@verdaccio/middleware 6.0.0-6-next.38 → 6.0.0-6-next.39

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @verdaccio/middleware
 
+## 6.0.0-6-next.39
+
+### Minor Changes
+
+- 45c03819: refactor: render html middleware
+
+### Patch Changes
+
+- Updated dependencies [45c03819]
+  - @verdaccio/config@6.0.0-6-next.60
+  - @verdaccio/core@6.0.0-6-next.60
+  - @verdaccio/url@11.0.0-6-next.26
+  - @verdaccio/utils@6.0.0-6-next.28
+
 ## 6.0.0-6-next.38
 
 ### Patch Changes

package/build/index.d.ts

@@ -7,6 +7,9 @@ export { expectJson } from './middlewares/json';
 export { antiLoop } from './middlewares/antiLoop';
 export { final } from './middlewares/final';
 export { allow } from './middlewares/allow';
+export { rateLimit } from './middlewares/rate-limit';
+export { userAgent } from './middlewares/user-agent';
+export { webMiddleware } from './middlewares/web';
 export { errorReportingMiddleware, handleError } from './middlewares/error';
 export { log, LOG_STATUS_MESSAGE, LOG_VERDACCIO_BYTES, LOG_VERDACCIO_ERROR, } from './middlewares/log';
 export * from './types';

package/build/index.js

@@ -14,6 +14,9 @@ var _exportNames = {
   antiLoop: true,
   final: true,
   allow: true,
+  rateLimit: true,
+  userAgent: true,
+  webMiddleware: true,
   errorReportingMiddleware: true,
   handleError: true,
   log: true,
@@ -99,12 +102,24 @@ Object.defineProperty(exports, "media", {
     return _media.media;
   }
 });
+Object.defineProperty(exports, "rateLimit", {
+  enumerable: true,
+  get: function () {
+    return _rateLimit.rateLimit;
+  }
+});
 Object.defineProperty(exports, "setSecurityWebHeaders", {
   enumerable: true,
   get: function () {
     return _securityHeaders.setSecurityWebHeaders;
   }
 });
+Object.defineProperty(exports, "userAgent", {
+  enumerable: true,
+  get: function () {
+    return _userAgent.userAgent;
+  }
+});
 Object.defineProperty(exports, "validateName", {
   enumerable: true,
   get: function () {
@@ -117,6 +132,12 @@ Object.defineProperty(exports, "validatePackage", {
     return _validation.validatePackage;
   }
 });
+Object.defineProperty(exports, "webMiddleware", {
+  enumerable: true,
+  get: function () {
+    return _web.webMiddleware;
+  }
+});
 var _match = require("./middlewares/match");
 var _securityHeaders = require("./middlewares/security-headers");
 var _validation = require("./middlewares/validation");
@@ -126,6 +147,9 @@ var _json = require("./middlewares/json");
 var _antiLoop = require("./middlewares/antiLoop");
 var _final = require("./middlewares/final");
 var _allow = require("./middlewares/allow");
+var _rateLimit = require("./middlewares/rate-limit");
+var _userAgent = require("./middlewares/user-agent");
+var _web = require("./middlewares/web");
 var _error = require("./middlewares/error");
 var _log = require("./middlewares/log");
 var _types = require("./types");

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["export { match } from './middlewares/match';\nexport { setSecurityWebHeaders } from './middlewares/security-headers';\nexport { validateName, validatePackage } from './middlewares/validation';\nexport { media } from './middlewares/media';\nexport { encodeScopePackage } from './middlewares/encode-pkg';\nexport { expectJson } from './middlewares/json';\nexport { antiLoop } from './middlewares/antiLoop';\nexport { final } from './middlewares/final';\nexport { allow } from './middlewares/allow';\nexport { errorReportingMiddleware, handleError } from './middlewares/error';\nexport {\n  log,\n  LOG_STATUS_MESSAGE,\n  LOG_VERDACCIO_BYTES,\n  LOG_VERDACCIO_ERROR,\n} from './middlewares/log';\nexport * from './types';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAMA;AAAA;EAAA;EAAA;EAAA;EAAA;IAAA;IAAA;MAAA;IAAA;EAAA;AAAA"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["export { match } from './middlewares/match';\nexport { setSecurityWebHeaders } from './middlewares/security-headers';\nexport { validateName, validatePackage } from './middlewares/validation';\nexport { media } from './middlewares/media';\nexport { encodeScopePackage } from './middlewares/encode-pkg';\nexport { expectJson } from './middlewares/json';\nexport { antiLoop } from './middlewares/antiLoop';\nexport { final } from './middlewares/final';\nexport { allow } from './middlewares/allow';\nexport { rateLimit } from './middlewares/rate-limit';\nexport { userAgent } from './middlewares/user-agent';\nexport { webMiddleware } from './middlewares/web';\nexport { errorReportingMiddleware, handleError } from './middlewares/error';\nexport {\n  log,\n  LOG_STATUS_MESSAGE,\n  LOG_VERDACCIO_BYTES,\n  LOG_VERDACCIO_ERROR,\n} from './middlewares/log';\nexport * from './types';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAMA;AAAA;EAAA;EAAA;EAAA;EAAA;IAAA;IAAA;MAAA;IAAA;EAAA;AAAA"}

package/build/middlewares/rate-limit.d.ts

@@ -0,0 +1,2 @@
+import { RateLimit as RateLimitType } from '@verdaccio/types';
+export declare function rateLimit(rateLimitOptions?: RateLimitType): any;

package/build/middlewares/rate-limit.js

@@ -0,0 +1,13 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.rateLimit = rateLimit;
+var _expressRateLimit = _interopRequireDefault(require("express-rate-limit"));
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+function rateLimit(rateLimitOptions) {
+  const limiter = new _expressRateLimit.default(rateLimitOptions);
+  return limiter;
+}
+//# sourceMappingURL=rate-limit.js.map

package/build/middlewares/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","names":["rateLimit","rateLimitOptions","limiter","RateLimit"],"sources":["../../src/middlewares/rate-limit.ts"],"sourcesContent":["import RateLimit from 'express-rate-limit';\n\nimport { RateLimit as RateLimitType } from '@verdaccio/types';\n\nexport function rateLimit(rateLimitOptions?: RateLimitType) {\n  const limiter = new RateLimit(rateLimitOptions);\n  return limiter;\n}\n"],"mappings":";;;;;;AAAA;AAA2C;AAIpC,SAASA,SAAS,CAACC,gBAAgC,EAAE;EAC1D,MAAMC,OAAO,GAAG,IAAIC,yBAAS,CAACF,gBAAgB,CAAC;EAC/C,OAAOC,OAAO;AAChB"}

package/build/middlewares/user-agent.d.ts

@@ -0,0 +1,2 @@
+import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
+export declare function userAgent(config: any): (_req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) => void;

package/build/middlewares/user-agent.js

@@ -0,0 +1,14 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.userAgent = userAgent;
+var _config = require("@verdaccio/config");
+function userAgent(config) {
+  return function (_req, res, next) {
+    res.setHeader('x-powered-by', (0, _config.getUserAgent)(config === null || config === void 0 ? void 0 : config.user_agent));
+    next();
+  };
+}
+//# sourceMappingURL=user-agent.js.map

package/build/middlewares/user-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent.js","names":["userAgent","config","_req","res","next","setHeader","getUserAgent","user_agent"],"sources":["../../src/middlewares/user-agent.ts"],"sourcesContent":["import { getUserAgent } from '@verdaccio/config';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function userAgent(config) {\n  return function (_req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    res.setHeader('x-powered-by', getUserAgent(config?.user_agent));\n    next();\n  };\n}\n"],"mappings":";;;;;;AAAA;AAIO,SAASA,SAAS,CAACC,MAAM,EAAE;EAChC,OAAO,UAAUC,IAAoB,EAAEC,GAAoB,EAAEC,IAAsB,EAAQ;IACzFD,GAAG,CAACE,SAAS,CAAC,cAAc,EAAE,IAAAC,oBAAY,EAACL,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEM,UAAU,CAAC,CAAC;IAC/DH,IAAI,EAAE;EACR,CAAC;AACH"}

package/build/middlewares/validation.d.ts

@@ -1,3 +1,2 @@
-import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
-export declare function validateName(req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer, value: string, name: string): void;
-export declare function validatePackage(req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer, value: string, name: string): void;
+export declare function validateName(_req: any, _res: any, next: any, value: string, name: string): void;
+export declare function validatePackage(_req: any, _res: any, next: any, value: string, name: string): void;

package/build/middlewares/validation.js

@@ -7,7 +7,7 @@ exports.validateName = validateName;
 exports.validatePackage = validatePackage;
 var _core = require("@verdaccio/core");
 var _utils = require("@verdaccio/utils");
-function validateName(req, res, next, value, name) {
+function validateName(_req, _res, next, value, name) {
   if (value === '-') {
     // special case in couchdb usually
     next('route');
@@ -17,7 +17,7 @@ function validateName(req, res, next, value, name) {
     next(_core.errorUtils.getForbidden('invalid ' + name));
   }
 }
-function validatePackage(req, res, next, value, name) {
+function validatePackage(_req, _res, next, value, name) {
   if (value === '-') {
     // special case in couchdb usually
     next('route');

package/build/middlewares/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","names":["validateName","req","res","next","value","name","utilValidateName","errorUtils","getForbidden","validatePackage","utilValidatePackage"],"sources":["../../src/middlewares/validation.ts"],"sourcesContent":["import { errorUtils } from '@verdaccio/core';\nimport {\n  validateName as utilValidateName,\n  validatePackage as utilValidatePackage,\n} from '@verdaccio/utils';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function validateName(\n  req: $RequestExtend,\n  res: $ResponseExtend,\n  next: $NextFunctionVer,\n  value: string,\n  name: string\n): void {\n  if (value === '-') {\n    // special case in couchdb usually\n    next('route');\n  } else if (utilValidateName(value)) {\n    next();\n  } else {\n    next(errorUtils.getForbidden('invalid ' + name));\n  }\n}\n\nexport function validatePackage(\n  req: $RequestExtend,\n  res: $ResponseExtend,\n  next: $NextFunctionVer,\n  value: string,\n  name: string\n): void {\n  if (value === '-') {\n    // special case in couchdb usually\n    next('route');\n  } else if (utilValidatePackage(value)) {\n    next();\n  } else {\n    next(errorUtils.getForbidden('invalid ' + name));\n  }\n}\n"],"mappings":";;;;;;;AAAA;AACA;AAOO,SAASA,YAAY,CAC1BC,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EACtBC,KAAa,EACbC,IAAY,EACN;EACN,IAAID,KAAK,KAAK,GAAG,EAAE;IACjB;IACAD,IAAI,CAAC,OAAO,CAAC;EACf,CAAC,MAAM,IAAI,IAAAG,mBAAgB,EAACF,KAAK,CAAC,EAAE;IAClCD,IAAI,EAAE;EACR,CAAC,MAAM;IACLA,IAAI,CAACI,gBAAU,CAACC,YAAY,CAAC,UAAU,GAAGH,IAAI,CAAC,CAAC;EAClD;AACF;AAEO,SAASI,eAAe,CAC7BR,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EACtBC,KAAa,EACbC,IAAY,EACN;EACN,IAAID,KAAK,KAAK,GAAG,EAAE;IACjB;IACAD,IAAI,CAAC,OAAO,CAAC;EACf,CAAC,MAAM,IAAI,IAAAO,sBAAmB,EAACN,KAAK,CAAC,EAAE;IACrCD,IAAI,EAAE;EACR,CAAC,MAAM;IACLA,IAAI,CAACI,gBAAU,CAACC,YAAY,CAAC,UAAU,GAAGH,IAAI,CAAC,CAAC;EAClD;AACF"}
+{"version":3,"file":"validation.js","names":["validateName","_req","_res","next","value","name","utilValidateName","errorUtils","getForbidden","validatePackage","utilValidatePackage"],"sources":["../../src/middlewares/validation.ts"],"sourcesContent":["import { errorUtils } from '@verdaccio/core';\nimport {\n  validateName as utilValidateName,\n  validatePackage as utilValidatePackage,\n} from '@verdaccio/utils';\n\nexport function validateName(_req, _res, next, value: string, name: string) {\n  if (value === '-') {\n    // special case in couchdb usually\n    next('route');\n  } else if (utilValidateName(value)) {\n    next();\n  } else {\n    next(errorUtils.getForbidden('invalid ' + name));\n  }\n}\n\nexport function validatePackage(_req, _res, next, value: string, name: string) {\n  if (value === '-') {\n    // special case in couchdb usually\n    next('route');\n  } else if (utilValidatePackage(value)) {\n    next();\n  } else {\n    next(errorUtils.getForbidden('invalid ' + name));\n  }\n}\n"],"mappings":";;;;;;;AAAA;AACA;AAKO,SAASA,YAAY,CAACC,IAAI,EAAEC,IAAI,EAAEC,IAAI,EAAEC,KAAa,EAAEC,IAAY,EAAE;EAC1E,IAAID,KAAK,KAAK,GAAG,EAAE;IACjB;IACAD,IAAI,CAAC,OAAO,CAAC;EACf,CAAC,MAAM,IAAI,IAAAG,mBAAgB,EAACF,KAAK,CAAC,EAAE;IAClCD,IAAI,EAAE;EACR,CAAC,MAAM;IACLA,IAAI,CAACI,gBAAU,CAACC,YAAY,CAAC,UAAU,GAAGH,IAAI,CAAC,CAAC;EAClD;AACF;AAEO,SAASI,eAAe,CAACR,IAAI,EAAEC,IAAI,EAAEC,IAAI,EAAEC,KAAa,EAAEC,IAAY,EAAE;EAC7E,IAAID,KAAK,KAAK,GAAG,EAAE;IACjB;IACAD,IAAI,CAAC,OAAO,CAAC;EACf,CAAC,MAAM,IAAI,IAAAO,sBAAmB,EAACN,KAAK,CAAC,EAAE;IACrCD,IAAI,EAAE;EACR,CAAC,MAAM;IACLA,IAAI,CAACI,gBAAU,CAACC,YAAY,CAAC,UAAU,GAAGH,IAAI,CAAC,CAAC;EAClD;AACF"}

package/build/middlewares/web/index.d.ts

@@ -0,0 +1 @@
+export { default as webMiddleware } from './web-middleware';

package/build/middlewares/web/index.js

@@ -0,0 +1,14 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "webMiddleware", {
+  enumerable: true,
+  get: function () {
+    return _webMiddleware.default;
+  }
+});
+var _webMiddleware = _interopRequireDefault(require("./web-middleware"));
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+//# sourceMappingURL=index.js.map

package/build/middlewares/web/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/middlewares/web/index.ts"],"sourcesContent":["export { default as webMiddleware } from './web-middleware';\n"],"mappings":";;;;;;;;;;;AAAA;AAA4D"}

package/build/middlewares/web/render-web.d.ts

@@ -0,0 +1 @@
+export declare function renderWebMiddleware(config: any, tokenMiddleware: any, pluginOptions: any): import("express-serve-static-core").Router;

package/build/middlewares/web/render-web.js

@@ -0,0 +1,103 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.renderWebMiddleware = renderWebMiddleware;
+var _debug = _interopRequireDefault(require("debug"));
+var _express = _interopRequireDefault(require("express"));
+var _fs = _interopRequireDefault(require("fs"));
+var _path = _interopRequireDefault(require("path"));
+var _core = require("@verdaccio/core");
+var _url = require("@verdaccio/url");
+var _security = require("./security");
+var _renderHTML = _interopRequireWildcard(require("./utils/renderHTML"));
+function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
+function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+const debug = (0, _debug.default)('verdaccio:web:render');
+const sendFileCallback = next => err => {
+  if (!err) {
+    return;
+  }
+  if (err.status === _core.HTTP_STATUS.NOT_FOUND) {
+    next();
+  } else {
+    next(err);
+  }
+};
+function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {
+  var _config$web$logo, _config$web, _config$web2, _config$web3;
+  const {
+    staticPath,
+    manifest,
+    manifestFiles
+  } = pluginOptions;
+  debug('static path %o', staticPath);
+
+  /* eslint new-cap:off */
+  const router = _express.default.Router();
+  if (typeof tokenMiddleware === 'function') {
+    router.use(tokenMiddleware);
+  }
+  router.use(_security.setSecurityWebHeaders);
+
+  // Logo
+  let logoURI = (_config$web$logo = config === null || config === void 0 ? void 0 : (_config$web = config.web) === null || _config$web === void 0 ? void 0 : _config$web.logo) !== null && _config$web$logo !== void 0 ? _config$web$logo : '';
+  if (logoURI && !(0, _url.isURLhasValidProtocol)(logoURI)) {
+    // URI related to a local file
+
+    // Note: `path.join` will break on Windows, because it transforms `/` to `\`
+    // Use POSIX version `path.posix.join` instead.
+    logoURI = _path.default.posix.join('/-/static/', _path.default.basename(logoURI));
+    router.get(logoURI, function (req, res, next) {
+      res.sendFile(_path.default.resolve(config.web.logo), sendFileCallback(next));
+      debug('render static');
+    });
+  }
+
+  // Static
+  router.get('/-/static/*', function (req, res, next) {
+    const filename = req.params[0];
+    const file = `${staticPath}/${filename}`;
+    debug('render static file %o', file);
+    res.sendFile(file, sendFileCallback(next));
+  });
+
+  // logo
+  if (config !== null && config !== void 0 && (_config$web2 = config.web) !== null && _config$web2 !== void 0 && _config$web2.logo && !(0, _renderHTML.isHTTPProtocol)(config === null || config === void 0 ? void 0 : (_config$web3 = config.web) === null || _config$web3 === void 0 ? void 0 : _config$web3.logo)) {
+    // URI related to a local file
+    const absoluteLocalFile = _path.default.posix.resolve(config.web.logo);
+    debug('serve local logo %s', absoluteLocalFile);
+    try {
+      // TODO: remove existsSync by async alternative
+      if (_fs.default.existsSync(absoluteLocalFile) && typeof _fs.default.accessSync(absoluteLocalFile, _fs.default.constants.R_OK) === 'undefined') {
+        // Note: `path.join` will break on Windows, because it transforms `/` to `\`
+        // Use POSIX version `path.posix.join` instead.
+        config.web.logo = _path.default.posix.join('/-/static/', _path.default.basename(config.web.logo));
+        router.get(config.web.logo, function (_req, res, next) {
+          // @ts-ignore
+          debug('serve custom logo  web:%s - local:%s', config.web.logo, absoluteLocalFile);
+          res.sendFile(absoluteLocalFile, sendFileCallback(next));
+        });
+        debug('enabled custom logo %s', config.web.logo);
+      } else {
+        config.web.logo = undefined;
+        debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);
+      }
+    } catch {
+      config.web.logo = undefined;
+      debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);
+    }
+  }
+  router.get('/-/web/:section/*', function (req, res) {
+    (0, _renderHTML.default)(config, manifest, manifestFiles, req, res);
+    debug('render html section');
+  });
+  router.get('/', function (req, res) {
+    (0, _renderHTML.default)(config, manifest, manifestFiles, req, res);
+    debug('render root');
+  });
+  return router;
+}
+//# sourceMappingURL=render-web.js.map

package/build/middlewares/web/render-web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-web.js","names":["debug","buildDebug","sendFileCallback","next","err","status","HTTP_STATUS","NOT_FOUND","renderWebMiddleware","config","tokenMiddleware","pluginOptions","staticPath","manifest","manifestFiles","router","express","Router","use","setSecurityWebHeaders","logoURI","web","logo","isURLhasValidProtocol","path","posix","join","basename","get","req","res","sendFile","resolve","filename","params","file","isHTTPProtocol","absoluteLocalFile","fs","existsSync","accessSync","constants","R_OK","_req","undefined","renderHTML"],"sources":["../../../src/middlewares/web/render-web.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport express from 'express';\nimport fs from 'fs';\nimport path from 'path';\n\nimport { HTTP_STATUS } from '@verdaccio/core';\nimport { isURLhasValidProtocol } from '@verdaccio/url';\n\nimport { setSecurityWebHeaders } from './security';\nimport renderHTML, { isHTTPProtocol } from './utils/renderHTML';\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst sendFileCallback = (next) => (err) => {\n  if (!err) {\n    return;\n  }\n  if (err.status === HTTP_STATUS.NOT_FOUND) {\n    next();\n  } else {\n    next(err);\n  }\n};\n\nexport function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {\n  const { staticPath, manifest, manifestFiles } = pluginOptions;\n  debug('static path %o', staticPath);\n\n  /* eslint new-cap:off */\n  const router = express.Router();\n  if (typeof tokenMiddleware === 'function') {\n    router.use(tokenMiddleware);\n  }\n  router.use(setSecurityWebHeaders);\n\n  // Logo\n  let logoURI = config?.web?.logo ?? '';\n  if (logoURI && !isURLhasValidProtocol(logoURI)) {\n    // URI related to a local file\n\n    // Note: `path.join` will break on Windows, because it transforms `/` to `\\`\n    // Use POSIX version `path.posix.join` instead.\n    logoURI = path.posix.join('/-/static/', path.basename(logoURI));\n    router.get(logoURI, function (req, res, next) {\n      res.sendFile(path.resolve(config.web.logo), sendFileCallback(next));\n      debug('render static');\n    });\n  }\n\n  // Static\n  router.get('/-/static/*', function (req, res, next) {\n    const filename = req.params[0];\n    const file = `${staticPath}/${filename}`;\n    debug('render static file %o', file);\n    res.sendFile(file, sendFileCallback(next));\n  });\n\n  // logo\n  if (config?.web?.logo && !isHTTPProtocol(config?.web?.logo)) {\n    // URI related to a local file\n    const absoluteLocalFile = path.posix.resolve(config.web.logo);\n    debug('serve local logo %s', absoluteLocalFile);\n    try {\n      // TODO: remove existsSync by async alternative\n      if (\n        fs.existsSync(absoluteLocalFile) &&\n        typeof fs.accessSync(absoluteLocalFile, fs.constants.R_OK) === 'undefined'\n      ) {\n        // Note: `path.join` will break on Windows, because it transforms `/` to `\\`\n        // Use POSIX version `path.posix.join` instead.\n        config.web.logo = path.posix.join('/-/static/', path.basename(config.web.logo));\n        router.get(config.web.logo, function (_req, res, next) {\n          // @ts-ignore\n          debug('serve custom logo  web:%s - local:%s', config.web.logo, absoluteLocalFile);\n          res.sendFile(absoluteLocalFile, sendFileCallback(next));\n        });\n        debug('enabled custom logo %s', config.web.logo);\n      } else {\n        config.web.logo = undefined;\n        debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n      }\n    } catch {\n      config.web.logo = undefined;\n      debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n    }\n  }\n\n  router.get('/-/web/:section/*', function (req, res) {\n    renderHTML(config, manifest, manifestFiles, req, res);\n    debug('render html section');\n  });\n\n  router.get('/', function (req, res) {\n    renderHTML(config, manifest, manifestFiles, req, res);\n    debug('render root');\n  });\n\n  return router;\n}\n"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AAEA;AACA;AAEA;AACA;AAAgE;AAAA;AAAA;AAEhE,MAAMA,KAAK,GAAG,IAAAC,cAAU,EAAC,sBAAsB,CAAC;AAEhD,MAAMC,gBAAgB,GAAIC,IAAI,IAAMC,GAAG,IAAK;EAC1C,IAAI,CAACA,GAAG,EAAE;IACR;EACF;EACA,IAAIA,GAAG,CAACC,MAAM,KAAKC,iBAAW,CAACC,SAAS,EAAE;IACxCJ,IAAI,EAAE;EACR,CAAC,MAAM;IACLA,IAAI,CAACC,GAAG,CAAC;EACX;AACF,CAAC;AAEM,SAASI,mBAAmB,CAACC,MAAM,EAAEC,eAAe,EAAEC,aAAa,EAAE;EAAA;EAC1E,MAAM;IAAEC,UAAU;IAAEC,QAAQ;IAAEC;EAAc,CAAC,GAAGH,aAAa;EAC7DX,KAAK,CAAC,gBAAgB,EAAEY,UAAU,CAAC;;EAEnC;EACA,MAAMG,MAAM,GAAGC,gBAAO,CAACC,MAAM,EAAE;EAC/B,IAAI,OAAOP,eAAe,KAAK,UAAU,EAAE;IACzCK,MAAM,CAACG,GAAG,CAACR,eAAe,CAAC;EAC7B;EACAK,MAAM,CAACG,GAAG,CAACC,+BAAqB,CAAC;;EAEjC;EACA,IAAIC,OAAO,uBAAGX,MAAM,aAANA,MAAM,sCAANA,MAAM,CAAEY,GAAG,gDAAX,YAAaC,IAAI,+DAAI,EAAE;EACrC,IAAIF,OAAO,IAAI,CAAC,IAAAG,0BAAqB,EAACH,OAAO,CAAC,EAAE;IAC9C;;IAEA;IACA;IACAA,OAAO,GAAGI,aAAI,CAACC,KAAK,CAACC,IAAI,CAAC,YAAY,EAAEF,aAAI,CAACG,QAAQ,CAACP,OAAO,CAAC,CAAC;IAC/DL,MAAM,CAACa,GAAG,CAACR,OAAO,EAAE,UAAUS,GAAG,EAAEC,GAAG,EAAE3B,IAAI,EAAE;MAC5C2B,GAAG,CAACC,QAAQ,CAACP,aAAI,CAACQ,OAAO,CAACvB,MAAM,CAACY,GAAG,CAACC,IAAI,CAAC,EAAEpB,gBAAgB,CAACC,IAAI,CAAC,CAAC;MACnEH,KAAK,CAAC,eAAe,CAAC;IACxB,CAAC,CAAC;EACJ;;EAEA;EACAe,MAAM,CAACa,GAAG,CAAC,aAAa,EAAE,UAAUC,GAAG,EAAEC,GAAG,EAAE3B,IAAI,EAAE;IAClD,MAAM8B,QAAQ,GAAGJ,GAAG,CAACK,MAAM,CAAC,CAAC,CAAC;IAC9B,MAAMC,IAAI,GAAI,GAAEvB,UAAW,IAAGqB,QAAS,EAAC;IACxCjC,KAAK,CAAC,uBAAuB,EAAEmC,IAAI,CAAC;IACpCL,GAAG,CAACC,QAAQ,CAACI,IAAI,EAAEjC,gBAAgB,CAACC,IAAI,CAAC,CAAC;EAC5C,CAAC,CAAC;;EAEF;EACA,IAAIM,MAAM,aAANA,MAAM,+BAANA,MAAM,CAAEY,GAAG,yCAAX,aAAaC,IAAI,IAAI,CAAC,IAAAc,0BAAc,EAAC3B,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEY,GAAG,iDAAX,aAAaC,IAAI,CAAC,EAAE;IAC3D;IACA,MAAMe,iBAAiB,GAAGb,aAAI,CAACC,KAAK,CAACO,OAAO,CAACvB,MAAM,CAACY,GAAG,CAACC,IAAI,CAAC;IAC7DtB,KAAK,CAAC,qBAAqB,EAAEqC,iBAAiB,CAAC;IAC/C,IAAI;MACF;MACA,IACEC,WAAE,CAACC,UAAU,CAACF,iBAAiB,CAAC,IAChC,OAAOC,WAAE,CAACE,UAAU,CAACH,iBAAiB,EAAEC,WAAE,CAACG,SAAS,CAACC,IAAI,CAAC,KAAK,WAAW,EAC1E;QACA;QACA;QACAjC,MAAM,CAACY,GAAG,CAACC,IAAI,GAAGE,aAAI,CAACC,KAAK,CAACC,IAAI,CAAC,YAAY,EAAEF,aAAI,CAACG,QAAQ,CAAClB,MAAM,CAACY,GAAG,CAACC,IAAI,CAAC,CAAC;QAC/EP,MAAM,CAACa,GAAG,CAACnB,MAAM,CAACY,GAAG,CAACC,IAAI,EAAE,UAAUqB,IAAI,EAAEb,GAAG,EAAE3B,IAAI,EAAE;UACrD;UACAH,KAAK,CAAC,sCAAsC,EAAES,MAAM,CAACY,GAAG,CAACC,IAAI,EAAEe,iBAAiB,CAAC;UACjFP,GAAG,CAACC,QAAQ,CAACM,iBAAiB,EAAEnC,gBAAgB,CAACC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC;QACFH,KAAK,CAAC,wBAAwB,EAAES,MAAM,CAACY,GAAG,CAACC,IAAI,CAAC;MAClD,CAAC,MAAM;QACLb,MAAM,CAACY,GAAG,CAACC,IAAI,GAAGsB,SAAS;QAC3B5C,KAAK,CAAE,2BAA0BqC,iBAAkB,oCAAmC,CAAC;MACzF;IACF,CAAC,CAAC,MAAM;MACN5B,MAAM,CAACY,GAAG,CAACC,IAAI,GAAGsB,SAAS;MAC3B5C,KAAK,CAAE,2BAA0BqC,iBAAkB,oCAAmC,CAAC;IACzF;EACF;EAEAtB,MAAM,CAACa,GAAG,CAAC,mBAAmB,EAAE,UAAUC,GAAG,EAAEC,GAAG,EAAE;IAClD,IAAAe,mBAAU,EAACpC,MAAM,EAAEI,QAAQ,EAAEC,aAAa,EAAEe,GAAG,EAAEC,GAAG,CAAC;IACrD9B,KAAK,CAAC,qBAAqB,CAAC;EAC9B,CAAC,CAAC;EAEFe,MAAM,CAACa,GAAG,CAAC,GAAG,EAAE,UAAUC,GAAG,EAAEC,GAAG,EAAE;IAClC,IAAAe,mBAAU,EAACpC,MAAM,EAAEI,QAAQ,EAAEC,aAAa,EAAEe,GAAG,EAAEC,GAAG,CAAC;IACrD9B,KAAK,CAAC,aAAa,CAAC;EACtB,CAAC,CAAC;EAEF,OAAOe,MAAM;AACf"}

package/build/middlewares/web/security.d.ts

@@ -0,0 +1 @@
+export declare function setSecurityWebHeaders(_req: any, res: any, next: any): void;

package/build/middlewares/web/security.js

@@ -0,0 +1,19 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.setSecurityWebHeaders = setSecurityWebHeaders;
+var _core = require("@verdaccio/core");
+function setSecurityWebHeaders(_req, res, next) {
+  // disable loading in frames (clickjacking, etc.)
+  res.header(_core.HEADERS.FRAMES_OPTIONS, 'deny');
+  // avoid stablish connections outside of domain
+  res.header(_core.HEADERS.CSP, "connect-src 'self'");
+  // https://stackoverflow.com/questions/18337630/what-is-x-content-type-options-nosniff
+  res.header(_core.HEADERS.CTO, 'nosniff');
+  // https://stackoverflow.com/questions/9090577/what-is-the-http-header-x-xss-protection
+  res.header(_core.HEADERS.XSS, '1; mode=block');
+  next();
+}
+//# sourceMappingURL=security.js.map

package/build/middlewares/web/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","names":["setSecurityWebHeaders","_req","res","next","header","HEADERS","FRAMES_OPTIONS","CSP","CTO","XSS"],"sources":["../../../src/middlewares/web/security.ts"],"sourcesContent":["import { HEADERS } from '@verdaccio/core';\n\nexport function setSecurityWebHeaders(_req, res, next): void {\n  // disable loading in frames (clickjacking, etc.)\n  res.header(HEADERS.FRAMES_OPTIONS, 'deny');\n  // avoid stablish connections outside of domain\n  res.header(HEADERS.CSP, \"connect-src 'self'\");\n  // https://stackoverflow.com/questions/18337630/what-is-x-content-type-options-nosniff\n  res.header(HEADERS.CTO, 'nosniff');\n  // https://stackoverflow.com/questions/9090577/what-is-the-http-header-x-xss-protection\n  res.header(HEADERS.XSS, '1; mode=block');\n  next();\n}\n"],"mappings":";;;;;;AAAA;AAEO,SAASA,qBAAqB,CAACC,IAAI,EAAEC,GAAG,EAAEC,IAAI,EAAQ;EAC3D;EACAD,GAAG,CAACE,MAAM,CAACC,aAAO,CAACC,cAAc,EAAE,MAAM,CAAC;EAC1C;EACAJ,GAAG,CAACE,MAAM,CAACC,aAAO,CAACE,GAAG,EAAE,oBAAoB,CAAC;EAC7C;EACAL,GAAG,CAACE,MAAM,CAACC,aAAO,CAACG,GAAG,EAAE,SAAS,CAAC;EAClC;EACAN,GAAG,CAACE,MAAM,CAACC,aAAO,CAACI,GAAG,EAAE,eAAe,CAAC;EACxCN,IAAI,EAAE;AACR"}

package/build/middlewares/web/utils/manifest.d.ts

@@ -0,0 +1,6 @@
+export type Manifest = {
+    ico: string;
+    css: string[];
+    js: string[];
+};
+export declare function getManifestValue(manifestItems: string[], manifest: any, basePath?: string): string[];

package/build/middlewares/web/utils/manifest.js

@@ -0,0 +1,18 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getManifestValue = getManifestValue;
+var _debug = _interopRequireDefault(require("debug"));
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+const debug = (0, _debug.default)('verdaccio:web:render:manifest');
+function getManifestValue(manifestItems, manifest, basePath = '') {
+  return manifestItems === null || manifestItems === void 0 ? void 0 : manifestItems.map(item => {
+    debug('resolve item %o', item);
+    const resolvedItem = `${basePath}${manifest[item]}`;
+    debug('resolved item %o', resolvedItem);
+    return resolvedItem;
+  });
+}
+//# sourceMappingURL=manifest.js.map

package/build/middlewares/web/utils/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","names":["debug","buildDebug","getManifestValue","manifestItems","manifest","basePath","map","item","resolvedItem"],"sources":["../../../../src/middlewares/web/utils/manifest.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nexport type Manifest = {\n  // goes on first place at the header\n  ico: string;\n  css: string[];\n  js: string[];\n};\n\nconst debug = buildDebug('verdaccio:web:render:manifest');\n\nexport function getManifestValue(\n  manifestItems: string[],\n  manifest,\n  basePath: string = ''\n): string[] {\n  return manifestItems?.map((item) => {\n    debug('resolve item %o', item);\n    const resolvedItem = `${basePath}${manifest[item]}`;\n    debug('resolved item %o', resolvedItem);\n    return resolvedItem;\n  });\n}\n"],"mappings":";;;;;;AAAA;AAA+B;AAS/B,MAAMA,KAAK,GAAG,IAAAC,cAAU,EAAC,+BAA+B,CAAC;AAElD,SAASC,gBAAgB,CAC9BC,aAAuB,EACvBC,QAAQ,EACRC,QAAgB,GAAG,EAAE,EACX;EACV,OAAOF,aAAa,aAAbA,aAAa,uBAAbA,aAAa,CAAEG,GAAG,CAAEC,IAAI,IAAK;IAClCP,KAAK,CAAC,iBAAiB,EAAEO,IAAI,CAAC;IAC9B,MAAMC,YAAY,GAAI,GAAEH,QAAS,GAAED,QAAQ,CAACG,IAAI,CAAE,EAAC;IACnDP,KAAK,CAAC,kBAAkB,EAAEQ,YAAY,CAAC;IACvC,OAAOA,YAAY;EACrB,CAAC,CAAC;AACJ"}

package/build/middlewares/web/utils/renderHTML.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Check if URI is starting with "http://", "https://" or "//"
+ * @param {string} uri
+ */
+export declare function isHTTPProtocol(uri: string): boolean;
+export declare function resolveLogo(config: any, req: any): any;
+export default function renderHTML(config: any, manifest: any, manifestFiles: any, req: any, res: any): void;

package/build/middlewares/web/utils/renderHTML.js

@@ -0,0 +1,133 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = renderHTML;
+exports.isHTTPProtocol = isHTTPProtocol;
+exports.resolveLogo = resolveLogo;
+var _debug = _interopRequireDefault(require("debug"));
+var _lruCache = _interopRequireDefault(require("lru-cache"));
+var _path = _interopRequireDefault(require("path"));
+var _url = require("url");
+var _config = require("@verdaccio/config");
+var _core = require("@verdaccio/core");
+var _url2 = require("@verdaccio/url");
+var _template = _interopRequireDefault(require("./template"));
+var _webUtils = require("./web-utils");
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+const DEFAULT_LANGUAGE = 'es-US';
+const cache = new _lruCache.default({
+  max: 500,
+  ttl: 1000 * 60 * 60
+});
+const debug = (0, _debug.default)('verdaccio:web:render');
+const defaultManifestFiles = {
+  js: ['runtime.js', 'vendors.js', 'main.js'],
+  ico: 'favicon.ico'
+};
+
+/**
+ * Check if URI is starting with "http://", "https://" or "//"
+ * @param {string} uri
+ */
+function isHTTPProtocol(uri) {
+  return /^(https?:)?\/\//.test(uri);
+}
+function resolveLogo(config, req) {
+  var _config$web, _config$web2, _config$web4;
+  const isLocalFile = (config === null || config === void 0 ? void 0 : (_config$web = config.web) === null || _config$web === void 0 ? void 0 : _config$web.logo) && !isHTTPProtocol(config === null || config === void 0 ? void 0 : (_config$web2 = config.web) === null || _config$web2 === void 0 ? void 0 : _config$web2.logo);
+  if (isLocalFile) {
+    var _config$web3;
+    return `${(0, _url2.getPublicUrl)(config === null || config === void 0 ? void 0 : config.url_prefix, req)}-/static/${_path.default.basename(config === null || config === void 0 ? void 0 : (_config$web3 = config.web) === null || _config$web3 === void 0 ? void 0 : _config$web3.logo)}`;
+  } else if (isHTTPProtocol(config === null || config === void 0 ? void 0 : (_config$web4 = config.web) === null || _config$web4 === void 0 ? void 0 : _config$web4.logo)) {
+    var _config$web5;
+    return config === null || config === void 0 ? void 0 : (_config$web5 = config.web) === null || _config$web5 === void 0 ? void 0 : _config$web5.logo;
+  } else {
+    return '';
+  }
+}
+function renderHTML(config, manifest, manifestFiles, req, res) {
+  var _config$i18n$web, _config$i18n, _config$web6, _config$web$darkMode, _config$web7, _config$web$title, _config$web8, _config$web$scope, _config$web9, _config$web$pkgManage, _config$web10, _config$web11, _validatePrimaryColor, _config$web12;
+  const {
+    url_prefix
+  } = config;
+  const base = (0, _url2.getPublicUrl)(config === null || config === void 0 ? void 0 : config.url_prefix, req);
+  const basename = new _url.URL(base).pathname;
+  const language = (_config$i18n$web = config === null || config === void 0 ? void 0 : (_config$i18n = config.i18n) === null || _config$i18n === void 0 ? void 0 : _config$i18n.web) !== null && _config$i18n$web !== void 0 ? _config$i18n$web : DEFAULT_LANGUAGE;
+  const needHtmlCache = [undefined, null].includes(config === null || config === void 0 ? void 0 : (_config$web6 = config.web) === null || _config$web6 === void 0 ? void 0 : _config$web6.html_cache) ? true : config.web.html_cache;
+  const darkMode = (_config$web$darkMode = config === null || config === void 0 ? void 0 : (_config$web7 = config.web) === null || _config$web7 === void 0 ? void 0 : _config$web7.darkMode) !== null && _config$web$darkMode !== void 0 ? _config$web$darkMode : false;
+  const title = (_config$web$title = config === null || config === void 0 ? void 0 : (_config$web8 = config.web) === null || _config$web8 === void 0 ? void 0 : _config$web8.title) !== null && _config$web$title !== void 0 ? _config$web$title : _config.WEB_TITLE;
+  const login = (0, _webUtils.hasLogin)(config);
+  const scope = (_config$web$scope = config === null || config === void 0 ? void 0 : (_config$web9 = config.web) === null || _config$web9 === void 0 ? void 0 : _config$web9.scope) !== null && _config$web$scope !== void 0 ? _config$web$scope : '';
+  const logoURI = resolveLogo(config, req);
+  const pkgManagers = (_config$web$pkgManage = config === null || config === void 0 ? void 0 : (_config$web10 = config.web) === null || _config$web10 === void 0 ? void 0 : _config$web10.pkgManagers) !== null && _config$web$pkgManage !== void 0 ? _config$web$pkgManage : ['yarn', 'pnpm', 'npm'];
+  const version = config === null || config === void 0 ? void 0 : (_config$web11 = config.web) === null || _config$web11 === void 0 ? void 0 : _config$web11.version;
+  const flags = {
+    ...config.flags,
+    // legacy from 5.x
+    ...config.experiments
+  };
+  const primaryColor = (_validatePrimaryColor = (0, _webUtils.validatePrimaryColor)(config === null || config === void 0 ? void 0 : (_config$web12 = config.web) === null || _config$web12 === void 0 ? void 0 : _config$web12.primary_color)) !== null && _validatePrimaryColor !== void 0 ? _validatePrimaryColor : '#4b5e40';
+  const {
+    scriptsBodyAfter,
+    metaScripts,
+    scriptsbodyBefore,
+    showInfo,
+    showSettings,
+    showThemeSwitch,
+    showFooter,
+    showSearch,
+    showDownloadTarball
+  } = Object.assign({}, {
+    scriptsBodyAfter: [],
+    bodyBefore: [],
+    metaScripts: []
+  }, config === null || config === void 0 ? void 0 : config.web);
+  const options = {
+    showInfo,
+    showSettings,
+    showThemeSwitch,
+    showFooter,
+    showSearch,
+    showDownloadTarball,
+    darkMode,
+    url_prefix,
+    basename,
+    base,
+    primaryColor,
+    version,
+    logoURI,
+    flags,
+    login,
+    pkgManagers,
+    title,
+    scope,
+    language
+  };
+  let webPage;
+  try {
+    webPage = cache.get('template');
+    if (!webPage) {
+      webPage = (0, _template.default)({
+        manifest: manifestFiles !== null && manifestFiles !== void 0 ? manifestFiles : defaultManifestFiles,
+        options,
+        scriptsBodyAfter,
+        metaScripts,
+        scriptsbodyBefore
+      }, manifest);
+      if (needHtmlCache) {
+        cache.set('template', webPage);
+        debug('set template cache');
+      }
+    } else {
+      debug('reuse template cache');
+    }
+  } catch (error) {
+    throw new Error(`theme could not be load, stack ${error.stack}`);
+  }
+  res.setHeader('Content-Type', _core.HEADERS.TEXT_HTML);
+  res.send(webPage);
+  debug('web rendered');
+}
+//# sourceMappingURL=renderHTML.js.map

package/build/middlewares/web/utils/renderHTML.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderHTML.js","names":["DEFAULT_LANGUAGE","cache","LRU","max","ttl","debug","buildDebug","defaultManifestFiles","js","ico","isHTTPProtocol","uri","test","resolveLogo","config","req","isLocalFile","web","logo","getPublicUrl","url_prefix","path","basename","renderHTML","manifest","manifestFiles","res","base","URL","pathname","language","i18n","needHtmlCache","undefined","includes","html_cache","darkMode","title","WEB_TITLE","login","hasLogin","scope","logoURI","pkgManagers","version","flags","experiments","primaryColor","validatePrimaryColor","primary_color","scriptsBodyAfter","metaScripts","scriptsbodyBefore","showInfo","showSettings","showThemeSwitch","showFooter","showSearch","showDownloadTarball","Object","assign","bodyBefore","options","webPage","get","renderTemplate","set","error","Error","stack","setHeader","HEADERS","TEXT_HTML","send"],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport LRU from 'lru-cache';\nimport path from 'path';\nimport { URL } from 'url';\n\nimport { WEB_TITLE } from '@verdaccio/config';\nimport { HEADERS } from '@verdaccio/core';\nimport { TemplateUIOptions } from '@verdaccio/types';\nimport { getPublicUrl } from '@verdaccio/url';\n\nimport renderTemplate from './template';\nimport { hasLogin, validatePrimaryColor } from './web-utils';\n\nconst DEFAULT_LANGUAGE = 'es-US';\nconst cache = new LRU({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles = {\n  js: ['runtime.js', 'vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n};\n\n/**\n * Check if URI is starting with \"http://\", \"https://\" or \"//\"\n * @param {string} uri\n */\nexport function isHTTPProtocol(uri: string): boolean {\n  return /^(https?:)?\\/\\//.test(uri);\n}\n\nexport function resolveLogo(config, req) {\n  const isLocalFile = config?.web?.logo && !isHTTPProtocol(config?.web?.logo);\n\n  if (isLocalFile) {\n    return `${getPublicUrl(config?.url_prefix, req)}-/static/${path.basename(config?.web?.logo)}`;\n  } else if (isHTTPProtocol(config?.web?.logo)) {\n    return config?.web?.logo;\n  } else {\n    return '';\n  }\n}\n\nexport default function renderHTML(config, manifest, manifestFiles, req, res) {\n  const { url_prefix } = config;\n  const base = getPublicUrl(config?.url_prefix, req);\n  const basename = new URL(base).pathname;\n  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config.web.html_cache;\n  const darkMode = config?.web?.darkMode ?? false;\n  const title = config?.web?.title ?? WEB_TITLE;\n  const login = hasLogin(config);\n  const scope = config?.web?.scope ?? '';\n  const logoURI = resolveLogo(config, req);\n  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];\n  const version = config?.web?.version;\n  const flags = {\n    ...config.flags,\n    // legacy from 5.x\n    ...config.experiments,\n  };\n  const primaryColor = validatePrimaryColor(config?.web?.primary_color) ?? '#4b5e40';\n  const {\n    scriptsBodyAfter,\n    metaScripts,\n    scriptsbodyBefore,\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n  } = Object.assign(\n    {},\n    {\n      scriptsBodyAfter: [],\n      bodyBefore: [],\n      metaScripts: [],\n    },\n    config?.web\n  );\n  const options: TemplateUIOptions = {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    darkMode,\n    url_prefix,\n    basename,\n    base,\n    primaryColor,\n    version,\n    logoURI,\n    flags,\n    login,\n    pkgManagers,\n    title,\n    scope,\n    language,\n  };\n\n  let webPage;\n\n  try {\n    webPage = cache.get('template');\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsbodyBefore,\n        },\n        manifest\n      );\n      if (needHtmlCache) {\n        cache.set('template', webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;;;AAAA;AACA;AACA;AACA;AAEA;AACA;AAEA;AAEA;AACA;AAA6D;AAE7D,MAAMA,gBAAgB,GAAG,OAAO;AAChC,MAAMC,KAAK,GAAG,IAAIC,iBAAG,CAAC;EAAEC,GAAG,EAAE,GAAG;EAAEC,GAAG,EAAE,IAAI,GAAG,EAAE,GAAG;AAAG,CAAC,CAAC;AAExD,MAAMC,KAAK,GAAG,IAAAC,cAAU,EAAC,sBAAsB,CAAC;AAEhD,MAAMC,oBAAoB,GAAG;EAC3BC,EAAE,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC;EAC3CC,GAAG,EAAE;AACP,CAAC;;AAED;AACA;AACA;AACA;AACO,SAASC,cAAc,CAACC,GAAW,EAAW;EACnD,OAAO,iBAAiB,CAACC,IAAI,CAACD,GAAG,CAAC;AACpC;AAEO,SAASE,WAAW,CAACC,MAAM,EAAEC,GAAG,EAAE;EAAA;EACvC,MAAMC,WAAW,GAAG,CAAAF,MAAM,aAANA,MAAM,sCAANA,MAAM,CAAEG,GAAG,gDAAX,YAAaC,IAAI,KAAI,CAACR,cAAc,CAACI,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEG,GAAG,iDAAX,aAAaC,IAAI,CAAC;EAE3E,IAAIF,WAAW,EAAE;IAAA;IACf,OAAQ,GAAE,IAAAG,kBAAY,EAACL,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEM,UAAU,EAAEL,GAAG,CAAE,YAAWM,aAAI,CAACC,QAAQ,CAACR,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEG,GAAG,iDAAX,aAAaC,IAAI,CAAE,EAAC;EAC/F,CAAC,MAAM,IAAIR,cAAc,CAACI,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEG,GAAG,iDAAX,aAAaC,IAAI,CAAC,EAAE;IAAA;IAC5C,OAAOJ,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEG,GAAG,iDAAX,aAAaC,IAAI;EAC1B,CAAC,MAAM;IACL,OAAO,EAAE;EACX;AACF;AAEe,SAASK,UAAU,CAACT,MAAM,EAAEU,QAAQ,EAAEC,aAAa,EAAEV,GAAG,EAAEW,GAAG,EAAE;EAAA;EAC5E,MAAM;IAAEN;EAAW,CAAC,GAAGN,MAAM;EAC7B,MAAMa,IAAI,GAAG,IAAAR,kBAAY,EAACL,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEM,UAAU,EAAEL,GAAG,CAAC;EAClD,MAAMO,QAAQ,GAAG,IAAIM,QAAG,CAACD,IAAI,CAAC,CAACE,QAAQ;EACvC,MAAMC,QAAQ,uBAAGhB,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEiB,IAAI,iDAAZ,aAAcd,GAAG,+DAAIjB,gBAAgB;EACtD,MAAMgC,aAAa,GAAG,CAACC,SAAS,EAAE,IAAI,CAAC,CAACC,QAAQ,CAACpB,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEG,GAAG,iDAAX,aAAakB,UAAU,CAAC,GACrE,IAAI,GACJrB,MAAM,CAACG,GAAG,CAACkB,UAAU;EACzB,MAAMC,QAAQ,2BAAGtB,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEG,GAAG,iDAAX,aAAamB,QAAQ,uEAAI,KAAK;EAC/C,MAAMC,KAAK,wBAAGvB,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEG,GAAG,iDAAX,aAAaoB,KAAK,iEAAIC,iBAAS;EAC7C,MAAMC,KAAK,GAAG,IAAAC,kBAAQ,EAAC1B,MAAM,CAAC;EAC9B,MAAM2B,KAAK,wBAAG3B,MAAM,aAANA,MAAM,uCAANA,MAAM,CAAEG,GAAG,iDAAX,aAAawB,KAAK,iEAAI,EAAE;EACtC,MAAMC,OAAO,GAAG7B,WAAW,CAACC,MAAM,EAAEC,GAAG,CAAC;EACxC,MAAM4B,WAAW,4BAAG7B,MAAM,aAANA,MAAM,wCAANA,MAAM,CAAEG,GAAG,kDAAX,cAAa0B,WAAW,yEAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;EACvE,MAAMC,OAAO,GAAG9B,MAAM,aAANA,MAAM,wCAANA,MAAM,CAAEG,GAAG,kDAAX,cAAa2B,OAAO;EACpC,MAAMC,KAAK,GAAG;IACZ,GAAG/B,MAAM,CAAC+B,KAAK;IACf;IACA,GAAG/B,MAAM,CAACgC;EACZ,CAAC;EACD,MAAMC,YAAY,4BAAG,IAAAC,8BAAoB,EAAClC,MAAM,aAANA,MAAM,wCAANA,MAAM,CAAEG,GAAG,kDAAX,cAAagC,aAAa,CAAC,yEAAI,SAAS;EAClF,MAAM;IACJC,gBAAgB;IAChBC,WAAW;IACXC,iBAAiB;IACjBC,QAAQ;IACRC,YAAY;IACZC,eAAe;IACfC,UAAU;IACVC,UAAU;IACVC;EACF,CAAC,GAAGC,MAAM,CAACC,MAAM,CACf,CAAC,CAAC,EACF;IACEV,gBAAgB,EAAE,EAAE;IACpBW,UAAU,EAAE,EAAE;IACdV,WAAW,EAAE;EACf,CAAC,EACDrC,MAAM,aAANA,MAAM,uBAANA,MAAM,CAAEG,GAAG,CACZ;EACD,MAAM6C,OAA0B,GAAG;IACjCT,QAAQ;IACRC,YAAY;IACZC,eAAe;IACfC,UAAU;IACVC,UAAU;IACVC,mBAAmB;IACnBtB,QAAQ;IACRhB,UAAU;IACVE,QAAQ;IACRK,IAAI;IACJoB,YAAY;IACZH,OAAO;IACPF,OAAO;IACPG,KAAK;IACLN,KAAK;IACLI,WAAW;IACXN,KAAK;IACLI,KAAK;IACLX;EACF,CAAC;EAED,IAAIiC,OAAO;EAEX,IAAI;IACFA,OAAO,GAAG9D,KAAK,CAAC+D,GAAG,CAAC,UAAU,CAAC;IAC/B,IAAI,CAACD,OAAO,EAAE;MACZA,OAAO,GAAG,IAAAE,iBAAc,EACtB;QACEzC,QAAQ,EAAEC,aAAa,aAAbA,aAAa,cAAbA,aAAa,GAAIlB,oBAAoB;QAC/CuD,OAAO;QACPZ,gBAAgB;QAChBC,WAAW;QACXC;MACF,CAAC,EACD5B,QAAQ,CACT;MACD,IAAIQ,aAAa,EAAE;QACjB/B,KAAK,CAACiE,GAAG,CAAC,UAAU,EAAEH,OAAO,CAAC;QAC9B1D,KAAK,CAAC,oBAAoB,CAAC;MAC7B;IACF,CAAC,MAAM;MACLA,KAAK,CAAC,sBAAsB,CAAC;IAC/B;EACF,CAAC,CAAC,OAAO8D,KAAU,EAAE;IACnB,MAAM,IAAIC,KAAK,CAAE,kCAAiCD,KAAK,CAACE,KAAM,EAAC,CAAC;EAClE;EACA3C,GAAG,CAAC4C,SAAS,CAAC,cAAc,EAAEC,aAAO,CAACC,SAAS,CAAC;EAChD9C,GAAG,CAAC+C,IAAI,CAACV,OAAO,CAAC;EACjB1D,KAAK,CAAC,cAAc,CAAC;AACvB"}

package/build/middlewares/web/utils/template.d.ts

@@ -0,0 +1,13 @@
+import { TemplateUIOptions } from '@verdaccio/types';
+import { Manifest } from './manifest';
+export type Template = {
+    manifest: Manifest;
+    options: TemplateUIOptions;
+    metaScripts?: string[];
+    scriptsBodyAfter?: string[];
+    scriptsbodyBefore?: string[];
+};
+export interface WebpackManifest {
+    [key: string]: string;
+}
+export default function renderTemplate(template: Template, manifest: WebpackManifest): string;

package/build/middlewares/web/utils/template.js

@@ -0,0 +1,38 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = renderTemplate;
+var _debug = _interopRequireDefault(require("debug"));
+var _manifest = require("./manifest");
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+const debug = (0, _debug.default)('verdaccio:web:render:template');
+function renderTemplate(template, manifest) {
+  var _template$options$tit, _template$options;
+  debug('template %o', template);
+  debug('manifest %o', manifest);
+  return `
+    <!DOCTYPE html>
+      <html lang="en-us"> 
+      <head>
+        <meta charset="utf-8">
+        <base href="${template === null || template === void 0 ? void 0 : template.options.base}">
+        <title>${(_template$options$tit = template === null || template === void 0 ? void 0 : (_template$options = template.options) === null || _template$options === void 0 ? void 0 : _template$options.title) !== null && _template$options$tit !== void 0 ? _template$options$tit : ''}</title>        
+        <link rel="icon" href="${template === null || template === void 0 ? void 0 : template.options.base}-/static/favicon.ico"/>
+        <meta name="viewport" content="width=device-width, initial-scale=1" /> 
+        <script>
+            window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(template.options)}
+        </script>
+        ${template !== null && template !== void 0 && template.metaScripts ? template.metaScripts.join('') : ''}
+      </head>    
+      <body class="body">
+      ${template !== null && template !== void 0 && template.scriptsbodyBefore ? template.scriptsbodyBefore.join('') : ''}
+        <div id="root"></div>
+        ${(0, _manifest.getManifestValue)(template.manifest.js, manifest, template === null || template === void 0 ? void 0 : template.options.base).map(item => `<script defer="defer" src="${item}"></script>`).join('')}
+        ${template !== null && template !== void 0 && template.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}
+      </body>
+    </html>
+  `;
+}
+//# sourceMappingURL=template.js.map

package/build/middlewares/web/utils/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","names":["debug","buildDebug","renderTemplate","template","manifest","options","base","title","JSON","stringify","metaScripts","join","scriptsbodyBefore","getManifestValue","js","map","item","scriptsBodyAfter"],"sources":["../../../../src/middlewares/web/utils/template.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { TemplateUIOptions } from '@verdaccio/types';\n\nimport { Manifest, getManifestValue } from './manifest';\n\nconst debug = buildDebug('verdaccio:web:render:template');\n\nexport type Template = {\n  manifest: Manifest;\n  options: TemplateUIOptions;\n  metaScripts?: string[];\n  scriptsBodyAfter?: string[];\n  scriptsbodyBefore?: string[];\n};\n\n// the outcome of the Webpack Manifest Plugin\nexport interface WebpackManifest {\n  [key: string]: string;\n}\n\nexport default function renderTemplate(template: Template, manifest: WebpackManifest) {\n  debug('template %o', template);\n  debug('manifest %o', manifest);\n\n  return `\n    <!DOCTYPE html>\n      <html lang=\"en-us\"> \n      <head>\n        <meta charset=\"utf-8\">\n        <base href=\"${template?.options.base}\">\n        <title>${template?.options?.title ?? ''}</title>        \n        <link rel=\"icon\" href=\"${template?.options.base}-/static/favicon.ico\"/>\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" /> \n        <script>\n            window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(template.options)}\n        </script>\n        ${template?.metaScripts ? template.metaScripts.join('') : ''}\n      </head>    \n      <body class=\"body\">\n      ${template?.scriptsbodyBefore ? template.scriptsbodyBefore.join('') : ''}\n        <div id=\"root\"></div>\n        ${getManifestValue(template.manifest.js, manifest, template?.options.base)\n          .map((item) => `<script defer=\"defer\" src=\"${item}\"></script>`)\n          .join('')}\n        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}\n      </body>\n    </html>\n  `;\n}\n"],"mappings":";;;;;;AAAA;AAIA;AAAwD;AAExD,MAAMA,KAAK,GAAG,IAAAC,cAAU,EAAC,+BAA+B,CAAC;AAe1C,SAASC,cAAc,CAACC,QAAkB,EAAEC,QAAyB,EAAE;EAAA;EACpFJ,KAAK,CAAC,aAAa,EAAEG,QAAQ,CAAC;EAC9BH,KAAK,CAAC,aAAa,EAAEI,QAAQ,CAAC;EAE9B,OAAQ;AACV;AACA;AACA;AACA;AACA,sBAAsBD,QAAQ,aAARA,QAAQ,uBAARA,QAAQ,CAAEE,OAAO,CAACC,IAAK;AAC7C,iBAAe,yBAAEH,QAAQ,aAARA,QAAQ,4CAARA,QAAQ,CAAEE,OAAO,sDAAjB,kBAAmBE,KAAK,yEAAI,EAAG;AAChD,iCAAiCJ,QAAQ,aAARA,QAAQ,uBAARA,QAAQ,CAAEE,OAAO,CAACC,IAAK;AACxD;AACA;AACA,qDAAqDE,IAAI,CAACC,SAAS,CAACN,QAAQ,CAACE,OAAO,CAAE;AACtF;AACA,UAAUF,QAAQ,aAARA,QAAQ,eAARA,QAAQ,CAAEO,WAAW,GAAGP,QAAQ,CAACO,WAAW,CAACC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAG;AACrE;AACA;AACA,QAAQR,QAAQ,aAARA,QAAQ,eAARA,QAAQ,CAAES,iBAAiB,GAAGT,QAAQ,CAACS,iBAAiB,CAACD,IAAI,CAAC,EAAE,CAAC,GAAG,EAAG;AAC/E;AACA,UAAU,IAAAE,0BAAgB,EAACV,QAAQ,CAACC,QAAQ,CAACU,EAAE,EAAEV,QAAQ,EAAED,QAAQ,aAARA,QAAQ,uBAARA,QAAQ,CAAEE,OAAO,CAACC,IAAI,CAAC,CACvES,GAAG,CAAEC,IAAI,IAAM,8BAA6BA,IAAK,aAAY,CAAC,CAC9DL,IAAI,CAAC,EAAE,CAAE;AACpB,UAAUR,QAAQ,aAARA,QAAQ,eAARA,QAAQ,CAAEc,gBAAgB,GAAGd,QAAQ,CAACc,gBAAgB,CAACN,IAAI,CAAC,EAAE,CAAC,GAAG,EAAG;AAC/E;AACA;AACA,GAAG;AACH"}