@backstage/plugin-auth-backend 0.6.1 → 0.6.2

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @backstage/plugin-auth-backend
 
+## 0.6.2
+
+### Patch Changes
+
+- 5333451def: Cleaned up API exports
+- da9c59d6e0: Removed `@backstage/test-utils` dependency.
+- 20ca7cfa5f: Switched the secure cookie mode set on the `express-session` to use `'auto'` rather than `true`. This works around an issue where cookies would not be set if TLS termination was handled in a proxy rather than having the backend served directly with HTTPS.
+
+  The downside of this change is that secure cookies won't be used unless the backend is directly served with HTTPS. This will be remedied in a future update that allows the backend to configured for trusted proxy mode.
+
+- Updated dependencies
+  - @backstage/config@0.1.12
+  - @backstage/backend-common@0.10.3
+  - @backstage/errors@0.2.0
+  - @backstage/catalog-client@0.5.4
+  - @backstage/catalog-model@0.9.9
+
 ## 0.6.1
 
 ### Patch Changes

package/dist/index.cjs.js

@@ -2873,7 +2873,7 @@ async function createRouter(options) {
       secret,
       saveUninitialized: false,
       resave: false,
-      cookie: { secure: enforceCookieSSL }
+      cookie: { secure: enforceCookieSSL ? "auto" : false }
     }));
     router.use(passport__default["default"].initialize());
     router.use(passport__default["default"].session());