From 9506f2af73173777e7d35b263dcdcb68bb9bc521 Mon Sep 17 00:00:00 2001 From: Patrik Oldsberg Date: Tue, 17 Feb 2026 20:29:55 +0100 Subject: [PATCH] auth-backend: correct changelog Signed-off-by: Patrik Oldsberg --- .changeset/revert-dcr-token-expiration.md | 13 ------------- plugins/auth-backend/CHANGELOG.md | 10 ++++++++++ 2 files changed, 10 insertions(+), 13 deletions(-) delete mode 100644 .changeset/revert-dcr-token-expiration.md diff --git a/.changeset/revert-dcr-token-expiration.md b/.changeset/revert-dcr-token-expiration.md deleted file mode 100644 index 2e7c854d46..0000000000 --- a/.changeset/revert-dcr-token-expiration.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -'@backstage/plugin-auth-backend': patch ---- - -Removed the `auth.experimentalDynamicClientRegistration.tokenExpiration` config option. DCR tokens now use the default 1 hour expiration. - -If you need longer-lived access, use refresh tokens via the `offline_access` scope instead. DCR clients should already have the `offline_access` scope available. Enable refresh tokens by setting: - -```yaml -auth: - experimentalRefreshToken: - enabled: true -``` diff --git a/plugins/auth-backend/CHANGELOG.md b/plugins/auth-backend/CHANGELOG.md index f3e6940cb6..9f77de97e7 100644 --- a/plugins/auth-backend/CHANGELOG.md +++ b/plugins/auth-backend/CHANGELOG.md @@ -39,6 +39,16 @@ ### Patch Changes +- 7dc3dfe: Removed the `auth.experimentalDynamicClientRegistration.tokenExpiration` config option. DCR tokens now use the default 1 hour expiration. + + If you need longer-lived access, use refresh tokens via the `offline_access` scope instead. DCR clients should already have the `offline_access` scope available. Enable refresh tokens by setting: + + ```yaml + auth: + experimentalRefreshToken: + enabled: true + ``` + - 7455dae: Use node prefix on native imports - Updated dependencies - @backstage/plugin-catalog-node@2.0.0