scaffolder: include backstage identity token in requests

.changeset/bright-rules-know.md

@@ -6,6 +6,7 @@
 '@backstage/plugin-fossa': patch
 '@backstage/plugin-kubernetes': patch
 '@backstage/plugin-rollbar': minor
+'@backstage/plugin-scaffolder': minor
 '@backstage/plugin-scaffolder-backend': patch
 ---
 

plugins/scaffolder/dev/index.tsx

@@ -16,7 +16,7 @@
 
 import React from 'react';
 import { createDevApp } from '@backstage/dev-utils';
-import { discoveryApiRef } from '@backstage/core';
+import { discoveryApiRef, identityApiRef } from '@backstage/core';
 import { CatalogClient } from '@backstage/catalog-client';
 import { catalogApiRef } from '@backstage/plugin-catalog-react';
 import { TemplateIndexPage, TemplatePage } from '../src/plugin';
@@ -30,8 +30,9 @@ createDevApp()
   })
   .registerApi({
     api: scaffolderApiRef,
-    deps: { discoveryApi: discoveryApiRef },
-    factory: ({ discoveryApi }) => new ScaffolderApi({ discoveryApi }),
+    deps: { discoveryApi: discoveryApiRef, identityApi: identityApiRef },
+    factory: ({ discoveryApi, identityApi }) =>
+      new ScaffolderApi({ discoveryApi, identityApi }),
   })
   .addPage({
     path: '/create',

plugins/scaffolder/src/api.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  */
 
-import { createApiRef, DiscoveryApi } from '@backstage/core';
+import { createApiRef, DiscoveryApi, IdentityApi } from '@backstage/core';
 
 export const scaffolderApiRef = createApiRef<ScaffolderApi>({
   id: 'plugin.scaffolder.service',
@@ -23,9 +23,14 @@ export const scaffolderApiRef = createApiRef<ScaffolderApi>({
 
 export class ScaffolderApi {
   private readonly discoveryApi: DiscoveryApi;
+  private readonly identityApi: IdentityApi;
 
-  constructor(options: { discoveryApi: DiscoveryApi }) {
+  constructor(options: {
+    discoveryApi: DiscoveryApi;
+    identityApi: IdentityApi;
+  }) {
     this.discoveryApi = options.discoveryApi;
+    this.identityApi = options.identityApi;
   }
 
   /**
@@ -36,11 +41,13 @@ export class ScaffolderApi {
    * @param values Parameters for the template, e.g. name, description
    */
   async scaffold(templateName: string, values: Record<string, any>) {
+    const token = await this.identityApi.getIdToken();
     const url = `${await this.discoveryApi.getBaseUrl('scaffolder')}/v1/jobs`;
     const response = await fetch(url, {
       method: 'POST',
       headers: {
         'Content-Type': 'application/json',
+        ...(token && { Authorization: `Bearer ${token}` }),
       },
       body: JSON.stringify({ templateName, values: { ...values } }),
     });
@@ -56,8 +63,11 @@ export class ScaffolderApi {
   }
 
   async getJob(jobId: string) {
+    const token = await this.identityApi.getIdToken();
     const baseUrl = await this.discoveryApi.getBaseUrl('scaffolder');
     const url = `${baseUrl}/v1/job/${encodeURIComponent(jobId)}`;
-    return fetch(url).then(x => x.json());
+    return fetch(url, {
+      headers: token ? { Authorization: `Bearer ${token}` } : {},
+    }).then(x => x.json());
   }
 }

plugins/scaffolder/src/plugin.ts

@@ -18,6 +18,7 @@ import {
   createPlugin,
   createApiFactory,
   discoveryApiRef,
+  identityApiRef,
   createRoutableExtension,
 } from '@backstage/core';
 import { ScaffolderPage as ScaffolderPageComponent } from './components/ScaffolderPage';
@@ -30,8 +31,9 @@ export const scaffolderPlugin = createPlugin({
   apis: [
     createApiFactory({
       api: scaffolderApiRef,
-      deps: { discoveryApi: discoveryApiRef },
-      factory: ({ discoveryApi }) => new ScaffolderApi({ discoveryApi }),
+      deps: { discoveryApi: discoveryApiRef, identityApi: identityApiRef },
+      factory: ({ discoveryApi, identityApi }) =>
+        new ScaffolderApi({ discoveryApi, identityApi }),
     }),
   ],
   register({ router }) {