verdaccio-groups
Verdaccio Plugin to handle dynamic groups in package access specification, a kind of authorization level over authentication. Inspired from the verdaccio-groupnames plugin.
Installation
$ npm i -g verdaccio-groups
Configuration
# /verdaccio/conf/people.yaml groups: admin: - ankitjain28may developer: - Jack - Jon # config.yaml auth: groups: file: /verdaccio/conf/people.yaml # Add other authentication plugins here packages: '@*/*': access: developer admin publish: admin unpublish: admin
The above configuration will allow access, when the user is a member of the scope of the npm package.
For example, when user Jack
, member of group developer
, has only read access to packages in @*/*
but not the access of publish and unpublish while the user under group admin
has all the access.