Commit Graph

3446 Commits

Author SHA1 Message Date
Juan Picado @jotadeveloper 263f051507
refactor: add levels file 2019-07-26 09:34:16 +02:00
Juan Picado @jotadeveloper 3beb57f7f6
test: add unit test for parser logger strings 2019-07-26 09:33:17 +02:00
Juan Picado @jotadeveloper 81d02f6f4f
Merge pull request #1373 from lirantal/feat/detect-secrets
feat: prevent secrets from leaking to source control
2019-07-24 07:40:40 +02:00
Liran Tal 2b218ce0de
fix(security): add secrets baseline 2019-07-19 08:02:08 +03:00
Liran Tal aa8f1d3318
fix: upgrade to 1.0.2 which solves the docker issue 2019-07-19 06:39:22 +03:00
Liran Tal 9ef6808d4e
feat: prevent secrets from leaking to source control 2019-07-19 06:39:20 +03:00
Juan Picado @jotadeveloper 4f87750c18
Merge pull request #1360 from verdaccio/feat-error-code
feat: storage plugins can throw http status codes
2019-07-16 19:08:04 +02:00
Juan Picado @jotadeveloper 12b60f6cb7
build: fix semver missing type on build with docker
it seems the @types/semver do not handle a legitimate method named 'compareLoose'
2019-07-16 18:27:58 +02:00
Juan Picado @jotadeveloper b71df94897
Merge remote-tracking branch 'origin/master' into feat-error-code
# Conflicts:
#	src/lib/local-storage.ts
2019-07-16 17:38:25 +02:00
Juan Picado @jotadeveloper 66f4197236
feat: convert project to typescript (#1374)
* chore: test

* chore: add

* chore: more progress

* chore: progress in migration, fix prettier parser

* chore: reduce tsc errors

* chore: refactor storage utils types

* chore: refactor utils types

* chore: refactor local storage types

* chore: refactor config utils types

* chore: refactor tsc types

* refactor: apply eslint fix, tabs etc

* chore: fix lint errors

* test: update unit test conf to typescript setup

few test refactored to typescript

* chore: enable more unit test

migrate to typescript

* chore: migrate storage test to tsc

* chore: migrate up storage test to tsc

* refactor: enable plugin and auth test

* chore: migrate plugin loader test

* chore: update dependencies

* chore: migrate functional test to typescript

* chore: add codecove

* chore: update express

* chore: downgrade puppeteer

The latest version does not seems to work properly fine.

* chore: update dependencies
2019-07-16 08:40:01 +02:00
dependabot[bot] b453681082 build(deps): bump lodash.template from 4.4.0 to 4.5.0 (#1384)
Bumps [lodash.template](https://github.com/lodash/lodash) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.4.0...4.5.0)

Signed-off-by: dependabot[bot] <support@github.com>
2019-07-11 20:52:15 +02:00
Juan Picado @jotadeveloper d4e16051fa
chore: update bug report content 2019-07-10 10:29:20 +02:00
Juan Picado @jotadeveloper 8d906ead47
chore: remove duplicated template 2019-07-10 10:09:26 +02:00
James George 495bb0afee build: update issue templates for use info new flag (#1377) 2019-07-08 17:39:34 +02:00
Juan Picado @jotadeveloper 274bb1a9b9
chore(release): 4.1.0 2019-07-08 09:47:28 +02:00
Juan Picado @jotadeveloper 44c1610791
chore: restore @verdaccio/ui-theme@0.1.11
due to https://github.com/verdaccio/ui/issues/89
2019-07-08 09:40:38 +02:00
Juan Picado @jotadeveloper 45b8a7658b
Merge pull request #1376 from verdaccio/update-dependencies
chore: update dependencies
2019-07-08 09:36:24 +02:00
Juan Picado @jotadeveloper a0cf98546b
chore: update dependencies
regular maintenance
2019-07-08 09:23:07 +02:00
Juan Picado @jotadeveloper 0061e380c3
Merge pull request #1313 from verdaccio/4.1.x
4.1.x
2019-07-08 09:07:22 +02:00
Juan Picado @jotadeveloper 318f868720
chore: update readme add angular cli 2019-07-06 08:37:35 +02:00
James George eb6bf5168b feat(chore): Included provision to show up local environment information (#1365)
* feat: adds provision to show up environment information

Fixes #1364

* feat: include docker info

* fix: pin envinfo

* fix: lock file

* fix: docker config

* fix: minor refactor

handle async behaviour

* feat: add short version for info
2019-06-30 18:17:25 +02:00
Juan Picado @jotadeveloper 6ff356b312
Merge remote-tracking branch 'origin/master' into 4.1.x 2019-06-30 12:49:31 +02:00
Juan Picado @jotadeveloper acf5a791f6
chore: update lock settings 2019-06-29 11:38:22 +02:00
Juan Picado @jotadeveloper 41310ca0fb
chore: update stale config
Inspired by gatsby community adding this message
2019-06-29 10:18:12 +02:00
Juan Picado @jotadeveloper 20bc433d5a
Merge pull request #1363 from jamesgeorge007/feat/update-docs
docs: minor tweaks
2019-06-29 08:24:02 +02:00
James George 0177241504
Minor tweaks
typo fix and grammar
2019-06-29 09:43:45 +05:30
Jason Cooke a6a4eee66b docs: fix typo (#1362) 2019-06-27 06:01:31 +02:00
Juan Picado @jotadeveloper 3c539975c3
feat: plugins can throw http status codes
This feature aims to fix a unfair and missleading situation with storage plugins. Until now they were forced to throw Node error codes https://nodejs.org/api/errors.html#nodejs-error-codes when a resource is not found or a file exist already.

Error codes as EEXISTS or ENOENT does not exist in environments where storage is a database or cloud api, thus must be mock.

This PR has backward compability and plugins can safely migrate to new error http codes.
2019-06-23 22:57:46 +02:00
Juan Picado @jotadeveloper b38ef9608f
Merge remote-tracking branch 'origin/master' into 4.1.x 2019-06-20 23:21:10 +02:00
Juan Picado @jotadeveloper 1aa9b4d4a5
chore(release): 4.0.4 2019-06-20 22:41:26 +02:00
Juan Picado @jotadeveloper d252e66588
Merge remote-tracking branch 'origin/master' into 4.1.x
# Conflicts:
#	test/unit/modules/cli/cli.spec.js
2019-06-20 15:10:26 +02:00
Daniel Ruf a92bd5f633 fix: correctly check the keepAliveTimeout value, fixes #1352 (#1353)
* fix: correctly check the keepAliveTimeout value, fixes #1352

* test: check keepAliveTimeout configurations using the CLI
2019-06-19 09:00:48 +02:00
Juan Picado @jotadeveloper e40083a6be
chore: remove step frm GitHub actions 2019-06-14 07:18:13 +02:00
Juan Picado @jotadeveloper 1d6eb945c9
chore(release): 4.0.3 2019-06-14 06:43:32 +02:00
Juan Picado @jotadeveloper 9f5f563a3b
Merge branch '4.1.x' of github.com:verdaccio/verdaccio into 4.1.x 2019-06-13 22:16:59 +02:00
Juan Picado @jotadeveloper e3da67fad9
chore: avoid template test case is being run 2019-06-13 22:16:40 +02:00
Juan Picado @jotadeveloper 0fa26293a8
Merge remote-tracking branch 'origin/master' into 4.1.x 2019-06-13 22:04:35 +02:00
Will Smythe eb7a8e3528 fix(api): return 503 to npm/yarn on uplink connection timeout (#1331)
fix  #1328 and #720

Type: bug

The following has been addressed in the PR:

Instead of returning a 404 (Not Found) when npm, yarn, etc requests a package and the package cannot be acquired from an uplink due to a connection timeout, socket timeout, or connection reset problem, a 503 (service unavailable) is returned by Verdaccio instead. In limited testing of a few versions of npm and yarn, both of these clients correctly attempt to retry the request when a 503 is returned.

Added functional tests to verify the behavior (this adds a dev dependency on nock, which provides HTTP request mocking

Description:

This resolves issue #1328 and #720, and ensures npm/yarn install commands don't fail immediately when there is an intermittent network timeout problem with an uplink. Instead Verdaccio will appropriately respond to the client with a 503. A 404 response (current behavior) incorrectly tells the client that the package does not exist (which may or may not be true) and to not try again.
2019-06-13 21:42:01 +02:00
Juan Picado @jotadeveloper f242d1b261
chore(docs): add testing development notes (#1343)
* chore: add testing notes

co-contributions by:
@lirantal @DanielRuf 

This PR aims to add on boarding proccess for new contributors to test verdaccio, update test or add new features.

* chore: add new sections

* chore: add functional test notes

* chore: fix typos

Co-Authored-By: Daniel Ruf <danielruf@users.noreply.github.com>

* chore: add functional test block

Co-Authored-By: Daniel Ruf <danielruf@users.noreply.github.com>

* chore: add before commit guide

Co-Authored-By: Daniel Ruf <danielruf@users.noreply.github.com>

* chore: add ci notes

Co-Authored-By: Daniel Ruf <danielruf@users.noreply.github.com>

* chore: extend notes

Co-Authored-By: Daniel Ruf <danielruf@users.noreply.github.com>

* chore: update ci notes

Co-Authored-By: Daniel Ruf <danielruf@users.noreply.github.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>

* chore: update test/README.md

Co-Authored-By: Liran Tal <liran.tal@gmail.com>
2019-06-13 18:28:43 +02:00
Juan Picado @jotadeveloper e77ffb4c31
chore(release): 4.0.2 2019-06-13 07:03:25 +02:00
Juan Picado @jotadeveloper 85c1bd1f76
fix(api): force authenticate on login (#1347)
When a user has a valid token and tries to login with other credentials the endpoint returns 201.

The reason was if another user logged previously and had a valid token stored in the terminal. We must authenticate any user that tries to log in even if the token stored is valid.

We must check credentials again and return a new token, if the credentials are wrong we reject the login. Furthermore, the new token will update the list of groups.
2019-06-13 06:58:43 +02:00
Juan Picado @jotadeveloper 192fb77169
fix(ui): failed to load all packages after login
more details https://github.com/verdaccio/ui/issues/72
2019-06-13 06:49:40 +02:00
Juan Picado @jotadeveloper e5816342a6
fix: update dependencies
fix #1339 dayjs warning on yarn installation
2019-06-13 06:42:39 +02:00
Juan Picado @jotadeveloper b6a1adca4e
chore: update policy
display PGP public key as a code block
2019-06-12 10:06:09 +02:00
Liran Tal ddcd89da33 fix: update security policy details (#1342) 2019-06-08 10:40:00 +02:00
Daniel Ruf 94e735ad39 chore: remove update-banner code (#1333) 2019-06-04 09:40:15 +02:00
Daniel Ruf df834f4836 fix: correctly check if the proxy setting evaluates to false (#1336) 2019-06-04 07:17:01 +02:00
Juan Picado @jotadeveloper 390d0d6066
Merge branch 'master' into 4.1.x 2019-05-29 06:50:24 +02:00
Juan Picado @jotadeveloper d53c345bed
chore(release): 4.0.1 2019-05-28 22:25:42 +02:00
Honza Hommer de0446376d fix(web): fix sidebar tarball protocol (#1326)
fix: #1320 https://github.com/verdaccio/verdaccio/issues/1320
2019-05-28 22:24:40 +02:00