@@ -296,6 +296,7 @@ class Config {
296296 // might be a security hazard, which was the intention.
297297 try {
298298 this . setCredentialsByURI ( reg , creds )
299+ // eslint-disable-next-line no-empty
299300 } catch ( _ ) { }
300301 process . emit ( 'timeEnd' , 'config:load:credentials' )
301302
@@ -366,9 +367,11 @@ class Config {
366367 if ( ! / ^ n p m _ c o n f i g _ / i. test ( envKey ) || envVal === '' ) {
367368 continue
368369 }
369- const key = envKey . slice ( 'npm_config_' . length )
370- . replace ( / (? ! ^ ) _ / g, '-' ) // don't replace _ at the start of the key
371- . toLowerCase ( )
370+ let key = envKey . slice ( 'npm_config_' . length )
371+ if ( ! key . startsWith ( '//' ) ) { // don't normalize nerf-darted keys
372+ key = key . replace ( / (? ! ^ ) _ / g, '-' ) // don't replace _ at the start of the key
373+ . toLowerCase ( )
374+ }
372375 conf [ key ] = envVal
373376 }
374377 this [ _loadObject ] ( conf , 'env' , 'environment' )
@@ -654,6 +657,7 @@ class Config {
654657 // saved back to the .npmrc file, so we're good.
655658 try {
656659 this . setCredentialsByURI ( reg , creds )
660+ // eslint-disable-next-line no-empty
657661 } catch ( _ ) { }
658662 }
659663
@@ -691,8 +695,6 @@ class Config {
691695 this . delete ( `_password` , 'user' )
692696 this . delete ( `username` , 'user' )
693697 }
694- this . delete ( `${ nerfed } :-authtoken` , 'user' )
695- this . delete ( `${ nerfed } :_authtoken` , 'user' )
696698 this . delete ( `${ nerfed } :_authToken` , 'user' )
697699 this . delete ( `${ nerfed } :_auth` , 'user' )
698700 this . delete ( `${ nerfed } :_password` , 'user' )
@@ -732,8 +734,6 @@ class Config {
732734 // send auth if we have it, only to the URIs under the nerf dart.
733735 this . delete ( `${ nerfed } :always-auth` , 'user' )
734736
735- this . delete ( `${ nerfed } :-authtoken` , 'user' )
736- this . delete ( `${ nerfed } :_authtoken` , 'user' )
737737 this . delete ( `${ nerfed } :email` , 'user' )
738738 if ( certfile && keyfile ) {
739739 this . set ( `${ nerfed } :certfile` , certfile , 'user' )
@@ -781,8 +781,6 @@ class Config {
781781 }
782782
783783 const tokenReg = this . get ( `${ nerfed } :_authToken` ) ||
784- this . get ( `${ nerfed } :_authtoken` ) ||
785- this . get ( `${ nerfed } :-authtoken` ) ||
786784 nerfed === nerfDart ( this . get ( 'registry' ) ) && this . get ( '_authToken' )
787785
788786 if ( tokenReg ) {
0 commit comments