Logged in web users cannot view packages anymore after 5.26.0

[gramakri]

I looked for an existing bug report and couldn't find one. Seems like a pretty basic bug, so I am not sure why it's not been reported.

We have verdaccio configured with LDAP (this is via Cloudron package):

Step 1:

• Login to web ui
  

• Publish package using npm. This works fine.

• The UI still remains same as above screenshot. I thought this is a cache issue but it's the same in another browser too.

My config.yaml has:

packages:
  '@*/*':
    access: $all
    publish: $authenticated
    unpublish: $authenticated
    proxy: npmjs
  '**':
    access: $authenticated
    publish: $authenticated
    unpublish: $authenticated
    proxy: npmjs

If I change access: $authenticated above to access: $all it works but this is not what I want.

[gramakri]

I see the error below when refreshing the UI:

12:46:06 - http <-- 200, user: null(xx via 172.18.0.1), req: 'GET /-/verdaccio/data/packages', bytes: 0/0
12:46:06 - error--- forbidden access for helloworld. Error: authorization required to access package helloworld

I can install just fine:

$ npm install helloworld ----registry https://npmxx/

added 1 package in 1s

[juanpicado]

It works with prev release? just to confirm

[gramakri]

@juanpicado yes, works with previous release.

[juanpicado]

Ok I will check maybe u screw something up with my lastes changes thanks

[gramakri]

#3943 is the bug for others to follow along.