Commit Graph

21924 Commits

Author SHA1 Message Date
MT Lewis 10358e8b20 Merge pull request #9115 from backstage/vinzscam/authz-search-backend
Add AuthorizedSearchEngine tests
2022-01-25 18:26:05 +00:00
Vincenzo Scamporlino 9f394b231c Remove unused type
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
2022-01-25 16:31:29 +01:00
Vincenzo Scamporlino 074f36cc43 Import DocumentTypeInfo from common
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
2022-01-25 16:27:02 +01:00
Vincenzo Scamporlino 43f9d00c1e Add result-by-result filtering pagination test
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
2022-01-25 16:27:02 +01:00
Vincenzo Scamporlino 77cbb31883 Fix comments
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
2022-01-25 16:27:02 +01:00
Vincenzo Scamporlino e73ad9c89a Add AuthorizedSearchEngine tests
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
2022-01-25 16:27:02 +01:00
MT Lewis 01b27d547c create-app: add changeset for new search-backend createRouter params
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 14:35:38 +00:00
MT Lewis bd895e5812 search-backend: update changeset to minor and add migration steps
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 14:35:37 +00:00
MT Lewis c7ce3076d9 search-backend: skip result-by-result filtering when possible
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 14:35:37 +00:00
Vincenzo Scamporlino 12b9fb8b34 search-backend: initialize variable rather than declaring type
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:41 +00:00
Vincenzo Scamporlino bdbacb3b9c search-backend: handle missing type configuration in AuthorizedSearchEngine
The search-backend router ensures that all requested types are
configured, but since we don't know how this search engine will
be used, it's good to properly handle the case where an
unconfigured type is supplied.

Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:41 +00:00
Vincenzo Scamporlino 32e4645930 search-backend: validate page cursor when decoding
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:41 +00:00
MT Lewis 634abc1a41 search: move DocumentTypeInfo to search-common
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:40 +00:00
MT Lewis 1887a857c4 reduce detail in changesets
Co-authored-by: Eric Peterson <iamEAP@users.noreply.github.com>
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:40 +00:00
MT Lewis bbfbc755aa [wip] search-backend: result-by-result authorization
To do:
- add tests for AuthorizedSearchEngine
- update router tests
- add diff to changeset

Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:39 +00:00
MT Lewis 7da1b7c42a search-backend: add optional latency budget for authorized search backend
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:39 +00:00
MT Lewis 4682340457 techdocs-backend: support authorization in DefaultTechDocsCollator
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:39 +00:00
MT Lewis 4f5bde47e9 catalog-backend: support authorization in DefaultCatalogCollator
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:38 +00:00
MT Lewis f6389e9e5d search-backend-node: track document visibility permission by type in IndexBuilder
Tracking permissions by collator ensures that all the documents of a
given type are authorized using the same permission. This is not
critical for result-by-result authorization, but will likely be a
useful constraint when adding in-engine permission filtering to
specific search engines in the future.

Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:38 +00:00
MT Lewis 9a511968b1 search-common: add optional visibilityPermission property to DocumentCollator type
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:38 +00:00
MT Lewis 96cbebc629 search-common: add optional request options with token to SearchEngine#query
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:37 +00:00
MT Lewis b2e918fa0b search-common: add optional resourceRef field to IndexableDocument type
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-25 13:01:37 +00:00
Johan Haals 2d96be2810 Merge pull request #9134 from backstage/mob/release-manifest
github-actions: Add assemble release workflow
2022-01-25 13:34:16 +01:00
Johan Haals ea8158d252 Merge pull request #9159 from backstage/jhaals/cleanup-cli
cli: Remove `remove-plugin` command and lax option
2022-01-25 13:33:38 +01:00
Johan Haals f5aac9b35c Merge pull request #9155 from backstage/dependabot/npm_and_yarn/prettier-2.5.1
chore(deps-dev): bump prettier from 2.4.1 to 2.5.1
2022-01-25 10:57:36 +01:00
Johan Haals 1ddf6d9d5a Add changeset
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-25 10:35:09 +01:00
Johan Haals c52347c51f cli: Remove deprecated commands
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-25 10:32:01 +01:00
Patrik Oldsberg 4463b661af Merge pull request #9150 from backstage/dependabot/npm_and_yarn/html-webpack-plugin-5.5.0
chore(deps): bump html-webpack-plugin from 5.3.1 to 5.5.0
2022-01-25 09:17:43 +01:00
Johan Haals 3cd9123a32 chore: format with prettier
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-25 09:11:48 +01:00
Fredrik Adelöw 7081f1cb9f Merge pull request #9142 from backstage/freben/postcss-too
bump postcss past CVE-2021-23382
2022-01-25 08:48:34 +01:00
dependabot[bot] beff00764f chore(deps-dev): bump prettier from 2.4.1 to 2.5.1
Bumps [prettier](https://github.com/prettier/prettier) from 2.4.1 to 2.5.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/2.4.1...2.5.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-25 04:28:43 +00:00
dependabot[bot] b82292a61a chore(deps): bump html-webpack-plugin from 5.3.1 to 5.5.0
Bumps [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) from 5.3.1 to 5.5.0.
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jantimon/html-webpack-plugin/compare/v5.3.1...v5.5.0)

---
updated-dependencies:
- dependency-name: html-webpack-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-25 04:07:28 +00:00
Patrik Oldsberg 06562229bb Merge pull request #8716 from awanlin/topic/use-definition-name
Updated to add definition name support
2022-01-24 21:54:38 +01:00
Patrik Oldsberg 1ce0bf62b8 Merge pull request #9143 from backstage/Rugvip-patch-1
docs: fix typo in composability docs
2022-01-24 18:26:51 +01:00
Fredrik Adelöw 843f0347fb Merge pull request #9141 from backstage/freben/some-node
get almost all of node-fetch past CVE-2022-0235
2022-01-24 18:00:14 +01:00
Fredrik Adelöw e47a70b601 Merge pull request #9144 from backstage/freben/bump-json-schema
bump json-schema past CVE-2021-3918
2022-01-24 17:59:42 +01:00
Jussi Hallila 491409c014 Merge pull request #9094 from RoadieHQ/update-readme-tech-insights
Update tech-insight BE README.
2022-01-24 17:25:31 +01:00
Patrik Oldsberg 15910d70a6 Merge pull request #8945 from backstage/identity/reliable-methods
[Identity] Wait for implementation instead of throwing
2022-01-24 17:09:25 +01:00
Fredrik Adelöw 019460a9af bump json-schema past CVE-2021-3918
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-24 17:02:39 +01:00
Patrik Oldsberg 250f4a5091 docs: fix type in composability docs
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-24 17:00:54 +01:00
Fredrik Adelöw 296ad00b45 bump postcss past CVE-2021-23382
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-24 16:55:38 +01:00
Fredrik Adelöw 1ce84943fb get almost all of node-fetch past CVE-2022-0235
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-24 16:40:30 +01:00
Eric Peterson 2488a81e20 Merge pull request #8697 from backstage/search/filter-autocomplete
Introduce a <SearchFilter.Autocomplete /> Component
2022-01-24 16:36:55 +01:00
Johan Haals 232f66cfbf fix ref format
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-24 16:36:50 +01:00
Johan Haals e77926db84 checkout tag, yarn install
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-24 16:24:53 +01:00
Johan Haals 6880c9ac53 ensure that tagPath exists
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-24 16:23:24 +01:00
Jussi Hallila bbb6622752 Update tech-insight BE README.
Signed-off-by: Jussi Hallila <jussi@hallila.com>
2022-01-24 15:33:12 +01:00
Andre Wanlin 4ffc16b9c6 Updated useAsync import
Signed-off-by: Andre Wanlin <awanlin@rapidrtc.com>
2022-01-24 08:03:26 -06:00
Andre Wanlin 3efec40f74 Merge branch 'backstage:master' into topic/use-definition-name 2022-01-24 07:57:21 -06:00
Johan Haals 64700a10e4 Merge pull request #9140 from erihanse/patch-1
Update writing-custom-actions.md
2022-01-24 14:29:52 +01:00