npm token create password (npm token)

[tvb]

$ npm token create --registry=http://my_registry:5000
npm password:

What is the password asking its for?

[juanpicado]

@tvb ???

[tvb]

I am trying to create a token on the server itself as I still have issues getting authenticated by login in.

[juanpicado]

verdaccio does not support npm token endpoint yet.

[juanpicado]

But it sounds like a good research for somebody is willing to contribute 👍

[tvb]

@juanpicado how can I easily create a token now, without having to use npm login? Needed for ci/cd

[juanpicado]

Just login with verdaccio and took it from .npmrc file in your home directory.

[tvb]

I can't get it to work. Whenever I login this ends up in my .npmrc file:

@scope:registry=http://mydomain.com:5000/
//mydomain.com:5000/:_password=xxxxx
//mydomain.com:5000/:username=myusername
//mydomain.com:5000/:email=myemail@mydomain.com
//mydomain.com:5000/:always-auth=false

[juanpicado]

@tvb npm/npm#19652 ?

[tvb]

@juanpicado Exactly this. Not sure what the solution is. While this setup works for me as I am using the AWS Parameter Store to store my hashed password safely and encrypted the token would simplify the setup

[juanpicado]

Options:

1. Downgrade npm.
2. Use yarn.
3. ???
   Let us know 👍

[mikew]

Using an older version of node via Docker is also an option, just not a great one.

$ docker run --rm -it node:9.2.0-alpine sh
/ # npm login --registry https://npm.company.com
Username: admin
Password:
Email: (this IS public) admin@company.com
Logged in as admin on https://npm.company.com/.
/ # cat ~/.npmrc
//npm.company.com/:_authToken=Rwl9t+GHjlgP+brFJ6WycIe1y6r3Z+ShUEqsLusmFC11w3n6ex8JdmkMoKv/0U/D
/ #

[p3x-robot]

#577

[varijkapil13]

Hi, this issue is in Pick up for v4, I would love to pick it up and contribute...

[carlosen14]

You can do it right now following these steps.. ( i think this might be the old way, but it is working for me on NPMJS)

• Your project will have this .npmrc file, you can also store it on git repo (i am doing it, i am not sure if it is wrong, anyway, it only has the repo url, it is locally and the repos are user-specific locked)

#.npmrc
registry = http://127.0.0.1:4873`

• Generate a encoded token by username:password

#auth can be generate by username:password 
echo -n 'usernm:passwd' | openssl base64
#output YWRtaW46YWRtaW4xMjN=

• Store this string on a environment variable like depending your CI/CD.
• On CI/CD when you compile.

docker build -t verdaccio --build-arg NPMTOKEN=$NPMTOKEN .

COPY .npmrc ./
RUN [[ -z "$NPMTOKEN" ]] && exit 1 || echo "_auth=${NPMTOKEN}" >> .npmrc
RUN npm ci

• This will be able to download the private ones..

:)

[juanpicado]

If you want to try a PoC, feel free to share feedback.

npm i -g verdaccio@feat-token --registry https://registry.verdaccio.org

[carlosen14]

If you want to try a PoC, feel free to share feedback.

npm i -g verdaccio@feat-token --registry https://registry.verdaccio.org

How to use it?

[juanpicado]

@carlosen14 https://docs.npmjs.com/cli/token.html

[carlosen14]

If you want to try a PoC, feel free to share feedback.

npm i -g verdaccio@feat-token --registry https://registry.verdaccio.org

You want me to install this on verdaccio directly? i'm using verdaccio on docker.
I installed on local machine but continues asking for password and returns 404.

[juanpicado]

You want me to install this on verdaccio directly? i'm using verdaccio on docker.
I installed on local machine but continues asking for password and returns 404.

Docker image for testing is not available yet, but it will. I'll let you know @carlosen14 in the next week.

[carlosen14]

ok, i did npm login --registry verdaccio.localhost:1234 and this saved a token on /root/.npmrc

So, there is a token, i copied from there!
example:
(REAL TOKEN IS WAY MUCH LONGER THAN EXAMPLE)

//verdaccio.localhost:1234/:_authToken=eyJh.TY0N.xZik8GL

On CICD i put it using

echo '//verdaccio.localhost:1234/:_authToken=eyJh.TY0N.xZik8GL"' >> `npm config get userconfig`

[lock]

🤖This thread has been automatically locked 🔒 since there has not been any recent activity after it was closed.
We lock tickets after 90 days with the idea to encourage you to open a ticket with new fresh data and to provide you better feedback 🤝and better visibility 👀.
If you consider, you can attach this ticket 📨 to the new one as a reference for better context.
Thanks for being a part of the Verdaccio community! 💘