@verdaccio/config 8.1.2 → 8.2.0

package/build/config.mjs

@@ -0,0 +1,153 @@
+import { getUserAgent } from "./agent.mjs";
+import { normalisePackageAccess } from "./package-access.mjs";
+import { defaultSecurity } from "./security.mjs";
+import serverSettings_default from "./serverSettings.mjs";
+import { generateRandomSecretKey } from "./token.mjs";
+import { sanityCheckUplinksProps, uplinkSanityCheck } from "./uplinks.mjs";
+import buildDebug from "debug";
+import _ from "lodash";
+import assert from "node:assert";
+import { APP_ERROR, authUtils, cryptoUtils, validationUtils } from "@verdaccio/core";
+//#region src/config.ts
+var strategicConfigProps = ["uplinks", "packages"];
+var allowedEnvConfig = [
+	"http_proxy",
+	"https_proxy",
+	"no_proxy"
+];
+var debug = buildDebug("verdaccio:config");
+var WEB_TITLE = "Verdaccio";
+var defaultUserRateLimiting = {
+	windowMs: 900 * 1e3,
+	max: 1e3
+};
+function isNodeVersionGreaterThan21() {
+	const [major, minor] = process.versions.node.split(".").map(Number);
+	return major > 21 || major === 21 && minor >= 0;
+}
+var TOKEN_VALID_LENGTH = 32;
+/**
+* Coordinates the application configuration
+*/
+var Config = class {
+	user_agent;
+	uplinks;
+	packages;
+	users;
+	auth;
+	store;
+	server_id;
+	configPath;
+	/**
+	* @deprecated use configPath or config.getConfigPath();
+	*/
+	self_path;
+	storage;
+	plugins;
+	security;
+	server;
+	configOverrideOptions;
+	secret;
+	flags;
+	userRateLimit;
+	constructor(config, configOverrideOptions = { forceMigrateToSecureLegacySignature: true }) {
+		const self = this;
+		this.storage = process.env.VERDACCIO_STORAGE_PATH || config.storage;
+		if (!config.configPath) {
+			config.configPath = config.config_path ?? config.self_path;
+			if (!config.configPath) throw new Error("configPath property is required");
+		}
+		this.configOverrideOptions = configOverrideOptions;
+		this.configPath = config.configPath;
+		this.self_path = this.configPath;
+		debug("config path: %s", this.configPath);
+		this.plugins = config.plugins;
+		this.security = _.merge(_.merge(defaultSecurity, { api: { migrateToSecureLegacySignature: this.configOverrideOptions.forceMigrateToSecureLegacySignature } }), config.security);
+		this.server = {
+			...serverSettings_default,
+			...config.server
+		};
+		this.flags = {
+			searchRemote: config.flags?.searchRemote ?? true,
+			changePassword: config.flags?.changePassword ?? false,
+			webLogin: config.flags?.webLogin ?? false,
+			createUser: config.flags?.createUser ?? false
+		};
+		this.user_agent = config.user_agent;
+		for (const configProp in config) if (self[configProp] == null) self[configProp] = config[configProp];
+		if (typeof this.user_agent === "undefined") {
+			debug("set default user agent");
+			this.user_agent = getUserAgent(false);
+		}
+		this.userRateLimit = {
+			...defaultUserRateLimiting,
+			...config?.userRateLimit
+		};
+		assert(validationUtils.isObject(config), APP_ERROR.CONFIG_NOT_VALID);
+		strategicConfigProps.forEach(function(x) {
+			if (self[x] == null) self[x] = {};
+			assert(validationUtils.isObject(self[x]), `CONFIG: bad "${x}" value (object expected)`);
+		});
+		this.uplinks = sanityCheckUplinksProps(uplinkSanityCheck(this.uplinks));
+		this.packages = normalisePackageAccess(self.packages);
+		allowedEnvConfig.forEach((envConf) => {
+			if (!(envConf in self)) self[envConf] = process.env[envConf] || process.env[envConf.toUpperCase()];
+		});
+		if (!this.server_id) this.server_id = cryptoUtils.generateRandomHexString(6);
+	}
+	getMigrateToSecureLegacySignature() {
+		return this.security.api.migrateToSecureLegacySignature;
+	}
+	getConfigPath() {
+		return this.configPath;
+	}
+	/**
+	* Check for package spec
+	* @param pkgName - package name
+	* @returns package access
+	* @deprecated use core.authUtils instead
+	*/
+	getMatchedPackagesSpec(pkgName) {
+		return authUtils.getMatchedPackagesSpec(pkgName, this.packages);
+	}
+	/**
+	* Verify if the secret complies with the required structure
+	*  - If the secret is not provided, it will generate a new one
+	*    - For any Node.js version the new secret will be 32 characters long (to allow compatibility with modern Node.js versions)
+	*  - If the secret is provided:
+	*    - If Node.js 22 or higher, the secret must be 32 characters long thus the application will fail on startup
+	*    - If Node.js 21 or lower, the secret will be used as is but will display a deprecation warning
+	*    - If the property `security.api.migrateToSecureLegacySignature` is provided and set to true, the secret will be
+	*      generated with the new signature model
+	* @secret external secret key
+	*/
+	checkSecretKey(secret) {
+		debug("checking secret key init");
+		if (typeof secret === "string" && _.isEmpty(secret) === false) {
+			debug("checking secret key length %s", secret.length);
+			if (secret.length === TOKEN_VALID_LENGTH) {
+				debug("detected valid secret key length %s", secret.length);
+				this.secret = secret;
+				return this.secret;
+			}
+			if (this.getMigrateToSecureLegacySignature() === true) {
+				this.secret = generateRandomSecretKey();
+				debug("rewriting secret key with length %s", this.secret.length);
+				return this.secret;
+			}
+			debug("secret does not comply with the required length, current length %d", secret.length);
+			throw new Error(`Invalid storage secret key length, must be 32 characters long but is ${secret.length}. 
+        The secret length in Node.js 22 or higher must be 32 characters long. Please consider generate a new one. 
+        Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db`);
+		} else {
+			debug("generating a new secret key");
+			this.secret = generateRandomSecretKey();
+			debug("generated a new secret key length %s", this.secret?.length);
+			return this.secret;
+		}
+	}
+};
+//#endregion
+export { Config, WEB_TITLE, defaultUserRateLimiting, isNodeVersionGreaterThan21 };
+
+//# sourceMappingURL=config.mjs.map

package/build/config.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport assert from 'node:assert';\n\nimport { APP_ERROR, authUtils, cryptoUtils, validationUtils } from '@verdaccio/core';\nimport type {\n  Config as AppConfig,\n  AuthConf,\n  ConfigYaml,\n  FlagsConfig,\n  PackageAccess,\n  PackageList,\n  RateLimit,\n  Security,\n  ServerSettingsConf,\n} from '@verdaccio/types';\n\nimport { getUserAgent } from './agent';\nimport { normalisePackageAccess } from './package-access';\nimport { defaultSecurity } from './security';\nimport defaultServerSettings from './serverSettings';\nimport { generateRandomSecretKey } from './token';\nimport { sanityCheckUplinksProps, uplinkSanityCheck } from './uplinks';\n\nconst strategicConfigProps = ['uplinks', 'packages'];\nconst allowedEnvConfig = ['http_proxy', 'https_proxy', 'no_proxy'];\nconst debug = buildDebug('verdaccio:config');\n\nexport const WEB_TITLE = 'Verdaccio';\n\n// we limit max 1000 request per 15 minutes on user endpoints\nexport const defaultUserRateLimiting = {\n  windowMs: 15 * 60 * 1000, // 15 minutes\n  max: 1000,\n};\n\nexport function isNodeVersionGreaterThan21() {\n  const [major, minor] = process.versions.node.split('.').map(Number);\n  return major > 21 || (major === 21 && minor >= 0);\n}\n\nconst TOKEN_VALID_LENGTH = 32;\n\n/**\n * Coordinates the application configuration\n */\nclass Config implements AppConfig {\n  public user_agent: string | undefined;\n  public uplinks: any;\n  public packages: PackageList;\n  public users: any;\n  public auth: AuthConf;\n  public store: any;\n  public server_id: string;\n  public configPath: string;\n  /**\n   * @deprecated use configPath or config.getConfigPath();\n   */\n  public self_path: string;\n  public storage: string | void;\n\n  public plugins: string | void | null;\n  public security: Security;\n  public server: ServerSettingsConf;\n  private configOverrideOptions: { forceMigrateToSecureLegacySignature: boolean };\n  // @ts-ignore\n  public secret: string;\n  public flags: FlagsConfig;\n  public userRateLimit: RateLimit;\n  public constructor(\n    config: ConfigYaml & { config_path: string },\n    // forceEnhancedLegacySignature is a property that\n    // allows switch a new legacy aes signature token signature\n    // for older versions do not want to have this new signature model\n    // this property must be false\n    configOverrideOptions = { forceMigrateToSecureLegacySignature: true }\n  ) {\n    const self = this;\n    this.storage = process.env.VERDACCIO_STORAGE_PATH || config.storage;\n    if (!config.configPath) {\n      // backport self_path for previous to version 6\n      // @ts-expect-error\n      config.configPath = config.config_path ?? config.self_path;\n      if (!config.configPath) {\n        throw new Error('configPath property is required');\n      }\n    }\n    this.configOverrideOptions = configOverrideOptions;\n    this.configPath = config.configPath;\n    this.self_path = this.configPath;\n    debug('config path: %s', this.configPath);\n    this.plugins = config.plugins;\n    this.security = _.merge(\n      // override the default security configuration via constructor\n      _.merge(defaultSecurity, {\n        api: {\n          migrateToSecureLegacySignature:\n            this.configOverrideOptions.forceMigrateToSecureLegacySignature,\n        },\n      }),\n      config.security\n    );\n    this.server = { ...defaultServerSettings, ...config.server };\n    this.flags = {\n      searchRemote: config.flags?.searchRemote ?? true,\n      changePassword: config.flags?.changePassword ?? false,\n      webLogin: config.flags?.webLogin ?? false,\n      createUser: config.flags?.createUser ?? false,\n    };\n    this.user_agent = config.user_agent;\n\n    for (const configProp in config) {\n      if (self[configProp] == null) {\n        self[configProp] = config[configProp];\n      }\n    }\n\n    if (typeof this.user_agent === 'undefined') {\n      // by default user agent is hidden\n      debug('set default user agent');\n      this.user_agent = getUserAgent(false);\n    }\n\n    this.userRateLimit = { ...defaultUserRateLimiting, ...config?.userRateLimit };\n\n    // some weird shell scripts are valid yaml files parsed as string\n    assert(validationUtils.isObject(config), APP_ERROR.CONFIG_NOT_VALID);\n\n    // sanity check for strategic config properties\n    strategicConfigProps.forEach(function (x): void {\n      if (self[x] == null) {\n        self[x] = {};\n      }\n\n      assert(validationUtils.isObject(self[x]), `CONFIG: bad \"${x}\" value (object expected)`);\n    });\n\n    this.uplinks = sanityCheckUplinksProps(uplinkSanityCheck(this.uplinks));\n    this.packages = normalisePackageAccess(self.packages);\n\n    // loading these from ENV if aren't in config\n    allowedEnvConfig.forEach((envConf): void => {\n      if (!(envConf in self)) {\n        self[envConf] = process.env[envConf] || process.env[envConf.toUpperCase()];\n      }\n    });\n\n    // unique identifier of self server (or a cluster), used to avoid loops\n    // @ts-ignore\n    if (!this.server_id) {\n      this.server_id = cryptoUtils.generateRandomHexString(6);\n    }\n  }\n\n  public getMigrateToSecureLegacySignature() {\n    return this.security.api.migrateToSecureLegacySignature;\n  }\n\n  public getConfigPath() {\n    return this.configPath;\n  }\n\n  /**\n   * Check for package spec\n   * @param pkgName - package name\n   * @returns package access\n   * @deprecated use core.authUtils instead\n   */\n  public getMatchedPackagesSpec(pkgName: string): PackageAccess | void {\n    // TODO: remove this method and replace by library utils\n    return authUtils.getMatchedPackagesSpec(pkgName, this.packages);\n  }\n\n  /**\n   * Verify if the secret complies with the required structure\n   *  - If the secret is not provided, it will generate a new one\n   *    - For any Node.js version the new secret will be 32 characters long (to allow compatibility with modern Node.js versions)\n   *  - If the secret is provided:\n   *    - If Node.js 22 or higher, the secret must be 32 characters long thus the application will fail on startup\n   *    - If Node.js 21 or lower, the secret will be used as is but will display a deprecation warning\n   *    - If the property `security.api.migrateToSecureLegacySignature` is provided and set to true, the secret will be\n   *      generated with the new signature model\n   * @secret external secret key\n   */\n  public checkSecretKey(secret?: string): string {\n    debug('checking secret key init');\n    if (typeof secret === 'string' && _.isEmpty(secret) === false) {\n      debug('checking secret key length %s', secret.length);\n      if (secret.length === TOKEN_VALID_LENGTH) {\n        debug('detected valid secret key length %s', secret.length);\n        this.secret = secret;\n        return this.secret;\n      }\n      // Node.js 22+ removed the legacy AES APIs, so token signing only works\n      // with a secret of exactly 32 characters: migrate legacy (64 characters)\n      // or manually edited secrets, otherwise fail fast at startup instead of\n      // failing later on the first signed token\n      if (this.getMigrateToSecureLegacySignature() === true) {\n        this.secret = generateRandomSecretKey();\n        debug('rewriting secret key with length %s', this.secret.length);\n        return this.secret;\n      }\n      debug('secret does not comply with the required length, current length %d', secret.length);\n      throw new Error(\n        `Invalid storage secret key length, must be 32 characters long but is ${secret.length}. \n        The secret length in Node.js 22 or higher must be 32 characters long. Please consider generate a new one. \n        Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db`\n      );\n    } else {\n      // generate a new a secret key\n      // FUTURE: this might be an external secret key, perhaps within config file?\n      debug('generating a new secret key');\n      this.secret = generateRandomSecretKey();\n      debug('generated a new secret key length %s', this.secret?.length);\n\n      return this.secret;\n    }\n  }\n}\n\nexport { Config };\n"],"mappings":";;;;;;;;;;;AAwBA,IAAM,uBAAuB,CAAC,WAAW,UAAU;AACnD,IAAM,mBAAmB;CAAC;CAAc;CAAe;AAAU;AACjE,IAAM,QAAQ,WAAW,kBAAkB;AAE3C,IAAa,YAAY;AAGzB,IAAa,0BAA0B;CACrC,UAAU,MAAU;CACpB,KAAK;AACP;AAEA,SAAgB,6BAA6B;CAC3C,MAAM,CAAC,OAAO,SAAS,QAAQ,SAAS,KAAK,MAAM,GAAG,EAAE,IAAI,MAAM;CAClE,OAAO,QAAQ,MAAO,UAAU,MAAM,SAAS;AACjD;AAEA,IAAM,qBAAqB;;;;AAK3B,IAAM,SAAN,MAAkC;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;CAIA;CACA;CAEA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA,YACE,QAKA,wBAAwB,EAAE,qCAAqC,KAAK,GACpE;EACA,MAAM,OAAO;EACb,KAAK,UAAU,QAAQ,IAAI,0BAA0B,OAAO;EAC5D,IAAI,CAAC,OAAO,YAAY;GAGtB,OAAO,aAAa,OAAO,eAAe,OAAO;GACjD,IAAI,CAAC,OAAO,YACV,MAAM,IAAI,MAAM,iCAAiC;EAErD;EACA,KAAK,wBAAwB;EAC7B,KAAK,aAAa,OAAO;EACzB,KAAK,YAAY,KAAK;EACtB,MAAM,mBAAmB,KAAK,UAAU;EACxC,KAAK,UAAU,OAAO;EACtB,KAAK,WAAW,EAAE,MAEhB,EAAE,MAAM,iBAAiB,EACvB,KAAK,EACH,gCACE,KAAK,sBAAsB,oCAC/B,EACF,CAAC,GACD,OAAO,QACT;EACA,KAAK,SAAS;GAAE,GAAG;GAAuB,GAAG,OAAO;EAAO;EAC3D,KAAK,QAAQ;GACX,cAAc,OAAO,OAAO,gBAAgB;GAC5C,gBAAgB,OAAO,OAAO,kBAAkB;GAChD,UAAU,OAAO,OAAO,YAAY;GACpC,YAAY,OAAO,OAAO,cAAc;EAC1C;EACA,KAAK,aAAa,OAAO;EAEzB,KAAK,MAAM,cAAc,QACvB,IAAI,KAAK,eAAe,MACtB,KAAK,cAAc,OAAO;EAI9B,IAAI,OAAO,KAAK,eAAe,aAAa;GAE1C,MAAM,wBAAwB;GAC9B,KAAK,aAAa,aAAa,KAAK;EACtC;EAEA,KAAK,gBAAgB;GAAE,GAAG;GAAyB,GAAG,QAAQ;EAAc;EAG5E,OAAO,gBAAgB,SAAS,MAAM,GAAG,UAAU,gBAAgB;EAGnE,qBAAqB,QAAQ,SAAU,GAAS;GAC9C,IAAI,KAAK,MAAM,MACb,KAAK,KAAK,CAAC;GAGb,OAAO,gBAAgB,SAAS,KAAK,EAAE,GAAG,gBAAgB,EAAE,0BAA0B;EACxF,CAAC;EAED,KAAK,UAAU,wBAAwB,kBAAkB,KAAK,OAAO,CAAC;EACtE,KAAK,WAAW,uBAAuB,KAAK,QAAQ;EAGpD,iBAAiB,SAAS,YAAkB;GAC1C,IAAI,EAAE,WAAW,OACf,KAAK,WAAW,QAAQ,IAAI,YAAY,QAAQ,IAAI,QAAQ,YAAY;EAE5E,CAAC;EAID,IAAI,CAAC,KAAK,WACR,KAAK,YAAY,YAAY,wBAAwB,CAAC;CAE1D;CAEA,oCAA2C;EACzC,OAAO,KAAK,SAAS,IAAI;CAC3B;CAEA,gBAAuB;EACrB,OAAO,KAAK;CACd;;;;;;;CAQA,uBAA8B,SAAuC;EAEnE,OAAO,UAAU,uBAAuB,SAAS,KAAK,QAAQ;CAChE;;;;;;;;;;;;CAaA,eAAsB,QAAyB;EAC7C,MAAM,0BAA0B;EAChC,IAAI,OAAO,WAAW,YAAY,EAAE,QAAQ,MAAM,MAAM,OAAO;GAC7D,MAAM,iCAAiC,OAAO,MAAM;GACpD,IAAI,OAAO,WAAW,oBAAoB;IACxC,MAAM,uCAAuC,OAAO,MAAM;IAC1D,KAAK,SAAS;IACd,OAAO,KAAK;GACd;GAKA,IAAI,KAAK,kCAAkC,MAAM,MAAM;IACrD,KAAK,SAAS,wBAAwB;IACtC,MAAM,uCAAuC,KAAK,OAAO,MAAM;IAC/D,OAAO,KAAK;GACd;GACA,MAAM,sEAAsE,OAAO,MAAM;GACzF,MAAM,IAAI,MACR,wEAAwE,OAAO,OAAO;;8EAGxF;EACF,OAAO;GAGL,MAAM,6BAA6B;GACnC,KAAK,SAAS,wBAAwB;GACtC,MAAM,wCAAwC,KAAK,QAAQ,MAAM;GAEjE,OAAO,KAAK;EACd;CACF;AACF"}

package/build/index.js

@@ -1,167 +1,52 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-var _exportNames = {
-  fromJStoYAML: true,
-  parseConfigFile: true,
-  getConfigParsed: true,
-  ConfigBuilder: true,
-  getDefaultConfig: true
-};
-Object.defineProperty(exports, "ConfigBuilder", {
-  enumerable: true,
-  get: function () {
-    return _builder.default;
-  }
-});
-Object.defineProperty(exports, "fromJStoYAML", {
-  enumerable: true,
-  get: function () {
-    return _parse.fromJStoYAML;
-  }
-});
-Object.defineProperty(exports, "getConfigParsed", {
-  enumerable: true,
-  get: function () {
-    return _parse.getConfigParsed;
-  }
-});
-Object.defineProperty(exports, "getDefaultConfig", {
-  enumerable: true,
-  get: function () {
-    return _conf.getDefaultConfig;
-  }
-});
-Object.defineProperty(exports, "parseConfigFile", {
-  enumerable: true,
-  get: function () {
-    return _parse.parseConfigFile;
-  }
-});
-var _config = require("./config");
-Object.keys(_config).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _config[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _config[key];
-    }
-  });
-});
-var _configPath = require("./config-path");
-Object.keys(_configPath).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _configPath[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _configPath[key];
-    }
-  });
-});
-var _token = require("./token");
-Object.keys(_token).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _token[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _token[key];
-    }
-  });
-});
-var _configUtils = require("./config-utils");
-Object.keys(_configUtils).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _configUtils[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _configUtils[key];
-    }
-  });
-});
-var _packageAccess = require("./package-access");
-Object.keys(_packageAccess).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _packageAccess[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _packageAccess[key];
-    }
-  });
-});
-var _parse = require("./parse");
-var _uplinks = require("./uplinks");
-Object.keys(_uplinks).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _uplinks[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _uplinks[key];
-    }
-  });
-});
-var _security = require("./security");
-Object.keys(_security).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _security[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _security[key];
-    }
-  });
-});
-var _agent = require("./agent");
-Object.keys(_agent).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _agent[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _agent[key];
-    }
-  });
-});
-var _user = require("./user");
-Object.keys(_user).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _user[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _user[key];
-    }
-  });
-});
-var _builder = _interopRequireDefault(require("./builder"));
-var _conf = require("./conf");
-var _address = require("./address");
-Object.keys(_address).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-  if (key in exports && exports[key] === _address[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _address[key];
-    }
-  });
-});
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-//# sourceMappingURL=index.js.map
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+const require_agent = require("./agent.js");
+const require_package_access = require("./package-access.js");
+const require_security = require("./security.js");
+const require_token = require("./token.js");
+const require_uplinks = require("./uplinks.js");
+const require_config = require("./config.js");
+const require_config_utils = require("./config-utils.js");
+const require_config_path = require("./config-path.js");
+const require_parse = require("./parse.js");
+const require_user = require("./user.js");
+const require_builder = require("./builder.js");
+const require_index = require("./conf/index.js");
+const require_address = require("./address.js");
+exports.Config = require_config.Config;
+exports.ConfigBuilder = require_builder.default;
+exports.DEFAULT_REGISTRY = require_uplinks.DEFAULT_REGISTRY;
+exports.DEFAULT_UPLINK = require_uplinks.DEFAULT_UPLINK;
+exports.PACKAGE_ACCESS = require_package_access.PACKAGE_ACCESS;
+exports.ROLES = require_package_access.ROLES;
+exports.TIME_EXPIRATION_1H = require_security.TIME_EXPIRATION_1H;
+exports.TOKEN_VALID_LENGTH = require_token.TOKEN_VALID_LENGTH;
+exports.WEB_TITLE = require_config.WEB_TITLE;
+exports.createAnonymousRemoteUser = require_user.createAnonymousRemoteUser;
+exports.createRemoteUser = require_user.createRemoteUser;
+exports.defaultLoggedUserRoles = require_user.defaultLoggedUserRoles;
+exports.defaultNonLoggedUserRoles = require_user.defaultNonLoggedUserRoles;
+exports.defaultSecurity = require_security.defaultSecurity;
+exports.defaultUserRateLimiting = require_config.defaultUserRateLimiting;
+exports.fileExists = require_config_utils.fileExists;
+exports.findConfigFile = require_config_path.findConfigFile;
+exports.folderExists = require_config_utils.folderExists;
+exports.fromJStoYAML = require_parse.fromJStoYAML;
+exports.generateRandomSecretKey = require_token.generateRandomSecretKey;
+exports.getConfigParsed = require_parse.getConfigParsed;
+exports.getDefaultConfig = require_index.getDefaultConfig;
+exports.getListenAddress = require_address.getListenAddress;
+exports.getProxiesForPackage = require_uplinks.getProxiesForPackage;
+exports.getUserAgent = require_agent.getUserAgent;
+exports.hasProxyTo = require_uplinks.hasProxyTo;
+exports.isNodeVersionGreaterThan21 = require_config.isNodeVersionGreaterThan21;
+exports.normalisePackageAccess = require_package_access.normalisePackageAccess;
+exports.normalizeUserList = require_package_access.normalizeUserList;
+exports.parseAddress = require_address.parseAddress;
+exports.parseConfigFile = require_parse.parseConfigFile;
+exports.readDefaultConfig = require_config_path.readDefaultConfig;
+exports.sanityCheckNames = require_uplinks.sanityCheckNames;
+exports.sanityCheckUplinksProps = require_uplinks.sanityCheckUplinksProps;
+exports.uplinkSanityCheck = require_uplinks.uplinkSanityCheck;

package/build/index.mjs

@@ -0,0 +1,14 @@
+import { getUserAgent } from "./agent.mjs";
+import { PACKAGE_ACCESS, ROLES, normalisePackageAccess, normalizeUserList } from "./package-access.mjs";
+import { TIME_EXPIRATION_1H, defaultSecurity } from "./security.mjs";
+import { TOKEN_VALID_LENGTH, generateRandomSecretKey } from "./token.mjs";
+import { DEFAULT_REGISTRY, DEFAULT_UPLINK, getProxiesForPackage, hasProxyTo, sanityCheckNames, sanityCheckUplinksProps, uplinkSanityCheck } from "./uplinks.mjs";
+import { Config, WEB_TITLE, defaultUserRateLimiting, isNodeVersionGreaterThan21 } from "./config.mjs";
+import { fileExists, folderExists } from "./config-utils.mjs";
+import { findConfigFile, readDefaultConfig } from "./config-path.mjs";
+import { fromJStoYAML, getConfigParsed, parseConfigFile } from "./parse.mjs";
+import { createAnonymousRemoteUser, createRemoteUser, defaultLoggedUserRoles, defaultNonLoggedUserRoles } from "./user.mjs";
+import ConfigBuilder from "./builder.mjs";
+import { getDefaultConfig } from "./conf/index.mjs";
+import { getListenAddress, parseAddress } from "./address.mjs";
+export { Config, ConfigBuilder, DEFAULT_REGISTRY, DEFAULT_UPLINK, PACKAGE_ACCESS, ROLES, TIME_EXPIRATION_1H, TOKEN_VALID_LENGTH, WEB_TITLE, createAnonymousRemoteUser, createRemoteUser, defaultLoggedUserRoles, defaultNonLoggedUserRoles, defaultSecurity, defaultUserRateLimiting, fileExists, findConfigFile, folderExists, fromJStoYAML, generateRandomSecretKey, getConfigParsed, getDefaultConfig, getListenAddress, getProxiesForPackage, getUserAgent, hasProxyTo, isNodeVersionGreaterThan21, normalisePackageAccess, normalizeUserList, parseAddress, parseConfigFile, readDefaultConfig, sanityCheckNames, sanityCheckUplinksProps, uplinkSanityCheck };

package/build/package-access.js

@@ -1,75 +1,59 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.ROLES = exports.PACKAGE_ACCESS = void 0;
-exports.normalisePackageAccess = normalisePackageAccess;
-exports.normalizeUserList = normalizeUserList;
-var _debug = _interopRequireDefault(require("debug"));
-var _lodash = _interopRequireDefault(require("lodash"));
-var _nodeAssert = _interopRequireDefault(require("node:assert"));
-var _core = require("@verdaccio/core");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = (0, _debug.default)('verdaccio:config:utils');
-// @deprecated use @verdaccio/core:authUtils
-const ROLES = exports.ROLES = {
-  $ALL: '$all',
-  ALL: 'all',
-  $AUTH: '$authenticated',
-  $ANONYMOUS: '$anonymous',
-  DEPRECATED_ALL: '@all',
-  DEPRECATED_AUTH: '@authenticated',
-  DEPRECATED_ANONYMOUS: '@anonymous'
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let lodash = require("lodash");
+lodash = require_runtime.__toESM(lodash);
+let node_assert = require("node:assert");
+node_assert = require_runtime.__toESM(node_assert);
+let _verdaccio_core = require("@verdaccio/core");
+//#region src/package-access.ts
+var debug$1 = (0, debug.default)("verdaccio:config:utils");
+var ROLES = {
+	$ALL: "$all",
+	ALL: "all",
+	$AUTH: "$authenticated",
+	$ANONYMOUS: "$anonymous",
+	DEPRECATED_ALL: "@all",
+	DEPRECATED_AUTH: "@authenticated",
+	DEPRECATED_ANONYMOUS: "@anonymous"
 };
-
-// @deprecated use @verdaccio/core:authUtils
-const PACKAGE_ACCESS = exports.PACKAGE_ACCESS = {
-  SCOPE: '@*/*',
-  ALL: '**'
+var PACKAGE_ACCESS = {
+	SCOPE: "@*/*",
+	ALL: "**"
 };
 function normalizeUserList(groupsList) {
-  const result = [];
-  if (_lodash.default.isNil(groupsList) || _lodash.default.isEmpty(groupsList)) {
-    return result;
-  }
-
-  // if it's a string, split it to array
-  if (_lodash.default.isString(groupsList)) {
-    const groupsArray = groupsList.split(/\s+/);
-    result.push(groupsArray);
-  } else if (Array.isArray(groupsList)) {
-    result.push(groupsList);
-  } else {
-    throw _core.errorUtils.getInternalError('CONFIG: bad package acl (array or string expected): ' + JSON.stringify(groupsList));
-  }
-  return _lodash.default.flatten(result);
+	const result = [];
+	if (lodash.default.isNil(groupsList) || lodash.default.isEmpty(groupsList)) return result;
+	if (lodash.default.isString(groupsList)) {
+		const groupsArray = groupsList.split(/\s+/);
+		result.push(groupsArray);
+	} else if (Array.isArray(groupsList)) result.push(groupsList);
+	else throw _verdaccio_core.errorUtils.getInternalError("CONFIG: bad package acl (array or string expected): " + JSON.stringify(groupsList));
+	return lodash.default.flatten(result);
 }
 function normalisePackageAccess(packages) {
-  const normalizedPkgs = {
-    ...packages
-  };
-  if (_lodash.default.isNil(normalizedPkgs['**'])) {
-    normalizedPkgs['**'] = {
-      access: [],
-      publish: [],
-      unpublish: [],
-      proxy: []
-    };
-  }
-  for (const pkg in packages) {
-    if (Object.prototype.hasOwnProperty.call(packages, pkg)) {
-      const packageAccess = packages[pkg];
-      debug('package access %s for %s ', packageAccess, pkg);
-      const isInvalid = _lodash.default.isObject(packageAccess) && _lodash.default.isArray(packageAccess) === false;
-      (0, _nodeAssert.default)(isInvalid, `CONFIG: bad "'${pkg}'" package description (object expected)`);
-      normalizedPkgs[pkg].access = normalizeUserList(packageAccess.access);
-      normalizedPkgs[pkg].publish = normalizeUserList(packageAccess.publish);
-      normalizedPkgs[pkg].proxy = normalizeUserList(packageAccess.proxy);
-      // if unpublish is not defined, we set to false to fallback in publish access
-      normalizedPkgs[pkg].unpublish = _lodash.default.isUndefined(packageAccess.unpublish) ? false : normalizeUserList(packageAccess.unpublish);
-    }
-  }
-  return normalizedPkgs;
+	const normalizedPkgs = { ...packages };
+	if (lodash.default.isNil(normalizedPkgs["**"])) normalizedPkgs["**"] = {
+		access: [],
+		publish: [],
+		unpublish: [],
+		proxy: []
+	};
+	for (const pkg in packages) if (Object.prototype.hasOwnProperty.call(packages, pkg)) {
+		const packageAccess = packages[pkg];
+		debug$1("package access %s for %s ", packageAccess, pkg);
+		(0, node_assert.default)(lodash.default.isObject(packageAccess) && lodash.default.isArray(packageAccess) === false, `CONFIG: bad "'${pkg}'" package description (object expected)`);
+		normalizedPkgs[pkg].access = normalizeUserList(packageAccess.access);
+		normalizedPkgs[pkg].publish = normalizeUserList(packageAccess.publish);
+		normalizedPkgs[pkg].proxy = normalizeUserList(packageAccess.proxy);
+		normalizedPkgs[pkg].unpublish = lodash.default.isUndefined(packageAccess.unpublish) ? false : normalizeUserList(packageAccess.unpublish);
+	}
+	return normalizedPkgs;
 }
+//#endregion
+exports.PACKAGE_ACCESS = PACKAGE_ACCESS;
+exports.ROLES = ROLES;
+exports.normalisePackageAccess = normalisePackageAccess;
+exports.normalizeUserList = normalizeUserList;
+
 //# sourceMappingURL=package-access.js.map

package/build/package-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-access.js","names":["_debug","_interopRequireDefault","require","_lodash","_nodeAssert","_core","e","__esModule","default","debug","buildDebug","ROLES","exports","$ALL","ALL","$AUTH","$ANONYMOUS","DEPRECATED_ALL","DEPRECATED_AUTH","DEPRECATED_ANONYMOUS","PACKAGE_ACCESS","SCOPE","normalizeUserList","groupsList","result","_","isNil","isEmpty","isString","groupsArray","split","push","Array","isArray","errorUtils","getInternalError","JSON","stringify","flatten","normalisePackageAccess","packages","normalizedPkgs","access","publish","unpublish","proxy","pkg","Object","prototype","hasOwnProperty","call","packageAccess","isInvalid","isObject","assert","isUndefined"],"sources":["../src/package-access.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport assert from 'node:assert';\n\nimport { errorUtils } from '@verdaccio/core';\nimport type { PackageAccess } from '@verdaccio/types';\n\nconst debug = buildDebug('verdaccio:config:utils');\n\nexport interface LegacyPackageList {\n  [key: string]: PackageAccess;\n}\n\n// @deprecated use @verdaccio/core:authUtils\nexport const ROLES = {\n  $ALL: '$all',\n  ALL: 'all',\n  $AUTH: '$authenticated',\n  $ANONYMOUS: '$anonymous',\n  DEPRECATED_ALL: '@all',\n  DEPRECATED_AUTH: '@authenticated',\n  DEPRECATED_ANONYMOUS: '@anonymous',\n};\n\n// @deprecated use @verdaccio/core:authUtils\nexport const PACKAGE_ACCESS = {\n  SCOPE: '@*/*',\n  ALL: '**',\n};\n\nexport function normalizeUserList(groupsList: any): any {\n  const result: any[] = [];\n  if (_.isNil(groupsList) || _.isEmpty(groupsList)) {\n    return result;\n  }\n\n  // if it's a string, split it to array\n  if (_.isString(groupsList)) {\n    const groupsArray = groupsList.split(/\\s+/);\n\n    result.push(groupsArray);\n  } else if (Array.isArray(groupsList)) {\n    result.push(groupsList);\n  } else {\n    throw errorUtils.getInternalError(\n      'CONFIG: bad package acl (array or string expected): ' + JSON.stringify(groupsList)\n    );\n  }\n\n  return _.flatten(result);\n}\n\nexport function normalisePackageAccess(packages: LegacyPackageList): LegacyPackageList {\n  const normalizedPkgs: LegacyPackageList = { ...packages };\n  if (_.isNil(normalizedPkgs['**'])) {\n    normalizedPkgs['**'] = {\n      access: [],\n      publish: [],\n      unpublish: [],\n      proxy: [],\n    };\n  }\n\n  for (const pkg in packages) {\n    if (Object.prototype.hasOwnProperty.call(packages, pkg)) {\n      const packageAccess = packages[pkg];\n      debug('package access %s for %s ', packageAccess, pkg);\n      const isInvalid = _.isObject(packageAccess) && _.isArray(packageAccess) === false;\n      assert(isInvalid, `CONFIG: bad \"'${pkg}'\" package description (object expected)`);\n\n      normalizedPkgs[pkg].access = normalizeUserList(packageAccess.access);\n      normalizedPkgs[pkg].publish = normalizeUserList(packageAccess.publish);\n      normalizedPkgs[pkg].proxy = normalizeUserList(packageAccess.proxy);\n      // if unpublish is not defined, we set to false to fallback in publish access\n      normalizedPkgs[pkg].unpublish = _.isUndefined(packageAccess.unpublish)\n        ? false\n        : normalizeUserList(packageAccess.unpublish);\n    }\n  }\n\n  return normalizedPkgs;\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,WAAA,GAAAH,sBAAA,CAAAC,OAAA;AAEA,IAAAG,KAAA,GAAAH,OAAA;AAA6C,SAAAD,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAG7C,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,wBAAwB,CAAC;AAMlD;AACO,MAAMC,KAAK,GAAAC,OAAA,CAAAD,KAAA,GAAG;EACnBE,IAAI,EAAE,MAAM;EACZC,GAAG,EAAE,KAAK;EACVC,KAAK,EAAE,gBAAgB;EACvBC,UAAU,EAAE,YAAY;EACxBC,cAAc,EAAE,MAAM;EACtBC,eAAe,EAAE,gBAAgB;EACjCC,oBAAoB,EAAE;AACxB,CAAC;;AAED;AACO,MAAMC,cAAc,GAAAR,OAAA,CAAAQ,cAAA,GAAG;EAC5BC,KAAK,EAAE,MAAM;EACbP,GAAG,EAAE;AACP,CAAC;AAEM,SAASQ,iBAAiBA,CAACC,UAAe,EAAO;EACtD,MAAMC,MAAa,GAAG,EAAE;EACxB,IAAIC,eAAC,CAACC,KAAK,CAACH,UAAU,CAAC,IAAIE,eAAC,CAACE,OAAO,CAACJ,UAAU,CAAC,EAAE;IAChD,OAAOC,MAAM;EACf;;EAEA;EACA,IAAIC,eAAC,CAACG,QAAQ,CAACL,UAAU,CAAC,EAAE;IAC1B,MAAMM,WAAW,GAAGN,UAAU,CAACO,KAAK,CAAC,KAAK,CAAC;IAE3CN,MAAM,CAACO,IAAI,CAACF,WAAW,CAAC;EAC1B,CAAC,MAAM,IAAIG,KAAK,CAACC,OAAO,CAACV,UAAU,CAAC,EAAE;IACpCC,MAAM,CAACO,IAAI,CAACR,UAAU,CAAC;EACzB,CAAC,MAAM;IACL,MAAMW,gBAAU,CAACC,gBAAgB,CAC/B,sDAAsD,GAAGC,IAAI,CAACC,SAAS,CAACd,UAAU,CACpF,CAAC;EACH;EAEA,OAAOE,eAAC,CAACa,OAAO,CAACd,MAAM,CAAC;AAC1B;AAEO,SAASe,sBAAsBA,CAACC,QAA2B,EAAqB;EACrF,MAAMC,cAAiC,GAAG;IAAE,GAAGD;EAAS,CAAC;EACzD,IAAIf,eAAC,CAACC,KAAK,CAACe,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE;IACjCA,cAAc,CAAC,IAAI,CAAC,GAAG;MACrBC,MAAM,EAAE,EAAE;MACVC,OAAO,EAAE,EAAE;MACXC,SAAS,EAAE,EAAE;MACbC,KAAK,EAAE;IACT,CAAC;EACH;EAEA,KAAK,MAAMC,GAAG,IAAIN,QAAQ,EAAE;IAC1B,IAAIO,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACV,QAAQ,EAAEM,GAAG,CAAC,EAAE;MACvD,MAAMK,aAAa,GAAGX,QAAQ,CAACM,GAAG,CAAC;MACnCrC,KAAK,CAAC,2BAA2B,EAAE0C,aAAa,EAAEL,GAAG,CAAC;MACtD,MAAMM,SAAS,GAAG3B,eAAC,CAAC4B,QAAQ,CAACF,aAAa,CAAC,IAAI1B,eAAC,CAACQ,OAAO,CAACkB,aAAa,CAAC,KAAK,KAAK;MACjF,IAAAG,mBAAM,EAACF,SAAS,EAAE,iBAAiBN,GAAG,0CAA0C,CAAC;MAEjFL,cAAc,CAACK,GAAG,CAAC,CAACJ,MAAM,GAAGpB,iBAAiB,CAAC6B,aAAa,CAACT,MAAM,CAAC;MACpED,cAAc,CAACK,GAAG,CAAC,CAACH,OAAO,GAAGrB,iBAAiB,CAAC6B,aAAa,CAACR,OAAO,CAAC;MACtEF,cAAc,CAACK,GAAG,CAAC,CAACD,KAAK,GAAGvB,iBAAiB,CAAC6B,aAAa,CAACN,KAAK,CAAC;MAClE;MACAJ,cAAc,CAACK,GAAG,CAAC,CAACF,SAAS,GAAGnB,eAAC,CAAC8B,WAAW,CAACJ,aAAa,CAACP,SAAS,CAAC,GAClE,KAAK,GACLtB,iBAAiB,CAAC6B,aAAa,CAACP,SAAS,CAAC;IAChD;EACF;EAEA,OAAOH,cAAc;AACvB","ignoreList":[]}
+{"version":3,"file":"package-access.js","names":[],"sources":["../src/package-access.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport assert from 'node:assert';\n\nimport { errorUtils } from '@verdaccio/core';\nimport type { PackageAccess } from '@verdaccio/types';\n\nconst debug = buildDebug('verdaccio:config:utils');\n\nexport interface LegacyPackageList {\n  [key: string]: PackageAccess;\n}\n\n// @deprecated use @verdaccio/core:authUtils\nexport const ROLES = {\n  $ALL: '$all',\n  ALL: 'all',\n  $AUTH: '$authenticated',\n  $ANONYMOUS: '$anonymous',\n  DEPRECATED_ALL: '@all',\n  DEPRECATED_AUTH: '@authenticated',\n  DEPRECATED_ANONYMOUS: '@anonymous',\n};\n\n// @deprecated use @verdaccio/core:authUtils\nexport const PACKAGE_ACCESS = {\n  SCOPE: '@*/*',\n  ALL: '**',\n};\n\nexport function normalizeUserList(groupsList: any): any {\n  const result: any[] = [];\n  if (_.isNil(groupsList) || _.isEmpty(groupsList)) {\n    return result;\n  }\n\n  // if it's a string, split it to array\n  if (_.isString(groupsList)) {\n    const groupsArray = groupsList.split(/\\s+/);\n\n    result.push(groupsArray);\n  } else if (Array.isArray(groupsList)) {\n    result.push(groupsList);\n  } else {\n    throw errorUtils.getInternalError(\n      'CONFIG: bad package acl (array or string expected): ' + JSON.stringify(groupsList)\n    );\n  }\n\n  return _.flatten(result);\n}\n\nexport function normalisePackageAccess(packages: LegacyPackageList): LegacyPackageList {\n  const normalizedPkgs: LegacyPackageList = { ...packages };\n  if (_.isNil(normalizedPkgs['**'])) {\n    normalizedPkgs['**'] = {\n      access: [],\n      publish: [],\n      unpublish: [],\n      proxy: [],\n    };\n  }\n\n  for (const pkg in packages) {\n    if (Object.prototype.hasOwnProperty.call(packages, pkg)) {\n      const packageAccess = packages[pkg];\n      debug('package access %s for %s ', packageAccess, pkg);\n      const isInvalid = _.isObject(packageAccess) && _.isArray(packageAccess) === false;\n      assert(isInvalid, `CONFIG: bad \"'${pkg}'\" package description (object expected)`);\n\n      normalizedPkgs[pkg].access = normalizeUserList(packageAccess.access);\n      normalizedPkgs[pkg].publish = normalizeUserList(packageAccess.publish);\n      normalizedPkgs[pkg].proxy = normalizeUserList(packageAccess.proxy);\n      // if unpublish is not defined, we set to false to fallback in publish access\n      normalizedPkgs[pkg].unpublish = _.isUndefined(packageAccess.unpublish)\n        ? false\n        : normalizeUserList(packageAccess.unpublish);\n    }\n  }\n\n  return normalizedPkgs;\n}\n"],"mappings":";;;;;;;;;AAOA,IAAM,WAAA,GAAA,MAAA,SAAmB,wBAAwB;AAOjD,IAAa,QAAQ;CACnB,MAAM;CACN,KAAK;CACL,OAAO;CACP,YAAY;CACZ,gBAAgB;CAChB,iBAAiB;CACjB,sBAAsB;AACxB;AAGA,IAAa,iBAAiB;CAC5B,OAAO;CACP,KAAK;AACP;AAEA,SAAgB,kBAAkB,YAAsB;CACtD,MAAM,SAAgB,CAAC;CACvB,IAAI,OAAA,QAAE,MAAM,UAAU,KAAK,OAAA,QAAE,QAAQ,UAAU,GAC7C,OAAO;CAIT,IAAI,OAAA,QAAE,SAAS,UAAU,GAAG;EAC1B,MAAM,cAAc,WAAW,MAAM,KAAK;EAE1C,OAAO,KAAK,WAAW;CACzB,OAAO,IAAI,MAAM,QAAQ,UAAU,GACjC,OAAO,KAAK,UAAU;MAEtB,MAAM,gBAAA,WAAW,iBACf,yDAAyD,KAAK,UAAU,UAAU,CACpF;CAGF,OAAO,OAAA,QAAE,QAAQ,MAAM;AACzB;AAEA,SAAgB,uBAAuB,UAAgD;CACrF,MAAM,iBAAoC,EAAE,GAAG,SAAS;CACxD,IAAI,OAAA,QAAE,MAAM,eAAe,KAAK,GAC9B,eAAe,QAAQ;EACrB,QAAQ,CAAC;EACT,SAAS,CAAC;EACV,WAAW,CAAC;EACZ,OAAO,CAAC;CACV;CAGF,KAAK,MAAM,OAAO,UAChB,IAAI,OAAO,UAAU,eAAe,KAAK,UAAU,GAAG,GAAG;EACvD,MAAM,gBAAgB,SAAS;EAC/B,QAAM,6BAA6B,eAAe,GAAG;EAErD,CAAA,GAAA,YAAA,SADkB,OAAA,QAAE,SAAS,aAAa,KAAK,OAAA,QAAE,QAAQ,aAAa,MAAM,OAC1D,iBAAiB,IAAI,yCAAyC;EAEhF,eAAe,KAAK,SAAS,kBAAkB,cAAc,MAAM;EACnE,eAAe,KAAK,UAAU,kBAAkB,cAAc,OAAO;EACrE,eAAe,KAAK,QAAQ,kBAAkB,cAAc,KAAK;EAEjE,eAAe,KAAK,YAAY,OAAA,QAAE,YAAY,cAAc,SAAS,IACjE,QACA,kBAAkB,cAAc,SAAS;CAC/C;CAGF,OAAO;AACT"}

package/build/package-access.mjs

@@ -0,0 +1,52 @@
+import buildDebug from "debug";
+import _ from "lodash";
+import assert from "node:assert";
+import { errorUtils } from "@verdaccio/core";
+//#region src/package-access.ts
+var debug = buildDebug("verdaccio:config:utils");
+var ROLES = {
+	$ALL: "$all",
+	ALL: "all",
+	$AUTH: "$authenticated",
+	$ANONYMOUS: "$anonymous",
+	DEPRECATED_ALL: "@all",
+	DEPRECATED_AUTH: "@authenticated",
+	DEPRECATED_ANONYMOUS: "@anonymous"
+};
+var PACKAGE_ACCESS = {
+	SCOPE: "@*/*",
+	ALL: "**"
+};
+function normalizeUserList(groupsList) {
+	const result = [];
+	if (_.isNil(groupsList) || _.isEmpty(groupsList)) return result;
+	if (_.isString(groupsList)) {
+		const groupsArray = groupsList.split(/\s+/);
+		result.push(groupsArray);
+	} else if (Array.isArray(groupsList)) result.push(groupsList);
+	else throw errorUtils.getInternalError("CONFIG: bad package acl (array or string expected): " + JSON.stringify(groupsList));
+	return _.flatten(result);
+}
+function normalisePackageAccess(packages) {
+	const normalizedPkgs = { ...packages };
+	if (_.isNil(normalizedPkgs["**"])) normalizedPkgs["**"] = {
+		access: [],
+		publish: [],
+		unpublish: [],
+		proxy: []
+	};
+	for (const pkg in packages) if (Object.prototype.hasOwnProperty.call(packages, pkg)) {
+		const packageAccess = packages[pkg];
+		debug("package access %s for %s ", packageAccess, pkg);
+		assert(_.isObject(packageAccess) && _.isArray(packageAccess) === false, `CONFIG: bad "'${pkg}'" package description (object expected)`);
+		normalizedPkgs[pkg].access = normalizeUserList(packageAccess.access);
+		normalizedPkgs[pkg].publish = normalizeUserList(packageAccess.publish);
+		normalizedPkgs[pkg].proxy = normalizeUserList(packageAccess.proxy);
+		normalizedPkgs[pkg].unpublish = _.isUndefined(packageAccess.unpublish) ? false : normalizeUserList(packageAccess.unpublish);
+	}
+	return normalizedPkgs;
+}
+//#endregion
+export { PACKAGE_ACCESS, ROLES, normalisePackageAccess, normalizeUserList };
+
+//# sourceMappingURL=package-access.mjs.map

package/build/package-access.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-access.mjs","names":[],"sources":["../src/package-access.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport assert from 'node:assert';\n\nimport { errorUtils } from '@verdaccio/core';\nimport type { PackageAccess } from '@verdaccio/types';\n\nconst debug = buildDebug('verdaccio:config:utils');\n\nexport interface LegacyPackageList {\n  [key: string]: PackageAccess;\n}\n\n// @deprecated use @verdaccio/core:authUtils\nexport const ROLES = {\n  $ALL: '$all',\n  ALL: 'all',\n  $AUTH: '$authenticated',\n  $ANONYMOUS: '$anonymous',\n  DEPRECATED_ALL: '@all',\n  DEPRECATED_AUTH: '@authenticated',\n  DEPRECATED_ANONYMOUS: '@anonymous',\n};\n\n// @deprecated use @verdaccio/core:authUtils\nexport const PACKAGE_ACCESS = {\n  SCOPE: '@*/*',\n  ALL: '**',\n};\n\nexport function normalizeUserList(groupsList: any): any {\n  const result: any[] = [];\n  if (_.isNil(groupsList) || _.isEmpty(groupsList)) {\n    return result;\n  }\n\n  // if it's a string, split it to array\n  if (_.isString(groupsList)) {\n    const groupsArray = groupsList.split(/\\s+/);\n\n    result.push(groupsArray);\n  } else if (Array.isArray(groupsList)) {\n    result.push(groupsList);\n  } else {\n    throw errorUtils.getInternalError(\n      'CONFIG: bad package acl (array or string expected): ' + JSON.stringify(groupsList)\n    );\n  }\n\n  return _.flatten(result);\n}\n\nexport function normalisePackageAccess(packages: LegacyPackageList): LegacyPackageList {\n  const normalizedPkgs: LegacyPackageList = { ...packages };\n  if (_.isNil(normalizedPkgs['**'])) {\n    normalizedPkgs['**'] = {\n      access: [],\n      publish: [],\n      unpublish: [],\n      proxy: [],\n    };\n  }\n\n  for (const pkg in packages) {\n    if (Object.prototype.hasOwnProperty.call(packages, pkg)) {\n      const packageAccess = packages[pkg];\n      debug('package access %s for %s ', packageAccess, pkg);\n      const isInvalid = _.isObject(packageAccess) && _.isArray(packageAccess) === false;\n      assert(isInvalid, `CONFIG: bad \"'${pkg}'\" package description (object expected)`);\n\n      normalizedPkgs[pkg].access = normalizeUserList(packageAccess.access);\n      normalizedPkgs[pkg].publish = normalizeUserList(packageAccess.publish);\n      normalizedPkgs[pkg].proxy = normalizeUserList(packageAccess.proxy);\n      // if unpublish is not defined, we set to false to fallback in publish access\n      normalizedPkgs[pkg].unpublish = _.isUndefined(packageAccess.unpublish)\n        ? false\n        : normalizeUserList(packageAccess.unpublish);\n    }\n  }\n\n  return normalizedPkgs;\n}\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,wBAAwB;AAOjD,IAAa,QAAQ;CACnB,MAAM;CACN,KAAK;CACL,OAAO;CACP,YAAY;CACZ,gBAAgB;CAChB,iBAAiB;CACjB,sBAAsB;AACxB;AAGA,IAAa,iBAAiB;CAC5B,OAAO;CACP,KAAK;AACP;AAEA,SAAgB,kBAAkB,YAAsB;CACtD,MAAM,SAAgB,CAAC;CACvB,IAAI,EAAE,MAAM,UAAU,KAAK,EAAE,QAAQ,UAAU,GAC7C,OAAO;CAIT,IAAI,EAAE,SAAS,UAAU,GAAG;EAC1B,MAAM,cAAc,WAAW,MAAM,KAAK;EAE1C,OAAO,KAAK,WAAW;CACzB,OAAO,IAAI,MAAM,QAAQ,UAAU,GACjC,OAAO,KAAK,UAAU;MAEtB,MAAM,WAAW,iBACf,yDAAyD,KAAK,UAAU,UAAU,CACpF;CAGF,OAAO,EAAE,QAAQ,MAAM;AACzB;AAEA,SAAgB,uBAAuB,UAAgD;CACrF,MAAM,iBAAoC,EAAE,GAAG,SAAS;CACxD,IAAI,EAAE,MAAM,eAAe,KAAK,GAC9B,eAAe,QAAQ;EACrB,QAAQ,CAAC;EACT,SAAS,CAAC;EACV,WAAW,CAAC;EACZ,OAAO,CAAC;CACV;CAGF,KAAK,MAAM,OAAO,UAChB,IAAI,OAAO,UAAU,eAAe,KAAK,UAAU,GAAG,GAAG;EACvD,MAAM,gBAAgB,SAAS;EAC/B,MAAM,6BAA6B,eAAe,GAAG;EAErD,OADkB,EAAE,SAAS,aAAa,KAAK,EAAE,QAAQ,aAAa,MAAM,OAC1D,iBAAiB,IAAI,yCAAyC;EAEhF,eAAe,KAAK,SAAS,kBAAkB,cAAc,MAAM;EACnE,eAAe,KAAK,UAAU,kBAAkB,cAAc,OAAO;EACrE,eAAe,KAAK,QAAQ,kBAAkB,cAAc,KAAK;EAEjE,eAAe,KAAK,YAAY,EAAE,YAAY,cAAc,SAAS,IACjE,QACA,kBAAkB,cAAc,SAAS;CAC/C;CAGF,OAAO;AACT"}