Commit Graph

524 Commits

Author SHA1 Message Date
Patrik Oldsberg f8496730ab auth-backend: make sure userEntityRef is always a full entity ref
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-20 10:01:34 +01:00
elonj 8143d941b8 ids will be name
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:51 -05:00
elonj b7c1bb21ad fixed GithubAuth tests
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:41 -05:00
elonj d0ad9ebe22 auth providers will return entity ref as "sub" value
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:18 -05:00
Patrik Oldsberg 59a9309536 remove usage of @ts-ignore
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-18 11:19:01 +01:00
Dominik Schwank 619bc06613 feat(auth-backend): mark authHandler context as required parameter
Signed-off-by: Dominik Schwank <dominik.schwank@sda.se>
2022-01-17 14:35:30 +01:00
Adrian Barwicki 6e92ee6267 feat: add oauth2proxy provider
Signed-off-by: Adrian Barwicki <adrian.barwicki.extern@sda.se>
Signed-off-by: Dominik Schwank <dominik.schwank@sda.se>
2022-01-17 14:35:22 +01:00
Patrik Oldsberg 20ca7cfa5f auth-backend: switch over to use auto secure cookies
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-10 17:35:02 +01:00
Johan Haals 618d78495c Merge pull request #8825 from backstage/freben/a-tale-of-hyphens-and-braces
🧹  Got rid of the last brace-typed and hyphen-less params etc
2022-01-10 14:27:21 +01:00
Fredrik Adelöw 5333451def Got rid of the last brace-typed and hyphen-less params etc
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-10 09:48:12 +01:00
Fredrik Adelöw 9632cda521 Fix the last renmnants of the old copyright header
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-09 22:10:52 +01:00
Fredrik Adelöw 78074ab1d6 review fixes
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-03 12:25:32 +01:00
Fredrik Adelöw 761ff980f1 use only a sign-in resolver
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-12-30 15:38:34 +01:00
Fredrik Adelöw 59c5c70bf7 first minor cleanups
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-12-30 15:38:08 +01:00
Fabian Hippmann 1e932ee498 fix tsc errors
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
2021-12-30 15:38:08 +01:00
Fabian Hippmann 1756d252ce update tests, add dependencies
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
2021-12-30 15:38:08 +01:00
Fabian Hippmann 876a5351d8 update documentation location
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
2021-12-30 15:38:08 +01:00
Fabian Hippmann 9fa77c4b91 feat: add gcp-iap first draft
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
2021-12-30 15:38:08 +01:00
Patrik Oldsberg 9120f5351d Merge pull request #8660 from backstage/rugvip/refrain
auth-backend: always exchange and never return refresh tokens to clients
2021-12-28 20:20:02 +01:00
Patrik Oldsberg 77a5d0fb6f auth-backend: let adapter populate identity token for auth0 and onelogin
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-28 17:37:55 +01:00
Patrik Oldsberg c88cdacc1a auth-backend: always exchange and never return refresh tokens to clients
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-28 17:30:00 +01:00
Patrik Oldsberg 2f26120a36 auth-backend: changeset and api report update for auth0 and onelogin
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-28 16:01:01 +01:00
Patrik Oldsberg 04b1d4be44 auth-backend: refactor onelogin to use sign-in resolver
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-28 15:26:36 +01:00
Patrik Oldsberg b29d976330 auth-backend: refactor auth0 to use sign-in resolver
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-28 15:26:11 +01:00
Patrik Oldsberg 5ad4643977 Merge pull request #8633 from carlitose/fix/refresh_login_okta
fixing refresh token Okta provider #8632
2021-12-28 13:22:23 +01:00
Carlo Giuseppe Sergi a9abafa9df fixing refresh token okta provider
Signed-off-by: Carlo Giuseppe Sergi <carlo.sergi@klarna.com>
2021-12-28 11:03:08 +01:00
Patrik Oldsberg 62b3cea48d Merge pull request #8592 from AmericanAirlines/fix-clear-text-cookie-codeql
fix: enforce cookie ssl in production
2021-12-27 19:13:59 +01:00
Colton Padden 7e45b03f4d add msw intercept for graph.microsoft and test photo query response
Signed-off-by: Colton Padden <colton.padden@fastmail.com>
2021-12-23 10:57:36 -05:00
Colton Padden f0f81f6cc7 remove got dependency from auth-backend
Signed-off-by: Colton Padden <colton.padden@fastmail.com>
2021-12-22 14:23:16 -05:00
Fidel Coria 5801adbd18 use authUrl for condition
Signed-off-by: Fidel Coria <fidel.coria@aa.com>
2021-12-22 10:47:36 -06:00
Fidel Coria e3b11376cb fix: enforce cookie ssl in production
Signed-off-by: Fidel Coria <fidel.coria@aa.com>
2021-12-22 10:24:30 -06:00
Patrik Oldsberg 24a67e3e2e auth-backend: fix identity fallback to populate userEntityRef correctly
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-17 00:48:03 +01:00
Hasan Ozdemir 133769ea84 add links to docs for type BackstageSignInResult
Signed-off-by: Hasan Ozdemir <21654050+nodify-at@users.noreply.github.com>
2021-12-11 01:45:39 +01:00
Hasan Ozdemir e0c63b37db add missing documentation for OidcAuthResult
Signed-off-by: Hasan Ozdemir <21654050+nodify-at@users.noreply.github.com>
2021-12-09 21:38:14 +01:00
Hasan Ozdemir abd6ff3430 improve exported type to include resolver and handlers for auth providers, add additional types to fix api-doc related warnings
Signed-off-by: Hasan Ozdemir <21654050+nodify-at@users.noreply.github.com>
2021-12-09 21:38:14 +01:00
Hasan Ozdemir 8e3363a1d8 export typescript types for OIDC provider
Signed-off-by: Hasan Ozdemir <21654050+nodify-at@users.noreply.github.com>
2021-12-09 11:46:36 +01:00
Johan Haals dd77b5eb12 Merge pull request #8283 from backstage/mob/identity-api
core-plugin-api: stabilize IdentityApi
2021-12-08 14:29:03 +01:00
Fredrik Adelöw 986a5d869e Merge pull request #8405 from backstage/freben/nounpack
Do not unpack arguments directly on exported items 🧹
2021-12-08 13:15:13 +01:00
Fredrik Adelöw dcd1a0c3f4 Do not unpack arguments directly on exported items
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-12-07 19:42:10 +01:00
Johan Haals 13ae212d21 Rename option from basicAuth to includeBasicAuth
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2021-12-07 11:55:04 +01:00
Johan Haals 8f461e6043 auth-backend(fix): Add basicAuth option to OAuth provider
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2021-12-07 10:59:52 +01:00
blam 11b7c39fb6 chore: added caching for successful profile retrieval
Signed-off-by: blam <ben@blam.sh>
2021-12-07 10:52:27 +01:00
Patrik Oldsberg 1154ec0017 auth-backend: decorateWithIdentity -> prepareBackstageIdentityResponse + API report fixes
Co-authored-by: blam <ben@blam.sh>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-06 17:23:01 +01:00
Patrik Oldsberg 73c73b71d1 auth: simplify types and reintroduce deprecated BackstageIdentity
Co-authored-by: Fredrik Adelöw <freben@gmail.com>
Co-authored-by: blam <ben@blam.sh>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-12-06 14:51:40 +01:00
blam e0f5814037 chore: more code review comments
Signed-off-by: blam <ben@blam.sh>
2021-12-03 10:33:05 +01:00
blam 388fd9bb7f chore: fixing some code review comments
Signed-off-by: blam <ben@blam.sh>
2021-12-03 10:21:01 +01:00
blam acbb4cedd4 chore: fix derpy merge conflicts
Signed-off-by: blam <ben@blam.sh>
2021-12-03 10:08:04 +01:00
blam 3b39323f26 chore: revert some of the provider changes are they are handled in the OAuthAdapter now
Signed-off-by: blam <ben@blam.sh>
2021-12-02 13:33:47 +01:00
blam 11a90d6a79 chore: revert some of the handling
Signed-off-by: blam <ben@blam.sh>
2021-12-02 13:33:47 +01:00
blam 39645e56ac chore: reworking the auth providers to decorate the identity from the token that is returned from the different providers
Co-authored-by: Johan Haals <johan.haals@gmail.com>
Signed-off-by: blam <ben@blam.sh>
2021-12-02 13:33:47 +01:00