auth0 2.38.1 → 2.41.0

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Change Log
 
+## [v2.41.0](https://github.com/auth0/node-auth0/tree/v2.41.0) (2022-05-20)
+
+[Full Changelog](https://github.com/auth0/node-auth0/compare/v2.40.0...v2.41.0)
+
+**Added**
+
+- Added ClientsManager.rotateClientSecret method [\#721](https://github.com/auth0/node-auth0/pull/721) ([sbmelvin](https://github.com/sbmelvin))
+
+## [v2.40.0](https://github.com/auth0/node-auth0/tree/v2.40.0) (2022-02-11)
+
+[Full Changelog](https://github.com/auth0/node-auth0/compare/v2.39.0...v2.40.0)
+
+**Added**
+
+- [CAUTH-1270]: feat(attack protection): add three features (bf, sipt, bpd) [\#705](https://github.com/auth0/node-auth0/pull/705) ([sdwvit](https://github.com/sdwvit))
+
+## [v2.39.0](https://github.com/auth0/node-auth0/tree/v2.39.0) (2022-01-31)
+
+[Full Changelog](https://github.com/auth0/node-auth0/compare/v2.38.1...v2.39.0)
+
+**Added**
+
+- feat: update draft deploy [\#702](https://github.com/auth0/node-auth0/pull/702) ([TwelveNights](https://github.com/TwelveNights))
+
 ## [v2.38.1](https://github.com/auth0/node-auth0/tree/v2.38.1) (2022-01-27)
 
 [Full Changelog](https://github.com/auth0/node-auth0/compare/v2.38.0...v2.38.1)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth0",
-  "version": "2.38.1",
+  "version": "2.41.0",
   "description": "SDK for Auth0 API v2",
   "main": "src/index.js",
   "sideEffects": false,
@@ -34,7 +34,7 @@
   },
   "homepage": "https://github.com/auth0/node-auth0",
   "dependencies": {
-    "axios": "^0.24.0",
+    "axios": "^0.26.1",
     "form-data": "^3.0.1",
     "jsonwebtoken": "^8.5.1",
     "jwks-rsa": "^1.12.1",

package/src/management/ActionsManager.js

@@ -531,6 +531,7 @@ class ActionsManager {
    * @param   {object}    params                Action parameters.
    * @param   {string}    params.id      Action ID.
    * @param   {string}    params.version_id     Action ID.
+   * @param   {boolean}   params.update_draft   Update draft
    * @param   {Function}  [cb]                  Callback function.
    * @returns  {Promise|undefined}
    */
@@ -542,11 +543,18 @@ class ActionsManager {
       delete params.action_id;
     }
 
+    const body = {};
+
+    if (params.update_draft) {
+      body.update_draft = params.update_draft;
+      delete params.update_draft;
+    }
+
     if (cb && cb instanceof Function) {
-      return this.actionVersionDeploy.create(params, {}, cb);
+      return this.actionVersionDeploy.create(params, body, cb);
     }
 
-    return this.actionVersionDeploy.create(params, {});
+    return this.actionVersionDeploy.create(params, body);
   }
 
   /**

package/src/management/AttackProtectionManager.js

@@ -0,0 +1,187 @@
+const { ArgumentError } = require('rest-facade');
+const Auth0RestClient = require('../Auth0RestClient');
+const RetryRestClient = require('../RetryRestClient');
+
+/**
+ * Simple facade for consuming a REST API endpoint.
+ *
+ * @external RestClient
+ * @see https://github.com/ngonzalvez/rest-facade
+ */
+
+class AttackProtectionManager {
+  /**
+   * @class
+   * Abstracts interaction with the attack-protection endpoints.
+   * @class
+   * @param {object} options                 The client options.
+   * @param {string} options.baseUrl         The URL of the API.
+   * @param {object} [options.headers]       Headers to be included in all requests.
+   * @param {object} [options.retry]         Retry Policy Config
+   * @param {object} [options.tokenProvider] Management API Token Provider
+   */
+  constructor(options) {
+    if (options === null || typeof options !== 'object') {
+      throw new ArgumentError('Must provide manager options');
+    }
+
+    if (options.baseUrl === null || options.baseUrl === undefined) {
+      throw new ArgumentError('Must provide a base URL for the API');
+    }
+
+    if ('string' !== typeof options.baseUrl || options.baseUrl.length === 0) {
+      throw new ArgumentError('The provided base URL is invalid');
+    }
+
+    const clientOptions = {
+      errorFormatter: { message: 'message', name: 'error' },
+      headers: options.headers,
+      query: { repeatParams: false },
+    };
+
+    const bruteForceProtection = new Auth0RestClient(
+      `${options.baseUrl}/attack-protection/brute-force-protection`,
+      clientOptions,
+      options.tokenProvider
+    );
+    this.bruteForceProtection = new RetryRestClient(bruteForceProtection, options.retry);
+
+    const suspiciousIpThrottling = new Auth0RestClient(
+      `${options.baseUrl}/attack-protection/suspicious-ip-throttling`,
+      clientOptions,
+      options.tokenProvider
+    );
+    this.suspiciousIpThrottling = new RetryRestClient(suspiciousIpThrottling, options.retry);
+
+    const breachedPasswordDetection = new Auth0RestClient(
+      `${options.baseUrl}/attack-protection/breached-password-detection`,
+      clientOptions,
+      options.tokenProvider
+    );
+    this.breachedPasswordDetection = new RetryRestClient(breachedPasswordDetection, options.retry);
+  }
+
+  /**
+   * Get the Brute Force Protection configuration.
+   *
+   * @example
+   * management.attackProtection.getBruteForceConfig(params, function (err, bruteForceConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Brute force config
+   *   console.log(bruteForceConfig);
+   * });
+   * @param   {object}    params            Brute force parameters (leave empty).
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  getBruteForceConfig(...args) {
+    return this.bruteForceProtection.get(...args);
+  }
+
+  /**
+   * Update the Brute Force Protection configuration.
+   *
+   * @example
+   * management.attackProtection.updateBruteForceConfig(params, data, function (err, bruteForceConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Brute force config
+   *   console.log(bruteForceConfig);
+   * });
+   * @param   {object}    params            Brute force parameters (leave empty).
+   * @param   {object}    data              Updated brute force configuration.
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  updateBruteForceConfig(...args) {
+    return this.bruteForceProtection.patch(...args);
+  }
+
+  /**
+   * Get the Suspicious IP Throttling configuration.
+   *
+   * @example
+   * management.attackProtection.getSuspiciousIpThrottlingConfig(params, function (err, suspiciousIpThrottlingConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Access suspicious IP throttling configuration
+   *   console.log(suspiciousIpThrottlingConfig);
+   * });
+   * @param   {object}    params            Suspicious IP throttling parameters (leave empty).
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  getSuspiciousIpThrottlingConfig(...args) {
+    return this.suspiciousIpThrottling.get(...args);
+  }
+
+  /**
+   * Update the Suspicious IP Throttling configuration.
+   *
+   * @example
+   * management.attackProtection.updateSuspiciousIpThrottlingConfig(params, data, function (err, suspiciousIpThrottlingConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Access suspicious IP throttling configuration
+   *   console.log(suspiciousIpThrottlingConfig);
+   * });
+   * @param   {object}    params            Suspicious IP throttling parameters (leave empty).
+   * @param   {object}    data              Updated suspicious IP throttling configuration.
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  updateSuspiciousIpThrottlingConfig(...args) {
+    return this.suspiciousIpThrottling.patch(...args);
+  }
+
+  /**
+   * Get the Breached Password Detection configuration.
+   *
+   * @example
+   * management.attackProtection.getBreachedPasswordDetectionConfig(params, function (err, breachedPasswordDetectionConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Access breached password detection configuration
+   *   console.log(breachedPasswordDetectionConfig);
+   * });
+   * @param   {object}    params            Breached password detection parameters (leave empty).
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  getBreachedPasswordDetectionConfig(...args) {
+    return this.breachedPasswordDetection.get(...args);
+  }
+
+  /**
+   * Update the breached password detection configuration.
+   *
+   * @example
+   * management.attackProtection.updateBreachedPasswordDetectionConfig(params, data, function (err, breachedPasswordDetectionConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Access breached password detection configuration
+   *   console.log(breachedPasswordDetectionConfig);
+   * });
+   * @param   {object}    params            Breached password detection parameters (leave empty).
+   * @param   {object}    data              Updated breached password detection configuration.
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  updateBreachedPasswordDetectionConfig(...args) {
+    return this.breachedPasswordDetection.patch(...args);
+  }
+}
+module.exports = AttackProtectionManager;

package/src/management/ClientsManager.js

@@ -54,6 +54,19 @@ class ClientsManager {
       options.tokenProvider
     );
     this.resource = new RetryRestClient(auth0RestClient, options.retry);
+
+    /**
+     * Provides an abstraction layer for consuming the
+     * {@link https://auth0.com/docs/api/management/v2#!/Clients/post_rotate_secret Auth0 Clients Rotate a client secret}.
+     *
+     * @type {external:RestClient}
+     */
+    const auth0RotateSecretClient = new Auth0RestClient(
+      `${options.baseUrl}/clients/:client_id/rotate-secret`,
+      clientOptions,
+      options.tokenProvider
+    );
+    this.rotateSecretResource = new RetryRestClient(auth0RotateSecretClient, options.retry);
   }
 
   /**
@@ -166,6 +179,36 @@ class ClientsManager {
   delete(...args) {
     return this.resource.delete(...args);
   }
+
+  /**
+   * Rotate a client secret
+   *
+   * @example
+   * management.clients.rotateClientSecret({ client_id: CLIENT_ID }, function (err, user) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Client secret rotated.
+   * });
+   * @param   {object}    params              params object
+   * @param   {string}    params.client_id    Application client ID.
+   * @returns  {Promise|undefined}
+   */
+  rotateClientSecret(params, cb) {
+    const query = params || {};
+
+    // Require a client ID.
+    if (!params.client_id) {
+      throw new ArgumentError('The client_id cannot be null or undefined');
+    }
+
+    if (cb && cb instanceof Function) {
+      return this.rotateSecretResource.create(query, {}, cb);
+    }
+
+    return this.rotateSecretResource.create(query, {});
+  }
 }
 
 module.exports = ClientsManager;

package/src/management/index.js

@@ -10,6 +10,7 @@ const GrantsManager = require('./GrantsManager');
 const UsersManager = require('./UsersManager');
 const UserBlocksManager = require('./UserBlocksManager');
 const ConnectionsManager = require('./ConnectionsManager');
+const AttackProtectionManager = require('./AttackProtectionManager');
 const BlacklistedTokensManager = require('./BlacklistedTokensManager');
 const RulesManager = require('./RulesManager');
 const DeviceCredentialsManager = require('./DeviceCredentialsManager');
@@ -360,6 +361,13 @@ class ManagementClient {
      * @type {OrganizationsManager}
      */
     this.organizations = new OrganizationsManager(managerOptions);
+
+    /**
+     * Attack Protection Manager
+     *
+     * @type {AttackProtectionManager}
+     */
+    this.attackProtection = new AttackProtectionManager(managerOptions);
   }
 
   /**
@@ -3218,10 +3226,10 @@ class ManagementClient {
   }
 
   /**
-   * Get the new universal login template.
+   * Set the new universal login template.
    *
    * @example
-   * management.setBrandingUniversalLoginTemplate({ template: "a template" }, function (err, template) {
+   * management.setBrandingUniversalLoginTemplate({}, { template: "a template" }, function (err, template) {
    *   if (err) {
    *     // Handle error.
    *   }