Connector to Azure DevOps NPM package feed not working

[nicolas.morissette_6285]

@stevedennis
I created a dummy collection with a dummy project and a dummy feed on Azure DevOps that contains 1 NPM package.
I sent the information (feed address and PAT) in an email with "[QA-529] issue with ADO NPM feed connector" as subject.

Thanks,
Nicolas

[dean-houston]

Thanks @nicolas-morissette_6285 -- we've received it, and I've attached to our internal dashboard. I can also see which domain/company you're with, based on the Email -- and it looks like your company purchased a license, thanks!

I'll escalate the priority internally, and from here we'll just try to reproduce/research this (might take a day or two)... but we'll update as soon as we learn more!

[nicolas.morissette_6285]

@dean-houston Hey Dean,
Thanks a lot!
Yes we do have a license and use it to full potential. Microsoft is giving us/you a hard time with their DevOps feed.

Will stay tuned for the update and let me know if you need anymore information.

[rhessinger]

Hi @nicolas-morissette_6285,

I took a look into this and what I have found is that Azure DevOps does not support the NPM search API which is why this errors. I created a connector to the Azure DevOps npm feed and then used a username of token, set the password to the PAT (not Base64Encoded), and then selected Basic authentication. The list of all packages will not work, but if you navigate directly to the package or pull through npm, it will access the package. In my case, I was able to navigate to http://PROGET_SERVER/feeds/NPM_FEED_NAME/PACKAGE_NAME/versions and it would load the package's page.

I'm currently working with the products team on a solution. I'll let you know when I have more information for you.

Thanks,
Rich

[nicolas.morissette_6285]

Hey @rhessinger,
Thanks a lot for the feedback it's really appreciated. Hopefully I won't be on your blacklist since I'm always coming in with Microsoft issues haha.

I'll stay tuned for the solution.

Best Regards,
Nicolas

[nicolas.morissette_6285]

@rhessinger said in Connector to Azure DevOps NPM package feed not working:

http://PROGET_SERVER/feeds/NPM_FEED_NAME/PACKAGE_NAME/versions

Hey Rich,

I just figured out that if I add this broken connector to this DevOps NPM feeds in my ProGet NPM feed it will break the ProGet NPM packages page.

As we know with this issue the connector isn't working and it gives us this error:

I did not expect that having this broken connector setup would crash my whole NPM feed page:

We would be fine if the connector would be skipped regarding listing the packages on the feed webpage but would still let us download the package directly with the NPM command as you mentioned (I tried it and was able to reach specific version pages on ProGet)

If it can make your life easier by just fixing the NPM page we would be fine with it.

[rhessinger]

Hi @nicolas-morissette_6285,

I'm still waiting for feedback from the products team, but my idea is to basically add a setting that allows you to disable listing/searching the packages on that connector and only allow exact name matches in the UI. We do a similar thing for Docker connectors because not all registries support listing or searching. The product change ticket tracking this fix is PG-1916. I will reply as soon as we have confirmed the fix and scheduled it for release. I'm hoping we can get it in for ProGet 5.3.26.

Thanks,
Rich

[rhessinger]

Hi @nicolas-morissette_6285,

We have released this change in ProGet 5.3.26. I apologize for not replying sooner. If you upgrade your ProGet instance, then you can update your NPM connecter and select the Exact Match Only option on the connector configuration. That will then allow you to see all your local packages and still allow you to search by the exact name of your NPM packages on Azure DevOps Connector.

Thanks,
Rich

[nicolas.morissette_6285]

@rhessinger Hey Rich,
No worry I followed up closely and I knew the release including the fix was coming!

I updated ProGet yesterday morning, updated my connector and our NPM feed page is back alive. Off course the connector can't tell me how much packages there's upstream but that's no big deal.

I asked our team using this NPM feed connector to let me know if they encounter any issue.

Thanks again for the amazing support it's highly appreciated.

[rhessinger]

Hi @nicolas-morissette_6285,

Always glad to help! Thanks for giving us an update and letting us know that this fixed your issue. Unfortunately, the package count is a side effect of ADO not implementing the search API. It does not give us the ability to get a package count.

Thanks,
Rich