@verdaccio/signature 7.0.0-next.0 → 7.0.0-next.1

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @verdaccio/signature
 
+## 7.0.0-next.1
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
 ## 7.0.0-next.0
 
 ### Major Changes

package/build/jwt-token.d.ts

@@ -1,4 +1,6 @@
-import { JWTSignOptions, RemoteUser } from '@verdaccio/types';
+import { SignOptions } from 'jsonwebtoken';
+import { RemoteUser } from '@verdaccio/types';
+export type SignOptionsSignature = Pick<SignOptions, 'algorithm' | 'expiresIn' | 'notBefore'>;
 /**
  * Sign the payload and return JWT
  * https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback
@@ -6,5 +8,5 @@ import { JWTSignOptions, RemoteUser } from '@verdaccio/types';
  * @param secretOrPrivateKey
  * @param options
  */
-export declare function signPayload(payload: RemoteUser, secretOrPrivateKey: string, options?: JWTSignOptions): Promise<string>;
+export declare function signPayload(payload: RemoteUser, secretOrPrivateKey: string, options?: SignOptionsSignature): Promise<string>;
 export declare function verifyPayload(token: string, secretOrPrivateKey: string): RemoteUser;

package/build/jwt-token.js

@@ -19,17 +19,20 @@ const debug = (0, _debug.default)('verdaccio:auth:token:jwt');
 async function signPayload(payload, secretOrPrivateKey, options = {}) {
   return new Promise(function (resolve, reject) {
     debug('sign jwt token');
-    return _jsonwebtoken.default.sign(payload, secretOrPrivateKey,
+    _jsonwebtoken.default.sign(payload, secretOrPrivateKey,
     // FIXME: upgrade to the latest library and types
-    // @ts-ignore
     {
       // 1 === 1ms (one millisecond)
       notBefore: '1',
       // Make sure the time will not rollback :)
       ...options
     }, (error, token) => {
-      debug('error on sign jwt token');
-      return error ? reject(error) : resolve(token);
+      if (error) {
+        debug('error on sign jwt token %s', error.message);
+        return reject(error);
+      }
+      debug('signed jwt token successfully');
+      return resolve(token);
     });
   });
 }

package/build/jwt-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-token.js","names":["_debug","_interopRequireDefault","require","_jsonwebtoken","obj","__esModule","default","debug","buildDebug","signPayload","payload","secretOrPrivateKey","options","Promise","resolve","reject","jwt","sign","notBefore","error","token","verifyPayload","verify"],"sources":["../src/jwt-token.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport jwt from 'jsonwebtoken';\n\nimport { JWTSignOptions, RemoteUser } from '@verdaccio/types';\n\nconst debug = buildDebug('verdaccio:auth:token:jwt');\n/**\n * Sign the payload and return JWT\n * https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback\n * @param payload\n * @param secretOrPrivateKey\n * @param options\n */\nexport async function signPayload(\n  payload: RemoteUser,\n  secretOrPrivateKey: string,\n  options: JWTSignOptions = {}\n): Promise<string> {\n  return new Promise(function (resolve, reject): Promise<string> {\n    debug('sign jwt token');\n    return jwt.sign(\n      payload,\n      secretOrPrivateKey,\n      // FIXME: upgrade to the latest library and types\n      // @ts-ignore\n      {\n        // 1 === 1ms (one millisecond)\n        notBefore: '1', // Make sure the time will not rollback :)\n        ...options,\n      },\n      (error, token: string) => {\n        debug('error on sign jwt token');\n        return error ? reject(error) : resolve(token);\n      }\n    );\n  });\n}\n\nexport function verifyPayload(token: string, secretOrPrivateKey: string): RemoteUser {\n  debug('verify jwt token');\n  return jwt.verify(token, secretOrPrivateKey) as RemoteUser;\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,aAAA,GAAAF,sBAAA,CAAAC,OAAA;AAA+B,SAAAD,uBAAAG,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAI/B,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,0BAA0B,CAAC;AACpD;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,WAAWA,CAC/BC,OAAmB,EACnBC,kBAA0B,EAC1BC,OAAuB,GAAG,CAAC,CAAC,EACX;EACjB,OAAO,IAAIC,OAAO,CAAC,UAAUC,OAAO,EAAEC,MAAM,EAAmB;IAC7DR,KAAK,CAAC,gBAAgB,CAAC;IACvB,OAAOS,qBAAG,CAACC,IAAI,CACbP,OAAO,EACPC,kBAAkB;IAClB;IACA;IACA;MACE;MACAO,SAAS,EAAE,GAAG;MAAE;MAChB,GAAGN;IACL,CAAC,EACD,CAACO,KAAK,EAAEC,KAAa,KAAK;MACxBb,KAAK,CAAC,yBAAyB,CAAC;MAChC,OAAOY,KAAK,GAAGJ,MAAM,CAACI,KAAK,CAAC,GAAGL,OAAO,CAACM,KAAK,CAAC;IAC/C,CACF,CAAC;EACH,CAAC,CAAC;AACJ;AAEO,SAASC,aAAaA,CAACD,KAAa,EAAET,kBAA0B,EAAc;EACnFJ,KAAK,CAAC,kBAAkB,CAAC;EACzB,OAAOS,qBAAG,CAACM,MAAM,CAACF,KAAK,EAAET,kBAAkB,CAAC;AAC9C"}
+{"version":3,"file":"jwt-token.js","names":["_debug","_interopRequireDefault","require","_jsonwebtoken","obj","__esModule","default","debug","buildDebug","signPayload","payload","secretOrPrivateKey","options","Promise","resolve","reject","jwt","sign","notBefore","error","token","message","verifyPayload","verify"],"sources":["../src/jwt-token.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport jwt, { SignOptions } from 'jsonwebtoken';\n\nimport { RemoteUser } from '@verdaccio/types';\n\nexport type SignOptionsSignature = Pick<SignOptions, 'algorithm' | 'expiresIn' | 'notBefore'>;\n\nconst debug = buildDebug('verdaccio:auth:token:jwt');\n/**\n * Sign the payload and return JWT\n * https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback\n * @param payload\n * @param secretOrPrivateKey\n * @param options\n */\nexport async function signPayload(\n  payload: RemoteUser,\n  secretOrPrivateKey: string,\n  options: SignOptionsSignature = {}\n): Promise<string> {\n  return new Promise(function (resolve, reject) {\n    debug('sign jwt token');\n    jwt.sign(\n      payload,\n      secretOrPrivateKey, // FIXME: upgrade to the latest library and types\n      {\n        // 1 === 1ms (one millisecond)\n        notBefore: '1', // Make sure the time will not rollback :)\n        ...options,\n      },\n      (error, token) => {\n        if (error) {\n          debug('error on sign jwt token %s', error.message);\n          return reject(error);\n        }\n        debug('signed jwt token successfully');\n        return resolve(token as string);\n      }\n    );\n  });\n}\n\nexport function verifyPayload(token: string, secretOrPrivateKey: string): RemoteUser {\n  debug('verify jwt token');\n  return jwt.verify(token, secretOrPrivateKey) as RemoteUser;\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,aAAA,GAAAF,sBAAA,CAAAC,OAAA;AAAgD,SAAAD,uBAAAG,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAMhD,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,0BAA0B,CAAC;AACpD;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,WAAWA,CAC/BC,OAAmB,EACnBC,kBAA0B,EAC1BC,OAA6B,GAAG,CAAC,CAAC,EACjB;EACjB,OAAO,IAAIC,OAAO,CAAC,UAAUC,OAAO,EAAEC,MAAM,EAAE;IAC5CR,KAAK,CAAC,gBAAgB,CAAC;IACvBS,qBAAG,CAACC,IAAI,CACNP,OAAO,EACPC,kBAAkB;IAAE;IACpB;MACE;MACAO,SAAS,EAAE,GAAG;MAAE;MAChB,GAAGN;IACL,CAAC,EACD,CAACO,KAAK,EAAEC,KAAK,KAAK;MAChB,IAAID,KAAK,EAAE;QACTZ,KAAK,CAAC,4BAA4B,EAAEY,KAAK,CAACE,OAAO,CAAC;QAClD,OAAON,MAAM,CAACI,KAAK,CAAC;MACtB;MACAZ,KAAK,CAAC,+BAA+B,CAAC;MACtC,OAAOO,OAAO,CAACM,KAAe,CAAC;IACjC,CACF,CAAC;EACH,CAAC,CAAC;AACJ;AAEO,SAASE,aAAaA,CAACF,KAAa,EAAET,kBAA0B,EAAc;EACnFJ,KAAK,CAAC,kBAAkB,CAAC;EACzB,OAAOS,qBAAG,CAACO,MAAM,CAACH,KAAK,EAAET,kBAAkB,CAAC;AAC9C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/signature",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.1",
   "description": "verdaccio signature utils",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,13 +29,13 @@
     "node": ">=12"
   },
   "dependencies": {
-    "jsonwebtoken": "9.0.0",
+    "jsonwebtoken": "9.0.2",
     "debug": "4.3.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/config": "7.0.0-next.0",
-    "@verdaccio/types": "12.0.0-next.0"
+    "@verdaccio/config": "7.0.0-next.3",
+    "@verdaccio/types": "12.0.0-next.1"
   },
   "funding": {
     "type": "opencollective",

package/src/jwt-token.ts

@@ -1,7 +1,9 @@
 import buildDebug from 'debug';
-import jwt from 'jsonwebtoken';
+import jwt, { SignOptions } from 'jsonwebtoken';
 
-import { JWTSignOptions, RemoteUser } from '@verdaccio/types';
+import { RemoteUser } from '@verdaccio/types';
+
+export type SignOptionsSignature = Pick<SignOptions, 'algorithm' | 'expiresIn' | 'notBefore'>;
 
 const debug = buildDebug('verdaccio:auth:token:jwt');
 /**
@@ -14,23 +16,25 @@ const debug = buildDebug('verdaccio:auth:token:jwt');
 export async function signPayload(
   payload: RemoteUser,
   secretOrPrivateKey: string,
-  options: JWTSignOptions = {}
+  options: SignOptionsSignature = {}
 ): Promise<string> {
-  return new Promise(function (resolve, reject): Promise<string> {
+  return new Promise(function (resolve, reject) {
     debug('sign jwt token');
-    return jwt.sign(
+    jwt.sign(
       payload,
-      secretOrPrivateKey,
-      // FIXME: upgrade to the latest library and types
-      // @ts-ignore
+      secretOrPrivateKey, // FIXME: upgrade to the latest library and types
       {
         // 1 === 1ms (one millisecond)
         notBefore: '1', // Make sure the time will not rollback :)
         ...options,
       },
-      (error, token: string) => {
-        debug('error on sign jwt token');
-        return error ? reject(error) : resolve(token);
+      (error, token) => {
+        if (error) {
+          debug('error on sign jwt token %s', error.message);
+          return reject(error);
+        }
+        debug('signed jwt token successfully');
+        return resolve(token as string);
       }
     );
   });