auth0-deploy-cli 8.20.4-beta.0 → 8.22.0

package/lib/tools/auth0/handlers/clients.js

@@ -1,11 +1,24 @@
 "use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.schema = void 0;
+const lodash_1 = require("lodash");
 const client_1 = require("../client");
 const default_1 = __importDefault(require("./default"));
+const connectionProfiles_1 = require("./connectionProfiles");
+const userAttributeProfiles_1 = require("./userAttributeProfiles");
+const logger_1 = __importDefault(require("../../../logger"));
 const multiResourceRefreshTokenPoliciesSchema = {
     type: ['array', 'null'],
     description: 'A collection of policies governing multi-resource refresh token exchange (MRRT), defining how refresh tokens can be used across different resource servers',
@@ -114,26 +127,40 @@ exports.schema = {
                 properties: {
                     can_create_session_transfer_token: {
                         type: 'boolean',
+                        description: "Indicates whether an app can issue a Session Transfer Token through Token Exchange. If set to 'false', the app will not be able to issue a Session Transfer Token. Usually configured in the native application.",
                         default: false,
-                        description: 'Specifies whether the application (Native app) can use the Token Exchange endpoint to create a session_transfer_token.',
+                    },
+                    enforce_cascade_revocation: {
+                        type: 'boolean',
+                        description: 'Indicates whether revoking the parent Refresh Token that initiated a Native to Web flow and was used to issue a Session Transfer Token should trigger a cascade revocation affecting its dependent child entities. Usually configured in the native application.',
+                        default: true,
                     },
                     allowed_authentication_methods: {
-                        type: 'array',
+                        type: ['array', 'null'],
+                        description: 'Indicates whether an app can create a session from a Session Transfer Token received via indicated methods. Can include `cookie` and/or `query`. Usually configured in the web application.',
                         items: {
                             type: 'string',
                             enum: ['cookie', 'query'],
                         },
-                        default: [],
-                        description: 'Determines the methods allowed for a web application to create a session using a session_transfer_token.',
                     },
                     enforce_device_binding: {
                         type: 'string',
-                        enum: ['none', 'ip', 'asn'],
+                        description: "Indicates whether device binding security should be enforced for the app. If set to 'ip', the app will enforce device binding by IP, meaning that consumption of Session Transfer Token must be done from the same IP of the issuer. Likewise, if set to 'asn', device binding is enforced by ASN, meaning consumption of Session Transfer Token must be done from the same ASN as the issuer. If set to 'null', device binding is not enforced. Usually configured in the web application.",
+                        enum: ['ip', 'asn', 'none'],
                         default: 'ip',
-                        description: 'Configures the level of device binding enforced when a session_transfer_token is consumed.',
+                    },
+                    allow_refresh_token: {
+                        type: 'boolean',
+                        description: 'Indicates whether Refresh Tokens are allowed to be issued when authenticating with a Session Transfer Token. Usually configured in the web application.',
+                        default: false,
+                    },
+                    enforce_online_refresh_tokens: {
+                        type: 'boolean',
+                        description: "Indicates whether Refresh Tokens created during a native-to-web session are tied to that session's lifetime. This determines if such refresh tokens should be automatically revoked when their corresponding sessions are. Usually configured in the web application.",
+                        default: true,
                     },
                 },
-                additionalProperties: false,
+                additionalProperties: true,
             },
             app_type: {
                 type: 'string',
@@ -170,19 +197,74 @@ exports.schema = {
                 type: ['boolean', 'null'],
                 description: 'Whether to skip the confirmation prompt for non-verifiable callback URIs',
             },
+            express_configuration: {
+                type: ['object', 'null'],
+                description: 'Application specific configuration for use with the OIN Express Configuration feature',
+                properties: {
+                    initiate_login_uri_template: {
+                        type: 'string',
+                        description: 'The URI users should bookmark to log in to this application. Variable substitution is permitted for the following properties: organization_name, organization_id, and connection_name.',
+                    },
+                    user_attribute_profile_id: {
+                        type: 'string',
+                        description: 'The ID of the user attribute profile to use for this application',
+                    },
+                    connection_profile_id: {
+                        type: 'string',
+                        description: 'The ID of the connection profile to use for this application',
+                    },
+                    enable_client: {
+                        type: 'boolean',
+                        description: 'When true, all connections made via express configuration will be enabled for this application',
+                    },
+                    enable_organization: {
+                        type: 'boolean',
+                        description: 'When true, all connections made via express configuration will have the associated organization enabled',
+                    },
+                    linked_clients: {
+                        type: 'array',
+                        description: 'List of client IDs that are linked to this express configuration (e.g. web or mobile clients)',
+                        items: {
+                            type: 'object',
+                            properties: {
+                                client_id: {
+                                    type: 'string',
+                                    description: 'The ID of the linked client',
+                                },
+                            },
+                            required: ['client_id'],
+                        },
+                    },
+                    okta_oin_client_id: {
+                        type: 'string',
+                        description: 'This is the unique identifier for the Okta OIN Express Configuration Client, which Okta will use for this application',
+                    },
+                    admin_login_domain: {
+                        type: 'string',
+                        description: 'This is the domain that admins are expected to log in via for authenticating for express configuration. It can be either the canonical domain or a registered custom domain',
+                    },
+                    oin_submission_id: {
+                        type: 'string',
+                        description: 'The identifier of the published application in the OKTA OIN',
+                    },
+                },
+                required: [
+                    'initiate_login_uri_template',
+                    'user_attribute_profile_id',
+                    'connection_profile_id',
+                    'enable_client',
+                    'enable_organization',
+                    'okta_oin_client_id',
+                    'admin_login_domain',
+                ],
+            },
         },
         required: ['name'],
     },
 };
 class ClientHandler extends default_1.default {
     constructor(config) {
-        super({
-            ...config,
-            type: 'clients',
-            id: 'client_id',
-            identifiers: ['client_id', 'name'],
-            objectFields: ['client_metadata'],
-            stripUpdateFields: [
+        super(Object.assign(Object.assign({}, config), { type: 'clients', id: 'client_id', identifiers: ['client_id', 'name'], objectFields: ['client_metadata'], stripUpdateFields: [
                 // Fields not allowed during updates
                 'callback_url_template',
                 'signing_keys',
@@ -190,68 +272,141 @@ class ClientHandler extends default_1.default {
                 'tenant',
                 'jwt_configuration.secret_encoded',
                 'resource_server_identifier',
-            ],
-            functions: {
-                update: async (
-                // eslint-disable-next-line camelcase
-                { client_id }, bodyParams) => this.client.clients.update(client_id, bodyParams),
-            },
-        });
+            ] }));
     }
     objString(item) {
         return super.objString({ name: item.name, client_id: item.client_id });
     }
-    async processChanges(assets) {
-        const { clients } = assets;
-        // Do nothing if not set
-        if (!clients)
-            return;
-        const excludedClients = (assets.exclude && assets.exclude.clients) || [];
-        const { del, update, create, conflicts } = await this.calcChanges(assets);
-        // Always filter out the client we are using to access Auth0 Management API
-        // As it could cause problems if it gets deleted or updated etc
-        const currentClient = this.config('AUTH0_CLIENT_ID') || '';
-        const filterClients = (list) => {
-            if (excludedClients.length) {
-                return list.filter((item) => item.client_id !== currentClient && !excludedClients.includes(item.name));
-            }
-            return list.filter((item) => item.client_id !== currentClient);
-        };
-        // Sanitize client fields
-        const sanitizeClientFields = (list) => list.map((item) => {
-            // For resourceServers app type `resource_server`, don't include `oidc_backchannel_logout`, `oidc_logout`, `refresh_token`
-            if (item.app_type === 'resource_server') {
-                if ('oidc_backchannel_logout' in item) {
-                    delete item.oidc_backchannel_logout;
-                }
-                if ('oidc_logout' in item) {
-                    delete item.oidc_logout;
-                }
-                if ('refresh_token' in item) {
-                    delete item.refresh_token;
+    processChanges(assets) {
+        const _super = Object.create(null, {
+            processChanges: { get: () => super.processChanges }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const { clients } = assets;
+            // Do nothing if not set
+            if (!clients)
+                return;
+            assets.clients = yield this.sanitizeMapExpressConfiguration(this.client, clients);
+            const excludedClients = (assets.exclude && assets.exclude.clients) || [];
+            const excludeThirdPartyClients = this.config('AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS') === 'true' ||
+                this.config('AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS') === true;
+            const { del, update, create, conflicts } = yield this.calcChanges(assets);
+            // Always filter out the client we are using to access Auth0 Management API
+            // As it could cause problems if it gets deleted or updated etc
+            const currentClient = this.config('AUTH0_CLIENT_ID') || '';
+            /*
+             * Filter out:
+             * - The client used to access Auth0 Management API
+             * - Clients in the exclusion list
+             * - Third-party clients when AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS is enabled
+             */
+            const filterClients = (list) => list.filter((item) => item.client_id !== currentClient &&
+                !excludedClients.includes(item.name) &&
+                (!excludeThirdPartyClients || item.is_first_party));
+            // Sanitize client fields
+            const sanitizeClientFields = (list) => {
+                const sanitizedClients = this.sanitizeCrossOriginAuth(list);
+                return sanitizedClients.map((item) => {
+                    if (item.app_type === 'resource_server') {
+                        if ('oidc_backchannel_logout' in item) {
+                            delete item.oidc_backchannel_logout;
+                        }
+                        if ('oidc_logout' in item) {
+                            delete item.oidc_logout;
+                        }
+                        if ('refresh_token' in item) {
+                            delete item.refresh_token;
+                        }
+                    }
+                    return item;
+                });
+            };
+            const changes = {
+                del: sanitizeClientFields(filterClients(del)),
+                update: sanitizeClientFields(filterClients(update)),
+                create: sanitizeClientFields(filterClients(create)),
+                conflicts: sanitizeClientFields(filterClients(conflicts)),
+            };
+            yield _super.processChanges.call(this, assets, Object.assign({}, changes));
+        });
+    }
+    /**
+     * @description
+     * Sanitize the deprecated field `cross_origin_auth` to `cross_origin_authentication`
+     *
+     * @param {Client[]} clients - The client array to sanitize.
+     * @returns {Client[]} The sanitized array of clients.
+     */
+    sanitizeCrossOriginAuth(clients) {
+        const deprecatedClients = [];
+        const updatedClients = clients.map((client) => {
+            let updated = Object.assign({}, client);
+            if ((0, lodash_1.has)(updated, 'cross_origin_auth')) {
+                deprecatedClients.push(client.name);
+                if (!(0, lodash_1.has)(updated, 'cross_origin_authentication')) {
+                    updated.cross_origin_authentication = updated.cross_origin_auth;
                 }
+                updated = (0, lodash_1.omit)(updated, 'cross_origin_auth');
             }
-            return item;
-        });
-        const changes = {
-            del: sanitizeClientFields(filterClients(del)),
-            update: sanitizeClientFields(filterClients(update)),
-            create: sanitizeClientFields(filterClients(create)),
-            conflicts: sanitizeClientFields(filterClients(conflicts)),
-        };
-        await super.processChanges(assets, {
-            ...changes,
+            return updated;
         });
+        if (deprecatedClients.length > 0) {
+            logger_1.default.warn("The 'cross_origin_auth' parameter is deprecated in clients and scheduled for removal in future releases.\n" +
+                `Use 'cross_origin_authentication' going forward. Clients using the deprecated setting: [${deprecatedClients.join(', ')}]`);
+        }
+        return updatedClients;
     }
-    async getType() {
-        if (this.existing)
+    getType() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this.existing)
+                return this.existing;
+            const excludeThirdPartyClients = this.config('AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS') === 'true' ||
+                this.config('AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS') === true;
+            const clients = yield (0, client_1.paginate)(this.client.clients.getAll, Object.assign({ paginate: true, include_totals: true, is_global: false }, (excludeThirdPartyClients && { is_first_party: true })));
+            const sanitizedClients = this.sanitizeCrossOriginAuth(clients);
+            this.existing = sanitizedClients;
             return this.existing;
-        const clients = await (0, client_1.paginate)(this.client.clients.list, {
-            paginate: true,
-            is_global: false,
         });
-        this.existing = clients;
-        return this.existing;
+    }
+    // convert names back to IDs for express configuration
+    sanitizeMapExpressConfiguration(auth0Client, clientList) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // if no clients have express configuration, return early
+            if (!clientList.some((p) => p.express_configuration)) {
+                return clientList;
+            }
+            const clientData = yield this.getType();
+            const connectionProfiles = yield (0, connectionProfiles_1.getConnectionProfile)(auth0Client);
+            const userAttributeProfiles = yield (0, userAttributeProfiles_1.getUserAttributeProfiles)(auth0Client);
+            return clientList.map((client) => {
+                var _a;
+                if (!client.express_configuration)
+                    return client;
+                const userAttributeProfileName = (_a = client.express_configuration) === null || _a === void 0 ? void 0 : _a.user_attribute_profile_id;
+                if (userAttributeProfileName) {
+                    const userAttributeProfile = userAttributeProfiles === null || userAttributeProfiles === void 0 ? void 0 : userAttributeProfiles.find((uap) => uap.name === userAttributeProfileName);
+                    if (userAttributeProfile === null || userAttributeProfile === void 0 ? void 0 : userAttributeProfile.id) {
+                        client.express_configuration.user_attribute_profile_id = userAttributeProfile.id;
+                    }
+                }
+                const connectionProfileName = client.express_configuration.connection_profile_id;
+                if (connectionProfileName) {
+                    const connectionProfile = connectionProfiles === null || connectionProfiles === void 0 ? void 0 : connectionProfiles.find((cp) => cp.name === connectionProfileName);
+                    if (connectionProfile === null || connectionProfile === void 0 ? void 0 : connectionProfile.id) {
+                        client.express_configuration.connection_profile_id = connectionProfile.id;
+                    }
+                }
+                const oktaOinClientName = client.express_configuration.okta_oin_client_id;
+                if (oktaOinClientName) {
+                    const oktaOinClient = clientData === null || clientData === void 0 ? void 0 : clientData.find((c) => c.name === oktaOinClientName);
+                    if (oktaOinClient) {
+                        client.express_configuration.okta_oin_client_id = oktaOinClient.client_id;
+                    }
+                }
+                return client;
+            });
+        });
     }
 }
 exports.default = ClientHandler;
+//# sourceMappingURL=clients.js.map

package/lib/tools/auth0/handlers/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../../../src/tools/auth0/handlers/clients.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,mCAAmC;AAEnC,sCAAqC;AACrC,wDAA0C;AAC1C,6DAA4D;AAC5D,mEAAmE;AACnE,6DAAkC;AAElC,MAAM,uCAAuC,GAAG;IAC9C,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IACvB,WAAW,EACT,4JAA4J;IAC9J,KAAK,EAAE;QACL,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;aACf;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;iBACf;gBACD,WAAW,EAAE,IAAI;aAClB;SACF;QACD,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;KAChC;CACF,CAAC;AAEW,QAAA,MAAM,GAAG;IACpB,IAAI,EAAE,OAAO;IACb,KAAK,EAAE;QACL,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;YACzD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACpC,wBAAwB,EAAE;gCACxB,IAAI,EAAE,OAAO;gCACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;6BAC1B;yBACF;qBACF;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC3B,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBAC1C;qBACF;iBACF;aACF;YACD,mBAAmB,EAAE;gBACnB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;yBAC7B;qBACF;oBACD,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;yBAC7B;qBACF;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;yBAC7B;qBACF;iBACF;aACF;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACxB,WAAW,EAAE,6BAA6B;gBAC1C,UAAU,EAAE;oBACV,QAAQ,EAAE,uCAAuC;iBAClD;aACF;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACxB,UAAU,EAAE;oBACV,kBAAkB,EAAE;wBAClB,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,OAAO,EAAE;gCACP,IAAI,EAAE,SAAS;gCACf,OAAO,EAAE,IAAI;6BACd;4BACD,OAAO,EAAE;gCACP,IAAI,EAAE,SAAS;gCACf,OAAO,EAAE,CAAC;6BACX;4BACD,QAAQ,EAAE;gCACR,IAAI,EAAE,SAAS;gCACf,OAAO,EAAE,CAAC;6BACX;yBACF;wBACD,oBAAoB,EAAE,KAAK;wBAC3B,aAAa,EAAE,CAAC;qBACjB;iBACF;gBACD,QAAQ,EAAE,CAAC,oBAAoB,CAAC;aACjC;YACD,gBAAgB,EAAE;gBAChB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,iCAAiC,EAAE;wBACjC,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,kNAAkN;wBACpN,OAAO,EAAE,KAAK;qBACf;oBACD,0BAA0B,EAAE;wBAC1B,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,kQAAkQ;wBACpQ,OAAO,EAAE,IAAI;qBACd;oBACD,8BAA8B,EAAE;wBAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;wBACvB,WAAW,EACT,6LAA6L;wBAC/L,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;yBAC1B;qBACF;oBACD,sBAAsB,EAAE;wBACtB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,6dAA6d;wBAC/d,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC;wBAC3B,OAAO,EAAE,IAAI;qBACd;oBACD,mBAAmB,EAAE;wBACnB,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,yJAAyJ;wBAC3J,OAAO,EAAE,KAAK;qBACf;oBACD,6BAA6B,EAAE;wBAC7B,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,uQAAuQ;wBACzQ,OAAO,EAAE,IAAI;qBACd;iBACF;gBACD,oBAAoB,EAAE,IAAI;aAC3B;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gDAAgD;aAC9D;YACD,0BAA0B,EAAE;gBAC1B,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,0MAA0M;aAC7M;YACD,kBAAkB,EAAE;gBAClB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;aACnC;YACD,6BAA6B,EAAE;gBAC7B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;aAC7D;YACD,8BAA8B,EAAE;gBAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;gBACvB,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC;iBACrC;aACF;YACD,oCAAoC,EAAE;gBACpC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;gBACvB,WAAW,EACT,mKAAmK;gBACrK,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;iBACjC;aACF;YACD,oDAAoD,EAAE;gBACpD,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;gBACzB,WAAW,EAAE,0EAA0E;aACxF;YACD,qBAAqB,EAAE;gBACrB,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACxB,WAAW,EACT,uFAAuF;gBACzF,UAAU,EAAE;oBACV,2BAA2B,EAAE;wBAC3B,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,wLAAwL;qBAC3L;oBACD,yBAAyB,EAAE;wBACzB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,kEAAkE;qBAChF;oBACD,qBAAqB,EAAE;wBACrB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,8DAA8D;qBAC5E;oBACD,aAAa,EAAE;wBACb,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,gGAAgG;qBACnG;oBACD,mBAAmB,EAAE;wBACnB,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,yGAAyG;qBAC5G;oBACD,cAAc,EAAE;wBACd,IAAI,EAAE,OAAO;wBACb,WAAW,EACT,+FAA+F;wBACjG,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,SAAS,EAAE;oCACT,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,6BAA6B;iCAC3C;6BACF;4BACD,QAAQ,EAAE,CAAC,WAAW,CAAC;yBACxB;qBACF;oBACD,kBAAkB,EAAE;wBAClB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,uHAAuH;qBAC1H;oBACD,kBAAkB,EAAE;wBAClB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,6KAA6K;qBAChL;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,6DAA6D;qBAC3E;iBACF;gBACD,QAAQ,EAAE;oBACR,6BAA6B;oBAC7B,2BAA2B;oBAC3B,uBAAuB;oBACvB,eAAe;oBACf,qBAAqB;oBACrB,oBAAoB;oBACpB,oBAAoB;iBACrB;aACF;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,CAAC;KACnB;CACF,CAAC;AAiBF,MAAqB,aAAc,SAAQ,iBAAiB;IAG1D,YAAY,MAAyB;QACnC,KAAK,iCACA,MAAM,KACT,IAAI,EAAE,SAAS,EACf,EAAE,EAAE,WAAW,EACf,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAClC,YAAY,EAAE,CAAC,iBAAiB,CAAC,EACjC,iBAAiB,EAAE;gBACjB,oCAAoC;gBACpC,uBAAuB;gBACvB,cAAc;gBACd,QAAQ;gBACR,QAAQ;gBACR,kCAAkC;gBAClC,4BAA4B;aAC7B,IACD,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAI;QACZ,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IAEK,cAAc,CAAC,MAAc;;;;;YACjC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;YAE3B,wBAAwB;YACxB,IAAI,CAAC,OAAO;gBAAE,OAAO;YAErB,MAAM,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAElF,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAEzE,MAAM,wBAAwB,GAC5B,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,KAAK,MAAM;gBAC3D,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,KAAK,IAAI,CAAC;YAE5D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAE1E,2EAA2E;YAC3E,+DAA+D;YAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAE3D;;;;;eAKG;YACH,MAAM,aAAa,GAAG,CAAC,IAAc,EAAY,EAAE,CACjD,IAAI,CAAC,MAAM,CACT,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,SAAS,KAAK,aAAa;gBAChC,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,CAAC,CAAC,wBAAwB,IAAI,IAAI,CAAC,cAAc,CAAC,CACrD,CAAC;YAEJ,yBAAyB;YACzB,MAAM,oBAAoB,GAAG,CAAC,IAAc,EAAY,EAAE;gBACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAE5D,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;oBAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;wBACxC,IAAI,yBAAyB,IAAI,IAAI,EAAE,CAAC;4BACtC,OAAO,IAAI,CAAC,uBAAuB,CAAC;wBACtC,CAAC;wBACD,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;4BAC1B,OAAO,IAAI,CAAC,WAAW,CAAC;wBAC1B,CAAC;wBACD,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;4BAC5B,OAAO,IAAI,CAAC,aAAa,CAAC;wBAC5B,CAAC;oBACH,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG;gBACd,GAAG,EAAE,oBAAoB,CAAC,aAAa,CAAC,GAAe,CAAC,CAAC;gBACzD,MAAM,EAAE,oBAAoB,CAAC,aAAa,CAAC,MAAkB,CAAC,CAAC;gBAC/D,MAAM,EAAE,oBAAoB,CAAC,aAAa,CAAC,MAAkB,CAAC,CAAC;gBAC/D,SAAS,EAAE,oBAAoB,CAAC,aAAa,CAAC,SAAqB,CAAC,CAAC;aACtE,CAAC;YAEF,MAAM,OAAM,cAAc,YAAC,MAAM,oBAC5B,OAAO,EACV,CAAC;QACL,CAAC;KAAA;IAED;;;;;;OAMG;IACK,uBAAuB,CAAC,OAAiB;QAC/C,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC5C,IAAI,OAAO,qBAAgB,MAAM,CAAE,CAAC;YAEpC,IAAI,IAAA,YAAG,EAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC;gBACtC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAEpC,IAAI,CAAC,IAAA,YAAG,EAAC,OAAO,EAAE,6BAA6B,CAAC,EAAE,CAAC;oBACjD,OAAO,CAAC,2BAA2B,GAAG,OAAO,CAAC,iBAAiB,CAAC;gBAClE,CAAC;gBAED,OAAO,GAAG,IAAA,aAAI,EAAC,OAAO,EAAE,mBAAmB,CAAW,CAAC;YACzD,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,gBAAG,CAAC,IAAI,CACN,4GAA4G;gBAC1G,2FAA2F,iBAAiB,CAAC,IAAI,CAC/G,IAAI,CACL,GAAG,CACP,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEK,OAAO;;YACX,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;YAExC,MAAM,wBAAwB,GAC5B,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,KAAK,MAAM;gBAC3D,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,KAAK,IAAI,CAAC;YAE5D,MAAM,OAAO,GAAG,MAAM,IAAA,iBAAQ,EAAS,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,kBAC/D,QAAQ,EAAE,IAAI,EACd,cAAc,EAAE,IAAI,EACpB,SAAS,EAAE,KAAK,IACb,CAAC,wBAAwB,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EACzD,CAAC;YAEH,MAAM,gBAAgB,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAE/D,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC;YACjC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;KAAA;IAED,sDAAsD;IAChD,+BAA+B,CACnC,WAA2B,EAC3B,UAAoB;;YAEpB,yDAAyD;YACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACrD,OAAO,UAAU,CAAC;YACpB,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,kBAAkB,GAAG,MAAM,IAAA,yCAAoB,EAAC,WAAW,CAAC,CAAC;YACnE,MAAM,qBAAqB,GAAG,MAAM,IAAA,gDAAwB,EAAC,WAAW,CAAC,CAAC;YAE1E,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;;gBAC/B,IAAI,CAAC,MAAM,CAAC,qBAAqB;oBAAE,OAAO,MAAM,CAAC;gBAEjD,MAAM,wBAAwB,GAAG,MAAA,MAAM,CAAC,qBAAqB,0CAAE,yBAAyB,CAAC;gBACzF,IAAI,wBAAwB,EAAE,CAAC;oBAC7B,MAAM,oBAAoB,GAAG,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,IAAI,CACtD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,wBAAwB,CAC/C,CAAC;oBACF,IAAI,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,EAAE,EAAE,CAAC;wBAC7B,MAAM,CAAC,qBAAqB,CAAC,yBAAyB,GAAG,oBAAoB,CAAC,EAAE,CAAC;oBACnF,CAAC;gBACH,CAAC;gBAED,MAAM,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC,qBAAqB,CAAC;gBACjF,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,MAAM,iBAAiB,GAAG,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,IAAI,CAChD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,qBAAqB,CAC1C,CAAC;oBACF,IAAI,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,EAAE,EAAE,CAAC;wBAC1B,MAAM,CAAC,qBAAqB,CAAC,qBAAqB,GAAG,iBAAiB,CAAC,EAAE,CAAC;oBAC5E,CAAC;gBACH,CAAC;gBAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,qBAAqB,CAAC,kBAAkB,CAAC;gBAC1E,IAAI,iBAAiB,EAAE,CAAC;oBACtB,MAAM,aAAa,GAAG,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;oBAC5E,IAAI,aAAa,EAAE,CAAC;wBAClB,MAAM,CAAC,qBAAqB,CAAC,kBAAkB,GAAG,aAAa,CAAC,SAAS,CAAC;oBAC5E,CAAC;gBACH,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;KAAA;CACF;AAtMD,gCAsMC"}

package/lib/tools/auth0/handlers/connectionProfiles.d.ts

@@ -0,0 +1,182 @@
+import { ConnectionProfile } from 'auth0';
+import { Assets, Auth0APIClient } from '../../../types';
+import DefaultAPIHandler from './default';
+export declare const schema: {
+    type: string;
+    items: {
+        type: string;
+        properties: {
+            name: {
+                type: string;
+            };
+            organization: {
+                type: string;
+                properties: {
+                    show_as_button: {
+                        type: string;
+                        enum: string[];
+                    };
+                    assign_membership_on_login: {
+                        type: string;
+                        enum: string[];
+                    };
+                };
+            };
+            connection_name_prefix_template: {
+                type: string;
+            };
+            enabled_features: {
+                type: string;
+                items: {
+                    type: string;
+                    enum: string[];
+                };
+                uniqueItems: boolean;
+            };
+            connection_config: {
+                type: string[];
+            };
+            strategy_overrides: {
+                type: string[];
+                properties: {
+                    pingfederate: {
+                        type: string;
+                        properties: {
+                            enabled_features: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                uniqueItems: boolean;
+                            };
+                            connection_config: {
+                                type: string;
+                            };
+                        };
+                    };
+                    ad: {
+                        type: string;
+                        properties: {
+                            enabled_features: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                uniqueItems: boolean;
+                            };
+                            connection_config: {
+                                type: string;
+                            };
+                        };
+                    };
+                    adfs: {
+                        type: string;
+                        properties: {
+                            enabled_features: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                uniqueItems: boolean;
+                            };
+                            connection_config: {
+                                type: string;
+                            };
+                        };
+                    };
+                    waad: {
+                        type: string;
+                        properties: {
+                            enabled_features: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                uniqueItems: boolean;
+                            };
+                            connection_config: {
+                                type: string;
+                            };
+                        };
+                    };
+                    'google-apps': {
+                        type: string;
+                        properties: {
+                            enabled_features: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                uniqueItems: boolean;
+                            };
+                            connection_config: {
+                                type: string;
+                            };
+                        };
+                    };
+                    okta: {
+                        type: string;
+                        properties: {
+                            enabled_features: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                uniqueItems: boolean;
+                            };
+                            connection_config: {
+                                type: string;
+                            };
+                        };
+                    };
+                    oidc: {
+                        type: string;
+                        properties: {
+                            enabled_features: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                uniqueItems: boolean;
+                            };
+                            connection_config: {
+                                type: string;
+                            };
+                        };
+                    };
+                    samlp: {
+                        type: string;
+                        properties: {
+                            enabled_features: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                    enum: string[];
+                                };
+                                uniqueItems: boolean;
+                            };
+                            connection_config: {
+                                type: string;
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        required: string[];
+    };
+};
+export declare const getConnectionProfile: (auth0Client: Auth0APIClient) => Promise<ConnectionProfile[]>;
+export default class ConnectionProfilesHandler extends DefaultAPIHandler {
+    existing: ConnectionProfile[];
+    constructor(config: DefaultAPIHandler);
+    getType(): Promise<ConnectionProfile[]>;
+    processChanges(assets: Assets): Promise<void>;
+}