Merge pull request #9294 from backstage/rugvip/auth-refresh

auth-backend,core-app-api: GitHub auth refactor and fixes
2022-02-02 12:07:21 +01:00
parent 6acc8f7db7 40775bd263
commit 9888ccb678
12 changed files with 337 additions and 210 deletions
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Fixed a bug where providers that tracked the granted scopes through a cookie would not take failed authentication attempts into account.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Added support for storing static GitHub access tokens in cookies and using them to refresh the Backstage session.
@@ -0,0 +1,7 @@
+---
+'@backstage/core-app-api': patch
+---
+
+Switched out the `GithubAuth` implementation to use the common `OAuth2` implementation. This relies on the simultaneous change in `@backstage/plugin-auth-backend` that enabled access token storage in cookies rather than the current solution that's based on `LocalStorage`.
+
+> **NOTE:** Make sure you upgrade the `auth-backend` deployment before or at the same time as you deploy this change.