Commit Graph

827 Commits

Author SHA1 Message Date
Fredrik Adelöw 95aee1904e Merge pull request #22211 from tylerd-canva/tylerd/cfaccess-token-poc
Add support for Cloudflare Access Tokens to `cfaccess` Auth Provider
2024-02-27 10:20:32 +01:00
Patrik Oldsberg 492fe83977 auth-backend: migrate to support new auth services
Co-authored-by: Fredrik Adelöw <freben@gmail.com>
Co-authored-by: Carl-Erik Bergström <cbergstrom@spotify.com>
Co-authored-by: blam <ben@blam.sh>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-02-23 10:58:13 +01:00
Tyler Davis bfd0d62351 update tests
Signed-off-by: Tyler Davis <tylerd@canva.com>
2024-02-22 17:31:59 +11:00
Tyler Davis 0d1ad9faf9 PR feedback: change structure of serviceTokens config
Signed-off-by: Tyler Davis <tylerd@canva.com>
2024-02-22 17:20:55 +11:00
Tyler Davis 3191d616e8 pr feedback: make service tokens configurable
Signed-off-by: Tyler Davis <tylerd@canva.com>
2024-02-22 17:20:55 +11:00
Tyler Davis 293c835e05 Add support for Service Tokens to the cfaccess auth provider
Signed-off-by: Tyler Davis <tylerd@canva.com>
2024-02-22 16:30:23 +11:00
Fredrik Adelöw fa7ea3f2f0 break out the providers router into a separate file
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2024-02-16 14:33:10 +01:00
Fredrik Adelöw f5e04e39d2 move away from deprecated types, import from auth-node
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2024-02-16 12:59:21 +01:00
Patrik Oldsberg a3b3e1bf8a Merge pull request #22767 from backstage/rugvip/fix
explore: fix GroupsDiagram test
2024-02-06 15:52:39 +01:00
Patrik Oldsberg 0cd6325602 Merge pull request #22580 from secustor/chore/migrate-passport-saml
chore(plugins/auth-backend): migrate from passport-saml package to @node-saml/passport-saml
2024-02-06 15:03:51 +01:00
Patrik Oldsberg a9e0107111 auth-backend: refuse to issue excessively large tokens
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-02-06 15:02:24 +01:00
secustor d589a0488d expose new needed configuration options
Signed-off-by: secustor <sebastian@poxhofer.at>
2024-02-06 10:09:52 +01:00
Aramis ee3cbed39d remove symmetric keys
Signed-off-by: Aramis <sennyeyaramis@gmail.com>
2024-02-04 10:46:50 -05:00
Aramis 4a89bc48b1 add support for service-to-service auth external callers
Signed-off-by: Aramis <sennyeyaramis@gmail.com>
2024-02-04 10:46:50 -05:00
Aramis f6dfb17b78 add additional scopes
Signed-off-by: Aramis <sennyeyaramis@gmail.com>
2024-02-04 10:46:49 -05:00
Aramis c3a91f8213 fix(auth): add support for additional alg values
Signed-off-by: Aramis <sennyeyaramis@gmail.com>
2024-02-04 10:46:49 -05:00
Patrik Oldsberg 331dfd1896 Merge pull request #22557 from jamieklassen/refactor-jose
Refactor auth-node to use 'jose' to decode JWTs
2024-02-03 14:59:22 +01:00
Patrik Oldsberg 22bb59712e Merge pull request #22675 from backstage/rugvip/auth-exp-tweaks
auth-backend: completely remove hardcoded session expiration
2024-02-03 12:59:04 +01:00
Patrik Oldsberg 3a00dc56a5 Merge pull request #21993 from Ericsson/configuration_token_expiry
Ability for Users to configure auth token expiration [19341]
2024-02-03 12:58:56 +01:00
Patrik Oldsberg 87dea686bf auth-backend: refactor to remove internal hardcoded default session expiration
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-02-03 12:37:04 +01:00
Jamie Klassen d4cc552ab1 refactor auth plugins to use jose
Signed-off-by: Jamie Klassen <jamie.klassen@broadcom.com>
2024-02-02 11:03:09 -05:00
Jamie Klassen c4aaad016d backfill tests for makeProfileInfo
Signed-off-by: Jamie Klassen <jamie.klassen@broadcom.com>
2024-02-02 11:03:09 -05:00
Lavanya Sainik de1aa5179c Update router.test.ts
Signed-off-by: Lavanya Sainik <137502642+lavanya-sainik-ericsson@users.noreply.github.com>
2024-01-31 16:57:03 +00:00
Lavanya Sainik a21497d33d Update router.ts
Signed-off-by: Lavanya Sainik <137502642+lavanya-sainik-ericsson@users.noreply.github.com>
2024-01-31 16:53:16 +00:00
secustor 7dd8463935 chore(plugins/auth-backend): migrate from passport-saml package to @node-saml/passport-saml
Signed-off-by: secustor <sebastian@poxhofer.at>
2024-01-29 12:20:34 +01:00
Patrik Oldsberg f12578eedd Merge pull request #22103 from GuptaNavdeep1983/nav/aws-alb
auth-backend: migrated AWS ALB provider to new backend.
2024-01-25 12:56:17 +01:00
Lavanya Sainik cf9b58c340 Update router.test.ts as per the changes in router.ts
Signed-off-by: Lavanya Sainik <137502642+lavanya-sainik-ericsson@users.noreply.github.com>
2024-01-23 09:52:42 +00:00
Lavanya Sainik 0abf05967d Update router.ts with suggested change
Signed-off-by: Lavanya Sainik <137502642+lavanya-sainik-ericsson@users.noreply.github.com>
2024-01-23 09:51:39 +00:00
Patrik Oldsberg d1a5219e9a auth-backend: doc fix
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-01-21 21:11:51 +01:00
Patrik Oldsberg d80c311f6b Merge pull request #22208 from Bonial-International-GmbH/pjungermann/auth-ms
auth-backend: use externalized microsoft auth implementation again
2024-01-21 21:11:17 +01:00
Patrik Oldsberg b5d4c7b882 auth-backend: add back deprecated OidcAuthResult
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-01-21 14:57:40 +01:00
Jamie Klassen 002010c8f6 authHandler/signInResolver backwards compatibility
Signed-off-by: Jamie Klassen <jamie.klassen@broadcom.com>
2024-01-17 18:50:17 -05:00
Ruben Vallejo 5d2fcba064 PR chores, changeset,apireport
Signed-off-by: Ruben Vallejo <rvallejo@vmware.com>
2024-01-17 18:50:17 -05:00
Ruben Vallejo 1964cb7d88 Working oidc authenticator with passing unit and module tests
Signed-off-by: Ruben Vallejo <rvallejo@vmware.com>
2024-01-17 18:50:17 -05:00
Ruben Vallejo a3c911e636 authenticator alongside passing unit tests
Signed-off-by: Ruben Vallejo <rvallejo@vmware.com>
2024-01-17 18:50:17 -05:00
Andy Muldoon 8e8a25dba5 Ability for Users to configure auth token expiration [19341]
Signed-off-by: Andy Muldoon <andy.muldoon@ericsson.com>
2024-01-12 12:55:21 +00:00
Patrick Jungermann a3f1fa30f5 auth-backend: use externalized microsoft auth implementation again
This reverts commit 96c4f54bf6.

PR #20706 fixed the issues that required
the revert of the implementation.

Relates-to: PR #20706
Relates-to: PR #20732
Relates-to: PR #20734
Relates-to: PR #20120
Relates-to: PR #22184
Signed-off-by: Patrick Jungermann <Patrick.Jungermann@gmail.com>
2024-01-12 02:20:16 +01:00
Navdeep Gupta 23a98f83cd auth-backend: migrate to new backend system for AWS ALB provider.
Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

auth-backend: changeset.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

yarn lock file.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

options error.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

add dependency.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

yarn lock file.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

api reports.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: comments.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: catalog info yaml.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: missing dependency.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: yarn lock file.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: package json.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: yarn lock file.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: yarn lock file.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: resolutions for @emotion/serialize errors.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

fix: merged with latest yarn lock file.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

improved tests.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>

improved tests.

Signed-off-by: Navdeep Gupta <navdeep.gupta@philips.com>
2024-01-08 16:07:16 -05:00
Vincenzo Scamporlino 3f05bcb099 auth-backend: add okta missing common resolvers
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2023-12-21 13:54:39 +01:00
Andre Wanlin b7de76ae72 Introduced version policy for PostgreSQL
Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Added changeset

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Updated API Report

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Updated references to use 12 and 16

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Attempt to fix tests

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Added back old Ids

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Fixed test

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Updated API Report and test

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Added new setDefaults static method and related changes

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Updated API Report

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Improved logic based on feedback

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Added missing changeset

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Changes based on feedback

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

API Report correction

Signed-off-by: Andre Wanlin <awanlin@spotify.com>

Updated to use new setDefaults

Signed-off-by: Andre Wanlin <awanlin@spotify.com>
2023-12-15 12:27:51 -06:00
rtriesscheijn b2402af257 fix: missing return statement in KeyStore.ts
Signed-off-by: rtriesscheijn <rtriesscheijn@bol.com>
2023-11-29 09:37:48 +01:00
djamaile 7ac25759a5 chore: move implementation to new plugin
Signed-off-by: djamaile <rdjamaile@gmail.com>
2023-11-20 20:01:15 +01:00
Fredrik Adelöw 4a11189089 Merge pull request #21325 from Josh-Uvi/auth-okta-provider
Auth backend module Okta provider
2023-11-20 10:06:32 +01:00
Fredrik Adelöw d56f59f743 Merge pull request #21007 from handsamtw/auth-backend-module-atlassian-provider
Auth backend module atlassian provider
2023-11-17 12:55:30 +01:00
Josh Uvi f7e10a7510 Initial commit
Signed-off-by: Josh Uvi <joshuauvbiekpahor@gmail.com>
2023-11-15 15:20:16 +00:00
Patrik Oldsberg 812700e590 Merge pull request #20580 from ataylorme/feat/okta-auth-scope-option
Allow user-defined scopes for Okta auth in config yaml
2023-11-14 11:45:20 +01:00
Shousan Liao 2ff9373179 edit auth provider's comment
Signed-off-by: Shousan Liao <samliao980822@gmail.com>
2023-11-09 11:36:30 -05:00
Shousan Liao f7f20b7c3f delete provider.test.ts and update auth-backend's provider
Signed-off-by: Shousan Liao <samliao980822@gmail.com>
2023-11-06 15:16:26 -05:00
Alex Crome 11153a019d Merge remote-tracking branch 'upstream/master' into entra-rename 2023-10-28 10:39:42 +01:00
ataylorme 5ae8214a4d Better naming of variable
Signed-off-by: ataylorme <andrew@ataylor.me>
2023-10-26 08:05:13 -07:00