Commit Graph

682 Commits

Author SHA1 Message Date
Johan Haals 35438ef744 Merge pull request #13670 from fabuloso/secure-google-oauth-logout
Revoke Google OAuth refresh token on logout
2022-10-04 10:36:00 +02:00
Leonardo Cardoso de Almeida b1f9a031aa style: prettify auth0 provider codestyle
Signed-off-by: Leonardo Cardoso de Almeida <leozzito@Leonardos-MacBook-Pro.local>
2022-09-29 12:14:14 -03:00
Leonardo Cardoso de Almeida 9ad307a07c feat: add connection/connection scope options to auth0 provider
Signed-off-by: Leonardo Cardoso de Almeida <leozzito@Leonardos-MacBook-Pro.local>
2022-09-29 11:31:12 -03:00
Alessandro Dalfovo 7289b5ec4e Call logout OAuth handler in OAuthAdapter
Signed-off-by: Alessandro Dalfovo <dalfovo.alessandro@gmail.com>
2022-09-27 13:06:02 +02:00
ahmed 3e0f0c0285 oauth: consider hosted gitlab with relative path
Signed-off-by: ahmed <ahmed@planet.com>
2022-09-26 22:07:11 +02:00
Patrik Oldsberg 8360315ca5 Merge pull request #13559 from backstage/rugvip/jest29
cli: switch to Jest 29
2022-09-20 18:48:50 +02:00
Patrik Oldsberg 272fce8325 Merge pull request #13556 from backstage/eide/allow-third-party-cookies
[auth-backend]: Calculate `SameSite` cookie attribute in defaultCookieConfigurer and default to `none`
2022-09-20 17:20:22 +02:00
Marcus Eide d0f7bb0291 Use origin from request when calculating cookie config in start
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-09-20 15:16:26 +02:00
Patrik Oldsberg 2e4e6c3500 test fixes to support Jest 29
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-09-20 14:51:19 +02:00
Ben Lambert d2dc96e4d0 Merge pull request #13595 from DavidZemon/feature/allow-more-jwt-claims
feat: Allow passing additional JWT claims to `TokenIssuer`
2022-09-20 11:08:34 +02:00
David Zemon c8e837da5b feat: Use JsonValue for JWT claim values
Signed-off-by: David Zemon <david@zemon.name>
2022-09-19 08:01:14 -05:00
Marcus Eide 04c50e297d Resolve cookie configuration per request
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-09-16 09:57:44 +02:00
Marcus Eide 12943d1ade Calculate SameSite attribute more carefully, defaulting to lax in most cases
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-09-09 11:16:04 +02:00
Joe Patterson 69d478d5b4 Merge branch 'backstage:master' into master 2022-09-09 10:31:27 +10:00
David Zemon 19ac96e4c2 feat: Allow passing additional JWT claims to TokenIssuer
Signed-off-by: David Zemon <david@zemon.name>
2022-09-08 11:36:49 -05:00
Joe Patterson 018b7ec1f3 update provider for changes in review and update changeset message
Signed-off-by: Joe Patterson <jrwpatterson@gmail.com>
2022-09-08 20:33:54 +10:00
Joe Patterson 3db53bbfa3 fix prettier error
Signed-off-by: Joe Patterson <jrwpatterson@gmail.com>
2022-09-08 19:49:32 +10:00
Joe Patterson 644b267bde fix the session issue by copying okta
Signed-off-by: Joe Patterson <jrwpatterson@gmail.com>
2022-09-08 18:41:15 +10:00
Joe Patterson 3152ca4b74 run prettier
Signed-off-by: Joe Patterson <jrwpatterson@gmail.com>
2022-09-08 14:25:20 +10:00
Joe Patterson 64fe8e1213 change auth0 passport to the correct passport-auth0 package and allow passing the audience into the auth for api
Signed-off-by: Joe Patterson <jrwpatterson@gmail.com>
2022-09-08 13:52:34 +10:00
Taras 93a1072a0a Updated tests to include validateEntity in mocks
Signed-off-by: Taras <tarasm@gmail.com>
2022-09-07 18:12:01 -04:00
Marcus Eide 5fa831ce55 Add optional SameSite attribute to CookieConfigurer and return from defaultCookieConfigurer for secure contexts.
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-09-06 13:12:50 +02:00
Fredrik Adelöw aaab1e34da Fix linting errors after #13392
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-08-30 13:44:09 +02:00
Fredrik Adelöw 2881c53cb3 Merge pull request #13252 from backstage/freben/api-well-ok-then
When the 🧹 s go marching in
2022-08-23 13:55:58 +02:00
Fredrik Adelöw 46eecb9a3f Merge pull request #13237 from tylerd-canva/cfaccess-jwt-pass
Auth Backend: Add JWT to CloudflareAccessResult
2022-08-23 13:45:52 +02:00
blam 9b37fc59ed chore: reworking tests
Signed-off-by: blam <ben@blam.sh>
2022-08-23 10:53:05 +02:00
Tyler Davis fce5333d15 prettier
Signed-off-by: Tyler Davis <tylerd@canva.com>
2022-08-23 10:50:26 +10:00
Tyler Davis 5296f719f5 add verification to test authHandler and signInResolver
Signed-off-by: Tyler Davis <tylerd@canva.com>
2022-08-23 10:49:38 +10:00
Tyler Davis 477d05d9c7 prettier
Signed-off-by: Tyler Davis <tylerd@canva.com>
2022-08-22 09:08:46 +10:00
Tyler Davis 1b66ad8c3b review comments
Signed-off-by: Tyler Davis <tylerd@canva.com>
2022-08-22 08:38:04 +10:00
Fredrik Adelöw a291688bc5 Renamed the RedirectInfo type to OAuthStartResponse
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-08-19 16:35:20 +02:00
Fredrik Adelöw 2fc41ebf07 auth-backend
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-08-19 13:54:05 +02:00
Tyler Davis e1ebaeb332 Add the JWT to the CloudflareAccessResult
Signed-off-by: Tyler Davis <tylerd@canva.com>
2022-08-19 11:34:42 +10:00
Daniel Dias Branco Arthaud c676a9e07b fix(auth-plugin-backend): Allow it to skip migrations
When auth plugin is using database provider it verify if needs to skip migrations

Signed-off-by: Daniel Dias Branco Arthaud <arthaud@gmail.com>
2022-08-11 22:13:13 -03:00
Renlord Yang 154544f43e Properly export CloudflareAccessClaims and CloudflareAccessIdentityProfile types
This allows these types to be used externally when injecting a custom auth handler.

Signed-off-by: Renlord Yang <me@renlord.com>
2022-07-18 21:49:56 +08:00
Renlord Yang 339a4213b8 return cloudflare access claims directly
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
2022-07-14 22:54:26 +08:00
Renlord Yang 9dce0535d6 add support to include cloudflare groups and implement caching
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
2022-07-14 22:54:26 +08:00
Renlord Yang 3cedfd8365 add Cloudflare Access authentication provider
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
2022-07-14 22:54:26 +08:00
David Zemon 58005b8bcd feat: [#12248] Update to latest @davidzemon/passport-oauth-okta
Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
David Zemon 777bddd123 feat: [#12248] Add Okta IDP option
Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
David Zemon 4443a5e9be fix: [#12248] Okta's auth server ID is optional, not required
Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
David Zemon a5a78be5b8 fix: [#12248] Fix bad import
Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
David Zemon 35233735e8 feat: [#12248] Switch to new okta strategy
This new Okta passport strategy support custom authorization server IDs

Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
Antonio Musolino fe8e025af5 feat: allowing post method into auth refresh api
Signed-off-by: Antonio Musolino <antoniomusolino007@gmail.com>
2022-07-05 15:33:29 +02:00
Simone Corsi 8e03db907a fix(auth-backend): adds missing createAuthProviderExport
Signed-off-by: Simone Corsi <simonecorsi.dev@gmail.com>
2022-07-01 10:20:46 +02:00
Fabio Torchetti 61edb85704 Naming chnage; fix release size
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
2022-06-27 10:12:19 -05:00
Fabio Torchetti c7358cdbc5 Remove docs for the moment
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
2022-06-27 10:12:19 -05:00
Fabio Torchetti b1c7792e6a Add documentation for new option
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
2022-06-27 10:12:19 -05:00
Fabio Torchetti 9c4e5cdee9 Allow specifying JWT token key algorithm
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
2022-06-27 10:12:19 -05:00
Patrik Oldsberg 66c79ff359 auth-backend: avoid marking TokenIssuer as internal
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-06-20 15:25:33 +02:00