@backstage/plugin-auth-backend 0.10.0-next.0 → 0.10.0

package/dist/index.d.ts

@@ -4,9 +4,9 @@ import { Logger } from 'winston';
 import { Config } from '@backstage/config';
 import { TokenManager, PluginEndpointDiscovery, PluginDatabaseManager } from '@backstage/backend-common';
 import { CatalogApi } from '@backstage/catalog-client';
-import { UserEntity, Entity } from '@backstage/catalog-model';
+import { BackstageSignInResult, BackstageIdentityResponse } from '@backstage/plugin-auth-node';
 import { Profile } from 'passport';
-import { JSONWebKey } from 'jose';
+import { UserEntity } from '@backstage/catalog-model';
 import { TokenSet, UserinfoResponse } from 'openid-client';
 import { JsonValue } from '@backstage/types';
 
@@ -178,49 +178,6 @@ declare class CatalogIdentityClient {
     resolveCatalogMembership(query: MemberClaimQuery): Promise<string[]>;
 }
 
-/**
- * A identity client to interact with auth-backend
- * and authenticate backstage identity tokens
- *
- * @experimental This is not a stable API yet
- */
-declare class IdentityClient {
-    private readonly discovery;
-    private readonly issuer;
-    private keyStore;
-    private keyStoreUpdated;
-    constructor(options: {
-        discovery: PluginEndpointDiscovery;
-        issuer: string;
-    });
-    /**
-     * Verifies the given backstage identity token
-     * Returns a BackstageIdentity (user) matching the token.
-     * The method throws an error if verification fails.
-     */
-    authenticate(token: string | undefined): Promise<BackstageIdentityResponse>;
-    /**
-     * Parses the given authorization header and returns
-     * the bearer token, or null if no bearer token is given
-     */
-    static getBearerToken(authorizationHeader: string | undefined): string | undefined;
-    /**
-     * Returns the public signing key matching the given jwt token,
-     * or null if no matching key was found
-     */
-    private getKey;
-    /**
-     * Lists public part of keys used to sign Backstage Identity tokens
-     */
-    listPublicKeys(): Promise<{
-        keys: JSONWebKey[];
-    }>;
-    /**
-     * Fetches public keys and caches them locally
-     */
-    private refreshKeyStore;
-}
-
 declare function getEntityClaims(entity: UserEntity): TokenParams['claims'];
 
 /**
@@ -345,77 +302,6 @@ declare type AuthResponse<ProviderInfo> = {
     profile: ProfileInfo;
     backstageIdentity?: BackstageIdentityResponse;
 };
-/**
- * User identity information within Backstage.
- *
- * @public
- */
-declare type BackstageUserIdentity = {
-    /**
-     * The type of identity that this structure represents. In the frontend app
-     * this will currently always be 'user'.
-     */
-    type: 'user';
-    /**
-     * The entityRef of the user in the catalog.
-     * For example User:default/sandra
-     */
-    userEntityRef: string;
-    /**
-     * The user and group entities that the user claims ownership through
-     */
-    ownershipEntityRefs: string[];
-};
-/**
- * A representation of a successful Backstage sign-in.
- *
- * Compared to the {@link BackstageIdentityResponse} this type omits
- * the decoded identity information embedded in the token.
- *
- * @public
- */
-interface BackstageSignInResult {
-    /**
-     * An opaque ID that uniquely identifies the user within Backstage.
-     *
-     * This is typically the same as the user entity `metadata.name`.
-     *
-     * @deprecated Use the `identity` field instead
-     */
-    id: string;
-    /**
-     * The entity that the user is represented by within Backstage.
-     *
-     * This entity may or may not exist within the Catalog, and it can be used
-     * to read and store additional metadata about the user.
-     *
-     * @deprecated Use the `identity` field instead.
-     */
-    entity?: Entity;
-    /**
-     * The token used to authenticate the user within Backstage.
-     */
-    token: string;
-}
-/**
- * The old exported symbol for {@link BackstageSignInResult}.
- *
- * @public
- * @deprecated Use the {@link BackstageSignInResult} instead.
- */
-declare type BackstageIdentity = BackstageSignInResult;
-/**
- * Response object containing the {@link BackstageUserIdentity} and the token
- * from the authentication provider.
- *
- * @public
- */
-interface BackstageIdentityResponse extends BackstageSignInResult {
-    /**
-     * A plaintext description of the identity that is encapsulated within the token.
-     */
-    identity: BackstageUserIdentity;
-}
 /**
  * Used to display login information to user, i.e. sidebar popup.
  *
@@ -459,7 +345,7 @@ declare type SignInInfo<TAuthResult> = {
 };
 /**
  * Describes the function which handles the result of a successful
- * authentication. Must return a valid {@link BackstageSignInResult}.
+ * authentication. Must return a valid {@link @backstage/plugin-auth-node#BackstageSignInResult}.
  *
  * @public
  */
@@ -837,7 +723,7 @@ declare type OidcAuthResult = {
  * can be passed while creating a OIDC provider.
  *
  * authHandler : called after sign in was successful, a new object must be returned which includes a profile
- * signInResolver: called after sign in was successful, expects to return a new {@link BackstageSignInResult}
+ * signInResolver: called after sign in was successful, expects to return a new {@link @backstage/plugin-auth-node#BackstageSignInResult}
  *
  * Both options are optional. There is fallback for authHandler where the default handler expect an e-mail explicitly
  * otherwise it throws an error
@@ -983,7 +869,7 @@ declare const factories: {
 
 /**
  * Parses a Backstage-issued token and decorates the
- * {@link BackstageIdentityResponse} with identity information sourced from the
+ * {@link @backstage/plugin-auth-node#BackstageIdentityResponse} with identity information sourced from the
  * token.
  *
  * @public
@@ -1019,4 +905,4 @@ declare type WebMessageResponse = {
 declare const postMessageResponse: (res: express.Response, appOrigin: string, response: WebMessageResponse) => void;
 declare const ensuresXRequestedWith: (req: express.Request) => boolean;
 
-export { AtlassianAuthProvider, AtlassianProviderOptions, Auth0ProviderOptions, AuthHandler, AuthHandlerResult, AuthProviderFactory, AuthProviderFactoryOptions, AuthProviderRouteHandlers, AuthResolverContext, AuthResponse, AwsAlbProviderOptions, BackstageIdentity, BackstageIdentityResponse, BackstageSignInResult, BackstageUserIdentity, BitbucketOAuthResult, BitbucketPassportProfile, BitbucketProviderOptions, CatalogIdentityClient, CookieConfigurer, GcpIapProviderOptions, GcpIapResult, GcpIapTokenInfo, GithubOAuthResult, GithubProviderOptions, GitlabProviderOptions, GoogleProviderOptions, IdentityClient, MicrosoftProviderOptions, OAuth2ProviderOptions, OAuth2ProxyResult, OAuthAdapter, OAuthEnvironmentHandler, OAuthHandlers, OAuthProviderInfo, OAuthProviderOptions, OAuthRefreshRequest, OAuthResponse, OAuthResult, OAuthStartRequest, OAuthState, Oauth2ProxyProviderOptions, OidcAuthResult, OidcProviderOptions, OktaProviderOptions, OneLoginProviderOptions, ProfileInfo, RouterOptions, SamlAuthResult, SamlProviderOptions, SignInInfo, SignInResolver, TokenIssuer, WebMessageResponse, bitbucketUserIdSignInResolver, bitbucketUsernameSignInResolver, createAtlassianProvider, createAuth0Provider, createAwsAlbProvider, createBitbucketProvider, createGcpIapProvider, createGithubProvider, createGitlabProvider, createGoogleProvider, createMicrosoftProvider, createOAuth2Provider, createOauth2ProxyProvider, createOidcProvider, createOktaProvider, createOneLoginProvider, createOriginFilter, createRouter, createSamlProvider, factories as defaultAuthProviderFactories, encodeState, ensuresXRequestedWith, getEntityClaims, googleEmailSignInResolver, microsoftEmailSignInResolver, oktaEmailSignInResolver, postMessageResponse, prepareBackstageIdentityResponse, readState, verifyNonce };
+export { AtlassianAuthProvider, AtlassianProviderOptions, Auth0ProviderOptions, AuthHandler, AuthHandlerResult, AuthProviderFactory, AuthProviderFactoryOptions, AuthProviderRouteHandlers, AuthResolverContext, AuthResponse, AwsAlbProviderOptions, BitbucketOAuthResult, BitbucketPassportProfile, BitbucketProviderOptions, CatalogIdentityClient, CookieConfigurer, GcpIapProviderOptions, GcpIapResult, GcpIapTokenInfo, GithubOAuthResult, GithubProviderOptions, GitlabProviderOptions, GoogleProviderOptions, MicrosoftProviderOptions, OAuth2ProviderOptions, OAuth2ProxyResult, OAuthAdapter, OAuthEnvironmentHandler, OAuthHandlers, OAuthProviderInfo, OAuthProviderOptions, OAuthRefreshRequest, OAuthResponse, OAuthResult, OAuthStartRequest, OAuthState, Oauth2ProxyProviderOptions, OidcAuthResult, OidcProviderOptions, OktaProviderOptions, OneLoginProviderOptions, ProfileInfo, RouterOptions, SamlAuthResult, SamlProviderOptions, SignInInfo, SignInResolver, TokenIssuer, WebMessageResponse, bitbucketUserIdSignInResolver, bitbucketUsernameSignInResolver, createAtlassianProvider, createAuth0Provider, createAwsAlbProvider, createBitbucketProvider, createGcpIapProvider, createGithubProvider, createGitlabProvider, createGoogleProvider, createMicrosoftProvider, createOAuth2Provider, createOauth2ProxyProvider, createOidcProvider, createOktaProvider, createOneLoginProvider, createOriginFilter, createRouter, createSamlProvider, factories as defaultAuthProviderFactories, encodeState, ensuresXRequestedWith, getEntityClaims, googleEmailSignInResolver, microsoftEmailSignInResolver, oktaEmailSignInResolver, postMessageResponse, prepareBackstageIdentityResponse, readState, verifyNonce };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@backstage/plugin-auth-backend",
   "description": "A Backstage backend plugin that handles authentication",
-  "version": "0.10.0-next.0",
+  "version": "0.10.0",
   "main": "dist/index.cjs.js",
   "types": "dist/index.d.ts",
   "license": "Apache-2.0",
@@ -30,11 +30,12 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/backend-common": "^0.10.7-next.0",
-    "@backstage/catalog-client": "^0.5.5",
+    "@backstage/backend-common": "^0.10.7",
+    "@backstage/catalog-client": "^0.6.0",
     "@backstage/catalog-model": "^0.9.10",
     "@backstage/config": "^0.1.13",
     "@backstage/errors": "^0.2.0",
+    "@backstage/plugin-auth-node": "^0.1.0",
     "@backstage/types": "^0.1.1",
     "@google-cloud/firestore": "^5.0.2",
     "@types/express": "^4.17.6",
@@ -73,7 +74,7 @@
     "yn": "^4.0.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.13.2-next.0",
+    "@backstage/cli": "^0.13.2",
     "@backstage/test-utils": "^0.2.4",
     "@types/body-parser": "^1.19.0",
     "@types/cookie-parser": "^1.4.2",
@@ -94,5 +95,5 @@
     "config.d.ts"
   ],
   "configSchema": "config.d.ts",
-  "gitHead": "e6f167225d843beeb974c287c3364d951b587626"
+  "gitHead": "4f4bc77a4152d372b10a4e8d97d92f00e23f3b56"
 }