mirror of
https://github.com/verdaccio/verdaccio.git
synced 2025-01-06 22:40:26 -05:00
dbf20175dc
* feat: support for npm token This is an effor of: This commit intent to provide npm token support. https: //github.com/verdaccio/verdaccio/issues/541 https: //github.com/verdaccio/verdaccio/pull/1271 https: //github.com/verdaccio/local-storage/pull/168 Co-Authored-By: Manuel Spigolon <behemoth89@gmail.com> Co-Authored-By: Juan Gabriel Jiménez <juangabreil@gmail.com> * chore: update secrets baselines Co-Authored-By: Liran Tal <liran.tal@gmail.com> * chore: update lock file * chore: add logger mock methods * chore: update @verdaccio/types * refactor: unit test was flacky adapt the pkg access to the new configuration setup * refactor: add plugin methods validation * test: add test for aesEncrypt * chore: update local-storage dependency * chore: add support for experimetns token will be part of the experiment lists * chore: increase timeout * chore: increase timeout threshold * chore: update nock * chore: update dependencies * chore: update eslint config * chore: update dependencies * test: add unit test for npm token * chore: update readme
85 lines
2.1 KiB
YAML
85 lines
2.1 KiB
YAML
#
|
|
# This is the config file used for the docker images.
|
|
# It allows all users to do anything, so don't use it on production systems.
|
|
#
|
|
# Do not configure host and port under `listen` in this file
|
|
# as it will be ignored when using docker.
|
|
# see https://verdaccio.org/docs/en/docker#docker-and-custom-port-configuration
|
|
#
|
|
# Look here for more config file examples:
|
|
# https://github.com/verdaccio/verdaccio/tree/master/conf
|
|
#
|
|
|
|
# path to a directory with all packages
|
|
storage: /verdaccio/storage/data
|
|
# path to a directory with plugins to include
|
|
plugins: /verdaccio/plugins
|
|
|
|
web:
|
|
# WebUI is enabled as default, if you want disable it, just uncomment this line
|
|
#enable: false
|
|
title: Verdaccio
|
|
# comment out to disable gravatar support
|
|
# gravatar: false
|
|
# by default packages are ordercer ascendant (asc|desc)
|
|
# sort_packages: asc
|
|
|
|
auth:
|
|
htpasswd:
|
|
file: /verdaccio/storage/htpasswd
|
|
# Maximum amount of users allowed to register, defaults to "+infinity".
|
|
# You can set this to -1 to disable registration.
|
|
# max_users: 1000
|
|
|
|
security:
|
|
api:
|
|
jwt:
|
|
sign:
|
|
expiresIn: 60d
|
|
notBefore: 1
|
|
web:
|
|
sign:
|
|
expiresIn: 7d
|
|
notBefore: 1
|
|
|
|
# a list of other known repositories we can talk to
|
|
uplinks:
|
|
npmjs:
|
|
url: https://registry.npmjs.org/
|
|
|
|
packages:
|
|
'@*/*':
|
|
# scoped packages
|
|
access: $all
|
|
publish: $authenticated
|
|
unpublish: $authenticated
|
|
proxy: npmjs
|
|
|
|
'**':
|
|
# allow all users (including non-authenticated users) to read and
|
|
# publish all packages
|
|
#
|
|
# you can specify usernames/groupnames (depending on your auth plugin)
|
|
# and three keywords: "$all", "$anonymous", "$authenticated"
|
|
access: $all
|
|
|
|
# allow all known users to publish/publish packages
|
|
# (anyone can register by default, remember?)
|
|
publish: $authenticated
|
|
unpublish: $authenticated
|
|
|
|
# if package is not available locally, proxy requests to 'npmjs' registry
|
|
proxy: npmjs
|
|
|
|
middlewares:
|
|
audit:
|
|
enabled: true
|
|
|
|
# log settings
|
|
logs:
|
|
- { type: stdout, format: pretty, level: http }
|
|
#- {type: file, path: verdaccio.log, level: info}
|
|
|
|
experiments:
|
|
# support for npm token command
|
|
token: false
|