Version Packages

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2023-09-19 14:15:46 +00:00
parent 2aed4037b0
commit b228d7d9c2
657 changed files with 9248 additions and 2495 deletions
@@ -1,5 +1,46 @@
 # @backstage/plugin-auth-node

+## 0.3.0
+
+### Minor Changes
+
+- 8513cd7d00e3: Introduced a new system for building auth providers for `@backstage/plugin-auth-backend`, which both increases the amount of code re-use across providers, and also works better with the new backend system.
+
+  Many existing types have been moved from `@backstage/plugin-auth-backend` in order to avoid a direct dependency on the plugin from modules.
+
+  Auth provider integrations are now primarily implemented through a pattern of creating "authenticators", which are in turn specific to each kind of integrations. Initially there are two types: `createOAuthAuthenticator` and `createProxyAuthenticator`. These come paired with functions that let you create the corresponding route handlers, `createOAuthRouteHandlers` and `createProxyAuthRouteHandlers`, as well as provider factories, `createOAuthProviderFactory` and `createProxyAuthProviderFactory`. This new authenticator pattern allows the sign-in logic to be separated from the auth integration logic, allowing it to be completely re-used across all providers of the same kind.
+
+  The new provider factories also implement a new declarative way to configure sign-in resolvers, rather than configuration through code. Sign-in resolvers can now be configured through the `resolvers` configuration key, where the first resolver that provides an identity will be used, for example:
+
+  ```yaml
+  auth:
+    providers:
+      google:
+        development:
+          clientId: ...
+          clientSecret: ...
+          signIn:
+            resolvers:
+              - resolver: emailMatchingUserEntityAnnotation
+              - resolver: emailLocalPartMatchingUserEntityName
+  ```
+
+  These configurable resolvers are created with a new `createSignInResolverFactory` function, which creates a sign-in resolver factory, optionally with an options schema that will be used both when configuring the sign-in resolver through configuration and code.
+
+  The internal helpers from `@backstage/plugin-auth-backend` that were used to implement auth providers using passport strategies have now also been made available as public API, through `PassportHelpers` and `PassportOAuthAuthenticatorHelper`.
+
+### Patch Changes
+
+- 18619f793c94: The `BackstageIdentityResponse` interface now has an optional `expiresInSeconds` field that can be used to signal session expiration. The `prepareBackstageIdentityResponse` utility will now also read the expiration from the provided token, and include it in the response.
+- Updated dependencies
+  - @backstage/backend-common@0.19.5
+  - @backstage/config@1.1.0
+  - @backstage/catalog-client@1.4.4
+  - @backstage/catalog-model@1.4.2
+  - @backstage/errors@1.2.2
+  - @backstage/types@1.1.1
+  - @backstage/backend-plugin-api@0.6.3
+
 ## 0.3.0-next.3

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "@backstage/plugin-auth-node",
-  "version": "0.3.0-next.3",
+  "version": "0.3.0",
  "main": "src/index.ts",
  "types": "src/index.ts",
  "license": "Apache-2.0",