Configuring Google OAuth for Backstage in Roadie
Published on October 11th, 2021Introduction
This Google OAuth client, will allow Backstage to authenticate your user, using your own controlled Google client
This page describes how to set up the client, along with setting the required values in Backstage.
Note: This assumes you have access to your google cloud console
Steps
Step 1: Creating an OAuth app
-
Sign into your GCP console
-
Select the
APIs & Services
->Credentials
. Now click on theCreate Credentials
button, followed byOAuth client ID
-
From the dropdown menu select
Web application
, then name it something like ‘Roadie OAuth client’. -
Click on the
Add URI
button under theAuthorized JavaScript origins
and enter the name of your roadie backstage instance (eg. https://.roadie.so)) -
Click on the
Add URI
button under theAuthorized redirect URIs
and enter the name of your roadie backstage instance followed by the following path:/api/auth/google/handler/frame
(eg. https://.roadie.so/api/auth/google/handler/frame)
- Save + store client secret and ID for later
Step 2: Adding secrets to backstage
-
Navigate to ”https://
.roadie.so/administration/settings/secrets” -
Using the Secret from step 1, click the pencil marker for the following field
GOOGLE_CLIENT_SECRET
and save. -
Using the client id from step 1, click the pencil marker for the following field
GOOGLE_CLIENT_ID
and save.
Conclusion
After adding the the OAuth client to your Backstage instance, you will be able to authenticate against Google so that you can read resources on your cloud platform.