e2cf0662eb
Warn if permission backend is used without permissions enabled
...
Signed-off-by: Joe Porpeglia <josephp@spotify.com >
2022-02-14 15:34:24 -05:00
e66bb84798
Require at least one item in allOf/anyOf criteria
...
Signed-off-by: Joe Porpeglia <josephp@spotify.com >
2022-02-11 11:08:56 -05:00
bf5222bfa1
moved over IdentityClient as well
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2022-02-09 19:32:59 +01:00
86b40d464f
move over BackstageSignInResult, BackstageIdentityResponse, BackstageUserIdentity
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2022-02-09 17:10:18 +01:00
b3f3e42036
move IdentityClient.getBearerToken
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2022-02-09 10:38:12 +01:00
0ae4f4cc82
permissions: rename authorize request and response types to avoid envelope suffix
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2022-01-13 17:51:06 +00:00
b768259244
permission-backend: wrap authorize request and response batches in envelope
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2022-01-13 17:51:05 +00:00
1fb2e0e0b4
permission-node: wrap request and response arrays in object
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2022-01-13 13:04:06 +00:00
ef291ff985
permission-backend: move dataloader to router
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2022-01-13 13:04:05 +00:00
85b9e1ae60
permission-backend: use dataloader in PermissionIntegrationClient
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2022-01-13 13:04:05 +00:00
8e72b573aa
permission-node: switch to array for getResources return value
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2022-01-13 13:04:04 +00:00
706b6c29e9
permission-node: allow batch retrieval of resources in /apply-conditions
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2022-01-13 13:04:04 +00:00
b66704db18
permission-node: accept batched requests in /apply-conditions
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2022-01-13 13:04:03 +00:00
8c337a480f
chore: Update types and API reports
...
Signed-off-by: Johan Haals <johan.haals@gmail.com >
2021-12-02 13:32:35 +01:00
450ca92330
permissions: change permission integration route to use /.well-known prefix
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2021-12-01 15:52:08 +00:00
e7851efa9e
permission-node: rename and adjust policy return type to reduce nesting
...
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com >
2021-11-30 15:21:28 +00:00
2e5a67b77d
permission-backend: replace cross-fetch with node-fetch
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-25 09:50:24 +00:00
2bacc8be34
permission-backend: expand router test suite
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 16:46:19 +00:00
fafb482d73
permission-backend: add request validation
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 15:27:42 +00:00
12b0eebfb5
permission-backend: pass in identity client
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 15:18:50 +00:00
b5e43875d5
permission-backend: enumerate exports in service index
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:47:51 +00:00
8f83584706
permission-backend: remove standaloneServer, run.ts and AllowAllPermissionPolicy
...
The run.ts / standaloneServer.ts stuff is a hangover and expected to
be removed or heavily adjusted in the future, and since it's intended
to run from the command line, there's no neat way to pass in a
permission policy. As such it's not going to be useful in its current
form, so we're removing it for now.
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:35:14 +00:00
f5c3211129
permission-backend: 500 when policy returns incorrect resourceType
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:43 +00:00
dbd89112a5
permission-backend: add permission-node integration tests
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:42 +00:00
2335e0a01f
permission-backend: update default port for standalone server
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:42 +00:00
7f4a77a884
permission-backend: add todo
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:42 +00:00
cd77cbd48f
permission-backend: clean up PermissionIntegrationClient applyConditions signature
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:42 +00:00
6de1e719d4
permission-backend: api docs
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:42 +00:00
0ce2bc4129
permission-backend: remove manual construction of service discovery
...
We shouldn't be constructing a service discovery implementation inside
the router, since it removes the ability to provide a different
discovery mechanism.
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:41 +00:00
e9b6b7bf89
permission-backend: extract client for calling other plugins to apply conditions
...
Also adds response validation
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:41 +00:00
671bf72ed6
permission-backend: fix initial test suite
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:41 +00:00
be1f89d383
permission-backend: extract AllowAllPermissionPolicy from standaloneServer in permission-backend
...
Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com >
2021-11-24 14:31:40 +00:00
f028746410
Add permission-backend plugin
...
Signed-off-by: Tim Hansen <timbonicus@gmail.com >
2021-11-24 14:31:40 +00:00
Joe Porpeglia