enable anonymous api

Author: Thomasr

server/api-service/lowcoder-server/src/main/java/org/lowcoder/api/framework/security/SecurityConfig.java

@@ -145,6 +145,7 @@ SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http) {
                         ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET, NewUrl.ORGANIZATION_URL + "/*/datasourceTypes"), // datasource types
                         ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET, NewUrl.ORGANIZATION_URL + "/byuser/*"),
                         ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET, NewUrl.DATASOURCE_URL + "/jsDatasourcePlugins"),
+                        ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET, NewUrl.NPM_REGISTRY + "/**"),
                         ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET, "/api/docs/**")
                 )
                 .permitAll()

server/api-service/lowcoder-server/src/main/java/org/lowcoder/api/npm/PrivateNpmRegistryController.java

@@ -44,23 +44,44 @@ public Mono<ResponseEntity<Resource>> getNpmPackageAsset(String applicationId, S
 
     @NotNull
     private Mono<ResponseEntity<Resource>> forwardToNodeService(String applicationId, String path, String prefix) {
+
         String withoutLeadingSlash = path.startsWith("/") ? path.substring(1) : path;
-        return applicationServiceImpl.findById(applicationId).flatMap(application -> organizationService.getById(application.getOrganizationId())).flatMap(orgMember -> organizationService.getOrgCommonSettings(orgMember.getId()).flatMap(organizationCommonSettings -> {
-            Map<String, Object> config = Map.of("npmRegistries", organizationCommonSettings.get("npmRegistries"), "workspaceId", orgMember.getId());
-            return WebClientBuildHelper.builder()
-                    .systemProxy()
-                    .build()
-                    .post()
-                    .uri(nodeServerHelper.createUri(prefix + "/" + withoutLeadingSlash))
-                    .contentType(MediaType.APPLICATION_JSON)
-                    .body(BodyInserters.fromValue(config))
-                    .retrieve().toEntity(Resource.class)
-                    .map(response -> {
-                        return ResponseEntity
-                                .status(response.getStatusCode())
-                                .headers(response.getHeaders())
-                                .body(response.getBody());
-                    });
-        }));
+        if(applicationId.equals("none")) {
+            return sessionUserService.getVisitorOrgMemberCache().flatMap(orgMember -> organizationService.getOrgCommonSettings(orgMember.getOrgId()).flatMap(organizationCommonSettings -> {
+                Map<String, Object> config = Map.of("npmRegistries", organizationCommonSettings.get("npmRegistries"), "workspaceId", orgMember.getOrgId());
+                return WebClientBuildHelper.builder()
+                        .systemProxy()
+                        .build()
+                        .post()
+                        .uri(nodeServerHelper.createUri(prefix + "/" + withoutLeadingSlash))
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .body(BodyInserters.fromValue(config))
+                        .retrieve().toEntity(Resource.class)
+                        .map(response -> {
+                            return ResponseEntity
+                                    .status(response.getStatusCode())
+                                    .headers(response.getHeaders())
+                                    .body(response.getBody());
+                        });
+            }));
+        } else{
+            return applicationServiceImpl.findById(applicationId).flatMap(application -> organizationService.getById(application.getOrganizationId())).flatMap(orgMember -> organizationService.getOrgCommonSettings(orgMember.getId()).flatMap(organizationCommonSettings -> {
+                Map<String, Object> config = Map.of("npmRegistries", organizationCommonSettings.get("npmRegistries"), "workspaceId", orgMember.getId());
+                return WebClientBuildHelper.builder()
+                        .systemProxy()
+                        .build()
+                        .post()
+                        .uri(nodeServerHelper.createUri(prefix + "/" + withoutLeadingSlash))
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .body(BodyInserters.fromValue(config))
+                        .retrieve().toEntity(Resource.class)
+                        .map(response -> {
+                            return ResponseEntity
+                                    .status(response.getStatusCode())
+                                    .headers(response.getHeaders())
+                                    .body(response.getBody());
+                        });
+            }));
+        }
     }
 }