Commit Graph

4 Commits

Author SHA1 Message Date
Zoltan Kochan
ffb23448fc test(plugin-commands-installation): fix 2022-04-07 19:27:59 +03:00
Zoltan Kochan
e4b9c4bc3a refactor: fixtures (#4182) 2021-12-31 16:59:58 +02:00
Dave Brotherstone
a6cf11cb77 feat(config): add support for token helper (#4163)
* feat(config): add support for token helper

Use the new interface in `pnpm/credentials-by-uri` for supporting token
helpers. A token helper is an executable, set in the user's `.npmrc`
which outputs an auth token. This can be used in situations where the
`authToken` is not a constant value, but is something that refreshes
regularly, where a script or other tool can use an existing refresh
token to obtain a new access token.

The configuration for the path to the helper must be an absolute path,
with no arguments. In order to be secure, it is _only_ permitted to set
this value in the user `.npmrc`, otherwise a project could place a value
in a project local `.npmrc` and run arbitrary executables.

A similar feature is available in many similar tools. The implementation
in `credentials-by-uri` is modelled after the `vault` (vaultproject.io)
implementation - https://github.com/hashicorp/vault/blob/main/command/token/helper_external.go

* test: fix

* docs: add changesets

Co-authored-by: Zoltan Kochan <z@kochan.io>
2021-12-30 23:16:06 +02:00
foora
6a54be5a12 feat: support pnpm recursive import (#3909)
close #3908

Co-authored-by: Zoltan Kochan <z@kochan.io>
2021-11-02 21:40:27 +00:00