update documentation location
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
This commit is contained in:
committed by
Fredrik Adelöw
parent
9fa77c4b91
commit
876a5351d8
@@ -1,10 +1,17 @@
|
||||
# Using AWS Application Load Balancer with Azure Active Directory to authenticate requests
|
||||
---
|
||||
id: provider
|
||||
title: Google Identity Aware Proxy Provider
|
||||
sidebar_label: Google IAP
|
||||
description: Adding Google Identity Aware Proxy as an authentication provider in Backstage
|
||||
---
|
||||
|
||||
# Using Google Identity Aware Proxy to authenticate requests
|
||||
|
||||
Backstage allows offloading the responsibility of authenticating users to an Google HTTPS Load Balancer & [IAP](https://cloud.google.com/iap), leveraging the authentication support on IAP.
|
||||
|
||||
Backstage allows offloading the responsibility of authenticating users to an AWS Application Load Balancer (**ALB**), leveraging the authentication support on ALB.
|
||||
This tutorial shows how to use authentication on an ALB sitting in front of Backstage.
|
||||
Azure Active Directory (**AAD**) is used as identity provider but any identity provider supporting OpenID Connect (OIDC) can be used.
|
||||
|
||||
It is assumed an ALB is already serving traffic in front of a Backstage instance configured to serve the frontend app from the backend.
|
||||
It is assumed an IAP is already serving traffic in front of a Backstage instance configured to serve the frontend app from the backend.
|
||||
|
||||
## Infrastructure setup
|
||||
|
||||
@@ -133,7 +140,3 @@ auth:
|
||||
## Conclusion
|
||||
|
||||
Once it's deployed, after going through the AAD authentication flow, Backstage should display the AAD user details.
|
||||
|
||||
<!-- links -->
|
||||
|
||||
[monorepo-app-setup-with-auth-ms]: https://backstage.io/docs/auth/microsoft/provider
|
||||
@@ -18,21 +18,18 @@ import {
|
||||
AuthProviderRouteHandlers,
|
||||
AuthResponse
|
||||
} from '@backstage/plugin-auth-backend';
|
||||
|
||||
import {
|
||||
ExperimentalIdentityResolver,
|
||||
} from '../types';
|
||||
import express from 'express';
|
||||
import { Logger } from 'winston';
|
||||
import { CatalogApi } from '@backstage/catalog-client';
|
||||
|
||||
const { OAuth2Client } = require('google-auth-library');
|
||||
import { OAuth2Client } from 'google-auth-library';
|
||||
|
||||
const IAP_JWT_HEADER = 'x-goog-iap-jwt-assertion';
|
||||
|
||||
export type ExperimentalIdentityResolver = (
|
||||
/**
|
||||
* An object containing information specific to the auth provider.
|
||||
*/
|
||||
payload: object,
|
||||
catalogApi: CatalogApi,
|
||||
) => Promise<AuthResponse<any>>;
|
||||
export type GcpIAPProviderOptions = {
|
||||
audience: string;
|
||||
identityResolutionCallback: ExperimentalIdentityResolver;
|
||||
|
||||
Reference in New Issue
Block a user