@verdaccio/middleware 9.0.0-next-9.3 → 9.0.0-next-9.4

package/build/middlewares/web/security.mjs

@@ -0,0 +1,30 @@
+import { HEADERS } from "@verdaccio/core";
+import buildDebug from "debug";
+//#region src/middlewares/web/security.ts
+var debug = buildDebug("verdaccio:middleware:web:security");
+function setSecurityWebHeaders(_req, res, next) {
+	const framesOptions = res.getHeader(HEADERS.FRAMES_OPTIONS);
+	if (!framesOptions || !(framesOptions === "deny" || framesOptions === "sameorigin")) {
+		debug("Missing or invalid X-Frame-Options header; setting to \"deny\"");
+		res.header(HEADERS.FRAMES_OPTIONS, "deny");
+	}
+	if (!res.getHeader(HEADERS.CSP)) {
+		debug("Missing Content-Security-Policy header; setting to \"connect-src 'self'\"");
+		res.header(HEADERS.CSP, "connect-src 'self'");
+	}
+	const cto = res.getHeader(HEADERS.CTO);
+	if (!cto || cto !== "nosniff") {
+		debug("Missing or invalid X-Content-Type-Options header; setting to \"nosniff\"");
+		res.header(HEADERS.CTO, "nosniff");
+	}
+	const xss = res.getHeader(HEADERS.XSS);
+	if (!xss || !(xss === "0" || xss.startsWith("1"))) {
+		debug("Missing or invalid X-XSS-Protection header; setting to \"1; mode=block\"");
+		res.header(HEADERS.XSS, "1; mode=block");
+	}
+	next();
+}
+//#endregion
+export { setSecurityWebHeaders };
+
+//# sourceMappingURL=security.mjs.map

package/build/middlewares/web/security.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.mjs","names":[],"sources":["../../../src/middlewares/web/security.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { HEADERS } from '@verdaccio/core';\n\nconst debug = buildDebug('verdaccio:middleware:web:security');\n\nexport function setSecurityWebHeaders(_req, res, next): void {\n  // disable loading in frames (clickjacking, etc.)\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options\n  const framesOptions = res.getHeader(HEADERS.FRAMES_OPTIONS);\n  if (!framesOptions || !(framesOptions === 'deny' || framesOptions === 'sameorigin')) {\n    debug('Missing or invalid X-Frame-Options header; setting to \"deny\"');\n    res.header(HEADERS.FRAMES_OPTIONS, 'deny');\n  }\n\n  // avoid establishing connections outside of domain\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy\n  if (!res.getHeader(HEADERS.CSP)) {\n    debug('Missing Content-Security-Policy header; setting to \"connect-src \\'self\\'\"');\n    res.header(HEADERS.CSP, \"connect-src 'self'\");\n  }\n\n  // respect the content type of the response\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Content-Type-Options\n  const cto = res.getHeader(HEADERS.CTO);\n  if (!cto || cto !== 'nosniff') {\n    debug('Missing or invalid X-Content-Type-Options header; setting to \"nosniff\"');\n    res.header(HEADERS.CTO, 'nosniff');\n  }\n\n  // block rendering of the page in case of XSS attack\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection\n  const xss = res.getHeader(HEADERS.XSS);\n  if (!xss || !(xss === '0' || xss.startsWith('1'))) {\n    debug('Missing or invalid X-XSS-Protection header; setting to \"1; mode=block\"');\n    res.header(HEADERS.XSS, '1; mode=block');\n  }\n  next();\n}\n"],"mappings":";;;AAIA,IAAM,QAAQ,WAAW,oCAAoC;AAE7D,SAAgB,sBAAsB,MAAM,KAAK,MAAY;CAG3D,MAAM,gBAAgB,IAAI,UAAU,QAAQ,eAAe;AAC3D,KAAI,CAAC,iBAAiB,EAAE,kBAAkB,UAAU,kBAAkB,eAAe;AACnF,QAAM,iEAA+D;AACrE,MAAI,OAAO,QAAQ,gBAAgB,OAAO;;AAK5C,KAAI,CAAC,IAAI,UAAU,QAAQ,IAAI,EAAE;AAC/B,QAAM,4EAA4E;AAClF,MAAI,OAAO,QAAQ,KAAK,qBAAqB;;CAK/C,MAAM,MAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,KAAI,CAAC,OAAO,QAAQ,WAAW;AAC7B,QAAM,2EAAyE;AAC/E,MAAI,OAAO,QAAQ,KAAK,UAAU;;CAKpC,MAAM,MAAM,IAAI,UAAU,QAAQ,IAAI;AACtC,KAAI,CAAC,OAAO,EAAE,QAAQ,OAAO,IAAI,WAAW,IAAI,GAAG;AACjD,QAAM,2EAAyE;AAC/E,MAAI,OAAO,QAAQ,KAAK,gBAAgB;;AAE1C,OAAM"}

package/build/middlewares/web/utils/manifest.js

@@ -1,24 +1,23 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.getManifestValue = getManifestValue;
-var _debug = _interopRequireDefault(require("debug"));
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = (0, _debug.default)('verdaccio:middleware:web:render:manifest');
-function getManifestValue(manifestItems, manifest, basePath = '') {
-  return manifestItems?.map(item => {
-    debug('resolve item %o', item);
-    const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;
-    debug('resolved item %o', resolvedItem);
-    return resolvedItem;
-  });
+const require_runtime = require("../../../_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+//#region src/middlewares/web/utils/manifest.ts
+var debug$1 = (0, debug.default)("verdaccio:middleware:web:render:manifest");
+function getManifestValue(manifestItems, manifest, basePath = "") {
+	return manifestItems?.map((item) => {
+		debug$1("resolve item %o", item);
+		const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;
+		debug$1("resolved item %o", resolvedItem);
+		return resolvedItem;
+	});
 }
 function stripTrailingSlash(path) {
-  return path.replace(/\/$/, '');
+	return path.replace(/\/$/, "");
 }
 function stripLeadingSlash(path) {
-  return path.replace(/^\//, '');
+	return path.replace(/^\//, "");
 }
+//#endregion
+exports.getManifestValue = getManifestValue;
+
 //# sourceMappingURL=manifest.js.map

package/build/middlewares/web/utils/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","names":["_debug","_interopRequireDefault","require","e","__esModule","default","debug","buildDebug","getManifestValue","manifestItems","manifest","basePath","map","item","resolvedItem","stripTrailingSlash","stripLeadingSlash","path","replace"],"sources":["../../../../src/middlewares/web/utils/manifest.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nexport type Manifest = {\n  // goes on first place at the header\n  ico: string;\n  css: string[];\n  js: string[];\n};\n\nconst debug = buildDebug('verdaccio:middleware:web:render:manifest');\n\nexport function getManifestValue(\n  manifestItems: string[],\n  manifest,\n  basePath: string = ''\n): string[] {\n  return manifestItems?.map((item) => {\n    debug('resolve item %o', item);\n    const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;\n    debug('resolved item %o', resolvedItem);\n    return resolvedItem;\n  });\n}\n\nfunction stripTrailingSlash(path: string): string {\n  return path.replace(/\\/$/, '');\n}\n\nfunction stripLeadingSlash(path: string): string {\n  return path.replace(/^\\//, '');\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAA+B,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAS/B,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,0CAA0C,CAAC;AAE7D,SAASC,gBAAgBA,CAC9BC,aAAuB,EACvBC,QAAQ,EACRC,QAAgB,GAAG,EAAE,EACX;EACV,OAAOF,aAAa,EAAEG,GAAG,CAAEC,IAAI,IAAK;IAClCP,KAAK,CAAC,iBAAiB,EAAEO,IAAI,CAAC;IAC9B,MAAMC,YAAY,GAAG,GAAGC,kBAAkB,CAACJ,QAAQ,CAAC,IAAIK,iBAAiB,CAACN,QAAQ,CAACG,IAAI,CAAC,CAAC,EAAE;IAC3FP,KAAK,CAAC,kBAAkB,EAAEQ,YAAY,CAAC;IACvC,OAAOA,YAAY;EACrB,CAAC,CAAC;AACJ;AAEA,SAASC,kBAAkBA,CAACE,IAAY,EAAU;EAChD,OAAOA,IAAI,CAACC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAChC;AAEA,SAASF,iBAAiBA,CAACC,IAAY,EAAU;EAC/C,OAAOA,IAAI,CAACC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAChC","ignoreList":[]}
+{"version":3,"file":"manifest.js","names":[],"sources":["../../../../src/middlewares/web/utils/manifest.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nexport type Manifest = {\n  // goes on first place at the header\n  ico: string;\n  css: string[];\n  js: string[];\n};\n\nconst debug = buildDebug('verdaccio:middleware:web:render:manifest');\n\nexport function getManifestValue(\n  manifestItems: string[],\n  manifest,\n  basePath: string = ''\n): string[] {\n  return manifestItems?.map((item) => {\n    debug('resolve item %o', item);\n    const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;\n    debug('resolved item %o', resolvedItem);\n    return resolvedItem;\n  });\n}\n\nfunction stripTrailingSlash(path: string): string {\n  return path.replace(/\\/$/, '');\n}\n\nfunction stripLeadingSlash(path: string): string {\n  return path.replace(/^\\//, '');\n}\n"],"mappings":";;;;AASA,IAAM,WAAA,GAAA,MAAA,SAAmB,2CAA2C;AAEpE,SAAgB,iBACd,eACA,UACA,WAAmB,IACT;AACV,QAAO,eAAe,KAAK,SAAS;AAClC,UAAM,mBAAmB,KAAK;EAC9B,MAAM,eAAe,GAAG,mBAAmB,SAAS,CAAC,GAAG,kBAAkB,SAAS,MAAM;AACzF,UAAM,oBAAoB,aAAa;AACvC,SAAO;GACP;;AAGJ,SAAS,mBAAmB,MAAsB;AAChD,QAAO,KAAK,QAAQ,OAAO,GAAG;;AAGhC,SAAS,kBAAkB,MAAsB;AAC/C,QAAO,KAAK,QAAQ,OAAO,GAAG"}

package/build/middlewares/web/utils/manifest.mjs

@@ -0,0 +1,21 @@
+import buildDebug from "debug";
+//#region src/middlewares/web/utils/manifest.ts
+var debug = buildDebug("verdaccio:middleware:web:render:manifest");
+function getManifestValue(manifestItems, manifest, basePath = "") {
+	return manifestItems?.map((item) => {
+		debug("resolve item %o", item);
+		const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;
+		debug("resolved item %o", resolvedItem);
+		return resolvedItem;
+	});
+}
+function stripTrailingSlash(path) {
+	return path.replace(/\/$/, "");
+}
+function stripLeadingSlash(path) {
+	return path.replace(/^\//, "");
+}
+//#endregion
+export { getManifestValue };
+
+//# sourceMappingURL=manifest.mjs.map

package/build/middlewares/web/utils/manifest.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/manifest.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nexport type Manifest = {\n  // goes on first place at the header\n  ico: string;\n  css: string[];\n  js: string[];\n};\n\nconst debug = buildDebug('verdaccio:middleware:web:render:manifest');\n\nexport function getManifestValue(\n  manifestItems: string[],\n  manifest,\n  basePath: string = ''\n): string[] {\n  return manifestItems?.map((item) => {\n    debug('resolve item %o', item);\n    const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;\n    debug('resolved item %o', resolvedItem);\n    return resolvedItem;\n  });\n}\n\nfunction stripTrailingSlash(path: string): string {\n  return path.replace(/\\/$/, '');\n}\n\nfunction stripLeadingSlash(path: string): string {\n  return path.replace(/^\\//, '');\n}\n"],"mappings":";;AASA,IAAM,QAAQ,WAAW,2CAA2C;AAEpE,SAAgB,iBACd,eACA,UACA,WAAmB,IACT;AACV,QAAO,eAAe,KAAK,SAAS;AAClC,QAAM,mBAAmB,KAAK;EAC9B,MAAM,eAAe,GAAG,mBAAmB,SAAS,CAAC,GAAG,kBAAkB,SAAS,MAAM;AACzF,QAAM,oBAAoB,aAAa;AACvC,SAAO;GACP;;AAGJ,SAAS,mBAAmB,MAAsB;AAChD,QAAO,KAAK,QAAQ,OAAO,GAAG;;AAGhC,SAAS,kBAAkB,MAAsB;AAC/C,QAAO,KAAK,QAAQ,OAAO,GAAG"}

package/build/middlewares/web/utils/renderHTML.d.ts

@@ -1,7 +1,7 @@
-import type { Response } from 'express';
-import type { ConfigYaml } from '@verdaccio/types';
-import type { RequestOptions } from '@verdaccio/url';
-import type { Manifest } from './manifest';
-import type { AssetManifest } from './template';
+import { Response } from 'express';
+import { ConfigYaml } from '@verdaccio/types';
+import { RequestOptions } from '@verdaccio/url';
+import { Manifest } from './manifest';
+import { AssetManifest } from './template';
 export declare function resolveLogo(logo: string | undefined, url_prefix: string | undefined, requestOptions: RequestOptions): string;
 export default function renderHTML(config: ConfigYaml, manifest: AssetManifest, manifestFiles: Manifest | null | undefined, requestOptions: RequestOptions, res: Response): void;

package/build/middlewares/web/utils/renderHTML.js

@@ -1,143 +1,116 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = renderHTML;
-exports.resolveLogo = resolveLogo;
-var _debug = _interopRequireDefault(require("debug"));
-var _lruCache = require("lru-cache");
-var _nodePath = _interopRequireDefault(require("node:path"));
-var _nodeUrl = require("node:url");
-var _config = require("@verdaccio/config");
-var _core = require("@verdaccio/core");
-var _url = require("@verdaccio/url");
-var _template = _interopRequireDefault(require("./template"));
-var _webUtils = require("./web-utils");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const DEFAULT_LANGUAGE = 'es-US';
-// Cache for rendered HTML templates: max 500 entries, 1 hour TTL
-const cache = new _lruCache.LRUCache({
-  max: 500,
-  ttl: 1000 * 60 * 60
+const require_runtime = require("../../../_virtual/_rolldown/runtime.js");
+const require_template = require("./template.js");
+const require_web_utils = require("./web-utils.js");
+let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let node_url = require("node:url");
+let _verdaccio_config = require("@verdaccio/config");
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
+let _verdaccio_url = require("@verdaccio/url");
+let lru_cache = require("lru-cache");
+//#region src/middlewares/web/utils/renderHTML.ts
+var DEFAULT_LANGUAGE = "es-US";
+var cache = new lru_cache.LRUCache({
+	max: 500,
+	ttl: 1e3 * 60 * 60
 });
-const debug = (0, _debug.default)('verdaccio:web:render');
-const defaultManifestFiles = {
-  js: ['vendors.js', 'main.js'],
-  ico: 'favicon.ico',
-  css: []
+var debug$1 = (0, debug.default)("verdaccio:web:render");
+var defaultManifestFiles = {
+	js: ["vendors.js", "main.js"],
+	ico: "favicon.ico",
+	css: []
 };
 function resolveLogo(logo, url_prefix, requestOptions) {
-  if (typeof logo !== 'string') {
-    return '';
-  }
-  const isLocalFile = logo && !(0, _url.isURLhasValidProtocol)(logo);
-  if (isLocalFile) {
-    return `${(0, _url.getPublicUrl)(url_prefix, requestOptions)}-/static/${_nodePath.default.basename(logo)}`;
-  } else if ((0, _url.isURLhasValidProtocol)(logo)) {
-    return logo;
-  } else {
-    return '';
-  }
+	if (typeof logo !== "string") return "";
+	if (logo && !(0, _verdaccio_url.isURLhasValidProtocol)(logo)) return `${(0, _verdaccio_url.getPublicUrl)(url_prefix, requestOptions)}-/static/${node_path.default.basename(logo)}`;
+	else if ((0, _verdaccio_url.isURLhasValidProtocol)(logo)) return logo;
+	else return "";
 }
 function renderHTML(config, manifest, manifestFiles, requestOptions, res) {
-  const {
-    url_prefix
-  } = config;
-  const base = (0, _url.getPublicUrl)(config?.url_prefix, requestOptions);
-  const basename = _nodeUrl.URL.canParse(base) ? new _nodeUrl.URL(base).pathname : base;
-  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;
-  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;
-  // @ts-ignore
-  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache) ? true : config?.web?.html_cache;
-  const darkMode = config?.web?.darkMode ?? false;
-  const title = config?.web?.title ?? _config.WEB_TITLE;
-  const login = (0, _webUtils.hasLogin)(config);
-  const scope = config?.web?.scope ?? '';
-  const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);
-  const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);
-  const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);
-  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];
-  const version = res.locals.app_version ?? '';
-  const flags = {
-    ...config.flags,
-    // legacy from 5.x
-    ...config.experiments
-  };
-  const primaryColor = (0, _webUtils.validatePrimaryColor)(config?.web?.primary_color ?? config?.web?.primaryColor) ?? '#4b5e40';
-  const {
-    scriptsBodyAfter,
-    metaScripts,
-    scriptsbodyBefore,
-    // deprecated
-    showInfo,
-    showSettings,
-    showThemeSwitch,
-    showFooter,
-    showSearch,
-    showDownloadTarball,
-    showRaw,
-    showUplinks
-  } = Object.assign({}, {
-    scriptsBodyAfter: [],
-    bodyBefore: [],
-    metaScripts: []
-  }, config?.web);
-  // Fallback
-  let scriptsBodyBefore = config?.web?.scriptsBodyBefore;
-  if (scriptsbodyBefore && !scriptsBodyBefore) {
-    scriptsBodyBefore = scriptsbodyBefore;
-  }
-  const options = {
-    showInfo,
-    showSettings,
-    showThemeSwitch,
-    showFooter,
-    showSearch,
-    showDownloadTarball,
-    showRaw,
-    showUplinks,
-    darkMode,
-    url_prefix,
-    basename,
-    base,
-    primaryColor,
-    version,
-    logo,
-    logoDark,
-    favicon,
-    flags,
-    login,
-    pkgManagers,
-    title,
-    scope,
-    language,
-    hideDeprecatedVersions
-  };
-  let webPage;
-  const cacheKey = `template:${JSON.stringify(options)}`;
-  try {
-    webPage = cache.get(cacheKey);
-    if (!webPage) {
-      webPage = (0, _template.default)({
-        manifest: manifestFiles ?? defaultManifestFiles,
-        options,
-        scriptsBodyAfter,
-        metaScripts,
-        scriptsBodyBefore
-      }, manifest);
-      if (needHtmlCache) {
-        cache.set(cacheKey, webPage);
-        debug('set template cache');
-      }
-    } else {
-      debug('reuse template cache');
-    }
-  } catch (error) {
-    throw new Error(`theme could not be load, stack ${error.stack}`);
-  }
-  res.setHeader('Content-Type', _core.HEADERS.TEXT_HTML);
-  res.send(webPage);
-  debug('web rendered');
+	const { url_prefix } = config;
+	const base = (0, _verdaccio_url.getPublicUrl)(config?.url_prefix, requestOptions);
+	const basename = node_url.URL.canParse(base) ? new node_url.URL(base).pathname : base;
+	const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;
+	const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;
+	const needHtmlCache = [void 0, null].includes(config?.web?.html_cache) ? true : config?.web?.html_cache;
+	const darkMode = config?.web?.darkMode ?? false;
+	const title = config?.web?.title ?? _verdaccio_config.WEB_TITLE;
+	const login = require_web_utils.hasLogin(config);
+	const scope = config?.web?.scope ?? "";
+	const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);
+	const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);
+	const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);
+	const pkgManagers = config?.web?.pkgManagers ?? [
+		"yarn",
+		"pnpm",
+		"npm"
+	];
+	const version = res.locals.app_version ?? "";
+	const flags = {
+		...config.flags,
+		...config.experiments
+	};
+	const primaryColor = require_web_utils.validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? "#4b5e40";
+	const { scriptsBodyAfter, metaScripts, scriptsbodyBefore, showInfo, showSettings, showThemeSwitch, showFooter, showSearch, showDownloadTarball, showRaw, showUplinks } = Object.assign({}, {
+		scriptsBodyAfter: [],
+		bodyBefore: [],
+		metaScripts: []
+	}, config?.web);
+	let scriptsBodyBefore = config?.web?.scriptsBodyBefore;
+	if (scriptsbodyBefore && !scriptsBodyBefore) scriptsBodyBefore = scriptsbodyBefore;
+	const options = {
+		showInfo,
+		showSettings,
+		showThemeSwitch,
+		showFooter,
+		showSearch,
+		showDownloadTarball,
+		showRaw,
+		showUplinks,
+		darkMode,
+		url_prefix,
+		basename,
+		base,
+		primaryColor,
+		version,
+		logo,
+		logoDark,
+		favicon,
+		flags,
+		login,
+		pkgManagers,
+		title,
+		scope,
+		language,
+		hideDeprecatedVersions
+	};
+	let webPage;
+	const cacheKey = `template:${JSON.stringify(options)}`;
+	try {
+		webPage = cache.get(cacheKey);
+		if (!webPage) {
+			webPage = require_template.default({
+				manifest: manifestFiles ?? defaultManifestFiles,
+				options,
+				scriptsBodyAfter,
+				metaScripts,
+				scriptsBodyBefore
+			}, manifest);
+			if (needHtmlCache) {
+				cache.set(cacheKey, webPage);
+				debug$1("set template cache");
+			}
+		} else debug$1("reuse template cache");
+	} catch (error) {
+		throw new Error(`theme could not be load, stack ${error.stack}`);
+	}
+	res.setHeader("Content-Type", _verdaccio_core.HEADERS.TEXT_HTML);
+	res.send(webPage);
+	debug$1("web rendered");
 }
+//#endregion
+exports.default = renderHTML;
+
 //# sourceMappingURL=renderHTML.js.map

package/build/middlewares/web/utils/renderHTML.js.map

@@ -1 +1 @@
-{"version":3,"file":"renderHTML.js","names":["_debug","_interopRequireDefault","require","_lruCache","_nodePath","_nodeUrl","_config","_core","_url","_template","_webUtils","e","__esModule","default","DEFAULT_LANGUAGE","cache","LRUCache","max","ttl","debug","buildDebug","defaultManifestFiles","js","ico","css","resolveLogo","logo","url_prefix","requestOptions","isLocalFile","isURLhasValidProtocol","getPublicUrl","path","basename","renderHTML","config","manifest","manifestFiles","res","base","URL","canParse","pathname","language","i18n","web","hideDeprecatedVersions","needHtmlCache","undefined","includes","html_cache","darkMode","title","WEB_TITLE","login","hasLogin","scope","favicon","logoDark","pkgManagers","version","locals","app_version","flags","experiments","primaryColor","validatePrimaryColor","primary_color","scriptsBodyAfter","metaScripts","scriptsbodyBefore","showInfo","showSettings","showThemeSwitch","showFooter","showSearch","showDownloadTarball","showRaw","showUplinks","Object","assign","bodyBefore","scriptsBodyBefore","options","webPage","cacheKey","JSON","stringify","get","renderTemplate","set","error","Error","stack","setHeader","HEADERS","TEXT_HTML","send"],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport { LRUCache } from 'lru-cache';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport { WEB_TITLE } from '@verdaccio/config';\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\nimport type { RequestOptions } from '@verdaccio/url';\nimport { getPublicUrl, isURLhasValidProtocol } from '@verdaccio/url';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\nimport { hasLogin, validatePrimaryColor } from './web-utils';\n\nconst DEFAULT_LANGUAGE = 'es-US';\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport function resolveLogo(\n  logo: string | undefined,\n  url_prefix: string | undefined,\n  requestOptions: RequestOptions\n) {\n  if (typeof logo !== 'string') {\n    return '';\n  }\n  const isLocalFile = logo && !isURLhasValidProtocol(logo);\n\n  if (isLocalFile) {\n    return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;\n  } else if (isURLhasValidProtocol(logo)) {\n    return logo;\n  } else {\n    return '';\n  }\n}\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  requestOptions: RequestOptions,\n  res: Response\n) {\n  const { url_prefix } = config;\n  const base = getPublicUrl(config?.url_prefix, requestOptions);\n  const basename = URL.canParse(base) ? new URL(base).pathname : base;\n  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;\n  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n  const darkMode = config?.web?.darkMode ?? false;\n  const title = config?.web?.title ?? WEB_TITLE;\n  const login = hasLogin(config);\n  const scope = config?.web?.scope ?? '';\n  const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);\n  const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);\n  const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);\n  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];\n  const version = res.locals.app_version ?? '';\n  const flags = {\n    ...config.flags,\n    // legacy from 5.x\n    ...config.experiments,\n  };\n  const primaryColor =\n    validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? '#4b5e40';\n  const {\n    scriptsBodyAfter,\n    metaScripts,\n    scriptsbodyBefore, // deprecated\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n  } = Object.assign(\n    {},\n    {\n      scriptsBodyAfter: [],\n      bodyBefore: [],\n      metaScripts: [],\n    },\n    config?.web\n  );\n  // Fallback\n  let scriptsBodyBefore = config?.web?.scriptsBodyBefore;\n  if (scriptsbodyBefore && !scriptsBodyBefore) {\n    scriptsBodyBefore = scriptsbodyBefore;\n  }\n  const options: TemplateUIOptions = {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n    darkMode,\n    url_prefix,\n    basename,\n    base,\n    primaryColor,\n    version,\n    logo,\n    logoDark,\n    favicon,\n    flags,\n    login,\n    pkgManagers,\n    title,\n    scope,\n    language,\n    hideDeprecatedVersions,\n  };\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,SAAA,GAAAD,OAAA;AACA,IAAAE,SAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AAEA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,KAAA,GAAAL,OAAA;AAGA,IAAAM,IAAA,GAAAN,OAAA;AAGA,IAAAO,SAAA,GAAAR,sBAAA,CAAAC,OAAA;AAEA,IAAAQ,SAAA,GAAAR,OAAA;AAA6D,SAAAD,uBAAAU,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAE7D,MAAMG,gBAAgB,GAAG,OAAO;AAChC;AACA,MAAMC,KAAK,GAAG,IAAIC,kBAAQ,CAAC;EAAEC,GAAG,EAAE,GAAG;EAAEC,GAAG,EAAE,IAAI,GAAG,EAAE,GAAG;AAAG,CAAC,CAAC;AAE7D,MAAMC,KAAK,GAAG,IAAAC,cAAU,EAAC,sBAAsB,CAAC;AAEhD,MAAMC,oBAA8B,GAAG;EACrCC,EAAE,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;EAC7BC,GAAG,EAAE,aAAa;EAClBC,GAAG,EAAE;AACP,CAAC;AAEM,SAASC,WAAWA,CACzBC,IAAwB,EACxBC,UAA8B,EAC9BC,cAA8B,EAC9B;EACA,IAAI,OAAOF,IAAI,KAAK,QAAQ,EAAE;IAC5B,OAAO,EAAE;EACX;EACA,MAAMG,WAAW,GAAGH,IAAI,IAAI,CAAC,IAAAI,0BAAqB,EAACJ,IAAI,CAAC;EAExD,IAAIG,WAAW,EAAE;IACf,OAAO,GAAG,IAAAE,iBAAY,EAACJ,UAAU,EAAEC,cAAc,CAAC,YAAYI,iBAAI,CAACC,QAAQ,CAACP,IAAI,CAAC,EAAE;EACrF,CAAC,MAAM,IAAI,IAAAI,0BAAqB,EAACJ,IAAI,CAAC,EAAE;IACtC,OAAOA,IAAI;EACb,CAAC,MAAM;IACL,OAAO,EAAE;EACX;AACF;AAEe,SAASQ,UAAUA,CAChCC,MAAkB,EAClBC,QAAuB,EACvBC,aAA0C,EAC1CT,cAA8B,EAC9BU,GAAa,EACb;EACA,MAAM;IAAEX;EAAW,CAAC,GAAGQ,MAAM;EAC7B,MAAMI,IAAI,GAAG,IAAAR,iBAAY,EAACI,MAAM,EAAER,UAAU,EAAEC,cAAc,CAAC;EAC7D,MAAMK,QAAQ,GAAGO,YAAG,CAACC,QAAQ,CAACF,IAAI,CAAC,GAAG,IAAIC,YAAG,CAACD,IAAI,CAAC,CAACG,QAAQ,GAAGH,IAAI;EACnE,MAAMI,QAAQ,GAAGR,MAAM,EAAES,IAAI,EAAEC,GAAG,IAAI/B,gBAAgB;EACtD,MAAMgC,sBAAsB,GAAGX,MAAM,EAAEU,GAAG,EAAEC,sBAAsB,IAAI,KAAK;EAC3E;EACA,MAAMC,aAAa,GAAG,CAACC,SAAS,EAAE,IAAI,CAAC,CAACC,QAAQ,CAACd,MAAM,EAAEU,GAAG,EAAEK,UAAU,CAAC,GACrE,IAAI,GACJf,MAAM,EAAEU,GAAG,EAAEK,UAAU;EAC3B,MAAMC,QAAQ,GAAGhB,MAAM,EAAEU,GAAG,EAAEM,QAAQ,IAAI,KAAK;EAC/C,MAAMC,KAAK,GAAGjB,MAAM,EAAEU,GAAG,EAAEO,KAAK,IAAIC,iBAAS;EAC7C,MAAMC,KAAK,GAAG,IAAAC,kBAAQ,EAACpB,MAAM,CAAC;EAC9B,MAAMqB,KAAK,GAAGrB,MAAM,EAAEU,GAAG,EAAEW,KAAK,IAAI,EAAE;EACtC,MAAMC,OAAO,GAAGhC,WAAW,CAACU,MAAM,EAAEU,GAAG,EAAEY,OAAO,EAAEtB,MAAM,EAAER,UAAU,EAAEC,cAAc,CAAC;EACrF,MAAMF,IAAI,GAAGD,WAAW,CAACU,MAAM,EAAEU,GAAG,EAAEnB,IAAI,EAAES,MAAM,EAAER,UAAU,EAAEC,cAAc,CAAC;EAC/E,MAAM8B,QAAQ,GAAGjC,WAAW,CAACU,MAAM,EAAEU,GAAG,EAAEa,QAAQ,EAAEvB,MAAM,EAAER,UAAU,EAAEC,cAAc,CAAC;EACvF,MAAM+B,WAAW,GAAGxB,MAAM,EAAEU,GAAG,EAAEc,WAAW,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;EACvE,MAAMC,OAAO,GAAGtB,GAAG,CAACuB,MAAM,CAACC,WAAW,IAAI,EAAE;EAC5C,MAAMC,KAAK,GAAG;IACZ,GAAG5B,MAAM,CAAC4B,KAAK;IACf;IACA,GAAG5B,MAAM,CAAC6B;EACZ,CAAC;EACD,MAAMC,YAAY,GAChB,IAAAC,8BAAoB,EAAC/B,MAAM,EAAEU,GAAG,EAAEsB,aAAa,IAAIhC,MAAM,EAAEU,GAAG,EAAEoB,YAAY,CAAC,IAAI,SAAS;EAC5F,MAAM;IACJG,gBAAgB;IAChBC,WAAW;IACXC,iBAAiB;IAAE;IACnBC,QAAQ;IACRC,YAAY;IACZC,eAAe;IACfC,UAAU;IACVC,UAAU;IACVC,mBAAmB;IACnBC,OAAO;IACPC;EACF,CAAC,GAAGC,MAAM,CAACC,MAAM,CACf,CAAC,CAAC,EACF;IACEZ,gBAAgB,EAAE,EAAE;IACpBa,UAAU,EAAE,EAAE;IACdZ,WAAW,EAAE;EACf,CAAC,EACDlC,MAAM,EAAEU,GACV,CAAC;EACD;EACA,IAAIqC,iBAAiB,GAAG/C,MAAM,EAAEU,GAAG,EAAEqC,iBAAiB;EACtD,IAAIZ,iBAAiB,IAAI,CAACY,iBAAiB,EAAE;IAC3CA,iBAAiB,GAAGZ,iBAAiB;EACvC;EACA,MAAMa,OAA0B,GAAG;IACjCZ,QAAQ;IACRC,YAAY;IACZC,eAAe;IACfC,UAAU;IACVC,UAAU;IACVC,mBAAmB;IACnBC,OAAO;IACPC,WAAW;IACX3B,QAAQ;IACRxB,UAAU;IACVM,QAAQ;IACRM,IAAI;IACJ0B,YAAY;IACZL,OAAO;IACPlC,IAAI;IACJgC,QAAQ;IACRD,OAAO;IACPM,KAAK;IACLT,KAAK;IACLK,WAAW;IACXP,KAAK;IACLI,KAAK;IACLb,QAAQ;IACRG;EACF,CAAC;EAED,IAAIsC,OAAO;EAEX,MAAMC,QAAQ,GAAG,YAAYC,IAAI,CAACC,SAAS,CAACJ,OAAO,CAAC,EAAE;EAEtD,IAAI;IACFC,OAAO,GAAGrE,KAAK,CAACyE,GAAG,CAACH,QAAQ,CAAC;IAC7B,IAAI,CAACD,OAAO,EAAE;MACZA,OAAO,GAAG,IAAAK,iBAAc,EACtB;QACErD,QAAQ,EAAEC,aAAa,IAAIhB,oBAAoB;QAC/C8D,OAAO;QACPf,gBAAgB;QAChBC,WAAW;QACXa;MACF,CAAC,EACD9C,QACF,CAAC;MAED,IAAIW,aAAa,EAAE;QACjBhC,KAAK,CAAC2E,GAAG,CAACL,QAAQ,EAAED,OAAO,CAAC;QAC5BjE,KAAK,CAAC,oBAAoB,CAAC;MAC7B;IACF,CAAC,MAAM;MACLA,KAAK,CAAC,sBAAsB,CAAC;IAC/B;EACF,CAAC,CAAC,OAAOwE,KAAU,EAAE;IACnB,MAAM,IAAIC,KAAK,CAAC,kCAAkCD,KAAK,CAACE,KAAK,EAAE,CAAC;EAClE;EACAvD,GAAG,CAACwD,SAAS,CAAC,cAAc,EAAEC,aAAO,CAACC,SAAS,CAAC;EAChD1D,GAAG,CAAC2D,IAAI,CAACb,OAAO,CAAC;EACjBjE,KAAK,CAAC,cAAc,CAAC;AACvB","ignoreList":[]}
+{"version":3,"file":"renderHTML.js","names":[],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport { LRUCache } from 'lru-cache';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport { WEB_TITLE } from '@verdaccio/config';\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\nimport type { RequestOptions } from '@verdaccio/url';\nimport { getPublicUrl, isURLhasValidProtocol } from '@verdaccio/url';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\nimport { hasLogin, validatePrimaryColor } from './web-utils';\n\nconst DEFAULT_LANGUAGE = 'es-US';\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport function resolveLogo(\n  logo: string | undefined,\n  url_prefix: string | undefined,\n  requestOptions: RequestOptions\n) {\n  if (typeof logo !== 'string') {\n    return '';\n  }\n  const isLocalFile = logo && !isURLhasValidProtocol(logo);\n\n  if (isLocalFile) {\n    return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;\n  } else if (isURLhasValidProtocol(logo)) {\n    return logo;\n  } else {\n    return '';\n  }\n}\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  requestOptions: RequestOptions,\n  res: Response\n) {\n  const { url_prefix } = config;\n  const base = getPublicUrl(config?.url_prefix, requestOptions);\n  const basename = URL.canParse(base) ? new URL(base).pathname : base;\n  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;\n  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n  const darkMode = config?.web?.darkMode ?? false;\n  const title = config?.web?.title ?? WEB_TITLE;\n  const login = hasLogin(config);\n  const scope = config?.web?.scope ?? '';\n  const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);\n  const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);\n  const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);\n  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];\n  const version = res.locals.app_version ?? '';\n  const flags = {\n    ...config.flags,\n    // legacy from 5.x\n    ...config.experiments,\n  };\n  const primaryColor =\n    validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? '#4b5e40';\n  const {\n    scriptsBodyAfter,\n    metaScripts,\n    scriptsbodyBefore, // deprecated\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n  } = Object.assign(\n    {},\n    {\n      scriptsBodyAfter: [],\n      bodyBefore: [],\n      metaScripts: [],\n    },\n    config?.web\n  );\n  // Fallback\n  let scriptsBodyBefore = config?.web?.scriptsBodyBefore;\n  if (scriptsbodyBefore && !scriptsBodyBefore) {\n    scriptsBodyBefore = scriptsbodyBefore;\n  }\n  const options: TemplateUIOptions = {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n    darkMode,\n    url_prefix,\n    basename,\n    base,\n    primaryColor,\n    version,\n    logo,\n    logoDark,\n    favicon,\n    flags,\n    login,\n    pkgManagers,\n    title,\n    scope,\n    language,\n    hideDeprecatedVersions,\n  };\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,IAAM,mBAAmB;AAEzB,IAAM,QAAQ,IAAI,UAAA,SAAS;CAAE,KAAK;CAAK,KAAK,MAAO,KAAK;CAAI,CAAC;AAE7D,IAAM,WAAA,GAAA,MAAA,SAAmB,uBAAuB;AAEhD,IAAM,uBAAiC;CACrC,IAAI,CAAC,cAAc,UAAU;CAC7B,KAAK;CACL,KAAK,EAAE;CACR;AAED,SAAgB,YACd,MACA,YACA,gBACA;AACA,KAAI,OAAO,SAAS,SAClB,QAAO;AAIT,KAFoB,QAAQ,EAAA,GAAA,eAAA,uBAAuB,KAAK,CAGtD,QAAO,IAAA,GAAA,eAAA,cAAgB,YAAY,eAAe,CAAC,WAAW,UAAA,QAAK,SAAS,KAAK;oDAClD,KAAK,CACpC,QAAO;KAEP,QAAO;;AAIX,SAAwB,WACtB,QACA,UACA,eACA,gBACA,KACA;CACA,MAAM,EAAE,eAAe;CACvB,MAAM,QAAA,GAAA,eAAA,cAAoB,QAAQ,YAAY,eAAe;CAC7D,MAAM,WAAW,SAAA,IAAI,SAAS,KAAK,GAAG,IAAI,SAAA,IAAI,KAAK,CAAC,WAAW;CAC/D,MAAM,WAAW,QAAQ,MAAM,OAAO;CACtC,MAAM,yBAAyB,QAAQ,KAAK,0BAA0B;CAEtE,MAAM,gBAAgB,CAAC,KAAA,GAAW,KAAK,CAAC,SAAS,QAAQ,KAAK,WAAW,GACrE,OACA,QAAQ,KAAK;CACjB,MAAM,WAAW,QAAQ,KAAK,YAAY;CAC1C,MAAM,QAAQ,QAAQ,KAAK,SAAS,kBAAA;CACpC,MAAM,QAAQ,kBAAA,SAAS,OAAO;CAC9B,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,UAAU,YAAY,QAAQ,KAAK,SAAS,QAAQ,YAAY,eAAe;CACrF,MAAM,OAAO,YAAY,QAAQ,KAAK,MAAM,QAAQ,YAAY,eAAe;CAC/E,MAAM,WAAW,YAAY,QAAQ,KAAK,UAAU,QAAQ,YAAY,eAAe;CACvF,MAAM,cAAc,QAAQ,KAAK,eAAe;EAAC;EAAQ;EAAQ;EAAM;CACvE,MAAM,UAAU,IAAI,OAAO,eAAe;CAC1C,MAAM,QAAQ;EACZ,GAAG,OAAO;EAEV,GAAG,OAAO;EACX;CACD,MAAM,eACJ,kBAAA,qBAAqB,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,aAAa,IAAI;CACnF,MAAM,EACJ,kBACA,aACA,mBACA,UACA,cACA,iBACA,YACA,YACA,qBACA,SACA,gBACE,OAAO,OACT,EAAE,EACF;EACE,kBAAkB,EAAE;EACpB,YAAY,EAAE;EACd,aAAa,EAAE;EAChB,EACD,QAAQ,IACT;CAED,IAAI,oBAAoB,QAAQ,KAAK;AACrC,KAAI,qBAAqB,CAAC,kBACxB,qBAAoB;CAEtB,MAAM,UAA6B;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CAED,IAAI;CAEJ,MAAM,WAAW,YAAY,KAAK,UAAU,QAAQ;AAEpD,KAAI;AACF,YAAU,MAAM,IAAI,SAAS;AAC7B,MAAI,CAAC,SAAS;AACZ,aAAU,iBAAA,QACR;IACE,UAAU,iBAAiB;IAC3B;IACA;IACA;IACA;IACD,EACD,SACD;AAED,OAAI,eAAe;AACjB,UAAM,IAAI,UAAU,QAAQ;AAC5B,YAAM,qBAAqB;;QAG7B,SAAM,uBAAuB;UAExB,OAAY;AACnB,QAAM,IAAI,MAAM,kCAAkC,MAAM,QAAQ;;AAElE,KAAI,UAAU,gBAAgB,gBAAA,QAAQ,UAAU;AAChD,KAAI,KAAK,QAAQ;AACjB,SAAM,eAAe"}

package/build/middlewares/web/utils/renderHTML.mjs

@@ -0,0 +1,113 @@
+import renderTemplate from "./template.mjs";
+import { hasLogin, validatePrimaryColor } from "./web-utils.mjs";
+import { HEADERS } from "@verdaccio/core";
+import buildDebug from "debug";
+import { URL } from "node:url";
+import { WEB_TITLE } from "@verdaccio/config";
+import path from "node:path";
+import { getPublicUrl, isURLhasValidProtocol } from "@verdaccio/url";
+import { LRUCache } from "lru-cache";
+//#region src/middlewares/web/utils/renderHTML.ts
+var DEFAULT_LANGUAGE = "es-US";
+var cache = new LRUCache({
+	max: 500,
+	ttl: 1e3 * 60 * 60
+});
+var debug = buildDebug("verdaccio:web:render");
+var defaultManifestFiles = {
+	js: ["vendors.js", "main.js"],
+	ico: "favicon.ico",
+	css: []
+};
+function resolveLogo(logo, url_prefix, requestOptions) {
+	if (typeof logo !== "string") return "";
+	if (logo && !isURLhasValidProtocol(logo)) return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;
+	else if (isURLhasValidProtocol(logo)) return logo;
+	else return "";
+}
+function renderHTML(config, manifest, manifestFiles, requestOptions, res) {
+	const { url_prefix } = config;
+	const base = getPublicUrl(config?.url_prefix, requestOptions);
+	const basename = URL.canParse(base) ? new URL(base).pathname : base;
+	const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;
+	const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;
+	const needHtmlCache = [void 0, null].includes(config?.web?.html_cache) ? true : config?.web?.html_cache;
+	const darkMode = config?.web?.darkMode ?? false;
+	const title = config?.web?.title ?? WEB_TITLE;
+	const login = hasLogin(config);
+	const scope = config?.web?.scope ?? "";
+	const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);
+	const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);
+	const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);
+	const pkgManagers = config?.web?.pkgManagers ?? [
+		"yarn",
+		"pnpm",
+		"npm"
+	];
+	const version = res.locals.app_version ?? "";
+	const flags = {
+		...config.flags,
+		...config.experiments
+	};
+	const primaryColor = validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? "#4b5e40";
+	const { scriptsBodyAfter, metaScripts, scriptsbodyBefore, showInfo, showSettings, showThemeSwitch, showFooter, showSearch, showDownloadTarball, showRaw, showUplinks } = Object.assign({}, {
+		scriptsBodyAfter: [],
+		bodyBefore: [],
+		metaScripts: []
+	}, config?.web);
+	let scriptsBodyBefore = config?.web?.scriptsBodyBefore;
+	if (scriptsbodyBefore && !scriptsBodyBefore) scriptsBodyBefore = scriptsbodyBefore;
+	const options = {
+		showInfo,
+		showSettings,
+		showThemeSwitch,
+		showFooter,
+		showSearch,
+		showDownloadTarball,
+		showRaw,
+		showUplinks,
+		darkMode,
+		url_prefix,
+		basename,
+		base,
+		primaryColor,
+		version,
+		logo,
+		logoDark,
+		favicon,
+		flags,
+		login,
+		pkgManagers,
+		title,
+		scope,
+		language,
+		hideDeprecatedVersions
+	};
+	let webPage;
+	const cacheKey = `template:${JSON.stringify(options)}`;
+	try {
+		webPage = cache.get(cacheKey);
+		if (!webPage) {
+			webPage = renderTemplate({
+				manifest: manifestFiles ?? defaultManifestFiles,
+				options,
+				scriptsBodyAfter,
+				metaScripts,
+				scriptsBodyBefore
+			}, manifest);
+			if (needHtmlCache) {
+				cache.set(cacheKey, webPage);
+				debug("set template cache");
+			}
+		} else debug("reuse template cache");
+	} catch (error) {
+		throw new Error(`theme could not be load, stack ${error.stack}`);
+	}
+	res.setHeader("Content-Type", HEADERS.TEXT_HTML);
+	res.send(webPage);
+	debug("web rendered");
+}
+//#endregion
+export { renderHTML as default };
+
+//# sourceMappingURL=renderHTML.mjs.map

package/build/middlewares/web/utils/renderHTML.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderHTML.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport { LRUCache } from 'lru-cache';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport { WEB_TITLE } from '@verdaccio/config';\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\nimport type { RequestOptions } from '@verdaccio/url';\nimport { getPublicUrl, isURLhasValidProtocol } from '@verdaccio/url';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\nimport { hasLogin, validatePrimaryColor } from './web-utils';\n\nconst DEFAULT_LANGUAGE = 'es-US';\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport function resolveLogo(\n  logo: string | undefined,\n  url_prefix: string | undefined,\n  requestOptions: RequestOptions\n) {\n  if (typeof logo !== 'string') {\n    return '';\n  }\n  const isLocalFile = logo && !isURLhasValidProtocol(logo);\n\n  if (isLocalFile) {\n    return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;\n  } else if (isURLhasValidProtocol(logo)) {\n    return logo;\n  } else {\n    return '';\n  }\n}\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  requestOptions: RequestOptions,\n  res: Response\n) {\n  const { url_prefix } = config;\n  const base = getPublicUrl(config?.url_prefix, requestOptions);\n  const basename = URL.canParse(base) ? new URL(base).pathname : base;\n  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;\n  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n  const darkMode = config?.web?.darkMode ?? false;\n  const title = config?.web?.title ?? WEB_TITLE;\n  const login = hasLogin(config);\n  const scope = config?.web?.scope ?? '';\n  const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);\n  const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);\n  const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);\n  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];\n  const version = res.locals.app_version ?? '';\n  const flags = {\n    ...config.flags,\n    // legacy from 5.x\n    ...config.experiments,\n  };\n  const primaryColor =\n    validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? '#4b5e40';\n  const {\n    scriptsBodyAfter,\n    metaScripts,\n    scriptsbodyBefore, // deprecated\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n  } = Object.assign(\n    {},\n    {\n      scriptsBodyAfter: [],\n      bodyBefore: [],\n      metaScripts: [],\n    },\n    config?.web\n  );\n  // Fallback\n  let scriptsBodyBefore = config?.web?.scriptsBodyBefore;\n  if (scriptsbodyBefore && !scriptsBodyBefore) {\n    scriptsBodyBefore = scriptsbodyBefore;\n  }\n  const options: TemplateUIOptions = {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n    darkMode,\n    url_prefix,\n    basename,\n    base,\n    primaryColor,\n    version,\n    logo,\n    logoDark,\n    favicon,\n    flags,\n    login,\n    pkgManagers,\n    title,\n    scope,\n    language,\n    hideDeprecatedVersions,\n  };\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;;;;;AAiBA,IAAM,mBAAmB;AAEzB,IAAM,QAAQ,IAAI,SAAS;CAAE,KAAK;CAAK,KAAK,MAAO,KAAK;CAAI,CAAC;AAE7D,IAAM,QAAQ,WAAW,uBAAuB;AAEhD,IAAM,uBAAiC;CACrC,IAAI,CAAC,cAAc,UAAU;CAC7B,KAAK;CACL,KAAK,EAAE;CACR;AAED,SAAgB,YACd,MACA,YACA,gBACA;AACA,KAAI,OAAO,SAAS,SAClB,QAAO;AAIT,KAFoB,QAAQ,CAAC,sBAAsB,KAAK,CAGtD,QAAO,GAAG,aAAa,YAAY,eAAe,CAAC,WAAW,KAAK,SAAS,KAAK;UACxE,sBAAsB,KAAK,CACpC,QAAO;KAEP,QAAO;;AAIX,SAAwB,WACtB,QACA,UACA,eACA,gBACA,KACA;CACA,MAAM,EAAE,eAAe;CACvB,MAAM,OAAO,aAAa,QAAQ,YAAY,eAAe;CAC7D,MAAM,WAAW,IAAI,SAAS,KAAK,GAAG,IAAI,IAAI,KAAK,CAAC,WAAW;CAC/D,MAAM,WAAW,QAAQ,MAAM,OAAO;CACtC,MAAM,yBAAyB,QAAQ,KAAK,0BAA0B;CAEtE,MAAM,gBAAgB,CAAC,KAAA,GAAW,KAAK,CAAC,SAAS,QAAQ,KAAK,WAAW,GACrE,OACA,QAAQ,KAAK;CACjB,MAAM,WAAW,QAAQ,KAAK,YAAY;CAC1C,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,QAAQ,SAAS,OAAO;CAC9B,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,UAAU,YAAY,QAAQ,KAAK,SAAS,QAAQ,YAAY,eAAe;CACrF,MAAM,OAAO,YAAY,QAAQ,KAAK,MAAM,QAAQ,YAAY,eAAe;CAC/E,MAAM,WAAW,YAAY,QAAQ,KAAK,UAAU,QAAQ,YAAY,eAAe;CACvF,MAAM,cAAc,QAAQ,KAAK,eAAe;EAAC;EAAQ;EAAQ;EAAM;CACvE,MAAM,UAAU,IAAI,OAAO,eAAe;CAC1C,MAAM,QAAQ;EACZ,GAAG,OAAO;EAEV,GAAG,OAAO;EACX;CACD,MAAM,eACJ,qBAAqB,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,aAAa,IAAI;CACnF,MAAM,EACJ,kBACA,aACA,mBACA,UACA,cACA,iBACA,YACA,YACA,qBACA,SACA,gBACE,OAAO,OACT,EAAE,EACF;EACE,kBAAkB,EAAE;EACpB,YAAY,EAAE;EACd,aAAa,EAAE;EAChB,EACD,QAAQ,IACT;CAED,IAAI,oBAAoB,QAAQ,KAAK;AACrC,KAAI,qBAAqB,CAAC,kBACxB,qBAAoB;CAEtB,MAAM,UAA6B;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CAED,IAAI;CAEJ,MAAM,WAAW,YAAY,KAAK,UAAU,QAAQ;AAEpD,KAAI;AACF,YAAU,MAAM,IAAI,SAAS;AAC7B,MAAI,CAAC,SAAS;AACZ,aAAU,eACR;IACE,UAAU,iBAAiB;IAC3B;IACA;IACA;IACA;IACD,EACD,SACD;AAED,OAAI,eAAe;AACjB,UAAM,IAAI,UAAU,QAAQ;AAC5B,UAAM,qBAAqB;;QAG7B,OAAM,uBAAuB;UAExB,OAAY;AACnB,QAAM,IAAI,MAAM,kCAAkC,MAAM,QAAQ;;AAElE,KAAI,UAAU,gBAAgB,QAAQ,UAAU;AAChD,KAAI,KAAK,QAAQ;AACjB,OAAM,eAAe"}

package/build/middlewares/web/utils/template.d.ts

@@ -1,5 +1,5 @@
-import type { TemplateUIOptions } from '@verdaccio/types';
-import type { Manifest } from './manifest';
+import { TemplateUIOptions } from '@verdaccio/types';
+import { Manifest } from './manifest';
 export type Template = {
     manifest: Manifest;
     options: TemplateUIOptions;