@techdocs/cli 1.8.9-next.0 → 1.8.9

package/dist/embedded-app/.config-schema.json

@@ -961,6 +961,56 @@
         "$schema": "http://json-schema.org/draft-07/schema#"
       }
     },
+    {
+      "path": "../../plugins/stackstorm/config.d.ts",
+      "value": {
+        "type": "object",
+        "properties": {
+          "stackstorm": {
+            "type": "object",
+            "properties": {
+              "webUrl": {
+                "description": "StackStorm Web UI url\nUsed in links to StackStorm web UI",
+                "visibility": "frontend",
+                "type": "string"
+              }
+            },
+            "required": [
+              "webUrl"
+            ]
+          }
+        },
+        "$schema": "http://json-schema.org/draft-07/schema#"
+      }
+    },
+    {
+      "path": "../../node_modules/@oriflame/backstage-plugin-score-card/config.d.ts",
+      "value": {
+        "type": "object",
+        "properties": {
+          "scorecards": {
+            "description": "Extra configuration for score card plugin",
+            "type": "object",
+            "properties": {
+              "jsonDataUrl": {
+                "description": "The public absolute root URL with json file defining the score card entries.",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "wikiLinkTemplate": {
+                "description": "The template for the link to the wiki, e.g. \"https://TBD/XXX/_wiki/wikis/XXX.wiki/{id}\"",
+                "visibility": "frontend",
+                "type": "string"
+              }
+            }
+          }
+        },
+        "required": [
+          "scorecards"
+        ],
+        "$schema": "http://json-schema.org/draft-07/schema#"
+      }
+    },
     {
       "path": "../backend-common/config.d.ts",
       "value": {
@@ -1376,52 +1426,47 @@
       }
     },
     {
-      "path": "../../plugins/stackstorm/config.d.ts",
-      "value": {
-        "type": "object",
-        "properties": {
-          "stackstorm": {
-            "type": "object",
-            "properties": {
-              "webUrl": {
-                "description": "StackStorm Web UI url\nUsed in links to StackStorm web UI",
-                "visibility": "frontend",
-                "type": "string"
-              }
-            },
-            "required": [
-              "webUrl"
-            ]
-          }
-        },
-        "$schema": "http://json-schema.org/draft-07/schema#"
-      }
-    },
-    {
-      "path": "../../node_modules/@oriflame/backstage-plugin-score-card/config.d.ts",
+      "path": "../../node_modules/@oriflame/backstage-plugin-score-card/node_modules/@backstage/core-components/config.d.ts",
       "value": {
         "type": "object",
         "properties": {
-          "scorecards": {
-            "description": "Extra configuration for score card plugin",
+          "auth": {
             "type": "object",
             "properties": {
-              "jsonDataUrl": {
-                "description": "The public absolute root URL with json file defining the score card entries.",
-                "visibility": "frontend",
-                "type": "string"
-              },
-              "wikiLinkTemplate": {
-                "description": "The template for the link to the wiki, e.g. \"https://TBD/XXX/_wiki/wikis/XXX.wiki/{id}\"",
-                "visibility": "frontend",
-                "type": "string"
+              "autologout": {
+                "description": "Autologout feature configuration",
+                "type": "object",
+                "properties": {
+                  "enabled": {
+                    "description": "Enable or disable the autologout feature",
+                    "visibility": "frontend",
+                    "type": "boolean"
+                  },
+                  "idleTimeoutMinutes": {
+                    "description": "Number of minutes after which the inactive user is logged out automatically.\nDefault is 60 minutes (1 hour)",
+                    "visibility": "frontend",
+                    "type": "number"
+                  },
+                  "promptBeforeIdleSeconds": {
+                    "description": "Number of seconds before the idle timeout where the user will be asked if it's still active.\nA dialog will be shown.\nDefault is 10 seconds.\nSet to 0 seconds to disable the prompt.",
+                    "visibility": "frontend",
+                    "type": "number"
+                  },
+                  "useWorkerTimers": {
+                    "description": "Enable/disable the usage of worker thread timers instead of main thread timers.\nDefault is true.\nIf you experience some browser incompatibility, you may try to set this to false.",
+                    "visibility": "frontend",
+                    "type": "boolean"
+                  },
+                  "logoutIfDisconnected": {
+                    "description": "Enable/disable the automatic logout also on users that are logged in but with no Backstage tabs open.\nDefault is true.",
+                    "visibility": "frontend",
+                    "type": "boolean"
+                  }
+                }
               }
             }
           }
         },
-        "required": [
-          "scorecards"
-        ],
         "$schema": "http://json-schema.org/draft-07/schema#"
       }
     },
@@ -1439,8 +1484,83 @@
                   "dangerouslyDisableDefaultAuthPolicy": {
                     "description": "This disables the otherwise default auth policy, which requires all\nrequests to be authenticated with either user or service credentials.\n\nDisabling this check means that the backend will no longer block\nunauthenticated requests, but instead allow them to pass through to\nplugins.\n\nIf permissions are enabled, unauthenticated requests will be treated\nexactly as such, leaving it to the permission policy to determine what\npermissions should be allowed for an unauthenticated identity. Note\nthat this will also apply to service-to-service calls between plugins\nunless you configure credentials for service calls.",
                     "type": "boolean"
+                  },
+                  "externalAccess": {
+                    "description": "Configures methods of external access, ie ways for callers outside of\nthe Backstage ecosystem to get authorized for access to APIs that do\nnot permit unauthorized access.",
+                    "type": "array",
+                    "items": {
+                      "anyOf": [
+                        {
+                          "type": "object",
+                          "properties": {
+                            "type": {
+                              "description": "This is the legacy service-to-service access method, where a set\nof static keys were shared among plugins and used for symmetric\nsigning and verification. These correspond to the old\n`backend.auth.keys` set and retain their behavior for backwards\ncompatibility. Please migrate to other access methods when\npossible.\n\nCallers generate JWT tokens with the following payload:\n\n```json\n{\n  \"sub\": \"backstage-plugin\",\n  \"exp\": <epoch seconds one hour in the future>\n}\n```\n\nAnd sign them with HS256, using the base64 decoded secret. The\ntokens are then passed along with requests in the Authorization\nheader:\n\n```\nAuthorization: Bearer eyJhbGciOiJIUzI...\n```",
+                              "type": "string",
+                              "const": "legacy"
+                            },
+                            "options": {
+                              "type": "object",
+                              "properties": {
+                                "secret": {
+                                  "description": "Any set of base64 encoded random bytes to be used as both the\nsigning and verification key. Should be sufficiently long so as\nnot to be easy to guess by brute force.\n\nCan be generated eg using\n\n```sh\nnode -p 'require(\"crypto\").randomBytes(24).toString(\"base64\")'\n```",
+                                  "visibility": "secret",
+                                  "type": "string"
+                                },
+                                "subject": {
+                                  "description": "Sets the subject of the principal, when matching this token.\nUseful for debugging and tracking purposes.",
+                                  "type": "string"
+                                }
+                              },
+                              "required": [
+                                "secret",
+                                "subject"
+                              ]
+                            }
+                          },
+                          "required": [
+                            "options",
+                            "type"
+                          ]
+                        },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "type": {
+                              "description": "This access method consists of random static tokens that can be\nhanded out to callers.\n\nThe tokens are then passed along verbatim with requests in the\nAuthorization header:\n\n```\nAuthorization: Bearer eZv5o+fW3KnR3kVabMW4ZcDNLPl8nmMW\n```",
+                              "type": "string",
+                              "const": "static"
+                            },
+                            "options": {
+                              "type": "object",
+                              "properties": {
+                                "token": {
+                                  "description": "A raw token that can be any string, but for security reasons\nshould be sufficiently long so as not to be easy to guess by\nbrute force.\n\nCan be generated eg using\n\n```sh\nnode -p 'require(\"crypto\").randomBytes(24).toString(\"base64\")'\n```\n\nSince the tokens can be any string, you are free to add\nadditional identifying data to them if you like. For example,\nadding a `freben-local-dev-` prefix for debugging purposes to a\ntoken that you know will be handed out for use as a personal\naccess token during development.",
+                                  "visibility": "secret",
+                                  "type": "string"
+                                },
+                                "subject": {
+                                  "description": "Sets the subject of the principal, when matching this token.\nUseful for debugging and tracking purposes.",
+                                  "type": "string"
+                                }
+                              },
+                              "required": [
+                                "subject",
+                                "token"
+                              ]
+                            }
+                          },
+                          "required": [
+                            "options",
+                            "type"
+                          ]
+                        }
+                      ]
+                    }
                   }
-                }
+                },
+                "required": [
+                  "externalAccess"
+                ]
               }
             }
           },
@@ -1608,508 +1728,6 @@
         },
         "$schema": "http://json-schema.org/draft-07/schema#"
       }
-    },
-    {
-      "path": "../../node_modules/@oriflame/backstage-plugin-score-card/node_modules/@backstage/core-components/config.d.ts",
-      "value": {
-        "type": "object",
-        "properties": {
-          "auth": {
-            "type": "object",
-            "properties": {
-              "autologout": {
-                "description": "Autologout feature configuration",
-                "type": "object",
-                "properties": {
-                  "enabled": {
-                    "description": "Enable or disable the autologout feature",
-                    "visibility": "frontend",
-                    "type": "boolean"
-                  },
-                  "idleTimeoutMinutes": {
-                    "description": "Number of minutes after which the inactive user is logged out automatically.\nDefault is 60 minutes (1 hour)",
-                    "visibility": "frontend",
-                    "type": "number"
-                  },
-                  "promptBeforeIdleSeconds": {
-                    "description": "Number of seconds before the idle timeout where the user will be asked if it's still active.\nA dialog will be shown.\nDefault is 10 seconds.\nSet to 0 seconds to disable the prompt.",
-                    "visibility": "frontend",
-                    "type": "number"
-                  },
-                  "useWorkerTimers": {
-                    "description": "Enable/disable the usage of worker thread timers instead of main thread timers.\nDefault is true.\nIf you experience some browser incompatibility, you may try to set this to false.",
-                    "visibility": "frontend",
-                    "type": "boolean"
-                  },
-                  "logoutIfDisconnected": {
-                    "description": "Enable/disable the automatic logout also on users that are logged in but with no Backstage tabs open.\nDefault is true.",
-                    "visibility": "frontend",
-                    "type": "boolean"
-                  }
-                }
-              }
-            }
-          }
-        },
-        "$schema": "http://json-schema.org/draft-07/schema#"
-      }
-    },
-    {
-      "path": "../../node_modules/@oriflame/backstage-plugin-score-card/node_modules/@backstage/plugin-catalog-react/node_modules/@backstage/core-components/config.d.ts",
-      "value": {
-        "type": "object",
-        "properties": {
-          "auth": {
-            "type": "object",
-            "properties": {
-              "autologout": {
-                "description": "Autologout feature configuration",
-                "type": "object",
-                "properties": {
-                  "enabled": {
-                    "description": "Enable or disable the autologout feature",
-                    "visibility": "frontend",
-                    "type": "boolean"
-                  },
-                  "idleTimeoutMinutes": {
-                    "description": "Number of minutes after which the inactive user is logged out automatically.\nDefault is 60 minutes (1 hour)",
-                    "visibility": "frontend",
-                    "type": "number"
-                  },
-                  "promptBeforeIdleSeconds": {
-                    "description": "Number of seconds before the idle timeout where the user will be asked if it's still active.\nA dialog will be shown.\nDefault is 10 seconds.\nSet to 0 seconds to disable the prompt.",
-                    "visibility": "frontend",
-                    "type": "number"
-                  },
-                  "useWorkerTimers": {
-                    "description": "Enable/disable the usage of worker thread timers instead of main thread timers.\nDefault is true.\nIf you experience some browser incompatibility, you may try to set this to false.",
-                    "visibility": "frontend",
-                    "type": "boolean"
-                  },
-                  "logoutIfDisconnected": {
-                    "description": "Enable/disable the automatic logout also on users that are logged in but with no Backstage tabs open.\nDefault is true.",
-                    "visibility": "frontend",
-                    "type": "boolean"
-                  }
-                }
-              }
-            }
-          }
-        },
-        "$schema": "http://json-schema.org/draft-07/schema#"
-      }
-    },
-    {
-      "path": "../../node_modules/@oriflame/backstage-plugin-score-card/node_modules/@backstage/integration/config.d.ts",
-      "value": {
-        "type": "object",
-        "properties": {
-          "integrations": {
-            "description": "Configuration for integrations towards various external repository provider systems",
-            "visibility": "frontend",
-            "type": "object",
-            "properties": {
-              "azure": {
-                "description": "Integration configuration for Azure",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "host": {
-                      "description": "The hostname of the given Azure instance",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "token": {
-                      "description": "Token used to authenticate requests.",
-                      "visibility": "secret",
-                      "deprecated": "Use `credentials` instead.",
-                      "type": "string"
-                    },
-                    "credential": {
-                      "description": "The credential to use for requests.\n\nIf no credential is specified anonymous access is used.",
-                      "deepVisibility": "secret",
-                      "deprecated": "Use `credentials` instead.",
-                      "type": "object",
-                      "properties": {
-                        "clientId": {
-                          "type": "string"
-                        },
-                        "clientSecret": {
-                          "type": "string"
-                        },
-                        "tenantId": {
-                          "type": "string"
-                        },
-                        "personalAccessToken": {
-                          "type": "string"
-                        }
-                      }
-                    },
-                    "credentials": {
-                      "description": "The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\nIf not organization matches the first credential without an organization is used.\n\nIf no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.",
-                      "deepVisibility": "secret",
-                      "type": "array",
-                      "items": {
-                        "type": "object",
-                        "properties": {
-                          "clientId": {
-                            "type": "string"
-                          },
-                          "clientSecret": {
-                            "type": "string"
-                          },
-                          "tenantId": {
-                            "type": "string"
-                          },
-                          "personalAccessToken": {
-                            "type": "string"
-                          }
-                        }
-                      }
-                    }
-                  },
-                  "required": [
-                    "host"
-                  ]
-                }
-              },
-              "bitbucket": {
-                "description": "Integration configuration for Bitbucket",
-                "deprecated": "replaced by bitbucketCloud and bitbucketServer",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "host": {
-                      "description": "The hostname of the given Bitbucket instance",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "token": {
-                      "description": "Token used to authenticate requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "apiBaseUrl": {
-                      "description": "The base url for the Bitbucket API, for example https://api.bitbucket.org/2.0",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "username": {
-                      "description": "The username to use for authenticated requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "appPassword": {
-                      "description": "Bitbucket app password used to authenticate requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    }
-                  },
-                  "required": [
-                    "host"
-                  ]
-                }
-              },
-              "bitbucketCloud": {
-                "description": "Integration configuration for Bitbucket Cloud",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "username": {
-                      "description": "The username to use for authenticated requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "appPassword": {
-                      "description": "Bitbucket Cloud app password used to authenticate requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    }
-                  },
-                  "required": [
-                    "appPassword",
-                    "username"
-                  ]
-                }
-              },
-              "bitbucketServer": {
-                "description": "Integration configuration for Bitbucket Server",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "host": {
-                      "description": "The hostname of the given Bitbucket Server instance",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "token": {
-                      "description": "Token used to authenticate requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "username": {
-                      "description": "Username used to authenticate requests with Basic Auth.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "password": {
-                      "description": "Password (or token as password) used to authenticate requests with Basic Auth.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "apiBaseUrl": {
-                      "description": "The base url for the Bitbucket Server API, for example https://<host>/rest/api/1.0",
-                      "visibility": "frontend",
-                      "type": "string"
-                    }
-                  },
-                  "required": [
-                    "host"
-                  ]
-                }
-              },
-              "gerrit": {
-                "description": "Integration configuration for Gerrit",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "host": {
-                      "description": "The hostname of the given Gerrit instance",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "baseUrl": {
-                      "description": "The base url for the Gerrit instance.",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "cloneUrl": {
-                      "description": "The base url for cloning repos.",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "username": {
-                      "description": "The username to use for authenticated requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "password": {
-                      "description": "Gerrit password used to authenticate requests. This can be either a password\nor a generated access token.",
-                      "visibility": "secret",
-                      "type": "string"
-                    }
-                  },
-                  "required": [
-                    "host"
-                  ]
-                }
-              },
-              "github": {
-                "description": "Integration configuration for GitHub",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "host": {
-                      "description": "The hostname of the given GitHub instance",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "token": {
-                      "description": "Token used to authenticate requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "apiBaseUrl": {
-                      "description": "The base url for the GitHub API, for example https://api.github.com",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "rawBaseUrl": {
-                      "description": "The base url for GitHub raw resources, for example https://raw.githubusercontent.com",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "apps": {
-                      "description": "GitHub Apps configuration",
-                      "type": "array",
-                      "items": {
-                        "type": "object",
-                        "properties": {
-                          "appId": {
-                            "description": "The numeric GitHub App ID, string for environment variables",
-                            "type": [
-                              "string",
-                              "number"
-                            ]
-                          },
-                          "privateKey": {
-                            "description": "The private key to use for auth against the app",
-                            "visibility": "secret",
-                            "type": "string"
-                          },
-                          "webhookSecret": {
-                            "description": "The secret used for webhooks",
-                            "visibility": "secret",
-                            "type": "string"
-                          },
-                          "clientId": {
-                            "description": "The client ID to use",
-                            "type": "string"
-                          },
-                          "clientSecret": {
-                            "description": "The client secret to use",
-                            "visibility": "secret",
-                            "type": "string"
-                          },
-                          "allowedInstallationOwners": {
-                            "description": "List of installation owners allowed to be used by this GitHub app. The GitHub UI does not provide a way to list the installations.\nHowever you can list the installations with the GitHub API. You can find the list of installations here:\nhttps://api.github.com/app/installations\nThe relevant documentation for this is here.\nhttps://docs.github.com/en/rest/reference/apps#list-installations-for-the-authenticated-app--code-samples",
-                            "type": "array",
-                            "items": {
-                              "type": "string"
-                            }
-                          }
-                        },
-                        "required": [
-                          "appId",
-                          "clientId",
-                          "clientSecret",
-                          "privateKey",
-                          "webhookSecret"
-                        ]
-                      }
-                    }
-                  },
-                  "required": [
-                    "host"
-                  ]
-                }
-              },
-              "gitlab": {
-                "description": "Integration configuration for GitLab",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "host": {
-                      "description": "The host of the target that this matches on, e.g. \"gitlab.com\".",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "apiBaseUrl": {
-                      "description": "The base URL of the API of this provider, e.g.\n\"https://gitlab.com/api/v4\", with no trailing slash.\n\nMay be omitted specifically for public GitLab; then it will be deduced.",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "token": {
-                      "description": "The authorization token to use for requests to this provider.\n\nIf no token is specified, anonymous access is used.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "baseUrl": {
-                      "description": "The baseUrl of this provider, e.g. \"https://gitlab.com\", which is\npassed into the GitLab client.\n\nIf no baseUrl is provided, it will default to https://${host}.",
-                      "visibility": "frontend",
-                      "type": "string"
-                    }
-                  },
-                  "required": [
-                    "host"
-                  ]
-                }
-              },
-              "googleGcs": {
-                "description": "Integration configuration for Google Cloud Storage",
-                "type": "object",
-                "properties": {
-                  "clientEmail": {
-                    "description": "Service account email used to authenticate requests.",
-                    "type": "string"
-                  },
-                  "privateKey": {
-                    "description": "Service account private key used to authenticate requests.",
-                    "visibility": "secret",
-                    "type": "string"
-                  }
-                }
-              },
-              "awsS3": {
-                "description": "Integration configuration for AWS S3 Service",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "endpoint": {
-                      "description": "AWS Endpoint.\nThe endpoint URI to send requests to. The default endpoint is built from the configured region.",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "s3ForcePathStyle": {
-                      "description": "Whether to use path style URLs when communicating with S3.\nDefaults to false.\nThis allows providers like LocalStack, Minio and Wasabi (and possibly others) to be used.",
-                      "visibility": "frontend",
-                      "type": "boolean"
-                    },
-                    "accessKeyId": {
-                      "description": "Account access key used to authenticate requests.",
-                      "type": "string"
-                    },
-                    "secretAccessKey": {
-                      "description": "Account secret key used to authenticate requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "roleArn": {
-                      "description": "ARN of the role to be assumed",
-                      "type": "string"
-                    },
-                    "externalId": {
-                      "description": "External ID to use when assuming role",
-                      "type": "string"
-                    }
-                  }
-                }
-              },
-              "gitea": {
-                "description": "Integration configuration for Gitea",
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "host": {
-                      "description": "The hostname of the given Gitea instance",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "baseUrl": {
-                      "description": "The base url for the Gitea instance.",
-                      "visibility": "frontend",
-                      "type": "string"
-                    },
-                    "username": {
-                      "description": "The username to use for authenticated requests.",
-                      "visibility": "secret",
-                      "type": "string"
-                    },
-                    "password": {
-                      "description": "Gitea password used to authenticate requests. This can be either a password\nor a generated access token.",
-                      "visibility": "secret",
-                      "type": "string"
-                    }
-                  },
-                  "required": [
-                    "host"
-                  ]
-                }
-              }
-            }
-          }
-        },
-        "$schema": "http://json-schema.org/draft-07/schema#"
-      }
     }
   ],
   "backstageConfigSchemaVersion": 1