From 392b36fa1f26d3e522f624e300548e91931e1750 Mon Sep 17 00:00:00 2001 From: Patrik Oldsberg Date: Fri, 20 Aug 2021 16:31:46 +0200 Subject: [PATCH] changesets: add changeset for GitHub App auth support Signed-off-by: Patrik Oldsberg --- .changeset/four-vans-sit.md | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .changeset/four-vans-sit.md diff --git a/.changeset/four-vans-sit.md b/.changeset/four-vans-sit.md new file mode 100644 index 0000000000..4082e3062e --- /dev/null +++ b/.changeset/four-vans-sit.md @@ -0,0 +1,10 @@ +--- +'@backstage/core-app-api': patch +'@backstage/plugin-auth-backend': patch +--- + +Added support for using authenticating via GitHub Apps in addition to GitHub OAuth Apps. It used to be possible to use GitHub Apps, but they did not handle session refresh correctly. + +Note that GitHub Apps handle OAuth scope at the app installation level, meaning that the `scope` parameter for `getAccessToken` has no effect. When calling `getAccessToken` in open source plugins, one should still include the appropriate scope, but also document in the plugin README what scopes are required in the case of GitHub Apps. + +In addition, the `authHandler` and `signInResolver` options have been implemented for the GitHub provider in the auth backend.