@backstage/plugin-auth-backend 0.25.6-next.1 → 0.25.7-next.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/CHANGELOG.md +30 -0
  2. package/migrations/20251118120000_oauth_state_text.js +41 -0
  3. package/package.json +11 -11
package/CHANGELOG.md CHANGED
@@ -1,5 +1,35 @@
1
1
  # @backstage/plugin-auth-backend
2
2
 
3
+ ## 0.25.7-next.0
4
+
5
+ ### Patch Changes
6
+
7
+ - Updated dependencies
8
+ - @backstage/plugin-auth-node@0.6.10-next.0
9
+ - @backstage/backend-plugin-api@1.5.1-next.0
10
+ - @backstage/plugin-catalog-node@1.20.1-next.0
11
+ - @backstage/config@1.3.6
12
+ - @backstage/catalog-model@1.7.6
13
+ - @backstage/errors@1.2.7
14
+ - @backstage/types@1.2.2
15
+
16
+ ## 0.25.6
17
+
18
+ ### Patch Changes
19
+
20
+ - a9315d0: Change internal `state` column to `text` to support state of over 255 characters
21
+ - 05f60e1: Refactored constructor parameter properties to explicit property declarations for compatibility with TypeScript's `erasableSyntaxOnly` setting. This internal refactoring maintains all existing functionality while ensuring TypeScript compilation compatibility.
22
+ - 51ff7d8: Allow configuring dynamic client registration token expiration with config `auth.experimentalDynamicClientRegistration.tokenExpiration`.
23
+
24
+ Maximum expiration for the DCR token is 24 hours. Default expiration is 1 hour.
25
+
26
+ - Updated dependencies
27
+ - @backstage/plugin-catalog-node@1.20.0
28
+ - @backstage/backend-plugin-api@1.5.0
29
+ - @backstage/plugin-auth-node@0.6.9
30
+ - @backstage/config@1.3.6
31
+ - @backstage/catalog-model@1.7.6
32
+
3
33
  ## 0.25.6-next.1
4
34
 
5
35
  ### Patch Changes
package/migrations/20251118120000_oauth_state_text.js ADDED
@@ -0,0 +1,41 @@
1
+ /*
2
+ * Copyright 2025 The Backstage Authors
3
+ *
4
+ * Licensed under the Apache License, Version 2.0 (the "License");
5
+ * you may not use this file except in compliance with the License.
6
+ * You may obtain a copy of the License at
7
+ *
8
+ * http://www.apache.org/licenses/LICENSE-2.0
9
+ *
10
+ * Unless required by applicable law or agreed to in writing, software
11
+ * distributed under the License is distributed on an "AS IS" BASIS,
12
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
+ * See the License for the specific language governing permissions and
14
+ * limitations under the License.
15
+ */
16
+
17
+ // @ts-check
18
+
19
+ /**
20
+ * @param {import('knex').Knex} knex
21
+ */
22
+ exports.up = async function up(knex) {
23
+ await knex.schema.alterTable('oauth_authorization_sessions', table => {
24
+ table.text('state', 'longtext').nullable().alter();
25
+ });
26
+ };
27
+
28
+ /**
29
+ * @param {import('knex').Knex} knex
30
+ */
31
+ exports.down = async function down(knex) {
32
+ // Delete sessions with state > 255 chars since they won't fit in varchar(255)
33
+ // These sessions would be unusable with truncated state anyway
34
+ await knex('oauth_authorization_sessions')
35
+ .whereRaw('LENGTH(state) > 255')
36
+ .delete();
37
+
38
+ await knex.schema.alterTable('oauth_authorization_sessions', table => {
39
+ table.string('state').nullable().alter();
40
+ });
41
+ };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@backstage/plugin-auth-backend",
3
- "version": "0.25.6-next.1",
3
+ "version": "0.25.7-next.0",
4
4
  "description": "A Backstage backend plugin that handles authentication",
5
5
  "backstage": {
6
6
  "role": "backend-plugin",
@@ -47,12 +47,12 @@
47
47
  "test": "backstage-cli package test"
48
48
  },
49
49
  "dependencies": {
50
- "@backstage/backend-plugin-api": "1.5.0-next.1",
51
- "@backstage/catalog-model": "1.7.6-next.0",
52
- "@backstage/config": "1.3.6-next.0",
50
+ "@backstage/backend-plugin-api": "1.5.1-next.0",
51
+ "@backstage/catalog-model": "1.7.6",
52
+ "@backstage/config": "1.3.6",
53
53
  "@backstage/errors": "1.2.7",
54
- "@backstage/plugin-auth-node": "0.6.9-next.1",
55
- "@backstage/plugin-catalog-node": "1.20.0-next.1",
54
+ "@backstage/plugin-auth-node": "0.6.10-next.0",
55
+ "@backstage/plugin-catalog-node": "1.20.1-next.0",
56
56
  "@backstage/types": "1.2.2",
57
57
  "@google-cloud/firestore": "^7.0.0",
58
58
  "connect-session-knex": "^4.0.0",
@@ -70,11 +70,11 @@
70
70
  "uuid": "^11.0.0"
71
71
  },
72
72
  "devDependencies": {
73
- "@backstage/backend-defaults": "0.13.1-next.1",
74
- "@backstage/backend-test-utils": "1.10.0-next.1",
75
- "@backstage/cli": "0.34.5-next.1",
76
- "@backstage/plugin-auth-backend-module-google-provider": "0.3.9-next.1",
77
- "@backstage/plugin-auth-backend-module-guest-provider": "0.2.14-next.1",
73
+ "@backstage/backend-defaults": "0.14.0-next.0",
74
+ "@backstage/backend-test-utils": "1.10.1-next.0",
75
+ "@backstage/cli": "0.34.6-next.0",
76
+ "@backstage/plugin-auth-backend-module-google-provider": "0.3.10-next.0",
77
+ "@backstage/plugin-auth-backend-module-guest-provider": "0.2.15-next.0",
78
78
  "@types/cookie-parser": "^1.4.2",
79
79
  "@types/express": "^4.17.6",
80
80
  "@types/express-session": "^1.17.2",