backend-plugin-api: updated cookie auth implementation

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>

packages/backend-plugin-api/api-report.md

@@ -38,6 +38,8 @@ export interface AuthService {
     expiresAt: Date;
   }>;
   // (undocumented)
+  getNoneCredentials(): Promise<BackstageCredentials<BackstageNonePrincipal>>;
+  // (undocumented)
   getOwnServiceCredentials(): Promise<
     BackstageCredentials<BackstageServicePrincipal>
   >;
@@ -119,6 +121,7 @@ export interface BackendPluginRegistrationPoints {
 // @public (undocumented)
 export type BackstageCredentials<TPrincipal = unknown> = {
   $$type: '@backstage/BackstageCredentials';
+  expiresAt?: Date;
   principal: TPrincipal;
 };
 
@@ -311,11 +314,18 @@ export interface HttpAuthService {
     req: Request_2<any, any, any, any, any>,
     options?: {
       allow?: Array<TAllowed>;
-      allowedAuthMethods?: Array<'token' | 'cookie'>;
+      allowLimitedAccess?: boolean;
     },
   ): Promise<BackstageCredentials<BackstagePrincipalTypes[TAllowed]>>;
   // (undocumented)
-  issueUserCookie(res: Response_2): Promise<void>;
+  issueUserCookie(
+    res: Response_2,
+    options?: {
+      credentials?: BackstageCredentials<BackstageUserPrincipal>;
+    },
+  ): Promise<{
+    expiresAt: Date;
+  }>;
 }
 
 // @public (undocumented)

packages/backend-plugin-api/src/services/definitions/AuthService.ts

@@ -46,6 +46,8 @@ export type BackstageServicePrincipal = {
 export type BackstageCredentials<TPrincipal = unknown> = {
   $$type: '@backstage/BackstageCredentials';
 
+  expiresAt?: Date;
+
   principal: TPrincipal;
 };
 

packages/backend-plugin-api/src/services/definitions/HttpAuthService.ts

@@ -15,7 +15,11 @@
  */
 
 import { Request, Response } from 'express';
-import { BackstageCredentials, BackstagePrincipalTypes } from './AuthService';
+import {
+  BackstageCredentials,
+  BackstagePrincipalTypes,
+  BackstageUserPrincipal,
+} from './AuthService';
 
 /** @public */
 export interface HttpAuthService {
@@ -23,9 +27,14 @@ export interface HttpAuthService {
     req: Request<any, any, any, any, any>,
     options?: {
       allow?: Array<TAllowed>;
-      allowedAuthMethods?: Array<'token' | 'cookie'>;
+      allowLimitedAccess?: boolean;
     },
   ): Promise<BackstageCredentials<BackstagePrincipalTypes[TAllowed]>>;
 
-  issueUserCookie(res: Response): Promise<void>;
+  issueUserCookie(
+    res: Response,
+    options?: {
+      credentials?: BackstageCredentials<BackstageUserPrincipal>;
+    },
+  ): Promise<{ expiresAt: Date }>;
 }