diff --git a/.changeset/tasty-poems-raise.md b/.changeset/tasty-poems-raise.md index 47556cb3ad..fbd81423b6 100644 --- a/.changeset/tasty-poems-raise.md +++ b/.changeset/tasty-poems-raise.md @@ -2,4 +2,4 @@ '@backstage/plugin-auth-backend': minor --- -Added validation to TokenFactory.issueToken that ensure any sub claim given is a valid entityRef. This will affect any custom resolver functions given to auth providers. +**BREAKING**: The `TokenFactory.issueToken` used by custom sign-in resolvers now ensures that the sub claim given is a full entity reference of the format `:/`. Any existing custom sign-in resolver functions that do not supply a full entity reference must be updated.