Okta 4.2.3 Release

plugins/okta/.CHECKSUM

@@ -1,7 +1,7 @@
 {
-	"spec": "4fa8814f7a1dad536a21d7e9de9751c6",
-	"manifest": "447e9671154a8344ca38101005070c84",
-	"setup": "104b67f143c716178e8c47921d6b4e0b",
+	"spec": "a41bba4ddbe2d2f0624afb797804c042",
+	"manifest": "3b21e09f89cbafd960e877f73954804e",
+	"setup": "0cbd3707da4cff30d5498e25e1f1bfe1",
 	"schemas": [
 		{
 			"identifier": "add_user_to_group/schema.py",
@@ -13,7 +13,7 @@
 		},
 		{
 			"identifier": "create_user/schema.py",
-			"hash": "7948ce3f280a8f2b3d1e2c7883b55918"
+			"hash": "a8383fea486432300fef75c7d887ed94"
 		},
 		{
 			"identifier": "deactivate_user/schema.py",
@@ -29,7 +29,7 @@
 		},
 		{
 			"identifier": "get_user/schema.py",
-			"hash": "2945f2887382978578f81cb59e933e83"
+			"hash": "5848adb1b34a6f783a2df8fb5339f849"
 		},
 		{
 			"identifier": "get_user_groups/schema.py",
@@ -77,7 +77,7 @@
 		},
 		{
 			"identifier": "users_added_removed_from_group/schema.py",
-			"hash": "efd9eb550bf768bdfebb341f6b6bd229"
+			"hash": "e530fa70892533c53f6aad9f6f686cad"
 		}
 	]
 }

plugins/okta/Dockerfile

@@ -1,4 +1,4 @@
-FROM rapid7/insightconnect-python-3-38-slim-plugin:5
+FROM --platform=linux/amd64 rapid7/insightconnect-python-3-slim-plugin:5
 
 LABEL organization=rapid7
 LABEL sdk=python

plugins/okta/bin/komand_okta

@@ -6,7 +6,7 @@ from sys import argv
 
 Name = "Okta"
 Vendor = "rapid7"
-Version = "4.2.2"
+Version = "4.2.3"
 Description = "Secure identity management and single sign-on to any application"
 
 

plugins/okta/help.md

@@ -1612,6 +1612,7 @@ by Okta themselves, or constructed by the plugin based on the information it has
 
 # Version History
 
+* 4.2.3 - Monitor Logs task: Added exception logging and use latest plugin SDK. Also Fixed schemas that contain passwords.
 * 4.2.2 - Monitor Logs task: log deduplication only applied when querying Okta using since and until parameters.
 * 4.2.1 - Monitor Logs task: filter previously returned log events | only update time checkpoint when an event is returned | update timestamp format | set cutoff time of 24 hours.
 * 4.2.0 - Monitor Logs task: return raw logs data without cleaning and use last log time as checkpoint in time for next run.

plugins/okta/komand_okta/actions/create_user/schema.py

@@ -77,7 +77,7 @@ class CreateUserInput(insightconnect_plugin_runtime.Input):
       "title": "credentials",
       "properties": {
         "password": {
-          "$ref": "#/definitions/password",
+          "$ref": "#/definitions/custom_password",
           "title": "Password",
           "description": "Password details",
           "order": 1
@@ -96,10 +96,17 @@ class CreateUserInput(insightconnect_plugin_runtime.Input):
         }
       }
     },
-    "password": {
-      "type": "string",
-      "format": "password",
-      "displayType": "password"
+    "custom_password": {
+      "type": "object",
+      "title": "custom_password",
+      "properties": {
+        "value": {
+          "type": "string",
+          "title": "Value",
+          "description": "Password value",
+          "order": 1
+        }
+      }
     },
     "provider": {
       "type": "object",
@@ -530,7 +537,7 @@ class CreateUserOutput(insightconnect_plugin_runtime.Output):
       "title": "credentials",
       "properties": {
         "password": {
-          "$ref": "#/definitions/password",
+          "$ref": "#/definitions/custom_password",
           "title": "Password",
           "description": "Password details",
           "order": 1
@@ -549,10 +556,17 @@ class CreateUserOutput(insightconnect_plugin_runtime.Output):
         }
       }
     },
-    "password": {
-      "type": "string",
-      "format": "password",
-      "displayType": "password"
+    "custom_password": {
+      "type": "object",
+      "title": "custom_password",
+      "properties": {
+        "value": {
+          "type": "string",
+          "title": "Value",
+          "description": "Password value",
+          "order": 1
+        }
+      }
     },
     "provider": {
       "type": "object",

plugins/okta/komand_okta/actions/get_user/schema.py

@@ -424,7 +424,7 @@ class GetUserOutput(insightconnect_plugin_runtime.Output):
       "title": "credentials",
       "properties": {
         "password": {
-          "$ref": "#/definitions/password",
+          "$ref": "#/definitions/custom_password",
           "title": "Password",
           "description": "Password details",
           "order": 1
@@ -443,10 +443,17 @@ class GetUserOutput(insightconnect_plugin_runtime.Output):
         }
       }
     },
-    "password": {
-      "type": "string",
-      "format": "password",
-      "displayType": "password"
+    "custom_password": {
+      "type": "object",
+      "title": "custom_password",
+      "properties": {
+        "value": {
+          "type": "string",
+          "title": "Value",
+          "description": "Password value",
+          "order": 1
+        }
+      }
     },
     "provider": {
       "type": "object",

plugins/okta/komand_okta/tasks/monitor_logs/task.py

@@ -64,8 +64,10 @@ def run(self, params={}, state={}):  # pylint: disable=unused-argument
                 state[self.LAST_COLLECTION_TIMESTAMP] = self.get_last_collection_timestamp(new_logs, state)
                 return new_logs, state, has_more_pages, 200, None
             except ApiException as error:
+                self.logger.info(f"An API Exception has been raised. Status code: {error.status_code}. Error: {error}")
                 return [], state, False, error.status_code, error
         except Exception as error:
+            self.logger.info(f"An Exception has been raised. Error: {error}")
             return [], state, False, 500, PluginException(preset=PluginException.Preset.UNKNOWN, data=error)
 
     @staticmethod

plugins/okta/komand_okta/triggers/users_added_removed_from_group/schema.py

@@ -480,7 +480,7 @@ class UsersAddedRemovedFromGroupOutput(insightconnect_plugin_runtime.Output):
       "title": "credentials",
       "properties": {
         "password": {
-          "$ref": "#/definitions/password",
+          "$ref": "#/definitions/custom_password",
           "title": "Password",
           "description": "Password details",
           "order": 1
@@ -499,10 +499,17 @@ class UsersAddedRemovedFromGroupOutput(insightconnect_plugin_runtime.Output):
         }
       }
     },
-    "password": {
-      "type": "string",
-      "format": "password",
-      "displayType": "password"
+    "custom_password": {
+      "type": "object",
+      "title": "custom_password",
+      "properties": {
+        "value": {
+          "type": "string",
+          "title": "Value",
+          "description": "Password value",
+          "order": 1
+        }
+      }
     },
     "provider": {
       "type": "object",

plugins/okta/plugin.spec.yaml

@@ -13,7 +13,7 @@ sdk:
   version: 5
   user: nobody
 description: Secure identity management and single sign-on to any application
-version: 4.2.2
+version: 4.2.3
 connection_version: 4
 resources:
   source_url: https://github.com/rapid7/insightconnect-plugins/tree/master/plugins/okta
@@ -56,7 +56,7 @@ types:
       type: string
       required: false
       example: "Example Answer"
-  password:
+  custom_password:
     value:
       description: Password value
       title: Value
@@ -67,7 +67,7 @@ types:
     password:
       description: Password details
       title: Password
-      type: password
+      type: custom_password
       required: false
       example: {}
     provider:

plugins/okta/setup.py

@@ -3,7 +3,7 @@
 
 
 setup(name="okta-rapid7-plugin",
-      version="4.2.2",
+      version="4.2.3",
       description="Secure identity management and single sign-on to any application",
       author="rapid7",
       author_email="",