Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-9025

Proxy NPM Repository does not send authentication upstream

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.11.4
    • Fix Version/s: None
    • Component/s: NPM
    • Labels:
      None

      Description

      In Nexus 2.11.4, when the "Authentication (optional)" section is configured for an NPM repository the credentials are not sent as Basic Auth to the upstream remote repository.

      See extract from tcpdump below.

      GET /<package name redacted> HTTP/1.1
      accept: application/json
      Host: <repo name redacted>.registry.nodejitsu.com
      Connection: Keep-Alive
      User-Agent: Nexus/2.11.4-01 (OSS; Linux; 3.10.0-123.8.1.el7.x86_64; amd64; 1.7.0_75) apacheHttpClient4x/2.11.4-01
      Accept-Encoding: gzip,deflate
      
      HTTP/1.1 401 Unauthorized
      server: CouchDB/1.5.0 (Erlang OTP/R15B03)
      date: Wed, 29 Jul 2015 14:23:00 GMT
      content-type: application/json
      content-length: 78
      cache-control: must-revalidate
      connection: close
      

      I appreciate that there might be good reasons for this but I'd love to see them documented (I couldn't find any commentary on this) or the headers sent.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              lewisheadden Lewis Headden
              Last Updated By:
              Peter Lynch Peter Lynch
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title