@backstage/plugin-auth-backend 0.9.0 → 0.10.0-next.0

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @backstage/plugin-auth-backend
 
+## 0.10.0-next.0
+
+### Minor Changes
+
+- 08fcda13ef: The `callbackUrl` option of `OAuthAdapter` is now required.
+
+### Patch Changes
+
+- 2441d1cf59: chore(deps): bump `knex` from 0.95.6 to 1.0.2
+
+  This also replaces `sqlite3` with `@vscode/sqlite3` 5.0.7
+
+- 3396bc5973: Enabled refresh for the Atlassian provider.
+- 08fcda13ef: Added a new `cookieConfigurer` option to `AuthProviderConfig` that makes it possible to override the default logic for configuring OAuth provider cookies.
+- Updated dependencies
+  - @backstage/backend-common@0.10.7-next.0
+
 ## 0.9.0
 
 ### Minor Changes

package/dist/index.cjs.js

@@ -149,15 +149,14 @@ const verifyNonce = (req, providerId) => {
     throw new Error("Invalid nonce");
   }
 };
-const getCookieConfig = (authUrl, providerId) => {
-  const { hostname: cookieDomain, pathname, protocol } = authUrl;
+const defaultCookieConfigurer = ({
+  callbackUrl,
+  providerId
+}) => {
+  const { hostname: domain, pathname, protocol } = new URL(callbackUrl);
   const secure = protocol === "https:";
-  const cookiePath = pathname.endsWith(`${providerId}/handler/frame`) ? pathname.slice(0, -"/handler/frame".length) : `${pathname}/${providerId}`;
-  return {
-    cookieDomain,
-    cookiePath,
-    secure
-  };
+  const path = pathname.endsWith(`${providerId}/handler/frame`) ? pathname.slice(0, -"/handler/frame".length) : `${pathname}/${providerId}`;
+  return { domain, path, secure };
 };
 
 class OAuthEnvironmentHandler {
@@ -317,14 +316,18 @@ class OAuthAdapter {
   static fromConfig(config, handlers, options) {
     var _a;
     const { origin: appOrigin } = new url.URL(config.appUrl);
-    const authUrl = new url.URL((_a = options.callbackUrl) != null ? _a : config.baseUrl);
-    const { cookieDomain, cookiePath, secure } = getCookieConfig(authUrl, options.providerId);
+    const cookieConfigurer = (_a = config.cookieConfigurer) != null ? _a : defaultCookieConfigurer;
+    const cookieConfig = cookieConfigurer({
+      providerId: options.providerId,
+      baseUrl: config.baseUrl,
+      callbackUrl: options.callbackUrl
+    });
     return new OAuthAdapter(handlers, {
       ...options,
       appOrigin,
-      cookieDomain,
-      cookiePath,
-      secure,
+      cookieDomain: cookieConfig.domain,
+      cookiePath: cookieConfig.path,
+      secure: cookieConfig.secure,
       isOriginAllowed: config.isOriginAllowed
     });
   }
@@ -732,7 +735,6 @@ const createAtlassianProvider = (options) => {
       tokenIssuer
     });
     return OAuthAdapter.fromConfig(globalConfig, provider, {
-      disableRefresh: true,
       providerId,
       tokenIssuer,
       callbackUrl
@@ -3071,7 +3073,11 @@ async function createRouter(options) {
       try {
         const provider = providerFactory({
           providerId,
-          globalConfig: { baseUrl: authUrl, appUrl, isOriginAllowed },
+          globalConfig: {
+            baseUrl: authUrl,
+            appUrl,
+            isOriginAllowed
+          },
           config: providersConfig.getConfig(providerId),
           logger,
           tokenManager,