From 96e0d4d5cad7f258cf07c4db661107c5559dd212 Mon Sep 17 00:00:00 2001 From: Abhishek Sharma Date: Tue, 14 Jan 2025 10:17:38 +0300 Subject: [PATCH 1/2] fix(doc): issues #17189 adds missing read_api scope Signed-off-by: Abhishek Sharma --- .changeset/lemon-rocks-crash.md | 5 +++++ docs/auth/gitlab/provider.md | 1 + 2 files changed, 6 insertions(+) create mode 100644 .changeset/lemon-rocks-crash.md diff --git a/.changeset/lemon-rocks-crash.md b/.changeset/lemon-rocks-crash.md new file mode 100644 index 0000000000..44a573d7bf --- /dev/null +++ b/.changeset/lemon-rocks-crash.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-auth-backend-module-gitlab-provider': minor +--- + +Adds fix for missing read_api scope in doc issue #17189 diff --git a/docs/auth/gitlab/provider.md b/docs/auth/gitlab/provider.md index 5241481463..65d1909f41 100644 --- a/docs/auth/gitlab/provider.md +++ b/docs/auth/gitlab/provider.md @@ -20,6 +20,7 @@ should point to your Backstage backend auth handler. 2. Set this to `http://{APP_FQDN}:{APP_BACKEND_PORT}/api/auth/gitlab/handler/frame` for non-local deployments. 3. Select the following scopes from the list: - [x] `api` Grants full read-write access to the api. This is only required if users need to be able to create merge requests with their own permissions. + - [x] `read_api` Grants read access to the API, including all groups and projects, the container registry, and the package registry. - [x] `read_user` Grants read-only access to the authenticated user's profile through the /user API endpoint, which includes username, public email, and full name. Also grants access to read-only API endpoints under /users. - [x] `read_repository` Grants read-only access to repositories on private projects using Git-over-HTTP (not using the API). - [x] `write_repository` Grants read-write access to repositories on private projects using Git-over-HTTP (not using the API). From 5feabaa5bb85588c55cfa519bbbf7bf0c1ee0bcd Mon Sep 17 00:00:00 2001 From: Abhishek Sharma Date: Tue, 14 Jan 2025 10:29:50 +0300 Subject: [PATCH 2/2] fix(doc): remove changeset for doc Signed-off-by: Abhishek Sharma --- .changeset/lemon-rocks-crash.md | 5 ----- 1 file changed, 5 deletions(-) delete mode 100644 .changeset/lemon-rocks-crash.md diff --git a/.changeset/lemon-rocks-crash.md b/.changeset/lemon-rocks-crash.md deleted file mode 100644 index 44a573d7bf..0000000000 --- a/.changeset/lemon-rocks-crash.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@backstage/plugin-auth-backend-module-gitlab-provider': minor ---- - -Adds fix for missing read_api scope in doc issue #17189