diff --git a/.changeset/wet-bikes-pull.md b/.changeset/wet-bikes-pull.md index dcc3c34890..1c1c98b253 100644 --- a/.changeset/wet-bikes-pull.md +++ b/.changeset/wet-bikes-pull.md @@ -2,4 +2,6 @@ '@backstage/plugin-permission-node': patch --- -Add ServerPermissionClient to check for backend-to-backend tokens +Add `ServerPermissionClient`, which implements `PermissionAuthorizer` from @backstage/plugin-permission-common. This implementation skips authorization entirely when the supplied token is a valid backend-to-backend token, thereby allowing backend-to-backend systems to communicate without authorization. + +The `ServerPermissionClient` should always be used over the standard `PermissionClient` in plugin backends.