node_modules/npm/node_modules/npm-registry-client/test/publish-scoped-auth-token.js

var tap = require('tap')
var crypto = require('crypto')
var fs = require('fs')

var server = require('./lib/server.js')
var common = require('./lib/common.js')

var auth = { token: 'of-glad-tidings' }

var client = common.freshClient()

tap.test('publish', function (t) {
  // not really a tarball, but doesn't matter
  var bodyPath = require.resolve('../package.json')
  var tarball = fs.createReadStream(bodyPath)
  var pd = fs.readFileSync(bodyPath)
  var pkg = require('../package.json')
  pkg.name = '@npm/npm-registry-client'

  server.expect('/@npm%2fnpm-registry-client', function (req, res) {
    t.equal(req.method, 'PUT')
    t.equal(req.headers.authorization, 'Bearer of-glad-tidings')

    var b = ''
    req.setEncoding('utf8')
    req.on('data', function (d) {
      b += d
    })

    req.on('end', function () {
      var o = JSON.parse(b)
      t.equal(o._id, '@npm/npm-registry-client')
      t.equal(o['dist-tags'].latest, pkg.version)
      t.has(o.versions[pkg.version], pkg)
      t.same(o.maintainers, o.versions[pkg.version].maintainers)
      var att = o._attachments[ pkg.name + '-' + pkg.version + '.tgz' ]
      t.same(att.data, pd.toString('base64'))
      var hash = crypto.createHash('sha1').update(pd).digest('hex')
      t.equal(o.versions[pkg.version].dist.shasum, hash)
      res.statusCode = 201
      res.json({ created: true })
    })
  })

  var params = {
    metadata: pkg,
    access: 'restricted',
    body: tarball,
    auth: auth
  }
  client.publish(common.registry, params, function (er, data) {
    if (er) throw er
    t.deepEqual(data, { created: true })
    server.close()
    t.end()
  })
})