npm login (#4296)

# Description of Changes

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/DeveloperGuide.md#6-testing)
for more details.

---------

Co-authored-by: a <a>

.github/workflows/PR-Auto-Deploy-V2.yml

@@ -270,6 +270,8 @@ jobs:
           tags: ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-frontend-${{ steps.commit-hashes.outputs.frontend_short }}
           build-args: VERSION_TAG=v2-alpha
           platforms: linux/amd64
+          secrets: |
+            npmrc=//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}
 
       - name: Build and push V2 backend image
         if: steps.check-backend.outputs.exists == 'false'

.github/workflows/build.yml

@@ -145,12 +145,18 @@ jobs:
           node-version: '20'
           cache: 'npm'
           cache-dependency-path: frontend/package-lock.json
+      - name: Configure npm with token (if available)
+        if: secrets.NPM_TOKEN != ''
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
       - name: Install frontend dependencies
         run: cd frontend && npm ci
       - name: Build frontend
         run: cd frontend && npm run build
       - name: Run frontend tests
         run: cd frontend && npm run test -- --run
+      - name: Clean up npmrc
+        if: always() && secrets.NPM_TOKEN != ''
+        run: rm -f ~/.npmrc
       - name: Upload frontend build artifacts
         uses: actions/upload-artifact@v4.6.2
         with:

.github/workflows/deploy-on-v2-commit.yml

@@ -103,6 +103,8 @@ jobs:
             ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-frontend-latest
           build-args: VERSION_TAG=v2-alpha
           platforms: linux/amd64
+          secrets: |
+            npmrc=//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}
       
       - name: Build and push backend image
         if: steps.check-backend.outputs.exists == 'false'

.github/workflows/frontend-licenses-update.yml

@@ -51,6 +51,10 @@ jobs:
           cache: 'npm'
           cache-dependency-path: frontend/package-lock.json
 
+      - name: Configure npm with token (if available)
+        if: secrets.NPM_TOKEN != ''
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
+
       - name: Install frontend dependencies
         working-directory: frontend
         run: npm ci
@@ -59,6 +63,10 @@ jobs:
         working-directory: frontend
         run: npm run generate-licenses
         
+      - name: Clean up npmrc
+        if: always() && secrets.NPM_TOKEN != ''
+        run: rm -f ~/.npmrc
+
       - name: Check for license warnings
         run: |
           if [ -f "frontend/src/assets/license-warnings.json" ]; then

.github/workflows/testdriver.yml

@@ -133,6 +133,10 @@ jobs:
         with:
           cache: 'npm'
           
+      - name: Configure npm with token (if available)
+        if: secrets.NPM_TOKEN != ''
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
+
       - name: Run TestDriver.ai
         uses: testdriverai/action@f0d0f45fdd684db628baa843fe9313f3ca3a8aa8 #1.1.3
         with:
@@ -149,6 +153,10 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           FORCE_COLOR: "3"
           
+      - name: Clean up npmrc
+        if: always() && secrets.NPM_TOKEN != ''
+        run: rm -f ~/.npmrc
+
   cleanup:
     needs: [deploy, test]
     runs-on: ubuntu-latest

docker/frontend/Dockerfile

@@ -6,14 +6,32 @@ WORKDIR /app
 # Copy package files
 COPY frontend/package*.json ./
 
-# Install dependencies
+# Install dependencies (uses .npmrc secret if available, otherwise anonymous)
-RUN npm ci
+RUN --mount=type=secret,id=npmrc \
+    set -e && \
+    if [ -s /run/secrets/npmrc ]; then \
+      echo "Using authenticated npm registry" && \
+      echo "$(cat /run/secrets/npmrc)" > /root/.npmrc; \
+    else \
+      echo "Using anonymous npm registry (no token provided)"; \
+    fi && \
+    npm ci --loglevel=warn && \
+    rm -f /root/.npmrc
 
 # Copy source code
 COPY frontend .
 
-# Build the application
+# Build the application (uses .npmrc secret if available, otherwise anonymous)
-RUN npm run build
+RUN --mount=type=secret,id=npmrc \
+    set -e && \
+    if [ -s /run/secrets/npmrc ]; then \
+      echo "Using authenticated npm registry for build" && \
+      echo "$(cat /run/secrets/npmrc)" > /root/.npmrc; \
+    else \
+      echo "Using anonymous npm registry for build (no token provided)"; \
+    fi && \
+    npm run build && \
+    rm -f /root/.npmrc
 
 # Production stage
 FROM nginx:alpine