Merge pull request #26969 from backstage/rugvip/harden

Update docs to be more strict around sign-in resolvers + remove insecure sign-in resolver
2024-10-08 11:53:37 +02:00
parent d66496a8eb a7ef006e15
commit 7fd7280e36
48 changed files with 186 additions and 276 deletions
@@ -66,9 +66,7 @@ auth:
    azureEasyAuth:
      signIn:
        resolvers:
-          # typically you would pick one of these
-          - resolver: emailMatchingUserEntityProfileEmail
-          - resolver: emailLocalPartMatchingUserEntityName
+          # See https://backstage.io/docs/auth/microsoft/easy-auth#resolvers for more resolvers
          - resolver: idMatchingUserEntityAnnotation
 ```

@@ -69,10 +69,7 @@ auth:
        domainHint: ${AZURE_TENANT_ID}
        signIn:
          resolvers:
-            # typically you would pick one of these
-            - resolver: emailMatchingUserEntityProfileEmail
-            - resolver: emailLocalPartMatchingUserEntityName
-            - resolver: emailMatchingUserEntityAnnotation
+            # See https://backstage.io/docs/auth/microsoft/provider#resolvers for more resolvers
            - resolver: userIdMatchingUserEntityAnnotation
 ```