diff --git a/.changeset/revert-dcr-token-expiration.md b/.changeset/revert-dcr-token-expiration.md deleted file mode 100644 index 2e7c854d46..0000000000 --- a/.changeset/revert-dcr-token-expiration.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -'@backstage/plugin-auth-backend': patch ---- - -Removed the `auth.experimentalDynamicClientRegistration.tokenExpiration` config option. DCR tokens now use the default 1 hour expiration. - -If you need longer-lived access, use refresh tokens via the `offline_access` scope instead. DCR clients should already have the `offline_access` scope available. Enable refresh tokens by setting: - -```yaml -auth: - experimentalRefreshToken: - enabled: true -``` diff --git a/plugins/auth-backend/CHANGELOG.md b/plugins/auth-backend/CHANGELOG.md index f3e6940cb6..9f77de97e7 100644 --- a/plugins/auth-backend/CHANGELOG.md +++ b/plugins/auth-backend/CHANGELOG.md @@ -39,6 +39,16 @@ ### Patch Changes +- 7dc3dfe: Removed the `auth.experimentalDynamicClientRegistration.tokenExpiration` config option. DCR tokens now use the default 1 hour expiration. + + If you need longer-lived access, use refresh tokens via the `offline_access` scope instead. DCR clients should already have the `offline_access` scope available. Enable refresh tokens by setting: + + ```yaml + auth: + experimentalRefreshToken: + enabled: true + ``` + - 7455dae: Use node prefix on native imports - Updated dependencies - @backstage/plugin-catalog-node@2.0.0