@verdaccio/proxy 9.0.0-next-9.3 → 9.0.0-next-9.5

package/build/proxy.js

@@ -1,599 +1,411 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "FetchOptions", {
-  enumerable: true,
-  get: function get() {
-    return _gotCjs.Options;
-  }
-});
-exports.ProxyStorage = void 0;
-var _JSONStream = _interopRequireDefault(require("JSONStream"));
-var _debug = _interopRequireDefault(require("debug"));
-var _gotCjs = _interopRequireWildcard(require("got-cjs"));
-var _lodash = _interopRequireDefault(require("lodash"));
-var _nodeStream = require("node:stream");
-var _nodeUrl = require("node:url");
-var _core = require("@verdaccio/core");
-var _agent = _interopRequireDefault(require("./agent"));
-var _proxyUtils = require("./proxy-utils");
-function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t3 in e) "default" !== _t3 && {}.hasOwnProperty.call(e, _t3) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t3)) && (i.get || i.set) ? o(f, _t3, i) : f[_t3] = e[_t3]); return f; })(e, t); }
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
-function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
-function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
-function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
-function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
-function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
-function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
-function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
-function _classCallCheck(a, n) { if (!(a instanceof n)) throw new TypeError("Cannot call a class as a function"); }
-function _defineProperties(e, r) { for (var t = 0; t < r.length; t++) { var o = r[t]; o.enumerable = o.enumerable || !1, o.configurable = !0, "value" in o && (o.writable = !0), Object.defineProperty(e, _toPropertyKey(o.key), o); } }
-function _createClass(e, r, t) { return r && _defineProperties(e.prototype, r), t && _defineProperties(e, t), Object.defineProperty(e, "prototype", { writable: !1 }), e; }
-function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
-function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-var debug = (0, _debug["default"])('verdaccio:proxy');
-var encode = function encode(thing) {
-  return encodeURIComponent(thing).replace(/^%40/, '@');
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+const require_agent = require("./agent.js");
+const require_proxy_utils = require("./proxy-utils.js");
+let JSONStream = require("JSONStream");
+JSONStream = require_runtime.__toESM(JSONStream);
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let got_cjs = require("got-cjs");
+got_cjs = require_runtime.__toESM(got_cjs);
+let lodash = require("lodash");
+lodash = require_runtime.__toESM(lodash);
+let node_stream = require("node:stream");
+let node_url = require("node:url");
+let _verdaccio_core = require("@verdaccio/core");
+//#region src/proxy.ts
+var debug$1 = (0, debug.default)("verdaccio:proxy");
+var encode = function(thing) {
+	return encodeURIComponent(thing).replace(/^%40/, "@");
 };
-var jsonContentType = _core.HEADERS.JSON;
-var contentTypeAccept = "".concat(jsonContentType, ";");
-
+var contentTypeAccept = `${_verdaccio_core.HEADERS.JSON};`;
 /**
- * Just a helper (`config[key] || default` doesn't work because of zeroes)
- */
-var setConfig = function setConfig(config, key, def) {
-  return _lodash["default"].isNil(config[key]) === false ? config[key] : def;
+* Just a helper (`config[key] || default` doesn't work because of zeroes)
+*/
+var setConfig = (config, key, def) => {
+	return lodash.default.isNil(config[key]) === false ? config[key] : def;
 };
-
-// this type is need it by storage
 /**
- * Implements Storage interface
- * (same for storage.js, local-storage.js, up-storage.js)
- */
-var ProxyStorage = exports.ProxyStorage = /*#__PURE__*/function () {
-  // @ts-ignore
-
-  function ProxyStorage(uplinkName, config, mainConfig, logger, agent) {
-    var _mainConfig$user_agen, _this$config$max_fail, _this$max_fails;
-    _classCallCheck(this, ProxyStorage);
-    this.uplinkName = uplinkName;
-    this.config = config;
-    this.failed_requests = 0;
-    this.userAgent = (_mainConfig$user_agen = mainConfig.user_agent) !== null && _mainConfig$user_agen !== void 0 ? _mainConfig$user_agen : 'hidden';
-    this.ca = config.ca;
-    this.logger = logger;
-    this.server_id = mainConfig.server_id;
-    this.agent_options = setConfig(this.config, 'agent_options', {
-      keepAlive: true,
-      maxSockets: 40,
-      maxFreeSockets: 10
-    });
-    this.url = new _nodeUrl.URL(this.config.url);
-    var isHTTPS = this.url.protocol === 'https:';
-    this._setupProxy(this.url.hostname, config, mainConfig, isHTTPS);
-    this.agent = agent !== null && agent !== void 0 ? agent : this.getAgent();
-    this.config.url = this.config.url.replace(/\/$/, '');
-    if (this.config.timeout && Number(this.config.timeout) >= 1000) {
-      this.logger.warn(['Too big timeout value: ' + this.config.timeout, 'We changed time format to nginx-like one', '(see http://nginx.org/en/docs/syntax.html)', 'so please update your config accordingly'].join('\n'));
-    }
-
-    // a bunch of different configurable timers
-    this.maxage = (0, _proxyUtils.parseInterval)(setConfig(this.config, 'maxage', '2m'));
-    // https://github.com/sindresorhus/got/blob/main/documentation/6-timeout.md
-    this.timeout = {
-      request: (0, _proxyUtils.parseInterval)(setConfig(this.config, 'timeout', '30s'))
-    };
-    debug('set timeout %s', this.timeout);
-    this.max_fails = Number(setConfig(this.config, 'max_fails', (_this$config$max_fail = this.config.max_fails) !== null && _this$config$max_fail !== void 0 ? _this$config$max_fail : 2));
-    this.fail_timeout = (0, _proxyUtils.parseInterval)(setConfig(this.config, 'fail_timeout', '5m'));
-    this.strict_ssl = Boolean(setConfig(this.config, 'strict_ssl', true));
-    this.retry = {
-      limit: (_this$max_fails = this.max_fails) !== null && _this$max_fails !== void 0 ? _this$max_fails : 2
-    };
-  }
-  return _createClass(ProxyStorage, [{
-    key: "getAgent",
-    value: function getAgent() {
-      if (!this.agent) {
-        // TODO: the config.ca (certificates) is not yet injected here
-        var agentInstance = new _agent["default"](this.config.url, this.proxy, this.agent_options);
-        return agentInstance.get();
-      } else {
-        return this.agent;
-      }
-    }
-  }, {
-    key: "getHeaders",
-    value: function getHeaders() {
-      var headers = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
-      var accept = _core.HEADERS.ACCEPT;
-      var acceptEncoding = _core.HEADERS.ACCEPT_ENCODING;
-      var userAgent = _core.HEADERS.USER_AGENT;
-      headers[accept] = headers[accept] || contentTypeAccept;
-      headers[acceptEncoding] = headers[acceptEncoding] || 'gzip';
-      // registry.npmjs.org will only return search result if user-agent include string 'npm'
-      headers[userAgent] = headers[userAgent] || "npm (".concat(this.userAgent, ")");
-      return this.setAuthNext(headers);
-    }
-
-    /**
-     * Validate configuration auth and assign Header authorization
-     * @param {Object} headers
-     * @return {Object}
-     * @private
-     */
-  }, {
-    key: "setAuthNext",
-    value: function setAuthNext(headers) {
-      var auth = this.config.auth;
-      if (typeof auth === 'undefined' || typeof headers[_core.HEADERS.AUTHORIZATION] === 'string') {
-        return headers;
-      }
-      if (_lodash["default"].isObject(auth) === false && _lodash["default"].isObject(auth.token) === false) {
-        this._throwErrorAuth('Auth invalid');
-      }
-
-      // get NPM_TOKEN http://blog.npmjs.org/post/118393368555/deploying-with-npm-private-modules
-      // or get other variable export in env
-      // https://github.com/verdaccio/verdaccio/releases/tag/v2.5.0
-      var token;
-      var tokenConf = auth;
-      if (_lodash["default"].isNil(tokenConf.token) === false && _lodash["default"].isString(tokenConf.token)) {
-        debug('use token from config');
-        token = tokenConf.token;
-      } else if (_lodash["default"].isNil(tokenConf.token_env) === false) {
-        if (typeof tokenConf.token_env === 'string') {
-          debug('use token from env %o', tokenConf.token_env);
-          token = process.env[tokenConf.token_env];
-        } else if (typeof tokenConf.token_env === 'boolean' && tokenConf.token_env) {
-          debug('use token from env NPM_TOKEN');
-          token = process.env.NPM_TOKEN;
-        } else {
-          this.logger.error(_core.constants.ERROR_CODE.token_required);
-          this._throwErrorAuth(_core.constants.ERROR_CODE.token_required);
-        }
-      } else {
-        debug('use token from env NPM_TOKEN');
-        token = process.env.NPM_TOKEN;
-      }
-      if (typeof token === 'undefined') {
-        this._throwErrorAuth(_core.constants.ERROR_CODE.token_required);
-      }
-
-      // define type Auth allow basic and bearer
-      var type = tokenConf.type || _core.TOKEN_BASIC;
-      debug('token type %o', type);
-      this._setHeaderAuthorization(headers, type, token);
-      return headers;
-    }
-
-    /**
-     * @param {string} message
-     * @throws {Error}
-     * @private
-     */
-  }, {
-    key: "_throwErrorAuth",
-    value: function _throwErrorAuth(message) {
-      this.logger.error(message);
-      throw new Error(message);
-    }
-
-    /**
-     * Assign Header authorization with type authentication
-     * @param {Object} headers
-     * @param {string} type
-     * @param {string} token
-     * @private
-     */
-  }, {
-    key: "_setHeaderAuthorization",
-    value: function _setHeaderAuthorization(headers, type, token) {
-      var _type = type.toLowerCase();
-      if (_type !== _core.TOKEN_BEARER.toLowerCase() && _type !== _core.TOKEN_BASIC.toLowerCase()) {
-        this._throwErrorAuth("Auth type '".concat(_type, "' not allowed"));
-      }
-      headers[_core.HEADERS.AUTHORIZATION] = _core.authUtils.buildToken(type, token);
-    }
-
-    /**
-     * It will add or override specified headers from config file.
-     *
-     * Eg:
-     *
-     * uplinks:
-     npmjs:
-     url: https://registry.npmjs.org/
-     headers:
-     Accept: "application/vnd.npm.install-v2+json; q=1.0"
-     verdaccio-staging:
-     url: https://mycompany.com/npm
-     headers:
-     Accept: "application/json"
-     authorization: "Basic YourBase64EncodedCredentials=="
-      * @param {Object} headers
-     * @private
-     */
-  }, {
-    key: "applyUplinkHeaders",
-    value: function applyUplinkHeaders(headers) {
-      if (!this.config.headers) {
-        return headers;
-      }
-
-      // add/override headers specified in the config
-      /* eslint guard-for-in: 0 */
-      for (var _key in this.config.headers) {
-        headers[_key] = this.config.headers[_key];
-      }
-      return headers;
-    }
-  }, {
-    key: "getRemoteMetadata",
-    value: function () {
-      var _getRemoteMetadata = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(name, options) {
-        var _this = this;
-        var headers, method, uri, response, responseLength, _options$retry, _response, retry, etag, data, err, message, code, error, _t;
-        return _regenerator().w(function (_context) {
-          while (1) switch (_context.p = _context.n) {
-            case 0:
-              if (!this._ifRequestFailure()) {
-                _context.n = 1;
-                break;
-              }
-              throw _core.errorUtils.getInternalError(_core.API_ERROR.UPLINK_OFFLINE);
-            case 1:
-              // FUTURE: allow mix headers that comes from the client
-              debug('getting metadata for package %s', name);
-              headers = this.getHeaders(options === null || options === void 0 ? void 0 : options.headers);
-              headers = this.addProxyHeaders(headers, options.remoteAddress);
-              headers = this.applyUplinkHeaders(headers);
-              // the following headers cannot be overwritten
-              if (_lodash["default"].isNil(options.etag) === false) {
-                headers[_core.HEADERS.NONE_MATCH] = options.etag;
-                headers[_core.HEADERS.ACCEPT] = contentTypeAccept;
-              }
-              method = options.method || 'GET';
-              uri = this.config.url + "/".concat(encode(name));
-              debug('set retry limit is %s', this.retry.limit);
-              responseLength = 0;
-              _context.p = 2;
-              retry = (_options$retry = options === null || options === void 0 ? void 0 : options.retry) !== null && _options$retry !== void 0 ? _options$retry : this.retry;
-              debug('retry initial count %s', retry);
-              _context.n = 3;
-              return (0, _gotCjs["default"])(uri, {
-                headers: headers,
-                responseType: 'json',
-                method: method,
-                agent: this.agent,
-                retry: retry,
-                timeout: this.timeout,
-                hooks: {
-                  afterResponse: [function (afterResponse) {
-                    var code = afterResponse.statusCode;
-                    debug('after response code is %s', code);
-                    if (code >= _core.HTTP_STATUS.OK && code < _core.HTTP_STATUS.MULTIPLE_CHOICES) {
-                      if (_this.failed_requests >= _this.max_fails) {
-                        _this.failed_requests = 0;
-                        _this.logger.warn({
-                          host: _this.url.host
-                        }, 'host @{host} is now online');
-                      }
-                    }
-                    return afterResponse;
-                  }],
-                  beforeRetry: [function (error, count) {
-                    debug('retry %s count: %s', uri, count);
-                    _this.failed_requests = count !== null && count !== void 0 ? count : 0;
-                    _this.logger.info({
-                      request: {
-                        method: method,
-                        url: uri
-                      },
-                      error: error.message,
-                      retryCount: _this.failed_requests
-                    }, "retry @{retryCount} req: '@{request.method} @{request.url}'");
-                    if (_this.failed_requests >= _this.max_fails) {
-                      _this.logger.warn({
-                        host: _this.url.host
-                      }, 'host @{host} is now offline');
-                    }
-                  }]
-                }
-              }).on('request', function () {
-                _this.last_request_time = Date.now();
-              }).on('response', function (eventResponse) {
-                var message = "@{!status}, req: '@{request.method} @{request.url}' (streaming)";
-                _this.logger.http({
-                  request: {
-                    method: method,
-                    url: uri
-                  },
-                  status: _lodash["default"].isNull(eventResponse) === false ? eventResponse.statusCode : 'ERR'
-                }, message);
-              }).on('downloadProgress', function (progress) {
-                if (progress.total) {
-                  debug('responseLength %s', progress.total);
-                  responseLength = progress.total;
-                }
-              });
-            case 3:
-              response = _context.v;
-              etag = response.headers.etag;
-              data = response.body; // not modified status (304) registry does not return any payload
-              // it is handled as an error with the original 304 status preserved
-              if (!(((_response = response) === null || _response === void 0 ? void 0 : _response.statusCode) === _core.HTTP_STATUS.NOT_MODIFIED)) {
-                _context.n = 4;
-                break;
-              }
-              err = _core.errorUtils.getNotFound(_core.API_ERROR.NOT_MODIFIED_NO_DATA);
-              err.code = _core.HTTP_STATUS.NOT_MODIFIED;
-              throw err;
-            case 4:
-              debug('uri %s success', uri);
-              message = "@{!status}, req: '@{request.method} @{request.url}'";
-              this.logger.http({
-                // if error is null/false change this to undefined so it wont log
-                request: {
-                  method: method,
-                  url: uri
-                },
-                status: response.statusCode,
-                bytes: {
-                  "in": options !== null && options !== void 0 && options.json ? JSON.stringify(options === null || options === void 0 ? void 0 : options.json).length : 0,
-                  out: responseLength || 0
-                }
-              }, message);
-              return _context.a(2, [data, etag]);
-            case 5:
-              _context.p = 5;
-              _t = _context.v;
-              debug('error %s on uri %s', _t.code, uri);
-              if (!(_t.code === 'ERR_NON_2XX_3XX_RESPONSE')) {
-                _context.n = 8;
-                break;
-              }
-              code = _t.response.statusCode;
-              debug('error code %s', code);
-              if (!(code === _core.HTTP_STATUS.NOT_FOUND)) {
-                _context.n = 6;
-                break;
-              }
-              throw _core.errorUtils.getNotFound(_core.API_ERROR.NOT_PACKAGE_UPLINK);
-            case 6:
-              if (code >= _core.HTTP_STATUS.OK && code < _core.HTTP_STATUS.MULTIPLE_CHOICES) {
-                _context.n = 7;
-                break;
-              }
-              error = _core.errorUtils.getInternalError("".concat(_core.API_ERROR.BAD_STATUS_CODE, ": ").concat(code)); // we need this code to identify outside which status code triggered the error
-              error.remoteStatus = code;
-              throw error;
-            case 7:
-              _context.n = 9;
-              break;
-            case 8:
-              if (!this._isRequestTimeout(_t)) {
-                _context.n = 9;
-                break;
-              }
-              debug('error code timeout');
-              throw _core.errorUtils.getServiceUnavailable(_core.API_ERROR.SERVER_TIME_OUT);
-            case 9:
-              throw _t;
-            case 10:
-              return _context.a(2);
-          }
-        }, _callee, this, [[2, 5]]);
-      }));
-      function getRemoteMetadata(_x, _x2) {
-        return _getRemoteMetadata.apply(this, arguments);
-      }
-      return getRemoteMetadata;
-    }() // FIXME: handle stream and retry
-  }, {
-    key: "fetchTarball",
-    value: function fetchTarball(url, overrideOptions) {
-      var _this$retry,
-        _this2 = this;
-      debug('fetching url for %s', url);
-      var options = _objectSpread(_objectSpread({}, this.config), overrideOptions);
-      var headers = this.getHeaders(options === null || options === void 0 ? void 0 : options.headers);
-      headers = this.addProxyHeaders(headers, options.remoteAddress);
-      headers = this.applyUplinkHeaders(headers);
-      // the following headers cannot be overwritten
-      if (_lodash["default"].isNil(options.etag) === false) {
-        headers[_core.HEADERS.NONE_MATCH] = options.etag;
-        headers[_core.HEADERS.ACCEPT] = contentTypeAccept;
-      }
-      var method = 'GET';
-      // const uri = this.config.url + `/${encode(name)}`;
-      debug('request uri for %s', url);
-      var readStream = _gotCjs["default"].stream(url, {
-        headers: headers,
-        method: method,
-        agent: this.agent,
-        // FIXME: this should be taken from construtor as priority
-        retry: (_this$retry = this.retry) !== null && _this$retry !== void 0 ? _this$retry : options === null || options === void 0 ? void 0 : options.retry,
-        timeout: this.timeout
-      }).on('request', function () {
-        _this2.last_request_time = Date.now();
-      });
-      return readStream;
-    }
-
-    /**
-     * Perform a stream search.
-     * @param {*} options request options
-     * @return {Stream}
-     */
-  }, {
-    key: "search",
-    value: (function () {
-      var _search = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(_ref) {
-        var url, abort, retry, uri, response, res, total, streamSearch, streamResponse, _t2;
-        return _regenerator().w(function (_context2) {
-          while (1) switch (_context2.p = _context2.n) {
-            case 0:
-              url = _ref.url, abort = _ref.abort, retry = _ref.retry;
-              _context2.p = 1;
-              // Incoming URL is relative ie /-/v1/search...
-              uri = new _nodeUrl.URL(url, this.url).href;
-              this.logger.http({
-                uri: uri,
-                uplink: this.uplinkName
-              }, 'search request to uplink @{uplink} - @{uri}');
-              debug('searching on %o', uri);
-              response = (0, _gotCjs["default"])(uri, {
-                signal: abort ? abort.signal : {},
-                agent: this.agent,
-                timeout: this.timeout,
-                retry: retry !== null && retry !== void 0 ? retry : this.retry
-              });
-              _context2.n = 2;
-              return response.text();
-            case 2:
-              res = _context2.v;
-              total = JSON.parse(res).total;
-              debug('number of packages found: %o', total);
-              streamSearch = new _nodeStream.PassThrough({
-                objectMode: true
-              });
-              streamResponse = _nodeStream.Readable.from(res); // objects is one of the properties on the body, it ignores date and total
-              streamResponse.pipe(_JSONStream["default"].parse('objects')).pipe(streamSearch, {
-                end: true
-              });
-              return _context2.a(2, streamSearch);
-            case 3:
-              _context2.p = 3;
-              _t2 = _context2.v;
-              debug('search error %s', _t2);
-              if (!(_t2.response.statusCode === 409)) {
-                _context2.n = 4;
-                break;
-              }
-              throw _core.errorUtils.getInternalError("bad status code ".concat(_t2.response.statusCode, " from uplink"));
-            case 4:
-              this.logger.error({
-                errorMessage: _t2 === null || _t2 === void 0 ? void 0 : _t2.message,
-                name: this.uplinkName
-              }, 'proxy uplink @{name} search error: @{errorMessage}');
-              throw _t2;
-            case 5:
-              return _context2.a(2);
-          }
-        }, _callee2, this, [[1, 3]]);
-      }));
-      function search(_x3) {
-        return _search.apply(this, arguments);
-      }
-      return search;
-    }())
-  }, {
-    key: "addProxyHeaders",
-    value: function addProxyHeaders(headers, remoteAddress) {
-      // Only submit X-Forwarded-For field if we don't have a proxy selected
-      // in the config file.
-      //
-      // Otherwise misconfigured proxy could return 407
-      if (!this.proxy) {
-        headers[_core.HEADERS.FORWARDED_FOR] = (headers['x-forwarded-for'] ? headers['x-forwarded-for'] + ', ' : '') + remoteAddress;
-      }
-
-      // always attach Via header to avoid loops, even if we're not proxying
-      headers['via'] = headers['via'] ? headers['via'] + ', ' : '';
-      headers['via'] += '1.1 ' + this.server_id + ' (Verdaccio)';
-      return headers;
-    }
-
-    /**
-     * If the request failure.
-     * @return {boolean}
-     * @private
-     */
-  }, {
-    key: "_ifRequestFailure",
-    value: function _ifRequestFailure() {
-      return this.failed_requests >= this.max_fails && Math.abs(Date.now() - this.last_request_time) < this.fail_timeout;
-    }
-
-    /**
-     * Check if the request timed out (network or http errors).
-     * @param {RequestError} err
-     * @return {boolean}
-     */
-  }, {
-    key: "_isRequestTimeout",
-    value: function _isRequestTimeout(err) {
-      var _err$response;
-      var code = err === null || err === void 0 || (_err$response = err.response) === null || _err$response === void 0 ? void 0 : _err$response.statusCode;
-      return err.code === 'ETIMEDOUT' || err.code === 'ESOCKETTIMEDOUT' || err.code === 'ECONNRESET' || code === _core.HTTP_STATUS.REQUEST_TIMEOUT || code === _core.HTTP_STATUS.BAD_GATEWAY || code === _core.HTTP_STATUS.SERVICE_UNAVAILABLE || code === _core.HTTP_STATUS.GATEWAY_TIMEOUT;
-    }
-
-    /**
-     * Set up a proxy.
-     * @param {*} hostname
-     * @param {*} config
-     * @param {*} mainconfig
-     * @param {*} isHTTPS
-     */
-  }, {
-    key: "_setupProxy",
-    value: function _setupProxy(hostname, config, mainconfig, isHTTPS) {
-      var noProxyList;
-      var proxy_key = isHTTPS ? 'https_proxy' : 'http_proxy';
-      debug('looking for %o', proxy_key);
-
-      // get http_proxy and no_proxy configs
-      if (proxy_key in config) {
-        this.proxy = config[proxy_key];
-        debug('found %o in uplink config', this.proxy);
-      } else if (proxy_key in mainconfig) {
-        this.proxy = mainconfig[proxy_key];
-        debug('found %o in main config', this.proxy);
-      }
-      if ('no_proxy' in config) {
-        noProxyList = config.no_proxy;
-      } else if ('no_proxy' in mainconfig) {
-        noProxyList = mainconfig.no_proxy;
-      }
+* Implements Storage interface
+* (same for storage.js, local-storage.js, up-storage.js)
+*/
+var ProxyStorage = class {
+	uplinkName;
+	config;
+	failed_requests;
+	userAgent;
+	ca;
+	logger;
+	server_id;
+	url;
+	maxage;
+	timeout;
+	max_fails;
+	fail_timeout;
+	agent_options;
+	proxy;
+	agent;
+	last_request_time;
+	strict_ssl;
+	retry;
+	constructor(uplinkName, config, mainConfig, logger, agent) {
+		this.uplinkName = uplinkName;
+		this.config = config;
+		this.failed_requests = 0;
+		this.userAgent = mainConfig.user_agent ?? "hidden";
+		this.ca = config.ca;
+		this.logger = logger;
+		this.server_id = mainConfig.server_id;
+		this.agent_options = setConfig(this.config, "agent_options", {
+			keepAlive: true,
+			maxSockets: 40,
+			maxFreeSockets: 10
+		});
+		this.url = new node_url.URL(this.config.url);
+		const isHTTPS = this.url.protocol === "https:";
+		this._setupProxy(this.url.hostname, config, mainConfig, isHTTPS);
+		this.agent = agent ?? this.getAgent();
+		this.config.url = this.config.url.replace(/\/$/, "");
+		if (this.config.timeout && Number(this.config.timeout) >= 1e3) this.logger.warn([
+			"Too big timeout value: " + this.config.timeout,
+			"We changed time format to nginx-like one",
+			"(see http://nginx.org/en/docs/syntax.html)",
+			"so please update your config accordingly"
+		].join("\n"));
+		this.maxage = require_proxy_utils.parseInterval(setConfig(this.config, "maxage", "2m"));
+		this.timeout = { request: require_proxy_utils.parseInterval(setConfig(this.config, "timeout", "30s")) };
+		debug$1("set timeout %s", this.timeout);
+		this.max_fails = Number(setConfig(this.config, "max_fails", this.config.max_fails ?? 2));
+		this.fail_timeout = require_proxy_utils.parseInterval(setConfig(this.config, "fail_timeout", "5m"));
+		this.strict_ssl = Boolean(setConfig(this.config, "strict_ssl", true));
+		this.retry = { limit: this.max_fails ?? 2 };
+	}
+	getAgent() {
+		if (!this.agent) return new require_agent.default(this.config.url, this.proxy, this.agent_options).get();
+		else return this.agent;
+	}
+	getHeaders(headers = {}) {
+		const accept = _verdaccio_core.HEADERS.ACCEPT;
+		const acceptEncoding = _verdaccio_core.HEADERS.ACCEPT_ENCODING;
+		const userAgent = _verdaccio_core.HEADERS.USER_AGENT;
+		headers[accept] = headers[accept] || contentTypeAccept;
+		headers[acceptEncoding] = headers[acceptEncoding] || "gzip";
+		headers[userAgent] = headers[userAgent] || `npm (${this.userAgent})`;
+		return this.setAuthNext(headers);
+	}
+	/**
+	* Validate configuration auth and assign Header authorization
+	* @param {Object} headers
+	* @return {Object}
+	* @private
+	*/
+	setAuthNext(headers) {
+		const { auth } = this.config;
+		if (typeof auth === "undefined" || typeof headers[_verdaccio_core.HEADERS.AUTHORIZATION] === "string") return headers;
+		if (lodash.default.isObject(auth) === false && lodash.default.isObject(auth.token) === false) this._throwErrorAuth("Auth invalid");
+		let token;
+		const tokenConf = auth;
+		if (lodash.default.isNil(tokenConf.token) === false && lodash.default.isString(tokenConf.token)) {
+			debug$1("use token from config");
+			token = tokenConf.token;
+		} else if (lodash.default.isNil(tokenConf.token_env) === false) if (typeof tokenConf.token_env === "string") {
+			debug$1("use token from env %o", tokenConf.token_env);
+			token = process.env[tokenConf.token_env];
+		} else if (typeof tokenConf.token_env === "boolean" && tokenConf.token_env) {
+			debug$1("use token from env NPM_TOKEN");
+			token = process.env.NPM_TOKEN;
+		} else {
+			this.logger.error(_verdaccio_core.constants.ERROR_CODE.token_required);
+			this._throwErrorAuth(_verdaccio_core.constants.ERROR_CODE.token_required);
+		}
+		else {
+			debug$1("use token from env NPM_TOKEN");
+			token = process.env.NPM_TOKEN;
+		}
+		if (typeof token === "undefined") this._throwErrorAuth(_verdaccio_core.constants.ERROR_CODE.token_required);
+		const type = tokenConf.type || _verdaccio_core.TOKEN_BASIC;
+		debug$1("token type %o", type);
+		this._setHeaderAuthorization(headers, type, token);
+		return headers;
+	}
+	/**
+	* @param {string} message
+	* @throws {Error}
+	* @private
+	*/
+	_throwErrorAuth(message) {
+		this.logger.error(message);
+		throw new Error(message);
+	}
+	/**
+	* Assign Header authorization with type authentication
+	* @param {Object} headers
+	* @param {string} type
+	* @param {string} token
+	* @private
+	*/
+	_setHeaderAuthorization(headers, type, token) {
+		const _type = type.toLowerCase();
+		if (_type !== _verdaccio_core.TOKEN_BEARER.toLowerCase() && _type !== _verdaccio_core.TOKEN_BASIC.toLowerCase()) this._throwErrorAuth(`Auth type '${_type}' not allowed`);
+		headers[_verdaccio_core.HEADERS.AUTHORIZATION] = _verdaccio_core.authUtils.buildToken(type, token);
+	}
+	/**
+	* It will add or override specified headers from config file.
+	*
+	* Eg:
+	*
+	* uplinks:
+	npmjs:
+	url: https://registry.npmjs.org/
+	headers:
+	Accept: "application/vnd.npm.install-v2+json; q=1.0"
+	verdaccio-staging:
+	url: https://mycompany.com/npm
+	headers:
+	Accept: "application/json"
+	authorization: "Basic YourBase64EncodedCredentials=="
+	
+	* @param {Object} headers
+	* @private
+	*/
+	applyUplinkHeaders(headers) {
+		if (!this.config.headers) return headers;
+		for (const key in this.config.headers) headers[key] = this.config.headers[key];
+		return headers;
+	}
+	async getRemoteMetadata(name, options) {
+		if (this._ifRequestFailure()) throw _verdaccio_core.errorUtils.getInternalError(_verdaccio_core.API_ERROR.UPLINK_OFFLINE);
+		debug$1("getting metadata for package %s", name);
+		let headers = this.getHeaders(options?.headers);
+		headers = this.addProxyHeaders(headers, options.remoteAddress);
+		headers = this.applyUplinkHeaders(headers);
+		if (lodash.default.isNil(options.etag) === false) {
+			headers[_verdaccio_core.HEADERS.NONE_MATCH] = options.etag;
+			headers[_verdaccio_core.HEADERS.ACCEPT] = contentTypeAccept;
+		}
+		const method = options.method || "GET";
+		const uri = this.config.url + `/${encode(name)}`;
+		debug$1("set retry limit is %s", this.retry.limit);
+		let response;
+		let responseLength = 0;
+		try {
+			const retry = options?.retry ?? this.retry;
+			debug$1("retry initial count %s", retry);
+			response = await (0, got_cjs.default)(uri, {
+				headers,
+				responseType: "json",
+				method,
+				agent: this.agent,
+				retry,
+				timeout: this.timeout,
+				hooks: {
+					afterResponse: [(afterResponse) => {
+						const code = afterResponse.statusCode;
+						debug$1("after response code is %s", code);
+						if (code >= _verdaccio_core.HTTP_STATUS.OK && code < _verdaccio_core.HTTP_STATUS.MULTIPLE_CHOICES) {
+							if (this.failed_requests >= this.max_fails) {
+								this.failed_requests = 0;
+								this.logger.warn({ host: this.url.host }, "host @{host} is now online");
+							}
+						}
+						return afterResponse;
+					}],
+					beforeRetry: [(error, count) => {
+						debug$1("retry %s count: %s", uri, count);
+						this.failed_requests = count ?? 0;
+						this.logger.info({
+							request: {
+								method,
+								url: uri
+							},
+							error: error.message,
+							retryCount: this.failed_requests
+						}, "retry @{retryCount} req: '@{request.method} @{request.url}'");
+						if (this.failed_requests >= this.max_fails) this.logger.warn({ host: this.url.host }, "host @{host} is now offline");
+					}]
+				}
+			}).on("request", () => {
+				this.last_request_time = Date.now();
+			}).on("response", (eventResponse) => {
+				this.logger.http({
+					request: {
+						method,
+						url: uri
+					},
+					status: lodash.default.isNull(eventResponse) === false ? eventResponse.statusCode : "ERR"
+				}, "@{!status}, req: '@{request.method} @{request.url}' (streaming)");
+			}).on("downloadProgress", (progress) => {
+				if (progress.total) {
+					debug$1("responseLength %s", progress.total);
+					responseLength = progress.total;
+				}
+			});
+			const etag = response.headers.etag;
+			const data = response.body;
+			if (response?.statusCode === _verdaccio_core.HTTP_STATUS.NOT_MODIFIED) {
+				const err = _verdaccio_core.errorUtils.getNotFound(_verdaccio_core.API_ERROR.NOT_MODIFIED_NO_DATA);
+				err.code = _verdaccio_core.HTTP_STATUS.NOT_MODIFIED;
+				throw err;
+			}
+			debug$1("uri %s success", uri);
+			this.logger.http({
+				request: {
+					method,
+					url: uri
+				},
+				status: response.statusCode,
+				bytes: {
+					in: options?.json ? JSON.stringify(options?.json).length : 0,
+					out: responseLength || 0
+				}
+			}, "@{!status}, req: '@{request.method} @{request.url}'");
+			return [data, etag];
+		} catch (err) {
+			debug$1("error %s on uri %s", err.code, uri);
+			if (err.code === "ERR_NON_2XX_3XX_RESPONSE") {
+				const code = err.response.statusCode;
+				debug$1("error code %s", code);
+				if (code === _verdaccio_core.HTTP_STATUS.NOT_FOUND) throw _verdaccio_core.errorUtils.getNotFound(_verdaccio_core.API_ERROR.NOT_PACKAGE_UPLINK);
+				if (!(code >= _verdaccio_core.HTTP_STATUS.OK && code < _verdaccio_core.HTTP_STATUS.MULTIPLE_CHOICES)) {
+					const error = _verdaccio_core.errorUtils.getInternalError(`${_verdaccio_core.API_ERROR.BAD_STATUS_CODE}: ${code}`);
+					error.remoteStatus = code;
+					throw error;
+				}
+			} else if (this._isRequestTimeout(err)) {
+				debug$1("error code timeout");
+				throw _verdaccio_core.errorUtils.getServiceUnavailable(_verdaccio_core.API_ERROR.SERVER_TIME_OUT);
+			}
+			throw err;
+		}
+	}
+	fetchTarball(url, overrideOptions) {
+		debug$1("fetching url for %s", url);
+		const options = {
+			...this.config,
+			...overrideOptions
+		};
+		let headers = this.getHeaders(options?.headers);
+		headers = this.addProxyHeaders(headers, options.remoteAddress);
+		headers = this.applyUplinkHeaders(headers);
+		if (lodash.default.isNil(options.etag) === false) {
+			headers[_verdaccio_core.HEADERS.NONE_MATCH] = options.etag;
+			headers[_verdaccio_core.HEADERS.ACCEPT] = contentTypeAccept;
+		}
+		const method = "GET";
+		debug$1("request uri for %s", url);
+		return got_cjs.default.stream(url, {
+			headers,
+			method,
+			agent: this.agent,
+			retry: this.retry ?? options?.retry,
+			timeout: this.timeout
+		}).on("request", () => {
+			this.last_request_time = Date.now();
+		});
+	}
+	/**
+	* Perform a stream search.
+	* @param {*} options request options
+	* @return {Stream}
+	*/
+	async search({ url, abort, retry }) {
+		try {
+			const uri = new node_url.URL(url, this.url).href;
+			this.logger.http({
+				uri,
+				uplink: this.uplinkName
+			}, "search request to uplink @{uplink} - @{uri}");
+			debug$1("searching on %o", uri);
+			const res = await (0, got_cjs.default)(uri, {
+				signal: abort ? abort.signal : {},
+				agent: this.agent,
+				timeout: this.timeout,
+				retry: retry ?? this.retry
+			}).text();
+			const total = JSON.parse(res).total;
+			debug$1("number of packages found: %o", total);
+			const streamSearch = new node_stream.PassThrough({ objectMode: true });
+			node_stream.Readable.from(res).pipe(JSONStream.default.parse("objects")).pipe(streamSearch, { end: true });
+			return streamSearch;
+		} catch (err) {
+			debug$1("search error %s", err);
+			if (err.response.statusCode === 409) throw _verdaccio_core.errorUtils.getInternalError(`bad status code ${err.response.statusCode} from uplink`);
+			this.logger.error({
+				errorMessage: err?.message,
+				name: this.uplinkName
+			}, "proxy uplink @{name} search error: @{errorMessage}");
+			throw err;
+		}
+	}
+	addProxyHeaders(headers, remoteAddress) {
+		if (!this.proxy) headers[_verdaccio_core.HEADERS.FORWARDED_FOR] = (headers["x-forwarded-for"] ? headers["x-forwarded-for"] + ", " : "") + remoteAddress;
+		headers["via"] = headers["via"] ? headers["via"] + ", " : "";
+		headers["via"] += "1.1 " + this.server_id + " (Verdaccio)";
+		return headers;
+	}
+	/**
+	* If the request failure.
+	* @return {boolean}
+	* @private
+	*/
+	_ifRequestFailure() {
+		return this.failed_requests >= this.max_fails && Math.abs(Date.now() - this.last_request_time) < this.fail_timeout;
+	}
+	/**
+	* Check if the request timed out (network or http errors).
+	* @param {RequestError} err
+	* @return {boolean}
+	*/
+	_isRequestTimeout(err) {
+		const code = err?.response?.statusCode;
+		return err.code === "ETIMEDOUT" || err.code === "ESOCKETTIMEDOUT" || err.code === "ECONNRESET" || code === _verdaccio_core.HTTP_STATUS.REQUEST_TIMEOUT || code === _verdaccio_core.HTTP_STATUS.BAD_GATEWAY || code === _verdaccio_core.HTTP_STATUS.SERVICE_UNAVAILABLE || code === _verdaccio_core.HTTP_STATUS.GATEWAY_TIMEOUT;
+	}
+	/**
+	* Set up a proxy.
+	* @param {*} hostname
+	* @param {*} config
+	* @param {*} mainconfig
+	* @param {*} isHTTPS
+	*/
+	_setupProxy(hostname, config, mainconfig, isHTTPS) {
+		let noProxyList;
+		const proxy_key = isHTTPS ? "https_proxy" : "http_proxy";
+		debug$1("looking for %o", proxy_key);
+		if (proxy_key in config) {
+			this.proxy = config[proxy_key];
+			debug$1("found %o in uplink config", this.proxy);
+		} else if (proxy_key in mainconfig) {
+			this.proxy = mainconfig[proxy_key];
+			debug$1("found %o in main config", this.proxy);
+		}
+		if ("no_proxy" in config) noProxyList = config.no_proxy;
+		else if ("no_proxy" in mainconfig) noProxyList = mainconfig.no_proxy;
+		if (hostname[0] !== ".") hostname = "." + hostname;
+		if (lodash.default.isString(noProxyList) && noProxyList.length) noProxyList = noProxyList.split(",");
+		if (lodash.default.isArray(noProxyList)) for (let i = 0; i < noProxyList.length; i++) {
+			let noProxyItem = noProxyList[i];
+			if (noProxyItem[0] !== ".") noProxyItem = "." + noProxyItem;
+			if (hostname.endsWith(noProxyItem)) {
+				if (this.proxy) {
+					debug$1("not using proxy, excluded by @{rule}", noProxyItem);
+					this.logger.debug({
+						url: this.url.href,
+						rule: noProxyItem
+					}, "not using proxy for @{url}, excluded by @{rule} rule");
+					this.proxy = void 0;
+				}
+				break;
+			}
+		}
+		if (typeof this.proxy === "string") {
+			debug$1("using proxy @{proxy} for @{url}", this.proxy, this.url.href);
+			this.logger.debug({
+				url: this.url.href,
+				proxy: this.proxy
+			}, "using proxy @{proxy} for @{url}");
+		}
+	}
+};
+//#endregion
+exports.ProxyStorage = ProxyStorage;
 
-      // use wget-like algorithm to determine if proxy shouldn't be used
-      if (hostname[0] !== '.') {
-        hostname = '.' + hostname;
-      }
-      if (_lodash["default"].isString(noProxyList) && noProxyList.length) {
-        noProxyList = noProxyList.split(',');
-      }
-      if (_lodash["default"].isArray(noProxyList)) {
-        for (var i = 0; i < noProxyList.length; i++) {
-          var noProxyItem = noProxyList[i];
-          if (noProxyItem[0] !== '.') {
-            noProxyItem = '.' + noProxyItem;
-          }
-          if (hostname.endsWith(noProxyItem)) {
-            if (this.proxy) {
-              debug('not using proxy, excluded by @{rule}', noProxyItem);
-              this.logger.debug({
-                url: this.url.href,
-                rule: noProxyItem
-              }, 'not using proxy for @{url}, excluded by @{rule} rule');
-              this.proxy = undefined;
-            }
-            break;
-          }
-        }
-      }
-      if (typeof this.proxy === 'string') {
-        debug('using proxy @{proxy} for @{url}', this.proxy, this.url.href);
-        this.logger.debug({
-          url: this.url.href,
-          proxy: this.proxy
-        }, 'using proxy @{proxy} for @{url}');
-      }
-    }
-  }]);
-}();
 //# sourceMappingURL=proxy.js.map