@verdaccio/server 8.0.0-next-8.3 → 8.0.0-next-8.4

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @verdaccio/server
 
+## 8.0.0-next-8.4
+
+### Patch Changes
+
+- 48aa89f: chore: request header constants
+- e93d6a3: chore: auth package requires logger as parameter
+- Updated dependencies [48aa89f]
+- Updated dependencies [58e0d95]
+- Updated dependencies [1076a89]
+- Updated dependencies [e93d6a3]
+  - @verdaccio/middleware@8.0.0-next-8.4
+  - @verdaccio/core@8.0.0-next-8.4
+  - @verdaccio/api@8.1.0-next-8.4
+  - @verdaccio/auth@8.0.0-next-8.4
+  - @verdaccio/web@8.1.0-next-8.4
+  - @verdaccio/config@8.0.0-next-8.4
+  - @verdaccio/loaders@8.0.0-next-8.3
+  - verdaccio-audit@13.0.0-next-8.4
+  - @verdaccio/store@8.0.0-next-8.4
+  - @verdaccio/utils@8.1.0-next-8.4
+  - @verdaccio/logger@8.0.0-next-8.4
+
 ## 8.0.0-next-8.3
 
 ### Patch Changes

package/build/index.d.ts

@@ -1 +1 @@
-export { default } from './server';
+export { default, startServer } from './server';

package/build/index.js

@@ -9,6 +9,13 @@ Object.defineProperty(exports, "default", {
     return _server.default;
   }
 });
-var _server = _interopRequireDefault(require("./server"));
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+Object.defineProperty(exports, "startServer", {
+  enumerable: true,
+  get: function () {
+    return _server.startServer;
+  }
+});
+var _server = _interopRequireWildcard(require("./server"));
+function _getRequireWildcardCache(e) { if ("function" != typeof WeakMap) return null; var r = new WeakMap(), t = new WeakMap(); return (_getRequireWildcardCache = function (e) { return e ? t : r; })(e); }
+function _interopRequireWildcard(e, r) { if (!r && e && e.__esModule) return e; if (null === e || "object" != typeof e && "function" != typeof e) return { default: e }; var t = _getRequireWildcardCache(r); if (t && t.has(e)) return t.get(e); var n = { __proto__: null }, a = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) { var i = a ? Object.getOwnPropertyDescriptor(e, u) : null; i && (i.get || i.set) ? Object.defineProperty(n, u, i) : n[u] = e[u]; } return n.default = e, t && t.set(e, n), n; }
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_server","_interopRequireDefault","require","e","__esModule","default"],"sources":["../src/index.ts"],"sourcesContent":["export { default } from './server';\n"],"mappings":";;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AAAmC,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_server","_interopRequireWildcard","require","_getRequireWildcardCache","e","WeakMap","r","t","__esModule","default","has","get","n","__proto__","a","Object","defineProperty","getOwnPropertyDescriptor","u","hasOwnProperty","call","i","set"],"sources":["../src/index.ts"],"sourcesContent":["export { default, startServer } from './server';\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,uBAAA,CAAAC,OAAA;AAAgD,SAAAC,yBAAAC,CAAA,6BAAAC,OAAA,mBAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,CAAA,WAAAA,CAAA,GAAAG,CAAA,GAAAD,CAAA,KAAAF,CAAA;AAAA,SAAAH,wBAAAG,CAAA,EAAAE,CAAA,SAAAA,CAAA,IAAAF,CAAA,IAAAA,CAAA,CAAAI,UAAA,SAAAJ,CAAA,eAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,WAAAK,OAAA,EAAAL,CAAA,QAAAG,CAAA,GAAAJ,wBAAA,CAAAG,CAAA,OAAAC,CAAA,IAAAA,CAAA,CAAAG,GAAA,CAAAN,CAAA,UAAAG,CAAA,CAAAI,GAAA,CAAAP,CAAA,OAAAQ,CAAA,KAAAC,SAAA,UAAAC,CAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,CAAA,IAAAd,CAAA,oBAAAc,CAAA,OAAAC,cAAA,CAAAC,IAAA,CAAAhB,CAAA,EAAAc,CAAA,SAAAG,CAAA,GAAAP,CAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAb,CAAA,EAAAc,CAAA,UAAAG,CAAA,KAAAA,CAAA,CAAAV,GAAA,IAAAU,CAAA,CAAAC,GAAA,IAAAP,MAAA,CAAAC,cAAA,CAAAJ,CAAA,EAAAM,CAAA,EAAAG,CAAA,IAAAT,CAAA,CAAAM,CAAA,IAAAd,CAAA,CAAAc,CAAA,YAAAN,CAAA,CAAAH,OAAA,GAAAL,CAAA,EAAAG,CAAA,IAAAA,CAAA,CAAAe,GAAA,CAAAlB,CAAA,EAAAQ,CAAA,GAAAA,CAAA","ignoreList":[]}

package/build/server.d.ts

@@ -1,3 +1,5 @@
+import { Express } from 'express';
 import { ConfigYaml } from '@verdaccio/types';
-declare const _default: (configHash: ConfigYaml) => Promise<any>;
-export default _default;
+declare const startServer: (configHash: ConfigYaml) => Promise<Express>;
+export { startServer };
+export default startServer;

package/build/server.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.default = void 0;
+exports.startServer = exports.default = void 0;
 var _compression = _interopRequireDefault(require("compression"));
 var _cors = _interopRequireDefault(require("cors"));
 var _debug = _interopRequireDefault(require("debug"));
@@ -26,7 +26,7 @@ const {
   version
 } = require('../package.json');
 const defineAPI = async function (config, storage) {
-  const auth = new _auth.Auth(config);
+  const auth = new _auth.Auth(config, _logger.logger);
   await auth.init();
   const app = (0, _express.default)();
   // run in production mode by default, just in case
@@ -76,7 +76,7 @@ const defineAPI = async function (config, storage) {
 
   // For  npm request
   // @ts-ignore
-  app.use((0, _api.default)(config, auth, storage));
+  app.use((0, _api.default)(config, auth, storage, _logger.logger));
 
   // For WebUI & WebUI API
   if (_lodash.default.get(config, 'web.enable', true)) {
@@ -125,7 +125,7 @@ const defineAPI = async function (config, storage) {
   app.use(_middleware.final);
   return app;
 };
-var startServer = exports.default = async function startServer(configHash) {
+const startServer = exports.startServer = async function startServer(configHash) {
   debug('start server');
   const config = new _config.Config({
     ...configHash
@@ -147,4 +147,5 @@ var startServer = exports.default = async function startServer(configHash) {
   }
   return await defineAPI(config, storage);
 };
+var _default = exports.default = startServer;
 //# sourceMappingURL=server.js.map

package/build/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","names":["_compression","_interopRequireDefault","require","_cors","_debug","_express","_lodash","_verdaccioAudit","_api","_auth","_config","_core","_loaders","_logger","_middleware","_store","_web","_debug2","e","__esModule","default","debug","buildDebug","version","defineAPI","config","storage","auth","Auth","init","app","express","set","process","env","NODE_ENV","server","trustProxy","use","cors","rateLimit","serverSettings","errorReportingMiddlewareWrap","errorReportingMiddleware","logger","log","userAgent","compression","get","req","res","next","url","hookDebug","configPath","plugins","asyncLoadPlugin","middlewares","plugin","register_middlewares","pluginPrefix","PLUGIN_CATEGORY","MIDDLEWARE","length","info","push","AuditMiddleware","enabled","strict_ssl","forEach","apiEndpoint","_","_req","locals","app_version","middleware","webMiddleware","errorUtils","getNotFound","API_ERROR","WEB_DISABLED","handleError","final","startServer","exports","configHash","AppConfig","Storage","err","error","msg","Error"],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport express from 'express';\nimport _ from 'lodash';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport { API_ERROR, PLUGIN_CATEGORY, errorUtils, pluginUtils } from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport {\n  errorReportingMiddleware,\n  final,\n  handleError,\n  log,\n  rateLimit,\n  userAgent,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { ConfigYaml } from '@verdaccio/types';\nimport { Config as IConfig } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\n\nconst debug = buildDebug('verdaccio:server');\nconst { version } = require('../package.json');\n\nconst defineAPI = async function (config: IConfig, storage: Storage): Promise<any> {\n  const auth: Auth = new Auth(config);\n  await auth.init();\n  const app = express();\n  // run in production mode by default, just in case\n  // it shouldn't make any difference anyway\n  app.set('env', process.env.NODE_ENV || 'production');\n  if (config.server?.trustProxy) {\n    app.set('trust proxy', config.server.trustProxy);\n  }\n  app.use(cors());\n  app.use(rateLimit(config.serverSettings.rateLimit));\n\n  const errorReportingMiddlewareWrap = errorReportingMiddleware(logger);\n\n  // Router setup\n  app.use(log(logger));\n  app.use(errorReportingMiddlewareWrap);\n  app.use(userAgent(config));\n  app.use(compression());\n\n  app.get(\n    '/favicon.ico',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      req.url = '/-/static/favicon.ico';\n      next();\n    }\n  );\n\n  // Hook for tests only\n  if (config._debug) {\n    hookDebug(app, config.configPath);\n  }\n\n  const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(\n    config.middlewares,\n    {\n      config,\n      logger,\n    },\n    function (plugin) {\n      return typeof plugin.register_middlewares !== 'undefined';\n    },\n    config?.serverSettings?.pluginPrefix ?? 'verdaccio',\n    PLUGIN_CATEGORY.MIDDLEWARE\n  );\n\n  if (plugins.length === 0) {\n    logger.info('none middleware plugins has been defined, adding audit middleware by default');\n    // @ts-ignore\n    plugins.push(new AuditMiddleware({ enabled: true, strict_ssl: true }, { config, logger }));\n  }\n\n  plugins.forEach((plugin: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>) => {\n    plugin.register_middlewares(app, auth, storage);\n  });\n\n  // For  npm request\n  // @ts-ignore\n  app.use(apiEndpoint(config, auth, storage));\n\n  // For WebUI & WebUI API\n  if (_.get(config, 'web.enable', true)) {\n    app.use((_req, res, next) => {\n      res.locals.app_version = version ?? '';\n      next();\n    });\n    const middleware = await webMiddleware(config, auth, storage);\n    app.use(middleware);\n  } else {\n    app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n      next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n    });\n  }\n\n  // Catch 404\n  app.get('/*', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n    next(errorUtils.getNotFound('resource not found'));\n  });\n\n  // @ts-ignore\n  app.use(handleError(logger));\n\n  // app.use(function (\n  //   err: HttpError,\n  //   req: $RequestExtend,\n  //   res: $ResponseExtend,\n  //   next: $NextFunctionVer\n  // ) {\n  //   if (_.isError(err)) {\n  //     if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n  //       return next();\n  //     }\n  //     if (_.isFunction(res.locals.report_error) === false) {\n  //       // in case of very early error this middleware may not be loaded before error is generated\n  //       // fixing that\n  //       errorReportingMiddlewareWrap(req, res, _.noop);\n  //     }\n  //     res.locals.report_error(err);\n  //   } else {\n  //     // Fall to Middleware.final\n  //     return next(err);\n  //   }\n  // });\n\n  app.use(final);\n\n  return app;\n};\n\nexport default (async function startServer(configHash: ConfigYaml): Promise<any> {\n  debug('start server');\n  const config: IConfig = new AppConfig({ ...configHash } as any);\n  // register middleware plugins\n  debug('loaded filter plugin');\n  // @ts-ignore\n  const storage: Storage = new Storage(config, logger);\n  try {\n    // waits until init calls have been initialized\n    debug('storage init start');\n    await storage.init(config);\n    debug('storage init end');\n  } catch (err: any) {\n    logger.error({ error: err.msg }, 'storage has failed: @{error}');\n    throw new Error(err);\n  }\n  return await defineAPI(config, storage);\n});\n"],"mappings":";;;;;;AAAA,IAAAA,YAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,KAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,MAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,OAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,eAAA,GAAAN,sBAAA,CAAAC,OAAA;AAEA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AACA,IAAAO,KAAA,GAAAP,OAAA;AACA,IAAAQ,OAAA,GAAAR,OAAA;AACA,IAAAS,KAAA,GAAAT,OAAA;AACA,IAAAU,QAAA,GAAAV,OAAA;AACA,IAAAW,OAAA,GAAAX,OAAA;AACA,IAAAY,WAAA,GAAAZ,OAAA;AAQA,IAAAa,MAAA,GAAAb,OAAA;AAGA,IAAAc,IAAA,GAAAf,sBAAA,CAAAC,OAAA;AAGA,IAAAe,OAAA,GAAAhB,sBAAA,CAAAC,OAAA;AAAgC,SAAAD,uBAAAiB,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEhC,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,kBAAkB,CAAC;AAC5C,MAAM;EAAEC;AAAQ,CAAC,GAAGrB,OAAO,CAAC,iBAAiB,CAAC;AAE9C,MAAMsB,SAAS,GAAG,eAAAA,CAAgBC,MAAe,EAAEC,OAAgB,EAAgB;EACjF,MAAMC,IAAU,GAAG,IAAIC,UAAI,CAACH,MAAM,CAAC;EACnC,MAAME,IAAI,CAACE,IAAI,CAAC,CAAC;EACjB,MAAMC,GAAG,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACrB;EACA;EACAD,GAAG,CAACE,GAAG,CAAC,KAAK,EAAEC,OAAO,CAACC,GAAG,CAACC,QAAQ,IAAI,YAAY,CAAC;EACpD,IAAIV,MAAM,CAACW,MAAM,EAAEC,UAAU,EAAE;IAC7BP,GAAG,CAACE,GAAG,CAAC,aAAa,EAAEP,MAAM,CAACW,MAAM,CAACC,UAAU,CAAC;EAClD;EACAP,GAAG,CAACQ,GAAG,CAAC,IAAAC,aAAI,EAAC,CAAC,CAAC;EACfT,GAAG,CAACQ,GAAG,CAAC,IAAAE,qBAAS,EAACf,MAAM,CAACgB,cAAc,CAACD,SAAS,CAAC,CAAC;EAEnD,MAAME,4BAA4B,GAAG,IAAAC,oCAAwB,EAACC,cAAM,CAAC;;EAErE;EACAd,GAAG,CAACQ,GAAG,CAAC,IAAAO,eAAG,EAACD,cAAM,CAAC,CAAC;EACpBd,GAAG,CAACQ,GAAG,CAACI,4BAA4B,CAAC;EACrCZ,GAAG,CAACQ,GAAG,CAAC,IAAAQ,qBAAS,EAACrB,MAAM,CAAC,CAAC;EAC1BK,GAAG,CAACQ,GAAG,CAAC,IAAAS,oBAAW,EAAC,CAAC,CAAC;EAEtBjB,GAAG,CAACkB,GAAG,CACL,cAAc,EACd,UAAUC,GAAmB,EAAEC,GAAoB,EAAEC,IAAsB,EAAQ;IACjFF,GAAG,CAACG,GAAG,GAAG,uBAAuB;IACjCD,IAAI,CAAC,CAAC;EACR,CACF,CAAC;;EAED;EACA,IAAI1B,MAAM,CAACrB,MAAM,EAAE;IACjB,IAAAiD,eAAS,EAACvB,GAAG,EAAEL,MAAM,CAAC6B,UAAU,CAAC;EACnC;EAEA,MAAMC,OAA2D,GAAG,MAAM,IAAAC,wBAAe,EACvF/B,MAAM,CAACgC,WAAW,EAClB;IACEhC,MAAM;IACNmB,MAAM,EAANA;EACF,CAAC,EACD,UAAUc,MAAM,EAAE;IAChB,OAAO,OAAOA,MAAM,CAACC,oBAAoB,KAAK,WAAW;EAC3D,CAAC,EACDlC,MAAM,EAAEgB,cAAc,EAAEmB,YAAY,IAAI,WAAW,EACnDC,qBAAe,CAACC,UAClB,CAAC;EAED,IAAIP,OAAO,CAACQ,MAAM,KAAK,CAAC,EAAE;IACxBnB,cAAM,CAACoB,IAAI,CAAC,8EAA8E,CAAC;IAC3F;IACAT,OAAO,CAACU,IAAI,CAAC,IAAIC,uBAAe,CAAC;MAAEC,OAAO,EAAE,IAAI;MAAEC,UAAU,EAAE;IAAK,CAAC,EAAE;MAAE3C,MAAM;MAAEmB,MAAM,EAANA;IAAO,CAAC,CAAC,CAAC;EAC5F;EAEAW,OAAO,CAACc,OAAO,CAAEX,MAAwD,IAAK;IAC5EA,MAAM,CAACC,oBAAoB,CAAC7B,GAAG,EAAEH,IAAI,EAAED,OAAO,CAAC;EACjD,CAAC,CAAC;;EAEF;EACA;EACAI,GAAG,CAACQ,GAAG,CAAC,IAAAgC,YAAW,EAAC7C,MAAM,EAAEE,IAAI,EAAED,OAAO,CAAC,CAAC;;EAE3C;EACA,IAAI6C,eAAC,CAACvB,GAAG,CAACvB,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;IACrCK,GAAG,CAACQ,GAAG,CAAC,CAACkC,IAAI,EAAEtB,GAAG,EAAEC,IAAI,KAAK;MAC3BD,GAAG,CAACuB,MAAM,CAACC,WAAW,GAAGnD,OAAO,IAAI,EAAE;MACtC4B,IAAI,CAAC,CAAC;IACR,CAAC,CAAC;IACF,MAAMwB,UAAU,GAAG,MAAM,IAAAC,YAAa,EAACnD,MAAM,EAAEE,IAAI,EAAED,OAAO,CAAC;IAC7DI,GAAG,CAACQ,GAAG,CAACqC,UAAU,CAAC;EACrB,CAAC,MAAM;IACL7C,GAAG,CAACkB,GAAG,CAAC,GAAG,EAAE,UAAUC,GAAmB,EAAEC,GAAoB,EAAEC,IAAsB,EAAE;MACxFA,IAAI,CAAC0B,gBAAU,CAACC,WAAW,CAACC,eAAS,CAACC,YAAY,CAAC,CAAC;IACtD,CAAC,CAAC;EACJ;;EAEA;EACAlD,GAAG,CAACkB,GAAG,CAAC,IAAI,EAAE,UAAUC,GAAmB,EAAEC,GAAoB,EAAEC,IAAsB,EAAE;IACzFA,IAAI,CAAC0B,gBAAU,CAACC,WAAW,CAAC,oBAAoB,CAAC,CAAC;EACpD,CAAC,CAAC;;EAEF;EACAhD,GAAG,CAACQ,GAAG,CAAC,IAAA2C,uBAAW,EAACrC,cAAM,CAAC,CAAC;;EAE5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEAd,GAAG,CAACQ,GAAG,CAAC4C,iBAAK,CAAC;EAEd,OAAOpD,GAAG;AACZ,CAAC;AAAC,IAE6BqD,WAAW,GAAAC,OAAA,CAAAhE,OAAA,GAA1B,eAAe+D,WAAWA,CAACE,UAAsB,EAAgB;EAC/EhE,KAAK,CAAC,cAAc,CAAC;EACrB,MAAMI,MAAe,GAAG,IAAI6D,cAAS,CAAC;IAAE,GAAGD;EAAW,CAAQ,CAAC;EAC/D;EACAhE,KAAK,CAAC,sBAAsB,CAAC;EAC7B;EACA,MAAMK,OAAgB,GAAG,IAAI6D,cAAO,CAAC9D,MAAM,EAAEmB,cAAM,CAAC;EACpD,IAAI;IACF;IACAvB,KAAK,CAAC,oBAAoB,CAAC;IAC3B,MAAMK,OAAO,CAACG,IAAI,CAACJ,MAAM,CAAC;IAC1BJ,KAAK,CAAC,kBAAkB,CAAC;EAC3B,CAAC,CAAC,OAAOmE,GAAQ,EAAE;IACjB5C,cAAM,CAAC6C,KAAK,CAAC;MAAEA,KAAK,EAAED,GAAG,CAACE;IAAI,CAAC,EAAE,8BAA8B,CAAC;IAChE,MAAM,IAAIC,KAAK,CAACH,GAAG,CAAC;EACtB;EACA,OAAO,MAAMhE,SAAS,CAACC,MAAM,EAAEC,OAAO,CAAC;AACzC,CAAC","ignoreList":[]}
+{"version":3,"file":"server.js","names":["_compression","_interopRequireDefault","require","_cors","_debug","_express","_lodash","_verdaccioAudit","_api","_auth","_config","_core","_loaders","_logger","_middleware","_store","_web","_debug2","e","__esModule","default","debug","buildDebug","version","defineAPI","config","storage","auth","Auth","logger","init","app","express","set","process","env","NODE_ENV","server","trustProxy","use","cors","rateLimit","serverSettings","errorReportingMiddlewareWrap","errorReportingMiddleware","log","userAgent","compression","get","req","res","next","url","hookDebug","configPath","plugins","asyncLoadPlugin","middlewares","plugin","register_middlewares","pluginPrefix","PLUGIN_CATEGORY","MIDDLEWARE","length","info","push","AuditMiddleware","enabled","strict_ssl","forEach","apiEndpoint","_","_req","locals","app_version","middleware","webMiddleware","errorUtils","getNotFound","API_ERROR","WEB_DISABLED","handleError","final","startServer","exports","configHash","AppConfig","Storage","err","error","msg","Error","_default"],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport express, { Express } from 'express';\nimport _ from 'lodash';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport { API_ERROR, PLUGIN_CATEGORY, errorUtils, pluginUtils } from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport {\n  errorReportingMiddleware,\n  final,\n  handleError,\n  log,\n  rateLimit,\n  userAgent,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { ConfigYaml } from '@verdaccio/types';\nimport { Config as IConfig } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\n\nconst debug = buildDebug('verdaccio:server');\nconst { version } = require('../package.json');\n\nconst defineAPI = async function (config: IConfig, storage: Storage): Promise<Express> {\n  const auth: Auth = new Auth(config, logger);\n  await auth.init();\n  const app = express();\n  // run in production mode by default, just in case\n  // it shouldn't make any difference anyway\n  app.set('env', process.env.NODE_ENV || 'production');\n  if (config.server?.trustProxy) {\n    app.set('trust proxy', config.server.trustProxy);\n  }\n  app.use(cors());\n  app.use(rateLimit(config.serverSettings.rateLimit));\n\n  const errorReportingMiddlewareWrap = errorReportingMiddleware(logger);\n\n  // Router setup\n  app.use(log(logger));\n  app.use(errorReportingMiddlewareWrap);\n  app.use(userAgent(config));\n  app.use(compression());\n\n  app.get(\n    '/favicon.ico',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      req.url = '/-/static/favicon.ico';\n      next();\n    }\n  );\n\n  // Hook for tests only\n  if (config._debug) {\n    hookDebug(app, config.configPath);\n  }\n\n  const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(\n    config.middlewares,\n    {\n      config,\n      logger,\n    },\n    function (plugin) {\n      return typeof plugin.register_middlewares !== 'undefined';\n    },\n    config?.serverSettings?.pluginPrefix ?? 'verdaccio',\n    PLUGIN_CATEGORY.MIDDLEWARE\n  );\n\n  if (plugins.length === 0) {\n    logger.info('none middleware plugins has been defined, adding audit middleware by default');\n    // @ts-ignore\n    plugins.push(new AuditMiddleware({ enabled: true, strict_ssl: true }, { config, logger }));\n  }\n\n  plugins.forEach((plugin: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>) => {\n    plugin.register_middlewares(app, auth, storage);\n  });\n\n  // For  npm request\n  // @ts-ignore\n  app.use(apiEndpoint(config, auth, storage, logger));\n\n  // For WebUI & WebUI API\n  if (_.get(config, 'web.enable', true)) {\n    app.use((_req, res, next) => {\n      res.locals.app_version = version ?? '';\n      next();\n    });\n    const middleware = await webMiddleware(config, auth, storage);\n    app.use(middleware);\n  } else {\n    app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n      next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n    });\n  }\n\n  // Catch 404\n  app.get('/*', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n    next(errorUtils.getNotFound('resource not found'));\n  });\n\n  // @ts-ignore\n  app.use(handleError(logger));\n\n  // app.use(function (\n  //   err: HttpError,\n  //   req: $RequestExtend,\n  //   res: $ResponseExtend,\n  //   next: $NextFunctionVer\n  // ) {\n  //   if (_.isError(err)) {\n  //     if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n  //       return next();\n  //     }\n  //     if (_.isFunction(res.locals.report_error) === false) {\n  //       // in case of very early error this middleware may not be loaded before error is generated\n  //       // fixing that\n  //       errorReportingMiddlewareWrap(req, res, _.noop);\n  //     }\n  //     res.locals.report_error(err);\n  //   } else {\n  //     // Fall to Middleware.final\n  //     return next(err);\n  //   }\n  // });\n\n  app.use(final);\n\n  return app;\n};\n\nconst startServer = async function startServer(configHash: ConfigYaml): Promise<Express> {\n  debug('start server');\n  const config: IConfig = new AppConfig({ ...configHash } as any);\n  // register middleware plugins\n  debug('loaded filter plugin');\n  // @ts-ignore\n  const storage: Storage = new Storage(config, logger);\n  try {\n    // waits until init calls have been initialized\n    debug('storage init start');\n    await storage.init(config);\n    debug('storage init end');\n  } catch (err: any) {\n    logger.error({ error: err.msg }, 'storage has failed: @{error}');\n    throw new Error(err);\n  }\n  return await defineAPI(config, storage);\n};\n\nexport { startServer };\nexport default startServer;\n"],"mappings":";;;;;;AAAA,IAAAA,YAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,KAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,MAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,OAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,eAAA,GAAAN,sBAAA,CAAAC,OAAA;AAEA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AACA,IAAAO,KAAA,GAAAP,OAAA;AACA,IAAAQ,OAAA,GAAAR,OAAA;AACA,IAAAS,KAAA,GAAAT,OAAA;AACA,IAAAU,QAAA,GAAAV,OAAA;AACA,IAAAW,OAAA,GAAAX,OAAA;AACA,IAAAY,WAAA,GAAAZ,OAAA;AAQA,IAAAa,MAAA,GAAAb,OAAA;AAGA,IAAAc,IAAA,GAAAf,sBAAA,CAAAC,OAAA;AAGA,IAAAe,OAAA,GAAAhB,sBAAA,CAAAC,OAAA;AAAgC,SAAAD,uBAAAiB,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEhC,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,kBAAkB,CAAC;AAC5C,MAAM;EAAEC;AAAQ,CAAC,GAAGrB,OAAO,CAAC,iBAAiB,CAAC;AAE9C,MAAMsB,SAAS,GAAG,eAAAA,CAAgBC,MAAe,EAAEC,OAAgB,EAAoB;EACrF,MAAMC,IAAU,GAAG,IAAIC,UAAI,CAACH,MAAM,EAAEI,cAAM,CAAC;EAC3C,MAAMF,IAAI,CAACG,IAAI,CAAC,CAAC;EACjB,MAAMC,GAAG,GAAG,IAAAC,gBAAO,EAAC,CAAC;EACrB;EACA;EACAD,GAAG,CAACE,GAAG,CAAC,KAAK,EAAEC,OAAO,CAACC,GAAG,CAACC,QAAQ,IAAI,YAAY,CAAC;EACpD,IAAIX,MAAM,CAACY,MAAM,EAAEC,UAAU,EAAE;IAC7BP,GAAG,CAACE,GAAG,CAAC,aAAa,EAAER,MAAM,CAACY,MAAM,CAACC,UAAU,CAAC;EAClD;EACAP,GAAG,CAACQ,GAAG,CAAC,IAAAC,aAAI,EAAC,CAAC,CAAC;EACfT,GAAG,CAACQ,GAAG,CAAC,IAAAE,qBAAS,EAAChB,MAAM,CAACiB,cAAc,CAACD,SAAS,CAAC,CAAC;EAEnD,MAAME,4BAA4B,GAAG,IAAAC,oCAAwB,EAACf,cAAM,CAAC;;EAErE;EACAE,GAAG,CAACQ,GAAG,CAAC,IAAAM,eAAG,EAAChB,cAAM,CAAC,CAAC;EACpBE,GAAG,CAACQ,GAAG,CAACI,4BAA4B,CAAC;EACrCZ,GAAG,CAACQ,GAAG,CAAC,IAAAO,qBAAS,EAACrB,MAAM,CAAC,CAAC;EAC1BM,GAAG,CAACQ,GAAG,CAAC,IAAAQ,oBAAW,EAAC,CAAC,CAAC;EAEtBhB,GAAG,CAACiB,GAAG,CACL,cAAc,EACd,UAAUC,GAAmB,EAAEC,GAAoB,EAAEC,IAAsB,EAAQ;IACjFF,GAAG,CAACG,GAAG,GAAG,uBAAuB;IACjCD,IAAI,CAAC,CAAC;EACR,CACF,CAAC;;EAED;EACA,IAAI1B,MAAM,CAACrB,MAAM,EAAE;IACjB,IAAAiD,eAAS,EAACtB,GAAG,EAAEN,MAAM,CAAC6B,UAAU,CAAC;EACnC;EAEA,MAAMC,OAA2D,GAAG,MAAM,IAAAC,wBAAe,EACvF/B,MAAM,CAACgC,WAAW,EAClB;IACEhC,MAAM;IACNI,MAAM,EAANA;EACF,CAAC,EACD,UAAU6B,MAAM,EAAE;IAChB,OAAO,OAAOA,MAAM,CAACC,oBAAoB,KAAK,WAAW;EAC3D,CAAC,EACDlC,MAAM,EAAEiB,cAAc,EAAEkB,YAAY,IAAI,WAAW,EACnDC,qBAAe,CAACC,UAClB,CAAC;EAED,IAAIP,OAAO,CAACQ,MAAM,KAAK,CAAC,EAAE;IACxBlC,cAAM,CAACmC,IAAI,CAAC,8EAA8E,CAAC;IAC3F;IACAT,OAAO,CAACU,IAAI,CAAC,IAAIC,uBAAe,CAAC;MAAEC,OAAO,EAAE,IAAI;MAAEC,UAAU,EAAE;IAAK,CAAC,EAAE;MAAE3C,MAAM;MAAEI,MAAM,EAANA;IAAO,CAAC,CAAC,CAAC;EAC5F;EAEA0B,OAAO,CAACc,OAAO,CAAEX,MAAwD,IAAK;IAC5EA,MAAM,CAACC,oBAAoB,CAAC5B,GAAG,EAAEJ,IAAI,EAAED,OAAO,CAAC;EACjD,CAAC,CAAC;;EAEF;EACA;EACAK,GAAG,CAACQ,GAAG,CAAC,IAAA+B,YAAW,EAAC7C,MAAM,EAAEE,IAAI,EAAED,OAAO,EAAEG,cAAM,CAAC,CAAC;;EAEnD;EACA,IAAI0C,eAAC,CAACvB,GAAG,CAACvB,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;IACrCM,GAAG,CAACQ,GAAG,CAAC,CAACiC,IAAI,EAAEtB,GAAG,EAAEC,IAAI,KAAK;MAC3BD,GAAG,CAACuB,MAAM,CAACC,WAAW,GAAGnD,OAAO,IAAI,EAAE;MACtC4B,IAAI,CAAC,CAAC;IACR,CAAC,CAAC;IACF,MAAMwB,UAAU,GAAG,MAAM,IAAAC,YAAa,EAACnD,MAAM,EAAEE,IAAI,EAAED,OAAO,CAAC;IAC7DK,GAAG,CAACQ,GAAG,CAACoC,UAAU,CAAC;EACrB,CAAC,MAAM;IACL5C,GAAG,CAACiB,GAAG,CAAC,GAAG,EAAE,UAAUC,GAAmB,EAAEC,GAAoB,EAAEC,IAAsB,EAAE;MACxFA,IAAI,CAAC0B,gBAAU,CAACC,WAAW,CAACC,eAAS,CAACC,YAAY,CAAC,CAAC;IACtD,CAAC,CAAC;EACJ;;EAEA;EACAjD,GAAG,CAACiB,GAAG,CAAC,IAAI,EAAE,UAAUC,GAAmB,EAAEC,GAAoB,EAAEC,IAAsB,EAAE;IACzFA,IAAI,CAAC0B,gBAAU,CAACC,WAAW,CAAC,oBAAoB,CAAC,CAAC;EACpD,CAAC,CAAC;;EAEF;EACA/C,GAAG,CAACQ,GAAG,CAAC,IAAA0C,uBAAW,EAACpD,cAAM,CAAC,CAAC;;EAE5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEAE,GAAG,CAACQ,GAAG,CAAC2C,iBAAK,CAAC;EAEd,OAAOnD,GAAG;AACZ,CAAC;AAED,MAAMoD,WAAW,GAAAC,OAAA,CAAAD,WAAA,GAAG,eAAeA,WAAWA,CAACE,UAAsB,EAAoB;EACvFhE,KAAK,CAAC,cAAc,CAAC;EACrB,MAAMI,MAAe,GAAG,IAAI6D,cAAS,CAAC;IAAE,GAAGD;EAAW,CAAQ,CAAC;EAC/D;EACAhE,KAAK,CAAC,sBAAsB,CAAC;EAC7B;EACA,MAAMK,OAAgB,GAAG,IAAI6D,cAAO,CAAC9D,MAAM,EAAEI,cAAM,CAAC;EACpD,IAAI;IACF;IACAR,KAAK,CAAC,oBAAoB,CAAC;IAC3B,MAAMK,OAAO,CAACI,IAAI,CAACL,MAAM,CAAC;IAC1BJ,KAAK,CAAC,kBAAkB,CAAC;EAC3B,CAAC,CAAC,OAAOmE,GAAQ,EAAE;IACjB3D,cAAM,CAAC4D,KAAK,CAAC;MAAEA,KAAK,EAAED,GAAG,CAACE;IAAI,CAAC,EAAE,8BAA8B,CAAC;IAChE,MAAM,IAAIC,KAAK,CAACH,GAAG,CAAC;EACtB;EACA,OAAO,MAAMhE,SAAS,CAACC,MAAM,EAAEC,OAAO,CAAC;AACzC,CAAC;AAAC,IAAAkE,QAAA,GAAAR,OAAA,CAAAhE,OAAA,GAGa+D,WAAW","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server",
-  "version": "8.0.0-next-8.3",
+  "version": "8.0.0-next-8.4",
   "description": "server logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,26 +29,26 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/api": "8.1.0-next-8.3",
-    "@verdaccio/auth": "8.0.0-next-8.3",
-    "@verdaccio/core": "8.0.0-next-8.3",
-    "@verdaccio/config": "8.0.0-next-8.3",
+    "@verdaccio/api": "8.1.0-next-8.4",
+    "@verdaccio/auth": "8.0.0-next-8.4",
+    "@verdaccio/core": "8.0.0-next-8.4",
+    "@verdaccio/config": "8.0.0-next-8.4",
     "@verdaccio/loaders": "8.0.0-next-8.3",
-    "@verdaccio/logger": "8.0.0-next-8.3",
-    "@verdaccio/middleware": "8.0.0-next-8.3",
-    "@verdaccio/store": "8.0.0-next-8.3",
-    "@verdaccio/utils": "8.1.0-next-8.3",
-    "@verdaccio/web": "8.1.0-next-8.3",
-    "verdaccio-audit": "13.0.0-next-8.3",
+    "@verdaccio/logger": "8.0.0-next-8.4",
+    "@verdaccio/middleware": "8.0.0-next-8.4",
+    "@verdaccio/store": "8.0.0-next-8.4",
+    "@verdaccio/utils": "8.1.0-next-8.4",
+    "@verdaccio/web": "8.1.0-next-8.4",
+    "verdaccio-audit": "13.0.0-next-8.4",
     "compression": "1.7.4",
     "cors": "2.8.5",
     "debug": "4.3.7",
-    "express": "4.21.0",
+    "express": "4.21.1",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/proxy": "8.0.0-next-8.3",
-    "@verdaccio/test-helper": "4.0.0-next-8.0",
+    "@verdaccio/proxy": "8.0.0-next-8.4",
+    "@verdaccio/test-helper": "4.0.0-next-8.1",
     "http-errors": "2.0.0"
   },
   "funding": {
@@ -57,7 +57,7 @@
   },
   "scripts": {
     "clean": "rimraf ./build",
-    "test": "jest",
+    "test": "vitest run",
     "type-check": "tsc --noEmit -p tsconfig.build.json",
     "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
     "watch": "pnpm build:js -- --watch",

package/src/index.ts

@@ -1 +1 @@
-export { default } from './server';
+export { default, startServer } from './server';

package/src/server.ts

@@ -1,7 +1,7 @@
 import compression from 'compression';
 import cors from 'cors';
 import buildDebug from 'debug';
-import express from 'express';
+import express, { Express } from 'express';
 import _ from 'lodash';
 import AuditMiddleware from 'verdaccio-audit';
 
@@ -30,8 +30,8 @@ import hookDebug from './debug';
 const debug = buildDebug('verdaccio:server');
 const { version } = require('../package.json');
 
-const defineAPI = async function (config: IConfig, storage: Storage): Promise<any> {
-  const auth: Auth = new Auth(config);
+const defineAPI = async function (config: IConfig, storage: Storage): Promise<Express> {
+  const auth: Auth = new Auth(config, logger);
   await auth.init();
   const app = express();
   // run in production mode by default, just in case
@@ -89,7 +89,7 @@ const defineAPI = async function (config: IConfig, storage: Storage): Promise<an
 
   // For  npm request
   // @ts-ignore
-  app.use(apiEndpoint(config, auth, storage));
+  app.use(apiEndpoint(config, auth, storage, logger));
 
   // For WebUI & WebUI API
   if (_.get(config, 'web.enable', true)) {
@@ -140,7 +140,7 @@ const defineAPI = async function (config: IConfig, storage: Storage): Promise<an
   return app;
 };
 
-export default (async function startServer(configHash: ConfigYaml): Promise<any> {
+const startServer = async function startServer(configHash: ConfigYaml): Promise<Express> {
   debug('start server');
   const config: IConfig = new AppConfig({ ...configHash } as any);
   // register middleware plugins
@@ -157,4 +157,7 @@ export default (async function startServer(configHash: ConfigYaml): Promise<any>
     throw new Error(err);
   }
   return await defineAPI(config, storage);
-});
+};
+
+export { startServer };
+export default startServer;

package/test/_helper.ts

@@ -8,8 +8,6 @@ import { generateRandomHexString } from '@verdaccio/utils';
 
 import apiMiddleware from '../src';
 
-setup({});
-
 export const getConf = async (conf) => {
   const configPath = path.join(__dirname, 'config', conf);
   const config = parseConfigFile(configPath);
@@ -25,5 +23,7 @@ export const getConf = async (conf) => {
 };
 
 export async function initializeServer(configName): Promise<Application> {
-  return apiMiddleware(await getConf(configName));
+  const config = await getConf(configName);
+  setup(config.log ?? {});
+  return apiMiddleware(config);
 }

package/test/server.spec.ts

@@ -1,113 +1,119 @@
 import supertest from 'supertest';
+import { describe, expect, test } from 'vitest';
 
 import { API_ERROR, HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
+import { setup } from '@verdaccio/logger';
 
 import { initializeServer } from './_helper';
 
-test('should request any package', async () => {
-  const app = await initializeServer('conf.yaml');
-  await supertest(app)
-    .get('/jquery')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-    .expect(HTTP_STATUS.NOT_FOUND);
-});
+setup({});
 
-test('should able to catch non defined routes with 404', async () => {
-  const app = await initializeServer('conf.yaml');
-  await supertest(app)
-    .get('/-/this-does-not-exist-anywhere')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-    .expect(HTTP_STATUS.NOT_FOUND);
-});
+describe('server api', () => {
+  test('should request any package', async () => {
+    const app = await initializeServer('conf.yaml');
+    await supertest(app)
+      .get('/jquery')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+      .expect(HTTP_STATUS.NOT_FOUND);
+  });
 
-test('should return index page if web is enabled', async () => {
-  const app = await initializeServer('conf.yaml');
-  const response = await supertest(app)
-    .get('/')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-    .expect(HEADER_TYPE.CONTENT_ENCODING, HEADERS.GZIP)
-    .expect(HTTP_STATUS.OK);
-  expect(response.text).toMatch('<title>verdaccio</title>');
-});
+  test('should able to catch non defined routes with 404', async () => {
+    const app = await initializeServer('conf.yaml');
+    await supertest(app)
+      .get('/-/this-does-not-exist-anywhere')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+      .expect(HTTP_STATUS.NOT_FOUND);
+  });
 
-test('should define rate limit headers', async () => {
-  const app = await initializeServer('conf.yaml');
-  await supertest(app)
-    .get('/')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-    .expect('x-ratelimit-limit', '10000')
-    .expect('x-ratelimit-remaining', '9999')
-    .expect(HTTP_STATUS.OK);
-});
+  test('should return index page if web is enabled', async () => {
+    const app = await initializeServer('conf.yaml');
+    const response = await supertest(app)
+      .get('/')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+      .expect(HEADER_TYPE.CONTENT_ENCODING, HEADERS.GZIP)
+      .expect(HTTP_STATUS.OK);
+    expect(response.text).toMatch('<title>verdaccio</title>');
+  });
 
-test('should contains cors headers', async () => {
-  const app = await initializeServer('conf.yaml');
-  await supertest(app).get('/').expect('access-control-allow-origin', '*').expect(HTTP_STATUS.OK);
-});
+  test('should define rate limit headers', async () => {
+    const app = await initializeServer('conf.yaml');
+    await supertest(app)
+      .get('/')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+      .expect(HEADERS.RATELIMIT_LIMIT, '10000')
+      .expect(HEADERS.RATELIMIT_REMAINING, '9999')
+      .expect(HTTP_STATUS.OK);
+  });
 
-test('should contains etag', async () => {
-  const app = await initializeServer('conf.yaml');
-  const response = await supertest(app)
-    .get('/')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-    .expect(HTTP_STATUS.OK);
-  const etag = response.get(HEADERS.ETAG);
-  expect(typeof etag === 'string').toBeTruthy();
-});
+  test('should contains cors headers', async () => {
+    const app = await initializeServer('conf.yaml');
+    await supertest(app).get('/').expect('access-control-allow-origin', '*').expect(HTTP_STATUS.OK);
+  });
 
-test('should be hidden by default', async () => {
-  const app = await initializeServer('conf.yaml');
-  const response = await supertest(app)
-    .get('/')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-    .expect(HTTP_STATUS.OK);
-  const powered = response.get('x-powered-by');
-  expect(powered).toMatch('hidden');
-}, 40000);
+  test('should contains etag', async () => {
+    const app = await initializeServer('conf.yaml');
+    const response = await supertest(app)
+      .get('/')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+      .expect(HTTP_STATUS.OK);
+    const etag = response.get(HEADERS.ETAG);
+    expect(typeof etag === 'string').toBeTruthy();
+  });
 
-test('should not contains powered header', async () => {
-  const app = await initializeServer('powered-disabled.yaml');
-  const response = await supertest(app)
-    .get('/')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-    .expect(HTTP_STATUS.OK);
-  const powered = response.get('x-powered-by');
-  expect(powered).toEqual('hidden');
-});
+  test('should be hidden by default', async () => {
+    const app = await initializeServer('conf.yaml');
+    const response = await supertest(app)
+      .get('/')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+      .expect(HTTP_STATUS.OK);
+    const powered = response.get(HEADERS.POWERED_BY);
+    expect(powered).toMatch('hidden');
+  }, 40000);
 
-test('should contains custom powered header', async () => {
-  const app = await initializeServer('powered-custom.yaml');
-  const response = await supertest(app)
-    .get('/')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
-    .expect(HTTP_STATUS.OK);
-  const powered = response.get('x-powered-by');
-  expect(powered).toEqual('custom user agent');
-});
+  test('should not contains powered header', async () => {
+    const app = await initializeServer('powered-disabled.yaml');
+    const response = await supertest(app)
+      .get('/')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+      .expect(HTTP_STATUS.OK);
+    const powered = response.get(HEADERS.POWERED_BY);
+    expect(powered).toEqual('hidden');
+  });
 
-test('should return 404 if web is disabled', async () => {
-  const app = await initializeServer('web-disabled.yaml');
-  const response = await supertest(app)
-    .get('/')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-    .expect(HTTP_STATUS.NOT_FOUND);
-  expect(response.body.error).toEqual(API_ERROR.WEB_DISABLED);
-});
+  test('should contains custom powered header', async () => {
+    const app = await initializeServer('powered-custom.yaml');
+    const response = await supertest(app)
+      .get('/')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
+      .expect(HTTP_STATUS.OK);
+    const powered = response.get(HEADERS.POWERED_BY);
+    expect(powered).toEqual('custom user agent');
+  });
 
-test('should not display debug hook disabled by default', async () => {
-  const app = await initializeServer('no_debug.yaml');
-  await supertest(app)
-    .get('/-/_debug')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-    .expect(HTTP_STATUS.NOT_FOUND);
-});
+  test('should return 404 if web is disabled', async () => {
+    const app = await initializeServer('web-disabled.yaml');
+    const response = await supertest(app)
+      .get('/')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+      .expect(HTTP_STATUS.NOT_FOUND);
+    expect(response.body.error).toEqual(API_ERROR.WEB_DISABLED);
+  });
+
+  test('should not display debug hook disabled by default', async () => {
+    const app = await initializeServer('no_debug.yaml');
+    await supertest(app)
+      .get('/-/_debug')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+      .expect(HTTP_STATUS.NOT_FOUND);
+  });
 
-test('should  display debug hook if directly enabled', async () => {
-  const app = await initializeServer('conf.yaml');
-  const res = await supertest(app)
-    .get('/-/_debug')
-    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-    .expect(HTTP_STATUS.OK);
-  expect(res.body.pid).toEqual(process.pid);
-  expect(res.body.mem).toBeDefined();
+  test('should  display debug hook if directly enabled', async () => {
+    const app = await initializeServer('conf.yaml');
+    const res = await supertest(app)
+      .get('/-/_debug')
+      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+      .expect(HTTP_STATUS.OK);
+    expect(res.body.pid).toEqual(process.pid);
+    expect(res.body.mem).toBeDefined();
+  });
 });

package/jest.config.js

@@ -1,10 +0,0 @@
-const config = require('../../../jest/config');
-
-module.exports = Object.assign({}, config, {
-  coverageThreshold: {
-    global: {
-      // FIXME: increase to 90
-      lines: 84,
-    },
-  },
-});