123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198 |
- 'use strict'
- /* eslint-disable standard/no-callback-literal */
- const BB = require('bluebird')
- const figgyPudding = require('figgy-pudding')
- const libaccess = require('libnpm/access')
- const npmConfig = require('./config/figgy-config.js')
- const output = require('./utils/output.js')
- const otplease = require('./utils/otplease.js')
- const path = require('path')
- const prefix = require('./npm.js').prefix
- const readPackageJson = BB.promisify(require('read-package-json'))
- const usage = require('./utils/usage.js')
- const whoami = require('./whoami.js')
- module.exports = access
- access.usage = usage(
- 'npm access',
- 'npm access public [<package>]\n' +
- 'npm access restricted [<package>]\n' +
- 'npm access grant <read-only|read-write> <scope:team> [<package>]\n' +
- 'npm access revoke <scope:team> [<package>]\n' +
- 'npm access 2fa-required [<package>]\n' +
- 'npm access 2fa-not-required [<package>]\n' +
- 'npm access ls-packages [<user>|<scope>|<scope:team>]\n' +
- 'npm access ls-collaborators [<package> [<user>]]\n' +
- 'npm access edit [<package>]'
- )
- access.subcommands = [
- 'public', 'restricted', 'grant', 'revoke',
- 'ls-packages', 'ls-collaborators', 'edit',
- '2fa-required', '2fa-not-required'
- ]
- const AccessConfig = figgyPudding({
- json: {}
- })
- function UsageError (msg = '') {
- throw Object.assign(new Error(
- (msg ? `\nUsage: ${msg}\n\n` : '') +
- access.usage
- ), {code: 'EUSAGE'})
- }
- access.completion = function (opts, cb) {
- var argv = opts.conf.argv.remain
- if (argv.length === 2) {
- return cb(null, access.subcommands)
- }
- switch (argv[2]) {
- case 'grant':
- if (argv.length === 3) {
- return cb(null, ['read-only', 'read-write'])
- } else {
- return cb(null, [])
- }
- case 'public':
- case 'restricted':
- case 'ls-packages':
- case 'ls-collaborators':
- case 'edit':
- case '2fa-required':
- case '2fa-not-required':
- return cb(null, [])
- case 'revoke':
- return cb(null, [])
- default:
- return cb(new Error(argv[2] + ' not recognized'))
- }
- }
- function access ([cmd, ...args], cb) {
- return BB.try(() => {
- const fn = access.subcommands.includes(cmd) && access[cmd]
- if (!cmd) { UsageError('Subcommand is required.') }
- if (!fn) { UsageError(`${cmd} is not a recognized subcommand.`) }
- return fn(args, AccessConfig(npmConfig()))
- }).then(
- x => cb(null, x),
- err => err.code === 'EUSAGE' ? cb(err.message) : cb(err)
- )
- }
- access.public = ([pkg], opts) => {
- return modifyPackage(pkg, opts, libaccess.public)
- }
- access.restricted = ([pkg], opts) => {
- return modifyPackage(pkg, opts, libaccess.restricted)
- }
- access.grant = ([perms, scopeteam, pkg], opts) => {
- return BB.try(() => {
- if (!perms || (perms !== 'read-only' && perms !== 'read-write')) {
- UsageError('First argument must be either `read-only` or `read-write.`')
- }
- if (!scopeteam) {
- UsageError('`<scope:team>` argument is required.')
- }
- const [, scope, team] = scopeteam.match(/^@?([^:]+):(.*)$/) || []
- if (!scope && !team) {
- UsageError(
- 'Second argument used incorrect format.\n' +
- 'Example: @example:developers'
- )
- }
- return modifyPackage(pkg, opts, (pkgName, opts) => {
- return libaccess.grant(pkgName, scopeteam, perms, opts)
- }, false)
- })
- }
- access.revoke = ([scopeteam, pkg], opts) => {
- return BB.try(() => {
- if (!scopeteam) {
- UsageError('`<scope:team>` argument is required.')
- }
- const [, scope, team] = scopeteam.match(/^@?([^:]+):(.*)$/) || []
- if (!scope || !team) {
- UsageError(
- 'First argument used incorrect format.\n' +
- 'Example: @example:developers'
- )
- }
- return modifyPackage(pkg, opts, (pkgName, opts) => {
- return libaccess.revoke(pkgName, scopeteam, opts)
- })
- })
- }
- access['2fa-required'] = access.tfaRequired = ([pkg], opts) => {
- return modifyPackage(pkg, opts, libaccess.tfaRequired, false)
- }
- access['2fa-not-required'] = access.tfaNotRequired = ([pkg], opts) => {
- return modifyPackage(pkg, opts, libaccess.tfaNotRequired, false)
- }
- access['ls-packages'] = access.lsPackages = ([owner], opts) => {
- return (
- owner ? BB.resolve(owner) : BB.fromNode(cb => whoami([], true, cb))
- ).then(owner => {
- return libaccess.lsPackages(owner, opts)
- }).then(pkgs => {
- // TODO - print these out nicely (breaking change)
- output(JSON.stringify(pkgs, null, 2))
- })
- }
- access['ls-collaborators'] = access.lsCollaborators = ([pkg, usr], opts) => {
- return getPackage(pkg, false).then(pkgName =>
- libaccess.lsCollaborators(pkgName, usr, opts)
- ).then(collabs => {
- // TODO - print these out nicely (breaking change)
- output(JSON.stringify(collabs, null, 2))
- })
- }
- access['edit'] = () => BB.reject(new Error('edit subcommand is not implemented yet'))
- function modifyPackage (pkg, opts, fn, requireScope = true) {
- return getPackage(pkg, requireScope).then(pkgName =>
- otplease(opts, opts => fn(pkgName, opts))
- )
- }
- function getPackage (name, requireScope = true) {
- return BB.try(() => {
- if (name && name.trim()) {
- return name.trim()
- } else {
- return readPackageJson(
- path.resolve(prefix, 'package.json')
- ).then(
- data => data.name,
- err => {
- if (err.code === 'ENOENT') {
- throw new Error('no package name passed to command and no package.json found')
- } else {
- throw err
- }
- }
- )
- }
- }).then(name => {
- if (requireScope && !name.match(/^@[^/]+\/.*$/)) {
- UsageError('This command is only available for scoped packages.')
- } else {
- return name
- }
- })
- }
|