diff --git a/plugins/auth-backend/src/lib/passport/BackstageIdentityStrategy.ts b/plugins/auth-backend/src/lib/passport/BackstageIdentityStrategy.ts
index 0910087127..7635e1ec40 100644
--- a/plugins/auth-backend/src/lib/passport/BackstageIdentityStrategy.ts
+++ b/plugins/auth-backend/src/lib/passport/BackstageIdentityStrategy.ts
@@ -36,6 +36,7 @@ export class BackstageIdentityStrategy extends Strategy {
     this.name = 'backstage';
   }
 
+  // TODO(erilar): Move to its own module (IdentityClient?) and add tests
   private async refreshKeyStore(rawJwtToken: string) {
     const { header, payload } = JWT.decode(rawJwtToken, {
       complete: true,