From 8b4f7e42ae7461a3cb6738a391c93b279e415336 Mon Sep 17 00:00:00 2001 From: Erik Larsson Date: Tue, 16 Mar 2021 01:31:48 +0100 Subject: [PATCH] fix: forward auth on scaffolder backend reqeuests Signed-off-by: Erik Larsson --- .changeset/fuzzy-taxis-hammer.md | 5 +++++ plugins/scaffolder-backend/src/service/router.ts | 8 ++++++-- 2 files changed, 11 insertions(+), 2 deletions(-) create mode 100644 .changeset/fuzzy-taxis-hammer.md diff --git a/.changeset/fuzzy-taxis-hammer.md b/.changeset/fuzzy-taxis-hammer.md new file mode 100644 index 0000000000..a5d6af815f --- /dev/null +++ b/.changeset/fuzzy-taxis-hammer.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-scaffolder-backend': patch +--- + +Forward authorization on scaffolder backend requests diff --git a/plugins/scaffolder-backend/src/service/router.ts b/plugins/scaffolder-backend/src/service/router.ts index ec7e79bbc8..1e2891cfb8 100644 --- a/plugins/scaffolder-backend/src/service/router.ts +++ b/plugins/scaffolder-backend/src/service/router.ts @@ -288,7 +288,9 @@ export async function createRouter( ); } - const template = await entityClient.findTemplate(name); + const template = await entityClient.findTemplate(name, { + token: getBearerToken(req.headers.authorization), + }); if (isBeta2Template(template)) { const parameters = [template.spec.parameters ?? []].flat(); res.json({ @@ -356,7 +358,9 @@ export async function createRouter( .post('/v2/tasks', async (req, res) => { const templateName: string = req.body.templateName; const values: TemplaterValues = req.body.values; - const template = await entityClient.findTemplate(templateName); + const template = await entityClient.findTemplate(templateName, { + token: getBearerToken(req.headers.authorization), + }); let taskSpec; if (isAlpha1Template(template)) {