@verdaccio/server 8.0.0-next-8.11 → 8.0.0-next-8.13

package/partials/store/htpasswd

@@ -1,4 +0,0 @@
-JotaJWT:$6V.OzhCA9jFk:autocreated 2020-01-05T19:30:24.861Z
-userTest2000:$6JZevb9Sewsg:autocreated 2020-01-05T19:30:24.901Z
-userTest2001:$6V.OzhCA9jFk:autocreated 2020-01-05T19:30:24.924Z
-userTest2002:$6V.OzhCA9jFk:autocreated 2020-01-05T19:30:24.942Z

package/src/debug/index.ts

@@ -1,24 +0,0 @@
-import { Application } from 'express';
-
-import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../../types/custom';
-
-export default (app: Application, configPath?: string): void => {
-  // Hook for tests only
-  app.get(
-    '/-/_debug',
-    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
-      if (global.gc) {
-        global.gc();
-      }
-
-      next({
-        pid: process.pid,
-        // @ts-ignore
-        main: process.main,
-        conf: configPath,
-        mem: process.memoryUsage(),
-        gc: global.gc,
-      });
-    }
-  );
-};

package/src/env.ts

@@ -1,8 +0,0 @@
-// const path = require('path');
-//
-// const APP_ROOT = path.resolve(__dirname, '../../');
-//
-// module.exports = {
-//   APP_ROOT,
-//   SRC_ROOT: path.resolve(APP_ROOT, 'src/')
-// };

package/src/index.ts

@@ -1 +0,0 @@
-export { default, startServer } from './server';

package/src/server.ts

@@ -1,169 +0,0 @@
-import compression from 'compression';
-import cors from 'cors';
-import buildDebug from 'debug';
-import express, { Express } from 'express';
-import _ from 'lodash';
-import AuditMiddleware from 'verdaccio-audit';
-
-import apiEndpoint from '@verdaccio/api';
-import { Auth } from '@verdaccio/auth';
-import { Config as AppConfig } from '@verdaccio/config';
-import { API_ERROR, PLUGIN_CATEGORY, errorUtils, pluginUtils } from '@verdaccio/core';
-import { asyncLoadPlugin } from '@verdaccio/loaders';
-import { logger } from '@verdaccio/logger';
-import {
-  errorReportingMiddleware,
-  final,
-  handleError,
-  log,
-  rateLimit,
-  userAgent,
-} from '@verdaccio/middleware';
-import { Storage } from '@verdaccio/store';
-import { ConfigYaml } from '@verdaccio/types';
-import { Config as IConfig } from '@verdaccio/types';
-import webMiddleware from '@verdaccio/web';
-
-import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
-import hookDebug from './debug';
-
-const debug = buildDebug('verdaccio:server');
-const { version } = require('../package.json');
-
-const defineAPI = async function (config: IConfig, storage: Storage): Promise<Express> {
-  const auth: Auth = new Auth(config, logger);
-  await auth.init();
-  const app = express();
-  // run in production mode by default, just in case
-  // it shouldn't make any difference anyway
-  app.set('env', process.env.NODE_ENV || 'production');
-  if (config.server?.trustProxy) {
-    app.set('trust proxy', config.server.trustProxy);
-  }
-  app.use(cors());
-  app.use(rateLimit(config.serverSettings.rateLimit));
-
-  const errorReportingMiddlewareWrap = errorReportingMiddleware(logger);
-
-  // Router setup
-  app.use(log(logger));
-  app.use(errorReportingMiddlewareWrap);
-  app.use(userAgent(config));
-  app.use(compression());
-
-  app.get(
-    '/favicon.ico',
-    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
-      req.url = '/-/static/favicon.ico';
-      next();
-    }
-  );
-
-  // Hook for tests only
-  if (config._debug) {
-    hookDebug(app, config.configPath);
-  }
-
-  const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(
-    config.middlewares,
-    {
-      config,
-      logger,
-    },
-    function (plugin) {
-      return typeof plugin.register_middlewares !== 'undefined';
-    },
-    config?.serverSettings?.pluginPrefix ?? 'verdaccio',
-    PLUGIN_CATEGORY.MIDDLEWARE
-  );
-
-  if (plugins.length === 0) {
-    const auditPlugin = new AuditMiddleware(
-      { enabled: true, strict_ssl: true },
-      { config, logger }
-    );
-    logger.info(
-      { name: 'verdaccio-audit', pluginCategory: PLUGIN_CATEGORY.MIDDLEWARE },
-      'plugin @{name} successfully loaded (@{pluginCategory})'
-    );
-    plugins.push(auditPlugin);
-  }
-
-  plugins.forEach((plugin: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>) => {
-    plugin.register_middlewares(app, auth, storage);
-  });
-
-  // For  npm request
-  // @ts-ignore
-  app.use(apiEndpoint(config, auth, storage, logger));
-
-  // For WebUI & WebUI API
-  if (_.get(config, 'web.enable', true)) {
-    app.use((_req, res, next) => {
-      res.locals.app_version = version ?? '';
-      next();
-    });
-    const middleware = await webMiddleware(config, auth, storage, logger);
-    app.use(middleware);
-  } else {
-    app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
-      next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));
-    });
-  }
-
-  // Catch 404
-  app.get('/*', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
-    next(errorUtils.getNotFound('resource not found'));
-  });
-
-  // @ts-ignore
-  app.use(handleError(logger));
-
-  // app.use(function (
-  //   err: HttpError,
-  //   req: $RequestExtend,
-  //   res: $ResponseExtend,
-  //   next: $NextFunctionVer
-  // ) {
-  //   if (_.isError(err)) {
-  //     if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {
-  //       return next();
-  //     }
-  //     if (_.isFunction(res.locals.report_error) === false) {
-  //       // in case of very early error this middleware may not be loaded before error is generated
-  //       // fixing that
-  //       errorReportingMiddlewareWrap(req, res, _.noop);
-  //     }
-  //     res.locals.report_error(err);
-  //   } else {
-  //     // Fall to Middleware.final
-  //     return next(err);
-  //   }
-  // });
-
-  app.use(final);
-
-  return app;
-};
-
-const startServer = async function startServer(configHash: ConfigYaml): Promise<Express> {
-  debug('start server');
-  const config: IConfig = new AppConfig({ ...configHash } as any);
-  // register middleware plugins
-  debug('loaded filter plugin');
-  // @ts-ignore
-  const storage: Storage = new Storage(config, logger);
-  try {
-    // waits until init calls have been initialized
-    debug('storage init start');
-    await storage.init(config);
-    debug('storage init end');
-  } catch (err: any) {
-    logger.error({ error: err.msg }, 'storage has failed: @{error}');
-    throw new Error(err);
-  }
-  return await defineAPI(config, storage);
-};
-
-export { startServer };
-export default startServer;

package/test/_helper.ts

@@ -1,29 +0,0 @@
-import { Application } from 'express';
-import path from 'path';
-
-import { parseConfigFile } from '@verdaccio/config';
-import { fileUtils } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-import { generateRandomHexString } from '@verdaccio/utils';
-
-import apiMiddleware from '../src';
-
-export const getConf = async (conf) => {
-  const configPath = path.join(__dirname, 'config', conf);
-  const config = parseConfigFile(configPath);
-  // generate and create storage folder
-  const storage = await fileUtils.createTempFolder('config');
-  config.storage = storage;
-  // custom config to avoid conflict with other tests
-  config.auth.htpasswd.file = path.join(
-    storage,
-    `${config.auth.htpasswd.file}-${generateRandomHexString()}`
-  );
-  return config;
-};
-
-export async function initializeServer(configName): Promise<Application> {
-  const config = await getConf(configName);
-  setup(config.log ?? {});
-  return apiMiddleware(config);
-}

package/test/config/conf.yaml

@@ -1,28 +0,0 @@
-# storage: this is generated on _helper file
-
-auth:
-  htpasswd:
-    file: ./htpasswd-package
-
-web:
-  enable: true
-  title: verdaccio
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: none
-  '**':
-    access: $all
-    publish: $all
-    unpublish: none
-
-_debug: true

package/test/config/no_debug.yaml

@@ -1,26 +0,0 @@
-# storage: this is generated on _helper file
-
-auth:
-  htpasswd:
-    file: ./htpasswd-package
-
-web:
-  enable: true
-  title: verdaccio
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: none
-  '**':
-    access: $all
-    publish: $all
-    unpublish: none

package/test/config/powered-custom.yaml

@@ -1,29 +0,0 @@
-# storage: this is generated on _helper file
-
-auth:
-  htpasswd:
-    file: ./htpasswd-package
-
-web:
-  enable: true
-
-user_agent: 'custom user agent'
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: none
-  '**':
-    access: $all
-    publish: $all
-    unpublish: none
-
-_debug: true

package/test/config/powered-disabled.yaml

@@ -1,29 +0,0 @@
-# storage: this is generated on _helper file
-
-auth:
-  htpasswd:
-    file: ./htpasswd-package
-
-web:
-  enable: true
-
-user_agent: false
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: none
-  '**':
-    access: $all
-    publish: $all
-    unpublish: none
-
-_debug: true

package/test/config/web-disabled.yaml

@@ -1,27 +0,0 @@
-# storage: this is generated on _helper file
-
-auth:
-  htpasswd:
-    file: ./htpasswd-package
-
-web:
-  enable: false
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $all
-    publish: $all
-    unpublish: none
-  '**':
-    access: $all
-    publish: $all
-    unpublish: none
-
-_debug: true

package/test/server.spec.ts

@@ -1,119 +0,0 @@
-import supertest from 'supertest';
-import { describe, expect, test } from 'vitest';
-
-import { API_ERROR, HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-
-import { initializeServer } from './_helper';
-
-setup({});
-
-describe('server api', () => {
-  test('should request any package', async () => {
-    const app = await initializeServer('conf.yaml');
-    await supertest(app)
-      .get('/jquery')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.NOT_FOUND);
-  });
-
-  test('should able to catch non defined routes with 404', async () => {
-    const app = await initializeServer('conf.yaml');
-    await supertest(app)
-      .get('/-/this-does-not-exist-anywhere')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.NOT_FOUND);
-  });
-
-  test('should return index page if web is enabled', async () => {
-    const app = await initializeServer('conf.yaml');
-    const response = await supertest(app)
-      .get('/')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-      .expect(HEADER_TYPE.CONTENT_ENCODING, HEADERS.GZIP)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch('<title>verdaccio</title>');
-  });
-
-  test('should define rate limit headers', async () => {
-    const app = await initializeServer('conf.yaml');
-    await supertest(app)
-      .get('/')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-      .expect(HEADERS.RATELIMIT_LIMIT, '10000')
-      .expect(HEADERS.RATELIMIT_REMAINING, '9999')
-      .expect(HTTP_STATUS.OK);
-  });
-
-  test('should contains cors headers', async () => {
-    const app = await initializeServer('conf.yaml');
-    await supertest(app).get('/').expect('access-control-allow-origin', '*').expect(HTTP_STATUS.OK);
-  });
-
-  test('should contains etag', async () => {
-    const app = await initializeServer('conf.yaml');
-    const response = await supertest(app)
-      .get('/')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-      .expect(HTTP_STATUS.OK);
-    const etag = response.get(HEADERS.ETAG);
-    expect(typeof etag === 'string').toBeTruthy();
-  });
-
-  test('should be hidden by default', async () => {
-    const app = await initializeServer('conf.yaml');
-    const response = await supertest(app)
-      .get('/')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-      .expect(HTTP_STATUS.OK);
-    const powered = response.get(HEADERS.POWERED_BY);
-    expect(powered).toMatch('hidden');
-  }, 40000);
-
-  test('should not contains powered header', async () => {
-    const app = await initializeServer('powered-disabled.yaml');
-    const response = await supertest(app)
-      .get('/')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-      .expect(HTTP_STATUS.OK);
-    const powered = response.get(HEADERS.POWERED_BY);
-    expect(powered).toEqual('hidden');
-  });
-
-  test('should contains custom powered header', async () => {
-    const app = await initializeServer('powered-custom.yaml');
-    const response = await supertest(app)
-      .get('/')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-      .expect(HTTP_STATUS.OK);
-    const powered = response.get(HEADERS.POWERED_BY);
-    expect(powered).toEqual('custom user agent');
-  });
-
-  test('should return 404 if web is disabled', async () => {
-    const app = await initializeServer('web-disabled.yaml');
-    const response = await supertest(app)
-      .get('/')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.NOT_FOUND);
-    expect(response.body.error).toEqual(API_ERROR.WEB_DISABLED);
-  });
-
-  test('should not display debug hook disabled by default', async () => {
-    const app = await initializeServer('no_debug.yaml');
-    await supertest(app)
-      .get('/-/_debug')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.NOT_FOUND);
-  });
-
-  test('should  display debug hook if directly enabled', async () => {
-    const app = await initializeServer('conf.yaml');
-    const res = await supertest(app)
-      .get('/-/_debug')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-    expect(res.body.pid).toEqual(process.pid);
-    expect(res.body.mem).toBeDefined();
-  });
-});

package/tsconfig.build.json

@@ -1,9 +0,0 @@
-{
-  "extends": "../../../tsconfig.base",
-  "compilerOptions": {
-    "rootDir": "./src",
-    "outDir": "./build"
-  },
-  "include": ["src/**/*.ts", "types/*.d.ts"],
-  "exclude": ["src/**/*.test.ts"]
-}

package/tsconfig.json

@@ -1,44 +0,0 @@
-{
-  "extends": "../../../tsconfig.reference.json",
-  "compilerOptions": {
-    "rootDir": "./src",
-    "outDir": "./build"
-  },
-  "include": ["src/**/*", "types/*.d.ts"],
-  "exclude": ["src/**/*.test.ts"],
-  "references": [
-    {
-      "path": "../../api"
-    },
-    {
-      "path": "../../auth"
-    },
-    {
-      "path": "../../config"
-    },
-    {
-      "path": "../../loaders"
-    },
-    {
-      "path": "../../logger/logger"
-    },
-    {
-      "path": "../../middleware"
-    },
-    {
-      "path": "../../plugins/audit"
-    },
-    {
-      "path": "../../proxy"
-    },
-    {
-      "path": "../../store"
-    },
-    {
-      "path": "../../utils"
-    },
-    {
-      "path": "../../web"
-    }
-  ]
-}

package/types/custom.d.ts

@@ -1,16 +0,0 @@
-import { NextFunction, Request, Response } from 'express';
-
-import { Logger, RemoteUser } from '@verdaccio/types';
-
-export type $RequestExtend = Request & { remote_user?: any; log: Logger };
-export type $ResponseExtend = Response & { cookies?: any };
-export type $NextFunctionVer = NextFunction & any;
-
-declare global {
-  namespace Express {
-    export interface Request {
-      remote_user: RemoteUser;
-      log: Logger;
-    }
-  }
-}