@verdaccio/middleware 9.0.0-next-9.3 → 9.0.0-next-9.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (127) hide show
  1. package/build/_virtual/_rolldown/runtime.js +23 -0
  2. package/build/index.js +60 -221
  3. package/build/index.mjs +22 -0
  4. package/build/middlewares/allow.js +42 -50
  5. package/build/middlewares/allow.js.map +1 -1
  6. package/build/middlewares/allow.mjs +44 -0
  7. package/build/middlewares/allow.mjs.map +1 -0
  8. package/build/middlewares/antiLoop.d.ts +2 -2
  9. package/build/middlewares/antiLoop.js +22 -40
  10. package/build/middlewares/antiLoop.js.map +1 -1
  11. package/build/middlewares/antiLoop.mjs +25 -0
  12. package/build/middlewares/antiLoop.mjs.map +1 -0
  13. package/build/middlewares/api_urls.js +66 -59
  14. package/build/middlewares/api_urls.js.map +1 -1
  15. package/build/middlewares/api_urls.mjs +59 -0
  16. package/build/middlewares/api_urls.mjs.map +1 -0
  17. package/build/middlewares/dotfiles.d.ts +1 -1
  18. package/build/middlewares/dotfiles.js +25 -28
  19. package/build/middlewares/dotfiles.js.map +1 -1
  20. package/build/middlewares/dotfiles.mjs +27 -0
  21. package/build/middlewares/dotfiles.mjs.map +1 -0
  22. package/build/middlewares/encode-pkg.d.ts +1 -1
  23. package/build/middlewares/encode-pkg.js +20 -36
  24. package/build/middlewares/encode-pkg.js.map +1 -1
  25. package/build/middlewares/encode-pkg.mjs +22 -0
  26. package/build/middlewares/encode-pkg.mjs.map +1 -0
  27. package/build/middlewares/error.d.ts +3 -3
  28. package/build/middlewares/error.js +53 -71
  29. package/build/middlewares/error.js.map +1 -1
  30. package/build/middlewares/error.mjs +53 -0
  31. package/build/middlewares/error.mjs.map +1 -0
  32. package/build/middlewares/final.d.ts +2 -2
  33. package/build/middlewares/final.js +46 -57
  34. package/build/middlewares/final.js.map +1 -1
  35. package/build/middlewares/final.mjs +46 -0
  36. package/build/middlewares/final.mjs.map +1 -0
  37. package/build/middlewares/json.d.ts +1 -1
  38. package/build/middlewares/json.js +8 -11
  39. package/build/middlewares/json.js.map +1 -1
  40. package/build/middlewares/json.mjs +10 -0
  41. package/build/middlewares/json.mjs.map +1 -0
  42. package/build/middlewares/log.d.ts +1 -1
  43. package/build/middlewares/log.js +97 -125
  44. package/build/middlewares/log.js.map +1 -1
  45. package/build/middlewares/log.mjs +96 -0
  46. package/build/middlewares/log.mjs.map +1 -0
  47. package/build/middlewares/make-url-relative.d.ts +1 -1
  48. package/build/middlewares/make-url-relative.js +26 -41
  49. package/build/middlewares/make-url-relative.js.map +1 -1
  50. package/build/middlewares/make-url-relative.mjs +28 -0
  51. package/build/middlewares/make-url-relative.mjs.map +1 -0
  52. package/build/middlewares/match.js +8 -13
  53. package/build/middlewares/match.js.map +1 -1
  54. package/build/middlewares/match.mjs +11 -0
  55. package/build/middlewares/match.mjs.map +1 -0
  56. package/build/middlewares/media.js +15 -19
  57. package/build/middlewares/media.js.map +1 -1
  58. package/build/middlewares/media.mjs +17 -0
  59. package/build/middlewares/media.mjs.map +1 -0
  60. package/build/middlewares/rate-limit.d.ts +2 -2
  61. package/build/middlewares/rate-limit.js +8 -10
  62. package/build/middlewares/rate-limit.js.map +1 -1
  63. package/build/middlewares/rate-limit.mjs +9 -0
  64. package/build/middlewares/rate-limit.mjs.map +1 -0
  65. package/build/middlewares/request-options.d.ts +2 -2
  66. package/build/middlewares/request-options.js +18 -27
  67. package/build/middlewares/request-options.js.map +1 -1
  68. package/build/middlewares/request-options.mjs +19 -0
  69. package/build/middlewares/request-options.mjs.map +1 -0
  70. package/build/middlewares/user-agent.d.ts +1 -1
  71. package/build/middlewares/user-agent.js +11 -12
  72. package/build/middlewares/user-agent.js.map +1 -1
  73. package/build/middlewares/user-agent.mjs +13 -0
  74. package/build/middlewares/user-agent.mjs.map +1 -0
  75. package/build/middlewares/validation.d.ts +1 -1
  76. package/build/middlewares/validation.js +11 -18
  77. package/build/middlewares/validation.js.map +1 -1
  78. package/build/middlewares/validation.mjs +14 -0
  79. package/build/middlewares/validation.mjs.map +1 -0
  80. package/build/middlewares/web/index.js +4 -35
  81. package/build/middlewares/web/index.mjs +4 -0
  82. package/build/middlewares/web/render-web.d.ts +1 -1
  83. package/build/middlewares/web/render-web.js +80 -109
  84. package/build/middlewares/web/render-web.js.map +1 -1
  85. package/build/middlewares/web/render-web.mjs +79 -0
  86. package/build/middlewares/web/render-web.mjs.map +1 -0
  87. package/build/middlewares/web/security.js +29 -41
  88. package/build/middlewares/web/security.js.map +1 -1
  89. package/build/middlewares/web/security.mjs +30 -0
  90. package/build/middlewares/web/security.mjs.map +1 -0
  91. package/build/middlewares/web/utils/manifest.js +17 -18
  92. package/build/middlewares/web/utils/manifest.js.map +1 -1
  93. package/build/middlewares/web/utils/manifest.mjs +21 -0
  94. package/build/middlewares/web/utils/manifest.mjs.map +1 -0
  95. package/build/middlewares/web/utils/renderHTML.d.ts +5 -5
  96. package/build/middlewares/web/utils/renderHTML.js +109 -136
  97. package/build/middlewares/web/utils/renderHTML.js.map +1 -1
  98. package/build/middlewares/web/utils/renderHTML.mjs +113 -0
  99. package/build/middlewares/web/utils/renderHTML.mjs.map +1 -0
  100. package/build/middlewares/web/utils/template.d.ts +2 -2
  101. package/build/middlewares/web/utils/template.js +19 -20
  102. package/build/middlewares/web/utils/template.js.map +1 -1
  103. package/build/middlewares/web/utils/template.mjs +35 -0
  104. package/build/middlewares/web/utils/template.mjs.map +1 -0
  105. package/build/middlewares/web/utils/web-utils.js +17 -18
  106. package/build/middlewares/web/utils/web-utils.js.map +1 -1
  107. package/build/middlewares/web/utils/web-utils.mjs +18 -0
  108. package/build/middlewares/web/utils/web-utils.mjs.map +1 -0
  109. package/build/middlewares/web/web-api.d.ts +1 -2
  110. package/build/middlewares/web/web-api.js +18 -27
  111. package/build/middlewares/web/web-api.js.map +1 -1
  112. package/build/middlewares/web/web-api.mjs +19 -0
  113. package/build/middlewares/web/web-api.mjs.map +1 -0
  114. package/build/middlewares/web/web-middleware.js +16 -23
  115. package/build/middlewares/web/web-middleware.js.map +1 -1
  116. package/build/middlewares/web/web-middleware.mjs +16 -0
  117. package/build/middlewares/web/web-middleware.mjs.map +1 -0
  118. package/build/middlewares/web/web-urls.js +28 -29
  119. package/build/middlewares/web/web-urls.js.map +1 -1
  120. package/build/middlewares/web/web-urls.mjs +32 -0
  121. package/build/middlewares/web/web-urls.mjs.map +1 -0
  122. package/build/types.d.ts +2 -2
  123. package/package.json +22 -11
  124. package/build/index.js.map +0 -1
  125. package/build/middlewares/web/index.js.map +0 -1
  126. package/build/types.js +0 -6
  127. package/build/types.js.map +0 -1
@@ -1 +1 @@
1
- {"version":3,"file":"error.js","names":["_debug","_interopRequireDefault","require","_lodash","_core","e","__esModule","default","debug","buildDebug","handleError","logger","err","req","res","next","_","isError","code","statusCode","HTTP_STATUS","NOT_MODIFIED","isFunction","locals","report_error","errorReportingMiddleware","noop","exports","status","BAD_REQUEST","isNil","headersSent","message","error","API_ERROR","UNKNOWN_ERROR","send","destroy","INTERNAL_ERROR","INTERNAL_SERVER_ERROR"],"sources":["../../src/middlewares/error.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { HttpError } from 'http-errors';\nimport _ from 'lodash';\n\nimport type { VerdaccioError } from '@verdaccio/core';\nimport { API_ERROR, HTTP_STATUS } from '@verdaccio/core';\nimport type { Logger } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:error');\n\nexport const handleError = (logger: Logger) =>\n function handleError(\n err: HttpError,\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n ) {\n debug('error handler init');\n if (_.isError(err)) {\n debug('is native error');\n if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n return next();\n }\n if (_.isFunction(res.locals.report_error) === false) {\n debug('is locals error report ref');\n // in case of very early error this middleware may not be loaded before error is generated\n // fixing that\n errorReportingMiddleware(logger)(req, res, _.noop);\n }\n debug('set locals error report ref');\n res.locals.report_error(err);\n } else {\n // Fall to Middleware.final\n debug('no error to report, jump next layer');\n return next(err);\n }\n };\n\n// Middleware\nexport const errorReportingMiddleware = (logger: Logger) =>\n function errorReportingMiddleware(\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n ): void {\n debug('error report middleware start');\n res.locals.report_error =\n res.locals.report_error ||\n function (err: VerdaccioError): void {\n if (err.status && err.status >= HTTP_STATUS.BAD_REQUEST && err.status < 600) {\n debug('is error > 409 %o', err?.status);\n if (_.isNil(res.headersSent) === false) {\n debug('send status %o', err?.status);\n res.status(err.status);\n debug('next layer %o', err?.message);\n next({ error: err.message || API_ERROR.UNKNOWN_ERROR });\n }\n } else {\n debug('is error < 409 %o', err?.status);\n logger.error({ err: err }, 'unexpected error: @{!err.message}\\n@{err.stack}');\n if (!res.status || !res.send) {\n // TODO: decide which debug keep\n logger.error('this is an error in express.js, please report this');\n debug('this is an error in express.js, please report this, destroy response %o', err);\n res.destroy();\n } else if (!res.headersSent) {\n debug('send internal error %o', err);\n res.status(HTTP_STATUS.INTERNAL_ERROR);\n next({ error: API_ERROR.INTERNAL_SERVER_ERROR });\n } else {\n // socket should be already closed\n debug('this should not happen, otherwise report %o', err);\n }\n }\n };\n\n debug('error report middleware end (skip next layer) next()');\n next();\n };\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AAGA,IAAAE,KAAA,GAAAF,OAAA;AAAyD,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAKzD,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,4BAA4B,CAAC;AAE/C,MAAMC,WAAW,GAAIC,MAAc,IACxC,SAASD,WAAWA,CAClBE,GAAc,EACdC,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EACtB;EACAP,KAAK,CAAC,oBAAoB,CAAC;EAC3B,IAAIQ,eAAC,CAACC,OAAO,CAACL,GAAG,CAAC,EAAE;IAClBJ,KAAK,CAAC,iBAAiB,CAAC;IACxB,IAAII,GAAG,CAACM,IAAI,KAAK,YAAY,IAAIJ,GAAG,CAACK,UAAU,KAAKC,iBAAW,CAACC,YAAY,EAAE;MAC5E,OAAON,IAAI,CAAC,CAAC;IACf;IACA,IAAIC,eAAC,CAACM,UAAU,CAACR,GAAG,CAACS,MAAM,CAACC,YAAY,CAAC,KAAK,KAAK,EAAE;MACnDhB,KAAK,CAAC,4BAA4B,CAAC;MACnC;MACA;MACAiB,wBAAwB,CAACd,MAAM,CAAC,CAACE,GAAG,EAAEC,GAAG,EAAEE,eAAC,CAACU,IAAI,CAAC;IACpD;IACAlB,KAAK,CAAC,6BAA6B,CAAC;IACpCM,GAAG,CAACS,MAAM,CAACC,YAAY,CAACZ,GAAG,CAAC;EAC9B,CAAC,MAAM;IACL;IACAJ,KAAK,CAAC,qCAAqC,CAAC;IAC5C,OAAOO,IAAI,CAACH,GAAG,CAAC;EAClB;AACF,CAAC;;AAEH;AAAAe,OAAA,CAAAjB,WAAA,GAAAA,WAAA;AACO,MAAMe,wBAAwB,GAAId,MAAc,IACrD,SAASc,wBAAwBA,CAC/BZ,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EAChB;EACNP,KAAK,CAAC,+BAA+B,CAAC;EACtCM,GAAG,CAACS,MAAM,CAACC,YAAY,GACrBV,GAAG,CAACS,MAAM,CAACC,YAAY,IACvB,UAAUZ,GAAmB,EAAQ;IACnC,IAAIA,GAAG,CAACgB,MAAM,IAAIhB,GAAG,CAACgB,MAAM,IAAIR,iBAAW,CAACS,WAAW,IAAIjB,GAAG,CAACgB,MAAM,GAAG,GAAG,EAAE;MAC3EpB,KAAK,CAAC,mBAAmB,EAAEI,GAAG,EAAEgB,MAAM,CAAC;MACvC,IAAIZ,eAAC,CAACc,KAAK,CAAChB,GAAG,CAACiB,WAAW,CAAC,KAAK,KAAK,EAAE;QACtCvB,KAAK,CAAC,gBAAgB,EAAEI,GAAG,EAAEgB,MAAM,CAAC;QACpCd,GAAG,CAACc,MAAM,CAAChB,GAAG,CAACgB,MAAM,CAAC;QACtBpB,KAAK,CAAC,eAAe,EAAEI,GAAG,EAAEoB,OAAO,CAAC;QACpCjB,IAAI,CAAC;UAAEkB,KAAK,EAAErB,GAAG,CAACoB,OAAO,IAAIE,eAAS,CAACC;QAAc,CAAC,CAAC;MACzD;IACF,CAAC,MAAM;MACL3B,KAAK,CAAC,mBAAmB,EAAEI,GAAG,EAAEgB,MAAM,CAAC;MACvCjB,MAAM,CAACsB,KAAK,CAAC;QAAErB,GAAG,EAAEA;MAAI,CAAC,EAAE,iDAAiD,CAAC;MAC7E,IAAI,CAACE,GAAG,CAACc,MAAM,IAAI,CAACd,GAAG,CAACsB,IAAI,EAAE;QAC5B;QACAzB,MAAM,CAACsB,KAAK,CAAC,oDAAoD,CAAC;QAClEzB,KAAK,CAAC,yEAAyE,EAAEI,GAAG,CAAC;QACrFE,GAAG,CAACuB,OAAO,CAAC,CAAC;MACf,CAAC,MAAM,IAAI,CAACvB,GAAG,CAACiB,WAAW,EAAE;QAC3BvB,KAAK,CAAC,wBAAwB,EAAEI,GAAG,CAAC;QACpCE,GAAG,CAACc,MAAM,CAACR,iBAAW,CAACkB,cAAc,CAAC;QACtCvB,IAAI,CAAC;UAAEkB,KAAK,EAAEC,eAAS,CAACK;QAAsB,CAAC,CAAC;MAClD,CAAC,MAAM;QACL;QACA/B,KAAK,CAAC,6CAA6C,EAAEI,GAAG,CAAC;MAC3D;IACF;EACF,CAAC;EAEHJ,KAAK,CAAC,sDAAsD,CAAC;EAC7DO,IAAI,CAAC,CAAC;AACR,CAAC;AAACY,OAAA,CAAAF,wBAAA,GAAAA,wBAAA","ignoreList":[]}
1
+ {"version":3,"file":"error.js","names":[],"sources":["../../src/middlewares/error.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { HttpError } from 'http-errors';\nimport _ from 'lodash';\n\nimport type { VerdaccioError } from '@verdaccio/core';\nimport { API_ERROR, HTTP_STATUS } from '@verdaccio/core';\nimport type { Logger } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:error');\n\nexport const handleError = (logger: Logger) =>\n function handleError(\n err: HttpError,\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n ) {\n debug('error handler init');\n if (_.isError(err)) {\n debug('is native error');\n if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n return next();\n }\n if (_.isFunction(res.locals.report_error) === false) {\n debug('is locals error report ref');\n // in case of very early error this middleware may not be loaded before error is generated\n // fixing that\n errorReportingMiddleware(logger)(req, res, _.noop);\n }\n debug('set locals error report ref');\n res.locals.report_error(err);\n } else {\n // Fall to Middleware.final\n debug('no error to report, jump next layer');\n return next(err);\n }\n };\n\n// Middleware\nexport const errorReportingMiddleware = (logger: Logger) =>\n function errorReportingMiddleware(\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n ): void {\n debug('error report middleware start');\n res.locals.report_error =\n res.locals.report_error ||\n function (err: VerdaccioError): void {\n if (err.status && err.status >= HTTP_STATUS.BAD_REQUEST && err.status < 600) {\n debug('is error > 409 %o', err?.status);\n if (_.isNil(res.headersSent) === false) {\n debug('send status %o', err?.status);\n res.status(err.status);\n debug('next layer %o', err?.message);\n next({ error: err.message || API_ERROR.UNKNOWN_ERROR });\n }\n } else {\n debug('is error < 409 %o', err?.status);\n logger.error({ err: err }, 'unexpected error: @{!err.message}\\n@{err.stack}');\n if (!res.status || !res.send) {\n // TODO: decide which debug keep\n logger.error('this is an error in express.js, please report this');\n debug('this is an error in express.js, please report this, destroy response %o', err);\n res.destroy();\n } else if (!res.headersSent) {\n debug('send internal error %o', err);\n res.status(HTTP_STATUS.INTERNAL_ERROR);\n next({ error: API_ERROR.INTERNAL_SERVER_ERROR });\n } else {\n // socket should be already closed\n debug('this should not happen, otherwise report %o', err);\n }\n }\n };\n\n debug('error report middleware end (skip next layer) next()');\n next();\n };\n"],"mappings":";;;;;;;AAUA,IAAM,WAAA,GAAA,MAAA,SAAmB,6BAA6B;AAEtD,IAAa,eAAe,WAC1B,SAAS,YACP,KACA,KACA,KACA,MACA;AACA,SAAM,qBAAqB;AAC3B,KAAI,OAAA,QAAE,QAAQ,IAAI,EAAE;AAClB,UAAM,kBAAkB;AACxB,MAAI,IAAI,SAAS,gBAAgB,IAAI,eAAe,gBAAA,YAAY,aAC9D,QAAO,MAAM;AAEf,MAAI,OAAA,QAAE,WAAW,IAAI,OAAO,aAAa,KAAK,OAAO;AACnD,WAAM,6BAA6B;AAGnC,4BAAyB,OAAO,CAAC,KAAK,KAAK,OAAA,QAAE,KAAK;;AAEpD,UAAM,8BAA8B;AACpC,MAAI,OAAO,aAAa,IAAI;QACvB;AAEL,UAAM,sCAAsC;AAC5C,SAAO,KAAK,IAAI;;;AAKtB,IAAa,4BAA4B,WACvC,SAAS,yBACP,KACA,KACA,MACM;AACN,SAAM,gCAAgC;AACtC,KAAI,OAAO,eACT,IAAI,OAAO,gBACX,SAAU,KAA2B;AACnC,MAAI,IAAI,UAAU,IAAI,UAAU,gBAAA,YAAY,eAAe,IAAI,SAAS,KAAK;AAC3E,WAAM,qBAAqB,KAAK,OAAO;AACvC,OAAI,OAAA,QAAE,MAAM,IAAI,YAAY,KAAK,OAAO;AACtC,YAAM,kBAAkB,KAAK,OAAO;AACpC,QAAI,OAAO,IAAI,OAAO;AACtB,YAAM,iBAAiB,KAAK,QAAQ;AACpC,SAAK,EAAE,OAAO,IAAI,WAAW,gBAAA,UAAU,eAAe,CAAC;;SAEpD;AACL,WAAM,qBAAqB,KAAK,OAAO;AACvC,UAAO,MAAM,EAAO,KAAK,EAAE,kDAAkD;AAC7E,OAAI,CAAC,IAAI,UAAU,CAAC,IAAI,MAAM;AAE5B,WAAO,MAAM,qDAAqD;AAClE,YAAM,2EAA2E,IAAI;AACrF,QAAI,SAAS;cACJ,CAAC,IAAI,aAAa;AAC3B,YAAM,0BAA0B,IAAI;AACpC,QAAI,OAAO,gBAAA,YAAY,eAAe;AACtC,SAAK,EAAE,OAAO,gBAAA,UAAU,uBAAuB,CAAC;SAGhD,SAAM,+CAA+C,IAAI;;;AAKjE,SAAM,uDAAuD;AAC7D,OAAM"}
@@ -0,0 +1,53 @@
1
+ import { API_ERROR, HTTP_STATUS } from "@verdaccio/core";
2
+ import buildDebug from "debug";
3
+ import _ from "lodash";
4
+ //#region src/middlewares/error.ts
5
+ var debug = buildDebug("verdaccio:middleware:error");
6
+ var handleError = (logger) => function handleError(err, req, res, next) {
7
+ debug("error handler init");
8
+ if (_.isError(err)) {
9
+ debug("is native error");
10
+ if (err.code === "ECONNABORT" && res.statusCode === HTTP_STATUS.NOT_MODIFIED) return next();
11
+ if (_.isFunction(res.locals.report_error) === false) {
12
+ debug("is locals error report ref");
13
+ errorReportingMiddleware(logger)(req, res, _.noop);
14
+ }
15
+ debug("set locals error report ref");
16
+ res.locals.report_error(err);
17
+ } else {
18
+ debug("no error to report, jump next layer");
19
+ return next(err);
20
+ }
21
+ };
22
+ var errorReportingMiddleware = (logger) => function errorReportingMiddleware(req, res, next) {
23
+ debug("error report middleware start");
24
+ res.locals.report_error = res.locals.report_error || function(err) {
25
+ if (err.status && err.status >= HTTP_STATUS.BAD_REQUEST && err.status < 600) {
26
+ debug("is error > 409 %o", err?.status);
27
+ if (_.isNil(res.headersSent) === false) {
28
+ debug("send status %o", err?.status);
29
+ res.status(err.status);
30
+ debug("next layer %o", err?.message);
31
+ next({ error: err.message || API_ERROR.UNKNOWN_ERROR });
32
+ }
33
+ } else {
34
+ debug("is error < 409 %o", err?.status);
35
+ logger.error({ err }, "unexpected error: @{!err.message}\n@{err.stack}");
36
+ if (!res.status || !res.send) {
37
+ logger.error("this is an error in express.js, please report this");
38
+ debug("this is an error in express.js, please report this, destroy response %o", err);
39
+ res.destroy();
40
+ } else if (!res.headersSent) {
41
+ debug("send internal error %o", err);
42
+ res.status(HTTP_STATUS.INTERNAL_ERROR);
43
+ next({ error: API_ERROR.INTERNAL_SERVER_ERROR });
44
+ } else debug("this should not happen, otherwise report %o", err);
45
+ }
46
+ };
47
+ debug("error report middleware end (skip next layer) next()");
48
+ next();
49
+ };
50
+ //#endregion
51
+ export { errorReportingMiddleware, handleError };
52
+
53
+ //# sourceMappingURL=error.mjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"error.mjs","names":[],"sources":["../../src/middlewares/error.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { HttpError } from 'http-errors';\nimport _ from 'lodash';\n\nimport type { VerdaccioError } from '@verdaccio/core';\nimport { API_ERROR, HTTP_STATUS } from '@verdaccio/core';\nimport type { Logger } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:error');\n\nexport const handleError = (logger: Logger) =>\n function handleError(\n err: HttpError,\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n ) {\n debug('error handler init');\n if (_.isError(err)) {\n debug('is native error');\n if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n return next();\n }\n if (_.isFunction(res.locals.report_error) === false) {\n debug('is locals error report ref');\n // in case of very early error this middleware may not be loaded before error is generated\n // fixing that\n errorReportingMiddleware(logger)(req, res, _.noop);\n }\n debug('set locals error report ref');\n res.locals.report_error(err);\n } else {\n // Fall to Middleware.final\n debug('no error to report, jump next layer');\n return next(err);\n }\n };\n\n// Middleware\nexport const errorReportingMiddleware = (logger: Logger) =>\n function errorReportingMiddleware(\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n ): void {\n debug('error report middleware start');\n res.locals.report_error =\n res.locals.report_error ||\n function (err: VerdaccioError): void {\n if (err.status && err.status >= HTTP_STATUS.BAD_REQUEST && err.status < 600) {\n debug('is error > 409 %o', err?.status);\n if (_.isNil(res.headersSent) === false) {\n debug('send status %o', err?.status);\n res.status(err.status);\n debug('next layer %o', err?.message);\n next({ error: err.message || API_ERROR.UNKNOWN_ERROR });\n }\n } else {\n debug('is error < 409 %o', err?.status);\n logger.error({ err: err }, 'unexpected error: @{!err.message}\\n@{err.stack}');\n if (!res.status || !res.send) {\n // TODO: decide which debug keep\n logger.error('this is an error in express.js, please report this');\n debug('this is an error in express.js, please report this, destroy response %o', err);\n res.destroy();\n } else if (!res.headersSent) {\n debug('send internal error %o', err);\n res.status(HTTP_STATUS.INTERNAL_ERROR);\n next({ error: API_ERROR.INTERNAL_SERVER_ERROR });\n } else {\n // socket should be already closed\n debug('this should not happen, otherwise report %o', err);\n }\n }\n };\n\n debug('error report middleware end (skip next layer) next()');\n next();\n };\n"],"mappings":";;;;AAUA,IAAM,QAAQ,WAAW,6BAA6B;AAEtD,IAAa,eAAe,WAC1B,SAAS,YACP,KACA,KACA,KACA,MACA;AACA,OAAM,qBAAqB;AAC3B,KAAI,EAAE,QAAQ,IAAI,EAAE;AAClB,QAAM,kBAAkB;AACxB,MAAI,IAAI,SAAS,gBAAgB,IAAI,eAAe,YAAY,aAC9D,QAAO,MAAM;AAEf,MAAI,EAAE,WAAW,IAAI,OAAO,aAAa,KAAK,OAAO;AACnD,SAAM,6BAA6B;AAGnC,4BAAyB,OAAO,CAAC,KAAK,KAAK,EAAE,KAAK;;AAEpD,QAAM,8BAA8B;AACpC,MAAI,OAAO,aAAa,IAAI;QACvB;AAEL,QAAM,sCAAsC;AAC5C,SAAO,KAAK,IAAI;;;AAKtB,IAAa,4BAA4B,WACvC,SAAS,yBACP,KACA,KACA,MACM;AACN,OAAM,gCAAgC;AACtC,KAAI,OAAO,eACT,IAAI,OAAO,gBACX,SAAU,KAA2B;AACnC,MAAI,IAAI,UAAU,IAAI,UAAU,YAAY,eAAe,IAAI,SAAS,KAAK;AAC3E,SAAM,qBAAqB,KAAK,OAAO;AACvC,OAAI,EAAE,MAAM,IAAI,YAAY,KAAK,OAAO;AACtC,UAAM,kBAAkB,KAAK,OAAO;AACpC,QAAI,OAAO,IAAI,OAAO;AACtB,UAAM,iBAAiB,KAAK,QAAQ;AACpC,SAAK,EAAE,OAAO,IAAI,WAAW,UAAU,eAAe,CAAC;;SAEpD;AACL,SAAM,qBAAqB,KAAK,OAAO;AACvC,UAAO,MAAM,EAAO,KAAK,EAAE,kDAAkD;AAC7E,OAAI,CAAC,IAAI,UAAU,CAAC,IAAI,MAAM;AAE5B,WAAO,MAAM,qDAAqD;AAClE,UAAM,2EAA2E,IAAI;AACrF,QAAI,SAAS;cACJ,CAAC,IAAI,aAAa;AAC3B,UAAM,0BAA0B,IAAI;AACpC,QAAI,OAAO,YAAY,eAAe;AACtC,SAAK,EAAE,OAAO,UAAU,uBAAuB,CAAC;SAGhD,OAAM,+CAA+C,IAAI;;;AAKjE,OAAM,uDAAuD;AAC7D,OAAM"}
@@ -1,4 +1,4 @@
1
- import type { Manifest } from '@verdaccio/types';
2
- import type { $NextFunctionVer, $RequestExtend, $ResponseExtend, MiddlewareError } from '../types';
1
+ import { Manifest } from '@verdaccio/types';
2
+ import { $NextFunctionVer, $RequestExtend, $ResponseExtend, MiddlewareError } from '../types';
3
3
  export type FinalBody = Manifest | MiddlewareError | string;
4
4
  export declare function final(body: FinalBody, req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void;
@@ -1,60 +1,49 @@
1
- "use strict";
2
-
3
- Object.defineProperty(exports, "__esModule", {
4
- value: true
5
- });
1
+ const require_runtime = require("../_virtual/_rolldown/runtime.js");
2
+ let _verdaccio_core = require("@verdaccio/core");
3
+ let debug = require("debug");
4
+ debug = require_runtime.__toESM(debug);
5
+ let lodash = require("lodash");
6
+ lodash = require_runtime.__toESM(lodash);
7
+ //#region src/middlewares/final.ts
8
+ var debug$1 = (0, debug.default)("verdaccio:middleware:final");
9
+ function final(body, req, res, next) {
10
+ if (res.statusCode === _verdaccio_core.HTTP_STATUS.UNAUTHORIZED && !res.getHeader(_verdaccio_core.HEADERS.WWW_AUTH)) {
11
+ debug$1("set auth header support");
12
+ res.header(_verdaccio_core.HEADERS.WWW_AUTH, `${_verdaccio_core.TOKEN_BASIC}, ${_verdaccio_core.TOKEN_BEARER}`);
13
+ }
14
+ try {
15
+ if (lodash.default.isString(body) || lodash.default.isObject(body)) {
16
+ if (!res.get(_verdaccio_core.HEADERS.CONTENT_TYPE)) {
17
+ debug$1("set json type header support");
18
+ res.header(_verdaccio_core.HEADERS.CONTENT_TYPE, _verdaccio_core.HEADERS.JSON);
19
+ }
20
+ if (typeof body === "object" && lodash.default.isNil(body) === false) {
21
+ if (typeof body.error === "string") {
22
+ debug$1("set verdaccio_error method");
23
+ res.locals._verdaccio_error = body.error;
24
+ }
25
+ body = JSON.stringify(body, void 0, " ") + "\n";
26
+ }
27
+ if (!res.statusCode || res.statusCode >= _verdaccio_core.HTTP_STATUS.OK && res.statusCode < _verdaccio_core.HTTP_STATUS.MULTIPLE_CHOICES) {
28
+ const etag = _verdaccio_core.cryptoUtils.stringToMD5(body);
29
+ debug$1("set etag header %s", etag);
30
+ res.header(_verdaccio_core.HEADERS.ETAG, "\"" + etag + "\"");
31
+ }
32
+ } else debug$1("this line should never be visible, if does report");
33
+ } catch (err) {
34
+ if (err.message.match(/set headers after they are sent/)) {
35
+ debug$1("set headers after they are sent");
36
+ if (lodash.default.isNil(res.socket) === false) {
37
+ debug$1("force destroy socket");
38
+ res.socket?.destroy();
39
+ }
40
+ return;
41
+ }
42
+ throw err;
43
+ }
44
+ res.send(body);
45
+ }
46
+ //#endregion
6
47
  exports.final = final;
7
- var _debug = _interopRequireDefault(require("debug"));
8
- var _lodash = _interopRequireDefault(require("lodash"));
9
- var _core = require("@verdaccio/core");
10
- function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
11
- const debug = (0, _debug.default)('verdaccio:middleware:final');
12
- function final(body, req, res,
13
- // if we remove `next` breaks test
14
- // eslint-disable-next-line @typescript-eslint/no-unused-vars
15
- next) {
16
- if (res.statusCode === _core.HTTP_STATUS.UNAUTHORIZED && !res.getHeader(_core.HEADERS.WWW_AUTH)) {
17
- debug('set auth header support');
18
- res.header(_core.HEADERS.WWW_AUTH, `${_core.TOKEN_BASIC}, ${_core.TOKEN_BEARER}`);
19
- }
20
- try {
21
- if (_lodash.default.isString(body) || _lodash.default.isObject(body)) {
22
- if (!res.get(_core.HEADERS.CONTENT_TYPE)) {
23
- debug('set json type header support');
24
- res.header(_core.HEADERS.CONTENT_TYPE, _core.HEADERS.JSON);
25
- }
26
- if (typeof body === 'object' && _lodash.default.isNil(body) === false) {
27
- if (typeof body.error === 'string') {
28
- debug('set verdaccio_error method');
29
- res.locals._verdaccio_error = body.error;
30
- }
31
- body = JSON.stringify(body, undefined, ' ') + '\n';
32
- }
33
48
 
34
- // don't send etags with errors
35
- if (!res.statusCode || res.statusCode >= _core.HTTP_STATUS.OK && res.statusCode < _core.HTTP_STATUS.MULTIPLE_CHOICES) {
36
- const etag = _core.cryptoUtils.stringToMD5(body);
37
- debug('set etag header %s', etag);
38
- res.header(_core.HEADERS.ETAG, '"' + etag + '"');
39
- }
40
- } else {
41
- debug('this line should never be visible, if does report');
42
- // send(null), send(204), etc.
43
- }
44
- } catch (err) {
45
- // if verdaccio sends headers first, and then calls res.send()
46
- // as an error handler, we can't report error properly,
47
- // and should just close socket
48
- if (err.message.match(/set headers after they are sent/)) {
49
- debug('set headers after they are sent');
50
- if (_lodash.default.isNil(res.socket) === false) {
51
- debug('force destroy socket');
52
- res.socket?.destroy();
53
- }
54
- return;
55
- }
56
- throw err;
57
- }
58
- res.send(body);
59
- }
60
49
  //# sourceMappingURL=final.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"final.js","names":["_debug","_interopRequireDefault","require","_lodash","_core","e","__esModule","default","debug","buildDebug","final","body","req","res","next","statusCode","HTTP_STATUS","UNAUTHORIZED","getHeader","HEADERS","WWW_AUTH","header","TOKEN_BASIC","TOKEN_BEARER","_","isString","isObject","get","CONTENT_TYPE","JSON","isNil","error","locals","_verdaccio_error","stringify","undefined","OK","MULTIPLE_CHOICES","etag","cryptoUtils","stringToMD5","ETAG","err","message","match","socket","destroy","send"],"sources":["../../src/middlewares/final.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\n\nimport { HEADERS, HTTP_STATUS, TOKEN_BASIC, TOKEN_BEARER, cryptoUtils } from '@verdaccio/core';\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend, MiddlewareError } from '../types';\n\nexport type FinalBody = Manifest | MiddlewareError | string;\n\nconst debug = buildDebug('verdaccio:middleware:final');\n\nexport function final(\n body: FinalBody,\n req: $RequestExtend,\n res: $ResponseExtend,\n // if we remove `next` breaks test\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\n next: $NextFunctionVer\n): void {\n if (res.statusCode === HTTP_STATUS.UNAUTHORIZED && !res.getHeader(HEADERS.WWW_AUTH)) {\n debug('set auth header support');\n res.header(HEADERS.WWW_AUTH, `${TOKEN_BASIC}, ${TOKEN_BEARER}`);\n }\n\n try {\n if (_.isString(body) || _.isObject(body)) {\n if (!res.get(HEADERS.CONTENT_TYPE)) {\n debug('set json type header support');\n res.header(HEADERS.CONTENT_TYPE, HEADERS.JSON);\n }\n\n if (typeof body === 'object' && _.isNil(body) === false) {\n if (typeof (body as MiddlewareError).error === 'string') {\n debug('set verdaccio_error method');\n res.locals._verdaccio_error = (body as MiddlewareError).error;\n }\n body = JSON.stringify(body, undefined, ' ') + '\\n';\n }\n\n // don't send etags with errors\n if (\n !res.statusCode ||\n (res.statusCode >= HTTP_STATUS.OK && res.statusCode < HTTP_STATUS.MULTIPLE_CHOICES)\n ) {\n const etag = cryptoUtils.stringToMD5(body as string);\n debug('set etag header %s', etag);\n res.header(HEADERS.ETAG, '\"' + etag + '\"');\n }\n } else {\n debug('this line should never be visible, if does report');\n // send(null), send(204), etc.\n }\n } catch (err: any) {\n // if verdaccio sends headers first, and then calls res.send()\n // as an error handler, we can't report error properly,\n // and should just close socket\n if (err.message.match(/set headers after they are sent/)) {\n debug('set headers after they are sent');\n if (_.isNil(res.socket) === false) {\n debug('force destroy socket');\n res.socket?.destroy();\n }\n return;\n }\n throw err;\n }\n\n res.send(body);\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AAA+F,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAO/F,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,4BAA4B,CAAC;AAE/C,SAASC,KAAKA,CACnBC,IAAe,EACfC,GAAmB,EACnBC,GAAoB;AACpB;AACA;AACAC,IAAsB,EAChB;EACN,IAAID,GAAG,CAACE,UAAU,KAAKC,iBAAW,CAACC,YAAY,IAAI,CAACJ,GAAG,CAACK,SAAS,CAACC,aAAO,CAACC,QAAQ,CAAC,EAAE;IACnFZ,KAAK,CAAC,yBAAyB,CAAC;IAChCK,GAAG,CAACQ,MAAM,CAACF,aAAO,CAACC,QAAQ,EAAE,GAAGE,iBAAW,KAAKC,kBAAY,EAAE,CAAC;EACjE;EAEA,IAAI;IACF,IAAIC,eAAC,CAACC,QAAQ,CAACd,IAAI,CAAC,IAAIa,eAAC,CAACE,QAAQ,CAACf,IAAI,CAAC,EAAE;MACxC,IAAI,CAACE,GAAG,CAACc,GAAG,CAACR,aAAO,CAACS,YAAY,CAAC,EAAE;QAClCpB,KAAK,CAAC,8BAA8B,CAAC;QACrCK,GAAG,CAACQ,MAAM,CAACF,aAAO,CAACS,YAAY,EAAET,aAAO,CAACU,IAAI,CAAC;MAChD;MAEA,IAAI,OAAOlB,IAAI,KAAK,QAAQ,IAAIa,eAAC,CAACM,KAAK,CAACnB,IAAI,CAAC,KAAK,KAAK,EAAE;QACvD,IAAI,OAAQA,IAAI,CAAqBoB,KAAK,KAAK,QAAQ,EAAE;UACvDvB,KAAK,CAAC,4BAA4B,CAAC;UACnCK,GAAG,CAACmB,MAAM,CAACC,gBAAgB,GAAItB,IAAI,CAAqBoB,KAAK;QAC/D;QACApB,IAAI,GAAGkB,IAAI,CAACK,SAAS,CAACvB,IAAI,EAAEwB,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI;MACrD;;MAEA;MACA,IACE,CAACtB,GAAG,CAACE,UAAU,IACdF,GAAG,CAACE,UAAU,IAAIC,iBAAW,CAACoB,EAAE,IAAIvB,GAAG,CAACE,UAAU,GAAGC,iBAAW,CAACqB,gBAAiB,EACnF;QACA,MAAMC,IAAI,GAAGC,iBAAW,CAACC,WAAW,CAAC7B,IAAc,CAAC;QACpDH,KAAK,CAAC,oBAAoB,EAAE8B,IAAI,CAAC;QACjCzB,GAAG,CAACQ,MAAM,CAACF,aAAO,CAACsB,IAAI,EAAE,GAAG,GAAGH,IAAI,GAAG,GAAG,CAAC;MAC5C;IACF,CAAC,MAAM;MACL9B,KAAK,CAAC,mDAAmD,CAAC;MAC1D;IACF;EACF,CAAC,CAAC,OAAOkC,GAAQ,EAAE;IACjB;IACA;IACA;IACA,IAAIA,GAAG,CAACC,OAAO,CAACC,KAAK,CAAC,iCAAiC,CAAC,EAAE;MACxDpC,KAAK,CAAC,iCAAiC,CAAC;MACxC,IAAIgB,eAAC,CAACM,KAAK,CAACjB,GAAG,CAACgC,MAAM,CAAC,KAAK,KAAK,EAAE;QACjCrC,KAAK,CAAC,sBAAsB,CAAC;QAC7BK,GAAG,CAACgC,MAAM,EAAEC,OAAO,CAAC,CAAC;MACvB;MACA;IACF;IACA,MAAMJ,GAAG;EACX;EAEA7B,GAAG,CAACkC,IAAI,CAACpC,IAAI,CAAC;AAChB","ignoreList":[]}
1
+ {"version":3,"file":"final.js","names":[],"sources":["../../src/middlewares/final.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\n\nimport { HEADERS, HTTP_STATUS, TOKEN_BASIC, TOKEN_BEARER, cryptoUtils } from '@verdaccio/core';\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend, MiddlewareError } from '../types';\n\nexport type FinalBody = Manifest | MiddlewareError | string;\n\nconst debug = buildDebug('verdaccio:middleware:final');\n\nexport function final(\n body: FinalBody,\n req: $RequestExtend,\n res: $ResponseExtend,\n // if we remove `next` breaks test\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\n next: $NextFunctionVer\n): void {\n if (res.statusCode === HTTP_STATUS.UNAUTHORIZED && !res.getHeader(HEADERS.WWW_AUTH)) {\n debug('set auth header support');\n res.header(HEADERS.WWW_AUTH, `${TOKEN_BASIC}, ${TOKEN_BEARER}`);\n }\n\n try {\n if (_.isString(body) || _.isObject(body)) {\n if (!res.get(HEADERS.CONTENT_TYPE)) {\n debug('set json type header support');\n res.header(HEADERS.CONTENT_TYPE, HEADERS.JSON);\n }\n\n if (typeof body === 'object' && _.isNil(body) === false) {\n if (typeof (body as MiddlewareError).error === 'string') {\n debug('set verdaccio_error method');\n res.locals._verdaccio_error = (body as MiddlewareError).error;\n }\n body = JSON.stringify(body, undefined, ' ') + '\\n';\n }\n\n // don't send etags with errors\n if (\n !res.statusCode ||\n (res.statusCode >= HTTP_STATUS.OK && res.statusCode < HTTP_STATUS.MULTIPLE_CHOICES)\n ) {\n const etag = cryptoUtils.stringToMD5(body as string);\n debug('set etag header %s', etag);\n res.header(HEADERS.ETAG, '\"' + etag + '\"');\n }\n } else {\n debug('this line should never be visible, if does report');\n // send(null), send(204), etc.\n }\n } catch (err: any) {\n // if verdaccio sends headers first, and then calls res.send()\n // as an error handler, we can't report error properly,\n // and should just close socket\n if (err.message.match(/set headers after they are sent/)) {\n debug('set headers after they are sent');\n if (_.isNil(res.socket) === false) {\n debug('force destroy socket');\n res.socket?.destroy();\n }\n return;\n }\n throw err;\n }\n\n res.send(body);\n}\n"],"mappings":";;;;;;;AAUA,IAAM,WAAA,GAAA,MAAA,SAAmB,6BAA6B;AAEtD,SAAgB,MACd,MACA,KACA,KAGA,MACM;AACN,KAAI,IAAI,eAAe,gBAAA,YAAY,gBAAgB,CAAC,IAAI,UAAU,gBAAA,QAAQ,SAAS,EAAE;AACnF,UAAM,0BAA0B;AAChC,MAAI,OAAO,gBAAA,QAAQ,UAAU,GAAG,gBAAA,YAAY,IAAI,gBAAA,eAAe;;AAGjE,KAAI;AACF,MAAI,OAAA,QAAE,SAAS,KAAK,IAAI,OAAA,QAAE,SAAS,KAAK,EAAE;AACxC,OAAI,CAAC,IAAI,IAAI,gBAAA,QAAQ,aAAa,EAAE;AAClC,YAAM,+BAA+B;AACrC,QAAI,OAAO,gBAAA,QAAQ,cAAc,gBAAA,QAAQ,KAAK;;AAGhD,OAAI,OAAO,SAAS,YAAY,OAAA,QAAE,MAAM,KAAK,KAAK,OAAO;AACvD,QAAI,OAAQ,KAAyB,UAAU,UAAU;AACvD,aAAM,6BAA6B;AACnC,SAAI,OAAO,mBAAoB,KAAyB;;AAE1D,WAAO,KAAK,UAAU,MAAM,KAAA,GAAW,KAAK,GAAG;;AAIjD,OACE,CAAC,IAAI,cACJ,IAAI,cAAc,gBAAA,YAAY,MAAM,IAAI,aAAa,gBAAA,YAAY,kBAClE;IACA,MAAM,OAAO,gBAAA,YAAY,YAAY,KAAe;AACpD,YAAM,sBAAsB,KAAK;AACjC,QAAI,OAAO,gBAAA,QAAQ,MAAM,OAAM,OAAO,KAAI;;QAG5C,SAAM,oDAAoD;UAGrD,KAAU;AAIjB,MAAI,IAAI,QAAQ,MAAM,kCAAkC,EAAE;AACxD,WAAM,kCAAkC;AACxC,OAAI,OAAA,QAAE,MAAM,IAAI,OAAO,KAAK,OAAO;AACjC,YAAM,uBAAuB;AAC7B,QAAI,QAAQ,SAAS;;AAEvB;;AAEF,QAAM;;AAGR,KAAI,KAAK,KAAK"}
@@ -0,0 +1,46 @@
1
+ import { HEADERS, HTTP_STATUS, TOKEN_BASIC, TOKEN_BEARER, cryptoUtils } from "@verdaccio/core";
2
+ import buildDebug from "debug";
3
+ import _ from "lodash";
4
+ //#region src/middlewares/final.ts
5
+ var debug = buildDebug("verdaccio:middleware:final");
6
+ function final(body, req, res, next) {
7
+ if (res.statusCode === HTTP_STATUS.UNAUTHORIZED && !res.getHeader(HEADERS.WWW_AUTH)) {
8
+ debug("set auth header support");
9
+ res.header(HEADERS.WWW_AUTH, `${TOKEN_BASIC}, ${TOKEN_BEARER}`);
10
+ }
11
+ try {
12
+ if (_.isString(body) || _.isObject(body)) {
13
+ if (!res.get(HEADERS.CONTENT_TYPE)) {
14
+ debug("set json type header support");
15
+ res.header(HEADERS.CONTENT_TYPE, HEADERS.JSON);
16
+ }
17
+ if (typeof body === "object" && _.isNil(body) === false) {
18
+ if (typeof body.error === "string") {
19
+ debug("set verdaccio_error method");
20
+ res.locals._verdaccio_error = body.error;
21
+ }
22
+ body = JSON.stringify(body, void 0, " ") + "\n";
23
+ }
24
+ if (!res.statusCode || res.statusCode >= HTTP_STATUS.OK && res.statusCode < HTTP_STATUS.MULTIPLE_CHOICES) {
25
+ const etag = cryptoUtils.stringToMD5(body);
26
+ debug("set etag header %s", etag);
27
+ res.header(HEADERS.ETAG, "\"" + etag + "\"");
28
+ }
29
+ } else debug("this line should never be visible, if does report");
30
+ } catch (err) {
31
+ if (err.message.match(/set headers after they are sent/)) {
32
+ debug("set headers after they are sent");
33
+ if (_.isNil(res.socket) === false) {
34
+ debug("force destroy socket");
35
+ res.socket?.destroy();
36
+ }
37
+ return;
38
+ }
39
+ throw err;
40
+ }
41
+ res.send(body);
42
+ }
43
+ //#endregion
44
+ export { final };
45
+
46
+ //# sourceMappingURL=final.mjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"final.mjs","names":[],"sources":["../../src/middlewares/final.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\n\nimport { HEADERS, HTTP_STATUS, TOKEN_BASIC, TOKEN_BEARER, cryptoUtils } from '@verdaccio/core';\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend, MiddlewareError } from '../types';\n\nexport type FinalBody = Manifest | MiddlewareError | string;\n\nconst debug = buildDebug('verdaccio:middleware:final');\n\nexport function final(\n body: FinalBody,\n req: $RequestExtend,\n res: $ResponseExtend,\n // if we remove `next` breaks test\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\n next: $NextFunctionVer\n): void {\n if (res.statusCode === HTTP_STATUS.UNAUTHORIZED && !res.getHeader(HEADERS.WWW_AUTH)) {\n debug('set auth header support');\n res.header(HEADERS.WWW_AUTH, `${TOKEN_BASIC}, ${TOKEN_BEARER}`);\n }\n\n try {\n if (_.isString(body) || _.isObject(body)) {\n if (!res.get(HEADERS.CONTENT_TYPE)) {\n debug('set json type header support');\n res.header(HEADERS.CONTENT_TYPE, HEADERS.JSON);\n }\n\n if (typeof body === 'object' && _.isNil(body) === false) {\n if (typeof (body as MiddlewareError).error === 'string') {\n debug('set verdaccio_error method');\n res.locals._verdaccio_error = (body as MiddlewareError).error;\n }\n body = JSON.stringify(body, undefined, ' ') + '\\n';\n }\n\n // don't send etags with errors\n if (\n !res.statusCode ||\n (res.statusCode >= HTTP_STATUS.OK && res.statusCode < HTTP_STATUS.MULTIPLE_CHOICES)\n ) {\n const etag = cryptoUtils.stringToMD5(body as string);\n debug('set etag header %s', etag);\n res.header(HEADERS.ETAG, '\"' + etag + '\"');\n }\n } else {\n debug('this line should never be visible, if does report');\n // send(null), send(204), etc.\n }\n } catch (err: any) {\n // if verdaccio sends headers first, and then calls res.send()\n // as an error handler, we can't report error properly,\n // and should just close socket\n if (err.message.match(/set headers after they are sent/)) {\n debug('set headers after they are sent');\n if (_.isNil(res.socket) === false) {\n debug('force destroy socket');\n res.socket?.destroy();\n }\n return;\n }\n throw err;\n }\n\n res.send(body);\n}\n"],"mappings":";;;;AAUA,IAAM,QAAQ,WAAW,6BAA6B;AAEtD,SAAgB,MACd,MACA,KACA,KAGA,MACM;AACN,KAAI,IAAI,eAAe,YAAY,gBAAgB,CAAC,IAAI,UAAU,QAAQ,SAAS,EAAE;AACnF,QAAM,0BAA0B;AAChC,MAAI,OAAO,QAAQ,UAAU,GAAG,YAAY,IAAI,eAAe;;AAGjE,KAAI;AACF,MAAI,EAAE,SAAS,KAAK,IAAI,EAAE,SAAS,KAAK,EAAE;AACxC,OAAI,CAAC,IAAI,IAAI,QAAQ,aAAa,EAAE;AAClC,UAAM,+BAA+B;AACrC,QAAI,OAAO,QAAQ,cAAc,QAAQ,KAAK;;AAGhD,OAAI,OAAO,SAAS,YAAY,EAAE,MAAM,KAAK,KAAK,OAAO;AACvD,QAAI,OAAQ,KAAyB,UAAU,UAAU;AACvD,WAAM,6BAA6B;AACnC,SAAI,OAAO,mBAAoB,KAAyB;;AAE1D,WAAO,KAAK,UAAU,MAAM,KAAA,GAAW,KAAK,GAAG;;AAIjD,OACE,CAAC,IAAI,cACJ,IAAI,cAAc,YAAY,MAAM,IAAI,aAAa,YAAY,kBAClE;IACA,MAAM,OAAO,YAAY,YAAY,KAAe;AACpD,UAAM,sBAAsB,KAAK;AACjC,QAAI,OAAO,QAAQ,MAAM,OAAM,OAAO,KAAI;;QAG5C,OAAM,oDAAoD;UAGrD,KAAU;AAIjB,MAAI,IAAI,QAAQ,MAAM,kCAAkC,EAAE;AACxD,SAAM,kCAAkC;AACxC,OAAI,EAAE,MAAM,IAAI,OAAO,KAAK,OAAO;AACjC,UAAM,uBAAuB;AAC7B,QAAI,QAAQ,SAAS;;AAEvB;;AAEF,QAAM;;AAGR,KAAI,KAAK,KAAK"}
@@ -1,2 +1,2 @@
1
- import type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
1
+ import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
2
2
  export declare function expectJson(req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void;
@@ -1,14 +1,11 @@
1
- "use strict";
2
-
3
- Object.defineProperty(exports, "__esModule", {
4
- value: true
5
- });
6
- exports.expectJson = expectJson;
7
- var _core = require("@verdaccio/core");
1
+ require("../_virtual/_rolldown/runtime.js");
2
+ let _verdaccio_core = require("@verdaccio/core");
3
+ //#region src/middlewares/json.ts
8
4
  function expectJson(req, res, next) {
9
- if (!_core.validationUtils.isObject(req.body)) {
10
- return next(_core.errorUtils.getBadRequest("can't parse incoming json"));
11
- }
12
- next();
5
+ if (!_verdaccio_core.validationUtils.isObject(req.body)) return next(_verdaccio_core.errorUtils.getBadRequest("can't parse incoming json"));
6
+ next();
13
7
  }
8
+ //#endregion
9
+ exports.expectJson = expectJson;
10
+
14
11
  //# sourceMappingURL=json.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"json.js","names":["_core","require","expectJson","req","res","next","validationUtils","isObject","body","errorUtils","getBadRequest"],"sources":["../../src/middlewares/json.ts"],"sourcesContent":["import { errorUtils, validationUtils } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function expectJson(\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n): void {\n if (!validationUtils.isObject(req.body)) {\n return next(errorUtils.getBadRequest(\"can't parse incoming json\"));\n }\n next();\n}\n"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AAIO,SAASC,UAAUA,CACxBC,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EAChB;EACN,IAAI,CAACC,qBAAe,CAACC,QAAQ,CAACJ,GAAG,CAACK,IAAI,CAAC,EAAE;IACvC,OAAOH,IAAI,CAACI,gBAAU,CAACC,aAAa,CAAC,2BAA2B,CAAC,CAAC;EACpE;EACAL,IAAI,CAAC,CAAC;AACR","ignoreList":[]}
1
+ {"version":3,"file":"json.js","names":[],"sources":["../../src/middlewares/json.ts"],"sourcesContent":["import { errorUtils, validationUtils } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function expectJson(\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n): void {\n if (!validationUtils.isObject(req.body)) {\n return next(errorUtils.getBadRequest(\"can't parse incoming json\"));\n }\n next();\n}\n"],"mappings":";;;AAIA,SAAgB,WACd,KACA,KACA,MACM;AACN,KAAI,CAAC,gBAAA,gBAAgB,SAAS,IAAI,KAAK,CACrC,QAAO,KAAK,gBAAA,WAAW,cAAc,4BAA4B,CAAC;AAEpE,OAAM"}
@@ -0,0 +1,10 @@
1
+ import { errorUtils, validationUtils } from "@verdaccio/core";
2
+ //#region src/middlewares/json.ts
3
+ function expectJson(req, res, next) {
4
+ if (!validationUtils.isObject(req.body)) return next(errorUtils.getBadRequest("can't parse incoming json"));
5
+ next();
6
+ }
7
+ //#endregion
8
+ export { expectJson };
9
+
10
+ //# sourceMappingURL=json.mjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"json.mjs","names":[],"sources":["../../src/middlewares/json.ts"],"sourcesContent":["import { errorUtils, validationUtils } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function expectJson(\n req: $RequestExtend,\n res: $ResponseExtend,\n next: $NextFunctionVer\n): void {\n if (!validationUtils.isObject(req.body)) {\n return next(errorUtils.getBadRequest(\"can't parse incoming json\"));\n }\n next();\n}\n"],"mappings":";;AAIA,SAAgB,WACd,KACA,KACA,MACM;AACN,KAAI,CAAC,gBAAgB,SAAS,IAAI,KAAK,CACrC,QAAO,KAAK,WAAW,cAAc,4BAA4B,CAAC;AAEpE,OAAM"}
@@ -1,4 +1,4 @@
1
- import type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
1
+ import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
2
2
  export declare const LOG_STATUS_MESSAGE = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'";
3
3
  export declare const LOG_VERDACCIO_ERROR = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}', error: @{!error}";
4
4
  export declare const LOG_VERDACCIO_BYTES = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}', bytes: @{bytes.in}/@{bytes.out}";
@@ -1,130 +1,102 @@
1
- "use strict";
2
-
3
- Object.defineProperty(exports, "__esModule", {
4
- value: true
5
- });
6
- exports.log = exports.LOG_VERDACCIO_ERROR = exports.LOG_VERDACCIO_BYTES = exports.LOG_STATUS_MESSAGE = void 0;
7
- var _debug = _interopRequireDefault(require("debug"));
8
- var _lodash = _interopRequireDefault(require("lodash"));
9
- var _core = require("@verdaccio/core");
10
- function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
11
- const debug = (0, _debug.default)('verdaccio:middleware:log');
1
+ const require_runtime = require("../_virtual/_rolldown/runtime.js");
2
+ let _verdaccio_core = require("@verdaccio/core");
3
+ let debug = require("debug");
4
+ debug = require_runtime.__toESM(debug);
5
+ let lodash = require("lodash");
6
+ lodash = require_runtime.__toESM(lodash);
7
+ //#region src/middlewares/log.ts
8
+ var debug$1 = (0, debug.default)("verdaccio:middleware:log");
12
9
  function isStaticRequest(url) {
13
- return url.startsWith('/-/static/');
10
+ return url.startsWith("/-/static/");
14
11
  }
15
-
16
- // FIXME: deprecated, moved to @verdaccio/dev-commons
17
- const LOG_STATUS_MESSAGE = exports.LOG_STATUS_MESSAGE = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'";
18
- const LOG_VERDACCIO_ERROR = exports.LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;
19
- const LOG_VERDACCIO_BYTES = exports.LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;
20
- const log = (logger, options = {}) => {
21
- const {
22
- hideStaticLogs = true
23
- } = options;
24
- return function log(req, res, next) {
25
- // logger
26
- req.log = logger.child({
27
- sub: 'in'
28
- });
29
- const _auth = req.headers.authorization;
30
- if (_lodash.default.isNil(_auth) === false) {
31
- req.headers.authorization = '<Classified>';
32
- }
33
- const _cookie = req.get('cookie');
34
- if (_lodash.default.isNil(_cookie) === false) {
35
- req.headers.cookie = '<Classified>';
36
- }
37
- req.url = req.originalUrl;
38
- const _skipLog = hideStaticLogs && isStaticRequest(req.url);
39
- if (_skipLog) {
40
- debug("@{ip} requested '@{req.method} @{req.url}'", {
41
- ip: req.ip,
42
- req
43
- });
44
- } else {
45
- req.log.info({
46
- req: req,
47
- ip: req.ip
48
- }, "@{ip} requested '@{req.method} @{req.url}'");
49
- }
50
- req.originalUrl = req.url;
51
- if (_lodash.default.isNil(_auth) === false) {
52
- req.headers.authorization = _auth;
53
- }
54
- if (_lodash.default.isNil(_cookie) === false) {
55
- req.headers.cookie = _cookie;
56
- }
57
- let bytesin = 0;
58
- req.on('data', function (chunk) {
59
- bytesin += chunk.length;
60
- });
61
- let bytesout = 0;
62
- const _write = res.write;
63
- // @ts-ignore
64
- res.write = function (...args) {
65
- bytesout += args[0]?.length || 0;
66
- // @ts-ignore
67
- return _write.apply(res, args);
68
- };
69
- const log = function () {
70
- const forwardedFor = req.get(_core.HEADERS.FORWARDED_FOR);
71
- const remoteAddress = req.socket.remoteAddress;
72
- const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;
73
- let message;
74
- if (res.locals._verdaccio_error) {
75
- message = LOG_VERDACCIO_ERROR;
76
- } else {
77
- message = LOG_VERDACCIO_BYTES;
78
- }
79
- req.url = req.originalUrl;
80
- if (_skipLog) {
81
- debug(message, {
82
- request: {
83
- method: req.method,
84
- url: req.url
85
- },
86
- user: req.remote_user?.name || null,
87
- remoteIP,
88
- status: res.statusCode,
89
- error: res.locals._verdaccio_error,
90
- bytes: {
91
- in: bytesin,
92
- out: bytesout
93
- }
94
- });
95
- } else {
96
- req.log.http({
97
- request: {
98
- method: req.method,
99
- url: req.url
100
- },
101
- user: req.remote_user?.name || null,
102
- remoteIP,
103
- status: res.statusCode,
104
- error: res.locals._verdaccio_error,
105
- bytes: {
106
- in: bytesin,
107
- out: bytesout
108
- }
109
- }, message);
110
- }
111
- req.originalUrl = req.url;
112
- };
113
- req.on('close', function () {
114
- log();
115
- });
116
- const _end = res.end;
117
- // @ts-ignore
118
- res.end = function (...args) {
119
- if (args[0]) {
120
- bytesout += args[0].length;
121
- }
122
- // @ts-ignore
123
- _end.apply(res, args);
124
- log();
125
- };
126
- next();
127
- };
12
+ var LOG_STATUS_MESSAGE = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'";
13
+ var LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;
14
+ var LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;
15
+ var log = (logger, options = {}) => {
16
+ const { hideStaticLogs = true } = options;
17
+ return function log(req, res, next) {
18
+ req.log = logger.child({ sub: "in" });
19
+ const _auth = req.headers.authorization;
20
+ if (lodash.default.isNil(_auth) === false) req.headers.authorization = "<Classified>";
21
+ const _cookie = req.get("cookie");
22
+ if (lodash.default.isNil(_cookie) === false) req.headers.cookie = "<Classified>";
23
+ req.url = req.originalUrl;
24
+ const _skipLog = hideStaticLogs && isStaticRequest(req.url);
25
+ if (_skipLog) debug$1("@{ip} requested '@{req.method} @{req.url}'", {
26
+ ip: req.ip,
27
+ req
28
+ });
29
+ else req.log.info({
30
+ req,
31
+ ip: req.ip
32
+ }, "@{ip} requested '@{req.method} @{req.url}'");
33
+ req.originalUrl = req.url;
34
+ if (lodash.default.isNil(_auth) === false) req.headers.authorization = _auth;
35
+ if (lodash.default.isNil(_cookie) === false) req.headers.cookie = _cookie;
36
+ let bytesin = 0;
37
+ req.on("data", function(chunk) {
38
+ bytesin += chunk.length;
39
+ });
40
+ let bytesout = 0;
41
+ const _write = res.write;
42
+ res.write = function(...args) {
43
+ bytesout += args[0]?.length || 0;
44
+ return _write.apply(res, args);
45
+ };
46
+ const log = function() {
47
+ const forwardedFor = req.get(_verdaccio_core.HEADERS.FORWARDED_FOR);
48
+ const remoteAddress = req.socket.remoteAddress;
49
+ const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;
50
+ let message;
51
+ if (res.locals._verdaccio_error) message = LOG_VERDACCIO_ERROR;
52
+ else message = LOG_VERDACCIO_BYTES;
53
+ req.url = req.originalUrl;
54
+ if (_skipLog) debug$1(message, {
55
+ request: {
56
+ method: req.method,
57
+ url: req.url
58
+ },
59
+ user: req.remote_user?.name || null,
60
+ remoteIP,
61
+ status: res.statusCode,
62
+ error: res.locals._verdaccio_error,
63
+ bytes: {
64
+ in: bytesin,
65
+ out: bytesout
66
+ }
67
+ });
68
+ else req.log.http({
69
+ request: {
70
+ method: req.method,
71
+ url: req.url
72
+ },
73
+ user: req.remote_user?.name || null,
74
+ remoteIP,
75
+ status: res.statusCode,
76
+ error: res.locals._verdaccio_error,
77
+ bytes: {
78
+ in: bytesin,
79
+ out: bytesout
80
+ }
81
+ }, message);
82
+ req.originalUrl = req.url;
83
+ };
84
+ req.on("close", function() {
85
+ log();
86
+ });
87
+ const _end = res.end;
88
+ res.end = function(...args) {
89
+ if (args[0]) bytesout += args[0].length;
90
+ _end.apply(res, args);
91
+ log();
92
+ };
93
+ next();
94
+ };
128
95
  };
96
+ //#endregion
97
+ exports.LOG_STATUS_MESSAGE = LOG_STATUS_MESSAGE;
98
+ exports.LOG_VERDACCIO_BYTES = LOG_VERDACCIO_BYTES;
99
+ exports.LOG_VERDACCIO_ERROR = LOG_VERDACCIO_ERROR;
129
100
  exports.log = log;
101
+
130
102
  //# sourceMappingURL=log.js.map