From e1ebaeb332fe8d8da4c3574e7c107930cb1d4556 Mon Sep 17 00:00:00 2001
From: Tyler Davis <tylerd@canva.com>
Date: Thu, 18 Aug 2022 15:00:52 +1000
Subject: [PATCH] Add the JWT to the CloudflareAccessResult

Signed-off-by: Tyler Davis <tylerd@canva.com>
---
 .changeset/rich-cooks-camp.md                                | 5 +++++
 .../auth-backend/src/providers/cloudflare-access/provider.ts | 2 ++
 2 files changed, 7 insertions(+)
 create mode 100644 .changeset/rich-cooks-camp.md

diff --git a/.changeset/rich-cooks-camp.md b/.changeset/rich-cooks-camp.md
new file mode 100644
index 0000000000..04d86033f7
--- /dev/null
+++ b/.changeset/rich-cooks-camp.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Cloudflare Access Provider: Add JWT to CloudflareAccessResult
diff --git a/plugins/auth-backend/src/providers/cloudflare-access/provider.ts b/plugins/auth-backend/src/providers/cloudflare-access/provider.ts
index a2c16fcebf..38205c9cff 100644
--- a/plugins/auth-backend/src/providers/cloudflare-access/provider.ts
+++ b/plugins/auth-backend/src/providers/cloudflare-access/provider.ts
@@ -153,6 +153,7 @@ export type CloudflareAccessResult = {
   claims: CloudflareAccessClaims;
   cfIdentity: CloudflareAccessIdentityProfile;
   expiresInSeconds?: number;
+  jwt: string;
 };
 
 /**
@@ -277,6 +278,7 @@ export class CloudflareAccessAuthProvider implements AuthProviderRouteHandlers {
         claims,
         cfIdentity,
         expiresInSeconds: claims.exp - claims.iat,
+        jwt,
       };
       this.cache?.set(`${CACHE_PREFIX}/${sub}`, JSON.stringify(cfAccessResult));
       return cfAccessResult;