@verdaccio/server 6.0.0-6-next.31 → 6.0.0-6-next.34

package/.babelrc

@@ -1,3 +1,3 @@
 {
-  "extends": "../../.babelrc"
+  "extends": "../../../.babelrc"
 }

package/CHANGELOG.md

@@ -1,5 +1,102 @@
 # @verdaccio/server
 
+## 6.0.0-6-next.34
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/api@6.0.0-6-next.28
+  - @verdaccio/auth@6.0.0-6-next.24
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/loaders@6.0.0-6-next.14
+  - @verdaccio/logger@6.0.0-6-next.13
+  - verdaccio-audit@11.0.0-6-next.10
+  - @verdaccio/store@6.0.0-6-next.25
+  - @verdaccio/web@6.0.0-6-next.32
+  - @verdaccio/middleware@6.0.0-6-next.24
+  - @verdaccio/config@6.0.0-6-next.16
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 6.0.0-6-next.33
+
+### Patch Changes
+
+- Updated dependencies [37274e4c]
+  - @verdaccio/api@6.0.0-6-next.27
+  - @verdaccio/store@6.0.0-6-next.24
+  - @verdaccio/web@6.0.0-6-next.31
+  - @verdaccio/auth@6.0.0-6-next.23
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/loaders@6.0.0-6-next.13
+  - @verdaccio/logger@6.0.0-6-next.12
+  - verdaccio-audit@11.0.0-6-next.9
+
+## 6.0.0-6-next.32
+
+### Major Changes
+
+- 292c0a37: feat!: replace deprecated request dependency by got
+
+  This is a big refactoring of the core, fetching dependencies, improve code, more tests and better stability. This is essential for the next release, will take some time but would allow modularize more the core.
+
+  ## Notes
+
+  - Remove deprecated `request` by other `got`, retry improved, custom Agent ( got does not include it built-in)
+  - Remove `async` dependency from storage (used by core) it was linked with proxy somehow safe to remove now
+  - Refactor with promises instead callback wherever is possible
+  - ~Document the API~
+  - Improve testing, integration tests
+  - Bugfix
+  - Clean up old validations
+  - Improve performance
+
+  ## 💥 Breaking changes
+
+  - Plugin API methods were callbacks based are returning promises, this will break current storage plugins, check documentation for upgrade.
+  - Write Tarball, Read Tarball methods parameters change, a new set of options like `AbortController` signals are being provided to the `addAbortSignal` can be internally used with Streams when a request is aborted. eg: `addAbortSignal(signal, fs.createReadStream(pathName));`
+  - `@verdaccio/streams` stream abort support is legacy is being deprecated removed
+  - Remove AWS and Google Cloud packages for future refactoring [#2574](https://github.com/verdaccio/verdaccio/pull/2574).
+
+### Minor Changes
+
+- 00d1d2a1: chore: env variable for launch fastify
+
+  - Update fastify to major release `v4.3.0`
+  - Update CLI launcher
+
+  via CLI
+
+  ```
+  VERDACCIO_SERVER=fastify verdaccio
+  ```
+
+  with docker
+
+  ```
+  docker run -it --rm --name verdaccio \
+    -e "VERDACCIO_SERVER=8080" -p 8080:8080 \
+    -e "VERDACCIO_SERVER=fastify" \
+    verdaccio/verdaccio
+  ```
+
+### Patch Changes
+
+- Updated dependencies [292c0a37]
+- Updated dependencies [a3a209b5]
+- Updated dependencies [00d1d2a1]
+  - @verdaccio/api@6.0.0-6-next.26
+  - @verdaccio/auth@6.0.0-6-next.23
+  - @verdaccio/config@6.0.0-6-next.15
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/loaders@6.0.0-6-next.13
+  - @verdaccio/logger@6.0.0-6-next.12
+  - @verdaccio/middleware@6.0.0-6-next.23
+  - verdaccio-audit@11.0.0-6-next.9
+  - @verdaccio/store@6.0.0-6-next.23
+  - @verdaccio/utils@6.0.0-6-next.12
+  - @verdaccio/web@6.0.0-6-next.30
+
 ## 6.0.0-6-next.31
 
 ### Patch Changes

package/build/debug/index.d.ts

@@ -1,3 +1,3 @@
 import { Application } from 'express';
-declare const _default: (app: Application, configPath: string) => void;
+declare const _default: (app: Application, configPath?: string) => void;
 export default _default;

package/build/debug/index.js

@@ -15,7 +15,7 @@ var _default = (app, configPath) => {
     next({
       pid: process.pid,
       // @ts-ignore
-      main: process.mainModule.filename,
+      main: process.main,
       conf: configPath,
       mem: process.memoryUsage(),
       gc: global.gc

package/build/debug/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/debug/index.ts"],"names":["app","configPath","get","req","res","next","global","gc","pid","process","main","mainModule","filename","conf","mem","memoryUsage"],"mappings":";;;;;;;eAIe,CAACA,GAAD,EAAmBC,UAAnB,KAAgD;AAC7D;AACAD,EAAAA,GAAG,CAACE,GAAJ,CACE,WADF,EAEE,UAAUC,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACjF,QAAIC,MAAM,CAACC,EAAX,EAAe;AACbD,MAAAA,MAAM,CAACC,EAAP;AACD;;AAEDF,IAAAA,IAAI,CAAC;AACHG,MAAAA,GAAG,EAAEC,OAAO,CAACD,GADV;AAEH;AACAE,MAAAA,IAAI,EAAED,OAAO,CAACE,UAAR,CAAmBC,QAHtB;AAIHC,MAAAA,IAAI,EAAEZ,UAJH;AAKHa,MAAAA,GAAG,EAAEL,OAAO,CAACM,WAAR,EALF;AAMHR,MAAAA,EAAE,EAAED,MAAM,CAACC;AANR,KAAD,CAAJ;AAQD,GAfH;AAiBD,C","sourcesContent":["import { Application } from 'express';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../../types/custom';\n\nexport default (app: Application, configPath: string): void => {\n  // Hook for tests only\n  app.get(\n    '/-/_debug',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      if (global.gc) {\n        global.gc();\n      }\n\n      next({\n        pid: process.pid,\n        // @ts-ignore\n        main: process.mainModule.filename,\n        conf: configPath,\n        mem: process.memoryUsage(),\n        gc: global.gc,\n      });\n    }\n  );\n};\n"],"file":"index.js"}
+{"version":3,"file":"index.js","names":["app","configPath","get","req","res","next","global","gc","pid","process","main","conf","mem","memoryUsage"],"sources":["../../src/debug/index.ts"],"sourcesContent":["import { Application } from 'express';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../../types/custom';\n\nexport default (app: Application, configPath?: string): void => {\n  // Hook for tests only\n  app.get(\n    '/-/_debug',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      if (global.gc) {\n        global.gc();\n      }\n\n      next({\n        pid: process.pid,\n        // @ts-ignore\n        main: process.main,\n        conf: configPath,\n        mem: process.memoryUsage(),\n        gc: global.gc,\n      });\n    }\n  );\n};\n"],"mappings":";;;;;;;eAIe,CAACA,GAAD,EAAmBC,UAAnB,KAAiD;EAC9D;EACAD,GAAG,CAACE,GAAJ,CACE,WADF,EAEE,UAAUC,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;IACjF,IAAIC,MAAM,CAACC,EAAX,EAAe;MACbD,MAAM,CAACC,EAAP;IACD;;IAEDF,IAAI,CAAC;MACHG,GAAG,EAAEC,OAAO,CAACD,GADV;MAEH;MACAE,IAAI,EAAED,OAAO,CAACC,IAHX;MAIHC,IAAI,EAAEV,UAJH;MAKHW,GAAG,EAAEH,OAAO,CAACI,WAAR,EALF;MAMHN,EAAE,EAAED,MAAM,CAACC;IANR,CAAD,CAAJ;EAQD,CAfH;AAiBD,C"}

package/build/env.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/env.ts"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","sourcesContent":["// const path = require('path');\n//\n// const APP_ROOT = path.resolve(__dirname, '../../');\n//\n// module.exports = {\n//   APP_ROOT,\n//   SRC_ROOT: path.resolve(APP_ROOT, 'src/')\n// };\n"],"file":"env.js"}
+{"version":3,"file":"env.js","names":[],"sources":["../src/env.ts"],"sourcesContent":["// const path = require('path');\n//\n// const APP_ROOT = path.resolve(__dirname, '../../');\n//\n// module.exports = {\n//   APP_ROOT,\n//   SRC_ROOT: path.resolve(APP_ROOT, 'src/')\n// };\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA"}

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA","sourcesContent":["export { default } from './server';\n"],"file":"index.js"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["export { default } from './server';\n"],"mappings":";;;;;;;;;;;;AAAA"}

package/build/server.d.ts

@@ -1,9 +1,9 @@
 import { IBasicAuth } from '@verdaccio/auth';
 import { Storage } from '@verdaccio/store';
-import { ConfigRuntime } from '@verdaccio/types';
+import { ConfigYaml } from '@verdaccio/types';
 import { IPlugin } from '@verdaccio/types';
 export interface IPluginMiddleware<T> extends IPlugin<T> {
     register_middlewares(app: any, auth: IBasicAuth<T>, storage: Storage): void;
 }
-declare const _default: (configHash: ConfigRuntime) => Promise<any>;
+declare const _default: (configHash: ConfigYaml) => Promise<any>;
 export default _default;

package/build/server.js

@@ -39,6 +39,8 @@ var _web = _interopRequireDefault(require("@verdaccio/web"));
 
 var _debug2 = _interopRequireDefault(require("./debug"));
 
+var _utils = require("./utils");
+
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 const debug = (0, _debug.default)('verdaccio:server');
@@ -56,7 +58,7 @@ const defineAPI = function (config, storage) {
   app.use(_middleware.log);
   app.use(_middleware.errorReportingMiddleware);
   app.use(function (req, res, next) {
-    res.setHeader('X-Powered-By', config.user_agent);
+    res.setHeader('x-powered-by', (0, _utils.getUserAgent)(config.user_agent));
     next();
   });
   app.use((0, _compression.default)());
@@ -66,7 +68,7 @@ const defineAPI = function (config, storage) {
   }); // Hook for tests only
 
   if (config._debug) {
-    (0, _debug2.default)(app, config.config_path);
+    (0, _debug2.default)(app, config.configPath);
   } // register middleware plugins
 
 
@@ -105,7 +107,7 @@ const defineAPI = function (config, storage) {
 
 
   app.get('/*', function (req, res, next) {
-    next(_core.errorUtils.getNotFound(_core.API_ERROR.FILE_NOT_FOUND));
+    next(_core.errorUtils.getNotFound('resource not found'));
   });
   app.use(function (err, req, res, next) {
     if (_lodash.default.isError(err)) {

package/build/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"names":["debug","defineAPI","config","storage","auth","Auth","app","limiter","RateLimit","serverSettings","rateLimit","set","process","env","NODE_ENV","use","log","errorReportingMiddleware","req","res","next","setHeader","user_agent","get","url","_debug","config_path","plugin_params","logger","plugins","middlewares","plugin","register_middlewares","_","isEmpty","push","AuditMiddleware","enabled","strict_ssl","forEach","errorUtils","getNotFound","API_ERROR","WEB_DISABLED","FILE_NOT_FOUND","err","isError","code","statusCode","HTTP_STATUS","NOT_MODIFIED","isFunction","locals","report_error","noop","final","configHash","AppConfig","cloneDeep","filters","filter_metadata","Storage","init","error","msg","Error"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AACA;;AACA;;AAEA;;AACA;;AAEA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AAGA;;AAGA;;;;AAMA,MAAMA,KAAK,GAAG,oBAAW,kBAAX,CAAd;;AAEA,MAAMC,SAAS,GAAG,UAAUC,MAAV,EAA2BC,OAA3B,EAAkD;AAClE,QAAMC,IAAU,GAAG,IAAIC,UAAJ,CAASH,MAAT,CAAnB;AACA,QAAMI,GAAgB,GAAG,uBAAzB;AACA,QAAMC,OAAO,GAAG,IAAIC,yBAAJ,CAAcN,MAAM,CAACO,cAAP,CAAsBC,SAApC,CAAhB,CAHkE,CAIlE;AACA;;AACAJ,EAAAA,GAAG,CAACK,GAAJ,CAAQ,KAAR,EAAeC,OAAO,CAACC,GAAR,CAAYC,QAAZ,IAAwB,YAAvC;AACAR,EAAAA,GAAG,CAACS,GAAJ,CAAQ,oBAAR;AACAT,EAAAA,GAAG,CAACS,GAAJ,CAAQR,OAAR,EARkE,CAUlE;;AACAD,EAAAA,GAAG,CAACS,GAAJ,CAAQC,eAAR;AACAV,EAAAA,GAAG,CAACS,GAAJ,CAAQE,oCAAR;AACAX,EAAAA,GAAG,CAACS,GAAJ,CAAQ,UAAUG,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACzFD,IAAAA,GAAG,CAACE,SAAJ,CAAc,cAAd,EAA8BnB,MAAM,CAACoB,UAArC;AACAF,IAAAA,IAAI;AACL,GAHD;AAKAd,EAAAA,GAAG,CAACS,GAAJ,CAAQ,2BAAR;AAEAT,EAAAA,GAAG,CAACiB,GAAJ,CACE,cADF,EAEE,UAAUL,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACjFF,IAAAA,GAAG,CAACM,GAAJ,GAAU,uBAAV;AACAJ,IAAAA,IAAI;AACL,GALH,EApBkE,CA4BlE;;AACA,MAAIlB,MAAM,CAACuB,MAAX,EAAmB;AACjB,yBAAUnB,GAAV,EAAeJ,MAAM,CAACwB,WAAtB;AACD,GA/BiE,CAiClE;;;AACA,QAAMC,aAAa,GAAG;AACpBzB,IAAAA,MAAM,EAAEA,MADY;AAEpB0B,IAAAA,MAAM,EAAEA;AAFY,GAAtB;AAKA,QAAMC,OAAqC,GAAG,yBAC5C3B,MAD4C,EAE5CA,MAAM,CAAC4B,WAFqC,EAG5CH,aAH4C,EAI5C,UAAUI,MAAV,EAA8C;AAC5C,WAAOA,MAAM,CAACC,oBAAd;AACD,GAN2C,CAA9C;;AASA,MAAIC,gBAAEC,OAAF,CAAUL,OAAV,CAAJ,EAAwB;AACtBA,IAAAA,OAAO,CAACM,IAAR,CACE,IAAIC,uBAAJ,CACE,EAAE,GAAGlC,MAAL;AAAamC,MAAAA,OAAO,EAAE,IAAtB;AAA4BC,MAAAA,UAAU,EAAE;AAAxC,KADF,EAEE;AAAEpC,MAAAA,MAAF;AAAU0B,MAAAA,MAAM,EAAEA;AAAlB,KAFF,CADF;AAMD;;AAEDC,EAAAA,OAAO,CAACU,OAAR,CAAiBR,MAAD,IAAwC;AACtDA,IAAAA,MAAM,CAACC,oBAAP,CAA4B1B,GAA5B,EAAiCF,IAAjC,EAAuCD,OAAvC;AACD,GAFD,EAzDkE,CA6DlE;AACA;;AACAG,EAAAA,GAAG,CAACS,GAAJ,CAAQ,kBAAYb,MAAZ,EAAoBE,IAApB,EAA0BD,OAA1B,CAAR,EA/DkE,CAiElE;;AACA,MAAI8B,gBAAEV,GAAF,CAAMrB,MAAN,EAAc,YAAd,EAA4B,IAA5B,CAAJ,EAAuC;AACrCI,IAAAA,GAAG,CAACS,GAAJ,CAAQ,kBAAcb,MAAd,EAAsBE,IAAtB,EAA4BD,OAA5B,CAAR;AACD,GAFD,MAEO;AACLG,IAAAA,GAAG,CAACiB,GAAJ,CAAQ,GAAR,EAAa,UAAUL,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;AACxFA,MAAAA,IAAI,CAACoB,iBAAWC,WAAX,CAAuBC,gBAAUC,YAAjC,CAAD,CAAJ;AACD,KAFD;AAGD,GAxEiE,CA0ElE;;;AACArC,EAAAA,GAAG,CAACiB,GAAJ,CAAQ,IAAR,EAAc,UAAUL,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;AACzFA,IAAAA,IAAI,CAACoB,iBAAWC,WAAX,CAAuBC,gBAAUE,cAAjC,CAAD,CAAJ;AACD,GAFD;AAIAtC,EAAAA,GAAG,CAACS,GAAJ,CAAQ,UACN8B,GADM,EAEN3B,GAFM,EAGNC,GAHM,EAINC,IAJM,EAKN;AACA,QAAIa,gBAAEa,OAAF,CAAUD,GAAV,CAAJ,EAAoB;AAClB,UAAIA,GAAG,CAACE,IAAJ,KAAa,YAAb,IAA6B5B,GAAG,CAAC6B,UAAJ,KAAmBC,kBAAYC,YAAhE,EAA8E;AAC5E,eAAO9B,IAAI,EAAX;AACD;;AACD,UAAIa,gBAAEkB,UAAF,CAAahC,GAAG,CAACiC,MAAJ,CAAWC,YAAxB,MAA0C,KAA9C,EAAqD;AACnD;AACA;AACA,kDAAyBnC,GAAzB,EAA8BC,GAA9B,EAAmCc,gBAAEqB,IAArC;AACD;;AACDnC,MAAAA,GAAG,CAACiC,MAAJ,CAAWC,YAAX,CAAwBR,GAAxB;AACD,KAVD,MAUO;AACL;AACA,aAAOzB,IAAI,CAACyB,GAAD,CAAX;AACD;AACF,GApBD;AAsBAvC,EAAAA,GAAG,CAACS,GAAJ,CAAQwC,iBAAR;AAEA,SAAOjD,GAAP;AACD,CAxGD;;eA0GgB,wBAAgBkD,UAAhB,EAAyD;AACvExD,EAAAA,KAAK,CAAC,cAAD,CAAL;AACA,QAAME,MAAe,GAAG,IAAIuD,cAAJ,CAAcxB,gBAAEyB,SAAF,CAAYF,UAAZ,CAAd,CAAxB,CAFuE,CAGvE;;AACA,QAAM7B,aAAa,GAAG;AACpBzB,IAAAA,MAAM,EAAEA,MADY;AAEpB0B,IAAAA,MAAM,EAAEA;AAFY,GAAtB;AAIA,QAAM+B,OAAO,GAAG,yBACdzD,MADc,EAEdA,MAAM,CAACyD,OAAP,IAAkB,EAFJ,EAGdhC,aAHc,EAIbI,MAAD,IAA2CA,MAAM,CAAC6B,eAJpC,CAAhB;AAMA5D,EAAAA,KAAK,CAAC,sBAAD,CAAL,CAduE,CAevE;;AACA,QAAMG,OAAgB,GAAG,IAAI0D,cAAJ,CAAY3D,MAAZ,CAAzB;;AACA,MAAI;AACF;AACAF,IAAAA,KAAK,CAAC,oBAAD,CAAL;AACA,UAAMG,OAAO,CAAC2D,IAAR,CAAa5D,MAAb,EAAqByD,OAArB,CAAN;AACA3D,IAAAA,KAAK,CAAC,kBAAD,CAAL;AACD,GALD,CAKE,OAAO6C,GAAP,EAAiB;AACjBjB,mBAAOmC,KAAP,CAAa;AAAEA,MAAAA,KAAK,EAAElB,GAAG,CAACmB;AAAb,KAAb,EAAiC,8BAAjC;;AACA,UAAM,IAAIC,KAAJ,CAAUpB,GAAV,CAAN;AACD;;AACD,SAAO5C,SAAS,CAACC,MAAD,EAASC,OAAT,CAAhB;AACD,C","sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport express, { Application } from 'express';\nimport RateLimit from 'express-rate-limit';\nimport { HttpError } from 'http-errors';\nimport _ from 'lodash';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth, IBasicAuth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport { API_ERROR, HTTP_STATUS, errorUtils } from '@verdaccio/core';\nimport { loadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport { errorReportingMiddleware, final, log } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { ConfigRuntime } from '@verdaccio/types';\nimport { Config as IConfig, IPlugin, IPluginStorageFilter } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\n\nexport interface IPluginMiddleware<T> extends IPlugin<T> {\n  register_middlewares(app: any, auth: IBasicAuth<T>, storage: Storage): void;\n}\n\nconst debug = buildDebug('verdaccio:server');\n\nconst defineAPI = function (config: IConfig, storage: Storage): any {\n  const auth: Auth = new Auth(config);\n  const app: Application = express();\n  const limiter = new RateLimit(config.serverSettings.rateLimit);\n  // run in production mode by default, just in case\n  // it shouldn't make any difference anyway\n  app.set('env', process.env.NODE_ENV || 'production');\n  app.use(cors());\n  app.use(limiter);\n\n  // Router setup\n  app.use(log);\n  app.use(errorReportingMiddleware);\n  app.use(function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    res.setHeader('X-Powered-By', config.user_agent);\n    next();\n  });\n\n  app.use(compression());\n\n  app.get(\n    '/favicon.ico',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      req.url = '/-/static/favicon.png';\n      next();\n    }\n  );\n\n  // Hook for tests only\n  if (config._debug) {\n    hookDebug(app, config.config_path);\n  }\n\n  // register middleware plugins\n  const plugin_params = {\n    config: config,\n    logger: logger,\n  };\n\n  const plugins: IPluginMiddleware<IConfig>[] = loadPlugin(\n    config,\n    config.middlewares,\n    plugin_params,\n    function (plugin: IPluginMiddleware<IConfig>) {\n      return plugin.register_middlewares;\n    }\n  );\n\n  if (_.isEmpty(plugins)) {\n    plugins.push(\n      new AuditMiddleware(\n        { ...config, enabled: true, strict_ssl: true },\n        { config, logger: logger }\n      )\n    );\n  }\n\n  plugins.forEach((plugin: IPluginMiddleware<IConfig>) => {\n    plugin.register_middlewares(app, auth, storage);\n  });\n\n  // For  npm request\n  // @ts-ignore\n  app.use(apiEndpoint(config, auth, storage));\n\n  // For WebUI & WebUI API\n  if (_.get(config, 'web.enable', true)) {\n    app.use(webMiddleware(config, auth, storage));\n  } else {\n    app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n      next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n    });\n  }\n\n  // Catch 404\n  app.get('/*', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n    next(errorUtils.getNotFound(API_ERROR.FILE_NOT_FOUND));\n  });\n\n  app.use(function (\n    err: HttpError,\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer\n  ) {\n    if (_.isError(err)) {\n      if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n        return next();\n      }\n      if (_.isFunction(res.locals.report_error) === false) {\n        // in case of very early error this middleware may not be loaded before error is generated\n        // fixing that\n        errorReportingMiddleware(req, res, _.noop);\n      }\n      res.locals.report_error(err);\n    } else {\n      // Fall to Middleware.final\n      return next(err);\n    }\n  });\n\n  app.use(final);\n\n  return app;\n};\n\nexport default (async function (configHash: ConfigRuntime): Promise<any> {\n  debug('start server');\n  const config: IConfig = new AppConfig(_.cloneDeep(configHash));\n  // register middleware plugins\n  const plugin_params = {\n    config: config,\n    logger: logger,\n  };\n  const filters = loadPlugin(\n    config,\n    config.filters || {},\n    plugin_params,\n    (plugin: IPluginStorageFilter<IConfig>) => plugin.filter_metadata\n  );\n  debug('loaded filter plugin');\n  // @ts-ignore\n  const storage: Storage = new Storage(config);\n  try {\n    // waits until init calls have been initialized\n    debug('storage init start');\n    await storage.init(config, filters);\n    debug('storage init end');\n  } catch (err: any) {\n    logger.error({ error: err.msg }, 'storage has failed: @{error}');\n    throw new Error(err);\n  }\n  return defineAPI(config, storage);\n});\n"],"file":"server.js"}
+{"version":3,"file":"server.js","names":["debug","buildDebug","defineAPI","config","storage","auth","Auth","app","express","limiter","RateLimit","serverSettings","rateLimit","set","process","env","NODE_ENV","use","cors","log","errorReportingMiddleware","req","res","next","setHeader","getUserAgent","user_agent","compression","get","url","_debug","hookDebug","configPath","plugin_params","logger","plugins","loadPlugin","middlewares","plugin","register_middlewares","_","isEmpty","push","AuditMiddleware","enabled","strict_ssl","forEach","apiEndpoint","webMiddleware","errorUtils","getNotFound","API_ERROR","WEB_DISABLED","err","isError","code","statusCode","HTTP_STATUS","NOT_MODIFIED","isFunction","locals","report_error","noop","final","configHash","AppConfig","cloneDeep","filters","filter_metadata","Storage","init","error","msg","Error"],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport express, { Application } from 'express';\nimport RateLimit from 'express-rate-limit';\nimport { HttpError } from 'http-errors';\nimport _ from 'lodash';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth, IBasicAuth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport { API_ERROR, HTTP_STATUS, errorUtils } from '@verdaccio/core';\nimport { loadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport { errorReportingMiddleware, final, log } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { ConfigYaml } from '@verdaccio/types';\nimport { Config as IConfig, IPlugin, IPluginStorageFilter } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\nimport { getUserAgent } from './utils';\n\nexport interface IPluginMiddleware<T> extends IPlugin<T> {\n  register_middlewares(app: any, auth: IBasicAuth<T>, storage: Storage): void;\n}\n\nconst debug = buildDebug('verdaccio:server');\n\nconst defineAPI = function (config: IConfig, storage: Storage): any {\n  const auth: Auth = new Auth(config);\n  const app: Application = express();\n  const limiter = new RateLimit(config.serverSettings.rateLimit);\n  // run in production mode by default, just in case\n  // it shouldn't make any difference anyway\n  app.set('env', process.env.NODE_ENV || 'production');\n  app.use(cors());\n  app.use(limiter);\n\n  // Router setup\n  app.use(log);\n  app.use(errorReportingMiddleware);\n  app.use(function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    res.setHeader('x-powered-by', getUserAgent(config.user_agent));\n    next();\n  });\n\n  app.use(compression());\n\n  app.get(\n    '/favicon.ico',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      req.url = '/-/static/favicon.png';\n      next();\n    }\n  );\n\n  // Hook for tests only\n  if (config._debug) {\n    hookDebug(app, config.configPath);\n  }\n\n  // register middleware plugins\n  const plugin_params = {\n    config: config,\n    logger: logger,\n  };\n\n  const plugins: IPluginMiddleware<IConfig>[] = loadPlugin(\n    config,\n    config.middlewares,\n    plugin_params,\n    function (plugin: IPluginMiddleware<IConfig>) {\n      return plugin.register_middlewares;\n    }\n  );\n\n  if (_.isEmpty(plugins)) {\n    plugins.push(\n      new AuditMiddleware(\n        { ...config, enabled: true, strict_ssl: true },\n        { config, logger: logger }\n      )\n    );\n  }\n\n  plugins.forEach((plugin: IPluginMiddleware<IConfig>) => {\n    plugin.register_middlewares(app, auth, storage);\n  });\n\n  // For  npm request\n  // @ts-ignore\n  app.use(apiEndpoint(config, auth, storage));\n\n  // For WebUI & WebUI API\n  if (_.get(config, 'web.enable', true)) {\n    app.use(webMiddleware(config, auth, storage));\n  } else {\n    app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n      next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n    });\n  }\n\n  // Catch 404\n  app.get('/*', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n    next(errorUtils.getNotFound('resource not found'));\n  });\n\n  app.use(function (\n    err: HttpError,\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer\n  ) {\n    if (_.isError(err)) {\n      if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n        return next();\n      }\n      if (_.isFunction(res.locals.report_error) === false) {\n        // in case of very early error this middleware may not be loaded before error is generated\n        // fixing that\n        errorReportingMiddleware(req, res, _.noop);\n      }\n      res.locals.report_error(err);\n    } else {\n      // Fall to Middleware.final\n      return next(err);\n    }\n  });\n\n  app.use(final);\n\n  return app;\n};\n\nexport default (async function (configHash: ConfigYaml): Promise<any> {\n  debug('start server');\n  const config: IConfig = new AppConfig(_.cloneDeep(configHash) as any);\n  // register middleware plugins\n  const plugin_params = {\n    config: config,\n    logger,\n  };\n  const filters = loadPlugin(\n    config,\n    config.filters || {},\n    plugin_params,\n    (plugin: IPluginStorageFilter<IConfig>) => plugin.filter_metadata\n  );\n  debug('loaded filter plugin');\n  // @ts-ignore\n  const storage: Storage = new Storage(config);\n  try {\n    // waits until init calls have been initialized\n    debug('storage init start');\n    await storage.init(config, filters);\n    debug('storage init end');\n  } catch (err: any) {\n    logger.error({ error: err.msg }, 'storage has failed: @{error}');\n    throw new Error(err);\n  }\n  return defineAPI(config, storage);\n});\n"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AACA;;AACA;;AAEA;;AACA;;AAEA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AAGA;;AAGA;;AACA;;;;AAMA,MAAMA,KAAK,GAAG,IAAAC,cAAA,EAAW,kBAAX,CAAd;;AAEA,MAAMC,SAAS,GAAG,UAAUC,MAAV,EAA2BC,OAA3B,EAAkD;EAClE,MAAMC,IAAU,GAAG,IAAIC,UAAJ,CAASH,MAAT,CAAnB;EACA,MAAMI,GAAgB,GAAG,IAAAC,gBAAA,GAAzB;EACA,MAAMC,OAAO,GAAG,IAAIC,yBAAJ,CAAcP,MAAM,CAACQ,cAAP,CAAsBC,SAApC,CAAhB,CAHkE,CAIlE;EACA;;EACAL,GAAG,CAACM,GAAJ,CAAQ,KAAR,EAAeC,OAAO,CAACC,GAAR,CAAYC,QAAZ,IAAwB,YAAvC;EACAT,GAAG,CAACU,GAAJ,CAAQ,IAAAC,aAAA,GAAR;EACAX,GAAG,CAACU,GAAJ,CAAQR,OAAR,EARkE,CAUlE;;EACAF,GAAG,CAACU,GAAJ,CAAQE,eAAR;EACAZ,GAAG,CAACU,GAAJ,CAAQG,oCAAR;EACAb,GAAG,CAACU,GAAJ,CAAQ,UAAUI,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;IACzFD,GAAG,CAACE,SAAJ,CAAc,cAAd,EAA8B,IAAAC,mBAAA,EAAatB,MAAM,CAACuB,UAApB,CAA9B;IACAH,IAAI;EACL,CAHD;EAKAhB,GAAG,CAACU,GAAJ,CAAQ,IAAAU,oBAAA,GAAR;EAEApB,GAAG,CAACqB,GAAJ,CACE,cADF,EAEE,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;IACjFF,GAAG,CAACQ,GAAJ,GAAU,uBAAV;IACAN,IAAI;EACL,CALH,EApBkE,CA4BlE;;EACA,IAAIpB,MAAM,CAAC2B,MAAX,EAAmB;IACjB,IAAAC,eAAA,EAAUxB,GAAV,EAAeJ,MAAM,CAAC6B,UAAtB;EACD,CA/BiE,CAiClE;;;EACA,MAAMC,aAAa,GAAG;IACpB9B,MAAM,EAAEA,MADY;IAEpB+B,MAAM,EAAEA;EAFY,CAAtB;EAKA,MAAMC,OAAqC,GAAG,IAAAC,mBAAA,EAC5CjC,MAD4C,EAE5CA,MAAM,CAACkC,WAFqC,EAG5CJ,aAH4C,EAI5C,UAAUK,MAAV,EAA8C;IAC5C,OAAOA,MAAM,CAACC,oBAAd;EACD,CAN2C,CAA9C;;EASA,IAAIC,eAAA,CAAEC,OAAF,CAAUN,OAAV,CAAJ,EAAwB;IACtBA,OAAO,CAACO,IAAR,CACE,IAAIC,uBAAJ,CACE,EAAE,GAAGxC,MAAL;MAAayC,OAAO,EAAE,IAAtB;MAA4BC,UAAU,EAAE;IAAxC,CADF,EAEE;MAAE1C,MAAF;MAAU+B,MAAM,EAAEA;IAAlB,CAFF,CADF;EAMD;;EAEDC,OAAO,CAACW,OAAR,CAAiBR,MAAD,IAAwC;IACtDA,MAAM,CAACC,oBAAP,CAA4BhC,GAA5B,EAAiCF,IAAjC,EAAuCD,OAAvC;EACD,CAFD,EAzDkE,CA6DlE;EACA;;EACAG,GAAG,CAACU,GAAJ,CAAQ,IAAA8B,YAAA,EAAY5C,MAAZ,EAAoBE,IAApB,EAA0BD,OAA1B,CAAR,EA/DkE,CAiElE;;EACA,IAAIoC,eAAA,CAAEZ,GAAF,CAAMzB,MAAN,EAAc,YAAd,EAA4B,IAA5B,CAAJ,EAAuC;IACrCI,GAAG,CAACU,GAAJ,CAAQ,IAAA+B,YAAA,EAAc7C,MAAd,EAAsBE,IAAtB,EAA4BD,OAA5B,CAAR;EACD,CAFD,MAEO;IACLG,GAAG,CAACqB,GAAJ,CAAQ,GAAR,EAAa,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;MACxFA,IAAI,CAAC0B,gBAAA,CAAWC,WAAX,CAAuBC,eAAA,CAAUC,YAAjC,CAAD,CAAJ;IACD,CAFD;EAGD,CAxEiE,CA0ElE;;;EACA7C,GAAG,CAACqB,GAAJ,CAAQ,IAAR,EAAc,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;IACzFA,IAAI,CAAC0B,gBAAA,CAAWC,WAAX,CAAuB,oBAAvB,CAAD,CAAJ;EACD,CAFD;EAIA3C,GAAG,CAACU,GAAJ,CAAQ,UACNoC,GADM,EAENhC,GAFM,EAGNC,GAHM,EAINC,IAJM,EAKN;IACA,IAAIiB,eAAA,CAAEc,OAAF,CAAUD,GAAV,CAAJ,EAAoB;MAClB,IAAIA,GAAG,CAACE,IAAJ,KAAa,YAAb,IAA6BjC,GAAG,CAACkC,UAAJ,KAAmBC,iBAAA,CAAYC,YAAhE,EAA8E;QAC5E,OAAOnC,IAAI,EAAX;MACD;;MACD,IAAIiB,eAAA,CAAEmB,UAAF,CAAarC,GAAG,CAACsC,MAAJ,CAAWC,YAAxB,MAA0C,KAA9C,EAAqD;QACnD;QACA;QACA,IAAAzC,oCAAA,EAAyBC,GAAzB,EAA8BC,GAA9B,EAAmCkB,eAAA,CAAEsB,IAArC;MACD;;MACDxC,GAAG,CAACsC,MAAJ,CAAWC,YAAX,CAAwBR,GAAxB;IACD,CAVD,MAUO;MACL;MACA,OAAO9B,IAAI,CAAC8B,GAAD,CAAX;IACD;EACF,CApBD;EAsBA9C,GAAG,CAACU,GAAJ,CAAQ8C,iBAAR;EAEA,OAAOxD,GAAP;AACD,CAxGD;;eA0GgB,wBAAgByD,UAAhB,EAAsD;EACpEhE,KAAK,CAAC,cAAD,CAAL;EACA,MAAMG,MAAe,GAAG,IAAI8D,cAAJ,CAAczB,eAAA,CAAE0B,SAAF,CAAYF,UAAZ,CAAd,CAAxB,CAFoE,CAGpE;;EACA,MAAM/B,aAAa,GAAG;IACpB9B,MAAM,EAAEA,MADY;IAEpB+B,MAAM,EAANA;EAFoB,CAAtB;EAIA,MAAMiC,OAAO,GAAG,IAAA/B,mBAAA,EACdjC,MADc,EAEdA,MAAM,CAACgE,OAAP,IAAkB,EAFJ,EAGdlC,aAHc,EAIbK,MAAD,IAA2CA,MAAM,CAAC8B,eAJpC,CAAhB;EAMApE,KAAK,CAAC,sBAAD,CAAL,CAdoE,CAepE;;EACA,MAAMI,OAAgB,GAAG,IAAIiE,cAAJ,CAAYlE,MAAZ,CAAzB;;EACA,IAAI;IACF;IACAH,KAAK,CAAC,oBAAD,CAAL;IACA,MAAMI,OAAO,CAACkE,IAAR,CAAanE,MAAb,EAAqBgE,OAArB,CAAN;IACAnE,KAAK,CAAC,kBAAD,CAAL;EACD,CALD,CAKE,OAAOqD,GAAP,EAAiB;IACjBnB,cAAA,CAAOqC,KAAP,CAAa;MAAEA,KAAK,EAAElB,GAAG,CAACmB;IAAb,CAAb,EAAiC,8BAAjC;;IACA,MAAM,IAAIC,KAAJ,CAAUpB,GAAV,CAAN;EACD;;EACD,OAAOnD,SAAS,CAACC,MAAD,EAASC,OAAT,CAAhB;AACD,C"}

package/build/utils.d.ts

@@ -0,0 +1 @@
+export declare function getUserAgent(userAgent: string): string;

package/build/utils.js

@@ -0,0 +1,19 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getUserAgent = getUserAgent;
+
+const pkgVersion = require('../package.json').version;
+
+function getUserAgent(userAgent) {
+  if (typeof userAgent === 'string') {
+    return userAgent;
+  } else if (userAgent === false) {
+    return 'hidden';
+  }
+
+  return `verdaccio/${pkgVersion}`;
+}
+//# sourceMappingURL=utils.js.map

package/build/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","names":["pkgVersion","require","version","getUserAgent","userAgent"],"sources":["../src/utils.ts"],"sourcesContent":["const pkgVersion = require('../package.json').version;\n\nexport function getUserAgent(userAgent: string): string {\n  if (typeof userAgent === 'string') {\n    return userAgent;\n  } else if (userAgent === false) {\n    return 'hidden';\n  }\n\n  return `verdaccio/${pkgVersion}`;\n}\n"],"mappings":";;;;;;;AAAA,MAAMA,UAAU,GAAGC,OAAO,CAAC,iBAAD,CAAP,CAA2BC,OAA9C;;AAEO,SAASC,YAAT,CAAsBC,SAAtB,EAAiD;EACtD,IAAI,OAAOA,SAAP,KAAqB,QAAzB,EAAmC;IACjC,OAAOA,SAAP;EACD,CAFD,MAEO,IAAIA,SAAS,KAAK,KAAlB,EAAyB;IAC9B,OAAO,QAAP;EACD;;EAED,OAAQ,aAAYJ,UAAW,EAA/B;AACD"}

package/jest.config.js

@@ -1,5 +1,10 @@
-const config = require('../../jest/config');
+const config = require('../../../jest/config');
 
 module.exports = Object.assign({}, config, {
-  setupFilesAfterEnv: ['./jest.setup.js'],
+  coverageThreshold: {
+    global: {
+      // FIXME: increase to 90
+      lines: 85,
+    },
+  },
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server",
-  "version": "6.0.0-6-next.31",
+  "version": "6.0.0-6-next.34",
   "description": "server logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -30,31 +30,29 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "@verdaccio/api": "6.0.0-6-next.25",
-    "@verdaccio/auth": "6.0.0-6-next.22",
-    "@verdaccio/core": "6.0.0-6-next.5",
-    "@verdaccio/config": "6.0.0-6-next.14",
-    "@verdaccio/loaders": "6.0.0-6-next.12",
-    "@verdaccio/logger": "6.0.0-6-next.11",
-    "@verdaccio/middleware": "6.0.0-6-next.22",
-    "@verdaccio/store": "6.0.0-6-next.22",
-    "@verdaccio/utils": "6.0.0-6-next.11",
-    "@verdaccio/web": "6.0.0-6-next.29",
-    "verdaccio-audit": "11.0.0-6-next.8",
+    "@verdaccio/api": "6.0.0-6-next.28",
+    "@verdaccio/auth": "6.0.0-6-next.24",
+    "@verdaccio/core": "6.0.0-6-next.7",
+    "@verdaccio/config": "6.0.0-6-next.16",
+    "@verdaccio/loaders": "6.0.0-6-next.14",
+    "@verdaccio/logger": "6.0.0-6-next.13",
+    "@verdaccio/middleware": "6.0.0-6-next.24",
+    "@verdaccio/store": "6.0.0-6-next.25",
+    "@verdaccio/utils": "6.0.0-6-next.13",
+    "@verdaccio/web": "6.0.0-6-next.32",
+    "verdaccio-audit": "11.0.0-6-next.10",
     "compression": "1.7.4",
     "cors": "2.8.5",
-    "debug": "4.3.3",
-    "express": "4.17.2",
+    "debug": "4.3.4",
+    "express": "4.18.1",
     "express-rate-limit": "5.5.1",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@types/node": "16.11.21",
-    "@verdaccio/mock": "6.0.0-6-next.15",
-    "@verdaccio/proxy": "6.0.0-6-next.20",
-    "@verdaccio/test-helper": "1.1.0-6-next.1",
-    "http-errors": "1.8.1",
-    "request": "2.88.0"
+    "@types/node": "16.11.56",
+    "@verdaccio/proxy": "6.0.0-6-next.23",
+    "@verdaccio/test-helper": "1.1.0-6-next.3",
+    "http-errors": "1.8.1"
   },
   "funding": {
     "type": "opencollective",
@@ -62,7 +60,7 @@
   },
   "scripts": {
     "clean": "rimraf ./build",
-    "test": "cross-env NODE_ENV=test BABEL_ENV=test jest --detectOpenHandles",
+    "test": "jest",
     "type-check": "tsc --noEmit -p tsconfig.build.json",
     "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
     "watch": "pnpm build:js -- --watch",

package/src/debug/index.ts

@@ -2,7 +2,7 @@ import { Application } from 'express';
 
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../../types/custom';
 
-export default (app: Application, configPath: string): void => {
+export default (app: Application, configPath?: string): void => {
   // Hook for tests only
   app.get(
     '/-/_debug',
@@ -14,7 +14,7 @@ export default (app: Application, configPath: string): void => {
       next({
         pid: process.pid,
         // @ts-ignore
-        main: process.mainModule.filename,
+        main: process.main,
         conf: configPath,
         mem: process.memoryUsage(),
         gc: global.gc,

package/src/server.ts

@@ -15,12 +15,13 @@ import { loadPlugin } from '@verdaccio/loaders';
 import { logger } from '@verdaccio/logger';
 import { errorReportingMiddleware, final, log } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
-import { ConfigRuntime } from '@verdaccio/types';
+import { ConfigYaml } from '@verdaccio/types';
 import { Config as IConfig, IPlugin, IPluginStorageFilter } from '@verdaccio/types';
 import webMiddleware from '@verdaccio/web';
 
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
 import hookDebug from './debug';
+import { getUserAgent } from './utils';
 
 export interface IPluginMiddleware<T> extends IPlugin<T> {
   register_middlewares(app: any, auth: IBasicAuth<T>, storage: Storage): void;
@@ -42,7 +43,7 @@ const defineAPI = function (config: IConfig, storage: Storage): any {
   app.use(log);
   app.use(errorReportingMiddleware);
   app.use(function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
-    res.setHeader('X-Powered-By', config.user_agent);
+    res.setHeader('x-powered-by', getUserAgent(config.user_agent));
     next();
   });
 
@@ -58,7 +59,7 @@ const defineAPI = function (config: IConfig, storage: Storage): any {
 
   // Hook for tests only
   if (config._debug) {
-    hookDebug(app, config.config_path);
+    hookDebug(app, config.configPath);
   }
 
   // register middleware plugins
@@ -104,7 +105,7 @@ const defineAPI = function (config: IConfig, storage: Storage): any {
 
   // Catch 404
   app.get('/*', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
-    next(errorUtils.getNotFound(API_ERROR.FILE_NOT_FOUND));
+    next(errorUtils.getNotFound('resource not found'));
   });
 
   app.use(function (
@@ -134,13 +135,13 @@ const defineAPI = function (config: IConfig, storage: Storage): any {
   return app;
 };
 
-export default (async function (configHash: ConfigRuntime): Promise<any> {
+export default (async function (configHash: ConfigYaml): Promise<any> {
   debug('start server');
-  const config: IConfig = new AppConfig(_.cloneDeep(configHash));
+  const config: IConfig = new AppConfig(_.cloneDeep(configHash) as any);
   // register middleware plugins
   const plugin_params = {
     config: config,
-    logger: logger,
+    logger,
   };
   const filters = loadPlugin(
     config,

package/src/utils.ts

@@ -0,0 +1,11 @@
+const pkgVersion = require('../package.json').version;
+
+export function getUserAgent(userAgent: string): string {
+  if (typeof userAgent === 'string') {
+    return userAgent;
+  } else if (userAgent === false) {
+    return 'hidden';
+  }
+
+  return `verdaccio/${pkgVersion}`;
+}

package/test/_helper.ts

@@ -0,0 +1,29 @@
+import { Application } from 'express';
+import path from 'path';
+
+import { parseConfigFile } from '@verdaccio/config';
+import { fileUtils } from '@verdaccio/core';
+import { setup } from '@verdaccio/logger';
+import { generateRandomHexString } from '@verdaccio/utils';
+
+import apiMiddleware from '../src';
+
+setup();
+
+export const getConf = async (conf) => {
+  const configPath = path.join(__dirname, 'config', conf);
+  const config = parseConfigFile(configPath);
+  // generate and create storage folder
+  const storage = await fileUtils.createTempFolder('config');
+  config.storage = storage;
+  // custom config to avoid conflict with other tests
+  config.auth.htpasswd.file = path.join(
+    storage,
+    `${config.auth.htpasswd.file}-${generateRandomHexString()}`
+  );
+  return config;
+};
+
+export async function initializeServer(configName): Promise<Application> {
+  return apiMiddleware(await getConf(configName));
+}

package/test/config/conf.yaml

@@ -0,0 +1,28 @@
+# storage: this is generated on _helper file
+
+auth:
+  htpasswd:
+    file: ./htpasswd-package
+
+web:
+  enable: true
+  title: verdaccio
+
+publish:
+  allow_offline: false
+
+uplinks:
+
+log: { type: stdout, format: pretty, level: trace }
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    unpublish: none
+  '**':
+    access: $all
+    publish: $all
+    unpublish: none
+
+_debug: true

package/test/config/no_debug.yaml

@@ -0,0 +1,26 @@
+# storage: this is generated on _helper file
+
+auth:
+  htpasswd:
+    file: ./htpasswd-package
+
+web:
+  enable: true
+  title: verdaccio
+
+publish:
+  allow_offline: false
+
+uplinks:
+
+log: { type: stdout, format: pretty, level: trace }
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    unpublish: none
+  '**':
+    access: $all
+    publish: $all
+    unpublish: none

package/test/config/powered-custom.yaml

@@ -0,0 +1,29 @@
+# storage: this is generated on _helper file
+
+auth:
+  htpasswd:
+    file: ./htpasswd-package
+
+web:
+  enable: true
+
+user_agent: 'custom user agent'
+
+publish:
+  allow_offline: false
+
+uplinks:
+
+log: { type: stdout, format: pretty, level: trace }
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    unpublish: none
+  '**':
+    access: $all
+    publish: $all
+    unpublish: none
+
+_debug: true

package/test/config/powered-disabled.yaml

@@ -0,0 +1,29 @@
+# storage: this is generated on _helper file
+
+auth:
+  htpasswd:
+    file: ./htpasswd-package
+
+web:
+  enable: true
+
+user_agent: false
+
+publish:
+  allow_offline: false
+
+uplinks:
+
+log: { type: stdout, format: pretty, level: trace }
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    unpublish: none
+  '**':
+    access: $all
+    publish: $all
+    unpublish: none
+
+_debug: true

package/test/config/web-disabled.yaml

@@ -0,0 +1,27 @@
+# storage: this is generated on _helper file
+
+auth:
+  htpasswd:
+    file: ./htpasswd-package
+
+web:
+  enable: false
+
+publish:
+  allow_offline: false
+
+uplinks:
+
+log: { type: stdout, format: pretty, level: trace }
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    unpublish: none
+  '**':
+    access: $all
+    publish: $all
+    unpublish: none
+
+_debug: true