verdaccio-auth-memory 13.0.5 → 13.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/build/Memory.js +106 -142
  2. package/build/Memory.js.map +1 -1
  3. package/build/Memory.mjs +106 -0
  4. package/build/Memory.mjs.map +1 -0
  5. package/build/_virtual/_rolldown/runtime.js +23 -0
  6. package/build/index.js +10 -14
  7. package/build/index.js.map +1 -1
  8. package/build/index.mjs +7 -0
  9. package/build/index.mjs.map +1 -0
  10. package/package.json +24 -11
  11. package/build/types/index.js +0 -6
  12. package/build/types/index.js.map +0 -1
package/build/Memory.js CHANGED
@@ -1,144 +1,108 @@
1
- "use strict";
1
+ const require_runtime = require("./_virtual/_rolldown/runtime.js");
2
+ let debug = require("debug");
3
+ debug = require_runtime.__toESM(debug);
4
+ let _verdaccio_core = require("@verdaccio/core");
5
+ //#region src/Memory.ts
6
+ var debug$1 = (0, debug.default)("verdaccio:plugin:auth:memory:user");
7
+ var { Plugin } = _verdaccio_core.pluginUtils;
8
+ var Memory = class extends Plugin {
9
+ _logger;
10
+ _users;
11
+ _config;
12
+ _app_config;
13
+ constructor(config, appOptions) {
14
+ super(config, appOptions);
15
+ this._users = config.users || {};
16
+ this._config = config;
17
+ this._logger = appOptions.logger;
18
+ this._app_config = appOptions.config;
19
+ }
20
+ authenticate(user, password, cb) {
21
+ debug$1("authenticate %o:%o", user, password);
22
+ const userCredentials = this._users[user];
23
+ if (!userCredentials) {
24
+ debug$1("user %o does not exist", user);
25
+ return cb(null, false);
26
+ }
27
+ if (password !== userCredentials.password) {
28
+ const err = _verdaccio_core.errorUtils.getUnauthorized(_verdaccio_core.API_ERROR.BAD_USERNAME_PASSWORD);
29
+ debug$1("password invalid for: %o", user);
30
+ return cb(err);
31
+ }
32
+ debug$1("authentication succeed for %o", user);
33
+ return cb(null, [user]);
34
+ }
35
+ adduser(user, password, cb) {
36
+ if (this._users[user]) {
37
+ debug$1("user %o already exist", user);
38
+ return cb(null, true);
39
+ }
40
+ if (this._app_config.max_users) {
41
+ if (Object.keys(this._users).length >= this._app_config.max_users) {
42
+ const err = _verdaccio_core.errorUtils.getConflict(_verdaccio_core.API_ERROR.MAX_USERS_REACHED);
43
+ debug$1(_verdaccio_core.API_ERROR.MAX_USERS_REACHED);
44
+ return cb(err);
45
+ }
46
+ }
47
+ this._users[user] = {
48
+ name: user,
49
+ password
50
+ };
51
+ debug$1("user added succeeded for %o", user);
52
+ cb(null, user);
53
+ }
54
+ changePassword(username, password, newPassword, cb) {
55
+ const user = this._users[username];
56
+ debug$1("init change password for %o", user?.name);
57
+ if (user && user.password === password) {
58
+ user.password = newPassword;
59
+ this._users[username] = user;
60
+ debug$1("user changed password succeeded for %o", user?.name);
61
+ cb(null, true);
62
+ } else {
63
+ const err = _verdaccio_core.errorUtils.getNotFound("user not found");
64
+ this._logger.debug({ user: username }, "change password user @{user} not found");
65
+ debug$1("change password user for %o not found", user?.name);
66
+ return cb(err);
67
+ }
68
+ }
69
+ allow_access(user, pkg, cb) {
70
+ debug$1("allow access for %o", user);
71
+ if (pkg?.access?.includes("$all") || pkg?.access?.includes("$anonymous")) {
72
+ debug$1("%o has been granted access", user?.name);
73
+ return cb(null, true);
74
+ }
75
+ if (!user?.name) {
76
+ const err = _verdaccio_core.errorUtils.getForbidden("not allowed to access package");
77
+ this._logger.debug({ user: user.name }, "user: @{user} not allowed to access package");
78
+ debug$1("%o not allowed to access package err", user?.name, err.message);
79
+ return cb(err);
80
+ }
81
+ if (pkg?.access?.includes(user?.name) || pkg?.access?.includes("$authenticated")) {
82
+ debug$1("%o has been granted access", user?.name);
83
+ return cb(null, true);
84
+ }
85
+ const err = _verdaccio_core.errorUtils.getForbidden("not allowed to access package");
86
+ debug$1("%o not allowed to access package err", user?.name, err?.message);
87
+ return cb(err);
88
+ }
89
+ allow_publish(user, pkg, cb) {
90
+ if (pkg?.publish?.includes("$all") || pkg?.publish?.includes("$anonymous")) {
91
+ debug$1("%o has been granted to publish", user?.name);
92
+ return cb(null, true);
93
+ }
94
+ if (!user?.name) {
95
+ const err = _verdaccio_core.errorUtils.getForbidden("not allowed to publish package");
96
+ debug$1("%o not allowed to publish package err %o", user?.name, err.message);
97
+ return cb(err);
98
+ }
99
+ if (pkg?.publish?.includes(user.name) || pkg?.publish?.includes("$authenticated")) return cb(null, true);
100
+ const err = _verdaccio_core.errorUtils.getForbidden("not allowed to publish package");
101
+ debug$1("%o not allowed to publish package err %o", user?.name, err.message);
102
+ return cb(err);
103
+ }
104
+ };
105
+ //#endregion
106
+ exports.default = Memory;
2
107
 
3
- function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
4
- Object.defineProperty(exports, "__esModule", {
5
- value: true
6
- });
7
- exports["default"] = void 0;
8
- var _debug = _interopRequireDefault(require("debug"));
9
- var _core = require("@verdaccio/core");
10
- function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
11
- function _classCallCheck(a, n) { if (!(a instanceof n)) throw new TypeError("Cannot call a class as a function"); }
12
- function _defineProperties(e, r) { for (var t = 0; t < r.length; t++) { var o = r[t]; o.enumerable = o.enumerable || !1, o.configurable = !0, "value" in o && (o.writable = !0), Object.defineProperty(e, _toPropertyKey(o.key), o); } }
13
- function _createClass(e, r, t) { return r && _defineProperties(e.prototype, r), t && _defineProperties(e, t), Object.defineProperty(e, "prototype", { writable: !1 }), e; }
14
- function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
15
- function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
16
- function _callSuper(t, o, e) { return o = _getPrototypeOf(o), _possibleConstructorReturn(t, _isNativeReflectConstruct() ? Reflect.construct(o, e || [], _getPrototypeOf(t).constructor) : o.apply(t, e)); }
17
- function _possibleConstructorReturn(t, e) { if (e && ("object" == _typeof(e) || "function" == typeof e)) return e; if (void 0 !== e) throw new TypeError("Derived constructors may only return object or undefined"); return _assertThisInitialized(t); }
18
- function _assertThisInitialized(e) { if (void 0 === e) throw new ReferenceError("this hasn't been initialised - super() hasn't been called"); return e; }
19
- function _isNativeReflectConstruct() { try { var t = !Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); } catch (t) {} return (_isNativeReflectConstruct = function _isNativeReflectConstruct() { return !!t; })(); }
20
- function _getPrototypeOf(t) { return _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf.bind() : function (t) { return t.__proto__ || Object.getPrototypeOf(t); }, _getPrototypeOf(t); }
21
- function _inherits(t, e) { if ("function" != typeof e && null !== e) throw new TypeError("Super expression must either be null or a function"); t.prototype = Object.create(e && e.prototype, { constructor: { value: t, writable: !0, configurable: !0 } }), Object.defineProperty(t, "prototype", { writable: !1 }), e && _setPrototypeOf(t, e); }
22
- function _setPrototypeOf(t, e) { return _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function (t, e) { return t.__proto__ = e, t; }, _setPrototypeOf(t, e); }
23
- var debug = (0, _debug["default"])('verdaccio:plugin:auth:memory:user');
24
- var Plugin = _core.pluginUtils.Plugin;
25
- var Memory = exports["default"] = /*#__PURE__*/function (_Plugin) {
26
- function Memory(config, appOptions) {
27
- var _this;
28
- _classCallCheck(this, Memory);
29
- _this = _callSuper(this, Memory, [config, appOptions]);
30
- _this._users = config.users || {};
31
- _this._config = config;
32
- _this._logger = appOptions.logger;
33
- _this._app_config = appOptions.config;
34
- return _this;
35
- }
36
- _inherits(Memory, _Plugin);
37
- return _createClass(Memory, [{
38
- key: "authenticate",
39
- value: function authenticate(user, password, cb) {
40
- debug('authenticate %o:%o', user, password);
41
- var userCredentials = this._users[user];
42
- if (!userCredentials) {
43
- debug('user %o does not exist', user);
44
- return cb(null, false);
45
- }
46
- if (password !== userCredentials.password) {
47
- var err = _core.errorUtils.getUnauthorized(_core.API_ERROR.BAD_USERNAME_PASSWORD);
48
- debug('password invalid for: %o', user);
49
- return cb(err);
50
- }
51
-
52
- // authentication succeeded!
53
- // return all usergroups this user has access to;
54
- debug('authentication succeed for %o', user);
55
- return cb(null, [user]);
56
- }
57
- }, {
58
- key: "adduser",
59
- value: function adduser(user, password, cb) {
60
- if (this._users[user]) {
61
- debug('user %o already exist', user);
62
- return cb(null, true);
63
- }
64
- if (this._app_config.max_users) {
65
- if (Object.keys(this._users).length >= this._app_config.max_users) {
66
- var err = _core.errorUtils.getConflict(_core.API_ERROR.MAX_USERS_REACHED);
67
- debug(_core.API_ERROR.MAX_USERS_REACHED);
68
- return cb(err);
69
- }
70
- }
71
- this._users[user] = {
72
- name: user,
73
- password: password
74
- };
75
- debug('user added succeeded for %o', user);
76
- cb(null, user);
77
- }
78
- }, {
79
- key: "changePassword",
80
- value: function changePassword(username, password, newPassword, cb) {
81
- var user = this._users[username];
82
- debug('init change password for %o', user === null || user === void 0 ? void 0 : user.name);
83
- if (user && user.password === password) {
84
- user.password = newPassword;
85
- this._users[username] = user;
86
- debug('user changed password succeeded for %o', user === null || user === void 0 ? void 0 : user.name);
87
- cb(null, true);
88
- } else {
89
- var err = _core.errorUtils.getNotFound('user not found');
90
- this._logger.debug({
91
- user: username
92
- }, 'change password user @{user} not found');
93
- debug('change password user for %o not found', user === null || user === void 0 ? void 0 : user.name);
94
- return cb(err);
95
- }
96
- }
97
- }, {
98
- key: "allow_access",
99
- value: function allow_access(user, pkg, cb) {
100
- var _pkg$access, _pkg$access2, _pkg$access3, _pkg$access4;
101
- debug('allow access for %o', user);
102
- if (pkg !== null && pkg !== void 0 && (_pkg$access = pkg.access) !== null && _pkg$access !== void 0 && _pkg$access.includes('$all') || pkg !== null && pkg !== void 0 && (_pkg$access2 = pkg.access) !== null && _pkg$access2 !== void 0 && _pkg$access2.includes('$anonymous')) {
103
- debug('%o has been granted access', user === null || user === void 0 ? void 0 : user.name);
104
- return cb(null, true);
105
- }
106
- if (!(user !== null && user !== void 0 && user.name)) {
107
- var _err = _core.errorUtils.getForbidden('not allowed to access package');
108
- this._logger.debug({
109
- user: user.name
110
- }, 'user: @{user} not allowed to access package');
111
- debug('%o not allowed to access package err', user === null || user === void 0 ? void 0 : user.name, _err.message);
112
- return cb(_err);
113
- }
114
- if (pkg !== null && pkg !== void 0 && (_pkg$access3 = pkg.access) !== null && _pkg$access3 !== void 0 && _pkg$access3.includes(user === null || user === void 0 ? void 0 : user.name) || pkg !== null && pkg !== void 0 && (_pkg$access4 = pkg.access) !== null && _pkg$access4 !== void 0 && _pkg$access4.includes('$authenticated')) {
115
- debug('%o has been granted access', user === null || user === void 0 ? void 0 : user.name);
116
- return cb(null, true);
117
- }
118
- var err = _core.errorUtils.getForbidden('not allowed to access package');
119
- debug('%o not allowed to access package err', user === null || user === void 0 ? void 0 : user.name, err === null || err === void 0 ? void 0 : err.message);
120
- return cb(err);
121
- }
122
- }, {
123
- key: "allow_publish",
124
- value: function allow_publish(user, pkg, cb) {
125
- var _pkg$publish, _pkg$publish2, _pkg$publish3, _pkg$publish4;
126
- if (pkg !== null && pkg !== void 0 && (_pkg$publish = pkg.publish) !== null && _pkg$publish !== void 0 && _pkg$publish.includes('$all') || pkg !== null && pkg !== void 0 && (_pkg$publish2 = pkg.publish) !== null && _pkg$publish2 !== void 0 && _pkg$publish2.includes('$anonymous')) {
127
- debug('%o has been granted to publish', user === null || user === void 0 ? void 0 : user.name);
128
- return cb(null, true);
129
- }
130
- if (!(user !== null && user !== void 0 && user.name)) {
131
- var _err2 = _core.errorUtils.getForbidden('not allowed to publish package');
132
- debug('%o not allowed to publish package err %o', user === null || user === void 0 ? void 0 : user.name, _err2.message);
133
- return cb(_err2);
134
- }
135
- if (pkg !== null && pkg !== void 0 && (_pkg$publish3 = pkg.publish) !== null && _pkg$publish3 !== void 0 && _pkg$publish3.includes(user.name) || pkg !== null && pkg !== void 0 && (_pkg$publish4 = pkg.publish) !== null && _pkg$publish4 !== void 0 && _pkg$publish4.includes('$authenticated')) {
136
- return cb(null, true);
137
- }
138
- var err = _core.errorUtils.getForbidden('not allowed to publish package');
139
- debug('%o not allowed to publish package err %o', user === null || user === void 0 ? void 0 : user.name, err.message);
140
- return cb(err);
141
- }
142
- }]);
143
- }(Plugin);
144
108
  //# sourceMappingURL=Memory.js.map
package/build/Memory.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"Memory.js","names":["_debug","_interopRequireDefault","require","_core","e","__esModule","_classCallCheck","a","n","TypeError","_defineProperties","r","t","length","o","enumerable","configurable","writable","Object","defineProperty","_toPropertyKey","key","_createClass","prototype","i","_toPrimitive","_typeof","Symbol","toPrimitive","call","String","Number","_callSuper","_getPrototypeOf","_possibleConstructorReturn","_isNativeReflectConstruct","Reflect","construct","constructor","apply","_assertThisInitialized","ReferenceError","Boolean","valueOf","setPrototypeOf","getPrototypeOf","bind","__proto__","_inherits","create","value","_setPrototypeOf","debug","buildDebug","Plugin","pluginUtils","Memory","exports","_Plugin","config","appOptions","_this","_users","users","_config","_logger","logger","_app_config","authenticate","user","password","cb","userCredentials","err","errorUtils","getUnauthorized","API_ERROR","BAD_USERNAME_PASSWORD","adduser","max_users","keys","getConflict","MAX_USERS_REACHED","name","changePassword","username","newPassword","getNotFound","allow_access","pkg","_pkg$access","_pkg$access2","_pkg$access3","_pkg$access4","access","includes","getForbidden","message","allow_publish","_pkg$publish","_pkg$publish2","_pkg$publish3","_pkg$publish4","publish"],"sources":["../src/Memory.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { API_ERROR, errorUtils, pluginUtils } from '@verdaccio/core';\nimport type { Config, Logger, PackageAccess, RemoteUser } from '@verdaccio/types';\n\nimport type { Users, VerdaccioMemoryConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:auth:memory:user');\n\nconst { Plugin } = pluginUtils;\n\nexport default class Memory\n extends Plugin<VerdaccioMemoryConfig>\n implements pluginUtils.Auth<VerdaccioMemoryConfig>\n{\n public _logger: Logger;\n public _users: Users;\n public _config: {};\n public _app_config: Config;\n\n public constructor(config: VerdaccioMemoryConfig, appOptions: pluginUtils.PluginOptions) {\n super(config, appOptions);\n this._users = config.users || {};\n this._config = config;\n this._logger = appOptions.logger;\n this._app_config = appOptions.config;\n }\n\n public authenticate(user: string, password: string, cb: pluginUtils.AuthCallback): void {\n debug('authenticate %o:%o', user, password);\n const userCredentials = this._users[user];\n\n if (!userCredentials) {\n debug('user %o does not exist', user);\n return cb(null, false);\n }\n\n if (password !== userCredentials.password) {\n const err = errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD);\n debug('password invalid for: %o', user);\n\n return cb(err);\n }\n\n // authentication succeeded!\n // return all usergroups this user has access to;\n debug('authentication succeed for %o', user);\n return cb(null, [user]);\n }\n\n public adduser(user: string, password: string, cb: pluginUtils.AuthUserCallback): void {\n if (this._users[user]) {\n debug('user %o already exist', user);\n return cb(null, true);\n }\n\n if (this._app_config.max_users) {\n if (Object.keys(this._users).length >= this._app_config.max_users) {\n const err = errorUtils.getConflict(API_ERROR.MAX_USERS_REACHED);\n debug(API_ERROR.MAX_USERS_REACHED);\n return cb(err);\n }\n }\n\n this._users[user] = { name: user, password: password };\n\n debug('user added succeeded for %o', user);\n cb(null, user);\n }\n\n public changePassword(\n username: string,\n password: string,\n newPassword: string,\n cb: pluginUtils.AuthChangePasswordCallback\n ): void {\n const user = this._users[username];\n debug('init change password for %o', user?.name);\n\n if (user && user.password === password) {\n user.password = newPassword;\n this._users[username] = user;\n debug('user changed password succeeded for %o', user?.name);\n cb(null, true);\n } else {\n const err = errorUtils.getNotFound('user not found');\n this._logger.debug({ user: username }, 'change password user @{user} not found');\n debug('change password user for %o not found', user?.name);\n return cb(err);\n }\n }\n\n public allow_access(user: RemoteUser, pkg: PackageAccess, cb: pluginUtils.AccessCallback): void {\n debug('allow access for %o', user);\n if (pkg?.access?.includes('$all') || pkg?.access?.includes('$anonymous')) {\n debug('%o has been granted access', user?.name);\n\n return cb(null, true);\n }\n\n if (!user?.name) {\n const err = errorUtils.getForbidden('not allowed to access package');\n this._logger.debug({ user: user.name }, 'user: @{user} not allowed to access package');\n debug('%o not allowed to access package err', user?.name, err.message);\n return cb(err);\n }\n\n if (pkg?.access?.includes(user?.name) || pkg?.access?.includes('$authenticated')) {\n debug('%o has been granted access', user?.name);\n return cb(null, true);\n }\n\n const err = errorUtils.getForbidden('not allowed to access package');\n debug('%o not allowed to access package err', user?.name, err?.message);\n return cb(err);\n }\n\n public allow_publish(\n user: RemoteUser,\n pkg: PackageAccess,\n cb: pluginUtils.AuthAccessCallback\n ): void {\n if (pkg?.publish?.includes('$all') || pkg?.publish?.includes('$anonymous')) {\n debug('%o has been granted to publish', user?.name);\n return cb(null, true);\n }\n\n if (!user?.name) {\n const err = errorUtils.getForbidden('not allowed to publish package');\n debug('%o not allowed to publish package err %o', user?.name, err.message);\n return cb(err);\n }\n\n if (pkg?.publish?.includes(user.name) || pkg?.publish?.includes('$authenticated')) {\n return cb(null, true);\n }\n\n const err = errorUtils.getForbidden('not allowed to publish package');\n debug('%o not allowed to publish package err %o', user?.name, err.message);\n\n return cb(err);\n }\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,KAAA,GAAAD,OAAA;AAAqE,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAAA,SAAAE,gBAAAC,CAAA,EAAAC,CAAA,UAAAD,CAAA,YAAAC,CAAA,aAAAC,SAAA;AAAA,SAAAC,kBAAAN,CAAA,EAAAO,CAAA,aAAAC,CAAA,MAAAA,CAAA,GAAAD,CAAA,CAAAE,MAAA,EAAAD,CAAA,UAAAE,CAAA,GAAAH,CAAA,CAAAC,CAAA,GAAAE,CAAA,CAAAC,UAAA,GAAAD,CAAA,CAAAC,UAAA,QAAAD,CAAA,CAAAE,YAAA,kBAAAF,CAAA,KAAAA,CAAA,CAAAG,QAAA,QAAAC,MAAA,CAAAC,cAAA,CAAAf,CAAA,EAAAgB,cAAA,CAAAN,CAAA,CAAAO,GAAA,GAAAP,CAAA;AAAA,SAAAQ,aAAAlB,CAAA,EAAAO,CAAA,EAAAC,CAAA,WAAAD,CAAA,IAAAD,iBAAA,CAAAN,CAAA,CAAAmB,SAAA,EAAAZ,CAAA,GAAAC,CAAA,IAAAF,iBAAA,CAAAN,CAAA,EAAAQ,CAAA,GAAAM,MAAA,CAAAC,cAAA,CAAAf,CAAA,iBAAAa,QAAA,SAAAb,CAAA;AAAA,SAAAgB,eAAAR,CAAA,QAAAY,CAAA,GAAAC,YAAA,CAAAb,CAAA,gCAAAc,OAAA,CAAAF,CAAA,IAAAA,CAAA,GAAAA,CAAA;AAAA,SAAAC,aAAAb,CAAA,EAAAD,CAAA,oBAAAe,OAAA,CAAAd,CAAA,MAAAA,CAAA,SAAAA,CAAA,MAAAR,CAAA,GAAAQ,CAAA,CAAAe,MAAA,CAAAC,WAAA,kBAAAxB,CAAA,QAAAoB,CAAA,GAAApB,CAAA,CAAAyB,IAAA,CAAAjB,CAAA,EAAAD,CAAA,gCAAAe,OAAA,CAAAF,CAAA,UAAAA,CAAA,YAAAf,SAAA,yEAAAE,CAAA,GAAAmB,MAAA,GAAAC,MAAA,EAAAnB,CAAA;AAAA,SAAAoB,WAAApB,CAAA,EAAAE,CAAA,EAAAV,CAAA,WAAAU,CAAA,GAAAmB,eAAA,CAAAnB,CAAA,GAAAoB,0BAAA,CAAAtB,CAAA,EAAAuB,yBAAA,KAAAC,OAAA,CAAAC,SAAA,CAAAvB,CAAA,EAAAV,CAAA,QAAA6B,eAAA,CAAArB,CAAA,EAAA0B,WAAA,IAAAxB,CAAA,CAAAyB,KAAA,CAAA3B,CAAA,EAAAR,CAAA;AAAA,SAAA8B,2BAAAtB,CAAA,EAAAR,CAAA,QAAAA,CAAA,iBAAAsB,OAAA,CAAAtB,CAAA,0BAAAA,CAAA,UAAAA,CAAA,iBAAAA,CAAA,YAAAK,SAAA,qEAAA+B,sBAAA,CAAA5B,CAAA;AAAA,SAAA4B,uBAAApC,CAAA,mBAAAA,CAAA,YAAAqC,cAAA,sEAAArC,CAAA;AAAA,SAAA+B,0BAAA,cAAAvB,CAAA,IAAA8B,OAAA,CAAAnB,SAAA,CAAAoB,OAAA,CAAAd,IAAA,CAAAO,OAAA,CAAAC,SAAA,CAAAK,OAAA,iCAAA9B,CAAA,aAAAuB,yBAAA,YAAAA,0BAAA,aAAAvB,CAAA;AAAA,SAAAqB,gBAAArB,CAAA,WAAAqB,eAAA,GAAAf,MAAA,CAAA0B,cAAA,GAAA1B,MAAA,CAAA2B,cAAA,CAAAC,IAAA,eAAAlC,CAAA,WAAAA,CAAA,CAAAmC,SAAA,IAAA7B,MAAA,CAAA2B,cAAA,CAAAjC,CAAA,MAAAqB,eAAA,CAAArB,CAAA;AAAA,SAAAoC,UAAApC,CAAA,EAAAR,CAAA,6BAAAA,CAAA,aAAAA,CAAA,YAAAK,SAAA,wDAAAG,CAAA,CAAAW,SAAA,GAAAL,MAAA,CAAA+B,MAAA,CAAA7C,CAAA,IAAAA,CAAA,CAAAmB,SAAA,IAAAe,WAAA,IAAAY,KAAA,EAAAtC,CAAA,EAAAK,QAAA,MAAAD,YAAA,WAAAE,MAAA,CAAAC,cAAA,CAAAP,CAAA,iBAAAK,QAAA,SAAAb,CAAA,IAAA+C,eAAA,CAAAvC,CAAA,EAAAR,CAAA;AAAA,SAAA+C,gBAAAvC,CAAA,EAAAR,CAAA,WAAA+C,eAAA,GAAAjC,MAAA,CAAA0B,cAAA,GAAA1B,MAAA,CAAA0B,cAAA,CAAAE,IAAA,eAAAlC,CAAA,EAAAR,CAAA,WAAAQ,CAAA,CAAAmC,SAAA,GAAA3C,CAAA,EAAAQ,CAAA,KAAAuC,eAAA,CAAAvC,CAAA,EAAAR,CAAA;AAKrE,IAAMgD,KAAK,GAAG,IAAAC,iBAAU,EAAC,mCAAmC,CAAC;AAE7D,IAAQC,MAAM,GAAKC,iBAAW,CAAtBD,MAAM;AAAiB,IAEVE,MAAM,GAAAC,OAAA,qCAAAC,OAAA;EASzB,SAAAF,OAAmBG,MAA6B,EAAEC,UAAqC,EAAE;IAAA,IAAAC,KAAA;IAAAvD,eAAA,OAAAkD,MAAA;IACvFK,KAAA,GAAA7B,UAAA,OAAAwB,MAAA,GAAMG,MAAM,EAAEC,UAAU;IACxBC,KAAA,CAAKC,MAAM,GAAGH,MAAM,CAACI,KAAK,IAAI,CAAC,CAAC;IAChCF,KAAA,CAAKG,OAAO,GAAGL,MAAM;IACrBE,KAAA,CAAKI,OAAO,GAAGL,UAAU,CAACM,MAAM;IAChCL,KAAA,CAAKM,WAAW,GAAGP,UAAU,CAACD,MAAM;IAAC,OAAAE,KAAA;EACvC;EAACb,SAAA,CAAAQ,MAAA,EAAAE,OAAA;EAAA,OAAApC,YAAA,CAAAkC,MAAA;IAAAnC,GAAA;IAAA6B,KAAA,EAED,SAAOkB,YAAYA,CAACC,IAAY,EAAEC,QAAgB,EAAEC,EAA4B,EAAQ;MACtFnB,KAAK,CAAC,oBAAoB,EAAEiB,IAAI,EAAEC,QAAQ,CAAC;MAC3C,IAAME,eAAe,GAAG,IAAI,CAACV,MAAM,CAACO,IAAI,CAAC;MAEzC,IAAI,CAACG,eAAe,EAAE;QACpBpB,KAAK,CAAC,wBAAwB,EAAEiB,IAAI,CAAC;QACrC,OAAOE,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;MACxB;MAEA,IAAID,QAAQ,KAAKE,eAAe,CAACF,QAAQ,EAAE;QACzC,IAAMG,GAAG,GAAGC,gBAAU,CAACC,eAAe,CAACC,eAAS,CAACC,qBAAqB,CAAC;QACvEzB,KAAK,CAAC,0BAA0B,EAAEiB,IAAI,CAAC;QAEvC,OAAOE,EAAE,CAACE,GAAG,CAAC;MAChB;;MAEA;MACA;MACArB,KAAK,CAAC,+BAA+B,EAAEiB,IAAI,CAAC;MAC5C,OAAOE,EAAE,CAAC,IAAI,EAAE,CAACF,IAAI,CAAC,CAAC;IACzB;EAAC;IAAAhD,GAAA;IAAA6B,KAAA,EAED,SAAO4B,OAAOA,CAACT,IAAY,EAAEC,QAAgB,EAAEC,EAAgC,EAAQ;MACrF,IAAI,IAAI,CAACT,MAAM,CAACO,IAAI,CAAC,EAAE;QACrBjB,KAAK,CAAC,uBAAuB,EAAEiB,IAAI,CAAC;QACpC,OAAOE,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;MACvB;MAEA,IAAI,IAAI,CAACJ,WAAW,CAACY,SAAS,EAAE;QAC9B,IAAI7D,MAAM,CAAC8D,IAAI,CAAC,IAAI,CAAClB,MAAM,CAAC,CAACjD,MAAM,IAAI,IAAI,CAACsD,WAAW,CAACY,SAAS,EAAE;UACjE,IAAMN,GAAG,GAAGC,gBAAU,CAACO,WAAW,CAACL,eAAS,CAACM,iBAAiB,CAAC;UAC/D9B,KAAK,CAACwB,eAAS,CAACM,iBAAiB,CAAC;UAClC,OAAOX,EAAE,CAACE,GAAG,CAAC;QAChB;MACF;MAEA,IAAI,CAACX,MAAM,CAACO,IAAI,CAAC,GAAG;QAAEc,IAAI,EAAEd,IAAI;QAAEC,QAAQ,EAAEA;MAAS,CAAC;MAEtDlB,KAAK,CAAC,6BAA6B,EAAEiB,IAAI,CAAC;MAC1CE,EAAE,CAAC,IAAI,EAAEF,IAAI,CAAC;IAChB;EAAC;IAAAhD,GAAA;IAAA6B,KAAA,EAED,SAAOkC,cAAcA,CACnBC,QAAgB,EAChBf,QAAgB,EAChBgB,WAAmB,EACnBf,EAA0C,EACpC;MACN,IAAMF,IAAI,GAAG,IAAI,CAACP,MAAM,CAACuB,QAAQ,CAAC;MAClCjC,KAAK,CAAC,6BAA6B,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,CAAC;MAEhD,IAAId,IAAI,IAAIA,IAAI,CAACC,QAAQ,KAAKA,QAAQ,EAAE;QACtCD,IAAI,CAACC,QAAQ,GAAGgB,WAAW;QAC3B,IAAI,CAACxB,MAAM,CAACuB,QAAQ,CAAC,GAAGhB,IAAI;QAC5BjB,KAAK,CAAC,wCAAwC,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,CAAC;QAC3DZ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;MAChB,CAAC,MAAM;QACL,IAAME,GAAG,GAAGC,gBAAU,CAACa,WAAW,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAACtB,OAAO,CAACb,KAAK,CAAC;UAAEiB,IAAI,EAAEgB;QAAS,CAAC,EAAE,yCAAyC,CAAC;QACjFjC,KAAK,CAAC,uCAAuC,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,CAAC;QAC1D,OAAOZ,EAAE,CAACE,GAAG,CAAC;MAChB;IACF;EAAC;IAAApD,GAAA;IAAA6B,KAAA,EAED,SAAOsC,YAAYA,CAACnB,IAAgB,EAAEoB,GAAkB,EAAElB,EAA8B,EAAQ;MAAA,IAAAmB,WAAA,EAAAC,YAAA,EAAAC,YAAA,EAAAC,YAAA;MAC9FzC,KAAK,CAAC,qBAAqB,EAAEiB,IAAI,CAAC;MAClC,IAAIoB,GAAG,aAAHA,GAAG,gBAAAC,WAAA,GAAHD,GAAG,CAAEK,MAAM,cAAAJ,WAAA,eAAXA,WAAA,CAAaK,QAAQ,CAAC,MAAM,CAAC,IAAIN,GAAG,aAAHA,GAAG,gBAAAE,YAAA,GAAHF,GAAG,CAAEK,MAAM,cAAAH,YAAA,eAAXA,YAAA,CAAaI,QAAQ,CAAC,YAAY,CAAC,EAAE;QACxE3C,KAAK,CAAC,4BAA4B,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,CAAC;QAE/C,OAAOZ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;MACvB;MAEA,IAAI,EAACF,IAAI,aAAJA,IAAI,eAAJA,IAAI,CAAEc,IAAI,GAAE;QACf,IAAMV,IAAG,GAAGC,gBAAU,CAACsB,YAAY,CAAC,+BAA+B,CAAC;QACpE,IAAI,CAAC/B,OAAO,CAACb,KAAK,CAAC;UAAEiB,IAAI,EAAEA,IAAI,CAACc;QAAK,CAAC,EAAE,6CAA6C,CAAC;QACtF/B,KAAK,CAAC,sCAAsC,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,EAAEV,IAAG,CAACwB,OAAO,CAAC;QACtE,OAAO1B,EAAE,CAACE,IAAG,CAAC;MAChB;MAEA,IAAIgB,GAAG,aAAHA,GAAG,gBAAAG,YAAA,GAAHH,GAAG,CAAEK,MAAM,cAAAF,YAAA,eAAXA,YAAA,CAAaG,QAAQ,CAAC1B,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,CAAC,IAAIM,GAAG,aAAHA,GAAG,gBAAAI,YAAA,GAAHJ,GAAG,CAAEK,MAAM,cAAAD,YAAA,eAAXA,YAAA,CAAaE,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAChF3C,KAAK,CAAC,4BAA4B,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,CAAC;QAC/C,OAAOZ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;MACvB;MAEA,IAAME,GAAG,GAAGC,gBAAU,CAACsB,YAAY,CAAC,+BAA+B,CAAC;MACpE5C,KAAK,CAAC,sCAAsC,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,EAAEV,GAAG,aAAHA,GAAG,uBAAHA,GAAG,CAAEwB,OAAO,CAAC;MACvE,OAAO1B,EAAE,CAACE,GAAG,CAAC;IAChB;EAAC;IAAApD,GAAA;IAAA6B,KAAA,EAED,SAAOgD,aAAaA,CAClB7B,IAAgB,EAChBoB,GAAkB,EAClBlB,EAAkC,EAC5B;MAAA,IAAA4B,YAAA,EAAAC,aAAA,EAAAC,aAAA,EAAAC,aAAA;MACN,IAAIb,GAAG,aAAHA,GAAG,gBAAAU,YAAA,GAAHV,GAAG,CAAEc,OAAO,cAAAJ,YAAA,eAAZA,YAAA,CAAcJ,QAAQ,CAAC,MAAM,CAAC,IAAIN,GAAG,aAAHA,GAAG,gBAAAW,aAAA,GAAHX,GAAG,CAAEc,OAAO,cAAAH,aAAA,eAAZA,aAAA,CAAcL,QAAQ,CAAC,YAAY,CAAC,EAAE;QAC1E3C,KAAK,CAAC,gCAAgC,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,CAAC;QACnD,OAAOZ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;MACvB;MAEA,IAAI,EAACF,IAAI,aAAJA,IAAI,eAAJA,IAAI,CAAEc,IAAI,GAAE;QACf,IAAMV,KAAG,GAAGC,gBAAU,CAACsB,YAAY,CAAC,gCAAgC,CAAC;QACrE5C,KAAK,CAAC,0CAA0C,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,EAAEV,KAAG,CAACwB,OAAO,CAAC;QAC1E,OAAO1B,EAAE,CAACE,KAAG,CAAC;MAChB;MAEA,IAAIgB,GAAG,aAAHA,GAAG,gBAAAY,aAAA,GAAHZ,GAAG,CAAEc,OAAO,cAAAF,aAAA,eAAZA,aAAA,CAAcN,QAAQ,CAAC1B,IAAI,CAACc,IAAI,CAAC,IAAIM,GAAG,aAAHA,GAAG,gBAAAa,aAAA,GAAHb,GAAG,CAAEc,OAAO,cAAAD,aAAA,eAAZA,aAAA,CAAcP,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QACjF,OAAOxB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;MACvB;MAEA,IAAME,GAAG,GAAGC,gBAAU,CAACsB,YAAY,CAAC,gCAAgC,CAAC;MACrE5C,KAAK,CAAC,0CAA0C,EAAEiB,IAAI,aAAJA,IAAI,uBAAJA,IAAI,CAAEc,IAAI,EAAEV,GAAG,CAACwB,OAAO,CAAC;MAE1E,OAAO1B,EAAE,CAACE,GAAG,CAAC;IAChB;EAAC;AAAA,EAjIOnB,MAAM","ignoreList":[]}
1
+ {"version":3,"file":"Memory.js","names":[],"sources":["../src/Memory.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { API_ERROR, errorUtils, pluginUtils } from '@verdaccio/core';\nimport type { Config, Logger, PackageAccess, RemoteUser } from '@verdaccio/types';\n\nimport type { Users, VerdaccioMemoryConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:auth:memory:user');\n\nconst { Plugin } = pluginUtils;\n\nexport default class Memory\n extends Plugin<VerdaccioMemoryConfig>\n implements pluginUtils.Auth<VerdaccioMemoryConfig>\n{\n public _logger: Logger;\n public _users: Users;\n public _config: {};\n public _app_config: Config;\n\n public constructor(config: VerdaccioMemoryConfig, appOptions: pluginUtils.PluginOptions) {\n super(config, appOptions);\n this._users = config.users || {};\n this._config = config;\n this._logger = appOptions.logger;\n this._app_config = appOptions.config;\n }\n\n public authenticate(user: string, password: string, cb: pluginUtils.AuthCallback): void {\n debug('authenticate %o:%o', user, password);\n const userCredentials = this._users[user];\n\n if (!userCredentials) {\n debug('user %o does not exist', user);\n return cb(null, false);\n }\n\n if (password !== userCredentials.password) {\n const err = errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD);\n debug('password invalid for: %o', user);\n\n return cb(err);\n }\n\n // authentication succeeded!\n // return all usergroups this user has access to;\n debug('authentication succeed for %o', user);\n return cb(null, [user]);\n }\n\n public adduser(user: string, password: string, cb: pluginUtils.AuthUserCallback): void {\n if (this._users[user]) {\n debug('user %o already exist', user);\n return cb(null, true);\n }\n\n if (this._app_config.max_users) {\n if (Object.keys(this._users).length >= this._app_config.max_users) {\n const err = errorUtils.getConflict(API_ERROR.MAX_USERS_REACHED);\n debug(API_ERROR.MAX_USERS_REACHED);\n return cb(err);\n }\n }\n\n this._users[user] = { name: user, password: password };\n\n debug('user added succeeded for %o', user);\n cb(null, user);\n }\n\n public changePassword(\n username: string,\n password: string,\n newPassword: string,\n cb: pluginUtils.AuthChangePasswordCallback\n ): void {\n const user = this._users[username];\n debug('init change password for %o', user?.name);\n\n if (user && user.password === password) {\n user.password = newPassword;\n this._users[username] = user;\n debug('user changed password succeeded for %o', user?.name);\n cb(null, true);\n } else {\n const err = errorUtils.getNotFound('user not found');\n this._logger.debug({ user: username }, 'change password user @{user} not found');\n debug('change password user for %o not found', user?.name);\n return cb(err);\n }\n }\n\n public allow_access(user: RemoteUser, pkg: PackageAccess, cb: pluginUtils.AccessCallback): void {\n debug('allow access for %o', user);\n if (pkg?.access?.includes('$all') || pkg?.access?.includes('$anonymous')) {\n debug('%o has been granted access', user?.name);\n\n return cb(null, true);\n }\n\n if (!user?.name) {\n const err = errorUtils.getForbidden('not allowed to access package');\n this._logger.debug({ user: user.name }, 'user: @{user} not allowed to access package');\n debug('%o not allowed to access package err', user?.name, err.message);\n return cb(err);\n }\n\n if (pkg?.access?.includes(user?.name) || pkg?.access?.includes('$authenticated')) {\n debug('%o has been granted access', user?.name);\n return cb(null, true);\n }\n\n const err = errorUtils.getForbidden('not allowed to access package');\n debug('%o not allowed to access package err', user?.name, err?.message);\n return cb(err);\n }\n\n public allow_publish(\n user: RemoteUser,\n pkg: PackageAccess,\n cb: pluginUtils.AuthAccessCallback\n ): void {\n if (pkg?.publish?.includes('$all') || pkg?.publish?.includes('$anonymous')) {\n debug('%o has been granted to publish', user?.name);\n return cb(null, true);\n }\n\n if (!user?.name) {\n const err = errorUtils.getForbidden('not allowed to publish package');\n debug('%o not allowed to publish package err %o', user?.name, err.message);\n return cb(err);\n }\n\n if (pkg?.publish?.includes(user.name) || pkg?.publish?.includes('$authenticated')) {\n return cb(null, true);\n }\n\n const err = errorUtils.getForbidden('not allowed to publish package');\n debug('%o not allowed to publish package err %o', user?.name, err.message);\n\n return cb(err);\n }\n}\n"],"mappings":";;;;;AAOA,IAAM,WAAA,GAAA,MAAA,SAAmB,mCAAmC;AAE5D,IAAM,EAAE,WAAW,gBAAA;AAEnB,IAAqB,SAArB,cACU,OAEV;CACE;CACA;CACA;CACA;CAEA,YAAmB,QAA+B,YAAuC;EACvF,MAAM,QAAQ,UAAU;EACxB,KAAK,SAAS,OAAO,SAAS,CAAC;EAC/B,KAAK,UAAU;EACf,KAAK,UAAU,WAAW;EAC1B,KAAK,cAAc,WAAW;CAChC;CAEA,aAAoB,MAAc,UAAkB,IAAoC;EACtF,QAAM,sBAAsB,MAAM,QAAQ;EAC1C,MAAM,kBAAkB,KAAK,OAAO;EAEpC,IAAI,CAAC,iBAAiB;GACpB,QAAM,0BAA0B,IAAI;GACpC,OAAO,GAAG,MAAM,KAAK;EACvB;EAEA,IAAI,aAAa,gBAAgB,UAAU;GACzC,MAAM,MAAM,gBAAA,WAAW,gBAAgB,gBAAA,UAAU,qBAAqB;GACtE,QAAM,4BAA4B,IAAI;GAEtC,OAAO,GAAG,GAAG;EACf;EAIA,QAAM,iCAAiC,IAAI;EAC3C,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;CACxB;CAEA,QAAe,MAAc,UAAkB,IAAwC;EACrF,IAAI,KAAK,OAAO,OAAO;GACrB,QAAM,yBAAyB,IAAI;GACnC,OAAO,GAAG,MAAM,IAAI;EACtB;EAEA,IAAI,KAAK,YAAY;OACf,OAAO,KAAK,KAAK,MAAM,EAAE,UAAU,KAAK,YAAY,WAAW;IACjE,MAAM,MAAM,gBAAA,WAAW,YAAY,gBAAA,UAAU,iBAAiB;IAC9D,QAAM,gBAAA,UAAU,iBAAiB;IACjC,OAAO,GAAG,GAAG;GACf;;EAGF,KAAK,OAAO,QAAQ;GAAE,MAAM;GAAgB;EAAS;EAErD,QAAM,+BAA+B,IAAI;EACzC,GAAG,MAAM,IAAI;CACf;CAEA,eACE,UACA,UACA,aACA,IACM;EACN,MAAM,OAAO,KAAK,OAAO;EACzB,QAAM,+BAA+B,MAAM,IAAI;EAE/C,IAAI,QAAQ,KAAK,aAAa,UAAU;GACtC,KAAK,WAAW;GAChB,KAAK,OAAO,YAAY;GACxB,QAAM,0CAA0C,MAAM,IAAI;GAC1D,GAAG,MAAM,IAAI;EACf,OAAO;GACL,MAAM,MAAM,gBAAA,WAAW,YAAY,gBAAgB;GACnD,KAAK,QAAQ,MAAM,EAAE,MAAM,SAAS,GAAG,yCAAyC;GAChF,QAAM,yCAAyC,MAAM,IAAI;GACzD,OAAO,GAAG,GAAG;EACf;CACF;CAEA,aAAoB,MAAkB,KAAoB,IAAsC;EAC9F,QAAM,uBAAuB,IAAI;EACjC,IAAI,KAAK,QAAQ,SAAS,MAAM,KAAK,KAAK,QAAQ,SAAS,YAAY,GAAG;GACxE,QAAM,8BAA8B,MAAM,IAAI;GAE9C,OAAO,GAAG,MAAM,IAAI;EACtB;EAEA,IAAI,CAAC,MAAM,MAAM;GACf,MAAM,MAAM,gBAAA,WAAW,aAAa,+BAA+B;GACnE,KAAK,QAAQ,MAAM,EAAE,MAAM,KAAK,KAAK,GAAG,6CAA6C;GACrF,QAAM,wCAAwC,MAAM,MAAM,IAAI,OAAO;GACrE,OAAO,GAAG,GAAG;EACf;EAEA,IAAI,KAAK,QAAQ,SAAS,MAAM,IAAI,KAAK,KAAK,QAAQ,SAAS,gBAAgB,GAAG;GAChF,QAAM,8BAA8B,MAAM,IAAI;GAC9C,OAAO,GAAG,MAAM,IAAI;EACtB;EAEA,MAAM,MAAM,gBAAA,WAAW,aAAa,+BAA+B;EACnE,QAAM,wCAAwC,MAAM,MAAM,KAAK,OAAO;EACtE,OAAO,GAAG,GAAG;CACf;CAEA,cACE,MACA,KACA,IACM;EACN,IAAI,KAAK,SAAS,SAAS,MAAM,KAAK,KAAK,SAAS,SAAS,YAAY,GAAG;GAC1E,QAAM,kCAAkC,MAAM,IAAI;GAClD,OAAO,GAAG,MAAM,IAAI;EACtB;EAEA,IAAI,CAAC,MAAM,MAAM;GACf,MAAM,MAAM,gBAAA,WAAW,aAAa,gCAAgC;GACpE,QAAM,4CAA4C,MAAM,MAAM,IAAI,OAAO;GACzE,OAAO,GAAG,GAAG;EACf;EAEA,IAAI,KAAK,SAAS,SAAS,KAAK,IAAI,KAAK,KAAK,SAAS,SAAS,gBAAgB,GAC9E,OAAO,GAAG,MAAM,IAAI;EAGtB,MAAM,MAAM,gBAAA,WAAW,aAAa,gCAAgC;EACpE,QAAM,4CAA4C,MAAM,MAAM,IAAI,OAAO;EAEzE,OAAO,GAAG,GAAG;CACf;AACF"}
package/build/Memory.mjs ADDED
@@ -0,0 +1,106 @@
1
+ import buildDebug from "debug";
2
+ import { API_ERROR, errorUtils, pluginUtils } from "@verdaccio/core";
3
+ //#region src/Memory.ts
4
+ var debug = buildDebug("verdaccio:plugin:auth:memory:user");
5
+ var { Plugin } = pluginUtils;
6
+ var Memory = class extends Plugin {
7
+ _logger;
8
+ _users;
9
+ _config;
10
+ _app_config;
11
+ constructor(config, appOptions) {
12
+ super(config, appOptions);
13
+ this._users = config.users || {};
14
+ this._config = config;
15
+ this._logger = appOptions.logger;
16
+ this._app_config = appOptions.config;
17
+ }
18
+ authenticate(user, password, cb) {
19
+ debug("authenticate %o:%o", user, password);
20
+ const userCredentials = this._users[user];
21
+ if (!userCredentials) {
22
+ debug("user %o does not exist", user);
23
+ return cb(null, false);
24
+ }
25
+ if (password !== userCredentials.password) {
26
+ const err = errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD);
27
+ debug("password invalid for: %o", user);
28
+ return cb(err);
29
+ }
30
+ debug("authentication succeed for %o", user);
31
+ return cb(null, [user]);
32
+ }
33
+ adduser(user, password, cb) {
34
+ if (this._users[user]) {
35
+ debug("user %o already exist", user);
36
+ return cb(null, true);
37
+ }
38
+ if (this._app_config.max_users) {
39
+ if (Object.keys(this._users).length >= this._app_config.max_users) {
40
+ const err = errorUtils.getConflict(API_ERROR.MAX_USERS_REACHED);
41
+ debug(API_ERROR.MAX_USERS_REACHED);
42
+ return cb(err);
43
+ }
44
+ }
45
+ this._users[user] = {
46
+ name: user,
47
+ password
48
+ };
49
+ debug("user added succeeded for %o", user);
50
+ cb(null, user);
51
+ }
52
+ changePassword(username, password, newPassword, cb) {
53
+ const user = this._users[username];
54
+ debug("init change password for %o", user?.name);
55
+ if (user && user.password === password) {
56
+ user.password = newPassword;
57
+ this._users[username] = user;
58
+ debug("user changed password succeeded for %o", user?.name);
59
+ cb(null, true);
60
+ } else {
61
+ const err = errorUtils.getNotFound("user not found");
62
+ this._logger.debug({ user: username }, "change password user @{user} not found");
63
+ debug("change password user for %o not found", user?.name);
64
+ return cb(err);
65
+ }
66
+ }
67
+ allow_access(user, pkg, cb) {
68
+ debug("allow access for %o", user);
69
+ if (pkg?.access?.includes("$all") || pkg?.access?.includes("$anonymous")) {
70
+ debug("%o has been granted access", user?.name);
71
+ return cb(null, true);
72
+ }
73
+ if (!user?.name) {
74
+ const err = errorUtils.getForbidden("not allowed to access package");
75
+ this._logger.debug({ user: user.name }, "user: @{user} not allowed to access package");
76
+ debug("%o not allowed to access package err", user?.name, err.message);
77
+ return cb(err);
78
+ }
79
+ if (pkg?.access?.includes(user?.name) || pkg?.access?.includes("$authenticated")) {
80
+ debug("%o has been granted access", user?.name);
81
+ return cb(null, true);
82
+ }
83
+ const err = errorUtils.getForbidden("not allowed to access package");
84
+ debug("%o not allowed to access package err", user?.name, err?.message);
85
+ return cb(err);
86
+ }
87
+ allow_publish(user, pkg, cb) {
88
+ if (pkg?.publish?.includes("$all") || pkg?.publish?.includes("$anonymous")) {
89
+ debug("%o has been granted to publish", user?.name);
90
+ return cb(null, true);
91
+ }
92
+ if (!user?.name) {
93
+ const err = errorUtils.getForbidden("not allowed to publish package");
94
+ debug("%o not allowed to publish package err %o", user?.name, err.message);
95
+ return cb(err);
96
+ }
97
+ if (pkg?.publish?.includes(user.name) || pkg?.publish?.includes("$authenticated")) return cb(null, true);
98
+ const err = errorUtils.getForbidden("not allowed to publish package");
99
+ debug("%o not allowed to publish package err %o", user?.name, err.message);
100
+ return cb(err);
101
+ }
102
+ };
103
+ //#endregion
104
+ export { Memory as default };
105
+
106
+ //# sourceMappingURL=Memory.mjs.map
package/build/Memory.mjs.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"Memory.mjs","names":[],"sources":["../src/Memory.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { API_ERROR, errorUtils, pluginUtils } from '@verdaccio/core';\nimport type { Config, Logger, PackageAccess, RemoteUser } from '@verdaccio/types';\n\nimport type { Users, VerdaccioMemoryConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:auth:memory:user');\n\nconst { Plugin } = pluginUtils;\n\nexport default class Memory\n extends Plugin<VerdaccioMemoryConfig>\n implements pluginUtils.Auth<VerdaccioMemoryConfig>\n{\n public _logger: Logger;\n public _users: Users;\n public _config: {};\n public _app_config: Config;\n\n public constructor(config: VerdaccioMemoryConfig, appOptions: pluginUtils.PluginOptions) {\n super(config, appOptions);\n this._users = config.users || {};\n this._config = config;\n this._logger = appOptions.logger;\n this._app_config = appOptions.config;\n }\n\n public authenticate(user: string, password: string, cb: pluginUtils.AuthCallback): void {\n debug('authenticate %o:%o', user, password);\n const userCredentials = this._users[user];\n\n if (!userCredentials) {\n debug('user %o does not exist', user);\n return cb(null, false);\n }\n\n if (password !== userCredentials.password) {\n const err = errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD);\n debug('password invalid for: %o', user);\n\n return cb(err);\n }\n\n // authentication succeeded!\n // return all usergroups this user has access to;\n debug('authentication succeed for %o', user);\n return cb(null, [user]);\n }\n\n public adduser(user: string, password: string, cb: pluginUtils.AuthUserCallback): void {\n if (this._users[user]) {\n debug('user %o already exist', user);\n return cb(null, true);\n }\n\n if (this._app_config.max_users) {\n if (Object.keys(this._users).length >= this._app_config.max_users) {\n const err = errorUtils.getConflict(API_ERROR.MAX_USERS_REACHED);\n debug(API_ERROR.MAX_USERS_REACHED);\n return cb(err);\n }\n }\n\n this._users[user] = { name: user, password: password };\n\n debug('user added succeeded for %o', user);\n cb(null, user);\n }\n\n public changePassword(\n username: string,\n password: string,\n newPassword: string,\n cb: pluginUtils.AuthChangePasswordCallback\n ): void {\n const user = this._users[username];\n debug('init change password for %o', user?.name);\n\n if (user && user.password === password) {\n user.password = newPassword;\n this._users[username] = user;\n debug('user changed password succeeded for %o', user?.name);\n cb(null, true);\n } else {\n const err = errorUtils.getNotFound('user not found');\n this._logger.debug({ user: username }, 'change password user @{user} not found');\n debug('change password user for %o not found', user?.name);\n return cb(err);\n }\n }\n\n public allow_access(user: RemoteUser, pkg: PackageAccess, cb: pluginUtils.AccessCallback): void {\n debug('allow access for %o', user);\n if (pkg?.access?.includes('$all') || pkg?.access?.includes('$anonymous')) {\n debug('%o has been granted access', user?.name);\n\n return cb(null, true);\n }\n\n if (!user?.name) {\n const err = errorUtils.getForbidden('not allowed to access package');\n this._logger.debug({ user: user.name }, 'user: @{user} not allowed to access package');\n debug('%o not allowed to access package err', user?.name, err.message);\n return cb(err);\n }\n\n if (pkg?.access?.includes(user?.name) || pkg?.access?.includes('$authenticated')) {\n debug('%o has been granted access', user?.name);\n return cb(null, true);\n }\n\n const err = errorUtils.getForbidden('not allowed to access package');\n debug('%o not allowed to access package err', user?.name, err?.message);\n return cb(err);\n }\n\n public allow_publish(\n user: RemoteUser,\n pkg: PackageAccess,\n cb: pluginUtils.AuthAccessCallback\n ): void {\n if (pkg?.publish?.includes('$all') || pkg?.publish?.includes('$anonymous')) {\n debug('%o has been granted to publish', user?.name);\n return cb(null, true);\n }\n\n if (!user?.name) {\n const err = errorUtils.getForbidden('not allowed to publish package');\n debug('%o not allowed to publish package err %o', user?.name, err.message);\n return cb(err);\n }\n\n if (pkg?.publish?.includes(user.name) || pkg?.publish?.includes('$authenticated')) {\n return cb(null, true);\n }\n\n const err = errorUtils.getForbidden('not allowed to publish package');\n debug('%o not allowed to publish package err %o', user?.name, err.message);\n\n return cb(err);\n }\n}\n"],"mappings":";;;AAOA,IAAM,QAAQ,WAAW,mCAAmC;AAE5D,IAAM,EAAE,WAAW;AAEnB,IAAqB,SAArB,cACU,OAEV;CACE;CACA;CACA;CACA;CAEA,YAAmB,QAA+B,YAAuC;EACvF,MAAM,QAAQ,UAAU;EACxB,KAAK,SAAS,OAAO,SAAS,CAAC;EAC/B,KAAK,UAAU;EACf,KAAK,UAAU,WAAW;EAC1B,KAAK,cAAc,WAAW;CAChC;CAEA,aAAoB,MAAc,UAAkB,IAAoC;EACtF,MAAM,sBAAsB,MAAM,QAAQ;EAC1C,MAAM,kBAAkB,KAAK,OAAO;EAEpC,IAAI,CAAC,iBAAiB;GACpB,MAAM,0BAA0B,IAAI;GACpC,OAAO,GAAG,MAAM,KAAK;EACvB;EAEA,IAAI,aAAa,gBAAgB,UAAU;GACzC,MAAM,MAAM,WAAW,gBAAgB,UAAU,qBAAqB;GACtE,MAAM,4BAA4B,IAAI;GAEtC,OAAO,GAAG,GAAG;EACf;EAIA,MAAM,iCAAiC,IAAI;EAC3C,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;CACxB;CAEA,QAAe,MAAc,UAAkB,IAAwC;EACrF,IAAI,KAAK,OAAO,OAAO;GACrB,MAAM,yBAAyB,IAAI;GACnC,OAAO,GAAG,MAAM,IAAI;EACtB;EAEA,IAAI,KAAK,YAAY;OACf,OAAO,KAAK,KAAK,MAAM,EAAE,UAAU,KAAK,YAAY,WAAW;IACjE,MAAM,MAAM,WAAW,YAAY,UAAU,iBAAiB;IAC9D,MAAM,UAAU,iBAAiB;IACjC,OAAO,GAAG,GAAG;GACf;;EAGF,KAAK,OAAO,QAAQ;GAAE,MAAM;GAAgB;EAAS;EAErD,MAAM,+BAA+B,IAAI;EACzC,GAAG,MAAM,IAAI;CACf;CAEA,eACE,UACA,UACA,aACA,IACM;EACN,MAAM,OAAO,KAAK,OAAO;EACzB,MAAM,+BAA+B,MAAM,IAAI;EAE/C,IAAI,QAAQ,KAAK,aAAa,UAAU;GACtC,KAAK,WAAW;GAChB,KAAK,OAAO,YAAY;GACxB,MAAM,0CAA0C,MAAM,IAAI;GAC1D,GAAG,MAAM,IAAI;EACf,OAAO;GACL,MAAM,MAAM,WAAW,YAAY,gBAAgB;GACnD,KAAK,QAAQ,MAAM,EAAE,MAAM,SAAS,GAAG,yCAAyC;GAChF,MAAM,yCAAyC,MAAM,IAAI;GACzD,OAAO,GAAG,GAAG;EACf;CACF;CAEA,aAAoB,MAAkB,KAAoB,IAAsC;EAC9F,MAAM,uBAAuB,IAAI;EACjC,IAAI,KAAK,QAAQ,SAAS,MAAM,KAAK,KAAK,QAAQ,SAAS,YAAY,GAAG;GACxE,MAAM,8BAA8B,MAAM,IAAI;GAE9C,OAAO,GAAG,MAAM,IAAI;EACtB;EAEA,IAAI,CAAC,MAAM,MAAM;GACf,MAAM,MAAM,WAAW,aAAa,+BAA+B;GACnE,KAAK,QAAQ,MAAM,EAAE,MAAM,KAAK,KAAK,GAAG,6CAA6C;GACrF,MAAM,wCAAwC,MAAM,MAAM,IAAI,OAAO;GACrE,OAAO,GAAG,GAAG;EACf;EAEA,IAAI,KAAK,QAAQ,SAAS,MAAM,IAAI,KAAK,KAAK,QAAQ,SAAS,gBAAgB,GAAG;GAChF,MAAM,8BAA8B,MAAM,IAAI;GAC9C,OAAO,GAAG,MAAM,IAAI;EACtB;EAEA,MAAM,MAAM,WAAW,aAAa,+BAA+B;EACnE,MAAM,wCAAwC,MAAM,MAAM,KAAK,OAAO;EACtE,OAAO,GAAG,GAAG;CACf;CAEA,cACE,MACA,KACA,IACM;EACN,IAAI,KAAK,SAAS,SAAS,MAAM,KAAK,KAAK,SAAS,SAAS,YAAY,GAAG;GAC1E,MAAM,kCAAkC,MAAM,IAAI;GAClD,OAAO,GAAG,MAAM,IAAI;EACtB;EAEA,IAAI,CAAC,MAAM,MAAM;GACf,MAAM,MAAM,WAAW,aAAa,gCAAgC;GACpE,MAAM,4CAA4C,MAAM,MAAM,IAAI,OAAO;GACzE,OAAO,GAAG,GAAG;EACf;EAEA,IAAI,KAAK,SAAS,SAAS,KAAK,IAAI,KAAK,KAAK,SAAS,SAAS,gBAAgB,GAC9E,OAAO,GAAG,MAAM,IAAI;EAGtB,MAAM,MAAM,WAAW,aAAa,gCAAgC;EACpE,MAAM,4CAA4C,MAAM,MAAM,IAAI,OAAO;EAEzE,OAAO,GAAG,GAAG;CACf;AACF"}
package/build/_virtual/_rolldown/runtime.js ADDED
@@ -0,0 +1,23 @@
1
+ //#region \0rolldown/runtime.js
2
+ var __create = Object.create;
3
+ var __defProp = Object.defineProperty;
4
+ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
5
+ var __getOwnPropNames = Object.getOwnPropertyNames;
6
+ var __getProtoOf = Object.getPrototypeOf;
7
+ var __hasOwnProp = Object.prototype.hasOwnProperty;
8
+ var __copyProps = (to, from, except, desc) => {
9
+ if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
10
+ key = keys[i];
11
+ if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
12
+ get: ((k) => from[k]).bind(null, key),
13
+ enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
14
+ });
15
+ }
16
+ return to;
17
+ };
18
+ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
19
+ value: mod,
20
+ enumerable: true
21
+ }) : target, mod));
22
+ //#endregion
23
+ exports.__toESM = __toESM;
package/build/index.js CHANGED
@@ -1,16 +1,12 @@
1
- "use strict";
2
-
3
- Object.defineProperty(exports, "__esModule", {
4
- value: true
5
- });
6
- Object.defineProperty(exports, "Memory", {
7
- enumerable: true,
8
- get: function get() {
9
- return _Memory["default"];
10
- }
1
+ Object.defineProperties(exports, {
2
+ __esModule: { value: true },
3
+ [Symbol.toStringTag]: { value: "Module" }
11
4
  });
12
- exports["default"] = void 0;
13
- var _Memory = _interopRequireDefault(require("./Memory"));
14
- function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
15
- var _default = exports["default"] = _Memory["default"];
5
+ const require_Memory = require("./Memory.js");
6
+ //#region src/index.ts
7
+ var src_default = require_Memory.default;
8
+ //#endregion
9
+ exports.Memory = require_Memory.default;
10
+ exports.default = src_default;
11
+
16
12
  //# sourceMappingURL=index.js.map
package/build/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","names":["_Memory","_interopRequireDefault","require","e","__esModule","_default","exports","Memory"],"sources":["../src/index.ts"],"sourcesContent":["import Memory from './Memory';\n\nexport { Memory };\n\nexport default Memory;\n"],"mappings":";;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,sBAAA,CAAAC,OAAA;AAA8B,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAAA,IAAAE,QAAA,GAAAC,OAAA,cAIfC,kBAAM","ignoreList":[]}
1
+ {"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["import Memory from './Memory';\n\nexport { Memory };\n\nexport default Memory;\n"],"mappings":";;;;;;AAIA,IAAA,cAAe,eAAA"}
package/build/index.mjs ADDED
@@ -0,0 +1,7 @@
1
+ import Memory from "./Memory.mjs";
2
+ //#region src/index.ts
3
+ var src_default = Memory;
4
+ //#endregion
5
+ export { Memory, src_default as default };
6
+
7
+ //# sourceMappingURL=index.mjs.map
package/build/index.mjs.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.mjs","names":[],"sources":["../src/index.ts"],"sourcesContent":["import Memory from './Memory';\n\nexport { Memory };\n\nexport default Memory;\n"],"mappings":";;AAIA,IAAA,cAAe"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "verdaccio-auth-memory",
3
- "version": "13.0.5",
3
+ "version": "13.1.0",
4
4
  "description": "Auth plugin for Verdaccio that keeps users in memory",
5
5
  "keywords": [
6
6
  "enterprise",
@@ -28,27 +28,40 @@
28
28
  "type": "opencollective",
29
29
  "url": "https://opencollective.com/verdaccio"
30
30
  },
31
- "main": "build/index.js",
32
- "types": "build/src/index.d.ts",
31
+ "main": "./build/index.js",
32
+ "module": "./build/index.mjs",
33
+ "types": "./build/index.d.ts",
34
+ "exports": {
35
+ ".": {
36
+ "import": {
37
+ "types": "./build/index.d.ts",
38
+ "default": "./build/index.mjs"
39
+ },
40
+ "require": {
41
+ "types": "./build/index.d.ts",
42
+ "default": "./build/index.js"
43
+ }
44
+ },
45
+ "./build/*": "./build/*"
46
+ },
33
47
  "dependencies": {
34
- "@verdaccio/core": "8.1.4",
48
+ "@verdaccio/core": "8.2.0",
35
49
  "debug": "4.4.3"
36
50
  },
37
51
  "devDependencies": {
38
52
  "@types/debug": "4.1.12",
39
- "@verdaccio/config": "8.1.4",
40
- "@verdaccio/types": "13.0.5"
53
+ "@verdaccio/config": "8.2.0",
54
+ "@verdaccio/types": "13.0.5",
55
+ "vite": "8.0.16"
41
56
  },
42
57
  "engines": {
43
- "node": ">=18"
58
+ "node": ">=22"
44
59
  },
45
60
  "scripts": {
46
61
  "clean": "rimraf ./build",
47
62
  "type-check": "tsc --noEmit -p tsconfig.build.json",
48
- "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
49
- "build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
50
- "build": "pnpm run build:js && pnpm run build:types",
51
- "watch": "pnpm build:js -- --watch",
63
+ "build": "vite build && tsc --emitDeclarationOnly -p tsconfig.build.json",
64
+ "watch": "vite build --watch",
52
65
  "test": "vitest run"
53
66
  }
54
67
  }
package/build/types/index.js DELETED
@@ -1,6 +0,0 @@
1
- "use strict";
2
-
3
- Object.defineProperty(exports, "__esModule", {
4
- value: true
5
- });
6
- //# sourceMappingURL=index.js.map
package/build/types/index.js.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","names":[],"sources":["../../src/types/index.ts"],"sourcesContent":["export interface UserMemory {\n name: string;\n password: string;\n}\n\nexport interface Users {\n [key: string]: UserMemory;\n}\n\nexport interface VerdaccioMemoryConfig {\n max_users?: number;\n users: Users;\n}\n"],"mappings":"","ignoreList":[]}