verdaccio-auth-memory 10.1.0 → 11.0.0-6-next.7

package/.babelrc

@@ -0,0 +1,3 @@
+{
+  "extends": "../../../.babelrc"
+}

package/CHANGELOG.md

@@ -0,0 +1,298 @@
+# Change Log
+
+## 11.0.0-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [24b9be02]
+  - @verdaccio/core@6.0.0-6-next.4
+
+## 11.0.0-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [6c1eb021]
+  - @verdaccio/core@6.0.0-6-next.3
+
+## 11.0.0-6-next.5
+
+### Major Changes
+
+- 794af76c: Remove Node 12 support
+
+  - We need move to the new `undici` and does not support Node.js 12
+
+### Minor Changes
+
+- 154b2ecd: refactor: remove @verdaccio/commons-api in favor @verdaccio/core and remove duplications
+
+### Patch Changes
+
+- Updated dependencies [794af76c]
+- Updated dependencies [154b2ecd]
+  - @verdaccio/core@6.0.0-6-next.2
+
+## 11.0.0-6-next.4
+
+### Patch Changes
+
+- Updated dependencies [459b6fa7]
+  - @verdaccio/commons-api@11.0.0-6-next.4
+
+## 10.0.0-alpha.3
+
+### Patch Changes
+
+- fecbb9be: chore: add release step to private regisry on merge changeset pr
+- Updated dependencies [fecbb9be]
+  - @verdaccio/commons-api@10.0.0-alpha.3
+
+## 10.0.0-alpha.2
+
+### Minor Changes
+
+- 54c58d1e: feat: add server rate limit protection to all request
+
+  To modify custom values, use the server settings property.
+
+  ```markdown
+  server:
+
+  ## https://www.npmjs.com/package/express-rate-limit#configuration-options
+
+  rateLimit:
+  windowMs: 1000
+  max: 10000
+  ```
+
+  The values are intended to be high, if you want to improve security of your server consider
+  using different values.
+
+### Patch Changes
+
+- Updated dependencies [54c58d1e]
+  - @verdaccio/commons-api@10.0.0-alpha.2
+
+## 10.0.0-alpha.1
+
+### Major Changes
+
+- d87fa026: feat!: experiments config renamed to flags
+
+  - The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
+
+  ```js
+  flags: token: false;
+  search: false;
+  ```
+
+  - The `self_path` property from the config file is being removed in favor of `config_file` full path.
+  - Refactor `config` module, better types and utilities
+
+### Patch Changes
+
+- Updated dependencies [d87fa026]
+- Updated dependencies [da1ee9c8]
+- Updated dependencies [26b494cb]
+- Updated dependencies [b57b4338]
+- Updated dependencies [31af0164]
+  - @verdaccio/commons-api@10.0.0-alpha.1
+
+All notable changes to this project will be documented in this file.
+See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
+
+## [9.7.2](https://github.com/verdaccio/monorepo/compare/v9.7.1...v9.7.2) (2020-07-20)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [9.7.0](https://github.com/verdaccio/monorepo/compare/v9.6.1...v9.7.0) (2020-06-24)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [9.5.0](https://github.com/verdaccio/monorepo/compare/v9.4.1...v9.5.0) (2020-05-02)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [9.3.1](https://github.com/verdaccio/monorepo/compare/v9.3.0...v9.3.1) (2020-02-23)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [9.3.0](https://github.com/verdaccio/monorepo/compare/v9.2.0...v9.3.0) (2020-01-29)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [9.0.0](https://github.com/verdaccio/monorepo/compare/v8.5.3...v9.0.0) (2020-01-07)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [8.5.2](https://github.com/verdaccio/monorepo/compare/v8.5.1...v8.5.2) (2019-12-25)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [8.5.1](https://github.com/verdaccio/monorepo/compare/v8.5.0...v8.5.1) (2019-12-24)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.5.0](https://github.com/verdaccio/monorepo/compare/v8.4.2...v8.5.0) (2019-12-22)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [8.4.2](https://github.com/verdaccio/monorepo/compare/v8.4.1...v8.4.2) (2019-11-23)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [8.4.1](https://github.com/verdaccio/monorepo/compare/v8.4.0...v8.4.1) (2019-11-22)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.4.0](https://github.com/verdaccio/monorepo/compare/v8.3.0...v8.4.0) (2019-11-22)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.3.0](https://github.com/verdaccio/monorepo/compare/v8.2.0...v8.3.0) (2019-10-27)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.2.0](https://github.com/verdaccio/monorepo/compare/v8.2.0-next.0...v8.2.0) (2019-10-23)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.2.0-next.0](https://github.com/verdaccio/monorepo/compare/v8.1.4...v8.2.0-next.0) (2019-10-08)
+
+### Bug Fixes
+
+- fixed lint errors ([5e677f7](https://github.com/verdaccio/monorepo/commit/5e677f7))
+
+## [8.1.2](https://github.com/verdaccio/monorepo/compare/v8.1.1...v8.1.2) (2019-09-29)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [8.1.1](https://github.com/verdaccio/monorepo/compare/v8.1.0...v8.1.1) (2019-09-26)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.1.0](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.1...v8.1.0) (2019-09-07)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [8.0.1-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.0...v8.0.1-next.1) (2019-08-29)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+## [8.0.1-next.0](https://github.com/verdaccio/monorepo/compare/v8.0.0...v8.0.1-next.0) (2019-08-29)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.0.0](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.4...v8.0.0) (2019-08-22)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.0.0-next.4](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.3...v8.0.0-next.4) (2019-08-18)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.0.0-next.2](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.1...v8.0.0-next.2) (2019-08-03)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.0.0-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.0...v8.0.0-next.1) (2019-08-01)
+
+**Note:** Version bump only for package verdaccio-auth-memory
+
+# [8.0.0-next.0](https://github.com/verdaccio/monorepo/compare/v2.0.0...v8.0.0-next.0) (2019-08-01)
+
+### Bug Fixes
+
+- main file is correct routed ([245b115](https://github.com/verdaccio/monorepo/commit/245b115))
+- remove source maps ([6ca4895](https://github.com/verdaccio/monorepo/commit/6ca4895))
+- restore error messages ([5d241b6](https://github.com/verdaccio/monorepo/commit/5d241b6))
+
+### Features
+
+- add logging output for each action ([66f183c](https://github.com/verdaccio/monorepo/commit/66f183c))
+- change password ([de0a341](https://github.com/verdaccio/monorepo/commit/de0a341))
+- migrate to typescript BREAKING CHANGE: new compiler might bring issues ([13ebde2](https://github.com/verdaccio/monorepo/commit/13ebde2))
+- **config:** allow set users ([e5326fd](https://github.com/verdaccio/monorepo/commit/e5326fd))
+
+# Changelog
+
+All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+
+### [1.1.5](https://github.com/verdaccio/verdaccio-auth-memory/compare/v1.1.4...v1.1.5) (2019-07-15)
+
+### Bug Fixes
+
+- restore error messages ([094da45](https://github.com/verdaccio/verdaccio-auth-memory/commit/094da45))
+
+### [1.1.4](https://github.com/verdaccio/verdaccio-auth-memory/compare/v1.1.3...v1.1.4) (2019-07-15)
+
+### Tests
+
+- fix wrong string match ([d4d2e81](https://github.com/verdaccio/verdaccio-auth-memory/commit/d4d2e81))
+
+### [1.1.3](https://github.com/verdaccio/verdaccio-auth-memory/compare/v1.1.2...v1.1.3) (2019-07-15)
+
+### Build System
+
+- update @verdaccio/commons-api@0.1.2 ([55f39a4](https://github.com/verdaccio/verdaccio-auth-memory/commit/55f39a4))
+
+### [1.1.2](https://github.com/verdaccio/verdaccio-auth-memory/compare/v1.1.1...v1.1.2) (2019-07-15)
+
+### Build System
+
+- build step before publish ([468ddbc](https://github.com/verdaccio/verdaccio-auth-memory/commit/468ddbc))
+
+### [1.1.1](https://github.com/verdaccio/verdaccio-auth-memory/compare/v1.1.0...v1.1.1) (2019-07-12)
+
+### Build System
+
+- fix unit test ([6d7b383](https://github.com/verdaccio/verdaccio-auth-memory/commit/6d7b383))
+
+## [1.1.0](https://github.com/verdaccio/verdaccio-auth-memory/compare/v1.0.2...v1.1.0) (2019-07-12)
+
+### Features
+
+- add logging output for each action ([099f9aa](https://github.com/verdaccio/verdaccio-auth-memory/commit/099f9aa))
+
+### [1.0.2](https://github.com/verdaccio/verdaccio-auth-memory/compare/v1.0.1...v1.0.2) (2019-07-12)
+
+### Bug Fixes
+
+- main file is correct routed ([722a615](https://github.com/verdaccio/verdaccio-auth-memory/commit/722a615))
+
+### [1.0.1](https://github.com/verdaccio/verdaccio-auth-memory/compare/v1.0.0...v1.0.1) (2019-07-12)
+
+### Bug Fixes
+
+- remove source maps ([6f29a06](https://github.com/verdaccio/verdaccio-auth-memory/commit/6f29a06))
+
+## [1.0.0](https://github.com/verdaccio/verdaccio-auth-memory/compare/v0.0.4...v1.0.0) (2019-07-12)
+
+### Build System
+
+- add coverage build script ([4f25313](https://github.com/verdaccio/verdaccio-auth-memory/commit/4f25313))
+
+### Features
+
+- change password ([19d9838](https://github.com/verdaccio/verdaccio-auth-memory/commit/19d9838))
+- migrate to typescript ([4c3b144](https://github.com/verdaccio/verdaccio-auth-memory/commit/4c3b144))
+
+### BREAKING CHANGES
+
+- new compiler might bring issues

package/README.md

@@ -1,9 +1,9 @@
 # verdaccio-auth-memory
+
 [![FOSSA Status](https://app.fossa.io/api/projects/git%2Bgithub.com%2Fverdaccio%2Fverdaccio-auth-memory.svg?type=shield)](https://app.fossa.io/projects/git%2Bgithub.com%2Fverdaccio%2Fverdaccio-auth-memory?ref=badge_shield)
 [![CircleCI](https://circleci.com/gh/verdaccio/verdaccio-auth-memory.svg?style=svg)](https://circleci.com/gh/ayusharma/verdaccio-auth-memory)
 [![codecov](https://codecov.io/gh/verdaccio/verdaccio-auth-memory/branch/master/graph/badge.svg)](https://codecov.io/gh/verdaccio/verdaccio-auth-memory)
 
-
 This verdaccio auth plugin keeps the users in a memory plain object.
 This means all sessions and users will disappear when you restart the verdaccio server.
 
@@ -44,46 +44,49 @@ plugin(config, appConfig);
 
 Where:
 
- - config - module's own config
- - appOptions - collection of different internal verdaccio objects
-   - appOptions.config - main config
-   - appOptions.logger - logger
+- config - module's own config
+- appOptions - collection of different internal verdaccio objects
+  - appOptions.config - main config
+  - appOptions.logger - logger
 
 This should export four functions:
 
- - `adduser(user, password, cb)` Add new users
+- `adduser(user, password, cb)` Add new users
+
+  It should respond with:
 
-   It should respond with:
-    - `cb(err)` in case of an error (error will be returned to user)
-    - `cb(null, false)` in case registration is disabled (next auth plugin will be executed)
-    - `cb(null, true)` in case user registered successfully
+  - `cb(err)` in case of an error (error will be returned to user)
+  - `cb(null, false)` in case registration is disabled (next auth plugin will be executed)
+  - `cb(null, true)` in case user registered successfully
 
-   It's useful to set `err.status` property to set http status code (e.g. `err.status = 403`).
+  It's useful to set `err.status` property to set http status code (e.g. `err.status = 403`).
 
- - `authenticate(user, password, cb)` Authenticate the user
+- `authenticate(user, password, cb)` Authenticate the user
 
-   It should respond with:
-    - `cb(err)` in case of a fatal error (error will be returned to user, keep those rare)
-    - `cb(null, false)` in case user not authenticated (next auth plugin will be executed)
-    - `cb(null, [groups])` in case user is authenticated
+  It should respond with:
 
-   Groups is an array of all users/usergroups this user has access to. You should probably include username itself here.
+  - `cb(err)` in case of a fatal error (error will be returned to user, keep those rare)
+  - `cb(null, false)` in case user not authenticated (next auth plugin will be executed)
+  - `cb(null, [groups])` in case user is authenticated
 
- - `allow_access(user, pkg, cb)` Check whether the user has permissions to access a resource (package)
+  Groups is an array of all users/usergroups this user has access to. You should probably include username itself here.
 
-   It should respond with:
-    - `cb(err)` in case of a fatal error (error will be returned to user, keep those rare)
-    - `cb(null, false)` in case user not allowed to access (next auth plugin will be executed)
-    - `cb(null, true)` in case user is allowed to access
+- `allow_access(user, pkg, cb)` Check whether the user has permissions to access a resource (package)
 
- - `allow_publish(user, pkg, cb)` Check whether the user has permissions to publish a resource (package)
+  It should respond with:
 
-   It should respond with:
-    - `cb(err)` in case of a fatal error (error will be returned to user, keep those rare)
-    - `cb(null, false)` in case user not allowed to publish (next auth plugin will be executed)
-    - `cb(null, true)` in case user is allowed to publish
+  - `cb(err)` in case of a fatal error (error will be returned to user, keep those rare)
+  - `cb(null, false)` in case user not allowed to access (next auth plugin will be executed)
+  - `cb(null, true)` in case user is allowed to access
 
+- `allow_publish(user, pkg, cb)` Check whether the user has permissions to publish a resource (package)
 
+  It should respond with:
+
+  - `cb(err)` in case of a fatal error (error will be returned to user, keep those rare)
+  - `cb(null, false)` in case user not allowed to publish (next auth plugin will be executed)
+  - `cb(null, true)` in case user is allowed to publish
 
 ## License
+
 [![FOSSA Status](https://app.fossa.io/api/projects/git%2Bgithub.com%2Fverdaccio%2Fverdaccio-auth-memory.svg?type=large)](https://app.fossa.io/projects/git%2Bgithub.com%2Fverdaccio%2Fverdaccio-auth-memory?ref=badge_large)

package/{lib → build}/Memory.d.ts

@@ -1,15 +1,5 @@
-import { Config, PluginOptions, Callback, PackageAccess, IPluginAuth, RemoteUser, Logger } from '@verdaccio/types';
-export interface UserMemory {
-    name: string;
-    password: string;
-}
-export interface Users {
-    [key: string]: UserMemory;
-}
-export interface VerdaccioMemoryConfig extends Config {
-    max_users?: number;
-    users: Users;
-}
+import { Callback, IPluginAuth, Logger, PackageAccess, PluginOptions, RemoteUser } from '@verdaccio/types';
+import { Users, VerdaccioMemoryConfig } from './types';
 export default class Memory implements IPluginAuth<VerdaccioMemoryConfig> {
     _logger: Logger;
     _users: Users;

package/build/Memory.js

@@ -0,0 +1,151 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+
+var _debug = _interopRequireDefault(require("debug"));
+
+var _core = require("@verdaccio/core");
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+const debug = (0, _debug.default)('verdaccio:plugin:auth:memory:user');
+
+class Memory {
+  constructor(config, appOptions) {
+    this._users = config.users || {};
+    this._config = config;
+    this._logger = appOptions.logger;
+    this._app_config = appOptions.config;
+    debug('initialized');
+  }
+
+  authenticate(user, password, done) {
+    debug('authenticate %o:%o', user, password);
+    const userCredentials = this._users[user];
+
+    if (!userCredentials) {
+      debug('user %o does not exist', user);
+      return done(null, false);
+    }
+
+    if (password !== userCredentials.password) {
+      const err = _core.errorUtils.getUnauthorized(_core.API_ERROR.BAD_USERNAME_PASSWORD);
+
+      debug('password invalid for: %o', user);
+      return done(err);
+    } // authentication succeeded!
+    // return all usergroups this user has access to;
+
+
+    debug('authentication succeed for %o', user);
+    return done(null, [user]);
+  }
+
+  adduser(user, password, done) {
+    if (this._users[user]) {
+      debug('user %o already exist', user);
+      return done(null, true);
+    }
+
+    if (this._app_config.max_users) {
+      if (Object.keys(this._users).length >= this._app_config.max_users) {
+        const err = _core.errorUtils.getConflict(_core.API_ERROR.MAX_USERS_REACHED);
+
+        debug(_core.API_ERROR.MAX_USERS_REACHED);
+        return done(err);
+      }
+    }
+
+    this._users[user] = {
+      name: user,
+      password: password
+    };
+    debug('user added succeeded for %o', user);
+    done(null, user);
+  }
+
+  changePassword(username, password, newPassword, cb) {
+    const user = this._users[username];
+    debug('init change password for %o', user === null || user === void 0 ? void 0 : user.name);
+
+    if (user && user.password === password) {
+      user.password = newPassword;
+      this._users[username] = user;
+      debug('user changed password succeeded for %o', user === null || user === void 0 ? void 0 : user.name);
+      cb(null, user);
+    } else {
+      const err = _core.errorUtils.getNotFound('user not found');
+
+      this._logger.debug({
+        user: username
+      }, 'change password user  @{user} not found');
+
+      debug('change password user for %o not found', user === null || user === void 0 ? void 0 : user.name);
+      return cb(err);
+    }
+  }
+
+  allow_access(user, pkg, cb) {
+    var _pkg$access, _pkg$access2, _pkg$access3, _pkg$access4;
+
+    debug('allow access for %o', user);
+
+    if (pkg !== null && pkg !== void 0 && (_pkg$access = pkg.access) !== null && _pkg$access !== void 0 && _pkg$access.includes('$all') || pkg !== null && pkg !== void 0 && (_pkg$access2 = pkg.access) !== null && _pkg$access2 !== void 0 && _pkg$access2.includes('$anonymous')) {
+      debug('%o has been granted access', user === null || user === void 0 ? void 0 : user.name);
+      return cb(null, true);
+    }
+
+    if (!(user !== null && user !== void 0 && user.name)) {
+      const err = _core.errorUtils.getForbidden('not allowed to access package');
+
+      this._logger.debug({
+        user: user.name
+      }, 'user: @{user} not allowed to access package');
+
+      debug('%o not allowed to access package err', user === null || user === void 0 ? void 0 : user.name, err.message);
+      return cb(err);
+    }
+
+    if (pkg !== null && pkg !== void 0 && (_pkg$access3 = pkg.access) !== null && _pkg$access3 !== void 0 && _pkg$access3.includes(user === null || user === void 0 ? void 0 : user.name) || pkg !== null && pkg !== void 0 && (_pkg$access4 = pkg.access) !== null && _pkg$access4 !== void 0 && _pkg$access4.includes('$authenticated')) {
+      debug('%o has been granted access', user === null || user === void 0 ? void 0 : user.name);
+      return cb(null, true);
+    }
+
+    const err = _core.errorUtils.getForbidden('not allowed to access package');
+
+    debug('%o not allowed to access package err', user === null || user === void 0 ? void 0 : user.name, err === null || err === void 0 ? void 0 : err.message);
+    return cb(err);
+  }
+
+  allow_publish(user, pkg, cb) {
+    var _pkg$publish, _pkg$publish2, _pkg$publish3, _pkg$publish4;
+
+    if (pkg !== null && pkg !== void 0 && (_pkg$publish = pkg.publish) !== null && _pkg$publish !== void 0 && _pkg$publish.includes('$all') || pkg !== null && pkg !== void 0 && (_pkg$publish2 = pkg.publish) !== null && _pkg$publish2 !== void 0 && _pkg$publish2.includes('$anonymous')) {
+      debug('%o has been granted to publish', user === null || user === void 0 ? void 0 : user.name);
+      return cb(null, true);
+    }
+
+    if (!(user !== null && user !== void 0 && user.name)) {
+      const err = _core.errorUtils.getForbidden('not allowed to publish package');
+
+      debug('%o not allowed to publish package err %o', user === null || user === void 0 ? void 0 : user.name, err.message);
+      return cb(err);
+    }
+
+    if (pkg !== null && pkg !== void 0 && (_pkg$publish3 = pkg.publish) !== null && _pkg$publish3 !== void 0 && _pkg$publish3.includes(user.name) || pkg !== null && pkg !== void 0 && (_pkg$publish4 = pkg.publish) !== null && _pkg$publish4 !== void 0 && _pkg$publish4.includes('$authenticated')) {
+      return cb(null, true);
+    }
+
+    const err = _core.errorUtils.getForbidden('not allowed to publish package');
+
+    debug('%o not allowed to publish package err %o', user === null || user === void 0 ? void 0 : user.name, err.message);
+    return cb(err);
+  }
+
+}
+
+exports.default = Memory;
+//# sourceMappingURL=Memory.js.map

package/build/Memory.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/Memory.ts"],"names":["debug","Memory","constructor","config","appOptions","_users","users","_config","_logger","logger","_app_config","authenticate","user","password","done","userCredentials","err","errorUtils","getUnauthorized","API_ERROR","BAD_USERNAME_PASSWORD","adduser","max_users","Object","keys","length","getConflict","MAX_USERS_REACHED","name","changePassword","username","newPassword","cb","getNotFound","allow_access","pkg","access","includes","getForbidden","message","allow_publish","publish"],"mappings":";;;;;;;AAAA;;AAEA;;;;AAYA,MAAMA,KAAK,GAAG,oBAAW,mCAAX,CAAd;;AAEe,MAAMC,MAAN,CAA2D;AAMjEC,EAAAA,WAAW,CAChBC,MADgB,EAEhBC,UAFgB,EAGhB;AACA,SAAKC,MAAL,GAAcF,MAAM,CAACG,KAAP,IAAgB,EAA9B;AACA,SAAKC,OAAL,GAAeJ,MAAf;AACA,SAAKK,OAAL,GAAeJ,UAAU,CAACK,MAA1B;AACA,SAAKC,WAAL,GAAmBN,UAAU,CAACD,MAA9B;AACAH,IAAAA,KAAK,CAAC,aAAD,CAAL;AACD;;AAEMW,EAAAA,YAAY,CAACC,IAAD,EAAeC,QAAf,EAAiCC,IAAjC,EAAuD;AACxEd,IAAAA,KAAK,CAAC,oBAAD,EAAuBY,IAAvB,EAA6BC,QAA7B,CAAL;AACA,UAAME,eAAe,GAAG,KAAKV,MAAL,CAAYO,IAAZ,CAAxB;;AAEA,QAAI,CAACG,eAAL,EAAsB;AACpBf,MAAAA,KAAK,CAAC,wBAAD,EAA2BY,IAA3B,CAAL;AACA,aAAOE,IAAI,CAAC,IAAD,EAAO,KAAP,CAAX;AACD;;AAED,QAAID,QAAQ,KAAKE,eAAe,CAACF,QAAjC,EAA2C;AACzC,YAAMG,GAAG,GAAGC,iBAAWC,eAAX,CAA2BC,gBAAUC,qBAArC,CAAZ;;AACApB,MAAAA,KAAK,CAAC,0BAAD,EAA6BY,IAA7B,CAAL;AAEA,aAAOE,IAAI,CAACE,GAAD,CAAX;AACD,KAduE,CAgBxE;AACA;;;AACAhB,IAAAA,KAAK,CAAC,+BAAD,EAAkCY,IAAlC,CAAL;AACA,WAAOE,IAAI,CAAC,IAAD,EAAO,CAACF,IAAD,CAAP,CAAX;AACD;;AAEMS,EAAAA,OAAO,CAACT,IAAD,EAAeC,QAAf,EAAiCC,IAAjC,EAAuD;AACnE,QAAI,KAAKT,MAAL,CAAYO,IAAZ,CAAJ,EAAuB;AACrBZ,MAAAA,KAAK,CAAC,uBAAD,EAA0BY,IAA1B,CAAL;AACA,aAAOE,IAAI,CAAC,IAAD,EAAO,IAAP,CAAX;AACD;;AAED,QAAI,KAAKJ,WAAL,CAAiBY,SAArB,EAAgC;AAC9B,UAAIC,MAAM,CAACC,IAAP,CAAY,KAAKnB,MAAjB,EAAyBoB,MAAzB,IAAmC,KAAKf,WAAL,CAAiBY,SAAxD,EAAmE;AACjE,cAAMN,GAAG,GAAGC,iBAAWS,WAAX,CAAuBP,gBAAUQ,iBAAjC,CAAZ;;AACA3B,QAAAA,KAAK,CAACmB,gBAAUQ,iBAAX,CAAL;AACA,eAAOb,IAAI,CAACE,GAAD,CAAX;AACD;AACF;;AAED,SAAKX,MAAL,CAAYO,IAAZ,IAAoB;AAAEgB,MAAAA,IAAI,EAAEhB,IAAR;AAAcC,MAAAA,QAAQ,EAAEA;AAAxB,KAApB;AAEAb,IAAAA,KAAK,CAAC,6BAAD,EAAgCY,IAAhC,CAAL;AACAE,IAAAA,IAAI,CAAC,IAAD,EAAOF,IAAP,CAAJ;AACD;;AAEMiB,EAAAA,cAAc,CACnBC,QADmB,EAEnBjB,QAFmB,EAGnBkB,WAHmB,EAInBC,EAJmB,EAKb;AACN,UAAMpB,IAAgB,GAAG,KAAKP,MAAL,CAAYyB,QAAZ,CAAzB;AACA9B,IAAAA,KAAK,CAAC,6BAAD,EAAgCY,IAAhC,aAAgCA,IAAhC,uBAAgCA,IAAI,CAAEgB,IAAtC,CAAL;;AAEA,QAAIhB,IAAI,IAAIA,IAAI,CAACC,QAAL,KAAkBA,QAA9B,EAAwC;AACtCD,MAAAA,IAAI,CAACC,QAAL,GAAgBkB,WAAhB;AACA,WAAK1B,MAAL,CAAYyB,QAAZ,IAAwBlB,IAAxB;AACAZ,MAAAA,KAAK,CAAC,wCAAD,EAA2CY,IAA3C,aAA2CA,IAA3C,uBAA2CA,IAAI,CAAEgB,IAAjD,CAAL;AACAI,MAAAA,EAAE,CAAC,IAAD,EAAOpB,IAAP,CAAF;AACD,KALD,MAKO;AACL,YAAMI,GAAG,GAAGC,iBAAWgB,WAAX,CAAuB,gBAAvB,CAAZ;;AACA,WAAKzB,OAAL,CAAaR,KAAb,CAAmB;AAAEY,QAAAA,IAAI,EAAEkB;AAAR,OAAnB,EAAuC,yCAAvC;;AACA9B,MAAAA,KAAK,CAAC,uCAAD,EAA0CY,IAA1C,aAA0CA,IAA1C,uBAA0CA,IAAI,CAAEgB,IAAhD,CAAL;AACA,aAAOI,EAAE,CAAChB,GAAD,CAAT;AACD;AACF;;AAEMkB,EAAAA,YAAY,CAACtB,IAAD,EAAmBuB,GAAnB,EAAuCH,EAAvC,EAA2D;AAAA;;AAC5EhC,IAAAA,KAAK,CAAC,qBAAD,EAAwBY,IAAxB,CAAL;;AACA,QAAIuB,GAAG,SAAH,IAAAA,GAAG,WAAH,mBAAAA,GAAG,CAAEC,MAAL,oDAAaC,QAAb,CAAsB,MAAtB,KAAiCF,GAAjC,aAAiCA,GAAjC,+BAAiCA,GAAG,CAAEC,MAAtC,yCAAiC,aAAaC,QAAb,CAAsB,YAAtB,CAArC,EAA0E;AACxErC,MAAAA,KAAK,CAAC,4BAAD,EAA+BY,IAA/B,aAA+BA,IAA/B,uBAA+BA,IAAI,CAAEgB,IAArC,CAAL;AAEA,aAAOI,EAAE,CAAC,IAAD,EAAO,IAAP,CAAT;AACD;;AAED,QAAI,EAACpB,IAAD,aAACA,IAAD,eAACA,IAAI,CAAEgB,IAAP,CAAJ,EAAiB;AACf,YAAMZ,GAAG,GAAGC,iBAAWqB,YAAX,CAAwB,+BAAxB,CAAZ;;AACA,WAAK9B,OAAL,CAAaR,KAAb,CAAmB;AAAEY,QAAAA,IAAI,EAAEA,IAAI,CAACgB;AAAb,OAAnB,EAAwC,6CAAxC;;AACA5B,MAAAA,KAAK,CAAC,sCAAD,EAAyCY,IAAzC,aAAyCA,IAAzC,uBAAyCA,IAAI,CAAEgB,IAA/C,EAAqDZ,GAAG,CAACuB,OAAzD,CAAL;AACA,aAAOP,EAAE,CAAChB,GAAD,CAAT;AACD;;AAED,QAAImB,GAAG,SAAH,IAAAA,GAAG,WAAH,oBAAAA,GAAG,CAAEC,MAAL,sDAAaC,QAAb,CAAsBzB,IAAtB,aAAsBA,IAAtB,uBAAsBA,IAAI,CAAEgB,IAA5B,KAAqCO,GAArC,aAAqCA,GAArC,+BAAqCA,GAAG,CAAEC,MAA1C,yCAAqC,aAAaC,QAAb,CAAsB,gBAAtB,CAAzC,EAAkF;AAChFrC,MAAAA,KAAK,CAAC,4BAAD,EAA+BY,IAA/B,aAA+BA,IAA/B,uBAA+BA,IAAI,CAAEgB,IAArC,CAAL;AACA,aAAOI,EAAE,CAAC,IAAD,EAAO,IAAP,CAAT;AACD;;AAED,UAAMhB,GAAG,GAAGC,iBAAWqB,YAAX,CAAwB,+BAAxB,CAAZ;;AACAtC,IAAAA,KAAK,CAAC,sCAAD,EAAyCY,IAAzC,aAAyCA,IAAzC,uBAAyCA,IAAI,CAAEgB,IAA/C,EAAqDZ,GAArD,aAAqDA,GAArD,uBAAqDA,GAAG,CAAEuB,OAA1D,CAAL;AACA,WAAOP,EAAE,CAAChB,GAAD,CAAT;AACD;;AAEMwB,EAAAA,aAAa,CAAC5B,IAAD,EAAmBuB,GAAnB,EAAuCH,EAAvC,EAA2D;AAAA;;AAC7E,QAAIG,GAAG,SAAH,IAAAA,GAAG,WAAH,oBAAAA,GAAG,CAAEM,OAAL,sDAAcJ,QAAd,CAAuB,MAAvB,KAAkCF,GAAlC,aAAkCA,GAAlC,gCAAkCA,GAAG,CAAEM,OAAvC,0CAAkC,cAAcJ,QAAd,CAAuB,YAAvB,CAAtC,EAA4E;AAC1ErC,MAAAA,KAAK,CAAC,gCAAD,EAAmCY,IAAnC,aAAmCA,IAAnC,uBAAmCA,IAAI,CAAEgB,IAAzC,CAAL;AACA,aAAOI,EAAE,CAAC,IAAD,EAAO,IAAP,CAAT;AACD;;AAED,QAAI,EAACpB,IAAD,aAACA,IAAD,eAACA,IAAI,CAAEgB,IAAP,CAAJ,EAAiB;AACf,YAAMZ,GAAG,GAAGC,iBAAWqB,YAAX,CAAwB,gCAAxB,CAAZ;;AACAtC,MAAAA,KAAK,CAAC,0CAAD,EAA6CY,IAA7C,aAA6CA,IAA7C,uBAA6CA,IAAI,CAAEgB,IAAnD,EAAyDZ,GAAG,CAACuB,OAA7D,CAAL;AACA,aAAOP,EAAE,CAAChB,GAAD,CAAT;AACD;;AAED,QAAImB,GAAG,SAAH,IAAAA,GAAG,WAAH,qBAAAA,GAAG,CAAEM,OAAL,wDAAcJ,QAAd,CAAuBzB,IAAI,CAACgB,IAA5B,KAAqCO,GAArC,aAAqCA,GAArC,gCAAqCA,GAAG,CAAEM,OAA1C,0CAAqC,cAAcJ,QAAd,CAAuB,gBAAvB,CAAzC,EAAmF;AACjF,aAAOL,EAAE,CAAC,IAAD,EAAO,IAAP,CAAT;AACD;;AAED,UAAMhB,GAAG,GAAGC,iBAAWqB,YAAX,CAAwB,gCAAxB,CAAZ;;AACAtC,IAAAA,KAAK,CAAC,0CAAD,EAA6CY,IAA7C,aAA6CA,IAA7C,uBAA6CA,IAAI,CAAEgB,IAAnD,EAAyDZ,GAAG,CAACuB,OAA7D,CAAL;AAEA,WAAOP,EAAE,CAAChB,GAAD,CAAT;AACD;;AA9HuE","sourcesContent":["import buildDebug from 'debug';\n\nimport { API_ERROR, errorUtils } from '@verdaccio/core';\nimport {\n  Callback,\n  IPluginAuth,\n  Logger,\n  PackageAccess,\n  PluginOptions,\n  RemoteUser,\n} from '@verdaccio/types';\n\nimport { UserMemory, Users, VerdaccioMemoryConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:auth:memory:user');\n\nexport default class Memory implements IPluginAuth<VerdaccioMemoryConfig> {\n  public _logger: Logger;\n  public _users: Users;\n  public _config: {};\n  public _app_config: VerdaccioMemoryConfig;\n\n  public constructor(\n    config: VerdaccioMemoryConfig,\n    appOptions: PluginOptions<VerdaccioMemoryConfig>\n  ) {\n    this._users = config.users || {};\n    this._config = config;\n    this._logger = appOptions.logger;\n    this._app_config = appOptions.config;\n    debug('initialized');\n  }\n\n  public authenticate(user: string, password: string, done: Callback): void {\n    debug('authenticate %o:%o', user, password);\n    const userCredentials = this._users[user];\n\n    if (!userCredentials) {\n      debug('user %o does not exist', user);\n      return done(null, false);\n    }\n\n    if (password !== userCredentials.password) {\n      const err = errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD);\n      debug('password invalid for: %o', user);\n\n      return done(err);\n    }\n\n    // authentication succeeded!\n    // return all usergroups this user has access to;\n    debug('authentication succeed for %o', user);\n    return done(null, [user]);\n  }\n\n  public adduser(user: string, password: string, done: Callback): void {\n    if (this._users[user]) {\n      debug('user %o already exist', user);\n      return done(null, true);\n    }\n\n    if (this._app_config.max_users) {\n      if (Object.keys(this._users).length >= this._app_config.max_users) {\n        const err = errorUtils.getConflict(API_ERROR.MAX_USERS_REACHED);\n        debug(API_ERROR.MAX_USERS_REACHED);\n        return done(err);\n      }\n    }\n\n    this._users[user] = { name: user, password: password };\n\n    debug('user added succeeded for %o', user);\n    done(null, user);\n  }\n\n  public changePassword(\n    username: string,\n    password: string,\n    newPassword: string,\n    cb: Callback\n  ): void {\n    const user: UserMemory = this._users[username];\n    debug('init change password for %o', user?.name);\n\n    if (user && user.password === password) {\n      user.password = newPassword;\n      this._users[username] = user;\n      debug('user changed password succeeded for %o', user?.name);\n      cb(null, user);\n    } else {\n      const err = errorUtils.getNotFound('user not found');\n      this._logger.debug({ user: username }, 'change password user  @{user} not found');\n      debug('change password user for %o not found', user?.name);\n      return cb(err);\n    }\n  }\n\n  public allow_access(user: RemoteUser, pkg: PackageAccess, cb: Callback): void {\n    debug('allow access for %o', user);\n    if (pkg?.access?.includes('$all') || pkg?.access?.includes('$anonymous')) {\n      debug('%o has been granted access', user?.name);\n\n      return cb(null, true);\n    }\n\n    if (!user?.name) {\n      const err = errorUtils.getForbidden('not allowed to access package');\n      this._logger.debug({ user: user.name }, 'user: @{user} not allowed to access package');\n      debug('%o not allowed to access package err', user?.name, err.message);\n      return cb(err);\n    }\n\n    if (pkg?.access?.includes(user?.name) || pkg?.access?.includes('$authenticated')) {\n      debug('%o has been granted access', user?.name);\n      return cb(null, true);\n    }\n\n    const err = errorUtils.getForbidden('not allowed to access package');\n    debug('%o not allowed to access package err', user?.name, err?.message);\n    return cb(err);\n  }\n\n  public allow_publish(user: RemoteUser, pkg: PackageAccess, cb: Callback): void {\n    if (pkg?.publish?.includes('$all') || pkg?.publish?.includes('$anonymous')) {\n      debug('%o has been granted to publish', user?.name);\n      return cb(null, true);\n    }\n\n    if (!user?.name) {\n      const err = errorUtils.getForbidden('not allowed to publish package');\n      debug('%o not allowed to publish package err %o', user?.name, err.message);\n      return cb(err);\n    }\n\n    if (pkg?.publish?.includes(user.name) || pkg?.publish?.includes('$authenticated')) {\n      return cb(null, true);\n    }\n\n    const err = errorUtils.getForbidden('not allowed to publish package');\n    debug('%o not allowed to publish package err %o', user?.name, err.message);\n\n    return cb(err);\n  }\n}\n"],"file":"Memory.js"}

package/build/types/index.d.ts

@@ -0,0 +1,12 @@
+import { Config } from '@verdaccio/types';
+export interface UserMemory {
+    name: string;
+    password: string;
+}
+export interface Users {
+    [key: string]: UserMemory;
+}
+export interface VerdaccioMemoryConfig extends Config {
+    max_users?: number;
+    users: Users;
+}

package/build/types/index.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=index.js.map

package/build/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","sourcesContent":[],"file":"index.js"}

package/jest.config.js

@@ -0,0 +1,5 @@
+const config = require('../../../jest/config');
+
+module.exports = Object.assign({}, config, {
+  collectCoverage: true,
+});