paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
68db890456ca6b15095d577a9148312270c9535d
backstage/plugins/auth-backend-module-aws-alb-provider/CHANGELOG.md
T
github-actions[bot] 68db890456 Version Packages (next)
2026-05-26 15:26:38 +00:00

30 KiB
Raw Blame History

@backstage/plugin-auth-backend-module-aws-alb-provider

0.4.17-next.0

Patch Changes

0.4.16

Patch Changes

0.4.16-next.0

Patch Changes

  • Updated dependencies

0.4.15

Patch Changes

0.4.15-next.2

Patch Changes

  • Updated dependencies

0.4.15-next.1

Patch Changes

0.4.15-next.0

Patch Changes

  • Updated dependencies

0.4.14

Patch Changes

  • a49a40d: Updated dependency zod to ^3.25.76 || ^4.0.0 & migrated to /v3 or /v4 imports.
  • 634eded: Fixed a foreign key constraint violation when issuing refresh tokens for CIMD clients, and prevented a failed refresh token issuance from failing the entire token exchange. Fixed AWS ALB auth provider incorrectly returning HTTP 500 instead of 401 for JWT validation failures, which caused retry loops and memory pressure under load.
  • Updated dependencies

0.4.14-next.1

Patch Changes

0.4.14-next.0

Patch Changes

  • Updated dependencies

0.4.13

Patch Changes

0.4.13-next.1

Patch Changes

0.4.12-next.0

Patch Changes

  • 7455dae: Use node prefix on native imports
  • 69d880e: Bump to latest zod to ensure it has the latest features
  • Updated dependencies

0.4.11

Patch Changes

0.4.11-next.0

Patch Changes

0.4.10

Patch Changes

0.4.10-next.1

Patch Changes

  • de96a60: chore(deps): bump express from 4.21.2 to 4.22.0
  • Updated dependencies

0.4.10-next.0

Patch Changes

  • Updated dependencies

0.4.9

Patch Changes

0.4.9-next.1

Patch Changes

0.4.9-next.0

Patch Changes

  • Updated dependencies

0.4.8

Patch Changes

0.4.8-next.0

Patch Changes

0.4.7

Patch Changes

0.4.7-next.0

Patch Changes

0.4.6

Patch Changes

0.4.6-next.0

Patch Changes

  • Updated dependencies

0.4.5

Patch Changes

0.4.5-next.0

Patch Changes

0.4.4

Patch Changes

  • c83cd8b: Fixed some circular or otherwise unclear imports
  • Updated dependencies

0.4.4-next.1

Patch Changes

  • Updated dependencies

0.4.4-next.0

Patch Changes

0.4.3

Patch Changes

  • 5cc1f7f: Introduce dangerouslyAllowSignInWithoutUserInCatalog auth resolver config.
  • Updated dependencies

0.4.3-next.2

Patch Changes

  • 5cc1f7f: Introduce dangerouslyAllowSignInWithoutUserInCatalog auth resolver config.
  • Updated dependencies

0.4.3-next.1

Patch Changes

  • Updated dependencies

0.4.3-next.0

Patch Changes

  • Updated dependencies

0.4.2

Patch Changes

0.4.2-next.2

Patch Changes

0.4.2-next.1

Patch Changes

0.4.2-next.0

Patch Changes

0.4.1

Patch Changes

0.4.1-next.2

Patch Changes

  • Updated dependencies

0.4.1-next.1

Patch Changes

  • Updated dependencies

0.4.1-next.0

Patch Changes

0.4.0

Minor Changes

  • 61f464e: Added auth.providers.<providerId>.sessionDuration config for auth providers to allow the lifespan of user sessions to be configured.

Patch Changes

0.4.0-next.3

Patch Changes

  • Updated dependencies

0.4.0-next.2

Minor Changes

  • 61f464e: Added auth.providers.<providerId>.sessionDuration config for auth providers to allow the lifespan of user sessions to be configured.

Patch Changes

  • Updated dependencies

0.3.3-next.1

Patch Changes

  • Updated dependencies

0.3.3-next.0

Patch Changes

  • Updated dependencies

0.3.2

Patch Changes

0.3.2-next.1

Patch Changes

  • Updated dependencies

0.3.2-next.0

Patch Changes

  • Updated dependencies

0.3.1

Patch Changes

0.3.1-next.2

Patch Changes

  • Updated dependencies

0.3.1-next.1

Patch Changes

  • 5c9cc05: Use native fetch instead of node-fetch
  • Updated dependencies

0.3.1-next.0

Patch Changes

  • Updated dependencies

0.3.0

Minor Changes

  • 75168e3: BREAKING: The AWS ALB fullProfile will no longer have the its username or email converted to lowercase. This is to ensure unique handling of the users. You may need to update and configure a custom sign-in resolver or profile transform as a result.

Patch Changes

0.3.0-next.2

Patch Changes

  • Updated dependencies

0.3.0-next.1

Patch Changes

  • Updated dependencies

0.3.0-next.0

Minor Changes

  • 75168e3: BREAKING: The AWS ALB fullProfile will no longer have the its username or email converted to lowercase. This is to ensure unique handling of the users. You may need to update and configure a custom sign-in resolver or profile transform as a result.

Patch Changes

  • Updated dependencies

0.2.1

Patch Changes

  • 217458a: Updated configuration schema to include the new allowedDomains option for the emailLocalPartMatchingUserEntityName sign-in resolver.
  • 094eaa3: Remove references to in-repo backend-common
  • Updated dependencies

0.2.1-next.1

Patch Changes

  • 217458a: Updated configuration schema to include the new allowedDomains option for the emailLocalPartMatchingUserEntityName sign-in resolver.
  • Updated dependencies

0.2.1-next.0

Patch Changes

  • 094eaa3: Remove references to in-repo backend-common
  • Updated dependencies

0.2.0

Minor Changes

  • d425fc4: BREAKING: The return values from createBackendPlugin, createBackendModule, and createServiceFactory are now simply BackendFeature and ServiceFactory, instead of the previously deprecated form of a function that returns them. For this reason, createServiceFactory also no longer accepts the callback form where you provide direct options to the service. This also affects all coreServices.* service refs.

    This may in particular affect tests; if you were effectively doing createBackendModule({...})() (note the parentheses), you can now remove those extra parentheses at the end. You may encounter cases of this in your packages/backend/src/index.ts too, where you add plugins, modules, and services. If you were using createServiceFactory with a function as its argument for the purpose of passing in options, this pattern has been deprecated for a while and is no longer supported. You may want to explore the new multiton patterns to achieve your goals, or moving settings to app-config.

    As part of this change, the IdentityFactoryOptions type was removed, and can no longer be used to tweak that service. The identity service was also deprecated some time ago, and you will want to migrate to the new auth system if you still rely on it.

Patch Changes

0.2.0-next.2

Patch Changes

0.2.0-next.1

Patch Changes

0.2.0-next.0

Minor Changes

  • d425fc4: BREAKING: The return values from createBackendPlugin, createBackendModule, and createServiceFactory are now simply BackendFeature and ServiceFactory, instead of the previously deprecated form of a function that returns them. For this reason, createServiceFactory also no longer accepts the callback form where you provide direct options to the service. This also affects all coreServices.* service refs.

    This may in particular affect tests; if you were effectively doing createBackendModule({...})() (note the parentheses), you can now remove those extra parentheses at the end. You may encounter cases of this in your packages/backend/src/index.ts too, where you add plugins, modules, and services. If you were using createServiceFactory with a function as its argument for the purpose of passing in options, this pattern has been deprecated for a while and is no longer supported. You may want to explore the new multiton patterns to achieve your goals, or moving settings to app-config.

    As part of this change, the IdentityFactoryOptions type was removed, and can no longer be used to tweak that service. The identity service was also deprecated some time ago, and you will want to migrate to the new auth system if you still rely on it.

Patch Changes

0.1.15

Patch Changes

  • c8f1cae: Add signIn to authentication provider configuration schema

  • 4ea354f: Added a signer configuration option to validate against the token claims. We strongly recommend that you set this value (typically on the format arn:aws:elasticloadbalancing:us-east-2:123456789012:loadbalancer/app/my-load-balancer/1234567890123456) to ensure that the auth provider can safely check the authenticity of any incoming tokens.

    Example:

     auth:
   providers:
     awsalb:
       # this is the URL of the IdP you configured
       issuer: 'https://example.okta.com/oauth2/default'
       # this is the ARN of your ALB instance
+      signer: 'arn:aws:elasticloadbalancing:us-east-2:123456789012:loadbalancer/app/my-load-balancer/1234567890123456'
       # this is the region where your ALB instance resides
       region: 'us-west-2'
       signIn:
         resolvers:
           # typically you would pick one of these
           - resolver: emailMatchingUserEntityProfileEmail
           - resolver: emailLocalPartMatchingUserEntityName

  • 93095ee: Make sure node-fetch is version 2.7.0 or greater

  • Updated dependencies

0.1.15-next.3

Patch Changes

0.1.15-next.2

Patch Changes

0.1.15-next.1

Patch Changes

0.1.15-next.0

Patch Changes

0.1.14

Patch Changes

0.1.14-next.1

Patch Changes

0.1.13-next.0

Patch Changes

0.1.11

Patch Changes

0.1.11-next.3

Patch Changes

0.1.11-next.2

Patch Changes

0.1.11-next.1

Patch Changes

0.1.11-next.0

Patch Changes

0.1.10

Patch Changes

0.1.10-next.2

Patch Changes

0.1.10-next.1

Patch Changes

0.1.10-next.0

Patch Changes

0.1.9

Patch Changes

  • f286d59: Added support for AWS GovCloud (US) regions

  • 30f5a51: Added authModuleAwsAlbProvider as a default export.

    It can now be used like this in your backend: backend.add(import('@backstage/plugin-auth-backend-module-aws-alb-provider'));

  • Updated dependencies

0.1.9-next.1

Patch Changes

  • 30f5a51: Added authModuleAwsAlbProvider as a default export.

    It can now be used like this in your backend: backend.add(import('@backstage/plugin-auth-backend-module-aws-alb-provider'));

  • Updated dependencies

0.1.9-next.0

Patch Changes

0.1.8

Patch Changes

0.1.7

Patch Changes

0.1.6

Patch Changes

0.1.5

Patch Changes

0.1.5-next.2

Patch Changes

0.1.5-next.1

Patch Changes

0.1.4-next.0

Patch Changes

  • 2af5354: Bump dependency jose to v5
  • b1b012d: Fix issue with providerInfo not being set properly for some proxy providers, by making providerInfo an explicit optional return from authenticate
  • Updated dependencies

0.1.0

Minor Changes

  • 23a98f8: Migrated the AWS ALB auth provider to new @backstage/plugin-auth-backend-module-aws-alb-provider module package.

Patch Changes

0.1.0-next.2

Patch Changes

0.1.0-next.1

Patch Changes

0.1.0-next.0

Minor Changes

  • 23a98f8: Migrated the AWS ALB auth provider to new @backstage/plugin-auth-backend-module-aws-alb-provider module package.

Patch Changes

Reference in New Issue View Git Blame Copy Permalink