diff --git a/.changeset/four-vans-sit.md b/.changeset/four-vans-sit.md new file mode 100644 index 0000000000..4082e3062e --- /dev/null +++ b/.changeset/four-vans-sit.md @@ -0,0 +1,10 @@ +--- +'@backstage/core-app-api': patch +'@backstage/plugin-auth-backend': patch +--- + +Added support for using authenticating via GitHub Apps in addition to GitHub OAuth Apps. It used to be possible to use GitHub Apps, but they did not handle session refresh correctly. + +Note that GitHub Apps handle OAuth scope at the app installation level, meaning that the `scope` parameter for `getAccessToken` has no effect. When calling `getAccessToken` in open source plugins, one should still include the appropriate scope, but also document in the plugin README what scopes are required in the case of GitHub Apps. + +In addition, the `authHandler` and `signInResolver` options have been implemented for the GitHub provider in the auth backend.