Skip to main content

Sise ifasẹsi

The authentication is tied to the auth plugin you are using. The package restrictions are also handled by the Package Access.

The client authentication is handled by the npm client itself. Once you log in to the application:

npm adduser --registry http://localhost:4873

A token is generated in the npm configuration file hosted in your user home folder. For more information about .npmrc read the official documentation.

cat .npmrc
registry=http://localhost:5555/
//localhost:5555/:_authToken="secretVerdaccioToken"
//registry.npmjs.org/:_authToken=secretNpmjsToken

Igbejade alainidamọ

verdaccio allows you to enable anonymous publish. To achieve that you will need to correctly set up your packages access.

Fun apẹẹrẹ:

  'my-company-*':
access: $anonymous
publish: $anonymous
proxy: npmjs

Bi apejuwe rẹ ti ṣe jẹ ṣiṣe lori ọrọ #212 titi npm@5.3.0 atipe gbogbo awọn ifilọlẹ kekere koni fayegba ọ lati se atẹjade laisi aami kankan.

Nini oye Awọn ẹgbẹ akojọpọ

The meaning of $all and $anonymous

As you know Verdaccio uses htpasswd by default. That plugin does not implement the methods allow_access, allow_publish and allow_unpublish. Thus, Verdaccio will handle that in the following way:

  • Ti o ko ba wọle (o jẹ alainidamọ), $all ati $anonymous tumọ si nkankan na.
  • If you are logged in, $anonymous won't be part of your groups and $all will match any logged user. A new group $authenticated will be added to your group list.

Bi amulọ, $all ma se asopọ gbogbo awọn olumulo, ni alaigbarale boya o ti wọle tabi ko wọle.

The previous behavior only applies to the default authentication plugin. If you are using a custom plugin and such plugin implements allow_access, allow_publish or allow_unpublish, the resolution of the access depends on the plugin itself. Verdaccio will only set the default groups.

Jẹ ki a ṣe atungbeyẹwo ni ṣoki:

  • ti wọle: $all, $authenticated, + awọn ẹgbẹ akojọpọ ti o jẹ fifikun nipasẹ ohun elo naa
  • alainidamọ (ti jade sita): $all ati $anonymous.

htpasswd atilẹwa

In order to simplify the setup, verdaccio uses a plugin based on htpasswd. Since version v3.0.x the verdaccio-htpasswd plugin is used by default.

auth:
htpasswd:
file: ./htpasswd
# Maximum amount of users allowed to register, defaults to "+inf".
# You can set this to -1 to disable registration.
#max_users: 1000
Ohun iniIruTi o niloApẹẹrẹAtilẹyinApejuwe
failiokunBẹẹni./htpasswdgbogbofaili to gbalejo awọn iwe ẹri alaroko
max_usersnọmbaRara1000gbogboṣeto gbedeke iye awọn olumulo

Toba sẹlẹ pe o pinnu lati ma fayegba olumulo lati wọle, o le ṣeto max_users: -1.