Version Packages

packages/backend-app-api/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @backstage/backend-app-api
 
+## 0.7.0
+
+### Minor Changes
+
+- 3256f14: **BREAKING**: Modules are no longer loaded unless the plugin that they extend is present.
+
+### Patch Changes
+
+- 10327fb: Deprecate the `getPath` option for the `httpRouterServiceFactory` and more generally the ability to configure plugin API paths to be anything else than `/api/:pluginId/`. Requests towards `/api/*` that do not match an installed plugin will also no longer be handled by the index router, typically instead returning a 404.
+- 2c50516: Fix auth cookie issuance for split backend deployments by preferring to set it against the request target host instead of origin
+- 7e584d6: Fixed a bug where expired cookies would not be refreshed.
+- 1a20b12: Make the auth service create and validate dedicated OBO tokens, containing the user identity proof.
+- 00fca28: Implemented support for external access using both the legacy token form and static tokens.
+- d5a1fe1: Replaced winston logger with `LoggerService`
+- bce0879: Service-to-service authentication has been improved.
+
+  Each plugin now has the capability to generate its own signing keys for token issuance. The generated public keys are stored in a database, and they are made accessible through a newly created endpoint: `/.backstage/auth/v1/jwks.json`.
+
+  `AuthService` can now issue tokens with a reduced scope using the `getPluginRequestToken` method. This improvement enables plugins to identify the plugin originating the request.
+
+- 54f2ac8: Added `initialization` option to `createServiceFactory` which defines the initialization strategy for the service. The default strategy mimics the current behavior where plugin scoped services are initialized lazily by default and root scoped services are initialized eagerly.
+- 56f81b5: Improved error message thrown by `AuthService` when requesting a token for plugins that don't support the new authentication tokens.
+- 25ea3d2: Minor internal restructuring
+- d62bc51: Add support for limited user tokens by using user identity proof provided by the auth backend.
+- c884b9a: Automatically creates a get and delete cookie endpoint when a `user-cookie` policy is added.
+- Updated dependencies
+  - @backstage/backend-common@0.21.7
+  - @backstage/config-loader@1.8.0
+  - @backstage/plugin-permission-node@0.7.28
+  - @backstage/backend-plugin-api@0.6.17
+  - @backstage/backend-tasks@0.5.22
+  - @backstage/plugin-auth-node@0.4.12
+  - @backstage/cli-node@0.2.5
+  - @backstage/cli-common@0.1.13
+  - @backstage/config@1.2.0
+  - @backstage/errors@1.2.4
+  - @backstage/types@1.1.1
+
 ## 0.7.0-next.1
 
 ### Minor Changes

packages/backend-app-api/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@backstage/backend-app-api",
   "description": "Core API used by Backstage backend apps",
-  "version": "0.7.0-next.1",
+  "version": "0.7.0",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "publishConfig": {