Miguel Alexandre
b8d1a989e1
Fix prettier error
...
Signed-off-by: Miguel Alexandre <m.alexandrex@gmail.com >
2021-08-11 11:56:07 +02:00
Miguel Alexandre
bfe0ff93fb
Implement auth handler and sign-in resolvers for okta
...
Signed-off-by: Miguel Alexandre <m.alexandrex@gmail.com >
2021-08-11 11:53:13 +02:00
Patrik Oldsberg
95e3ec7f2b
Merge pull request #6760 from backstage/rugvip/codec
...
auth-backend: read and encode the entire state object in encodeState and readState
2021-08-10 00:11:21 +02:00
Patrik Oldsberg
c9bab6d596
auth-backend: read and encode the entire state object in encodeState and readState
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-08-09 16:55:32 +02:00
Fredrik Adelöw
923491eece
run prettier formatting
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2021-08-09 11:54:38 +02:00
blam
cd0a49fd6b
chore: tidying up a little bit ready for release
...
Signed-off-by: blam <ben@blam.sh >
2021-07-29 10:13:25 +02:00
Jos Craw
c4cb0b06de
feat: added optional disableRefesh config for OAuth2
...
Signed-off-by: Jos Craw <jos@joscraw.net >
2021-07-29 11:18:34 +12:00
Stéphane MORI
6192b5e1c7
Allow to configure SAML auth acceptedClockSkewMs
...
Signed-off-by: Stéphane MORI <stephane.mori@gmail.com >
2021-07-28 09:37:37 +02:00
Roy Jacobs
2567c066d5
Export TokenIssuer so that it may be used by non-native auth providers
...
Signed-off-by: Roy Jacobs <roy.jacobs@gmail.com >
2021-07-20 16:56:28 +02:00
Morgan Martinet
4036d634a0
use original prompt default value to avoid a breaking change
...
Signed-off-by: Morgan Martinet <morgan@mmm-experts.com >
2021-07-14 17:01:38 -04:00
Morgan Martinet
da70a0cc1b
fix(oidc): do not use prompt=none which prevents the login dialog
...
Signed-off-by: Morgan Martinet <morgan@mmm-experts.com >
2021-07-13 18:52:02 -04:00
chicoribas
2aed3df2c9
Simpler microsoftDefaultSignInResolver
...
Signed-off-by: chicoribas <chico.bribas@gmail.com >
2021-07-13 09:32:36 -03:00
chicoribas
8fc702c9c0
Removing microsoftDefaultSignInResolver export
...
Signed-off-by: chicoribas <chico.bribas@gmail.com >
2021-07-13 09:32:36 -03:00
chicoribas
30a8a345e9
SignIn and Auth handlers for MS provider
...
Signed-off-by: chicoribas <chico.bribas@gmail.com >
2021-07-13 09:32:36 -03:00
Fredrik Adelöw
6ca29b66c8
Unbreak .well-known OIDC routes
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2021-06-25 21:31:29 +02:00
Himanshu Mishra
686a740eb9
show better 404 message for unknown provider endpoints
...
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
2021-06-24 11:37:49 +02:00
Himanshu Mishra
e7b5cf888f
remove unnecessary check for missing provider factory
...
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
2021-06-24 11:32:57 +02:00
Himanshu Mishra
dda7e862a2
remove the "catch-all" auth endpoint and register each separately
...
200: for properly registered auth providers
404 (with proper message): misconfigured
404 (plain): for unknown providers
Co-authored-by: Mike Lewis <mtlewis@users.noreply.github.com >
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
2021-06-23 15:13:02 +02:00
Himanshu Mishra
d91ec5b1b0
auth: update language
...
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
2021-06-22 20:19:58 +02:00
Himanshu Mishra
8e5e5ee46e
auth: show better error if auth provider keys are missing
...
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
2021-06-22 20:16:26 +02:00
Fredrik Adelöw
a88073c29a
Update copyright headers
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2021-06-18 20:26:42 +02:00
blam
2d881016cc
chore: dont export default auth provider
...
Signed-off-by: blam <ben@blam.sh >
Signed-off-by: blam <ben@blam.sh >
2021-06-18 10:08:26 +02:00
Ben Lambert
79a5fc65a8
Merge pull request #4532 from backstage/rugvip/authin
...
auth-backend: implement sign-in resolver and profile transform for google provider
2021-06-17 15:33:13 +02:00
Patrik Oldsberg
1aa31f0afc
auth-backend: add support for GitLab auth refresh
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-06-16 12:13:27 +02:00
blam
f5f290f1c2
feat: update the public api instead of profileTransform it is AuthHandler
...
Co-authored-by: Fredrik Adelöw <freben@users.noreply.github.com >
Co-authored-by: Johan Haals <johan.haals@gmail.com >
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com >
Signed-off-by: blam <ben@blam.sh >
2021-06-16 10:56:42 +02:00
blam
551c050e23
feat: actually export the googleSignInResovlers for use in apps
...
Co-authored-by: Fredrik Adelöw <freben@users.noreply.github.com >
Co-authored-by: Johan Haals <johan.haals@gmail.com >
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com >
Signed-off-by: blam <ben@blam.sh >
2021-06-16 10:42:48 +02:00
blam
8adb6f6bcd
feat: enable backwards compatability and write a simple test
...
Co-authored-by: Fredrik Adelöw <freben@users.noreply.github.com >
Co-authored-by: Johan Haals <johan.haals@gmail.com >
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com >
Signed-off-by: blam <ben@blam.sh >
2021-06-16 10:34:48 +02:00
Himanshu Mishra
7dd84f37f0
Apply suggestions from code review
...
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
Co-authored-by: Fredrik Adelöw <freben@gmail.com >
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-06-15 13:12:39 +02:00
Himanshu Mishra
a0949d5892
docs: Add docs explaining sign-in resolvers and profile transform
...
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
2021-06-15 13:12:39 +02:00
Himanshu Mishra
a848395e2b
auth-backend: getEntityClaims make sure target is group kind
...
We are interested in the User isMemberOf Group relation. So this is just an additional check that the target is of Group kind.
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
2021-06-15 13:12:39 +02:00
Himanshu Mishra
17a26e7ed3
auth-backend: Use stringifyEntityRef helper
...
Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net >
2021-06-15 13:12:39 +02:00
Patrik Oldsberg
1111c0753c
auth-backend: implement sign-in and profile options for google provider
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-06-15 13:12:39 +02:00
Patrik Oldsberg
48a5dcf9d5
auth-backend: added SignInResolver and ProfileTransform types
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-06-15 13:12:39 +02:00
Patrik Oldsberg
02d2b8681f
auth-backend: add getEntityClaims helper that figures out the claims needed to represent an entity
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-06-15 13:12:39 +02:00
Patrik Oldsberg
3430f0d1ff
auth-backend: add ent to possible claims in TokenParams
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-06-15 13:12:39 +02:00
Patrik Oldsberg
de81880419
auth-backend: refactor CatalogIdentityClient to depend on TokenIssuer directly
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-06-15 13:12:39 +02:00
Patrik Oldsberg
432af8743f
auth-backend: import modules directly for mocking
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2021-06-08 10:45:54 +02:00
jrusso1020
65e6c45410
Remove circular dependencies
...
In reference to issue #5563 this does the initial work to remove
all the circular dependencies that we have encountered while
building backstage using bazel. The next step will be to implement
a method to catch these circular dependencies before they get
merged in
Signed-off-by: jrusso1020 <jrusso@brex.com >
2021-05-15 11:17:05 -06:00
Teun Willems
81fa98b3ab
fix: displays name from jwt instead of using email address
...
Signed-off-by: Teun Willems <teun.willems@theapsgroup.com >
2021-04-01 14:25:19 +02:00
Fredrik Adelöw
676ede6438
Update the entity unregister dialog behavior, to support both unregistration as well as plain deletion
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2021-03-26 09:07:05 +01:00
Tim Hansen
67f66c2962
Fix auth environment type; GitLab audience optional
...
Signed-off-by: Tim Hansen <timbonicus@gmail.com >
2021-03-24 15:47:17 -06:00
Patrik Oldsberg
6819c2aec8
Merge pull request #4896 from GoWind/expose-verify-nonce
...
Expose `verifyNonce` and `readState` publicly
2021-03-15 15:20:05 +01:00
Fredrik Adelöw
8686eb38cf
Introduce the @backstage/errors package.
...
Encode thrown errors in the backend as a JSON payload using a facility in that package, and render helpful frontend displays of those errors.
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2021-03-11 14:31:21 +01:00
Gowind
d44777a802
Expose verifyNonce and readState publicly
...
Signed-off-by: Gowind <petrovgovind@gmail.com >
2021-03-09 18:33:32 +01:00
dependabot[bot]
7616988312
chore(deps): bump knex from 0.21.18 to 0.95.1
...
Bumps [knex](https://github.com/knex/knex ) from 0.21.18 to 0.95.1.
- [Release notes](https://github.com/knex/knex/releases )
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/knex/knex/commits )
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2021-03-08 10:26:45 +01:00
Marcos Lilljedahl
37f9f1a2ee
Uses the correct jwks_uri for oidc configuration endpoint
...
Signed-off-by: Marcos Lilljedahl <marcosnils@gmail.com >
2021-03-04 12:31:21 -03:00
Patrik Oldsberg
570d310c90
Merge pull request #4621 from nhidtran/enhancement/4423
...
Enhancement/4423: remove the usage of res.send() for res.json()
2021-03-01 17:54:09 +01:00
Brian Leathem
d9e8713b28
Replaced nock usage in the oidc provider tests with msw
2021-02-26 11:31:25 -08:00
Fredrik Adelöw
ebad7dbe99
Merge pull request #4635 from bleathem/oidc-scope
...
fixed: Expose a configuration option for the oidc scope
2021-02-23 22:08:37 +01:00
Brian Leathem
f31e1061ca
Replaced the config jest mock with a ConfigReader in the oidc provider test
2021-02-22 16:39:06 -08:00