@backstage/plugin-auth-backend 0.20.0 → 0.20.1-next.1

package/dist/index.d.ts

@@ -1,4 +1,3 @@
-/// <reference types="node" />
 import * as _backstage_backend_plugin_api from '@backstage/backend-plugin-api';
 import { LoggerService } from '@backstage/backend-plugin-api';
 import express from 'express';
@@ -8,7 +7,8 @@ import { Profile } from 'passport';
 import { PluginDatabaseManager, PluginEndpointDiscovery, TokenManager } from '@backstage/backend-common';
 import { CatalogApi } from '@backstage/catalog-client';
 import { Config } from '@backstage/config';
-import { IncomingHttpHeaders } from 'http';
+import * as _backstage_plugin_auth_backend_module_oauth2_proxy_provider from '@backstage/plugin-auth-backend-module-oauth2-proxy-provider';
+import { OAuth2ProxyResult as OAuth2ProxyResult$1 } from '@backstage/plugin-auth-backend-module-oauth2-proxy-provider';
 import { TokenSet, UserinfoResponse } from 'openid-client';
 import * as _backstage_plugin_auth_backend_module_gcp_iap_provider from '@backstage/plugin-auth-backend-module-gcp-iap-provider';
 import { GcpIapTokenInfo as GcpIapTokenInfo$1, GcpIapResult as GcpIapResult$1 } from '@backstage/plugin-auth-backend-module-gcp-iap-provider';
@@ -457,44 +457,10 @@ type GithubOAuthResult = {
 };
 
 /**
- * JWT header extraction result, containing the raw value and the parsed JWT
- * payload.
- *
  * @public
+ * @deprecated import from `@backstage/plugin-auth-backend-module-oauth2-proxy-provider` instead
  */
-type OAuth2ProxyResult<JWTPayload = {}> = {
-    /**
-     * The parsed payload of the `accessToken`. The token is only parsed, not verified.
-     *
-     * @deprecated Access through the `headers` instead. This will be removed in a future release.
-     */
-    fullProfile: JWTPayload;
-    /**
-     * The token received via the X-OAUTH2-PROXY-ID-TOKEN header. Will be an empty string
-     * if the header is not set. Note the this is typically an OpenID Connect token.
-     *
-     * @deprecated Access through the `headers` instead. This will be removed in a future release.
-     */
-    accessToken: string;
-    /**
-     * The headers of the incoming request from the OAuth2 proxy. This will include
-     * both the headers set by the client as well as the ones added by the OAuth2 proxy.
-     * You should only trust the headers that are injected by the OAuth2 proxy.
-     *
-     * Useful headers to use to complete the sign-in are for example `x-forwarded-user`
-     * and `x-forwarded-email`. See the OAuth2 proxy documentation for more information
-     * about the available headers and how to enable them. In particular it is possible
-     * to forward access and identity tokens, which can be user for additional verification
-     * and lookups.
-     */
-    headers: IncomingHttpHeaders;
-    /**
-     * Provides convenient access to the request headers.
-     *
-     * This call is simply forwarded to `req.get(name)`.
-     */
-    getHeader(name: string): string | undefined;
-};
+type OAuth2ProxyResult = OAuth2ProxyResult$1;
 
 /**
  * authentication result for the OIDC which includes the token set and user information (a profile response sent by OIDC server)
@@ -661,9 +627,9 @@ declare const providers: Readonly<{
     }>;
     oauth2Proxy: Readonly<{
         create: (options: {
-            authHandler?: AuthHandler<OAuth2ProxyResult<unknown>> | undefined;
+            authHandler?: AuthHandler<_backstage_plugin_auth_backend_module_oauth2_proxy_provider.OAuth2ProxyResult> | undefined;
             signIn: {
-                resolver: SignInResolver<OAuth2ProxyResult<unknown>>;
+                resolver: SignInResolver<_backstage_plugin_auth_backend_module_oauth2_proxy_provider.OAuth2ProxyResult>;
             };
         }) => _backstage_plugin_auth_node.AuthProviderFactory;
         resolvers: never;
@@ -688,8 +654,6 @@ declare const providers: Readonly<{
             } | undefined;
         } | undefined) => _backstage_plugin_auth_node.AuthProviderFactory;
         resolvers: Readonly<{
-            emailLocalPartMatchingUserEntityName: () => SignInResolver<unknown>;
-            emailMatchingUserEntityProfileEmail: () => SignInResolver<unknown>;
             emailMatchingUserEntityAnnotation(): SignInResolver<OAuthResult>;
         }>;
     }>;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@backstage/plugin-auth-backend",
   "description": "A Backstage backend plugin that handles authentication",
-  "version": "0.20.0",
+  "version": "0.20.1-next.1",
   "main": "dist/index.cjs.js",
   "types": "dist/index.d.ts",
   "license": "Apache-2.0",
@@ -32,22 +32,24 @@
     "clean": "backstage-cli package clean"
   },
   "dependencies": {
-    "@backstage/backend-common": "^0.19.9",
-    "@backstage/backend-plugin-api": "^0.6.7",
-    "@backstage/catalog-client": "^1.4.6",
+    "@backstage/backend-common": "^0.20.0-next.1",
+    "@backstage/backend-plugin-api": "^0.6.8-next.1",
+    "@backstage/catalog-client": "^1.5.0-next.0",
     "@backstage/catalog-model": "^1.4.3",
     "@backstage/config": "^1.1.1",
     "@backstage/errors": "^1.2.3",
-    "@backstage/plugin-auth-backend-module-gcp-iap-provider": "^0.2.1",
-    "@backstage/plugin-auth-backend-module-github-provider": "^0.1.4",
-    "@backstage/plugin-auth-backend-module-gitlab-provider": "^0.1.4",
-    "@backstage/plugin-auth-backend-module-google-provider": "^0.1.4",
-    "@backstage/plugin-auth-backend-module-oauth2-provider": "^0.1.4",
-    "@backstage/plugin-auth-node": "^0.4.1",
-    "@backstage/plugin-catalog-node": "^1.5.0",
+    "@backstage/plugin-auth-backend-module-atlassian-provider": "^0.1.0-next.1",
+    "@backstage/plugin-auth-backend-module-gcp-iap-provider": "^0.2.2-next.1",
+    "@backstage/plugin-auth-backend-module-github-provider": "^0.1.5-next.1",
+    "@backstage/plugin-auth-backend-module-gitlab-provider": "^0.1.5-next.1",
+    "@backstage/plugin-auth-backend-module-google-provider": "^0.1.5-next.1",
+    "@backstage/plugin-auth-backend-module-oauth2-provider": "^0.1.5-next.1",
+    "@backstage/plugin-auth-backend-module-oauth2-proxy-provider": "^0.1.0-next.0",
+    "@backstage/plugin-auth-backend-module-okta-provider": "^0.0.1-next.1",
+    "@backstage/plugin-auth-node": "^0.4.2-next.1",
+    "@backstage/plugin-catalog-node": "^1.5.1-next.1",
     "@backstage/types": "^1.1.1",
-    "@davidzemon/passport-okta-oauth": "^0.0.5",
-    "@google-cloud/firestore": "^6.0.0",
+    "@google-cloud/firestore": "^7.0.0",
     "@types/express": "^4.17.6",
     "@types/passport": "^1.0.3",
     "compression": "^1.7.4",
@@ -84,9 +86,9 @@
     "yn": "^4.0.0"
   },
   "devDependencies": {
-    "@backstage/backend-defaults": "^0.2.7",
-    "@backstage/backend-test-utils": "^0.2.8",
-    "@backstage/cli": "^0.24.0",
+    "@backstage/backend-defaults": "^0.2.8-next.1",
+    "@backstage/backend-test-utils": "^0.2.9-next.1",
+    "@backstage/cli": "^0.25.0-next.1",
     "@types/body-parser": "^1.19.0",
     "@types/cookie-parser": "^1.4.2",
     "@types/express-session": "^1.17.2",