diff --git a/plugins/okta/.CHECKSUM b/plugins/okta/.CHECKSUM index 56ec4c928b..f30449bfb0 100644 --- a/plugins/okta/.CHECKSUM +++ b/plugins/okta/.CHECKSUM @@ -1,7 +1,7 @@ { - "spec": "4fa8814f7a1dad536a21d7e9de9751c6", - "manifest": "447e9671154a8344ca38101005070c84", - "setup": "104b67f143c716178e8c47921d6b4e0b", + "spec": "a41bba4ddbe2d2f0624afb797804c042", + "manifest": "3b21e09f89cbafd960e877f73954804e", + "setup": "0cbd3707da4cff30d5498e25e1f1bfe1", "schemas": [ { "identifier": "add_user_to_group/schema.py", @@ -13,7 +13,7 @@ }, { "identifier": "create_user/schema.py", - "hash": "7948ce3f280a8f2b3d1e2c7883b55918" + "hash": "a8383fea486432300fef75c7d887ed94" }, { "identifier": "deactivate_user/schema.py", @@ -29,7 +29,7 @@ }, { "identifier": "get_user/schema.py", - "hash": "2945f2887382978578f81cb59e933e83" + "hash": "5848adb1b34a6f783a2df8fb5339f849" }, { "identifier": "get_user_groups/schema.py", @@ -77,7 +77,7 @@ }, { "identifier": "users_added_removed_from_group/schema.py", - "hash": "efd9eb550bf768bdfebb341f6b6bd229" + "hash": "e530fa70892533c53f6aad9f6f686cad" } ] } \ No newline at end of file diff --git a/plugins/okta/Dockerfile b/plugins/okta/Dockerfile index e09b0876a0..7861156b2a 100644 --- a/plugins/okta/Dockerfile +++ b/plugins/okta/Dockerfile @@ -1,4 +1,4 @@ -FROM rapid7/insightconnect-python-3-38-slim-plugin:5 +FROM --platform=linux/amd64 rapid7/insightconnect-python-3-slim-plugin:5 LABEL organization=rapid7 LABEL sdk=python diff --git a/plugins/okta/bin/komand_okta b/plugins/okta/bin/komand_okta index d5bf23576d..cce8a9f273 100755 --- a/plugins/okta/bin/komand_okta +++ b/plugins/okta/bin/komand_okta @@ -6,7 +6,7 @@ from sys import argv Name = "Okta" Vendor = "rapid7" -Version = "4.2.2" +Version = "4.2.3" Description = "Secure identity management and single sign-on to any application" diff --git a/plugins/okta/help.md b/plugins/okta/help.md index 5b4d051e96..d197a5e1b1 100644 --- a/plugins/okta/help.md +++ b/plugins/okta/help.md @@ -1612,6 +1612,7 @@ by Okta themselves, or constructed by the plugin based on the information it has # Version History +* 4.2.3 - Monitor Logs task: Added exception logging and use latest plugin SDK. Also Fixed schemas that contain passwords. * 4.2.2 - Monitor Logs task: log deduplication only applied when querying Okta using since and until parameters. * 4.2.1 - Monitor Logs task: filter previously returned log events | only update time checkpoint when an event is returned | update timestamp format | set cutoff time of 24 hours. * 4.2.0 - Monitor Logs task: return raw logs data without cleaning and use last log time as checkpoint in time for next run. diff --git a/plugins/okta/komand_okta/actions/create_user/schema.py b/plugins/okta/komand_okta/actions/create_user/schema.py index e671e37470..d1556736cf 100755 --- a/plugins/okta/komand_okta/actions/create_user/schema.py +++ b/plugins/okta/komand_okta/actions/create_user/schema.py @@ -77,7 +77,7 @@ class CreateUserInput(insightconnect_plugin_runtime.Input): "title": "credentials", "properties": { "password": { - "$ref": "#/definitions/password", + "$ref": "#/definitions/custom_password", "title": "Password", "description": "Password details", "order": 1 @@ -96,10 +96,17 @@ class CreateUserInput(insightconnect_plugin_runtime.Input): } } }, - "password": { - "type": "string", - "format": "password", - "displayType": "password" + "custom_password": { + "type": "object", + "title": "custom_password", + "properties": { + "value": { + "type": "string", + "title": "Value", + "description": "Password value", + "order": 1 + } + } }, "provider": { "type": "object", @@ -530,7 +537,7 @@ class CreateUserOutput(insightconnect_plugin_runtime.Output): "title": "credentials", "properties": { "password": { - "$ref": "#/definitions/password", + "$ref": "#/definitions/custom_password", "title": "Password", "description": "Password details", "order": 1 @@ -549,10 +556,17 @@ class CreateUserOutput(insightconnect_plugin_runtime.Output): } } }, - "password": { - "type": "string", - "format": "password", - "displayType": "password" + "custom_password": { + "type": "object", + "title": "custom_password", + "properties": { + "value": { + "type": "string", + "title": "Value", + "description": "Password value", + "order": 1 + } + } }, "provider": { "type": "object", diff --git a/plugins/okta/komand_okta/actions/get_user/schema.py b/plugins/okta/komand_okta/actions/get_user/schema.py index 7913fb965b..718521cd29 100755 --- a/plugins/okta/komand_okta/actions/get_user/schema.py +++ b/plugins/okta/komand_okta/actions/get_user/schema.py @@ -424,7 +424,7 @@ class GetUserOutput(insightconnect_plugin_runtime.Output): "title": "credentials", "properties": { "password": { - "$ref": "#/definitions/password", + "$ref": "#/definitions/custom_password", "title": "Password", "description": "Password details", "order": 1 @@ -443,10 +443,17 @@ class GetUserOutput(insightconnect_plugin_runtime.Output): } } }, - "password": { - "type": "string", - "format": "password", - "displayType": "password" + "custom_password": { + "type": "object", + "title": "custom_password", + "properties": { + "value": { + "type": "string", + "title": "Value", + "description": "Password value", + "order": 1 + } + } }, "provider": { "type": "object", diff --git a/plugins/okta/komand_okta/tasks/monitor_logs/task.py b/plugins/okta/komand_okta/tasks/monitor_logs/task.py index f0fa240b67..f30a3ea803 100755 --- a/plugins/okta/komand_okta/tasks/monitor_logs/task.py +++ b/plugins/okta/komand_okta/tasks/monitor_logs/task.py @@ -64,8 +64,10 @@ def run(self, params={}, state={}): # pylint: disable=unused-argument state[self.LAST_COLLECTION_TIMESTAMP] = self.get_last_collection_timestamp(new_logs, state) return new_logs, state, has_more_pages, 200, None except ApiException as error: + self.logger.info(f"An API Exception has been raised. Status code: {error.status_code}. Error: {error}") return [], state, False, error.status_code, error except Exception as error: + self.logger.info(f"An Exception has been raised. Error: {error}") return [], state, False, 500, PluginException(preset=PluginException.Preset.UNKNOWN, data=error) @staticmethod diff --git a/plugins/okta/komand_okta/triggers/users_added_removed_from_group/schema.py b/plugins/okta/komand_okta/triggers/users_added_removed_from_group/schema.py index f4b8001cd9..b005498c25 100755 --- a/plugins/okta/komand_okta/triggers/users_added_removed_from_group/schema.py +++ b/plugins/okta/komand_okta/triggers/users_added_removed_from_group/schema.py @@ -480,7 +480,7 @@ class UsersAddedRemovedFromGroupOutput(insightconnect_plugin_runtime.Output): "title": "credentials", "properties": { "password": { - "$ref": "#/definitions/password", + "$ref": "#/definitions/custom_password", "title": "Password", "description": "Password details", "order": 1 @@ -499,10 +499,17 @@ class UsersAddedRemovedFromGroupOutput(insightconnect_plugin_runtime.Output): } } }, - "password": { - "type": "string", - "format": "password", - "displayType": "password" + "custom_password": { + "type": "object", + "title": "custom_password", + "properties": { + "value": { + "type": "string", + "title": "Value", + "description": "Password value", + "order": 1 + } + } }, "provider": { "type": "object", diff --git a/plugins/okta/plugin.spec.yaml b/plugins/okta/plugin.spec.yaml index 8504d74726..c56024da9c 100644 --- a/plugins/okta/plugin.spec.yaml +++ b/plugins/okta/plugin.spec.yaml @@ -13,7 +13,7 @@ sdk: version: 5 user: nobody description: Secure identity management and single sign-on to any application -version: 4.2.2 +version: 4.2.3 connection_version: 4 resources: source_url: https://github.com/rapid7/insightconnect-plugins/tree/master/plugins/okta @@ -56,7 +56,7 @@ types: type: string required: false example: "Example Answer" - password: + custom_password: value: description: Password value title: Value @@ -67,7 +67,7 @@ types: password: description: Password details title: Password - type: password + type: custom_password required: false example: {} provider: diff --git a/plugins/okta/setup.py b/plugins/okta/setup.py index a1f91bd758..64d8336fb2 100644 --- a/plugins/okta/setup.py +++ b/plugins/okta/setup.py @@ -3,7 +3,7 @@ setup(name="okta-rapid7-plugin", - version="4.2.2", + version="4.2.3", description="Secure identity management and single sign-on to any application", author="rapid7", author_email="",