Merge pull request #8292 from sonali-mishra-94/add-oauth2-header

Add custom authorization header for OAuth2.0 strategy

.changeset/thin-poems-watch.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Added custom OAuth2.0 authorization header for generic oauth2 provider.

plugins/auth-backend/src/providers/oauth2/provider.ts

@@ -85,6 +85,12 @@ export class OAuth2AuthProvider implements OAuthHandlers {
         tokenURL: options.tokenUrl,
         passReqToCallback: false as true,
         scope: options.scope,
+        customHeaders: {
+          Authorization: `Basic ${this.encodeClientCredentials(
+            options.clientId,
+            options.clientSecret,
+          )}`,
+        },
       },
       (
         accessToken: any,
@@ -187,6 +193,10 @@ export class OAuth2AuthProvider implements OAuthHandlers {
 
     return response;
   }
+
+  encodeClientCredentials(clientID: string, clientSecret: string): string {
+    return Buffer.from(`${clientID}:${clientSecret}`).toString('base64');
+  }
 }
 
 export const oAuth2DefaultSignInResolver: SignInResolver<OAuthResult> = async (