@backstage/plugin-auth-backend-module-vmware-cloud-provider 0.0.0-nightly-20241008023419 → 0.0.0-nightly-20241010023300

package/CHANGELOG.md

@@ -1,12 +1,31 @@
 # @backstage/plugin-auth-backend-module-vmware-cloud-provider
 
-## 0.0.0-nightly-20241008023419
+## 0.0.0-nightly-20241010023300
+
+### Minor Changes
+
+- d0edfec: **BREAKING**: The `profileEmailMatchingUserEntityEmail` sign-in resolver has been removed as it was using an insecure fallback for resolving user identities. See https://backstage.io/docs/auth/identity-resolver#sign-in-without-users-in-the-catalog for how to create a custom sign-in resolver if needed as a replacement.
+
+### Patch Changes
+
+- 217458a: Updated configuration schema to include the new `allowedDomains` option for the `emailLocalPartMatchingUserEntityName` sign-in resolver.
+- Updated dependencies
+  - @backstage/plugin-auth-node@0.0.0-nightly-20241010023300
+  - @backstage/backend-plugin-api@0.0.0-nightly-20241010023300
+  - @backstage/catalog-model@1.7.0
+
+## 0.4.0-next.1
+
+### Minor Changes
+
+- d0edfec: **BREAKING**: The `profileEmailMatchingUserEntityEmail` sign-in resolver has been removed as it was using an insecure fallback for resolving user identities. See https://backstage.io/docs/auth/identity-resolver#sign-in-without-users-in-the-catalog for how to create a custom sign-in resolver if needed as a replacement.
 
 ### Patch Changes
 
+- 217458a: Updated configuration schema to include the new `allowedDomains` option for the `emailLocalPartMatchingUserEntityName` sign-in resolver.
 - Updated dependencies
-  - @backstage/plugin-auth-node@0.0.0-nightly-20241008023419
-  - @backstage/backend-plugin-api@0.0.0-nightly-20241008023419
+  - @backstage/plugin-auth-node@0.5.3-next.1
+  - @backstage/backend-plugin-api@1.0.1-next.1
   - @backstage/catalog-model@1.7.0
 
 ## 0.3.1-next.0

package/dist/index.cjs.js

@@ -4,14 +4,9 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 var authenticator = require('./authenticator.cjs.js');
 var module$1 = require('./module.cjs.js');
-var resolvers = require('./resolvers.cjs.js');
 
 
 
 exports.vmwareCloudAuthenticator = authenticator.vmwareCloudAuthenticator;
 exports.default = module$1.authModuleVmwareCloudProvider;
-Object.defineProperty(exports, "vmwareCloudSignInResolvers", {
-  enumerable: true,
-  get: function () { return resolvers.vmwareCloudSignInResolvers; }
-});
 //# sourceMappingURL=index.cjs.js.map

package/dist/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as _backstage_plugin_auth_node from '@backstage/plugin-auth-node';
-import { PassportOAuthAuthenticatorHelper, PassportProfile, OAuthAuthenticatorResult } from '@backstage/plugin-auth-node';
+import { PassportOAuthAuthenticatorHelper, PassportProfile } from '@backstage/plugin-auth-node';
 import { Strategy } from 'passport-oauth2';
 import * as _backstage_backend_plugin_api from '@backstage/backend-plugin-api';
 
@@ -27,17 +27,4 @@ declare const vmwareCloudAuthenticator: _backstage_plugin_auth_node.OAuthAuthent
  */
 declare const authModuleVmwareCloudProvider: _backstage_backend_plugin_api.BackendFeature;
 
-/**
- * Available sign-in resolvers for the VMware Cloud auth provider.
- *
- * @public
- */
-declare namespace vmwareCloudSignInResolvers {
-    /**
-     * Looks up the user by matching their profile email to the entity's profile email.
-     * If that fails, sign in the user without associating with a catalog user.
-     */
-    const profileEmailMatchingUserEntityEmail: _backstage_plugin_auth_node.SignInResolverFactory<OAuthAuthenticatorResult<PassportProfile>, unknown>;
-}
-
-export { type VMwareCloudAuthenticatorContext, type VMwarePassportProfile, authModuleVmwareCloudProvider as default, vmwareCloudAuthenticator, vmwareCloudSignInResolvers };
+export { type VMwareCloudAuthenticatorContext, type VMwarePassportProfile, authModuleVmwareCloudProvider as default, vmwareCloudAuthenticator };

package/dist/module.cjs.js

@@ -3,7 +3,6 @@
 var backendPluginApi = require('@backstage/backend-plugin-api');
 var pluginAuthNode = require('@backstage/plugin-auth-node');
 var authenticator = require('./authenticator.cjs.js');
-var resolvers = require('./resolvers.cjs.js');
 
 const authModuleVmwareCloudProvider = backendPluginApi.createBackendModule({
   pluginId: "auth",
@@ -17,7 +16,6 @@ const authModuleVmwareCloudProvider = backendPluginApi.createBackendModule({
           factory: pluginAuthNode.createOAuthProviderFactory({
             authenticator: authenticator.vmwareCloudAuthenticator,
             signInResolverFactories: {
-              ...resolvers.vmwareCloudSignInResolvers,
               ...pluginAuthNode.commonSignInResolvers
             }
           })

package/dist/module.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.cjs.js","sources":["../src/module.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createBackendModule } from '@backstage/backend-plugin-api';\nimport {\n  authProvidersExtensionPoint,\n  commonSignInResolvers,\n  createOAuthProviderFactory,\n} from '@backstage/plugin-auth-node';\n\nimport { vmwareCloudAuthenticator } from './authenticator';\nimport { vmwareCloudSignInResolvers } from './resolvers';\n\n/**\n * VMware Cloud Provider backend module for the auth plugin\n *\n * @public\n */\nexport const authModuleVmwareCloudProvider = createBackendModule({\n  pluginId: 'auth',\n  moduleId: 'vmware-cloud-provider',\n  register(reg) {\n    reg.registerInit({\n      deps: { providers: authProvidersExtensionPoint },\n      async init({ providers }) {\n        providers.registerProvider({\n          providerId: 'vmwareCloudServices',\n          factory: createOAuthProviderFactory({\n            authenticator: vmwareCloudAuthenticator,\n            signInResolverFactories: {\n              ...vmwareCloudSignInResolvers,\n              ...commonSignInResolvers,\n            },\n          }),\n        });\n      },\n    });\n  },\n});\n"],"names":["createBackendModule","authProvidersExtensionPoint","createOAuthProviderFactory","vmwareCloudAuthenticator","vmwareCloudSignInResolvers","commonSignInResolvers"],"mappings":";;;;;;;AA8BO,MAAM,gCAAgCA,oCAAoB,CAAA;AAAA,EAC/D,QAAU,EAAA,MAAA;AAAA,EACV,QAAU,EAAA,uBAAA;AAAA,EACV,SAAS,GAAK,EAAA;AACZ,IAAA,GAAA,CAAI,YAAa,CAAA;AAAA,MACf,IAAA,EAAM,EAAE,SAAA,EAAWC,0CAA4B,EAAA;AAAA,MAC/C,MAAM,IAAA,CAAK,EAAE,SAAA,EAAa,EAAA;AACxB,QAAA,SAAA,CAAU,gBAAiB,CAAA;AAAA,UACzB,UAAY,EAAA,qBAAA;AAAA,UACZ,SAASC,yCAA2B,CAAA;AAAA,YAClC,aAAe,EAAAC,sCAAA;AAAA,YACf,uBAAyB,EAAA;AAAA,cACvB,GAAGC,oCAAA;AAAA,cACH,GAAGC,oCAAA;AAAA,aACL;AAAA,WACD,CAAA;AAAA,SACF,CAAA,CAAA;AAAA,OACH;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AACF,CAAC;;;;"}
+{"version":3,"file":"module.cjs.js","sources":["../src/module.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createBackendModule } from '@backstage/backend-plugin-api';\nimport {\n  authProvidersExtensionPoint,\n  commonSignInResolvers,\n  createOAuthProviderFactory,\n} from '@backstage/plugin-auth-node';\n\nimport { vmwareCloudAuthenticator } from './authenticator';\n\n/**\n * VMware Cloud Provider backend module for the auth plugin\n *\n * @public\n */\nexport const authModuleVmwareCloudProvider = createBackendModule({\n  pluginId: 'auth',\n  moduleId: 'vmware-cloud-provider',\n  register(reg) {\n    reg.registerInit({\n      deps: { providers: authProvidersExtensionPoint },\n      async init({ providers }) {\n        providers.registerProvider({\n          providerId: 'vmwareCloudServices',\n          factory: createOAuthProviderFactory({\n            authenticator: vmwareCloudAuthenticator,\n            signInResolverFactories: {\n              ...commonSignInResolvers,\n            },\n          }),\n        });\n      },\n    });\n  },\n});\n"],"names":["createBackendModule","authProvidersExtensionPoint","createOAuthProviderFactory","vmwareCloudAuthenticator","commonSignInResolvers"],"mappings":";;;;;;AA6BO,MAAM,gCAAgCA,oCAAoB,CAAA;AAAA,EAC/D,QAAU,EAAA,MAAA;AAAA,EACV,QAAU,EAAA,uBAAA;AAAA,EACV,SAAS,GAAK,EAAA;AACZ,IAAA,GAAA,CAAI,YAAa,CAAA;AAAA,MACf,IAAA,EAAM,EAAE,SAAA,EAAWC,0CAA4B,EAAA;AAAA,MAC/C,MAAM,IAAA,CAAK,EAAE,SAAA,EAAa,EAAA;AACxB,QAAA,SAAA,CAAU,gBAAiB,CAAA;AAAA,UACzB,UAAY,EAAA,qBAAA;AAAA,UACZ,SAASC,yCAA2B,CAAA;AAAA,YAClC,aAAe,EAAAC,sCAAA;AAAA,YACf,uBAAyB,EAAA;AAAA,cACvB,GAAGC,oCAAA;AAAA,aACL;AAAA,WACD,CAAA;AAAA,SACF,CAAA,CAAA;AAAA,OACH;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AACF,CAAC;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-auth-backend-module-vmware-cloud-provider",
-  "version": "0.0.0-nightly-20241008023419",
+  "version": "0.0.0-nightly-20241010023300",
   "description": "The vmware-cloud-provider backend module for the auth plugin.",
   "backstage": {
     "role": "backend-plugin-module",
@@ -33,20 +33,20 @@
     "test": "backstage-cli package test"
   },
   "dependencies": {
-    "@backstage/backend-plugin-api": "0.0.0-nightly-20241008023419",
+    "@backstage/backend-plugin-api": "0.0.0-nightly-20241010023300",
     "@backstage/catalog-model": "1.7.0",
-    "@backstage/plugin-auth-node": "0.0.0-nightly-20241008023419",
+    "@backstage/plugin-auth-node": "0.0.0-nightly-20241010023300",
     "@types/passport-oauth2": "^1.4.15",
     "jose": "^5.0.0",
     "passport-oauth2": "^1.6.1"
   },
   "devDependencies": {
-    "@backstage/backend-defaults": "0.0.0-nightly-20241008023419",
-    "@backstage/backend-test-utils": "0.0.0-nightly-20241008023419",
-    "@backstage/cli": "0.0.0-nightly-20241008023419",
+    "@backstage/backend-defaults": "0.0.0-nightly-20241010023300",
+    "@backstage/backend-test-utils": "0.0.0-nightly-20241010023300",
+    "@backstage/cli": "0.0.0-nightly-20241010023300",
     "@backstage/config": "1.2.0",
     "@backstage/errors": "1.2.4",
-    "@backstage/plugin-auth-backend": "0.0.0-nightly-20241008023419",
+    "@backstage/plugin-auth-backend": "0.0.0-nightly-20241010023300",
     "msw": "^2.0.8",
     "supertest": "^7.0.0"
   }

package/dist/resolvers.cjs.js

@@ -1,42 +0,0 @@
-'use strict';
-
-var catalogModel = require('@backstage/catalog-model');
-var pluginAuthNode = require('@backstage/plugin-auth-node');
-
-exports.vmwareCloudSignInResolvers = void 0;
-((vmwareCloudSignInResolvers2) => {
-  vmwareCloudSignInResolvers2.profileEmailMatchingUserEntityEmail = pluginAuthNode.createSignInResolverFactory({
-    create() {
-      return async (info, ctx) => {
-        const email = info.profile.email;
-        if (!email) {
-          throw new Error(
-            "VMware login failed, user profile does not contain an email"
-          );
-        }
-        const userEntityRef = catalogModel.stringifyEntityRef({
-          kind: "User",
-          name: email
-        });
-        try {
-          return await ctx.signInWithCatalogUser({
-            filter: {
-              "spec.profile.email": email
-            }
-          });
-        } catch (e) {
-          if (e.name !== "NotFoundError") {
-            throw e;
-          }
-          return ctx.issueToken({
-            claims: {
-              sub: userEntityRef,
-              ent: [userEntityRef]
-            }
-          });
-        }
-      };
-    }
-  });
-})(exports.vmwareCloudSignInResolvers || (exports.vmwareCloudSignInResolvers = {}));
-//# sourceMappingURL=resolvers.cjs.js.map

package/dist/resolvers.cjs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolvers.cjs.js","sources":["../src/resolvers.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { stringifyEntityRef } from '@backstage/catalog-model';\nimport {\n  createSignInResolverFactory,\n  OAuthAuthenticatorResult,\n  PassportProfile,\n  SignInInfo,\n} from '@backstage/plugin-auth-node';\n\n/**\n * Available sign-in resolvers for the VMware Cloud auth provider.\n *\n * @public\n */\nexport namespace vmwareCloudSignInResolvers {\n  /**\n   * Looks up the user by matching their profile email to the entity's profile email.\n   * If that fails, sign in the user without associating with a catalog user.\n   */\n  export const profileEmailMatchingUserEntityEmail =\n    createSignInResolverFactory({\n      create() {\n        return async (\n          info: SignInInfo<OAuthAuthenticatorResult<PassportProfile>>,\n          ctx,\n        ) => {\n          const email = info.profile.email;\n\n          if (!email) {\n            throw new Error(\n              'VMware login failed, user profile does not contain an email',\n            );\n          }\n\n          const userEntityRef = stringifyEntityRef({\n            kind: 'User',\n            name: email,\n          });\n\n          try {\n            // we await here so that signInWithCatalogUser throws in the current `try`\n            return await ctx.signInWithCatalogUser({\n              filter: {\n                'spec.profile.email': email,\n              },\n            });\n          } catch (e) {\n            if (e.name !== 'NotFoundError') {\n              throw e;\n            }\n            return ctx.issueToken({\n              claims: {\n                sub: userEntityRef,\n                ent: [userEntityRef],\n              },\n            });\n          }\n        };\n      },\n    });\n}\n"],"names":["vmwareCloudSignInResolvers","createSignInResolverFactory","stringifyEntityRef"],"mappings":";;;;;AA4BiBA,4CAAA;AAAA,CAAV,CAAUA,2BAAV,KAAA;AAKE,EAAMA,2BAAAA,CAAA,sCACXC,0CAA4B,CAAA;AAAA,IAC1B,MAAS,GAAA;AACP,MAAO,OAAA,OACL,MACA,GACG,KAAA;AACH,QAAM,MAAA,KAAA,GAAQ,KAAK,OAAQ,CAAA,KAAA,CAAA;AAE3B,QAAA,IAAI,CAAC,KAAO,EAAA;AACV,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,6DAAA;AAAA,WACF,CAAA;AAAA,SACF;AAEA,QAAA,MAAM,gBAAgBC,+BAAmB,CAAA;AAAA,UACvC,IAAM,EAAA,MAAA;AAAA,UACN,IAAM,EAAA,KAAA;AAAA,SACP,CAAA,CAAA;AAED,QAAI,IAAA;AAEF,UAAO,OAAA,MAAM,IAAI,qBAAsB,CAAA;AAAA,YACrC,MAAQ,EAAA;AAAA,cACN,oBAAsB,EAAA,KAAA;AAAA,aACxB;AAAA,WACD,CAAA,CAAA;AAAA,iBACM,CAAG,EAAA;AACV,UAAI,IAAA,CAAA,CAAE,SAAS,eAAiB,EAAA;AAC9B,YAAM,MAAA,CAAA,CAAA;AAAA,WACR;AACA,UAAA,OAAO,IAAI,UAAW,CAAA;AAAA,YACpB,MAAQ,EAAA;AAAA,cACN,GAAK,EAAA,aAAA;AAAA,cACL,GAAA,EAAK,CAAC,aAAa,CAAA;AAAA,aACrB;AAAA,WACD,CAAA,CAAA;AAAA,SACH;AAAA,OACF,CAAA;AAAA,KACF;AAAA,GACD,CAAA,CAAA;AAAA,CA7CY,EAAAF,kCAAA,KAAAA,kCAAA,GAAA,EAAA,CAAA,CAAA;;"}