@verdaccio/core 8.0.0-next-8.3 → 8.0.0-next-8.5

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @verdaccio/core
 
+## 8.0.0-next-8.5
+
+### Patch Changes
+
+- 64a7fc0: chore(core): typing, naming, and docs of parameters
+- 5cbee6f: fix: unpublish a package on storage package
+- a049bba: chore(tests): temp folder naming
+
+## 8.0.0-next-8.4
+
+### Patch Changes
+
+- 48aa89f: chore: request header constants
+- 58e0d95: fix(middleware): error 404 when getting scoped tarballs
+
 ## 8.0.0-next-8.3
 
 ## 8.0.0-next-8.2

package/build/constants.d.ts

@@ -37,6 +37,10 @@ export declare const HEADERS: {
     CSP: string;
     CTO: string;
     XSS: string;
+    CLIENT: string;
+    POWERED_BY: string;
+    RATELIMIT_LIMIT: string;
+    RATELIMIT_REMAINING: string;
     NONE_MATCH: string;
     ETAG: string;
     JSON_CHARSET: string;
@@ -45,6 +49,7 @@ export declare const HEADERS: {
     TEXT_CHARSET: string;
     WWW_AUTH: string;
     GZIP: string;
+    HOST: string;
 };
 export declare const HTTP_STATUS: {
     OK: number;

package/build/constants.js

@@ -49,6 +49,10 @@ const HEADERS = exports.HEADERS = {
   CSP: 'Content-Security-Policy',
   CTO: 'X-Content-Type-Options',
   XSS: 'X-XSS-Protection',
+  CLIENT: 'X-Client',
+  POWERED_BY: 'X-Powered-By',
+  RATELIMIT_LIMIT: 'X-RateLimit-Limit',
+  RATELIMIT_REMAINING: 'X-RateLimit-Remaining',
   NONE_MATCH: 'If-None-Match',
   ETAG: 'ETag',
   JSON_CHARSET: 'application/json; charset=utf-8',
@@ -56,7 +60,8 @@ const HEADERS = exports.HEADERS = {
   OCTET_STREAM: 'application/octet-stream; charset=utf-8',
   TEXT_CHARSET: 'text/plain; charset=utf-8',
   WWW_AUTH: 'WWW-Authenticate',
-  GZIP: 'gzip'
+  GZIP: 'gzip',
+  HOST: 'host'
 };
 const HTTP_STATUS = exports.HTTP_STATUS = {
   OK: _httpStatusCodes.default.OK,

package/build/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","names":["_httpStatusCodes","_interopRequireDefault","require","e","__esModule","default","DEFAULT_PASSWORD_VALIDATION","exports","TIME_EXPIRATION_24H","TIME_EXPIRATION_1H","DIST_TAGS","LATEST","USERS","MAINTAINERS","DEFAULT_USER","HEADER_TYPE","CONTENT_ENCODING","CONTENT_TYPE","CONTENT_LENGTH","ACCEPT_ENCODING","AUTHORIZATION","CHARACTER_ENCODING","UTF8","TOKEN_BASIC","TOKEN_BEARER","HEADERS","ACCEPT","USER_AGENT","JSON","TEXT_PLAIN","TEXT_PLAIN_UTF8","TEXT_HTML_UTF8","TEXT_HTML","CACHE_CONTROL","FORWARDED_PROTO","FORWARDED_FOR","FRAMES_OPTIONS","CSP","CTO","XSS","NONE_MATCH","ETAG","JSON_CHARSET","JSON_INSTALL_CHARSET","OCTET_STREAM","TEXT_CHARSET","WWW_AUTH","GZIP","HTTP_STATUS","OK","httpCodes","CREATED","MULTIPLE_CHOICES","NOT_MODIFIED","BAD_REQUEST","UNAUTHORIZED","FORBIDDEN","NOT_FOUND","CONFLICT","NOT_IMPLEMENTED","UNSUPPORTED_MEDIA","UNSUPPORTED_MEDIA_TYPE","BAD_DATA","UNPROCESSABLE_ENTITY","INTERNAL_ERROR","INTERNAL_SERVER_ERROR","SERVICE_UNAVAILABLE","LOOP_DETECTED","CANNOT_HANDLE","ERROR_CODE","token_required","API_MESSAGE","PKG_CREATED","PKG_CHANGED","PKG_REMOVED","PKG_PUBLISHED","TARBALL_UPLOADED","TARBALL_REMOVED","TAG_UPDATED","TAG_REMOVED","TAG_ADDED","LOGGED_OUT","LOG_STATUS_MESSAGE","LOG_VERDACCIO_ERROR","LOG_VERDACCIO_BYTES","ROLES","$ALL","ALL","$AUTH","$ANONYMOUS","DEPRECATED_ALL","DEPRECATED_AUTH","DEPRECATED_ANONYMOUS","PACKAGE_ACCESS","SCOPE","HtpasswdHashAlgorithm","PLUGIN_CATEGORY","AUTHENTICATION","MIDDLEWARE","STORAGE","FILTER","THEME"],"sources":["../src/constants.ts"],"sourcesContent":["import httpCodes from 'http-status-codes';\n\nexport const DEFAULT_PASSWORD_VALIDATION = /.{3}$/;\nexport const TIME_EXPIRATION_24H = '24h';\nexport const TIME_EXPIRATION_1H = '1h';\nexport const DIST_TAGS = 'dist-tags';\nexport const LATEST = 'latest';\nexport const USERS = 'users';\nexport const MAINTAINERS = 'maintainers';\nexport const DEFAULT_USER = 'Anonymous';\n\nexport const HEADER_TYPE = {\n  CONTENT_ENCODING: 'content-encoding',\n  CONTENT_TYPE: 'content-type',\n  CONTENT_LENGTH: 'content-length',\n  ACCEPT_ENCODING: 'accept-encoding',\n  AUTHORIZATION: 'authorization',\n};\n\nexport const CHARACTER_ENCODING = {\n  UTF8: 'utf8',\n};\n\n// @deprecated use Bearer instead\nexport const TOKEN_BASIC = 'Basic';\nexport const TOKEN_BEARER = 'Bearer';\n\nexport const HEADERS = {\n  ACCEPT: 'Accept',\n  ACCEPT_ENCODING: 'Accept-Encoding',\n  USER_AGENT: 'User-Agent',\n  JSON: 'application/json',\n  CONTENT_TYPE: 'Content-type',\n  CONTENT_LENGTH: 'content-length',\n  TEXT_PLAIN: 'text/plain',\n  TEXT_PLAIN_UTF8: 'text/plain; charset=utf-8',\n  TEXT_HTML_UTF8: 'text/html; charset=utf-8',\n  TEXT_HTML: 'text/html',\n  AUTHORIZATION: 'authorization',\n  CACHE_CONTROL: 'Cache-Control',\n  // only set with proxy that setup HTTPS\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto\n  FORWARDED_PROTO: 'X-Forwarded-Proto',\n  FORWARDED_FOR: 'X-Forwarded-For',\n  FRAMES_OPTIONS: 'X-Frame-Options',\n  CSP: 'Content-Security-Policy',\n  CTO: 'X-Content-Type-Options',\n  XSS: 'X-XSS-Protection',\n  NONE_MATCH: 'If-None-Match',\n  ETAG: 'ETag',\n  JSON_CHARSET: 'application/json; charset=utf-8',\n  JSON_INSTALL_CHARSET: 'application/vnd.npm.install-v1+json; charset=utf-8',\n  OCTET_STREAM: 'application/octet-stream; charset=utf-8',\n  TEXT_CHARSET: 'text/plain; charset=utf-8',\n  WWW_AUTH: 'WWW-Authenticate',\n  GZIP: 'gzip',\n};\n\nexport const HTTP_STATUS = {\n  OK: httpCodes.OK,\n  CREATED: httpCodes.CREATED,\n  MULTIPLE_CHOICES: httpCodes.MULTIPLE_CHOICES,\n  NOT_MODIFIED: httpCodes.NOT_MODIFIED,\n  BAD_REQUEST: httpCodes.BAD_REQUEST,\n  UNAUTHORIZED: httpCodes.UNAUTHORIZED,\n  FORBIDDEN: httpCodes.FORBIDDEN,\n  NOT_FOUND: httpCodes.NOT_FOUND,\n  CONFLICT: httpCodes.CONFLICT,\n  NOT_IMPLEMENTED: httpCodes.NOT_IMPLEMENTED,\n  UNSUPPORTED_MEDIA: httpCodes.UNSUPPORTED_MEDIA_TYPE,\n  BAD_DATA: httpCodes.UNPROCESSABLE_ENTITY,\n  INTERNAL_ERROR: httpCodes.INTERNAL_SERVER_ERROR,\n  SERVICE_UNAVAILABLE: httpCodes.SERVICE_UNAVAILABLE,\n  LOOP_DETECTED: 508,\n  CANNOT_HANDLE: 590,\n};\n\nexport const ERROR_CODE = {\n  token_required: 'token is required',\n};\n\nexport const API_MESSAGE = {\n  PKG_CREATED: 'created new package',\n  PKG_CHANGED: 'package changed',\n  PKG_REMOVED: 'package removed',\n  PKG_PUBLISHED: 'package published',\n  TARBALL_UPLOADED: 'tarball uploaded successfully',\n  TARBALL_REMOVED: 'tarball removed',\n  TAG_UPDATED: 'tags updated',\n  TAG_REMOVED: 'tag removed',\n  TAG_ADDED: 'package tagged',\n  OK: 'ok',\n  LOGGED_OUT: 'Logged out',\n};\n\nexport const LOG_STATUS_MESSAGE =\n  \"@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'\";\nexport const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;\nexport const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;\n\nexport const ROLES = {\n  $ALL: '$all',\n  ALL: 'all',\n  $AUTH: '$authenticated',\n  $ANONYMOUS: '$anonymous',\n  DEPRECATED_ALL: '@all',\n  DEPRECATED_AUTH: '@authenticated',\n  DEPRECATED_ANONYMOUS: '@anonymous',\n};\n\nexport const PACKAGE_ACCESS = {\n  SCOPE: '@*/*',\n  ALL: '**',\n};\n\nexport enum HtpasswdHashAlgorithm {\n  md5 = 'md5',\n  sha1 = 'sha1',\n  crypt = 'crypt',\n  bcrypt = 'bcrypt',\n}\n\nexport const PLUGIN_CATEGORY = {\n  AUTHENTICATION: 'authentication',\n  MIDDLEWARE: 'middleware',\n  STORAGE: 'storage',\n  FILTER: 'filter',\n  THEME: 'theme',\n};\n"],"mappings":";;;;;;AAAA,IAAAA,gBAAA,GAAAC,sBAAA,CAAAC,OAAA;AAA0C,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEnC,MAAMG,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GAAG,OAAO;AAC3C,MAAME,mBAAmB,GAAAD,OAAA,CAAAC,mBAAA,GAAG,KAAK;AACjC,MAAMC,kBAAkB,GAAAF,OAAA,CAAAE,kBAAA,GAAG,IAAI;AAC/B,MAAMC,SAAS,GAAAH,OAAA,CAAAG,SAAA,GAAG,WAAW;AAC7B,MAAMC,MAAM,GAAAJ,OAAA,CAAAI,MAAA,GAAG,QAAQ;AACvB,MAAMC,KAAK,GAAAL,OAAA,CAAAK,KAAA,GAAG,OAAO;AACrB,MAAMC,WAAW,GAAAN,OAAA,CAAAM,WAAA,GAAG,aAAa;AACjC,MAAMC,YAAY,GAAAP,OAAA,CAAAO,YAAA,GAAG,WAAW;AAEhC,MAAMC,WAAW,GAAAR,OAAA,CAAAQ,WAAA,GAAG;EACzBC,gBAAgB,EAAE,kBAAkB;EACpCC,YAAY,EAAE,cAAc;EAC5BC,cAAc,EAAE,gBAAgB;EAChCC,eAAe,EAAE,iBAAiB;EAClCC,aAAa,EAAE;AACjB,CAAC;AAEM,MAAMC,kBAAkB,GAAAd,OAAA,CAAAc,kBAAA,GAAG;EAChCC,IAAI,EAAE;AACR,CAAC;;AAED;AACO,MAAMC,WAAW,GAAAhB,OAAA,CAAAgB,WAAA,GAAG,OAAO;AAC3B,MAAMC,YAAY,GAAAjB,OAAA,CAAAiB,YAAA,GAAG,QAAQ;AAE7B,MAAMC,OAAO,GAAAlB,OAAA,CAAAkB,OAAA,GAAG;EACrBC,MAAM,EAAE,QAAQ;EAChBP,eAAe,EAAE,iBAAiB;EAClCQ,UAAU,EAAE,YAAY;EACxBC,IAAI,EAAE,kBAAkB;EACxBX,YAAY,EAAE,cAAc;EAC5BC,cAAc,EAAE,gBAAgB;EAChCW,UAAU,EAAE,YAAY;EACxBC,eAAe,EAAE,2BAA2B;EAC5CC,cAAc,EAAE,0BAA0B;EAC1CC,SAAS,EAAE,WAAW;EACtBZ,aAAa,EAAE,eAAe;EAC9Ba,aAAa,EAAE,eAAe;EAC9B;EACA;EACAC,eAAe,EAAE,mBAAmB;EACpCC,aAAa,EAAE,iBAAiB;EAChCC,cAAc,EAAE,iBAAiB;EACjCC,GAAG,EAAE,yBAAyB;EAC9BC,GAAG,EAAE,wBAAwB;EAC7BC,GAAG,EAAE,kBAAkB;EACvBC,UAAU,EAAE,eAAe;EAC3BC,IAAI,EAAE,MAAM;EACZC,YAAY,EAAE,iCAAiC;EAC/CC,oBAAoB,EAAE,oDAAoD;EAC1EC,YAAY,EAAE,yCAAyC;EACvDC,YAAY,EAAE,2BAA2B;EACzCC,QAAQ,EAAE,kBAAkB;EAC5BC,IAAI,EAAE;AACR,CAAC;AAEM,MAAMC,WAAW,GAAAzC,OAAA,CAAAyC,WAAA,GAAG;EACzBC,EAAE,EAAEC,wBAAS,CAACD,EAAE;EAChBE,OAAO,EAAED,wBAAS,CAACC,OAAO;EAC1BC,gBAAgB,EAAEF,wBAAS,CAACE,gBAAgB;EAC5CC,YAAY,EAAEH,wBAAS,CAACG,YAAY;EACpCC,WAAW,EAAEJ,wBAAS,CAACI,WAAW;EAClCC,YAAY,EAAEL,wBAAS,CAACK,YAAY;EACpCC,SAAS,EAAEN,wBAAS,CAACM,SAAS;EAC9BC,SAAS,EAAEP,wBAAS,CAACO,SAAS;EAC9BC,QAAQ,EAAER,wBAAS,CAACQ,QAAQ;EAC5BC,eAAe,EAAET,wBAAS,CAACS,eAAe;EAC1CC,iBAAiB,EAAEV,wBAAS,CAACW,sBAAsB;EACnDC,QAAQ,EAAEZ,wBAAS,CAACa,oBAAoB;EACxCC,cAAc,EAAEd,wBAAS,CAACe,qBAAqB;EAC/CC,mBAAmB,EAAEhB,wBAAS,CAACgB,mBAAmB;EAClDC,aAAa,EAAE,GAAG;EAClBC,aAAa,EAAE;AACjB,CAAC;AAEM,MAAMC,UAAU,GAAA9D,OAAA,CAAA8D,UAAA,GAAG;EACxBC,cAAc,EAAE;AAClB,CAAC;AAEM,MAAMC,WAAW,GAAAhE,OAAA,CAAAgE,WAAA,GAAG;EACzBC,WAAW,EAAE,qBAAqB;EAClCC,WAAW,EAAE,iBAAiB;EAC9BC,WAAW,EAAE,iBAAiB;EAC9BC,aAAa,EAAE,mBAAmB;EAClCC,gBAAgB,EAAE,+BAA+B;EACjDC,eAAe,EAAE,iBAAiB;EAClCC,WAAW,EAAE,cAAc;EAC3BC,WAAW,EAAE,aAAa;EAC1BC,SAAS,EAAE,gBAAgB;EAC3B/B,EAAE,EAAE,IAAI;EACRgC,UAAU,EAAE;AACd,CAAC;AAEM,MAAMC,kBAAkB,GAAA3E,OAAA,CAAA2E,kBAAA,GAC7B,gFAAgF;AAC3E,MAAMC,mBAAmB,GAAA5E,OAAA,CAAA4E,mBAAA,GAAG,GAAGD,kBAAkB,oBAAoB;AACrE,MAAME,mBAAmB,GAAA7E,OAAA,CAAA6E,mBAAA,GAAG,GAAGF,kBAAkB,mCAAmC;AAEpF,MAAMG,KAAK,GAAA9E,OAAA,CAAA8E,KAAA,GAAG;EACnBC,IAAI,EAAE,MAAM;EACZC,GAAG,EAAE,KAAK;EACVC,KAAK,EAAE,gBAAgB;EACvBC,UAAU,EAAE,YAAY;EACxBC,cAAc,EAAE,MAAM;EACtBC,eAAe,EAAE,gBAAgB;EACjCC,oBAAoB,EAAE;AACxB,CAAC;AAEM,MAAMC,cAAc,GAAAtF,OAAA,CAAAsF,cAAA,GAAG;EAC5BC,KAAK,EAAE,MAAM;EACbP,GAAG,EAAE;AACP,CAAC;AAAC,IAEUQ,qBAAqB,GAAAxF,OAAA,CAAAwF,qBAAA,0BAArBA,qBAAqB;EAArBA,qBAAqB;EAArBA,qBAAqB;EAArBA,qBAAqB;EAArBA,qBAAqB;EAAA,OAArBA,qBAAqB;AAAA;AAO1B,MAAMC,eAAe,GAAAzF,OAAA,CAAAyF,eAAA,GAAG;EAC7BC,cAAc,EAAE,gBAAgB;EAChCC,UAAU,EAAE,YAAY;EACxBC,OAAO,EAAE,SAAS;EAClBC,MAAM,EAAE,QAAQ;EAChBC,KAAK,EAAE;AACT,CAAC","ignoreList":[]}
+{"version":3,"file":"constants.js","names":["_httpStatusCodes","_interopRequireDefault","require","e","__esModule","default","DEFAULT_PASSWORD_VALIDATION","exports","TIME_EXPIRATION_24H","TIME_EXPIRATION_1H","DIST_TAGS","LATEST","USERS","MAINTAINERS","DEFAULT_USER","HEADER_TYPE","CONTENT_ENCODING","CONTENT_TYPE","CONTENT_LENGTH","ACCEPT_ENCODING","AUTHORIZATION","CHARACTER_ENCODING","UTF8","TOKEN_BASIC","TOKEN_BEARER","HEADERS","ACCEPT","USER_AGENT","JSON","TEXT_PLAIN","TEXT_PLAIN_UTF8","TEXT_HTML_UTF8","TEXT_HTML","CACHE_CONTROL","FORWARDED_PROTO","FORWARDED_FOR","FRAMES_OPTIONS","CSP","CTO","XSS","CLIENT","POWERED_BY","RATELIMIT_LIMIT","RATELIMIT_REMAINING","NONE_MATCH","ETAG","JSON_CHARSET","JSON_INSTALL_CHARSET","OCTET_STREAM","TEXT_CHARSET","WWW_AUTH","GZIP","HOST","HTTP_STATUS","OK","httpCodes","CREATED","MULTIPLE_CHOICES","NOT_MODIFIED","BAD_REQUEST","UNAUTHORIZED","FORBIDDEN","NOT_FOUND","CONFLICT","NOT_IMPLEMENTED","UNSUPPORTED_MEDIA","UNSUPPORTED_MEDIA_TYPE","BAD_DATA","UNPROCESSABLE_ENTITY","INTERNAL_ERROR","INTERNAL_SERVER_ERROR","SERVICE_UNAVAILABLE","LOOP_DETECTED","CANNOT_HANDLE","ERROR_CODE","token_required","API_MESSAGE","PKG_CREATED","PKG_CHANGED","PKG_REMOVED","PKG_PUBLISHED","TARBALL_UPLOADED","TARBALL_REMOVED","TAG_UPDATED","TAG_REMOVED","TAG_ADDED","LOGGED_OUT","LOG_STATUS_MESSAGE","LOG_VERDACCIO_ERROR","LOG_VERDACCIO_BYTES","ROLES","$ALL","ALL","$AUTH","$ANONYMOUS","DEPRECATED_ALL","DEPRECATED_AUTH","DEPRECATED_ANONYMOUS","PACKAGE_ACCESS","SCOPE","HtpasswdHashAlgorithm","PLUGIN_CATEGORY","AUTHENTICATION","MIDDLEWARE","STORAGE","FILTER","THEME"],"sources":["../src/constants.ts"],"sourcesContent":["import httpCodes from 'http-status-codes';\n\nexport const DEFAULT_PASSWORD_VALIDATION = /.{3}$/;\nexport const TIME_EXPIRATION_24H = '24h';\nexport const TIME_EXPIRATION_1H = '1h';\nexport const DIST_TAGS = 'dist-tags';\nexport const LATEST = 'latest';\nexport const USERS = 'users';\nexport const MAINTAINERS = 'maintainers';\nexport const DEFAULT_USER = 'Anonymous';\n\nexport const HEADER_TYPE = {\n  CONTENT_ENCODING: 'content-encoding',\n  CONTENT_TYPE: 'content-type',\n  CONTENT_LENGTH: 'content-length',\n  ACCEPT_ENCODING: 'accept-encoding',\n  AUTHORIZATION: 'authorization',\n};\n\nexport const CHARACTER_ENCODING = {\n  UTF8: 'utf8',\n};\n\n// @deprecated use Bearer instead\nexport const TOKEN_BASIC = 'Basic';\nexport const TOKEN_BEARER = 'Bearer';\n\nexport const HEADERS = {\n  ACCEPT: 'Accept',\n  ACCEPT_ENCODING: 'Accept-Encoding',\n  USER_AGENT: 'User-Agent',\n  JSON: 'application/json',\n  CONTENT_TYPE: 'Content-type',\n  CONTENT_LENGTH: 'content-length',\n  TEXT_PLAIN: 'text/plain',\n  TEXT_PLAIN_UTF8: 'text/plain; charset=utf-8',\n  TEXT_HTML_UTF8: 'text/html; charset=utf-8',\n  TEXT_HTML: 'text/html',\n  AUTHORIZATION: 'authorization',\n  CACHE_CONTROL: 'Cache-Control',\n  // only set with proxy that setup HTTPS\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto\n  FORWARDED_PROTO: 'X-Forwarded-Proto',\n  FORWARDED_FOR: 'X-Forwarded-For',\n  FRAMES_OPTIONS: 'X-Frame-Options',\n  CSP: 'Content-Security-Policy',\n  CTO: 'X-Content-Type-Options',\n  XSS: 'X-XSS-Protection',\n  CLIENT: 'X-Client',\n  POWERED_BY: 'X-Powered-By',\n  RATELIMIT_LIMIT: 'X-RateLimit-Limit',\n  RATELIMIT_REMAINING: 'X-RateLimit-Remaining',\n  NONE_MATCH: 'If-None-Match',\n  ETAG: 'ETag',\n  JSON_CHARSET: 'application/json; charset=utf-8',\n  JSON_INSTALL_CHARSET: 'application/vnd.npm.install-v1+json; charset=utf-8',\n  OCTET_STREAM: 'application/octet-stream; charset=utf-8',\n  TEXT_CHARSET: 'text/plain; charset=utf-8',\n  WWW_AUTH: 'WWW-Authenticate',\n  GZIP: 'gzip',\n  HOST: 'host',\n};\n\nexport const HTTP_STATUS = {\n  OK: httpCodes.OK,\n  CREATED: httpCodes.CREATED,\n  MULTIPLE_CHOICES: httpCodes.MULTIPLE_CHOICES,\n  NOT_MODIFIED: httpCodes.NOT_MODIFIED,\n  BAD_REQUEST: httpCodes.BAD_REQUEST,\n  UNAUTHORIZED: httpCodes.UNAUTHORIZED,\n  FORBIDDEN: httpCodes.FORBIDDEN,\n  NOT_FOUND: httpCodes.NOT_FOUND,\n  CONFLICT: httpCodes.CONFLICT,\n  NOT_IMPLEMENTED: httpCodes.NOT_IMPLEMENTED,\n  UNSUPPORTED_MEDIA: httpCodes.UNSUPPORTED_MEDIA_TYPE,\n  BAD_DATA: httpCodes.UNPROCESSABLE_ENTITY,\n  INTERNAL_ERROR: httpCodes.INTERNAL_SERVER_ERROR,\n  SERVICE_UNAVAILABLE: httpCodes.SERVICE_UNAVAILABLE,\n  LOOP_DETECTED: 508,\n  CANNOT_HANDLE: 590,\n};\n\nexport const ERROR_CODE = {\n  token_required: 'token is required',\n};\n\nexport const API_MESSAGE = {\n  PKG_CREATED: 'created new package',\n  PKG_CHANGED: 'package changed',\n  PKG_REMOVED: 'package removed',\n  PKG_PUBLISHED: 'package published',\n  TARBALL_UPLOADED: 'tarball uploaded successfully',\n  TARBALL_REMOVED: 'tarball removed',\n  TAG_UPDATED: 'tags updated',\n  TAG_REMOVED: 'tag removed',\n  TAG_ADDED: 'package tagged',\n  OK: 'ok',\n  LOGGED_OUT: 'Logged out',\n};\n\nexport const LOG_STATUS_MESSAGE =\n  \"@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'\";\nexport const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;\nexport const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;\n\nexport const ROLES = {\n  $ALL: '$all',\n  ALL: 'all',\n  $AUTH: '$authenticated',\n  $ANONYMOUS: '$anonymous',\n  DEPRECATED_ALL: '@all',\n  DEPRECATED_AUTH: '@authenticated',\n  DEPRECATED_ANONYMOUS: '@anonymous',\n};\n\nexport const PACKAGE_ACCESS = {\n  SCOPE: '@*/*',\n  ALL: '**',\n};\n\nexport enum HtpasswdHashAlgorithm {\n  md5 = 'md5',\n  sha1 = 'sha1',\n  crypt = 'crypt',\n  bcrypt = 'bcrypt',\n}\n\nexport const PLUGIN_CATEGORY = {\n  AUTHENTICATION: 'authentication',\n  MIDDLEWARE: 'middleware',\n  STORAGE: 'storage',\n  FILTER: 'filter',\n  THEME: 'theme',\n};\n"],"mappings":";;;;;;AAAA,IAAAA,gBAAA,GAAAC,sBAAA,CAAAC,OAAA;AAA0C,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEnC,MAAMG,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GAAG,OAAO;AAC3C,MAAME,mBAAmB,GAAAD,OAAA,CAAAC,mBAAA,GAAG,KAAK;AACjC,MAAMC,kBAAkB,GAAAF,OAAA,CAAAE,kBAAA,GAAG,IAAI;AAC/B,MAAMC,SAAS,GAAAH,OAAA,CAAAG,SAAA,GAAG,WAAW;AAC7B,MAAMC,MAAM,GAAAJ,OAAA,CAAAI,MAAA,GAAG,QAAQ;AACvB,MAAMC,KAAK,GAAAL,OAAA,CAAAK,KAAA,GAAG,OAAO;AACrB,MAAMC,WAAW,GAAAN,OAAA,CAAAM,WAAA,GAAG,aAAa;AACjC,MAAMC,YAAY,GAAAP,OAAA,CAAAO,YAAA,GAAG,WAAW;AAEhC,MAAMC,WAAW,GAAAR,OAAA,CAAAQ,WAAA,GAAG;EACzBC,gBAAgB,EAAE,kBAAkB;EACpCC,YAAY,EAAE,cAAc;EAC5BC,cAAc,EAAE,gBAAgB;EAChCC,eAAe,EAAE,iBAAiB;EAClCC,aAAa,EAAE;AACjB,CAAC;AAEM,MAAMC,kBAAkB,GAAAd,OAAA,CAAAc,kBAAA,GAAG;EAChCC,IAAI,EAAE;AACR,CAAC;;AAED;AACO,MAAMC,WAAW,GAAAhB,OAAA,CAAAgB,WAAA,GAAG,OAAO;AAC3B,MAAMC,YAAY,GAAAjB,OAAA,CAAAiB,YAAA,GAAG,QAAQ;AAE7B,MAAMC,OAAO,GAAAlB,OAAA,CAAAkB,OAAA,GAAG;EACrBC,MAAM,EAAE,QAAQ;EAChBP,eAAe,EAAE,iBAAiB;EAClCQ,UAAU,EAAE,YAAY;EACxBC,IAAI,EAAE,kBAAkB;EACxBX,YAAY,EAAE,cAAc;EAC5BC,cAAc,EAAE,gBAAgB;EAChCW,UAAU,EAAE,YAAY;EACxBC,eAAe,EAAE,2BAA2B;EAC5CC,cAAc,EAAE,0BAA0B;EAC1CC,SAAS,EAAE,WAAW;EACtBZ,aAAa,EAAE,eAAe;EAC9Ba,aAAa,EAAE,eAAe;EAC9B;EACA;EACAC,eAAe,EAAE,mBAAmB;EACpCC,aAAa,EAAE,iBAAiB;EAChCC,cAAc,EAAE,iBAAiB;EACjCC,GAAG,EAAE,yBAAyB;EAC9BC,GAAG,EAAE,wBAAwB;EAC7BC,GAAG,EAAE,kBAAkB;EACvBC,MAAM,EAAE,UAAU;EAClBC,UAAU,EAAE,cAAc;EAC1BC,eAAe,EAAE,mBAAmB;EACpCC,mBAAmB,EAAE,uBAAuB;EAC5CC,UAAU,EAAE,eAAe;EAC3BC,IAAI,EAAE,MAAM;EACZC,YAAY,EAAE,iCAAiC;EAC/CC,oBAAoB,EAAE,oDAAoD;EAC1EC,YAAY,EAAE,yCAAyC;EACvDC,YAAY,EAAE,2BAA2B;EACzCC,QAAQ,EAAE,kBAAkB;EAC5BC,IAAI,EAAE,MAAM;EACZC,IAAI,EAAE;AACR,CAAC;AAEM,MAAMC,WAAW,GAAA9C,OAAA,CAAA8C,WAAA,GAAG;EACzBC,EAAE,EAAEC,wBAAS,CAACD,EAAE;EAChBE,OAAO,EAAED,wBAAS,CAACC,OAAO;EAC1BC,gBAAgB,EAAEF,wBAAS,CAACE,gBAAgB;EAC5CC,YAAY,EAAEH,wBAAS,CAACG,YAAY;EACpCC,WAAW,EAAEJ,wBAAS,CAACI,WAAW;EAClCC,YAAY,EAAEL,wBAAS,CAACK,YAAY;EACpCC,SAAS,EAAEN,wBAAS,CAACM,SAAS;EAC9BC,SAAS,EAAEP,wBAAS,CAACO,SAAS;EAC9BC,QAAQ,EAAER,wBAAS,CAACQ,QAAQ;EAC5BC,eAAe,EAAET,wBAAS,CAACS,eAAe;EAC1CC,iBAAiB,EAAEV,wBAAS,CAACW,sBAAsB;EACnDC,QAAQ,EAAEZ,wBAAS,CAACa,oBAAoB;EACxCC,cAAc,EAAEd,wBAAS,CAACe,qBAAqB;EAC/CC,mBAAmB,EAAEhB,wBAAS,CAACgB,mBAAmB;EAClDC,aAAa,EAAE,GAAG;EAClBC,aAAa,EAAE;AACjB,CAAC;AAEM,MAAMC,UAAU,GAAAnE,OAAA,CAAAmE,UAAA,GAAG;EACxBC,cAAc,EAAE;AAClB,CAAC;AAEM,MAAMC,WAAW,GAAArE,OAAA,CAAAqE,WAAA,GAAG;EACzBC,WAAW,EAAE,qBAAqB;EAClCC,WAAW,EAAE,iBAAiB;EAC9BC,WAAW,EAAE,iBAAiB;EAC9BC,aAAa,EAAE,mBAAmB;EAClCC,gBAAgB,EAAE,+BAA+B;EACjDC,eAAe,EAAE,iBAAiB;EAClCC,WAAW,EAAE,cAAc;EAC3BC,WAAW,EAAE,aAAa;EAC1BC,SAAS,EAAE,gBAAgB;EAC3B/B,EAAE,EAAE,IAAI;EACRgC,UAAU,EAAE;AACd,CAAC;AAEM,MAAMC,kBAAkB,GAAAhF,OAAA,CAAAgF,kBAAA,GAC7B,gFAAgF;AAC3E,MAAMC,mBAAmB,GAAAjF,OAAA,CAAAiF,mBAAA,GAAG,GAAGD,kBAAkB,oBAAoB;AACrE,MAAME,mBAAmB,GAAAlF,OAAA,CAAAkF,mBAAA,GAAG,GAAGF,kBAAkB,mCAAmC;AAEpF,MAAMG,KAAK,GAAAnF,OAAA,CAAAmF,KAAA,GAAG;EACnBC,IAAI,EAAE,MAAM;EACZC,GAAG,EAAE,KAAK;EACVC,KAAK,EAAE,gBAAgB;EACvBC,UAAU,EAAE,YAAY;EACxBC,cAAc,EAAE,MAAM;EACtBC,eAAe,EAAE,gBAAgB;EACjCC,oBAAoB,EAAE;AACxB,CAAC;AAEM,MAAMC,cAAc,GAAA3F,OAAA,CAAA2F,cAAA,GAAG;EAC5BC,KAAK,EAAE,MAAM;EACbP,GAAG,EAAE;AACP,CAAC;AAAC,IAEUQ,qBAAqB,GAAA7F,OAAA,CAAA6F,qBAAA,0BAArBA,qBAAqB;EAArBA,qBAAqB;EAArBA,qBAAqB;EAArBA,qBAAqB;EAArBA,qBAAqB;EAAA,OAArBA,qBAAqB;AAAA;AAO1B,MAAMC,eAAe,GAAA9F,OAAA,CAAA8F,eAAA,GAAG;EAC7BC,cAAc,EAAE,gBAAgB;EAChCC,UAAU,EAAE,YAAY;EACxBC,OAAO,EAAE,SAAS;EAClBC,MAAM,EAAE,QAAQ;EAChBC,KAAK,EAAE;AACT,CAAC","ignoreList":[]}

package/build/error-utils.js

@@ -17,7 +17,7 @@ var _httpErrors = _interopRequireDefault(require("http-errors"));
 var _constants = require("./constants");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 const API_ERROR = exports.API_ERROR = {
-  PASSWORD_SHORT: `The provided password does not pass the validation`,
+  PASSWORD_SHORT: 'The provided password does not pass the validation',
   MUST_BE_LOGGED: 'You must be logged in to publish packages.',
   PLUGIN_ERROR: 'bug in the auth plugin system',
   CONFIG_BAD_FORMAT: 'config file must be an object',

package/build/error-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-utils.js","names":["_httpErrors","_interopRequireDefault","require","_constants","e","__esModule","default","API_ERROR","exports","PASSWORD_SHORT","MUST_BE_LOGGED","PLUGIN_ERROR","CONFIG_BAD_FORMAT","BAD_USERNAME_PASSWORD","NO_PACKAGE","PACKAGE_CANNOT_BE_ADDED","BAD_DATA","NOT_ALLOWED","NOT_ALLOWED_PUBLISH","INTERNAL_SERVER_ERROR","UNKNOWN_ERROR","NOT_PACKAGE_UPLINK","UPLINK_OFFLINE_PUBLISH","UPLINK_OFFLINE","NOT_MODIFIED_NO_DATA","CONTENT_MISMATCH","NOT_FILE_UPLINK","MAX_USERS_REACHED","VERSION_NOT_EXIST","NO_SUCH_FILE","UNSUPORTED_REGISTRY_CALL","FILE_NOT_FOUND","REGISTRATION_DISABLED","UNAUTHORIZED_ACCESS","BAD_STATUS_CODE","SERVER_TIME_OUT","PACKAGE_EXIST","BAD_AUTH_HEADER","WEB_DISABLED","DEPRECATED_BASIC_HEADER","BAD_FORMAT_USER_GROUP","RESOURCE_UNAVAILABLE","BAD_PACKAGE_DATA","USERNAME_PASSWORD_REQUIRED","USERNAME_ALREADY_REGISTERED","USERNAME_MISMATCH","SUPPORT_ERRORS","PLUGIN_MISSING_INTERFACE","TFA_DISABLED","STORAGE_NOT_IMPLEMENT","PARAMETERS_NOT_VALID","APP_ERROR","CONFIG_NOT_VALID","PROFILE_ERROR","PASSWORD_VALIDATION","getError","code","message","httpError","createError","getConflict","HTTP_STATUS","CONFLICT","getBadData","customMessage","getBadRequest","BAD_REQUEST","getInternalError","INTERNAL_ERROR","getUnauthorized","UNAUTHORIZED","getForbidden","FORBIDDEN","getServiceUnavailable","SERVICE_UNAVAILABLE","getNotFound","NOT_FOUND","getCode","statusCode"],"sources":["../src/error-utils.ts"],"sourcesContent":["import createError, { HttpError } from 'http-errors';\n\nimport { HTTP_STATUS } from './constants';\n\nexport const API_ERROR = {\n  PASSWORD_SHORT: `The provided password does not pass the validation`,\n  MUST_BE_LOGGED: 'You must be logged in to publish packages.',\n  PLUGIN_ERROR: 'bug in the auth plugin system',\n  CONFIG_BAD_FORMAT: 'config file must be an object',\n  BAD_USERNAME_PASSWORD: 'bad username/password, access denied',\n  NO_PACKAGE: 'no such package available',\n  PACKAGE_CANNOT_BE_ADDED: 'this package cannot be added',\n  BAD_DATA: 'bad data',\n  NOT_ALLOWED: 'not allowed to access package',\n  NOT_ALLOWED_PUBLISH: 'not allowed to publish package',\n  INTERNAL_SERVER_ERROR: 'internal server error',\n  UNKNOWN_ERROR: 'unknown error',\n  NOT_PACKAGE_UPLINK: 'package does not exist on uplink',\n  UPLINK_OFFLINE_PUBLISH: 'one of the uplinks is down, refuse to publish',\n  UPLINK_OFFLINE: 'uplink is offline',\n  NOT_MODIFIED_NO_DATA: 'no data',\n  CONTENT_MISMATCH: 'content length mismatch',\n  NOT_FILE_UPLINK: \"file doesn't exist on uplink\",\n  MAX_USERS_REACHED: 'maximum amount of users reached',\n  VERSION_NOT_EXIST: \"this version doesn't exist\",\n  NO_SUCH_FILE: 'no such file available',\n  UNSUPORTED_REGISTRY_CALL: 'unsupported registry call',\n  FILE_NOT_FOUND: 'File not found',\n  REGISTRATION_DISABLED: 'user registration disabled',\n  UNAUTHORIZED_ACCESS: 'unauthorized access',\n  BAD_STATUS_CODE: 'bad status code',\n  SERVER_TIME_OUT: 'looks like the server is taking to long to respond',\n  PACKAGE_EXIST: 'this package is already present',\n  BAD_AUTH_HEADER: 'bad authorization header',\n  WEB_DISABLED: 'Web interface is disabled in the config file',\n  DEPRECATED_BASIC_HEADER: 'basic authentication is deprecated, please use JWT instead',\n  BAD_FORMAT_USER_GROUP: 'user groups is different than an array',\n  RESOURCE_UNAVAILABLE: 'resource unavailable',\n  BAD_PACKAGE_DATA: 'bad incoming package data',\n  USERNAME_PASSWORD_REQUIRED: 'username and password is required',\n  USERNAME_ALREADY_REGISTERED: 'username is already registered',\n  USERNAME_MISMATCH: 'username does not match logged in user',\n};\n\nexport const SUPPORT_ERRORS = {\n  PLUGIN_MISSING_INTERFACE: 'the plugin does not provide implementation of the requested feature',\n  TFA_DISABLED: 'the two-factor authentication is not yet supported',\n  STORAGE_NOT_IMPLEMENT: 'the storage does not support token saving',\n  PARAMETERS_NOT_VALID: 'the parameters are not valid',\n};\n\nexport const APP_ERROR = {\n  CONFIG_NOT_VALID: 'CONFIG: it does not look like a valid config file',\n  PROFILE_ERROR: 'profile unexpected error',\n  PASSWORD_VALIDATION: 'not valid password',\n};\n\nexport type VerdaccioError = HttpError & { code: number };\n\nfunction getError(code: number, message: string): VerdaccioError {\n  const httpError = createError(code, message);\n\n  httpError.code = code;\n\n  return httpError as VerdaccioError;\n}\n\nexport function getConflict(message: string = API_ERROR.PACKAGE_EXIST): VerdaccioError {\n  return getError(HTTP_STATUS.CONFLICT, message);\n}\n\nexport function getBadData(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_DATA, customMessage || API_ERROR.BAD_DATA);\n}\n\nexport function getBadRequest(customMessage: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_REQUEST, customMessage);\n}\n\nexport function getInternalError(customMessage?: string): VerdaccioError {\n  return customMessage\n    ? getError(HTTP_STATUS.INTERNAL_ERROR, customMessage)\n    : getError(HTTP_STATUS.INTERNAL_ERROR, API_ERROR.UNKNOWN_ERROR);\n}\n\nexport function getUnauthorized(message = 'no credentials provided'): VerdaccioError {\n  return getError(HTTP_STATUS.UNAUTHORIZED, message);\n}\n\nexport function getForbidden(message = \"can't use this filename\"): VerdaccioError {\n  return getError(HTTP_STATUS.FORBIDDEN, message);\n}\n\nexport function getServiceUnavailable(\n  message: string = API_ERROR.RESOURCE_UNAVAILABLE\n): VerdaccioError {\n  return getError(HTTP_STATUS.SERVICE_UNAVAILABLE, message);\n}\n\nexport function getNotFound(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.NOT_FOUND, customMessage || API_ERROR.NO_PACKAGE);\n}\n\nexport function getCode(statusCode: number, customMessage: string): VerdaccioError {\n  return getError(statusCode, customMessage);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,UAAA,GAAAD,OAAA;AAA0C,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEnC,MAAMG,SAAS,GAAAC,OAAA,CAAAD,SAAA,GAAG;EACvBE,cAAc,EAAE,oDAAoD;EACpEC,cAAc,EAAE,4CAA4C;EAC5DC,YAAY,EAAE,+BAA+B;EAC7CC,iBAAiB,EAAE,+BAA+B;EAClDC,qBAAqB,EAAE,sCAAsC;EAC7DC,UAAU,EAAE,2BAA2B;EACvCC,uBAAuB,EAAE,8BAA8B;EACvDC,QAAQ,EAAE,UAAU;EACpBC,WAAW,EAAE,+BAA+B;EAC5CC,mBAAmB,EAAE,gCAAgC;EACrDC,qBAAqB,EAAE,uBAAuB;EAC9CC,aAAa,EAAE,eAAe;EAC9BC,kBAAkB,EAAE,kCAAkC;EACtDC,sBAAsB,EAAE,+CAA+C;EACvEC,cAAc,EAAE,mBAAmB;EACnCC,oBAAoB,EAAE,SAAS;EAC/BC,gBAAgB,EAAE,yBAAyB;EAC3CC,eAAe,EAAE,8BAA8B;EAC/CC,iBAAiB,EAAE,iCAAiC;EACpDC,iBAAiB,EAAE,4BAA4B;EAC/CC,YAAY,EAAE,wBAAwB;EACtCC,wBAAwB,EAAE,2BAA2B;EACrDC,cAAc,EAAE,gBAAgB;EAChCC,qBAAqB,EAAE,4BAA4B;EACnDC,mBAAmB,EAAE,qBAAqB;EAC1CC,eAAe,EAAE,iBAAiB;EAClCC,eAAe,EAAE,oDAAoD;EACrEC,aAAa,EAAE,iCAAiC;EAChDC,eAAe,EAAE,0BAA0B;EAC3CC,YAAY,EAAE,8CAA8C;EAC5DC,uBAAuB,EAAE,4DAA4D;EACrFC,qBAAqB,EAAE,wCAAwC;EAC/DC,oBAAoB,EAAE,sBAAsB;EAC5CC,gBAAgB,EAAE,2BAA2B;EAC7CC,0BAA0B,EAAE,mCAAmC;EAC/DC,2BAA2B,EAAE,gCAAgC;EAC7DC,iBAAiB,EAAE;AACrB,CAAC;AAEM,MAAMC,cAAc,GAAAtC,OAAA,CAAAsC,cAAA,GAAG;EAC5BC,wBAAwB,EAAE,qEAAqE;EAC/FC,YAAY,EAAE,oDAAoD;EAClEC,qBAAqB,EAAE,2CAA2C;EAClEC,oBAAoB,EAAE;AACxB,CAAC;AAEM,MAAMC,SAAS,GAAA3C,OAAA,CAAA2C,SAAA,GAAG;EACvBC,gBAAgB,EAAE,mDAAmD;EACrEC,aAAa,EAAE,0BAA0B;EACzCC,mBAAmB,EAAE;AACvB,CAAC;AAID,SAASC,QAAQA,CAACC,IAAY,EAAEC,OAAe,EAAkB;EAC/D,MAAMC,SAAS,GAAG,IAAAC,mBAAW,EAACH,IAAI,EAAEC,OAAO,CAAC;EAE5CC,SAAS,CAACF,IAAI,GAAGA,IAAI;EAErB,OAAOE,SAAS;AAClB;AAEO,SAASE,WAAWA,CAACH,OAAe,GAAGlD,SAAS,CAAC6B,aAAa,EAAkB;EACrF,OAAOmB,QAAQ,CAACM,sBAAW,CAACC,QAAQ,EAAEL,OAAO,CAAC;AAChD;AAEO,SAASM,UAAUA,CAACC,aAAsB,EAAkB;EACjE,OAAOT,QAAQ,CAACM,sBAAW,CAAC7C,QAAQ,EAAEgD,aAAa,IAAIzD,SAAS,CAACS,QAAQ,CAAC;AAC5E;AAEO,SAASiD,aAAaA,CAACD,aAAqB,EAAkB;EACnE,OAAOT,QAAQ,CAACM,sBAAW,CAACK,WAAW,EAAEF,aAAa,CAAC;AACzD;AAEO,SAASG,gBAAgBA,CAACH,aAAsB,EAAkB;EACvE,OAAOA,aAAa,GAChBT,QAAQ,CAACM,sBAAW,CAACO,cAAc,EAAEJ,aAAa,CAAC,GACnDT,QAAQ,CAACM,sBAAW,CAACO,cAAc,EAAE7D,SAAS,CAACa,aAAa,CAAC;AACnE;AAEO,SAASiD,eAAeA,CAACZ,OAAO,GAAG,yBAAyB,EAAkB;EACnF,OAAOF,QAAQ,CAACM,sBAAW,CAACS,YAAY,EAAEb,OAAO,CAAC;AACpD;AAEO,SAASc,YAAYA,CAACd,OAAO,GAAG,yBAAyB,EAAkB;EAChF,OAAOF,QAAQ,CAACM,sBAAW,CAACW,SAAS,EAAEf,OAAO,CAAC;AACjD;AAEO,SAASgB,qBAAqBA,CACnChB,OAAe,GAAGlD,SAAS,CAACkC,oBAAoB,EAChC;EAChB,OAAOc,QAAQ,CAACM,sBAAW,CAACa,mBAAmB,EAAEjB,OAAO,CAAC;AAC3D;AAEO,SAASkB,WAAWA,CAACX,aAAsB,EAAkB;EAClE,OAAOT,QAAQ,CAACM,sBAAW,CAACe,SAAS,EAAEZ,aAAa,IAAIzD,SAAS,CAACO,UAAU,CAAC;AAC/E;AAEO,SAAS+D,OAAOA,CAACC,UAAkB,EAAEd,aAAqB,EAAkB;EACjF,OAAOT,QAAQ,CAACuB,UAAU,EAAEd,aAAa,CAAC;AAC5C","ignoreList":[]}
+{"version":3,"file":"error-utils.js","names":["_httpErrors","_interopRequireDefault","require","_constants","e","__esModule","default","API_ERROR","exports","PASSWORD_SHORT","MUST_BE_LOGGED","PLUGIN_ERROR","CONFIG_BAD_FORMAT","BAD_USERNAME_PASSWORD","NO_PACKAGE","PACKAGE_CANNOT_BE_ADDED","BAD_DATA","NOT_ALLOWED","NOT_ALLOWED_PUBLISH","INTERNAL_SERVER_ERROR","UNKNOWN_ERROR","NOT_PACKAGE_UPLINK","UPLINK_OFFLINE_PUBLISH","UPLINK_OFFLINE","NOT_MODIFIED_NO_DATA","CONTENT_MISMATCH","NOT_FILE_UPLINK","MAX_USERS_REACHED","VERSION_NOT_EXIST","NO_SUCH_FILE","UNSUPORTED_REGISTRY_CALL","FILE_NOT_FOUND","REGISTRATION_DISABLED","UNAUTHORIZED_ACCESS","BAD_STATUS_CODE","SERVER_TIME_OUT","PACKAGE_EXIST","BAD_AUTH_HEADER","WEB_DISABLED","DEPRECATED_BASIC_HEADER","BAD_FORMAT_USER_GROUP","RESOURCE_UNAVAILABLE","BAD_PACKAGE_DATA","USERNAME_PASSWORD_REQUIRED","USERNAME_ALREADY_REGISTERED","USERNAME_MISMATCH","SUPPORT_ERRORS","PLUGIN_MISSING_INTERFACE","TFA_DISABLED","STORAGE_NOT_IMPLEMENT","PARAMETERS_NOT_VALID","APP_ERROR","CONFIG_NOT_VALID","PROFILE_ERROR","PASSWORD_VALIDATION","getError","code","message","httpError","createError","getConflict","HTTP_STATUS","CONFLICT","getBadData","customMessage","getBadRequest","BAD_REQUEST","getInternalError","INTERNAL_ERROR","getUnauthorized","UNAUTHORIZED","getForbidden","FORBIDDEN","getServiceUnavailable","SERVICE_UNAVAILABLE","getNotFound","NOT_FOUND","getCode","statusCode"],"sources":["../src/error-utils.ts"],"sourcesContent":["import createError, { HttpError } from 'http-errors';\n\nimport { HTTP_STATUS } from './constants';\n\nexport const API_ERROR = {\n  PASSWORD_SHORT: 'The provided password does not pass the validation',\n  MUST_BE_LOGGED: 'You must be logged in to publish packages.',\n  PLUGIN_ERROR: 'bug in the auth plugin system',\n  CONFIG_BAD_FORMAT: 'config file must be an object',\n  BAD_USERNAME_PASSWORD: 'bad username/password, access denied',\n  NO_PACKAGE: 'no such package available',\n  PACKAGE_CANNOT_BE_ADDED: 'this package cannot be added',\n  BAD_DATA: 'bad data',\n  NOT_ALLOWED: 'not allowed to access package',\n  NOT_ALLOWED_PUBLISH: 'not allowed to publish package',\n  INTERNAL_SERVER_ERROR: 'internal server error',\n  UNKNOWN_ERROR: 'unknown error',\n  NOT_PACKAGE_UPLINK: 'package does not exist on uplink',\n  UPLINK_OFFLINE_PUBLISH: 'one of the uplinks is down, refuse to publish',\n  UPLINK_OFFLINE: 'uplink is offline',\n  NOT_MODIFIED_NO_DATA: 'no data',\n  CONTENT_MISMATCH: 'content length mismatch',\n  NOT_FILE_UPLINK: \"file doesn't exist on uplink\",\n  MAX_USERS_REACHED: 'maximum amount of users reached',\n  VERSION_NOT_EXIST: \"this version doesn't exist\",\n  NO_SUCH_FILE: 'no such file available',\n  UNSUPORTED_REGISTRY_CALL: 'unsupported registry call',\n  FILE_NOT_FOUND: 'File not found',\n  REGISTRATION_DISABLED: 'user registration disabled',\n  UNAUTHORIZED_ACCESS: 'unauthorized access',\n  BAD_STATUS_CODE: 'bad status code',\n  SERVER_TIME_OUT: 'looks like the server is taking to long to respond',\n  PACKAGE_EXIST: 'this package is already present',\n  BAD_AUTH_HEADER: 'bad authorization header',\n  WEB_DISABLED: 'Web interface is disabled in the config file',\n  DEPRECATED_BASIC_HEADER: 'basic authentication is deprecated, please use JWT instead',\n  BAD_FORMAT_USER_GROUP: 'user groups is different than an array',\n  RESOURCE_UNAVAILABLE: 'resource unavailable',\n  BAD_PACKAGE_DATA: 'bad incoming package data',\n  USERNAME_PASSWORD_REQUIRED: 'username and password is required',\n  USERNAME_ALREADY_REGISTERED: 'username is already registered',\n  USERNAME_MISMATCH: 'username does not match logged in user',\n};\n\nexport const SUPPORT_ERRORS = {\n  PLUGIN_MISSING_INTERFACE: 'the plugin does not provide implementation of the requested feature',\n  TFA_DISABLED: 'the two-factor authentication is not yet supported',\n  STORAGE_NOT_IMPLEMENT: 'the storage does not support token saving',\n  PARAMETERS_NOT_VALID: 'the parameters are not valid',\n};\n\nexport const APP_ERROR = {\n  CONFIG_NOT_VALID: 'CONFIG: it does not look like a valid config file',\n  PROFILE_ERROR: 'profile unexpected error',\n  PASSWORD_VALIDATION: 'not valid password',\n};\n\nexport type VerdaccioError = HttpError & { code: number };\n\nfunction getError(code: number, message: string): VerdaccioError {\n  const httpError = createError(code, message);\n\n  httpError.code = code;\n\n  return httpError as VerdaccioError;\n}\n\nexport function getConflict(message: string = API_ERROR.PACKAGE_EXIST): VerdaccioError {\n  return getError(HTTP_STATUS.CONFLICT, message);\n}\n\nexport function getBadData(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_DATA, customMessage || API_ERROR.BAD_DATA);\n}\n\nexport function getBadRequest(customMessage: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_REQUEST, customMessage);\n}\n\nexport function getInternalError(customMessage?: string): VerdaccioError {\n  return customMessage\n    ? getError(HTTP_STATUS.INTERNAL_ERROR, customMessage)\n    : getError(HTTP_STATUS.INTERNAL_ERROR, API_ERROR.UNKNOWN_ERROR);\n}\n\nexport function getUnauthorized(message = 'no credentials provided'): VerdaccioError {\n  return getError(HTTP_STATUS.UNAUTHORIZED, message);\n}\n\nexport function getForbidden(message = \"can't use this filename\"): VerdaccioError {\n  return getError(HTTP_STATUS.FORBIDDEN, message);\n}\n\nexport function getServiceUnavailable(\n  message: string = API_ERROR.RESOURCE_UNAVAILABLE\n): VerdaccioError {\n  return getError(HTTP_STATUS.SERVICE_UNAVAILABLE, message);\n}\n\nexport function getNotFound(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.NOT_FOUND, customMessage || API_ERROR.NO_PACKAGE);\n}\n\nexport function getCode(statusCode: number, customMessage: string): VerdaccioError {\n  return getError(statusCode, customMessage);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,UAAA,GAAAD,OAAA;AAA0C,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEnC,MAAMG,SAAS,GAAAC,OAAA,CAAAD,SAAA,GAAG;EACvBE,cAAc,EAAE,oDAAoD;EACpEC,cAAc,EAAE,4CAA4C;EAC5DC,YAAY,EAAE,+BAA+B;EAC7CC,iBAAiB,EAAE,+BAA+B;EAClDC,qBAAqB,EAAE,sCAAsC;EAC7DC,UAAU,EAAE,2BAA2B;EACvCC,uBAAuB,EAAE,8BAA8B;EACvDC,QAAQ,EAAE,UAAU;EACpBC,WAAW,EAAE,+BAA+B;EAC5CC,mBAAmB,EAAE,gCAAgC;EACrDC,qBAAqB,EAAE,uBAAuB;EAC9CC,aAAa,EAAE,eAAe;EAC9BC,kBAAkB,EAAE,kCAAkC;EACtDC,sBAAsB,EAAE,+CAA+C;EACvEC,cAAc,EAAE,mBAAmB;EACnCC,oBAAoB,EAAE,SAAS;EAC/BC,gBAAgB,EAAE,yBAAyB;EAC3CC,eAAe,EAAE,8BAA8B;EAC/CC,iBAAiB,EAAE,iCAAiC;EACpDC,iBAAiB,EAAE,4BAA4B;EAC/CC,YAAY,EAAE,wBAAwB;EACtCC,wBAAwB,EAAE,2BAA2B;EACrDC,cAAc,EAAE,gBAAgB;EAChCC,qBAAqB,EAAE,4BAA4B;EACnDC,mBAAmB,EAAE,qBAAqB;EAC1CC,eAAe,EAAE,iBAAiB;EAClCC,eAAe,EAAE,oDAAoD;EACrEC,aAAa,EAAE,iCAAiC;EAChDC,eAAe,EAAE,0BAA0B;EAC3CC,YAAY,EAAE,8CAA8C;EAC5DC,uBAAuB,EAAE,4DAA4D;EACrFC,qBAAqB,EAAE,wCAAwC;EAC/DC,oBAAoB,EAAE,sBAAsB;EAC5CC,gBAAgB,EAAE,2BAA2B;EAC7CC,0BAA0B,EAAE,mCAAmC;EAC/DC,2BAA2B,EAAE,gCAAgC;EAC7DC,iBAAiB,EAAE;AACrB,CAAC;AAEM,MAAMC,cAAc,GAAAtC,OAAA,CAAAsC,cAAA,GAAG;EAC5BC,wBAAwB,EAAE,qEAAqE;EAC/FC,YAAY,EAAE,oDAAoD;EAClEC,qBAAqB,EAAE,2CAA2C;EAClEC,oBAAoB,EAAE;AACxB,CAAC;AAEM,MAAMC,SAAS,GAAA3C,OAAA,CAAA2C,SAAA,GAAG;EACvBC,gBAAgB,EAAE,mDAAmD;EACrEC,aAAa,EAAE,0BAA0B;EACzCC,mBAAmB,EAAE;AACvB,CAAC;AAID,SAASC,QAAQA,CAACC,IAAY,EAAEC,OAAe,EAAkB;EAC/D,MAAMC,SAAS,GAAG,IAAAC,mBAAW,EAACH,IAAI,EAAEC,OAAO,CAAC;EAE5CC,SAAS,CAACF,IAAI,GAAGA,IAAI;EAErB,OAAOE,SAAS;AAClB;AAEO,SAASE,WAAWA,CAACH,OAAe,GAAGlD,SAAS,CAAC6B,aAAa,EAAkB;EACrF,OAAOmB,QAAQ,CAACM,sBAAW,CAACC,QAAQ,EAAEL,OAAO,CAAC;AAChD;AAEO,SAASM,UAAUA,CAACC,aAAsB,EAAkB;EACjE,OAAOT,QAAQ,CAACM,sBAAW,CAAC7C,QAAQ,EAAEgD,aAAa,IAAIzD,SAAS,CAACS,QAAQ,CAAC;AAC5E;AAEO,SAASiD,aAAaA,CAACD,aAAqB,EAAkB;EACnE,OAAOT,QAAQ,CAACM,sBAAW,CAACK,WAAW,EAAEF,aAAa,CAAC;AACzD;AAEO,SAASG,gBAAgBA,CAACH,aAAsB,EAAkB;EACvE,OAAOA,aAAa,GAChBT,QAAQ,CAACM,sBAAW,CAACO,cAAc,EAAEJ,aAAa,CAAC,GACnDT,QAAQ,CAACM,sBAAW,CAACO,cAAc,EAAE7D,SAAS,CAACa,aAAa,CAAC;AACnE;AAEO,SAASiD,eAAeA,CAACZ,OAAO,GAAG,yBAAyB,EAAkB;EACnF,OAAOF,QAAQ,CAACM,sBAAW,CAACS,YAAY,EAAEb,OAAO,CAAC;AACpD;AAEO,SAASc,YAAYA,CAACd,OAAO,GAAG,yBAAyB,EAAkB;EAChF,OAAOF,QAAQ,CAACM,sBAAW,CAACW,SAAS,EAAEf,OAAO,CAAC;AACjD;AAEO,SAASgB,qBAAqBA,CACnChB,OAAe,GAAGlD,SAAS,CAACkC,oBAAoB,EAChC;EAChB,OAAOc,QAAQ,CAACM,sBAAW,CAACa,mBAAmB,EAAEjB,OAAO,CAAC;AAC3D;AAEO,SAASkB,WAAWA,CAACX,aAAsB,EAAkB;EAClE,OAAOT,QAAQ,CAACM,sBAAW,CAACe,SAAS,EAAEZ,aAAa,IAAIzD,SAAS,CAACO,UAAU,CAAC;AAC/E;AAEO,SAAS+D,OAAOA,CAACC,UAAkB,EAAEd,aAAqB,EAAkB;EACjF,OAAOT,QAAQ,CAACuB,UAAU,EAAEd,aAAa,CAAC;AAC5C","ignoreList":[]}

package/build/file-utils.js

@@ -24,7 +24,7 @@ const {
  * @returns string
  */
 async function createTempFolder(prefix) {
-  return await mkdtemp(_path.default.join(_os.default.tmpdir(), prefix));
+  return await mkdtemp(_path.default.join(_os.default.tmpdir(), 'verdaccio-' + prefix + '-'));
 }
 
 /**

package/build/file-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-utils.js","names":["_fs","_interopRequireDefault","require","_os","_path","e","__esModule","default","Files","exports","DatabaseName","mkdir","mkdtemp","fs","promises","createTempFolder","prefix","path","join","os","tmpdir","createTempStorageFolder","folder","tempFolder","storageFolder"],"sources":["../src/file-utils.ts"],"sourcesContent":["import fs from 'fs';\nimport os from 'os';\nimport path from 'path';\n\nexport const Files = {\n  DatabaseName: '.verdaccio-db.json',\n};\n\nconst { mkdir, mkdtemp } = fs.promises ? fs.promises : require('fs/promises');\n\n/**\n * Create a temporary folder.\n * @param prefix The prefix of the folder name.\n * @returns string\n */\nexport async function createTempFolder(prefix: string): Promise<string> {\n  return await mkdtemp(path.join(os.tmpdir(), prefix));\n}\n\n/**\n * Create temporary folder for an asset.\n * @param prefix\n * @param folder name\n * @returns\n */\nexport async function createTempStorageFolder(prefix: string, folder = 'storage'): Promise<string> {\n  const tempFolder = await createTempFolder(prefix);\n  const storageFolder = path.join(tempFolder, folder);\n  await mkdir(storageFolder);\n  return storageFolder;\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,GAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,KAAA,GAAAH,sBAAA,CAAAC,OAAA;AAAwB,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEjB,MAAMG,KAAK,GAAAC,OAAA,CAAAD,KAAA,GAAG;EACnBE,YAAY,EAAE;AAChB,CAAC;AAED,MAAM;EAAEC,KAAK;EAAEC;AAAQ,CAAC,GAAGC,WAAE,CAACC,QAAQ,GAAGD,WAAE,CAACC,QAAQ,GAAGZ,OAAO,CAAC,aAAa,CAAC;;AAE7E;AACA;AACA;AACA;AACA;AACO,eAAea,gBAAgBA,CAACC,MAAc,EAAmB;EACtE,OAAO,MAAMJ,OAAO,CAACK,aAAI,CAACC,IAAI,CAACC,WAAE,CAACC,MAAM,CAAC,CAAC,EAAEJ,MAAM,CAAC,CAAC;AACtD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeK,uBAAuBA,CAACL,MAAc,EAAEM,MAAM,GAAG,SAAS,EAAmB;EACjG,MAAMC,UAAU,GAAG,MAAMR,gBAAgB,CAACC,MAAM,CAAC;EACjD,MAAMQ,aAAa,GAAGP,aAAI,CAACC,IAAI,CAACK,UAAU,EAAED,MAAM,CAAC;EACnD,MAAMX,KAAK,CAACa,aAAa,CAAC;EAC1B,OAAOA,aAAa;AACtB","ignoreList":[]}
+{"version":3,"file":"file-utils.js","names":["_fs","_interopRequireDefault","require","_os","_path","e","__esModule","default","Files","exports","DatabaseName","mkdir","mkdtemp","fs","promises","createTempFolder","prefix","path","join","os","tmpdir","createTempStorageFolder","folder","tempFolder","storageFolder"],"sources":["../src/file-utils.ts"],"sourcesContent":["import fs from 'fs';\nimport os from 'os';\nimport path from 'path';\n\nexport const Files = {\n  DatabaseName: '.verdaccio-db.json',\n};\n\nconst { mkdir, mkdtemp } = fs.promises ? fs.promises : require('fs/promises');\n\n/**\n * Create a temporary folder.\n * @param prefix The prefix of the folder name.\n * @returns string\n */\nexport async function createTempFolder(prefix: string): Promise<string> {\n  return await mkdtemp(path.join(os.tmpdir(), 'verdaccio-' + prefix + '-'));\n}\n\n/**\n * Create temporary folder for an asset.\n * @param prefix\n * @param folder name\n * @returns\n */\nexport async function createTempStorageFolder(prefix: string, folder = 'storage'): Promise<string> {\n  const tempFolder = await createTempFolder(prefix);\n  const storageFolder = path.join(tempFolder, folder);\n  await mkdir(storageFolder);\n  return storageFolder;\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,GAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,KAAA,GAAAH,sBAAA,CAAAC,OAAA;AAAwB,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEjB,MAAMG,KAAK,GAAAC,OAAA,CAAAD,KAAA,GAAG;EACnBE,YAAY,EAAE;AAChB,CAAC;AAED,MAAM;EAAEC,KAAK;EAAEC;AAAQ,CAAC,GAAGC,WAAE,CAACC,QAAQ,GAAGD,WAAE,CAACC,QAAQ,GAAGZ,OAAO,CAAC,aAAa,CAAC;;AAE7E;AACA;AACA;AACA;AACA;AACO,eAAea,gBAAgBA,CAACC,MAAc,EAAmB;EACtE,OAAO,MAAMJ,OAAO,CAACK,aAAI,CAACC,IAAI,CAACC,WAAE,CAACC,MAAM,CAAC,CAAC,EAAE,YAAY,GAAGJ,MAAM,GAAG,GAAG,CAAC,CAAC;AAC3E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeK,uBAAuBA,CAACL,MAAc,EAAEM,MAAM,GAAG,SAAS,EAAmB;EACjG,MAAMC,UAAU,GAAG,MAAMR,gBAAgB,CAACC,MAAM,CAAC;EACjD,MAAMQ,aAAa,GAAGP,aAAI,CAACC,IAAI,CAACK,UAAU,EAAED,MAAM,CAAC;EACnD,MAAMX,KAAK,CAACa,aAAa,CAAC;EAC1B,OAAOA,aAAa;AACtB","ignoreList":[]}

package/build/plugin-utils.d.ts

@@ -3,20 +3,15 @@ import { Express, RequestHandler } from 'express';
 import { Readable, Writable } from 'stream';
 import { AllowAccess, Callback, Config, Logger, Manifest, PackageAccess, RemoteUser, Token, TokenFilter } from '@verdaccio/types';
 import { VerdaccioError, searchUtils } from '.';
-export interface AuthPluginPackage {
-    packageName: string;
-    packageVersion?: string;
-    tag?: string;
-}
 export interface PluginOptions {
     config: Config;
     logger: Logger;
 }
 /**
- * The base plugin class, set of utilities for developing
- * plugins.
- * @alpha
- * */
+ * Base Plugin Class
+ *
+ * Set of utilities for developing plugins.
+ */
 export declare class Plugin<PluginConfig> {
     static version: number;
     readonly version: number;
@@ -25,38 +20,52 @@ export declare class Plugin<PluginConfig> {
     constructor(config: PluginConfig, options: PluginOptions);
     getVersion(): number;
 }
+/**
+ * Storage Handler
+ *
+ * Used in storage plugin for managing packages and tarballs.
+ */
 export interface StorageHandler {
     logger: Logger;
     deletePackage(fileName: string): Promise<void>;
     removePackage(): Promise<void>;
     updatePackage(packageName: string, handleUpdate: (manifest: Manifest) => Promise<Manifest>): Promise<Manifest>;
-    readPackage(name: string): Promise<Manifest>;
-    savePackage(pkgName: string, value: Manifest): Promise<void>;
-    readTarball(pkgName: string, { signal }: {
+    readPackage(packageName: string): Promise<Manifest>;
+    savePackage(packageName: string, manifest: Manifest): Promise<void>;
+    readTarball(fileName: string, { signal }: {
         signal: AbortSignal;
     }): Promise<Readable>;
-    createPackage(name: string, manifest: Manifest): Promise<void>;
-    writeTarball(tarballName: string, { signal }: {
+    createPackage(packageName: string, manifest: Manifest): Promise<void>;
+    writeTarball(fileName: string, { signal }: {
         signal: AbortSignal;
     }): Promise<Writable>;
     hasTarball(fileName: string): Promise<boolean>;
     hasPackage(): Promise<boolean>;
 }
+/**
+ * Storage Plugin interface
+ *
+ * https://verdaccio.org/docs/next/plugin-storage
+ */
 export interface Storage<PluginConfig> extends Plugin<PluginConfig> {
-    add(name: string): Promise<void>;
-    remove(name: string): Promise<void>;
-    get(): Promise<any>;
+    add(packageName: string): Promise<void>;
+    remove(packageName: string): Promise<void>;
+    get(): Promise<string[]>;
     init(): Promise<void>;
     getSecret(): Promise<string>;
     setSecret(secret: string): Promise<any>;
-    getPackageStorage(packageInfo: string): StorageHandler;
+    getPackageStorage(packageName: string): StorageHandler;
     search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;
     saveToken(token: Token): Promise<any>;
     deleteToken(user: string, tokenKey: string): Promise<any>;
     readTokens(filter: TokenFilter): Promise<Token[]>;
 }
 /**
- * This function allow add additional middleware to the application.
+ * Middleware Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-middleware
+ *
+ * This function allow add middleware to the application.
  *
  *  ```ts
  *  import express, { Request, Response } from 'express';
@@ -71,7 +80,6 @@ export interface Storage<PluginConfig> extends Plugin<PluginConfig> {
  *    }
  *  }
  *
- *
  *  const [plugin] = await asyncLoadPlugin(...);
  *  plugin.register_middlewares(app, auth, storage);
  *  ```
@@ -79,14 +87,21 @@ export interface Storage<PluginConfig> extends Plugin<PluginConfig> {
 export interface ExpressMiddleware<PluginConfig, Storage, Auth> extends Plugin<PluginConfig> {
     register_middlewares(app: Express, auth: Auth, storage: Storage): void;
 }
-/**
- * dasdsa
- */
 export type AuthCallback = (error: VerdaccioError | null, groups?: string[] | false) => void;
 export type AuthAccessCallback = (error: VerdaccioError | null, access?: boolean) => void;
 export type AuthUserCallback = (error: VerdaccioError | null, access?: boolean | string) => void;
 export type AuthChangePasswordCallback = (error: VerdaccioError | null, access?: boolean) => void;
 export type AccessCallback = (error: VerdaccioError | null, ok?: boolean) => void;
+export interface AuthPluginPackage {
+    packageName: string;
+    packageVersion?: string;
+    tag?: string;
+}
+/**
+ * Authentication Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-auth
+ */
 export interface Auth<T> extends Plugin<T> {
     /**
      * Handles the authenticated method.
@@ -132,6 +147,11 @@ export interface IBasicAuth {
     allow_access(pkg: AuthPluginPackage, user: RemoteUser, callback: Callback): void;
     add_user(user: string, password: string, cb: Callback): any;
 }
+/**
+ * Filter Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-filter
+ */
 export interface ManifestFilter<T> extends Plugin<T> {
-    filter_metadata(packageInfo: Manifest): Promise<Manifest>;
+    filter_metadata(manifest: Manifest): Promise<Manifest>;
 }

package/build/plugin-utils.js

@@ -5,10 +5,10 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.Plugin = void 0;
 /**
- * The base plugin class, set of utilities for developing
- * plugins.
- * @alpha
- * */
+ * Base Plugin Class
+ *
+ * Set of utilities for developing plugins.
+ */
 class Plugin {
   static version = 1;
   constructor(config, options) {
@@ -21,8 +21,28 @@ class Plugin {
   }
 }
 
+// --- STORAGE PLUGIN ---
+
+/**
+ * Storage Handler
+ *
+ * Used in storage plugin for managing packages and tarballs.
+ */
+
+/**
+ * Storage Plugin interface
+ *
+ * https://verdaccio.org/docs/next/plugin-storage
+ */
+
+// --- MIDDLEWARE PLUGIN ---
+
 /**
- * This function allow add additional middleware to the application.
+ * Middleware Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-middleware
+ *
+ * This function allow add middleware to the application.
  *
  *  ```ts
  *  import express, { Request, Response } from 'express';
@@ -36,15 +56,26 @@ class Plugin {
       });
  *    }
  *  }
- * 
- *  
+ *
  *  const [plugin] = await asyncLoadPlugin(...);
  *  plugin.register_middlewares(app, auth, storage);
  *  ```
  */
 
+// --- AUTH PLUGIN ---
+
 /**
- * dasdsa
+ * Authentication Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-auth
+ */
+
+// --- FILTER PLUGIN ---
+
+/**
+ * Filter Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-filter
  */
 exports.Plugin = Plugin;
 //# sourceMappingURL=plugin-utils.js.map

package/build/plugin-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-utils.js","names":["Plugin","version","constructor","config","options","getVersion","exports"],"sources":["../src/plugin-utils.ts"],"sourcesContent":["import { Express, RequestHandler } from 'express';\nimport { Readable, Writable } from 'stream';\n\nimport {\n  AllowAccess,\n  Callback,\n  Config,\n  Logger,\n  Manifest,\n  PackageAccess,\n  RemoteUser,\n  Token,\n  TokenFilter,\n} from '@verdaccio/types';\n\nimport { VerdaccioError, searchUtils } from '.';\n\nexport interface AuthPluginPackage {\n  packageName: string;\n  packageVersion?: string;\n  tag?: string;\n}\nexport interface PluginOptions {\n  config: Config;\n  logger: Logger;\n}\n\n/**\n * The base plugin class, set of utilities for developing\n * plugins.\n * @alpha\n * */\nexport class Plugin<PluginConfig> {\n  static version = 1;\n  public readonly version: number;\n  public readonly config: PluginConfig | unknown;\n  public readonly options: PluginOptions;\n  public constructor(config: PluginConfig, options: PluginOptions) {\n    this.version = Plugin.version;\n    this.config = config;\n    this.options = options;\n  }\n\n  public getVersion() {\n    return this.version;\n  }\n}\nexport interface StorageHandler {\n  logger: Logger;\n  deletePackage(fileName: string): Promise<void>;\n  removePackage(): Promise<void>;\n  //  next packages migration (this list is meant to replace the callback parent functions)\n  updatePackage(\n    packageName: string,\n    handleUpdate: (manifest: Manifest) => Promise<Manifest>\n  ): Promise<Manifest>;\n  readPackage(name: string): Promise<Manifest>;\n  savePackage(pkgName: string, value: Manifest): Promise<void>;\n  readTarball(pkgName: string, { signal }: { signal: AbortSignal }): Promise<Readable>;\n  createPackage(name: string, manifest: Manifest): Promise<void>;\n  writeTarball(tarballName: string, { signal }: { signal: AbortSignal }): Promise<Writable>;\n  // verify if tarball exist in the storage\n  hasTarball(fileName: string): Promise<boolean>;\n  // verify if package exist in the storage\n  hasPackage(): Promise<boolean>;\n}\n\nexport interface Storage<PluginConfig> extends Plugin<PluginConfig> {\n  add(name: string): Promise<void>;\n  remove(name: string): Promise<void>;\n  get(): Promise<any>;\n  init(): Promise<void>;\n  getSecret(): Promise<string>;\n  setSecret(secret: string): Promise<any>;\n  getPackageStorage(packageInfo: string): StorageHandler;\n  search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;\n  saveToken(token: Token): Promise<any>;\n  deleteToken(user: string, tokenKey: string): Promise<any>;\n  readTokens(filter: TokenFilter): Promise<Token[]>;\n}\n\n/**\n * This function allow add additional middleware to the application.\n *\n *  ```ts\n *  import express, { Request, Response } from 'express';\n * \n *  class Middleware extends Plugin {\n *    // instances of auth and storage are injected\n *    register_middlewares(app, auth, storage) {\n *      const router = express.Router();\n *      router.post('/my-endpoint', (req: Request, res: Response): void => {\n        res.status(200).end();\n      });\n *    }\n *  }\n * \n *  \n *  const [plugin] = await asyncLoadPlugin(...);\n *  plugin.register_middlewares(app, auth, storage);\n *  ```\n */\nexport interface ExpressMiddleware<PluginConfig, Storage, Auth> extends Plugin<PluginConfig> {\n  register_middlewares(app: Express, auth: Auth, storage: Storage): void;\n}\n\n/**\n * dasdsa\n */\nexport type AuthCallback = (error: VerdaccioError | null, groups?: string[] | false) => void;\n\nexport type AuthAccessCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AuthUserCallback = (error: VerdaccioError | null, access?: boolean | string) => void;\nexport type AuthChangePasswordCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AccessCallback = (error: VerdaccioError | null, ok?: boolean) => void;\nexport interface Auth<T> extends Plugin<T> {\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public authenticate(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // always return an array of users\n        return done(null, [user]);      \n   *  }\n   * ```\n   */\n  authenticate(user: string, password: string, cb: AuthCallback): void;\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public adduser(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // return boolean\n        return done(null, true);      \n   *  }\n   * ```\n   */\n  adduser?(user: string, password: string, cb: AuthUserCallback): void;\n  changePassword?(\n    user: string,\n    password: string,\n    newPassword: string,\n    cb: AuthChangePasswordCallback\n  ): void;\n  allow_publish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_publish?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AuthAccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: T & PackageAccess, cb: AccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AccessCallback): void;\n  allow_unpublish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_unpublish?(\n    user: RemoteUser,\n    pkg: AllowAccess & PackageAccess,\n    cb: AuthAccessCallback\n  ): void;\n  apiJWTmiddleware?(helpers: any): RequestHandler;\n}\n\nexport interface IBasicAuth {\n  authenticate(user: string, password: string, cb: Callback): void;\n  invalidateToken?(token: string): Promise<void>;\n  changePassword(user: string, password: string, newPassword: string, cb: Callback): void;\n  allow_access(pkg: AuthPluginPackage, user: RemoteUser, callback: Callback): void;\n  add_user(user: string, password: string, cb: Callback): any;\n}\n\nexport interface ManifestFilter<T> extends Plugin<T> {\n  filter_metadata(packageInfo: Manifest): Promise<Manifest>;\n}\n"],"mappings":";;;;;;AA2BA;AACA;AACA;AACA;AACA;AACO,MAAMA,MAAM,CAAe;EAChC,OAAOC,OAAO,GAAG,CAAC;EAIXC,WAAWA,CAACC,MAAoB,EAAEC,OAAsB,EAAE;IAC/D,IAAI,CAACH,OAAO,GAAGD,MAAM,CAACC,OAAO;IAC7B,IAAI,CAACE,MAAM,GAAGA,MAAM;IACpB,IAAI,CAACC,OAAO,GAAGA,OAAO;EACxB;EAEOC,UAAUA,CAAA,EAAG;IAClB,OAAO,IAAI,CAACJ,OAAO;EACrB;AACF;;AAmCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA;AACA;AACA;AAFAK,OAAA,CAAAN,MAAA,GAAAA,MAAA","ignoreList":[]}
+{"version":3,"file":"plugin-utils.js","names":["Plugin","version","constructor","config","options","getVersion","exports"],"sources":["../src/plugin-utils.ts"],"sourcesContent":["import { Express, RequestHandler } from 'express';\nimport { Readable, Writable } from 'stream';\n\nimport {\n  AllowAccess,\n  Callback,\n  Config,\n  Logger,\n  Manifest,\n  PackageAccess,\n  RemoteUser,\n  Token,\n  TokenFilter,\n} from '@verdaccio/types';\n\nimport { VerdaccioError, searchUtils } from '.';\n\nexport interface PluginOptions {\n  config: Config;\n  logger: Logger;\n}\n\n/**\n * Base Plugin Class\n *\n * Set of utilities for developing plugins.\n */\nexport class Plugin<PluginConfig> {\n  static version = 1;\n  public readonly version: number;\n  public readonly config: PluginConfig | unknown;\n  public readonly options: PluginOptions;\n  public constructor(config: PluginConfig, options: PluginOptions) {\n    this.version = Plugin.version;\n    this.config = config;\n    this.options = options;\n  }\n\n  public getVersion() {\n    return this.version;\n  }\n}\n\n// --- STORAGE PLUGIN ---\n\n/**\n * Storage Handler\n *\n * Used in storage plugin for managing packages and tarballs.\n */\nexport interface StorageHandler {\n  logger: Logger;\n  deletePackage(fileName: string): Promise<void>;\n  removePackage(): Promise<void>;\n  //  next packages migration (this list is meant to replace the callback parent functions)\n  updatePackage(\n    packageName: string,\n    handleUpdate: (manifest: Manifest) => Promise<Manifest>\n  ): Promise<Manifest>;\n  readPackage(packageName: string): Promise<Manifest>;\n  savePackage(packageName: string, manifest: Manifest): Promise<void>;\n  readTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Readable>;\n  createPackage(packageName: string, manifest: Manifest): Promise<void>;\n  writeTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Writable>;\n  // verify if tarball exist in the storage\n  hasTarball(fileName: string): Promise<boolean>;\n  // verify if package exist in the storage\n  hasPackage(): Promise<boolean>;\n}\n\n/**\n * Storage Plugin interface\n *\n * https://verdaccio.org/docs/next/plugin-storage\n */\nexport interface Storage<PluginConfig> extends Plugin<PluginConfig> {\n  add(packageName: string): Promise<void>;\n  remove(packageName: string): Promise<void>;\n  get(): Promise<string[]>;\n  init(): Promise<void>;\n  getSecret(): Promise<string>;\n  setSecret(secret: string): Promise<any>;\n  getPackageStorage(packageName: string): StorageHandler;\n  search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;\n  saveToken(token: Token): Promise<any>;\n  deleteToken(user: string, tokenKey: string): Promise<any>;\n  readTokens(filter: TokenFilter): Promise<Token[]>;\n}\n\n// --- MIDDLEWARE PLUGIN ---\n\n/**\n * Middleware Plugin Interface\n *\n * https://verdaccio.org/docs/next/plugin-middleware\n *\n * This function allow add middleware to the application.\n *\n *  ```ts\n *  import express, { Request, Response } from 'express';\n * \n *  class Middleware extends Plugin {\n *    // instances of auth and storage are injected\n *    register_middlewares(app, auth, storage) {\n *      const router = express.Router();\n *      router.post('/my-endpoint', (req: Request, res: Response): void => {\n        res.status(200).end();\n      });\n *    }\n *  }\n *\n *  const [plugin] = await asyncLoadPlugin(...);\n *  plugin.register_middlewares(app, auth, storage);\n *  ```\n */\nexport interface ExpressMiddleware<PluginConfig, Storage, Auth> extends Plugin<PluginConfig> {\n  register_middlewares(app: Express, auth: Auth, storage: Storage): void;\n}\n\n// --- AUTH PLUGIN ---\n\nexport type AuthCallback = (error: VerdaccioError | null, groups?: string[] | false) => void;\n\nexport type AuthAccessCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AuthUserCallback = (error: VerdaccioError | null, access?: boolean | string) => void;\nexport type AuthChangePasswordCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AccessCallback = (error: VerdaccioError | null, ok?: boolean) => void;\n\nexport interface AuthPluginPackage {\n  packageName: string;\n  packageVersion?: string;\n  tag?: string;\n}\n\n/**\n * Authentication Plugin Interface\n *\n * https://verdaccio.org/docs/next/plugin-auth\n */\nexport interface Auth<T> extends Plugin<T> {\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public authenticate(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // always return an array of users\n        return done(null, [user]);      \n   *  }\n   * ```\n   */\n  authenticate(user: string, password: string, cb: AuthCallback): void;\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public adduser(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // return boolean\n        return done(null, true);      \n   *  }\n   * ```\n   */\n  adduser?(user: string, password: string, cb: AuthUserCallback): void;\n  changePassword?(\n    user: string,\n    password: string,\n    newPassword: string,\n    cb: AuthChangePasswordCallback\n  ): void;\n  allow_publish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_publish?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AuthAccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: T & PackageAccess, cb: AccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AccessCallback): void;\n  allow_unpublish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_unpublish?(\n    user: RemoteUser,\n    pkg: AllowAccess & PackageAccess,\n    cb: AuthAccessCallback\n  ): void;\n  apiJWTmiddleware?(helpers: any): RequestHandler;\n}\n\nexport interface IBasicAuth {\n  authenticate(user: string, password: string, cb: Callback): void;\n  invalidateToken?(token: string): Promise<void>;\n  changePassword(user: string, password: string, newPassword: string, cb: Callback): void;\n  allow_access(pkg: AuthPluginPackage, user: RemoteUser, callback: Callback): void;\n  add_user(user: string, password: string, cb: Callback): any;\n}\n\n// --- FILTER PLUGIN ---\n\n/**\n * Filter Plugin Interface\n *\n * https://verdaccio.org/docs/next/plugin-filter\n */\nexport interface ManifestFilter<T> extends Plugin<T> {\n  filter_metadata(manifest: Manifest): Promise<Manifest>;\n}\n"],"mappings":";;;;;;AAsBA;AACA;AACA;AACA;AACA;AACO,MAAMA,MAAM,CAAe;EAChC,OAAOC,OAAO,GAAG,CAAC;EAIXC,WAAWA,CAACC,MAAoB,EAAEC,OAAsB,EAAE;IAC/D,IAAI,CAACH,OAAO,GAAGD,MAAM,CAACC,OAAO;IAC7B,IAAI,CAACE,MAAM,GAAGA,MAAM;IACpB,IAAI,CAACC,OAAO,GAAGA,OAAO;EACxB;EAEOC,UAAUA,CAAA,EAAG;IAClB,OAAO,IAAI,CAACJ,OAAO;EACrB;AACF;;AAEA;;AAEA;AACA;AACA;AACA;AACA;;AAqBA;AACA;AACA;AACA;AACA;;AAeA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA;;AAeA;AACA;AACA;AACA;AACA;;AAyDA;;AAEA;AACA;AACA;AACA;AACA;AAJAK,OAAA,CAAAN,MAAA,GAAAA,MAAA","ignoreList":[]}

package/build/schemes/unpublish-manifest.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Validate if a manifest has the correct structure when a new package
+ * is being created. The properties name, versions and _attachments must contain 1 element.
+ * @param data a manifest object
+ * @returns boolean
+ */
+export declare function validateUnPublishSingleVersion(manifest: any): boolean;

package/build/schemes/unpublish-manifest.js

@@ -0,0 +1,77 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.validateUnPublishSingleVersion = validateUnPublishSingleVersion;
+var _ajv = _interopRequireDefault(require("ajv"));
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+const ajv = new _ajv.default();
+// @ts-ignore
+const schema = {
+  type: 'object',
+  properties: {
+    name: {
+      type: 'string'
+    },
+    versions: {
+      type: 'object',
+      minProperties: 1
+    },
+    _rev: {
+      type: 'string'
+    },
+    _id: {
+      type: 'string'
+    },
+    time: {
+      type: 'object',
+      properties: {
+        created: {
+          type: 'string'
+        },
+        modified: {
+          type: 'string'
+        }
+      },
+      patternProperties: {
+        '^[0-9]+\\.[0-9]+\\.[0-9]+-\\d+$': {
+          type: 'string'
+        }
+      },
+      additionalProperties: true
+    },
+    readme: {
+      type: 'string'
+    },
+    'dist-tags': {
+      type: 'object',
+      properties: {
+        latest: {
+          type: 'string'
+        }
+      },
+      required: ['latest'],
+      additionalProperties: true
+    }
+  },
+  required: ['name', 'versions', 'dist-tags', '_rev', '_id', 'readme', 'time'],
+  additionalProperties: true
+};
+
+// validate is a type guard for MyData - type is inferred from schema type
+const validate = ajv.compile(schema);
+
+/**
+ * Validate if a manifest has the correct structure when a new package
+ * is being created. The properties name, versions and _attachments must contain 1 element.
+ * @param data a manifest object
+ * @returns boolean
+ */
+function validateUnPublishSingleVersion(manifest) {
+  if (!manifest) {
+    return false;
+  }
+  return validate(manifest);
+}
+//# sourceMappingURL=unpublish-manifest.js.map

package/build/schemes/unpublish-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpublish-manifest.js","names":["_ajv","_interopRequireDefault","require","e","__esModule","default","ajv","Ajv","schema","type","properties","name","versions","minProperties","_rev","_id","time","created","modified","patternProperties","additionalProperties","readme","latest","required","validate","compile","validateUnPublishSingleVersion","manifest"],"sources":["../../src/schemes/unpublish-manifest.ts"],"sourcesContent":["import Ajv, { JSONSchemaType } from 'ajv';\n\nconst ajv = new Ajv();\n\ninterface Manifest {\n  name: string;\n  versions: Record<string, unknown>;\n  _rev: string;\n  _id: string;\n  time: {\n    created: string;\n    modified: string;\n    [key: string]: string; // Allows pattern properties such as version numbers\n  };\n  readme: string;\n  'dist-tags': {\n    latest: string;\n    [key: string]: unknown; // Allows additional properties\n  };\n}\n\n// @ts-ignore\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', minProperties: 1 },\n    _rev: { type: 'string' },\n    _id: { type: 'string' },\n    time: {\n      type: 'object',\n      properties: {\n        created: { type: 'string' },\n        modified: { type: 'string' },\n      },\n      patternProperties: {\n        '^[0-9]+\\\\.[0-9]+\\\\.[0-9]+-\\\\d+$': { type: 'string' },\n      },\n      additionalProperties: true,\n    },\n    readme: { type: 'string' },\n    'dist-tags': {\n      type: 'object',\n      properties: {\n        latest: { type: 'string' },\n      },\n      required: ['latest'],\n      additionalProperties: true,\n    },\n  },\n  required: ['name', 'versions', 'dist-tags', '_rev', '_id', 'readme', 'time'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validateUnPublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,sBAAA,CAAAC,OAAA;AAA0C,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAE1C,MAAMG,GAAG,GAAG,IAAIC,YAAG,CAAC,CAAC;AAmBrB;AACA,MAAMC,MAAgC,GAAG;EACvCC,IAAI,EAAE,QAAQ;EACdC,UAAU,EAAE;IACVC,IAAI,EAAE;MAAEF,IAAI,EAAE;IAAS,CAAC;IACxBG,QAAQ,EAAE;MAAEH,IAAI,EAAE,QAAQ;MAAEI,aAAa,EAAE;IAAE,CAAC;IAC9CC,IAAI,EAAE;MAAEL,IAAI,EAAE;IAAS,CAAC;IACxBM,GAAG,EAAE;MAAEN,IAAI,EAAE;IAAS,CAAC;IACvBO,IAAI,EAAE;MACJP,IAAI,EAAE,QAAQ;MACdC,UAAU,EAAE;QACVO,OAAO,EAAE;UAAER,IAAI,EAAE;QAAS,CAAC;QAC3BS,QAAQ,EAAE;UAAET,IAAI,EAAE;QAAS;MAC7B,CAAC;MACDU,iBAAiB,EAAE;QACjB,iCAAiC,EAAE;UAAEV,IAAI,EAAE;QAAS;MACtD,CAAC;MACDW,oBAAoB,EAAE;IACxB,CAAC;IACDC,MAAM,EAAE;MAAEZ,IAAI,EAAE;IAAS,CAAC;IAC1B,WAAW,EAAE;MACXA,IAAI,EAAE,QAAQ;MACdC,UAAU,EAAE;QACVY,MAAM,EAAE;UAAEb,IAAI,EAAE;QAAS;MAC3B,CAAC;MACDc,QAAQ,EAAE,CAAC,QAAQ,CAAC;MACpBH,oBAAoB,EAAE;IACxB;EACF,CAAC;EACDG,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;EAC5EH,oBAAoB,EAAE;AACxB,CAAC;;AAED;AACA,MAAMI,QAAQ,GAAGlB,GAAG,CAACmB,OAAO,CAACjB,MAAM,CAAC;;AAEpC;AACA;AACA;AACA;AACA;AACA;AACO,SAASkB,8BAA8BA,CAACC,QAAa,EAAE;EAC5D,IAAI,CAACA,QAAQ,EAAE;IACb,OAAO,KAAK;EACd;EACA,OAAOH,QAAQ,CAACG,QAAQ,CAAC;AAC3B","ignoreList":[]}

package/build/validation-utils.d.ts

@@ -1,5 +1,6 @@
 import { Manifest } from '@verdaccio/types';
 export { validatePublishSingleVersion } from './schemes/publish-manifest';
+export { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';
 export declare function isPackageNameScoped(name: string): boolean;
 /**
  * From normalize-package-data/lib/fixer.js

package/build/validation-utils.js

@@ -15,10 +15,17 @@ Object.defineProperty(exports, "validatePublishSingleVersion", {
     return _publishManifest.validatePublishSingleVersion;
   }
 });
+Object.defineProperty(exports, "validateUnPublishSingleVersion", {
+  enumerable: true,
+  get: function () {
+    return _unpublishManifest.validateUnPublishSingleVersion;
+  }
+});
 exports.validateUserName = validateUserName;
 var _assert = _interopRequireDefault(require("assert"));
 var _constants = require("./constants");
 var _publishManifest = require("./schemes/publish-manifest");
+var _unpublishManifest = require("./schemes/unpublish-manifest");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 function isPackageNameScoped(name) {
   return name.startsWith('@');

package/build/validation-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation-utils.js","names":["_assert","_interopRequireDefault","require","_constants","_publishManifest","e","__esModule","default","isPackageNameScoped","name","startsWith","validateName","normalizedName","toLowerCase","isScoped","scopedName","split","match","includes","validatePackage","nameList","length","slice","normalizeMetadata","manifest","assert","strictEqual","_manifest","isObject","DIST_TAGS","Array","isArray","MAINTAINERS","obj","Object","prototype","toString","call","validatePassword","password","validation","DEFAULT_PASSWORD_VALIDATION","RegExp","validateUserName","userName","expectedName"],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { Manifest } from '@verdaccio/types';\n\nimport { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS, MAINTAINERS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  if (!Array.isArray(manifest[MAINTAINERS])) {\n    _manifest[MAINTAINERS] = [];\n  }\n\n  // This may not be needed\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  // if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n  //   return false;\n  // }\n\n  // return (\n  //   (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n  //   Array.isArray(obj) === false\n  // );\n  return Object.prototype.toString.call(obj) === '[object Object]';\n}\n\nexport function validatePassword(\n  password: string,\n  validation: RegExp = DEFAULT_PASSWORD_VALIDATION\n): boolean {\n  return typeof password === 'string' && validation instanceof RegExp\n    ? password.match(validation) !== null\n    : false;\n}\n\nexport function validateUserName(userName: any, expectedName: string): boolean {\n  return (\n    typeof userName === 'string' &&\n    userName.split(':')[0] === 'org.couchdb.user' &&\n    userName.split(':')[1] === expectedName\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,UAAA,GAAAD,OAAA;AAEA,IAAAE,gBAAA,GAAAF,OAAA;AAA0E,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEnE,SAASG,mBAAmBA,CAACC,IAAY,EAAW;EACzD,OAAOA,IAAI,CAACC,UAAU,CAAC,GAAG,CAAC;AAC7B;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,YAAYA,CAACF,IAAY,EAAW;EAClD,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE;IAC5B,OAAO,KAAK;EACd;EAEA,IAAIG,cAAsB,GAAGH,IAAI,CAACI,WAAW,CAAC,CAAC;EAE/C,MAAMC,QAAiB,GAAGN,mBAAmB,CAACC,IAAI,CAAC;EACnD,MAAMM,UAAU,GAAGN,IAAI,CAACO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;EAExC,IAAIF,QAAQ,IAAI,OAAOC,UAAU,KAAK,WAAW,EAAE;IACjDH,cAAc,GAAGG,UAAU,CAACF,WAAW,CAAC,CAAC;EAC3C;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,EACL,CAACD,cAAc,CAACK,KAAK,CAAC,0BAA0B,CAAC,IACjDL,cAAc,CAACF,UAAU,CAAC,GAAG,CAAC;EAAI;EAClC,CAAC,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,CAACQ,QAAQ,CAACN,cAAc,CAAC,CACtE;AACH;;AAEA;AACA;AACA;AACA;AACO,SAASO,eAAeA,CAACV,IAAY,EAAW;EACrD,MAAMW,QAAQ,GAAGX,IAAI,CAACO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;EACnC,IAAII,QAAQ,CAACC,MAAM,KAAK,CAAC,EAAE;IACzB;IACA,OAAOV,YAAY,CAACS,QAAQ,CAAC,CAAC,CAAC,CAAC;EAClC;EACA;EACA,OAAOA,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAIT,YAAY,CAACS,QAAQ,CAAC,CAAC,CAAC,CAACE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAIX,YAAY,CAACS,QAAQ,CAAC,CAAC,CAAC,CAAC;AAClG;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,iBAAiBA,CAACC,QAAkB,EAAEf,IAAY,EAAY;EAC5EgB,eAAM,CAACC,WAAW,CAACF,QAAQ,CAACf,IAAI,EAAEA,IAAI,CAAC;EACvC,MAAMkB,SAAS,GAAG;IAAE,GAAGH;EAAS,CAAC;EAEjC,IAAI,CAACI,QAAQ,CAACJ,QAAQ,CAACK,oBAAS,CAAC,CAAC,EAAE;IAClCF,SAAS,CAACE,oBAAS,CAAC,GAAG,CAAC,CAAC;EAC3B;EAEA,IAAI,CAACC,KAAK,CAACC,OAAO,CAACP,QAAQ,CAACQ,sBAAW,CAAC,CAAC,EAAE;IACzCL,SAAS,CAACK,sBAAW,CAAC,GAAG,EAAE;EAC7B;;EAEA;EACA,IAAI,CAACJ,QAAQ,CAACJ,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE;IACnCG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;EAC5B;EAEA,IAAI,CAACC,QAAQ,CAACJ,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE;IAC/BG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;EACxB;EAEA,OAAOA,SAAS;AAClB;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,QAAQA,CAACK,GAAQ,EAAW;EAC1C;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA,OAAOC,MAAM,CAACC,SAAS,CAACC,QAAQ,CAACC,IAAI,CAACJ,GAAG,CAAC,KAAK,iBAAiB;AAClE;AAEO,SAASK,gBAAgBA,CAC9BC,QAAgB,EAChBC,UAAkB,GAAGC,sCAA2B,EACvC;EACT,OAAO,OAAOF,QAAQ,KAAK,QAAQ,IAAIC,UAAU,YAAYE,MAAM,GAC/DH,QAAQ,CAACtB,KAAK,CAACuB,UAAU,CAAC,KAAK,IAAI,GACnC,KAAK;AACX;AAEO,SAASG,gBAAgBA,CAACC,QAAa,EAAEC,YAAoB,EAAW;EAC7E,OACE,OAAOD,QAAQ,KAAK,QAAQ,IAC5BA,QAAQ,CAAC5B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,kBAAkB,IAC7C4B,QAAQ,CAAC5B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK6B,YAAY;AAE3C","ignoreList":[]}
+{"version":3,"file":"validation-utils.js","names":["_assert","_interopRequireDefault","require","_constants","_publishManifest","_unpublishManifest","e","__esModule","default","isPackageNameScoped","name","startsWith","validateName","normalizedName","toLowerCase","isScoped","scopedName","split","match","includes","validatePackage","nameList","length","slice","normalizeMetadata","manifest","assert","strictEqual","_manifest","isObject","DIST_TAGS","Array","isArray","MAINTAINERS","obj","Object","prototype","toString","call","validatePassword","password","validation","DEFAULT_PASSWORD_VALIDATION","RegExp","validateUserName","userName","expectedName"],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { Manifest } from '@verdaccio/types';\n\nimport { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS, MAINTAINERS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\nexport { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  if (!Array.isArray(manifest[MAINTAINERS])) {\n    _manifest[MAINTAINERS] = [];\n  }\n\n  // This may not be needed\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  // if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n  //   return false;\n  // }\n\n  // return (\n  //   (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n  //   Array.isArray(obj) === false\n  // );\n  return Object.prototype.toString.call(obj) === '[object Object]';\n}\n\nexport function validatePassword(\n  password: string,\n  validation: RegExp = DEFAULT_PASSWORD_VALIDATION\n): boolean {\n  return typeof password === 'string' && validation instanceof RegExp\n    ? password.match(validation) !== null\n    : false;\n}\n\nexport function validateUserName(userName: any, expectedName: string): boolean {\n  return (\n    typeof userName === 'string' &&\n    userName.split(':')[0] === 'org.couchdb.user' &&\n    userName.split(':')[1] === expectedName\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,UAAA,GAAAD,OAAA;AAEA,IAAAE,gBAAA,GAAAF,OAAA;AACA,IAAAG,kBAAA,GAAAH,OAAA;AAA8E,SAAAD,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEvE,SAASG,mBAAmBA,CAACC,IAAY,EAAW;EACzD,OAAOA,IAAI,CAACC,UAAU,CAAC,GAAG,CAAC;AAC7B;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,YAAYA,CAACF,IAAY,EAAW;EAClD,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE;IAC5B,OAAO,KAAK;EACd;EAEA,IAAIG,cAAsB,GAAGH,IAAI,CAACI,WAAW,CAAC,CAAC;EAE/C,MAAMC,QAAiB,GAAGN,mBAAmB,CAACC,IAAI,CAAC;EACnD,MAAMM,UAAU,GAAGN,IAAI,CAACO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;EAExC,IAAIF,QAAQ,IAAI,OAAOC,UAAU,KAAK,WAAW,EAAE;IACjDH,cAAc,GAAGG,UAAU,CAACF,WAAW,CAAC,CAAC;EAC3C;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,OAAO,EACL,CAACD,cAAc,CAACK,KAAK,CAAC,0BAA0B,CAAC,IACjDL,cAAc,CAACF,UAAU,CAAC,GAAG,CAAC;EAAI;EAClC,CAAC,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,CAACQ,QAAQ,CAACN,cAAc,CAAC,CACtE;AACH;;AAEA;AACA;AACA;AACA;AACO,SAASO,eAAeA,CAACV,IAAY,EAAW;EACrD,MAAMW,QAAQ,GAAGX,IAAI,CAACO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;EACnC,IAAII,QAAQ,CAACC,MAAM,KAAK,CAAC,EAAE;IACzB;IACA,OAAOV,YAAY,CAACS,QAAQ,CAAC,CAAC,CAAC,CAAC;EAClC;EACA;EACA,OAAOA,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAIT,YAAY,CAACS,QAAQ,CAAC,CAAC,CAAC,CAACE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAIX,YAAY,CAACS,QAAQ,CAAC,CAAC,CAAC,CAAC;AAClG;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,iBAAiBA,CAACC,QAAkB,EAAEf,IAAY,EAAY;EAC5EgB,eAAM,CAACC,WAAW,CAACF,QAAQ,CAACf,IAAI,EAAEA,IAAI,CAAC;EACvC,MAAMkB,SAAS,GAAG;IAAE,GAAGH;EAAS,CAAC;EAEjC,IAAI,CAACI,QAAQ,CAACJ,QAAQ,CAACK,oBAAS,CAAC,CAAC,EAAE;IAClCF,SAAS,CAACE,oBAAS,CAAC,GAAG,CAAC,CAAC;EAC3B;EAEA,IAAI,CAACC,KAAK,CAACC,OAAO,CAACP,QAAQ,CAACQ,sBAAW,CAAC,CAAC,EAAE;IACzCL,SAAS,CAACK,sBAAW,CAAC,GAAG,EAAE;EAC7B;;EAEA;EACA,IAAI,CAACJ,QAAQ,CAACJ,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE;IACnCG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;EAC5B;EAEA,IAAI,CAACC,QAAQ,CAACJ,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE;IAC/BG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;EACxB;EAEA,OAAOA,SAAS;AAClB;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,QAAQA,CAACK,GAAQ,EAAW;EAC1C;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA,OAAOC,MAAM,CAACC,SAAS,CAACC,QAAQ,CAACC,IAAI,CAACJ,GAAG,CAAC,KAAK,iBAAiB;AAClE;AAEO,SAASK,gBAAgBA,CAC9BC,QAAgB,EAChBC,UAAkB,GAAGC,sCAA2B,EACvC;EACT,OAAO,OAAOF,QAAQ,KAAK,QAAQ,IAAIC,UAAU,YAAYE,MAAM,GAC/DH,QAAQ,CAACtB,KAAK,CAACuB,UAAU,CAAC,KAAK,IAAI,GACnC,KAAK;AACX;AAEO,SAASG,gBAAgBA,CAACC,QAAa,EAAEC,YAAoB,EAAW;EAC7E,OACE,OAAOD,QAAQ,KAAK,QAAQ,IAC5BA,QAAQ,CAAC5B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,kBAAkB,IAC7C4B,QAAQ,CAAC5B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK6B,YAAY;AAE3C","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "8.0.0-next-8.3",
+  "version": "8.0.0-next-8.5",
   "description": "core utilities",
   "keywords": [
     "private",
@@ -41,7 +41,7 @@
     "semver": "7.6.3"
   },
   "devDependencies": {
-    "@verdaccio/types": "13.0.0-next-8.1",
+    "@verdaccio/types": "13.0.0-next-8.2",
     "lodash": "4.17.21",
     "typedoc": "0.23.25",
     "typedoc-plugin-missing-exports": "latest"

package/src/constants.ts

@@ -46,6 +46,10 @@ export const HEADERS = {
   CSP: 'Content-Security-Policy',
   CTO: 'X-Content-Type-Options',
   XSS: 'X-XSS-Protection',
+  CLIENT: 'X-Client',
+  POWERED_BY: 'X-Powered-By',
+  RATELIMIT_LIMIT: 'X-RateLimit-Limit',
+  RATELIMIT_REMAINING: 'X-RateLimit-Remaining',
   NONE_MATCH: 'If-None-Match',
   ETAG: 'ETag',
   JSON_CHARSET: 'application/json; charset=utf-8',
@@ -54,6 +58,7 @@ export const HEADERS = {
   TEXT_CHARSET: 'text/plain; charset=utf-8',
   WWW_AUTH: 'WWW-Authenticate',
   GZIP: 'gzip',
+  HOST: 'host',
 };
 
 export const HTTP_STATUS = {

package/src/error-utils.ts

@@ -3,7 +3,7 @@ import createError, { HttpError } from 'http-errors';
 import { HTTP_STATUS } from './constants';
 
 export const API_ERROR = {
-  PASSWORD_SHORT: `The provided password does not pass the validation`,
+  PASSWORD_SHORT: 'The provided password does not pass the validation',
   MUST_BE_LOGGED: 'You must be logged in to publish packages.',
   PLUGIN_ERROR: 'bug in the auth plugin system',
   CONFIG_BAD_FORMAT: 'config file must be an object',

package/src/file-utils.ts

@@ -14,7 +14,7 @@ const { mkdir, mkdtemp } = fs.promises ? fs.promises : require('fs/promises');
  * @returns string
  */
 export async function createTempFolder(prefix: string): Promise<string> {
-  return await mkdtemp(path.join(os.tmpdir(), prefix));
+  return await mkdtemp(path.join(os.tmpdir(), 'verdaccio-' + prefix + '-'));
 }
 
 /**

package/src/plugin-utils.ts

@@ -15,21 +15,16 @@ import {
 
 import { VerdaccioError, searchUtils } from '.';
 
-export interface AuthPluginPackage {
-  packageName: string;
-  packageVersion?: string;
-  tag?: string;
-}
 export interface PluginOptions {
   config: Config;
   logger: Logger;
 }
 
 /**
- * The base plugin class, set of utilities for developing
- * plugins.
- * @alpha
- * */
+ * Base Plugin Class
+ *
+ * Set of utilities for developing plugins.
+ */
 export class Plugin<PluginConfig> {
   static version = 1;
   public readonly version: number;
@@ -45,6 +40,14 @@ export class Plugin<PluginConfig> {
     return this.version;
   }
 }
+
+// --- STORAGE PLUGIN ---
+
+/**
+ * Storage Handler
+ *
+ * Used in storage plugin for managing packages and tarballs.
+ */
 export interface StorageHandler {
   logger: Logger;
   deletePackage(fileName: string): Promise<void>;
@@ -54,33 +57,44 @@ export interface StorageHandler {
     packageName: string,
     handleUpdate: (manifest: Manifest) => Promise<Manifest>
   ): Promise<Manifest>;
-  readPackage(name: string): Promise<Manifest>;
-  savePackage(pkgName: string, value: Manifest): Promise<void>;
-  readTarball(pkgName: string, { signal }: { signal: AbortSignal }): Promise<Readable>;
-  createPackage(name: string, manifest: Manifest): Promise<void>;
-  writeTarball(tarballName: string, { signal }: { signal: AbortSignal }): Promise<Writable>;
+  readPackage(packageName: string): Promise<Manifest>;
+  savePackage(packageName: string, manifest: Manifest): Promise<void>;
+  readTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Readable>;
+  createPackage(packageName: string, manifest: Manifest): Promise<void>;
+  writeTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Writable>;
   // verify if tarball exist in the storage
   hasTarball(fileName: string): Promise<boolean>;
   // verify if package exist in the storage
   hasPackage(): Promise<boolean>;
 }
 
+/**
+ * Storage Plugin interface
+ *
+ * https://verdaccio.org/docs/next/plugin-storage
+ */
 export interface Storage<PluginConfig> extends Plugin<PluginConfig> {
-  add(name: string): Promise<void>;
-  remove(name: string): Promise<void>;
-  get(): Promise<any>;
+  add(packageName: string): Promise<void>;
+  remove(packageName: string): Promise<void>;
+  get(): Promise<string[]>;
   init(): Promise<void>;
   getSecret(): Promise<string>;
   setSecret(secret: string): Promise<any>;
-  getPackageStorage(packageInfo: string): StorageHandler;
+  getPackageStorage(packageName: string): StorageHandler;
   search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;
   saveToken(token: Token): Promise<any>;
   deleteToken(user: string, tokenKey: string): Promise<any>;
   readTokens(filter: TokenFilter): Promise<Token[]>;
 }
 
+// --- MIDDLEWARE PLUGIN ---
+
 /**
- * This function allow add additional middleware to the application.
+ * Middleware Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-middleware
+ *
+ * This function allow add middleware to the application.
  *
  *  ```ts
  *  import express, { Request, Response } from 'express';
@@ -94,8 +108,7 @@ export interface Storage<PluginConfig> extends Plugin<PluginConfig> {
       });
  *    }
  *  }
- * 
- *  
+ *
  *  const [plugin] = await asyncLoadPlugin(...);
  *  plugin.register_middlewares(app, auth, storage);
  *  ```
@@ -104,15 +117,26 @@ export interface ExpressMiddleware<PluginConfig, Storage, Auth> extends Plugin<P
   register_middlewares(app: Express, auth: Auth, storage: Storage): void;
 }
 
-/**
- * dasdsa
- */
+// --- AUTH PLUGIN ---
+
 export type AuthCallback = (error: VerdaccioError | null, groups?: string[] | false) => void;
 
 export type AuthAccessCallback = (error: VerdaccioError | null, access?: boolean) => void;
 export type AuthUserCallback = (error: VerdaccioError | null, access?: boolean | string) => void;
 export type AuthChangePasswordCallback = (error: VerdaccioError | null, access?: boolean) => void;
 export type AccessCallback = (error: VerdaccioError | null, ok?: boolean) => void;
+
+export interface AuthPluginPackage {
+  packageName: string;
+  packageVersion?: string;
+  tag?: string;
+}
+
+/**
+ * Authentication Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-auth
+ */
 export interface Auth<T> extends Plugin<T> {
   /**
    * Handles the authenticated method.
@@ -169,6 +193,13 @@ export interface IBasicAuth {
   add_user(user: string, password: string, cb: Callback): any;
 }
 
+// --- FILTER PLUGIN ---
+
+/**
+ * Filter Plugin Interface
+ *
+ * https://verdaccio.org/docs/next/plugin-filter
+ */
 export interface ManifestFilter<T> extends Plugin<T> {
-  filter_metadata(packageInfo: Manifest): Promise<Manifest>;
+  filter_metadata(manifest: Manifest): Promise<Manifest>;
 }

package/src/schemes/unpublish-manifest.ts

@@ -0,0 +1,69 @@
+import Ajv, { JSONSchemaType } from 'ajv';
+
+const ajv = new Ajv();
+
+interface Manifest {
+  name: string;
+  versions: Record<string, unknown>;
+  _rev: string;
+  _id: string;
+  time: {
+    created: string;
+    modified: string;
+    [key: string]: string; // Allows pattern properties such as version numbers
+  };
+  readme: string;
+  'dist-tags': {
+    latest: string;
+    [key: string]: unknown; // Allows additional properties
+  };
+}
+
+// @ts-ignore
+const schema: JSONSchemaType<Manifest> = {
+  type: 'object',
+  properties: {
+    name: { type: 'string' },
+    versions: { type: 'object', minProperties: 1 },
+    _rev: { type: 'string' },
+    _id: { type: 'string' },
+    time: {
+      type: 'object',
+      properties: {
+        created: { type: 'string' },
+        modified: { type: 'string' },
+      },
+      patternProperties: {
+        '^[0-9]+\\.[0-9]+\\.[0-9]+-\\d+$': { type: 'string' },
+      },
+      additionalProperties: true,
+    },
+    readme: { type: 'string' },
+    'dist-tags': {
+      type: 'object',
+      properties: {
+        latest: { type: 'string' },
+      },
+      required: ['latest'],
+      additionalProperties: true,
+    },
+  },
+  required: ['name', 'versions', 'dist-tags', '_rev', '_id', 'readme', 'time'],
+  additionalProperties: true,
+};
+
+// validate is a type guard for MyData - type is inferred from schema type
+const validate = ajv.compile(schema);
+
+/**
+ * Validate if a manifest has the correct structure when a new package
+ * is being created. The properties name, versions and _attachments must contain 1 element.
+ * @param data a manifest object
+ * @returns boolean
+ */
+export function validateUnPublishSingleVersion(manifest: any) {
+  if (!manifest) {
+    return false;
+  }
+  return validate(manifest);
+}

package/src/validation-utils.ts

@@ -5,6 +5,7 @@ import { Manifest } from '@verdaccio/types';
 import { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS, MAINTAINERS } from './constants';
 
 export { validatePublishSingleVersion } from './schemes/publish-manifest';
+export { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';
 
 export function isPackageNameScoped(name: string): boolean {
   return name.startsWith('@');

package/test/publish-manifest.spec.ts

@@ -0,0 +1,61 @@
+import { describe, expect, test } from 'vitest';
+
+import { validatePublishSingleVersion } from '../src/schemes/publish-manifest';
+
+describe('validatePublishSingleVersion', () => {
+  describe('valid cases', () => {
+    test('should validate a manifest when name and versions are present, even with extra properties', () => {
+      const manifest = {
+        name: 'foo-pkg',
+        _attachments: { '2': {} },
+        versions: { '1': {} },
+        something: 'else',
+      };
+      expect(validatePublishSingleVersion(manifest)).toBe(true);
+    });
+  });
+
+  describe('invalid cases', () => {
+    test('should invalidate a manifest when name is missing', () => {
+      const manifest = {
+        _attachments: { '2': {} },
+        versions: { '1': {} },
+      };
+      expect(validatePublishSingleVersion(manifest)).toBe(false);
+    });
+
+    test('should invalidate a manifest when _attachments is missing', () => {
+      const manifest = {
+        name: 'foo-pkg',
+        versions: { '1': {} },
+      };
+      expect(validatePublishSingleVersion(manifest)).toBe(false);
+    });
+
+    test('should invalidate a manifest when versions is missing', () => {
+      const manifest = {
+        name: 'foo-pkg',
+        _attachments: { '1': {} },
+      };
+      expect(validatePublishSingleVersion(manifest)).toBe(false);
+    });
+
+    test('should invalidate a manifest when versions contains more than one entry', () => {
+      const manifest = {
+        name: 'foo-pkg',
+        versions: { '1': {}, '2': {} },
+        _attachments: { '1': {} },
+      };
+      expect(validatePublishSingleVersion(manifest)).toBe(false);
+    });
+
+    test('should invalidate a manifest when _attachments contains more than one entry', () => {
+      const manifest = {
+        name: 'foo-pkg',
+        _attachments: { '1': {}, '2': {} },
+        versions: { '1': {} },
+      };
+      expect(validatePublishSingleVersion(manifest)).toBe(false);
+    });
+  });
+});

package/test/unpublish-manifest.spec.ts

@@ -0,0 +1,71 @@
+import { describe, expect, it } from 'vitest';
+
+import { validateUnPublishSingleVersion } from '../src/schemes/unpublish-manifest';
+
+describe('validatePublishSingleVersion', () => {
+  it('should validate a valid manifest correctly', () => {
+    const validManifest = {
+      name: '@juanpicado/test2',
+      versions: {
+        '3.0.2-0': {
+          name: '@juanpicado/test2',
+        },
+      },
+      _rev: '9-17c706cc377dc959',
+      _id: '@juanpicado/test2',
+      time: {
+        created: '2024-11-02T14:33:06.170Z',
+        modified: '2024-11-02T14:33:22.919Z',
+        '3.0.2-0': '2024-11-02T14:33:06.208Z',
+        '3.0.3-0': '2024-11-02T14:33:19.520Z',
+      },
+      readme: 'ERROR: No README data found!',
+      'dist-tags': {
+        latest: '3.0.3-0',
+      },
+    };
+
+    const result = validateUnPublishSingleVersion(validManifest);
+    expect(result).toBe(true);
+  });
+
+  it('should invalidate a manifest missing required properties', () => {
+    const invalidManifest = {
+      name: '@juanpicado/test2',
+      versions: {
+        '3.0.2-0': {
+          name: '@juanpicado/test2',
+        },
+      },
+    };
+
+    const result = validateUnPublishSingleVersion(invalidManifest);
+    expect(result).toBe(false);
+  });
+
+  it('should invalidate a manifest with empty versions object', () => {
+    const invalidManifest = {
+      name: '@juanpicado/test2',
+      versions: {},
+      _rev: '9-17c706cc377dc959',
+      _id: '@juanpicado/test2',
+      time: {
+        created: '2024-11-02T14:33:06.170Z',
+        modified: '2024-11-02T14:33:22.919Z',
+        '3.0.2-0': '2024-11-02T14:33:06.208Z',
+      },
+      readme: 'ERROR: No README data found!',
+      'dist-tags': {
+        latest: '3.0.3-0',
+      },
+    };
+
+    const result = validateUnPublishSingleVersion(invalidManifest);
+    expect(result).toBe(false);
+  });
+
+  it('should invalidate a null manifest', () => {
+    const result = validateUnPublishSingleVersion(null);
+    expect(result).toBe(false);
+  });
+});

package/test/validation-utilts.spec.ts

@@ -1,7 +1,6 @@
 import { describe, expect, test } from 'vitest';
 
 import { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS } from '../src/constants';
-import { validatePublishSingleVersion } from '../src/schemes/publish-manifest';
 import {
   isObject,
   normalizeMetadata,
@@ -118,65 +117,6 @@ describe('validateName', () => {
   });
 });
 
-describe('validatePublishSingleVersion', () => {
-  test('should be valid', () => {
-    expect(
-      validatePublishSingleVersion({
-        name: 'foo-pkg',
-        _attachments: { '2': {} },
-        versions: { '1': {} },
-      })
-    ).toBeTruthy();
-  });
-
-  test('should be invalid if name is missing', () => {
-    expect(
-      validatePublishSingleVersion({
-        _attachments: { '2': {} },
-        versions: { '1': {} },
-      })
-    ).toBeFalsy();
-  });
-
-  test('should be invalid if _attachments is missing', () => {
-    expect(
-      validatePublishSingleVersion({
-        name: 'foo-pkg',
-        versions: { '1': {} },
-      })
-    ).toBeFalsy();
-  });
-
-  test('should be invalid if versions is missing', () => {
-    expect(
-      validatePublishSingleVersion({
-        name: 'foo-pkg',
-        _attachments: { '1': {} },
-      })
-    ).toBeFalsy();
-  });
-
-  test('should be invalid if versions is more than 1', () => {
-    expect(
-      validatePublishSingleVersion({
-        name: 'foo-pkg',
-        versions: { '1': {}, '2': {} },
-        _attachments: { '1': {} },
-      })
-    ).toBeFalsy();
-  });
-
-  test('should be invalid if _attachments is more than 1', () => {
-    expect(
-      validatePublishSingleVersion({
-        name: 'foo-pkg',
-        _attachments: { '1': {}, '2': {} },
-        versions: { '1': {} },
-      })
-    ).toBeFalsy();
-  });
-});
-
 describe('validatePassword', () => {
   test('should validate password according the length', () => {
     expect(validatePassword('12345', DEFAULT_PASSWORD_VALIDATION)).toBeTruthy();