backend-plugin-api: auth refactor to issueServiceToken with required credentials + getOwnCredentials

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>

packages/backend-plugin-api/src/services/definitions/AuthService.ts

@@ -71,9 +71,10 @@ export interface AuthService {
     type: TType,
   ): credentials is BackstageCredentials<BackstagePrincipalTypes[TType]>;
 
+  getOwnCredentials(): Promise<BackstageCredentials<BackstageServicePrincipal>>;
+
   // TODO: should the caller provide the target plugin ID?
-  // TODO: how can we make it very difficult to forget to forward credentials
-  issueToken(options: {
-    forward?: BackstageCredentials;
+  issueServiceToken(options: {
+    forward: BackstageCredentials;
   }): Promise<{ token: string }>;
 }

packages/backend-plugin-api/src/services/definitions/HttpAuthService.ts

@@ -43,8 +43,8 @@ export interface HttpAuthService {
     BackstageCredentials<BackstageHttpAccessToPrincipalTypesMapping[TAllowed]>
   >;
 
-  requestHeaders(options?: {
-    forward?: BackstageCredentials;
+  requestHeaders(options: {
+    forward: BackstageCredentials;
   }): Promise<Record<string, string>>;
 
   issueUserCookie(res: Response): Promise<void>;