tsc

plugins/auth-backend/src/lib/catalog/CatalogIdentityClient.ts

@@ -48,7 +48,10 @@ export class CatalogIdentityClient {
       filter[`metadata.annotations.${key}`] = value;
     }
 
-    const { items } = await this.catalogClient.getEntities(token, { filter });
+    const { items } = await this.catalogClient.getEntities(
+      { filter },
+      { token },
+    );
 
     if (items.length !== 1) {
       if (items.length > 1) {

plugins/auth-backend/src/providers/aws-alb/provider.test.ts

@@ -14,6 +14,7 @@
  * limitations under the License.
  */
 import { getVoidLogger } from '@backstage/backend-common';
+import { CatalogClient } from '@backstage/catalog-client';
 import express from 'express';
 import { JWT } from 'jose';
 
@@ -43,6 +44,9 @@ jest.mock('cross-fetch', () => ({
   },
 }));
 
+jest.mock('@backstage/catalog-client');
+const MockedCatalogClient = CatalogClient as jest.Mock<CatalogClient>;
+
 const identityResolutionCallbackMock = async (): Promise<AuthResponse<any>> => {
   return {
     backstageIdentity: {
@@ -67,15 +71,7 @@ beforeEach(() => {
 });
 
 describe('AwsALBAuthProvider', () => {
-  const catalogApi = {
-    /* eslint-disable-next-line @typescript-eslint/no-unused-vars */
-    addLocation: jest.fn(),
-    getEntities: jest.fn(),
-    getLocationByEntity: jest.fn(),
-    getLocationById: jest.fn(),
-    removeEntityByUid: jest.fn(),
-    getEntityByName: jest.fn(),
-  };
+  const catalogClient = new MockedCatalogClient();
 
   const mockResponseSend = jest.fn();
   const mockRequest = ({
@@ -95,7 +91,7 @@ describe('AwsALBAuthProvider', () => {
 
   describe('should transform to type OAuthResponse', () => {
     it('when JWT is valid and identity is resolved successfully', async () => {
-      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogApi, {
+      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogClient, {
         region: 'us-west-2',
         identityResolutionCallback: identityResolutionCallbackMock,
         issuer: 'foo',
@@ -121,7 +117,7 @@ describe('AwsALBAuthProvider', () => {
   });
   describe('should fail when', () => {
     it('JWT is missing', async () => {
-      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogApi, {
+      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogClient, {
         region: 'us-west-2',
         identityResolutionCallback: identityResolutionCallbackMock,
         issuer: 'foo',
@@ -133,7 +129,7 @@ describe('AwsALBAuthProvider', () => {
     });
 
     it('JWT is invalid', async () => {
-      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogApi, {
+      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogClient, {
         region: 'us-west-2',
         identityResolutionCallback: identityResolutionCallbackMock,
         issuer: 'foo',
@@ -149,7 +145,7 @@ describe('AwsALBAuthProvider', () => {
     });
 
     it('issuer is invalid', async () => {
-      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogApi, {
+      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogClient, {
         region: 'us-west-2',
         identityResolutionCallback: identityResolutionCallbackMock,
         issuer: 'foobar',
@@ -163,7 +159,7 @@ describe('AwsALBAuthProvider', () => {
     });
 
     it('identity resolution callback rejects', async () => {
-      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogApi, {
+      const provider = new AwsAlbAuthProvider(getVoidLogger(), catalogClient, {
         region: 'us-west-2',
         identityResolutionCallback: identityResolutionCallbackRejectedMock,
         issuer: 'foo',

plugins/auth-backend/src/providers/aws-alb/provider.ts

@@ -25,7 +25,7 @@ import { KeyObject } from 'crypto';
 import { Logger } from 'winston';
 import NodeCache from 'node-cache';
 import { JWT } from 'jose';
-import { CatalogApi } from '@backstage/catalog-client';
+import { CatalogClient } from '@backstage/catalog-client';
 
 const ALB_JWT_HEADER = 'x-amzn-oidc-data';
 /**
@@ -44,13 +44,13 @@ export const getJWTHeaders = (input: string) => {
 
 export class AwsAlbAuthProvider implements AuthProviderRouteHandlers {
   private logger: Logger;
-  private readonly catalogClient: CatalogApi;
+  private readonly catalogClient: CatalogClient;
   private options: AwsAlbAuthProviderOptions;
   private readonly keyCache: NodeCache;
 
   constructor(
     logger: Logger,
-    catalogClient: CatalogApi,
+    catalogClient: CatalogClient,
     options: AwsAlbAuthProviderOptions,
   ) {
     this.logger = logger;
@@ -108,14 +108,14 @@ export class AwsAlbAuthProvider implements AuthProviderRouteHandlers {
 
 export const createAwsAlbProvider = ({
   logger,
-  catalogApi,
+  catalogClient,
   config,
   identityResolver,
 }: AuthProviderFactoryOptions) => {
   const region = config.getString('region');
   const issuer = config.getOptionalString('iss');
   if (identityResolver !== undefined) {
-    return new AwsAlbAuthProvider(logger, catalogApi, {
+    return new AwsAlbAuthProvider(logger, catalogClient, {
       region,
       issuer,
       identityResolutionCallback: identityResolver,

plugins/auth-backend/src/providers/types.ts

@@ -122,7 +122,7 @@ export type ExperimentalIdentityResolver = (
    * An object containing information specific to the auth provider.
    */
   payload: object,
-  catalogApi: CatalogApi,
+  catalogClient: CatalogClient,
 ) => Promise<AuthResponse<any>>;
 
 export type AuthProviderFactoryOptions = {