Commit Graph

133 Commits

Author SHA1 Message Date
Patrik Oldsberg 1780a67bc5 backend-plugin-api: remove identity and token manager services
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-08-21 21:36:43 +02:00
MT Lewis df784fe970 permissions: move MetadataResponse type to permission-common
This was missed when moving
MetadataResponseSerializedRule in
137fa342b4 - seems
useful to keep these two types together.

Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2024-07-31 14:06:48 +01:00
MT Lewis 5cd9878023 permission-node: re-export MetadataResponseSerializedRule from permission-common
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2024-07-28 14:15:50 +01:00
Patrik Oldsberg d6f6a99536 Merge pull request #25537 from adamdmharvey/ah-api-docs
chore: Improve API Reference documentation
2024-07-16 11:04:21 +02:00
Patrik Oldsberg c5ce79a14c Merge pull request #25569 from backstage/nbs10/rename-setup-request-handlers
[NBS 1.0]Rename `setupRequestMockHandlers` to `registerMswTestHooks`
2024-07-16 11:01:29 +02:00
Patrik Oldsberg 6e05fd4efe Merge pull request #25601 from backstage/rugvip/perm
backend-plugin-api: remove deprecated token option from PermissionsService
2024-07-15 20:38:57 +02:00
Patrik Oldsberg ed10fd202c permission-node: update policy handler to work with new auth system
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-07-12 14:28:24 +02:00
Patrik Oldsberg 36f91e8956 backend-plugin-api,permission-node: remove deprecated token option from permissions service
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-07-12 12:17:39 +02:00
Camila Belo b82aff92aa refactor(test-utils): deprecate the isDockerDisabledForTests function
Signed-off-by: Camila Belo <camilaibs@gmail.com>
2024-07-10 17:06:00 +02:00
Camila Belo 95a3a0b91c refactor(test-utils): rename setupRequestMockHandlers to setupMswHandler
Signed-off-by: Camila Belo <camilaibs@gmail.com>
2024-07-10 15:45:49 +02:00
Adam Harvey c3837fb3fc chore: Fix invalid API docs cross-reference
Signed-off-by: Adam Harvey <33203301+adamdmharvey@users.noreply.github.com>
2024-07-05 23:34:33 -04:00
Vincenzo Scamporlino 06051768bc permission-node: remove references from backend-common
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-05-24 13:53:27 +02:00
Fredrik Adelöw 0639b07aa1 refactor the client a bit
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2024-05-22 16:14:52 +02:00
Fredrik Adelöw b155d854bc skip the plugin id for permissions client
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2024-05-22 16:14:26 +02:00
Fredrik Adelöw 9e63318311 Implement the scope feature of external access service tokens, as per BEP-0007
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2024-05-22 16:14:24 +02:00
Camila Belo 737f3ae5ef Merge branch 'master' into camilaibs/nbs10-deprecate-legacy-system-commons
Signed-off-by: Camila Belo <camilaibs@gmail.com>
2024-05-21 15:12:02 +02:00
Camila Belo 3bd04bb3ac reafactor: deprecate legacy handlers and context
Signed-off-by: Camila Belo <camilaibs@gmail.com>
2024-05-21 08:28:17 +02:00
Camila Belo eb34b87d5a refactor: stop using getVoidLogger in tests
Signed-off-by: Camila Belo <camilaibs@gmail.com>
2024-05-16 09:21:54 +02:00
Vincenzo Scamporlino 3c3fafb5cb permission-node: fix target plugin id
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-10 11:50:07 +02:00
Fredrik Adelöw f3e2e86c33 fix permissions being overwritten by the unprocessed entities module
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2024-03-22 11:41:57 +01:00
Patrik Oldsberg 5c3720a228 permission-node: assert user credentials forwarding in ServerPermissionClient
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-02-23 15:22:46 +01:00
Patrik Oldsberg 16b23eddd3 permission-node: added tests for ServerPermissionClient with credentials
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-02-23 15:12:18 +01:00
Patrik Oldsberg 6c06f99ba6 permission-node: refactor to true private fields for ServerPermissionClient
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-02-23 15:11:40 +01:00
Patrik Oldsberg 0502d826a5 permissions: migrate to new auth system and accept credentials
Co-authored-by: Fredrik Adelöw <freben@gmail.com>
Co-authored-by: Carl-Erik Bergström <cbergstrom@spotify.com>
Co-authored-by: blam <ben@blam.sh>
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-02-23 10:15:02 +01:00
Patrik Oldsberg 16685cf8a2 Merge pull request #17077 from backstage/permission-router-options-array
createPermissionIntegrationRouter: accept an array of options
2023-04-25 10:37:18 +02:00
Vincenzo Scamporlino 7996d8900b permission-node: improve naming
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-04-13 21:02:40 +02:00
Vincenzo Scamporlino 4dd6bbe59e permission-node: add support for extra permissions
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-04-12 17:13:52 +02:00
Vincenzo Scamporlino 2c837e99a3 permission-node: add example to changeset
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-04-12 11:51:14 +02:00
Vincenzo Scamporlino b947f4230d permission-node: improve typings
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-04-12 11:39:08 +02:00
Vincenzo Scamporlino 81ea755347 permission-node: update api-report
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-04-11 13:47:54 +02:00
Ainhoa Larumbe 49584cebc4 do not pass array of options directly
Signed-off-by: Ainhoa Larumbe <ainhoaL@users.noreply.github.com>
2023-04-05 16:24:06 +01:00
Fredrik Adelöw 788f0f5a15 set permission backend policies using an extension point
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Co-authored-by: Johan Haals <johan.haals@gmail.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2023-04-04 11:45:36 +02:00
Ainhoa Larumbe 82cd54cac8 Cleanup comments
Signed-off-by: Ainhoa Larumbe <ainhoaL@users.noreply.github.com>
2023-03-24 11:00:19 +00:00
Ainhoa Larumbe 19eefbd0f4 Add tests for router with multiple resource types
Signed-off-by: Ainhoa Larumbe <ainhoaL@users.noreply.github.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-03-24 10:36:06 +00:00
Ainhoa Larumbe 16c725e939 Complete code in router and fix tests
Signed-off-by: Ainhoa Larumbe <ainhoaL@users.noreply.github.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-03-24 10:35:56 +00:00
Ainhoa Larumbe d524bf467b WIP createPermissionIntegrationRouter takes an array of ResourceOptions
Signed-off-by: Ainhoa Larumbe <ainhoaL@users.noreply.github.com>
2023-03-24 10:35:30 +00:00
Vincenzo Scamporlino 6e5e1b49c0 permission-node rename createIsAuthorized to createConditionAuthorizer
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-03-21 16:40:49 +01:00
Vincenzo Scamporlino b79dee1cf8 permission-node: test createIsAuthorized
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-03-21 16:37:55 +01:00
Harry Hogg 97be4a96ed Refactored createIsAuthorized to take a decision
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-03-21 16:37:55 +01:00
Harry Hogg 2b124bc24a Reworked authorization of conditions to use a single export by combing getRule and applyConditions into
createIsAuthorized

Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-03-21 16:37:55 +01:00
Harry Hogg 277847e064 Reworked permission rules and filtering to follow similar pattern to catalog
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-03-21 16:37:53 +01:00
Patrik Oldsberg f758b99ea2 Merge pull request #16616 from backstage/docs/remove-backend-to-backend-references
Docs: remove backend-to-backend references
2023-02-28 13:55:54 +01:00
Vincenzo Scamporlino d4523f5b93 Merge pull request #16333 from backstage/pf/optional-get-resources
createPermissionIntegrationRouter - optional getResources
2023-02-27 16:28:02 +01:00
Vincenzo Scamporlino 37e9215c79 permission-node: improve service-to-service error url
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-02-27 15:52:53 +01:00
Vincenzo Scamporlino 4c0ba1cfc7 permission-node: improve createPermissionIntegrationRouter docs
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-02-27 15:20:08 +01:00
Vincenzo Scamporlino e837143bc9 permission-node: simplify api report
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-02-27 11:30:05 +01:00
Patrik Oldsberg eb9252186f permission-node,kubernetes-backend: mark public API as public
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2023-02-21 14:43:21 +01:00
Vincenzo Scamporlino 36e90ecdf1 permission-node: fix error message
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-02-17 13:39:03 +01:00
Vincenzo Scamporlino 5632097f92 permission-node: make getResources optional
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-02-17 10:50:38 +01:00
Vincenzo Scamporlino dbf36da3eb permission-node: improve api report for createPermissionIntegrationRouter
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-02-14 17:22:17 +01:00