From e2d96b7140aacd0a21d94f59c444fd36419ea838 Mon Sep 17 00:00:00 2001 From: Jonathan Roebuck Date: Wed, 1 Apr 2026 13:09:59 +0100 Subject: [PATCH] chore: address PR feedback on changesets Add @backstage/plugin-app to core-app-api changeset, reword to avoid internal export name, and downgrade auth-node bump to patch. Signed-off-by: Jonathan Roebuck Co-Authored-By: Claude Opus 4.6 (1M context) --- .changeset/auth-node-logout-result.md | 2 +- .changeset/core-app-api-logout-redirect.md | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.changeset/auth-node-logout-result.md b/.changeset/auth-node-logout-result.md index a571fde853..9eaf842f14 100644 --- a/.changeset/auth-node-logout-result.md +++ b/.changeset/auth-node-logout-result.md @@ -1,5 +1,5 @@ --- -'@backstage/plugin-auth-node': minor +'@backstage/plugin-auth-node': patch --- Added `OAuthAuthenticatorLogoutResult` type. The `logout` method on `OAuthAuthenticator` can now optionally return `{ logoutUrl }` to trigger a browser redirect after sign-out. This allows providers like Auth0 to clear their session cookies by redirecting to their logout endpoint. diff --git a/.changeset/core-app-api-logout-redirect.md b/.changeset/core-app-api-logout-redirect.md index 32aa405e94..63d9b6fa0c 100644 --- a/.changeset/core-app-api-logout-redirect.md +++ b/.changeset/core-app-api-logout-redirect.md @@ -1,5 +1,6 @@ --- '@backstage/core-app-api': patch +'@backstage/plugin-app': patch --- -The `DefaultAuthConnector` now checks for a `logoutUrl` in the logout response body. If the auth provider returns one (e.g. Auth0 federated logout), the browser is redirected to that URL to clear the provider's session cookies. This is backward compatible — providers that return an empty response are unaffected. +The default auth implementation now checks for a `logoutUrl` in the logout response body. If the auth provider returns one (e.g. Auth0 federated logout), the browser is redirected to that URL to clear the provider's session cookies. This is backward compatible — providers that return an empty response are unaffected.