paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
38,941 Commits 1 Branch 0 Tags
16c725e9396bed6ef2f511f75371ac6207c19fbb
Commit Graph

99 Commits

Author SHA1 Message Date
Ainhoa Larumbe 16c725e939 Complete code in router and fix tests 
Signed-off-by: Ainhoa Larumbe <ainhoaL@users.noreply.github.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-03-24 10:35:56 +00:00
Ainhoa Larumbe d524bf467b WIP createPermissionIntegrationRouter takes an array of ResourceOptions 
Signed-off-by: Ainhoa Larumbe <ainhoaL@users.noreply.github.com>
 2023-03-24 10:35:30 +00:00
Vincenzo Scamporlino 6e5e1b49c0 permission-node rename createIsAuthorized to createConditionAuthorizer 
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-03-21 16:40:49 +01:00
Vincenzo Scamporlino b79dee1cf8 permission-node: test createIsAuthorized 
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-03-21 16:37:55 +01:00
Harry Hogg 97be4a96ed Refactored createIsAuthorized to take a decision 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-03-21 16:37:55 +01:00
Harry Hogg 2b124bc24a Reworked authorization of conditions to use a single export by combing getRule and applyConditions into 
createIsAuthorized

Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-03-21 16:37:55 +01:00
Harry Hogg 277847e064 Reworked permission rules and filtering to follow similar pattern to catalog 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-03-21 16:37:53 +01:00
Patrik Oldsberg f758b99ea2 Merge pull request #16616 from backstage/docs/remove-backend-to-backend-references 
Docs: remove backend-to-backend references
 2023-02-28 13:55:54 +01:00
Vincenzo Scamporlino d4523f5b93 Merge pull request #16333 from backstage/pf/optional-get-resources 
createPermissionIntegrationRouter - optional getResources
 2023-02-27 16:28:02 +01:00
Vincenzo Scamporlino 37e9215c79 permission-node: improve service-to-service error url 
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-02-27 15:52:53 +01:00
Vincenzo Scamporlino 4c0ba1cfc7 permission-node: improve createPermissionIntegrationRouter docs 
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-02-27 15:20:08 +01:00
Vincenzo Scamporlino e837143bc9 permission-node: simplify api report 
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-02-27 11:30:05 +01:00
Patrik Oldsberg eb9252186f permission-node,kubernetes-backend: mark public API as public 
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
 2023-02-21 14:43:21 +01:00
Vincenzo Scamporlino 36e90ecdf1 permission-node: fix error message 
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-02-17 13:39:03 +01:00
Vincenzo Scamporlino 5632097f92 permission-node: make getResources optional 
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-02-17 10:50:38 +01:00
Vincenzo Scamporlino dbf36da3eb permission-node: improve api report for createPermissionIntegrationRouter 
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-02-14 17:22:17 +01:00
Vincenzo Scamporlino 85194da56c permission-node: make resources and rules optional in createPermissionIntegrationRouter 
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
 2023-02-14 17:12:28 +01:00
Harry Hogg 27a103ca07 Changed the createPermissionIntegrationRouter API to allow getResources to be optional 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2023-02-14 13:03:18 +00:00
Harry Hogg fd7fc3902e Updated MetaData wording to Metadata 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-17 17:45:16 +01:00
Harry Hogg a7e4adf169 Updated import location 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-17 17:00:10 +01:00
Harry Hogg 9335ad115e Exported types for the permission router metadata endpoint 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-12 08:21:57 +01:00
Harry Hogg bbbe968e10 Fixed allowing optional params outside of the toQuery and apply 
Signed-off-by: Harry Hogg <hhogg@spotify.com>

Co-authored-by: Mike Lewis <mlewis@spotify.com>
 2022-10-11 11:53:02 +01:00
Harry Hogg 78e7698e4b Removed unnecessary tupling of params 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-07 12:08:00 +01:00
Harry Hogg fa40df2bc7 Made changs to allow params and schemas to be defaulted and required only when there is params defined. 
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
Co-authored-by: Mike Lewis <mlewis@spotify.com>

Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-06 12:09:42 +01:00
Harry Hogg db63ce8b07 Rename schema to paramsSchema 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-06 09:36:54 +01:00
Harry Hogg 26e5513c32 Update API reports 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 15:57:04 +01:00
Harry Hogg 4eb0f6d23d Limited the permission rule parameters to JsonPrimatives and array of 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 13:24:33 +01:00
Harry Hogg fbc636c4a5 Use z.input to corrently type the input to correctly reflect optional fields 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:14:22 +01:00
Harry Hogg 445c5f41a5 Reworded and added missing parameter descriptions 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:14:20 +01:00
Harry Hogg 42fa9cdcdb Removed the parameters count from the permissions metadata endpoint 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:03:17 +01:00
Harry Hogg 755361681c Add explanation comment around the schema type and whay we need to remove the optional def for the schema 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:03:17 +01:00
Harry Hogg 1d4b847c98 Explicitly use the schema to infer the types for the permission rule 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:03:16 +01:00
Harry Hogg 6d447843fa Changing over permission rules params API to accept a single object 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:03:16 +01:00
Harry Hogg eec3f766f2 Output a JSON schema from the .well-known metadata endpoint 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:03:15 +01:00
Harry Hogg 9fe88c4fab Added parameter validation using the param schemas 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:03:15 +01:00
Harry Hogg e9b4191071 Added parameter scheamas to permission rules 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
 2022-10-04 12:03:15 +01:00
Fredrik Adelöw aaab1e34da Fix linting errors after #13392 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2022-08-30 13:44:09 +02:00
Fredrik Adelöw 9212439d15 just some more use of setupRequestMockHandlers 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2022-08-24 11:26:12 +02:00
Joon Park 58426f9c0f Create permission aggregation endpoints (#11695) 
* Create permission aggregation endpoints

Signed-off-by: Joon Park <joonp@spotify.com>

* Spelling

Signed-off-by: Joon Park <joonp@spotify.com>

* Refactor permission metadata aggregation into one endpoint

Signed-off-by: Joe Porpeglia <josephp@spotify.com>

* Change parameter field shape

Signed-off-by: Joon Park <joonp@spotify.com>

Co-authored-by: Joe Porpeglia <josephp@spotify.com>
 2022-06-10 11:32:28 +01:00
Joe Porpeglia 90754d4fa9 Remove strict validation from PermissionCriteria schemas 
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
 2022-04-18 12:38:29 -04:00
Vincenzo Scamporlino 63902fcc17 PermissionEvaluator: rename query to authorizeConditional 
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
 2022-04-08 12:29:00 +02:00
Vincenzo Scamporlino 2903c1fd5d Move PolicyQuery to permission-node 
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
 2022-04-08 12:28:59 +02:00
Vincenzo Scamporlino 8960a2bfed Split PermissionClient#authorize 
Co-authored-by: Mike Lewis <mtlewis@users.noreply.github.com>
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
 2022-04-08 12:28:59 +02:00
MT Lewis 8012ac46a0 permissions: ensure returned conditions match permission in PermissionPolicy#handle (#10075) 
* permission-node: fix signature of permission rule in test suites

Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>

* permission-common: add isPermission helper for comparing permissions

Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>

* permission-node: adjust createConditionExports for more type safety

Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>

* permissions: add resourceType property to PermissionCondition and PermissionRule

Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>

* catalog: handle changes to PermissionCondition and PermissionRule types

Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>

* catalog-backend: avoid re-exporting alpha import

cf. https://github.com/backstage/backstage/pull/10128

Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>

* Update changeset

Signed-off-by: Joe Porpeglia <josephp@spotify.com>

* Resolve api-report conflict

Signed-off-by: Joon Park <joonp@spotify.com>

Co-authored-by: Joe Porpeglia <josephp@spotify.com>
Co-authored-by: Joon Park <joonp@spotify.com>
 2022-03-28 11:06:38 +01:00
Joe Porpeglia 0b98a49509 Rename policy input type 
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
 2022-03-25 10:02:46 -04:00
Joe Porpeglia e43290ce96 Rename permission backend request and response types 
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
 2022-03-25 10:02:46 -04:00
Joe Porpeglia 970814ed38 Move policy decision types to permission-common 
Co-authored-by: Mike Lewis <mtlewis@users.noreply.github.com>
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
 2022-03-25 10:02:46 -04:00
Joe Porpeglia ac0a6cb827 Introduce PermissionMessageBatch utility type. Rename Identified type to IdentifiedPermissionMessage. 
Co-authored-by: Mike Lewis <mtlewis@users.noreply.github.com>
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
 2022-03-25 10:02:46 -04:00
Mike Lewis 899d38ea68 permission-common: add utility types for creating and refining Permissions 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2022-03-22 14:32:38 -04:00
Vincenzo Scamporlino 7e0a0109bf Export permission criteria utilities 
Signed-off-by: Vincenzo Scamporlino <me@vinzscam.dev>
 2022-03-01 12:44:06 +01:00