feat: add _signatures to manifest

npm · May 4, 2022 · 3ae73f2 · 3ae73f2
1 parent cb08d28
commit 3ae73f2
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 67 deletions.
diff --git a/lib/registry.js b/lib/registry.js
@@ -165,6 +165,9 @@ class RegistryFetcher extends Fetcher {
         }
         if (this.integrity) {
           mani._integrity = String(this.integrity)
+          if (dist.signatures) {
+            mani._signatures = dist.signatures
+          }
         }
         this.package = rpj.normalize(mani)
         return this.package

diff --git a/test/fixtures/abbrev-manifest-full.json b/test/fixtures/abbrev-manifest-full.json
diff --git a/test/registry.js b/test/registry.js
@@ -128,19 +128,26 @@ t.test('provide different type of integrity, concats', async t => {
     ))
 })
 
-t.test('provide matching integrity, totes ok', async t => {
+t.test('provide matching integrity, totes ok, includes signature', async t => {
   const f = new RegistryFetcher('@isaacs/namespace-test', {
     registry,
     cache,
     // eslint-disable-next-line max-len
     integrity: 'sha512-5ZYe1LgwHIaag0p9loMwsf5N/wJ4XAuHVNhSO+qulQOXWnyJVuco6IZjo+5u4ZLF/GimdHJcX+QK892ONfOCqQ==',
   })
-  return f.manifest().then(mani =>
-    t.equal(
-      mani._integrity,
+  return f.manifest().then(mani => {
+    t.match(mani, {
       // eslint-disable-next-line max-len
-      'sha512-5ZYe1LgwHIaag0p9loMwsf5N/wJ4XAuHVNhSO+qulQOXWnyJVuco6IZjo+5u4ZLF/GimdHJcX+QK892ONfOCqQ=='
-    ))
+      _integrity: 'sha512-5ZYe1LgwHIaag0p9loMwsf5N/wJ4XAuHVNhSO+qulQOXWnyJVuco6IZjo+5u4ZLF/GimdHJcX+QK892ONfOCqQ==',
+      _signatures: [
+        {
+          keyid: 'SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA',
+          // eslint-disable-next-line max-len
+          sig: 'MEQCIHXwKYe70+xcDOvFhM1etZQFUKEwz9VarppUbp5/Ie1+AiAM7aZcT1a2JR0oF/XwjNb13YEHwiagnDapLgYbklRvtA==',
+        },
+      ],
+    })
+  })
 })
 
 t.test('404 fails with E404', t => {