@verdaccio/web 8.1.0-next-8.12 → 8.1.0-next-8.13

package/test/api.packages.test.ts

@@ -1,90 +0,0 @@
-import path from 'path';
-import supertest from 'supertest';
-import { afterEach, describe, expect, test, vi } from 'vitest';
-
-import { HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-
-import { initializeServer } from './helper';
-
-setup({});
-
-const mockManifest = vi.fn();
-vi.mock('@verdaccio/ui-theme', () => mockManifest());
-
-describe('test web server', () => {
-  afterEach(() => {
-    vi.clearAllMocks();
-    mockManifest.mockClear();
-  });
-
-  test('should OK to package api', async () => {
-    mockManifest.mockReturnValue(() => ({
-      staticPath: path.join(__dirname, 'static'),
-      manifestFiles: {
-        js: ['runtime.js', 'vendors.js', 'main.js'],
-      },
-      manifest: require('./partials/manifest/manifest.json'),
-    }));
-    const response = await supertest(await initializeServer('default-test.yaml'))
-      .get('/-/verdaccio/data/packages')
-      .set('Accept', HEADERS.JSON_CHARSET)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-    expect(response.body).toEqual([]);
-  });
-
-  test('should allow anonymous user to access package api when login is disabled', async () => {
-    mockManifest.mockReturnValue(() => ({
-      staticPath: path.join(__dirname, 'static'),
-      manifestFiles: {
-        js: ['runtime.js', 'vendors.js', 'main.js'],
-      },
-      manifest: require('./partials/manifest/manifest.json'),
-    }));
-
-    const response = await supertest(await initializeServer('login-disabled.yaml'))
-      .get('/-/verdaccio/data/packages')
-      .set('Accept', HEADERS.JSON_CHARSET)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-
-    expect(response.body).toEqual([]);
-  });
-
-  test('should allow authenticated user to access package api', async () => {
-    mockManifest.mockReturnValue(() => ({
-      staticPath: path.join(__dirname, 'static'),
-      manifestFiles: {
-        js: ['runtime.js', 'vendors.js', 'main.js'],
-      },
-      manifest: require('./partials/manifest/manifest.json'),
-    }));
-
-    const api = supertest(await initializeServer('default-test.yaml'));
-
-    // First login to get the token
-    const loginRes = await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: 'test',
-        })
-      )
-      .expect(HTTP_STATUS.OK);
-
-    expect(loginRes.body.token).toBeDefined();
-
-    // Then access the packages API with the token
-    const response = await api
-      .get('/-/verdaccio/data/packages')
-      .set('Accept', HEADERS.JSON_CHARSET)
-      .set(HEADER_TYPE.AUTHORIZATION, `Bearer ${loginRes.body.token}`)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-
-    expect(response.body).toEqual([]);
-  });
-});

package/test/api.readme.test.ts

@@ -1,105 +0,0 @@
-import path from 'path';
-import supertest from 'supertest';
-import { afterEach, beforeAll, describe, expect, test, vi } from 'vitest';
-
-import { HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-import { publishVersion } from '@verdaccio/test-helper';
-
-import { NOT_README_FOUND } from '../src/api/readme';
-import { initializeServer } from './helper';
-
-setup({});
-
-const mockManifest = vi.fn();
-vi.mock('@verdaccio/ui-theme', () => mockManifest());
-
-describe('readme api', () => {
-  beforeAll(() => {
-    mockManifest.mockReturnValue(() => ({
-      staticPath: path.join(__dirname, 'static'),
-      manifestFiles: {
-        js: ['runtime.js', 'vendors.js', 'main.js'],
-      },
-      manifest: require('./partials/manifest/manifest.json'),
-    }));
-  });
-
-  afterEach(() => {
-    vi.clearAllMocks();
-    mockManifest.mockClear();
-  });
-
-  test('should fetch readme scoped package', async () => {
-    const app = await initializeServer('default-test.yaml');
-    await publishVersion(app, '@scope/pk1-test', '1.0.0', { readme: 'my readme scoped' });
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/package/readme/@scope/pk1-test')
-      .set('Accept', HEADERS.TEXT_PLAIN)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch('my readme scoped');
-  }, 70000);
-
-  test('should fetch readme scoped package with not found message', async () => {
-    const app = await initializeServer('default-test.yaml');
-    await publishVersion(app, '@scope/pk1-test', '1.0.0', { readme: null });
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/package/readme/@scope/pk1-test')
-      .set('Accept', HEADERS.TEXT_PLAIN)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch(NOT_README_FOUND);
-  });
-
-  test('should fetch readme a package', async () => {
-    const app = await initializeServer('default-test.yaml');
-    await publishVersion(app, 'pk1-test', '1.0.0', { readme: 'my readme' });
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/package/readme/pk1-test')
-      .set('Accept', HEADERS.TEXT_PLAIN)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch('my readme');
-  });
-
-  test('should fetch readme a package with not found message', async () => {
-    const app = await initializeServer('default-test.yaml');
-    await publishVersion(app, 'pk1-test', '1.0.0', { readme: null });
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/package/readme/pk1-test')
-      .set('Accept', HEADERS.TEXT_PLAIN)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch(NOT_README_FOUND);
-  });
-
-  test('should fetch readme with keeping all readmes (latest)', async () => {
-    const app = await initializeServer('keep-all-readmes.yaml');
-    await publishVersion(app, 'pk1-test', '1.0.0', { readme: 'my readme' });
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/package/readme/pk1-test')
-      .set('Accept', HEADERS.TEXT_PLAIN)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch('my readme');
-  });
-
-  test('should fetch readme with keeping all readmes (version)', async () => {
-    const app = await initializeServer('keep-all-readmes.yaml');
-    await publishVersion(app, 'pk1-test', '1.0.0', { readme: 'my readme' });
-    await publishVersion(app, 'pk1-test', '1.2.0', { readme: 'my new readme' });
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/package/readme/pk1-test')
-      .set('Accept', HEADERS.TEXT_PLAIN)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch('my new readme');
-    const response2 = await supertest(app)
-      .get('/-/verdaccio/data/package/readme/pk1-test?v=1.0.0')
-      .set('Accept', HEADERS.TEXT_PLAIN)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8)
-      .expect(HTTP_STATUS.OK);
-    expect(response2.text).toMatch('my readme');
-  });
-});

package/test/api.search.test.ts

@@ -1,68 +0,0 @@
-import path from 'path';
-import supertest from 'supertest';
-import { afterEach, beforeAll, describe, expect, test, vi } from 'vitest';
-
-import { HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-import { publishVersion } from '@verdaccio/test-helper';
-
-import { initializeServer } from './helper';
-
-setup({});
-
-const mockManifest = vi.fn();
-vi.mock('@verdaccio/ui-theme', () => mockManifest());
-
-describe('test web server', () => {
-  beforeAll(() => {
-    mockManifest.mockReturnValue(() => ({
-      staticPath: path.join(__dirname, 'static'),
-      manifestFiles: {
-        js: ['runtime.js', 'vendors.js', 'main.js'],
-      },
-      manifest: require('./partials/manifest/manifest.json'),
-    }));
-  });
-
-  afterEach(() => {
-    Date.now = vi.fn(() => new Date(Date.UTC(2017, 1, 14)).valueOf());
-    vi.clearAllMocks();
-    mockManifest.mockClear();
-  });
-
-  test('should find results to search api', async () => {
-    const app = await initializeServer('default-test.yaml');
-    await publishVersion(app, 'foo', '1.0.0');
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/search/foo')
-      .set('Accept', HEADERS.JSON_CHARSET)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-    expect(response.body).toHaveLength(1);
-    // FUTURE: we can improve here matching the right outcome
-  });
-
-  test('should found no results to search', async () => {
-    const response = await supertest(await initializeServer('default-test.yaml'))
-      .get('/-/verdaccio/data/search/notFound')
-      .set('Accept', HEADERS.JSON_CHARSET)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-    expect(response.body).toHaveLength(0);
-  });
-
-  // TODO: need a way to make this fail
-  test.skip('should fail search api', async () => {
-    const response = await supertest(await initializeServer('default-test.yaml'))
-      .get('/-/verdaccio/data/search/thisWillFail')
-      .set('Accept', HEADERS.JSON_CHARSET)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-    expect(response.body).toHaveLength(3);
-  });
-
-  test.todo('search abort request');
-  // maybe these could be done in storage package to avoid have specifics on this level
-  test.todo('search allow request permissions');
-  test.todo('search query params, pagination etc');
-});

package/test/api.sidebar.test.ts

@@ -1,51 +0,0 @@
-import path from 'path';
-import supertest from 'supertest';
-import { afterEach, beforeAll, describe, expect, test, vi } from 'vitest';
-
-import { HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-import { publishVersion } from '@verdaccio/test-helper';
-
-import { initializeServer } from './helper';
-
-setup({});
-
-const mockManifest = vi.fn();
-vi.mock('@verdaccio/ui-theme', () => mockManifest());
-
-describe('sidebar api', () => {
-  beforeAll(() => {
-    mockManifest.mockReturnValue(() => ({
-      staticPath: path.join(__dirname, 'static'),
-      manifestFiles: {
-        js: ['runtime.js', 'vendors.js', 'main.js'],
-      },
-      manifest: require('./partials/manifest/manifest.json'),
-    }));
-  });
-
-  afterEach(() => {
-    vi.clearAllMocks();
-    mockManifest.mockClear();
-  });
-
-  test('should display sidebar info scoped package', async () => {
-    const app = await initializeServer('default-test.yaml');
-    await publishVersion(app, '@scope/pk1-test', '1.0.0', { readme: 'my readme scoped' });
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/sidebar/@scope/pk1-test')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch('@scope/pk1-test');
-  });
-
-  test('should display sidebar info package', async () => {
-    const app = await initializeServer('default-test.yaml');
-    await publishVersion(app, 'pk2-test', '1.0.0', { readme: 'my readme scoped' });
-    const response = await supertest(app)
-      .get('/-/verdaccio/data/sidebar/pk2-test')
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.OK);
-    expect(response.text).toMatch('pk2-test');
-  });
-});

package/test/api.user.test.ts

@@ -1,256 +0,0 @@
-import path from 'path';
-import supertest from 'supertest';
-import { afterEach, beforeAll, describe, expect, test, vi } from 'vitest';
-
-import { API_ERROR, HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
-import { setup } from '@verdaccio/logger';
-
-import { initializeServer } from './helper';
-
-setup({});
-
-const mockManifest = vi.fn();
-vi.mock('@verdaccio/ui-theme', () => mockManifest());
-
-describe('test web server', () => {
-  beforeAll(() => {
-    mockManifest.mockReturnValue(() => ({
-      staticPath: path.join(__dirname, 'static'),
-      manifestFiles: {
-        js: ['runtime.js', 'vendors.js', 'main.js'],
-      },
-      manifest: require('./partials/manifest/manifest.json'),
-    }));
-  });
-
-  afterEach(() => {
-    vi.clearAllMocks();
-    mockManifest.mockClear();
-  });
-
-  test('should get 401', async () => {
-    return supertest(await initializeServer('default-test.yaml'))
-      .post('/-/verdaccio/sec/login')
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: 'password1',
-        })
-      )
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.UNAUTHORIZED)
-      .then((response) => {
-        expect(response.body.error).toEqual(API_ERROR.BAD_USERNAME_PASSWORD);
-      });
-  });
-
-  test('should log in', async () => {
-    return supertest(await initializeServer('default-test.yaml'))
-      .post('/-/verdaccio/sec/login')
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: 'test',
-        })
-      )
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HEADERS.CACHE_CONTROL, 'no-cache, no-store')
-      .expect(HTTP_STATUS.OK)
-      .then((res) => {
-        expect(res.body.error).toBeUndefined();
-        expect(res.body.token).toBeDefined();
-        expect(res.body.token).toBeTruthy();
-        expect(res.body.username).toMatch('test');
-      });
-  });
-
-  test('log in should be disabled', async () => {
-    return supertest(await initializeServer('login-disabled.yaml'))
-      .post('/-/verdaccio/sec/login')
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: 'test',
-        })
-      )
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
-      .expect(HTTP_STATUS.CANNOT_HANDLE, JSON.stringify({ error: 'cannot handle this' }));
-  });
-
-  test('should change password', async () => {
-    const oldPass = 'test';
-    const newPass = 'new-pass';
-
-    const api = supertest(await initializeServer('default-test.yaml'));
-
-    // Login with the old password.
-    const loginRes = await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: oldPass,
-        })
-      )
-      .expect(HTTP_STATUS.OK);
-
-    // Change the password.
-    await api
-      .put('/-/verdaccio/sec/reset_password')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .set(HEADER_TYPE.AUTHORIZATION, `Bearer ${loginRes.body.token}`)
-      .send(
-        JSON.stringify({
-          password: {
-            old: oldPass,
-            new: newPass,
-          },
-        })
-      )
-      .expect(HTTP_STATUS.OK);
-
-    // Verify that you cannot login with the old password.
-    await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: oldPass,
-        })
-      )
-      .expect(HTTP_STATUS.UNAUTHORIZED);
-
-    // Verify that you can login with the new password.
-    await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: newPass,
-        })
-      )
-      .expect(HTTP_STATUS.OK);
-  });
-
-  test('should not change to invalid password', async () => {
-    const oldPass = 'test';
-    const newPass = '12'; // Invalid password: Too short.
-
-    const api = supertest(await initializeServer('default-test.yaml'));
-
-    // Login with the old password.
-    const loginRes = await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: oldPass,
-        })
-      )
-      .expect(HTTP_STATUS.OK);
-
-    // Try changing to an invalid password.
-    await api
-      .put('/-/verdaccio/sec/reset_password')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .set(HEADER_TYPE.AUTHORIZATION, `Bearer ${loginRes.body.token}`)
-      .send(
-        JSON.stringify({
-          password: {
-            old: oldPass,
-            new: newPass,
-          },
-        })
-      )
-      .expect(HTTP_STATUS.BAD_REQUEST);
-
-    // Verify that you cannot login with the new (invalid) password.
-    await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: newPass,
-        })
-      )
-      .expect(HTTP_STATUS.UNAUTHORIZED);
-
-    // Verify that you can still login with the old password.
-    await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: oldPass,
-        })
-      )
-      .expect(HTTP_STATUS.OK);
-  });
-
-  test('should not change password if flag is disabled', async () => {
-    const oldPass = 'test';
-    const newPass = 'new-pass';
-
-    const api = supertest(await initializeServer('change-password-disabled.yaml'));
-
-    // Login with the old password.
-    const loginRes = await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: oldPass,
-        })
-      )
-      .expect(HTTP_STATUS.OK);
-
-    // Try changing the password.
-    await api
-      .put('/-/verdaccio/sec/reset_password')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .set(HEADER_TYPE.AUTHORIZATION, `Bearer ${loginRes.body.token}`)
-      .send(
-        JSON.stringify({
-          password: {
-            old: oldPass,
-            new: newPass,
-          },
-        })
-      )
-      .expect(HTTP_STATUS.CANNOT_HANDLE);
-
-    // Verify that you cannot login with the new (rejected) password.
-    await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: newPass,
-        })
-      )
-      .expect(HTTP_STATUS.UNAUTHORIZED);
-
-    // Verify that you can still login with the old password.
-    await api
-      .post('/-/verdaccio/sec/login')
-      .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
-      .send(
-        JSON.stringify({
-          username: 'test',
-          password: oldPass,
-        })
-      )
-      .expect(HTTP_STATUS.OK);
-  });
-});

package/test/config/change-password-disabled.yaml

@@ -1,28 +0,0 @@
-auth:
-  auth-memory:
-    users:
-      test:
-        name: test
-        password: test
-
-web:
-  title: verdaccio
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $anonymous
-    publish: $anonymous
-  '**':
-    access: $anonymous
-    publish: $anonymous
-_debug: true
-
-flags:
-  changePassword: false

package/test/config/default-test.yaml

@@ -1,28 +0,0 @@
-auth:
-  auth-memory:
-    users:
-      test:
-        name: test
-        password: test
-
-web:
-  title: verdaccio
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $anonymous
-    publish: $anonymous
-  '**':
-    access: $anonymous
-    publish: $anonymous
-_debug: true
-
-flags:
-  changePassword: true

package/test/config/keep-all-readmes.yaml

@@ -1,29 +0,0 @@
-auth:
-  auth-memory:
-    users:
-      test:
-        name: test
-        password: test
-
-web:
-  title: verdaccio
-
-publish:
-  allow_offline: false
-  keep_readmes: all
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $anonymous
-    publish: $anonymous
-  '**':
-    access: $anonymous
-    publish: $anonymous
-_debug: true
-
-flags:
-  changePassword: true

package/test/config/login-disabled.yaml

@@ -1,29 +0,0 @@
-auth:
-  auth-memory:
-    users:
-      test:
-        name: test
-        password: test
-
-web:
-  title: verdaccio
-  login: false
-
-publish:
-  allow_offline: false
-
-uplinks:
-
-log: { type: stdout, format: pretty, level: trace }
-
-packages:
-  '@*/*':
-    access: $anonymous
-    publish: $anonymous
-  '**':
-    access: $anonymous
-    publish: $anonymous
-_debug: true
-
-flags:
-  changePassword: true