auth0 2.39.0 → 2.40.0

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Change Log
 
+## [v2.40.0](https://github.com/auth0/node-auth0/tree/v2.40.0) (2022-02-11)
+
+[Full Changelog](https://github.com/auth0/node-auth0/compare/v2.39.0...v2.40.0)
+
+**Added**
+
+- [CAUTH-1270]: feat(attack protection): add three features (bf, sipt, bpd) [\#705](https://github.com/auth0/node-auth0/pull/705) ([sdwvit](https://github.com/sdwvit))
+
 ## [v2.39.0](https://github.com/auth0/node-auth0/tree/v2.39.0) (2022-01-31)
 
 [Full Changelog](https://github.com/auth0/node-auth0/compare/v2.38.1...v2.39.0)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth0",
-  "version": "2.39.0",
+  "version": "2.40.0",
   "description": "SDK for Auth0 API v2",
   "main": "src/index.js",
   "sideEffects": false,
@@ -34,7 +34,7 @@
   },
   "homepage": "https://github.com/auth0/node-auth0",
   "dependencies": {
-    "axios": "^0.24.0",
+    "axios": "^0.25.0",
     "form-data": "^3.0.1",
     "jsonwebtoken": "^8.5.1",
     "jwks-rsa": "^1.12.1",

package/src/management/AttackProtectionManager.js

@@ -0,0 +1,187 @@
+const { ArgumentError } = require('rest-facade');
+const Auth0RestClient = require('../Auth0RestClient');
+const RetryRestClient = require('../RetryRestClient');
+
+/**
+ * Simple facade for consuming a REST API endpoint.
+ *
+ * @external RestClient
+ * @see https://github.com/ngonzalvez/rest-facade
+ */
+
+class AttackProtectionManager {
+  /**
+   * @class
+   * Abstracts interaction with the attack-protection endpoints.
+   * @class
+   * @param {object} options                 The client options.
+   * @param {string} options.baseUrl         The URL of the API.
+   * @param {object} [options.headers]       Headers to be included in all requests.
+   * @param {object} [options.retry]         Retry Policy Config
+   * @param {object} [options.tokenProvider] Management API Token Provider
+   */
+  constructor(options) {
+    if (options === null || typeof options !== 'object') {
+      throw new ArgumentError('Must provide manager options');
+    }
+
+    if (options.baseUrl === null || options.baseUrl === undefined) {
+      throw new ArgumentError('Must provide a base URL for the API');
+    }
+
+    if ('string' !== typeof options.baseUrl || options.baseUrl.length === 0) {
+      throw new ArgumentError('The provided base URL is invalid');
+    }
+
+    const clientOptions = {
+      errorFormatter: { message: 'message', name: 'error' },
+      headers: options.headers,
+      query: { repeatParams: false },
+    };
+
+    const bruteForceProtection = new Auth0RestClient(
+      `${options.baseUrl}/attack-protection/brute-force-protection`,
+      clientOptions,
+      options.tokenProvider
+    );
+    this.bruteForceProtection = new RetryRestClient(bruteForceProtection, options.retry);
+
+    const suspiciousIpThrottling = new Auth0RestClient(
+      `${options.baseUrl}/attack-protection/suspicious-ip-throttling`,
+      clientOptions,
+      options.tokenProvider
+    );
+    this.suspiciousIpThrottling = new RetryRestClient(suspiciousIpThrottling, options.retry);
+
+    const breachedPasswordDetection = new Auth0RestClient(
+      `${options.baseUrl}/attack-protection/breached-password-detection`,
+      clientOptions,
+      options.tokenProvider
+    );
+    this.breachedPasswordDetection = new RetryRestClient(breachedPasswordDetection, options.retry);
+  }
+
+  /**
+   * Get the Brute Force Protection configuration.
+   *
+   * @example
+   * management.attackProtection.getBruteForceConfig(params, function (err, bruteForceConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Brute force config
+   *   console.log(bruteForceConfig);
+   * });
+   * @param   {object}    params            Brute force parameters (leave empty).
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  getBruteForceConfig(...args) {
+    return this.bruteForceProtection.get(...args);
+  }
+
+  /**
+   * Update the Brute Force Protection configuration.
+   *
+   * @example
+   * management.attackProtection.updateBruteForceConfig(params, data, function (err, bruteForceConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Brute force config
+   *   console.log(bruteForceConfig);
+   * });
+   * @param   {object}    params            Brute force parameters (leave empty).
+   * @param   {object}    data              Updated brute force configuration.
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  updateBruteForceConfig(...args) {
+    return this.bruteForceProtection.patch(...args);
+  }
+
+  /**
+   * Get the Suspicious IP Throttling configuration.
+   *
+   * @example
+   * management.attackProtection.getSuspiciousIpThrottlingConfig(params, function (err, suspiciousIpThrottlingConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Access suspicious IP throttling configuration
+   *   console.log(suspiciousIpThrottlingConfig);
+   * });
+   * @param   {object}    params            Suspicious IP throttling parameters (leave empty).
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  getSuspiciousIpThrottlingConfig(...args) {
+    return this.suspiciousIpThrottling.get(...args);
+  }
+
+  /**
+   * Update the Suspicious IP Throttling configuration.
+   *
+   * @example
+   * management.attackProtection.updateSuspiciousIpThrottlingConfig(params, data, function (err, suspiciousIpThrottlingConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Access suspicious IP throttling configuration
+   *   console.log(suspiciousIpThrottlingConfig);
+   * });
+   * @param   {object}    params            Suspicious IP throttling parameters (leave empty).
+   * @param   {object}    data              Updated suspicious IP throttling configuration.
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  updateSuspiciousIpThrottlingConfig(...args) {
+    return this.suspiciousIpThrottling.patch(...args);
+  }
+
+  /**
+   * Get the Breached Password Detection configuration.
+   *
+   * @example
+   * management.attackProtection.getBreachedPasswordDetectionConfig(params, function (err, breachedPasswordDetectionConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Access breached password detection configuration
+   *   console.log(breachedPasswordDetectionConfig);
+   * });
+   * @param   {object}    params            Breached password detection parameters (leave empty).
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  getBreachedPasswordDetectionConfig(...args) {
+    return this.breachedPasswordDetection.get(...args);
+  }
+
+  /**
+   * Update the breached password detection configuration.
+   *
+   * @example
+   * management.attackProtection.updateBreachedPasswordDetectionConfig(params, data, function (err, breachedPasswordDetectionConfig) {
+   *   if (err) {
+   *     // Handle error.
+   *   }
+   *
+   *   // Access breached password detection configuration
+   *   console.log(breachedPasswordDetectionConfig);
+   * });
+   * @param   {object}    params            Breached password detection parameters (leave empty).
+   * @param   {object}    data              Updated breached password detection configuration.
+   * @param   {Function}  [cb]              Callback function.
+   * @returns    {Promise|undefined}
+   */
+  updateBreachedPasswordDetectionConfig(...args) {
+    return this.breachedPasswordDetection.patch(...args);
+  }
+}
+module.exports = AttackProtectionManager;

package/src/management/index.js

@@ -10,6 +10,7 @@ const GrantsManager = require('./GrantsManager');
 const UsersManager = require('./UsersManager');
 const UserBlocksManager = require('./UserBlocksManager');
 const ConnectionsManager = require('./ConnectionsManager');
+const AttackProtectionManager = require('./AttackProtectionManager');
 const BlacklistedTokensManager = require('./BlacklistedTokensManager');
 const RulesManager = require('./RulesManager');
 const DeviceCredentialsManager = require('./DeviceCredentialsManager');
@@ -360,6 +361,13 @@ class ManagementClient {
      * @type {OrganizationsManager}
      */
     this.organizations = new OrganizationsManager(managerOptions);
+
+    /**
+     * Attack Protection Manager
+     *
+     * @type {AttackProtectionManager}
+     */
+    this.attackProtection = new AttackProtectionManager(managerOptions);
   }
 
   /**