import cache from "memory-cache"; import getServiceWidget from "utils/config/service-helpers"; import { formatApiCall } from "utils/proxy/api-helpers"; import { httpProxy } from "utils/proxy/http"; import widgets from "widgets/widgets"; import createLogger from "utils/logger"; const proxyName = "npmProxyHandler"; const tokenCacheKey = `${proxyName}__token`; const logger = createLogger(proxyName); async function login(loginUrl, username, password, service) { const authResponse = await httpProxy(loginUrl, { method: "POST", body: JSON.stringify({ identity: username, secret: password }), headers: { "Content-Type": "application/json", }, }); const status = authResponse[0]; let data = authResponse[2]; try { data = JSON.parse(Buffer.from(authResponse[2]).toString()); if (status === 200) { const expiration = new Date(data.expires) - Date.now(); cache.put(`${tokenCacheKey}.${service}`, data.token, expiration - (5 * 60 * 1000)); // expiration -5 minutes } } catch (e) { logger.error(`Error ${status} logging into npm`, authResponse[2]); } return [status, data.token ?? data]; } export default async function npmProxyHandler(req, res) { const { group, service, endpoint } = req.query; if (group && service) { const widget = await getServiceWidget(group, service); if (!widgets?.[widget.type]?.api) { return res.status(403).json({ error: "Service does not support API calls" }); } if (widget) { const url = new URL(formatApiCall(widgets[widget.type].api, { endpoint, ...widget })); const loginUrl = `${widget.url}/api/tokens`; let status; let contentType; let data; let token = cache.get(`${tokenCacheKey}.${service}`); if (!token) { [status, token] = await login(loginUrl, widget.username, widget.password, service); if (status !== 200) { logger.debug(`HTTTP ${status} logging into npm api: ${token}`); return res.status(status).send(token); } } [status, contentType, data] = await httpProxy(url, { method: "GET", headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}`, }, }); if (status === 403) { logger.debug(`HTTTP ${status} retrieving data from npm api, logging in and trying again.`); cache.del(`${tokenCacheKey}.${service}`); [status, token] = await login(loginUrl, widget.username, widget.password, service); if (status !== 200) { logger.debug(`HTTTP ${status} logging into npm api: ${data}`); return res.status(status).send(data); } // eslint-disable-next-line no-unused-vars [status, contentType, data] = await httpProxy(url, { method: "GET", headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}`, }, }); } if (status !== 200) { return res.status(status).send(data); } return res.send(data); } } return res.status(400).json({ error: "Invalid proxy service type" }); }