@verdaccio/config 6.0.0-6-next.49 → 6.0.0-6-next.51

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @verdaccio/config
 
+## 6.0.0-6-next.51
+
+### Minor Changes
+
+- 4b29d715: chore: move improvements from v5 to v6
+
+  Migrate improvements form v5 to v6:
+
+  - https://github.com/verdaccio/verdaccio/pull/3158
+  - https://github.com/verdaccio/verdaccio/pull/3151
+  - https://github.com/verdaccio/verdaccio/pull/2271
+  - https://github.com/verdaccio/verdaccio/pull/2787
+  - https://github.com/verdaccio/verdaccio/pull/2791
+  - https://github.com/verdaccio/verdaccio/pull/2205
+
+### Patch Changes
+
+- Updated dependencies [4b29d715]
+  - @verdaccio/core@6.0.0-6-next.51
+  - @verdaccio/utils@6.0.0-6-next.19
+
+## 6.0.0-6-next.50
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.50
+- @verdaccio/utils@6.0.0-6-next.18
+
 ## 6.0.0-6-next.49
 
 ### Patch Changes

package/build/security.d.ts

@@ -1,3 +1,3 @@
 import { Security } from '@verdaccio/types';
-export declare const TIME_EXPIRATION_7D = "7d";
+export declare const TIME_EXPIRATION_1H = "1h";
 export declare const defaultSecurity: Security;

package/build/security.js

@@ -3,13 +3,14 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.defaultSecurity = exports.TIME_EXPIRATION_7D = void 0;
-const TIME_EXPIRATION_7D = '7d';
-exports.TIME_EXPIRATION_7D = TIME_EXPIRATION_7D;
+exports.defaultSecurity = exports.TIME_EXPIRATION_1H = void 0;
+// TODO: get this from core package
+const TIME_EXPIRATION_1H = '1h';
+exports.TIME_EXPIRATION_1H = TIME_EXPIRATION_1H;
 const defaultWebTokenOptions = {
   sign: {
     // The expiration token for the website is 7 days
-    expiresIn: TIME_EXPIRATION_7D
+    expiresIn: TIME_EXPIRATION_1H
   },
   verify: {}
 };

package/build/security.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.js","names":["TIME_EXPIRATION_7D","defaultWebTokenOptions","sign","expiresIn","verify","defaultApiTokenConf","legacy","defaultSecurity","web","api"],"sources":["../src/security.ts"],"sourcesContent":["import { APITokenOptions, JWTOptions, Security } from '@verdaccio/types';\n\nexport const TIME_EXPIRATION_7D = '7d';\n\nconst defaultWebTokenOptions: JWTOptions = {\n  sign: {\n    // The expiration token for the website is 7 days\n    expiresIn: TIME_EXPIRATION_7D,\n  },\n  verify: {},\n};\n\nconst defaultApiTokenConf: APITokenOptions = {\n  legacy: true,\n};\n\nexport const defaultSecurity: Security = {\n  web: defaultWebTokenOptions,\n  api: defaultApiTokenConf,\n};\n"],"mappings":";;;;;;AAEO,MAAMA,kBAAkB,GAAG,IAA3B;;AAEP,MAAMC,sBAAkC,GAAG;EACzCC,IAAI,EAAE;IACJ;IACAC,SAAS,EAAEH;EAFP,CADmC;EAKzCI,MAAM,EAAE;AALiC,CAA3C;AAQA,MAAMC,mBAAoC,GAAG;EAC3CC,MAAM,EAAE;AADmC,CAA7C;AAIO,MAAMC,eAAyB,GAAG;EACvCC,GAAG,EAAEP,sBADkC;EAEvCQ,GAAG,EAAEJ;AAFkC,CAAlC"}
+{"version":3,"file":"security.js","names":["TIME_EXPIRATION_1H","defaultWebTokenOptions","sign","expiresIn","verify","defaultApiTokenConf","legacy","defaultSecurity","web","api"],"sources":["../src/security.ts"],"sourcesContent":["import { APITokenOptions, JWTOptions, Security } from '@verdaccio/types';\n\n// TODO: get this from core package\nexport const TIME_EXPIRATION_1H = '1h';\n\nconst defaultWebTokenOptions: JWTOptions = {\n  sign: {\n    // The expiration token for the website is 7 days\n    expiresIn: TIME_EXPIRATION_1H,\n  },\n  verify: {},\n};\n\nconst defaultApiTokenConf: APITokenOptions = {\n  legacy: true,\n};\n\nexport const defaultSecurity: Security = {\n  web: defaultWebTokenOptions,\n  api: defaultApiTokenConf,\n};\n"],"mappings":";;;;;;AAEA;AACO,MAAMA,kBAAkB,GAAG,IAA3B;;AAEP,MAAMC,sBAAkC,GAAG;EACzCC,IAAI,EAAE;IACJ;IACAC,SAAS,EAAEH;EAFP,CADmC;EAKzCI,MAAM,EAAE;AALiC,CAA3C;AAQA,MAAMC,mBAAoC,GAAG;EAC3CC,MAAM,EAAE;AADmC,CAA7C;AAIO,MAAMC,eAAyB,GAAG;EACvCC,GAAG,EAAEP,sBADkC;EAEvCQ,GAAG,EAAEJ;AAFkC,CAAlC"}

package/build/user.js

@@ -29,7 +29,7 @@ exports.defaultNonLoggedUserRoles = defaultNonLoggedUserRoles;
 
 function createRemoteUser(name, pluginGroups) {
   const isGroupValid = Array.isArray(pluginGroups);
-  const groups = (isGroupValid ? pluginGroups : []).concat([...defaultLoggedUserRoles]);
+  const groups = Array.from(new Set((isGroupValid ? pluginGroups : []).concat([...defaultLoggedUserRoles])));
   return {
     name,
     groups,

package/build/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","names":["defaultLoggedUserRoles","ROLES","$ALL","$AUTH","DEPRECATED_ALL","DEPRECATED_AUTH","ALL","defaultNonLoggedUserRoles","$ANONYMOUS","DEPRECATED_ANONYMOUS","createRemoteUser","name","pluginGroups","isGroupValid","Array","isArray","groups","concat","real_groups","createAnonymousRemoteUser","undefined"],"sources":["../src/user.ts"],"sourcesContent":["import { RemoteUser } from '@verdaccio/types';\n\nimport { ROLES } from './package-access';\n\n/**\n * All logged users will have by default the group $all and $authenticate\n */\nexport const defaultLoggedUserRoles = [\n  ROLES.$ALL,\n  ROLES.$AUTH,\n  ROLES.DEPRECATED_ALL,\n  ROLES.DEPRECATED_AUTH,\n  ROLES.ALL,\n];\n/**\n *\n */\nexport const defaultNonLoggedUserRoles = [\n  ROLES.$ALL,\n  ROLES.$ANONYMOUS,\n  // groups without '$' are going to be deprecated eventually\n  ROLES.DEPRECATED_ALL,\n  ROLES.DEPRECATED_ANONYMOUS,\n];\n\n/**\n * Create a RemoteUser object\n * @return {Object} { name: xx, pluginGroups: [], real_groups: [] }\n */\nexport function createRemoteUser(name: string, pluginGroups: string[]): RemoteUser {\n  const isGroupValid: boolean = Array.isArray(pluginGroups);\n  const groups = (isGroupValid ? pluginGroups : []).concat([...defaultLoggedUserRoles]);\n\n  return {\n    name,\n    groups,\n    real_groups: pluginGroups,\n  };\n}\n\n/**\n * Builds an anonymous remote user in case none is logged in.\n * @return {Object} { name: xx, groups: [], real_groups: [] }\n */\nexport function createAnonymousRemoteUser(): RemoteUser {\n  return {\n    name: undefined,\n    groups: [...defaultNonLoggedUserRoles],\n    real_groups: [],\n  };\n}\n"],"mappings":";;;;;;;;;AAEA;;AAEA;AACA;AACA;AACO,MAAMA,sBAAsB,GAAG,CACpCC,oBAAA,CAAMC,IAD8B,EAEpCD,oBAAA,CAAME,KAF8B,EAGpCF,oBAAA,CAAMG,cAH8B,EAIpCH,oBAAA,CAAMI,eAJ8B,EAKpCJ,oBAAA,CAAMK,GAL8B,CAA/B;AAOP;AACA;AACA;;;AACO,MAAMC,yBAAyB,GAAG,CACvCN,oBAAA,CAAMC,IADiC,EAEvCD,oBAAA,CAAMO,UAFiC,EAGvC;AACAP,oBAAA,CAAMG,cAJiC,EAKvCH,oBAAA,CAAMQ,oBALiC,CAAlC;AAQP;AACA;AACA;AACA;;;;AACO,SAASC,gBAAT,CAA0BC,IAA1B,EAAwCC,YAAxC,EAA4E;EACjF,MAAMC,YAAqB,GAAGC,KAAK,CAACC,OAAN,CAAcH,YAAd,CAA9B;EACA,MAAMI,MAAM,GAAG,CAACH,YAAY,GAAGD,YAAH,GAAkB,EAA/B,EAAmCK,MAAnC,CAA0C,CAAC,GAAGjB,sBAAJ,CAA1C,CAAf;EAEA,OAAO;IACLW,IADK;IAELK,MAFK;IAGLE,WAAW,EAAEN;EAHR,CAAP;AAKD;AAED;AACA;AACA;AACA;;;AACO,SAASO,yBAAT,GAAiD;EACtD,OAAO;IACLR,IAAI,EAAES,SADD;IAELJ,MAAM,EAAE,CAAC,GAAGT,yBAAJ,CAFH;IAGLW,WAAW,EAAE;EAHR,CAAP;AAKD"}
+{"version":3,"file":"user.js","names":["defaultLoggedUserRoles","ROLES","$ALL","$AUTH","DEPRECATED_ALL","DEPRECATED_AUTH","ALL","defaultNonLoggedUserRoles","$ANONYMOUS","DEPRECATED_ANONYMOUS","createRemoteUser","name","pluginGroups","isGroupValid","Array","isArray","groups","from","Set","concat","real_groups","createAnonymousRemoteUser","undefined"],"sources":["../src/user.ts"],"sourcesContent":["import { RemoteUser } from '@verdaccio/types';\n\nimport { ROLES } from './package-access';\n\n/**\n * All logged users will have by default the group $all and $authenticate\n */\nexport const defaultLoggedUserRoles = [\n  ROLES.$ALL,\n  ROLES.$AUTH,\n  ROLES.DEPRECATED_ALL,\n  ROLES.DEPRECATED_AUTH,\n  ROLES.ALL,\n];\n/**\n *\n */\nexport const defaultNonLoggedUserRoles = [\n  ROLES.$ALL,\n  ROLES.$ANONYMOUS,\n  // groups without '$' are going to be deprecated eventually\n  ROLES.DEPRECATED_ALL,\n  ROLES.DEPRECATED_ANONYMOUS,\n];\n\n/**\n * Create a RemoteUser object\n * @return {Object} { name: xx, pluginGroups: [], real_groups: [] }\n */\nexport function createRemoteUser(name: string, pluginGroups: string[]): RemoteUser {\n  const isGroupValid: boolean = Array.isArray(pluginGroups);\n  const groups = Array.from(\n    new Set((isGroupValid ? pluginGroups : []).concat([...defaultLoggedUserRoles]))\n  );\n\n  return {\n    name,\n    groups,\n    real_groups: pluginGroups,\n  };\n}\n\n/**\n * Builds an anonymous remote user in case none is logged in.\n * @return {Object} { name: xx, groups: [], real_groups: [] }\n */\nexport function createAnonymousRemoteUser(): RemoteUser {\n  return {\n    name: undefined,\n    groups: [...defaultNonLoggedUserRoles],\n    real_groups: [],\n  };\n}\n"],"mappings":";;;;;;;;;AAEA;;AAEA;AACA;AACA;AACO,MAAMA,sBAAsB,GAAG,CACpCC,oBAAA,CAAMC,IAD8B,EAEpCD,oBAAA,CAAME,KAF8B,EAGpCF,oBAAA,CAAMG,cAH8B,EAIpCH,oBAAA,CAAMI,eAJ8B,EAKpCJ,oBAAA,CAAMK,GAL8B,CAA/B;AAOP;AACA;AACA;;;AACO,MAAMC,yBAAyB,GAAG,CACvCN,oBAAA,CAAMC,IADiC,EAEvCD,oBAAA,CAAMO,UAFiC,EAGvC;AACAP,oBAAA,CAAMG,cAJiC,EAKvCH,oBAAA,CAAMQ,oBALiC,CAAlC;AAQP;AACA;AACA;AACA;;;;AACO,SAASC,gBAAT,CAA0BC,IAA1B,EAAwCC,YAAxC,EAA4E;EACjF,MAAMC,YAAqB,GAAGC,KAAK,CAACC,OAAN,CAAcH,YAAd,CAA9B;EACA,MAAMI,MAAM,GAAGF,KAAK,CAACG,IAAN,CACb,IAAIC,GAAJ,CAAQ,CAACL,YAAY,GAAGD,YAAH,GAAkB,EAA/B,EAAmCO,MAAnC,CAA0C,CAAC,GAAGnB,sBAAJ,CAA1C,CAAR,CADa,CAAf;EAIA,OAAO;IACLW,IADK;IAELK,MAFK;IAGLI,WAAW,EAAER;EAHR,CAAP;AAKD;AAED;AACA;AACA;AACA;;;AACO,SAASS,yBAAT,GAAiD;EACtD,OAAO;IACLV,IAAI,EAAEW,SADD;IAELN,MAAM,EAAE,CAAC,GAAGT,yBAAJ,CAFH;IAGLa,WAAW,EAAE;EAHR,CAAP;AAKD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "6.0.0-6-next.49",
+  "version": "6.0.0-6-next.51",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -30,10 +30,10 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "@verdaccio/core": "6.0.0-6-next.49",
-    "@verdaccio/utils": "6.0.0-6-next.17",
+    "@verdaccio/core": "6.0.0-6-next.51",
+    "@verdaccio/utils": "6.0.0-6-next.19",
     "debug": "4.3.4",
-    "yaml": "2.1.1",
+    "yaml": "2.1.3",
     "lodash": "4.17.21",
     "minimatch": "3.1.2",
     "yup": "0.32.11"

package/src/security.ts

@@ -1,11 +1,12 @@
 import { APITokenOptions, JWTOptions, Security } from '@verdaccio/types';
 
-export const TIME_EXPIRATION_7D = '7d';
+// TODO: get this from core package
+export const TIME_EXPIRATION_1H = '1h';
 
 const defaultWebTokenOptions: JWTOptions = {
   sign: {
     // The expiration token for the website is 7 days
-    expiresIn: TIME_EXPIRATION_7D,
+    expiresIn: TIME_EXPIRATION_1H,
   },
   verify: {},
 };

package/src/user.ts

@@ -29,7 +29,9 @@ export const defaultNonLoggedUserRoles = [
  */
 export function createRemoteUser(name: string, pluginGroups: string[]): RemoteUser {
   const isGroupValid: boolean = Array.isArray(pluginGroups);
-  const groups = (isGroupValid ? pluginGroups : []).concat([...defaultLoggedUserRoles]);
+  const groups = Array.from(
+    new Set((isGroupValid ? pluginGroups : []).concat([...defaultLoggedUserRoles]))
+  );
 
   return {
     name,