mirror of
https://github.com/verdaccio/verdaccio.git
synced 2024-12-23 22:27:34 -05:00
c264f944fb
* fix: unpublish and add or remove star colision The issue was the npm star use a similar payload, but we did not check properly the shape of the payload, this fix and allow unpublish correctly. Improve unit testing for publishing and unpublishing Add new code documentation for future changes. * chore: update secrets baseline * chore: add missing type this will requires update types in the future
77 lines
1.9 KiB
YAML
77 lines
1.9 KiB
YAML
storage: ./storage_default_storage
|
|
uplinks:
|
|
npmjs:
|
|
url: http://localhost:4873/
|
|
packages:
|
|
'@public-anyone-can-publish/*':
|
|
access: $anonymous jota_unpublish
|
|
publish: $anonymous jota_unpublish
|
|
unpublish: $anonymous jota_unpublish
|
|
'@scope/starPackage':
|
|
access: $all
|
|
publish: jota_star
|
|
unpublish: jota_star
|
|
'@only-one-can-publish/*':
|
|
access: jota_unpublish
|
|
publish: jota_unpublish
|
|
unpublish: jota_unpublish
|
|
'@jquery/*':
|
|
access: $all
|
|
publish: $all
|
|
proxy: npmjs
|
|
'@scope/*':
|
|
access: test
|
|
publish: dsadsa
|
|
proxy: npmjs
|
|
'@*/*':
|
|
access: $all
|
|
publish: $all
|
|
unpublish: $authenticated
|
|
proxy: npmjs
|
|
'auth-package':
|
|
access: $authenticated
|
|
publish: $authenticated
|
|
'only-you-can-publish':
|
|
access: $authenticated
|
|
publish: you
|
|
unpublish: you
|
|
'non-unpublish':
|
|
access: $authenticated
|
|
publish: jota_unpublish_fail
|
|
# There is some conditions to keep on mind here
|
|
# - If unpublish is empty, fallback with the publish value
|
|
# - If the user has permissions to publish and this empty it will be allowed to unpublish
|
|
# - If we want to forbid anyone to unpublish, just write here any unexisting user
|
|
unpublish: some_unexisting_user_defined_here_might_be_a_hash
|
|
'only-unpublish':
|
|
access: $authenticated
|
|
# comment out is intended, we want to test if publish prop is not defined
|
|
# publish: jota_unpublish_fail
|
|
#
|
|
unpublish:
|
|
'super-admin-can-unpublish':
|
|
access: $authenticated
|
|
publish: super_admin
|
|
unpublish: super_admin
|
|
'all-can-unpublish':
|
|
access: $authenticated
|
|
publish: $all
|
|
unpublish: $all
|
|
'forbidden-place':
|
|
access: nobody
|
|
publish: $all
|
|
'vue':
|
|
access: $authenticated
|
|
publish: $authenticated
|
|
proxy: npmjs
|
|
'jquery':
|
|
access: $all
|
|
publish: $all
|
|
proxy: npmjs
|
|
'*':
|
|
access: $all
|
|
publish: $all
|
|
unpublish: xxx
|
|
proxy: npmjs
|
|
logs:
|
|
- { type: stdout, format: pretty, level: warn }
|