@kartverket/backstage-plugin-security-metrics-backend

Security metrics (backend-plugin)

This is a backend plugin for the Security metrics Backstage plugin. The backend plugin works as a proxy for the frontend plugin, and allows the system to communicate with the security metrics API. The backend plugin has two roles:

• Handle the on-behalf-of flow to acquire JWT for the backend API
• Provide the user with a scope to aquire the Entra ID JWT that was used to log into backstage

Kartverket.dev configuration

NOTE: Ensure that you have installed the frontend plugin aswell

In app-config.production.yaml add the following under the backend config:

sikmet-backend-baseurl: https://api.sikkerhetsmetrikker.plugin.atgcp1-dev.kartverket-intern.cloud/api

In packages/backend/src/index.ts add the following lines to add the backend plugin:

// Security metrics
backend.add(import('@kartverket/backstage-plugin-security-metrics-backend'));

and in packages/backend/package.json add the following dependency

"@kartverket/backstage-plugin-security-metrics-backend": "^0.1.0"

The plugin has been developed by the summer interns in the SKVIS-team

Links

• Github repository for both plugins
• Github repository for backend