Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix request authentication for scoped private registry tarballs
Yarn correctly sends authorization headers when resolving metadata, but when it's time to download the tarballs, it calls registry.request with a full tarball url. This causes the getRegistry() function to incorrectly return the DEFAULT_REGISTRY url which means the authorization headers are no longer sent. The response in this case is a JSON error object instead of a tarball file. Untaring fails with "invalid tar file"
- Loading branch information