@backstage/plugin-auth-backend-module-oauth2-proxy-provider 0.2.8-next.1 → 0.2.8-next.2

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @backstage/plugin-auth-backend-module-oauth2-proxy-provider
 
+## 0.2.8-next.2
+
+### Patch Changes
+
+- 5cc1f7f: Introduce `dangerouslyAllowSignInWithoutUserInCatalog` auth resolver config.
+- Updated dependencies
+  - @backstage/plugin-auth-node@0.6.3-next.2
+  - @backstage/backend-plugin-api@1.3.1-next.2
+  - @backstage/errors@1.2.7
+
 ## 0.2.8-next.1
 
 ### Patch Changes

package/dist/index.cjs.js

@@ -3,11 +3,16 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
 var module$1 = require('./module.cjs.js');
+var resolvers = require('./resolvers.cjs.js');
 var authenticator = require('./authenticator.cjs.js');
 
 
 
 exports.default = module$1.authModuleOauth2ProxyProvider;
+Object.defineProperty(exports, "oauth2ProxySignInResolvers", {
+  enumerable: true,
+  get: function () { return resolvers.oauth2ProxySignInResolvers; }
+});
 exports.OAUTH2_PROXY_JWT_HEADER = authenticator.OAUTH2_PROXY_JWT_HEADER;
 exports.oauth2ProxyAuthenticator = authenticator.oauth2ProxyAuthenticator;
 //# sourceMappingURL=index.cjs.js.map

package/dist/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;"}
+{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;"}

package/dist/index.d.ts

@@ -45,6 +45,15 @@ type OAuth2ProxyResult<JWTPayload = {}> = {
     getHeader(name: string): string | undefined;
 };
 
+/**
+ * @public
+ */
+declare namespace oauth2ProxySignInResolvers {
+    const forwardedUserMatchingUserEntityName: _backstage_plugin_auth_node.SignInResolverFactory<OAuth2ProxyResult, {
+        dangerouslyAllowSignInWithoutUserInCatalog?: boolean | undefined;
+    } | undefined>;
+}
+
 /**
  * NOTE: This may come in handy if you're doing work on this provider:
  * plugins/auth-backend/examples/docker-compose.oauth2-proxy.yaml
@@ -57,4 +66,4 @@ declare const oauth2ProxyAuthenticator: _backstage_plugin_auth_node.ProxyAuthent
     accessToken: string;
 }>;
 
-export { OAUTH2_PROXY_JWT_HEADER, type OAuth2ProxyResult, authModuleOauth2ProxyProvider as default, oauth2ProxyAuthenticator };
+export { OAUTH2_PROXY_JWT_HEADER, type OAuth2ProxyResult, authModuleOauth2ProxyProvider as default, oauth2ProxyAuthenticator, oauth2ProxySignInResolvers };

package/dist/resolvers.cjs.js

@@ -1,19 +1,28 @@
 'use strict';
 
 var pluginAuthNode = require('@backstage/plugin-auth-node');
+var zod = require('zod');
 
 exports.oauth2ProxySignInResolvers = void 0;
 ((oauth2ProxySignInResolvers2) => {
   oauth2ProxySignInResolvers2.forwardedUserMatchingUserEntityName = pluginAuthNode.createSignInResolverFactory({
-    create() {
+    optionsSchema: zod.z.object({
+      dangerouslyAllowSignInWithoutUserInCatalog: zod.z.boolean().optional()
+    }).optional(),
+    create(options = {}) {
       return async (info, ctx) => {
         const name = info.result.getHeader("x-forwarded-user");
         if (!name) {
           throw new Error("Request did not contain a user");
         }
-        return ctx.signInWithCatalogUser({
-          entityRef: { name }
-        });
+        return ctx.signInWithCatalogUser(
+          {
+            entityRef: { name }
+          },
+          {
+            dangerousEntityRefFallback: options?.dangerouslyAllowSignInWithoutUserInCatalog ? { entityRef: { name } } : void 0
+          }
+        );
       };
     }
   });

package/dist/resolvers.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolvers.cjs.js","sources":["../src/resolvers.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  createSignInResolverFactory,\n  SignInInfo,\n} from '@backstage/plugin-auth-node';\nimport { OAuth2ProxyResult } from './types';\n\n/**\n * @public\n */\nexport namespace oauth2ProxySignInResolvers {\n  export const forwardedUserMatchingUserEntityName =\n    createSignInResolverFactory({\n      create() {\n        return async (info: SignInInfo<OAuth2ProxyResult>, ctx) => {\n          const name = info.result.getHeader('x-forwarded-user');\n          if (!name) {\n            throw new Error('Request did not contain a user');\n          }\n          return ctx.signInWithCatalogUser({\n            entityRef: { name },\n          });\n        };\n      },\n    });\n}\n"],"names":["oauth2ProxySignInResolvers","createSignInResolverFactory"],"mappings":";;;;AAyBiBA;AAAA,CAAV,CAAUA,2BAAV,KAAA;AACE,EAAMA,2BAAAA,CAAA,sCACXC,0CAA4B,CAAA;AAAA,IAC1B,MAAS,GAAA;AACP,MAAO,OAAA,OAAO,MAAqC,GAAQ,KAAA;AACzD,QAAA,MAAM,IAAO,GAAA,IAAA,CAAK,MAAO,CAAA,SAAA,CAAU,kBAAkB,CAAA;AACrD,QAAA,IAAI,CAAC,IAAM,EAAA;AACT,UAAM,MAAA,IAAI,MAAM,gCAAgC,CAAA;AAAA;AAElD,QAAA,OAAO,IAAI,qBAAsB,CAAA;AAAA,UAC/B,SAAA,EAAW,EAAE,IAAK;AAAA,SACnB,CAAA;AAAA,OACH;AAAA;AACF,GACD,CAAA;AAAA,CAdY,EAAAD,kCAAA,KAAAA,kCAAA,GAAA,EAAA,CAAA,CAAA;;"}
+{"version":3,"file":"resolvers.cjs.js","sources":["../src/resolvers.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  createSignInResolverFactory,\n  SignInInfo,\n} from '@backstage/plugin-auth-node';\nimport { OAuth2ProxyResult } from './types';\nimport { z } from 'zod';\n\n/**\n * @public\n */\nexport namespace oauth2ProxySignInResolvers {\n  export const forwardedUserMatchingUserEntityName =\n    createSignInResolverFactory({\n      optionsSchema: z\n        .object({\n          dangerouslyAllowSignInWithoutUserInCatalog: z.boolean().optional(),\n        })\n        .optional(),\n      create(options = {}) {\n        return async (info: SignInInfo<OAuth2ProxyResult>, ctx) => {\n          const name = info.result.getHeader('x-forwarded-user');\n          if (!name) {\n            throw new Error('Request did not contain a user');\n          }\n\n          return ctx.signInWithCatalogUser(\n            {\n              entityRef: { name },\n            },\n            {\n              dangerousEntityRefFallback:\n                options?.dangerouslyAllowSignInWithoutUserInCatalog\n                  ? { entityRef: { name } }\n                  : undefined,\n            },\n          );\n        };\n      },\n    });\n}\n"],"names":["oauth2ProxySignInResolvers","createSignInResolverFactory","z"],"mappings":";;;;;AA0BiBA;AAAA,CAAV,CAAUA,2BAAV,KAAA;AACE,EAAMA,2BAAAA,CAAA,sCACXC,0CAA4B,CAAA;AAAA,IAC1B,aAAA,EAAeC,MACZ,MAAO,CAAA;AAAA,MACN,0CAA4C,EAAAA,KAAA,CAAE,OAAQ,EAAA,CAAE,QAAS;AAAA,KAClE,EACA,QAAS,EAAA;AAAA,IACZ,MAAA,CAAO,OAAU,GAAA,EAAI,EAAA;AACnB,MAAO,OAAA,OAAO,MAAqC,GAAQ,KAAA;AACzD,QAAA,MAAM,IAAO,GAAA,IAAA,CAAK,MAAO,CAAA,SAAA,CAAU,kBAAkB,CAAA;AACrD,QAAA,IAAI,CAAC,IAAM,EAAA;AACT,UAAM,MAAA,IAAI,MAAM,gCAAgC,CAAA;AAAA;AAGlD,QAAA,OAAO,GAAI,CAAA,qBAAA;AAAA,UACT;AAAA,YACE,SAAA,EAAW,EAAE,IAAK;AAAA,WACpB;AAAA,UACA;AAAA,YACE,0BAAA,EACE,SAAS,0CACL,GAAA,EAAE,WAAW,EAAE,IAAA,IACf,GAAA,KAAA;AAAA;AACR,SACF;AAAA,OACF;AAAA;AACF,GACD,CAAA;AAAA,CA5BY,EAAAF,kCAAA,KAAAA,kCAAA,GAAA,EAAA,CAAA,CAAA;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-auth-backend-module-oauth2-proxy-provider",
-  "version": "0.2.8-next.1",
+  "version": "0.2.8-next.2",
   "description": "The oauth2-proxy-provider backend module for the auth plugin.",
   "backstage": {
     "role": "backend-plugin-module",
@@ -36,14 +36,15 @@
     "test": "backstage-cli package test"
   },
   "dependencies": {
-    "@backstage/backend-plugin-api": "1.3.1-next.1",
+    "@backstage/backend-plugin-api": "1.3.1-next.2",
     "@backstage/errors": "1.2.7",
-    "@backstage/plugin-auth-node": "0.6.3-next.1",
-    "jose": "^5.0.0"
+    "@backstage/plugin-auth-node": "0.6.3-next.2",
+    "jose": "^5.0.0",
+    "zod": "^3.22.4"
   },
   "devDependencies": {
-    "@backstage/backend-test-utils": "1.5.0-next.1",
-    "@backstage/cli": "0.32.1-next.1"
+    "@backstage/backend-test-utils": "1.5.0-next.3",
+    "@backstage/cli": "0.32.1-next.3"
   },
   "typesVersions": {
     "*": {