Merge pull request #6609 from stephane-mori/auth-backend-saml-clock-d…

…iscrepancies Auth backend saml clock discrepancies
backstage · Jul 28, 2021 · ec5f615 · ec5f615
2 parents d659342 + 63215cf
commit ec5f615
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/.changeset/lazy-apples-scream.md b/.changeset/lazy-apples-scream.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Allow to configure SAML auth `acceptedClockSkewMs`
diff --git a/plugins/auth-backend/config.d.ts b/plugins/auth-backend/config.d.ts
@@ -53,6 +53,7 @@ export interface Config {
         decryptionPvk?: string;
         signatureAlgorithm?: 'sha256' | 'sha512';
         digestAlgorithm?: string;
+        acceptedClockSkewMs?: number;
       };
       okta?: {
         [authEnv: string]: { [key: string]: string };

diff --git a/plugins/auth-backend/src/providers/saml/provider.ts b/plugins/auth-backend/src/providers/saml/provider.ts
@@ -132,6 +132,7 @@ export const createSamlProvider = (
         | SignatureAlgorithm
         | undefined,
       digestAlgorithm: config.getOptionalString('digestAlgorithm'),
+      acceptedClockSkewMs: config.getOptionalNumber('acceptedClockSkewMs'),
 
       tokenIssuer,
       appUrl: globalConfig.appUrl,