diff --git a/.changeset/extragavent-fast-fly.md b/.changeset/extragavent-fast-fly.md index cb6348c0e7..68f5d7a848 100644 --- a/.changeset/extragavent-fast-fly.md +++ b/.changeset/extragavent-fast-fly.md @@ -1,8 +1,10 @@ --- '@backstage/plugin-badges': patch -'@backstage/plugin-badges-backend': patch +'@backstage/plugin-badges-backend': minor --- Fixing badges-backend plugin to get a token from the TokenManager instead of parsing the request header. Hence, it's now possible to disable the authMiddleware for the badges-backend plugin to expose publicly the badges. Implementing an obfuscation feature to protect an open badges endpoint from being enumerated. The feature is disabled by default and the change is compatible with the previous version. + +**BREAKING**: createRouter now require that a tokenManager, logger and identityApi are passed in as options.