Validate that Okta audience config is an absolute URL

Add a check in the Okta auth provider initialization that ensures
the provided audience is an absolute URL with an http(s) scheme,
and throws a descriptive error if not.

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
This commit is contained in:
Patrik Oldsberg
2026-02-12 22:42:21 +01:00
parent 85d9eb1109
commit 08aea95c7e
3 changed files with 41 additions and 0 deletions
@@ -0,0 +1,5 @@
---
'@backstage/plugin-auth-backend-module-okta-provider': patch
---
Added a validation check that rejects `audience` configuration values that are not absolute URLs (i.e. missing `https://` or `http://` prefix).