@backstage/backend-app-api 0.7.1-next.0 → 0.7.2-next.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @backstage/backend-app-api
 
+## 0.7.2-next.1
+
+### Patch Changes
+
+- 09f8988: Remove explicit `alg` check for user tokens in `verifyToken`
+- Updated dependencies
+  - @backstage/backend-common@0.22.0-next.1
+  - @backstage/backend-tasks@0.5.23-next.1
+  - @backstage/plugin-auth-node@0.4.13-next.1
+  - @backstage/plugin-permission-node@0.7.29-next.1
+  - @backstage/cli-node@0.2.5
+  - @backstage/config-loader@1.8.0
+  - @backstage/backend-plugin-api@0.6.18-next.1
+
 ## 0.7.1-next.0
 
 ### Patch Changes

package/alpha/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/backend-app-api",
-  "version": "0.7.1-next.0",
+  "version": "0.7.2-next.1",
   "main": "../dist/alpha.cjs.js",
   "types": "../dist/alpha.d.ts"
 }

package/dist/index.cjs.js

@@ -2467,18 +2467,16 @@ var __privateMethod$3 = (obj, member, method) => {
 };
 var _getTokenVerificationOptions, getTokenVerificationOptions_fn;
 const _UserTokenHandler = class _UserTokenHandler {
-  constructor(algorithms, jwksClient) {
-    this.algorithms = algorithms;
+  constructor(jwksClient) {
     this.jwksClient = jwksClient;
     __privateAdd$4(this, _getTokenVerificationOptions);
   }
   static create(options) {
-    const algorithms = ["ES256"];
     const jwksClient = new JwksClient(async () => {
       const url = await options.discovery.getBaseUrl("auth");
       return new URL(`${url}/.well-known/jwks.json`);
     });
-    return new _UserTokenHandler(algorithms, jwksClient);
+    return new _UserTokenHandler(jwksClient);
   }
   async verifyToken(token) {
     const verifyOpts = __privateMethod$3(this, _getTokenVerificationOptions, getTokenVerificationOptions_fn).call(this, token);
@@ -2551,14 +2549,12 @@ getTokenVerificationOptions_fn = function(token) {
     const { typ } = jose.decodeProtectedHeader(token);
     if (typ === pluginAuthNode.tokenTypes.user.typParam) {
       return {
-        algorithms: this.algorithms,
         requiredClaims: ["iat", "exp", "sub"],
         typ: pluginAuthNode.tokenTypes.user.typParam
       };
     }
     if (typ === pluginAuthNode.tokenTypes.limitedUser.typParam) {
       return {
-        algorithms: this.algorithms,
         requiredClaims: ["iat", "exp", "sub"],
         typ: pluginAuthNode.tokenTypes.limitedUser.typParam
       };
@@ -2566,7 +2562,6 @@ getTokenVerificationOptions_fn = function(token) {
     const { aud } = jose.decodeJwt(token);
     if (aud === pluginAuthNode.tokenTypes.user.audClaim) {
       return {
-        algorithms: this.algorithms,
         audience: pluginAuthNode.tokenTypes.user.audClaim
       };
     }