Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-15425

Asset not updated when a npm package is republished

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.7.0, 3.7.1
    • Fix Version/s: 3.8.0
    • Component/s: NPM
    • Story Points:
      2

      Description

      I have a npm hosted repository with a deployment policy = "Allow redeploy" in order to simulate snapshot versions.
      After the second publish, I can't install the dependency anymore because there is a failure when checksums are compared (tested with npm 5.6.0 and yarn 1.3.2).
       
      The problem appears in Nexus 3.7.0. I don't have this problem with Nexus 3.6.2. 
       
      Steps to reproduce the problem:

      • Create a npm hosted repository with a deployment policy = "Allow redeploy"
      • Create a directory with only this package.json:
      {
          "name": "test-publish",
          "version": "1.1.0"
      }
      • Publish to the npm hosted repository
      npm publish --registry http://localhost:8081/repository/npm-snapshots
      • Create a file README.md
      • Publish again to the npm hosted repository
      • At this step, you can already see there is a problem in the Nexus UI (asset not updated)
      • Create another directory with only this package.json:
      {
          "name": "test-install",
          "version": "1.1.0",
          "dependencies": {
              "test-publish": "1.1.0"
          }
      }
      • Get the dependencies
      npm install
      • It fails
      npm ERR! code EINTEGRITY
      npm ERR! sha512-oWVq3ClAsE/fuTaUBWUxAmfK8JqilUmFvy/RoZ9iyvy548j1s4xO8mavrQEpip5UY4+xSidmhcn3/f0lLrokSQ== integrity checksum failed when using sha512: wanted sha512-oWVq3ClAsE/fuTaUBWUxAmfK8JqilUmFvy/RoZ9iyvy548j1s4xO8mavrQEpip5UY4+xSidmhcn3/f0lLrokSQ== but got sha512-nrDFsnCoXUSOosfSgsfCnqBx5+MYA5RuSxJwJU7y65jWe8npDvxIhtuthLLq7qH3Ogkm9HegTKar3iuLy/VkjA==. (158 bytes)

        Attachments

          Activity

            People

            Assignee:
            moncef Moncef Ben-Soula
            Reporter:
            hmtran Hanh-Missi Tran
            Last Updated By:
            Issa Gorissen
            Team:
            Nexus - Formats
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response:

                tigCommentSecurity.panel-title