paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 33 Packages Projects Releases Wiki Activity
19,600 Commits 1 Branch 0 Tags
54989b671d0c85aed74ffc5d10b5254b2587980e
Commit Graph

668 Commits

Author SHA1 Message Date
Fredrik Adelöw 54989b671d Fix a potential crash in the log redaction code 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2021-12-02 10:10:34 +01:00
Fredrik Adelöw 6b500622d5 remove more cross-fetch usage in backends 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2021-12-01 16:51:05 +01:00
MT Lewis 456bcce6ca Merge pull request #7943 from backstage/natasha/b2b-auth 
Support backend to backend authentication
 2021-11-26 15:31:52 +00:00
MT Lewis a8eeaa13b4 backend-common: refactor away namespace usage in ServerTokenManager 
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-26 13:38:32 +00:00
MT Lewis 1cad4e54ca backend-common: additional api-report comments and tags 
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-26 12:24:48 +00:00
MT Lewis 73bff921fd backend-common: update api-report 
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-26 12:16:38 +00:00
MT Lewis 54eaeddaf1 backend-common: move NoopTokenManager into ServerTokenManager namespace 
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-26 12:16:38 +00:00
MT Lewis 10d0109d2e backend-common: extract NoopTokenManager from ServerTokenManager 
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-26 12:01:11 +00:00
MT Lewis 5510cee039 backend-common: stop accepting self-reported pluginId in ServerTokenManager 
Until we have a solution for assigning plugin/backend identities in a
way that's not open to impersonation, we can't build on top of this
information, so it's better to leave it out for now.

Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-26 10:23:57 +00:00
MT Lewis 4e6b2319a2 backend-common: include self-reported pluginId in backend token 
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-25 18:58:58 +00:00
MT Lewis 189f7f8a72 backend-common: allow for multiple signing keys in ServerTokenManager 
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-25 18:42:07 +00:00
MT Lewis 51608d2021 backend-common: bits->bytes in config schema comment 
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2021-11-25 18:16:54 +00:00
github-actions[bot] ef34f5de7b Version Packages 2021-11-25 12:40:52 +00:00
Mike Lewis 40ea710c14 backend-common: add api doc comments 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-23 18:22:53 +00:00
Mike Lewis 4b6de2f872 backend-common: remove 'Server' from TokenManager method names 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-23 18:12:28 +00:00
Mike Lewis 8a001f8202 backend-common: TokenManager throws for invalid tokens rather than returning boolean 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-23 17:55:47 +00:00
Mike Lewis f38dff4085 backend-common: tests validating interop of multiple token managers 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-23 14:58:48 +00:00
Mike Lewis 8cb1c4d17c backend-common: rename config block from authorization to auth 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-23 14:41:33 +00:00
Mike Lewis 42b01ee725 backend-common: import ConfigReader from @backstage/config 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-23 13:57:38 +00:00
Mike Lewis db1befcf39 backend-common: make secret required if authorization config block is provided 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-23 13:56:07 +00:00
Mike Lewis ef9dfd3440 backend-common: leave ConfigReader to throw errors when config is missing in ServerTokenManager 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-23 13:54:04 +00:00
Mike Lewis 14a6c46dff Merge remote-tracking branch 'origin/master' into natasha/b2b-auth 
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>
 2021-11-22 18:22:57 +00:00
Nataliya Issayeva 0f5744a5a2 Mark auth secret as secret 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:57:53 -08:00
Nataliya Issayeva 640ba82ca6 Update api reports 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:57:53 -08:00
Nataliya Issayeva 83aa387b62 Default to noop tokenManager and no backend secret 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:57:53 -08:00
Nataliya Issayeva c35abaadee Clean up tests a bit 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:57:52 -08:00
Nataliya Issayeva fca908a7d6 Move IdentityClient back to auth-backend 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:56:43 -08:00
Nataliya Issayeva b38d77f4f0 Change AuthIdentityTokenManager to ServerTokenManager 
Co-authored-by: Joe Porpeglia <joeporpeglia@users.noreply.github.com>
Co-authored-by: Tim Hansen <timbonicus@gmail.com>
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:56:42 -08:00
Nataliya Issayeva fa6a9b797f Update AuthIdentityTokenManager tests 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:56:42 -08:00
Nataliya Issayeva 8fa1098cd5 Handle optionally set backend auth secret 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:55:26 -08:00
Nataliya Issayeva 8ceffe5f98 Use backend secret from config 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:55:26 -08:00
Nataliya Issayeva 7589795798 Use correct JWT type and algorithm 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:55:26 -08:00
Nataliya Issayeva 2533294ec1 Static create and private constructor not really needed 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:55:26 -08:00
Nataliya Issayeva 1b2bd0ec01 Add basic tests 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:55:26 -08:00
Nataliya Issayeva f3d9de436f Make tokenManager constructor private and add static create method 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:55:26 -08:00
Nataliya Issayeva c4bdd04515 Use and validate JWT for servers 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:55:26 -08:00
Nataliya Issayeva 7b4f1ed0b9 Add TODOs 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:51:42 -08:00
Nataliya Issayeva 4f066c3be6 Inject tokenManager into plugin environment 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:51:42 -08:00
Nataliya Issayeva 883b9ad29f Use IdentityClient to validate frontend tokens 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:51:42 -08:00
Nataliya Issayeva f96679d0e6 Move IdentityClient to backend-common 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:51:42 -08:00
Nataliya Issayeva e7e55cdce1 Add TokenManager interface and basic implementation 
Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
 2021-11-18 07:51:41 -08:00
Otto Sichert b23bc7f9c3 Change default port of backend to 7007 due to MacOS Control Center update 
Signed-off-by: Otto Sichert <git@ottosichert.de>
 2021-11-18 16:45:57 +01:00
github-actions[bot] 99bf179ccf Version Packages 2021-11-18 11:52:08 +00:00
Ben Lambert e72b1b83c8 Merge pull request #8122 from backstage/blam/sec/dockerode 
Bumping testcontainers + dockerode
 2021-11-18 12:18:17 +01:00
Fredrik Adelöw 0ebc659c17 Merge pull request #7822 from bomkamp/add-global-pg-plugin-schema-flag 
Adding config prop `usePluginSchemas` to allow plugins using the `pg`…
 2021-11-18 11:23:21 +01:00
blam 92f87a9a16 chore: fixing dockerode 
Signed-off-by: blam <ben@blam.sh>
 2021-11-18 10:52:37 +01:00
blam fb4377ac53 chore: updating the bump in package.jsons too as it a security risk for the ssh2 packages 
Signed-off-by: blam <ben@blam.sh>
 2021-11-17 21:32:43 +01:00
Fredrik Adelöw d701630972 Merge pull request #8083 from backstage/freben/abort-urlreader 
Add `AbortSignal` support to `UrlReader`
 2021-11-17 13:16:04 +01:00
Johan Haals 1e99c73c75 config-loader: Change loadConfig return type to object 
Signed-off-by: Johan Haals <johan.haals@gmail.com>
 2021-11-17 11:26:35 +01:00
Fredrik Adelöw 01f74aa878 Add AbortSignal support to UrlReader 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2021-11-17 11:01:07 +01:00