[ResponseOps][Connectors] Add authMode to connector saved objects and apis

oas_docs/output/kibana.serverless.yaml

@@ -518,6 +518,12 @@ paths:
                 additionalProperties: false
                 type: object
                 properties:
+                  auth_mode:
+                    description: The authentication mode used for the connector.
+                    enum:
+                      - shared
+                      - per-user
+                    type: string
                   config:
                     additionalProperties: {}
                     type: object
@@ -675,6 +681,12 @@ paths:
                 additionalProperties: false
                 type: object
                 properties:
+                  auth_mode:
+                    description: The authentication mode used for the connector.
+                    enum:
+                      - shared
+                      - per-user
+                    type: string
                   config:
                     additionalProperties: {}
                     type: object
@@ -827,6 +839,12 @@ paths:
                 additionalProperties: false
                 type: object
                 properties:
+                  auth_mode:
+                    description: The authentication mode used for the connector.
+                    enum:
+                      - shared
+                      - per-user
+                    type: string
                   config:
                     additionalProperties: {}
                     type: object
@@ -955,6 +973,12 @@ paths:
                 additionalProperties: false
                 type: object
                 properties:
+                  auth_mode:
+                    description: The authentication mode used for the connector.
+                    enum:
+                      - shared
+                      - per-user
+                    type: string
                   config:
                     additionalProperties: {}
                     type: object
@@ -1025,6 +1049,12 @@ paths:
                   additionalProperties: false
                   type: object
                   properties:
+                    auth_mode:
+                      description: The authentication mode used for the connector.
+                      enum:
+                        - shared
+                        - per-user
+                      type: string
                     config:
                       additionalProperties: {}
                       type: object

oas_docs/output/kibana.yaml

@@ -589,6 +589,12 @@ paths:
                 additionalProperties: false
                 type: object
                 properties:
+                  auth_mode:
+                    description: The authentication mode used for the connector.
+                    enum:
+                      - shared
+                      - per-user
+                    type: string
                   config:
                     additionalProperties: {}
                     type: object
@@ -746,6 +752,12 @@ paths:
                 additionalProperties: false
                 type: object
                 properties:
+                  auth_mode:
+                    description: The authentication mode used for the connector.
+                    enum:
+                      - shared
+                      - per-user
+                    type: string
                   config:
                     additionalProperties: {}
                     type: object
@@ -898,6 +910,12 @@ paths:
                 additionalProperties: false
                 type: object
                 properties:
+                  auth_mode:
+                    description: The authentication mode used for the connector.
+                    enum:
+                      - shared
+                      - per-user
+                    type: string
                   config:
                     additionalProperties: {}
                     type: object
@@ -1026,6 +1044,12 @@ paths:
                 additionalProperties: false
                 type: object
                 properties:
+                  auth_mode:
+                    description: The authentication mode used for the connector.
+                    enum:
+                      - shared
+                      - per-user
+                    type: string
                   config:
                     additionalProperties: {}
                     type: object
@@ -1096,6 +1120,12 @@ paths:
                   additionalProperties: false
                   type: object
                   properties:
+                    auth_mode:
+                      description: The authentication mode used for the connector.
+                      enum:
+                        - shared
+                        - per-user
+                      type: string
                     config:
                       additionalProperties: {}
                       type: object

packages/kbn-check-saved-objects-cli/src/migrations/__fixtures__/action/10.2.0.json

@@ -0,0 +1,108 @@
+{
+  "10.1.0": [
+    {
+      "name": "Webhook Connector with authType",
+      "actionTypeId": ".webhook",
+      "isMissingSecrets": false,
+      "config": {
+        "url": "https://example.com/webhook",
+        "method": "post",
+        "authType": "basic"
+      },
+      "secrets": "eyJlbmNyeXB0ZWQiOiJ0cnVlIn0=",
+      "isPreconfigured": false,
+      "isSystemAction": false
+    },
+    {
+      "name": "ServiceNow Connector",
+      "actionTypeId": ".servicenow",
+      "isMissingSecrets": false,
+      "config": {
+        "apiUrl": "https://instance.service-now.com",
+        "authType": "apiKey",
+        "usesTableApi": false
+      },
+      "secrets": "eyJlbmNyeXB0ZWQiOiJ0cnVlIn0=",
+      "isPreconfigured": false,
+      "isSystemAction": false
+    },
+    {
+      "name": "Slack Connector without authType",
+      "actionTypeId": ".slack",
+      "isMissingSecrets": false,
+      "config": {
+        "webhookUrl": "https://hooks.slack.com/services/xxx"
+      },
+      "secrets": "eyJlbmNyeXB0ZWQiOiJ0cnVlIn0=",
+      "isPreconfigured": false,
+      "isSystemAction": false
+    },
+    {
+      "name": "Email Connector",
+      "actionTypeId": ".email",
+      "isMissingSecrets": false,
+      "config": {
+        "service": "gmail",
+        "from": "test@example.com"
+      },
+      "secrets": "eyJlbmNyeXB0ZWQiOiJ0cnVlIn0=",
+      "isPreconfigured": false,
+      "isSystemAction": false
+    }
+  ],
+  "10.2.0": [
+    {
+      "name": "Webhook Connector with authType",
+      "actionTypeId": ".webhook",
+      "isMissingSecrets": false,
+      "config": {
+        "url": "https://example.com/webhook",
+        "method": "post",
+        "authType": "basic"
+      },
+      "secrets": "eyJlbmNyeXB0ZWQiOiJ0cnVlIn0=",
+      "isPreconfigured": false,
+      "isSystemAction": false,
+      "authMode": "shared"
+    },
+    {
+      "name": "ServiceNow Connector",
+      "actionTypeId": ".servicenow",
+      "isMissingSecrets": false,
+      "config": {
+        "apiUrl": "https://instance.service-now.com",
+        "authType": "apiKey",
+        "usesTableApi": false
+      },
+      "secrets": "eyJlbmNyeXB0ZWQiOiJ0cnVlIn0=",
+      "isPreconfigured": false,
+      "isSystemAction": false,
+      "authMode": "shared"
+    },
+    {
+      "name": "Slack Connector without authType",
+      "actionTypeId": ".slack",
+      "isMissingSecrets": false,
+      "config": {
+        "webhookUrl": "https://hooks.slack.com/services/xxx"
+      },
+      "secrets": "eyJlbmNyeXB0ZWQiOiJ0cnVlIn0=",
+      "isPreconfigured": false,
+      "isSystemAction": false,
+      "authMode": "shared"
+    },
+    {
+      "name": "Email Connector",
+      "actionTypeId": ".email",
+      "isMissingSecrets": false,
+      "config": {
+        "service": "gmail",
+        "from": "test@example.com"
+      },
+      "secrets": "eyJlbmNyeXB0ZWQiOiJ0cnVlIn0=",
+      "isPreconfigured": false,
+      "isSystemAction": false,
+      "authMode": "shared"
+    }
+  ]
+}

src/core/server/integration_tests/ci_checks/saved_objects/check_registered_types.test.ts

@@ -57,7 +57,7 @@ describe('checking migration metadata changes on all registered SO types', () =>
 
     expect(hashMap).toMatchInlineSnapshot(`
       Object {
-        "action": "f57d48f1be0e7895817648ecc89db8a5b594edc5185ad7c60b5ab743c960311b",
+        "action": "3ab1aa6b6d32d7704fa2dc5fe34c65d632d869af3736f5d08a761d09b93430e2",
         "action_task_params": "6751dc8a4707a432bc9b90f5a025f183aefc84bca5ec26c29ce6939b24ea81e4",
         "ad_hoc_run_params": "9c372f2a8f8b468e9b699a6df633c7f14fab7f13216c9ec160813e75bae56098",
         "alert": "119624b6025ea6794d2c33e2b41c2e4730d10446430b285691f7638ee6787af5",
@@ -237,6 +237,7 @@ describe('checking migration metadata changes on all registered SO types', () =>
         "action|global: 04984aae6011426601f8a2a06278e30080f6da3a",
         "action|mappings: c4a658c865d4c30b51ae9b49e1dec06d012bc213",
         "action|schemas: da39a3ee5e6b4b0d3255bfef95601890afd80709",
+        "action|10.2.0: 4367848750ed49705e88d5ffbe6229bf25312bd17e0f66f1848ec0031b6667b8",
         "action|10.1.0: e588c3ab049a6d529d68099cac0cb5b8256603d421f28dd475bbcd2146451d6f",
         "action|8.3.0: 89bd5d9dfbcd73496bf7ff424f5ed670b074078e",
         "action|8.0.0: 89bd5d9dfbcd73496bf7ff424f5ed670b074078e",
@@ -1324,7 +1325,7 @@ describe('checking migration metadata changes on all registered SO types', () =>
     // WARNING Existing entries' semvers should NEVER be downgraded. Never validate changes if they cause a downgrade.
     expect(map).toMatchInlineSnapshot(`
       Object {
-        "action": "10.1.0",
+        "action": "10.2.0",
         "action_task_params": "10.2.0",
         "ad_hoc_run_params": "10.3.0",
         "alert": "10.8.0",
@@ -1480,7 +1481,7 @@ describe('checking migration metadata changes on all registered SO types', () =>
     // WARNING Existing entries' semvers should NEVER be downgraded. Never validate changes if they cause a downgrade.
     expect(map).toMatchInlineSnapshot(`
       Object {
-        "action": "10.1.0",
+        "action": "10.2.0",
         "action_task_params": "10.2.0",
         "ad_hoc_run_params": "10.3.0",
         "alert": "10.8.0",

x-pack/platform/plugins/shared/actions/common/routes/connector/response/schemas/v1.ts

@@ -40,6 +40,13 @@ export const connectorResponseSchema = schema.object({
   is_connector_type_deprecated: schema.boolean({
     meta: { description: 'Indicates whether the connector type is deprecated.' },
   }),
+  auth_mode: schema.maybe(
+    schema.oneOf([schema.literal('shared'), schema.literal('per-user')], {
+      meta: {
+        description: 'The authentication mode used for the connector.',
+      },
+    })
+  ),
 });
 
 const connectorResponseWithReferencesCountSchema = connectorResponseSchema.extends({