auth0-deploy-cli 8.43.0 → 8.45.0

package/lib/tools/auth0/handlers/phoneProvider.js

@@ -202,12 +202,20 @@ class PhoneProviderHandler extends default_1.default {
         }
         const currentProviders = await this.getPhoneProviders();
         const providerReqPayload = (() => {
+            // Work on a shallow copy so we don't mutate the caller's asset (phoneProviders[0]).
+            // The SDK response type doesn't declare `credentials`, so widen it here.
+            const payload = { ...phoneProviders[0] };
             // Removing id from update and create payloads, otherwise API will error
             // id may be required to handle if `--export_ids=true`
-            const payload = phoneProviders[0];
-            if (payload && 'id' in payload) {
+            if ('id' in payload) {
                 delete payload.id;
             }
+            // The `custom` provider requires a `credentials` object in the payload even
+            // when it is empty. Exported configs omit credentials, so inject an empty
+            // object here to avoid a "Missing required property: credentials" 400 error.
+            if (payload.name === 'custom' && payload.credentials == null) {
+                payload.credentials = {};
+            }
             return payload;
         })();
         if (currentProviders === null || currentProviders.length === 0) {

package/lib/tools/calculateDryRunChanges.js

@@ -108,6 +108,13 @@ function normalizeArrayValues(values) {
         .map((value) => normalizeValue(value))
         .sort((left, right) => JSON.stringify(left).localeCompare(JSON.stringify(right)));
 }
+/**
+ * Serializes a value to a human-readable string for use in diff messages.
+ * Objects and arrays are JSON-stringified to avoid "[object Object]" output.
+ */
+function formatDiffValue(value) {
+    return typeof value === 'object' && value !== null ? JSON.stringify(value) : String(value);
+}
 /**
  * Writes the accumulated diff log to a JSON file on disk.
  * Useful for CI pipelines that want a machine-readable dry-run report.
@@ -179,7 +186,7 @@ function getObjectDifferences(localObj, remoteObj, keyObjPath = '', resourceType
                         differences.push(...nestedDifferences);
                     }
                     else if (item !== normalizedRemoteValue[index]) {
-                        const message = `Array item difference at [${currentPath}[${index}]]: local:${item} vs remote:${normalizedRemoteValue[index]}`;
+                        const message = `Array item difference at [${currentPath}[${index}]]: local:${formatDiffValue(item)} vs remote:${formatDiffValue(normalizedRemoteValue[index])}`;
                         differences.push(message);
                     }
                 });
@@ -204,13 +211,10 @@ function getObjectDifferences(localObj, remoteObj, keyObjPath = '', resourceType
             differences.push(...nestedDifferences);
             return;
         }
-        // Compare primitive values — omit array indices from path to reduce log noise
+        // Compare primitive values
         if (localValue !== remoteValue) {
-            let arrayPathRegex = new RegExp(/\[\d+\]/g);
-            if (!arrayPathRegex.test(currentPath)) {
-                const message = `Value difference for [${currentPath}]: local:${localValue} vs remote:${remoteValue}`;
-                differences.push(message);
-            }
+            const message = `Value difference for [${currentPath}]: local:${localValue} vs remote:${remoteValue}`;
+            differences.push(message);
         }
     });
     return differences;
@@ -242,7 +246,7 @@ function calculateDryRunChanges({ type, assets, existing, identifiers = ['id', '
     const create = [];
     const conflicts = [];
     const localAssets = (Array.isArray(assets) ? [...assets] : [assets]).map((asset) => type === 'tenant' ? normalizeTenantForDryRun(asset) : asset);
-    const remoteAssets = (Array.isArray(existing) ? [...existing] : [existing]).map((asset) => (type === 'tenant' ? normalizeTenantForDryRun(asset) : asset));
+    const remoteAssets = (Array.isArray(existing) ? [...existing] : existing ? [existing] : []).map((asset) => (type === 'tenant' ? normalizeTenantForDryRun(asset) : asset));
     // Helper: returns true if a local and remote asset share at least one identifier value
     const assetsMatch = (localAsset, remoteAsset) => identifiers.some((id) => {
         if (Array.isArray(id)) {

package/lib/tools/constants.d.ts

@@ -86,6 +86,7 @@ declare const constants: {
     FLOWS_VAULT_DIRECTORY: string;
     SELF_SERVICE_PROFILE_DIRECTORY: string;
     NETWORK_ACLS_DIRECTORY: string;
+    NETWORK_ACL_KEYS_DIRECTORY: string;
     USER_ATTRIBUTE_PROFILES_DIRECTORY: string;
     CONNECTION_PROFILES_DIRECTORY: string;
     TOKEN_EXCHANGE_PROFILES_DIRECTORY: string;

package/lib/tools/constants.js

@@ -216,6 +216,7 @@ const constants = {
     FLOWS_VAULT_DIRECTORY: 'flow-vault-connections',
     SELF_SERVICE_PROFILE_DIRECTORY: 'self-service-profiles',
     NETWORK_ACLS_DIRECTORY: 'network-acls',
+    NETWORK_ACL_KEYS_DIRECTORY: 'network-acl-keys',
     USER_ATTRIBUTE_PROFILES_DIRECTORY: 'user-attribute-profiles',
     CONNECTION_PROFILES_DIRECTORY: 'connection-profiles',
     TOKEN_EXCHANGE_PROFILES_DIRECTORY: 'token-exchange-profiles',

package/lib/types.d.ts

@@ -16,6 +16,7 @@ import { SsProfileWithCustomText } from './tools/auth0/handlers/selfServiceProfi
 import { PhoneProvider } from './tools/auth0/handlers/phoneProvider';
 import { PhoneTemplate } from './tools/auth0/handlers/phoneTemplates';
 import { NetworkACL } from './tools/auth0/handlers/networkACLs';
+import { NetworkAclKey } from './tools/auth0/handlers/networkACLKeys';
 import { UserAttributeProfile } from './tools/auth0/handlers/userAttributeProfiles';
 import { AttackProtection } from './tools/auth0/handlers/attackProtection';
 import { TokenExchangeProfile } from './tools/auth0/handlers/tokenExchangeProfiles';
@@ -156,6 +157,7 @@ export type Assets = Partial<{
     flows: Flow[] | null;
     flowVaultConnections: FlowVaultConnection[] | null;
     selfServiceProfiles: SsProfileWithCustomText[] | null;
+    networkACLKeys: NetworkAclKey[] | null;
     networkACLs: NetworkACL[] | null;
     userAttributeProfiles: UserAttributeProfile[] | null;
     userAttributeProfilesWithId: UserAttributeProfile[] | null;
@@ -183,7 +185,7 @@ export type DetailedDryRunChanges = {
         changes: DetailedDryRunChange[];
     };
 };
-export type AssetTypes = 'rules' | 'rulesConfigs' | 'hooks' | 'pages' | 'databases' | 'clientGrants' | 'resourceServers' | 'clients' | 'connections' | 'tenant' | 'emailProvider' | 'emailTemplates' | 'guardianFactors' | 'guardianFactorProviders' | 'guardianFactorTemplates' | 'guardianPhoneFactorMessageTypes' | 'guardianPhoneFactorSelectedProvider' | 'guardianPolicies' | 'roles' | 'actions' | 'actionModules' | 'organizations' | 'triggers' | 'attackProtection' | 'riskAssessment' | 'branding' | 'phoneProviders' | 'phoneTemplates' | 'logStreams' | 'prompts' | 'customDomains' | 'themes' | 'forms' | 'flows' | 'flowVaultConnections' | 'selfServiceProfiles' | 'networkACLs' | 'userAttributeProfiles' | 'connectionProfiles' | 'tokenExchangeProfiles' | 'supplementalSignals' | 'rateLimitPolicies' | 'eventStreams' | 'clientAuthCredentials';
+export type AssetTypes = 'rules' | 'rulesConfigs' | 'hooks' | 'pages' | 'databases' | 'clientGrants' | 'resourceServers' | 'clients' | 'connections' | 'tenant' | 'emailProvider' | 'emailTemplates' | 'guardianFactors' | 'guardianFactorProviders' | 'guardianFactorTemplates' | 'guardianPhoneFactorMessageTypes' | 'guardianPhoneFactorSelectedProvider' | 'guardianPolicies' | 'roles' | 'actions' | 'actionModules' | 'organizations' | 'triggers' | 'attackProtection' | 'riskAssessment' | 'branding' | 'phoneProviders' | 'phoneTemplates' | 'logStreams' | 'prompts' | 'customDomains' | 'themes' | 'forms' | 'flows' | 'flowVaultConnections' | 'selfServiceProfiles' | 'networkACLKeys' | 'networkACLs' | 'userAttributeProfiles' | 'connectionProfiles' | 'tokenExchangeProfiles' | 'supplementalSignals' | 'rateLimitPolicies' | 'eventStreams' | 'clientAuthCredentials';
 export type KeywordMappings = {
     [key: string]: (string | number)[] | string | number;
 };

package/lib/utils.js

@@ -301,12 +301,15 @@ exports.decodeBase64ToCertString = decodeBase64ToCertString;
 // Format connection options by converting client IDs to client names for SAML connections
 const getFormattedOptions = (connection, clients) => {
     try {
+        const { idpinitiated } = connection.options;
         return {
             options: {
                 ...connection.options,
                 idpinitiated: {
-                    ...connection.options.idpinitiated,
-                    client_id: convertClientIdToName(connection.options.idpinitiated.client_id, clients),
+                    ...idpinitiated,
+                    ...(idpinitiated.client_id && {
+                        client_id: convertClientIdToName(idpinitiated.client_id, clients),
+                    }),
                 },
             },
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth0-deploy-cli",
-  "version": "8.43.0",
+  "version": "8.45.0",
   "description": "A command line tool for deploying updates to your Auth0 tenant",
   "main": "lib/index.js",
   "bin": {
@@ -35,7 +35,7 @@
   "dependencies": {
     "@clack/prompts": "1.4.0",
     "ajv": "^6.12.6",
-    "auth0": "^6.2.0",
+    "auth0": "^6.4.0",
     "chalk": "5.6.2",
     "dot-prop": "^5.3.0",
     "fs-extra": "^10.1.0",