@verdaccio/server 6.0.0-6-next.29 → 6.0.0-6-next.32

package/test/config/powered-custom.yaml

@@ -0,0 +1,29 @@
+# storage: this is generated on _helper file
+
+auth:
+  htpasswd:
+    file: ./htpasswd-package
+
+web:
+  enable: true
+
+user_agent: 'custom user agent'
+
+publish:
+  allow_offline: false
+
+uplinks:
+
+log: { type: stdout, format: pretty, level: trace }
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    unpublish: none
+  '**':
+    access: $all
+    publish: $all
+    unpublish: none
+
+_debug: true

package/test/config/powered-disabled.yaml

@@ -0,0 +1,29 @@
+# storage: this is generated on _helper file
+
+auth:
+  htpasswd:
+    file: ./htpasswd-package
+
+web:
+  enable: true
+
+user_agent: false
+
+publish:
+  allow_offline: false
+
+uplinks:
+
+log: { type: stdout, format: pretty, level: trace }
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    unpublish: none
+  '**':
+    access: $all
+    publish: $all
+    unpublish: none
+
+_debug: true

package/test/config/web-disabled.yaml

@@ -0,0 +1,27 @@
+# storage: this is generated on _helper file
+
+auth:
+  htpasswd:
+    file: ./htpasswd-package
+
+web:
+  enable: false
+
+publish:
+  allow_offline: false
+
+uplinks:
+
+log: { type: stdout, format: pretty, level: trace }
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    unpublish: none
+  '**':
+    access: $all
+    publish: $all
+    unpublish: none
+
+_debug: true

package/test/server.spec.ts

@@ -0,0 +1,113 @@
+import supertest from 'supertest';
+
+import { API_ERROR, HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
+
+import { initializeServer } from './_helper';
+
+test('should request any package', async () => {
+  const app = await initializeServer('conf.yaml');
+  await supertest(app)
+    .get('/jquery')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+    .expect(HTTP_STATUS.NOT_FOUND);
+});
+
+test('should able to catch non defined routes with 404', async () => {
+  const app = await initializeServer('conf.yaml');
+  await supertest(app)
+    .get('/-/this-does-not-exist-anywhere')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+    .expect(HTTP_STATUS.NOT_FOUND);
+});
+
+test('should return index page if web is enabled', async () => {
+  const app = await initializeServer('conf.yaml');
+  const response = await supertest(app)
+    .get('/')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+    .expect(HEADER_TYPE.CONTENT_ENCODING, HEADERS.GZIP)
+    .expect(HTTP_STATUS.OK);
+  expect(response.text).toMatch('<title>verdaccio</title>');
+});
+
+test('should define rate limit headers', async () => {
+  const app = await initializeServer('conf.yaml');
+  await supertest(app)
+    .get('/')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+    .expect('x-ratelimit-limit', '10000')
+    .expect('x-ratelimit-remaining', '9999')
+    .expect(HTTP_STATUS.OK);
+});
+
+test('should contains cors headers', async () => {
+  const app = await initializeServer('conf.yaml');
+  await supertest(app).get('/').expect('access-control-allow-origin', '*').expect(HTTP_STATUS.OK);
+});
+
+test('should contains etag', async () => {
+  const app = await initializeServer('conf.yaml');
+  const response = await supertest(app)
+    .get('/')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+    .expect(HTTP_STATUS.OK);
+  const etag = response.get(HEADERS.ETAG);
+  expect(typeof etag === 'string').toBeTruthy();
+});
+
+test('should contains powered by header', async () => {
+  const app = await initializeServer('conf.yaml');
+  const response = await supertest(app)
+    .get('/')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+    .expect(HTTP_STATUS.OK);
+  const powered = response.get('x-powered-by');
+  expect(powered).toMatch('verdaccio/6');
+});
+
+test('should not contains powered header', async () => {
+  const app = await initializeServer('powered-disabled.yaml');
+  const response = await supertest(app)
+    .get('/')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+    .expect(HTTP_STATUS.OK);
+  const powered = response.get('x-powered-by');
+  expect(powered).toEqual('hidden');
+});
+
+test('should contains custom powered header', async () => {
+  const app = await initializeServer('powered-custom.yaml');
+  const response = await supertest(app)
+    .get('/')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+    .expect(HTTP_STATUS.OK);
+  const powered = response.get('x-powered-by');
+  expect(powered).toEqual('custom user agent');
+});
+
+test('should return 404 if web is disabled', async () => {
+  const app = await initializeServer('web-disabled.yaml');
+  const response = await supertest(app)
+    .get('/')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+    .expect(HTTP_STATUS.NOT_FOUND);
+  expect(response.body.error).toEqual(API_ERROR.WEB_DISABLED);
+});
+
+test('should not display debug hook disabled by default', async () => {
+  const app = await initializeServer('no_debug.yaml');
+  await supertest(app)
+    .get('/-/_debug')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+    .expect(HTTP_STATUS.NOT_FOUND);
+});
+
+test('should  display debug hook if directly enabled', async () => {
+  const app = await initializeServer('conf.yaml');
+  const res = await supertest(app)
+    .get('/-/_debug')
+    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+    .expect(HTTP_STATUS.OK);
+  expect(res.body.pid).toEqual(process.pid);
+  expect(res.body.mem).toBeDefined();
+});

package/tsconfig.build.json

@@ -1,5 +1,5 @@
 {
-  "extends": "../../tsconfig.base",
+  "extends": "../../../tsconfig.base",
   "compilerOptions": {
     "rootDir": "./src",
     "outDir": "./build"

package/tsconfig.json

@@ -1,5 +1,5 @@
 {
-  "extends": "../../tsconfig.reference.json",
+  "extends": "../../../tsconfig.reference.json",
   "compilerOptions": {
     "rootDir": "./src",
     "outDir": "./build"
@@ -8,43 +8,43 @@
   "exclude": ["src/**/*.test.ts"],
   "references": [
     {
-      "path": "../api"
+      "path": "../../api"
     },
     {
-      "path": "../auth"
+      "path": "../../auth"
     },
     {
-      "path": "../config"
+      "path": "../../config"
     },
     {
-      "path": "../core/commons-api"
+      "path": "../../core/commons-api"
     },
     {
-      "path": "../loaders"
+      "path": "../../loaders"
     },
     {
-      "path": "../logger"
+      "path": "../../logger"
     },
     {
-      "path": "../middleware"
+      "path": "../../middleware"
     },
     {
-      "path": "../mock"
+      "path": "../../mock"
     },
     {
-      "path": "../plugins/audit"
+      "path": "../../plugins/audit"
     },
     {
-      "path": "../proxy"
+      "path": "../../proxy"
     },
     {
-      "path": "../store"
+      "path": "../../store"
     },
     {
-      "path": "../utils"
+      "path": "../../utils"
     },
     {
-      "path": "../web"
+      "path": "../../web"
     }
   ]
 }

package/jest.setup.js

@@ -1 +0,0 @@
-jest.setTimeout(20000);

package/test/.eslintrc

@@ -1,8 +0,0 @@
-{
-	"rules": {
-		"@typescript-eslint/explicit-function-return-type": 0,
-		"@typescript-eslint/explicit-member-accessibility": 0,
-		"@typescript-eslint/no-unused-vars": 2,
-		"no-console": 0
-	}
-}

package/test/README.md

@@ -1,12 +0,0 @@
-## Testing
-
-The test are structured by feature following this shape:
-
-```bash
- test
-  --- feat
-       --- config.yaml
-       --- spec.test.ts
-       --- mock (storage folder) optional
-       --- partials (optional)
-```

package/test/api/api.spec.yaml

@@ -1,87 +0,0 @@
-storage: ./storage_default_storage
-plugins: ./plugins
-
-auth:
-  htpasswd:
-    file: ./htpasswd
-
-packages:
-  '@public-anyone-can-publish/*':
-    access: $anonymous jota_unpublish
-    publish: $anonymous jota_unpublish
-    unpublish: $anonymous jota_unpublish
-  '@scope/deprecate':
-    access: $all
-    publish:
-      - jota_deprecate
-      - only_publish
-    unpublish:
-      - jota_deprecate
-      - only_unpublish
-  '@scope/starPackage':
-    access: $all
-    publish: jota_star
-    unpublish: jota_star
-  '@only-one-can-publish/*':
-    access: jota_unpublish
-    publish: jota_unpublish
-    unpublish: jota_unpublish
-  '@jquery/*':
-    access: $all
-    publish: $all
-    proxy: npmjs
-  '@scope/*':
-    access: test
-    publish: dsadsa
-    proxy: npmjs
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: $authenticated
-    proxy: npmjs
-  'auth-package':
-    access: $authenticated
-    publish: $authenticated
-  'only-you-can-publish':
-    access: $authenticated
-    publish: you
-    unpublish: you
-  'non-unpublish':
-    access: $authenticated
-    publish: jota_unpublish_fail
-    # There is some conditions to keep on mind here
-    # - If unpublish is empty, fallback with the publish value
-    # - If the user has permissions to publish and this empty it will be allowed to unpublish
-    # - If we want to forbid anyone to unpublish,  just write here any unexisting user
-    unpublish: some_unexisting_user_defined_here_might_be_a_hash
-  'only-unpublish':
-    access: $authenticated
-    # comment out is intended, we want to test if publish prop is not defined
-    # publish: jota_unpublish_fail
-    #
-    unpublish:
-  'super-admin-can-unpublish':
-    access: $authenticated
-    publish: super_admin
-    unpublish: super_admin
-  'all-can-unpublish':
-    access: $authenticated
-    publish: $all
-    unpublish: $all
-  'forbidden-place':
-    access: nobody
-    publish: $all
-  'vue':
-    access: $authenticated
-    publish: $authenticated
-    proxy: npmjs
-  'jquery':
-    access: $all
-    publish: $all
-    proxy: npmjs
-  '*':
-    access: $all
-    publish: $all
-    unpublish: xxx
-    proxy: npmjs
-log: { type: stdout, format: pretty, level: error }

package/test/api/helpers/publish-api.js

@@ -1,60 +0,0 @@
-const json = {
-  _id: '@scope/pk1-test',
-  name: '@scope/pk1-test',
-  description: '',
-  'dist-tags': {
-    latest: '1.0.6',
-  },
-  versions: {
-    '1.0.6': {
-      name: '@scope/pk1-test',
-      version: '1.0.6',
-      description: '',
-      main: 'index.js',
-      scripts: {
-        test: 'echo "Error: no test specified" && exit 1',
-      },
-      keywords: [],
-      author: {
-        name: 'User NPM',
-        email: 'user@domain.com',
-      },
-      license: 'ISC',
-      dependencies: {
-        verdaccio: '^2.7.2',
-      },
-      readme: '# test',
-      readmeFilename: 'README.md',
-      _id: '@scope/pk1-test@1.0.6',
-      _npmVersion: '5.5.1',
-      _nodeVersion: '8.7.0',
-      _npmUser: {},
-      dist: {
-        integrity:
-          'sha512-6gHiERpiDgtb3hjqpQH5/i7zRmvYi9pmCjQf2ZMy3QEa9wVk9RgdZaPWUt7ZOnWUPFjc' +
-          'r9cmE6dUBf+XoPoH4g==',
-        shasum: '2c03764f651a9f016ca0b7620421457b619151b9',
-        tarball: 'http://localhost:5555/@scope/pk1-test/-/@scope/pk1-test-1.0.6.tgz',
-      },
-    },
-  },
-  readme: '# test',
-  _attachments: {
-    '@scope/pk1-test-1.0.6.tgz': {
-      content_type: 'application/octet-stream',
-      data:
-        'H4sIAAAAAAAAE+2W32vbMBDH85y/QnjQp9qxLEeBMsbGlocNBmN7bFdQ5WuqxJaEpGQdo//79KPeQsnI' +
-        'w5KUDX/9IOvurLuz/DHSjK/YAiY6jcXSKjk6sMqypHWNdtmD6hlBI0wqQmo8nVbVqMR4OsNoVB66kF1a' +
-        'W8eML+Vv10m9oF/jP6IfY4QyyTrILlD2eqkcm+gVzpdrJrPz4NuAsULJ4MZFWdBkbcByI7R79CRjx0Sc' +
-        'CdnAvf+SkjUFWu8IubzBgXUhDPidQlfZ3BhlLpBUKDiQ1cDFrYDmKkNnZwjuhUM4808+xNVW8P2bMk1Y' +
-        '7vJrtLC1u1MmLPjBF40+Cc4ahV6GDmI/DWygVRpMwVX3KtXUCg7Sxp7ff3nbt6TBFy65gK1iffsN41yo' +
-        'EHtdFbOiisWMH8bPvXUH0SP3k+KG3UBr+DFy7OGfEJr4x5iWVeS/pLQe+D+FIv/agIWI6GX66kFuIhT+' +
-        '1gDjrp/4d7WAvAwEJPh0u14IufWkM0zaW2W6nLfM2lybgJ4LTJ0/jWiAK8OcMjt8MW3OlfQppcuhhQ6k' +
-        '+2OgkK2Q8DssFPi/IHpU9fz3/+xj5NjDf8QFE39VmE4JDfzPCBn4P4X6/f88f/Pu47zomiPk2Lv/dOv8' +
-        'h+P/34/D/p9CL+Kp67mrGDRo0KBBp9ZPsETQegASAAA=',
-      length: 512,
-    },
-  },
-};
-
-module.exports = json;

package/test/api/helpers/utils.ts

@@ -1,149 +0,0 @@
-import { Package } from '@verdaccio/types';
-
-export function generateVersion(pkgName, version) {
-  return {
-    name: pkgName,
-    version: version,
-    description: 'some foo dependency',
-    main: 'index.js',
-    scripts: {
-      test: 'echo "Error: no test specified" && exit 1',
-    },
-    keywords: [],
-    author: {
-      name: 'User NPM',
-      email: 'user@domain.com',
-    },
-    license: 'ISC',
-    dependencies: {
-      verdaccio: '^4.0.0',
-    },
-    readme: '# test',
-    readmeFilename: 'README.md',
-    _id: `${pkgName}@${version}`,
-    _npmVersion: '5.5.1',
-    _npmUser: {
-      name: 'foo',
-    },
-    dist: {
-      integrity:
-        'sha512-6gHiERpiDgtb3hjqpQH5/i7zRmvYi9pmCjQf2ZMy3QEa9wVk9RgdZaPWUt7ZOnWUPFjcr9c' +
-        'mE6dUBf+XoPoH4g==',
-      shasum: '2c03764f651a9f016ca0b7620421457b619151b9', // pragma: allowlist secret
-      tarball: `http:\/\/localhost:5555\/${pkgName}\/-\/${pkgName}-${version}.tgz`,
-    },
-  };
-}
-
-/**
- * The metadata that comes from npm unpublish only contains the versions won't be removed and
- * also does not includes any _attachment.
- * @param pkgName
- * @param _versions
- */
-export function generatePackageUnpublish(
-  pkgName: string,
-  _versions: string[] = ['1.0.0']
-): Package {
-  const latest: string = _versions[_versions.length - 1];
-  const versions = _versions.reduce((cat, version) => {
-    cat[version] = generateVersion(pkgName, version);
-    return cat;
-  }, {});
-
-  // @ts-ignore
-  return {
-    _id: pkgName,
-    name: pkgName,
-    readme: '# test',
-    // users usually is present when run npm star [pkg]
-    users: {},
-    'dist-tags': {
-      latest: latest,
-    },
-    versions: versions,
-  };
-}
-
-export function generateStarMedatada(pkgName: string, users): any {
-  return {
-    _id: pkgName,
-    _rev: '3-b0cdaefc9bdb77c8',
-    users: users,
-  };
-}
-
-export function generatePackageMetadata(pkgName: string, version = '1.0.0'): Package {
-  // @ts-ignore
-  return {
-    _id: pkgName,
-    name: pkgName,
-    'dist-tags': {
-      latest: version,
-    },
-    versions: {
-      [version]: {
-        name: pkgName,
-        version: version,
-        description: '',
-        main: 'index.js',
-        scripts: {
-          test: 'echo "Error: no test specified" && exit 1',
-        },
-        keywords: [],
-        author: {
-          name: 'User NPM',
-          email: 'user@domain.com',
-        },
-        license: 'ISC',
-        dependencies: {
-          verdaccio: '^2.7.2',
-        },
-        readme: '# test',
-        readmeFilename: 'README.md',
-        _id: `${pkgName}@${version}`,
-        _npmVersion: '5.5.1',
-        _npmUser: {
-          name: 'foo',
-        },
-        dist: {
-          integrity:
-            'sha512-6gHiERpiDgtb3hjqpQH5/i7zRmvYi9pmCjQf2ZMy3QEa9wVk9RgdZaPWUt7ZOnWUPFjcr' +
-            '9cmE6dUBf+XoPoH4g==',
-          shasum: '2c03764f651a9f016ca0b7620421457b619151b9', // pragma: allowlist secret
-          tarball: `http:\/\/localhost:5555\/${pkgName}\/-\/${pkgName}-${version}.tgz`,
-        },
-      },
-    },
-    readme: '# test',
-    _attachments: {
-      [`${pkgName}-${version}.tgz`]: {
-        content_type: 'application/octet-stream',
-        data:
-          'H4sIAAAAAAAAE+2W32vbMBDH85y/QnjQp9qxLEeBMsbGlocNBmN7bFdQ5WuqxJaEpGQdo//79KPeQsnI' +
-          'w5KUDX/9IOvurLuz/DHSjK/YAiY6jcXSKjk6sMqypHWNdtmD6hlBI0wqQmo8nVbVqMR4OsNoVB66kF1a' +
-          'W8eML+Vv10m9oF/jP6IfY4QyyTrILlD2eqkcm+gVzpdrJrPz4NuAsULJ4MZFWdBkbcByI7R79CRjx0Sc' +
-          'CdnAvf+SkjUFWu8IubzBgXUhDPidQlfZ3BhlLpBUKDiQ1cDFrYDmKkNnZwjuhUM4808+xNVW8P2bMk1Y' +
-          '7vJrtLC1u1MmLPjBF40+Cc4ahV6GDmI/DWygVRpMwVX3KtXUCg7Sxp7ff3nbt6TBFy65gK1iffsN41yo' +
-          'EHtdFbOiisWMH8bPvXUH0SP3k+KG3UBr+DFy7OGfEJr4x5iWVeS/pLQe+D+FIv/agIWI6GX66kFuIhT+' +
-          '1gDjrp/4d7WAvAwEJPh0u14IufWkM0zaW2W6nLfM2lybgJ4LTJ0/jWiAK8OcMjt8MW3OlfQppcuhhQ6k' +
-          '+2OgkK2Q8DssFPi/IHpU9fz3/+xj5NjDf8QFE39VmE4JDfzPCBn4P4X6/f88f/Pu47zomiPk2Lv/dOv8' +
-          'h+P/34/D/p9CL+Kp67mrGDRo0KBBp9ZPsETQegASAAA=',
-        length: 512,
-      },
-    },
-  };
-}
-
-export function generateDeprecateMetadata(
-  pkgName: string,
-  version = '1.0.0',
-  deprecated: string = ''
-): Package {
-  const res = {
-    ...generatePackageMetadata(pkgName, version),
-    _attachments: {},
-  };
-  res.versions[version].deprecated = deprecated;
-  return res;
-}

package/test/api/htpasswd

@@ -1,10 +0,0 @@
-server_user_api_spec:3TdCV4iEpNFsI:autocreated 2020-11-08T10:36:37.581Z
-jota_unpublish:oIj/79.KRKO6Y:autocreated 2020-11-08T10:36:37.881Z
-jota_unpublish_fail:y7dutM1X0pByQ:autocreated 2020-11-08T10:36:37.934Z
-jota_only_unpublish_fail:3rUkLjiXInch.:autocreated 2020-11-08T10:36:37.947Z
-super_admin:yW2wIbTxWW1UA:autocreated 2020-11-08T10:36:37.953Z
-any_user:VBq3LIOEN9VOY:autocreated 2020-11-08T10:36:37.971Z
-jota_star:rp9KgzaAC2Uew:autocreated 2020-11-08T10:36:37.988Z
-jota_deprecate:Q09PY3eVq/L1E:autocreated 2020-11-08T10:36:38.012Z
-only_publish:s2pCXhzEgIupY:autocreated 2020-11-08T10:36:38.040Z
-only_unpublish:+JTPy3GKmGlEE:autocreated 2020-11-08T10:36:38.046Z