github.com/verdaccio
1
0
Fork 0
mirror of https://github.com/verdaccio/verdaccio.git synced 2024-12-24 21:15:51 +01:00
Code Releases Wiki Activity

chore: request header constants (#4920)

Browse Source
This commit is contained in:
Marc Bernard 2024-10-28 02:22:15 -04:00 committed by GitHub
parent 027057c686
commit 48aa89f651
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
6 changed files with 22 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
.changeset/blue-paws-cheer.md Normal file
View File

@ -0,0 +1,7 @@
---
'@verdaccio/server': patch
'@verdaccio/middleware': patch
'@verdaccio/core': patch
---
chore: request header constants

4
packages/core/core/src/constants.ts
View File

@ -46,6 +46,10 @@ export const HEADERS = {
CSP: 'Content-Security-Policy',
CTO: 'X-Content-Type-Options',
XSS: 'X-XSS-Protection',
CLIENT: 'X-Client',
POWERED_BY: 'X-Powered-By',
RATELIMIT_LIMIT: 'X-RateLimit-Limit',
RATELIMIT_REMAINING: 'X-RateLimit-Remaining',
NONE_MATCH: 'If-None-Match',
ETAG: 'ETag',
JSON_CHARSET: 'application/json; charset=utf-8',

2
packages/core/core/src/error-utils.ts
View File

@ -3,7 +3,7 @@ import createError, { HttpError } from 'http-errors';
import { HTTP_STATUS } from './constants';
export const API_ERROR = {
PASSWORD_SHORT: `The provided password does not pass the validation`,
PASSWORD_SHORT: 'The provided password does not pass the validation',
MUST_BE_LOGGED: 'You must be logged in to publish packages.',
PLUGIN_ERROR: 'bug in the auth plugin system',
CONFIG_BAD_FORMAT: 'config file must be an object',

4
packages/middleware/src/middlewares/log.ts
View File

@ -1,5 +1,7 @@
import _ from 'lodash';
import { HEADERS } from '@verdaccio/core';
import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
// FIXME: deprecated, moved to @verdaccio/dev-commons
@ -52,7 +54,7 @@ export const log = (logger) => {
};
const log = function (): void {
const forwardedFor = req.get('x-forwarded-for');
const forwardedFor = req.get(HEADERS.FORWARDED_FOR);
const remoteAddress = req.connection.remoteAddress;
const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;
let message;

3
packages/middleware/src/middlewares/user-agent.ts
View File

@ -1,10 +1,11 @@
import { getUserAgent } from '@verdaccio/config';
import { HEADERS } from '@verdaccio/core';
import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
export function userAgent(config) {
return function (_req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
res.setHeader('x-powered-by', getUserAgent(config?.user_agent));
res.setHeader(HEADERS.POWERED_BY, getUserAgent(config?.user_agent));
next();
};
}

10
packages/server/express/test/server.spec.ts
View File

@ -40,8 +40,8 @@ describe('server api', () => {
await supertest(app)
.get('/')
.expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
.expect('x-ratelimit-limit', '10000')
.expect('x-ratelimit-remaining', '9999')
.expect(HEADERS.RATELIMIT_LIMIT, '10000')
.expect(HEADERS.RATELIMIT_REMAINING, '9999')
.expect(HTTP_STATUS.OK);
});
@ -66,7 +66,7 @@ describe('server api', () => {
.get('/')
.expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
.expect(HTTP_STATUS.OK);
const powered = response.get('x-powered-by');
const powered = response.get(HEADERS.POWERED_BY);
expect(powered).toMatch('hidden');
}, 40000);
@ -76,7 +76,7 @@ describe('server api', () => {
.get('/')
.expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
.expect(HTTP_STATUS.OK);
const powered = response.get('x-powered-by');
const powered = response.get(HEADERS.POWERED_BY);
expect(powered).toEqual('hidden');
});
@ -86,7 +86,7 @@ describe('server api', () => {
.get('/')
.expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_HTML_UTF8)
.expect(HTTP_STATUS.OK);
const powered = response.get('x-powered-by');
const powered = response.get(HEADERS.POWERED_BY);
expect(powered).toEqual('custom user agent');
});