@backstage/plugin-catalog-backend 0.21.0 → 0.21.2

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @backstage/plugin-catalog-backend
 
+## 0.21.2
+
+### Patch Changes
+
+- fac5f112b4: chore(deps): bump `prom-client` from 13.2.0 to 14.0.1
+- 5bbffa60be: Pass authorization token to location service inside location api routes
+- Updated dependencies
+  - @backstage/plugin-catalog-common@0.1.2
+  - @backstage/backend-common@0.10.6
+  - @backstage/plugin-permission-node@0.4.2
+
+## 0.21.2-next.1
+
+### Patch Changes
+
+- Updated dependencies
+  - @backstage/plugin-catalog-common@0.1.2-next.0
+  - @backstage/backend-common@0.10.6-next.0
+  - @backstage/plugin-permission-node@0.4.2-next.1
+
+## 0.21.2-next.0
+
+### Patch Changes
+
+- fac5f112b4: chore(deps): bump `prom-client` from 13.2.0 to 14.0.1
+- 5bbffa60be: Pass authorization token to location service inside location api routes
+- Updated dependencies
+  - @backstage/plugin-permission-node@0.4.2-next.0
+
+## 0.21.1
+
+### Patch Changes
+
+- 4f5bde47e9: Add support for permissions to the DefaultCatalogCollator.
+- Updated dependencies
+  - @backstage/search-common@0.2.2
+  - @backstage/backend-common@0.10.5
+  - @backstage/plugin-permission-node@0.4.1
+
 ## 0.21.0
 
 ### Minor Changes

package/dist/index.cjs.js

@@ -21,6 +21,7 @@ var graphql = require('@octokit/graphql');
 var backendCommon = require('@backstage/backend-common');
 var yaml = require('yaml');
 var catalogClient = require('@backstage/catalog-client');
+var pluginCatalogCommon = require('@backstage/plugin-catalog-common');
 var crypto = require('crypto');
 var express = require('express');
 var Router = require('express-promise-router');
@@ -29,7 +30,6 @@ var uuid = require('uuid');
 var luxon = require('luxon');
 var promClient = require('prom-client');
 var stableStringify = require('fast-json-stable-stringify');
-var pluginCatalogCommon = require('@backstage/plugin-catalog-common');
 var pluginPermissionCommon = require('@backstage/plugin-permission-common');
 var pluginPermissionNode = require('@backstage/plugin-permission-node');
 
@@ -1930,6 +1930,7 @@ function withLocations(baseUrl, org, entity) {
 class DefaultCatalogCollator {
   constructor(options) {
     this.type = "software-catalog";
+    this.visibilityPermission = pluginCatalogCommon.catalogEntityReadPermission;
     const { discovery, locationTemplate, filter, catalogClient: catalogClient$1, tokenManager } = options;
     this.discovery = discovery;
     this.locationTemplate = locationTemplate || "/catalog/:namespace/:kind/:name";
@@ -1984,7 +1985,10 @@ class DefaultCatalogCollator {
         namespace: entity.metadata.namespace || "default",
         kind: entity.kind,
         lifecycle: ((_d = entity.spec) == null ? void 0 : _d.lifecycle) || "",
-        owner: ((_e = entity.spec) == null ? void 0 : _e.owner) || ""
+        owner: ((_e = entity.spec) == null ? void 0 : _e.owner) || "",
+        authorization: {
+          resourceRef: catalogModel.stringifyEntityRef(entity)
+        }
       };
     });
   }
@@ -2662,19 +2666,27 @@ async function createRouter(options) {
       if (!dryRun) {
         disallowReadonlyMode(readonlyEnabled);
       }
-      const output = await locationService.createLocation(input, dryRun);
+      const output = await locationService.createLocation(input, dryRun, {
+        authorizationToken: getBearerToken(req.header("authorization"))
+      });
       res.status(201).json(output);
-    }).get("/locations", async (_req, res) => {
-      const locations = await locationService.listLocations();
+    }).get("/locations", async (req, res) => {
+      const locations = await locationService.listLocations({
+        authorizationToken: getBearerToken(req.header("authorization"))
+      });
       res.status(200).json(locations.map((l) => ({ data: l })));
     }).get("/locations/:id", async (req, res) => {
       const { id } = req.params;
-      const output = await locationService.getLocation(id);
+      const output = await locationService.getLocation(id, {
+        authorizationToken: getBearerToken(req.header("authorization"))
+      });
       res.status(200).json(output);
     }).delete("/locations/:id", async (req, res) => {
       disallowReadonlyMode(readonlyEnabled);
       const { id } = req.params;
-      await locationService.deleteLocation(id);
+      await locationService.deleteLocation(id, {
+        authorizationToken: getBearerToken(req.header("authorization"))
+      });
       res.status(204).end();
     });
   }