@verdaccio/core 6.0.0-6-next.8 → 6.0.0-6-next.48

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @verdaccio/core
 
+## 6.0.0-6-next.48
+
+### Minor Changes
+
+- 62c24b63: feat: add passwordValidationRegex property
+
+### Patch Changes
+
+- 43f32687: fix: abbreviated headers handle quality values
+
+## 6.0.0-6-next.47
+
 ## 6.0.0-6-next.8
 
 ### Patch Changes

package/build/constants.d.ts

@@ -1,4 +1,4 @@
-export declare const DEFAULT_MIN_LIMIT_PASSWORD = 3;
+export declare const DEFAULT_PASSWORD_VALIDATION: RegExp;
 export declare const TIME_EXPIRATION_24H = "24h";
 export declare const TIME_EXPIRATION_7D = "7d";
 export declare const DIST_TAGS = "dist-tags";
@@ -37,6 +37,7 @@ export declare const HEADERS: {
     NONE_MATCH: string;
     ETAG: string;
     JSON_CHARSET: string;
+    JSON_INSTALL_CHARSET: string;
     OCTET_STREAM: string;
     TEXT_CHARSET: string;
     WWW_AUTH: string;

package/build/constants.js

@@ -3,14 +3,14 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.USERS = exports.TOKEN_BEARER = exports.TOKEN_BASIC = exports.TIME_EXPIRATION_7D = exports.TIME_EXPIRATION_24H = exports.ROLES = exports.PACKAGE_ACCESS = exports.LOG_VERDACCIO_ERROR = exports.LOG_VERDACCIO_BYTES = exports.LOG_STATUS_MESSAGE = exports.LATEST = exports.HTTP_STATUS = exports.HEADER_TYPE = exports.HEADERS = exports.ERROR_CODE = exports.DIST_TAGS = exports.DEFAULT_USER = exports.DEFAULT_MIN_LIMIT_PASSWORD = exports.CHARACTER_ENCODING = exports.API_MESSAGE = void 0;
+exports.USERS = exports.TOKEN_BEARER = exports.TOKEN_BASIC = exports.TIME_EXPIRATION_7D = exports.TIME_EXPIRATION_24H = exports.ROLES = exports.PACKAGE_ACCESS = exports.LOG_VERDACCIO_ERROR = exports.LOG_VERDACCIO_BYTES = exports.LOG_STATUS_MESSAGE = exports.LATEST = exports.HTTP_STATUS = exports.HEADER_TYPE = exports.HEADERS = exports.ERROR_CODE = exports.DIST_TAGS = exports.DEFAULT_USER = exports.DEFAULT_PASSWORD_VALIDATION = exports.CHARACTER_ENCODING = exports.API_MESSAGE = void 0;
 
 var _httpStatusCodes = _interopRequireDefault(require("http-status-codes"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-const DEFAULT_MIN_LIMIT_PASSWORD = 3;
-exports.DEFAULT_MIN_LIMIT_PASSWORD = DEFAULT_MIN_LIMIT_PASSWORD;
+const DEFAULT_PASSWORD_VALIDATION = /.{3}$/;
+exports.DEFAULT_PASSWORD_VALIDATION = DEFAULT_PASSWORD_VALIDATION;
 const TIME_EXPIRATION_24H = '24h';
 exports.TIME_EXPIRATION_24H = TIME_EXPIRATION_24H;
 const TIME_EXPIRATION_7D = '7d';
@@ -62,6 +62,7 @@ const HEADERS = {
   NONE_MATCH: 'If-None-Match',
   ETAG: 'ETag',
   JSON_CHARSET: 'application/json; charset=utf-8',
+  JSON_INSTALL_CHARSET: 'application/vnd.npm.install-v1+json; charset=utf-8',
   OCTET_STREAM: 'application/octet-stream; charset=utf-8',
   TEXT_CHARSET: 'text/plain; charset=utf-8',
   WWW_AUTH: 'WWW-Authenticate',

package/build/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","names":["DEFAULT_MIN_LIMIT_PASSWORD","TIME_EXPIRATION_24H","TIME_EXPIRATION_7D","DIST_TAGS","LATEST","USERS","DEFAULT_USER","HEADER_TYPE","CONTENT_ENCODING","CONTENT_TYPE","CONTENT_LENGTH","ACCEPT_ENCODING","CHARACTER_ENCODING","UTF8","TOKEN_BASIC","TOKEN_BEARER","HEADERS","ACCEPT","USER_AGENT","JSON","TEXT_PLAIN","TEXT_PLAIN_UTF8","TEXT_HTML_UTF8","TEXT_HTML","AUTHORIZATION","FORWARDED_PROTO","FORWARDED_FOR","FRAMES_OPTIONS","CSP","CTO","XSS","NONE_MATCH","ETAG","JSON_CHARSET","OCTET_STREAM","TEXT_CHARSET","WWW_AUTH","GZIP","HTTP_STATUS","OK","httpCodes","CREATED","MULTIPLE_CHOICES","NOT_MODIFIED","BAD_REQUEST","UNAUTHORIZED","FORBIDDEN","NOT_FOUND","CONFLICT","NOT_IMPLEMENTED","UNSUPPORTED_MEDIA","UNSUPPORTED_MEDIA_TYPE","BAD_DATA","UNPROCESSABLE_ENTITY","INTERNAL_ERROR","INTERNAL_SERVER_ERROR","SERVICE_UNAVAILABLE","LOOP_DETECTED","ERROR_CODE","token_required","API_MESSAGE","PKG_CREATED","PKG_CHANGED","PKG_REMOVED","PKG_PUBLISHED","TARBALL_UPLOADED","TARBALL_REMOVED","TAG_UPDATED","TAG_REMOVED","TAG_ADDED","LOGGED_OUT","LOG_STATUS_MESSAGE","LOG_VERDACCIO_ERROR","LOG_VERDACCIO_BYTES","ROLES","$ALL","ALL","$AUTH","$ANONYMOUS","DEPRECATED_ALL","DEPRECATED_AUTH","DEPRECATED_ANONYMOUS","PACKAGE_ACCESS","SCOPE"],"sources":["../src/constants.ts"],"sourcesContent":["import httpCodes from 'http-status-codes';\n\nexport const DEFAULT_MIN_LIMIT_PASSWORD = 3;\nexport const TIME_EXPIRATION_24H = '24h';\nexport const TIME_EXPIRATION_7D = '7d';\nexport const DIST_TAGS = 'dist-tags';\nexport const LATEST = 'latest';\nexport const USERS = 'users';\nexport const DEFAULT_USER = 'Anonymous';\n\nexport const HEADER_TYPE = {\n  CONTENT_ENCODING: 'content-encoding',\n  CONTENT_TYPE: 'content-type',\n  CONTENT_LENGTH: 'content-length',\n  ACCEPT_ENCODING: 'accept-encoding',\n};\n\nexport const CHARACTER_ENCODING = {\n  UTF8: 'utf8',\n};\n\n// @deprecated use Bearer instead\nexport const TOKEN_BASIC = 'Basic';\nexport const TOKEN_BEARER = 'Bearer';\n\nexport const HEADERS = {\n  ACCEPT: 'Accept',\n  ACCEPT_ENCODING: 'Accept-Encoding',\n  USER_AGENT: 'User-Agent',\n  JSON: 'application/json',\n  CONTENT_TYPE: 'Content-type',\n  CONTENT_LENGTH: 'content-length',\n  TEXT_PLAIN: 'text/plain',\n  TEXT_PLAIN_UTF8: 'text/plain; charset=utf-8',\n  TEXT_HTML_UTF8: 'text/html; charset=utf-8',\n  TEXT_HTML: 'text/html',\n  AUTHORIZATION: 'authorization',\n  // only set with proxy that setup HTTPS\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto\n  FORWARDED_PROTO: 'X-Forwarded-Proto',\n  FORWARDED_FOR: 'X-Forwarded-For',\n  FRAMES_OPTIONS: 'X-Frame-Options',\n  CSP: 'Content-Security-Policy',\n  CTO: 'X-Content-Type-Options',\n  XSS: 'X-XSS-Protection',\n  NONE_MATCH: 'If-None-Match',\n  ETAG: 'ETag',\n  JSON_CHARSET: 'application/json; charset=utf-8',\n  OCTET_STREAM: 'application/octet-stream; charset=utf-8',\n  TEXT_CHARSET: 'text/plain; charset=utf-8',\n  WWW_AUTH: 'WWW-Authenticate',\n  GZIP: 'gzip',\n};\n\nexport const HTTP_STATUS = {\n  OK: httpCodes.OK,\n  CREATED: httpCodes.CREATED,\n  MULTIPLE_CHOICES: httpCodes.MULTIPLE_CHOICES,\n  NOT_MODIFIED: httpCodes.NOT_MODIFIED,\n  BAD_REQUEST: httpCodes.BAD_REQUEST,\n  UNAUTHORIZED: httpCodes.UNAUTHORIZED,\n  FORBIDDEN: httpCodes.FORBIDDEN,\n  NOT_FOUND: httpCodes.NOT_FOUND,\n  CONFLICT: httpCodes.CONFLICT,\n  NOT_IMPLEMENTED: httpCodes.NOT_IMPLEMENTED,\n  UNSUPPORTED_MEDIA: httpCodes.UNSUPPORTED_MEDIA_TYPE,\n  BAD_DATA: httpCodes.UNPROCESSABLE_ENTITY,\n  INTERNAL_ERROR: httpCodes.INTERNAL_SERVER_ERROR,\n  SERVICE_UNAVAILABLE: httpCodes.SERVICE_UNAVAILABLE,\n  LOOP_DETECTED: 508,\n};\n\nexport const ERROR_CODE = {\n  token_required: 'token is required',\n};\n\nexport const API_MESSAGE = {\n  PKG_CREATED: 'created new package',\n  PKG_CHANGED: 'package changed',\n  PKG_REMOVED: 'package removed',\n  PKG_PUBLISHED: 'package published',\n  TARBALL_UPLOADED: 'tarball uploaded successfully',\n  TARBALL_REMOVED: 'tarball removed',\n  TAG_UPDATED: 'tags updated',\n  TAG_REMOVED: 'tag removed',\n  TAG_ADDED: 'package tagged',\n  OK: 'ok',\n  LOGGED_OUT: 'Logged out',\n};\n\nexport const LOG_STATUS_MESSAGE =\n  \"@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'\";\nexport const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;\nexport const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;\n\nexport const ROLES = {\n  $ALL: '$all',\n  ALL: 'all',\n  $AUTH: '$authenticated',\n  $ANONYMOUS: '$anonymous',\n  DEPRECATED_ALL: '@all',\n  DEPRECATED_AUTH: '@authenticated',\n  DEPRECATED_ANONYMOUS: '@anonymous',\n};\n\nexport const PACKAGE_ACCESS = {\n  SCOPE: '@*/*',\n  ALL: '**',\n};\n"],"mappings":";;;;;;;AAAA;;;;AAEO,MAAMA,0BAA0B,GAAG,CAAnC;;AACA,MAAMC,mBAAmB,GAAG,KAA5B;;AACA,MAAMC,kBAAkB,GAAG,IAA3B;;AACA,MAAMC,SAAS,GAAG,WAAlB;;AACA,MAAMC,MAAM,GAAG,QAAf;;AACA,MAAMC,KAAK,GAAG,OAAd;;AACA,MAAMC,YAAY,GAAG,WAArB;;AAEA,MAAMC,WAAW,GAAG;EACzBC,gBAAgB,EAAE,kBADO;EAEzBC,YAAY,EAAE,cAFW;EAGzBC,cAAc,EAAE,gBAHS;EAIzBC,eAAe,EAAE;AAJQ,CAApB;;AAOA,MAAMC,kBAAkB,GAAG;EAChCC,IAAI,EAAE;AAD0B,CAA3B,C,CAIP;;;AACO,MAAMC,WAAW,GAAG,OAApB;;AACA,MAAMC,YAAY,GAAG,QAArB;;AAEA,MAAMC,OAAO,GAAG;EACrBC,MAAM,EAAE,QADa;EAErBN,eAAe,EAAE,iBAFI;EAGrBO,UAAU,EAAE,YAHS;EAIrBC,IAAI,EAAE,kBAJe;EAKrBV,YAAY,EAAE,cALO;EAMrBC,cAAc,EAAE,gBANK;EAOrBU,UAAU,EAAE,YAPS;EAQrBC,eAAe,EAAE,2BARI;EASrBC,cAAc,EAAE,0BATK;EAUrBC,SAAS,EAAE,WAVU;EAWrBC,aAAa,EAAE,eAXM;EAYrB;EACA;EACAC,eAAe,EAAE,mBAdI;EAerBC,aAAa,EAAE,iBAfM;EAgBrBC,cAAc,EAAE,iBAhBK;EAiBrBC,GAAG,EAAE,yBAjBgB;EAkBrBC,GAAG,EAAE,wBAlBgB;EAmBrBC,GAAG,EAAE,kBAnBgB;EAoBrBC,UAAU,EAAE,eApBS;EAqBrBC,IAAI,EAAE,MArBe;EAsBrBC,YAAY,EAAE,iCAtBO;EAuBrBC,YAAY,EAAE,yCAvBO;EAwBrBC,YAAY,EAAE,2BAxBO;EAyBrBC,QAAQ,EAAE,kBAzBW;EA0BrBC,IAAI,EAAE;AA1Be,CAAhB;;AA6BA,MAAMC,WAAW,GAAG;EACzBC,EAAE,EAAEC,wBAAA,CAAUD,EADW;EAEzBE,OAAO,EAAED,wBAAA,CAAUC,OAFM;EAGzBC,gBAAgB,EAAEF,wBAAA,CAAUE,gBAHH;EAIzBC,YAAY,EAAEH,wBAAA,CAAUG,YAJC;EAKzBC,WAAW,EAAEJ,wBAAA,CAAUI,WALE;EAMzBC,YAAY,EAAEL,wBAAA,CAAUK,YANC;EAOzBC,SAAS,EAAEN,wBAAA,CAAUM,SAPI;EAQzBC,SAAS,EAAEP,wBAAA,CAAUO,SARI;EASzBC,QAAQ,EAAER,wBAAA,CAAUQ,QATK;EAUzBC,eAAe,EAAET,wBAAA,CAAUS,eAVF;EAWzBC,iBAAiB,EAAEV,wBAAA,CAAUW,sBAXJ;EAYzBC,QAAQ,EAAEZ,wBAAA,CAAUa,oBAZK;EAazBC,cAAc,EAAEd,wBAAA,CAAUe,qBAbD;EAczBC,mBAAmB,EAAEhB,wBAAA,CAAUgB,mBAdN;EAezBC,aAAa,EAAE;AAfU,CAApB;;AAkBA,MAAMC,UAAU,GAAG;EACxBC,cAAc,EAAE;AADQ,CAAnB;;AAIA,MAAMC,WAAW,GAAG;EACzBC,WAAW,EAAE,qBADY;EAEzBC,WAAW,EAAE,iBAFY;EAGzBC,WAAW,EAAE,iBAHY;EAIzBC,aAAa,EAAE,mBAJU;EAKzBC,gBAAgB,EAAE,+BALO;EAMzBC,eAAe,EAAE,iBANQ;EAOzBC,WAAW,EAAE,cAPY;EAQzBC,WAAW,EAAE,aARY;EASzBC,SAAS,EAAE,gBATc;EAUzB9B,EAAE,EAAE,IAVqB;EAWzB+B,UAAU,EAAE;AAXa,CAApB;;AAcA,MAAMC,kBAAkB,GAC7B,gFADK;;AAEA,MAAMC,mBAAmB,GAAI,GAAED,kBAAmB,oBAAlD;;AACA,MAAME,mBAAmB,GAAI,GAAEF,kBAAmB,mCAAlD;;AAEA,MAAMG,KAAK,GAAG;EACnBC,IAAI,EAAE,MADa;EAEnBC,GAAG,EAAE,KAFc;EAGnBC,KAAK,EAAE,gBAHY;EAInBC,UAAU,EAAE,YAJO;EAKnBC,cAAc,EAAE,MALG;EAMnBC,eAAe,EAAE,gBANE;EAOnBC,oBAAoB,EAAE;AAPH,CAAd;;AAUA,MAAMC,cAAc,GAAG;EAC5BC,KAAK,EAAE,MADqB;EAE5BP,GAAG,EAAE;AAFuB,CAAvB"}
+{"version":3,"file":"constants.js","names":["DEFAULT_PASSWORD_VALIDATION","TIME_EXPIRATION_24H","TIME_EXPIRATION_7D","DIST_TAGS","LATEST","USERS","DEFAULT_USER","HEADER_TYPE","CONTENT_ENCODING","CONTENT_TYPE","CONTENT_LENGTH","ACCEPT_ENCODING","CHARACTER_ENCODING","UTF8","TOKEN_BASIC","TOKEN_BEARER","HEADERS","ACCEPT","USER_AGENT","JSON","TEXT_PLAIN","TEXT_PLAIN_UTF8","TEXT_HTML_UTF8","TEXT_HTML","AUTHORIZATION","FORWARDED_PROTO","FORWARDED_FOR","FRAMES_OPTIONS","CSP","CTO","XSS","NONE_MATCH","ETAG","JSON_CHARSET","JSON_INSTALL_CHARSET","OCTET_STREAM","TEXT_CHARSET","WWW_AUTH","GZIP","HTTP_STATUS","OK","httpCodes","CREATED","MULTIPLE_CHOICES","NOT_MODIFIED","BAD_REQUEST","UNAUTHORIZED","FORBIDDEN","NOT_FOUND","CONFLICT","NOT_IMPLEMENTED","UNSUPPORTED_MEDIA","UNSUPPORTED_MEDIA_TYPE","BAD_DATA","UNPROCESSABLE_ENTITY","INTERNAL_ERROR","INTERNAL_SERVER_ERROR","SERVICE_UNAVAILABLE","LOOP_DETECTED","ERROR_CODE","token_required","API_MESSAGE","PKG_CREATED","PKG_CHANGED","PKG_REMOVED","PKG_PUBLISHED","TARBALL_UPLOADED","TARBALL_REMOVED","TAG_UPDATED","TAG_REMOVED","TAG_ADDED","LOGGED_OUT","LOG_STATUS_MESSAGE","LOG_VERDACCIO_ERROR","LOG_VERDACCIO_BYTES","ROLES","$ALL","ALL","$AUTH","$ANONYMOUS","DEPRECATED_ALL","DEPRECATED_AUTH","DEPRECATED_ANONYMOUS","PACKAGE_ACCESS","SCOPE"],"sources":["../src/constants.ts"],"sourcesContent":["import httpCodes from 'http-status-codes';\n\nexport const DEFAULT_PASSWORD_VALIDATION = /.{3}$/;\nexport const TIME_EXPIRATION_24H = '24h';\nexport const TIME_EXPIRATION_7D = '7d';\nexport const DIST_TAGS = 'dist-tags';\nexport const LATEST = 'latest';\nexport const USERS = 'users';\nexport const DEFAULT_USER = 'Anonymous';\n\nexport const HEADER_TYPE = {\n  CONTENT_ENCODING: 'content-encoding',\n  CONTENT_TYPE: 'content-type',\n  CONTENT_LENGTH: 'content-length',\n  ACCEPT_ENCODING: 'accept-encoding',\n};\n\nexport const CHARACTER_ENCODING = {\n  UTF8: 'utf8',\n};\n\n// @deprecated use Bearer instead\nexport const TOKEN_BASIC = 'Basic';\nexport const TOKEN_BEARER = 'Bearer';\n\nexport const HEADERS = {\n  ACCEPT: 'Accept',\n  ACCEPT_ENCODING: 'Accept-Encoding',\n  USER_AGENT: 'User-Agent',\n  JSON: 'application/json',\n  CONTENT_TYPE: 'Content-type',\n  CONTENT_LENGTH: 'content-length',\n  TEXT_PLAIN: 'text/plain',\n  TEXT_PLAIN_UTF8: 'text/plain; charset=utf-8',\n  TEXT_HTML_UTF8: 'text/html; charset=utf-8',\n  TEXT_HTML: 'text/html',\n  AUTHORIZATION: 'authorization',\n  // only set with proxy that setup HTTPS\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto\n  FORWARDED_PROTO: 'X-Forwarded-Proto',\n  FORWARDED_FOR: 'X-Forwarded-For',\n  FRAMES_OPTIONS: 'X-Frame-Options',\n  CSP: 'Content-Security-Policy',\n  CTO: 'X-Content-Type-Options',\n  XSS: 'X-XSS-Protection',\n  NONE_MATCH: 'If-None-Match',\n  ETAG: 'ETag',\n  JSON_CHARSET: 'application/json; charset=utf-8',\n  JSON_INSTALL_CHARSET: 'application/vnd.npm.install-v1+json; charset=utf-8',\n  OCTET_STREAM: 'application/octet-stream; charset=utf-8',\n  TEXT_CHARSET: 'text/plain; charset=utf-8',\n  WWW_AUTH: 'WWW-Authenticate',\n  GZIP: 'gzip',\n};\n\nexport const HTTP_STATUS = {\n  OK: httpCodes.OK,\n  CREATED: httpCodes.CREATED,\n  MULTIPLE_CHOICES: httpCodes.MULTIPLE_CHOICES,\n  NOT_MODIFIED: httpCodes.NOT_MODIFIED,\n  BAD_REQUEST: httpCodes.BAD_REQUEST,\n  UNAUTHORIZED: httpCodes.UNAUTHORIZED,\n  FORBIDDEN: httpCodes.FORBIDDEN,\n  NOT_FOUND: httpCodes.NOT_FOUND,\n  CONFLICT: httpCodes.CONFLICT,\n  NOT_IMPLEMENTED: httpCodes.NOT_IMPLEMENTED,\n  UNSUPPORTED_MEDIA: httpCodes.UNSUPPORTED_MEDIA_TYPE,\n  BAD_DATA: httpCodes.UNPROCESSABLE_ENTITY,\n  INTERNAL_ERROR: httpCodes.INTERNAL_SERVER_ERROR,\n  SERVICE_UNAVAILABLE: httpCodes.SERVICE_UNAVAILABLE,\n  LOOP_DETECTED: 508,\n};\n\nexport const ERROR_CODE = {\n  token_required: 'token is required',\n};\n\nexport const API_MESSAGE = {\n  PKG_CREATED: 'created new package',\n  PKG_CHANGED: 'package changed',\n  PKG_REMOVED: 'package removed',\n  PKG_PUBLISHED: 'package published',\n  TARBALL_UPLOADED: 'tarball uploaded successfully',\n  TARBALL_REMOVED: 'tarball removed',\n  TAG_UPDATED: 'tags updated',\n  TAG_REMOVED: 'tag removed',\n  TAG_ADDED: 'package tagged',\n  OK: 'ok',\n  LOGGED_OUT: 'Logged out',\n};\n\nexport const LOG_STATUS_MESSAGE =\n  \"@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'\";\nexport const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;\nexport const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;\n\nexport const ROLES = {\n  $ALL: '$all',\n  ALL: 'all',\n  $AUTH: '$authenticated',\n  $ANONYMOUS: '$anonymous',\n  DEPRECATED_ALL: '@all',\n  DEPRECATED_AUTH: '@authenticated',\n  DEPRECATED_ANONYMOUS: '@anonymous',\n};\n\nexport const PACKAGE_ACCESS = {\n  SCOPE: '@*/*',\n  ALL: '**',\n};\n"],"mappings":";;;;;;;AAAA;;;;AAEO,MAAMA,2BAA2B,GAAG,OAApC;;AACA,MAAMC,mBAAmB,GAAG,KAA5B;;AACA,MAAMC,kBAAkB,GAAG,IAA3B;;AACA,MAAMC,SAAS,GAAG,WAAlB;;AACA,MAAMC,MAAM,GAAG,QAAf;;AACA,MAAMC,KAAK,GAAG,OAAd;;AACA,MAAMC,YAAY,GAAG,WAArB;;AAEA,MAAMC,WAAW,GAAG;EACzBC,gBAAgB,EAAE,kBADO;EAEzBC,YAAY,EAAE,cAFW;EAGzBC,cAAc,EAAE,gBAHS;EAIzBC,eAAe,EAAE;AAJQ,CAApB;;AAOA,MAAMC,kBAAkB,GAAG;EAChCC,IAAI,EAAE;AAD0B,CAA3B,C,CAIP;;;AACO,MAAMC,WAAW,GAAG,OAApB;;AACA,MAAMC,YAAY,GAAG,QAArB;;AAEA,MAAMC,OAAO,GAAG;EACrBC,MAAM,EAAE,QADa;EAErBN,eAAe,EAAE,iBAFI;EAGrBO,UAAU,EAAE,YAHS;EAIrBC,IAAI,EAAE,kBAJe;EAKrBV,YAAY,EAAE,cALO;EAMrBC,cAAc,EAAE,gBANK;EAOrBU,UAAU,EAAE,YAPS;EAQrBC,eAAe,EAAE,2BARI;EASrBC,cAAc,EAAE,0BATK;EAUrBC,SAAS,EAAE,WAVU;EAWrBC,aAAa,EAAE,eAXM;EAYrB;EACA;EACAC,eAAe,EAAE,mBAdI;EAerBC,aAAa,EAAE,iBAfM;EAgBrBC,cAAc,EAAE,iBAhBK;EAiBrBC,GAAG,EAAE,yBAjBgB;EAkBrBC,GAAG,EAAE,wBAlBgB;EAmBrBC,GAAG,EAAE,kBAnBgB;EAoBrBC,UAAU,EAAE,eApBS;EAqBrBC,IAAI,EAAE,MArBe;EAsBrBC,YAAY,EAAE,iCAtBO;EAuBrBC,oBAAoB,EAAE,oDAvBD;EAwBrBC,YAAY,EAAE,yCAxBO;EAyBrBC,YAAY,EAAE,2BAzBO;EA0BrBC,QAAQ,EAAE,kBA1BW;EA2BrBC,IAAI,EAAE;AA3Be,CAAhB;;AA8BA,MAAMC,WAAW,GAAG;EACzBC,EAAE,EAAEC,wBAAA,CAAUD,EADW;EAEzBE,OAAO,EAAED,wBAAA,CAAUC,OAFM;EAGzBC,gBAAgB,EAAEF,wBAAA,CAAUE,gBAHH;EAIzBC,YAAY,EAAEH,wBAAA,CAAUG,YAJC;EAKzBC,WAAW,EAAEJ,wBAAA,CAAUI,WALE;EAMzBC,YAAY,EAAEL,wBAAA,CAAUK,YANC;EAOzBC,SAAS,EAAEN,wBAAA,CAAUM,SAPI;EAQzBC,SAAS,EAAEP,wBAAA,CAAUO,SARI;EASzBC,QAAQ,EAAER,wBAAA,CAAUQ,QATK;EAUzBC,eAAe,EAAET,wBAAA,CAAUS,eAVF;EAWzBC,iBAAiB,EAAEV,wBAAA,CAAUW,sBAXJ;EAYzBC,QAAQ,EAAEZ,wBAAA,CAAUa,oBAZK;EAazBC,cAAc,EAAEd,wBAAA,CAAUe,qBAbD;EAczBC,mBAAmB,EAAEhB,wBAAA,CAAUgB,mBAdN;EAezBC,aAAa,EAAE;AAfU,CAApB;;AAkBA,MAAMC,UAAU,GAAG;EACxBC,cAAc,EAAE;AADQ,CAAnB;;AAIA,MAAMC,WAAW,GAAG;EACzBC,WAAW,EAAE,qBADY;EAEzBC,WAAW,EAAE,iBAFY;EAGzBC,WAAW,EAAE,iBAHY;EAIzBC,aAAa,EAAE,mBAJU;EAKzBC,gBAAgB,EAAE,+BALO;EAMzBC,eAAe,EAAE,iBANQ;EAOzBC,WAAW,EAAE,cAPY;EAQzBC,WAAW,EAAE,aARY;EASzBC,SAAS,EAAE,gBATc;EAUzB9B,EAAE,EAAE,IAVqB;EAWzB+B,UAAU,EAAE;AAXa,CAApB;;AAcA,MAAMC,kBAAkB,GAC7B,gFADK;;AAEA,MAAMC,mBAAmB,GAAI,GAAED,kBAAmB,oBAAlD;;AACA,MAAME,mBAAmB,GAAI,GAAEF,kBAAmB,mCAAlD;;AAEA,MAAMG,KAAK,GAAG;EACnBC,IAAI,EAAE,MADa;EAEnBC,GAAG,EAAE,KAFc;EAGnBC,KAAK,EAAE,gBAHY;EAInBC,UAAU,EAAE,YAJO;EAKnBC,cAAc,EAAE,MALG;EAMnBC,eAAe,EAAE,gBANE;EAOnBC,oBAAoB,EAAE;AAPH,CAAd;;AAUA,MAAMC,cAAc,GAAG;EAC5BC,KAAK,EAAE,MADqB;EAE5BP,GAAG,EAAE;AAFuB,CAAvB"}

package/build/error-utils.d.ts

@@ -1,6 +1,6 @@
 import { HttpError } from 'http-errors';
 export declare const API_ERROR: {
-    PASSWORD_SHORT: (passLength?: number) => string;
+    PASSWORD_SHORT: string;
     MUST_BE_LOGGED: string;
     PLUGIN_ERROR: string;
     CONFIG_BAD_FORMAT: string;

package/build/error-utils.js

@@ -21,7 +21,7 @@ var _constants = require("./constants");
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 const API_ERROR = {
-  PASSWORD_SHORT: (passLength = _constants.DEFAULT_MIN_LIMIT_PASSWORD) => `The provided password is too short. Please pick a password longer than ` + `${passLength} characters.`,
+  PASSWORD_SHORT: `The provided password does not pass the validation`,
   MUST_BE_LOGGED: 'You must be logged in to publish packages.',
   PLUGIN_ERROR: 'bug in the auth plugin system',
   CONFIG_BAD_FORMAT: 'config file must be an object',

package/build/error-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-utils.js","names":["API_ERROR","PASSWORD_SHORT","passLength","DEFAULT_MIN_LIMIT_PASSWORD","MUST_BE_LOGGED","PLUGIN_ERROR","CONFIG_BAD_FORMAT","BAD_USERNAME_PASSWORD","NO_PACKAGE","PACKAGE_CANNOT_BE_ADDED","BAD_DATA","NOT_ALLOWED","NOT_ALLOWED_PUBLISH","INTERNAL_SERVER_ERROR","UNKNOWN_ERROR","NOT_PACKAGE_UPLINK","UPLINK_OFFLINE_PUBLISH","UPLINK_OFFLINE","NOT_MODIFIED_NO_DATA","CONTENT_MISMATCH","NOT_FILE_UPLINK","MAX_USERS_REACHED","VERSION_NOT_EXIST","NO_SUCH_FILE","UNSUPORTED_REGISTRY_CALL","FILE_NOT_FOUND","REGISTRATION_DISABLED","UNAUTHORIZED_ACCESS","BAD_STATUS_CODE","PACKAGE_EXIST","BAD_AUTH_HEADER","WEB_DISABLED","DEPRECATED_BASIC_HEADER","BAD_FORMAT_USER_GROUP","RESOURCE_UNAVAILABLE","BAD_PACKAGE_DATA","USERNAME_PASSWORD_REQUIRED","USERNAME_ALREADY_REGISTERED","SUPPORT_ERRORS","PLUGIN_MISSING_INTERFACE","TFA_DISABLED","STORAGE_NOT_IMPLEMENT","PARAMETERS_NOT_VALID","APP_ERROR","CONFIG_NOT_VALID","PROFILE_ERROR","PASSWORD_VALIDATION","getError","code","message","httpError","createError","getConflict","HTTP_STATUS","CONFLICT","getBadData","customMessage","getBadRequest","BAD_REQUEST","getInternalError","INTERNAL_ERROR","getUnauthorized","UNAUTHORIZED","getForbidden","FORBIDDEN","getServiceUnavailable","SERVICE_UNAVAILABLE","getNotFound","NOT_FOUND","getCode","statusCode"],"sources":["../src/error-utils.ts"],"sourcesContent":["import createError, { HttpError } from 'http-errors';\n\nimport { DEFAULT_MIN_LIMIT_PASSWORD, HTTP_STATUS } from './constants';\n\nexport const API_ERROR = {\n  PASSWORD_SHORT: (passLength = DEFAULT_MIN_LIMIT_PASSWORD): string =>\n    `The provided password is too short. Please pick a password longer than ` +\n    `${passLength} characters.`,\n  MUST_BE_LOGGED: 'You must be logged in to publish packages.',\n  PLUGIN_ERROR: 'bug in the auth plugin system',\n  CONFIG_BAD_FORMAT: 'config file must be an object',\n  BAD_USERNAME_PASSWORD: 'bad username/password, access denied',\n  NO_PACKAGE: 'no such package available',\n  PACKAGE_CANNOT_BE_ADDED: 'this package cannot be added',\n  BAD_DATA: 'bad data',\n  NOT_ALLOWED: 'not allowed to access package',\n  NOT_ALLOWED_PUBLISH: 'not allowed to publish package',\n  INTERNAL_SERVER_ERROR: 'internal server error',\n  UNKNOWN_ERROR: 'unknown error',\n  NOT_PACKAGE_UPLINK: 'package does not exist on uplink',\n  UPLINK_OFFLINE_PUBLISH: 'one of the uplinks is down, refuse to publish',\n  UPLINK_OFFLINE: 'uplink is offline',\n  NOT_MODIFIED_NO_DATA: 'no data',\n  CONTENT_MISMATCH: 'content length mismatch',\n  NOT_FILE_UPLINK: \"file doesn't exist on uplink\",\n  MAX_USERS_REACHED: 'maximum amount of users reached',\n  VERSION_NOT_EXIST: \"this version doesn't exist\",\n  NO_SUCH_FILE: 'no such file available',\n  UNSUPORTED_REGISTRY_CALL: 'unsupported registry call',\n  FILE_NOT_FOUND: 'File not found',\n  REGISTRATION_DISABLED: 'user registration disabled',\n  UNAUTHORIZED_ACCESS: 'unauthorized access',\n  BAD_STATUS_CODE: 'bad status code',\n  PACKAGE_EXIST: 'this package is already present',\n  BAD_AUTH_HEADER: 'bad authorization header',\n  WEB_DISABLED: 'Web interface is disabled in the config file',\n  DEPRECATED_BASIC_HEADER: 'basic authentication is deprecated, please use JWT instead',\n  BAD_FORMAT_USER_GROUP: 'user groups is different than an array',\n  RESOURCE_UNAVAILABLE: 'resource unavailable',\n  BAD_PACKAGE_DATA: 'bad incoming package data',\n  USERNAME_PASSWORD_REQUIRED: 'username and password is required',\n  USERNAME_ALREADY_REGISTERED: 'username is already registered',\n};\n\nexport const SUPPORT_ERRORS = {\n  PLUGIN_MISSING_INTERFACE: 'the plugin does not provide implementation of the requested feature',\n  TFA_DISABLED: 'the two-factor authentication is not yet supported',\n  STORAGE_NOT_IMPLEMENT: 'the storage does not support token saving',\n  PARAMETERS_NOT_VALID: 'the parameters are not valid',\n};\n\nexport const APP_ERROR = {\n  CONFIG_NOT_VALID: 'CONFIG: it does not look like a valid config file',\n  PROFILE_ERROR: 'profile unexpected error',\n  PASSWORD_VALIDATION: 'not valid password',\n};\n\nexport type VerdaccioError = HttpError & { code: number };\n\nfunction getError(code: number, message: string): VerdaccioError {\n  const httpError = createError(code, message);\n\n  httpError.code = code;\n\n  return httpError as VerdaccioError;\n}\n\nexport function getConflict(message: string = API_ERROR.PACKAGE_EXIST): VerdaccioError {\n  return getError(HTTP_STATUS.CONFLICT, message);\n}\n\nexport function getBadData(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_DATA, customMessage || API_ERROR.BAD_DATA);\n}\n\nexport function getBadRequest(customMessage: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_REQUEST, customMessage);\n}\n\nexport function getInternalError(customMessage?: string): VerdaccioError {\n  return customMessage\n    ? getError(HTTP_STATUS.INTERNAL_ERROR, customMessage)\n    : getError(HTTP_STATUS.INTERNAL_ERROR, API_ERROR.UNKNOWN_ERROR);\n}\n\nexport function getUnauthorized(message = 'no credentials provided'): VerdaccioError {\n  return getError(HTTP_STATUS.UNAUTHORIZED, message);\n}\n\nexport function getForbidden(message = \"can't use this filename\"): VerdaccioError {\n  return getError(HTTP_STATUS.FORBIDDEN, message);\n}\n\nexport function getServiceUnavailable(\n  message: string = API_ERROR.RESOURCE_UNAVAILABLE\n): VerdaccioError {\n  return getError(HTTP_STATUS.SERVICE_UNAVAILABLE, message);\n}\n\nexport function getNotFound(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.NOT_FOUND, customMessage || API_ERROR.NO_PACKAGE);\n}\n\nexport function getCode(statusCode: number, customMessage: string): VerdaccioError {\n  return getError(statusCode, customMessage);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;;AAEA;;;;AAEO,MAAMA,SAAS,GAAG;EACvBC,cAAc,EAAE,CAACC,UAAU,GAAGC,qCAAd,KACb,yEAAD,GACC,GAAED,UAAW,cAHO;EAIvBE,cAAc,EAAE,4CAJO;EAKvBC,YAAY,EAAE,+BALS;EAMvBC,iBAAiB,EAAE,+BANI;EAOvBC,qBAAqB,EAAE,sCAPA;EAQvBC,UAAU,EAAE,2BARW;EASvBC,uBAAuB,EAAE,8BATF;EAUvBC,QAAQ,EAAE,UAVa;EAWvBC,WAAW,EAAE,+BAXU;EAYvBC,mBAAmB,EAAE,gCAZE;EAavBC,qBAAqB,EAAE,uBAbA;EAcvBC,aAAa,EAAE,eAdQ;EAevBC,kBAAkB,EAAE,kCAfG;EAgBvBC,sBAAsB,EAAE,+CAhBD;EAiBvBC,cAAc,EAAE,mBAjBO;EAkBvBC,oBAAoB,EAAE,SAlBC;EAmBvBC,gBAAgB,EAAE,yBAnBK;EAoBvBC,eAAe,EAAE,8BApBM;EAqBvBC,iBAAiB,EAAE,iCArBI;EAsBvBC,iBAAiB,EAAE,4BAtBI;EAuBvBC,YAAY,EAAE,wBAvBS;EAwBvBC,wBAAwB,EAAE,2BAxBH;EAyBvBC,cAAc,EAAE,gBAzBO;EA0BvBC,qBAAqB,EAAE,4BA1BA;EA2BvBC,mBAAmB,EAAE,qBA3BE;EA4BvBC,eAAe,EAAE,iBA5BM;EA6BvBC,aAAa,EAAE,iCA7BQ;EA8BvBC,eAAe,EAAE,0BA9BM;EA+BvBC,YAAY,EAAE,8CA/BS;EAgCvBC,uBAAuB,EAAE,4DAhCF;EAiCvBC,qBAAqB,EAAE,wCAjCA;EAkCvBC,oBAAoB,EAAE,sBAlCC;EAmCvBC,gBAAgB,EAAE,2BAnCK;EAoCvBC,0BAA0B,EAAE,mCApCL;EAqCvBC,2BAA2B,EAAE;AArCN,CAAlB;;AAwCA,MAAMC,cAAc,GAAG;EAC5BC,wBAAwB,EAAE,qEADE;EAE5BC,YAAY,EAAE,oDAFc;EAG5BC,qBAAqB,EAAE,2CAHK;EAI5BC,oBAAoB,EAAE;AAJM,CAAvB;;AAOA,MAAMC,SAAS,GAAG;EACvBC,gBAAgB,EAAE,mDADK;EAEvBC,aAAa,EAAE,0BAFQ;EAGvBC,mBAAmB,EAAE;AAHE,CAAlB;;;AAQP,SAASC,QAAT,CAAkBC,IAAlB,EAAgCC,OAAhC,EAAiE;EAC/D,MAAMC,SAAS,GAAG,IAAAC,mBAAA,EAAYH,IAAZ,EAAkBC,OAAlB,CAAlB;EAEAC,SAAS,CAACF,IAAV,GAAiBA,IAAjB;EAEA,OAAOE,SAAP;AACD;;AAEM,SAASE,WAAT,CAAqBH,OAAe,GAAGjD,SAAS,CAAC6B,aAAjD,EAAgF;EACrF,OAAOkB,QAAQ,CAACM,sBAAA,CAAYC,QAAb,EAAuBL,OAAvB,CAAf;AACD;;AAEM,SAASM,UAAT,CAAoBC,aAApB,EAA4D;EACjE,OAAOT,QAAQ,CAACM,sBAAA,CAAY3C,QAAb,EAAuB8C,aAAa,IAAIxD,SAAS,CAACU,QAAlD,CAAf;AACD;;AAEM,SAAS+C,aAAT,CAAuBD,aAAvB,EAA8D;EACnE,OAAOT,QAAQ,CAACM,sBAAA,CAAYK,WAAb,EAA0BF,aAA1B,CAAf;AACD;;AAEM,SAASG,gBAAT,CAA0BH,aAA1B,EAAkE;EACvE,OAAOA,aAAa,GAChBT,QAAQ,CAACM,sBAAA,CAAYO,cAAb,EAA6BJ,aAA7B,CADQ,GAEhBT,QAAQ,CAACM,sBAAA,CAAYO,cAAb,EAA6B5D,SAAS,CAACc,aAAvC,CAFZ;AAGD;;AAEM,SAAS+C,eAAT,CAAyBZ,OAAO,GAAG,yBAAnC,EAA8E;EACnF,OAAOF,QAAQ,CAACM,sBAAA,CAAYS,YAAb,EAA2Bb,OAA3B,CAAf;AACD;;AAEM,SAASc,YAAT,CAAsBd,OAAO,GAAG,yBAAhC,EAA2E;EAChF,OAAOF,QAAQ,CAACM,sBAAA,CAAYW,SAAb,EAAwBf,OAAxB,CAAf;AACD;;AAEM,SAASgB,qBAAT,CACLhB,OAAe,GAAGjD,SAAS,CAACkC,oBADvB,EAEW;EAChB,OAAOa,QAAQ,CAACM,sBAAA,CAAYa,mBAAb,EAAkCjB,OAAlC,CAAf;AACD;;AAEM,SAASkB,WAAT,CAAqBX,aAArB,EAA6D;EAClE,OAAOT,QAAQ,CAACM,sBAAA,CAAYe,SAAb,EAAwBZ,aAAa,IAAIxD,SAAS,CAACQ,UAAnD,CAAf;AACD;;AAEM,SAAS6D,OAAT,CAAiBC,UAAjB,EAAqCd,aAArC,EAA4E;EACjF,OAAOT,QAAQ,CAACuB,UAAD,EAAad,aAAb,CAAf;AACD"}
+{"version":3,"file":"error-utils.js","names":["API_ERROR","PASSWORD_SHORT","MUST_BE_LOGGED","PLUGIN_ERROR","CONFIG_BAD_FORMAT","BAD_USERNAME_PASSWORD","NO_PACKAGE","PACKAGE_CANNOT_BE_ADDED","BAD_DATA","NOT_ALLOWED","NOT_ALLOWED_PUBLISH","INTERNAL_SERVER_ERROR","UNKNOWN_ERROR","NOT_PACKAGE_UPLINK","UPLINK_OFFLINE_PUBLISH","UPLINK_OFFLINE","NOT_MODIFIED_NO_DATA","CONTENT_MISMATCH","NOT_FILE_UPLINK","MAX_USERS_REACHED","VERSION_NOT_EXIST","NO_SUCH_FILE","UNSUPORTED_REGISTRY_CALL","FILE_NOT_FOUND","REGISTRATION_DISABLED","UNAUTHORIZED_ACCESS","BAD_STATUS_CODE","PACKAGE_EXIST","BAD_AUTH_HEADER","WEB_DISABLED","DEPRECATED_BASIC_HEADER","BAD_FORMAT_USER_GROUP","RESOURCE_UNAVAILABLE","BAD_PACKAGE_DATA","USERNAME_PASSWORD_REQUIRED","USERNAME_ALREADY_REGISTERED","SUPPORT_ERRORS","PLUGIN_MISSING_INTERFACE","TFA_DISABLED","STORAGE_NOT_IMPLEMENT","PARAMETERS_NOT_VALID","APP_ERROR","CONFIG_NOT_VALID","PROFILE_ERROR","PASSWORD_VALIDATION","getError","code","message","httpError","createError","getConflict","HTTP_STATUS","CONFLICT","getBadData","customMessage","getBadRequest","BAD_REQUEST","getInternalError","INTERNAL_ERROR","getUnauthorized","UNAUTHORIZED","getForbidden","FORBIDDEN","getServiceUnavailable","SERVICE_UNAVAILABLE","getNotFound","NOT_FOUND","getCode","statusCode"],"sources":["../src/error-utils.ts"],"sourcesContent":["import createError, { HttpError } from 'http-errors';\n\nimport { HTTP_STATUS } from './constants';\n\nexport const API_ERROR = {\n  PASSWORD_SHORT: `The provided password does not pass the validation`,\n  MUST_BE_LOGGED: 'You must be logged in to publish packages.',\n  PLUGIN_ERROR: 'bug in the auth plugin system',\n  CONFIG_BAD_FORMAT: 'config file must be an object',\n  BAD_USERNAME_PASSWORD: 'bad username/password, access denied',\n  NO_PACKAGE: 'no such package available',\n  PACKAGE_CANNOT_BE_ADDED: 'this package cannot be added',\n  BAD_DATA: 'bad data',\n  NOT_ALLOWED: 'not allowed to access package',\n  NOT_ALLOWED_PUBLISH: 'not allowed to publish package',\n  INTERNAL_SERVER_ERROR: 'internal server error',\n  UNKNOWN_ERROR: 'unknown error',\n  NOT_PACKAGE_UPLINK: 'package does not exist on uplink',\n  UPLINK_OFFLINE_PUBLISH: 'one of the uplinks is down, refuse to publish',\n  UPLINK_OFFLINE: 'uplink is offline',\n  NOT_MODIFIED_NO_DATA: 'no data',\n  CONTENT_MISMATCH: 'content length mismatch',\n  NOT_FILE_UPLINK: \"file doesn't exist on uplink\",\n  MAX_USERS_REACHED: 'maximum amount of users reached',\n  VERSION_NOT_EXIST: \"this version doesn't exist\",\n  NO_SUCH_FILE: 'no such file available',\n  UNSUPORTED_REGISTRY_CALL: 'unsupported registry call',\n  FILE_NOT_FOUND: 'File not found',\n  REGISTRATION_DISABLED: 'user registration disabled',\n  UNAUTHORIZED_ACCESS: 'unauthorized access',\n  BAD_STATUS_CODE: 'bad status code',\n  PACKAGE_EXIST: 'this package is already present',\n  BAD_AUTH_HEADER: 'bad authorization header',\n  WEB_DISABLED: 'Web interface is disabled in the config file',\n  DEPRECATED_BASIC_HEADER: 'basic authentication is deprecated, please use JWT instead',\n  BAD_FORMAT_USER_GROUP: 'user groups is different than an array',\n  RESOURCE_UNAVAILABLE: 'resource unavailable',\n  BAD_PACKAGE_DATA: 'bad incoming package data',\n  USERNAME_PASSWORD_REQUIRED: 'username and password is required',\n  USERNAME_ALREADY_REGISTERED: 'username is already registered',\n};\n\nexport const SUPPORT_ERRORS = {\n  PLUGIN_MISSING_INTERFACE: 'the plugin does not provide implementation of the requested feature',\n  TFA_DISABLED: 'the two-factor authentication is not yet supported',\n  STORAGE_NOT_IMPLEMENT: 'the storage does not support token saving',\n  PARAMETERS_NOT_VALID: 'the parameters are not valid',\n};\n\nexport const APP_ERROR = {\n  CONFIG_NOT_VALID: 'CONFIG: it does not look like a valid config file',\n  PROFILE_ERROR: 'profile unexpected error',\n  PASSWORD_VALIDATION: 'not valid password',\n};\n\nexport type VerdaccioError = HttpError & { code: number };\n\nfunction getError(code: number, message: string): VerdaccioError {\n  const httpError = createError(code, message);\n\n  httpError.code = code;\n\n  return httpError as VerdaccioError;\n}\n\nexport function getConflict(message: string = API_ERROR.PACKAGE_EXIST): VerdaccioError {\n  return getError(HTTP_STATUS.CONFLICT, message);\n}\n\nexport function getBadData(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_DATA, customMessage || API_ERROR.BAD_DATA);\n}\n\nexport function getBadRequest(customMessage: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_REQUEST, customMessage);\n}\n\nexport function getInternalError(customMessage?: string): VerdaccioError {\n  return customMessage\n    ? getError(HTTP_STATUS.INTERNAL_ERROR, customMessage)\n    : getError(HTTP_STATUS.INTERNAL_ERROR, API_ERROR.UNKNOWN_ERROR);\n}\n\nexport function getUnauthorized(message = 'no credentials provided'): VerdaccioError {\n  return getError(HTTP_STATUS.UNAUTHORIZED, message);\n}\n\nexport function getForbidden(message = \"can't use this filename\"): VerdaccioError {\n  return getError(HTTP_STATUS.FORBIDDEN, message);\n}\n\nexport function getServiceUnavailable(\n  message: string = API_ERROR.RESOURCE_UNAVAILABLE\n): VerdaccioError {\n  return getError(HTTP_STATUS.SERVICE_UNAVAILABLE, message);\n}\n\nexport function getNotFound(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.NOT_FOUND, customMessage || API_ERROR.NO_PACKAGE);\n}\n\nexport function getCode(statusCode: number, customMessage: string): VerdaccioError {\n  return getError(statusCode, customMessage);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;;AAEA;;;;AAEO,MAAMA,SAAS,GAAG;EACvBC,cAAc,EAAG,oDADM;EAEvBC,cAAc,EAAE,4CAFO;EAGvBC,YAAY,EAAE,+BAHS;EAIvBC,iBAAiB,EAAE,+BAJI;EAKvBC,qBAAqB,EAAE,sCALA;EAMvBC,UAAU,EAAE,2BANW;EAOvBC,uBAAuB,EAAE,8BAPF;EAQvBC,QAAQ,EAAE,UARa;EASvBC,WAAW,EAAE,+BATU;EAUvBC,mBAAmB,EAAE,gCAVE;EAWvBC,qBAAqB,EAAE,uBAXA;EAYvBC,aAAa,EAAE,eAZQ;EAavBC,kBAAkB,EAAE,kCAbG;EAcvBC,sBAAsB,EAAE,+CAdD;EAevBC,cAAc,EAAE,mBAfO;EAgBvBC,oBAAoB,EAAE,SAhBC;EAiBvBC,gBAAgB,EAAE,yBAjBK;EAkBvBC,eAAe,EAAE,8BAlBM;EAmBvBC,iBAAiB,EAAE,iCAnBI;EAoBvBC,iBAAiB,EAAE,4BApBI;EAqBvBC,YAAY,EAAE,wBArBS;EAsBvBC,wBAAwB,EAAE,2BAtBH;EAuBvBC,cAAc,EAAE,gBAvBO;EAwBvBC,qBAAqB,EAAE,4BAxBA;EAyBvBC,mBAAmB,EAAE,qBAzBE;EA0BvBC,eAAe,EAAE,iBA1BM;EA2BvBC,aAAa,EAAE,iCA3BQ;EA4BvBC,eAAe,EAAE,0BA5BM;EA6BvBC,YAAY,EAAE,8CA7BS;EA8BvBC,uBAAuB,EAAE,4DA9BF;EA+BvBC,qBAAqB,EAAE,wCA/BA;EAgCvBC,oBAAoB,EAAE,sBAhCC;EAiCvBC,gBAAgB,EAAE,2BAjCK;EAkCvBC,0BAA0B,EAAE,mCAlCL;EAmCvBC,2BAA2B,EAAE;AAnCN,CAAlB;;AAsCA,MAAMC,cAAc,GAAG;EAC5BC,wBAAwB,EAAE,qEADE;EAE5BC,YAAY,EAAE,oDAFc;EAG5BC,qBAAqB,EAAE,2CAHK;EAI5BC,oBAAoB,EAAE;AAJM,CAAvB;;AAOA,MAAMC,SAAS,GAAG;EACvBC,gBAAgB,EAAE,mDADK;EAEvBC,aAAa,EAAE,0BAFQ;EAGvBC,mBAAmB,EAAE;AAHE,CAAlB;;;AAQP,SAASC,QAAT,CAAkBC,IAAlB,EAAgCC,OAAhC,EAAiE;EAC/D,MAAMC,SAAS,GAAG,IAAAC,mBAAA,EAAYH,IAAZ,EAAkBC,OAAlB,CAAlB;EAEAC,SAAS,CAACF,IAAV,GAAiBA,IAAjB;EAEA,OAAOE,SAAP;AACD;;AAEM,SAASE,WAAT,CAAqBH,OAAe,GAAG/C,SAAS,CAAC2B,aAAjD,EAAgF;EACrF,OAAOkB,QAAQ,CAACM,sBAAA,CAAYC,QAAb,EAAuBL,OAAvB,CAAf;AACD;;AAEM,SAASM,UAAT,CAAoBC,aAApB,EAA4D;EACjE,OAAOT,QAAQ,CAACM,sBAAA,CAAY3C,QAAb,EAAuB8C,aAAa,IAAItD,SAAS,CAACQ,QAAlD,CAAf;AACD;;AAEM,SAAS+C,aAAT,CAAuBD,aAAvB,EAA8D;EACnE,OAAOT,QAAQ,CAACM,sBAAA,CAAYK,WAAb,EAA0BF,aAA1B,CAAf;AACD;;AAEM,SAASG,gBAAT,CAA0BH,aAA1B,EAAkE;EACvE,OAAOA,aAAa,GAChBT,QAAQ,CAACM,sBAAA,CAAYO,cAAb,EAA6BJ,aAA7B,CADQ,GAEhBT,QAAQ,CAACM,sBAAA,CAAYO,cAAb,EAA6B1D,SAAS,CAACY,aAAvC,CAFZ;AAGD;;AAEM,SAAS+C,eAAT,CAAyBZ,OAAO,GAAG,yBAAnC,EAA8E;EACnF,OAAOF,QAAQ,CAACM,sBAAA,CAAYS,YAAb,EAA2Bb,OAA3B,CAAf;AACD;;AAEM,SAASc,YAAT,CAAsBd,OAAO,GAAG,yBAAhC,EAA2E;EAChF,OAAOF,QAAQ,CAACM,sBAAA,CAAYW,SAAb,EAAwBf,OAAxB,CAAf;AACD;;AAEM,SAASgB,qBAAT,CACLhB,OAAe,GAAG/C,SAAS,CAACgC,oBADvB,EAEW;EAChB,OAAOa,QAAQ,CAACM,sBAAA,CAAYa,mBAAb,EAAkCjB,OAAlC,CAAf;AACD;;AAEM,SAASkB,WAAT,CAAqBX,aAArB,EAA6D;EAClE,OAAOT,QAAQ,CAACM,sBAAA,CAAYe,SAAb,EAAwBZ,aAAa,IAAItD,SAAS,CAACM,UAAnD,CAAf;AACD;;AAEM,SAAS6D,OAAT,CAAiBC,UAAjB,EAAqCd,aAArC,EAA4E;EACjF,OAAOT,QAAQ,CAACuB,UAAD,EAAad,aAAb,CAAf;AACD"}

package/build/index.d.ts

@@ -5,9 +5,10 @@ import * as pkgUtils from './pkg-utils';
 import * as pluginUtils from './plugin-utils';
 import * as searchUtils from './search-utils';
 import * as streamUtils from './stream-utils';
+import * as stringUtils from './string-utils';
 import * as validatioUtils from './validation-utils';
 import * as warningUtils from './warning-utils';
 export { VerdaccioError, API_ERROR, SUPPORT_ERRORS, APP_ERROR } from './error-utils';
-export { TOKEN_BASIC, TOKEN_BEARER, HTTP_STATUS, API_MESSAGE, HEADERS, DIST_TAGS, CHARACTER_ENCODING, HEADER_TYPE, LATEST, DEFAULT_MIN_LIMIT_PASSWORD, DEFAULT_USER, USERS, } from './constants';
+export { TOKEN_BASIC, TOKEN_BEARER, HTTP_STATUS, API_MESSAGE, HEADERS, DIST_TAGS, CHARACTER_ENCODING, HEADER_TYPE, LATEST, DEFAULT_PASSWORD_VALIDATION, DEFAULT_USER, USERS, } from './constants';
 declare const validationUtils: typeof validatioUtils;
-export { fileUtils, pkgUtils, searchUtils, streamUtils, errorUtils, validatioUtils, validationUtils, constants, pluginUtils, warningUtils, };
+export { fileUtils, pkgUtils, searchUtils, streamUtils, errorUtils, validatioUtils, validationUtils, stringUtils, constants, pluginUtils, warningUtils, };

package/build/index.js

@@ -27,10 +27,10 @@ Object.defineProperty(exports, "CHARACTER_ENCODING", {
     return constants.CHARACTER_ENCODING;
   }
 });
-Object.defineProperty(exports, "DEFAULT_MIN_LIMIT_PASSWORD", {
+Object.defineProperty(exports, "DEFAULT_PASSWORD_VALIDATION", {
   enumerable: true,
   get: function () {
-    return constants.DEFAULT_MIN_LIMIT_PASSWORD;
+    return constants.DEFAULT_PASSWORD_VALIDATION;
   }
 });
 Object.defineProperty(exports, "DEFAULT_USER", {
@@ -99,7 +99,7 @@ Object.defineProperty(exports, "VerdaccioError", {
     return errorUtils.VerdaccioError;
   }
 });
-exports.warningUtils = exports.validationUtils = exports.validatioUtils = exports.streamUtils = exports.searchUtils = exports.pluginUtils = exports.pkgUtils = exports.fileUtils = exports.errorUtils = exports.constants = void 0;
+exports.warningUtils = exports.validationUtils = exports.validatioUtils = exports.stringUtils = exports.streamUtils = exports.searchUtils = exports.pluginUtils = exports.pkgUtils = exports.fileUtils = exports.errorUtils = exports.constants = void 0;
 
 var constants = _interopRequireWildcard(require("./constants"));
 
@@ -129,6 +129,10 @@ var streamUtils = _interopRequireWildcard(require("./stream-utils"));
 
 exports.streamUtils = streamUtils;
 
+var stringUtils = _interopRequireWildcard(require("./string-utils"));
+
+exports.stringUtils = stringUtils;
+
 var validatioUtils = _interopRequireWildcard(require("./validation-utils"));
 
 exports.validatioUtils = validatioUtils;

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["validationUtils","validatioUtils"],"sources":["../src/index.ts"],"sourcesContent":["import * as constants from './constants';\nimport * as errorUtils from './error-utils';\nimport * as fileUtils from './file-utils';\nimport * as pkgUtils from './pkg-utils';\nimport * as pluginUtils from './plugin-utils';\nimport * as searchUtils from './search-utils';\nimport * as streamUtils from './stream-utils';\nimport * as validatioUtils from './validation-utils';\nimport * as warningUtils from './warning-utils';\n\nexport { VerdaccioError, API_ERROR, SUPPORT_ERRORS, APP_ERROR } from './error-utils';\nexport {\n  TOKEN_BASIC,\n  TOKEN_BEARER,\n  HTTP_STATUS,\n  API_MESSAGE,\n  HEADERS,\n  DIST_TAGS,\n  CHARACTER_ENCODING,\n  HEADER_TYPE,\n  LATEST,\n  DEFAULT_MIN_LIMIT_PASSWORD,\n  DEFAULT_USER,\n  USERS,\n} from './constants';\nconst validationUtils = validatioUtils;\nexport {\n  fileUtils,\n  pkgUtils,\n  searchUtils,\n  streamUtils,\n  errorUtils,\n  // TODO: remove this typo\n  validatioUtils,\n  validationUtils,\n  constants,\n  pluginUtils,\n  warningUtils,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;;;;;AAiBA,MAAMA,eAAe,GAAGC,cAAxB"}
+{"version":3,"file":"index.js","names":["validationUtils","validatioUtils"],"sources":["../src/index.ts"],"sourcesContent":["import * as constants from './constants';\nimport * as errorUtils from './error-utils';\nimport * as fileUtils from './file-utils';\nimport * as pkgUtils from './pkg-utils';\nimport * as pluginUtils from './plugin-utils';\nimport * as searchUtils from './search-utils';\nimport * as streamUtils from './stream-utils';\nimport * as stringUtils from './string-utils';\nimport * as validatioUtils from './validation-utils';\nimport * as warningUtils from './warning-utils';\n\nexport { VerdaccioError, API_ERROR, SUPPORT_ERRORS, APP_ERROR } from './error-utils';\nexport {\n  TOKEN_BASIC,\n  TOKEN_BEARER,\n  HTTP_STATUS,\n  API_MESSAGE,\n  HEADERS,\n  DIST_TAGS,\n  CHARACTER_ENCODING,\n  HEADER_TYPE,\n  LATEST,\n  DEFAULT_PASSWORD_VALIDATION,\n  DEFAULT_USER,\n  USERS,\n} from './constants';\nconst validationUtils = validatioUtils;\nexport {\n  fileUtils,\n  pkgUtils,\n  searchUtils,\n  streamUtils,\n  errorUtils,\n  // TODO: remove this typo\n  validatioUtils,\n  validationUtils,\n  stringUtils,\n  constants,\n  pluginUtils,\n  warningUtils,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;AACA;;;;;;;;AAiBA,MAAMA,eAAe,GAAGC,cAAxB"}

package/build/string-utils.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Quality values, or q-values and q-factors, are used to describe the order
+ * of priority of values in a comma-separated list.
+ * It is a special syntax allowed in some HTTP headers and in HTML.
+ * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values
+ * @param headerValue
+ */
+export declare function getByQualityPriorityValue(headerValue: string | undefined | null): string;

package/build/string-utils.js

@@ -0,0 +1,44 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getByQualityPriorityValue = getByQualityPriorityValue;
+
+/**
+ * Quality values, or q-values and q-factors, are used to describe the order
+ * of priority of values in a comma-separated list.
+ * It is a special syntax allowed in some HTTP headers and in HTML.
+ * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values
+ * @param headerValue
+ */
+function getByQualityPriorityValue(headerValue) {
+  if (typeof headerValue !== 'string') {
+    return '';
+  }
+
+  const split = headerValue.split(',');
+
+  if (split.length <= 1) {
+    const qList = split[0].split(';');
+    return qList[0];
+  }
+
+  let [header] = split.reduce((acc, item) => {
+    const qList = item.split(';');
+
+    if (qList.length > 1) {
+      const [accept, q] = qList;
+      const [, query] = q.split('=');
+      acc.push([accept.trim(), query ? query : 0]);
+    } else {
+      acc.push([qList[0], 0]);
+    }
+
+    return acc;
+  }, []).sort(function (a, b) {
+    return b[1] - a[1];
+  });
+  return header[0];
+}
+//# sourceMappingURL=string-utils.js.map

package/build/string-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-utils.js","names":["getByQualityPriorityValue","headerValue","split","length","qList","header","reduce","acc","item","accept","q","query","push","trim","sort","a","b"],"sources":["../src/string-utils.ts"],"sourcesContent":["/**\n * Quality values, or q-values and q-factors, are used to describe the order\n * of priority of values in a comma-separated list.\n * It is a special syntax allowed in some HTTP headers and in HTML.\n * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values\n * @param headerValue\n */\nexport function getByQualityPriorityValue(headerValue: string | undefined | null): string {\n  if (typeof headerValue !== 'string') {\n    return '';\n  }\n\n  const split = headerValue.split(',');\n\n  if (split.length <= 1) {\n    const qList = split[0].split(';');\n    return qList[0];\n  }\n\n  let [header] = split\n    .reduce((acc, item: string) => {\n      const qList = item.split(';');\n      if (qList.length > 1) {\n        const [accept, q] = qList;\n        const [, query] = q.split('=');\n        acc.push([accept.trim(), query ? query : 0]);\n      } else {\n        acc.push([qList[0], 0]);\n      }\n      return acc;\n    }, [] as any)\n    .sort(function (a, b) {\n      return b[1] - a[1];\n    });\n  return header[0];\n}\n"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASA,yBAAT,CAAmCC,WAAnC,EAAmF;EACxF,IAAI,OAAOA,WAAP,KAAuB,QAA3B,EAAqC;IACnC,OAAO,EAAP;EACD;;EAED,MAAMC,KAAK,GAAGD,WAAW,CAACC,KAAZ,CAAkB,GAAlB,CAAd;;EAEA,IAAIA,KAAK,CAACC,MAAN,IAAgB,CAApB,EAAuB;IACrB,MAAMC,KAAK,GAAGF,KAAK,CAAC,CAAD,CAAL,CAASA,KAAT,CAAe,GAAf,CAAd;IACA,OAAOE,KAAK,CAAC,CAAD,CAAZ;EACD;;EAED,IAAI,CAACC,MAAD,IAAWH,KAAK,CACjBI,MADY,CACL,CAACC,GAAD,EAAMC,IAAN,KAAuB;IAC7B,MAAMJ,KAAK,GAAGI,IAAI,CAACN,KAAL,CAAW,GAAX,CAAd;;IACA,IAAIE,KAAK,CAACD,MAAN,GAAe,CAAnB,EAAsB;MACpB,MAAM,CAACM,MAAD,EAASC,CAAT,IAAcN,KAApB;MACA,MAAM,GAAGO,KAAH,IAAYD,CAAC,CAACR,KAAF,CAAQ,GAAR,CAAlB;MACAK,GAAG,CAACK,IAAJ,CAAS,CAACH,MAAM,CAACI,IAAP,EAAD,EAAgBF,KAAK,GAAGA,KAAH,GAAW,CAAhC,CAAT;IACD,CAJD,MAIO;MACLJ,GAAG,CAACK,IAAJ,CAAS,CAACR,KAAK,CAAC,CAAD,CAAN,EAAW,CAAX,CAAT;IACD;;IACD,OAAOG,GAAP;EACD,CAXY,EAWV,EAXU,EAYZO,IAZY,CAYP,UAAUC,CAAV,EAAaC,CAAb,EAAgB;IACpB,OAAOA,CAAC,CAAC,CAAD,CAAD,GAAOD,CAAC,CAAC,CAAD,CAAf;EACD,CAdY,CAAf;EAeA,OAAOV,MAAM,CAAC,CAAD,CAAb;AACD"}

package/build/validation-utils.d.ts

@@ -27,3 +27,4 @@ export declare function normalizeMetadata(manifest: Manifest, name: string): Man
  * @return {Boolean}
  */
 export declare function isObject(obj: any): boolean;
+export declare function validatePassword(password: string, validation?: RegExp): boolean;

package/build/validation-utils.js

@@ -8,6 +8,7 @@ exports.isPackageNameScoped = isPackageNameScoped;
 exports.normalizeMetadata = normalizeMetadata;
 exports.validateName = validateName;
 exports.validatePackage = validatePackage;
+exports.validatePassword = validatePassword;
 Object.defineProperty(exports, "validatePublishSingleVersion", {
   enumerable: true,
   get: function () {
@@ -123,4 +124,8 @@ function isObject(obj) {
 
   return (typeof obj === 'object' || typeof obj.prototype === 'undefined') && Array.isArray(obj) === false;
 }
+
+function validatePassword(password, validation = _constants.DEFAULT_PASSWORD_VALIDATION) {
+  return typeof password === 'string' && validation instanceof RegExp ? password.match(validation) !== null : false;
+}
 //# sourceMappingURL=validation-utils.js.map

package/build/validation-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation-utils.js","names":["isPackageNameScoped","name","startsWith","validateName","normalizedName","toLowerCase","isScoped","scopedName","split","match","includes","validatePackage","nameList","length","slice","normalizeMetadata","manifest","assert","strictEqual","_manifest","isObject","DIST_TAGS","obj","prototype","Array","isArray"],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { Manifest } from '@verdaccio/types';\n\nimport { DIST_TAGS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n * FUTURE: rename to normalizeMetadata\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  // This may not be nee dit\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n    return false;\n  }\n\n  return (\n    (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n    Array.isArray(obj) === false\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA;;AAIA;;AAEA;;;;AAEO,SAASA,mBAAT,CAA6BC,IAA7B,EAAoD;EACzD,OAAOA,IAAI,CAACC,UAAL,CAAgB,GAAhB,CAAP;AACD;AAED;AACA;AACA;AACA;AACA;;;AACO,SAASC,YAAT,CAAsBF,IAAtB,EAA6C;EAClD,IAAI,OAAOA,IAAP,KAAgB,QAApB,EAA8B;IAC5B,OAAO,KAAP;EACD;;EAED,IAAIG,cAAsB,GAAGH,IAAI,CAACI,WAAL,EAA7B;EAEA,MAAMC,QAAiB,GAAGN,mBAAmB,CAACC,IAAD,CAA7C;EACA,MAAMM,UAAU,GAAGN,IAAI,CAACO,KAAL,CAAW,GAAX,EAAgB,CAAhB,EAAmB,CAAnB,CAAnB;;EAEA,IAAIF,QAAQ,IAAI,OAAOC,UAAP,KAAsB,WAAtC,EAAmD;IACjDH,cAAc,GAAGG,UAAU,CAACF,WAAX,EAAjB;EACD;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;EACE,OAAO,EACL,CAACD,cAAc,CAACK,KAAf,CAAqB,0BAArB,CAAD,IACAL,cAAc,CAACF,UAAf,CAA0B,GAA1B,CADA,IACkC;EAClC,CAAC,cAAD,EAAiB,WAAjB,EAA8B,aAA9B,EAA6CQ,QAA7C,CAAsDN,cAAtD,CAHK,CAAP;AAKD;AAED;AACA;AACA;AACA;;;AACO,SAASO,eAAT,CAAyBV,IAAzB,EAAgD;EACrD,MAAMW,QAAQ,GAAGX,IAAI,CAACO,KAAL,CAAW,GAAX,EAAgB,CAAhB,CAAjB;;EACA,IAAII,QAAQ,CAACC,MAAT,KAAoB,CAAxB,EAA2B;IACzB;IACA,OAAOV,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAT,CAAnB;EACD,CALoD,CAMrD;;;EACA,OAAOA,QAAQ,CAAC,CAAD,CAAR,CAAY,CAAZ,MAAmB,GAAnB,IAA0BT,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAR,CAAYE,KAAZ,CAAkB,CAAlB,CAAD,CAAtC,IAAgEX,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAT,CAAnF;AACD;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AACO,SAASG,iBAAT,CAA2BC,QAA3B,EAA+Cf,IAA/C,EAAuE;EAC5EgB,eAAA,CAAOC,WAAP,CAAmBF,QAAQ,CAACf,IAA5B,EAAkCA,IAAlC;;EACA,MAAMkB,SAAS,GAAG,EAAE,GAAGH;EAAL,CAAlB;;EAEA,IAAI,CAACI,QAAQ,CAACJ,QAAQ,CAACK,oBAAD,CAAT,CAAb,EAAoC;IAClCF,SAAS,CAACE,oBAAD,CAAT,GAAuB,EAAvB;EACD,CAN2E,CAQ5E;;;EACA,IAAI,CAACD,QAAQ,CAACJ,QAAQ,CAAC,UAAD,CAAT,CAAb,EAAqC;IACnCG,SAAS,CAAC,UAAD,CAAT,GAAwB,EAAxB;EACD;;EAED,IAAI,CAACC,QAAQ,CAACJ,QAAQ,CAAC,MAAD,CAAT,CAAb,EAAiC;IAC/BG,SAAS,CAAC,MAAD,CAAT,GAAoB,EAApB;EACD;;EAED,OAAOA,SAAP;AACD;AAED;AACA;AACA;AACA;AACA;;;AACO,SAASC,QAAT,CAAkBE,GAAlB,EAAqC;EAC1C,IAAIA,GAAG,KAAK,IAAR,IAAgB,OAAOA,GAAP,KAAe,WAA/B,IAA8C,OAAOA,GAAP,KAAe,QAAjE,EAA2E;IACzE,OAAO,KAAP;EACD;;EAED,OACE,CAAC,OAAOA,GAAP,KAAe,QAAf,IAA2B,OAAOA,GAAG,CAACC,SAAX,KAAyB,WAArD,KACAC,KAAK,CAACC,OAAN,CAAcH,GAAd,MAAuB,KAFzB;AAID"}
+{"version":3,"file":"validation-utils.js","names":["isPackageNameScoped","name","startsWith","validateName","normalizedName","toLowerCase","isScoped","scopedName","split","match","includes","validatePackage","nameList","length","slice","normalizeMetadata","manifest","assert","strictEqual","_manifest","isObject","DIST_TAGS","obj","prototype","Array","isArray","validatePassword","password","validation","DEFAULT_PASSWORD_VALIDATION","RegExp"],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { Manifest } from '@verdaccio/types';\n\nimport { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n * FUTURE: rename to normalizeMetadata\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  // This may not be nee dit\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n    return false;\n  }\n\n  return (\n    (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n    Array.isArray(obj) === false\n  );\n}\n\nexport function validatePassword(\n  password: string,\n  validation: RegExp = DEFAULT_PASSWORD_VALIDATION\n): boolean {\n  return typeof password === 'string' && validation instanceof RegExp\n    ? password.match(validation) !== null\n    : false;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;;AAIA;;AAEA;;;;AAEO,SAASA,mBAAT,CAA6BC,IAA7B,EAAoD;EACzD,OAAOA,IAAI,CAACC,UAAL,CAAgB,GAAhB,CAAP;AACD;AAED;AACA;AACA;AACA;AACA;;;AACO,SAASC,YAAT,CAAsBF,IAAtB,EAA6C;EAClD,IAAI,OAAOA,IAAP,KAAgB,QAApB,EAA8B;IAC5B,OAAO,KAAP;EACD;;EAED,IAAIG,cAAsB,GAAGH,IAAI,CAACI,WAAL,EAA7B;EAEA,MAAMC,QAAiB,GAAGN,mBAAmB,CAACC,IAAD,CAA7C;EACA,MAAMM,UAAU,GAAGN,IAAI,CAACO,KAAL,CAAW,GAAX,EAAgB,CAAhB,EAAmB,CAAnB,CAAnB;;EAEA,IAAIF,QAAQ,IAAI,OAAOC,UAAP,KAAsB,WAAtC,EAAmD;IACjDH,cAAc,GAAGG,UAAU,CAACF,WAAX,EAAjB;EACD;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;EACE,OAAO,EACL,CAACD,cAAc,CAACK,KAAf,CAAqB,0BAArB,CAAD,IACAL,cAAc,CAACF,UAAf,CAA0B,GAA1B,CADA,IACkC;EAClC,CAAC,cAAD,EAAiB,WAAjB,EAA8B,aAA9B,EAA6CQ,QAA7C,CAAsDN,cAAtD,CAHK,CAAP;AAKD;AAED;AACA;AACA;AACA;;;AACO,SAASO,eAAT,CAAyBV,IAAzB,EAAgD;EACrD,MAAMW,QAAQ,GAAGX,IAAI,CAACO,KAAL,CAAW,GAAX,EAAgB,CAAhB,CAAjB;;EACA,IAAII,QAAQ,CAACC,MAAT,KAAoB,CAAxB,EAA2B;IACzB;IACA,OAAOV,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAT,CAAnB;EACD,CALoD,CAMrD;;;EACA,OAAOA,QAAQ,CAAC,CAAD,CAAR,CAAY,CAAZ,MAAmB,GAAnB,IAA0BT,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAR,CAAYE,KAAZ,CAAkB,CAAlB,CAAD,CAAtC,IAAgEX,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAT,CAAnF;AACD;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AACO,SAASG,iBAAT,CAA2BC,QAA3B,EAA+Cf,IAA/C,EAAuE;EAC5EgB,eAAA,CAAOC,WAAP,CAAmBF,QAAQ,CAACf,IAA5B,EAAkCA,IAAlC;;EACA,MAAMkB,SAAS,GAAG,EAAE,GAAGH;EAAL,CAAlB;;EAEA,IAAI,CAACI,QAAQ,CAACJ,QAAQ,CAACK,oBAAD,CAAT,CAAb,EAAoC;IAClCF,SAAS,CAACE,oBAAD,CAAT,GAAuB,EAAvB;EACD,CAN2E,CAQ5E;;;EACA,IAAI,CAACD,QAAQ,CAACJ,QAAQ,CAAC,UAAD,CAAT,CAAb,EAAqC;IACnCG,SAAS,CAAC,UAAD,CAAT,GAAwB,EAAxB;EACD;;EAED,IAAI,CAACC,QAAQ,CAACJ,QAAQ,CAAC,MAAD,CAAT,CAAb,EAAiC;IAC/BG,SAAS,CAAC,MAAD,CAAT,GAAoB,EAApB;EACD;;EAED,OAAOA,SAAP;AACD;AAED;AACA;AACA;AACA;AACA;;;AACO,SAASC,QAAT,CAAkBE,GAAlB,EAAqC;EAC1C,IAAIA,GAAG,KAAK,IAAR,IAAgB,OAAOA,GAAP,KAAe,WAA/B,IAA8C,OAAOA,GAAP,KAAe,QAAjE,EAA2E;IACzE,OAAO,KAAP;EACD;;EAED,OACE,CAAC,OAAOA,GAAP,KAAe,QAAf,IAA2B,OAAOA,GAAG,CAACC,SAAX,KAAyB,WAArD,KACAC,KAAK,CAACC,OAAN,CAAcH,GAAd,MAAuB,KAFzB;AAID;;AAEM,SAASI,gBAAT,CACLC,QADK,EAELC,UAAkB,GAAGC,sCAFhB,EAGI;EACT,OAAO,OAAOF,QAAP,KAAoB,QAApB,IAAgCC,UAAU,YAAYE,MAAtD,GACHH,QAAQ,CAAClB,KAAT,CAAemB,UAAf,MAA+B,IAD5B,GAEH,KAFJ;AAGD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "6.0.0-6-next.8",
+  "version": "6.0.0-6-next.48",
   "description": "core utilities",
   "keywords": [
     "private",
@@ -39,11 +39,11 @@
     "semver": "7.3.7",
     "ajv": "8.11.0",
     "process-warning": "1.0.0",
-    "core-js": "3.25.0"
+    "core-js": "3.25.2"
   },
   "devDependencies": {
     "lodash": "4.17.21",
-    "@verdaccio/types": "11.0.0-6-next.16"
+    "@verdaccio/types": "11.0.0-6-next.17"
   },
   "funding": {
     "type": "opencollective",

package/src/constants.ts

@@ -1,6 +1,6 @@
 import httpCodes from 'http-status-codes';
 
-export const DEFAULT_MIN_LIMIT_PASSWORD = 3;
+export const DEFAULT_PASSWORD_VALIDATION = /.{3}$/;
 export const TIME_EXPIRATION_24H = '24h';
 export const TIME_EXPIRATION_7D = '7d';
 export const DIST_TAGS = 'dist-tags';
@@ -46,6 +46,7 @@ export const HEADERS = {
   NONE_MATCH: 'If-None-Match',
   ETAG: 'ETag',
   JSON_CHARSET: 'application/json; charset=utf-8',
+  JSON_INSTALL_CHARSET: 'application/vnd.npm.install-v1+json; charset=utf-8',
   OCTET_STREAM: 'application/octet-stream; charset=utf-8',
   TEXT_CHARSET: 'text/plain; charset=utf-8',
   WWW_AUTH: 'WWW-Authenticate',

package/src/error-utils.ts

@@ -1,11 +1,9 @@
 import createError, { HttpError } from 'http-errors';
 
-import { DEFAULT_MIN_LIMIT_PASSWORD, HTTP_STATUS } from './constants';
+import { HTTP_STATUS } from './constants';
 
 export const API_ERROR = {
-  PASSWORD_SHORT: (passLength = DEFAULT_MIN_LIMIT_PASSWORD): string =>
-    `The provided password is too short. Please pick a password longer than ` +
-    `${passLength} characters.`,
+  PASSWORD_SHORT: `The provided password does not pass the validation`,
   MUST_BE_LOGGED: 'You must be logged in to publish packages.',
   PLUGIN_ERROR: 'bug in the auth plugin system',
   CONFIG_BAD_FORMAT: 'config file must be an object',

package/src/index.ts

@@ -5,6 +5,7 @@ import * as pkgUtils from './pkg-utils';
 import * as pluginUtils from './plugin-utils';
 import * as searchUtils from './search-utils';
 import * as streamUtils from './stream-utils';
+import * as stringUtils from './string-utils';
 import * as validatioUtils from './validation-utils';
 import * as warningUtils from './warning-utils';
 
@@ -19,7 +20,7 @@ export {
   CHARACTER_ENCODING,
   HEADER_TYPE,
   LATEST,
-  DEFAULT_MIN_LIMIT_PASSWORD,
+  DEFAULT_PASSWORD_VALIDATION,
   DEFAULT_USER,
   USERS,
 } from './constants';
@@ -33,6 +34,7 @@ export {
   // TODO: remove this typo
   validatioUtils,
   validationUtils,
+  stringUtils,
   constants,
   pluginUtils,
   warningUtils,

package/src/string-utils.ts

@@ -0,0 +1,36 @@
+/**
+ * Quality values, or q-values and q-factors, are used to describe the order
+ * of priority of values in a comma-separated list.
+ * It is a special syntax allowed in some HTTP headers and in HTML.
+ * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values
+ * @param headerValue
+ */
+export function getByQualityPriorityValue(headerValue: string | undefined | null): string {
+  if (typeof headerValue !== 'string') {
+    return '';
+  }
+
+  const split = headerValue.split(',');
+
+  if (split.length <= 1) {
+    const qList = split[0].split(';');
+    return qList[0];
+  }
+
+  let [header] = split
+    .reduce((acc, item: string) => {
+      const qList = item.split(';');
+      if (qList.length > 1) {
+        const [accept, q] = qList;
+        const [, query] = q.split('=');
+        acc.push([accept.trim(), query ? query : 0]);
+      } else {
+        acc.push([qList[0], 0]);
+      }
+      return acc;
+    }, [] as any)
+    .sort(function (a, b) {
+      return b[1] - a[1];
+    });
+  return header[0];
+}

package/src/validation-utils.ts

@@ -2,7 +2,7 @@ import assert from 'assert';
 
 import { Manifest } from '@verdaccio/types';
 
-import { DIST_TAGS } from './constants';
+import { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS } from './constants';
 
 export { validatePublishSingleVersion } from './schemes/publish-manifest';
 
@@ -104,3 +104,12 @@ export function isObject(obj: any): boolean {
     Array.isArray(obj) === false
   );
 }
+
+export function validatePassword(
+  password: string,
+  validation: RegExp = DEFAULT_PASSWORD_VALIDATION
+): boolean {
+  return typeof password === 'string' && validation instanceof RegExp
+    ? password.match(validation) !== null
+    : false;
+}

package/test/string-utils.spec.ts

@@ -0,0 +1,40 @@
+import { stringUtils } from '../src';
+
+describe('string-utils', () => {
+  test('getByQualityPriorityValue', () => {
+    expect(stringUtils.getByQualityPriorityValue('')).toEqual('');
+    expect(stringUtils.getByQualityPriorityValue(null)).toEqual('');
+    expect(stringUtils.getByQualityPriorityValue(undefined)).toEqual('');
+    expect(stringUtils.getByQualityPriorityValue('something')).toEqual('something');
+    expect(stringUtils.getByQualityPriorityValue('something,')).toEqual('something');
+    expect(stringUtils.getByQualityPriorityValue('0,')).toEqual('0');
+    expect(stringUtils.getByQualityPriorityValue('application/json')).toEqual('application/json');
+    expect(stringUtils.getByQualityPriorityValue('application/json; q=1')).toEqual(
+      'application/json'
+    );
+    expect(stringUtils.getByQualityPriorityValue('application/json; q=')).toEqual(
+      'application/json'
+    );
+    expect(stringUtils.getByQualityPriorityValue('application/json;')).toEqual('application/json');
+    expect(
+      stringUtils.getByQualityPriorityValue(
+        'application/json; q=1.0, application/vnd.npm.install-v1+json; q=0.9, */*'
+      )
+    ).toEqual('application/json');
+    expect(
+      stringUtils.getByQualityPriorityValue(
+        'application/json; q=1.0, application/vnd.npm.install-v1+json; q=, */*'
+      )
+    ).toEqual('application/json');
+    expect(
+      stringUtils.getByQualityPriorityValue(
+        'application/vnd.npm.install-v1+json; q=1.0, application/json; q=0.9, */*'
+      )
+    ).toEqual('application/vnd.npm.install-v1+json');
+    expect(
+      stringUtils.getByQualityPriorityValue(
+        'application/vnd.npm.install-v1+json; q=, application/json; q=0.9, */*'
+      )
+    ).toEqual('application/json');
+  });
+});

package/test/validation-utilts.spec.ts

@@ -1,10 +1,11 @@
-import { DIST_TAGS } from '../src/constants';
+import { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS } from '../src/constants';
 import { validatePublishSingleVersion } from '../src/schemes/publish-manifest';
 import {
   isObject,
   normalizeMetadata,
   validateName,
   validatePackage,
+  validatePassword,
 } from '../src/validation-utils';
 
 describe('validatePackage', () => {
@@ -166,3 +167,53 @@ describe('validatePublishSingleVersion', () => {
     ).toBeFalsy();
   });
 });
+
+describe('validatePassword', () => {
+  test('should validate password according the length', () => {
+    expect(validatePassword('12345', DEFAULT_PASSWORD_VALIDATION)).toBeTruthy();
+  });
+
+  test('should validate invalid regex', () => {
+    // @ts-expect-error
+    expect(validatePassword('12345', 34234342)).toBeFalsy();
+  });
+
+  test('should validate invalid regex (undefined)', () => {
+    expect(validatePassword('12345', undefined)).toBeTruthy();
+  });
+
+  test('should validate invalid password)', () => {
+    // @ts-expect-error
+    expect(validatePassword(undefined)).toBeFalsy();
+  });
+
+  test('should validate invalid password number)', () => {
+    // @ts-expect-error
+    expect(validatePassword(2342344234342)).toBeFalsy();
+  });
+
+  test('should fails on validate password according the length', () => {
+    expect(validatePassword('12345', /.{10}$/)).toBeFalsy();
+  });
+
+  test('should fails handle complex password validation', () => {
+    expect(validatePassword('12345', /^(?=.*[A-Za-z])(?=.*\d)[A-Za-z\d]{8,}$/)).toBeFalsy();
+  });
+
+  test('should handle complex password validation', () => {
+    expect(
+      validatePassword(
+        'c<?_:srdsj&WyZgY}r4:l[F<RgV<}',
+        /^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-]).{8,}$/
+      )
+    ).toBeTruthy();
+  });
+
+  test('should fails on validate password according the length and default config', () => {
+    expect(validatePassword('12')).toBeFalsy();
+  });
+
+  test('should validate password according the length and default config', () => {
+    expect(validatePassword('1235678910')).toBeTruthy();
+  });
+});