Update .changeset/sharp-wombats-speak.md

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
This commit is contained in:
Patrik Oldsberg
2023-11-14 11:26:48 +01:00
committed by GitHub
parent 53c1681c3b
commit b4a9b5a2fe
+1 -24
View File
@@ -2,27 +2,4 @@
'@backstage/plugin-auth-backend': patch
---
Allow additional user-defined scopes for Okta auth in config yaml
Example `app-config.yaml` excerpt
```yml
auth:
environment: development
providers:
okta:
development:
clientId: ${AUTH_OKTA_CLIENT_ID}
clientSecret: ${AUTH_OKTA_CLIENT_SECRET}
audience: ${AUTH_OKTA_DOMAIN}
authServerId: ${AUTH_OKTA_AUTH_SERVER_ID} # Optional
idp: ${AUTH_OKTA_IDP} # Optional
# https://developer.okta.com/docs/reference/api/oidc/#scope-dependent-claims-not-always-returned
additionalScopes: groups # Optional
```
- Accept a new ` additionalScopes`` option during okta creation with `createAuthProviderIntegration`
- Passes the user-defined `additionalScopes` as an option to `OktaAuthProvider`
- Add `additionalScopes` as an option for `OktaAuthProvider`
- Set `scope` in `OktaAuthProvider` to the combined value of current scopes combined with the user-defined `additionalScopes` passed as an `option`
- Update the `start` and `refresh` methods to use the new combined `scope` from `OktaAuthProvider` rather than `scope` from the request
Added an optional `additionalScopes` configuration parameter to `okta` providers, that lets you add additional scopes on top of the default ones.