auth0-deploy-cli 8.30.0 → 8.32.0

package/lib/tools/auth0/handlers/organizations.d.ts

@@ -26,6 +26,9 @@ export declare const schema: {
                         connection_id: {
                             type: string;
                         };
+                        organization_connection_name: {
+                            type: string;
+                        };
                         assign_membership_on_login: {
                             type: string;
                         };
@@ -35,6 +38,13 @@ export declare const schema: {
                         is_signup_enabled: {
                             type: string;
                         };
+                        organization_access_level: {
+                            type: string;
+                            enum: ("none" | "readonly" | "limited" | "full")[];
+                        };
+                        is_enabled: {
+                            type: string;
+                        };
                     };
                 };
             };
@@ -118,7 +128,7 @@ export default class OrganizationsHandler extends DefaultHandler {
     updateOrganizations(updates: CalculatedChanges['update'], orgs: Asset[]): Promise<void>;
     getType(): Promise<Asset[]>;
     processChanges(assets: Assets): Promise<void>;
-    getOrganizationEnabledConnections(organizationId: string): Promise<Management.OrganizationConnection[]>;
+    getOrganizationConnections(organizationId: string): Promise<Management.OrganizationConnection[]>;
     getOrganizationClientGrants(organizationId: string): Promise<Management.OrganizationClientGrant[]>;
     createOrganizationClientGrants(organizationId: string, grantId: string): Promise<Management.AssociateOrganizationClientGrantResponseContent>;
     deleteOrganizationClientGrants(organizationId: string, grantId: string): Promise<void>;

package/lib/tools/auth0/handlers/organizations.js

@@ -44,11 +44,13 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.schema = void 0;
 const lodash_1 = require("lodash");
+const auth0_1 = require("auth0");
 const default_1 = __importStar(require("./default"));
 const calculateChanges_1 = require("../../calculateChanges");
 const logger_1 = __importDefault(require("../../../logger"));
 const client_1 = require("../client");
 const utils_1 = require("../../../utils");
+const utils_2 = require("../../utils");
 exports.schema = {
     type: 'array',
     items: {
@@ -64,9 +66,15 @@ exports.schema = {
                     type: 'object',
                     properties: {
                         connection_id: { type: 'string' },
+                        organization_connection_name: { type: 'string' },
                         assign_membership_on_login: { type: 'boolean' },
                         show_as_button: { type: 'boolean' },
                         is_signup_enabled: { type: 'boolean' },
+                        organization_access_level: {
+                            type: 'string',
+                            enum: Object.values(auth0_1.Management.OrganizationAccessLevelEnum),
+                        },
+                        is_enabled: { type: 'boolean' },
                     },
                 },
             },
@@ -163,26 +171,25 @@ class OrganizationsHandler extends default_1.default {
         if ('discovery_domains' in organization) {
             delete organization.discovery_domains;
         }
-        const { data: created } = await this.client.organizations.create(organization);
+        const created = await this.client.organizations.create(organization);
+        if (!created.id) {
+            throw new Error(`Organization "${organization.name}" was created but the response did not include an ID. Skipping connection/grant association.`);
+        }
+        const createdId = created.id;
         if (typeof org.connections !== 'undefined' && org.connections.length > 0) {
-            await Promise.all(org.connections.map((conn) => this.client.organizations.enabledConnections.add(created.id, conn)));
+            await Promise.all(org.connections.map((conn) => this.client.organizations.connections.create(createdId, conn)));
         }
         if (typeof org.client_grants !== 'undefined' && org.client_grants.length > 0) {
-            await Promise.all(org.client_grants.map((organizationClientGrants) => this.createOrganizationClientGrants(created.id, this.getClientGrantIDByClientName(organizationClientGrants.client_id))));
+            await Promise.all(org.client_grants.map((organizationClientGrants) => this.createOrganizationClientGrants(createdId, this.getClientGrantIDByClientName(organizationClientGrants.client_id))));
         }
         if (typeof org.discovery_domains !== 'undefined' && org.discovery_domains.length > 0) {
-            await this.client.pool
-                .addEachTask({
-                data: org.discovery_domains,
-                generator: (discoveryDomain) => this.createOrganizationDiscoveryDomain(created.id, {
-                    domain: discoveryDomain?.domain,
-                    status: discoveryDomain?.status,
-                    use_for_organization_discovery: discoveryDomain?.use_for_organization_discovery,
-                }).catch((err) => {
-                    throw new Error(`Problem creating discovery domain ${discoveryDomain?.domain} for organization ${created.id}\n${err}`);
-                }),
-            })
-                .promise();
+            await Promise.all(org.discovery_domains.map((discoveryDomain) => this.createOrganizationDiscoveryDomain(createdId, {
+                domain: discoveryDomain?.domain,
+                status: discoveryDomain?.status,
+                use_for_organization_discovery: discoveryDomain?.use_for_organization_discovery,
+            }).catch((err) => {
+                throw new Error(`Problem creating discovery domain ${discoveryDomain?.domain} for organization ${createdId}\n${err}`);
+            })));
         }
         return created;
     }
@@ -217,23 +224,29 @@ class OrganizationsHandler extends default_1.default {
         const connectionsToUpdate = connections.filter((c) => existingConnections.find((x) => x.connection_id === c.connection_id &&
             (x.assign_membership_on_login !== c.assign_membership_on_login ||
                 x.show_as_button !== c.show_as_button ||
-                x.is_signup_enabled !== c.is_signup_enabled)));
+                x.is_signup_enabled !== c.is_signup_enabled ||
+                x.organization_access_level !== c.organization_access_level ||
+                x.organization_connection_name !== c.organization_connection_name ||
+                x.is_enabled !== (c.is_enabled ?? true))));
         // Handle updates first
-        await Promise.all(connectionsToUpdate.map((conn) => this.client.organizations.enabledConnections
+        await Promise.all(connectionsToUpdate.map((conn) => this.client.organizations.connections
             .update(params.id, conn.connection_id, {
+            organization_connection_name: conn.organization_connection_name,
             assign_membership_on_login: conn.assign_membership_on_login,
             show_as_button: conn.show_as_button,
             is_signup_enabled: conn.is_signup_enabled,
+            is_enabled: conn.is_enabled,
+            organization_access_level: conn.organization_access_level,
         })
             .catch(() => {
             throw new Error(`Problem updating Enabled Connection ${conn.connection_id} for organizations ${params.id}`);
         })));
-        await Promise.all(connectionsToAdd.map((conn) => this.client.organizations.enabledConnections
-            .add(params.id, (0, lodash_1.omit)(conn, 'connection'))
+        await Promise.all(connectionsToAdd.map((conn) => this.client.organizations.connections
+            .create(params.id, (0, lodash_1.omit)(conn, 'connection'))
             .catch(() => {
             throw new Error(`Problem adding Enabled Connection ${conn.connection_id} for organizations ${params.id}`);
         })));
-        await Promise.all(connectionsToRemove.map((conn) => this.client.organizations.enabledConnections
+        await Promise.all(connectionsToRemove.map((conn) => this.client.organizations.connections
             .delete(params.id, conn.connection_id)
             .catch(() => {
             throw new Error(`Problem removing Enabled Connection ${conn.connection_id} for organizations ${params.id}`);
@@ -366,7 +379,7 @@ class OrganizationsHandler extends default_1.default {
                 if (!org?.id) {
                     throw new Error(`Organization ${index} is missing an ID`);
                 }
-                const connections = await this.getOrganizationEnabledConnections(org.id);
+                const connections = await this.getOrganizationConnections(org.id);
                 org.connections = connections;
                 const organizationClientGrants = await this.getOrganizationClientGrants(org.id);
                 org.client_grants = organizationClientGrants?.map((clientGrant) => ({
@@ -394,6 +407,12 @@ class OrganizationsHandler extends default_1.default {
         // Do nothing if not set
         if (!organizations)
             return;
+        if ((0, utils_2.isDryRun)(this.config)) {
+            const { del, update, create } = await this.calcChanges(assets);
+            if (create.length === 0 && update.length === 0 && del.length === 0) {
+                return;
+            }
+        }
         // Gets organizations from destination tenant
         const existing = await this.getType();
         const existingConnections = await (0, client_1.paginate)(this.client.connections.list, {
@@ -432,9 +451,9 @@ class OrganizationsHandler extends default_1.default {
             await this.updateOrganizations(changes.update, existing);
         }
     }
-    async getOrganizationEnabledConnections(organizationId) {
+    async getOrganizationConnections(organizationId) {
         const allOrganizationConnections = [];
-        let organizationConnections = await this.client.organizations.enabledConnections.list(organizationId);
+        let organizationConnections = await this.client.organizations.connections.list(organizationId);
         // Process first page
         allOrganizationConnections.push(...organizationConnections.data);
         // Fetch remaining pages
@@ -498,14 +517,7 @@ class OrganizationsHandler extends default_1.default {
     }
     async createOrganizationDiscoveryDomain(organizationId, discoveryDomain) {
         logger_1.default.debug(`Creating discovery domain ${discoveryDomain.domain} for organization ${organizationId}`);
-        const orgDiscoveryDomain = await this.client.pool
-            .addSingleTask({
-            data: {
-                id: organizationId,
-            },
-            generator: (args) => this.client.organizations.discoveryDomains.create(args.id, discoveryDomain),
-        })
-            .promise();
+        const orgDiscoveryDomain = await this.client.organizations.discoveryDomains.create(organizationId, discoveryDomain);
         return orgDiscoveryDomain;
     }
     async updateOrganizationDiscoveryDomain(organizationId, discoveryDomainId, discoveryDomain, discoveryDomainUpdate) {
@@ -513,31 +525,15 @@ class OrganizationsHandler extends default_1.default {
         // stripUpdateFields does not support in sub modules
         const stripUpdateFields = ['verification_host', 'verification_txt'];
         logger_1.default.debug(`Stripping ${this.type} discovery domain read-only fields ${JSON.stringify(stripUpdateFields)}`);
-        const discoveryDomainUpdated = await this.client.pool
-            .addSingleTask({
-            data: {
-                id: organizationId,
-                discoveryDomainId: discoveryDomainId,
-            },
-            generator: (args) => this.client.organizations.discoveryDomains.update(args.id, args.discoveryDomainId, {
-                status: discoveryDomainUpdate.status,
-                use_for_organization_discovery: discoveryDomainUpdate.use_for_organization_discovery,
-            }),
-        })
-            .promise();
+        const discoveryDomainUpdated = await this.client.organizations.discoveryDomains.update(organizationId, discoveryDomainId, {
+            status: discoveryDomainUpdate.status,
+            use_for_organization_discovery: discoveryDomainUpdate.use_for_organization_discovery,
+        });
         return discoveryDomainUpdated;
     }
     async deleteOrganizationDiscoveryDomain(organizationId, discoveryDomain, discoveryDomainId) {
         logger_1.default.debug(`Deleting discovery domain ${discoveryDomain} for organization ${organizationId}`);
-        await this.client.pool
-            .addSingleTask({
-            data: {
-                id: organizationId,
-                discoveryDomainId: discoveryDomainId,
-            },
-            generator: (args) => this.client.organizations.discoveryDomains.delete(args.id, args.discoveryDomainId),
-        })
-            .promise();
+        await this.client.organizations.discoveryDomains.delete(organizationId, discoveryDomainId);
     }
 }
 exports.default = OrganizationsHandler;

package/lib/tools/auth0/handlers/pages.js

@@ -7,6 +7,7 @@ exports.schema = exports.pageNameMap = exports.supportedPages = void 0;
 const default_1 = __importDefault(require("./default"));
 const constants_1 = __importDefault(require("../../constants"));
 const client_1 = require("../client");
+const utils_1 = require("../../utils");
 exports.supportedPages = constants_1.default.PAGE_NAMES.filter((p) => p.includes('.json')).map((p) => p.replace('.json', ''));
 exports.pageNameMap = {
     guardian_multifactor: 'guardian_mfa_page',
@@ -113,6 +114,12 @@ class PagesHandler extends default_1.default {
         // Do nothing if not set
         if (!pages)
             return;
+        if ((0, utils_1.isDryRun)(this.config)) {
+            const { del, update, create } = await this.calcChanges(assets);
+            if (create.length === 0 && update.length === 0 && del.length === 0) {
+                return;
+            }
+        }
         // Login page is handled via the global client
         const loginPage = pages.find((p) => p.name === 'login');
         if (loginPage !== undefined) {

package/lib/tools/auth0/handlers/phoneProvider.js

@@ -45,6 +45,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.schema = void 0;
 const default_1 = __importStar(require("./default"));
 const logger_1 = __importDefault(require("../../../logger"));
+const utils_1 = require("../../utils");
 const TwilioConfigurationSchema = {
     type: 'object',
     required: ['sid', 'delivery_methods'],
@@ -164,6 +165,12 @@ class PhoneProviderHandler extends default_1.default {
         // Non-existing section means themes doesn't need to be processed
         if (!phoneProviders)
             return;
+        if ((0, utils_1.isDryRun)(this.config)) {
+            const { del, update, create } = await this.calcChanges(assets);
+            if (create.length === 0 && update.length === 0 && del.length === 0) {
+                return;
+            }
+        }
         // Empty array means themes should be deleted
         if (phoneProviders.length === 0) {
             await this.deletePhoneProviders();

package/lib/tools/auth0/handlers/prompts.js

@@ -48,6 +48,7 @@ const auth0_1 = require("auth0");
 const default_1 = __importStar(require("./default"));
 const types_1 = require("../../../types");
 const logger_1 = __importDefault(require("../../../logger"));
+const utils_1 = require("../../utils");
 const client_1 = require("../client");
 const promptTypes = [
     'login',
@@ -414,6 +415,12 @@ class PromptsHandler extends default_1.default {
         const { prompts } = assets;
         if (!prompts)
             return;
+        if ((0, utils_1.isDryRun)(this.config)) {
+            const { del, update, create } = await this.calcChanges(assets);
+            if (create.length === 0 && update.length === 0 && del.length === 0) {
+                return;
+            }
+        }
         const { partials, customText, screenRenderers, ...promptSettings } = prompts;
         if (!(0, lodash_1.isEmpty)(promptSettings)) {
             await this.client.prompts.updateSettings(promptSettings);

package/lib/tools/auth0/handlers/resourceServers.d.ts

@@ -1,6 +1,6 @@
 import { Management } from 'auth0';
 import DefaultHandler from './default';
-import { Assets, CalculatedChanges } from '../../../types';
+import { Assets } from '../../../types';
 export declare const excludeSchema: {
     type: string;
     items: {
@@ -96,7 +96,6 @@ export default class ResourceServersHandler extends DefaultHandler {
     constructor(options: DefaultHandler);
     objString(resourceServer: any): string;
     getType(): Promise<ResourceServer[]>;
-    calcChanges(assets: Assets): Promise<CalculatedChanges>;
     validate(assets: Assets): Promise<void>;
     processChanges(assets: Assets): Promise<void>;
     updateResourceServer(id: string, update: ResourceServer): Promise<Management.UpdateResourceServerResponseContent>;

package/lib/tools/auth0/handlers/resourceServers.js

@@ -8,7 +8,6 @@ const auth0_1 = require("auth0");
 const validationError_1 = __importDefault(require("../../validationError"));
 const constants_1 = __importDefault(require("../../constants"));
 const default_1 = __importDefault(require("./default"));
-const calculateChanges_1 = require("../../calculateChanges");
 const client_1 = require("../client");
 exports.excludeSchema = {
     type: 'array',
@@ -132,29 +131,6 @@ class ResourceServersHandler extends default_1.default {
         this.existing = sanitizeResourceServersFields(resourceServers);
         return this.existing;
     }
-    async calcChanges(assets) {
-        let { resourceServers } = assets;
-        // Do nothing if not set
-        if (!resourceServers)
-            return {
-                del: [],
-                create: [],
-                conflicts: [],
-                update: [],
-            };
-        const excluded = (assets.exclude && assets.exclude.resourceServers) || [];
-        let existing = await this.getType();
-        // Filter excluded
-        resourceServers = resourceServers.filter((r) => r.name && !excluded.includes(r.name));
-        existing = existing.filter((r) => r.name && !excluded.includes(r.name));
-        return (0, calculateChanges_1.calculateChanges)({
-            handler: this,
-            assets: resourceServers,
-            existing,
-            identifiers: this.identifiers,
-            allowDelete: !!this.config('AUTH0_ALLOW_DELETE'),
-        });
-    }
     async validate(assets) {
         const { resourceServers } = assets;
         // Do nothing if not set
@@ -171,7 +147,15 @@ class ResourceServersHandler extends default_1.default {
         // Do nothing if not set
         if (!resourceServers)
             return;
-        const changes = await this.calcChanges(assets);
+        const excluded = (assets.exclude && assets.exclude.resourceServers) || [];
+        const filterResourceServer = (items) => items.filter((r) => !excluded.includes(r.name));
+        const { del, update, create, conflicts } = await this.calcChanges(assets);
+        const changes = {
+            del: filterResourceServer(del),
+            update: filterResourceServer(update),
+            create: filterResourceServer(create),
+            conflicts: filterResourceServer(conflicts),
+        };
         await super.processChanges(assets, {
             ...changes,
         });

package/lib/tools/auth0/handlers/roles.js

@@ -47,6 +47,7 @@ const default_1 = __importStar(require("./default"));
 const calculateChanges_1 = require("../../calculateChanges");
 const logger_1 = __importDefault(require("../../../logger"));
 const client_1 = require("../client");
+const utils_1 = require("../../utils");
 exports.schema = {
     type: 'array',
     items: {
@@ -223,6 +224,12 @@ class RolesHandler extends default_1.default {
         // Do nothing if not set
         if (!roles)
             return;
+        if ((0, utils_1.isDryRun)(this.config)) {
+            const { del, update, create } = await this.calcChanges(assets);
+            if (create.length === 0 && update.length === 0 && del.length === 0) {
+                return;
+            }
+        }
         // Gets roles from destination tenant
         const existing = await this.getType();
         const changes = (0, calculateChanges_1.calculateChanges)({

package/lib/tools/auth0/handlers/rules.d.ts

@@ -50,6 +50,7 @@ export default class RulesHandler extends DefaultHandler {
     calcChanges(assets: any, includeExcluded?: boolean): Promise<CalculatedChanges & {
         reOrder: Asset[];
     }>;
+    dryRunChanges(assets: Assets): Promise<CalculatedChanges>;
     validate(assets: Assets): Promise<void>;
     processChanges(assets: Assets): Promise<void>;
 }

package/lib/tools/auth0/handlers/rules.js

@@ -134,6 +134,15 @@ class RulesHandler extends default_1.default {
             conflicts,
         };
     }
+    async dryRunChanges(assets) {
+        const { del, update, create, conflicts } = await this.calcChanges(assets);
+        return {
+            del,
+            update,
+            create,
+            conflicts,
+        };
+    }
     async validate(assets) {
         const { rules } = assets;
         // Do nothing if not set

package/lib/tools/auth0/handlers/rulesConfigs.d.ts

@@ -22,4 +22,5 @@ export default class RulesConfigsHandler extends DefaultHandler {
     getType(): Promise<Asset[] | null>;
     objString(item: any): string;
     calcChanges(assets: Assets): Promise<CalculatedChanges>;
+    dryRunChanges(assets: Assets): Promise<CalculatedChanges>;
 }

package/lib/tools/auth0/handlers/rulesConfigs.js

@@ -63,5 +63,8 @@ class RulesConfigsHandler extends default_1.default {
             conflicts: [],
         };
     }
+    async dryRunChanges(assets) {
+        return this.calcChanges(assets);
+    }
 }
 exports.default = RulesConfigsHandler;

package/lib/tools/auth0/handlers/scimHandler.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+const nconf_1 = __importDefault(require("nconf"));
 const logger_1 = __importDefault(require("../../../logger"));
 /**
  * The current version of this sdk use `node-auth0` v3. But `SCIM` features are not natively supported by v3.
@@ -39,7 +40,13 @@ class ScimHandler {
      */
     async createIdMap(connections) {
         this.idMap.clear();
-        logger_1.default.info('Reviewing connections for SCIM support. This may take a while...');
+        const logMsg = 'Reviewing connections for SCIM support. This may take a while...';
+        if (nconf_1.default.get('AUTH0_DRY_RUN')) {
+            logger_1.default.debug(logMsg);
+        }
+        else {
+            logger_1.default.info(logMsg);
+        }
         await this.poolClient
             .addEachTask({
             data: connections || [],

package/lib/tools/auth0/handlers/selfServiceProfiles.d.ts

@@ -53,7 +53,7 @@ export declare const schema: {
                 description: string;
                 items: {
                     type: string;
-                    enum: ("pingfederate" | "adfs" | "waad" | "google-apps" | "okta" | "oidc" | "samlp" | "auth0-samlp" | "okta-samlp" | "keycloak-samlp")[];
+                    enum: ("samlp" | "pingfederate" | "adfs" | "waad" | "google-apps" | "okta" | "oidc" | "auth0-samlp" | "okta-samlp" | "keycloak-samlp")[];
                 };
             };
             branding: {

package/lib/tools/auth0/handlers/selfServiceProfiles.js

@@ -47,8 +47,8 @@ const auth0_1 = require("auth0");
 const lodash_1 = require("lodash");
 const logger_1 = __importDefault(require("../../../logger"));
 const default_1 = __importStar(require("./default"));
-const calculateChanges_1 = require("../../calculateChanges");
 const client_1 = require("../client");
+const utils_1 = require("../../utils");
 const userAttributeProfiles_1 = require("./userAttributeProfiles");
 const SelfServiceProfileCustomTextLanguageEnum = {
     en: 'en',
@@ -180,8 +180,6 @@ class SelfServiceProfileHandler extends default_1.default {
         // Do nothing if not set
         if (!selfServiceProfiles)
             return;
-        // Gets SsProfileWithCustomText from destination tenant
-        const existing = await this.getType();
         const userAttributeProfiles = await this.getUserAttributeProfiles(this.client, selfServiceProfiles);
         selfServiceProfiles = selfServiceProfiles.map((ssProfile) => {
             if (this.hasConflictingUserAttribute(ssProfile)) {
@@ -202,26 +200,21 @@ class SelfServiceProfileHandler extends default_1.default {
             }
             return profile;
         });
-        const changes = (0, calculateChanges_1.calculateChanges)({
-            handler: this,
-            assets: selfServiceProfiles,
-            existing,
-            identifiers: this.identifiers,
-            allowDelete: !!this.config('AUTH0_ALLOW_DELETE'),
-        });
-        logger_1.default.debug(`Start processChanges for selfServiceProfiles [delete:${changes.del.length}] [update:${changes.update.length}], [create:${changes.create.length}]`);
-        const myChanges = [
-            { del: changes.del },
-            { create: changes.create },
-            { update: changes.update },
-        ];
+        const { del, update, create } = await this.calcChanges({ ...assets, selfServiceProfiles });
+        if ((0, utils_1.isDryRun)(this.config)) {
+            if (create.length === 0 && update.length === 0 && del.length === 0) {
+                return;
+            }
+        }
+        logger_1.default.debug(`Start processChanges for selfServiceProfiles [delete:${del.length}] [update:${update.length}], [create:${create.length}]`);
+        const myChanges = [{ del: del }, { create: create }, { update: update }];
         await Promise.all(myChanges.map(async (change) => {
             switch (true) {
                 case change.del && change.del.length > 0:
                     await this.deleteSelfServiceProfiles(change.del || []);
                     break;
                 case change.create && change.create.length > 0:
-                    await this.createSelfServiceProfiles(changes.create);
+                    await this.createSelfServiceProfiles(change.create);
                     break;
                 case change.update && change.update.length > 0:
                     if (change.update)

package/lib/tools/auth0/handlers/tenant.d.ts

@@ -4,6 +4,10 @@ import { Asset, Assets } from '../../../types';
 export declare const schema: {
     type: string;
     properties: {
+        client_id_metadata_document_supported: {
+            type: string;
+            description: string;
+        };
         default_token_quota: {
             type: string;
             properties: {
@@ -65,9 +69,17 @@ export declare const schema: {
             type: string[];
             description: string;
         };
+        resource_parameter_profile: {
+            type: string;
+            enum: string[];
+            description: string;
+        };
     };
 };
-export type Tenant = Management.GetTenantSettingsResponseContent;
+export interface Tenant extends Management.GetTenantSettingsResponseContent {
+    client_id_metadata_document_supported?: boolean;
+    resource_parameter_profile?: Management.TenantSettingsResourceParameterProfile;
+}
 type TenantSettingsFlags = Management.TenantSettingsFlags;
 export declare const allowedTenantFlags: string[];
 export declare const removeUnallowedTenantFlags: (proposedFlags: TenantSettingsFlags | undefined) => TenantSettingsFlags;

package/lib/tools/auth0/handlers/tenant.js

@@ -43,11 +43,14 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.removeUnallowedTenantFlags = exports.allowedTenantFlags = exports.schema = void 0;
+const lodash_1 = require("lodash");
+const nconf_1 = __importDefault(require("nconf"));
 const validationError_1 = __importDefault(require("../../validationError"));
 const default_1 = __importStar(require("./default"));
 const pages_1 = require("./pages");
 const utils_1 = require("../../utils");
 const logger_1 = __importDefault(require("../../../logger"));
+const sessionDurationsToMinutes_1 = __importDefault(require("../../../sessionDurationsToMinutes"));
 const tokenQuotaConfigurationSchema = {
     type: 'object',
     properties: {
@@ -76,6 +79,10 @@ const tokenQuotaConfigurationSchema = {
 exports.schema = {
     type: 'object',
     properties: {
+        client_id_metadata_document_supported: {
+            type: 'boolean',
+            description: 'Whether the authorization server supports retrieving client metadata from a client_id URL.',
+        },
         default_token_quota: {
             type: 'object',
             properties: {
@@ -89,6 +96,11 @@ exports.schema = {
             type: ['boolean', 'null'],
             description: 'Whether to skip the confirmation prompt for non-verifiable callback URIs',
         },
+        resource_parameter_profile: {
+            type: 'string',
+            enum: ['audience', 'compatibility'],
+            description: 'OAuth resource parameter compatibility mode for specifying the protected resource.',
+        },
     },
 };
 const blockPageKeys = [
@@ -148,8 +160,14 @@ const removeUnallowedTenantFlags = (proposedFlags) => {
         };
     }, {});
     if (removedFlags.length > 0) {
-        logger_1.default.warn(`The following tenant flag${removedFlags.length > 1 ? 's have not been' : ' has not been'} updated because deemed incompatible with the target tenant: ${removedFlags.join(', ')}
-      ${removedFlags.length > 1 ? 'These flags' : 'This flag'} can likely be removed from the tenant definition file. If you believe this removal is an error, please report via a Github issue.`);
+        const logMsg = `The following tenant flag${removedFlags.length > 1 ? 's have not been' : ' has not been'} updated because deemed incompatible with the target tenant: ${removedFlags.join(', ')}
+      ${removedFlags.length > 1 ? 'These flags' : 'This flag'} can likely be removed from the tenant definition file. If you believe this removal is an error, please report via a Github issue.`;
+        if (nconf_1.default.get('AUTH0_DRY_RUN')) {
+            logger_1.default.debug(logMsg);
+        }
+        else {
+            logger_1.default.warn(logMsg);
+        }
     }
     return filteredFlags;
 };
@@ -187,6 +205,12 @@ class TenantHandler extends default_1.default {
         // Do nothing if not set
         if (!tenant)
             return;
+        if ((0, utils_1.isDryRun)(this.config)) {
+            const { update } = await this.calcChanges(assets);
+            if (update.length === 0) {
+                return;
+            }
+        }
         const updatedTenant = {
             ...tenant,
             flags: tenant.flags
@@ -198,10 +222,30 @@ class TenantHandler extends default_1.default {
                 delete updatedTenant.flags;
             }
         }
+        if (tenant.flags?.enable_custom_domain_in_emails !== undefined) {
+            logger_1.default.warn('The "enable_custom_domain_in_emails" tenant flag is deprecated. ' +
+                'Use the "is_default" field on customDomains to configure the default domain instead. ' +
+                'The flag will still be applied for now but will be removed in a future release.');
+        }
         if (updatedTenant && Object.keys(updatedTenant).length > 0) {
-            await this.client.tenants.settings.update(updatedTenant);
+            const sessionDurations = (0, sessionDurationsToMinutes_1.default)({
+                session_lifetime: updatedTenant?.session_lifetime,
+                idle_session_lifetime: updatedTenant?.idle_session_lifetime,
+                ephemeral_session_lifetime: updatedTenant?.ephemeral_session_lifetime,
+                idle_ephemeral_session_lifetime: updatedTenant?.idle_ephemeral_session_lifetime,
+            });
+            let updateTenantPayload = updatedTenant;
+            if (!(0, lodash_1.isEmpty)(sessionDurations)) {
+                updateTenantPayload = { ...updateTenantPayload, ...sessionDurations };
+                // context: https://github.com/auth0/auth0-deploy-cli/pull/471
+                delete updateTenantPayload.session_lifetime;
+                delete updateTenantPayload.idle_session_lifetime;
+                delete updateTenantPayload.ephemeral_session_lifetime;
+                delete updateTenantPayload.idle_ephemeral_session_lifetime;
+            }
+            await this.client.tenants.settings.update(updateTenantPayload);
             this.updated += 1;
-            this.didUpdate(updatedTenant);
+            this.didUpdate(updateTenantPayload);
         }
     }
 }