@verdaccio/server 6.0.0-6-next.29 → 6.0.0-6-next.32

package/test/api/plugin/filter.ts

@@ -1,25 +0,0 @@
-class FilterPlugin {
-  private _config;
-  public constructor(config) {
-    this._config = config;
-  }
-
-  public filter_metadata(pkg) {
-    return new Promise((resolve, reject) => {
-      // We use this to test what happens when a filter rejects
-      if (pkg.name === 'trigger-filter-failure') {
-        reject(new Error('Example filter failure'));
-        return;
-      }
-      // Example filter that removes a single blocked package
-      if (this._config.pkg === pkg.name) {
-        // In reality, we also want to remove references in attachments and dist-tags,
-        // etc. This is just a POC
-        delete pkg.versions[this._config.version];
-      }
-      resolve(pkg);
-    });
-  }
-}
-
-exports.default = FilterPlugin;

package/test/basic/basic.yaml

@@ -1,14 +0,0 @@
-store:
-  memory:
-    limit: 1000
-uplinks:
-  npmjs:
-    url: http://localhost:4873/
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-  '*':
-    access: $all
-    publish: $all
-log: { type: stdout, format: pretty, level: warn }

package/test/basic/index.spec.ts

@@ -1,64 +0,0 @@
-import express from 'express';
-import path from 'path';
-import request from 'request';
-
-import { parseConfigFile } from '@verdaccio/config';
-import { API_ERROR } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-
-import endPointAPI from '../../src';
-
-setup([{ type: 'stdout', format: 'pretty', level: 'trace' }]);
-
-const app = express();
-const server = require('http').createServer(app);
-
-const parseConfigurationFile = (conf) => {
-  return path.join(__dirname, `./${conf}`);
-};
-
-// TODO: restore when web module is ready
-describe.skip('basic system test', () => {
-  let port;
-  jest.setTimeout(20000);
-
-  beforeAll(async function (done) {
-    const config = parseConfigFile(parseConfigurationFile('basic.yaml'));
-    app.use(await endPointAPI(config));
-    server.listen(0, function () {
-      port = server.address().port;
-      done();
-    });
-  });
-
-  afterAll((done) => {
-    server.close(done);
-  });
-
-  test('server should respond on /', (done) => {
-    request(
-      {
-        url: 'http://localhost:' + port + '/',
-      },
-      function (err, res, body) {
-        expect(err).toBeNull();
-        expect(body).toMatch(/Verdaccio/);
-        done();
-      }
-    );
-  });
-
-  test('server should respond on /___not_found_package', (done) => {
-    request(
-      {
-        json: true,
-        url: `http://localhost:${port}/___not_found_package`,
-      },
-      function (err, res, body) {
-        expect(err).toBeNull();
-        expect(body.error).toMatch(API_ERROR.NO_PACKAGE);
-        done();
-      }
-    );
-  });
-});

package/test/jwt/index.spec.ts

@@ -1,163 +0,0 @@
-import path from 'path';
-import request from 'supertest';
-
-import {
-  API_ERROR,
-  HEADERS,
-  HEADER_TYPE,
-  HTTP_STATUS,
-  TOKEN_BASIC,
-  TOKEN_BEARER,
-} from '@verdaccio/core';
-import { logger, setup } from '@verdaccio/logger';
-import { generateRamdonStorage, mockServer } from '@verdaccio/mock';
-import {
-  DOMAIN_SERVERS,
-  addUser,
-  configExample,
-  getPackage,
-  loginUserToken,
-} from '@verdaccio/mock';
-import { buildToken, buildUserBuffer } from '@verdaccio/utils';
-
-import endPointAPI from '../../src';
-
-setup([]);
-
-const credentials = { name: 'JotaJWT', password: 'secretPass' };
-
-const FORBIDDEN_VUE = 'authorization required to access package vue';
-
-describe('endpoint user auth JWT unit test', () => {
-  jest.setTimeout(20000);
-  let app;
-  let mockRegistry;
-  const FAKE_TOKEN: string = buildToken(TOKEN_BEARER, 'fake');
-
-  beforeAll(async function () {
-    const mockServerPort = 55546;
-    const store = generateRamdonStorage();
-    const configForTest = configExample(
-      {
-        storage: store,
-        uplinks: {
-          remote: {
-            url: `http://${DOMAIN_SERVERS}:${mockServerPort}`,
-          },
-        },
-        config_path: store,
-      },
-      'jwt.yaml',
-      __dirname
-    );
-
-    app = await endPointAPI(configForTest);
-    const binPath = require.resolve('verdaccio/bin/verdaccio');
-    const storePath = path.join(__dirname, '/mock/store');
-    mockRegistry = await mockServer(mockServerPort, { storePath, silence: true }).init(binPath);
-  });
-
-  afterAll(function () {
-    const [registry, pid] = mockRegistry;
-    registry.stop();
-    logger.info(`registry ${pid} has been stopped`);
-  });
-
-  test('should test add a new user with JWT enabled', async () => {
-    const [err, res] = await addUser(request(app), credentials.name, credentials);
-    expect(err).toBeNull();
-    expect(res.body.ok).toBeDefined();
-    expect(res.body.token).toBeDefined();
-
-    const { token } = res.body;
-    expect(typeof token).toBe('string');
-    expect(res.body.ok).toMatch(`user '${credentials.name}' created`);
-
-    // testing JWT auth headers with token
-    // we need it here, because token is required
-    const [err1, resp1] = await getPackage(request(app), token, 'vue');
-
-    expect(err1).toBeNull();
-    expect(resp1.body).toBeDefined();
-    expect(resp1.body.name).toMatch('vue');
-
-    const [err2, resp2] = await getPackage(
-      request(app),
-      FAKE_TOKEN,
-      'vue',
-      HTTP_STATUS.UNAUTHORIZED
-    );
-    expect(err2).toBeNull();
-    expect(resp2.statusCode).toBe(HTTP_STATUS.UNAUTHORIZED);
-    expect(resp2.body.error).toMatch(FORBIDDEN_VUE);
-  });
-
-  test('should emulate npm login when user already exist', async () => {
-    const credentials = { name: 'jwtUser2', password: 'secretPass' };
-    // creates an user
-    await addUser(request(app), credentials.name, credentials);
-    // it should fails conflict 409
-    await addUser(request(app), credentials.name, credentials, HTTP_STATUS.CONFLICT);
-
-    // npm will try to sign in sending credentials via basic auth header
-    const token = buildUserBuffer(credentials.name, credentials.password).toString('base64');
-    // put should exist in request
-    return new Promise((resolve) => {
-      // @ts-ignore
-      request(app)
-        .put(`/-/user/org.couchdb.user:${credentials.name}/-rev/undefined`)
-        .send(credentials)
-        .set(HEADERS.AUTHORIZATION, buildToken(TOKEN_BASIC, token))
-        .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-        .expect(HTTP_STATUS.CREATED)
-        .end(function (err, res) {
-          expect(err).toBeNull();
-          expect(res.body.ok).toBeDefined();
-          expect(res.body.token).toBeDefined();
-
-          resolve(res);
-        });
-    });
-  });
-
-  test('should fails on try to access with corrupted token', async () => {
-    const [err2, resp2] = await getPackage(
-      request(app),
-      FAKE_TOKEN,
-      'vue',
-      HTTP_STATUS.UNAUTHORIZED
-    );
-    expect(err2).toBeNull();
-    expect(resp2.statusCode).toBe(HTTP_STATUS.UNAUTHORIZED);
-    expect(resp2.body.error).toMatch(FORBIDDEN_VUE);
-  });
-
-  test(
-    'should fails on login if user credentials are invalid even if jwt' +
-      ' valid token is provided',
-    async () => {
-      const credentials = { name: 'newFailsUser', password: 'secretPass' };
-      const [err, res] = await addUser(request(app), credentials.name, credentials);
-      expect(err).toBeNull();
-      expect(res.body.ok).toBeDefined();
-      expect(res.body.token).toBeDefined();
-
-      const { token } = res.body;
-      expect(typeof token).toBe('string');
-      expect(res.body.ok).toMatch(`user '${credentials.name}' created`);
-
-      // we login when token is valid
-      const newCredentials = { name: 'newFailsUser', password: 'BAD_PASSWORD' };
-      const [err2, resp2] = await loginUserToken(
-        request(app),
-        newCredentials.name,
-        newCredentials,
-        token,
-        HTTP_STATUS.UNAUTHORIZED
-      );
-      expect(err2).toBeNull();
-      expect(resp2.statusCode).toBe(HTTP_STATUS.UNAUTHORIZED);
-      expect(resp2.body.error).toMatch(API_ERROR.BAD_USERNAME_PASSWORD);
-    }
-  );
-});

package/test/jwt/jwt.yaml

@@ -1,35 +0,0 @@
-storage: ./storage
-plugins: ./plugins
-
-web:
-  title: Verdaccio
-
-auth:
-  htpasswd:
-    file: ./htpasswd
-
-security:
-  api:
-    jwt:
-      sign:
-        expiresIn: 10m
-        notBefore: 0
-packages:
-  '@*/*':
-    access: $all
-    publish: $authenticated
-    proxy: remote
-  'vue':
-    access: $authenticated
-    publish: $authenticated
-    proxy: remote
-  '**':
-    access: $all
-    publish: $authenticated
-    proxy: remote
-
-middlewares:
-  audit:
-    enabled: true
-
-log: { type: stdout, format: pretty, level: warn }