Skip to content

Implements npm web login support#6981

Merged
arcanis merged 3 commits intomasterfrom
mael/npm-web-auth
Nov 20, 2025
Merged

Implements npm web login support#6981
arcanis merged 3 commits intomasterfrom
mael/npm-web-auth

Conversation

@arcanis
Copy link
Member

@arcanis arcanis commented Nov 18, 2025

What's the problem this PR addresses?

Npm plans to fully remove the /-/user/org.couchdb.user:<name> endpoint. Since we use this endpoint to login, we need to implement support for the newer /-/v1/login endpoint.

How did you fix it?

A new option, --web-login, enables the web login flow (and fallbacks to the password flow if the web flow isn't supported). This flag is automatically enabled for the npm registry. This is technically a breaking change, but since it's the registry that plans to make that change I think it's ok.

Checklist

  • I have set the packages that need to be released for my changes to be effective.
  • I will check that all automated PR checks pass before the PR gets reviewed.

@arcanis arcanis merged commit b65d527 into master Nov 20, 2025
26 checks passed
@arcanis arcanis deleted the mael/npm-web-auth branch November 20, 2025 19:40
Gudahtt added a commit to Gudahtt/berry that referenced this pull request Feb 9, 2026
…lowlist

* origin/master: (212 commits)
  CI: Select node version to run CI against automatically (yarnpkg#7032)
  Fixes foreach order when --topological isnt set (yarnpkg#6997)
  fix(fslib): handle float timestamps in convertToBigIntStats (yarnpkg#6988)
  Fixes the `/<name>/<version>` format (yarnpkg#6993)
  docs(constraints): add missing @typedef alias for `Context` (yarnpkg#6989)
  Sync master with the changes from master
  Releasing 3 new packages
  Fix JSON Schema (yarnpkg#6973)
  Implements npm web login support (yarnpkg#6981)
  fix(git): split `-c` and `core.autocrlf=false` into separate args for `clone` (yarnpkg#6983)
  Sync master with the changes from master
  Releasing 8 new packages
  Allow catalogs to work with descriptors without resolvers (yarnpkg#6930)
  docs: Clarify additional use-case of npmMinimalAgeGate (yarnpkg#6945)
  Migrates the "typescript" dependencies to a catalog (yarnpkg#6969)
  Support escaping template variables in environment values (yarnpkg#6935)
  Core: Create DURATION settings type (yarnpkg#6942)
  fix: use correct env var to detect gitlab CI for OIDC (yarnpkg#6938)
  Update README.md badge link (yarnpkg#6947)
  fix(publish): use correct workspace name in --json output (yarnpkg#6949)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant