_auth key does not work for scope-specific configuration

[rtsao]

pnpm version:

4.8.0 and/or master

Code to reproduce the issue:

Failing test added here: https://github.com/rtsao/pnpm/tree/failing-test in rtsao@d03140e

Suppose the username is foo and password is bar.

registry = https://registry.npmjs.org/
@myscope:registry = https://my.registry.com/
//my.registry.com/:_auth = Zm9vOmJhcg==
//my.registry.com/:always-auth = true

Expected behavior:

Packages with @myscope/ should be fetched from my.registry.com using the legacy _auth key provided.

Actual behavior:

401 Unauthorized

Additional information:

Note that the following (equivalent config) does work:

registry = https://registry.npmjs.org/
@myscope:registry = https://my.registry.com/
//my.registry.com/:username = foo
//my.registry.com/:_password = YmFy
//my.registry.com/:always-auth = true

[zkochan]

Does it work with npm? Maybe this legacy authentication was not added for scoped registries

[rtsao]

Does it work with npm? Maybe this legacy authentication was not added for scoped registries

Yes, this configuration works using the npm client (as well as yarn).

[zkochan]

We use this package to get the auth tokens. Maybe it needs an update

[zkochan]

🚢 4.9.1