chore: Move AllowAllPermissionPolicy to it's own backend module package

Signed-off-by: Jack Palmer <jackpalmer@spotify.com>
This commit is contained in:
Jack Palmer
2023-09-01 17:20:33 +01:00
parent d0da943ed2
commit 78dab638c9
11 changed files with 159 additions and 45 deletions
+1 -1
View File
@@ -14,4 +14,4 @@
* limitations under the License.
*/
export { permissionPlugin, permissionModuleAllowAllPolicy } from './plugin';
export { permissionPlugin } from './plugin';
+2 -40
View File
@@ -17,18 +17,9 @@
import { loggerToWinstonLogger } from '@backstage/backend-common';
import {
coreServices,
createBackendModule,
createBackendPlugin,
} from '@backstage/backend-plugin-api';
import { BackstageIdentityResponse } from '@backstage/plugin-auth-node';
import {
AuthorizeResult,
PolicyDecision,
} from '@backstage/plugin-permission-common';
import {
PermissionPolicy,
PolicyQuery,
} from '@backstage/plugin-permission-node';
import { PermissionPolicy } from '@backstage/plugin-permission-node';
import {
policyExtensionPoint,
PolicyExtensionPoint,
@@ -46,35 +37,6 @@ class PolicyExtensionPointImpl implements PolicyExtensionPoint {
}
}
/**
* A permission policy module that allows all requests.
*
* @alpha
*/
export const permissionModuleAllowAllPolicy = createBackendModule({
moduleId: 'allowAllPolicy',
pluginId: 'permission',
register(reg) {
class AllowAllPermissionPolicy implements PermissionPolicy {
async handle(
_request: PolicyQuery,
_user?: BackstageIdentityResponse,
): Promise<PolicyDecision> {
return {
result: AuthorizeResult.ALLOW,
};
}
}
reg.registerInit({
deps: { policy: policyExtensionPoint },
async init({ policy }) {
policy.setPolicy(new AllowAllPermissionPolicy());
},
});
},
});
/**
* Permission plugin
*
@@ -99,7 +61,7 @@ export const permissionPlugin = createBackendPlugin({
const winstonLogger = loggerToWinstonLogger(logger);
if (!policies.policy) {
throw new Error(
'No policy module installed! Please install a policy module. If you want to allow all requests, use permissionModuleAllowAllPolicy',
'No policy module installed! Please install a policy module. If you want to allow all requests, use @backstage/plugin-permission-backend-module-policy-allow-all permissionModuleAllowAllPolicy',
);
}