Commit Graph

9012 Commits

Author SHA1 Message Date
Ben Lambert 452afde031 Merge pull request #9038 from backstage/blam/scaffolder-secrets
scaffolder: Support supplying secrets at Task Creation
2022-01-20 09:28:37 +01:00
Fredrik Adelöw 444175b7a4 Merge pull request #8987 from backstage/dependabot/npm_and_yarn/helmet-5.0.1
build(deps): bump helmet from 4.4.1 to 5.0.1
2022-01-20 09:13:35 +01:00
blam 7e76e7dc12 chore: adjusting the types a little bit and regenerating api-docs
Signed-off-by: blam <ben@blam.sh>
2022-01-20 09:02:46 +01:00
blam 783c435e46 api-docs: regenerate reports for scaffolder and changes
Signed-off-by: blam <ben@blam.sh>
2022-01-19 18:38:10 +01:00
blam 8181b34c89 chore: set the secrets type as TaskSecrets
Signed-off-by: blam <ben@blam.sh>
2022-01-19 18:20:19 +01:00
blam 2d4ef2b78e chore: secrets are removed when claiming the task
Signed-off-by: blam <ben@blam.sh>
2022-01-19 18:13:32 +01:00
Fredrik Adelöw ce5edcbc05 Merge pull request #8973 from benlangfeld/patch-2
Bump @asyncapi/react-component for CVE
2022-01-19 18:07:03 +01:00
blam 128a489ba0 chore: delete the secrets when claiming the task so we don't store anything locally
Signed-off-by: blam <ben@blam.sh>
2022-01-19 17:18:30 +01:00
blam d19c88a9e4 chore: moving the catalog register to use backstageToken instead from the secrets
Signed-off-by: blam <ben@blam.sh>
2022-01-19 17:13:59 +01:00
blam f999b4063a chore: deprecating the token that's passed through to the context and using ctx.secrets.backstageToken instead
Signed-off-by: blam <ben@blam.sh>
2022-01-19 17:11:45 +01:00
blam c3a28a46fc chore: deprecating the token field and renaming to backstageToken as token is far too generic
Signed-off-by: blam <ben@blam.sh>
2022-01-19 16:43:45 +01:00
blam 8100abfde2 feat: adding the option to pass secrets from the frontend from the ScaffolderApiClient
Signed-off-by: blam <ben@blam.sh>
2022-01-19 16:43:12 +01:00
Ben Langfeld 0c0d8a47e7 Bump @asyncapi/react-component for CVE
[CVE-2022-21680](https://github.com/advisories/GHSA-rrrm-qjm4-v8hf) and [CVE-2022-21681](https://github.com/advisories/GHSA-5v2h-r2cx-5xgj)

See https://github.com/asyncapi/asyncapi-react/pull/522

Signed-off-by: Ben Langfeld <blangfeld@powerhrg.com>
2022-01-19 12:30:51 -03:00
elonj 8143d941b8 ids will be name
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:51 -05:00
elonj b7c1bb21ad fixed GithubAuth tests
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:41 -05:00
elonj d0ad9ebe22 auth providers will return entity ref as "sub" value
Signed-off-by: elonj <elonj@spotify.com>
2022-01-19 10:04:18 -05:00
Fredrik Adelöw 835b2da52a Merge pull request #8967 from djamaile/master
chore(catalog): export RelatedEntitiesCard component
2022-01-19 14:59:57 +01:00
Fredrik Adelöw 3a5eba9464 fixup
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-01-19 14:06:29 +01:00
Ben Lambert 2e903d91af Merge pull request #9025 from backstage/blam/fix-todo-plugin-readme
todos: fix typo in README.md
2022-01-19 12:53:47 +01:00
djamaile 440c534dd8 chore: change exported component name
Signed-off-by: djamaile <rdjamaile@gmail.com>
2022-01-19 12:34:15 +01:00
Fredrik Adelöw 94c0026640 Merge pull request #9022 from mufaddal7/fix/newrelic-dashboard
Fix/newrelic dashboard
2022-01-19 12:12:49 +01:00
Fredrik Adelöw 99f675b5aa Merge pull request #8995 from backstage/dependabot/npm_and_yarn/google-cloud/firestore-5.0.2
build(deps): bump @google-cloud/firestore from 4.15.1 to 5.0.2
2022-01-19 12:10:25 +01:00
Fredrik Adelöw cc33f8d8cb Merge pull request #8782 from akz08/reroute-register-api
Reroute register api
2022-01-19 11:39:37 +01:00
blam 4d6b58d5b6 fix: readme typo
Signed-off-by: blam <ben@blam.sh>
2022-01-19 11:39:26 +01:00
Eric Peterson 1f65b3752e Merge pull request #9001 from backstage/validate-search-query-string
search-backend: validate query string
2022-01-19 10:10:49 +01:00
Fredrik Adelöw 5754f2d200 Merge pull request #8455 from Sarabadu/master
[RFC] LayoutProvider and focusContent
2022-01-19 09:32:16 +01:00
mufaddal motiwala 69883ebcc0 render single page dashboards
Signed-off-by: mufaddal motiwala <mufaddalmm.52@gmail.com>
2022-01-19 12:50:30 +05:30
Kamil Zainal 027bc50cc5 Rename registerComponent to registerApi to better communicate intent
Signed-off-by: Kamil Zainal <gh@akza.dev>
2022-01-18 18:12:36 +00:00
Patrik Oldsberg a724d38208 Merge pull request #9000 from backstage/rugvip/noignore
remove usage of @ts-ignore
2022-01-18 18:46:28 +01:00
Joe Porpeglia ffa0ecfac4 Remove unused dependency
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia f911a60baf Update api-report
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia cd3c5b132e Update package exports to align with ADR004
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia ccaa50511f Make getCacheKey sync
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia 63e8b8605e Disable catalog permission middleware unless permission.enabled = true
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia 17ebcb09cd Refactor router tests
Adds a `createApp` helper instead of creating the express app in `beforeEach`. This allows tests to mock behavior of router creation, like toggling certain middleware based on config values.

Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia f1918143e5 Compute cache keys from tokens instead of user entity refs
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia e9857d0b82 Remove 403 handling logic
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia d9afa2e882 Add tests to verify /static/docs behavior
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia c2f54048d1 Use catalog: prefix for catalog entity cache
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia 413c9fab08 Cancel cache read if it takes too long
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia f5598677bf Set cache value asynchronously
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia 45f37c9835 Use CachedEntityLoader in techdocs router
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia 7dcc6b1fe6 Add CachedEntityLoader for techdocs
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
2022-01-18 12:43:35 -05:00
Joe Porpeglia b76fec242d Verify access to related catalog entities for all techdocs api routes
Signed-off-by: Joe Porpeglia <josephp@spotify.com>
Co-authored-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>
2022-01-18 12:43:35 -05:00
MT Lewis cd6854046e search-backend: validate query string
Ensures that known query params accepted by the search endpoint have
the correct type after parsing

Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-18 16:53:22 +00:00
Joon Park 6680853e0c Export conditional permission policy helpers from catalog-backend (#8966)
* Export conditional permission policy helpers from catalog-backend

Signed-off-by: Joon Park <joonp@spotify.com>

* Rename exports to include 'catalog'

Signed-off-by: Joon Park <joonp@spotify.com>

* Minor comment edits

Co-authored-by: MT Lewis <mtlewis@users.noreply.github.com>
Signed-off-by: Joon Park <joonp@spotify.com>

Co-authored-by: MT Lewis <mtlewis@users.noreply.github.com>
2022-01-18 16:04:57 +00:00
Joon Park 7e38acaa9e Integrate permissions into catalog-backend location endpoints (#8887)
Signed-off-by: Joon Park <joonp@spotify.com>
2022-01-18 15:55:49 +00:00
github-actions[bot] a94a2b8b3f Version Packages (next) 2022-01-18 13:49:07 +00:00
Patrik Oldsberg a57bee1a02 Merge pull request #8982 from backstage/rugvip/tsbump
Upgrade TypeScript to 4.5 and decouple versioning
2022-01-18 14:01:32 +01:00
Fredrik Adelöw b4e6325654 Merge pull request #8853 from backstage/catalog-backend-permission-integration/entity-ancestry
Integrate permissions into `entityAncestry` endpoint in catalog-backend
2022-01-18 14:01:09 +01:00