Patrik Oldsberg
|
f8496730ab
|
auth-backend: make sure userEntityRef is always a full entity ref
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-01-20 10:01:34 +01:00 |
|
elonj
|
8143d941b8
|
ids will be name
Signed-off-by: elonj <elonj@spotify.com>
|
2022-01-19 10:04:51 -05:00 |
|
elonj
|
b7c1bb21ad
|
fixed GithubAuth tests
Signed-off-by: elonj <elonj@spotify.com>
|
2022-01-19 10:04:41 -05:00 |
|
elonj
|
d0ad9ebe22
|
auth providers will return entity ref as "sub" value
Signed-off-by: elonj <elonj@spotify.com>
|
2022-01-19 10:04:18 -05:00 |
|
Patrik Oldsberg
|
59a9309536
|
remove usage of @ts-ignore
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-01-18 11:19:01 +01:00 |
|
Dominik Schwank
|
619bc06613
|
feat(auth-backend): mark authHandler context as required parameter
Signed-off-by: Dominik Schwank <dominik.schwank@sda.se>
|
2022-01-17 14:35:30 +01:00 |
|
Adrian Barwicki
|
6e92ee6267
|
feat: add oauth2proxy provider
Signed-off-by: Adrian Barwicki <adrian.barwicki.extern@sda.se>
Signed-off-by: Dominik Schwank <dominik.schwank@sda.se>
|
2022-01-17 14:35:22 +01:00 |
|
Patrik Oldsberg
|
20ca7cfa5f
|
auth-backend: switch over to use auto secure cookies
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-01-10 17:35:02 +01:00 |
|
Johan Haals
|
618d78495c
|
Merge pull request #8825 from backstage/freben/a-tale-of-hyphens-and-braces
🧹 Got rid of the last brace-typed and hyphen-less params etc
|
2022-01-10 14:27:21 +01:00 |
|
Fredrik Adelöw
|
5333451def
|
Got rid of the last brace-typed and hyphen-less params etc
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
|
2022-01-10 09:48:12 +01:00 |
|
Fredrik Adelöw
|
9632cda521
|
Fix the last renmnants of the old copyright header
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
|
2022-01-09 22:10:52 +01:00 |
|
Fredrik Adelöw
|
78074ab1d6
|
review fixes
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
|
2022-01-03 12:25:32 +01:00 |
|
Fredrik Adelöw
|
761ff980f1
|
use only a sign-in resolver
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
|
2021-12-30 15:38:34 +01:00 |
|
Fredrik Adelöw
|
59c5c70bf7
|
first minor cleanups
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
|
2021-12-30 15:38:08 +01:00 |
|
Fabian Hippmann
|
1e932ee498
|
fix tsc errors
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
|
2021-12-30 15:38:08 +01:00 |
|
Fabian Hippmann
|
1756d252ce
|
update tests, add dependencies
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
|
2021-12-30 15:38:08 +01:00 |
|
Fabian Hippmann
|
876a5351d8
|
update documentation location
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
|
2021-12-30 15:38:08 +01:00 |
|
Fabian Hippmann
|
9fa77c4b91
|
feat: add gcp-iap first draft
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
|
2021-12-30 15:38:08 +01:00 |
|
Patrik Oldsberg
|
9120f5351d
|
Merge pull request #8660 from backstage/rugvip/refrain
auth-backend: always exchange and never return refresh tokens to clients
|
2021-12-28 20:20:02 +01:00 |
|
Patrik Oldsberg
|
77a5d0fb6f
|
auth-backend: let adapter populate identity token for auth0 and onelogin
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2021-12-28 17:37:55 +01:00 |
|
Patrik Oldsberg
|
c88cdacc1a
|
auth-backend: always exchange and never return refresh tokens to clients
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2021-12-28 17:30:00 +01:00 |
|
Patrik Oldsberg
|
2f26120a36
|
auth-backend: changeset and api report update for auth0 and onelogin
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2021-12-28 16:01:01 +01:00 |
|
Patrik Oldsberg
|
04b1d4be44
|
auth-backend: refactor onelogin to use sign-in resolver
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2021-12-28 15:26:36 +01:00 |
|
Patrik Oldsberg
|
b29d976330
|
auth-backend: refactor auth0 to use sign-in resolver
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2021-12-28 15:26:11 +01:00 |
|
Patrik Oldsberg
|
5ad4643977
|
Merge pull request #8633 from carlitose/fix/refresh_login_okta
fixing refresh token Okta provider #8632
|
2021-12-28 13:22:23 +01:00 |
|
Carlo Giuseppe Sergi
|
a9abafa9df
|
fixing refresh token okta provider
Signed-off-by: Carlo Giuseppe Sergi <carlo.sergi@klarna.com>
|
2021-12-28 11:03:08 +01:00 |
|
Patrik Oldsberg
|
62b3cea48d
|
Merge pull request #8592 from AmericanAirlines/fix-clear-text-cookie-codeql
fix: enforce cookie ssl in production
|
2021-12-27 19:13:59 +01:00 |
|
Colton Padden
|
7e45b03f4d
|
add msw intercept for graph.microsoft and test photo query response
Signed-off-by: Colton Padden <colton.padden@fastmail.com>
|
2021-12-23 10:57:36 -05:00 |
|
Colton Padden
|
f0f81f6cc7
|
remove got dependency from auth-backend
Signed-off-by: Colton Padden <colton.padden@fastmail.com>
|
2021-12-22 14:23:16 -05:00 |
|
Fidel Coria
|
5801adbd18
|
use authUrl for condition
Signed-off-by: Fidel Coria <fidel.coria@aa.com>
|
2021-12-22 10:47:36 -06:00 |
|
Fidel Coria
|
e3b11376cb
|
fix: enforce cookie ssl in production
Signed-off-by: Fidel Coria <fidel.coria@aa.com>
|
2021-12-22 10:24:30 -06:00 |
|
Patrik Oldsberg
|
24a67e3e2e
|
auth-backend: fix identity fallback to populate userEntityRef correctly
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2021-12-17 00:48:03 +01:00 |
|
Hasan Ozdemir
|
133769ea84
|
add links to docs for type BackstageSignInResult
Signed-off-by: Hasan Ozdemir <21654050+nodify-at@users.noreply.github.com>
|
2021-12-11 01:45:39 +01:00 |
|
Hasan Ozdemir
|
e0c63b37db
|
add missing documentation for OidcAuthResult
Signed-off-by: Hasan Ozdemir <21654050+nodify-at@users.noreply.github.com>
|
2021-12-09 21:38:14 +01:00 |
|
Hasan Ozdemir
|
abd6ff3430
|
improve exported type to include resolver and handlers for auth providers, add additional types to fix api-doc related warnings
Signed-off-by: Hasan Ozdemir <21654050+nodify-at@users.noreply.github.com>
|
2021-12-09 21:38:14 +01:00 |
|
Hasan Ozdemir
|
8e3363a1d8
|
export typescript types for OIDC provider
Signed-off-by: Hasan Ozdemir <21654050+nodify-at@users.noreply.github.com>
|
2021-12-09 11:46:36 +01:00 |
|
Johan Haals
|
dd77b5eb12
|
Merge pull request #8283 from backstage/mob/identity-api
core-plugin-api: stabilize IdentityApi
|
2021-12-08 14:29:03 +01:00 |
|
Fredrik Adelöw
|
986a5d869e
|
Merge pull request #8405 from backstage/freben/nounpack
Do not unpack arguments directly on exported items 🧹
|
2021-12-08 13:15:13 +01:00 |
|
Fredrik Adelöw
|
dcd1a0c3f4
|
Do not unpack arguments directly on exported items
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
|
2021-12-07 19:42:10 +01:00 |
|
Johan Haals
|
13ae212d21
|
Rename option from basicAuth to includeBasicAuth
Signed-off-by: Johan Haals <johan.haals@gmail.com>
|
2021-12-07 11:55:04 +01:00 |
|
Johan Haals
|
8f461e6043
|
auth-backend(fix): Add basicAuth option to OAuth provider
Signed-off-by: Johan Haals <johan.haals@gmail.com>
|
2021-12-07 10:59:52 +01:00 |
|
blam
|
11b7c39fb6
|
chore: added caching for successful profile retrieval
Signed-off-by: blam <ben@blam.sh>
|
2021-12-07 10:52:27 +01:00 |
|
Patrik Oldsberg
|
1154ec0017
|
auth-backend: decorateWithIdentity -> prepareBackstageIdentityResponse + API report fixes
Co-authored-by: blam <ben@blam.sh>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2021-12-06 17:23:01 +01:00 |
|
Patrik Oldsberg
|
73c73b71d1
|
auth: simplify types and reintroduce deprecated BackstageIdentity
Co-authored-by: Fredrik Adelöw <freben@gmail.com>
Co-authored-by: blam <ben@blam.sh>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2021-12-06 14:51:40 +01:00 |
|
blam
|
e0f5814037
|
chore: more code review comments
Signed-off-by: blam <ben@blam.sh>
|
2021-12-03 10:33:05 +01:00 |
|
blam
|
388fd9bb7f
|
chore: fixing some code review comments
Signed-off-by: blam <ben@blam.sh>
|
2021-12-03 10:21:01 +01:00 |
|
blam
|
acbb4cedd4
|
chore: fix derpy merge conflicts
Signed-off-by: blam <ben@blam.sh>
|
2021-12-03 10:08:04 +01:00 |
|
blam
|
3b39323f26
|
chore: revert some of the provider changes are they are handled in the OAuthAdapter now
Signed-off-by: blam <ben@blam.sh>
|
2021-12-02 13:33:47 +01:00 |
|
blam
|
11a90d6a79
|
chore: revert some of the handling
Signed-off-by: blam <ben@blam.sh>
|
2021-12-02 13:33:47 +01:00 |
|
blam
|
39645e56ac
|
chore: reworking the auth providers to decorate the identity from the token that is returned from the different providers
Co-authored-by: Johan Haals <johan.haals@gmail.com>
Signed-off-by: blam <ben@blam.sh>
|
2021-12-02 13:33:47 +01:00 |
|