@backstage/backend-app-api 0.6.3-next.0 → 0.7.0-next.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +32 -0
- package/alpha/package.json +1 -1
- package/dist/index.cjs.js +823 -253
- package/dist/index.cjs.js.map +1 -1
- package/migrations/20240327104803_public_keys.js +50 -0
- package/package.json +17 -12
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,37 @@
|
|
|
1
1
|
# @backstage/backend-app-api
|
|
2
2
|
|
|
3
|
+
## 0.7.0-next.1
|
|
4
|
+
|
|
5
|
+
### Minor Changes
|
|
6
|
+
|
|
7
|
+
- 3256f14: **BREAKING**: Modules are no longer loaded unless the plugin that they extend is present.
|
|
8
|
+
|
|
9
|
+
### Patch Changes
|
|
10
|
+
|
|
11
|
+
- 10327fb: Deprecate the `getPath` option for the `httpRouterServiceFactory` and more generally the ability to configure plugin API paths to be anything else than `/api/:pluginId/`. Requests towards `/api/*` that do not match an installed plugin will also no longer be handled by the index router, typically instead returning a 404.
|
|
12
|
+
- 1a20b12: Make the auth service create and validate dedicated OBO tokens, containing the user identity proof.
|
|
13
|
+
- bce0879: Service-to-service authentication has been improved.
|
|
14
|
+
|
|
15
|
+
Each plugin now has the capability to generate its own signing keys for token issuance. The generated public keys are stored in a database, and they are made accessible through a newly created endpoint: `/.backstage/auth/v1/jwks.json`.
|
|
16
|
+
|
|
17
|
+
`AuthService` can now issue tokens with a reduced scope using the `getPluginRequestToken` method. This improvement enables plugins to identify the plugin originating the request.
|
|
18
|
+
|
|
19
|
+
- 54f2ac8: Added `initialization` option to `createServiceFactory` which defines the initialization strategy for the service. The default strategy mimics the current behavior where plugin scoped services are initialized lazily by default and root scoped services are initialized eagerly.
|
|
20
|
+
- d62bc51: Add support for limited user tokens by using user identity proof provided by the auth backend.
|
|
21
|
+
- c884b9a: Automatically creates a get and delete cookie endpoint when a `user-cookie` policy is added.
|
|
22
|
+
- Updated dependencies
|
|
23
|
+
- @backstage/backend-common@0.21.7-next.1
|
|
24
|
+
- @backstage/backend-plugin-api@0.6.17-next.1
|
|
25
|
+
- @backstage/plugin-auth-node@0.4.12-next.1
|
|
26
|
+
- @backstage/backend-tasks@0.5.22-next.1
|
|
27
|
+
- @backstage/plugin-permission-node@0.7.28-next.1
|
|
28
|
+
- @backstage/cli-common@0.1.13
|
|
29
|
+
- @backstage/cli-node@0.2.4
|
|
30
|
+
- @backstage/config@1.2.0
|
|
31
|
+
- @backstage/config-loader@1.8.0-next.0
|
|
32
|
+
- @backstage/errors@1.2.4
|
|
33
|
+
- @backstage/types@1.1.1
|
|
34
|
+
|
|
3
35
|
## 0.6.3-next.0
|
|
4
36
|
|
|
5
37
|
### Patch Changes
|