@verdaccio/web 8.1.0-next-8.15 → 8.1.0-next-8.17

package/build/api/package.js

@@ -29,7 +29,7 @@ var _config = require("@verdaccio/config");
 var _logger = require("@verdaccio/logger");
 var _middleware = require("@verdaccio/middleware");
 var _tarball = require("@verdaccio/tarball");
-var _utils = require("@verdaccio/utils");
+var _authorUtils = require("../author-utils");
 var _webUtils = require("../web-utils");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 // Was required by other packages
@@ -39,7 +39,7 @@ const getOrder = (order = 'asc') => {
 };
 const debug = (0, _debug.default)('verdaccio:web:api:package');
 function addPackageWebApi(storage, auth, config) {
-  const isLoginEnabled = config?.web?.login === true;
+  const isLoginEnabled = (0, _webUtils.hasLogin)(config);
   const pkgRouter = (0, _express.Router)(); /* eslint new-cap: 0 */
   const anonymousRemoteUser = (0, _config.createAnonymousRemoteUser)();
   debug('initialized package web api');
@@ -67,12 +67,12 @@ function addPackageWebApi(storage, auth, config) {
       const pkgCopy = {
         ...pkg
       };
-      pkgCopy.author = (0, _utils.formatAuthor)(pkg.author);
+      pkgCopy.author = (0, _authorUtils.formatAuthor)(pkg.author);
       try {
         if (await checkAllow(pkg.name, req.remote_user)) {
           if (config.web) {
             // @ts-ignore
-            pkgCopy.author.avatar = (0, _utils.generateGravatarUrl)(pkgCopy.author.email, config.web.gravatar);
+            pkgCopy.author.avatar = (0, _authorUtils.generateGravatarUrl)(pkgCopy.author.email, config.web.gravatar);
           }
           // convert any remote dist to a local reference
           // eg: if the dist points to npmjs, switch to localhost:4873/prefix/etc.tar.gz

package/build/api/package.js.map

@@ -1 +1 @@
-{"version":3,"file":"package.js","names":["_debug","_interopRequireDefault","require","_express","_lodash","_config","_logger","_middleware","_tarball","_utils","_webUtils","e","__esModule","default","getOrder","order","debug","buildDebug","addPackageWebApi","storage","auth","config","isLoginEnabled","web","login","pkgRouter","Router","anonymousRemoteUser","createAnonymousRemoteUser","checkAllow","name","remoteUser","Promise","resolve","reject","remoteUserAccess","allow_access","packageName","err","allowed","processPackages","packages","req","permissions","packagesToProcess","slice","pkg","pkgCopy","author","formatAuthor","remote_user","avatar","generateGravatarUrl","email","gravatar","_","isNil","dist","isNull","tarball","getLocalRegistryTarballUri","protocol","headers","host","hostname","url_prefix","push","logger","error","get","WebUrls","packages_all","res","next","localPackages","getLocalDatabase","sort_packages","pkgs","sortByName","_default","exports"],"sources":["../../src/api/package.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\nimport _ from 'lodash';\n\nimport { Auth } from '@verdaccio/auth';\nimport { createAnonymousRemoteUser } from '@verdaccio/config';\nimport { logger } from '@verdaccio/logger';\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '@verdaccio/middleware';\nimport { WebUrls } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { getLocalRegistryTarballUri } from '@verdaccio/tarball';\nimport { Config, RemoteUser, Version } from '@verdaccio/types';\nimport { formatAuthor, generateGravatarUrl } from '@verdaccio/utils';\n\nimport { sortByName } from '../web-utils';\n\nexport { $RequestExtend, $ResponseExtend, $NextFunctionVer }; // Was required by other packages\n\nconst getOrder = (order = 'asc') => {\n  return order === 'asc';\n};\n\nconst debug = buildDebug('verdaccio:web:api:package');\n\nfunction addPackageWebApi(storage: Storage, auth: Auth, config: Config): Router {\n  const isLoginEnabled = config?.web?.login === true;\n  const pkgRouter = Router(); /* eslint new-cap: 0 */\n  const anonymousRemoteUser: RemoteUser = createAnonymousRemoteUser();\n\n  debug('initialized package web api');\n  const checkAllow = (name: string, remoteUser: RemoteUser): Promise<boolean> =>\n    new Promise((resolve, reject): void => {\n      debug('is login enabled: %o', isLoginEnabled);\n      const remoteUserAccess = !isLoginEnabled ? anonymousRemoteUser : remoteUser;\n      try {\n        auth.allow_access({ packageName: name }, remoteUserAccess, (err, allowed): void => {\n          if (err) {\n            resolve(false);\n          }\n          return resolve(allowed as boolean);\n        });\n      } catch (err: any) {\n        reject(err);\n      }\n    });\n\n  async function processPackages(packages: Version[] = [], req): Promise<Version[]> {\n    const permissions: Version[] = [];\n    const packagesToProcess = packages.slice();\n    debug('process packages %o', packagesToProcess);\n    for (const pkg of packagesToProcess) {\n      const pkgCopy = { ...pkg };\n      pkgCopy.author = formatAuthor(pkg.author);\n      try {\n        if (await checkAllow(pkg.name, req.remote_user)) {\n          if (config.web) {\n            // @ts-ignore\n            pkgCopy.author.avatar = generateGravatarUrl(pkgCopy.author.email, config.web.gravatar);\n          }\n          // convert any remote dist to a local reference\n          // eg: if the dist points to npmjs, switch to localhost:4873/prefix/etc.tar.gz\n          if (!_.isNil(pkgCopy.dist) && !_.isNull(pkgCopy.dist.tarball)) {\n            pkgCopy.dist.tarball = getLocalRegistryTarballUri(\n              pkgCopy.dist.tarball,\n              pkg.name,\n              { protocol: req.protocol, headers: req.headers as any, host: req.hostname },\n              config?.url_prefix\n            );\n          }\n          permissions.push(pkgCopy);\n        }\n      } catch (err: any) {\n        debug('process packages error %o', err);\n        logger.error(\n          { name: pkg.name, error: err },\n          'permission process for @{name} has failed: @{error}'\n        );\n        throw err;\n      }\n    }\n\n    return permissions;\n  }\n\n  // Get list of all visible package\n  pkgRouter.get(\n    WebUrls.packages_all,\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      debug('hit package web api %o');\n\n      try {\n        const localPackages: Version[] = await storage.getLocalDatabase();\n\n        const order = getOrder(config?.web?.sort_packages);\n        debug('order %o', order);\n        const pkgs = await processPackages(localPackages, req);\n        next(sortByName(pkgs, order));\n      } catch (error: any) {\n        next(error);\n      }\n    }\n  );\n\n  return pkgRouter;\n}\n\nexport default addPackageWebApi;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAH,sBAAA,CAAAC,OAAA;AAGA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AAGA,IAAAM,QAAA,GAAAN,OAAA;AAEA,IAAAO,MAAA,GAAAP,OAAA;AAEA,IAAAQ,SAAA,GAAAR,OAAA;AAA0C,SAAAD,uBAAAU,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEoB;;AAE9D,MAAMG,QAAQ,GAAGA,CAACC,KAAK,GAAG,KAAK,KAAK;EAClC,OAAOA,KAAK,KAAK,KAAK;AACxB,CAAC;AAED,MAAMC,KAAK,GAAG,IAAAC,cAAU,EAAC,2BAA2B,CAAC;AAErD,SAASC,gBAAgBA,CAACC,OAAgB,EAAEC,IAAU,EAAEC,MAAc,EAAU;EAC9E,MAAMC,cAAc,GAAGD,MAAM,EAAEE,GAAG,EAAEC,KAAK,KAAK,IAAI;EAClD,MAAMC,SAAS,GAAG,IAAAC,eAAM,EAAC,CAAC,CAAC,CAAC;EAC5B,MAAMC,mBAA+B,GAAG,IAAAC,iCAAyB,EAAC,CAAC;EAEnEZ,KAAK,CAAC,6BAA6B,CAAC;EACpC,MAAMa,UAAU,GAAGA,CAACC,IAAY,EAAEC,UAAsB,KACtD,IAAIC,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAW;IACrClB,KAAK,CAAC,sBAAsB,EAAEM,cAAc,CAAC;IAC7C,MAAMa,gBAAgB,GAAG,CAACb,cAAc,GAAGK,mBAAmB,GAAGI,UAAU;IAC3E,IAAI;MACFX,IAAI,CAACgB,YAAY,CAAC;QAAEC,WAAW,EAAEP;MAAK,CAAC,EAAEK,gBAAgB,EAAE,CAACG,GAAG,EAAEC,OAAO,KAAW;QACjF,IAAID,GAAG,EAAE;UACPL,OAAO,CAAC,KAAK,CAAC;QAChB;QACA,OAAOA,OAAO,CAACM,OAAkB,CAAC;MACpC,CAAC,CAAC;IACJ,CAAC,CAAC,OAAOD,GAAQ,EAAE;MACjBJ,MAAM,CAACI,GAAG,CAAC;IACb;EACF,CAAC,CAAC;EAEJ,eAAeE,eAAeA,CAACC,QAAmB,GAAG,EAAE,EAAEC,GAAG,EAAsB;IAChF,MAAMC,WAAsB,GAAG,EAAE;IACjC,MAAMC,iBAAiB,GAAGH,QAAQ,CAACI,KAAK,CAAC,CAAC;IAC1C7B,KAAK,CAAC,qBAAqB,EAAE4B,iBAAiB,CAAC;IAC/C,KAAK,MAAME,GAAG,IAAIF,iBAAiB,EAAE;MACnC,MAAMG,OAAO,GAAG;QAAE,GAAGD;MAAI,CAAC;MAC1BC,OAAO,CAACC,MAAM,GAAG,IAAAC,mBAAY,EAACH,GAAG,CAACE,MAAM,CAAC;MACzC,IAAI;QACF,IAAI,MAAMnB,UAAU,CAACiB,GAAG,CAAChB,IAAI,EAAEY,GAAG,CAACQ,WAAW,CAAC,EAAE;UAC/C,IAAI7B,MAAM,CAACE,GAAG,EAAE;YACd;YACAwB,OAAO,CAACC,MAAM,CAACG,MAAM,GAAG,IAAAC,0BAAmB,EAACL,OAAO,CAACC,MAAM,CAACK,KAAK,EAAEhC,MAAM,CAACE,GAAG,CAAC+B,QAAQ,CAAC;UACxF;UACA;UACA;UACA,IAAI,CAACC,eAAC,CAACC,KAAK,CAACT,OAAO,CAACU,IAAI,CAAC,IAAI,CAACF,eAAC,CAACG,MAAM,CAACX,OAAO,CAACU,IAAI,CAACE,OAAO,CAAC,EAAE;YAC7DZ,OAAO,CAACU,IAAI,CAACE,OAAO,GAAG,IAAAC,mCAA0B,EAC/Cb,OAAO,CAACU,IAAI,CAACE,OAAO,EACpBb,GAAG,CAAChB,IAAI,EACR;cAAE+B,QAAQ,EAAEnB,GAAG,CAACmB,QAAQ;cAAEC,OAAO,EAAEpB,GAAG,CAACoB,OAAc;cAAEC,IAAI,EAAErB,GAAG,CAACsB;YAAS,CAAC,EAC3E3C,MAAM,EAAE4C,UACV,CAAC;UACH;UACAtB,WAAW,CAACuB,IAAI,CAACnB,OAAO,CAAC;QAC3B;MACF,CAAC,CAAC,OAAOT,GAAQ,EAAE;QACjBtB,KAAK,CAAC,2BAA2B,EAAEsB,GAAG,CAAC;QACvC6B,cAAM,CAACC,KAAK,CACV;UAAEtC,IAAI,EAAEgB,GAAG,CAAChB,IAAI;UAAEsC,KAAK,EAAE9B;QAAI,CAAC,EAC9B,qDACF,CAAC;QACD,MAAMA,GAAG;MACX;IACF;IAEA,OAAOK,WAAW;EACpB;;EAEA;EACAlB,SAAS,CAAC4C,GAAG,CACXC,mBAAO,CAACC,YAAY,EACpB,gBACE7B,GAAmB,EACnB8B,GAAoB,EACpBC,IAAsB,EACP;IACfzD,KAAK,CAAC,wBAAwB,CAAC;IAE/B,IAAI;MACF,MAAM0D,aAAwB,GAAG,MAAMvD,OAAO,CAACwD,gBAAgB,CAAC,CAAC;MAEjE,MAAM5D,KAAK,GAAGD,QAAQ,CAACO,MAAM,EAAEE,GAAG,EAAEqD,aAAa,CAAC;MAClD5D,KAAK,CAAC,UAAU,EAAED,KAAK,CAAC;MACxB,MAAM8D,IAAI,GAAG,MAAMrC,eAAe,CAACkC,aAAa,EAAEhC,GAAG,CAAC;MACtD+B,IAAI,CAAC,IAAAK,oBAAU,EAACD,IAAI,EAAE9D,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,OAAOqD,KAAU,EAAE;MACnBK,IAAI,CAACL,KAAK,CAAC;IACb;EACF,CACF,CAAC;EAED,OAAO3C,SAAS;AAClB;AAAC,IAAAsD,QAAA,GAAAC,OAAA,CAAAnE,OAAA,GAEcK,gBAAgB","ignoreList":[]}
+{"version":3,"file":"package.js","names":["_debug","_interopRequireDefault","require","_express","_lodash","_config","_logger","_middleware","_tarball","_authorUtils","_webUtils","e","__esModule","default","getOrder","order","debug","buildDebug","addPackageWebApi","storage","auth","config","isLoginEnabled","hasLogin","pkgRouter","Router","anonymousRemoteUser","createAnonymousRemoteUser","checkAllow","name","remoteUser","Promise","resolve","reject","remoteUserAccess","allow_access","packageName","err","allowed","processPackages","packages","req","permissions","packagesToProcess","slice","pkg","pkgCopy","author","formatAuthor","remote_user","web","avatar","generateGravatarUrl","email","gravatar","_","isNil","dist","isNull","tarball","getLocalRegistryTarballUri","protocol","headers","host","hostname","url_prefix","push","logger","error","get","WebUrls","packages_all","res","next","localPackages","getLocalDatabase","sort_packages","pkgs","sortByName","_default","exports"],"sources":["../../src/api/package.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\nimport _ from 'lodash';\n\nimport { Auth } from '@verdaccio/auth';\nimport { createAnonymousRemoteUser } from '@verdaccio/config';\nimport { logger } from '@verdaccio/logger';\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '@verdaccio/middleware';\nimport { WebUrls } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { getLocalRegistryTarballUri } from '@verdaccio/tarball';\nimport { Config, RemoteUser, Version } from '@verdaccio/types';\n\nimport { formatAuthor, generateGravatarUrl } from '../author-utils';\nimport { hasLogin, sortByName } from '../web-utils';\n\nexport { $RequestExtend, $ResponseExtend, $NextFunctionVer }; // Was required by other packages\n\nconst getOrder = (order = 'asc') => {\n  return order === 'asc';\n};\n\nconst debug = buildDebug('verdaccio:web:api:package');\n\nfunction addPackageWebApi(storage: Storage, auth: Auth, config: Config): Router {\n  const isLoginEnabled = hasLogin(config);\n  const pkgRouter = Router(); /* eslint new-cap: 0 */\n  const anonymousRemoteUser: RemoteUser = createAnonymousRemoteUser();\n\n  debug('initialized package web api');\n  const checkAllow = (name: string, remoteUser: RemoteUser): Promise<boolean> =>\n    new Promise((resolve, reject): void => {\n      debug('is login enabled: %o', isLoginEnabled);\n      const remoteUserAccess = !isLoginEnabled ? anonymousRemoteUser : remoteUser;\n      try {\n        auth.allow_access({ packageName: name }, remoteUserAccess, (err, allowed): void => {\n          if (err) {\n            resolve(false);\n          }\n          return resolve(allowed as boolean);\n        });\n      } catch (err: any) {\n        reject(err);\n      }\n    });\n\n  async function processPackages(packages: Version[] = [], req): Promise<Version[]> {\n    const permissions: Version[] = [];\n    const packagesToProcess = packages.slice();\n    debug('process packages %o', packagesToProcess);\n    for (const pkg of packagesToProcess) {\n      const pkgCopy = { ...pkg };\n      pkgCopy.author = formatAuthor(pkg.author);\n      try {\n        if (await checkAllow(pkg.name, req.remote_user)) {\n          if (config.web) {\n            // @ts-ignore\n            pkgCopy.author.avatar = generateGravatarUrl(pkgCopy.author.email, config.web.gravatar);\n          }\n          // convert any remote dist to a local reference\n          // eg: if the dist points to npmjs, switch to localhost:4873/prefix/etc.tar.gz\n          if (!_.isNil(pkgCopy.dist) && !_.isNull(pkgCopy.dist.tarball)) {\n            pkgCopy.dist.tarball = getLocalRegistryTarballUri(\n              pkgCopy.dist.tarball,\n              pkg.name,\n              { protocol: req.protocol, headers: req.headers as any, host: req.hostname },\n              config?.url_prefix\n            );\n          }\n          permissions.push(pkgCopy);\n        }\n      } catch (err: any) {\n        debug('process packages error %o', err);\n        logger.error(\n          { name: pkg.name, error: err },\n          'permission process for @{name} has failed: @{error}'\n        );\n        throw err;\n      }\n    }\n\n    return permissions;\n  }\n\n  // Get list of all visible package\n  pkgRouter.get(\n    WebUrls.packages_all,\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      debug('hit package web api %o');\n\n      try {\n        const localPackages: Version[] = await storage.getLocalDatabase();\n\n        const order = getOrder(config?.web?.sort_packages);\n        debug('order %o', order);\n        const pkgs = await processPackages(localPackages, req);\n        next(sortByName(pkgs, order));\n      } catch (error: any) {\n        next(error);\n      }\n    }\n  );\n\n  return pkgRouter;\n}\n\nexport default addPackageWebApi;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAH,sBAAA,CAAAC,OAAA;AAGA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AAGA,IAAAM,QAAA,GAAAN,OAAA;AAGA,IAAAO,YAAA,GAAAP,OAAA;AACA,IAAAQ,SAAA,GAAAR,OAAA;AAAoD,SAAAD,uBAAAU,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEU;;AAE9D,MAAMG,QAAQ,GAAGA,CAACC,KAAK,GAAG,KAAK,KAAK;EAClC,OAAOA,KAAK,KAAK,KAAK;AACxB,CAAC;AAED,MAAMC,KAAK,GAAG,IAAAC,cAAU,EAAC,2BAA2B,CAAC;AAErD,SAASC,gBAAgBA,CAACC,OAAgB,EAAEC,IAAU,EAAEC,MAAc,EAAU;EAC9E,MAAMC,cAAc,GAAG,IAAAC,kBAAQ,EAACF,MAAM,CAAC;EACvC,MAAMG,SAAS,GAAG,IAAAC,eAAM,EAAC,CAAC,CAAC,CAAC;EAC5B,MAAMC,mBAA+B,GAAG,IAAAC,iCAAyB,EAAC,CAAC;EAEnEX,KAAK,CAAC,6BAA6B,CAAC;EACpC,MAAMY,UAAU,GAAGA,CAACC,IAAY,EAAEC,UAAsB,KACtD,IAAIC,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAW;IACrCjB,KAAK,CAAC,sBAAsB,EAAEM,cAAc,CAAC;IAC7C,MAAMY,gBAAgB,GAAG,CAACZ,cAAc,GAAGI,mBAAmB,GAAGI,UAAU;IAC3E,IAAI;MACFV,IAAI,CAACe,YAAY,CAAC;QAAEC,WAAW,EAAEP;MAAK,CAAC,EAAEK,gBAAgB,EAAE,CAACG,GAAG,EAAEC,OAAO,KAAW;QACjF,IAAID,GAAG,EAAE;UACPL,OAAO,CAAC,KAAK,CAAC;QAChB;QACA,OAAOA,OAAO,CAACM,OAAkB,CAAC;MACpC,CAAC,CAAC;IACJ,CAAC,CAAC,OAAOD,GAAQ,EAAE;MACjBJ,MAAM,CAACI,GAAG,CAAC;IACb;EACF,CAAC,CAAC;EAEJ,eAAeE,eAAeA,CAACC,QAAmB,GAAG,EAAE,EAAEC,GAAG,EAAsB;IAChF,MAAMC,WAAsB,GAAG,EAAE;IACjC,MAAMC,iBAAiB,GAAGH,QAAQ,CAACI,KAAK,CAAC,CAAC;IAC1C5B,KAAK,CAAC,qBAAqB,EAAE2B,iBAAiB,CAAC;IAC/C,KAAK,MAAME,GAAG,IAAIF,iBAAiB,EAAE;MACnC,MAAMG,OAAO,GAAG;QAAE,GAAGD;MAAI,CAAC;MAC1BC,OAAO,CAACC,MAAM,GAAG,IAAAC,yBAAY,EAACH,GAAG,CAACE,MAAM,CAAC;MACzC,IAAI;QACF,IAAI,MAAMnB,UAAU,CAACiB,GAAG,CAAChB,IAAI,EAAEY,GAAG,CAACQ,WAAW,CAAC,EAAE;UAC/C,IAAI5B,MAAM,CAAC6B,GAAG,EAAE;YACd;YACAJ,OAAO,CAACC,MAAM,CAACI,MAAM,GAAG,IAAAC,gCAAmB,EAACN,OAAO,CAACC,MAAM,CAACM,KAAK,EAAEhC,MAAM,CAAC6B,GAAG,CAACI,QAAQ,CAAC;UACxF;UACA;UACA;UACA,IAAI,CAACC,eAAC,CAACC,KAAK,CAACV,OAAO,CAACW,IAAI,CAAC,IAAI,CAACF,eAAC,CAACG,MAAM,CAACZ,OAAO,CAACW,IAAI,CAACE,OAAO,CAAC,EAAE;YAC7Db,OAAO,CAACW,IAAI,CAACE,OAAO,GAAG,IAAAC,mCAA0B,EAC/Cd,OAAO,CAACW,IAAI,CAACE,OAAO,EACpBd,GAAG,CAAChB,IAAI,EACR;cAAEgC,QAAQ,EAAEpB,GAAG,CAACoB,QAAQ;cAAEC,OAAO,EAAErB,GAAG,CAACqB,OAAc;cAAEC,IAAI,EAAEtB,GAAG,CAACuB;YAAS,CAAC,EAC3E3C,MAAM,EAAE4C,UACV,CAAC;UACH;UACAvB,WAAW,CAACwB,IAAI,CAACpB,OAAO,CAAC;QAC3B;MACF,CAAC,CAAC,OAAOT,GAAQ,EAAE;QACjBrB,KAAK,CAAC,2BAA2B,EAAEqB,GAAG,CAAC;QACvC8B,cAAM,CAACC,KAAK,CACV;UAAEvC,IAAI,EAAEgB,GAAG,CAAChB,IAAI;UAAEuC,KAAK,EAAE/B;QAAI,CAAC,EAC9B,qDACF,CAAC;QACD,MAAMA,GAAG;MACX;IACF;IAEA,OAAOK,WAAW;EACpB;;EAEA;EACAlB,SAAS,CAAC6C,GAAG,CACXC,mBAAO,CAACC,YAAY,EACpB,gBACE9B,GAAmB,EACnB+B,GAAoB,EACpBC,IAAsB,EACP;IACfzD,KAAK,CAAC,wBAAwB,CAAC;IAE/B,IAAI;MACF,MAAM0D,aAAwB,GAAG,MAAMvD,OAAO,CAACwD,gBAAgB,CAAC,CAAC;MAEjE,MAAM5D,KAAK,GAAGD,QAAQ,CAACO,MAAM,EAAE6B,GAAG,EAAE0B,aAAa,CAAC;MAClD5D,KAAK,CAAC,UAAU,EAAED,KAAK,CAAC;MACxB,MAAM8D,IAAI,GAAG,MAAMtC,eAAe,CAACmC,aAAa,EAAEjC,GAAG,CAAC;MACtDgC,IAAI,CAAC,IAAAK,oBAAU,EAACD,IAAI,EAAE9D,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,OAAOqD,KAAU,EAAE;MACnBK,IAAI,CAACL,KAAK,CAAC;IACb;EACF,CACF,CAAC;EAED,OAAO5C,SAAS;AAClB;AAAC,IAAAuD,QAAA,GAAAC,OAAA,CAAAnE,OAAA,GAEcK,gBAAgB","ignoreList":[]}

package/build/api/readme.d.ts

@@ -2,15 +2,7 @@ import { Router } from 'express';
 import { Auth } from '@verdaccio/auth';
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
-import { Manifest } from '@verdaccio/types';
-import { AuthorAvatar } from '../web-utils';
 export { $RequestExtend, $ResponseExtend, $NextFunctionVer };
-export type PackageExt = Manifest & {
-    author: AuthorAvatar;
-    dist?: {
-        tarball: string;
-    };
-};
 export declare const NOT_README_FOUND = "ERROR: No README data found!";
 declare function addReadmeWebApi(storage: Storage, auth: Auth): Router;
 export default addReadmeWebApi;

package/build/api/readme.js

@@ -27,15 +27,12 @@ var _express = require("express");
 var _core = require("@verdaccio/core");
 var _logger = require("@verdaccio/logger");
 var _middleware = require("@verdaccio/middleware");
-var _utils = require("@verdaccio/utils");
 var _webUtils = require("../web-utils");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 // Was required by other packages
 
 // Was required by other packages
 
-// TODO: review this type, should be on @verdacid/types
-
 const NOT_README_FOUND = exports.NOT_README_FOUND = 'ERROR: No README data found!';
 const debug = (0, _debug.default)('verdaccio:web:api:readme');
 const getReadme = readme => {
@@ -51,11 +48,11 @@ const getReadme = readme => {
 const getReadmeFromManifest = (manifest, v) => {
   let id;
   let readme;
-  if (typeof v === 'string' && (0, _utils.isVersionValid)(manifest, v)) {
+  if (typeof v === 'string' && (0, _webUtils.isVersionValid)(manifest, v)) {
     id = 'version';
     readme = manifest.versions[v].readme;
   }
-  if (!readme && (0, _utils.isVersionValid)(manifest, manifest[_core.DIST_TAGS]?.latest)) {
+  if (!readme && (0, _webUtils.isVersionValid)(manifest, manifest[_core.DIST_TAGS]?.latest)) {
     id = 'latest';
     readme = manifest.versions[manifest[_core.DIST_TAGS].latest].readme;
   }
@@ -96,6 +93,7 @@ function addReadmeWebApi(storage, auth) {
       });
       debug('readme pkg %o', manifest?.name);
       res.set(_core.HEADER_TYPE.CONTENT_TYPE, _core.HEADERS.TEXT_PLAIN_UTF8);
+      // TODO: sanitize query
       const {
         v
       } = req.query;

package/build/api/readme.js.map

@@ -1 +1 @@
-{"version":3,"file":"readme.js","names":["_debug","_interopRequireDefault","require","_express","_core","_logger","_middleware","_utils","_webUtils","e","__esModule","default","NOT_README_FOUND","exports","debug","buildDebug","getReadme","readme","length","getReadmeFromManifest","manifest","v","id","isVersionValid","versions","DIST_TAGS","latest","addReadmeWebApi","storage","auth","can","allow","beforeAll","a","b","logger","trace","afterAll","pkgRouter","Router","get","WebUrls","readme_package_scoped_version","readme_package_version","req","res","next","rawScope","params","scope","slice","name","addScope","package","requestOptions","protocol","headers","host","remoteAddress","socket","getPackageByOptions","uplinksLook","abbreviated","set","HEADER_TYPE","CONTENT_TYPE","HEADERS","TEXT_PLAIN_UTF8","query","err","_default"],"sources":["../../src/api/readme.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\n\nimport { Auth } from '@verdaccio/auth';\nimport { DIST_TAGS, HEADERS, HEADER_TYPE } from '@verdaccio/core';\nimport { logger } from '@verdaccio/logger';\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend, allow } from '@verdaccio/middleware';\n// Was required by other packages\nimport { WebUrls } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Manifest } from '@verdaccio/types';\nimport { isVersionValid } from '@verdaccio/utils';\n\nimport { AuthorAvatar, addScope } from '../web-utils';\n\nexport { $RequestExtend, $ResponseExtend, $NextFunctionVer }; // Was required by other packages\n\n// TODO: review this type, should be on @verdacid/types\nexport type PackageExt = Manifest & { author: AuthorAvatar; dist?: { tarball: string } };\nexport const NOT_README_FOUND = 'ERROR: No README data found!';\nconst debug = buildDebug('verdaccio:web:api:readme');\n\nconst getReadme = (readme) => {\n  if (typeof readme === 'string' && readme.length === 0) {\n    return NOT_README_FOUND;\n  }\n  if (typeof readme !== 'string') {\n    return NOT_README_FOUND;\n  } else {\n    return readme;\n  }\n};\n\nconst getReadmeFromManifest = (manifest: Manifest, v?: any): string | undefined => {\n  let id;\n  let readme;\n  if (typeof v === 'string' && isVersionValid(manifest, v)) {\n    id = 'version';\n    readme = manifest.versions[v].readme;\n  }\n  if (!readme && isVersionValid(manifest, manifest[DIST_TAGS]?.latest)) {\n    id = 'latest';\n    readme = manifest.versions[manifest[DIST_TAGS].latest].readme;\n  }\n  if (!readme && manifest.readme) {\n    id = 'root';\n    readme = manifest.readme;\n  }\n  debug('readme: %o %o', v, id);\n  return readme;\n};\n\nfunction addReadmeWebApi(storage: Storage, auth: Auth): Router {\n  debug('initialized readme web api');\n  const can = allow(auth, {\n    beforeAll: (a, b) => logger.trace(a, b),\n    afterAll: (a, b) => logger.trace(a, b),\n  });\n  const pkgRouter = Router(); /* eslint new-cap: 0 */\n\n  pkgRouter.get(\n    [WebUrls.readme_package_scoped_version, WebUrls.readme_package_version],\n    can('access'),\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      debug('readme hit');\n      const rawScope = req.params.scope; // May include '@'\n      const scope = rawScope ? rawScope.slice(1) : null; // Remove '@' if present\n      const name = scope ? addScope(scope, req.params.package) : req.params.package;\n      debug('readme name %o', name);\n      const requestOptions = {\n        protocol: req.protocol,\n        headers: req.headers as any,\n        // FIXME: if we migrate to req.hostname, the port is not longer included.\n        host: req.host,\n        remoteAddress: req.socket.remoteAddress,\n      };\n      try {\n        const manifest = (await storage.getPackageByOptions({\n          name,\n          uplinksLook: true,\n          abbreviated: false,\n          requestOptions,\n        })) as Manifest;\n        debug('readme pkg %o', manifest?.name);\n        res.set(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8);\n        const { v } = req.query;\n        const readme = getReadmeFromManifest(manifest, v);\n        next(getReadme(readme));\n      } catch (err) {\n        next(err);\n      }\n    }\n  );\n  return pkgRouter;\n}\n\nexport default addReadmeWebApi;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAGA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,WAAA,GAAAJ,OAAA;AAKA,IAAAK,MAAA,GAAAL,OAAA;AAEA,IAAAM,SAAA,GAAAN,OAAA;AAAsD,SAAAD,uBAAAQ,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AANtD;;AAQ8D;;AAE9D;;AAEO,MAAMG,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG,8BAA8B;AAC9D,MAAME,KAAK,GAAG,IAAAC,cAAU,EAAC,0BAA0B,CAAC;AAEpD,MAAMC,SAAS,GAAIC,MAAM,IAAK;EAC5B,IAAI,OAAOA,MAAM,KAAK,QAAQ,IAAIA,MAAM,CAACC,MAAM,KAAK,CAAC,EAAE;IACrD,OAAON,gBAAgB;EACzB;EACA,IAAI,OAAOK,MAAM,KAAK,QAAQ,EAAE;IAC9B,OAAOL,gBAAgB;EACzB,CAAC,MAAM;IACL,OAAOK,MAAM;EACf;AACF,CAAC;AAED,MAAME,qBAAqB,GAAGA,CAACC,QAAkB,EAAEC,CAAO,KAAyB;EACjF,IAAIC,EAAE;EACN,IAAIL,MAAM;EACV,IAAI,OAAOI,CAAC,KAAK,QAAQ,IAAI,IAAAE,qBAAc,EAACH,QAAQ,EAAEC,CAAC,CAAC,EAAE;IACxDC,EAAE,GAAG,SAAS;IACdL,MAAM,GAAGG,QAAQ,CAACI,QAAQ,CAACH,CAAC,CAAC,CAACJ,MAAM;EACtC;EACA,IAAI,CAACA,MAAM,IAAI,IAAAM,qBAAc,EAACH,QAAQ,EAAEA,QAAQ,CAACK,eAAS,CAAC,EAAEC,MAAM,CAAC,EAAE;IACpEJ,EAAE,GAAG,QAAQ;IACbL,MAAM,GAAGG,QAAQ,CAACI,QAAQ,CAACJ,QAAQ,CAACK,eAAS,CAAC,CAACC,MAAM,CAAC,CAACT,MAAM;EAC/D;EACA,IAAI,CAACA,MAAM,IAAIG,QAAQ,CAACH,MAAM,EAAE;IAC9BK,EAAE,GAAG,MAAM;IACXL,MAAM,GAAGG,QAAQ,CAACH,MAAM;EAC1B;EACAH,KAAK,CAAC,eAAe,EAAEO,CAAC,EAAEC,EAAE,CAAC;EAC7B,OAAOL,MAAM;AACf,CAAC;AAED,SAASU,eAAeA,CAACC,OAAgB,EAAEC,IAAU,EAAU;EAC7Df,KAAK,CAAC,4BAA4B,CAAC;EACnC,MAAMgB,GAAG,GAAG,IAAAC,iBAAK,EAACF,IAAI,EAAE;IACtBG,SAAS,EAAEA,CAACC,CAAC,EAAEC,CAAC,KAAKC,cAAM,CAACC,KAAK,CAACH,CAAC,EAAEC,CAAC,CAAC;IACvCG,QAAQ,EAAEA,CAACJ,CAAC,EAAEC,CAAC,KAAKC,cAAM,CAACC,KAAK,CAACH,CAAC,EAAEC,CAAC;EACvC,CAAC,CAAC;EACF,MAAMI,SAAS,GAAG,IAAAC,eAAM,EAAC,CAAC,CAAC,CAAC;;EAE5BD,SAAS,CAACE,GAAG,CACX,CAACC,mBAAO,CAACC,6BAA6B,EAAED,mBAAO,CAACE,sBAAsB,CAAC,EACvEb,GAAG,CAAC,QAAQ,CAAC,EACb,gBACEc,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EACP;IACfhC,KAAK,CAAC,YAAY,CAAC;IACnB,MAAMiC,QAAQ,GAAGH,GAAG,CAACI,MAAM,CAACC,KAAK,CAAC,CAAC;IACnC,MAAMA,KAAK,GAAGF,QAAQ,GAAGA,QAAQ,CAACG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,MAAMC,IAAI,GAAGF,KAAK,GAAG,IAAAG,kBAAQ,EAACH,KAAK,EAAEL,GAAG,CAACI,MAAM,CAACK,OAAO,CAAC,GAAGT,GAAG,CAACI,MAAM,CAACK,OAAO;IAC7EvC,KAAK,CAAC,gBAAgB,EAAEqC,IAAI,CAAC;IAC7B,MAAMG,cAAc,GAAG;MACrBC,QAAQ,EAAEX,GAAG,CAACW,QAAQ;MACtBC,OAAO,EAAEZ,GAAG,CAACY,OAAc;MAC3B;MACAC,IAAI,EAAEb,GAAG,CAACa,IAAI;MACdC,aAAa,EAAEd,GAAG,CAACe,MAAM,CAACD;IAC5B,CAAC;IACD,IAAI;MACF,MAAMtC,QAAQ,GAAI,MAAMQ,OAAO,CAACgC,mBAAmB,CAAC;QAClDT,IAAI;QACJU,WAAW,EAAE,IAAI;QACjBC,WAAW,EAAE,KAAK;QAClBR;MACF,CAAC,CAAc;MACfxC,KAAK,CAAC,eAAe,EAAEM,QAAQ,EAAE+B,IAAI,CAAC;MACtCN,GAAG,CAACkB,GAAG,CAACC,iBAAW,CAACC,YAAY,EAAEC,aAAO,CAACC,eAAe,CAAC;MAC1D,MAAM;QAAE9C;MAAE,CAAC,GAAGuB,GAAG,CAACwB,KAAK;MACvB,MAAMnD,MAAM,GAAGE,qBAAqB,CAACC,QAAQ,EAAEC,CAAC,CAAC;MACjDyB,IAAI,CAAC9B,SAAS,CAACC,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,OAAOoD,GAAG,EAAE;MACZvB,IAAI,CAACuB,GAAG,CAAC;IACX;EACF,CACF,CAAC;EACD,OAAO/B,SAAS;AAClB;AAAC,IAAAgC,QAAA,GAAAzD,OAAA,CAAAF,OAAA,GAEcgB,eAAe","ignoreList":[]}
+{"version":3,"file":"readme.js","names":["_debug","_interopRequireDefault","require","_express","_core","_logger","_middleware","_webUtils","e","__esModule","default","NOT_README_FOUND","exports","debug","buildDebug","getReadme","readme","length","getReadmeFromManifest","manifest","v","id","isVersionValid","versions","DIST_TAGS","latest","addReadmeWebApi","storage","auth","can","allow","beforeAll","a","b","logger","trace","afterAll","pkgRouter","Router","get","WebUrls","readme_package_scoped_version","readme_package_version","req","res","next","rawScope","params","scope","slice","name","addScope","package","requestOptions","protocol","headers","host","remoteAddress","socket","getPackageByOptions","uplinksLook","abbreviated","set","HEADER_TYPE","CONTENT_TYPE","HEADERS","TEXT_PLAIN_UTF8","query","err","_default"],"sources":["../../src/api/readme.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\n\nimport { Auth } from '@verdaccio/auth';\nimport { DIST_TAGS, HEADERS, HEADER_TYPE } from '@verdaccio/core';\nimport { logger } from '@verdaccio/logger';\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend, allow } from '@verdaccio/middleware';\n// Was required by other packages\nimport { WebUrls } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Manifest } from '@verdaccio/types';\n\nimport { addScope, isVersionValid } from '../web-utils';\n\nexport { $RequestExtend, $ResponseExtend, $NextFunctionVer }; // Was required by other packages\n\nexport const NOT_README_FOUND = 'ERROR: No README data found!';\n\nconst debug = buildDebug('verdaccio:web:api:readme');\n\nconst getReadme = (readme) => {\n  if (typeof readme === 'string' && readme.length === 0) {\n    return NOT_README_FOUND;\n  }\n  if (typeof readme !== 'string') {\n    return NOT_README_FOUND;\n  } else {\n    return readme;\n  }\n};\n\nconst getReadmeFromManifest = (manifest: Manifest, v?: any): string | undefined => {\n  let id;\n  let readme;\n  if (typeof v === 'string' && isVersionValid(manifest, v)) {\n    id = 'version';\n    readme = manifest.versions[v].readme;\n  }\n  if (!readme && isVersionValid(manifest, manifest[DIST_TAGS]?.latest)) {\n    id = 'latest';\n    readme = manifest.versions[manifest[DIST_TAGS].latest].readme;\n  }\n  if (!readme && manifest.readme) {\n    id = 'root';\n    readme = manifest.readme;\n  }\n  debug('readme: %o %o', v, id);\n  return readme;\n};\n\nfunction addReadmeWebApi(storage: Storage, auth: Auth): Router {\n  debug('initialized readme web api');\n  const can = allow(auth, {\n    beforeAll: (a, b) => logger.trace(a, b),\n    afterAll: (a, b) => logger.trace(a, b),\n  });\n  const pkgRouter = Router(); /* eslint new-cap: 0 */\n\n  pkgRouter.get(\n    [WebUrls.readme_package_scoped_version, WebUrls.readme_package_version],\n    can('access'),\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      debug('readme hit');\n      const rawScope = req.params.scope; // May include '@'\n      const scope = rawScope ? rawScope.slice(1) : null; // Remove '@' if present\n      const name = scope ? addScope(scope, req.params.package) : req.params.package;\n      debug('readme name %o', name);\n      const requestOptions = {\n        protocol: req.protocol,\n        headers: req.headers as any,\n        // FIXME: if we migrate to req.hostname, the port is not longer included.\n        host: req.host,\n        remoteAddress: req.socket.remoteAddress,\n      };\n      try {\n        const manifest = (await storage.getPackageByOptions({\n          name,\n          uplinksLook: true,\n          abbreviated: false,\n          requestOptions,\n        })) as Manifest;\n        debug('readme pkg %o', manifest?.name);\n        res.set(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8);\n        // TODO: sanitize query\n        const { v } = req.query;\n        const readme = getReadmeFromManifest(manifest, v);\n        next(getReadme(readme));\n      } catch (err) {\n        next(err);\n      }\n    }\n  );\n  return pkgRouter;\n}\n\nexport default addReadmeWebApi;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAGA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,WAAA,GAAAJ,OAAA;AAMA,IAAAK,SAAA,GAAAL,OAAA;AAAwD,SAAAD,uBAAAO,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AALxD;;AAO8D;;AAEvD,MAAMG,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG,8BAA8B;AAE9D,MAAME,KAAK,GAAG,IAAAC,cAAU,EAAC,0BAA0B,CAAC;AAEpD,MAAMC,SAAS,GAAIC,MAAM,IAAK;EAC5B,IAAI,OAAOA,MAAM,KAAK,QAAQ,IAAIA,MAAM,CAACC,MAAM,KAAK,CAAC,EAAE;IACrD,OAAON,gBAAgB;EACzB;EACA,IAAI,OAAOK,MAAM,KAAK,QAAQ,EAAE;IAC9B,OAAOL,gBAAgB;EACzB,CAAC,MAAM;IACL,OAAOK,MAAM;EACf;AACF,CAAC;AAED,MAAME,qBAAqB,GAAGA,CAACC,QAAkB,EAAEC,CAAO,KAAyB;EACjF,IAAIC,EAAE;EACN,IAAIL,MAAM;EACV,IAAI,OAAOI,CAAC,KAAK,QAAQ,IAAI,IAAAE,wBAAc,EAACH,QAAQ,EAAEC,CAAC,CAAC,EAAE;IACxDC,EAAE,GAAG,SAAS;IACdL,MAAM,GAAGG,QAAQ,CAACI,QAAQ,CAACH,CAAC,CAAC,CAACJ,MAAM;EACtC;EACA,IAAI,CAACA,MAAM,IAAI,IAAAM,wBAAc,EAACH,QAAQ,EAAEA,QAAQ,CAACK,eAAS,CAAC,EAAEC,MAAM,CAAC,EAAE;IACpEJ,EAAE,GAAG,QAAQ;IACbL,MAAM,GAAGG,QAAQ,CAACI,QAAQ,CAACJ,QAAQ,CAACK,eAAS,CAAC,CAACC,MAAM,CAAC,CAACT,MAAM;EAC/D;EACA,IAAI,CAACA,MAAM,IAAIG,QAAQ,CAACH,MAAM,EAAE;IAC9BK,EAAE,GAAG,MAAM;IACXL,MAAM,GAAGG,QAAQ,CAACH,MAAM;EAC1B;EACAH,KAAK,CAAC,eAAe,EAAEO,CAAC,EAAEC,EAAE,CAAC;EAC7B,OAAOL,MAAM;AACf,CAAC;AAED,SAASU,eAAeA,CAACC,OAAgB,EAAEC,IAAU,EAAU;EAC7Df,KAAK,CAAC,4BAA4B,CAAC;EACnC,MAAMgB,GAAG,GAAG,IAAAC,iBAAK,EAACF,IAAI,EAAE;IACtBG,SAAS,EAAEA,CAACC,CAAC,EAAEC,CAAC,KAAKC,cAAM,CAACC,KAAK,CAACH,CAAC,EAAEC,CAAC,CAAC;IACvCG,QAAQ,EAAEA,CAACJ,CAAC,EAAEC,CAAC,KAAKC,cAAM,CAACC,KAAK,CAACH,CAAC,EAAEC,CAAC;EACvC,CAAC,CAAC;EACF,MAAMI,SAAS,GAAG,IAAAC,eAAM,EAAC,CAAC,CAAC,CAAC;;EAE5BD,SAAS,CAACE,GAAG,CACX,CAACC,mBAAO,CAACC,6BAA6B,EAAED,mBAAO,CAACE,sBAAsB,CAAC,EACvEb,GAAG,CAAC,QAAQ,CAAC,EACb,gBACEc,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EACP;IACfhC,KAAK,CAAC,YAAY,CAAC;IACnB,MAAMiC,QAAQ,GAAGH,GAAG,CAACI,MAAM,CAACC,KAAK,CAAC,CAAC;IACnC,MAAMA,KAAK,GAAGF,QAAQ,GAAGA,QAAQ,CAACG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,MAAMC,IAAI,GAAGF,KAAK,GAAG,IAAAG,kBAAQ,EAACH,KAAK,EAAEL,GAAG,CAACI,MAAM,CAACK,OAAO,CAAC,GAAGT,GAAG,CAACI,MAAM,CAACK,OAAO;IAC7EvC,KAAK,CAAC,gBAAgB,EAAEqC,IAAI,CAAC;IAC7B,MAAMG,cAAc,GAAG;MACrBC,QAAQ,EAAEX,GAAG,CAACW,QAAQ;MACtBC,OAAO,EAAEZ,GAAG,CAACY,OAAc;MAC3B;MACAC,IAAI,EAAEb,GAAG,CAACa,IAAI;MACdC,aAAa,EAAEd,GAAG,CAACe,MAAM,CAACD;IAC5B,CAAC;IACD,IAAI;MACF,MAAMtC,QAAQ,GAAI,MAAMQ,OAAO,CAACgC,mBAAmB,CAAC;QAClDT,IAAI;QACJU,WAAW,EAAE,IAAI;QACjBC,WAAW,EAAE,KAAK;QAClBR;MACF,CAAC,CAAc;MACfxC,KAAK,CAAC,eAAe,EAAEM,QAAQ,EAAE+B,IAAI,CAAC;MACtCN,GAAG,CAACkB,GAAG,CAACC,iBAAW,CAACC,YAAY,EAAEC,aAAO,CAACC,eAAe,CAAC;MAC1D;MACA,MAAM;QAAE9C;MAAE,CAAC,GAAGuB,GAAG,CAACwB,KAAK;MACvB,MAAMnD,MAAM,GAAGE,qBAAqB,CAACC,QAAQ,EAAEC,CAAC,CAAC;MACjDyB,IAAI,CAAC9B,SAAS,CAACC,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,OAAOoD,GAAG,EAAE;MACZvB,IAAI,CAACuB,GAAG,CAAC;IACX;EACF,CACF,CAAC;EACD,OAAO/B,SAAS;AAClB;AAAC,IAAAgC,QAAA,GAAAzD,OAAA,CAAAF,OAAA,GAEcgB,eAAe","ignoreList":[]}

package/build/api/sidebar.d.ts

@@ -2,17 +2,7 @@ import { Router } from 'express';
 import { Auth } from '@verdaccio/auth';
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
-import { Config, Manifest, Version } from '@verdaccio/types';
-import { AuthorAvatar } from '../web-utils';
+import { Config } from '@verdaccio/types';
 export { $RequestExtend, $ResponseExtend, $NextFunctionVer };
-export type PackageExt = Manifest & {
-    author: AuthorAvatar;
-    dist?: {
-        tarball: string;
-    };
-};
-export type $SidebarPackage = Manifest & {
-    latest: Version;
-};
 declare function addSidebarWebApi(config: Config, storage: Storage, auth: Auth): Router;
 export default addSidebarWebApi;

package/build/api/sidebar.js

@@ -28,7 +28,7 @@ var _core = require("@verdaccio/core");
 var _logger = require("@verdaccio/logger");
 var _middleware = require("@verdaccio/middleware");
 var _tarball = require("@verdaccio/tarball");
-var _utils = require("@verdaccio/utils");
+var _authorUtils = require("../author-utils");
 var _webUtils = require("../web-utils");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 // Was required by other packages
@@ -62,6 +62,7 @@ function addSidebarWebApi(config, storage, auth) {
         keepUpLinkData: true,
         requestOptions
       });
+      // TODO: sanitize query
       const {
         v
       } = req.query;
@@ -73,20 +74,15 @@ function addSidebarWebApi(config, storage, auth) {
         headers: req.headers,
         host: req.hostname
       }, config.url_prefix).versions;
-      // TODO: review this implementation
-      if (typeof v === 'string' && (0, _utils.isVersionValid)(info, v)) {
-        // @ts-ignore
+      if (typeof v === 'string' && (0, _webUtils.isVersionValid)(info, v)) {
         sideBarInfo.latest = sideBarInfo.versions[v];
-        // @ts-ignore
-        sideBarInfo.latest.author = (0, _utils.formatAuthor)(sideBarInfo.latest.author);
+        sideBarInfo.latest.author = (0, _authorUtils.formatAuthor)(sideBarInfo.latest.author);
       } else {
-        // @ts-ignore
         sideBarInfo.latest = sideBarInfo.versions[info[_core.DIST_TAGS].latest];
-        // @ts-ignore
-        sideBarInfo.latest.author = (0, _utils.formatAuthor)(sideBarInfo.latest.author);
+        sideBarInfo.latest.author = (0, _authorUtils.formatAuthor)(sideBarInfo.latest.author);
       }
       sideBarInfo = (0, _webUtils.deleteProperties)(['readme', '_attachments', '_rev', 'name'], sideBarInfo);
-      const authorAvatar = config.web ? (0, _utils.addGravatarSupport)(sideBarInfo, config.web.gravatar) : (0, _utils.addGravatarSupport)(sideBarInfo);
+      const authorAvatar = config.web ? (0, _authorUtils.addGravatarSupport)(sideBarInfo, config.web.gravatar) : (0, _authorUtils.addGravatarSupport)(sideBarInfo);
       next(authorAvatar);
     } catch (err) {
       res.status(_core.HTTP_STATUS.NOT_FOUND);

package/build/api/sidebar.js.map

@@ -1 +1 @@
-{"version":3,"file":"sidebar.js","names":["_debug","_interopRequireDefault","require","_express","_core","_logger","_middleware","_tarball","_utils","_webUtils","e","__esModule","default","debug","buildDebug","addSidebarWebApi","config","storage","auth","router","Router","can","allow","beforeAll","a","b","logger","trace","afterAll","get","WebUrls","sidebar_scopped_package","sidebar_package","req","res","next","rawScope","params","scope","slice","name","addScope","package","requestOptions","protocol","headers","host","remoteAddress","socket","info","getPackageByOptions","uplinksLook","keepUpLinkData","v","query","sideBarInfo","versions","convertDistRemoteToLocalTarballUrls","hostname","url_prefix","isVersionValid","latest","author","formatAuthor","DIST_TAGS","deleteProperties","authorAvatar","web","addGravatarSupport","gravatar","err","status","HTTP_STATUS","NOT_FOUND","end","_default","exports"],"sources":["../../src/api/sidebar.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\n\nimport { Auth } from '@verdaccio/auth';\nimport { DIST_TAGS, HTTP_STATUS } from '@verdaccio/core';\nimport { logger } from '@verdaccio/logger';\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend, allow } from '@verdaccio/middleware';\n// Was required by other packages\nimport { WebUrls } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { convertDistRemoteToLocalTarballUrls } from '@verdaccio/tarball';\nimport { Config, Manifest, Version } from '@verdaccio/types';\nimport { addGravatarSupport, formatAuthor, isVersionValid } from '@verdaccio/utils';\n\nimport { AuthorAvatar, addScope, deleteProperties } from '../web-utils';\n\nexport { $RequestExtend, $ResponseExtend, $NextFunctionVer }; // Was required by other packages\n\nexport type PackageExt = Manifest & { author: AuthorAvatar; dist?: { tarball: string } };\n\nexport type $SidebarPackage = Manifest & { latest: Version };\nconst debug = buildDebug('verdaccio:web:api:sidebar');\n\nfunction addSidebarWebApi(config: Config, storage: Storage, auth: Auth): Router {\n  debug('initialized sidebar web api');\n  const router = Router(); /* eslint new-cap: 0 */\n  const can = allow(auth, {\n    beforeAll: (a, b) => logger.trace(a, b),\n    afterAll: (a, b) => logger.trace(a, b),\n  });\n  // Get package sidebar\n  router.get(\n    [WebUrls.sidebar_scopped_package, WebUrls.sidebar_package],\n    can('access'),\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      const rawScope = req.params.scope; // May include '@'\n      const scope = rawScope ? rawScope.slice(1) : null; // Remove '@' if present\n      const name: string = scope ? addScope(scope, req.params.package) : req.params.package;\n      const requestOptions = {\n        protocol: req.protocol,\n        headers: req.headers as any,\n        // FIXME: if we migrate to req.hostname, the port is not longer included.\n        host: req.host,\n        remoteAddress: req.socket.remoteAddress,\n      };\n      try {\n        const info = (await storage.getPackageByOptions({\n          name,\n          uplinksLook: true,\n          keepUpLinkData: true,\n          requestOptions,\n        })) as Manifest;\n        const { v } = req.query;\n        let sideBarInfo = { ...info };\n        sideBarInfo.versions = convertDistRemoteToLocalTarballUrls(\n          info,\n          { protocol: req.protocol, headers: req.headers as any, host: req.hostname },\n          config.url_prefix\n        ).versions;\n        // TODO: review this implementation\n        if (typeof v === 'string' && isVersionValid(info, v)) {\n          // @ts-ignore\n          sideBarInfo.latest = sideBarInfo.versions[v];\n          // @ts-ignore\n          sideBarInfo.latest.author = formatAuthor(sideBarInfo.latest.author);\n        } else {\n          // @ts-ignore\n          sideBarInfo.latest = sideBarInfo.versions[info[DIST_TAGS].latest];\n          // @ts-ignore\n          sideBarInfo.latest.author = formatAuthor(sideBarInfo.latest.author);\n        }\n        sideBarInfo = deleteProperties(['readme', '_attachments', '_rev', 'name'], sideBarInfo);\n        const authorAvatar = config.web\n          ? addGravatarSupport(sideBarInfo, config.web.gravatar)\n          : addGravatarSupport(sideBarInfo);\n        next(authorAvatar);\n      } catch (err) {\n        res.status(HTTP_STATUS.NOT_FOUND);\n        res.end();\n      }\n    }\n  );\n\n  return router;\n}\n\nexport default addSidebarWebApi;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAGA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,WAAA,GAAAJ,OAAA;AAIA,IAAAK,QAAA,GAAAL,OAAA;AAEA,IAAAM,MAAA,GAAAN,OAAA;AAEA,IAAAO,SAAA,GAAAP,OAAA;AAAwE,SAAAD,uBAAAS,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAPxE;;AAS8D;;AAK9D,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,2BAA2B,CAAC;AAErD,SAASC,gBAAgBA,CAACC,MAAc,EAAEC,OAAgB,EAAEC,IAAU,EAAU;EAC9EL,KAAK,CAAC,6BAA6B,CAAC;EACpC,MAAMM,MAAM,GAAG,IAAAC,eAAM,EAAC,CAAC,CAAC,CAAC;EACzB,MAAMC,GAAG,GAAG,IAAAC,iBAAK,EAACJ,IAAI,EAAE;IACtBK,SAAS,EAAEA,CAACC,CAAC,EAAEC,CAAC,KAAKC,cAAM,CAACC,KAAK,CAACH,CAAC,EAAEC,CAAC,CAAC;IACvCG,QAAQ,EAAEA,CAACJ,CAAC,EAAEC,CAAC,KAAKC,cAAM,CAACC,KAAK,CAACH,CAAC,EAAEC,CAAC;EACvC,CAAC,CAAC;EACF;EACAN,MAAM,CAACU,GAAG,CACR,CAACC,mBAAO,CAACC,uBAAuB,EAAED,mBAAO,CAACE,eAAe,CAAC,EAC1DX,GAAG,CAAC,QAAQ,CAAC,EACb,gBACEY,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EACP;IACf,MAAMC,QAAQ,GAAGH,GAAG,CAACI,MAAM,CAACC,KAAK,CAAC,CAAC;IACnC,MAAMA,KAAK,GAAGF,QAAQ,GAAGA,QAAQ,CAACG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,MAAMC,IAAY,GAAGF,KAAK,GAAG,IAAAG,kBAAQ,EAACH,KAAK,EAAEL,GAAG,CAACI,MAAM,CAACK,OAAO,CAAC,GAAGT,GAAG,CAACI,MAAM,CAACK,OAAO;IACrF,MAAMC,cAAc,GAAG;MACrBC,QAAQ,EAAEX,GAAG,CAACW,QAAQ;MACtBC,OAAO,EAAEZ,GAAG,CAACY,OAAc;MAC3B;MACAC,IAAI,EAAEb,GAAG,CAACa,IAAI;MACdC,aAAa,EAAEd,GAAG,CAACe,MAAM,CAACD;IAC5B,CAAC;IACD,IAAI;MACF,MAAME,IAAI,GAAI,MAAMhC,OAAO,CAACiC,mBAAmB,CAAC;QAC9CV,IAAI;QACJW,WAAW,EAAE,IAAI;QACjBC,cAAc,EAAE,IAAI;QACpBT;MACF,CAAC,CAAc;MACf,MAAM;QAAEU;MAAE,CAAC,GAAGpB,GAAG,CAACqB,KAAK;MACvB,IAAIC,WAAW,GAAG;QAAE,GAAGN;MAAK,CAAC;MAC7BM,WAAW,CAACC,QAAQ,GAAG,IAAAC,4CAAmC,EACxDR,IAAI,EACJ;QAAEL,QAAQ,EAAEX,GAAG,CAACW,QAAQ;QAAEC,OAAO,EAAEZ,GAAG,CAACY,OAAc;QAAEC,IAAI,EAAEb,GAAG,CAACyB;MAAS,CAAC,EAC3E1C,MAAM,CAAC2C,UACT,CAAC,CAACH,QAAQ;MACV;MACA,IAAI,OAAOH,CAAC,KAAK,QAAQ,IAAI,IAAAO,qBAAc,EAACX,IAAI,EAAEI,CAAC,CAAC,EAAE;QACpD;QACAE,WAAW,CAACM,MAAM,GAAGN,WAAW,CAACC,QAAQ,CAACH,CAAC,CAAC;QAC5C;QACAE,WAAW,CAACM,MAAM,CAACC,MAAM,GAAG,IAAAC,mBAAY,EAACR,WAAW,CAACM,MAAM,CAACC,MAAM,CAAC;MACrE,CAAC,MAAM;QACL;QACAP,WAAW,CAACM,MAAM,GAAGN,WAAW,CAACC,QAAQ,CAACP,IAAI,CAACe,eAAS,CAAC,CAACH,MAAM,CAAC;QACjE;QACAN,WAAW,CAACM,MAAM,CAACC,MAAM,GAAG,IAAAC,mBAAY,EAACR,WAAW,CAACM,MAAM,CAACC,MAAM,CAAC;MACrE;MACAP,WAAW,GAAG,IAAAU,0BAAgB,EAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAEV,WAAW,CAAC;MACvF,MAAMW,YAAY,GAAGlD,MAAM,CAACmD,GAAG,GAC3B,IAAAC,yBAAkB,EAACb,WAAW,EAAEvC,MAAM,CAACmD,GAAG,CAACE,QAAQ,CAAC,GACpD,IAAAD,yBAAkB,EAACb,WAAW,CAAC;MACnCpB,IAAI,CAAC+B,YAAY,CAAC;IACpB,CAAC,CAAC,OAAOI,GAAG,EAAE;MACZpC,GAAG,CAACqC,MAAM,CAACC,iBAAW,CAACC,SAAS,CAAC;MACjCvC,GAAG,CAACwC,GAAG,CAAC,CAAC;IACX;EACF,CACF,CAAC;EAED,OAAOvD,MAAM;AACf;AAAC,IAAAwD,QAAA,GAAAC,OAAA,CAAAhE,OAAA,GAEcG,gBAAgB","ignoreList":[]}
+{"version":3,"file":"sidebar.js","names":["_debug","_interopRequireDefault","require","_express","_core","_logger","_middleware","_tarball","_authorUtils","_webUtils","e","__esModule","default","debug","buildDebug","addSidebarWebApi","config","storage","auth","router","Router","can","allow","beforeAll","a","b","logger","trace","afterAll","get","WebUrls","sidebar_scopped_package","sidebar_package","req","res","next","rawScope","params","scope","slice","name","addScope","package","requestOptions","protocol","headers","host","remoteAddress","socket","info","getPackageByOptions","uplinksLook","keepUpLinkData","v","query","sideBarInfo","versions","convertDistRemoteToLocalTarballUrls","hostname","url_prefix","isVersionValid","latest","author","formatAuthor","DIST_TAGS","deleteProperties","authorAvatar","web","addGravatarSupport","gravatar","err","status","HTTP_STATUS","NOT_FOUND","end","_default","exports"],"sources":["../../src/api/sidebar.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\n\nimport { Auth } from '@verdaccio/auth';\nimport { DIST_TAGS, HTTP_STATUS } from '@verdaccio/core';\nimport { logger } from '@verdaccio/logger';\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend, allow } from '@verdaccio/middleware';\n// Was required by other packages\nimport { WebUrls } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { convertDistRemoteToLocalTarballUrls } from '@verdaccio/tarball';\nimport { Config, Manifest, WebManifest } from '@verdaccio/types';\n\nimport { addGravatarSupport, formatAuthor } from '../author-utils';\nimport { addScope, deleteProperties, isVersionValid } from '../web-utils';\n\nexport { $RequestExtend, $ResponseExtend, $NextFunctionVer }; // Was required by other packages\n\nconst debug = buildDebug('verdaccio:web:api:sidebar');\n\nfunction addSidebarWebApi(config: Config, storage: Storage, auth: Auth): Router {\n  debug('initialized sidebar web api');\n  const router = Router(); /* eslint new-cap: 0 */\n  const can = allow(auth, {\n    beforeAll: (a, b) => logger.trace(a, b),\n    afterAll: (a, b) => logger.trace(a, b),\n  });\n  // Get package sidebar\n  router.get(\n    [WebUrls.sidebar_scopped_package, WebUrls.sidebar_package],\n    can('access'),\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      const rawScope = req.params.scope; // May include '@'\n      const scope = rawScope ? rawScope.slice(1) : null; // Remove '@' if present\n      const name: string = scope ? addScope(scope, req.params.package) : req.params.package;\n      const requestOptions = {\n        protocol: req.protocol,\n        headers: req.headers as any,\n        // FIXME: if we migrate to req.hostname, the port is not longer included.\n        host: req.host,\n        remoteAddress: req.socket.remoteAddress,\n      };\n      try {\n        const info = (await storage.getPackageByOptions({\n          name,\n          uplinksLook: true,\n          keepUpLinkData: true,\n          requestOptions,\n        })) as Manifest;\n        // TODO: sanitize query\n        const { v } = req.query;\n        let sideBarInfo = { ...info } as WebManifest;\n        sideBarInfo.versions = convertDistRemoteToLocalTarballUrls(\n          info,\n          { protocol: req.protocol, headers: req.headers as any, host: req.hostname },\n          config.url_prefix\n        ).versions;\n        if (typeof v === 'string' && isVersionValid(info, v)) {\n          sideBarInfo.latest = sideBarInfo.versions[v];\n          sideBarInfo.latest.author = formatAuthor(sideBarInfo.latest.author);\n        } else {\n          sideBarInfo.latest = sideBarInfo.versions[info[DIST_TAGS].latest];\n          sideBarInfo.latest.author = formatAuthor(sideBarInfo.latest.author);\n        }\n        sideBarInfo = deleteProperties(['readme', '_attachments', '_rev', 'name'], sideBarInfo);\n        const authorAvatar = config.web\n          ? addGravatarSupport(sideBarInfo, config.web.gravatar)\n          : addGravatarSupport(sideBarInfo);\n        next(authorAvatar);\n      } catch (err) {\n        res.status(HTTP_STATUS.NOT_FOUND);\n        res.end();\n      }\n    }\n  );\n\n  return router;\n}\n\nexport default addSidebarWebApi;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAGA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,WAAA,GAAAJ,OAAA;AAIA,IAAAK,QAAA,GAAAL,OAAA;AAGA,IAAAM,YAAA,GAAAN,OAAA;AACA,IAAAO,SAAA,GAAAP,OAAA;AAA0E,SAAAD,uBAAAS,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAP1E;;AAS8D;;AAE9D,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,2BAA2B,CAAC;AAErD,SAASC,gBAAgBA,CAACC,MAAc,EAAEC,OAAgB,EAAEC,IAAU,EAAU;EAC9EL,KAAK,CAAC,6BAA6B,CAAC;EACpC,MAAMM,MAAM,GAAG,IAAAC,eAAM,EAAC,CAAC,CAAC,CAAC;EACzB,MAAMC,GAAG,GAAG,IAAAC,iBAAK,EAACJ,IAAI,EAAE;IACtBK,SAAS,EAAEA,CAACC,CAAC,EAAEC,CAAC,KAAKC,cAAM,CAACC,KAAK,CAACH,CAAC,EAAEC,CAAC,CAAC;IACvCG,QAAQ,EAAEA,CAACJ,CAAC,EAAEC,CAAC,KAAKC,cAAM,CAACC,KAAK,CAACH,CAAC,EAAEC,CAAC;EACvC,CAAC,CAAC;EACF;EACAN,MAAM,CAACU,GAAG,CACR,CAACC,mBAAO,CAACC,uBAAuB,EAAED,mBAAO,CAACE,eAAe,CAAC,EAC1DX,GAAG,CAAC,QAAQ,CAAC,EACb,gBACEY,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EACP;IACf,MAAMC,QAAQ,GAAGH,GAAG,CAACI,MAAM,CAACC,KAAK,CAAC,CAAC;IACnC,MAAMA,KAAK,GAAGF,QAAQ,GAAGA,QAAQ,CAACG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,MAAMC,IAAY,GAAGF,KAAK,GAAG,IAAAG,kBAAQ,EAACH,KAAK,EAAEL,GAAG,CAACI,MAAM,CAACK,OAAO,CAAC,GAAGT,GAAG,CAACI,MAAM,CAACK,OAAO;IACrF,MAAMC,cAAc,GAAG;MACrBC,QAAQ,EAAEX,GAAG,CAACW,QAAQ;MACtBC,OAAO,EAAEZ,GAAG,CAACY,OAAc;MAC3B;MACAC,IAAI,EAAEb,GAAG,CAACa,IAAI;MACdC,aAAa,EAAEd,GAAG,CAACe,MAAM,CAACD;IAC5B,CAAC;IACD,IAAI;MACF,MAAME,IAAI,GAAI,MAAMhC,OAAO,CAACiC,mBAAmB,CAAC;QAC9CV,IAAI;QACJW,WAAW,EAAE,IAAI;QACjBC,cAAc,EAAE,IAAI;QACpBT;MACF,CAAC,CAAc;MACf;MACA,MAAM;QAAEU;MAAE,CAAC,GAAGpB,GAAG,CAACqB,KAAK;MACvB,IAAIC,WAAW,GAAG;QAAE,GAAGN;MAAK,CAAgB;MAC5CM,WAAW,CAACC,QAAQ,GAAG,IAAAC,4CAAmC,EACxDR,IAAI,EACJ;QAAEL,QAAQ,EAAEX,GAAG,CAACW,QAAQ;QAAEC,OAAO,EAAEZ,GAAG,CAACY,OAAc;QAAEC,IAAI,EAAEb,GAAG,CAACyB;MAAS,CAAC,EAC3E1C,MAAM,CAAC2C,UACT,CAAC,CAACH,QAAQ;MACV,IAAI,OAAOH,CAAC,KAAK,QAAQ,IAAI,IAAAO,wBAAc,EAACX,IAAI,EAAEI,CAAC,CAAC,EAAE;QACpDE,WAAW,CAACM,MAAM,GAAGN,WAAW,CAACC,QAAQ,CAACH,CAAC,CAAC;QAC5CE,WAAW,CAACM,MAAM,CAACC,MAAM,GAAG,IAAAC,yBAAY,EAACR,WAAW,CAACM,MAAM,CAACC,MAAM,CAAC;MACrE,CAAC,MAAM;QACLP,WAAW,CAACM,MAAM,GAAGN,WAAW,CAACC,QAAQ,CAACP,IAAI,CAACe,eAAS,CAAC,CAACH,MAAM,CAAC;QACjEN,WAAW,CAACM,MAAM,CAACC,MAAM,GAAG,IAAAC,yBAAY,EAACR,WAAW,CAACM,MAAM,CAACC,MAAM,CAAC;MACrE;MACAP,WAAW,GAAG,IAAAU,0BAAgB,EAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAEV,WAAW,CAAC;MACvF,MAAMW,YAAY,GAAGlD,MAAM,CAACmD,GAAG,GAC3B,IAAAC,+BAAkB,EAACb,WAAW,EAAEvC,MAAM,CAACmD,GAAG,CAACE,QAAQ,CAAC,GACpD,IAAAD,+BAAkB,EAACb,WAAW,CAAC;MACnCpB,IAAI,CAAC+B,YAAY,CAAC;IACpB,CAAC,CAAC,OAAOI,GAAG,EAAE;MACZpC,GAAG,CAACqC,MAAM,CAACC,iBAAW,CAACC,SAAS,CAAC;MACjCvC,GAAG,CAACwC,GAAG,CAAC,CAAC;IACX;EACF,CACF,CAAC;EAED,OAAOvD,MAAM;AACf;AAAC,IAAAwD,QAAA,GAAAC,OAAA,CAAAhE,OAAA,GAEcG,gBAAgB","ignoreList":[]}

package/build/api/user.js

@@ -50,7 +50,7 @@ function addUserAuthApi(auth, config) {
       const {
         name
       } = req.remote_user;
-      if (_core.validationUtils.validatePassword(password.new, config?.serverSettings?.passwordValidationRegex) === false) {
+      if (_core.validationUtils.validatePassword(password.new, config?.server?.passwordValidationRegex) === false) {
         return next(_core.errorUtils.getCode(_core.HTTP_STATUS.BAD_REQUEST, _core.APP_ERROR.PASSWORD_VALIDATION));
       }
       auth.changePassword(name, password.old, password.new, (err, isUpdated) => {

package/build/api/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","names":["_debug","_interopRequireDefault","require","_express","_lodash","_core","_middleware","e","__esModule","default","debug","buildDebug","addUserAuthApi","auth","config","route","Router","post","WebUrls","user_login","rateLimit","userRateLimit","req","res","next","username","password","body","authenticate","err","user","errorCode","message","HTTP_STATUS","UNAUTHORIZED","INTERNAL_ERROR","errorUtils","getCode","remote_user","jWTSignOptions","security","web","sign","set","HEADERS","CACHE_CONTROL","token","jwtEncrypt","name","flags","changePassword","put","reset_password","_","isNil","status","API_ERROR","MUST_BE_LOGGED","validationUtils","validatePassword","new","serverSettings","passwordValidationRegex","BAD_REQUEST","APP_ERROR","PASSWORD_VALIDATION","old","isUpdated","ok","getInternalError","INTERNAL_SERVER_ERROR","_default","exports"],"sources":["../../src/api/user.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Request, Response, Router } from 'express';\nimport _ from 'lodash';\n\nimport { Auth } from '@verdaccio/auth';\nimport {\n  API_ERROR,\n  APP_ERROR,\n  HEADERS,\n  HTTP_STATUS,\n  VerdaccioError,\n  errorUtils,\n  validationUtils,\n} from '@verdaccio/core';\nimport { rateLimit } from '@verdaccio/middleware';\nimport { WebUrls } from '@verdaccio/middleware';\nimport { Config, JWTSignOptions, RemoteUser } from '@verdaccio/types';\n\nimport { $NextFunctionVer } from './package';\n\nconst debug = buildDebug('verdaccio:web:api:user');\n\nfunction addUserAuthApi(auth: Auth, config: Config): Router {\n  const route = Router(); /* eslint new-cap: 0 */\n  route.post(\n    WebUrls.user_login,\n    rateLimit(config?.userRateLimit),\n    function (req: Request, res: Response, next: $NextFunctionVer): void {\n      const { username, password } = req.body;\n      debug('authenticate %o', username);\n      auth.authenticate(\n        username,\n        password,\n        async (err: VerdaccioError | null, user?: RemoteUser): Promise<void> => {\n          if (err) {\n            const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;\n            debug('error authenticate %o', errorCode);\n            next(errorUtils.getCode(errorCode, err.message));\n          } else {\n            req.remote_user = user as RemoteUser;\n            const jWTSignOptions: JWTSignOptions = config.security.web.sign;\n            res.set(HEADERS.CACHE_CONTROL, 'no-cache, no-store');\n            next({\n              token: await auth.jwtEncrypt(user as RemoteUser, jWTSignOptions),\n              username: req.remote_user.name,\n            });\n          }\n        }\n      );\n    }\n  );\n\n  if (config?.flags?.changePassword === true) {\n    route.put(\n      WebUrls.reset_password,\n      rateLimit(config?.userRateLimit),\n      function (req: Request, res: Response, next: $NextFunctionVer): void {\n        if (_.isNil(req.remote_user.name)) {\n          res.status(HTTP_STATUS.UNAUTHORIZED);\n          return next({\n            // FUTURE: update to a more meaningful message\n            message: API_ERROR.MUST_BE_LOGGED,\n          });\n        }\n\n        const { password } = req.body;\n        const { name } = req.remote_user;\n\n        if (\n          validationUtils.validatePassword(\n            password.new,\n            config?.serverSettings?.passwordValidationRegex\n          ) === false\n        ) {\n          return next(errorUtils.getCode(HTTP_STATUS.BAD_REQUEST, APP_ERROR.PASSWORD_VALIDATION));\n        }\n\n        auth.changePassword(name as string, password.old, password.new, (err, isUpdated): void => {\n          if (_.isNil(err) && isUpdated) {\n            next({\n              ok: true,\n            });\n          } else {\n            return next(errorUtils.getInternalError(API_ERROR.INTERNAL_SERVER_ERROR));\n          }\n        });\n      }\n    );\n  }\n\n  return route;\n}\n\nexport default addUserAuthApi;\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAH,sBAAA,CAAAC,OAAA;AAGA,IAAAG,KAAA,GAAAH,OAAA;AASA,IAAAI,WAAA,GAAAJ,OAAA;AAAkD,SAAAD,uBAAAM,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAMlD,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,wBAAwB,CAAC;AAElD,SAASC,cAAcA,CAACC,IAAU,EAAEC,MAAc,EAAU;EAC1D,MAAMC,KAAK,GAAG,IAAAC,eAAM,EAAC,CAAC,CAAC,CAAC;EACxBD,KAAK,CAACE,IAAI,CACRC,mBAAO,CAACC,UAAU,EAClB,IAAAC,qBAAS,EAACN,MAAM,EAAEO,aAAa,CAAC,EAChC,UAAUC,GAAY,EAAEC,GAAa,EAAEC,IAAsB,EAAQ;IACnE,MAAM;MAAEC,QAAQ;MAAEC;IAAS,CAAC,GAAGJ,GAAG,CAACK,IAAI;IACvCjB,KAAK,CAAC,iBAAiB,EAAEe,QAAQ,CAAC;IAClCZ,IAAI,CAACe,YAAY,CACfH,QAAQ,EACRC,QAAQ,EACR,OAAOG,GAA0B,EAAEC,IAAiB,KAAoB;MACtE,IAAID,GAAG,EAAE;QACP,MAAME,SAAS,GAAGF,GAAG,CAACG,OAAO,GAAGC,iBAAW,CAACC,YAAY,GAAGD,iBAAW,CAACE,cAAc;QACrFzB,KAAK,CAAC,uBAAuB,EAAEqB,SAAS,CAAC;QACzCP,IAAI,CAACY,gBAAU,CAACC,OAAO,CAACN,SAAS,EAAEF,GAAG,CAACG,OAAO,CAAC,CAAC;MAClD,CAAC,MAAM;QACLV,GAAG,CAACgB,WAAW,GAAGR,IAAkB;QACpC,MAAMS,cAA8B,GAAGzB,MAAM,CAAC0B,QAAQ,CAACC,GAAG,CAACC,IAAI;QAC/DnB,GAAG,CAACoB,GAAG,CAACC,aAAO,CAACC,aAAa,EAAE,oBAAoB,CAAC;QACpDrB,IAAI,CAAC;UACHsB,KAAK,EAAE,MAAMjC,IAAI,CAACkC,UAAU,CAACjB,IAAI,EAAgBS,cAAc,CAAC;UAChEd,QAAQ,EAAEH,GAAG,CAACgB,WAAW,CAACU;QAC5B,CAAC,CAAC;MACJ;IACF,CACF,CAAC;EACH,CACF,CAAC;EAED,IAAIlC,MAAM,EAAEmC,KAAK,EAAEC,cAAc,KAAK,IAAI,EAAE;IAC1CnC,KAAK,CAACoC,GAAG,CACPjC,mBAAO,CAACkC,cAAc,EACtB,IAAAhC,qBAAS,EAACN,MAAM,EAAEO,aAAa,CAAC,EAChC,UAAUC,GAAY,EAAEC,GAAa,EAAEC,IAAsB,EAAQ;MACnE,IAAI6B,eAAC,CAACC,KAAK,CAAChC,GAAG,CAACgB,WAAW,CAACU,IAAI,CAAC,EAAE;QACjCzB,GAAG,CAACgC,MAAM,CAACtB,iBAAW,CAACC,YAAY,CAAC;QACpC,OAAOV,IAAI,CAAC;UACV;UACAQ,OAAO,EAAEwB,eAAS,CAACC;QACrB,CAAC,CAAC;MACJ;MAEA,MAAM;QAAE/B;MAAS,CAAC,GAAGJ,GAAG,CAACK,IAAI;MAC7B,MAAM;QAAEqB;MAAK,CAAC,GAAG1B,GAAG,CAACgB,WAAW;MAEhC,IACEoB,qBAAe,CAACC,gBAAgB,CAC9BjC,QAAQ,CAACkC,GAAG,EACZ9C,MAAM,EAAE+C,cAAc,EAAEC,uBAC1B,CAAC,KAAK,KAAK,EACX;QACA,OAAOtC,IAAI,CAACY,gBAAU,CAACC,OAAO,CAACJ,iBAAW,CAAC8B,WAAW,EAAEC,eAAS,CAACC,mBAAmB,CAAC,CAAC;MACzF;MAEApD,IAAI,CAACqC,cAAc,CAACF,IAAI,EAAYtB,QAAQ,CAACwC,GAAG,EAAExC,QAAQ,CAACkC,GAAG,EAAE,CAAC/B,GAAG,EAAEsC,SAAS,KAAW;QACxF,IAAId,eAAC,CAACC,KAAK,CAACzB,GAAG,CAAC,IAAIsC,SAAS,EAAE;UAC7B3C,IAAI,CAAC;YACH4C,EAAE,EAAE;UACN,CAAC,CAAC;QACJ,CAAC,MAAM;UACL,OAAO5C,IAAI,CAACY,gBAAU,CAACiC,gBAAgB,CAACb,eAAS,CAACc,qBAAqB,CAAC,CAAC;QAC3E;MACF,CAAC,CAAC;IACJ,CACF,CAAC;EACH;EAEA,OAAOvD,KAAK;AACd;AAAC,IAAAwD,QAAA,GAAAC,OAAA,CAAA/D,OAAA,GAEcG,cAAc","ignoreList":[]}
+{"version":3,"file":"user.js","names":["_debug","_interopRequireDefault","require","_express","_lodash","_core","_middleware","e","__esModule","default","debug","buildDebug","addUserAuthApi","auth","config","route","Router","post","WebUrls","user_login","rateLimit","userRateLimit","req","res","next","username","password","body","authenticate","err","user","errorCode","message","HTTP_STATUS","UNAUTHORIZED","INTERNAL_ERROR","errorUtils","getCode","remote_user","jWTSignOptions","security","web","sign","set","HEADERS","CACHE_CONTROL","token","jwtEncrypt","name","flags","changePassword","put","reset_password","_","isNil","status","API_ERROR","MUST_BE_LOGGED","validationUtils","validatePassword","new","server","passwordValidationRegex","BAD_REQUEST","APP_ERROR","PASSWORD_VALIDATION","old","isUpdated","ok","getInternalError","INTERNAL_SERVER_ERROR","_default","exports"],"sources":["../../src/api/user.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Request, Response, Router } from 'express';\nimport _ from 'lodash';\n\nimport { Auth } from '@verdaccio/auth';\nimport {\n  API_ERROR,\n  APP_ERROR,\n  HEADERS,\n  HTTP_STATUS,\n  VerdaccioError,\n  errorUtils,\n  validationUtils,\n} from '@verdaccio/core';\nimport { rateLimit } from '@verdaccio/middleware';\nimport { WebUrls } from '@verdaccio/middleware';\nimport { Config, JWTSignOptions, RemoteUser } from '@verdaccio/types';\n\nimport { $NextFunctionVer } from './package';\n\nconst debug = buildDebug('verdaccio:web:api:user');\n\nfunction addUserAuthApi(auth: Auth, config: Config): Router {\n  const route = Router(); /* eslint new-cap: 0 */\n  route.post(\n    WebUrls.user_login,\n    rateLimit(config?.userRateLimit),\n    function (req: Request, res: Response, next: $NextFunctionVer): void {\n      const { username, password } = req.body;\n      debug('authenticate %o', username);\n      auth.authenticate(\n        username,\n        password,\n        async (err: VerdaccioError | null, user?: RemoteUser): Promise<void> => {\n          if (err) {\n            const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;\n            debug('error authenticate %o', errorCode);\n            next(errorUtils.getCode(errorCode, err.message));\n          } else {\n            req.remote_user = user as RemoteUser;\n            const jWTSignOptions: JWTSignOptions = config.security.web.sign;\n            res.set(HEADERS.CACHE_CONTROL, 'no-cache, no-store');\n            next({\n              token: await auth.jwtEncrypt(user as RemoteUser, jWTSignOptions),\n              username: req.remote_user.name,\n            });\n          }\n        }\n      );\n    }\n  );\n\n  if (config?.flags?.changePassword === true) {\n    route.put(\n      WebUrls.reset_password,\n      rateLimit(config?.userRateLimit),\n      function (req: Request, res: Response, next: $NextFunctionVer): void {\n        if (_.isNil(req.remote_user.name)) {\n          res.status(HTTP_STATUS.UNAUTHORIZED);\n          return next({\n            // FUTURE: update to a more meaningful message\n            message: API_ERROR.MUST_BE_LOGGED,\n          });\n        }\n\n        const { password } = req.body;\n        const { name } = req.remote_user;\n\n        if (\n          validationUtils.validatePassword(\n            password.new,\n            config?.server?.passwordValidationRegex\n          ) === false\n        ) {\n          return next(errorUtils.getCode(HTTP_STATUS.BAD_REQUEST, APP_ERROR.PASSWORD_VALIDATION));\n        }\n\n        auth.changePassword(name as string, password.old, password.new, (err, isUpdated): void => {\n          if (_.isNil(err) && isUpdated) {\n            next({\n              ok: true,\n            });\n          } else {\n            return next(errorUtils.getInternalError(API_ERROR.INTERNAL_SERVER_ERROR));\n          }\n        });\n      }\n    );\n  }\n\n  return route;\n}\n\nexport default addUserAuthApi;\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAH,sBAAA,CAAAC,OAAA;AAGA,IAAAG,KAAA,GAAAH,OAAA;AASA,IAAAI,WAAA,GAAAJ,OAAA;AAAkD,SAAAD,uBAAAM,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAMlD,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,wBAAwB,CAAC;AAElD,SAASC,cAAcA,CAACC,IAAU,EAAEC,MAAc,EAAU;EAC1D,MAAMC,KAAK,GAAG,IAAAC,eAAM,EAAC,CAAC,CAAC,CAAC;EACxBD,KAAK,CAACE,IAAI,CACRC,mBAAO,CAACC,UAAU,EAClB,IAAAC,qBAAS,EAACN,MAAM,EAAEO,aAAa,CAAC,EAChC,UAAUC,GAAY,EAAEC,GAAa,EAAEC,IAAsB,EAAQ;IACnE,MAAM;MAAEC,QAAQ;MAAEC;IAAS,CAAC,GAAGJ,GAAG,CAACK,IAAI;IACvCjB,KAAK,CAAC,iBAAiB,EAAEe,QAAQ,CAAC;IAClCZ,IAAI,CAACe,YAAY,CACfH,QAAQ,EACRC,QAAQ,EACR,OAAOG,GAA0B,EAAEC,IAAiB,KAAoB;MACtE,IAAID,GAAG,EAAE;QACP,MAAME,SAAS,GAAGF,GAAG,CAACG,OAAO,GAAGC,iBAAW,CAACC,YAAY,GAAGD,iBAAW,CAACE,cAAc;QACrFzB,KAAK,CAAC,uBAAuB,EAAEqB,SAAS,CAAC;QACzCP,IAAI,CAACY,gBAAU,CAACC,OAAO,CAACN,SAAS,EAAEF,GAAG,CAACG,OAAO,CAAC,CAAC;MAClD,CAAC,MAAM;QACLV,GAAG,CAACgB,WAAW,GAAGR,IAAkB;QACpC,MAAMS,cAA8B,GAAGzB,MAAM,CAAC0B,QAAQ,CAACC,GAAG,CAACC,IAAI;QAC/DnB,GAAG,CAACoB,GAAG,CAACC,aAAO,CAACC,aAAa,EAAE,oBAAoB,CAAC;QACpDrB,IAAI,CAAC;UACHsB,KAAK,EAAE,MAAMjC,IAAI,CAACkC,UAAU,CAACjB,IAAI,EAAgBS,cAAc,CAAC;UAChEd,QAAQ,EAAEH,GAAG,CAACgB,WAAW,CAACU;QAC5B,CAAC,CAAC;MACJ;IACF,CACF,CAAC;EACH,CACF,CAAC;EAED,IAAIlC,MAAM,EAAEmC,KAAK,EAAEC,cAAc,KAAK,IAAI,EAAE;IAC1CnC,KAAK,CAACoC,GAAG,CACPjC,mBAAO,CAACkC,cAAc,EACtB,IAAAhC,qBAAS,EAACN,MAAM,EAAEO,aAAa,CAAC,EAChC,UAAUC,GAAY,EAAEC,GAAa,EAAEC,IAAsB,EAAQ;MACnE,IAAI6B,eAAC,CAACC,KAAK,CAAChC,GAAG,CAACgB,WAAW,CAACU,IAAI,CAAC,EAAE;QACjCzB,GAAG,CAACgC,MAAM,CAACtB,iBAAW,CAACC,YAAY,CAAC;QACpC,OAAOV,IAAI,CAAC;UACV;UACAQ,OAAO,EAAEwB,eAAS,CAACC;QACrB,CAAC,CAAC;MACJ;MAEA,MAAM;QAAE/B;MAAS,CAAC,GAAGJ,GAAG,CAACK,IAAI;MAC7B,MAAM;QAAEqB;MAAK,CAAC,GAAG1B,GAAG,CAACgB,WAAW;MAEhC,IACEoB,qBAAe,CAACC,gBAAgB,CAC9BjC,QAAQ,CAACkC,GAAG,EACZ9C,MAAM,EAAE+C,MAAM,EAAEC,uBAClB,CAAC,KAAK,KAAK,EACX;QACA,OAAOtC,IAAI,CAACY,gBAAU,CAACC,OAAO,CAACJ,iBAAW,CAAC8B,WAAW,EAAEC,eAAS,CAACC,mBAAmB,CAAC,CAAC;MACzF;MAEApD,IAAI,CAACqC,cAAc,CAACF,IAAI,EAAYtB,QAAQ,CAACwC,GAAG,EAAExC,QAAQ,CAACkC,GAAG,EAAE,CAAC/B,GAAG,EAAEsC,SAAS,KAAW;QACxF,IAAId,eAAC,CAACC,KAAK,CAACzB,GAAG,CAAC,IAAIsC,SAAS,EAAE;UAC7B3C,IAAI,CAAC;YACH4C,EAAE,EAAE;UACN,CAAC,CAAC;QACJ,CAAC,MAAM;UACL,OAAO5C,IAAI,CAACY,gBAAU,CAACiC,gBAAgB,CAACb,eAAS,CAACc,qBAAqB,CAAC,CAAC;QAC3E;MACF,CAAC,CAAC;IACJ,CACF,CAAC;EACH;EAEA,OAAOvD,KAAK;AACd;AAAC,IAAAwD,QAAA,GAAAC,OAAA,CAAA/D,OAAA,GAEcG,cAAc","ignoreList":[]}

package/build/author-utils.d.ts

@@ -0,0 +1,13 @@
+import { Author, Person, WebManifest } from '@verdaccio/types';
+export declare const GENERIC_AVATAR: string;
+/**
+ * Formats author field for webui.
+ * @see https://docs.npmjs.com/files/package.json#author
+ * @param {string|object|undefined} author
+ */
+export declare function formatAuthor(author?: Person): any;
+export declare function addGravatarSupport(pkgInfo: WebManifest, online?: boolean): Author;
+/**
+ * Generate gravatar url from email address
+ */
+export declare function generateGravatarUrl(email?: string | void, online?: boolean): string;

package/build/author-utils.js

@@ -0,0 +1,172 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.GENERIC_AVATAR = void 0;
+exports.addGravatarSupport = addGravatarSupport;
+exports.formatAuthor = formatAuthor;
+exports.generateGravatarUrl = generateGravatarUrl;
+var _core = require("@verdaccio/core");
+const AVATAR_PROVIDER = 'https://www.gravatar.com/avatar/';
+const GENERIC_AVATAR = exports.GENERIC_AVATAR = 'data:image/svg+xml;utf8,' + encodeURIComponent('<svg height="100" viewBox="-27 24 100 100" width="100" xmlns="http://www.w3.org/' + '2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><defs><circle cx="23" cy="7' + '4" id="a" r="50"/></defs><use fill="#F5EEE5" overflow="visible" xlink:href="#a"/' + '><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-pa' + 'th="url(#b)"><defs><path d="M36 95.9c0 4 4.7 5.2 7.1 5.8 7.6 2 22.8 5.9 22.8 5.9' + ' 3.2 1.1 5.7 3.5 7.1 6.6v9.8H-27v-9.8c1.3-3.1 3.9-5.5 7.1-6.6 0 0 15.2-3.9 22.8-' + '5.9 2.4-.6 7.1-1.8 7.1-5.8V85h26v10.9z" id="c"/></defs><use fill="#E6C19C" overf' + 'low="visible" xlink:href="#c"/><clipPath id="d"><use overflow="visible" xlink:hr' + 'ef="#c"/></clipPath><path clip-path="url(#d)" d="M23.2 35h.2c3.3 0 8.2.2 11.4 2 ' + '3.3 1.9 7.3 5.6 8.5 12.1 2.4 13.7-2.1 35.4-6.3 42.4-4 6.7-9.8 9.2-13.5 9.4H23h-.' + '1c-3.7-.2-9.5-2.7-13.5-9.4-4.2-7-8.7-28.7-6.3-42.4 1.2-6.5 5.2-10.2 8.5-12.1 3.2' + '-1.8 8.1-2 11.4-2h.2z" fill="#D4B08C"/></g><path d="M22.6 40c19.1 0 20.7 13.8 20' + '.8 15.1 1.1 11.9-3 28.1-6.8 33.7-4 5.9-9.8 8.1-13.5 8.3h-.5c-3.8-.3-9.6-2.5-13.6' + '-8.4-3.8-5.6-7.9-21.8-6.8-33.8C2.3 53.7 3.5 40 22.6 40z" fill="#F2CEA5"/></svg>');
+
+/**
+ * Formats author field for webui.
+ * @see https://docs.npmjs.com/files/package.json#author
+ * @param {string|object|undefined} author
+ */
+function formatAuthor(author) {
+  let authorDetails = {
+    name: _core.DEFAULT_USER,
+    email: '',
+    url: ''
+  };
+  if (author === null || author === undefined) {
+    return authorDetails;
+  }
+  if (typeof author === 'string') {
+    authorDetails = {
+      ...authorDetails,
+      name: author
+    };
+  }
+  if (typeof author === 'object') {
+    authorDetails = {
+      ...authorDetails,
+      ...author
+    };
+  }
+  return authorDetails;
+}
+function addGravatarSupport(pkgInfo, online = true) {
+  const pkgInfoCopy = {
+    ...pkgInfo
+  };
+  const author = pkgInfo?.latest?.author ?? null;
+  const contributors = normalizeAuthors(pkgInfo?.latest?.contributors ?? []);
+  const maintainers = normalizeAuthors(pkgInfo?.latest?.maintainers ?? []);
+
+  // for author
+  if (author && typeof author === 'object') {
+    const {
+      email
+    } = author;
+    pkgInfoCopy.latest.author._avatar = generateGravatarUrl(email, online);
+  } else if (author && typeof author === 'string') {
+    const {
+      email,
+      name,
+      url
+    } = splitAuthorString(author);
+    pkgInfoCopy.latest.author = {
+      _avatar: generateGravatarUrl(email, online),
+      email,
+      name,
+      url
+    };
+  }
+
+  // for contributors
+  if (contributors && contributors.length > 0) {
+    pkgInfoCopy.latest.contributors = contributors.map(contributor => {
+      if (typeof contributor === 'object') {
+        contributor._avatar = generateGravatarUrl(contributor.email, online);
+      } else if (typeof contributor === 'string') {
+        const {
+          email,
+          name,
+          url
+        } = splitAuthorString(contributor);
+        contributor = {
+          _avatar: generateGravatarUrl(email, online),
+          email,
+          name,
+          url
+        };
+      }
+      return contributor;
+    });
+  }
+
+  // for maintainers
+  if (maintainers && maintainers.length > 0) {
+    pkgInfoCopy.latest.maintainers = maintainers.map(maintainer => {
+      if (typeof maintainer === 'object') {
+        maintainer._avatar = generateGravatarUrl(maintainer.email, online);
+      } else if (typeof maintainer === 'string') {
+        const {
+          email,
+          name,
+          url
+        } = splitAuthorString(maintainer);
+        maintainer = {
+          _avatar: generateGravatarUrl(email, online),
+          email,
+          name,
+          url
+        };
+      }
+      return maintainer;
+    });
+  }
+  return pkgInfoCopy;
+}
+
+/**
+ * Generate gravatar url from email address
+ */
+function generateGravatarUrl(email = '', online = true) {
+  if (online && typeof email === 'string' && email.length > 0) {
+    email = email.trim().toLocaleLowerCase();
+    const emailMD5 = _core.cryptoUtils.stringToMD5(email);
+    return `${AVATAR_PROVIDER}${emailMD5}`;
+  }
+  return GENERIC_AVATAR;
+}
+function normalizeAuthors(authors) {
+  if (authors === null || authors === undefined) {
+    return [];
+  } else if (authors && !Array.isArray(authors)) {
+    return [authors];
+  } else if (typeof authors === 'string') {
+    return [{
+      name: authors
+    }];
+  }
+  return authors;
+}
+
+/**
+ * Split author string into name, email and url
+ * Example: "Barney Rubble <b@rubble.com> (http://barnyrubble.tumblr.com/)"
+ * @param {string} author
+ * @returns {Object} { name: string, email: string, url: string }
+ */
+function splitAuthorString(author) {
+  // Limit author string length to prevent ReDoS
+  const maxLength = 256;
+  const truncatedAuthor = author.slice(0, maxLength);
+
+  // Split on fixed delimiters rather than using regex
+  const emailStart = truncatedAuthor.indexOf('<');
+  const emailEnd = truncatedAuthor.indexOf('>');
+  const urlStart = truncatedAuthor.indexOf('(');
+  const urlEnd = truncatedAuthor.indexOf(')');
+  let name = truncatedAuthor;
+  let email = '';
+  let url = '';
+  if (emailStart >= 0 && emailEnd > emailStart) {
+    name = truncatedAuthor.slice(0, emailStart).trim();
+    email = truncatedAuthor.slice(emailStart + 1, emailEnd).trim();
+  }
+  if (urlStart >= 0 && urlEnd > urlStart) {
+    url = truncatedAuthor.slice(urlStart + 1, urlEnd).trim();
+  }
+  return {
+    name: name || author,
+    email,
+    url
+  };
+}
+//# sourceMappingURL=author-utils.js.map

package/build/author-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"author-utils.js","names":["_core","require","AVATAR_PROVIDER","GENERIC_AVATAR","exports","encodeURIComponent","formatAuthor","author","authorDetails","name","DEFAULT_USER","email","url","undefined","addGravatarSupport","pkgInfo","online","pkgInfoCopy","latest","contributors","normalizeAuthors","maintainers","_avatar","generateGravatarUrl","splitAuthorString","length","map","contributor","maintainer","trim","toLocaleLowerCase","emailMD5","cryptoUtils","stringToMD5","authors","Array","isArray","maxLength","truncatedAuthor","slice","emailStart","indexOf","emailEnd","urlStart","urlEnd"],"sources":["../src/author-utils.ts"],"sourcesContent":["import { DEFAULT_USER, cryptoUtils } from '@verdaccio/core';\nimport { Author, Person, WebManifest } from '@verdaccio/types';\n\nconst AVATAR_PROVIDER = 'https://www.gravatar.com/avatar/';\n\nexport const GENERIC_AVATAR =\n  'data:image/svg+xml;utf8,' +\n  encodeURIComponent(\n    '<svg height=\"100\" viewBox=\"-27 24 100 100\" width=\"100\" xmlns=\"http://www.w3.org/' +\n      '2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\"><defs><circle cx=\"23\" cy=\"7' +\n      '4\" id=\"a\" r=\"50\"/></defs><use fill=\"#F5EEE5\" overflow=\"visible\" xlink:href=\"#a\"/' +\n      '><clipPath id=\"b\"><use overflow=\"visible\" xlink:href=\"#a\"/></clipPath><g clip-pa' +\n      'th=\"url(#b)\"><defs><path d=\"M36 95.9c0 4 4.7 5.2 7.1 5.8 7.6 2 22.8 5.9 22.8 5.9' +\n      ' 3.2 1.1 5.7 3.5 7.1 6.6v9.8H-27v-9.8c1.3-3.1 3.9-5.5 7.1-6.6 0 0 15.2-3.9 22.8-' +\n      '5.9 2.4-.6 7.1-1.8 7.1-5.8V85h26v10.9z\" id=\"c\"/></defs><use fill=\"#E6C19C\" overf' +\n      'low=\"visible\" xlink:href=\"#c\"/><clipPath id=\"d\"><use overflow=\"visible\" xlink:hr' +\n      'ef=\"#c\"/></clipPath><path clip-path=\"url(#d)\" d=\"M23.2 35h.2c3.3 0 8.2.2 11.4 2 ' +\n      '3.3 1.9 7.3 5.6 8.5 12.1 2.4 13.7-2.1 35.4-6.3 42.4-4 6.7-9.8 9.2-13.5 9.4H23h-.' +\n      '1c-3.7-.2-9.5-2.7-13.5-9.4-4.2-7-8.7-28.7-6.3-42.4 1.2-6.5 5.2-10.2 8.5-12.1 3.2' +\n      '-1.8 8.1-2 11.4-2h.2z\" fill=\"#D4B08C\"/></g><path d=\"M22.6 40c19.1 0 20.7 13.8 20' +\n      '.8 15.1 1.1 11.9-3 28.1-6.8 33.7-4 5.9-9.8 8.1-13.5 8.3h-.5c-3.8-.3-9.6-2.5-13.6' +\n      '-8.4-3.8-5.6-7.9-21.8-6.8-33.8C2.3 53.7 3.5 40 22.6 40z\" fill=\"#F2CEA5\"/></svg>'\n  );\n\n/**\n * Formats author field for webui.\n * @see https://docs.npmjs.com/files/package.json#author\n * @param {string|object|undefined} author\n */\nexport function formatAuthor(author?: Person): any {\n  let authorDetails = {\n    name: DEFAULT_USER,\n    email: '',\n    url: '',\n  };\n\n  if (author === null || author === undefined) {\n    return authorDetails;\n  }\n\n  if (typeof author === 'string') {\n    authorDetails = {\n      ...authorDetails,\n      name: author as string,\n    };\n  }\n\n  if (typeof author === 'object') {\n    authorDetails = {\n      ...authorDetails,\n      ...(author as Author),\n    };\n  }\n\n  return authorDetails;\n}\n\nexport function addGravatarSupport(pkgInfo: WebManifest, online: boolean = true): Author {\n  const pkgInfoCopy = { ...pkgInfo } as any;\n  const author: any = pkgInfo?.latest?.author ?? null;\n  const contributors: Person[] = normalizeAuthors(pkgInfo?.latest?.contributors ?? []);\n  const maintainers: Person[] = normalizeAuthors(pkgInfo?.latest?.maintainers ?? []);\n\n  // for author\n  if (author && typeof author === 'object') {\n    const { email } = author as Author;\n    pkgInfoCopy.latest.author._avatar = generateGravatarUrl(email, online);\n  } else if (author && typeof author === 'string') {\n    const { email, name, url } = splitAuthorString(author);\n    pkgInfoCopy.latest.author = {\n      _avatar: generateGravatarUrl(email, online),\n      email,\n      name,\n      url,\n    };\n  }\n\n  // for contributors\n  if (contributors && contributors.length > 0) {\n    pkgInfoCopy.latest.contributors = contributors.map((contributor): Person => {\n      if (typeof contributor === 'object') {\n        contributor._avatar = generateGravatarUrl(contributor.email, online);\n      } else if (typeof contributor === 'string') {\n        const { email, name, url } = splitAuthorString(contributor);\n        contributor = {\n          _avatar: generateGravatarUrl(email, online),\n          email,\n          name,\n          url,\n        };\n      }\n\n      return contributor;\n    });\n  }\n\n  // for maintainers\n  if (maintainers && maintainers.length > 0) {\n    pkgInfoCopy.latest.maintainers = maintainers.map((maintainer): Person => {\n      if (typeof maintainer === 'object') {\n        maintainer._avatar = generateGravatarUrl(maintainer.email, online);\n      } else if (typeof maintainer === 'string') {\n        const { email, name, url } = splitAuthorString(maintainer);\n        maintainer = {\n          _avatar: generateGravatarUrl(email, online),\n          email,\n          name,\n          url,\n        };\n      }\n\n      return maintainer;\n    });\n  }\n\n  return pkgInfoCopy;\n}\n\n/**\n * Generate gravatar url from email address\n */\nexport function generateGravatarUrl(email: string | void = '', online: boolean = true): string {\n  if (online && typeof email === 'string' && email.length > 0) {\n    email = email.trim().toLocaleLowerCase();\n    const emailMD5 = cryptoUtils.stringToMD5(email);\n    return `${AVATAR_PROVIDER}${emailMD5}`;\n  }\n  return GENERIC_AVATAR;\n}\n\nfunction normalizeAuthors(authors: Person[]): Person[] {\n  if (authors === null || authors === undefined) {\n    return [];\n  } else if (authors && !Array.isArray(authors)) {\n    return [authors];\n  } else if (typeof authors === 'string') {\n    return [\n      {\n        name: authors,\n      },\n    ];\n  }\n\n  return authors;\n}\n\n/**\n * Split author string into name, email and url\n * Example: \"Barney Rubble <b@rubble.com> (http://barnyrubble.tumblr.com/)\"\n * @param {string} author\n * @returns {Object} { name: string, email: string, url: string }\n */\nfunction splitAuthorString(author: string): { name: string; email?: string; url: string } {\n  // Limit author string length to prevent ReDoS\n  const maxLength = 256;\n  const truncatedAuthor = author.slice(0, maxLength);\n\n  // Split on fixed delimiters rather than using regex\n  const emailStart = truncatedAuthor.indexOf('<');\n  const emailEnd = truncatedAuthor.indexOf('>');\n  const urlStart = truncatedAuthor.indexOf('(');\n  const urlEnd = truncatedAuthor.indexOf(')');\n\n  let name = truncatedAuthor;\n  let email = '';\n  let url = '';\n\n  if (emailStart >= 0 && emailEnd > emailStart) {\n    name = truncatedAuthor.slice(0, emailStart).trim();\n    email = truncatedAuthor.slice(emailStart + 1, emailEnd).trim();\n  }\n\n  if (urlStart >= 0 && urlEnd > urlStart) {\n    url = truncatedAuthor.slice(urlStart + 1, urlEnd).trim();\n  }\n\n  return {\n    name: name || author,\n    email,\n    url,\n  };\n}\n"],"mappings":";;;;;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AAGA,MAAMC,eAAe,GAAG,kCAAkC;AAEnD,MAAMC,cAAc,GAAAC,OAAA,CAAAD,cAAA,GACzB,0BAA0B,GAC1BE,kBAAkB,CAChB,kFAAkF,GAChF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,kFAAkF,GAClF,iFACJ,CAAC;;AAEH;AACA;AACA;AACA;AACA;AACO,SAASC,YAAYA,CAACC,MAAe,EAAO;EACjD,IAAIC,aAAa,GAAG;IAClBC,IAAI,EAAEC,kBAAY;IAClBC,KAAK,EAAE,EAAE;IACTC,GAAG,EAAE;EACP,CAAC;EAED,IAAIL,MAAM,KAAK,IAAI,IAAIA,MAAM,KAAKM,SAAS,EAAE;IAC3C,OAAOL,aAAa;EACtB;EAEA,IAAI,OAAOD,MAAM,KAAK,QAAQ,EAAE;IAC9BC,aAAa,GAAG;MACd,GAAGA,aAAa;MAChBC,IAAI,EAAEF;IACR,CAAC;EACH;EAEA,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAC9BC,aAAa,GAAG;MACd,GAAGA,aAAa;MAChB,GAAID;IACN,CAAC;EACH;EAEA,OAAOC,aAAa;AACtB;AAEO,SAASM,kBAAkBA,CAACC,OAAoB,EAAEC,MAAe,GAAG,IAAI,EAAU;EACvF,MAAMC,WAAW,GAAG;IAAE,GAAGF;EAAQ,CAAQ;EACzC,MAAMR,MAAW,GAAGQ,OAAO,EAAEG,MAAM,EAAEX,MAAM,IAAI,IAAI;EACnD,MAAMY,YAAsB,GAAGC,gBAAgB,CAACL,OAAO,EAAEG,MAAM,EAAEC,YAAY,IAAI,EAAE,CAAC;EACpF,MAAME,WAAqB,GAAGD,gBAAgB,CAACL,OAAO,EAAEG,MAAM,EAAEG,WAAW,IAAI,EAAE,CAAC;;EAElF;EACA,IAAId,MAAM,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IACxC,MAAM;MAAEI;IAAM,CAAC,GAAGJ,MAAgB;IAClCU,WAAW,CAACC,MAAM,CAACX,MAAM,CAACe,OAAO,GAAGC,mBAAmB,CAACZ,KAAK,EAAEK,MAAM,CAAC;EACxE,CAAC,MAAM,IAAIT,MAAM,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAC/C,MAAM;MAAEI,KAAK;MAAEF,IAAI;MAAEG;IAAI,CAAC,GAAGY,iBAAiB,CAACjB,MAAM,CAAC;IACtDU,WAAW,CAACC,MAAM,CAACX,MAAM,GAAG;MAC1Be,OAAO,EAAEC,mBAAmB,CAACZ,KAAK,EAAEK,MAAM,CAAC;MAC3CL,KAAK;MACLF,IAAI;MACJG;IACF,CAAC;EACH;;EAEA;EACA,IAAIO,YAAY,IAAIA,YAAY,CAACM,MAAM,GAAG,CAAC,EAAE;IAC3CR,WAAW,CAACC,MAAM,CAACC,YAAY,GAAGA,YAAY,CAACO,GAAG,CAAEC,WAAW,IAAa;MAC1E,IAAI,OAAOA,WAAW,KAAK,QAAQ,EAAE;QACnCA,WAAW,CAACL,OAAO,GAAGC,mBAAmB,CAACI,WAAW,CAAChB,KAAK,EAAEK,MAAM,CAAC;MACtE,CAAC,MAAM,IAAI,OAAOW,WAAW,KAAK,QAAQ,EAAE;QAC1C,MAAM;UAAEhB,KAAK;UAAEF,IAAI;UAAEG;QAAI,CAAC,GAAGY,iBAAiB,CAACG,WAAW,CAAC;QAC3DA,WAAW,GAAG;UACZL,OAAO,EAAEC,mBAAmB,CAACZ,KAAK,EAAEK,MAAM,CAAC;UAC3CL,KAAK;UACLF,IAAI;UACJG;QACF,CAAC;MACH;MAEA,OAAOe,WAAW;IACpB,CAAC,CAAC;EACJ;;EAEA;EACA,IAAIN,WAAW,IAAIA,WAAW,CAACI,MAAM,GAAG,CAAC,EAAE;IACzCR,WAAW,CAACC,MAAM,CAACG,WAAW,GAAGA,WAAW,CAACK,GAAG,CAAEE,UAAU,IAAa;MACvE,IAAI,OAAOA,UAAU,KAAK,QAAQ,EAAE;QAClCA,UAAU,CAACN,OAAO,GAAGC,mBAAmB,CAACK,UAAU,CAACjB,KAAK,EAAEK,MAAM,CAAC;MACpE,CAAC,MAAM,IAAI,OAAOY,UAAU,KAAK,QAAQ,EAAE;QACzC,MAAM;UAAEjB,KAAK;UAAEF,IAAI;UAAEG;QAAI,CAAC,GAAGY,iBAAiB,CAACI,UAAU,CAAC;QAC1DA,UAAU,GAAG;UACXN,OAAO,EAAEC,mBAAmB,CAACZ,KAAK,EAAEK,MAAM,CAAC;UAC3CL,KAAK;UACLF,IAAI;UACJG;QACF,CAAC;MACH;MAEA,OAAOgB,UAAU;IACnB,CAAC,CAAC;EACJ;EAEA,OAAOX,WAAW;AACpB;;AAEA;AACA;AACA;AACO,SAASM,mBAAmBA,CAACZ,KAAoB,GAAG,EAAE,EAAEK,MAAe,GAAG,IAAI,EAAU;EAC7F,IAAIA,MAAM,IAAI,OAAOL,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACc,MAAM,GAAG,CAAC,EAAE;IAC3Dd,KAAK,GAAGA,KAAK,CAACkB,IAAI,CAAC,CAAC,CAACC,iBAAiB,CAAC,CAAC;IACxC,MAAMC,QAAQ,GAAGC,iBAAW,CAACC,WAAW,CAACtB,KAAK,CAAC;IAC/C,OAAO,GAAGT,eAAe,GAAG6B,QAAQ,EAAE;EACxC;EACA,OAAO5B,cAAc;AACvB;AAEA,SAASiB,gBAAgBA,CAACc,OAAiB,EAAY;EACrD,IAAIA,OAAO,KAAK,IAAI,IAAIA,OAAO,KAAKrB,SAAS,EAAE;IAC7C,OAAO,EAAE;EACX,CAAC,MAAM,IAAIqB,OAAO,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,OAAO,CAAC,EAAE;IAC7C,OAAO,CAACA,OAAO,CAAC;EAClB,CAAC,MAAM,IAAI,OAAOA,OAAO,KAAK,QAAQ,EAAE;IACtC,OAAO,CACL;MACEzB,IAAI,EAAEyB;IACR,CAAC,CACF;EACH;EAEA,OAAOA,OAAO;AAChB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,SAASV,iBAAiBA,CAACjB,MAAc,EAAiD;EACxF;EACA,MAAM8B,SAAS,GAAG,GAAG;EACrB,MAAMC,eAAe,GAAG/B,MAAM,CAACgC,KAAK,CAAC,CAAC,EAAEF,SAAS,CAAC;;EAElD;EACA,MAAMG,UAAU,GAAGF,eAAe,CAACG,OAAO,CAAC,GAAG,CAAC;EAC/C,MAAMC,QAAQ,GAAGJ,eAAe,CAACG,OAAO,CAAC,GAAG,CAAC;EAC7C,MAAME,QAAQ,GAAGL,eAAe,CAACG,OAAO,CAAC,GAAG,CAAC;EAC7C,MAAMG,MAAM,GAAGN,eAAe,CAACG,OAAO,CAAC,GAAG,CAAC;EAE3C,IAAIhC,IAAI,GAAG6B,eAAe;EAC1B,IAAI3B,KAAK,GAAG,EAAE;EACd,IAAIC,GAAG,GAAG,EAAE;EAEZ,IAAI4B,UAAU,IAAI,CAAC,IAAIE,QAAQ,GAAGF,UAAU,EAAE;IAC5C/B,IAAI,GAAG6B,eAAe,CAACC,KAAK,CAAC,CAAC,EAAEC,UAAU,CAAC,CAACX,IAAI,CAAC,CAAC;IAClDlB,KAAK,GAAG2B,eAAe,CAACC,KAAK,CAACC,UAAU,GAAG,CAAC,EAAEE,QAAQ,CAAC,CAACb,IAAI,CAAC,CAAC;EAChE;EAEA,IAAIc,QAAQ,IAAI,CAAC,IAAIC,MAAM,GAAGD,QAAQ,EAAE;IACtC/B,GAAG,GAAG0B,eAAe,CAACC,KAAK,CAACI,QAAQ,GAAG,CAAC,EAAEC,MAAM,CAAC,CAACf,IAAI,CAAC,CAAC;EAC1D;EAEA,OAAO;IACLpB,IAAI,EAAEA,IAAI,IAAIF,MAAM;IACpBI,KAAK;IACLC;EACF,CAAC;AACH","ignoreList":[]}

package/build/index.d.ts

@@ -1,2 +1,3 @@
-export { default, PLUGIN_UI_PREFIX, DEFAULT_PLUGIN_UI_THEME } from './middleware';
+export { default, DEFAULT_PLUGIN_UI_THEME } from './middleware';
+export * from './author-utils';
 export * from './web-utils';

package/build/index.js

@@ -4,7 +4,6 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 var _exportNames = {
-  PLUGIN_UI_PREFIX: true,
   DEFAULT_PLUGIN_UI_THEME: true
 };
 Object.defineProperty(exports, "DEFAULT_PLUGIN_UI_THEME", {
@@ -13,12 +12,6 @@ Object.defineProperty(exports, "DEFAULT_PLUGIN_UI_THEME", {
     return _middleware.DEFAULT_PLUGIN_UI_THEME;
   }
 });
-Object.defineProperty(exports, "PLUGIN_UI_PREFIX", {
-  enumerable: true,
-  get: function () {
-    return _middleware.PLUGIN_UI_PREFIX;
-  }
-});
 Object.defineProperty(exports, "default", {
   enumerable: true,
   get: function () {
@@ -26,6 +19,18 @@ Object.defineProperty(exports, "default", {
   }
 });
 var _middleware = _interopRequireWildcard(require("./middleware"));
+var _authorUtils = require("./author-utils");
+Object.keys(_authorUtils).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
+  if (key in exports && exports[key] === _authorUtils[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _authorUtils[key];
+    }
+  });
+});
 var _webUtils = require("./web-utils");
 Object.keys(_webUtils).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;
@@ -38,6 +43,5 @@ Object.keys(_webUtils).forEach(function (key) {
     }
   });
 });
-function _getRequireWildcardCache(e) { if ("function" != typeof WeakMap) return null; var r = new WeakMap(), t = new WeakMap(); return (_getRequireWildcardCache = function (e) { return e ? t : r; })(e); }
-function _interopRequireWildcard(e, r) { if (!r && e && e.__esModule) return e; if (null === e || "object" != typeof e && "function" != typeof e) return { default: e }; var t = _getRequireWildcardCache(r); if (t && t.has(e)) return t.get(e); var n = { __proto__: null }, a = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) { var i = a ? Object.getOwnPropertyDescriptor(e, u) : null; i && (i.get || i.set) ? Object.defineProperty(n, u, i) : n[u] = e[u]; } return n.default = e, t && t.set(e, n), n; }
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_middleware","_interopRequireWildcard","require","_webUtils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","_getRequireWildcardCache","e","WeakMap","r","t","__esModule","default","has","n","__proto__","a","getOwnPropertyDescriptor","u","i","set"],"sources":["../src/index.ts"],"sourcesContent":["export { default, PLUGIN_UI_PREFIX, DEFAULT_PLUGIN_UI_THEME } from './middleware';\nexport * from './web-utils';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,WAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,SAAA,GAAAD,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAF,SAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,SAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,SAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAA4B,SAAAS,yBAAAC,CAAA,6BAAAC,OAAA,mBAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,CAAA,WAAAA,CAAA,GAAAG,CAAA,GAAAD,CAAA,KAAAF,CAAA;AAAA,SAAAhB,wBAAAgB,CAAA,EAAAE,CAAA,SAAAA,CAAA,IAAAF,CAAA,IAAAA,CAAA,CAAAI,UAAA,SAAAJ,CAAA,eAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,WAAAK,OAAA,EAAAL,CAAA,QAAAG,CAAA,GAAAJ,wBAAA,CAAAG,CAAA,OAAAC,CAAA,IAAAA,CAAA,CAAAG,GAAA,CAAAN,CAAA,UAAAG,CAAA,CAAAL,GAAA,CAAAE,CAAA,OAAAO,CAAA,KAAAC,SAAA,UAAAC,CAAA,GAAAtB,MAAA,CAAAS,cAAA,IAAAT,MAAA,CAAAuB,wBAAA,WAAAC,CAAA,IAAAX,CAAA,oBAAAW,CAAA,OAAAnB,cAAA,CAAAC,IAAA,CAAAO,CAAA,EAAAW,CAAA,SAAAC,CAAA,GAAAH,CAAA,GAAAtB,MAAA,CAAAuB,wBAAA,CAAAV,CAAA,EAAAW,CAAA,UAAAC,CAAA,KAAAA,CAAA,CAAAd,GAAA,IAAAc,CAAA,CAAAC,GAAA,IAAA1B,MAAA,CAAAS,cAAA,CAAAW,CAAA,EAAAI,CAAA,EAAAC,CAAA,IAAAL,CAAA,CAAAI,CAAA,IAAAX,CAAA,CAAAW,CAAA,YAAAJ,CAAA,CAAAF,OAAA,GAAAL,CAAA,EAAAG,CAAA,IAAAA,CAAA,CAAAU,GAAA,CAAAb,CAAA,EAAAO,CAAA,GAAAA,CAAA","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_middleware","_interopRequireWildcard","require","_authorUtils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","_webUtils","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","set","getOwnPropertyDescriptor"],"sources":["../src/index.ts"],"sourcesContent":["export { default, DEFAULT_PLUGIN_UI_THEME } from './middleware';\nexport * from './author-utils';\nexport * from './web-utils';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,WAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAF,YAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,YAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,YAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,SAAA,GAAAd,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAW,SAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAS,SAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,SAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AAA4B,SAAAN,wBAAAgB,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAlB,uBAAA,YAAAA,CAAAgB,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAR,GAAA,CAAAE,CAAA,GAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAT,cAAA,CAAAC,IAAA,CAAAO,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAnB,MAAA,CAAAS,cAAA,KAAAT,MAAA,CAAA0B,wBAAA,CAAAb,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAT,GAAA,IAAAS,CAAA,CAAAK,GAAA,IAAAN,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA","ignoreList":[]}

package/build/middleware.d.ts

@@ -1,4 +1,3 @@
-export declare const PLUGIN_UI_PREFIX = "verdaccio-theme";
 export declare const DEFAULT_PLUGIN_UI_THEME = "@verdaccio/ui-theme";
 export declare function loadTheme(config: any): Promise<any>;
 declare const _default: (config: any, auth: any, storage: any, logger: any) => Promise<import("express-serve-static-core").Router>;

package/build/middleware.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.default = exports.PLUGIN_UI_PREFIX = exports.DEFAULT_PLUGIN_UI_THEME = void 0;
+exports.default = exports.DEFAULT_PLUGIN_UI_THEME = void 0;
 exports.loadTheme = loadTheme;
 var _express = _interopRequireDefault(require("express"));
 var _lodash = _interopRequireDefault(require("lodash"));
@@ -13,7 +13,6 @@ var _logger = require("@verdaccio/logger");
 var _middleware = require("@verdaccio/middleware");
 var _api = _interopRequireDefault(require("./api"));
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const PLUGIN_UI_PREFIX = exports.PLUGIN_UI_PREFIX = 'verdaccio-theme';
 const DEFAULT_PLUGIN_UI_THEME = exports.DEFAULT_PLUGIN_UI_THEME = '@verdaccio/ui-theme';
 async function loadTheme(config) {
   if (_lodash.default.isNil(config.theme) === false) {
@@ -30,7 +29,7 @@ async function loadTheme(config) {
         - `manifestFiles`: A object with one property `js` and the array (order matters) of the manifest id to be loaded in the template dynamically.
        */
       return plugin.staticPath && plugin.manifest && plugin.manifestFiles;
-    }, false, config?.serverSettings?.pluginPrefix ?? PLUGIN_UI_PREFIX, _core.PLUGIN_CATEGORY.THEME);
+    }, false, config.server?.pluginPrefix ?? _core.PLUGIN_UI_PREFIX, _core.PLUGIN_CATEGORY.THEME);
     if (plugin.length > 1) {
       _logger.logger.warn('multiple ui themes are not supported; only the first plugin is used');
     }

package/build/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","names":["_express","_interopRequireDefault","require","_lodash","_core","_loaders","_logger","_middleware","_api","e","__esModule","default","PLUGIN_UI_PREFIX","exports","DEFAULT_PLUGIN_UI_THEME","loadTheme","config","_","isNil","theme","plugin","asyncLoadPlugin","logger","staticPath","manifest","manifestFiles","serverSettings","pluginPrefix","PLUGIN_CATEGORY","THEME","length","warn","head","_default","auth","storage","pluginOptions","web","info","name","pluginCategory","router","express","Router","use","webMiddleware","tokenMiddleware","webUIJWTmiddleware","webEndpointsApi"],"sources":["../src/middleware.ts"],"sourcesContent":["import express from 'express';\nimport _ from 'lodash';\n\nimport { PLUGIN_CATEGORY } from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport { webMiddleware } from '@verdaccio/middleware';\n\nimport webEndpointsApi from './api';\n\nexport const PLUGIN_UI_PREFIX = 'verdaccio-theme';\nexport const DEFAULT_PLUGIN_UI_THEME = '@verdaccio/ui-theme';\n\nexport async function loadTheme(config: any) {\n  if (_.isNil(config.theme) === false) {\n    const plugin = await asyncLoadPlugin(\n      config.theme,\n      { config, logger },\n      // TODO: add types { staticPath: string; manifest: unknown; manifestFiles: unknown }\n      function (plugin: any) {\n        /**\n         *\n          - `staticPath`: is the same data returned in Verdaccio 5.\n          - `manifest`: A webpack manifest object.\n          - `manifestFiles`: A object with one property `js` and the array (order matters) of the manifest id to be loaded in the template dynamically.\n         */\n        return plugin.staticPath && plugin.manifest && plugin.manifestFiles;\n      },\n      false,\n      config?.serverSettings?.pluginPrefix ?? PLUGIN_UI_PREFIX,\n      PLUGIN_CATEGORY.THEME\n    );\n    if (plugin.length > 1) {\n      logger.warn('multiple ui themes are not supported; only the first plugin is used');\n    }\n\n    return _.head(plugin);\n  }\n}\n\nexport default async (config, auth, storage, logger) => {\n  let pluginOptions = await loadTheme(config);\n  if (!pluginOptions) {\n    pluginOptions = require(DEFAULT_PLUGIN_UI_THEME)(config.web);\n    logger.info(\n      { name: DEFAULT_PLUGIN_UI_THEME, pluginCategory: PLUGIN_CATEGORY.THEME },\n      'plugin @{name} successfully loaded (@{pluginCategory})'\n    );\n  }\n\n  // eslint-disable-next-line new-cap\n  const router = express.Router();\n  // load application\n  router.use(\n    webMiddleware(\n      config,\n      {\n        tokenMiddleware: auth.webUIJWTmiddleware(),\n        webEndpointsApi: webEndpointsApi(auth, storage, config),\n      },\n      pluginOptions\n    )\n  );\n  return router;\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AAEA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AAAoC,SAAAD,uBAAAQ,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAE7B,MAAMG,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG,iBAAiB;AAC1C,MAAME,uBAAuB,GAAAD,OAAA,CAAAC,uBAAA,GAAG,qBAAqB;AAErD,eAAeC,SAASA,CAACC,MAAW,EAAE;EAC3C,IAAIC,eAAC,CAACC,KAAK,CAACF,MAAM,CAACG,KAAK,CAAC,KAAK,KAAK,EAAE;IACnC,MAAMC,MAAM,GAAG,MAAM,IAAAC,wBAAe,EAClCL,MAAM,CAACG,KAAK,EACZ;MAAEH,MAAM;MAAEM,MAAM,EAANA;IAAO,CAAC;IAClB;IACA,UAAUF,MAAW,EAAE;MACrB;AACR;AACA;AACA;AACA;AACA;MACQ,OAAOA,MAAM,CAACG,UAAU,IAAIH,MAAM,CAACI,QAAQ,IAAIJ,MAAM,CAACK,aAAa;IACrE,CAAC,EACD,KAAK,EACLT,MAAM,EAAEU,cAAc,EAAEC,YAAY,IAAIf,gBAAgB,EACxDgB,qBAAe,CAACC,KAClB,CAAC;IACD,IAAIT,MAAM,CAACU,MAAM,GAAG,CAAC,EAAE;MACrBR,cAAM,CAACS,IAAI,CAAC,qEAAqE,CAAC;IACpF;IAEA,OAAOd,eAAC,CAACe,IAAI,CAACZ,MAAM,CAAC;EACvB;AACF;AAAC,IAAAa,QAAA,GAEc,MAAAA,CAAOjB,MAAM,EAAEkB,IAAI,EAAEC,OAAO,EAAEb,MAAM,KAAK;EACtD,IAAIc,aAAa,GAAG,MAAMrB,SAAS,CAACC,MAAM,CAAC;EAC3C,IAAI,CAACoB,aAAa,EAAE;IAClBA,aAAa,GAAGlC,OAAO,CAACY,uBAAuB,CAAC,CAACE,MAAM,CAACqB,GAAG,CAAC;IAC5Df,MAAM,CAACgB,IAAI,CACT;MAAEC,IAAI,EAAEzB,uBAAuB;MAAE0B,cAAc,EAAEZ,qBAAe,CAACC;IAAM,CAAC,EACxE,wDACF,CAAC;EACH;;EAEA;EACA,MAAMY,MAAM,GAAGC,gBAAO,CAACC,MAAM,CAAC,CAAC;EAC/B;EACAF,MAAM,CAACG,GAAG,CACR,IAAAC,yBAAa,EACX7B,MAAM,EACN;IACE8B,eAAe,EAAEZ,IAAI,CAACa,kBAAkB,CAAC,CAAC;IAC1CC,eAAe,EAAE,IAAAA,YAAe,EAACd,IAAI,EAAEC,OAAO,EAAEnB,MAAM;EACxD,CAAC,EACDoB,aACF,CACF,CAAC;EACD,OAAOK,MAAM;AACf,CAAC;AAAA5B,OAAA,CAAAF,OAAA,GAAAsB,QAAA","ignoreList":[]}
+{"version":3,"file":"middleware.js","names":["_express","_interopRequireDefault","require","_lodash","_core","_loaders","_logger","_middleware","_api","e","__esModule","default","DEFAULT_PLUGIN_UI_THEME","exports","loadTheme","config","_","isNil","theme","plugin","asyncLoadPlugin","logger","staticPath","manifest","manifestFiles","server","pluginPrefix","PLUGIN_UI_PREFIX","PLUGIN_CATEGORY","THEME","length","warn","head","_default","auth","storage","pluginOptions","web","info","name","pluginCategory","router","express","Router","use","webMiddleware","tokenMiddleware","webUIJWTmiddleware","webEndpointsApi"],"sources":["../src/middleware.ts"],"sourcesContent":["import express from 'express';\nimport _ from 'lodash';\n\nimport { PLUGIN_CATEGORY, PLUGIN_UI_PREFIX } from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport { webMiddleware } from '@verdaccio/middleware';\n\nimport webEndpointsApi from './api';\n\nexport const DEFAULT_PLUGIN_UI_THEME = '@verdaccio/ui-theme';\n\nexport async function loadTheme(config: any) {\n  if (_.isNil(config.theme) === false) {\n    const plugin = await asyncLoadPlugin(\n      config.theme,\n      { config, logger },\n      // TODO: add types { staticPath: string; manifest: unknown; manifestFiles: unknown }\n      function (plugin: any) {\n        /**\n         *\n          - `staticPath`: is the same data returned in Verdaccio 5.\n          - `manifest`: A webpack manifest object.\n          - `manifestFiles`: A object with one property `js` and the array (order matters) of the manifest id to be loaded in the template dynamically.\n         */\n        return plugin.staticPath && plugin.manifest && plugin.manifestFiles;\n      },\n      false,\n      config.server?.pluginPrefix ?? PLUGIN_UI_PREFIX,\n      PLUGIN_CATEGORY.THEME\n    );\n    if (plugin.length > 1) {\n      logger.warn('multiple ui themes are not supported; only the first plugin is used');\n    }\n\n    return _.head(plugin);\n  }\n}\n\nexport default async (config, auth, storage, logger) => {\n  let pluginOptions = await loadTheme(config);\n  if (!pluginOptions) {\n    pluginOptions = require(DEFAULT_PLUGIN_UI_THEME)(config.web);\n    logger.info(\n      { name: DEFAULT_PLUGIN_UI_THEME, pluginCategory: PLUGIN_CATEGORY.THEME },\n      'plugin @{name} successfully loaded (@{pluginCategory})'\n    );\n  }\n\n  // eslint-disable-next-line new-cap\n  const router = express.Router();\n  // load application\n  router.use(\n    webMiddleware(\n      config,\n      {\n        tokenMiddleware: auth.webUIJWTmiddleware(),\n        webEndpointsApi: webEndpointsApi(auth, storage, config),\n      },\n      pluginOptions\n    )\n  );\n  return router;\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,WAAA,GAAAL,OAAA;AAEA,IAAAM,IAAA,GAAAP,sBAAA,CAAAC,OAAA;AAAoC,SAAAD,uBAAAQ,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAE7B,MAAMG,uBAAuB,GAAAC,OAAA,CAAAD,uBAAA,GAAG,qBAAqB;AAErD,eAAeE,SAASA,CAACC,MAAW,EAAE;EAC3C,IAAIC,eAAC,CAACC,KAAK,CAACF,MAAM,CAACG,KAAK,CAAC,KAAK,KAAK,EAAE;IACnC,MAAMC,MAAM,GAAG,MAAM,IAAAC,wBAAe,EAClCL,MAAM,CAACG,KAAK,EACZ;MAAEH,MAAM;MAAEM,MAAM,EAANA;IAAO,CAAC;IAClB;IACA,UAAUF,MAAW,EAAE;MACrB;AACR;AACA;AACA;AACA;AACA;MACQ,OAAOA,MAAM,CAACG,UAAU,IAAIH,MAAM,CAACI,QAAQ,IAAIJ,MAAM,CAACK,aAAa;IACrE,CAAC,EACD,KAAK,EACLT,MAAM,CAACU,MAAM,EAAEC,YAAY,IAAIC,sBAAgB,EAC/CC,qBAAe,CAACC,KAClB,CAAC;IACD,IAAIV,MAAM,CAACW,MAAM,GAAG,CAAC,EAAE;MACrBT,cAAM,CAACU,IAAI,CAAC,qEAAqE,CAAC;IACpF;IAEA,OAAOf,eAAC,CAACgB,IAAI,CAACb,MAAM,CAAC;EACvB;AACF;AAAC,IAAAc,QAAA,GAEc,MAAAA,CAAOlB,MAAM,EAAEmB,IAAI,EAAEC,OAAO,EAAEd,MAAM,KAAK;EACtD,IAAIe,aAAa,GAAG,MAAMtB,SAAS,CAACC,MAAM,CAAC;EAC3C,IAAI,CAACqB,aAAa,EAAE;IAClBA,aAAa,GAAGlC,OAAO,CAACU,uBAAuB,CAAC,CAACG,MAAM,CAACsB,GAAG,CAAC;IAC5DhB,MAAM,CAACiB,IAAI,CACT;MAAEC,IAAI,EAAE3B,uBAAuB;MAAE4B,cAAc,EAAEZ,qBAAe,CAACC;IAAM,CAAC,EACxE,wDACF,CAAC;EACH;;EAEA;EACA,MAAMY,MAAM,GAAGC,gBAAO,CAACC,MAAM,CAAC,CAAC;EAC/B;EACAF,MAAM,CAACG,GAAG,CACR,IAAAC,yBAAa,EACX9B,MAAM,EACN;IACE+B,eAAe,EAAEZ,IAAI,CAACa,kBAAkB,CAAC,CAAC;IAC1CC,eAAe,EAAE,IAAAA,YAAe,EAACd,IAAI,EAAEC,OAAO,EAAEpB,MAAM;EACxD,CAAC,EACDqB,aACF,CACF,CAAC;EACD,OAAOK,MAAM;AACf,CAAC;AAAA5B,OAAA,CAAAF,OAAA,GAAAsB,QAAA","ignoreList":[]}

package/build/web-utils.d.ts

@@ -1,8 +1,6 @@
-import { Author, ConfigYaml } from '@verdaccio/types';
+import { ConfigYaml, Manifest } from '@verdaccio/types';
 export declare function hasLogin(config: ConfigYaml): boolean;
 export declare function sortByName(packages: any[], orderAscending?: boolean | void): string[];
-export type AuthorAvatar = Author & {
-    avatar?: string;
-};
 export declare function addScope(scope: string, packageName: string): string;
 export declare function deleteProperties(propertiesToDelete: string[], objectItem: any): any;
+export declare function isVersionValid(packageMeta: Manifest, packageVersion: string): boolean;

package/build/web-utils.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", {
 exports.addScope = addScope;
 exports.deleteProperties = deleteProperties;
 exports.hasLogin = hasLogin;
+exports.isVersionValid = isVersionValid;
 exports.sortByName = sortByName;
 var _lodash = _interopRequireDefault(require("lodash"));
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
@@ -27,4 +28,12 @@ function deleteProperties(propertiesToDelete, objectItem) {
   });
   return objectItem;
 }
+function isVersionValid(packageMeta, packageVersion) {
+  const hasVersion = typeof packageVersion !== 'undefined';
+  if (!hasVersion) {
+    return false;
+  }
+  const hasMatchVersion = Object.keys(packageMeta.versions).includes(packageVersion);
+  return hasMatchVersion;
+}
 //# sourceMappingURL=web-utils.js.map

package/build/web-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-utils.js","names":["_lodash","_interopRequireDefault","require","e","__esModule","default","hasLogin","config","_","isNil","web","login","sortByName","packages","orderAscending","slice","sort","a","b","comparatorNames","name","toLowerCase","addScope","scope","packageName","deleteProperties","propertiesToDelete","objectItem","forEach","property"],"sources":["../src/web-utils.ts"],"sourcesContent":["import _ from 'lodash';\n\nimport { Author, ConfigYaml } from '@verdaccio/types';\n\nexport function hasLogin(config: ConfigYaml) {\n  return _.isNil(config?.web?.login) || config?.web?.login === true;\n}\n\nexport function sortByName(packages: any[], orderAscending: boolean | void = true): string[] {\n  return packages.slice().sort(function (a, b): number {\n    const comparatorNames = a.name.toLowerCase() < b.name.toLowerCase();\n    return orderAscending ? (comparatorNames ? -1 : 1) : comparatorNames ? 1 : -1;\n  });\n}\n\nexport type AuthorAvatar = Author & { avatar?: string };\n\nexport function addScope(scope: string, packageName: string): string {\n  return `@${scope}/${packageName}`;\n}\n\nexport function deleteProperties(propertiesToDelete: string[], objectItem: any): any {\n  _.forEach(propertiesToDelete, (property): any => {\n    delete objectItem[property];\n  });\n\n  return objectItem;\n}\n"],"mappings":";;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AAAuB,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAIhB,SAASG,QAAQA,CAACC,MAAkB,EAAE;EAC3C,OAAOC,eAAC,CAACC,KAAK,CAACF,MAAM,EAAEG,GAAG,EAAEC,KAAK,CAAC,IAAIJ,MAAM,EAAEG,GAAG,EAAEC,KAAK,KAAK,IAAI;AACnE;AAEO,SAASC,UAAUA,CAACC,QAAe,EAAEC,cAA8B,GAAG,IAAI,EAAY;EAC3F,OAAOD,QAAQ,CAACE,KAAK,CAAC,CAAC,CAACC,IAAI,CAAC,UAAUC,CAAC,EAAEC,CAAC,EAAU;IACnD,MAAMC,eAAe,GAAGF,CAAC,CAACG,IAAI,CAACC,WAAW,CAAC,CAAC,GAAGH,CAAC,CAACE,IAAI,CAACC,WAAW,CAAC,CAAC;IACnE,OAAOP,cAAc,GAAIK,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,GAAIA,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC;EAC/E,CAAC,CAAC;AACJ;AAIO,SAASG,QAAQA,CAACC,KAAa,EAAEC,WAAmB,EAAU;EACnE,OAAO,IAAID,KAAK,IAAIC,WAAW,EAAE;AACnC;AAEO,SAASC,gBAAgBA,CAACC,kBAA4B,EAAEC,UAAe,EAAO;EACnFnB,eAAC,CAACoB,OAAO,CAACF,kBAAkB,EAAGG,QAAQ,IAAU;IAC/C,OAAOF,UAAU,CAACE,QAAQ,CAAC;EAC7B,CAAC,CAAC;EAEF,OAAOF,UAAU;AACnB","ignoreList":[]}
+{"version":3,"file":"web-utils.js","names":["_lodash","_interopRequireDefault","require","e","__esModule","default","hasLogin","config","_","isNil","web","login","sortByName","packages","orderAscending","slice","sort","a","b","comparatorNames","name","toLowerCase","addScope","scope","packageName","deleteProperties","propertiesToDelete","objectItem","forEach","property","isVersionValid","packageMeta","packageVersion","hasVersion","hasMatchVersion","Object","keys","versions","includes"],"sources":["../src/web-utils.ts"],"sourcesContent":["import _ from 'lodash';\n\nimport { ConfigYaml, Manifest } from '@verdaccio/types';\n\nexport function hasLogin(config: ConfigYaml) {\n  return _.isNil(config?.web?.login) || config?.web?.login === true;\n}\n\nexport function sortByName(packages: any[], orderAscending: boolean | void = true): string[] {\n  return packages.slice().sort(function (a, b): number {\n    const comparatorNames = a.name.toLowerCase() < b.name.toLowerCase();\n    return orderAscending ? (comparatorNames ? -1 : 1) : comparatorNames ? 1 : -1;\n  });\n}\n\nexport function addScope(scope: string, packageName: string): string {\n  return `@${scope}/${packageName}`;\n}\n\nexport function deleteProperties(propertiesToDelete: string[], objectItem: any): any {\n  _.forEach(propertiesToDelete, (property): any => {\n    delete objectItem[property];\n  });\n\n  return objectItem;\n}\n\nexport function isVersionValid(packageMeta: Manifest, packageVersion: string): boolean {\n  const hasVersion = typeof packageVersion !== 'undefined';\n  if (!hasVersion) {\n    return false;\n  }\n\n  const hasMatchVersion = Object.keys(packageMeta.versions).includes(packageVersion);\n  return hasMatchVersion;\n}\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AAAuB,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAIhB,SAASG,QAAQA,CAACC,MAAkB,EAAE;EAC3C,OAAOC,eAAC,CAACC,KAAK,CAACF,MAAM,EAAEG,GAAG,EAAEC,KAAK,CAAC,IAAIJ,MAAM,EAAEG,GAAG,EAAEC,KAAK,KAAK,IAAI;AACnE;AAEO,SAASC,UAAUA,CAACC,QAAe,EAAEC,cAA8B,GAAG,IAAI,EAAY;EAC3F,OAAOD,QAAQ,CAACE,KAAK,CAAC,CAAC,CAACC,IAAI,CAAC,UAAUC,CAAC,EAAEC,CAAC,EAAU;IACnD,MAAMC,eAAe,GAAGF,CAAC,CAACG,IAAI,CAACC,WAAW,CAAC,CAAC,GAAGH,CAAC,CAACE,IAAI,CAACC,WAAW,CAAC,CAAC;IACnE,OAAOP,cAAc,GAAIK,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,GAAIA,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC;EAC/E,CAAC,CAAC;AACJ;AAEO,SAASG,QAAQA,CAACC,KAAa,EAAEC,WAAmB,EAAU;EACnE,OAAO,IAAID,KAAK,IAAIC,WAAW,EAAE;AACnC;AAEO,SAASC,gBAAgBA,CAACC,kBAA4B,EAAEC,UAAe,EAAO;EACnFnB,eAAC,CAACoB,OAAO,CAACF,kBAAkB,EAAGG,QAAQ,IAAU;IAC/C,OAAOF,UAAU,CAACE,QAAQ,CAAC;EAC7B,CAAC,CAAC;EAEF,OAAOF,UAAU;AACnB;AAEO,SAASG,cAAcA,CAACC,WAAqB,EAAEC,cAAsB,EAAW;EACrF,MAAMC,UAAU,GAAG,OAAOD,cAAc,KAAK,WAAW;EACxD,IAAI,CAACC,UAAU,EAAE;IACf,OAAO,KAAK;EACd;EAEA,MAAMC,eAAe,GAAGC,MAAM,CAACC,IAAI,CAACL,WAAW,CAACM,QAAQ,CAAC,CAACC,QAAQ,CAACN,cAAc,CAAC;EAClF,OAAOE,eAAe;AACxB","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/web",
-  "version": "8.1.0-next-8.15",
+  "version": "8.1.0-next-8.17",
   "description": "Verdaccio Web Middleware",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -28,29 +28,28 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "8.0.0-next-8.15",
-    "@verdaccio/config": "8.0.0-next-8.15",
-    "@verdaccio/core": "8.0.0-next-8.15",
-    "@verdaccio/loaders": "8.0.0-next-8.6",
-    "@verdaccio/logger": "8.0.0-next-8.15",
-    "@verdaccio/middleware": "8.0.0-next-8.15",
-    "@verdaccio/store": "8.0.0-next-8.15",
-    "@verdaccio/tarball": "13.0.0-next-8.15",
-    "@verdaccio/url": "13.0.0-next-8.15",
-    "@verdaccio/utils": "8.1.0-next-8.15",
-    "debug": "4.4.0",
+    "@verdaccio/auth": "8.0.0-next-8.17",
+    "@verdaccio/config": "8.0.0-next-8.17",
+    "@verdaccio/core": "8.0.0-next-8.17",
+    "@verdaccio/loaders": "8.0.0-next-8.7",
+    "@verdaccio/logger": "8.0.0-next-8.17",
+    "@verdaccio/middleware": "8.0.0-next-8.17",
+    "@verdaccio/store": "8.0.0-next-8.17",
+    "@verdaccio/tarball": "13.0.0-next-8.17",
+    "@verdaccio/url": "13.0.0-next-8.17",
+    "debug": "4.4.1",
     "express": "4.21.2",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/api": "8.1.0-next-8.15",
-    "@verdaccio/test-helper": "4.0.0-next-8.4",
-    "@verdaccio/types": "13.0.0-next-8.5",
-    "jsdom": "25.0.1",
+    "@verdaccio/api": "8.1.0-next-8.17",
+    "@verdaccio/test-helper": "4.0.0-next-8.5",
+    "@verdaccio/types": "13.0.0-next-8.6",
+    "jsdom": "26.1.0",
     "node-html-parser": "4.1.5",
     "supertest": "7.0.0",
-    "verdaccio-auth-memory": "13.0.0-next-8.15",
-    "verdaccio-memory": "13.0.0-next-8.15"
+    "verdaccio-auth-memory": "13.0.0-next-8.17",
+    "verdaccio-memory": "13.0.0-next-8.17"
   },
   "funding": {
     "type": "opencollective",