FEATURES:
data-source/auth0_organization
: Add members (#615)resource/auth0_organization_connections
: Add new resource to manage a 1:many relationship between an organization and its enabled connections (#610)resource/auth0_organization_members
: Add new resource to manage a 1:many relationship between an organization and its members (#614)resource/auth0_organization_member_role
: Add new resource to manage a 1:1 relationship between an organization member and its roles (#622)resource/auth0_organization_member_roles
: Add new resource to manage a 1:many relationship between an organization member and its roles (#617)resource/auth0_trigger_action
: Add new resource to manage a 1:1 relationship between a trigger binding and an action (#612, #621)resource/auth0_trigger_actions
: Add new resource to manage a 1:many relationship between a trigger binding and actions (#613)
BUG FIXES:
resource/auth0_client_credentials
: Correctly set ID when importing (#608)resource/auth0_connection
: More consistentset_user_root_attributes
behavior for enterprise connections (#619)resource/auth0_user_role
: Enable importing of resource (#629)resource/auth0_user_permissions
: Update diffing algorithm to address a bug where the order of additions and removals was causing incorrect results (#630)resource/auth0_role_permissions
: Update diffing algorithm to address a bug where the order of additions and removals was causing incorrect results (#632)resource/auth0_trigger_action
: Fix delete logic (#639)
NOTES:
⚠️ Check our migration guide to navigate the deprecations that were added in this release.
FEATURES:
resource/auth0_client_credentials
: Add new resource to manage client credentials (client_secret
,private_key_jwt
,authentication_methods
) (#588)resource/auth0_resource_server_scopes
: Add new resource to manage a 1:many relationship between the resource server (API) and its scopes (permissions) (#600)resource/auth0_resource_server_scope
: Add new resource to manage a 1:1 relationship between the resource server (API) and its scopes (permissions) (#589)
BUG FIXES:
resource/auth0_connection
: Fix json tag forforward_request_info
attribute (#591)- Fix import issue on several resources (
auth0_connection_clients
,auth0_user_permissions
,auth0_user_roles
,auth0_role_permissions
) (#594, #595, #596, #597) resource/auth0_connection
: Fix issue with settingset_user_root_attributes
toon_each_login
for Microsoft Azure AD Connections (#602)
NOTES:
- New guides on how to achieve 0 downtime client credentials were added in this release (#592)
⚠️ Check our migration guide to navigate the deprecations that were added in this release.
FEATURES:
resource/auth0_connection_clients
: Add new resource to manage a 1:many relationship between the connection and its enabled clients (#568)resource/auth0_user_permission
: Add new resource to manage a 1:1 relationship between the user and its permissions (#574)resource/auth0_user_permissions
: Add new resource to manage a 1:many relationship between the user and its permissions (#578)resource/auth0_user_role
: Add new resource to manage a 1:1 relationship between the user and its roles (#580)resource/auth0_user_roles
: Add new resource to manage a 1:many relationship between the user and its roles (#579)resource/auth0_role_permission
: Add new resource to manage a 1:1 relationship between the role and its permissions (#582)resource/auth0_role_permissions
: Add new resource to manage a 1:many relationship between the role and its permissions (#583)resource/auth0_user
: Add new readonlypermissions
attribute (#572)resource/auth0_client
: Add OIDC Back-Channel Logout support (#581)resource/auth0_role
: Adddescription
andresource_server_name
read-only fields topermissions
(#581)
BUG FIXES:
- Fix created import ID on association resource (#569)
NOTES:
⚠️ Check our migration guide to navigate the deprecations that were added in this release.
BUG FIXES:
resource/auth0_resource_server
: Remove invalidoptions
attribute from schema (#551)resource/auth0_trigger_binding
: Fixtrigger
import issue (#554)data-source/auth0_resource_server
: Fix auth0 management api data source not readingscopes
(#555)resource/auth0_connection
: Fix faulty diffs when setting themetadata_xml
on a SAML connection (#559)resource/auth0_connection_client
: Stop overriding internally the imported ID for this resource (#562)resource/auth0_organization_connection
: Stop overriding internally the imported ID for this resource (#562)resource/auth0_organization_member
: Stop overriding internally the imported ID for this resource (#562)
FEATURES:
resource/auth0_guardian
: Add support fordirect
provider withinpush
MFA (#535)
ENHANCEMENTS:
resource/auth0_tenant
: Add support formfa_show_factor_list_on_enrollment
flag (#561)
NOTES:
⚠️ The removal of theoptions
attribute from theauth0_resource_server
resource, while technically a breaking change, should not cause any issues as the API wasn't accepting this parameter.
BUG FIXES:
resource/auth0_branding_theme
: Fixed typo infonts.links_style
validation (#523)data-source/auth0_resource_server
: Fixed data source to always return the id instead of the identifier (#532)
FEATURES:
data-source/auth0_custom_domain
: Added data source to fetch custom domain (#526)resource/auth0_connection
: Added support for ping federate connections (#527)
ENHANCEMENTS:
resource/auth0_client_grant
: Check if client grant already exists before creating (#529)resource/auth0_connection
: Addeddisable_self_service_change_password
flag to database connection (#525)
NOTES:
- Updated docs for
auth0_role
resource (#524)
BUG FIXES:
resource/auth0_prompt_custom_text
: Added missing status prompt type (#513)data-source/auth0_connection
: Moved check for config secrets from the read to the update func (#517)
ENHANCEMENTS:
resource/auth0_branding_theme
: Made fields optional (#499)
NOTES:
- Added docs on available log stream types (#462)
- Added docs on how to obtain the custom domain id for importing
auth0_custom_domain
resources (#463)
BUG FIXES:
resource/auth0_prompt_custom_text
: Added missing prompt types (#506)resource/auth0_branding
: Fixed resource to allow managing only the universal login (#506)
FEATURES:
data-source/auth0_connection
: Added data source to fetch connection information (#470)data-source/auth0_resource_server
: Added data source to fetch resource server information (#477)data-source/auth0_organization
: Added data source to fetch organization information (#475)data-source/auth0_tenant
: Expanded data source to fetch all the tenant information (#479)data-source/auth0_user
: Added data source to fetch user information (#481)data-source/auth0_role
: Added data source to fetch role information (#483)data-source/auth0_attack_protection
: Added data source to fetch attack protection information (#485)data-source/auth0_branding
: Added data source to fetch branding information (#500)data-source/auth0_branding_theme
: Added data source to fetch branding theme information (#500)resource/auth0_branding_theme
: Simplified management of this resource to no longer force a user to import the resource if already existing (#504)
NOTES:
resource/auth0_connection
: Updated connection docs (#471)resource/auth0_tenant
: Added deprecation notice toflags.universal_login
(#503)
BUG FIXES:
resource/auth0_guardian
: Allow updating message templates forphone-message-hook
sms provider (#444)resource/auth0_branding
: Manage universal-login body only if custom domains are set (#446)resource/auth0_connection
: Setauthorization_endpoint
,issuer
,jws_uri
,token_endpoint
,user_info_endpoint
asComputed
to prevent diff issues (#443)resource/auth0_user
: Only send changed fields when updating a user (#453)resource/auth0_*
: Relax url schema validation forinitiate_login_uri
,apple_app_link
,google_app_link
,default_redirection_uri
to allow to be set to empty (#453)
FEATURES:
resource/auth0_log_stream
: Added support for segment log stream type (#437)resource/auth0_action
: Addednode18
to runtime options (#442)resource/auth0_attack_protection
: Added support forbreached_password_detection.stage
(#445)resource/auth0_connection
: Added support forenable_script_context
to db connections (#452)resource/auth0_connection
: Added support forfed_metadata_xml
to adfs connections (#458)resource/auth0_connection
: Added support foricon_url
to okta connections (#459)
NOTES:
resource/auth0_client
: Updatedclient_secret_rotation_trigger
docs (#439)resource/auth0_client
: Updatedcross_origin_auth
docs (#456)
BUG FIXES:
resource/auth0_connection_client
,resource/auth0_organization_connection
,resource/auth0_organization_member
: Fixed concurrency issue (#425)
BREAKING CHANGES:
resource/auth0_guardian
: Redesigned how mfa types get enabled (#423)- It is now necessary to explicitly set the enabled attribute on all mfa types. Please check the auth0_guardian docs for more info.
BREAKING CHANGES:
resource/auth0_connection
: Removedenabled_clients
field (#421)- It is necessary to migrate all
enabled_clients
on theauth0_connection
resource to the auth0_connection_client resource.
- It is necessary to migrate all
FEATURES:
resource/auth0_log_stream
: Added support for Mixpanel log streams (#408)
BUG FIXES:
resource/auth0_guardian
: Addedprovider
topush
mfa to fixsns
settings not getting propagated (#415)- Prevent panic on null values when iterating over map elements (#413)
FEATURES:
resource/auth0_connection_client
: Added new resource to manage enabled clients on a connection (#379)resource/auth0_connection
: Added support forokta
connection type (#395)resource/auth0_email
: Addedsettings
field (#394)
ENHANCEMENTS:
resource/auth0_connection
: Added documentation for connection options for all strategy types (#383)resource/auth0_client
: Relaxed validation rules on initiate_login_uri to match API (#389)resource/auth0_email
: Update email provider if already existing when creating it (#377)resource/auth0_email
: Added validation to all attributes (#391)
NOTES:
resource/auth0_email
: Deprecatedapi_user
field (#392)
FEATURES:
resource/auth0_client
: Addedaddons.samlp.issuer
(#334)resource/auth0_client
: Addedclient_aliases
(#367)resource/auth0_custom_domain
: Addedcustom_client_ip_header
andtls_policy
(#335)
BUG FIXES:
resource/auth0_branding
: Ignored 404 error when fetching universal login content (#359)resource/auth0_branding_theme
: Improved precision of fields withfloat64
instead ofint
(#369)resource/auth0_resource_server
: Fixed managing auth0 management api (#374)resource/auth0_client
: Fixed update behavior ofclient_metadata
(#362)resource/auth0_connection
: Added validation onidentity_api
forwaad
connections (#361)
NOTES:
resource/auth0_resource_server
: Improved RBAC docs (#371)resource/auth0_action
: Added guide on how to retrieve available action triggers (#370)resource/auth0_prompt_custom_text
: Escaped dollar sign references in docs (#366)
This release focuses primarily on setting fields to empty values consistently across all resources. For an in depth explanation please check: #14
BUG FIXES:
- Allowed setting fields to empty consistently across all resources (#354)
- Correctly destroy resources by setting the ID to blank (#354)
- Stop ignoring non 404 errors when deleting resources (#354)
resource/auth0_prompt
: Setuniversal_login_experience
andwebauthn_platform_first_factor
toComputed
(#354)resource/auth0_resource_server
: Setskip_consent_for_verifiable_first_party_clients
andenforce_policies
toComputed
(#354)resource/auth0_rule
: Setenabled
toComputed
(#354)
BREAKING CHANGES:
resource/auth0_organization
: Removed deprecatedconnections
field (#354)- Please migrate all managed
connections
through theauth0_organization
resource to theauth0_organization_connection
resource.
- Please migrate all managed
NOTES:
resource/auth0_resource_server
: Changedidentifier
fromOptional
toRequired
(#354)
BUG FIXES:
resource/auth0_client
: Fix how we expandaddons.samlp
(#322)
NOTES:
resource/auth0_client
: Improve description ofapp_type
attribute (#325)
FEATURES:
resource/auth0_connection
: Prevented erasingoptions.configuration
by mistake (#307)
BUG FIXES:
resource/auth0_organization_connection
: Fixed issue with importing (#301)resource/auth0_organization_member
: Fixed issue with importing (#302)resource/auth0_connection
: Added missing fieldset_user_root_attributes
to the auth0 connection (#303)data-source/auth0_client
: Fixed search by name through all available clients (#306)resource/auth0_email
: Refactored and removedForceNew
on secret fields (#304)
NOTES:
resource/auth0_prompt
: Refactored and added additional test cases (#305)- Upgraded test recordings to go-vcr v3 (#309)
- Removed unnecessary
MapData
struct from resource data helpers (#310)
FEATURES:
resource/auth0_branding_theme
: Add new resource to manage branding themes (#292)provider
: Add ability to pass a custom audience when using client credentials flow (#295)
NOTES:
auth0_action
: Improvesupported_triggers.version
description (#287)auth0_connection
: Improveoptions.scopes
description (#297)
FEATURES:
resource/auth0_action
: Throw error when encountering untracked action secrets (#248)
NOTES:
- Reorganized project layout (#262)
- Updated documentation and examples
FEATURES:
resource/auth0_prompt
: Addedwebauthn_platform_first_factor
field (#237)resource/auth0_connection
: Addedauth_params
for passwordless email connections (#235, #240, #241)resource/auth0_connection
: Added support for multiple OAuth2 compatible strategies (#239)resource/auth0_organization_member
: Added new resource to manage organization members and their roles (#256)resource/auth0_organization_connection
: Added new resource to manage organization connections (#253)
BUG FIXES:
resource/auth0_organization
: Fixed issue with not being able to updateconnections
(#244)resource/auth0_organization
: Fixed issue withmetadata
field not getting set to empty (#245, #254)resource/auth0_action
: Fix issue with not being able to updatedependencies
(#247)resource/auth0_user
: Fix infinite plan onuser_metadata
(#249, #250)
FEATURES:
resource/auth0_guardian
: Added webauthn MFA (#213)resource/auth0_guardian
: Added duo MFA (#214)resource/auth0_guardian
: Added push (Amazon SNS, custom app) MFA (#215)resource/auth0_guardian
: Added recovery code (#216)resource/auth0_tenant
: Addedsession_cookie
field (#220)resource/auth0_client
: Addedsso_integration
as valid app type (#221)resource/auth0_email_template
: Addedinclude_email_in_redirect
field (#229)resource/auth0_connection
: Addedupstream_params
field (#223)
FEATURES:
resource/auth0_connection
: Addeddisable_sign_out
field to samlp connections (#204)resource/auth0_connection
: Addedmetadata_xml
andmetadata_url
to connection schema (#204)resource/auth0_connection
: Addedsigning_key
to samlp connections (#210)resource/auth0_connection
: Addingpkce_enabled
field to Oauth2 connection options (#212)resource/auth0_tenant
: Added several missing tenant flags (#208)
BREAKING CHANGES:
resource/auth0_connection
: Removed deprecatedoptions.app_domain
in connection resource (#202)resource/auth0_connection
: Changedoptions.fields_map
from Map to String (#207)- Please make sure to do a
terraform state rm auth0_connection.<resource name> && terraform import auth0_connection.<resource name> <connID>
in order to prevent issues due to the breaking change after upgrading to this version.
- Please make sure to do a
FEATURES:
resource/auth0_hook
: Add warnings for untracked hook secrets (#189)resource/auth0_log_stream
: Add datadog_region validation (#192)resource/auth0_connection
: Add computed to password* fields in connection resource (#191)resource/auth0_connection
: Adding icon_url to OAuth2 connection types (#196)
BUG FIXES:
resource/auth0_connection
: Fix crash with domain_aliases for ADFS (#172)resource/auth0_connection
: Fix subsequent updates to partial refresh_token object (#187)resource/auth0_tenant
: Setting session lifetime values as non-computed (#193)resource/auth0_user
: Preserve user ID casing in state (#197)resource/auth0_guardian
: Fix phone options issue#159 and refactor guardian resource implementation (#195)
NOTES:
- Correct docs example typo binding_method to protocol_binding (#179)
- Enabled http recordings with go-vcr to be used within tests for more reliable testing
- Adding documentation for passwordless email connection (#179)
- Adding GitHub connection scopes documentation (#199)
FEATURES:
resource/auth0_connection
: Added support for connection metadata field (#158)
BUG FIXES:
resource/auth0_tenant
: Fixed auth0 tenant flags so it only sends set values (#144)resource/auth0_connection
: Fixed missing options when importing a connection object (#142)
NOTES:
resource/auth0_custom_domain
: Removed deprecated verification_method from custom domain resource (#143)
BUG FIXES:
resource/auth0_client
: Fix conversion issue flattenAddons func in client resource (#140)
FEATURES:
resource/auth0_custom_domain*
: Added support for creating external resources associated with self-managed certificates (#118)resource/auth0_log_stream
: [DXCDT-104] Added filters to log_stream resource (#133)
BUG FIXES:
resource/auth0_log_stream
: Fixed serialization of log streams with http sink custom headers (#120)
NOTES:
FEATURES:
data-source/auth0_tenant
: Added a new data source for a subset of a tenant's info (#95)
BUG FIXES:
resource/*
: [DXCDT-80] Fixed surfaced errors on all resources after not ignoring them when setting resource data ( #106, #104, #105, #94, #97, #101, #113, #112, #111, #110, #114, #109 )resource/auth0_action
: Failed fast when action fails to build (#107)
BUG FIXES:
resource/auth0_attack_protection
: Fix attack protection resource for PSaaS Tenants (#86)
FEATURES:
resource/auth0_attack_protection
: Added Attack Protection Management Resource (#77)
ENHANCEMENTS:
resource/auth0_connection
: Added ShowAsButton option for enterprise connections (#80)
BUG FIXES:
resource/auth0_tenant
: Wiringdefault_redirection_uri
parameter in 'auth0_tenant' into Auth0 API call (#71)resource/auth0_client
: Mark signing_keys as sensitive (#72)
ENHANCEMENTS:
- Added Signing Keys to client resources (#66)
- Update documentation to include missing resources and show how to import each resource (#67)
ENHANCEMENTS:
- Added ability to authenticate with management API tokens (#487)
- Added client data source (#511)
- Added global client data source (#512)
NOTES:
- Added reference to
initiate_login_uri
property in client documentation (#513)
This project is a continuation of alexkappa/terraform-provider-auth0, to view the previous change history, please see that repo's changelog.