,CAAA,KAAAO,CAAA,CAAAZ,CAAA,GAAAK,CAAA,GAAAO,CAAA,CAAAC,CAAA,GAAAR,CAAA,aAAAI,CAAA,MAAAP,CAAA,QAAAC,CAAA,KAAAX,CAAA,YAAAM,CAAA,GAAAI,CAAA,CAAAV,CAAA,WAAAM,CAAA,GAAAA,CAAA,CAAAsB,IAAA,CAAAlB,CAAA,EAAAG,CAAA,UAAAc,SAAA,2CAAArB,CAAA,CAAAuB,IAAA,SAAAvB,CAAA,EAAAO,CAAA,GAAAP,CAAA,CAAAwB,KAAA,EAAAnB,CAAA,SAAAA,CAAA,oBAAAA,CAAA,KAAAL,CAAA,GAAAI,CAAA,eAAAJ,CAAA,CAAAsB,IAAA,CAAAlB,CAAA,GAAAC,CAAA,SAAAE,CAAA,GAAAc,SAAA,uCAAA3B,CAAA,gBAAAW,CAAA,OAAAD,CAAA,GAAAb,CAAA,cAAAS,CAAA,IAAAa,CAAA,GAAAC,CAAA,CAAAZ,CAAA,QAAAK,CAAA,GAAAN,CAAA,CAAAqB,IAAA,CAAApB,CAAA,EAAAY,CAAA,OAAAE,CAAA,kBAAAhB,CAAA,IAAAI,CAAA,GAAAb,CAAA,EAAAc,CAAA,MAAAE,CAAA,GAAAP,CAAA,cAAAW,CAAA,mBAAAa,KAAA,EAAAxB,CAAA,EAAAuB,IAAA,EAAAV,CAAA,SAAAZ,CAAA,EAAAP,CAAA,EAAAU,CAAA,QAAAG,CAAA,QAAAS,CAAA,gBAAAV,UAAA,cAAAmB,kBAAA,cAAAC,2BAAA,KAAA1B,CAAA,GAAAQ,MAAA,CAAAmB,cAAA,MAAAtB,CAAA,MAAAH,CAAA,IAAAF,CAAA,CAAAA,CAAA,IAAAE,CAAA,SAAAQ,mBAAA,CAAAV,CAAA,OAAAE,CAAA,iCAAAF,CAAA,GAAAO,CAAA,GAAAmB,0BAAA,CAAA5B,SAAA,GAAAQ,SAAA,CAAAR,SAAA,GAAAU,MAAA,CAAAC,MAAA,CAAAJ,CAAA,YAAAM,EAAApB,CAAA,WAAAiB,MAAA,CAAAoB,cAAA,GAAApB,MAAA,CAAAoB,cAAA,CAAArC,CAAA,EAAAmC,0BAAA,KAAAnC,CAAA,CAAAsC,SAAA,GAAAH,0BAAA,EAAAhB,mBAAA,CAAAnB,CAAA,EAAAG,CAAA,yBAAAH,CAAA,CAAAO,SAAA,GAAAU,MAAA,CAAAC,MAAA,CAAAF,CAAA,GAAAhB,CAAA,WAAAkC,iBAAA,CAAA3B,SAAA,GAAA4B,0BAAA,EAAAhB,mBAAA,CAAAH,CAAA,iBAAAmB,0BAAA,GAAAhB,mBAAA,CAAAgB,0BAAA,iBAAAD,iBAAA,GAAAA,iBAAA,CAAAK,WAAA,wBAAApB,mBAAA,CAAAgB,0BAAA,EAAAhC,CAAA,wBAAAgB,mBAAA,CAAAH,CAAA,GAAAG,mBAAA,CAAAH,CAAA,EAAAb,CAAA,gBAAAgB,mBAAA,CAAAH,CAAA,EAAAL,CAAA,iCAAAQ,mBAAA,CAAAH,CAAA,8DAAAR,YAAA,YAAAA,aAAA,aAAAgC,CAAA,EAAA3B,CAAA,EAAA4B,CAAA,EAAArB,CAAA;AAAA,SAAAD,oBAAAnB,CAAA,EAAAU,CAAA,EAAAC,CAAA,EAAAF,CAAA,QAAAI,CAAA,GAAAI,MAAA,CAAAyB,cAAA,QAAA7B,CAAA,uBAAAb,CAAA,IAAAa,CAAA,QAAAM,mBAAA,YAAAwB,mBAAA3C,CAAA,EAAAU,CAAA,EAAAC,CAAA,EAAAF,CAAA,aAAAN,EAAAO,CAAA,EAAAC,CAAA,IAAAQ,mBAAA,CAAAnB,CAAA,EAAAU,CAAA,YAAAV,CAAA,gBAAA4C,OAAA,CAAAlC,CAAA,EAAAC,CAAA,EAAAX,CAAA,SAAAU,CAAA,GAAAG,CAAA,GAAAA,CAAA,CAAAb,CAAA,EAAAU,CAAA,IAAAuB,KAAA,EAAAtB,CAAA,EAAAkC,UAAA,GAAApC,CAAA,EAAAqC,YAAA,GAAArC,CAAA,EAAAsC,QAAA,GAAAtC,CAAA,MAAAT,CAAA,CAAAU,CAAA,IAAAC,CAAA,IAAAR,CAAA,aAAAA,CAAA,cAAAA,CAAA,mBAAAgB,mBAAA,CAAAnB,CAAA,EAAAU,CAAA,EAAAC,CAAA,EAAAF,CAAA;AAAA,SAAAuC,mBAAArC,CAAA,EAAAF,CAAA,EAAAT,CAAA,EAAAU,CAAA,EAAAP,CAAA,EAAAsB,CAAA,EAAAX,CAAA,cAAAD,CAAA,GAAAF,CAAA,CAAAc,CAAA,EAAAX,CAAA,GAAAE,CAAA,GAAAH,CAAA,CAAAoB,KAAA,WAAAtB,CAAA,gBAAAX,CAAA,CAAAW,CAAA,KAAAE,CAAA,CAAAmB,IAAA,GAAAvB,CAAA,CAAAO,CAAA,IAAAiC,OAAA,CAAAC,OAAA,CAAAlC,CAAA,EAAAmC,IAAA,CAAAzC,CAAA,EAAAP,CAAA;AAAA,SAAAiD,kBAAAzC,CAAA,6BAAAF,CAAA,SAAAT,CAAA,GAAAqD,SAAA,aAAAJ,OAAA,WAAAvC,CAAA,EAAAP,CAAA,QAAAsB,CAAA,GAAAd,CAAA,CAAA2C,KAAA,CAAA7C,CAAA,EAAAT,CAAA,YAAAuD,MAAA5C,CAAA,IAAAqC,kBAAA,CAAAvB,CAAA,EAAAf,CAAA,EAAAP,CAAA,EAAAoD,KAAA,EAAAC,MAAA,UAAA7C,CAAA,cAAA6C,OAAA7C,CAAA,IAAAqC,kBAAA,CAAAvB,CAAA,EAAAf,CAAA,EAAAP,CAAA,EAAAoD,KAAA,EAAAC,MAAA,WAAA7C,CAAA,KAAA4C,KAAA;AAAA,SAAAE,QAAAzD,CAAA,EAAAU,CAAA,QAAAD,CAAA,GAAAQ,MAAA,CAAAyC,IAAA,CAAA1D,CAAA,OAAAiB,MAAA,CAAA0C,qBAAA,QAAAxD,CAAA,GAAAc,MAAA,CAAA0C,qBAAA,CAAA3D,CAAA,GAAAU,CAAA,KAAAP,CAAA,GAAAA,CAAA,CAAAyD,MAAA,WAAAlD,CAAA,WAAAO,MAAA,CAAA4C,wBAAA,CAAA7D,CAAA,EAAAU,CAAA,EAAAmC,UAAA,OAAApC,CAAA,CAAAqD,IAAA,CAAAR,KAAA,CAAA7C,CAAA,EAAAN,CAAA,YAAAM,CAAA;AAAA,SAAAsD,cAAA/D,CAAA,aAAAU,CAAA,MAAAA,CAAA,GAAA2C,SAAA,CAAAzB,MAAA,EAAAlB,CAAA,UAAAD,CAAA,WAAA4C,SAAA,CAAA3C,CAAA,IAAA2C,SAAA,CAAA3C,CAAA,QAAAA,CAAA,OAAA+C,OAAA,CAAAxC,MAAA,CAAAR,CAAA,OAAAuD,OAAA,WAAAtD,CAAA,IAAAuD,eAAA,CAAAjE,CAAA,EAAAU,CAAA,EAAAD,CAAA,CAAAC,CAAA,SAAAO,MAAA,CAAAiD,yBAAA,GAAAjD,MAAA,CAAAkD,gBAAA,CAAAnE,CAAA,EAAAiB,MAAA,CAAAiD,yBAAA,CAAAzD,CAAA,KAAAgD,OAAA,CAAAxC,MAAA,CAAAR,CAAA,GAAAuD,OAAA,WAAAtD,CAAA,IAAAO,MAAA,CAAAyB,cAAA,CAAA1C,CAAA,EAAAU,CAAA,EAAAO,MAAA,CAAA4C,wBAAA,CAAApD,CAAA,EAAAC,CAAA,iBAAAV,CAAA;AAAA,SAAAiE,gBAAAjE,CAAA,EAAAU,CAAA,EAAAD,CAAA,YAAAC,CAAA,GAAA0D,cAAA,CAAA1D,CAAA,MAAAV,CAAA,GAAAiB,MAAA,CAAAyB,cAAA,CAAA1C,CAAA,EAAAU,CAAA,IAAAuB,KAAA,EAAAxB,CAAA,EAAAoC,UAAA,MAAAC,YAAA,MAAAC,QAAA,UAAA/C,CAAA,CAAAU,CAAA,IAAAD,CAAA,EAAAT,CAAA;AAAA,SAAAoE,eAAA3D,CAAA,QAAAI,CAAA,GAAAwD,YAAA,CAAA5D,CAAA,gCAAAP,OAAA,CAAAW,CAAA,IAAAA,CAAA,GAAAA,CAAA;AAAA,SAAAwD,aAAA5D,CAAA,EAAAC,CAAA,oBAAAR,OAAA,CAAAO,CAAA,MAAAA,CAAA,SAAAA,CAAA,MAAAT,CAAA,GAAAS,CAAA,CAAAL,MAAA,CAAAkE,WAAA,kBAAAtE,CAAA,QAAAa,CAAA,GAAAb,CAAA,CAAA+B,IAAA,CAAAtB,CAAA,EAAAC,CAAA,gCAAAR,OAAA,CAAAW,CAAA,UAAAA,CAAA,YAAAiB,SAAA,yEAAApB,CAAA,GAAA6D,MAAA,GAAAC,MAAA,EAAA/D,CAAA;AAgBA;AACA,SAASgE,cAAcA,CAACC,KAAY,EAAkB;EACpD,OAAAX,aAAA,CAAAA,aAAA,KACKW,KAAK;IACRC,cAAc,EAAED,KAAK,CAACE,IAAI,IAAI,EAAE;IAChCC,OAAO,EAAE,IAAIC,IAAI,CAACJ,KAAK,CAACG,OAAO,CAAC,CAACE,WAAW,CAAC;EAAC;AAElD;;AAEA;AACe,SAAAC,SACbC,KAAa,EACbC,IAAU,EACVC,OAAgB,EAChBC,MAAc,EACdC,MAAc,EACR;EACNJ,KAAK,CAACK,GAAG,CACPC,+BAAmB,CAACC,UAAU,EAC9B,IAAAC,qBAAS,EAACL,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEM,aAAa,CAAC;IAAA,IAAAC,IAAA,GAAAvC,iBAAA,cAAA5C,YAAA,GAAAiC,CAAA,CAChC,SAAAmD,QAAgBC,GAAmB,EAAEC,GAAa,EAAEC,IAAsB;MAAA,IAAAC,IAAA,EAAAC,MAAA,EAAAC,WAAA,EAAAC,EAAA;MAAA,OAAA3F,YAAA,GAAAgC,CAAA,WAAA4D,QAAA;QAAA,kBAAAA,QAAA,CAAA/E,CAAA,GAAA+E,QAAA,CAAAzF,CAAA;UAAA;YAChEqF,IAAI,GAAKH,GAAG,CAACQ,WAAW,CAAxBL,IAAI;YAAA,MAERM,kBAAC,CAACC,KAAK,CAACP,IAAI,CAAC,KAAK,KAAK;cAAAI,QAAA,CAAAzF,CAAA;cAAA;YAAA;YAAAyF,QAAA,CAAA/E,CAAA;YAAA+E,QAAA,CAAAzF,CAAA;YAAA,OAEFwE,OAAO,CAACqB,UAAU,CAAC;cAAEC,IAAI,EAAET;YAAK,CAAC,CAAC;UAAA;YAAjDC,MAAM,GAAAG,QAAA,CAAA5E,CAAA;YACN0E,WAAW,GAAGD,MAAM,CAACrE,MAAM;YACjCyD,MAAM,CAACqB,KAAK,CAAC;cAAER,WAAW,EAAXA;YAAY,CAAC,EAAE,sCAAsC,CAAC;YAErEJ,GAAG,CAACa,MAAM,CAACC,iBAAW,CAACC,EAAE,CAAC;YAAC,OAAAT,QAAA,CAAA3E,CAAA,IACpBsE,IAAI,CAAC;cACVe,OAAO,EAAEb,MAAM,CAACc,GAAG,CAACtC,cAAc,CAAC;cACnCuC,IAAI,EAAE;gBACJjB,IAAI,EAAE,EAAE,CAAE;cACZ;YACF,CAAC,CAAC;UAAA;YAAAK,QAAA,CAAA/E,CAAA;YAAA8E,EAAA,GAAAC,QAAA,CAAA5E,CAAA;YAEF6D,MAAM,CAAC4B,KAAK,CAAC;cAAEA,KAAK,EAAEd,EAAA,CAAMe;YAAI,CAAC,EAAE,iCAAiC,CAAC;YAAC,OAAAd,QAAA,CAAA3E,CAAA,IAC/DsE,IAAI,CAACoB,gBAAU,CAACC,OAAO,CAACR,iBAAW,CAACS,cAAc,EAAElB,EAAA,CAAMmB,OAAO,CAAC,CAAC;UAAA;YAAA,OAAAlB,QAAA,CAAA3E,CAAA,IAGvEsE,IAAI,CAACoB,gBAAU,CAACI,eAAe,CAAC,CAAC,CAAC;QAAA;MAAA,GAAA3B,OAAA;IAAA,CAC1C;IAAA,iBAAA4B,EAAA,EAAAC,GAAA,EAAAC,GAAA;MAAA,OAAA/B,IAAA,CAAArC,KAAA,OAAAD,SAAA;IAAA;EAAA,GACH,CAAC;EAED4B,KAAK,CAAC0C,IAAI,CACRpC,+BAAmB,CAACC,UAAU,EAC9B,IAAAC,qBAAS,EAACL,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEM,aAAa,CAAC,EAChC,UAAUG,GAAmB,EAAEC,GAAa,EAAEC,IAAsB,EAAE;IACpE,IAAA6B,SAAA,GAA+C/B,GAAG,CAACgC,IAAI;MAA/CC,QAAQ,GAAAF,SAAA,CAARE,QAAQ;MAAEC,QAAQ,GAAAH,SAAA,CAARG,QAAQ;MAAEpD,cAAc,GAAAiD,SAAA,CAAdjD,cAAc;IAC1C,IAAQqB,IAAI,GAAKH,GAAG,CAACQ,WAAW,CAAxBL,IAAI;IAEZ,IAAI,CAACM,kBAAC,CAAC0B,SAAS,CAACD,QAAQ,CAAC,IAAI,CAACzB,kBAAC,CAAC2B,OAAO,CAACtD,cAAc,CAAC,EAAE;MACxD,OAAOoB,IAAI,CAACoB,gBAAU,CAACC,OAAO,CAACR,iBAAW,CAACsB,QAAQ,EAAEC,oBAAc,CAACC,oBAAoB,CAAC,CAAC;IAC5F;IAEAlD,IAAI,CAACmD,YAAY,CAACrC,IAAI,EAAE8B,QAAQ;MAAA,IAAAQ,KAAA,GAAAlF,iBAAA,cAAA5C,YAAA,GAAAiC,CAAA,CAAE,SAAA8F,SAAOC,GAAG,EAAE/B,IAAiB;QAAA,IAAAgC,SAAA,EAAA/D,KAAA,EAAAgE,GAAA,EAAAC,WAAA,EAAA9D,OAAA,EAAA+D,SAAA,EAAAC,GAAA;QAAA,OAAArI,YAAA,GAAAgC,CAAA,WAAAsG,SAAA;UAAA,kBAAAA,SAAA,CAAAzH,CAAA,GAAAyH,SAAA,CAAAnI,CAAA;YAAA;cAAA,KACzD6H,GAAG;gBAAAM,SAAA,CAAAnI,CAAA;gBAAA;cAAA;cACC8H,SAAS,GAAGD,GAAG,CAAClB,OAAO,GAAGV,iBAAW,CAACmC,YAAY,GAAGnC,iBAAW,CAACS,cAAc;cAAA,OAAAyB,SAAA,CAAArH,CAAA,IAC9EsE,IAAI,CAACoB,gBAAU,CAACC,OAAO,CAACqB,SAAS,EAAED,GAAG,CAAClB,OAAO,CAAC,CAAC;YAAA;cAGzDzB,GAAG,CAACQ,WAAW,GAAGI,IAAI;cAAC,IAElBH,kBAAC,CAAC0C,UAAU,CAAC7D,OAAO,CAACyD,SAAS,CAAC;gBAAAE,SAAA,CAAAnI,CAAA;gBAAA;cAAA;cAAA,OAAAmI,SAAA,CAAArH,CAAA,IAC3BsE,IAAI,CACToB,gBAAU,CAACC,OAAO,CAACR,iBAAW,CAACqC,eAAe,EAAEd,oBAAc,CAACe,qBAAqB,CACtF,CAAC;YAAA;cAAAJ,SAAA,CAAAzH,CAAA;cAAAyH,SAAA,CAAAnI,CAAA;cAAA,OAImB,IAAAwI,iBAAW,EAACjE,IAAI,EAAEE,MAAM,EAAEqB,IAAI,EAAgBqB,QAAQ,CAAC;YAAA;cAArEpD,KAAK,GAAAoE,SAAA,CAAAtH,CAAA;cAAA,IACNkD,KAAK;gBAAAoE,SAAA,CAAAnI,CAAA;gBAAA;cAAA;cAAA,MACFwG,gBAAU,CAACiC,gBAAgB,CAAC,CAAC;YAAA;cAG/BV,GAAG,GAAGW,iBAAW,CAACC,WAAW,CAAC5E,KAAK,CAAC,EAC1C;cACMiE,WAAW,GAAGU,iBAAW,CAACE,IAAI,CAAC7E,KAAK,EAAE,CAAC,CAAC;cACxCG,OAAO,GAAG,IAAIC,IAAI,CAAC,CAAC,CAAC0E,OAAO,CAAC,CAAC;cAEpC;AACV;AACA;AACA;AACA;cACgBZ,SAAgB,GAAG;gBACvBnC,IAAI,EAAET,IAAI;gBACVtB,KAAK,EAAEiE,WAAW;gBAClBD,GAAG,EAAHA,GAAG;gBACH9D,IAAI,EAAED,cAAc;gBACpBoD,QAAQ,EAARA,QAAQ;gBACRlD,OAAO,EAAPA;cACF,CAAC;cAAAiE,SAAA,CAAAnI,CAAA;cAAA,OAEKwE,OAAO,CAACyD,SAAS,CAACA,SAAS,CAAC;YAAA;cAClCvD,MAAM,CAACqB,KAAK,CAAC;gBAAEgC,GAAG,EAAHA,GAAG;gBAAE1C,IAAI,EAAJA;cAAK,CAAC,EAAE,2CAA2C,CAAC;cACxEF,GAAG,CAAC2D,GAAG,CAACC,aAAO,CAACC,aAAa,EAAE,oBAAoB,CAAC;cAAC,OAAAb,SAAA,CAAArH,CAAA,IAC9CsE,IAAI,CACTtB,cAAc,CAAC;gBACbC,KAAK,EAALA,KAAK;gBACL+B,IAAI,EAAET,IAAI;gBACV0C,GAAG,EAAEE,SAAS,CAACF,GAAG;gBAClB9D,IAAI,EAAED,cAAc;gBACpBoD,QAAQ,EAARA,QAAQ;gBACRlD,OAAO,EAAE+D,SAAS,CAAC/D;cACrB,CAAC,CACH,CAAC;YAAA;cAAAiE,SAAA,CAAAzH,CAAA;cAAAwH,GAAA,GAAAC,SAAA,CAAAtH,CAAA;cAED6D,MAAM,CAAC4B,KAAK,CAAC;gBAAEA,KAAK,EAAE4B,GAAA,CAAM3B;cAAI,CAAC,EAAE,qCAAqC,CAAC;cAAC,OAAA4B,SAAA,CAAArH,CAAA,IACnEsE,IAAI,CAACoB,gBAAU,CAACiC,gBAAgB,CAACP,GAAA,CAAMvB,OAAO,CAAC,CAAC;UAAA;QAAA,GAAAiB,QAAA;MAAA,CAE1D;MAAA,iBAAAqB,GAAA,EAAAC,GAAA;QAAA,OAAAvB,KAAA,CAAAhF,KAAA,OAAAD,SAAA;MAAA;IAAA,IAAC;EACJ,CACF,CAAC;EAED4B,KAAK,UAAO,CACVM,+BAAmB,CAACuE,YAAY,EAChC,IAAArE,qBAAS,EAACL,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEM,aAAa,CAAC;IAAA,IAAAqE,KAAA,GAAA3G,iBAAA,cAAA5C,YAAA,GAAAiC,CAAA,CAChC,SAAAuH,SAAOnE,GAAmB,EAAEC,GAAa,EAAEC,IAAsB;MAAA,IAAAkE,QAAA,EAAAjE,IAAA,EAAAkE,GAAA;MAAA,OAAA1J,YAAA,GAAAgC,CAAA,WAAA2H,SAAA;QAAA,kBAAAA,SAAA,CAAA9I,CAAA,GAAA8I,SAAA,CAAAxJ,CAAA;UAAA;YAEnDsJ,QAAQ,GAChBpE,GAAG,CADLuE,MAAM,CAAIH,QAAQ;YAEZjE,IAAI,GAAKH,GAAG,CAACQ,WAAW,CAAxBL,IAAI;YAAA,MAERM,kBAAC,CAACC,KAAK,CAACP,IAAI,CAAC,KAAK,KAAK;cAAAmE,SAAA,CAAAxJ,CAAA;cAAA;YAAA;YACzB0E,MAAM,CAACqB,KAAK,CAAC;cAAEV,IAAI,EAAJA;YAAK,CAAC,EAAE,sCAAsC,CAAC;YAACmE,SAAA,CAAA9I,CAAA;YAAA8I,SAAA,CAAAxJ,CAAA;YAAA,OAEvDwE,OAAO,CAACkF,WAAW,CAACrE,IAAI,EAAEiE,QAAQ,CAAC;UAAA;YACzC5E,MAAM,CAACiF,IAAI,CAAC;cAAEL,QAAQ,EAARA,QAAQ;cAAEjE,IAAI,EAAJA;YAAK,CAAC,EAAE,mDAAmD,CAAC;YAAC,OAAAmE,SAAA,CAAA1I,CAAA,IAC9EsE,IAAI,CAAC,CAAC,CAAC,CAAC;UAAA;YAAAoE,SAAA,CAAA9I,CAAA;YAAA6I,GAAA,GAAAC,SAAA,CAAA3I,CAAA;YAEf6D,MAAM,CAAC4B,KAAK,CAAC;cAAEA,KAAK,EAAEiD,GAAA,CAAMhD;YAAI,CAAC,EAAE,qCAAqC,CAAC;YAAC,OAAAiD,SAAA,CAAA1I,CAAA,IACnEsE,IAAI,CAACoB,gBAAU,CAACC,OAAO,CAACR,iBAAW,CAACS,cAAc,EAAE6C,GAAA,CAAM5C,OAAO,CAAC,CAAC;UAAA;YAAA,OAAA6C,SAAA,CAAA1I,CAAA,IAGvEsE,IAAI,CAACoB,gBAAU,CAACI,eAAe,CAAC,CAAC,CAAC;QAAA;MAAA,GAAAyC,QAAA;IAAA,CAC1C;IAAA,iBAAAO,GAAA,EAAAC,GAAA,EAAAC,GAAA;MAAA,OAAAV,KAAA,CAAAzG,KAAA,OAAAD,SAAA;IAAA;EAAA,GACH,CAAC;AACH","ignoreList":[]}
+{"version":3,"file":"token.js","names":[],"sources":["../../src/v1/token.ts"],"sourcesContent":["import type { Response, Router } from 'express';\nimport _ from 'lodash';\n\nimport type { Auth } from '@verdaccio/auth';\nimport { getApiToken } from '@verdaccio/auth';\nimport { HEADERS, HTTP_STATUS, SUPPORT_ERRORS, cryptoUtils, errorUtils } from '@verdaccio/core';\nimport { TOKEN_API_ENDPOINTS, rateLimit } from '@verdaccio/middleware';\nimport type { Storage } from '@verdaccio/store';\nimport type { Config, Logger, RemoteUser, Token } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend } from '../../types/custom';\n\nexport type NormalizeToken = Token & {\n  cidr_whitelist: string[];\n  created: string;\n};\n\n// npm expects \"cidr_whitelist\" for token list\nfunction normalizeToken(token: Token): NormalizeToken {\n  return {\n    ...token,\n    cidr_whitelist: token.cidr || [],\n    created: new Date(token.created).toISOString(),\n  };\n}\n\n// https://github.com/npm/npm-profile/blob/latest/lib/index.js\nexport default function (\n  route: Router,\n  auth: Auth,\n  storage: Storage,\n  config: Config,\n  logger: Logger\n): void {\n  route.get(\n    TOKEN_API_ENDPOINTS.get_tokens,\n    rateLimit(config?.userRateLimit),\n    async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        try {\n          const tokens = await storage.readTokens({ user: name });\n          const totalTokens = tokens.length;\n          logger.debug({ totalTokens }, 'token list retrieved: @{totalTokens}');\n\n          res.status(HTTP_STATUS.OK);\n          return next({\n            objects: tokens.map(normalizeToken),\n            urls: {\n              next: '', // TODO: pagination?\n            },\n          });\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token list has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n\n  route.post(\n    TOKEN_API_ENDPOINTS.get_tokens,\n    rateLimit(config?.userRateLimit),\n    function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { password, readonly, cidr_whitelist } = req.body;\n      const { name } = req.remote_user;\n\n      if (!_.isBoolean(readonly) || !_.isArray(cidr_whitelist)) {\n        return next(errorUtils.getCode(HTTP_STATUS.BAD_DATA, SUPPORT_ERRORS.PARAMETERS_NOT_VALID));\n      }\n\n      auth.authenticate(name, password, async (err, user?: RemoteUser) => {\n        if (err) {\n          const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;\n          return next(errorUtils.getCode(errorCode, err.message));\n        }\n\n        req.remote_user = user;\n\n        if (!_.isFunction(storage.saveToken)) {\n          return next(\n            errorUtils.getCode(HTTP_STATUS.NOT_IMPLEMENTED, SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT)\n          );\n        }\n\n        try {\n          const token = await getApiToken(auth, config, user as RemoteUser, password);\n          if (!token) {\n            throw errorUtils.getInternalError();\n          }\n\n          const key = cryptoUtils.stringToMD5(token);\n          // TODO: use a utility here\n          const maskedToken = cryptoUtils.mask(token, 5);\n          const created = new Date().getTime();\n\n          /**\n           * cidr_whitelist: is not being used, we pass it through\n           * token: we do not store the real token (it is generated once and retrieved\n           * to the user), just a mask of it.\n           */\n          const saveToken: Token = {\n            user: name,\n            token: maskedToken,\n            key,\n            cidr: cidr_whitelist,\n            readonly,\n            created,\n          };\n\n          await storage.saveToken(saveToken);\n          logger.debug({ key, name }, 'token @{key} was created for user @{name}');\n          res.set(HEADERS.CACHE_CONTROL, 'no-cache, no-store');\n          return next(\n            normalizeToken({\n              token,\n              user: name,\n              key: saveToken.key,\n              cidr: cidr_whitelist,\n              readonly,\n              created: saveToken.created,\n            })\n          );\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getInternalError(error.message));\n        }\n      });\n    }\n  );\n\n  route.delete(\n    TOKEN_API_ENDPOINTS.delete_token,\n    rateLimit(config?.userRateLimit),\n    async (req: $RequestExtend, res: Response, next: $NextFunctionVer) => {\n      const {\n        params: { tokenKey },\n      } = req;\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        logger.debug({ name }, '@{name} has requested remove a token');\n        try {\n          await storage.deleteToken(name, tokenKey);\n          logger.info({ tokenKey, name }, 'token id @{tokenKey} was revoked for user @{name}');\n          return next({});\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n}\n"],"mappings":";;;;;;;AAkBA,SAAS,eAAe,OAA8B;AACpD,QAAO;EACL,GAAG;EACH,gBAAgB,MAAM,QAAQ,EAAE;EAChC,SAAS,IAAI,KAAK,MAAM,QAAQ,CAAC,aAAa;EAC/C;;AAIH,SAAA,cACE,OACA,MACA,SACA,QACA,QACM;AACN,OAAM,IACJ,sBAAA,oBAAoB,aAAA,GAAA,sBAAA,WACV,QAAQ,cAAc,EAChC,eAAgB,KAAqB,KAAe,MAAwB;EAC1E,MAAM,EAAE,SAAS,IAAI;AAErB,MAAI,OAAA,QAAE,MAAM,KAAK,KAAK,MACpB,KAAI;GACF,MAAM,SAAS,MAAM,QAAQ,WAAW,EAAE,MAAM,MAAM,CAAC;GACvD,MAAM,cAAc,OAAO;AAC3B,UAAO,MAAM,EAAE,aAAa,EAAE,uCAAuC;AAErE,OAAI,OAAO,gBAAA,YAAY,GAAG;AAC1B,UAAO,KAAK;IACV,SAAS,OAAO,IAAI,eAAe;IACnC,MAAM,EACJ,MAAM,IACP;IACF,CAAC;WACK,OAAY;AACnB,UAAO,MAAM,EAAE,OAAO,MAAM,KAAK,EAAE,kCAAkC;AACrE,UAAO,KAAK,gBAAA,WAAW,QAAQ,gBAAA,YAAY,gBAAgB,MAAM,QAAQ,CAAC;;AAG9E,SAAO,KAAK,gBAAA,WAAW,iBAAiB,CAAC;GAE5C;AAED,OAAM,KACJ,sBAAA,oBAAoB,aAAA,GAAA,sBAAA,WACV,QAAQ,cAAc,EAChC,SAAU,KAAqB,KAAe,MAAwB;EACpE,MAAM,EAAE,UAAU,UAAU,mBAAmB,IAAI;EACnD,MAAM,EAAE,SAAS,IAAI;AAErB,MAAI,CAAC,OAAA,QAAE,UAAU,SAAS,IAAI,CAAC,OAAA,QAAE,QAAQ,eAAe,CACtD,QAAO,KAAK,gBAAA,WAAW,QAAQ,gBAAA,YAAY,UAAU,gBAAA,eAAe,qBAAqB,CAAC;AAG5F,OAAK,aAAa,MAAM,UAAU,OAAO,KAAK,SAAsB;AAClE,OAAI,KAAK;IACP,MAAM,YAAY,IAAI,UAAU,gBAAA,YAAY,eAAe,gBAAA,YAAY;AACvE,WAAO,KAAK,gBAAA,WAAW,QAAQ,WAAW,IAAI,QAAQ,CAAC;;AAGzD,OAAI,cAAc;AAElB,OAAI,CAAC,OAAA,QAAE,WAAW,QAAQ,UAAU,CAClC,QAAO,KACL,gBAAA,WAAW,QAAQ,gBAAA,YAAY,iBAAiB,gBAAA,eAAe,sBAAsB,CACtF;AAGH,OAAI;IACF,MAAM,QAAQ,OAAA,GAAA,gBAAA,aAAkB,MAAM,QAAQ,MAAoB,SAAS;AAC3E,QAAI,CAAC,MACH,OAAM,gBAAA,WAAW,kBAAkB;IAGrC,MAAM,MAAM,gBAAA,YAAY,YAAY,MAAM;;;;;;IAU1C,MAAM,YAAmB;KACvB,MAAM;KACN,OAVkB,gBAAA,YAAY,KAAK,OAAO,EAAE;KAW5C;KACA,MAAM;KACN;KACA,0BAbc,IAAI,MAAM,EAAC,SAAS;KAcnC;AAED,UAAM,QAAQ,UAAU,UAAU;AAClC,WAAO,MAAM;KAAE;KAAK;KAAM,EAAE,4CAA4C;AACxE,QAAI,IAAI,gBAAA,QAAQ,eAAe,qBAAqB;AACpD,WAAO,KACL,eAAe;KACb;KACA,MAAM;KACN,KAAK,UAAU;KACf,MAAM;KACN;KACA,SAAS,UAAU;KACpB,CAAC,CACH;YACM,OAAY;AACnB,WAAO,MAAM,EAAE,OAAO,MAAM,KAAK,EAAE,sCAAsC;AACzE,WAAO,KAAK,gBAAA,WAAW,iBAAiB,MAAM,QAAQ,CAAC;;IAEzD;GAEL;AAED,OAAM,OACJ,sBAAA,oBAAoB,eAAA,GAAA,sBAAA,WACV,QAAQ,cAAc,EAChC,OAAO,KAAqB,KAAe,SAA2B;EACpE,MAAM,EACJ,QAAQ,EAAE,eACR;EACJ,MAAM,EAAE,SAAS,IAAI;AAErB,MAAI,OAAA,QAAE,MAAM,KAAK,KAAK,OAAO;AAC3B,UAAO,MAAM,EAAE,MAAM,EAAE,uCAAuC;AAC9D,OAAI;AACF,UAAM,QAAQ,YAAY,MAAM,SAAS;AACzC,WAAO,KAAK;KAAE;KAAU;KAAM,EAAE,oDAAoD;AACpF,WAAO,KAAK,EAAE,CAAC;YACR,OAAY;AACnB,WAAO,MAAM,EAAE,OAAO,MAAM,KAAK,EAAE,sCAAsC;AACzE,WAAO,KAAK,gBAAA,WAAW,QAAQ,gBAAA,YAAY,gBAAgB,MAAM,QAAQ,CAAC;;;AAG9E,SAAO,KAAK,gBAAA,WAAW,iBAAiB,CAAC;GAE5C"}

package/build/v1/token.mjs

@@ -0,0 +1,102 @@
+import { TOKEN_API_ENDPOINTS, rateLimit } from "@verdaccio/middleware";
+import _ from "lodash";
+import { HEADERS, HTTP_STATUS, SUPPORT_ERRORS, cryptoUtils, errorUtils } from "@verdaccio/core";
+import { getApiToken } from "@verdaccio/auth";
+//#region src/v1/token.ts
+function normalizeToken(token) {
+	return {
+		...token,
+		cidr_whitelist: token.cidr || [],
+		created: new Date(token.created).toISOString()
+	};
+}
+function token_default(route, auth, storage, config, logger) {
+	route.get(TOKEN_API_ENDPOINTS.get_tokens, rateLimit(config?.userRateLimit), async function(req, res, next) {
+		const { name } = req.remote_user;
+		if (_.isNil(name) === false) try {
+			const tokens = await storage.readTokens({ user: name });
+			const totalTokens = tokens.length;
+			logger.debug({ totalTokens }, "token list retrieved: @{totalTokens}");
+			res.status(HTTP_STATUS.OK);
+			return next({
+				objects: tokens.map(normalizeToken),
+				urls: { next: "" }
+			});
+		} catch (error) {
+			logger.error({ error: error.msg }, "token list has failed: @{error}");
+			return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));
+		}
+		return next(errorUtils.getUnauthorized());
+	});
+	route.post(TOKEN_API_ENDPOINTS.get_tokens, rateLimit(config?.userRateLimit), function(req, res, next) {
+		const { password, readonly, cidr_whitelist } = req.body;
+		const { name } = req.remote_user;
+		if (!_.isBoolean(readonly) || !_.isArray(cidr_whitelist)) return next(errorUtils.getCode(HTTP_STATUS.BAD_DATA, SUPPORT_ERRORS.PARAMETERS_NOT_VALID));
+		auth.authenticate(name, password, async (err, user) => {
+			if (err) {
+				const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;
+				return next(errorUtils.getCode(errorCode, err.message));
+			}
+			req.remote_user = user;
+			if (!_.isFunction(storage.saveToken)) return next(errorUtils.getCode(HTTP_STATUS.NOT_IMPLEMENTED, SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT));
+			try {
+				const token = await getApiToken(auth, config, user, password);
+				if (!token) throw errorUtils.getInternalError();
+				const key = cryptoUtils.stringToMD5(token);
+				/**
+				* cidr_whitelist: is not being used, we pass it through
+				* token: we do not store the real token (it is generated once and retrieved
+				* to the user), just a mask of it.
+				*/
+				const saveToken = {
+					user: name,
+					token: cryptoUtils.mask(token, 5),
+					key,
+					cidr: cidr_whitelist,
+					readonly,
+					created: (/* @__PURE__ */ new Date()).getTime()
+				};
+				await storage.saveToken(saveToken);
+				logger.debug({
+					key,
+					name
+				}, "token @{key} was created for user @{name}");
+				res.set(HEADERS.CACHE_CONTROL, "no-cache, no-store");
+				return next(normalizeToken({
+					token,
+					user: name,
+					key: saveToken.key,
+					cidr: cidr_whitelist,
+					readonly,
+					created: saveToken.created
+				}));
+			} catch (error) {
+				logger.error({ error: error.msg }, "token creation has failed: @{error}");
+				return next(errorUtils.getInternalError(error.message));
+			}
+		});
+	});
+	route.delete(TOKEN_API_ENDPOINTS.delete_token, rateLimit(config?.userRateLimit), async (req, res, next) => {
+		const { params: { tokenKey } } = req;
+		const { name } = req.remote_user;
+		if (_.isNil(name) === false) {
+			logger.debug({ name }, "@{name} has requested remove a token");
+			try {
+				await storage.deleteToken(name, tokenKey);
+				logger.info({
+					tokenKey,
+					name
+				}, "token id @{tokenKey} was revoked for user @{name}");
+				return next({});
+			} catch (error) {
+				logger.error({ error: error.msg }, "token creation has failed: @{error}");
+				return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));
+			}
+		}
+		return next(errorUtils.getUnauthorized());
+	});
+}
+//#endregion
+export { token_default as default };
+
+//# sourceMappingURL=token.mjs.map

package/build/v1/token.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.mjs","names":[],"sources":["../../src/v1/token.ts"],"sourcesContent":["import type { Response, Router } from 'express';\nimport _ from 'lodash';\n\nimport type { Auth } from '@verdaccio/auth';\nimport { getApiToken } from '@verdaccio/auth';\nimport { HEADERS, HTTP_STATUS, SUPPORT_ERRORS, cryptoUtils, errorUtils } from '@verdaccio/core';\nimport { TOKEN_API_ENDPOINTS, rateLimit } from '@verdaccio/middleware';\nimport type { Storage } from '@verdaccio/store';\nimport type { Config, Logger, RemoteUser, Token } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend } from '../../types/custom';\n\nexport type NormalizeToken = Token & {\n  cidr_whitelist: string[];\n  created: string;\n};\n\n// npm expects \"cidr_whitelist\" for token list\nfunction normalizeToken(token: Token): NormalizeToken {\n  return {\n    ...token,\n    cidr_whitelist: token.cidr || [],\n    created: new Date(token.created).toISOString(),\n  };\n}\n\n// https://github.com/npm/npm-profile/blob/latest/lib/index.js\nexport default function (\n  route: Router,\n  auth: Auth,\n  storage: Storage,\n  config: Config,\n  logger: Logger\n): void {\n  route.get(\n    TOKEN_API_ENDPOINTS.get_tokens,\n    rateLimit(config?.userRateLimit),\n    async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        try {\n          const tokens = await storage.readTokens({ user: name });\n          const totalTokens = tokens.length;\n          logger.debug({ totalTokens }, 'token list retrieved: @{totalTokens}');\n\n          res.status(HTTP_STATUS.OK);\n          return next({\n            objects: tokens.map(normalizeToken),\n            urls: {\n              next: '', // TODO: pagination?\n            },\n          });\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token list has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n\n  route.post(\n    TOKEN_API_ENDPOINTS.get_tokens,\n    rateLimit(config?.userRateLimit),\n    function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {\n      const { password, readonly, cidr_whitelist } = req.body;\n      const { name } = req.remote_user;\n\n      if (!_.isBoolean(readonly) || !_.isArray(cidr_whitelist)) {\n        return next(errorUtils.getCode(HTTP_STATUS.BAD_DATA, SUPPORT_ERRORS.PARAMETERS_NOT_VALID));\n      }\n\n      auth.authenticate(name, password, async (err, user?: RemoteUser) => {\n        if (err) {\n          const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;\n          return next(errorUtils.getCode(errorCode, err.message));\n        }\n\n        req.remote_user = user;\n\n        if (!_.isFunction(storage.saveToken)) {\n          return next(\n            errorUtils.getCode(HTTP_STATUS.NOT_IMPLEMENTED, SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT)\n          );\n        }\n\n        try {\n          const token = await getApiToken(auth, config, user as RemoteUser, password);\n          if (!token) {\n            throw errorUtils.getInternalError();\n          }\n\n          const key = cryptoUtils.stringToMD5(token);\n          // TODO: use a utility here\n          const maskedToken = cryptoUtils.mask(token, 5);\n          const created = new Date().getTime();\n\n          /**\n           * cidr_whitelist: is not being used, we pass it through\n           * token: we do not store the real token (it is generated once and retrieved\n           * to the user), just a mask of it.\n           */\n          const saveToken: Token = {\n            user: name,\n            token: maskedToken,\n            key,\n            cidr: cidr_whitelist,\n            readonly,\n            created,\n          };\n\n          await storage.saveToken(saveToken);\n          logger.debug({ key, name }, 'token @{key} was created for user @{name}');\n          res.set(HEADERS.CACHE_CONTROL, 'no-cache, no-store');\n          return next(\n            normalizeToken({\n              token,\n              user: name,\n              key: saveToken.key,\n              cidr: cidr_whitelist,\n              readonly,\n              created: saveToken.created,\n            })\n          );\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getInternalError(error.message));\n        }\n      });\n    }\n  );\n\n  route.delete(\n    TOKEN_API_ENDPOINTS.delete_token,\n    rateLimit(config?.userRateLimit),\n    async (req: $RequestExtend, res: Response, next: $NextFunctionVer) => {\n      const {\n        params: { tokenKey },\n      } = req;\n      const { name } = req.remote_user;\n\n      if (_.isNil(name) === false) {\n        logger.debug({ name }, '@{name} has requested remove a token');\n        try {\n          await storage.deleteToken(name, tokenKey);\n          logger.info({ tokenKey, name }, 'token id @{tokenKey} was revoked for user @{name}');\n          return next({});\n        } catch (error: any) {\n          logger.error({ error: error.msg }, 'token creation has failed: @{error}');\n          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));\n        }\n      }\n      return next(errorUtils.getUnauthorized());\n    }\n  );\n}\n"],"mappings":";;;;;AAkBA,SAAS,eAAe,OAA8B;AACpD,QAAO;EACL,GAAG;EACH,gBAAgB,MAAM,QAAQ,EAAE;EAChC,SAAS,IAAI,KAAK,MAAM,QAAQ,CAAC,aAAa;EAC/C;;AAIH,SAAA,cACE,OACA,MACA,SACA,QACA,QACM;AACN,OAAM,IACJ,oBAAoB,YACpB,UAAU,QAAQ,cAAc,EAChC,eAAgB,KAAqB,KAAe,MAAwB;EAC1E,MAAM,EAAE,SAAS,IAAI;AAErB,MAAI,EAAE,MAAM,KAAK,KAAK,MACpB,KAAI;GACF,MAAM,SAAS,MAAM,QAAQ,WAAW,EAAE,MAAM,MAAM,CAAC;GACvD,MAAM,cAAc,OAAO;AAC3B,UAAO,MAAM,EAAE,aAAa,EAAE,uCAAuC;AAErE,OAAI,OAAO,YAAY,GAAG;AAC1B,UAAO,KAAK;IACV,SAAS,OAAO,IAAI,eAAe;IACnC,MAAM,EACJ,MAAM,IACP;IACF,CAAC;WACK,OAAY;AACnB,UAAO,MAAM,EAAE,OAAO,MAAM,KAAK,EAAE,kCAAkC;AACrE,UAAO,KAAK,WAAW,QAAQ,YAAY,gBAAgB,MAAM,QAAQ,CAAC;;AAG9E,SAAO,KAAK,WAAW,iBAAiB,CAAC;GAE5C;AAED,OAAM,KACJ,oBAAoB,YACpB,UAAU,QAAQ,cAAc,EAChC,SAAU,KAAqB,KAAe,MAAwB;EACpE,MAAM,EAAE,UAAU,UAAU,mBAAmB,IAAI;EACnD,MAAM,EAAE,SAAS,IAAI;AAErB,MAAI,CAAC,EAAE,UAAU,SAAS,IAAI,CAAC,EAAE,QAAQ,eAAe,CACtD,QAAO,KAAK,WAAW,QAAQ,YAAY,UAAU,eAAe,qBAAqB,CAAC;AAG5F,OAAK,aAAa,MAAM,UAAU,OAAO,KAAK,SAAsB;AAClE,OAAI,KAAK;IACP,MAAM,YAAY,IAAI,UAAU,YAAY,eAAe,YAAY;AACvE,WAAO,KAAK,WAAW,QAAQ,WAAW,IAAI,QAAQ,CAAC;;AAGzD,OAAI,cAAc;AAElB,OAAI,CAAC,EAAE,WAAW,QAAQ,UAAU,CAClC,QAAO,KACL,WAAW,QAAQ,YAAY,iBAAiB,eAAe,sBAAsB,CACtF;AAGH,OAAI;IACF,MAAM,QAAQ,MAAM,YAAY,MAAM,QAAQ,MAAoB,SAAS;AAC3E,QAAI,CAAC,MACH,OAAM,WAAW,kBAAkB;IAGrC,MAAM,MAAM,YAAY,YAAY,MAAM;;;;;;IAU1C,MAAM,YAAmB;KACvB,MAAM;KACN,OAVkB,YAAY,KAAK,OAAO,EAAE;KAW5C;KACA,MAAM;KACN;KACA,0BAbc,IAAI,MAAM,EAAC,SAAS;KAcnC;AAED,UAAM,QAAQ,UAAU,UAAU;AAClC,WAAO,MAAM;KAAE;KAAK;KAAM,EAAE,4CAA4C;AACxE,QAAI,IAAI,QAAQ,eAAe,qBAAqB;AACpD,WAAO,KACL,eAAe;KACb;KACA,MAAM;KACN,KAAK,UAAU;KACf,MAAM;KACN;KACA,SAAS,UAAU;KACpB,CAAC,CACH;YACM,OAAY;AACnB,WAAO,MAAM,EAAE,OAAO,MAAM,KAAK,EAAE,sCAAsC;AACzE,WAAO,KAAK,WAAW,iBAAiB,MAAM,QAAQ,CAAC;;IAEzD;GAEL;AAED,OAAM,OACJ,oBAAoB,cACpB,UAAU,QAAQ,cAAc,EAChC,OAAO,KAAqB,KAAe,SAA2B;EACpE,MAAM,EACJ,QAAQ,EAAE,eACR;EACJ,MAAM,EAAE,SAAS,IAAI;AAErB,MAAI,EAAE,MAAM,KAAK,KAAK,OAAO;AAC3B,UAAO,MAAM,EAAE,MAAM,EAAE,uCAAuC;AAC9D,OAAI;AACF,UAAM,QAAQ,YAAY,MAAM,SAAS;AACzC,WAAO,KAAK;KAAE;KAAU;KAAM,EAAE,oDAAoD;AACpF,WAAO,KAAK,EAAE,CAAC;YACR,OAAY;AACnB,WAAO,MAAM,EAAE,OAAO,MAAM,KAAK,EAAE,sCAAsC;AACzE,WAAO,KAAK,WAAW,QAAQ,YAAY,gBAAgB,MAAM,QAAQ,CAAC;;;AAG9E,SAAO,KAAK,WAAW,iBAAiB,CAAC;GAE5C"}

package/build/whoami.d.ts

@@ -1,2 +1,2 @@
-import type { Router } from 'express';
+import { Router } from 'express';
 export default function (route: Router): void;

package/build/whoami.js

@@ -1,27 +1,22 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports["default"] = _default;
-var _debug = _interopRequireDefault(require("debug"));
-var _core = require("@verdaccio/core");
-var _middleware = require("@verdaccio/middleware");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-var debug = (0, _debug["default"])('verdaccio:api:user');
-function _default(route) {
-  route.get(_middleware.USER_API_ENDPOINTS.whoami, function (req, _res, next) {
-    var _req$remote_user;
-    // remote_user is set by the auth middleware
-    var username = req === null || req === void 0 || (_req$remote_user = req.remote_user) === null || _req$remote_user === void 0 ? void 0 : _req$remote_user.name;
-    if (!username) {
-      debug('whoami: user not found');
-      return next(_core.errorUtils.getUnauthorized('Unauthorized'));
-    }
-    debug('whoami: response %o', username);
-    return next({
-      username: username
-    });
-  });
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let _verdaccio_middleware = require("@verdaccio/middleware");
+let _verdaccio_core = require("@verdaccio/core");
+//#region src/whoami.ts
+var debug$1 = (0, debug.default)("verdaccio:api:user");
+function whoami_default(route) {
+	route.get(_verdaccio_middleware.USER_API_ENDPOINTS.whoami, (req, _res, next) => {
+		const username = req?.remote_user?.name;
+		if (!username) {
+			debug$1("whoami: user not found");
+			return next(_verdaccio_core.errorUtils.getUnauthorized("Unauthorized"));
+		}
+		debug$1("whoami: response %o", username);
+		return next({ username });
+	});
 }
+//#endregion
+exports.default = whoami_default;
+
 //# sourceMappingURL=whoami.js.map

package/build/whoami.js.map

@@ -1 +1 @@
-{"version":3,"file":"whoami.js","names":["_debug","_interopRequireDefault","require","_core","_middleware","e","__esModule","debug","buildDebug","_default","route","get","USER_API_ENDPOINTS","whoami","req","_res","next","_req$remote_user","username","remote_user","name","errorUtils","getUnauthorized"],"sources":["../src/whoami.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response, Router } from 'express';\n\nimport { errorUtils } from '@verdaccio/core';\nimport { USER_API_ENDPOINTS } from '@verdaccio/middleware';\n\nimport type { $NextFunctionVer, $RequestExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:user');\n\nexport default function (route: Router): void {\n  route.get(\n    USER_API_ENDPOINTS.whoami,\n    (req: $RequestExtend, _res: Response, next: $NextFunctionVer): any => {\n      // remote_user is set by the auth middleware\n      const username = req?.remote_user?.name;\n      if (!username) {\n        debug('whoami: user not found');\n        return next(errorUtils.getUnauthorized('Unauthorized'));\n      }\n\n      debug('whoami: response %o', username);\n      return next({ username: username });\n    }\n  );\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAGA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,WAAA,GAAAF,OAAA;AAA2D,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAI3D,IAAME,KAAK,GAAG,IAAAC,iBAAU,EAAC,oBAAoB,CAAC;AAE/B,SAAAC,SAAUC,KAAa,EAAQ;EAC5CA,KAAK,CAACC,GAAG,CACPC,8BAAkB,CAACC,MAAM,EACzB,UAACC,GAAmB,EAAEC,IAAc,EAAEC,IAAsB,EAAU;IAAA,IAAAC,gBAAA;IACpE;IACA,IAAMC,QAAQ,GAAGJ,GAAG,aAAHA,GAAG,gBAAAG,gBAAA,GAAHH,GAAG,CAAEK,WAAW,cAAAF,gBAAA,uBAAhBA,gBAAA,CAAkBG,IAAI;IACvC,IAAI,CAACF,QAAQ,EAAE;MACbX,KAAK,CAAC,wBAAwB,CAAC;MAC/B,OAAOS,IAAI,CAACK,gBAAU,CAACC,eAAe,CAAC,cAAc,CAAC,CAAC;IACzD;IAEAf,KAAK,CAAC,qBAAqB,EAAEW,QAAQ,CAAC;IACtC,OAAOF,IAAI,CAAC;MAAEE,QAAQ,EAAEA;IAAS,CAAC,CAAC;EACrC,CACF,CAAC;AACH","ignoreList":[]}
+{"version":3,"file":"whoami.js","names":[],"sources":["../src/whoami.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response, Router } from 'express';\n\nimport { errorUtils } from '@verdaccio/core';\nimport { USER_API_ENDPOINTS } from '@verdaccio/middleware';\n\nimport type { $NextFunctionVer, $RequestExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:user');\n\nexport default function (route: Router): void {\n  route.get(\n    USER_API_ENDPOINTS.whoami,\n    (req: $RequestExtend, _res: Response, next: $NextFunctionVer): any => {\n      // remote_user is set by the auth middleware\n      const username = req?.remote_user?.name;\n      if (!username) {\n        debug('whoami: user not found');\n        return next(errorUtils.getUnauthorized('Unauthorized'));\n      }\n\n      debug('whoami: response %o', username);\n      return next({ username: username });\n    }\n  );\n}\n"],"mappings":";;;;;;AAQA,IAAM,WAAA,GAAA,MAAA,SAAmB,qBAAqB;AAE9C,SAAA,eAAyB,OAAqB;AAC5C,OAAM,IACJ,sBAAA,mBAAmB,SAClB,KAAqB,MAAgB,SAAgC;EAEpE,MAAM,WAAW,KAAK,aAAa;AACnC,MAAI,CAAC,UAAU;AACb,WAAM,yBAAyB;AAC/B,UAAO,KAAK,gBAAA,WAAW,gBAAgB,eAAe,CAAC;;AAGzD,UAAM,uBAAuB,SAAS;AACtC,SAAO,KAAK,EAAY,UAAU,CAAC;GAEtC"}

package/build/whoami.mjs

@@ -0,0 +1,20 @@
+import buildDebug from "debug";
+import { USER_API_ENDPOINTS } from "@verdaccio/middleware";
+import { errorUtils } from "@verdaccio/core";
+//#region src/whoami.ts
+var debug = buildDebug("verdaccio:api:user");
+function whoami_default(route) {
+	route.get(USER_API_ENDPOINTS.whoami, (req, _res, next) => {
+		const username = req?.remote_user?.name;
+		if (!username) {
+			debug("whoami: user not found");
+			return next(errorUtils.getUnauthorized("Unauthorized"));
+		}
+		debug("whoami: response %o", username);
+		return next({ username });
+	});
+}
+//#endregion
+export { whoami_default as default };
+
+//# sourceMappingURL=whoami.mjs.map

package/build/whoami.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.mjs","names":[],"sources":["../src/whoami.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response, Router } from 'express';\n\nimport { errorUtils } from '@verdaccio/core';\nimport { USER_API_ENDPOINTS } from '@verdaccio/middleware';\n\nimport type { $NextFunctionVer, $RequestExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:user');\n\nexport default function (route: Router): void {\n  route.get(\n    USER_API_ENDPOINTS.whoami,\n    (req: $RequestExtend, _res: Response, next: $NextFunctionVer): any => {\n      // remote_user is set by the auth middleware\n      const username = req?.remote_user?.name;\n      if (!username) {\n        debug('whoami: user not found');\n        return next(errorUtils.getUnauthorized('Unauthorized'));\n      }\n\n      debug('whoami: response %o', username);\n      return next({ username: username });\n    }\n  );\n}\n"],"mappings":";;;;AAQA,IAAM,QAAQ,WAAW,qBAAqB;AAE9C,SAAA,eAAyB,OAAqB;AAC5C,OAAM,IACJ,mBAAmB,SAClB,KAAqB,MAAgB,SAAgC;EAEpE,MAAM,WAAW,KAAK,aAAa;AACnC,MAAI,CAAC,UAAU;AACb,SAAM,yBAAyB;AAC/B,UAAO,KAAK,WAAW,gBAAgB,eAAe,CAAC;;AAGzD,QAAM,uBAAuB,SAAS;AACtC,SAAO,KAAK,EAAY,UAAU,CAAC;GAEtC"}