Commit Graph

783 Commits

Author SHA1 Message Date
dependabot[bot] 0107c9aa08 chore(deps): bump helmet from 4.4.1 to 5.0.2
Bumps [helmet](https://github.com/helmetjs/helmet) from 4.4.1 to 5.0.2.
- [Release notes](https://github.com/helmetjs/helmet/releases)
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](https://github.com/helmetjs/helmet/compare/v4.4.1...v5.0.2)

---
updated-dependencies:
- dependency-name: helmet
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-16 22:50:06 +01:00
Fredrik Adelöw 69ad9e1e7b Merge pull request #9560 from backstage/freben/location-by-ref
Removed `CatalogApi.geLocationByEntity` and `CatalogApi.getOriginLocationByEntity`, and replaced them with `CatalogApi.getLocationByRef`.
2022-02-16 18:58:14 +01:00
Patrik Oldsberg d99c3c2177 Merge pull request #9254 from backstage/rugvip/add-roles
packages: add roles to all packages
2022-02-16 18:40:37 +01:00
Patrik Oldsberg 9892d74326 cli: renamed script commands to package
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-15 21:27:12 +01:00
Fredrik Adelöw deaf6065db Removed CatalogApi.geLocationByEntity and CatalogApi.getOriginLocationByEntity, and replaced them with CatalogApi.getLocationByRef.
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-15 19:47:34 +01:00
Johan Haals 7aeb491394 catalog-model: deprecate ENTITY_DEFAULT_NAMESPACE, replace with DEFAULT_NAMESPACE
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-02-15 10:27:57 +01:00
Patrik Oldsberg 8f82d80adf migrate all package scripts
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-14 21:50:07 +01:00
Patrik Oldsberg bb5fcc3209 update all plugin package roles
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-14 21:50:05 +01:00
Patrik Oldsberg b521c1b83b detect all package roles
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-14 21:50:03 +01:00
Fredrik Adelöw f67fc7264c Merge pull request #9452 from backstage/freben/passport-oauth2
Bump passport-oauth2 to version 1.6.1
2022-02-11 14:26:50 +01:00
Fredrik Adelöw 1ed305728b bump node-fetch and cross-fetch
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-10 15:51:50 +01:00
Fredrik Adelöw a31559d1f5 Bump passport-oauth2 to version 1.6.1
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-10 14:14:31 +01:00
github-actions[bot] e4791789d1 Version Packages 2022-02-10 11:06:33 +00:00
Fredrik Adelöw 3c9aed1b16 review comments
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-10 10:36:45 +01:00
Fredrik Adelöw bf5222bfa1 moved over IdentityClient as well
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-09 19:32:59 +01:00
Fredrik Adelöw 86b40d464f move over BackstageSignInResult, BackstageIdentityResponse, BackstageUserIdentity
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-09 17:10:18 +01:00
Fredrik Adelöw b3f3e42036 move IdentityClient.getBearerToken
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-09 10:38:12 +01:00
Fredrik Adelöw 6bc86fcf2d make IdentityClient.listPublicKeys private
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-09 10:23:07 +01:00
github-actions[bot] e74f416a00 Version Packages (next) 2022-02-08 19:38:17 +00:00
Daniel Deloff 3396bc5973 remove option for disabling refresh
Signed-off-by: Daniel Deloff <44780793+rv-ddeloff@users.noreply.github.com>
2022-02-08 14:04:50 -05:00
Fredrik Adelöw cdc4282e3f Merge pull request #9351 from backstage/dependabot/npm_and_yarn/knex-1.0.2
chore(deps): bump knex from 0.95.6 to 1.0.2
2022-02-08 17:05:17 +01:00
Fredrik Adelöw 1dd5a02e91 fix build
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-07 15:51:58 +01:00
dependabot[bot] 2441d1cf59 chore(deps): bump knex from 0.95.6 to 1.0.2
Bumps [knex](https://github.com/knex/knex) from 0.95.6 to 1.0.2.
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/knex/knex/commits)

---
updated-dependencies:
- dependency-name: knex
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-07 15:51:55 +01:00
Patrik Oldsberg 5d5c9bfb4c auth-backend: removed cookieConfigurer from router options
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-04 13:11:10 +01:00
Patrik Oldsberg 08fcda13ef auth-backend: make it possible to tweak the cookie configuration logic
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-04 01:32:22 +01:00
github-actions[bot] a12bb7b065 Version Packages 2022-02-03 09:42:25 +00:00
Johan Haals 379427cbbf Merge pull request #9308 from backstage/eide/add-custom-callbackurl-to-providers
[auth-backend]: Add custom `callbackUrl` support to additional providers
2022-02-03 10:36:35 +01:00
github-actions[bot] 51eecb3f03 Version Packages (next) 2022-02-02 14:28:47 +00:00
Marcus Eide ea30d0fd75 Add support for custom callbackUrls to providers
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-02-02 13:32:57 +01:00
Patrik Oldsberg 648606b3ac auth-backend: store github oauth token in cookie and use for refresh
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-02 10:46:33 +01:00
Patrik Oldsberg 9d75a939b6 auth-backend: fix OAuthAdapter scope store, only storing on success
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-02-02 09:54:14 +01:00
github-actions[bot] e1580cf73a Version Packages (next) 2022-02-01 08:53:29 +00:00
Johan Haals d2a0f08d5c Merge pull request #9190 from backstage/catalog-identity-client-token
Use server token for catalog identity client
2022-01-28 11:55:07 +01:00
dependabot[bot] 28a5f9d0b1 chore(deps): bump passport from 0.4.1 to 0.5.2
Bumps [passport](https://github.com/jaredhanson/passport) from 0.4.1 to 0.5.2.
- [Release notes](https://github.com/jaredhanson/passport/releases)
- [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jaredhanson/passport/compare/v0.4.1...v0.5.2)

---
updated-dependencies:
- dependency-name: passport
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-28 09:40:21 +00:00
Joe Porpeglia 7023e7066b Remove todo
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-27 09:13:03 -05:00
Joe Porpeglia 2b028ae041 Update api reports
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-27 09:13:02 -05:00
Joe Porpeglia ae1bba9ebc Use server token for catalog identity client
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-27 09:13:02 -05:00
github-actions[bot] 406848efee Version Packages 2022-01-27 11:07:27 +00:00
Patrik Oldsberg 26c7fca6be auth-backend: prettier + changeset tweak
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-01-27 10:52:00 +01:00
elonj 80b9027eb7 oidc and googld subs will be full entity refs
Signed-off-by: elonj <elonj@spotify.com>
2022-01-26 17:27:32 -05:00
Patrik Oldsberg 1aee8c207c Merge pull request #9136 from backstage/eide/auth-callback-urls
[auth-backend]: Support callbackUrl when setting cookie configuration
2022-01-26 16:34:21 +01:00
Johan Haals 3cd9123a32 chore: format with prettier
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-01-25 09:11:48 +01:00
Marcus Eide 3b6e41009b Revert the cookiePath to include the handler suffix
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 14:24:39 +01:00
Marcus Eide 71a2fbaa58 Simplify the cookiePath logic
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 14:22:54 +01:00
Marcus Eide 129dc2e099 Update api-reports
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 11:20:49 +01:00
Marcus Eide 2bef25550d Add tests
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 11:20:49 +01:00
Marcus Eide aec40d321d Add support for callbackUrl when setting cookie configuration
Signed-off-by: Marcus Eide <eide@spotify.com>
2022-01-24 11:20:49 +01:00
github-actions[bot] 8b18d054f3 Version Packages 2022-01-20 10:33:31 +00:00
Fredrik Adelöw 6be95e308f Merge pull request #9048 from backstage/revert-8987-dependabot/npm_and_yarn/helmet-5.0.1
Revert "build(deps): bump helmet from 4.4.1 to 5.0.1"
2022-01-20 11:00:39 +01:00
Patrik Oldsberg 1fb1555145 Merge pull request #9043 from backstage/rugvip/full-refal-panic
auth-backend: make sure userEntityRef is always a full entity ref
2022-01-20 11:00:18 +01:00