Roadie

Configuring Google OAuth for Backstage in Roadie

Published on October 11th, 2021
Integration

At a Glance
Prerequisites
Considerations This assumes you have access to your google cloud console
Supported Environments ☐ Private Network via Broker
☐ Internet Accessible via IP Whitelist
☒ Cloud Hosted

Introduction

This Google OAuth client will allow Backstage to authenticate your user using your own controlled Google client.

Steps

Step 1: Creating an OAuth app

  1. Sign into your GCP console

  2. Select the APIs & Services -> Credentials. Now click on the Create Credentials button, followed by OAuth client ID

OAuth client ID

  1. From the dropdown menu select Web application, then name it something like ‘Roadie OAuth client’.

  2. Click on the Add URI button under the Authorized JavaScript origins and enter the name of your roadie backstage instance (eg. https://.roadie.so))

  3. Click on the Add URI button under the Authorized redirect URIs and enter the name of your roadie backstage instance followed by the following path: /api/auth/google/handler/frame (eg. https://.roadie.so/api/auth/google/handler/frame)

urls

  1. Save + store client secret and ID for later

Secrets

Step 2: Adding secrets to backstage

  1. Navigate to ”https://.roadie.so/administration/secrets”

  2. Using the Secret from step 1, click the pencil marker for the following field GOOGLE_CLIENT_SECRET and save.

  3. Using the client id from step 1, click the pencil marker for the following field GOOGLE_CLIENT_ID and save.

Conclusion

After adding the the OAuth client to your Backstage instance, you will be able to authenticate against Google so that you can read resources on your cloud platform.