@verdaccio/server 6.0.0-6-next.36 → 6.0.0-6-next.38

package/CHANGELOG.md

@@ -1,5 +1,99 @@
 # @verdaccio/server
 
+## 6.0.0-6-next.38
+
+### Patch Changes
+
+- Updated dependencies [ce013d2f]
+  - @verdaccio/api@6.0.0-6-next.32
+  - @verdaccio/store@6.0.0-6-next.29
+  - @verdaccio/web@6.0.0-6-next.36
+  - @verdaccio/core@6.0.0-6-next.49
+  - @verdaccio/config@6.0.0-6-next.49
+  - @verdaccio/auth@6.0.0-6-next.28
+  - @verdaccio/loaders@6.0.0-6-next.18
+  - @verdaccio/logger@6.0.0-6-next.17
+  - @verdaccio/middleware@6.0.0-6-next.28
+  - verdaccio-audit@11.0.0-6-next.12
+  - @verdaccio/utils@6.0.0-6-next.17
+
+## 6.0.0-6-next.37
+
+### Major Changes
+
+- 9fc2e796: feat(plugins): improve plugin loader
+
+  ### Changes
+
+  - Add scope plugin support to 6.x https://github.com/verdaccio/verdaccio/pull/3227
+  - Avoid config collisions https://github.com/verdaccio/verdaccio/issues/928
+  - https://github.com/verdaccio/verdaccio/issues/1394
+  - `config.plugins` plugin path validations
+  - Updated algorithm for plugin loader.
+  - improved documentation (included dev)
+
+  ## Features
+
+  - Add scope plugin support to 6.x https://github.com/verdaccio/verdaccio/pull/3227
+  - Custom prefix:
+
+  ```
+  // config.yaml
+  server:
+    pluginPrefix: mycompany
+  middleware:
+    audit:
+        foo: 1
+  ```
+
+  This configuration will look up for `mycompany-audit` instead `Verdaccio-audit`.
+
+  ## Breaking Changes
+
+  ### sinopia plugins
+
+  - `sinopia` fallback support is removed, but can be restored using `pluginPrefix`
+
+  ### plugin filter
+
+  - method rename `filter_metadata`->`filterMetadata`
+
+  ### Plugin constructor does not merge configs anymore https://github.com/verdaccio/verdaccio/issues/928
+
+  The plugin receives as first argument `config`, which represents the config of the plugin. Example:
+
+  ```
+  // config.yaml
+  auth:
+    plugin:
+       foo: 1
+       bar: 2
+
+  export class Plugin<T> {
+    public constructor(config: T, options: PluginOptions) {
+      console.log(config);
+      // {foo:1, bar: 2}
+   }
+  }
+  ```
+
+### Patch Changes
+
+- Updated dependencies [43f32687]
+- Updated dependencies [9fc2e796]
+- Updated dependencies [62c24b63]
+  - @verdaccio/api@6.0.0-6-next.31
+  - @verdaccio/core@6.0.0-6-next.48
+  - @verdaccio/store@6.0.0-6-next.28
+  - @verdaccio/auth@6.0.0-6-next.27
+  - @verdaccio/config@6.0.0-6-next.48
+  - @verdaccio/loaders@6.0.0-6-next.17
+  - verdaccio-audit@11.0.0-6-next.11
+  - @verdaccio/web@6.0.0-6-next.35
+  - @verdaccio/utils@6.0.0-6-next.16
+  - @verdaccio/logger@6.0.0-6-next.16
+  - @verdaccio/middleware@6.0.0-6-next.27
+
 ## 6.0.0-6-next.36
 
 ### Patch Changes

package/build/server.d.ts

@@ -1,9 +1,3 @@
-import { IBasicAuth } from '@verdaccio/auth';
-import { Storage } from '@verdaccio/store';
 import { ConfigYaml } from '@verdaccio/types';
-import { IPlugin } from '@verdaccio/types';
-export interface IPluginMiddleware<T> extends IPlugin<T> {
-    register_middlewares(app: any, auth: IBasicAuth<T>, storage: Storage): void;
-}
 declare const _default: (configHash: ConfigYaml) => Promise<any>;
 export default _default;

package/build/server.js

@@ -45,8 +45,9 @@ function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { de
 
 const debug = (0, _debug.default)('verdaccio:server');
 
-const defineAPI = function (config, storage) {
+const defineAPI = async function (config, storage) {
   const auth = new _auth.Auth(config);
+  await auth.init();
   const app = (0, _express.default)();
   const limiter = new _expressRateLimit.default(config.serverSettings.rateLimit); // run in production mode by default, just in case
   // it shouldn't make any difference anyway
@@ -69,19 +70,20 @@ const defineAPI = function (config, storage) {
 
   if (config._debug) {
     (0, _debug2.default)(app, config.configPath);
-  } // register middleware plugins
-
+  }
 
-  const plugin_params = {
-    config: config,
+  const plugins = await (0, _loaders.asyncLoadPlugin)(config.middlewares, {
+    config,
     logger: _logger.logger
-  };
-  const plugins = (0, _loaders.loadPlugin)(config, config.middlewares, plugin_params, function (plugin) {
-    return plugin.register_middlewares;
+  }, function (plugin) {
+    return typeof plugin.register_middlewares !== 'undefined';
   });
 
-  if (_lodash.default.isEmpty(plugins)) {
-    plugins.push(new _verdaccioAudit.default({ ...config,
+  if (plugins.length === 0) {
+    _logger.logger.info('none middleware plugins has been defined, adding audit middleware by default'); // @ts-ignore
+
+
+    plugins.push(new _verdaccioAudit.default({
       enabled: true,
       strict_ssl: true
     }, {
@@ -98,7 +100,7 @@ const defineAPI = function (config, storage) {
   app.use((0, _api.default)(config, auth, storage)); // For WebUI & WebUI API
 
   if (_lodash.default.get(config, 'web.enable', true)) {
-    app.use((0, _web.default)(config, auth, storage));
+    app.use(await (0, _web.default)(config, auth, storage));
   } else {
     app.get('/', function (req, res, next) {
       next(_core.errorUtils.getNotFound(_core.API_ERROR.WEB_DISABLED));
@@ -131,15 +133,11 @@ const defineAPI = function (config, storage) {
   return app;
 };
 
-var _default = async function _default(configHash) {
+var startServer = async function startServer(configHash) {
   debug('start server');
-  const config = new _config.Config(_lodash.default.cloneDeep(configHash)); // register middleware plugins
+  const config = new _config.Config({ ...configHash
+  }); // register middleware plugins
 
-  const plugin_params = {
-    config: config,
-    logger: _logger.logger
-  };
-  const filters = (0, _loaders.loadPlugin)(config, config.filters || {}, plugin_params, plugin => plugin.filter_metadata);
   debug('loaded filter plugin'); // @ts-ignore
 
   const storage = new _store.Storage(config);
@@ -147,7 +145,7 @@ var _default = async function _default(configHash) {
   try {
     // waits until init calls have been initialized
     debug('storage init start');
-    await storage.init(config, filters);
+    await storage.init(config);
     debug('storage init end');
   } catch (err) {
     _logger.logger.error({
@@ -157,8 +155,8 @@ var _default = async function _default(configHash) {
     throw new Error(err);
   }
 
-  return defineAPI(config, storage);
+  return await defineAPI(config, storage);
 };
 
-exports.default = _default;
+exports.default = startServer;
 //# sourceMappingURL=server.js.map

package/build/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","names":["debug","buildDebug","defineAPI","config","storage","auth","Auth","app","express","limiter","RateLimit","serverSettings","rateLimit","set","process","env","NODE_ENV","use","cors","log","errorReportingMiddleware","req","res","next","setHeader","getUserAgent","user_agent","compression","get","url","_debug","hookDebug","configPath","plugin_params","logger","plugins","loadPlugin","middlewares","plugin","register_middlewares","_","isEmpty","push","AuditMiddleware","enabled","strict_ssl","forEach","apiEndpoint","webMiddleware","errorUtils","getNotFound","API_ERROR","WEB_DISABLED","err","isError","code","statusCode","HTTP_STATUS","NOT_MODIFIED","isFunction","locals","report_error","noop","final","configHash","AppConfig","cloneDeep","filters","filter_metadata","Storage","init","error","msg","Error"],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport express, { Application } from 'express';\nimport RateLimit from 'express-rate-limit';\nimport { HttpError } from 'http-errors';\nimport _ from 'lodash';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth, IBasicAuth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport { API_ERROR, HTTP_STATUS, errorUtils } from '@verdaccio/core';\nimport { loadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport { errorReportingMiddleware, final, log } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { ConfigYaml } from '@verdaccio/types';\nimport { Config as IConfig, IPlugin, IPluginStorageFilter } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\nimport { getUserAgent } from './utils';\n\nexport interface IPluginMiddleware<T> extends IPlugin<T> {\n  register_middlewares(app: any, auth: IBasicAuth<T>, storage: Storage): void;\n}\n\nconst debug = buildDebug('verdaccio:server');\n\nconst defineAPI = function (config: IConfig, storage: Storage): any {\n  const auth: Auth = new Auth(config);\n  const app: Application = express();\n  const limiter = new RateLimit(config.serverSettings.rateLimit);\n  // run in production mode by default, just in case\n  // it shouldn't make any difference anyway\n  app.set('env', process.env.NODE_ENV || 'production');\n  app.use(cors());\n  app.use(limiter);\n\n  // Router setup\n  app.use(log);\n  app.use(errorReportingMiddleware);\n  app.use(function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    res.setHeader('x-powered-by', getUserAgent(config.user_agent));\n    next();\n  });\n\n  app.use(compression());\n\n  app.get(\n    '/favicon.ico',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      req.url = '/-/static/favicon.png';\n      next();\n    }\n  );\n\n  // Hook for tests only\n  if (config._debug) {\n    hookDebug(app, config.configPath);\n  }\n\n  // register middleware plugins\n  const plugin_params = {\n    config: config,\n    logger: logger,\n  };\n\n  const plugins: IPluginMiddleware<IConfig>[] = loadPlugin(\n    config,\n    config.middlewares,\n    plugin_params,\n    function (plugin: IPluginMiddleware<IConfig>) {\n      return plugin.register_middlewares;\n    }\n  );\n\n  if (_.isEmpty(plugins)) {\n    plugins.push(\n      new AuditMiddleware(\n        { ...config, enabled: true, strict_ssl: true },\n        { config, logger: logger }\n      )\n    );\n  }\n\n  plugins.forEach((plugin: IPluginMiddleware<IConfig>) => {\n    plugin.register_middlewares(app, auth, storage);\n  });\n\n  // For  npm request\n  // @ts-ignore\n  app.use(apiEndpoint(config, auth, storage));\n\n  // For WebUI & WebUI API\n  if (_.get(config, 'web.enable', true)) {\n    app.use(webMiddleware(config, auth, storage));\n  } else {\n    app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n      next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n    });\n  }\n\n  // Catch 404\n  app.get('/*', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n    next(errorUtils.getNotFound('resource not found'));\n  });\n\n  app.use(function (\n    err: HttpError,\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer\n  ) {\n    if (_.isError(err)) {\n      if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n        return next();\n      }\n      if (_.isFunction(res.locals.report_error) === false) {\n        // in case of very early error this middleware may not be loaded before error is generated\n        // fixing that\n        errorReportingMiddleware(req, res, _.noop);\n      }\n      res.locals.report_error(err);\n    } else {\n      // Fall to Middleware.final\n      return next(err);\n    }\n  });\n\n  app.use(final);\n\n  return app;\n};\n\nexport default (async function (configHash: ConfigYaml): Promise<any> {\n  debug('start server');\n  const config: IConfig = new AppConfig(_.cloneDeep(configHash) as any);\n  // register middleware plugins\n  const plugin_params = {\n    config: config,\n    logger,\n  };\n  const filters = loadPlugin(\n    config,\n    config.filters || {},\n    plugin_params,\n    (plugin: IPluginStorageFilter<IConfig>) => plugin.filter_metadata\n  );\n  debug('loaded filter plugin');\n  // @ts-ignore\n  const storage: Storage = new Storage(config);\n  try {\n    // waits until init calls have been initialized\n    debug('storage init start');\n    await storage.init(config, filters);\n    debug('storage init end');\n  } catch (err: any) {\n    logger.error({ error: err.msg }, 'storage has failed: @{error}');\n    throw new Error(err);\n  }\n  return defineAPI(config, storage);\n});\n"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AACA;;AACA;;AAEA;;AACA;;AAEA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AAGA;;AAGA;;AACA;;;;AAMA,MAAMA,KAAK,GAAG,IAAAC,cAAA,EAAW,kBAAX,CAAd;;AAEA,MAAMC,SAAS,GAAG,UAAUC,MAAV,EAA2BC,OAA3B,EAAkD;EAClE,MAAMC,IAAU,GAAG,IAAIC,UAAJ,CAASH,MAAT,CAAnB;EACA,MAAMI,GAAgB,GAAG,IAAAC,gBAAA,GAAzB;EACA,MAAMC,OAAO,GAAG,IAAIC,yBAAJ,CAAcP,MAAM,CAACQ,cAAP,CAAsBC,SAApC,CAAhB,CAHkE,CAIlE;EACA;;EACAL,GAAG,CAACM,GAAJ,CAAQ,KAAR,EAAeC,OAAO,CAACC,GAAR,CAAYC,QAAZ,IAAwB,YAAvC;EACAT,GAAG,CAACU,GAAJ,CAAQ,IAAAC,aAAA,GAAR;EACAX,GAAG,CAACU,GAAJ,CAAQR,OAAR,EARkE,CAUlE;;EACAF,GAAG,CAACU,GAAJ,CAAQE,eAAR;EACAZ,GAAG,CAACU,GAAJ,CAAQG,oCAAR;EACAb,GAAG,CAACU,GAAJ,CAAQ,UAAUI,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;IACzFD,GAAG,CAACE,SAAJ,CAAc,cAAd,EAA8B,IAAAC,mBAAA,EAAatB,MAAM,CAACuB,UAApB,CAA9B;IACAH,IAAI;EACL,CAHD;EAKAhB,GAAG,CAACU,GAAJ,CAAQ,IAAAU,oBAAA,GAAR;EAEApB,GAAG,CAACqB,GAAJ,CACE,cADF,EAEE,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;IACjFF,GAAG,CAACQ,GAAJ,GAAU,uBAAV;IACAN,IAAI;EACL,CALH,EApBkE,CA4BlE;;EACA,IAAIpB,MAAM,CAAC2B,MAAX,EAAmB;IACjB,IAAAC,eAAA,EAAUxB,GAAV,EAAeJ,MAAM,CAAC6B,UAAtB;EACD,CA/BiE,CAiClE;;;EACA,MAAMC,aAAa,GAAG;IACpB9B,MAAM,EAAEA,MADY;IAEpB+B,MAAM,EAAEA;EAFY,CAAtB;EAKA,MAAMC,OAAqC,GAAG,IAAAC,mBAAA,EAC5CjC,MAD4C,EAE5CA,MAAM,CAACkC,WAFqC,EAG5CJ,aAH4C,EAI5C,UAAUK,MAAV,EAA8C;IAC5C,OAAOA,MAAM,CAACC,oBAAd;EACD,CAN2C,CAA9C;;EASA,IAAIC,eAAA,CAAEC,OAAF,CAAUN,OAAV,CAAJ,EAAwB;IACtBA,OAAO,CAACO,IAAR,CACE,IAAIC,uBAAJ,CACE,EAAE,GAAGxC,MAAL;MAAayC,OAAO,EAAE,IAAtB;MAA4BC,UAAU,EAAE;IAAxC,CADF,EAEE;MAAE1C,MAAF;MAAU+B,MAAM,EAAEA;IAAlB,CAFF,CADF;EAMD;;EAEDC,OAAO,CAACW,OAAR,CAAiBR,MAAD,IAAwC;IACtDA,MAAM,CAACC,oBAAP,CAA4BhC,GAA5B,EAAiCF,IAAjC,EAAuCD,OAAvC;EACD,CAFD,EAzDkE,CA6DlE;EACA;;EACAG,GAAG,CAACU,GAAJ,CAAQ,IAAA8B,YAAA,EAAY5C,MAAZ,EAAoBE,IAApB,EAA0BD,OAA1B,CAAR,EA/DkE,CAiElE;;EACA,IAAIoC,eAAA,CAAEZ,GAAF,CAAMzB,MAAN,EAAc,YAAd,EAA4B,IAA5B,CAAJ,EAAuC;IACrCI,GAAG,CAACU,GAAJ,CAAQ,IAAA+B,YAAA,EAAc7C,MAAd,EAAsBE,IAAtB,EAA4BD,OAA5B,CAAR;EACD,CAFD,MAEO;IACLG,GAAG,CAACqB,GAAJ,CAAQ,GAAR,EAAa,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;MACxFA,IAAI,CAAC0B,gBAAA,CAAWC,WAAX,CAAuBC,eAAA,CAAUC,YAAjC,CAAD,CAAJ;IACD,CAFD;EAGD,CAxEiE,CA0ElE;;;EACA7C,GAAG,CAACqB,GAAJ,CAAQ,IAAR,EAAc,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;IACzFA,IAAI,CAAC0B,gBAAA,CAAWC,WAAX,CAAuB,oBAAvB,CAAD,CAAJ;EACD,CAFD;EAIA3C,GAAG,CAACU,GAAJ,CAAQ,UACNoC,GADM,EAENhC,GAFM,EAGNC,GAHM,EAINC,IAJM,EAKN;IACA,IAAIiB,eAAA,CAAEc,OAAF,CAAUD,GAAV,CAAJ,EAAoB;MAClB,IAAIA,GAAG,CAACE,IAAJ,KAAa,YAAb,IAA6BjC,GAAG,CAACkC,UAAJ,KAAmBC,iBAAA,CAAYC,YAAhE,EAA8E;QAC5E,OAAOnC,IAAI,EAAX;MACD;;MACD,IAAIiB,eAAA,CAAEmB,UAAF,CAAarC,GAAG,CAACsC,MAAJ,CAAWC,YAAxB,MAA0C,KAA9C,EAAqD;QACnD;QACA;QACA,IAAAzC,oCAAA,EAAyBC,GAAzB,EAA8BC,GAA9B,EAAmCkB,eAAA,CAAEsB,IAArC;MACD;;MACDxC,GAAG,CAACsC,MAAJ,CAAWC,YAAX,CAAwBR,GAAxB;IACD,CAVD,MAUO;MACL;MACA,OAAO9B,IAAI,CAAC8B,GAAD,CAAX;IACD;EACF,CApBD;EAsBA9C,GAAG,CAACU,GAAJ,CAAQ8C,iBAAR;EAEA,OAAOxD,GAAP;AACD,CAxGD;;eA0GgB,wBAAgByD,UAAhB,EAAsD;EACpEhE,KAAK,CAAC,cAAD,CAAL;EACA,MAAMG,MAAe,GAAG,IAAI8D,cAAJ,CAAczB,eAAA,CAAE0B,SAAF,CAAYF,UAAZ,CAAd,CAAxB,CAFoE,CAGpE;;EACA,MAAM/B,aAAa,GAAG;IACpB9B,MAAM,EAAEA,MADY;IAEpB+B,MAAM,EAANA;EAFoB,CAAtB;EAIA,MAAMiC,OAAO,GAAG,IAAA/B,mBAAA,EACdjC,MADc,EAEdA,MAAM,CAACgE,OAAP,IAAkB,EAFJ,EAGdlC,aAHc,EAIbK,MAAD,IAA2CA,MAAM,CAAC8B,eAJpC,CAAhB;EAMApE,KAAK,CAAC,sBAAD,CAAL,CAdoE,CAepE;;EACA,MAAMI,OAAgB,GAAG,IAAIiE,cAAJ,CAAYlE,MAAZ,CAAzB;;EACA,IAAI;IACF;IACAH,KAAK,CAAC,oBAAD,CAAL;IACA,MAAMI,OAAO,CAACkE,IAAR,CAAanE,MAAb,EAAqBgE,OAArB,CAAN;IACAnE,KAAK,CAAC,kBAAD,CAAL;EACD,CALD,CAKE,OAAOqD,GAAP,EAAiB;IACjBnB,cAAA,CAAOqC,KAAP,CAAa;MAAEA,KAAK,EAAElB,GAAG,CAACmB;IAAb,CAAb,EAAiC,8BAAjC;;IACA,MAAM,IAAIC,KAAJ,CAAUpB,GAAV,CAAN;EACD;;EACD,OAAOnD,SAAS,CAACC,MAAD,EAASC,OAAT,CAAhB;AACD,C"}
+{"version":3,"file":"server.js","names":["debug","buildDebug","defineAPI","config","storage","auth","Auth","init","app","express","limiter","RateLimit","serverSettings","rateLimit","set","process","env","NODE_ENV","use","cors","log","errorReportingMiddleware","req","res","next","setHeader","getUserAgent","user_agent","compression","get","url","_debug","hookDebug","configPath","plugins","asyncLoadPlugin","middlewares","logger","plugin","register_middlewares","length","info","push","AuditMiddleware","enabled","strict_ssl","forEach","apiEndpoint","_","webMiddleware","errorUtils","getNotFound","API_ERROR","WEB_DISABLED","err","isError","code","statusCode","HTTP_STATUS","NOT_MODIFIED","isFunction","locals","report_error","noop","final","startServer","configHash","AppConfig","Storage","error","msg","Error"],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport express from 'express';\nimport RateLimit from 'express-rate-limit';\nimport { HttpError } from 'http-errors';\nimport _ from 'lodash';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport { API_ERROR, HTTP_STATUS, errorUtils, pluginUtils } from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport { errorReportingMiddleware, final, log } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { ConfigYaml } from '@verdaccio/types';\nimport { Config as IConfig } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\nimport { getUserAgent } from './utils';\n\nconst debug = buildDebug('verdaccio:server');\n\nconst defineAPI = async function (config: IConfig, storage: Storage): Promise<any> {\n  const auth: Auth = new Auth(config);\n  await auth.init();\n  const app = express();\n  const limiter = new RateLimit(config.serverSettings.rateLimit);\n  // run in production mode by default, just in case\n  // it shouldn't make any difference anyway\n  app.set('env', process.env.NODE_ENV || 'production');\n  app.use(cors());\n  app.use(limiter);\n\n  // Router setup\n  app.use(log);\n  app.use(errorReportingMiddleware);\n  app.use(function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    res.setHeader('x-powered-by', getUserAgent(config.user_agent));\n    next();\n  });\n\n  app.use(compression());\n\n  app.get(\n    '/favicon.ico',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      req.url = '/-/static/favicon.png';\n      next();\n    }\n  );\n\n  // Hook for tests only\n  if (config._debug) {\n    hookDebug(app, config.configPath);\n  }\n\n  const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(\n    config.middlewares,\n    {\n      config,\n      logger,\n    },\n    function (plugin) {\n      return typeof plugin.register_middlewares !== 'undefined';\n    }\n  );\n\n  if (plugins.length === 0) {\n    logger.info('none middleware plugins has been defined, adding audit middleware by default');\n    // @ts-ignore\n    plugins.push(new AuditMiddleware({ enabled: true, strict_ssl: true }, { config, logger }));\n  }\n\n  plugins.forEach((plugin: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>) => {\n    plugin.register_middlewares(app, auth, storage);\n  });\n\n  // For  npm request\n  // @ts-ignore\n  app.use(apiEndpoint(config, auth, storage));\n\n  // For WebUI & WebUI API\n  if (_.get(config, 'web.enable', true)) {\n    app.use(await webMiddleware(config, auth, storage));\n  } else {\n    app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n      next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n    });\n  }\n\n  // Catch 404\n  app.get('/*', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n    next(errorUtils.getNotFound('resource not found'));\n  });\n\n  app.use(function (\n    err: HttpError,\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer\n  ) {\n    if (_.isError(err)) {\n      if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n        return next();\n      }\n      if (_.isFunction(res.locals.report_error) === false) {\n        // in case of very early error this middleware may not be loaded before error is generated\n        // fixing that\n        errorReportingMiddleware(req, res, _.noop);\n      }\n      res.locals.report_error(err);\n    } else {\n      // Fall to Middleware.final\n      return next(err);\n    }\n  });\n\n  app.use(final);\n\n  return app;\n};\n\nexport default (async function startServer(configHash: ConfigYaml): Promise<any> {\n  debug('start server');\n  const config: IConfig = new AppConfig({ ...configHash } as any);\n  // register middleware plugins\n  debug('loaded filter plugin');\n  // @ts-ignore\n  const storage: Storage = new Storage(config);\n  try {\n    // waits until init calls have been initialized\n    debug('storage init start');\n    await storage.init(config);\n    debug('storage init end');\n  } catch (err: any) {\n    logger.error({ error: err.msg }, 'storage has failed: @{error}');\n    throw new Error(err);\n  }\n  return await defineAPI(config, storage);\n});\n"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AACA;;AACA;;AAEA;;AACA;;AAEA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AAGA;;AAGA;;AACA;;;;AAEA,MAAMA,KAAK,GAAG,IAAAC,cAAA,EAAW,kBAAX,CAAd;;AAEA,MAAMC,SAAS,GAAG,gBAAgBC,MAAhB,EAAiCC,OAAjC,EAAiE;EACjF,MAAMC,IAAU,GAAG,IAAIC,UAAJ,CAASH,MAAT,CAAnB;EACA,MAAME,IAAI,CAACE,IAAL,EAAN;EACA,MAAMC,GAAG,GAAG,IAAAC,gBAAA,GAAZ;EACA,MAAMC,OAAO,GAAG,IAAIC,yBAAJ,CAAcR,MAAM,CAACS,cAAP,CAAsBC,SAApC,CAAhB,CAJiF,CAKjF;EACA;;EACAL,GAAG,CAACM,GAAJ,CAAQ,KAAR,EAAeC,OAAO,CAACC,GAAR,CAAYC,QAAZ,IAAwB,YAAvC;EACAT,GAAG,CAACU,GAAJ,CAAQ,IAAAC,aAAA,GAAR;EACAX,GAAG,CAACU,GAAJ,CAAQR,OAAR,EATiF,CAWjF;;EACAF,GAAG,CAACU,GAAJ,CAAQE,eAAR;EACAZ,GAAG,CAACU,GAAJ,CAAQG,oCAAR;EACAb,GAAG,CAACU,GAAJ,CAAQ,UAAUI,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;IACzFD,GAAG,CAACE,SAAJ,CAAc,cAAd,EAA8B,IAAAC,mBAAA,EAAavB,MAAM,CAACwB,UAApB,CAA9B;IACAH,IAAI;EACL,CAHD;EAKAhB,GAAG,CAACU,GAAJ,CAAQ,IAAAU,oBAAA,GAAR;EAEApB,GAAG,CAACqB,GAAJ,CACE,cADF,EAEE,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;IACjFF,GAAG,CAACQ,GAAJ,GAAU,uBAAV;IACAN,IAAI;EACL,CALH,EArBiF,CA6BjF;;EACA,IAAIrB,MAAM,CAAC4B,MAAX,EAAmB;IACjB,IAAAC,eAAA,EAAUxB,GAAV,EAAeL,MAAM,CAAC8B,UAAtB;EACD;;EAED,MAAMC,OAA2D,GAAG,MAAM,IAAAC,wBAAA,EACxEhC,MAAM,CAACiC,WADiE,EAExE;IACEjC,MADF;IAEEkC,MAAM,EAANA;EAFF,CAFwE,EAMxE,UAAUC,MAAV,EAAkB;IAChB,OAAO,OAAOA,MAAM,CAACC,oBAAd,KAAuC,WAA9C;EACD,CARuE,CAA1E;;EAWA,IAAIL,OAAO,CAACM,MAAR,KAAmB,CAAvB,EAA0B;IACxBH,cAAA,CAAOI,IAAP,CAAY,8EAAZ,EADwB,CAExB;;;IACAP,OAAO,CAACQ,IAAR,CAAa,IAAIC,uBAAJ,CAAoB;MAAEC,OAAO,EAAE,IAAX;MAAiBC,UAAU,EAAE;IAA7B,CAApB,EAAyD;MAAE1C,MAAF;MAAUkC,MAAM,EAANA;IAAV,CAAzD,CAAb;EACD;;EAEDH,OAAO,CAACY,OAAR,CAAiBR,MAAD,IAA8D;IAC5EA,MAAM,CAACC,oBAAP,CAA4B/B,GAA5B,EAAiCH,IAAjC,EAAuCD,OAAvC;EACD,CAFD,EAnDiF,CAuDjF;EACA;;EACAI,GAAG,CAACU,GAAJ,CAAQ,IAAA6B,YAAA,EAAY5C,MAAZ,EAAoBE,IAApB,EAA0BD,OAA1B,CAAR,EAzDiF,CA2DjF;;EACA,IAAI4C,eAAA,CAAEnB,GAAF,CAAM1B,MAAN,EAAc,YAAd,EAA4B,IAA5B,CAAJ,EAAuC;IACrCK,GAAG,CAACU,GAAJ,CAAQ,MAAM,IAAA+B,YAAA,EAAc9C,MAAd,EAAsBE,IAAtB,EAA4BD,OAA5B,CAAd;EACD,CAFD,MAEO;IACLI,GAAG,CAACqB,GAAJ,CAAQ,GAAR,EAAa,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;MACxFA,IAAI,CAAC0B,gBAAA,CAAWC,WAAX,CAAuBC,eAAA,CAAUC,YAAjC,CAAD,CAAJ;IACD,CAFD;EAGD,CAlEgF,CAoEjF;;;EACA7C,GAAG,CAACqB,GAAJ,CAAQ,IAAR,EAAc,UAAUP,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;IACzFA,IAAI,CAAC0B,gBAAA,CAAWC,WAAX,CAAuB,oBAAvB,CAAD,CAAJ;EACD,CAFD;EAIA3C,GAAG,CAACU,GAAJ,CAAQ,UACNoC,GADM,EAENhC,GAFM,EAGNC,GAHM,EAINC,IAJM,EAKN;IACA,IAAIwB,eAAA,CAAEO,OAAF,CAAUD,GAAV,CAAJ,EAAoB;MAClB,IAAIA,GAAG,CAACE,IAAJ,KAAa,YAAb,IAA6BjC,GAAG,CAACkC,UAAJ,KAAmBC,iBAAA,CAAYC,YAAhE,EAA8E;QAC5E,OAAOnC,IAAI,EAAX;MACD;;MACD,IAAIwB,eAAA,CAAEY,UAAF,CAAarC,GAAG,CAACsC,MAAJ,CAAWC,YAAxB,MAA0C,KAA9C,EAAqD;QACnD;QACA;QACA,IAAAzC,oCAAA,EAAyBC,GAAzB,EAA8BC,GAA9B,EAAmCyB,eAAA,CAAEe,IAArC;MACD;;MACDxC,GAAG,CAACsC,MAAJ,CAAWC,YAAX,CAAwBR,GAAxB;IACD,CAVD,MAUO;MACL;MACA,OAAO9B,IAAI,CAAC8B,GAAD,CAAX;IACD;EACF,CApBD;EAsBA9C,GAAG,CAACU,GAAJ,CAAQ8C,iBAAR;EAEA,OAAOxD,GAAP;AACD,CAlGD;;IAoG+ByD,W,GAAf,eAAeA,WAAf,CAA2BC,UAA3B,EAAiE;EAC/ElE,KAAK,CAAC,cAAD,CAAL;EACA,MAAMG,MAAe,GAAG,IAAIgE,cAAJ,CAAc,EAAE,GAAGD;EAAL,CAAd,CAAxB,CAF+E,CAG/E;;EACAlE,KAAK,CAAC,sBAAD,CAAL,CAJ+E,CAK/E;;EACA,MAAMI,OAAgB,GAAG,IAAIgE,cAAJ,CAAYjE,MAAZ,CAAzB;;EACA,IAAI;IACF;IACAH,KAAK,CAAC,oBAAD,CAAL;IACA,MAAMI,OAAO,CAACG,IAAR,CAAaJ,MAAb,CAAN;IACAH,KAAK,CAAC,kBAAD,CAAL;EACD,CALD,CAKE,OAAOsD,GAAP,EAAiB;IACjBjB,cAAA,CAAOgC,KAAP,CAAa;MAAEA,KAAK,EAAEf,GAAG,CAACgB;IAAb,CAAb,EAAiC,8BAAjC;;IACA,MAAM,IAAIC,KAAJ,CAAUjB,GAAV,CAAN;EACD;;EACD,OAAO,MAAMpD,SAAS,CAACC,MAAD,EAASC,OAAT,CAAtB;AACD,C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server",
-  "version": "6.0.0-6-next.36",
+  "version": "6.0.0-6-next.38",
   "description": "server logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -30,17 +30,17 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "@verdaccio/api": "6.0.0-6-next.30",
-    "@verdaccio/auth": "6.0.0-6-next.26",
-    "@verdaccio/core": "6.0.0-6-next.47",
-    "@verdaccio/config": "6.0.0-6-next.47",
-    "@verdaccio/loaders": "6.0.0-6-next.16",
-    "@verdaccio/logger": "6.0.0-6-next.15",
-    "@verdaccio/middleware": "6.0.0-6-next.26",
-    "@verdaccio/store": "6.0.0-6-next.27",
-    "@verdaccio/utils": "6.0.0-6-next.15",
-    "@verdaccio/web": "6.0.0-6-next.34",
-    "verdaccio-audit": "11.0.0-6-next.10",
+    "@verdaccio/api": "6.0.0-6-next.32",
+    "@verdaccio/auth": "6.0.0-6-next.28",
+    "@verdaccio/core": "6.0.0-6-next.49",
+    "@verdaccio/config": "6.0.0-6-next.49",
+    "@verdaccio/loaders": "6.0.0-6-next.18",
+    "@verdaccio/logger": "6.0.0-6-next.17",
+    "@verdaccio/middleware": "6.0.0-6-next.28",
+    "@verdaccio/store": "6.0.0-6-next.29",
+    "@verdaccio/utils": "6.0.0-6-next.17",
+    "@verdaccio/web": "6.0.0-6-next.36",
+    "verdaccio-audit": "11.0.0-6-next.12",
     "compression": "1.7.4",
     "cors": "2.8.5",
     "debug": "4.3.4",
@@ -49,9 +49,9 @@
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@types/node": "16.11.56",
-    "@verdaccio/proxy": "6.0.0-6-next.25",
-    "@verdaccio/test-helper": "1.1.0-6-next.4",
+    "@types/node": "16.11.62",
+    "@verdaccio/proxy": "6.0.0-6-next.27",
+    "@verdaccio/test-helper": "2.0.0-6-next.6",
     "http-errors": "1.8.1"
   },
   "funding": {

package/src/server.ts

@@ -1,37 +1,34 @@
 import compression from 'compression';
 import cors from 'cors';
 import buildDebug from 'debug';
-import express, { Application } from 'express';
+import express from 'express';
 import RateLimit from 'express-rate-limit';
 import { HttpError } from 'http-errors';
 import _ from 'lodash';
 import AuditMiddleware from 'verdaccio-audit';
 
 import apiEndpoint from '@verdaccio/api';
-import { Auth, IBasicAuth } from '@verdaccio/auth';
+import { Auth } from '@verdaccio/auth';
 import { Config as AppConfig } from '@verdaccio/config';
-import { API_ERROR, HTTP_STATUS, errorUtils } from '@verdaccio/core';
-import { loadPlugin } from '@verdaccio/loaders';
+import { API_ERROR, HTTP_STATUS, errorUtils, pluginUtils } from '@verdaccio/core';
+import { asyncLoadPlugin } from '@verdaccio/loaders';
 import { logger } from '@verdaccio/logger';
 import { errorReportingMiddleware, final, log } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { ConfigYaml } from '@verdaccio/types';
-import { Config as IConfig, IPlugin, IPluginStorageFilter } from '@verdaccio/types';
+import { Config as IConfig } from '@verdaccio/types';
 import webMiddleware from '@verdaccio/web';
 
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
 import hookDebug from './debug';
 import { getUserAgent } from './utils';
 
-export interface IPluginMiddleware<T> extends IPlugin<T> {
-  register_middlewares(app: any, auth: IBasicAuth<T>, storage: Storage): void;
-}
-
 const debug = buildDebug('verdaccio:server');
 
-const defineAPI = function (config: IConfig, storage: Storage): any {
+const defineAPI = async function (config: IConfig, storage: Storage): Promise<any> {
   const auth: Auth = new Auth(config);
-  const app: Application = express();
+  await auth.init();
+  const app = express();
   const limiter = new RateLimit(config.serverSettings.rateLimit);
   // run in production mode by default, just in case
   // it shouldn't make any difference anyway
@@ -62,31 +59,24 @@ const defineAPI = function (config: IConfig, storage: Storage): any {
     hookDebug(app, config.configPath);
   }
 
-  // register middleware plugins
-  const plugin_params = {
-    config: config,
-    logger: logger,
-  };
-
-  const plugins: IPluginMiddleware<IConfig>[] = loadPlugin(
-    config,
+  const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(
     config.middlewares,
-    plugin_params,
-    function (plugin: IPluginMiddleware<IConfig>) {
-      return plugin.register_middlewares;
+    {
+      config,
+      logger,
+    },
+    function (plugin) {
+      return typeof plugin.register_middlewares !== 'undefined';
     }
   );
 
-  if (_.isEmpty(plugins)) {
-    plugins.push(
-      new AuditMiddleware(
-        { ...config, enabled: true, strict_ssl: true },
-        { config, logger: logger }
-      )
-    );
+  if (plugins.length === 0) {
+    logger.info('none middleware plugins has been defined, adding audit middleware by default');
+    // @ts-ignore
+    plugins.push(new AuditMiddleware({ enabled: true, strict_ssl: true }, { config, logger }));
   }
 
-  plugins.forEach((plugin: IPluginMiddleware<IConfig>) => {
+  plugins.forEach((plugin: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>) => {
     plugin.register_middlewares(app, auth, storage);
   });
 
@@ -96,7 +86,7 @@ const defineAPI = function (config: IConfig, storage: Storage): any {
 
   // For WebUI & WebUI API
   if (_.get(config, 'web.enable', true)) {
-    app.use(webMiddleware(config, auth, storage));
+    app.use(await webMiddleware(config, auth, storage));
   } else {
     app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
       next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));
@@ -135,31 +125,21 @@ const defineAPI = function (config: IConfig, storage: Storage): any {
   return app;
 };
 
-export default (async function (configHash: ConfigYaml): Promise<any> {
+export default (async function startServer(configHash: ConfigYaml): Promise<any> {
   debug('start server');
-  const config: IConfig = new AppConfig(_.cloneDeep(configHash) as any);
+  const config: IConfig = new AppConfig({ ...configHash } as any);
   // register middleware plugins
-  const plugin_params = {
-    config: config,
-    logger,
-  };
-  const filters = loadPlugin(
-    config,
-    config.filters || {},
-    plugin_params,
-    (plugin: IPluginStorageFilter<IConfig>) => plugin.filter_metadata
-  );
   debug('loaded filter plugin');
   // @ts-ignore
   const storage: Storage = new Storage(config);
   try {
     // waits until init calls have been initialized
     debug('storage init start');
-    await storage.init(config, filters);
+    await storage.init(config);
     debug('storage init end');
   } catch (err: any) {
     logger.error({ error: err.msg }, 'storage has failed: @{error}');
     throw new Error(err);
   }
-  return defineAPI(config, storage);
+  return await defineAPI(config, storage);
 });

package/tsconfig.json

@@ -16,9 +16,6 @@
     {
       "path": "../../config"
     },
-    {
-      "path": "../../core/commons-api"
-    },
     {
       "path": "../../loaders"
     },
@@ -28,9 +25,6 @@
     {
       "path": "../../middleware"
     },
-    {
-      "path": "../../mock"
-    },
     {
       "path": "../../plugins/audit"
     },