[Bug] YN0041: Invalid authentication after logging in with `yarn npm login`

• I’d be willing to implement a fix

Describe the bug

I attempted to publish my package via yarn npm login and yarn npm publish, but yarn failed with an unexpected error

To Reproduce

Using yarn from sources in this repo: https://github.com/justjake/quickjs-emscripten

1. Clone https://github.com/justjake/quickjs-emscripten
2. Try to yarn npm login
3. Try to yarn npm publish

Screenshots

If applicable, add screenshots to help explain your problem.

Environment if relevant (please complete the following information):

• OS: macOS 10.14.6 (18G103)
• Node version: v10.21.0
• Yarn version: 2.1.1-git.20200720.906e9472

[wojtekmaj]

I think I have discovered something that can push this forward.

In your GLOBAL .yarnrc.yml, you will have your tokens stored. That was my situation:

npmRegistries:
  "https://npm.pkg.github.com":
    npmAuthToken: SOME_GITHUB_TOKEN_HERE
  "https://registry.yarnpkg.com":
    npmAuthToken: NPM_PUBLISH_TOKEN_HERE

npmScopes:
  acmeinc:
    npmAuthToken: ACMEINC_GITHUB_TOKEN_HERE

it looks like npmRegistries["https://npm.pkg.github.com"].npmAuthToken took priority over npmScopes.acmeinc.npmAuthToken.

• Removing npmRegistries["https://npm.pkg.github.com"].npmAuthToken did not resolve the issue.
• Copying npmScopes.acmeinc.npmAuthToken value to npmRegistries["https://npm.pkg.github.com"].npmAuthToken resolved the issue.

I’m still not sure, however, why is that and how to resolve this without manually fiddling with configs.

[rosanzheng]

I just had quite a hard time with the authentication part with Yarn 3.1.0, but I found the solution to it and hope I can save someone else from the struggles I’ve been having:

Problem: My requirements were to publish one repository @organization/test1 into the GitHub NPM registry. But I was not able to install this package from another repository lying within the same organization, because I defined my .yarnrc.yml wrongly. Therefore, I received 404 errors and 401 errors when trying to install it.

Solution: Here’s what worked for me regarding the .yarnrc.yml file:

npmRegistryServer: "https://registry.yarnpkg.com"

npmScopes:
  <Your scope (case sensitive!)>:
    npmAlwaysAuth: true (optional I think)
    npmAuthToken: <Your Personal Access Token>
    npmRegistryServer: <URL to where your package is hosted, in our case it was https://npm.pkg.github.com>