From 8b640a01852cab66aad52d71c2604e4cdae617cc Mon Sep 17 00:00:00 2001 From: secustor Date: Wed, 27 Mar 2024 15:46:36 +0100 Subject: [PATCH] docs(tutorials/auth-service-migration): add snippet how to activate guest login outside of dev environments Signed-off-by: secustor --- docs/tutorials/auth-service-migration.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/tutorials/auth-service-migration.md b/docs/tutorials/auth-service-migration.md index c3661d1f61..9e2633a12a 100644 --- a/docs/tutorials/auth-service-migration.md +++ b/docs/tutorials/auth-service-migration.md @@ -59,6 +59,15 @@ auth: guest: null ``` +If you still want to enable guest login in non-development environments, you can use this config snippet: + +```yaml +auth: + providers: + guest: + dangerouslyAllowOutsideDevelopment: true +``` + That's all you need for guest authentication! The default `SignInPage` from `@backstage/core-components` will detect and use the guest provider if it's enabled. Since the default auth policy is in effect for all plugins running in the new backend system, you do not need to worry about whether individual plugins are protected or not. The impact of plugins not yet being migrated is that they may have endpoints that should allow unauthenticated requests, but are now blocked by the default auth policy. If you want to temporarily work around this for individual plugins, you can install a module for the plugin that adds the required policy via the [http router service](../backend-system/core-services/http-router.md).