Commit Graph

352 Commits

Author SHA1 Message Date
Miguel Alexandre b8d1a989e1 Fix prettier error
Signed-off-by: Miguel Alexandre <m.alexandrex@gmail.com>
2021-08-11 11:56:07 +02:00
Miguel Alexandre bfe0ff93fb Implement auth handler and sign-in resolvers for okta
Signed-off-by: Miguel Alexandre <m.alexandrex@gmail.com>
2021-08-11 11:53:13 +02:00
Patrik Oldsberg 95e3ec7f2b Merge pull request #6760 from backstage/rugvip/codec
auth-backend: read and encode the entire state object in encodeState and readState
2021-08-10 00:11:21 +02:00
Patrik Oldsberg c9bab6d596 auth-backend: read and encode the entire state object in encodeState and readState
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-08-09 16:55:32 +02:00
Fredrik Adelöw 923491eece run prettier formatting
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-08-09 11:54:38 +02:00
blam cd0a49fd6b chore: tidying up a little bit ready for release
Signed-off-by: blam <ben@blam.sh>
2021-07-29 10:13:25 +02:00
Jos Craw c4cb0b06de feat: added optional disableRefesh config for OAuth2
Signed-off-by: Jos Craw <jos@joscraw.net>
2021-07-29 11:18:34 +12:00
Stéphane MORI 6192b5e1c7 Allow to configure SAML auth acceptedClockSkewMs
Signed-off-by: Stéphane MORI <stephane.mori@gmail.com>
2021-07-28 09:37:37 +02:00
Roy Jacobs 2567c066d5 Export TokenIssuer so that it may be used by non-native auth providers
Signed-off-by: Roy Jacobs <roy.jacobs@gmail.com>
2021-07-20 16:56:28 +02:00
Morgan Martinet 4036d634a0 use original prompt default value to avoid a breaking change
Signed-off-by: Morgan Martinet <morgan@mmm-experts.com>
2021-07-14 17:01:38 -04:00
Morgan Martinet da70a0cc1b fix(oidc): do not use prompt=none which prevents the login dialog
Signed-off-by: Morgan Martinet <morgan@mmm-experts.com>
2021-07-13 18:52:02 -04:00
chicoribas 2aed3df2c9 Simpler microsoftDefaultSignInResolver
Signed-off-by: chicoribas <chico.bribas@gmail.com>
2021-07-13 09:32:36 -03:00
chicoribas 8fc702c9c0 Removing microsoftDefaultSignInResolver export
Signed-off-by: chicoribas <chico.bribas@gmail.com>
2021-07-13 09:32:36 -03:00
chicoribas 30a8a345e9 SignIn and Auth handlers for MS provider
Signed-off-by: chicoribas <chico.bribas@gmail.com>
2021-07-13 09:32:36 -03:00
Fredrik Adelöw 6ca29b66c8 Unbreak .well-known OIDC routes
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-06-25 21:31:29 +02:00
Himanshu Mishra 686a740eb9 show better 404 message for unknown provider endpoints
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-24 11:37:49 +02:00
Himanshu Mishra e7b5cf888f remove unnecessary check for missing provider factory
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-24 11:32:57 +02:00
Himanshu Mishra dda7e862a2 remove the "catch-all" auth endpoint and register each separately
200: for properly registered auth providers
404 (with proper message): misconfigured
404 (plain): for unknown providers

Co-authored-by: Mike Lewis <mtlewis@users.noreply.github.com>
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-23 15:13:02 +02:00
Himanshu Mishra d91ec5b1b0 auth: update language
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-22 20:19:58 +02:00
Himanshu Mishra 8e5e5ee46e auth: show better error if auth provider keys are missing
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-22 20:16:26 +02:00
Fredrik Adelöw a88073c29a Update copyright headers
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-06-18 20:26:42 +02:00
blam 2d881016cc chore: dont export default auth provider
Signed-off-by: blam  <ben@blam.sh>
Signed-off-by: blam <ben@blam.sh>
2021-06-18 10:08:26 +02:00
Ben Lambert 79a5fc65a8 Merge pull request #4532 from backstage/rugvip/authin
auth-backend: implement sign-in resolver and profile transform for google provider
2021-06-17 15:33:13 +02:00
Patrik Oldsberg 1aa31f0afc auth-backend: add support for GitLab auth refresh
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-06-16 12:13:27 +02:00
blam f5f290f1c2 feat: update the public api instead of profileTransform it is AuthHandler
Co-authored-by: Fredrik Adelöw <freben@users.noreply.github.com>
Co-authored-by: Johan Haals <johan.haals@gmail.com>
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>

Signed-off-by: blam <ben@blam.sh>
2021-06-16 10:56:42 +02:00
blam 551c050e23 feat: actually export the googleSignInResovlers for use in apps
Co-authored-by: Fredrik Adelöw <freben@users.noreply.github.com>
Co-authored-by: Johan Haals <johan.haals@gmail.com>
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>

Signed-off-by: blam <ben@blam.sh>
2021-06-16 10:42:48 +02:00
blam 8adb6f6bcd feat: enable backwards compatability and write a simple test
Co-authored-by: Fredrik Adelöw <freben@users.noreply.github.com>
Co-authored-by: Johan Haals <johan.haals@gmail.com>
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>

Signed-off-by: blam <ben@blam.sh>
2021-06-16 10:34:48 +02:00
Himanshu Mishra 7dd84f37f0 Apply suggestions from code review
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>

Co-authored-by: Fredrik Adelöw <freben@gmail.com>
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-06-15 13:12:39 +02:00
Himanshu Mishra a0949d5892 docs: Add docs explaining sign-in resolvers and profile transform
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-15 13:12:39 +02:00
Himanshu Mishra a848395e2b auth-backend: getEntityClaims make sure target is group kind
We are interested in the User isMemberOf Group relation. So this is just an additional check that the target is of Group kind.

Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-15 13:12:39 +02:00
Himanshu Mishra 17a26e7ed3 auth-backend: Use stringifyEntityRef helper
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-15 13:12:39 +02:00
Patrik Oldsberg 1111c0753c auth-backend: implement sign-in and profile options for google provider
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-06-15 13:12:39 +02:00
Patrik Oldsberg 48a5dcf9d5 auth-backend: added SignInResolver and ProfileTransform types
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-06-15 13:12:39 +02:00
Patrik Oldsberg 02d2b8681f auth-backend: add getEntityClaims helper that figures out the claims needed to represent an entity
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-06-15 13:12:39 +02:00
Patrik Oldsberg 3430f0d1ff auth-backend: add ent to possible claims in TokenParams
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-06-15 13:12:39 +02:00
Patrik Oldsberg de81880419 auth-backend: refactor CatalogIdentityClient to depend on TokenIssuer directly
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-06-15 13:12:39 +02:00
Patrik Oldsberg 432af8743f auth-backend: import modules directly for mocking
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-06-08 10:45:54 +02:00
jrusso1020 65e6c45410 Remove circular dependencies
In reference to issue #5563 this does the initial work to remove
all the circular dependencies that we have encountered while
building backstage using bazel. The next step will be to implement
a method to catch these circular dependencies before they get
merged in

Signed-off-by: jrusso1020 <jrusso@brex.com>
2021-05-15 11:17:05 -06:00
Teun Willems 81fa98b3ab fix: displays name from jwt instead of using email address
Signed-off-by: Teun Willems <teun.willems@theapsgroup.com>
2021-04-01 14:25:19 +02:00
Fredrik Adelöw 676ede6438 Update the entity unregister dialog behavior, to support both unregistration as well as plain deletion
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-03-26 09:07:05 +01:00
Tim Hansen 67f66c2962 Fix auth environment type; GitLab audience optional
Signed-off-by: Tim Hansen <timbonicus@gmail.com>
2021-03-24 15:47:17 -06:00
Patrik Oldsberg 6819c2aec8 Merge pull request #4896 from GoWind/expose-verify-nonce
Expose `verifyNonce` and `readState` publicly
2021-03-15 15:20:05 +01:00
Fredrik Adelöw 8686eb38cf Introduce the @backstage/errors package.
Encode thrown errors in the backend as a JSON payload using a facility in that package, and render helpful frontend displays of those errors.

Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-03-11 14:31:21 +01:00
Gowind d44777a802 Expose verifyNonce and readState publicly
Signed-off-by: Gowind <petrovgovind@gmail.com>
2021-03-09 18:33:32 +01:00
dependabot[bot] 7616988312 chore(deps): bump knex from 0.21.18 to 0.95.1
Bumps [knex](https://github.com/knex/knex) from 0.21.18 to 0.95.1.
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/knex/knex/commits)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-03-08 10:26:45 +01:00
Marcos Lilljedahl 37f9f1a2ee Uses the correct jwks_uri for oidc configuration endpoint
Signed-off-by: Marcos Lilljedahl <marcosnils@gmail.com>
2021-03-04 12:31:21 -03:00
Patrik Oldsberg 570d310c90 Merge pull request #4621 from nhidtran/enhancement/4423
Enhancement/4423: remove the usage of res.send() for res.json()
2021-03-01 17:54:09 +01:00
Brian Leathem d9e8713b28 Replaced nock usage in the oidc provider tests with msw 2021-02-26 11:31:25 -08:00
Fredrik Adelöw ebad7dbe99 Merge pull request #4635 from bleathem/oidc-scope
fixed: Expose a configuration option for the oidc scope
2021-02-23 22:08:37 +01:00
Brian Leathem f31e1061ca Replaced the config jest mock with a ConfigReader in the oidc provider test 2021-02-22 16:39:06 -08:00