Merge pull request #6 from celtra/use-nexus-registry

DEV-229 Push to NPMJS

Author: dejanceltra

.github/workflows/push.yml

@@ -35,8 +35,8 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PROTECTED_BRANCH_REVIEWER_TOKEN: ${{ secrets.CELTRA_DEPLOYER_GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: npm run canary
+          NPM_TOKEN: ${{ secrets.NPMJS_WRITE_TOKEN }}
+        run: bin/release-canary
 
       - name: Prepare repository
         if: github.ref == 'refs/heads/master'
@@ -47,5 +47,5 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PROTECTED_BRANCH_REVIEWER_TOKEN: ${{ secrets.CELTRA_DEPLOYER_GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: npm run release
+          NPM_TOKEN: ${{ secrets.NPMJS_WRITE_TOKEN }}
+        run: bin/release-packages

.npmrc

@@ -1 +1,4 @@
-@celtra:registry=https://npm.pkg.github.com
+registry=https://nexus.celtra.com/repository/npm/
+always-auth=true
+//nexus.celtra.com/repository/npm/:_auth=YnVpbGQ6enljN21nYTVlYmRYSFE5dWNmZ3BoaGdrN2NnYzlDS1Uzd2tw
+devdir=/cache/npm

bin/release-canary

@@ -0,0 +1,14 @@
+#!/bin/bash
+set -eu -o pipefail
+
+MODULE_ROOT=$(dirname $(dirname $(readlink -e $0)))
+cd "$MODULE_ROOT"
+
+if [ -z "$GH_TOKEN" ]; then
+  echo "GH_TOKEN is not set"
+  exit 1
+fi
+
+"${MODULE_ROOT}/bin/set-npm-auth-token"
+
+npm run canary

bin/release-packages

@@ -0,0 +1,14 @@
+#!/bin/bash
+set -eu -o pipefail
+
+MODULE_ROOT=$(dirname $(dirname $(readlink -e $0)))
+cd "$MODULE_ROOT"
+
+if [ -z "$GH_TOKEN" ]; then
+  echo "GH_TOKEN is not set"
+  exit 1
+fi
+
+"${MODULE_ROOT}/bin/set-npm-auth-token"
+
+npm run release

bin/set-npm-auth-token

@@ -0,0 +1,10 @@
+#!/bin/bash
+set -eu -o pipefail
+
+# Switch to $HOME, because `npm set` can only be done outside of a workspace.
+pushd $HOME > /dev/null
+
+# Since we use Nexus registry with auth by default,
+# $NPM_TOKEN is not used with `lerna` (used by `auto`),
+# so we need to manually set auth token.
+npm set "//registry.npmjs.org/:_authToken=$NPM_TOKEN"

package.json

@@ -97,5 +97,9 @@
     "plugins": [
       "npm"
     ]
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "restricted"
   }
 }