@backstage/plugin-auth-backend 0.14.0 → 0.14.1-next.2

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # @backstage/plugin-auth-backend
 
+## 0.14.1-next.2
+
+### Patch Changes
+
+- bc6fb57094: Updated dependency `passport` to `^0.6.0`.
+- Updated dependencies
+  - @backstage/backend-common@0.14.0-next.2
+  - @backstage/plugin-auth-node@0.2.2-next.2
+
+## 0.14.1-next.1
+
+### Patch Changes
+
+- 5e055079f0: Increased key field size for signing_keys table to account for larger signature keys
+- 8f7b1835df: Updated dependency `msw` to `^0.41.0`.
+- 467facc6ea: Fix improper binding of 'this' in ALB Auth provider
+- Updated dependencies
+  - @backstage/backend-common@0.13.6-next.1
+  - @backstage/catalog-client@1.0.3-next.0
+  - @backstage/plugin-auth-node@0.2.2-next.1
+  - @backstage/catalog-model@1.0.3-next.0
+
+## 0.14.1-next.0
+
+### Patch Changes
+
+- f6aae90e4e: Added configurable algorithm field for TokenFactory
+- Updated dependencies
+  - @backstage/backend-common@0.13.6-next.0
+  - @backstage/plugin-auth-node@0.2.2-next.0
+
 ## 0.14.0
 
 ### Minor Changes

package/dist/index.cjs.js

@@ -26,9 +26,9 @@ var passportOneloginOauth = require('passport-onelogin-oauth');
 var passportSaml = require('passport-saml');
 var googleAuthLibrary = require('google-auth-library');
 var catalogClient = require('@backstage/catalog-client');
-var uuid = require('uuid');
-var luxon = require('luxon');
 var catalogModel = require('@backstage/catalog-model');
+var luxon = require('luxon');
+var uuid = require('uuid');
 var backendCommon = require('@backstage/backend-common');
 var firestore = require('@google-cloud/firestore');
 var lodash = require('lodash');
@@ -764,6 +764,19 @@ const ALB_JWT_HEADER = "x-amzn-oidc-data";
 const ALB_ACCESS_TOKEN_HEADER = "x-amzn-oidc-accesstoken";
 class AwsAlbAuthProvider {
   constructor(options) {
+    this.getKey = async (header) => {
+      if (!header.kid) {
+        throw new errors.AuthenticationError("No key id was specified in header");
+      }
+      const optionalCacheKey = this.keyCache.get(header.kid);
+      if (optionalCacheKey) {
+        return crypto__namespace.createPublicKey(optionalCacheKey);
+      }
+      const keyText = await fetch__default["default"](`https://public-keys.auth.elb.${encodeURIComponent(this.region)}.amazonaws.com/${encodeURIComponent(header.kid)}`).then((response) => response.text());
+      const keyValue = crypto__namespace.createPublicKey(keyText);
+      this.keyCache.set(header.kid, keyValue.export({ format: "pem", type: "spki" }));
+      return keyValue;
+    };
     this.region = options.region;
     this.issuer = options.issuer;
     this.authHandler = options.authHandler;
@@ -837,19 +850,6 @@ class AwsAlbAuthProvider {
       profile
     };
   }
-  async getKey(header) {
-    if (!header.kid) {
-      throw new errors.AuthenticationError("No key id was specified in header");
-    }
-    const optionalCacheKey = this.keyCache.get(header.kid);
-    if (optionalCacheKey) {
-      return crypto__namespace.createPublicKey(optionalCacheKey);
-    }
-    const keyText = await fetch__default["default"](`https://public-keys.auth.elb.${encodeURIComponent(this.region)}.amazonaws.com/${encodeURIComponent(header.kid)}`).then((response) => response.text());
-    const keyValue = crypto__namespace.createPublicKey(keyText);
-    this.keyCache.set(header.kid, keyValue.export({ format: "pem", type: "spki" }));
-    return keyValue;
-  }
 }
 const awsAlb = createAuthProviderIntegration({
   create(options) {
@@ -2300,10 +2300,12 @@ function createOidcRouter(options) {
 const MS_IN_S = 1e3;
 class TokenFactory {
   constructor(options) {
+    var _a;
     this.issuer = options.issuer;
     this.logger = options.logger;
     this.keyStore = options.keyStore;
     this.keyDurationSeconds = options.keyDurationSeconds;
+    this.algorithm = (_a = options.algorithm) != null ? _a : "ES256";
   }
   async issueToken(params) {
     const key = await this.getKey();
@@ -2359,11 +2361,11 @@ class TokenFactory {
       seconds: this.keyDurationSeconds
     }).toJSDate();
     const promise = (async () => {
-      const key = await jose.generateKeyPair("ES256");
+      const key = await jose.generateKeyPair(this.algorithm);
       const publicKey = await jose.exportJWK(key.publicKey);
       const privateKey = await jose.exportJWK(key.privateKey);
       publicKey.kid = privateKey.kid = uuid.v4();
-      publicKey.alg = privateKey.alg = "ES256";
+      publicKey.alg = privateKey.alg = this.algorithm;
       this.logger.info(`Created new signing key ${publicKey.kid}`);
       await this.keyStore.addKey(publicKey);
       return privateKey;