auth0-deploy-cli 7.7.1 → 7.10.0

package/lib/tools/auth0/handlers/clientGrants.d.ts

@@ -0,0 +1,32 @@
+import DefaultHandler from './default';
+import { Asset, Assets } from '../../../types';
+import DefaultAPIHandler from './default';
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            client_id: {
+                type: string;
+            };
+            audience: {
+                type: string;
+            };
+            scope: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                uniqueItems: boolean;
+            };
+        };
+        required: string[];
+    };
+};
+export default class ClientGrantsHandler extends DefaultHandler {
+    existing: Asset[] | null;
+    constructor(config: DefaultAPIHandler);
+    objString(item: any): string;
+    getType(): Promise<Asset>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/clients.d.ts

@@ -0,0 +1,23 @@
+import { Asset, Assets } from '../../../types';
+import DefaultAPIHandler from './default';
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            name: {
+                type: string;
+                minLength: number;
+                pattern: string;
+            };
+        };
+        required: string[];
+    };
+};
+export default class ClientHandler extends DefaultAPIHandler {
+    existing: Asset[] | null;
+    constructor(config: DefaultAPIHandler);
+    objString(item: any): string;
+    processChanges(assets: Assets): Promise<void>;
+    getType(): Promise<Asset[]>;
+}

package/lib/tools/auth0/handlers/connections.d.ts

@@ -0,0 +1,54 @@
+import DefaultAPIHandler from './default';
+import { CalculatedChanges, Asset, Assets } from '../../../types';
+import { ConfigFunction } from '../../../configFactory';
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            name: {
+                type: string;
+            };
+            strategy: {
+                type: string;
+            };
+            options: {
+                type: string;
+            };
+            enabled_clients: {
+                type: string;
+                items: {
+                    type: string;
+                };
+            };
+            realms: {
+                type: string;
+                items: {
+                    type: string;
+                };
+            };
+            metadata: {
+                type: string;
+            };
+        };
+        required: string[];
+    };
+};
+export declare const addExcludedConnectionPropertiesToChanges: ({ proposedChanges, existingConnections, config, }: {
+    proposedChanges: CalculatedChanges;
+    existingConnections: Asset[];
+    config: ConfigFunction;
+}) => CalculatedChanges;
+export default class ConnectionsHandler extends DefaultAPIHandler {
+    existing: Asset[] | null;
+    constructor(config: DefaultAPIHandler);
+    objString(connection: any): string;
+    getFormattedOptions(connection: any, clients: any): {
+        options: any;
+    } | {
+        options?: undefined;
+    };
+    getType(): Promise<Asset[] | null>;
+    calcChanges(assets: Assets): Promise<CalculatedChanges>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/databases.d.ts

@@ -0,0 +1,36 @@
+import DefaultAPIHandler from './default';
+import { CalculatedChanges, Assets } from '../../../types';
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            strategy: {
+                type: string;
+                enum: string[];
+                default: string;
+            };
+            name: {
+                type: string;
+            };
+            options: {
+                type: string;
+                properties: {
+                    customScripts: {
+                        type: string;
+                        properties: {};
+                    };
+                };
+            };
+        };
+        required: string[];
+    };
+};
+export default class DatabaseHandler extends DefaultAPIHandler {
+    constructor(config: DefaultAPIHandler);
+    objString(db: any): string;
+    getClientFN(fn: 'create' | 'delete' | 'getAll' | 'update'): Function;
+    getType(): Promise<import("../../../types").Asset>;
+    calcChanges(assets: Assets): Promise<CalculatedChanges>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/default.d.ts

@@ -0,0 +1,54 @@
+import { Asset, Assets, Auth0APIClient, CalculatedChanges } from '../../../types';
+import { ConfigFunction } from '../../../configFactory';
+export declare function order(value: any): (t: any, n: any, descriptor: any) => any;
+export default class APIHandler {
+    config: ConfigFunction;
+    id: string;
+    type: string;
+    updated: number;
+    created: number;
+    deleted: number;
+    existing: null | Asset | Asset[];
+    client: Auth0APIClient;
+    identifiers: string[];
+    objectFields: string[];
+    sensitiveFieldsToObfuscate: string[];
+    stripUpdateFields: string[];
+    stripCreateFields: string[];
+    name?: string;
+    functions: {
+        getAll: string;
+        update: string;
+        create: string;
+        delete: string;
+    };
+    constructor(options: {
+        id?: APIHandler['id'];
+        config: ConfigFunction;
+        type: APIHandler['type'];
+        client: Auth0APIClient;
+        objectFields?: APIHandler['objectFields'];
+        identifiers?: APIHandler['identifiers'];
+        stripUpdateFields?: APIHandler['stripUpdateFields'];
+        sensitiveFieldsToObfuscate?: APIHandler['sensitiveFieldsToObfuscate'];
+        stripCreateFields?: APIHandler['stripCreateFields'];
+        functions: {
+            getAll?: string;
+            update?: string;
+            create?: string;
+            delete?: string;
+        };
+    });
+    getClientFN(fn: string | Function): Function;
+    didDelete(item: Asset): void;
+    didCreate(item: Asset): void;
+    didUpdate(item: Asset): void;
+    objString(item: Asset): string;
+    getType(): Promise<Asset | Asset[] | null>;
+    load(): Promise<{
+        [key: string]: Asset | Asset[] | null;
+    }>;
+    calcChanges(assets: Assets): Promise<CalculatedChanges>;
+    validate(assets: Assets): Promise<void>;
+    processChanges(assets: Assets, changes: CalculatedChanges): Promise<void>;
+}

package/lib/tools/auth0/handlers/default.js

@@ -14,8 +14,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.order = void 0;
 const validationError_1 = __importDefault(require("../../validationError"));
-const logger_1 = __importDefault(require("../../logger"));
 const utils_1 = require("../../utils");
+const logger_1 = __importDefault(require("../../../logger"));
 const calculateChanges_1 = require("../../calculateChanges");
 function order(value) {
     return function decorator(t, n, descriptor) {
@@ -34,6 +34,8 @@ class APIHandler {
         this.identifiers = options.identifiers || ['id', 'name'];
         this.objectFields = options.objectFields || [];
         this.stripUpdateFields = [...(options.stripUpdateFields || []), this.id];
+        this.sensitiveFieldsToObfuscate = options.sensitiveFieldsToObfuscate || [];
+        this.stripCreateFields = options.stripCreateFields || [];
         this.functions = Object.assign({ getAll: 'getAll', create: 'create', delete: 'delete', update: 'update' }, (options.functions || {}));
         this.updated = 0;
         this.created = 0;
@@ -68,7 +70,8 @@ class APIHandler {
         return __awaiter(this, void 0, void 0, function* () {
             // Load Asset from Tenant
             logger_1.default.info(`Retrieving ${this.type} data from Auth0`);
-            this.existing = yield this.getType();
+            const data = yield this.getType();
+            this.existing = (0, utils_1.obfuscateSensitiveValues)(data, this.sensitiveFieldsToObfuscate);
             return { [this.type]: this.existing };
         });
     }
@@ -76,18 +79,20 @@ class APIHandler {
         return __awaiter(this, void 0, void 0, function* () {
             const typeAssets = assets[this.type];
             // Do nothing if not set
-            if (!typeAssets)
+            if (!typeAssets) {
                 return {
                     del: [],
                     create: [],
                     conflicts: [],
                     update: [],
                 };
+            }
             const existing = yield this.getType();
             // Figure out what needs to be updated vs created
             return (0, calculateChanges_1.calculateChanges)({
                 handler: this,
                 assets: typeAssets,
+                allowDelete: !!this.config('AUTH0_ALLOW_DELETE'),
                 //@ts-ignore TODO: investigate what happens when `existing` is null
                 existing,
                 identifiers: this.identifiers,
@@ -166,8 +171,11 @@ class APIHandler {
                 generator: (updateItem) => {
                     const updateFN = this.getClientFN(this.functions.update);
                     const params = { [this.id]: updateItem[this.id] };
-                    const payload = (0, utils_1.stripFields)(Object.assign({}, updateItem), this.stripUpdateFields);
-                    return updateFN(params, payload)
+                    const updatePayload = (() => {
+                        let data = (0, utils_1.stripFields)(Object.assign({}, updateItem), this.stripUpdateFields);
+                        return (0, utils_1.stripObfuscatedFieldsFromPayload)(data, this.sensitiveFieldsToObfuscate);
+                    })();
+                    return updateFN(params, updatePayload)
                         .then((data) => this.didUpdate(data))
                         .catch((err) => {
                         throw new Error(`Problem updating ${this.type} ${this.objString(updateItem)}\n${err}`);
@@ -181,7 +189,11 @@ class APIHandler {
                 data: create || [],
                 generator: (createItem) => {
                     const createFunction = this.getClientFN(this.functions.create);
-                    return createFunction(createItem)
+                    const createPayload = (() => {
+                        const strippedPayload = (0, utils_1.stripFields)(createItem, this.stripCreateFields);
+                        return (0, utils_1.stripObfuscatedFieldsFromPayload)(strippedPayload, this.sensitiveFieldsToObfuscate);
+                    })();
+                    return createFunction(createPayload)
                         .then((data) => {
                         this.didCreate(data);
                         this.created += 1;
@@ -199,8 +211,11 @@ class APIHandler {
                 generator: (updateItem) => {
                     const updateFN = this.getClientFN(this.functions.update);
                     const params = { [this.id]: updateItem[this.id] };
-                    const payload = (0, utils_1.stripFields)(Object.assign({}, updateItem), this.stripUpdateFields);
-                    return updateFN(params, payload)
+                    const updatePayload = (() => {
+                        let data = (0, utils_1.stripFields)(Object.assign({}, updateItem), this.stripUpdateFields);
+                        return (0, utils_1.stripObfuscatedFieldsFromPayload)(data, this.sensitiveFieldsToObfuscate);
+                    })();
+                    return updateFN(params, updatePayload)
                         .then((data) => {
                         this.didUpdate(data);
                         this.updated += 1;

package/lib/tools/auth0/handlers/emailProvider.d.ts

@@ -0,0 +1,11 @@
+import DefaultHandler from './default';
+import { Asset, Assets } from '../../../types';
+export declare const schema: {
+    type: string;
+};
+export default class EmailProviderHandler extends DefaultHandler {
+    constructor(options: DefaultHandler);
+    getType(): Promise<Asset>;
+    objString(provider: any): string;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/emailTemplates.d.ts

@@ -0,0 +1,26 @@
+import DefaultHandler from './default';
+import { Assets, Asset } from '../../../types';
+export declare const supportedTemplates: string[];
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            template: {
+                type: string;
+                enum: string[];
+            };
+            body: {
+                type: string;
+                default: string;
+            };
+        };
+        required: string[];
+    };
+};
+export default class EmailTemplateHandler extends DefaultHandler {
+    constructor(options: DefaultHandler);
+    getType(): Promise<Asset>;
+    updateOrCreate(emailTemplate: any): Promise<void>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/guardianFactorProviders.d.ts

@@ -0,0 +1,25 @@
+import DefaultHandler from './default';
+import { Asset, Assets } from '../../../types';
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            name: {
+                type: string;
+                enum: string[];
+            };
+            provider: {
+                type: string;
+                enum: string[];
+            };
+        };
+        required: string[];
+    };
+};
+export default class GuardianFactorProvidersHandler extends DefaultHandler {
+    existing: Asset[];
+    constructor(options: DefaultHandler);
+    getType(): Promise<Asset[]>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/guardianFactorTemplates.d.ts

@@ -0,0 +1,21 @@
+import DefaultHandler from './default';
+import { Assets, Asset } from '../../../types';
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            name: {
+                type: string;
+                enum: string[];
+            };
+        };
+        required: string[];
+    };
+};
+export default class GuardianFactorTemplatesHandler extends DefaultHandler {
+    existing: Asset[];
+    constructor(options: any);
+    getType(): Promise<Asset[]>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/guardianFactors.d.ts

@@ -0,0 +1,21 @@
+import DefaultHandler from './default';
+import { Asset, Assets } from '../../../types';
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            name: {
+                type: string;
+                enum: string[];
+            };
+        };
+        required: string[];
+    };
+};
+export default class GuardianFactorsHandler extends DefaultHandler {
+    existing: Asset[];
+    constructor(options: DefaultHandler);
+    getType(): Promise<Asset[]>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/guardianPhoneFactorMessageTypes.d.ts

@@ -0,0 +1,21 @@
+import DefaultHandler from './default';
+import { Asset, Assets } from '../../../types';
+export declare const schema: {
+    type: string;
+    properties: {
+        message_types: {
+            type: string;
+            items: {
+                type: string;
+                enum: string[];
+            };
+        };
+    };
+    additionalProperties: boolean;
+};
+export default class GuardianPhoneMessageTypesHandler extends DefaultHandler {
+    existing: Asset[];
+    constructor(options: DefaultHandler);
+    getType(): Promise<Asset[] | {}>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/guardianPhoneFactorSelectedProvider.d.ts

@@ -0,0 +1,18 @@
+import DefaultHandler from './default';
+import { Asset, Assets } from '../../../types';
+export declare const schema: {
+    type: string;
+    properties: {
+        provider: {
+            type: string;
+            enum: string[];
+        };
+    };
+    additionalProperties: boolean;
+};
+export default class GuardianPhoneSelectedProviderHandler extends DefaultHandler {
+    existing: Asset[];
+    constructor(options: any);
+    getType(): Promise<{}>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/guardianPolicies.d.ts

@@ -0,0 +1,23 @@
+import DefaultHandler from './default';
+import { Asset, Assets } from '../../../types';
+export declare const schema: {
+    type: string;
+    properties: {
+        policies: {
+            type: string;
+            items: {
+                type: string;
+                enum: string[];
+            };
+        };
+    };
+    additionalProperties: boolean;
+};
+export default class GuardianPoliciesHandler extends DefaultHandler {
+    existing: {
+        policies: Asset[];
+    };
+    constructor(options: any);
+    getType(): Promise<GuardianPoliciesHandler['existing'] | {}>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/hooks.d.ts

@@ -0,0 +1,58 @@
+import DefaultHandler from './default';
+import { Asset, Assets, CalculatedChanges } from '../../../types';
+export declare const excludeSchema: {
+    type: string;
+    items: {
+        type: string;
+    };
+};
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        default: never[];
+        properties: {
+            script: {
+                type: string;
+                description: string;
+                default: string;
+            };
+            name: {
+                type: string;
+                description: string;
+                pattern: string;
+            };
+            enabled: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
+            triggerId: {
+                type: string;
+                description: string;
+                enum: string[];
+            };
+            secrets: {
+                type: string;
+                description: string;
+                default: {};
+            };
+            dependencies: {
+                type: string;
+                default: {};
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};
+export default class HooksHandler extends DefaultHandler {
+    existing: Asset[];
+    constructor(options: DefaultHandler);
+    objString(hook: any): string;
+    processSecrets(hooks: any): Promise<void>;
+    getType(reload: boolean): Promise<Asset[]>;
+    calcChanges(assets: Assets): Promise<CalculatedChanges>;
+    validate(assets: any): Promise<void>;
+    processChanges(assets: Assets): Promise<void>;
+}

package/lib/tools/auth0/handlers/index.d.ts

@@ -0,0 +1,134 @@
+import APIHandler from './default';
+declare const _default: {
+    rules: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    rulesConfigs: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    hooks: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    pages: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    databases: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    clientGrants: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    resourceServers: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    clients: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    connections: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    tenant: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    emailProvider: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    emailTemplates: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    guardianFactors: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    guardianFactorProviders: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    guardianFactorTemplates: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    migrations: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    guardianPhoneFactorMessageTypes: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    guardianPhoneFactorSelectedProvider: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    guardianPolicies: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    roles: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    actions: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    organizations: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    triggers: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    attackProtection: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    branding: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+    logStreams: {
+        default: typeof APIHandler;
+        excludeSchema?: any;
+        schema: any;
+    };
+};
+export default _default;

package/lib/tools/auth0/handlers/index.js

@@ -50,6 +50,7 @@ const actions = __importStar(require("./actions"));
 const triggers = __importStar(require("./triggers"));
 const organizations = __importStar(require("./organizations"));
 const attackProtection = __importStar(require("./attackProtection"));
+const logStreams = __importStar(require("./logStreams"));
 const auth0ApiHandlers = {
     rules,
     rulesConfigs,
@@ -78,5 +79,6 @@ const auth0ApiHandlers = {
     triggers,
     organizations,
     attackProtection,
+    logStreams,
 };
 exports.default = auth0ApiHandlers; // TODO: apply stronger types to schema properties