Commit Graph

751 Commits

Author SHA1 Message Date
Johan Haals d2a0f08d5c Merge pull request #9190 from backstage/catalog-identity-client-token
Use server token for catalog identity client
2022-01-28 11:55:07 +01:00
dependabot[bot] 28a5f9d0b1 chore(deps): bump passport from 0.4.1 to 0.5.2
Bumps [passport](https://github.com/jaredhanson/passport) from 0.4.1 to 0.5.2.
- [Release notes](https://github.com/jaredhanson/passport/releases)
- [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jaredhanson/passport/compare/v0.4.1...v0.5.2)

---
updated-dependencies:
- dependency-name: passport
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-28 09:40:21 +00:00
Joe Porpeglia 7023e7066b Remove todo
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-27 09:13:03 -05:00
Joe Porpeglia 2b028ae041 Update api reports
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-27 09:13:02 -05:00
Joe Porpeglia ae1bba9ebc Use server token for catalog identity client
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-27 09:13:02 -05:00
github-actions[bot] 406848efee Version Packages 2022-01-27 11:07:27 +00:00
Patrik Oldsberg 26c7fca6be auth-backend: prettier + changeset tweak
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-27 10:52:00 +01:00
elonj 80b9027eb7 oidc and googld subs will be full entity refs
Signed-off-by: elonj <elonj@spotify.com>
2022-01-26 17:27:32 -05:00
Patrik Oldsberg 1aee8c207c Merge pull request #9136 from backstage/eide/auth-callback-urls
[auth-backend]: Support callbackUrl when setting cookie configuration
2022-01-26 16:34:21 +01:00
Johan Haals 3cd9123a32 chore: format with prettier
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-25 09:11:48 +01:00
Marcus Eide 3b6e41009b Revert the cookiePath to include the handler suffix
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 14:24:39 +01:00
Marcus Eide 71a2fbaa58 Simplify the cookiePath logic
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 14:22:54 +01:00
Marcus Eide 129dc2e099 Update api-reports
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 11:20:49 +01:00
Marcus Eide 2bef25550d Add tests
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 11:20:49 +01:00
Marcus Eide aec40d321d Add support for callbackUrl when setting cookie configuration
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 11:20:49 +01:00
github-actions[bot] 8b18d054f3 Version Packages 2022-01-20 10:33:31 +00:00
Fredrik Adelöw 6be95e308f Merge pull request #9048 from backstage/revert-8987-dependabot/npm_and_yarn/helmet-5.0.1
Revert "build(deps): bump helmet from 4.4.1 to 5.0.1"
2022-01-20 11:00:39 +01:00
Patrik Oldsberg 1fb1555145 Merge pull request #9043 from backstage/rugvip/full-refal-panic
auth-backend: make sure userEntityRef is always a full entity ref
2022-01-20 11:00:18 +01:00
Fredrik Adelöw a8e6265109 Revert "build(deps): bump helmet from 4.4.1 to 5.0.1"
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-20 10:02:55 +01:00
Patrik Oldsberg f8496730ab auth-backend: make sure userEntityRef is always a full entity ref
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-20 10:01:34 +01:00
Fredrik Adelöw 444175b7a4 Merge pull request #8987 from backstage/dependabot/npm_and_yarn/helmet-5.0.1
build(deps): bump helmet from 4.4.1 to 5.0.1
2022-01-20 09:13:35 +01:00
elonj 8143d941b8 ids will be name
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:51 -05:00
elonj b7c1bb21ad fixed GithubAuth tests
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:41 -05:00
elonj d0ad9ebe22 auth providers will return entity ref as "sub" value
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:18 -05:00
Fredrik Adelöw 99f675b5aa Merge pull request #8995 from backstage/dependabot/npm_and_yarn/google-cloud/firestore-5.0.2
build(deps): bump @google-cloud/firestore from 4.15.1 to 5.0.2
2022-01-19 12:10:25 +01:00
Patrik Oldsberg a724d38208 Merge pull request #9000 from backstage/rugvip/noignore
remove usage of @ts-ignore
2022-01-18 18:46:28 +01:00
github-actions[bot] a94a2b8b3f Version Packages (next) 2022-01-18 13:49:07 +00:00
Patrik Oldsberg 59a9309536 remove usage of @ts-ignore
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-18 11:19:01 +01:00
dependabot[bot] c1a6d642bd build(deps): bump helmet from 4.4.1 to 5.0.1
Bumps [helmet](https://github.com/helmetjs/helmet) from 4.4.1 to 5.0.1.
- [Release notes](https://github.com/helmetjs/helmet/releases)
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](https://github.com/helmetjs/helmet/compare/v4.4.1...v5.0.1)

---
updated-dependencies:
- dependency-name: helmet
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-18 09:46:53 +00:00
dependabot[bot] f815b7e4a4 build(deps): bump @google-cloud/firestore from 4.15.1 to 5.0.2
Bumps [@google-cloud/firestore](https://github.com/googleapis/nodejs-firestore) from 4.15.1 to 5.0.2.
- [Release notes](https://github.com/googleapis/nodejs-firestore/releases)
- [Changelog](https://github.com/googleapis/nodejs-firestore/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/nodejs-firestore/compare/v4.15.1...v5.0.2)

---
updated-dependencies:
- dependency-name: "@google-cloud/firestore"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-18 09:20:05 +00:00
Fredrik Adelöw 101eb459e3 Merge pull request #8396 from SDA-SE/feat/DOCKM-1134
feat: Add new authentication provider: OAuth2Proxy
2022-01-17 15:50:13 +01:00
Dominik Schwank 619bc06613 feat(auth-backend): mark authHandler context as required parameter
Signed-off-by: Dominik Schwank <dominik.schwank@sda.se>
2022-01-17 14:35:30 +01:00
Adrian Barwicki 6e92ee6267 feat: add oauth2proxy provider
Signed-off-by: Adrian Barwicki <adrian.barwicki.extern@sda.se>
Signed-off-by: Dominik Schwank <dominik.schwank@sda.se>
2022-01-17 14:35:22 +01:00
github-actions[bot] b04011602b Version Packages 2022-01-13 14:23:13 +00:00
Patrik Oldsberg 20ca7cfa5f auth-backend: switch over to use auto secure cookies
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-10 17:35:02 +01:00
Johan Haals 618d78495c Merge pull request #8825 from backstage/freben/a-tale-of-hyphens-and-braces
🧹  Got rid of the last brace-typed and hyphen-less params etc
2022-01-10 14:27:21 +01:00
Johan Haals fca5c02e41 Merge pull request #8826 from backstage/freben/ze-author
🧹  Fix the last renmnants of the old copyright header
2022-01-10 13:37:54 +01:00
Fredrik Adelöw 5333451def Got rid of the last brace-typed and hyphen-less params etc
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-10 09:48:12 +01:00
Fredrik Adelöw 9632cda521 Fix the last renmnants of the old copyright header
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-09 22:10:52 +01:00
Patrik Oldsberg da9c59d6e0 auth-backend: moved test-utils dependency to devDeps
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-07 13:40:15 +01:00
github-actions[bot] e432d44f94 Version Packages 2022-01-04 10:54:36 +00:00
Fredrik Adelöw 78074ab1d6 review fixes
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-03 12:25:32 +01:00
Fredrik Adelöw 761ff980f1 use only a sign-in resolver
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-12-30 15:38:34 +01:00
Fredrik Adelöw 59c5c70bf7 first minor cleanups
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-12-30 15:38:08 +01:00
Fabian Hippmann 1e932ee498 fix tsc errors
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
2021-12-30 15:38:08 +01:00
Fabian Hippmann 1756d252ce update tests, add dependencies
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
2021-12-30 15:38:08 +01:00
Fabian Hippmann 876a5351d8 update documentation location
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
2021-12-30 15:38:08 +01:00
Fabian Hippmann 9fa77c4b91 feat: add gcp-iap first draft
Signed-off-by: Fabian Hippmann <fabian.hippmann@moonshiner.at>
2021-12-30 15:38:08 +01:00
github-actions[bot] 7d27a11079 Version Packages 2021-12-30 11:06:46 +00:00
Patrik Oldsberg 9120f5351d Merge pull request #8660 from backstage/rugvip/refrain
auth-backend: always exchange and never return refresh tokens to clients
2021-12-28 20:20:02 +01:00