auth0-deploy-cli 7.3.6 → 7.5.0

package/lib/configFactory.js

@@ -1,28 +1,20 @@
-"use strict";
-
 module.exports = function () {
-  const settings = {};
-  let currentProvider = null;
-
-  const config = function getConfig(key) {
-    if (settings && settings[key]) {
-      return settings[key];
-    }
-
-    if (!currentProvider) {
-      throw new Error('A configuration provider has not been set');
-    }
-
-    return currentProvider(key);
-  };
-
-  config.setProvider = function setProvider(providerFunction) {
-    currentProvider = providerFunction;
-  };
-
-  config.setValue = function setValue(key, value) {
-    settings[key] = value;
-  };
-
-  return config;
-};
+    const settings = {};
+    let currentProvider = null;
+    const config = function getConfig(key) {
+        if (settings && settings[key]) {
+            return settings[key];
+        }
+        if (!currentProvider) {
+            throw new Error('A configuration provider has not been set');
+        }
+        return currentProvider(key);
+    };
+    config.setProvider = function setProvider(providerFunction) {
+        currentProvider = providerFunction;
+    };
+    config.setValue = function setValue(key, value) {
+        settings[key] = value;
+    };
+    return config;
+};

package/lib/context/defaults.js

@@ -1,43 +1,20 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.emailProviderDefaults = emailProviderDefaults;
-
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.emailProviderDefaults = void 0;
 function emailProviderDefaults(emailProvider) {
-  const updated = { ...emailProvider
-  };
-  const apiKeyProviders = ['mailgun', 'mandrill', 'sendgrid', 'sparkpost'];
-  const {
-    name
-  } = updated;
-
-  if (apiKeyProviders.includes(name)) {
-    updated.credentials = {
-      api_key: `##${name.toUpperCase()}_API_KEY##`,
-      ...(updated.credentials || {})
-    };
-  }
-
-  if (name === 'smtp') {
-    updated.credentials = {
-      smtp_host: '##SMTP_HOSTNAME##',
-      smtp_port: '##SMTP_PORT##',
-      smtp_user: '##SMTP_USER##',
-      smtp_pass: '##SMTP_PASS##',
-      ...(updated.credentials || {})
-    };
-  }
-
-  if (name === 'ses') {
-    updated.credentials = {
-      accessKeyId: '##SES_ACCESS_KEY_ID##',
-      secretAccessKey: '##SES_ACCESS_SECRET_KEY##',
-      region: '##SES_AWS_REGION##',
-      ...(updated.credentials || {})
-    };
-  }
-
-  return updated;
-}
+    const updated = Object.assign({}, emailProvider);
+    const apiKeyProviders = ['mailgun', 'mandrill', 'sendgrid', 'sparkpost'];
+    // Add placeholder for credentials as they cannot be exported
+    const { name } = updated;
+    if (apiKeyProviders.includes(name)) {
+        updated.credentials = Object.assign({ api_key: `##${name.toUpperCase()}_API_KEY##` }, updated.credentials || {});
+    }
+    if (name === 'smtp') {
+        updated.credentials = Object.assign({ smtp_host: '##SMTP_HOSTNAME##', smtp_port: '##SMTP_PORT##', smtp_user: '##SMTP_USER##', smtp_pass: '##SMTP_PASS##' }, updated.credentials || {});
+    }
+    if (name === 'ses') {
+        updated.credentials = Object.assign({ accessKeyId: '##SES_ACCESS_KEY_ID##', secretAccessKey: '##SES_ACCESS_SECRET_KEY##', region: '##SES_AWS_REGION##' }, updated.credentials || {});
+    }
+    return updated;
+}
+exports.emailProviderDefaults = emailProviderDefaults;

package/lib/context/directory/handlers/actions.js

@@ -1,119 +1,89 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-
-var _fsExtra = require("fs-extra");
-
-var _fsExtra2 = _interopRequireDefault(_fsExtra);
-
-var _path = require("path");
-
-var _path2 = _interopRequireDefault(_path);
-
-var _tools = require("../../../tools");
-
-var _utils = require("../../../utils");
-
-var _logger = require("../../../logger");
-
-var _logger2 = _interopRequireDefault(_logger);
-
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/* eslint-disable consistent-return */
+const fs_extra_1 = __importDefault(require("fs-extra"));
+const path_1 = __importDefault(require("path"));
+const tools_1 = require("../../../tools");
+const utils_1 = require("../../../utils");
+const logger_1 = __importDefault(require("../../../logger"));
 function parse(context) {
-  const actionsFolder = _path2.default.join(context.filePath, _tools.constants.ACTIONS_DIRECTORY);
-
-  if (!(0, _utils.existsMustBeDir)(actionsFolder)) return {
-    actions: undefined
-  };
-  const files = (0, _utils.getFiles)(actionsFolder, ['.json']);
-  const actions = files.map(file => {
-    const action = { ...(0, _utils.loadJSON)(file, context.mappings)
+    const actionsFolder = path_1.default.join(context.filePath, tools_1.constants.ACTIONS_DIRECTORY);
+    if (!(0, utils_1.existsMustBeDir)(actionsFolder))
+        return { actions: undefined }; // Skip
+    const files = (0, utils_1.getFiles)(actionsFolder, ['.json']);
+    const actions = files.map((file) => {
+        const action = Object.assign({}, (0, utils_1.loadJSON)(file, context.mappings));
+        const actionFolder = path_1.default.join(tools_1.constants.ACTIONS_DIRECTORY, `${action.name}`);
+        if (action.code) {
+            action.code = context.loadFile(action.code, actionFolder);
+        }
+        return action;
+    });
+    return {
+        actions
     };
-
-    const actionFolder = _path2.default.join(_tools.constants.ACTIONS_DIRECTORY, `${action.name}`);
-
-    if (action.code) {
-      action.code = context.loadFile(action.code, actionFolder);
-    }
-
-    return action;
-  });
-  return {
-    actions
-  };
 }
-
 function mapSecrets(secrets) {
-  if (secrets && secrets.length > 0) {
-    return secrets.map(secret => ({
-      name: secret.name,
-      value: secret.value
-    }));
-  }
-
-  return [];
+    if (secrets && secrets.length > 0) {
+        return secrets.map((secret) => ({ name: secret.name, value: secret.value }));
+    }
+    return [];
 }
-
 function mapActionCode(filePath, action) {
-  const {
-    code
-  } = action;
-
-  if (!code) {
-    return '';
-  }
-
-  const actionName = (0, _utils.sanitize)(action.name);
-
-  const actionFolder = _path2.default.join(filePath, _tools.constants.ACTIONS_DIRECTORY, `${actionName}`);
-
-  _fsExtra2.default.ensureDirSync(actionFolder);
-
-  const codeFile = _path2.default.join(actionFolder, 'code.js');
-
-  _logger2.default.info(`Writing ${codeFile}`);
-
-  _fsExtra2.default.writeFileSync(codeFile, code);
-
-  return `${codeFile}`;
+    const { code } = action;
+    if (!code) {
+        return '';
+    }
+    const actionName = (0, utils_1.sanitize)(action.name);
+    const actionFolder = path_1.default.join(filePath, tools_1.constants.ACTIONS_DIRECTORY, `${actionName}`);
+    fs_extra_1.default.ensureDirSync(actionFolder);
+    const codeFile = path_1.default.join(actionFolder, 'code.js');
+    logger_1.default.info(`Writing ${codeFile}`);
+    fs_extra_1.default.writeFileSync(codeFile, code);
+    return `${codeFile}`;
 }
-
 function mapToAction(filePath, action) {
-  return {
-    name: action.name,
-    code: mapActionCode(filePath, action),
-    runtime: action.runtime,
-    status: action.status,
-    dependencies: action.dependencies || [],
-    secrets: mapSecrets(action.secrets),
-    supported_triggers: action.supported_triggers,
-    deployed: action.deployed || action.all_changes_deployed
-  };
+    return {
+        name: action.name,
+        code: mapActionCode(filePath, action),
+        runtime: action.runtime,
+        status: action.status,
+        dependencies: action.dependencies || [],
+        secrets: mapSecrets(action.secrets),
+        supported_triggers: action.supported_triggers,
+        deployed: action.deployed || action.all_changes_deployed
+    };
 }
-
-async function dump(context) {
-  const actions = [...(context.assets.actions || [])];
-  if (actions.length < 1) return;
-
-  const actionsFolder = _path2.default.join(context.filePath, _tools.constants.ACTIONS_DIRECTORY);
-
-  _fsExtra2.default.ensureDirSync(actionsFolder);
-
-  actions.forEach(action => {
-    const name = (0, _utils.sanitize)(action.name);
-
-    const actionFile = _path2.default.join(actionsFolder, `${name}.json`);
-
-    _logger2.default.info(`Writing ${actionFile}`);
-
-    _fsExtra2.default.writeFileSync(actionFile, JSON.stringify(mapToAction(context.filePath, action), null, 2));
-  });
+function dump(context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const actions = [...context.assets.actions || []];
+        if (actions.length < 1)
+            return;
+        // Create Actions folder
+        const actionsFolder = path_1.default.join(context.filePath, tools_1.constants.ACTIONS_DIRECTORY);
+        fs_extra_1.default.ensureDirSync(actionsFolder);
+        actions.forEach((action) => {
+            // Dump template metadata
+            const name = (0, utils_1.sanitize)(action.name);
+            const actionFile = path_1.default.join(actionsFolder, `${name}.json`);
+            logger_1.default.info(`Writing ${actionFile}`);
+            fs_extra_1.default.writeFileSync(actionFile, JSON.stringify(mapToAction(context.filePath, action), null, 2));
+        });
+    });
 }
-
 exports.default = {
-  parse,
-  dump
-};
+    parse,
+    dump
+};

package/lib/context/directory/handlers/attackProtection.js

@@ -0,0 +1,59 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_extra_1 = __importDefault(require("fs-extra"));
+const path_1 = __importDefault(require("path"));
+const tools_1 = require("../../../tools");
+const utils_1 = require("../../../utils");
+function attackProtectionFiles(filePath) {
+    const directory = path_1.default.join(filePath, tools_1.constants.ATTACK_PROTECTION_DIRECTORY);
+    return {
+        directory: directory,
+        breachedPasswordDetection: path_1.default.join(directory, 'breached-password-detection.json'),
+        bruteForceProtection: path_1.default.join(directory, 'brute-force-protection.json'),
+        suspiciousIpThrottling: path_1.default.join(directory, 'suspicious-ip-throttling.json')
+    };
+}
+function parse(context) {
+    const files = attackProtectionFiles(context.filePath);
+    if (!(0, utils_1.existsMustBeDir)(files.directory)) {
+        return {
+            attackProtection: undefined
+        };
+    }
+    const breachedPasswordDetection = (0, utils_1.loadJSON)(files.breachedPasswordDetection);
+    const bruteForceProtection = (0, utils_1.loadJSON)(files.bruteForceProtection);
+    const suspiciousIpThrottling = (0, utils_1.loadJSON)(files.suspiciousIpThrottling);
+    return {
+        attackProtection: {
+            breachedPasswordDetection,
+            bruteForceProtection,
+            suspiciousIpThrottling
+        }
+    };
+}
+function dump(context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { attackProtection } = context.assets;
+        const files = attackProtectionFiles(context.filePath);
+        fs_extra_1.default.ensureDirSync(files.directory);
+        (0, utils_1.dumpJSON)(files.breachedPasswordDetection, attackProtection.breachedPasswordDetection);
+        (0, utils_1.dumpJSON)(files.bruteForceProtection, attackProtection.bruteForceProtection);
+        (0, utils_1.dumpJSON)(files.suspiciousIpThrottling, attackProtection.suspiciousIpThrottling);
+    });
+}
+exports.default = {
+    parse,
+    dump
+};

package/lib/context/directory/handlers/clientGrants.js

@@ -1,59 +1,50 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-
-var _fsExtra = require("fs-extra");
-
-var _fsExtra2 = _interopRequireDefault(_fsExtra);
-
-var _path = require("path");
-
-var _path2 = _interopRequireDefault(_path);
-
-var _tools = require("../../../tools");
-
-var _utils = require("../../../utils");
-
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_extra_1 = __importDefault(require("fs-extra"));
+const path_1 = __importDefault(require("path"));
+const tools_1 = require("../../../tools");
+const utils_1 = require("../../../utils");
 function parse(context) {
-  const grantsFolder = _path2.default.join(context.filePath, _tools.constants.CLIENTS_GRANTS_DIRECTORY);
-
-  if (!(0, _utils.existsMustBeDir)(grantsFolder)) return {
-    clientGrants: undefined
-  };
-  const foundFiles = (0, _utils.getFiles)(grantsFolder, ['.json']);
-  const clientGrants = foundFiles.map(f => (0, _utils.loadJSON)(f, context.mappings)).filter(p => Object.keys(p).length > 0);
-  return {
-    clientGrants
-  };
-}
-
-async function dump(context) {
-  const {
-    clientGrants
-  } = context.assets;
-  if (!clientGrants) return;
-
-  const grantsFolder = _path2.default.join(context.filePath, _tools.constants.CLIENTS_GRANTS_DIRECTORY);
-
-  _fsExtra2.default.ensureDirSync(grantsFolder);
-
-  clientGrants.forEach(grant => {
-    const dumpGrant = { ...grant
+    const grantsFolder = path_1.default.join(context.filePath, tools_1.constants.CLIENTS_GRANTS_DIRECTORY);
+    if (!(0, utils_1.existsMustBeDir)(grantsFolder))
+        return { clientGrants: undefined }; // Skip
+    const foundFiles = (0, utils_1.getFiles)(grantsFolder, ['.json']);
+    const clientGrants = foundFiles.map((f) => (0, utils_1.loadJSON)(f, context.mappings))
+        .filter((p) => Object.keys(p).length > 0); // Filter out empty grants
+    return {
+        clientGrants
     };
-    dumpGrant.client_id = (0, _utils.convertClientIdToName)(dumpGrant.client_id, context.assets.clientsOrig);
-    const name = (0, _utils.sanitize)(`${dumpGrant.client_id} (${dumpGrant.audience})`);
-
-    const grantFile = _path2.default.join(grantsFolder, `${name}.json`);
-
-    (0, _utils.dumpJSON)(grantFile, dumpGrant);
-  });
 }
-
+function dump(context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { clientGrants } = context.assets;
+        if (!clientGrants)
+            return; // Skip, nothing to dump
+        const grantsFolder = path_1.default.join(context.filePath, tools_1.constants.CLIENTS_GRANTS_DIRECTORY);
+        fs_extra_1.default.ensureDirSync(grantsFolder);
+        // Convert client_id to the client name for readability
+        clientGrants.forEach((grant) => {
+            const dumpGrant = Object.assign({}, grant);
+            dumpGrant.client_id = (0, utils_1.convertClientIdToName)(dumpGrant.client_id, context.assets.clientsOrig);
+            const name = (0, utils_1.sanitize)(`${dumpGrant.client_id} (${dumpGrant.audience})`);
+            const grantFile = path_1.default.join(grantsFolder, `${name}.json`);
+            (0, utils_1.dumpJSON)(grantFile, dumpGrant);
+        });
+    });
+}
 exports.default = {
-  parse,
-  dump
-};
+    parse,
+    dump
+};

package/lib/context/directory/handlers/clients.js

@@ -1,84 +1,65 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-
-var _fsExtra = require("fs-extra");
-
-var _fsExtra2 = _interopRequireDefault(_fsExtra);
-
-var _path = require("path");
-
-var _path2 = _interopRequireDefault(_path);
-
-var _tools = require("../../../tools");
-
-var _logger = require("../../../logger");
-
-var _logger2 = _interopRequireDefault(_logger);
-
-var _utils = require("../../../utils");
-
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_extra_1 = __importDefault(require("fs-extra"));
+const path_1 = __importDefault(require("path"));
+const tools_1 = require("../../../tools");
+const logger_1 = __importDefault(require("../../../logger"));
+const utils_1 = require("../../../utils");
 function parse(context) {
-  const clientsFolder = _path2.default.join(context.filePath, _tools.constants.CLIENTS_DIRECTORY);
-
-  if (!(0, _utils.existsMustBeDir)(clientsFolder)) return {
-    clients: undefined
-  };
-  const foundFiles = (0, _utils.getFiles)(clientsFolder, ['.json']);
-  const clients = foundFiles.map(f => {
-    const client = (0, _utils.loadJSON)(f, context.mappings);
-
-    if (client.custom_login_page) {
-      const htmlFileName = _path2.default.join(clientsFolder, client.custom_login_page);
-
-      if ((0, _utils.isFile)(htmlFileName)) {
-        client.custom_login_page = (0, _tools.loadFile)(htmlFileName, context.mappings);
-      }
-    }
-
-    return client;
-  }).filter(p => Object.keys(p).length > 0);
-  return {
-    clients
-  };
+    const clientsFolder = path_1.default.join(context.filePath, tools_1.constants.CLIENTS_DIRECTORY);
+    if (!(0, utils_1.existsMustBeDir)(clientsFolder))
+        return { clients: undefined }; // Skip
+    const foundFiles = (0, utils_1.getFiles)(clientsFolder, ['.json']);
+    const clients = foundFiles
+        .map((f) => {
+        const client = (0, utils_1.loadJSON)(f, context.mappings);
+        if (client.custom_login_page) {
+            const htmlFileName = path_1.default.join(clientsFolder, client.custom_login_page);
+            if ((0, utils_1.isFile)(htmlFileName)) {
+                client.custom_login_page = (0, tools_1.loadFileAndReplaceKeywords)(htmlFileName, context.mappings);
+            }
+        }
+        return client;
+    })
+        .filter((p) => Object.keys(p).length > 0); // Filter out empty clients
+    return {
+        clients
+    };
 }
-
-async function dump(context) {
-  const {
-    clients
-  } = context.assets;
-  if (!clients) return;
-
-  const clientsFolder = _path2.default.join(context.filePath, _tools.constants.CLIENTS_DIRECTORY);
-
-  _fsExtra2.default.ensureDirSync(clientsFolder);
-
-  clients.forEach(client => {
-    const clientName = (0, _utils.sanitize)(client.name);
-
-    const clientFile = _path2.default.join(clientsFolder, `${clientName}.json`);
-
-    if (client.custom_login_page) {
-      const html = client.custom_login_page;
-
-      const customLoginHtml = _path2.default.join(clientsFolder, `${clientName}_custom_login_page.html`);
-
-      _logger2.default.info(`Writing ${customLoginHtml}`);
-
-      _fsExtra2.default.writeFileSync(customLoginHtml, html);
-
-      client.custom_login_page = `./${clientName}_custom_login_page.html`;
-    }
-
-    (0, _utils.dumpJSON)(clientFile, (0, _utils.clearClientArrays)(client));
-  });
+function dump(context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { clients } = context.assets;
+        if (!clients)
+            return; // Skip, nothing to dump
+        const clientsFolder = path_1.default.join(context.filePath, tools_1.constants.CLIENTS_DIRECTORY);
+        fs_extra_1.default.ensureDirSync(clientsFolder);
+        clients.forEach((client) => {
+            const clientName = (0, utils_1.sanitize)(client.name);
+            const clientFile = path_1.default.join(clientsFolder, `${clientName}.json`);
+            if (client.custom_login_page) {
+                const html = client.custom_login_page;
+                const customLoginHtml = path_1.default.join(clientsFolder, `${clientName}_custom_login_page.html`);
+                logger_1.default.info(`Writing ${customLoginHtml}`);
+                fs_extra_1.default.writeFileSync(customLoginHtml, html);
+                client.custom_login_page = `./${clientName}_custom_login_page.html`;
+            }
+            (0, utils_1.dumpJSON)(clientFile, (0, utils_1.clearClientArrays)(client));
+        });
+    });
 }
-
 exports.default = {
-  parse,
-  dump
-};
+    parse,
+    dump
+};