1# frozen_string_literal: true
2module API
3  class NpmProjectPackages < ::API::Base
4    helpers ::API::Helpers::Packages::Npm
5
6    feature_category :package_registry
7
8    rescue_from ActiveRecord::RecordInvalid do |e|
9      render_api_error!(e.message, 400)
10    end
11
12    params do
13      requires :id, type: String, desc: 'The ID of a project'
14    end
15    namespace 'projects/:id/packages/npm' do
16      desc 'Download the NPM tarball' do
17        detail 'This feature was introduced in GitLab 11.8'
18      end
19      params do
20        requires :package_name, type: String, desc: 'Package name'
21        requires :file_name, type: String, desc: 'Package file name'
22      end
23      route_setting :authentication, job_token_allowed: true, deploy_token_allowed: true
24      get '*package_name/-/*file_name', format: false do
25        authorize_read_package!(project)
26
27        package = project.packages.npm
28          .by_name_and_file_name(params[:package_name], params[:file_name])
29
30        not_found!('Package') unless package
31
32        package_file = ::Packages::PackageFileFinder
33          .new(package, params[:file_name]).execute!
34
35        track_package_event('pull_package', package, category: 'API::NpmPackages', project: project, namespace: project.namespace)
36
37        present_carrierwave_file!(package_file.file)
38      end
39
40      desc 'Create NPM package' do
41        detail 'This feature was introduced in GitLab 11.8'
42      end
43      params do
44        requires :package_name, type: String, desc: 'Package name'
45        requires :versions, type: Hash, desc: 'Package version info'
46      end
47      route_setting :authentication, job_token_allowed: true, deploy_token_allowed: true
48      put ':package_name', requirements: ::API::Helpers::Packages::Npm::NPM_ENDPOINT_REQUIREMENTS do
49        authorize_create_package!(project)
50
51        created_package = ::Packages::Npm::CreatePackageService
52          .new(project, current_user, params.merge(build: current_authenticated_job)).execute
53
54        if created_package[:status] == :error
55          render_api_error!(created_package[:message], created_package[:http_status])
56        else
57          track_package_event('push_package', :npm, category: 'API::NpmPackages', project: project, user: current_user, namespace: project.namespace)
58          created_package
59        end
60      end
61
62      include ::API::Concerns::Packages::NpmEndpoints
63    end
64  end
65end
66