Skip to content

Conversation

@kushalshit27
Copy link
Contributor

@kushalshit27 kushalshit27 commented Dec 16, 2025

🔧 Changes

This pull request introduces support for "Connection Profiles" and enhances the express configuration feature for client applications. It also improves documentation, updates dependencies, and adds new configuration options for managing third-party clients. The main focus is on enabling and documenting the usage of connection profiles and user attribute profiles within client express configurations, as well as ensuring proper mapping and export/import behavior.

Major new features and improvements:

Support for Connection Profiles and Express Configuration:

  • Added support for parsing and dumping connectionProfiles in both directory and YAML contexts, including new handlers and integration into the asset pipeline. [1] [2] [3] [4] [5]
  • Enhanced client export/import logic to map IDs to names for user_attribute_profile_id, connection_profile_id, and okta_oin_client_id in express_configuration fields. [1] [2] [3] [4]
  • Added example connectionProfiles, userAttributeProfiles, and clients using express configuration in both YAML and directory structure. [1] [2] [3] [4] [5] [6]

Documentation updates:

  • Documented the new connectionProfiles resource and how to use it with client express configuration, including YAML and JSON examples.
  • Added documentation for the AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS configuration option and how to exclude third-party clients from management. [1] [2]

Dependency and compatibility updates:

  • Bumped several dependencies to their latest versions, including auth0, winston, @types/lodash, and ESLint-related packages. [1] [2]
  • Updated the required Node.js version in the documentation to 20.19.0 or greater.

Other improvements:

  • Ensured read-only fields (like id) are removed from exported assets for both connection profiles and user attribute profiles. [1] [2]
  • Cleaned up experimental feature handling by removing unused EA features. [1] [2]

📚 References

🔬 Testing

📝 Checklist

  • All new/changed/fixed functionality is covered by tests (or N/A)
  • I have added documentation for all new/changed functionality (or N/A)

dependabot bot and others added 18 commits November 18, 2025 11:26
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...3.14.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* streamline rendering update payload construction and remove under EA

* Add screenRenderers to prompts in context tests

* Update logging to check for non-empty list before displaying msg

* Remove ACUL from EA_FEATURES array
* Update CHANGELOG

* 8.20.3

* fix(client.ts): improve getEntity function to handle various response types
- Update getEntity to accept ApiResponse or Asset[] as input
- Return empty array for empty responses instead of throwing an error
- Directly return response if it is an array
* Update CHANGELOG

* 8.21.0
…NTS` config property (#1212)

* added AUTH0_EXCLUDE_THIRD_PARTY_CLIENTS config property

* add unit test

* update processChanges to also apply third party client filter

* add comments to client filtering logic

---------

Co-authored-by: kushalshit27 <43465488+kushalshit27@users.noreply.github.com>
…authentication` (#1223)

* fix: added warning for legacy cross_origin_auth and added sanitizeDeprecatedClientFields for handling deprecated field and new field

* test: add migration tests for deprecated cross_origin_auth to cross_origin_authentication

* fix: rename variable for clarity in sanitizeClientFields function

* fix: update client sanitization to handle deprecated cross_origin_auth field

* fix: refactor client field sanitization to improve clarity and handle deprecated cross_origin_auth field

* fix: specify type for fields in sanitizeClientFields function

* fix: rename variable for clarity in sanitizeClientFields function and update handling of deprecated cross_origin_auth field

* fix: migrate deprecated cross_origin_auth to cross_origin_authentication in client export

* fix: ensure newline at end of file in clients.tests.js

* fix: refactor cross_origin_auth sanitization into a dedicated method

* fix: improve client field sanitization and handle deprecated cross_origin_auth field

* Refactor code structure for improved readability and maintainability

* fix: correct spelling of 'sanitized' in client field sanitization methods

* fix: update deprecation warning for 'cross_origin_auth' parameter
* fix: update dependencies to latest versions
- package.json: bump winston to ^3.19.0
- package.json: bump @types/lodash to ^4.17.21
- package.json: bump typescript to ^5.9.3

* feat: enhance resource server handling

- src/tools/auth0/handlers/resourceServers.ts: allow updating specific fields for system resource servers
- src/tools/auth0/handlers/resourceServers.ts: sanitize fields of resource servers before returning
- src/tools/auth0/handlers/resourceServers.ts: add updateResourceServer method to handle name exclusion for system servers

* fix: remove from allowedKeys in ResourceServersHandler
- src/tools/auth0/handlers/resourceServers.ts: removed 'token_lifetime_for_web' TODO
- src/tools/auth0/handlers/resourceServers.ts: removed 'allow_offline_access' TODO

* feat(test): add tests for Auth0 My Account API resource server handling
- test/tools/auth0/handlers/resourceServers.tests.js: sanitize system resource servers in getType for Auth0 My Account API
- test/tools/auth0/handlers/resourceServers.tests.js: update 'Auth0 My Account API' without name and is_system
* Update CHANGELOG

* 8.22.0
…ant flags (#1231)

fix: improved_signup_bot_detection_in_classic flag is added in allowed tenant flags
- package.json: update auth0 from ^5.1.0 to ^5.2.0
- package.json: update winston from ^3.18.3 to ^3.19.0
- package.json: update @types/lodash from ^4.17.20 to ^4.17.21
- package.json: update @typescript-eslint/eslint-plugin from ^8.47.0 to ^8.49.0
- package.json: update @typescript-eslint/parser from ^8.47.0 to ^8.49.0
- package.json: update eslint and typescript-eslint dependencies to latest versions
- package-lock.json: update eslint and typescript-eslint dependencies to latest versions
- src/tools/auth0/handlers/clientGrants.ts: removed 'scope' from required fields
- src/tools/auth0/handlers/connectionProfiles.ts: added update function and refactored processChanges
- src/tools/auth0/handlers/emailTemplates.ts: added objString method for email templates
- src/tools/auth0/handlers/resourceServers.ts: refactored updateResourceServer to exclude name from updates
- src/tools/auth0/handlers/selfServiceProfiles.ts: added objString method for self-service profiles
- README.md: update Node version from 20.18.1 to 20.19.0
- test/tools/auth0/validator.tests.js: remove test for missing 'scope' validation
…meter consistency

- test/tools/auth0/handlers/connectionProfiles.tests.js: change update function parameter from params to id
- test/tools/auth0/handlers/resourceServers.tests.js: change update function parameter from params to id
@kushalshit27 kushalshit27 changed the title chore(deps): bump master sync chore(deps): In-sync feature capability master Dec 16, 2025
- src/context/directory/handlers/flowVaultConnections.ts: add console warning for setup key limitations
- src/context/yaml/handlers/flowVaultConnections.ts: add console warning for setup key limitations
- src/keywordPreservation.ts: add console warning for remote value preservation
- eslint.config.js: change no-console rule to warn
- src/index.ts: format error logging for better readability
- test/tools/auth0/handlers/databases.tests.js: remove redundant console warning tests
@kushalshit27 kushalshit27 marked this pull request as ready for review December 16, 2025 09:10
@kushalshit27 kushalshit27 requested a review from a team as a code owner December 16, 2025 09:10
@codecov-commenter
Copy link

Codecov Report

❌ Patch coverage is 81.40704% with 37 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (beta@b0db5a2). Learn more about missing BASE report.

Files with missing lines Patch % Lines
src/tools/auth0/handlers/clients.ts 85.18% 0 Missing and 8 partials ⚠️
src/tools/auth0/handlers/connectionProfiles.ts 69.23% 6 Missing and 2 partials ⚠️
src/context/directory/handlers/clients.ts 62.50% 0 Missing and 6 partials ⚠️
src/tools/auth0/handlers/userAttributeProfiles.ts 66.66% 2 Missing and 2 partials ⚠️
...c/context/directory/handlers/connectionProfiles.ts 87.50% 1 Missing and 2 partials ⚠️
src/context/yaml/handlers/clients.ts 83.33% 0 Missing and 3 partials ⚠️
src/context/yaml/handlers/connectionProfiles.ts 83.33% 0 Missing and 2 partials ⚠️
src/tools/auth0/handlers/prompts.ts 50.00% 1 Missing and 1 partial ⚠️
src/context/index.ts 50.00% 0 Missing and 1 partial ⚠️
Additional details and impacted files
@@           Coverage Diff           @@
##             beta    #1233   +/-   ##
=======================================
  Coverage        ?   80.62%           
=======================================
  Files           ?      143           
  Lines           ?     5667           
  Branches        ?     1157           
=======================================
  Hits            ?     4569           
  Misses          ?      624           
  Partials        ?      474           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@kushalshit27 kushalshit27 merged commit 8b10127 into beta Dec 16, 2025
6 checks passed
@kushalshit27 kushalshit27 deleted the beta-master-sync branch December 16, 2025 09:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants