1 files changed, 128 insertions, 0 deletions
diff --git a/deps/node/deps/npm/test/tap/bearer-token-check.js b/deps/node/deps/npm/test/tap/bearer-token-check.js
new file mode 100644
index 00000000..e3af793e
--- /dev/null
+++ b/deps/node/deps/npm/test/tap/bearer-token-check.js
@@ -0,0 +1,128 @@
+var resolve = require('path').resolve
+var writeFileSync = require('graceful-fs').writeFileSync
+
+var fs = require('fs')
+var mkdirp = require('mkdirp')
+var http = require('http')
+var osenv = require('osenv')
+var rimraf = require('rimraf')
+var test = require('tap').test
+
+var common = require('../common-tap.js')
+var toNerfDart = require('../../lib/config/nerf-dart.js')
+
+var pkg = resolve(__dirname, 'install-bearer-check')
+var outfile = resolve(pkg, '_npmrc')
+var modules = resolve(pkg, 'node_modules')
+var tarballPath = '/scoped-underscore/-/scoped-underscore-1.3.1.tgz'
+// needs to be a different hostname to verify tokens (not) being sent correctly
+var tarballURL = 'http://127.0.0.1:' + common.port + tarballPath
+var tarball = resolve(__dirname, '../fixtures/scoped-underscore-1.3.1.tgz')
+
+var EXEC_OPTS = { cwd: pkg, stdio: [0, 'pipe', 2] }
+
+var auth = 'Bearer 0xabad1dea'
+var server = http.createServer()
+server.on('request', (req, res) => {
+  if (req.method === 'GET' && req.url === tarballPath) {
+    if (req.headers.authorization === auth) {
+      res.writeHead(403, 'this token should not be sent')
+      res.end()
+    } else {
+      res.writeHead(200, 'ok')
+      res.end(fs.readFileSync(tarball))
+    }
+  } else {
+    res.writeHead(500)
+    res.end()
+  }
+})
+
+test('setup', function (t) {
+  server.listen(common.port, () => {
+    setup()
+    t.done()
+  })
+})
+
+test('authed npm install with tarball not on registry', function (t) {
+  common.npm(
+    [
+      'install',
+      '--json',
+      '--fetch-retries', 0,
+      '--registry', common.registry,
+      '--userconfig', outfile
+    ],
+    EXEC_OPTS,
+    function (err, code, stdout, stderr) {
+      if (err) throw err
+      t.equal(code, 0, 'npm install exited OK')
+      t.comment(stdout.trim())
+      t.comment(stderr.trim())
+      t.notOk(stderr, 'no output on stderr')
+      try {
+        var results = JSON.parse(stdout)
+      } catch (ex) {
+        t.ifError(ex, 'stdout was valid JSON')
+      }
+
+      if (results) {
+        var installedversion = [
+          {
+            'name': '@scoped/underscore',
+            'version': '1.3.1'
+          }
+        ]
+        t.match(results.added, installedversion, '@scoped/underscore installed')
+      }
+
+      t.end()
+    }
+  )
+})
+
+test('cleanup', function (t) {
+  server.close(() => {
+    cleanup()
+    t.end()
+  })
+})
+
+var contents = '@scoped:registry=' + common.registry + '\n' +
+               toNerfDart(common.registry) + ':_authToken=0xabad1dea\n'
+
+var json = {
+  name: 'test-package-install',
+  version: '1.0.0',
+  dependencies: {
+    '@scoped/underscore': '1.3.1'
+  }
+}
+
+var shrinkwrap = {
+  name: 'test-package-install',
+  version: '1.0.0',
+  dependencies: {
+    '@scoped/underscore': {
+      resolved: tarballURL,
+      version: '1.3.1'
+    }
+  }
+}
+
+function setup () {
+  cleanup()
+  mkdirp.sync(modules)
+  writeFileSync(resolve(pkg, 'package.json'), JSON.stringify(json, null, 2) + '\n')
+  writeFileSync(outfile, contents)
+  writeFileSync(
+    resolve(pkg, 'npm-shrinkwrap.json'),
+    JSON.stringify(shrinkwrap, null, 2) + '\n'
+  )
+}
+
+function cleanup () {
+  process.chdir(osenv.tmpdir())
+  rimraf.sync(pkg)
+}