Commit Graph

12976 Commits

Author SHA1 Message Date
Patrik Oldsberg 122cf5eed1 Merge pull request #24023 from backstage/rugvip/404
backend-app-api: deprecate plugin path configuration and fix /api/* 404
2024-04-08 14:12:45 +02:00
Patrik Oldsberg 3b3d9730e8 backend-app-api: added root router test for case without index path
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-08 13:54:37 +02:00
Patrik Oldsberg 5f94ce1e92 Merge pull request #24072 from drodil/plugin_id_fix
fix: backend cli util to use the correct id
2024-04-08 09:17:17 +02:00
Heikki Hellgren 6b5ddbe622 fix: backend cli util to use the correct id
instead of using `pluginId: 'testPlugin'` now it uses the right id for
example `pluginId: 'test'`.

Signed-off-by: Heikki Hellgren <heikki.hellgren@op.fi>
2024-04-08 08:26:13 +03:00
Patrik Oldsberg 10327fb855 backend-app-api: deprecate plugin path configuration and fix /api/* 404
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-06 15:47:53 +02:00
Patrik Oldsberg 0ed34a1f3b Merge pull request #23993 from backstage/mob/auth-service-to-service
Auth: granular service-to-service tokens
2024-04-06 15:41:16 +02:00
Patrik Oldsberg 31ee337a50 e2e-test: delay backend check
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-06 15:23:33 +02:00
Patrik Oldsberg 7395364e3b e2e-test: disable default auth policy for backend testing
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-06 12:27:16 +02:00
Patrik Oldsberg 40548a634d backend-app-api: add routing test for DefaultRootHttpRouter
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-06 11:57:11 +02:00
Patrik Oldsberg 9d74e68f79 e2e-test: added --keep option + error message improvements
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-06 11:56:35 +02:00
Patrik Oldsberg d627a67acf backend-app-api: fix race end DatabaseKeyStore tests
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-05 17:01:49 +02:00
Patrik Oldsberg 318c0b760a api report updates for service token improvements
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-05 16:28:56 +02:00
Patrik Oldsberg a5f71d00ff backend-app-api: reorder auth service methods in implementation
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-05 16:17:49 +02:00
Patrik Oldsberg ae38fbb6b8 backend-app-api: update DatabaseKeyStore to store expiration as string
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-05 16:04:37 +02:00
Patrik Oldsberg 4f2aafb86c backend-app-api: update DatabaseKeyStore to trim expired keys
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-05 15:12:45 +02:00
Patrik Oldsberg 7a3684c60b backend-plugin-api: add doc for service factory initialization option
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-05 12:06:38 +02:00
Vincenzo Scamporlino ea84d25b72 backend-next: rollback auth example
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:41 +02:00
Vincenzo Scamporlino 39de4a7924 backend-app-api: detect legacy auth
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:41 +02:00
Vincenzo Scamporlino ad8f173b78 backend-app-api: move jwks to JwksClient
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:41 +02:00
Vincenzo Scamporlino 130b215629 backend-app-api: final service to service refactoring
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:41 +02:00
Vincenzo Scamporlino e1afe84d75 backend-app-api: return valid subject
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:41 +02:00
Vincenzo Scamporlino 112eca573f backend-test-utils: add missing mock methods
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:41 +02:00
Vincenzo Scamporlino 701c51abc9 backend-app-api: verify service-to-service token
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:40 +02:00
Vincenzo Scamporlino 6ce253d7ca backend-app-api: remove publicKeyStoreService implementation
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:40 +02:00
Vincenzo Scamporlino 8c0401a1d5 backend-app-api: move listPublicServiceKeys to authService
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:40 +02:00
Vincenzo Scamporlino ed99c79cf1 backend-app-api: test service to service auth
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:40 +02:00
Vincenzo Scamporlino f1a0569506 backend-app-api: add signing keys migration
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:40 +02:00
Vincenzo Scamporlino eca60af9f7 backend-defaults: instantiate publicKeyStoreService
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:40 +02:00
Vincenzo Scamporlino e8fd082f3b backend-app-api: pass dependencies
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:40 +02:00
Vincenzo Scamporlino 7231bc2a71 backend-app-api: pass expiration key
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:39 +02:00
Vincenzo Scamporlino 1bb21344e2 backend-app-api: add PluginTokenHandler
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:39 +02:00
Vincenzo Scamporlino 8c861be144 backend-app-api: fix typings
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:39 +02:00
Vincenzo Scamporlino 6e611a7977 backend-app-api: add createAuthIntegrationRouter
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:39 +02:00
Vincenzo Scamporlino 8d24ced349 backend-app-api: add publicKeyStoreServiceFactory
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:39 +02:00
Vincenzo Scamporlino b438fea117 backend-plugin-api: add publicKeyStore service
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2024-04-04 14:40:39 +02:00
Patrik Oldsberg 23f9a92c3b Merge pull request #23938 from backstage/mob/service-initialization
Add initialization option to createServiceFactory
2024-04-04 10:08:10 +02:00
Camila Belo b00dc09ece test: cover all type of tokens
Signed-off-by: Camila Belo <camilaibs@gmail.com>
2024-04-03 17:24:41 +02:00
Camila Belo fb09003298 feat: add token backward compatibility
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Camila Belo <camilaibs@gmail.com>
2024-04-03 13:55:04 +02:00
Camila Belo ff681360cc refactor: make token types internal
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: Camila Belo <camilaibs@gmail.com>
2024-04-03 13:43:54 +02:00
Patrik Oldsberg 22c0bd2adf backend-app-api: refactor auth service implementation to use UserTokenHandler more
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 13:12:55 +02:00
Patrik Oldsberg c2aa1ffe1c backend-app-api: move limited token creation to UserTokenHandler
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 13:12:55 +02:00
Patrik Oldsberg 7396a75d62 backend-app-api: complete limited token implementation and verification + test
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 13:12:55 +02:00
Patrik Oldsberg 0d2a05418b backend-app-api,auth: move token typ claim to be a header param
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 13:12:54 +02:00
Patrik Oldsberg 018b0910e0 backend-app-api,auth: add ent claim to user identity proof
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 13:12:54 +02:00
Patrik Oldsberg 3d30d36eab backend-app-api: add initial handling of different token typ claims
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 13:12:54 +02:00
Patrik Oldsberg 3493c914cf backend-app-api: initial test for issuing limited tokens
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 13:12:54 +02:00
Fredrik Adelöw 4194ac7200 auth: issue user identity claims and create limited user tokens from them
Co-authored-by: Camila Belo <camilaibs@gmail.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2024-04-03 13:12:54 +02:00
Patrik Oldsberg 82409d6533 backend-app-api: update feature discovery service test for module loading update
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 12:38:33 +02:00
Patrik Oldsberg 3256f14401 backend-app-api: stop loading modules if parent plugin is not present
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-04-03 12:35:54 +02:00
Ben Lambert 8bcf84bf3e Merge pull request #23401 from backstage/roi/scaffolder-metadata
Standard entity metadata to help measure Scaffolder ROI
2024-04-03 10:38:11 +02:00