docs/auth: remove insecure sign-in resolver recommendations

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-10-04 14:35:43 +02:00
parent ad336b576b
commit 6edb7ba409
16 changed files with 14 additions and 44 deletions
@@ -29,9 +29,7 @@ auth:
      jwtHeader: x-custom-header # Optional: Only if you are using a custom header for the IAP JWT
      signIn:
        resolvers:
-          # typically you would pick one of these
-          - resolver: emailMatchingUserEntityProfileEmail
-          - resolver: emailLocalPartMatchingUserEntityName
+          # See https://backstage.io/docs/auth/google/gcp-iap-auth#resolvers for more resolvers
          - resolver: emailMatchingUserEntityAnnotation
 ```

@@ -44,9 +44,7 @@ auth:
        clientSecret: ${AUTH_GOOGLE_CLIENT_SECRET}
        signIn:
          resolvers:
-            # typically you would pick one of these
-            - resolver: emailMatchingUserEntityProfileEmail
-            - resolver: emailLocalPartMatchingUserEntityName
+            # See https://backstage.io/docs/auth/google/provider#resolvers for more resolvers
            - resolver: emailMatchingUserEntityAnnotation
 ```