Fredrik Adelöw

When you did this upgrade to the new Backstage release, did you update both the auth plugin and the catalog plugin to the newest versions? Is your backend instance migrated...

The way the backend system is made, it wants to consume the default export of packages. And there can only be one default export of course. I wonder if this...

@Rugvip a thought about naming/targeting - should it be - named `oidc` or `openid` - expect a BASE auth server url instead of directly to jwks - look up `/.well-known/openid-configuration`...

Yep so if the given url doesn't contain ".well-known", do A, otherwise do B. There's possibilities for future smarts as additions to the basic feature as followups

Alright, makes sense then to keep this one explicit, thanks!

Note that you'll need to run `yarn build:api-reports` and commit the results of that too. Hm this is breaking, isn't it. Then you'll have to bump the changeset to `minor`....

Try it in a test. Not sure they're type compatible even if the names are the same. Try to pass in `(null as unknown) as WinstonLogger)` and see if your...

@CiscoRob maybe i misunderstand - we're on p-limit major version 3 and aren't planning on upgrading. The thing about p-limit and other sindresorhus-made libraries is that they have gone ESM-only...

No, `require-user` was just because I had a gut feeling that there are some cases where you really want to just drive user flows. Happy to keep it slim and...

Yep that p-limit should not be reentrant; it'll deadlock. PR is in ^