Commit Graph

561 Commits

Author SHA1 Message Date
Patrik Oldsberg 6ee04078e1 auth-backend: deprecate tokenIssuer option of OAuthAdapter
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-03-17 23:17:22 +01:00
Patrik Oldsberg 15d3a3c39a auth-node,auth-backend: remove deprecated identity result fields
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-03-17 23:03:12 +01:00
Fredrik Adelöw efc73db10c switch us over to better-sqlite3
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-03-11 15:37:50 +01:00
Johan Haals d3e9ec43b7 catalog-model: Remove target from EntityRelation type.
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-03-10 16:15:12 +01:00
Fredrik Adelöw 3c2bc73901 add setupRequestMockHandlers to backend-test-utils
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-03-06 17:06:45 +01:00
Fredrik Adelöw bf95bb806c remove CatalogApi.getEntityByName
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-03-05 14:42:10 +01:00
Fredrik Adelöw 28c5ef16a4 Merge pull request #9938 from backstage/freben/catalog-by-ref
🧹  catalog-client: getEntityByName -> getEntityByRef
2022-03-03 14:06:36 +01:00
Fredrik Adelöw 899f196af5 update to use getEntityByRef
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-03-03 13:27:25 +01:00
Patrik Oldsberg be2c7e1883 Merge pull request #9886 from backstage/auth-validate-sub-claim
plugin-auth-backend: Added validation to ensure any custom auth resol…
2022-03-03 13:22:41 +01:00
Fredrik Adelöw 36aa63022b deprecate EntityName, introduce CompoundEntityRef
deprecate getEntityName, introduce getCompoundEntityRef

Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-03-02 21:54:45 +01:00
Harry Hogg 0c8ba31d72 plugin-auth-backend: Added validation to ensure any custom auth resolvers are using EntityRefs for subject claims
Signed-off-by: Harry Hogg <hhogg@spotify.com>
2022-03-01 17:52:41 +00:00
Fredrik Adelöw d0582b2d0f stitch targetRef and backwards compat inject it on read
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-23 09:38:40 +01:00
Fredrik Adelöw 6e1cbc12a6 update the catalog client to add getEntityFacets
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-17 13:59:27 +01:00
Fredrik Adelöw 3884bf0348 fix casing of sub and ent claims in default sign-in resolvers
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-17 12:07:48 +01:00
Fredrik Adelöw deaf6065db Removed CatalogApi.geLocationByEntity and CatalogApi.getOriginLocationByEntity, and replaced them with CatalogApi.getLocationByRef.
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-15 19:47:34 +01:00
Johan Haals 7aeb491394 catalog-model: deprecate ENTITY_DEFAULT_NAMESPACE, replace with DEFAULT_NAMESPACE
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-02-15 10:27:57 +01:00
Fredrik Adelöw 3c9aed1b16 review comments
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-10 10:36:45 +01:00
Fredrik Adelöw bf5222bfa1 moved over IdentityClient as well
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-09 19:32:59 +01:00
Fredrik Adelöw 86b40d464f move over BackstageSignInResult, BackstageIdentityResponse, BackstageUserIdentity
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-09 17:10:18 +01:00
Fredrik Adelöw b3f3e42036 move IdentityClient.getBearerToken
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-09 10:38:12 +01:00
Fredrik Adelöw 6bc86fcf2d make IdentityClient.listPublicKeys private
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-09 10:23:07 +01:00
Daniel Deloff 3396bc5973 remove option for disabling refresh
Signed-off-by: Daniel Deloff <44780793+rv-ddeloff@users.noreply.github.com>
2022-02-08 14:04:50 -05:00
Patrik Oldsberg 5d5c9bfb4c auth-backend: removed cookieConfigurer from router options
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-04 13:11:10 +01:00
Patrik Oldsberg 08fcda13ef auth-backend: make it possible to tweak the cookie configuration logic
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-04 01:32:22 +01:00
Marcus Eide ea30d0fd75 Add support for custom callbackUrls to providers
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-02-02 13:32:57 +01:00
Patrik Oldsberg 648606b3ac auth-backend: store github oauth token in cookie and use for refresh
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-02 10:46:33 +01:00
Patrik Oldsberg 9d75a939b6 auth-backend: fix OAuthAdapter scope store, only storing on success
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-02 09:54:14 +01:00
Joe Porpeglia 7023e7066b Remove todo
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-27 09:13:03 -05:00
Joe Porpeglia ae1bba9ebc Use server token for catalog identity client
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-27 09:13:02 -05:00
Patrik Oldsberg 26c7fca6be auth-backend: prettier + changeset tweak
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-27 10:52:00 +01:00
elonj 80b9027eb7 oidc and googld subs will be full entity refs
Signed-off-by: elonj <elonj@spotify.com>
2022-01-26 17:27:32 -05:00
Patrik Oldsberg 1aee8c207c Merge pull request #9136 from backstage/eide/auth-callback-urls
[auth-backend]: Support callbackUrl when setting cookie configuration
2022-01-26 16:34:21 +01:00
Johan Haals 3cd9123a32 chore: format with prettier
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-25 09:11:48 +01:00
Marcus Eide 3b6e41009b Revert the cookiePath to include the handler suffix
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 14:24:39 +01:00
Marcus Eide 71a2fbaa58 Simplify the cookiePath logic
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 14:22:54 +01:00
Marcus Eide 2bef25550d Add tests
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 11:20:49 +01:00
Marcus Eide aec40d321d Add support for callbackUrl when setting cookie configuration
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 11:20:49 +01:00
Patrik Oldsberg f8496730ab auth-backend: make sure userEntityRef is always a full entity ref
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-20 10:01:34 +01:00
elonj 8143d941b8 ids will be name
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:51 -05:00
elonj b7c1bb21ad fixed GithubAuth tests
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:41 -05:00
elonj d0ad9ebe22 auth providers will return entity ref as "sub" value
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:18 -05:00
Patrik Oldsberg 59a9309536 remove usage of @ts-ignore
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-18 11:19:01 +01:00
Dominik Schwank 619bc06613 feat(auth-backend): mark authHandler context as required parameter
Signed-off-by: Dominik Schwank <dominik.schwank@sda.se>
2022-01-17 14:35:30 +01:00
Adrian Barwicki 6e92ee6267 feat: add oauth2proxy provider
Signed-off-by: Adrian Barwicki <adrian.barwicki.extern@sda.se>
Signed-off-by: Dominik Schwank <dominik.schwank@sda.se>
2022-01-17 14:35:22 +01:00
Patrik Oldsberg 20ca7cfa5f auth-backend: switch over to use auto secure cookies
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-10 17:35:02 +01:00
Johan Haals 618d78495c Merge pull request #8825 from backstage/freben/a-tale-of-hyphens-and-braces
🧹  Got rid of the last brace-typed and hyphen-less params etc
2022-01-10 14:27:21 +01:00
Fredrik Adelöw 5333451def Got rid of the last brace-typed and hyphen-less params etc
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-10 09:48:12 +01:00
Fredrik Adelöw 9632cda521 Fix the last renmnants of the old copyright header
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-09 22:10:52 +01:00
Fredrik Adelöw 78074ab1d6 review fixes
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-03 12:25:32 +01:00
Fredrik Adelöw 761ff980f1 use only a sign-in resolver
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2021-12-30 15:38:34 +01:00