@backstage/plugin-auth-backend-module-okta-provider 0.0.12-next.1 → 0.0.12-next.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/config.d.ts +1 -1
- package/dist/index.cjs.js +4 -11
- package/dist/index.cjs.js.map +1 -1
- package/package.json +24 -22
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,15 @@
|
|
|
1
1
|
# @backstage/plugin-auth-backend-module-okta-provider
|
|
2
2
|
|
|
3
|
+
## 0.0.12-next.2
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- 8efc6cf: Added support for the new shared `additionalScopes` configuration, which means it can now also be specified as an array. In addition, the `openid`, `email`, `profile`, and `offline_access` scopes have been set to required and will always be present.
|
|
8
|
+
- d44a20a: Added additional plugin metadata to `package.json`.
|
|
9
|
+
- Updated dependencies
|
|
10
|
+
- @backstage/backend-plugin-api@0.6.19-next.3
|
|
11
|
+
- @backstage/plugin-auth-node@0.4.14-next.3
|
|
12
|
+
|
|
3
13
|
## 0.0.12-next.1
|
|
4
14
|
|
|
5
15
|
### Patch Changes
|
package/config.d.ts
CHANGED
package/dist/index.cjs.js
CHANGED
|
@@ -8,21 +8,15 @@ var backendPluginApi = require('@backstage/backend-plugin-api');
|
|
|
8
8
|
|
|
9
9
|
const oktaAuthenticator = pluginAuthNode.createOAuthAuthenticator({
|
|
10
10
|
defaultProfileTransform: pluginAuthNode.PassportOAuthAuthenticatorHelper.defaultProfileTransform,
|
|
11
|
+
scopes: {
|
|
12
|
+
required: ["openid", "email", "profile", "offline_access"]
|
|
13
|
+
},
|
|
11
14
|
initialize({ callbackUrl, config }) {
|
|
12
15
|
const clientId = config.getString("clientId");
|
|
13
16
|
const clientSecret = config.getString("clientSecret");
|
|
14
17
|
const audience = config.getOptionalString("audience") || "https://okta.com";
|
|
15
18
|
const authServerId = config.getOptionalString("authServerId");
|
|
16
19
|
const idp = config.getOptionalString("idp");
|
|
17
|
-
const defaultScopes = "openid profile email";
|
|
18
|
-
const additionalScopes = config.getOptionalString("additionalScopes") || "";
|
|
19
|
-
const combineScopeStrings = (scopesA, scopesB) => {
|
|
20
|
-
const scopesAArray = scopesA.split(" ");
|
|
21
|
-
const scopesBArray = scopesB.split(" ");
|
|
22
|
-
const combinedScopes = /* @__PURE__ */ new Set([...scopesAArray, ...scopesBArray]);
|
|
23
|
-
return Array.from(combinedScopes).join(" ");
|
|
24
|
-
};
|
|
25
|
-
const scope = combineScopeStrings(defaultScopes, additionalScopes);
|
|
26
20
|
return pluginAuthNode.PassportOAuthAuthenticatorHelper.from(
|
|
27
21
|
new passportOktaOauth.Strategy(
|
|
28
22
|
{
|
|
@@ -33,8 +27,7 @@ const oktaAuthenticator = pluginAuthNode.createOAuthAuthenticator({
|
|
|
33
27
|
authServerID: authServerId,
|
|
34
28
|
idp,
|
|
35
29
|
passReqToCallback: false,
|
|
36
|
-
response_type: "code"
|
|
37
|
-
scope
|
|
30
|
+
response_type: "code"
|
|
38
31
|
},
|
|
39
32
|
(accessToken, refreshToken, params, fullProfile, done) => {
|
|
40
33
|
done(
|
package/dist/index.cjs.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.cjs.js","sources":["../src/authenticator.ts","../src/resolvers.ts","../src/module.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Strategy as OktaStrategy } from '@davidzemon/passport-okta-oauth';\nimport {\n createOAuthAuthenticator,\n PassportOAuthAuthenticatorHelper,\n PassportOAuthDoneCallback,\n PassportProfile,\n} from '@backstage/plugin-auth-node';\n\n/** @public */\nexport const oktaAuthenticator = createOAuthAuthenticator({\n defaultProfileTransform:\n PassportOAuthAuthenticatorHelper.defaultProfileTransform,\n initialize({ callbackUrl, config }) {\n const clientId = config.getString('clientId');\n const clientSecret = config.getString('clientSecret');\n const audience = config.getOptionalString('audience') || 'https://okta.com';\n const authServerId = config.getOptionalString('authServerId');\n const idp = config.getOptionalString('idp');\n
|
|
1
|
+
{"version":3,"file":"index.cjs.js","sources":["../src/authenticator.ts","../src/resolvers.ts","../src/module.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Strategy as OktaStrategy } from '@davidzemon/passport-okta-oauth';\nimport {\n createOAuthAuthenticator,\n PassportOAuthAuthenticatorHelper,\n PassportOAuthDoneCallback,\n PassportProfile,\n} from '@backstage/plugin-auth-node';\n\n/** @public */\nexport const oktaAuthenticator = createOAuthAuthenticator({\n defaultProfileTransform:\n PassportOAuthAuthenticatorHelper.defaultProfileTransform,\n scopes: {\n required: ['openid', 'email', 'profile', 'offline_access'],\n },\n initialize({ callbackUrl, config }) {\n const clientId = config.getString('clientId');\n const clientSecret = config.getString('clientSecret');\n const audience = config.getOptionalString('audience') || 'https://okta.com';\n const authServerId = config.getOptionalString('authServerId');\n const idp = config.getOptionalString('idp');\n\n return PassportOAuthAuthenticatorHelper.from(\n new OktaStrategy(\n {\n clientID: clientId,\n clientSecret: clientSecret,\n callbackURL: callbackUrl,\n audience: audience,\n authServerID: authServerId,\n idp: idp,\n passReqToCallback: false,\n response_type: 'code',\n },\n (\n accessToken: string,\n refreshToken: string,\n params: any,\n fullProfile: PassportProfile,\n done: PassportOAuthDoneCallback,\n ) => {\n done(\n undefined,\n { fullProfile, params, accessToken },\n { refreshToken },\n );\n },\n ),\n );\n },\n\n async start(input, helper) {\n return helper.start(input, {\n accessType: 'offline',\n prompt: 'consent',\n });\n },\n\n async authenticate(input, helper) {\n return helper.authenticate(input);\n },\n\n async refresh(input, helper) {\n return helper.refresh(input);\n },\n});\n","/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n createSignInResolverFactory,\n OAuthAuthenticatorResult,\n PassportProfile,\n SignInInfo,\n} from '@backstage/plugin-auth-node';\n\n/**\n * Available sign-in resolvers for the Okta auth provider.\n *\n * @public\n */\nexport namespace oktaSignInResolvers {\n /**\n * Looks up the user by matching their Okta email to the entity email.\n */\n\n export const emailMatchingUserEntityAnnotation = createSignInResolverFactory({\n create() {\n return async (\n info: SignInInfo<OAuthAuthenticatorResult<PassportProfile>>,\n ctx,\n ) => {\n const { profile } = info;\n\n if (!profile.email) {\n throw new Error('Okta profile contained no email');\n }\n\n return ctx.signInWithCatalogUser({\n annotations: {\n 'okta.com/email': profile.email,\n },\n });\n };\n },\n });\n}\n","/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createBackendModule } from '@backstage/backend-plugin-api';\nimport {\n authProvidersExtensionPoint,\n commonSignInResolvers,\n createOAuthProviderFactory,\n} from '@backstage/plugin-auth-node';\nimport { oktaAuthenticator } from './authenticator';\nimport { oktaSignInResolvers } from './resolvers';\n\n/** @public */\nexport const authModuleOktaProvider = createBackendModule({\n pluginId: 'auth',\n moduleId: 'okta-provider',\n register(reg) {\n reg.registerInit({\n deps: {\n providers: authProvidersExtensionPoint,\n },\n async init({ providers }) {\n providers.registerProvider({\n providerId: 'okta',\n factory: createOAuthProviderFactory({\n authenticator: oktaAuthenticator,\n signInResolverFactories: {\n ...oktaSignInResolvers,\n ...commonSignInResolvers,\n },\n }),\n });\n },\n });\n },\n});\n"],"names":["createOAuthAuthenticator","PassportOAuthAuthenticatorHelper","OktaStrategy","oktaSignInResolvers","createSignInResolverFactory","createBackendModule","authProvidersExtensionPoint","createOAuthProviderFactory","commonSignInResolvers"],"mappings":";;;;;;;;AAyBO,MAAM,oBAAoBA,uCAAyB,CAAA;AAAA,EACxD,yBACEC,+CAAiC,CAAA,uBAAA;AAAA,EACnC,MAAQ,EAAA;AAAA,IACN,QAAU,EAAA,CAAC,QAAU,EAAA,OAAA,EAAS,WAAW,gBAAgB,CAAA;AAAA,GAC3D;AAAA,EACA,UAAW,CAAA,EAAE,WAAa,EAAA,MAAA,EAAU,EAAA;AAClC,IAAM,MAAA,QAAA,GAAW,MAAO,CAAA,SAAA,CAAU,UAAU,CAAA,CAAA;AAC5C,IAAM,MAAA,YAAA,GAAe,MAAO,CAAA,SAAA,CAAU,cAAc,CAAA,CAAA;AACpD,IAAA,MAAM,QAAW,GAAA,MAAA,CAAO,iBAAkB,CAAA,UAAU,CAAK,IAAA,kBAAA,CAAA;AACzD,IAAM,MAAA,YAAA,GAAe,MAAO,CAAA,iBAAA,CAAkB,cAAc,CAAA,CAAA;AAC5D,IAAM,MAAA,GAAA,GAAM,MAAO,CAAA,iBAAA,CAAkB,KAAK,CAAA,CAAA;AAE1C,IAAA,OAAOA,+CAAiC,CAAA,IAAA;AAAA,MACtC,IAAIC,0BAAA;AAAA,QACF;AAAA,UACE,QAAU,EAAA,QAAA;AAAA,UACV,YAAA;AAAA,UACA,WAAa,EAAA,WAAA;AAAA,UACb,QAAA;AAAA,UACA,YAAc,EAAA,YAAA;AAAA,UACd,GAAA;AAAA,UACA,iBAAmB,EAAA,KAAA;AAAA,UACnB,aAAe,EAAA,MAAA;AAAA,SACjB;AAAA,QACA,CACE,WAAA,EACA,YACA,EAAA,MAAA,EACA,aACA,IACG,KAAA;AACH,UAAA,IAAA;AAAA,YACE,KAAA,CAAA;AAAA,YACA,EAAE,WAAa,EAAA,MAAA,EAAQ,WAAY,EAAA;AAAA,YACnC,EAAE,YAAa,EAAA;AAAA,WACjB,CAAA;AAAA,SACF;AAAA,OACF;AAAA,KACF,CAAA;AAAA,GACF;AAAA,EAEA,MAAM,KAAM,CAAA,KAAA,EAAO,MAAQ,EAAA;AACzB,IAAO,OAAA,MAAA,CAAO,MAAM,KAAO,EAAA;AAAA,MACzB,UAAY,EAAA,SAAA;AAAA,MACZ,MAAQ,EAAA,SAAA;AAAA,KACT,CAAA,CAAA;AAAA,GACH;AAAA,EAEA,MAAM,YAAa,CAAA,KAAA,EAAO,MAAQ,EAAA;AAChC,IAAO,OAAA,MAAA,CAAO,aAAa,KAAK,CAAA,CAAA;AAAA,GAClC;AAAA,EAEA,MAAM,OAAQ,CAAA,KAAA,EAAO,MAAQ,EAAA;AAC3B,IAAO,OAAA,MAAA,CAAO,QAAQ,KAAK,CAAA,CAAA;AAAA,GAC7B;AACF,CAAC;;ACrDgBC,qCAAA;AAAA,CAAV,CAAUA,oBAAV,KAAA;AAKE,EAAMA,oBAAAA,CAAA,oCAAoCC,0CAA4B,CAAA;AAAA,IAC3E,MAAS,GAAA;AACP,MAAO,OAAA,OACL,MACA,GACG,KAAA;AACH,QAAM,MAAA,EAAE,SAAY,GAAA,IAAA,CAAA;AAEpB,QAAI,IAAA,CAAC,QAAQ,KAAO,EAAA;AAClB,UAAM,MAAA,IAAI,MAAM,iCAAiC,CAAA,CAAA;AAAA,SACnD;AAEA,QAAA,OAAO,IAAI,qBAAsB,CAAA;AAAA,UAC/B,WAAa,EAAA;AAAA,YACX,kBAAkB,OAAQ,CAAA,KAAA;AAAA,WAC5B;AAAA,SACD,CAAA,CAAA;AAAA,OACH,CAAA;AAAA,KACF;AAAA,GACD,CAAA,CAAA;AAAA,CAxBc,EAAAD,2BAAA,KAAAA,2BAAA,GAAA,EAAA,CAAA,CAAA;;ACHV,MAAM,yBAAyBE,oCAAoB,CAAA;AAAA,EACxD,QAAU,EAAA,MAAA;AAAA,EACV,QAAU,EAAA,eAAA;AAAA,EACV,SAAS,GAAK,EAAA;AACZ,IAAA,GAAA,CAAI,YAAa,CAAA;AAAA,MACf,IAAM,EAAA;AAAA,QACJ,SAAW,EAAAC,0CAAA;AAAA,OACb;AAAA,MACA,MAAM,IAAA,CAAK,EAAE,SAAA,EAAa,EAAA;AACxB,QAAA,SAAA,CAAU,gBAAiB,CAAA;AAAA,UACzB,UAAY,EAAA,MAAA;AAAA,UACZ,SAASC,yCAA2B,CAAA;AAAA,YAClC,aAAe,EAAA,iBAAA;AAAA,YACf,uBAAyB,EAAA;AAAA,cACvB,GAAGJ,2BAAA;AAAA,cACH,GAAGK,oCAAA;AAAA,aACL;AAAA,WACD,CAAA;AAAA,SACF,CAAA,CAAA;AAAA,OACH;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AACF,CAAC;;;;;"}
|
package/package.json
CHANGED
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@backstage/plugin-auth-backend-module-okta-provider",
|
|
3
|
+
"version": "0.0.12-next.2",
|
|
3
4
|
"description": "The okta-provider backend module for the auth plugin.",
|
|
4
|
-
"
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
5
|
+
"backstage": {
|
|
6
|
+
"role": "backend-plugin-module",
|
|
7
|
+
"pluginId": "auth",
|
|
8
|
+
"pluginPackage": "@backstage/plugin-auth-backend"
|
|
9
|
+
},
|
|
8
10
|
"publishConfig": {
|
|
9
11
|
"access": "public",
|
|
10
12
|
"main": "dist/index.cjs.js",
|
|
@@ -15,35 +17,35 @@
|
|
|
15
17
|
"url": "https://github.com/backstage/backstage",
|
|
16
18
|
"directory": "plugins/auth-backend-module-okta-provider"
|
|
17
19
|
},
|
|
18
|
-
"
|
|
19
|
-
|
|
20
|
-
|
|
20
|
+
"license": "Apache-2.0",
|
|
21
|
+
"main": "dist/index.cjs.js",
|
|
22
|
+
"types": "dist/index.d.ts",
|
|
23
|
+
"files": [
|
|
24
|
+
"dist",
|
|
25
|
+
"config.d.ts"
|
|
26
|
+
],
|
|
21
27
|
"scripts": {
|
|
22
|
-
"start": "backstage-cli package start",
|
|
23
28
|
"build": "backstage-cli package build",
|
|
24
|
-
"lint": "backstage-cli package lint",
|
|
25
|
-
"test": "backstage-cli package test",
|
|
26
29
|
"clean": "backstage-cli package clean",
|
|
30
|
+
"lint": "backstage-cli package lint",
|
|
27
31
|
"prepack": "backstage-cli package prepack",
|
|
28
|
-
"postpack": "backstage-cli package postpack"
|
|
32
|
+
"postpack": "backstage-cli package postpack",
|
|
33
|
+
"start": "backstage-cli package start",
|
|
34
|
+
"test": "backstage-cli package test"
|
|
29
35
|
},
|
|
30
36
|
"dependencies": {
|
|
31
|
-
"@backstage/backend-plugin-api": "^0.6.19-next.
|
|
32
|
-
"@backstage/plugin-auth-node": "^0.4.14-next.
|
|
37
|
+
"@backstage/backend-plugin-api": "^0.6.19-next.3",
|
|
38
|
+
"@backstage/plugin-auth-node": "^0.4.14-next.3",
|
|
33
39
|
"@davidzemon/passport-okta-oauth": "^0.0.5",
|
|
34
40
|
"express": "^4.18.2",
|
|
35
41
|
"passport": "^0.7.0"
|
|
36
42
|
},
|
|
37
43
|
"devDependencies": {
|
|
38
|
-
"@backstage/backend-defaults": "^0.3.0-next.
|
|
39
|
-
"@backstage/backend-test-utils": "^0.4.0-next.
|
|
40
|
-
"@backstage/cli": "^0.26.7-next.
|
|
41
|
-
"@backstage/plugin-auth-backend": "^0.22.6-next.
|
|
44
|
+
"@backstage/backend-defaults": "^0.3.0-next.3",
|
|
45
|
+
"@backstage/backend-test-utils": "^0.4.0-next.3",
|
|
46
|
+
"@backstage/cli": "^0.26.7-next.3",
|
|
47
|
+
"@backstage/plugin-auth-backend": "^0.22.6-next.3",
|
|
42
48
|
"supertest": "^6.3.3"
|
|
43
49
|
},
|
|
44
|
-
"configSchema": "config.d.ts"
|
|
45
|
-
"files": [
|
|
46
|
-
"dist",
|
|
47
|
-
"config.d.ts"
|
|
48
|
-
]
|
|
50
|
+
"configSchema": "config.d.ts"
|
|
49
51
|
}
|