@red-hat-developer-hub/backstage-plugin-app-auth 0.0.0

package/README.md

@@ -0,0 +1,12 @@
+# @red-hat-developer-hub/backstage-plugin-app-auth
+
+RHDH sign-in page (multi-provider) and OIDC / Auth0 / SAML frontend OAuth2 APIs for the **new frontend system**, registered against `pluginId: 'app'`.
+
+## Usage
+
+- **Dynamic loading**: default export is a `FrontendModule` suitable for `@backstage/frontend-dynamic-feature-loader`.
+- **Static / alpha**: import from `@red-hat-developer-hub/backstage-plugin-app-auth/alpha` for `appAuthModule`, `SignInPage`, `signInTranslationRef`, and auth API refs.
+
+## Config
+
+Root `signInPage` (string or string[]) selects which providers appear; see `config.d.ts`.

package/config.d.ts

@@ -0,0 +1,23 @@
+/*
+ * Copyright Red Hat, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface Config {
+  /**
+   * Sign-in provider id(s) to show on the RHDH sign-in page.
+   * @visibility frontend
+   */
+  signInPage?: string | string[];
+}

package/dist/AuthApiRefs.esm.js

@@ -0,0 +1,14 @@
+import { createApiRef } from '@backstage/core-plugin-api';
+
+const oidcAuthApiRef = createApiRef({
+  id: "internal.auth.oidc"
+});
+const auth0AuthApiRef = createApiRef({
+  id: "internal.auth.auth0"
+});
+const samlAuthApiRef = createApiRef({
+  id: "internal.auth.saml"
+});
+
+export { auth0AuthApiRef, oidcAuthApiRef, samlAuthApiRef };
+//# sourceMappingURL=AuthApiRefs.esm.js.map

package/dist/AuthApiRefs.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthApiRefs.esm.js","sources":["../src/AuthApiRefs.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  createApiRef,\n  type ApiRef,\n  type BackstageIdentityApi,\n  type OAuthApi,\n  type OpenIdConnectApi,\n  type ProfileInfoApi,\n  type SessionApi,\n} from '@backstage/core-plugin-api';\n\n/**\n * Combined surface for custom RHDH auth APIs backed by `OAuth2` in the app module.\n *\n * @alpha\n */\nexport type CustomAuthApiRefType = OAuthApi &\n  OpenIdConnectApi &\n  ProfileInfoApi &\n  BackstageIdentityApi &\n  SessionApi;\n\n/**\n * OIDC auth API for the RHDH multi-provider sign-in page.\n *\n * @alpha\n */\nexport const oidcAuthApiRef: ApiRef<CustomAuthApiRefType> = createApiRef({\n  id: 'internal.auth.oidc',\n});\n\n/**\n * Auth0 auth API for the RHDH multi-provider sign-in page.\n *\n * @alpha\n */\nexport const auth0AuthApiRef: ApiRef<CustomAuthApiRefType> = createApiRef({\n  id: 'internal.auth.auth0',\n});\n\n/**\n * SAML auth API for the RHDH multi-provider sign-in page.\n *\n * @alpha\n */\nexport const samlAuthApiRef: ApiRef<CustomAuthApiRefType> = createApiRef({\n  id: 'internal.auth.saml',\n});\n"],"names":[],"mappings":";;AA0CO,MAAM,iBAA+C,YAAA,CAAa;AAAA,EACvE,EAAA,EAAI;AACN,CAAC;AAOM,MAAM,kBAAgD,YAAA,CAAa;AAAA,EACxE,EAAA,EAAI;AACN,CAAC;AAOM,MAAM,iBAA+C,YAAA,CAAa;AAAA,EACvE,EAAA,EAAI;AACN,CAAC;;;;"}

package/dist/alpha.d.ts

@@ -0,0 +1,81 @@
+import * as _backstage_frontend_plugin_api from '@backstage/frontend-plugin-api';
+import { SignInPageProps, OAuthApi, OpenIdConnectApi, ProfileInfoApi, BackstageIdentityApi, SessionApi, ApiRef } from '@backstage/core-plugin-api';
+
+/**
+ * RHDH app sign-in page plus OIDC, Auth0, and SAML OAuth2 frontend APIs (`pluginId: app`).
+ * Default-export this module for dynamic frontend loading.
+ *
+ * @alpha
+ */
+declare const appAuthModule: _backstage_frontend_plugin_api.FrontendModule;
+
+/**
+ * RHDH multi-provider sign-in page (mirrors classic app `SignInPage` behavior for NFS).
+ *
+ * @alpha
+ */
+declare function SignInPage(props: SignInPageProps): React.JSX.Element;
+
+/**
+ * Combined surface for custom RHDH auth APIs backed by `OAuth2` in the app module.
+ *
+ * @alpha
+ */
+type CustomAuthApiRefType = OAuthApi & OpenIdConnectApi & ProfileInfoApi & BackstageIdentityApi & SessionApi;
+/**
+ * OIDC auth API for the RHDH multi-provider sign-in page.
+ *
+ * @alpha
+ */
+declare const oidcAuthApiRef: ApiRef<CustomAuthApiRefType>;
+/**
+ * Auth0 auth API for the RHDH multi-provider sign-in page.
+ *
+ * @alpha
+ */
+declare const auth0AuthApiRef: ApiRef<CustomAuthApiRefType>;
+/**
+ * SAML auth API for the RHDH multi-provider sign-in page.
+ *
+ * @alpha
+ */
+declare const samlAuthApiRef: ApiRef<CustomAuthApiRefType>;
+
+/**
+ * Sign-in page messages (English). Same key shape as legacy RHDH app signIn for compatibility.
+ *
+ * @alpha
+ */
+declare const signInTranslationRef: _backstage_frontend_plugin_api.TranslationRef<"plugin.app-auth.sign-in", {
+    readonly "signIn.page.title": "Select a sign-in method";
+    readonly "signIn.config.missingAuthEnvironment.error": "Missing required app configuration: auth.environment must be set";
+    readonly "signIn.config.missingAuthEnvironment.panelTitle": "Sign-in is not available";
+    readonly "signIn.config.missingAuthEnvironment.description": "Set {{ authEnvKey }} in your app configuration (for example {{ devEnv }} for local use or {{ prodEnv }} in deployed environments). Without it, the app cannot safely determine which sign-in options to offer.";
+    readonly "signIn.providers.auth0.title": "Auth0";
+    readonly "signIn.providers.auth0.message": "Sign in using Auth0";
+    readonly "signIn.providers.atlassian.title": "Atlassian";
+    readonly "signIn.providers.atlassian.message": "Sign in using Atlassian";
+    readonly "signIn.providers.microsoft.title": "Microsoft";
+    readonly "signIn.providers.microsoft.message": "Sign in using Microsoft";
+    readonly "signIn.providers.bitbucket.title": "Bitbucket";
+    readonly "signIn.providers.bitbucket.message": "Sign in using Bitbucket";
+    readonly "signIn.providers.bitbucketServer.title": "Bitbucket Server";
+    readonly "signIn.providers.bitbucketServer.message": "Sign in using Bitbucket Server";
+    readonly "signIn.providers.github.title": "GitHub";
+    readonly "signIn.providers.github.message": "Sign in using GitHub";
+    readonly "signIn.providers.gitlab.title": "GitLab";
+    readonly "signIn.providers.gitlab.message": "Sign in using GitLab";
+    readonly "signIn.providers.google.title": "Google";
+    readonly "signIn.providers.google.message": "Sign in using Google";
+    readonly "signIn.providers.oidc.title": "OIDC";
+    readonly "signIn.providers.oidc.message": "Sign in using OIDC";
+    readonly "signIn.providers.okta.title": "Okta";
+    readonly "signIn.providers.okta.message": "Sign in using Okta";
+    readonly "signIn.providers.onelogin.title": "OneLogin";
+    readonly "signIn.providers.onelogin.message": "Sign in using OneLogin";
+    readonly "signIn.providers.saml.title": "SAML";
+    readonly "signIn.providers.saml.message": "Sign in using SAML";
+}>;
+
+export { SignInPage, appAuthModule, auth0AuthApiRef, appAuthModule as default, oidcAuthApiRef, samlAuthApiRef, signInTranslationRef };
+export type { CustomAuthApiRefType };

package/dist/alpha.esm.js

@@ -0,0 +1,5 @@
+export { appAuthModule, appAuthModule as default } from './appAuthModule.esm.js';
+export { SignInPage } from './components/SignInPage.esm.js';
+export { auth0AuthApiRef, oidcAuthApiRef, samlAuthApiRef } from './AuthApiRefs.esm.js';
+export { signInTranslationRef } from './translations/signIn.esm.js';
+//# sourceMappingURL=alpha.esm.js.map

package/dist/alpha.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alpha.esm.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;"}

package/dist/appAuthModule.esm.js

@@ -0,0 +1,85 @@
+import { jsx } from 'react/jsx-runtime';
+import { OAuth2 } from '@backstage/core-app-api';
+import { configApiRef, oauthRequestApiRef, discoveryApiRef } from '@backstage/core-plugin-api';
+import { ApiBlueprint, createFrontendModule } from '@backstage/frontend-plugin-api';
+import appPlugin from '@backstage/plugin-app';
+import { oidcAuthApiRef, auth0AuthApiRef, samlAuthApiRef } from './AuthApiRefs.esm.js';
+import { SignInPage } from './components/SignInPage.esm.js';
+
+const oidcAuthApi = ApiBlueprint.make({
+  name: "oidc-auth",
+  params: (defineParams) => defineParams({
+    api: oidcAuthApiRef,
+    deps: {
+      discoveryApi: discoveryApiRef,
+      oauthRequestApi: oauthRequestApiRef,
+      configApi: configApiRef
+    },
+    factory: ({ discoveryApi, oauthRequestApi, configApi }) => OAuth2.create({
+      configApi,
+      discoveryApi,
+      oauthRequestApi,
+      provider: {
+        id: "oidc",
+        title: "OIDC",
+        icon: () => null
+      },
+      environment: configApi.getOptionalString("auth.environment")
+    })
+  })
+});
+const auth0AuthApi = ApiBlueprint.make({
+  name: "auth0-auth",
+  params: (defineParams) => defineParams({
+    api: auth0AuthApiRef,
+    deps: {
+      discoveryApi: discoveryApiRef,
+      oauthRequestApi: oauthRequestApiRef,
+      configApi: configApiRef
+    },
+    factory: ({ discoveryApi, oauthRequestApi, configApi }) => OAuth2.create({
+      discoveryApi,
+      oauthRequestApi,
+      provider: {
+        id: "auth0",
+        title: "Auth0",
+        icon: () => null
+      },
+      defaultScopes: ["openid", "email", "profile"],
+      environment: configApi.getOptionalString("auth.environment")
+    })
+  })
+});
+const samlAuthApi = ApiBlueprint.make({
+  name: "saml-auth",
+  params: (defineParams) => defineParams({
+    api: samlAuthApiRef,
+    deps: {
+      discoveryApi: discoveryApiRef,
+      oauthRequestApi: oauthRequestApiRef,
+      configApi: configApiRef
+    },
+    factory: ({ discoveryApi, oauthRequestApi, configApi }) => OAuth2.create({
+      discoveryApi,
+      oauthRequestApi,
+      provider: {
+        id: "saml",
+        title: "SAML",
+        icon: () => null
+      },
+      environment: configApi.getOptionalString("auth.environment")
+    })
+  })
+});
+const signInPageOverride = appPlugin.getExtension("sign-in-page:app").override({
+  params: {
+    loader: async () => (props) => /* @__PURE__ */ jsx(SignInPage, { ...props })
+  }
+});
+const appAuthModule = createFrontendModule({
+  pluginId: "app",
+  extensions: [signInPageOverride, oidcAuthApi, auth0AuthApi, samlAuthApi]
+});
+
+export { appAuthModule };
+//# sourceMappingURL=appAuthModule.esm.js.map

package/dist/appAuthModule.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appAuthModule.esm.js","sources":["../src/appAuthModule.tsx"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { OAuth2 } from '@backstage/core-app-api';\nimport {\n  configApiRef,\n  discoveryApiRef,\n  oauthRequestApiRef,\n} from '@backstage/core-plugin-api';\nimport {\n  ApiBlueprint,\n  createFrontendModule,\n} from '@backstage/frontend-plugin-api';\nimport appPlugin from '@backstage/plugin-app';\n\nimport { auth0AuthApiRef, oidcAuthApiRef, samlAuthApiRef } from './AuthApiRefs';\nimport { SignInPage } from './components/SignInPage';\n\nconst oidcAuthApi = ApiBlueprint.make({\n  name: 'oidc-auth',\n  params: defineParams =>\n    defineParams({\n      api: oidcAuthApiRef,\n      deps: {\n        discoveryApi: discoveryApiRef,\n        oauthRequestApi: oauthRequestApiRef,\n        configApi: configApiRef,\n      },\n      factory: ({ discoveryApi, oauthRequestApi, configApi }) =>\n        OAuth2.create({\n          configApi,\n          discoveryApi,\n          oauthRequestApi: oauthRequestApi,\n          provider: {\n            id: 'oidc',\n            title: 'OIDC',\n            icon: () => null,\n          },\n          environment: configApi.getOptionalString('auth.environment'),\n        }),\n    }),\n});\n\nconst auth0AuthApi = ApiBlueprint.make({\n  name: 'auth0-auth',\n  params: defineParams =>\n    defineParams({\n      api: auth0AuthApiRef,\n      deps: {\n        discoveryApi: discoveryApiRef,\n        oauthRequestApi: oauthRequestApiRef,\n        configApi: configApiRef,\n      },\n      factory: ({ discoveryApi, oauthRequestApi, configApi }) =>\n        OAuth2.create({\n          discoveryApi,\n          oauthRequestApi: oauthRequestApi,\n          provider: {\n            id: 'auth0',\n            title: 'Auth0',\n            icon: () => null,\n          },\n          defaultScopes: ['openid', 'email', 'profile'],\n          environment: configApi.getOptionalString('auth.environment'),\n        }),\n    }),\n});\n\nconst samlAuthApi = ApiBlueprint.make({\n  name: 'saml-auth',\n  params: defineParams =>\n    defineParams({\n      api: samlAuthApiRef,\n      deps: {\n        discoveryApi: discoveryApiRef,\n        oauthRequestApi: oauthRequestApiRef,\n        configApi: configApiRef,\n      },\n      factory: ({ discoveryApi, oauthRequestApi, configApi }) =>\n        OAuth2.create({\n          discoveryApi,\n          oauthRequestApi: oauthRequestApi,\n          provider: {\n            id: 'saml',\n            title: 'SAML',\n            icon: () => null,\n          },\n          environment: configApi.getOptionalString('auth.environment'),\n        }),\n    }),\n});\n\nconst signInPageOverride = appPlugin.getExtension('sign-in-page:app').override({\n  params: {\n    loader: async () => (props: Parameters<typeof SignInPage>[0]) =>\n      <SignInPage {...props} />,\n  },\n});\n\n/**\n * RHDH app sign-in page plus OIDC, Auth0, and SAML OAuth2 frontend APIs (`pluginId: app`).\n * Default-export this module for dynamic frontend loading.\n *\n * @alpha\n */\nexport const appAuthModule = createFrontendModule({\n  pluginId: 'app',\n  extensions: [signInPageOverride, oidcAuthApi, auth0AuthApi, samlAuthApi],\n});\n"],"names":[],"mappings":";;;;;;;;AA+BA,MAAM,WAAA,GAAc,aAAa,IAAA,CAAK;AAAA,EACpC,IAAA,EAAM,WAAA;AAAA,EACN,MAAA,EAAQ,kBACN,YAAA,CAAa;AAAA,IACX,GAAA,EAAK,cAAA;AAAA,IACL,IAAA,EAAM;AAAA,MACJ,YAAA,EAAc,eAAA;AAAA,MACd,eAAA,EAAiB,kBAAA;AAAA,MACjB,SAAA,EAAW;AAAA,KACb;AAAA,IACA,OAAA,EAAS,CAAC,EAAE,YAAA,EAAc,iBAAiB,SAAA,EAAU,KACnD,OAAO,MAAA,CAAO;AAAA,MACZ,SAAA;AAAA,MACA,YAAA;AAAA,MACA,eAAA;AAAA,MACA,QAAA,EAAU;AAAA,QACR,EAAA,EAAI,MAAA;AAAA,QACJ,KAAA,EAAO,MAAA;AAAA,QACP,MAAM,MAAM;AAAA,OACd;AAAA,MACA,WAAA,EAAa,SAAA,CAAU,iBAAA,CAAkB,kBAAkB;AAAA,KAC5D;AAAA,GACJ;AACL,CAAC,CAAA;AAED,MAAM,YAAA,GAAe,aAAa,IAAA,CAAK;AAAA,EACrC,IAAA,EAAM,YAAA;AAAA,EACN,MAAA,EAAQ,kBACN,YAAA,CAAa;AAAA,IACX,GAAA,EAAK,eAAA;AAAA,IACL,IAAA,EAAM;AAAA,MACJ,YAAA,EAAc,eAAA;AAAA,MACd,eAAA,EAAiB,kBAAA;AAAA,MACjB,SAAA,EAAW;AAAA,KACb;AAAA,IACA,OAAA,EAAS,CAAC,EAAE,YAAA,EAAc,iBAAiB,SAAA,EAAU,KACnD,OAAO,MAAA,CAAO;AAAA,MACZ,YAAA;AAAA,MACA,eAAA;AAAA,MACA,QAAA,EAAU;AAAA,QACR,EAAA,EAAI,OAAA;AAAA,QACJ,KAAA,EAAO,OAAA;AAAA,QACP,MAAM,MAAM;AAAA,OACd;AAAA,MACA,aAAA,EAAe,CAAC,QAAA,EAAU,OAAA,EAAS,SAAS,CAAA;AAAA,MAC5C,WAAA,EAAa,SAAA,CAAU,iBAAA,CAAkB,kBAAkB;AAAA,KAC5D;AAAA,GACJ;AACL,CAAC,CAAA;AAED,MAAM,WAAA,GAAc,aAAa,IAAA,CAAK;AAAA,EACpC,IAAA,EAAM,WAAA;AAAA,EACN,MAAA,EAAQ,kBACN,YAAA,CAAa;AAAA,IACX,GAAA,EAAK,cAAA;AAAA,IACL,IAAA,EAAM;AAAA,MACJ,YAAA,EAAc,eAAA;AAAA,MACd,eAAA,EAAiB,kBAAA;AAAA,MACjB,SAAA,EAAW;AAAA,KACb;AAAA,IACA,OAAA,EAAS,CAAC,EAAE,YAAA,EAAc,iBAAiB,SAAA,EAAU,KACnD,OAAO,MAAA,CAAO;AAAA,MACZ,YAAA;AAAA,MACA,eAAA;AAAA,MACA,QAAA,EAAU;AAAA,QACR,EAAA,EAAI,MAAA;AAAA,QACJ,KAAA,EAAO,MAAA;AAAA,QACP,MAAM,MAAM;AAAA,OACd;AAAA,MACA,WAAA,EAAa,SAAA,CAAU,iBAAA,CAAkB,kBAAkB;AAAA,KAC5D;AAAA,GACJ;AACL,CAAC,CAAA;AAED,MAAM,kBAAA,GAAqB,SAAA,CAAU,YAAA,CAAa,kBAAkB,EAAE,QAAA,CAAS;AAAA,EAC7E,MAAA,EAAQ;AAAA,IACN,QAAQ,YAAY,CAAC,0BACnB,GAAA,CAAC,UAAA,EAAA,EAAY,GAAG,KAAA,EAAO;AAAA;AAE7B,CAAC,CAAA;AAQM,MAAM,gBAAgB,oBAAA,CAAqB;AAAA,EAChD,QAAA,EAAU,KAAA;AAAA,EACV,UAAA,EAAY,CAAC,kBAAA,EAAoB,WAAA,EAAa,cAAc,WAAW;AACzE,CAAC;;;;"}

package/dist/components/SignInPage.esm.js

@@ -0,0 +1,177 @@
+import { jsx } from 'react/jsx-runtime';
+import { ErrorPanel, ProxiedSignInPage, SignInPage as SignInPage$1 } from '@backstage/core-components';
+import { useApi, configApiRef, atlassianAuthApiRef, microsoftAuthApiRef, bitbucketAuthApiRef, bitbucketServerAuthApiRef, githubAuthApiRef, gitlabAuthApiRef, googleAuthApiRef, oktaAuthApiRef, oneloginAuthApiRef } from '@backstage/core-plugin-api';
+import { useTranslationRef } from '@backstage/core-plugin-api/alpha';
+import Typography from '@mui/material/Typography';
+import { auth0AuthApiRef, oidcAuthApiRef, samlAuthApiRef } from '../AuthApiRefs.esm.js';
+import { signInTranslationRef } from '../translations/signIn.esm.js';
+
+const DEFAULT_PROVIDER = "github";
+const createProviders = (t) => /* @__PURE__ */ new Map([
+  [
+    "auth0",
+    {
+      id: "auth0-auth-provider",
+      title: t("signIn.providers.auth0.title"),
+      message: t("signIn.providers.auth0.message"),
+      apiRef: auth0AuthApiRef
+    }
+  ],
+  [
+    "atlassian",
+    {
+      id: "atlassian-auth-provider",
+      title: t("signIn.providers.atlassian.title"),
+      message: t("signIn.providers.atlassian.message"),
+      apiRef: atlassianAuthApiRef
+    }
+  ],
+  [
+    "microsoft",
+    {
+      id: "microsoft-auth-provider",
+      title: t("signIn.providers.microsoft.title"),
+      message: t("signIn.providers.microsoft.message"),
+      apiRef: microsoftAuthApiRef
+    }
+  ],
+  ["azure-easyauth", "azure-easyauth"],
+  [
+    "bitbucket",
+    {
+      id: "bitbucket-auth-provider",
+      title: t("signIn.providers.bitbucket.title"),
+      message: t("signIn.providers.bitbucket.message"),
+      apiRef: bitbucketAuthApiRef
+    }
+  ],
+  [
+    "bitbucketServer",
+    {
+      id: "bitbucket-server-auth-provider",
+      title: t("signIn.providers.bitbucketServer.title"),
+      message: t("signIn.providers.bitbucketServer.message"),
+      apiRef: bitbucketServerAuthApiRef
+    }
+  ],
+  ["cfaccess", "cfaccess"],
+  [
+    "github",
+    {
+      id: "github-auth-provider",
+      title: t("signIn.providers.github.title"),
+      message: t("signIn.providers.github.message"),
+      apiRef: githubAuthApiRef
+    }
+  ],
+  [
+    "gitlab",
+    {
+      id: "gitlab-auth-provider",
+      title: t("signIn.providers.gitlab.title"),
+      message: t("signIn.providers.gitlab.message"),
+      apiRef: gitlabAuthApiRef
+    }
+  ],
+  [
+    "google",
+    {
+      id: "google-auth-provider",
+      title: t("signIn.providers.google.title"),
+      message: t("signIn.providers.google.message"),
+      apiRef: googleAuthApiRef
+    }
+  ],
+  ["gcp-iap", "gcp-iap"],
+  [
+    "oidc",
+    {
+      id: "oidc-auth-provider",
+      title: t("signIn.providers.oidc.title"),
+      message: t("signIn.providers.oidc.message"),
+      apiRef: oidcAuthApiRef
+    }
+  ],
+  [
+    "okta",
+    {
+      id: "okta-auth-provider",
+      title: t("signIn.providers.okta.title"),
+      message: t("signIn.providers.okta.message"),
+      apiRef: oktaAuthApiRef
+    }
+  ],
+  ["oauth2Proxy", "oauth2Proxy"],
+  [
+    "onelogin",
+    {
+      id: "onelogin-auth-provider",
+      title: t("signIn.providers.onelogin.title"),
+      message: t("signIn.providers.onelogin.message"),
+      apiRef: oneloginAuthApiRef
+    }
+  ],
+  [
+    "saml",
+    {
+      id: "saml-auth-provider",
+      title: t("signIn.providers.saml.title"),
+      message: t("signIn.providers.saml.message"),
+      apiRef: samlAuthApiRef
+    }
+  ]
+]);
+function SignInPage(props) {
+  const configApi = useApi(configApiRef);
+  const { t } = useTranslationRef(signInTranslationRef);
+  const authEnvironment = configApi.getOptionalString("auth.environment");
+  if (!authEnvironment?.trim()) {
+    return /* @__PURE__ */ jsx(
+      ErrorPanel,
+      {
+        error: new Error(t("signIn.config.missingAuthEnvironment.error")),
+        title: t("signIn.config.missingAuthEnvironment.panelTitle"),
+        children: /* @__PURE__ */ jsx(Typography, { variant: "body2", component: "div", children: t("signIn.config.missingAuthEnvironment.description", {
+          replace: {
+            authEnvKey: /* @__PURE__ */ jsx("code", { children: "auth.environment" }),
+            devEnv: /* @__PURE__ */ jsx("code", { children: "development" }),
+            prodEnv: /* @__PURE__ */ jsx("code", { children: "production" })
+          }
+        }) })
+      }
+    );
+  }
+  const isDevEnv = authEnvironment === "development";
+  const signInPageConfig = configApi.getOptional(
+    "signInPage"
+  );
+  const configValue = signInPageConfig ?? DEFAULT_PROVIDER;
+  const providerNames = Array.isArray(configValue) ? configValue : [configValue];
+  const providers = createProviders(t);
+  const providerConfigs = providerNames.map((name) => providers.get(name)).filter(
+    (config) => config !== void 0
+  );
+  if (providerConfigs.length === 0) {
+    const defaultProvider = providers.get(DEFAULT_PROVIDER);
+    if (defaultProvider) providerConfigs.push(defaultProvider);
+  }
+  if (providerConfigs.some((config) => typeof config === "string")) {
+    const proxiedProvider = providerConfigs.find(
+      (config) => typeof config === "string"
+    );
+    return /* @__PURE__ */ jsx(ProxiedSignInPage, { ...props, provider: proxiedProvider });
+  }
+  const providerList = isDevEnv ? ["guest", ...providerConfigs] : providerConfigs;
+  return /* @__PURE__ */ jsx(
+    SignInPage$1,
+    {
+      ...props,
+      title: t("signIn.page.title"),
+      align: "center",
+      providers: providerList
+    }
+  );
+}
+
+export { SignInPage };
+//# sourceMappingURL=SignInPage.esm.js.map

package/dist/components/SignInPage.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignInPage.esm.js","sources":["../../src/components/SignInPage.tsx"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  ErrorPanel,\n  SignInPage as CCSignInPage,\n  ProxiedSignInPage,\n  type SignInProviderConfig,\n} from '@backstage/core-components';\nimport {\n  atlassianAuthApiRef,\n  bitbucketAuthApiRef,\n  bitbucketServerAuthApiRef,\n  configApiRef,\n  githubAuthApiRef,\n  gitlabAuthApiRef,\n  googleAuthApiRef,\n  microsoftAuthApiRef,\n  oktaAuthApiRef,\n  oneloginAuthApiRef,\n  useApi,\n  type SignInPageProps,\n} from '@backstage/core-plugin-api';\nimport { useTranslationRef } from '@backstage/core-plugin-api/alpha';\nimport Typography from '@mui/material/Typography';\n\nimport {\n  auth0AuthApiRef,\n  oidcAuthApiRef,\n  samlAuthApiRef,\n} from '../AuthApiRefs';\nimport { signInTranslationRef } from '../translations/signIn';\n\nconst DEFAULT_PROVIDER = 'github';\n\nconst createProviders = (t: (key: string, params?: any) => string) =>\n  new Map<string, SignInProviderConfig | string>([\n    [\n      'auth0',\n      {\n        id: 'auth0-auth-provider',\n        title: t('signIn.providers.auth0.title'),\n        message: t('signIn.providers.auth0.message'),\n        apiRef: auth0AuthApiRef,\n      },\n    ],\n    [\n      'atlassian',\n      {\n        id: 'atlassian-auth-provider',\n        title: t('signIn.providers.atlassian.title'),\n        message: t('signIn.providers.atlassian.message'),\n        apiRef: atlassianAuthApiRef,\n      },\n    ],\n    [\n      'microsoft',\n      {\n        id: 'microsoft-auth-provider',\n        title: t('signIn.providers.microsoft.title'),\n        message: t('signIn.providers.microsoft.message'),\n        apiRef: microsoftAuthApiRef,\n      },\n    ],\n    ['azure-easyauth', 'azure-easyauth'],\n    [\n      'bitbucket',\n      {\n        id: 'bitbucket-auth-provider',\n        title: t('signIn.providers.bitbucket.title'),\n        message: t('signIn.providers.bitbucket.message'),\n        apiRef: bitbucketAuthApiRef,\n      },\n    ],\n    [\n      'bitbucketServer',\n      {\n        id: 'bitbucket-server-auth-provider',\n        title: t('signIn.providers.bitbucketServer.title'),\n        message: t('signIn.providers.bitbucketServer.message'),\n        apiRef: bitbucketServerAuthApiRef,\n      },\n    ],\n    ['cfaccess', 'cfaccess'],\n    [\n      'github',\n      {\n        id: 'github-auth-provider',\n        title: t('signIn.providers.github.title'),\n        message: t('signIn.providers.github.message'),\n        apiRef: githubAuthApiRef,\n      },\n    ],\n    [\n      'gitlab',\n      {\n        id: 'gitlab-auth-provider',\n        title: t('signIn.providers.gitlab.title'),\n        message: t('signIn.providers.gitlab.message'),\n        apiRef: gitlabAuthApiRef,\n      },\n    ],\n    [\n      'google',\n      {\n        id: 'google-auth-provider',\n        title: t('signIn.providers.google.title'),\n        message: t('signIn.providers.google.message'),\n        apiRef: googleAuthApiRef,\n      },\n    ],\n    ['gcp-iap', 'gcp-iap'],\n    [\n      'oidc',\n      {\n        id: 'oidc-auth-provider',\n        title: t('signIn.providers.oidc.title'),\n        message: t('signIn.providers.oidc.message'),\n        apiRef: oidcAuthApiRef,\n      },\n    ],\n    [\n      'okta',\n      {\n        id: 'okta-auth-provider',\n        title: t('signIn.providers.okta.title'),\n        message: t('signIn.providers.okta.message'),\n        apiRef: oktaAuthApiRef,\n      },\n    ],\n    ['oauth2Proxy', 'oauth2Proxy'],\n    [\n      'onelogin',\n      {\n        id: 'onelogin-auth-provider',\n        title: t('signIn.providers.onelogin.title'),\n        message: t('signIn.providers.onelogin.message'),\n        apiRef: oneloginAuthApiRef,\n      },\n    ],\n    [\n      'saml',\n      {\n        id: 'saml-auth-provider',\n        title: t('signIn.providers.saml.title'),\n        message: t('signIn.providers.saml.message'),\n        apiRef: samlAuthApiRef,\n      },\n    ],\n  ]);\n\n/**\n * RHDH multi-provider sign-in page (mirrors classic app `SignInPage` behavior for NFS).\n *\n * @alpha\n */\nexport function SignInPage(props: SignInPageProps): React.JSX.Element {\n  const configApi = useApi(configApiRef);\n  const { t } = useTranslationRef(signInTranslationRef);\n  const authEnvironment = configApi.getOptionalString('auth.environment');\n  if (!authEnvironment?.trim()) {\n    return (\n      <ErrorPanel\n        error={new Error(t('signIn.config.missingAuthEnvironment.error'))}\n        title={t('signIn.config.missingAuthEnvironment.panelTitle')}\n      >\n        <Typography variant=\"body2\" component=\"div\">\n          {t('signIn.config.missingAuthEnvironment.description', {\n            replace: {\n              authEnvKey: <code>auth.environment</code>,\n              devEnv: <code>development</code>,\n              prodEnv: <code>production</code>,\n            },\n          })}\n        </Typography>\n      </ErrorPanel>\n    );\n  }\n  const isDevEnv = authEnvironment === 'development';\n\n  const signInPageConfig = configApi.getOptional<string | string[]>(\n    'signInPage',\n  );\n  const configValue = signInPageConfig ?? DEFAULT_PROVIDER;\n  const providerNames = Array.isArray(configValue)\n    ? configValue\n    : [configValue];\n\n  const providers = createProviders(t);\n\n  const providerConfigs = providerNames\n    .map(name => providers.get(name))\n    .filter(\n      (config): config is SignInProviderConfig | string => config !== undefined,\n    );\n\n  if (providerConfigs.length === 0) {\n    const defaultProvider = providers.get(DEFAULT_PROVIDER);\n    if (defaultProvider) providerConfigs.push(defaultProvider);\n  }\n\n  if (providerConfigs.some(config => typeof config === 'string')) {\n    const proxiedProvider = providerConfigs.find(\n      config => typeof config === 'string',\n    ) as string;\n    return <ProxiedSignInPage {...props} provider={proxiedProvider} />;\n  }\n\n  const providerList = isDevEnv\n    ? ['guest' as const, ...(providerConfigs as SignInProviderConfig[])]\n    : (providerConfigs as SignInProviderConfig[]);\n\n  return (\n    <CCSignInPage\n      {...props}\n      title={t('signIn.page.title')}\n      align=\"center\"\n      providers={providerList}\n    />\n  );\n}\n"],"names":["CCSignInPage"],"mappings":";;;;;;;;AA8CA,MAAM,gBAAA,GAAmB,QAAA;AAEzB,MAAM,eAAA,GAAkB,CAAC,CAAA,qBACvB,IAAI,GAAA,CAA2C;AAAA,EAC7C;AAAA,IACE,OAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,qBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,8BAA8B,CAAA;AAAA,MACvC,OAAA,EAAS,EAAE,gCAAgC,CAAA;AAAA,MAC3C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA;AAAA,IACE,WAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,yBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,kCAAkC,CAAA;AAAA,MAC3C,OAAA,EAAS,EAAE,oCAAoC,CAAA;AAAA,MAC/C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA;AAAA,IACE,WAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,yBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,kCAAkC,CAAA;AAAA,MAC3C,OAAA,EAAS,EAAE,oCAAoC,CAAA;AAAA,MAC/C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA,CAAC,kBAAkB,gBAAgB,CAAA;AAAA,EACnC;AAAA,IACE,WAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,yBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,kCAAkC,CAAA;AAAA,MAC3C,OAAA,EAAS,EAAE,oCAAoC,CAAA;AAAA,MAC/C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA;AAAA,IACE,iBAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,gCAAA;AAAA,MACJ,KAAA,EAAO,EAAE,wCAAwC,CAAA;AAAA,MACjD,OAAA,EAAS,EAAE,0CAA0C,CAAA;AAAA,MACrD,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA,CAAC,YAAY,UAAU,CAAA;AAAA,EACvB;AAAA,IACE,QAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,sBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,+BAA+B,CAAA;AAAA,MACxC,OAAA,EAAS,EAAE,iCAAiC,CAAA;AAAA,MAC5C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA;AAAA,IACE,QAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,sBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,+BAA+B,CAAA;AAAA,MACxC,OAAA,EAAS,EAAE,iCAAiC,CAAA;AAAA,MAC5C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA;AAAA,IACE,QAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,sBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,+BAA+B,CAAA;AAAA,MACxC,OAAA,EAAS,EAAE,iCAAiC,CAAA;AAAA,MAC5C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA,CAAC,WAAW,SAAS,CAAA;AAAA,EACrB;AAAA,IACE,MAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,oBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,6BAA6B,CAAA;AAAA,MACtC,OAAA,EAAS,EAAE,+BAA+B,CAAA;AAAA,MAC1C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA;AAAA,IACE,MAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,oBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,6BAA6B,CAAA;AAAA,MACtC,OAAA,EAAS,EAAE,+BAA+B,CAAA;AAAA,MAC1C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA,CAAC,eAAe,aAAa,CAAA;AAAA,EAC7B;AAAA,IACE,UAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,wBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,iCAAiC,CAAA;AAAA,MAC1C,OAAA,EAAS,EAAE,mCAAmC,CAAA;AAAA,MAC9C,MAAA,EAAQ;AAAA;AACV,GACF;AAAA,EACA;AAAA,IACE,MAAA;AAAA,IACA;AAAA,MACE,EAAA,EAAI,oBAAA;AAAA,MACJ,KAAA,EAAO,EAAE,6BAA6B,CAAA;AAAA,MACtC,OAAA,EAAS,EAAE,+BAA+B,CAAA;AAAA,MAC1C,MAAA,EAAQ;AAAA;AACV;AAEJ,CAAC,CAAA;AAOI,SAAS,WAAW,KAAA,EAA2C;AACpE,EAAA,MAAM,SAAA,GAAY,OAAO,YAAY,CAAA;AACrC,EAAA,MAAM,EAAE,CAAA,EAAE,GAAI,iBAAA,CAAkB,oBAAoB,CAAA;AACpD,EAAA,MAAM,eAAA,GAAkB,SAAA,CAAU,iBAAA,CAAkB,kBAAkB,CAAA;AACtE,EAAA,IAAI,CAAC,eAAA,EAAiB,IAAA,EAAK,EAAG;AAC5B,IAAA,uBACE,GAAA;AAAA,MAAC,UAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO,IAAI,KAAA,CAAM,CAAA,CAAE,4CAA4C,CAAC,CAAA;AAAA,QAChE,KAAA,EAAO,EAAE,iDAAiD,CAAA;AAAA,QAE1D,8BAAC,UAAA,EAAA,EAAW,OAAA,EAAQ,SAAQ,SAAA,EAAU,KAAA,EACnC,YAAE,kDAAA,EAAoD;AAAA,UACrD,OAAA,EAAS;AAAA,YACP,UAAA,kBAAY,GAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAA,kBAAA,EAAgB,CAAA;AAAA,YAClC,MAAA,kBAAQ,GAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAA,aAAA,EAAW,CAAA;AAAA,YACzB,OAAA,kBAAS,GAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAA,YAAA,EAAU;AAAA;AAC3B,SACD,CAAA,EACH;AAAA;AAAA,KACF;AAAA,EAEJ;AACA,EAAA,MAAM,WAAW,eAAA,KAAoB,aAAA;AAErC,EAAA,MAAM,mBAAmB,SAAA,CAAU,WAAA;AAAA,IACjC;AAAA,GACF;AACA,EAAA,MAAM,cAAc,gBAAA,IAAoB,gBAAA;AACxC,EAAA,MAAM,gBAAgB,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,GAC3C,WAAA,GACA,CAAC,WAAW,CAAA;AAEhB,EAAA,MAAM,SAAA,GAAY,gBAAgB,CAAC,CAAA;AAEnC,EAAA,MAAM,eAAA,GAAkB,cACrB,GAAA,CAAI,CAAA,IAAA,KAAQ,UAAU,GAAA,CAAI,IAAI,CAAC,CAAA,CAC/B,MAAA;AAAA,IACC,CAAC,WAAoD,MAAA,KAAW;AAAA,GAClE;AAEF,EAAA,IAAI,eAAA,CAAgB,WAAW,CAAA,EAAG;AAChC,IAAA,MAAM,eAAA,GAAkB,SAAA,CAAU,GAAA,CAAI,gBAAgB,CAAA;AACtD,IAAA,IAAI,eAAA,EAAiB,eAAA,CAAgB,IAAA,CAAK,eAAe,CAAA;AAAA,EAC3D;AAEA,EAAA,IAAI,gBAAgB,IAAA,CAAK,CAAA,MAAA,KAAU,OAAO,MAAA,KAAW,QAAQ,CAAA,EAAG;AAC9D,IAAA,MAAM,kBAAkB,eAAA,CAAgB,IAAA;AAAA,MACtC,CAAA,MAAA,KAAU,OAAO,MAAA,KAAW;AAAA,KAC9B;AACA,IAAA,uBAAO,GAAA,CAAC,iBAAA,EAAA,EAAmB,GAAG,KAAA,EAAO,UAAU,eAAA,EAAiB,CAAA;AAAA,EAClE;AAEA,EAAA,MAAM,eAAe,QAAA,GACjB,CAAC,OAAA,EAAkB,GAAI,eAA0C,CAAA,GAChE,eAAA;AAEL,EAAA,uBACE,GAAA;AAAA,IAACA,YAAA;AAAA,IAAA;AAAA,MACE,GAAG,KAAA;AAAA,MACJ,KAAA,EAAO,EAAE,mBAAmB,CAAA;AAAA,MAC5B,KAAA,EAAM,QAAA;AAAA,MACN,SAAA,EAAW;AAAA;AAAA,GACb;AAEJ;;;;"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Stub package root export for API reporting and bundlers. This plugin targets
+ * the new frontend system only; use `./alpha` for public APIs.
+ *
+ * @packageDocumentation
+ */
+declare const _default: {};
+
+export { _default as default };

package/dist/index.esm.js

@@ -0,0 +1,4 @@
+var index = {};
+
+export { index as default };
+//# sourceMappingURL=index.esm.js.map

package/dist/index.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.esm.js","sources":["../src/index.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Stub package root export for API reporting and bundlers. This plugin targets\n * the new frontend system only; use `./alpha` for public APIs.\n *\n * @packageDocumentation\n */\nexport default {};\n"],"names":[],"mappings":"AAsBA,YAAe,EAAC;;;;"}

package/dist/translations/signIn.esm.js

@@ -0,0 +1,72 @@
+import { createTranslationRef } from '@backstage/core-plugin-api/alpha';
+
+const signInTranslationRef = createTranslationRef({
+  id: "plugin.app-auth.sign-in",
+  messages: {
+    signIn: {
+      page: {
+        title: "Select a sign-in method"
+      },
+      config: {
+        missingAuthEnvironment: {
+          error: "Missing required app configuration: auth.environment must be set",
+          panelTitle: "Sign-in is not available",
+          description: "Set {{ authEnvKey }} in your app configuration (for example {{ devEnv }} for local use or {{ prodEnv }} in deployed environments). Without it, the app cannot safely determine which sign-in options to offer."
+        }
+      },
+      providers: {
+        auth0: {
+          title: "Auth0",
+          message: "Sign in using Auth0"
+        },
+        atlassian: {
+          title: "Atlassian",
+          message: "Sign in using Atlassian"
+        },
+        microsoft: {
+          title: "Microsoft",
+          message: "Sign in using Microsoft"
+        },
+        bitbucket: {
+          title: "Bitbucket",
+          message: "Sign in using Bitbucket"
+        },
+        bitbucketServer: {
+          title: "Bitbucket Server",
+          message: "Sign in using Bitbucket Server"
+        },
+        github: {
+          title: "GitHub",
+          message: "Sign in using GitHub"
+        },
+        gitlab: {
+          title: "GitLab",
+          message: "Sign in using GitLab"
+        },
+        google: {
+          title: "Google",
+          message: "Sign in using Google"
+        },
+        oidc: {
+          title: "OIDC",
+          message: "Sign in using OIDC"
+        },
+        okta: {
+          title: "Okta",
+          message: "Sign in using Okta"
+        },
+        onelogin: {
+          title: "OneLogin",
+          message: "Sign in using OneLogin"
+        },
+        saml: {
+          title: "SAML",
+          message: "Sign in using SAML"
+        }
+      }
+    }
+  }
+});
+
+export { signInTranslationRef };
+//# sourceMappingURL=signIn.esm.js.map

package/dist/translations/signIn.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signIn.esm.js","sources":["../../src/translations/signIn.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createTranslationRef } from '@backstage/core-plugin-api/alpha';\n\n/**\n * Sign-in page messages (English). Same key shape as legacy RHDH app signIn for compatibility.\n *\n * @alpha\n */\nexport const signInTranslationRef = createTranslationRef({\n  id: 'plugin.app-auth.sign-in',\n  messages: {\n    signIn: {\n      page: {\n        title: 'Select a sign-in method',\n      },\n      config: {\n        missingAuthEnvironment: {\n          error:\n            'Missing required app configuration: auth.environment must be set',\n          panelTitle: 'Sign-in is not available',\n          description:\n            'Set {{ authEnvKey }} in your app configuration (for example {{ devEnv }} for local use or {{ prodEnv }} in deployed environments). Without it, the app cannot safely determine which sign-in options to offer.',\n        },\n      },\n      providers: {\n        auth0: {\n          title: 'Auth0',\n          message: 'Sign in using Auth0',\n        },\n        atlassian: {\n          title: 'Atlassian',\n          message: 'Sign in using Atlassian',\n        },\n        microsoft: {\n          title: 'Microsoft',\n          message: 'Sign in using Microsoft',\n        },\n        bitbucket: {\n          title: 'Bitbucket',\n          message: 'Sign in using Bitbucket',\n        },\n        bitbucketServer: {\n          title: 'Bitbucket Server',\n          message: 'Sign in using Bitbucket Server',\n        },\n        github: {\n          title: 'GitHub',\n          message: 'Sign in using GitHub',\n        },\n        gitlab: {\n          title: 'GitLab',\n          message: 'Sign in using GitLab',\n        },\n        google: {\n          title: 'Google',\n          message: 'Sign in using Google',\n        },\n        oidc: {\n          title: 'OIDC',\n          message: 'Sign in using OIDC',\n        },\n        okta: {\n          title: 'Okta',\n          message: 'Sign in using Okta',\n        },\n        onelogin: {\n          title: 'OneLogin',\n          message: 'Sign in using OneLogin',\n        },\n        saml: {\n          title: 'SAML',\n          message: 'Sign in using SAML',\n        },\n      },\n    },\n  },\n});\n"],"names":[],"mappings":";;AAuBO,MAAM,uBAAuB,oBAAA,CAAqB;AAAA,EACvD,EAAA,EAAI,yBAAA;AAAA,EACJ,QAAA,EAAU;AAAA,IACR,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM;AAAA,QACJ,KAAA,EAAO;AAAA,OACT;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,sBAAA,EAAwB;AAAA,UACtB,KAAA,EACE,kEAAA;AAAA,UACF,UAAA,EAAY,0BAAA;AAAA,UACZ,WAAA,EACE;AAAA;AACJ,OACF;AAAA,MACA,SAAA,EAAW;AAAA,QACT,KAAA,EAAO;AAAA,UACL,KAAA,EAAO,OAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,SAAA,EAAW;AAAA,UACT,KAAA,EAAO,WAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,SAAA,EAAW;AAAA,UACT,KAAA,EAAO,WAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,SAAA,EAAW;AAAA,UACT,KAAA,EAAO,WAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,eAAA,EAAiB;AAAA,UACf,KAAA,EAAO,kBAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,MAAA,EAAQ;AAAA,UACN,KAAA,EAAO,QAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,MAAA,EAAQ;AAAA,UACN,KAAA,EAAO,QAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,MAAA,EAAQ;AAAA,UACN,KAAA,EAAO,QAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,KAAA,EAAO,MAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,KAAA,EAAO,MAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,QAAA,EAAU;AAAA,UACR,KAAA,EAAO,UAAA;AAAA,UACP,OAAA,EAAS;AAAA,SACX;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,KAAA,EAAO,MAAA;AAAA,UACP,OAAA,EAAS;AAAA;AACX;AACF;AACF;AAEJ,CAAC;;;;"}

package/package.json

@@ -0,0 +1,93 @@
+{
+  "name": "@red-hat-developer-hub/backstage-plugin-app-auth",
+  "version": "0.0.0",
+  "license": "Apache-2.0",
+  "description": "RHDH sign-in page and OIDC/Auth0/SAML frontend auth APIs for the new frontend system",
+  "main": "./dist/index.esm.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.esm.js",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.esm.js"
+    },
+    "./alpha": {
+      "backstage": "@backstage/FrontendModule",
+      "import": "./dist/alpha.esm.js",
+      "types": "./dist/alpha.d.ts",
+      "default": "./dist/alpha.esm.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "typesVersions": {
+    "*": {
+      "alpha": [
+        "dist/alpha.d.ts"
+      ],
+      "package.json": [
+        "package.json"
+      ]
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/redhat-developer/rhdh-plugins",
+    "directory": "workspaces/app-defaults/plugins/app-auth"
+  },
+  "backstage": {
+    "role": "frontend-plugin",
+    "pluginId": "app-auth",
+    "pluginPackages": [
+      "@red-hat-developer-hub/backstage-plugin-app-auth"
+    ],
+    "features": {
+      "./alpha": "@backstage/FrontendModule"
+    }
+  },
+  "jest": {
+    "testEnvironment": "@internal/jest-environment-jsdom-suppress-css"
+  },
+  "sideEffects": false,
+  "configSchema": "config.d.ts",
+  "scripts": {
+    "start": "backstage-cli package start",
+    "build": "backstage-cli package build",
+    "lint": "backstage-cli package lint",
+    "test": "backstage-cli package test",
+    "clean": "backstage-cli package clean",
+    "prepack": "backstage-cli package prepack",
+    "postpack": "backstage-cli package postpack"
+  },
+  "dependencies": {
+    "@backstage/core-app-api": "^1.19.6",
+    "@backstage/core-components": "^0.18.8",
+    "@backstage/core-plugin-api": "^1.12.4",
+    "@backstage/frontend-plugin-api": "^0.15.1",
+    "@backstage/plugin-app": "^0.4.2",
+    "@mui/material": "5.18.0"
+  },
+  "peerDependencies": {
+    "react": "^16.13.1 || ^17.0.0 || ^18.0.0"
+  },
+  "devDependencies": {
+    "@backstage/cli": "^0.36.0",
+    "@backstage/test-utils": "^1.7.16",
+    "@internal/jest-environment-jsdom-suppress-css": "^0.0.0",
+    "@testing-library/jest-dom": "^6.0.0",
+    "@testing-library/react": "^16.0.0",
+    "@types/react": "^18",
+    "@types/react-dom": "^18",
+    "cross-fetch": "^4.0.0",
+    "react": "^16.13.1 || ^17.0.0 || ^18.0.0",
+    "react-dom": "^18.0.2",
+    "react-router-dom": "^6.30.2"
+  },
+  "files": [
+    "dist",
+    "config.d.ts"
+  ],
+  "module": "./dist/index.esm.js"
+}