usage with jfrog artifactory?

I’ve been struggling with using this action with my on-premise artifactory instance (to save a release) and it looks like authTokens are not only not supported by it, but it also causes its URL parser to trip. I’ve tried reproducing what the action is doing in a simple docker image and with the following steps roughly, I get the 404 that leads me to believe artifactory is parsing the :_authToken part wrong.

root@fb783c33d81c:/data# npm config set registry https://internal.service/artifactory/api/npm/npm-release
root@fb783c33d81c:/data# npm config set always-auth true
root@fb783c33d81c:/data# export NODE_AUTH_TOKEN=XXXXX-XXXXX-XXXXX-XXXXX
root@fb783c33d81c:/data# export npm_config__auth=YXJ0aW....qSzJtVw==
root@fb783c33d81c:/data# npm i --ignore-scripts
npm ERR! code E404
npm ERR! 404 Not Found - GET https://internal.service/artifactory/api/npm/npm-snapshot:_authToken=XXXXX-XXXXX-XXXXX-XXXXX/resize-observer-polyfill

Am I doing things wrong here? Is it within the scope of this action / development to support e.g. artifactory? Should I send a pull request that gets rid of auth tokens and allows working with e.g. the basic _auth method?

[lub0v-parsable]

I couldn’t make @Lykathia’s setup to work, so as a workaround, I had to create .npmrc “manually” before calling the actions/setup-node@v1

steps:
  - name: 'Checkout'
    uses: actions/checkout@v2

  - name: 'Create .npmrc'
    shell: bash
    run: |
      echo "registry=https://company.jfrog.io/artifactory/api/npm/npm-registry-name/" > .npmrc
      echo "_auth = ${{ secrets.JFROG_NPM_AUTH_TOKEN }}" >> .npmrc
      echo "always-auth = true" >> .npmrc

  - name: Use Node.js
    uses: actions/setup-node@v1
    with:
       node-version: '10.14.0'

make sure to remove the registry-url from the actions/setup-node@v1 because otherwise it will override the .npmrc.

[shawnsparks-work]

I found we need to be able to set registry, _auth, email, and always-auth in npmrc file to work with Artifactory. I believe _auth and email are the two which are missing from this currently.