From f80c7232aeb38e7079d627104498e41dbbea5832 Mon Sep 17 00:00:00 2001 From: MT Lewis Date: Tue, 21 Dec 2021 10:45:16 +0000 Subject: [PATCH] permission-node: expand ServerPermissionClient changeset Signed-off-by: MT Lewis --- .changeset/wet-bikes-pull.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.changeset/wet-bikes-pull.md b/.changeset/wet-bikes-pull.md index dcc3c34890..1c1c98b253 100644 --- a/.changeset/wet-bikes-pull.md +++ b/.changeset/wet-bikes-pull.md @@ -2,4 +2,6 @@ '@backstage/plugin-permission-node': patch --- -Add ServerPermissionClient to check for backend-to-backend tokens +Add `ServerPermissionClient`, which implements `PermissionAuthorizer` from @backstage/plugin-permission-common. This implementation skips authorization entirely when the supplied token is a valid backend-to-backend token, thereby allowing backend-to-backend systems to communicate without authorization. + +The `ServerPermissionClient` should always be used over the standard `PermissionClient` in plugin backends.