Skip to content

Conversation

@palashgdev
Copy link
Contributor

@palashgdev palashgdev commented Dec 18, 2025

🔧 Changes

This PR introduces the AUTH0_INCLUDED_CONNECTIONS configuration option to the Auth0 Deploy CLI. This allows for a "managed-only" approach to connection management, which is essential for environments where self-service or dynamic connections exist alongside managed infrastructure.

Key Improvements:

  • Explicit Inclusion: Users can now define exactly which connections the Deploy CLI is allowed to touch.
  • Self-Service SSO Support: Prevents the CLI from accidentally deleting or modifying connections created by customers via self-service portals.
  • Operation Scoping: This setting filters connections across all operations: export and import.

JSON Format

{
  "AUTH0_INCLUDED_CONNECTIONS": [
    "github",
    "google-oauth2"
  ]
}

Environment Variable

export AUTH0_INCLUDED_CONNECTIONS='["github","google-oauth2"]'

📚 References

Closes #1163
Enterprise Connections

🔬 Testing

Unit test added
E2E added

📝 Checklist

  • All new/changed/fixed functionality is covered by tests (or N/A)
  • I have added documentation for all new/changed functionality (or N/A)

@palashgdev palashgdev self-assigned this Dec 18, 2025
@codecov-commenter
Copy link

codecov-commenter commented Dec 18, 2025

Codecov Report

❌ Patch coverage is 92.85714% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 80.41%. Comparing base (0b45726) to head (21fcdba).

Files with missing lines Patch % Lines
src/tools/auth0/schema.ts 50.00% 1 Missing and 1 partial ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master    #1242      +/-   ##
==========================================
+ Coverage   80.37%   80.41%   +0.04%     
==========================================
  Files         146      146              
  Lines        5777     5800      +23     
  Branches     1177     1185       +8     
==========================================
+ Hits         4643     4664      +21     
- Misses        645      646       +1     
- Partials      489      490       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@palashgdev palashgdev marked this pull request as ready for review December 19, 2025 10:35
@palashgdev palashgdev requested a review from a team as a code owner December 19, 2025 10:35
@kushalshit27
Copy link
Contributor

Please mark it ready to review once the unit tests pass

@kushalshit27 kushalshit27 marked this pull request as draft December 19, 2025 10:43
@palashgdev palashgdev marked this pull request as ready for review December 19, 2025 12:09
Copy link
Contributor

@kushalshit27 kushalshit27 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you please point to where we are adding the validation restriction when AUTH0_INCLUDED_CONNECTIONS and AUTH0_EXCLUDED_CONNECTIONS together?

@kushalshit27 kushalshit27 changed the title fix: managed connection inclusion feat: managed connection inclusion Dec 22, 2025
@kushalshit27 kushalshit27 marked this pull request as draft December 22, 2025 09:18
Copy link
Contributor

@kushalshit27 kushalshit27 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Current code changes are not working. Please add instructions on how to test, ensuring that the changes are thoroughly tested before moving to 'PR ready to review'.

- Adjusted logic to ensure 'enterprise-saml' is not marked for deletion when not in the include list.
- Modified tests to reflect that 'google-oauth2' should not be deleted if it's not in the include list.
- Updated behavior to only delete managed connections when assets are empty, preserving unmanaged ones.
- Ensured that unmanaged connections are ignored during updates, preventing unintended deletions.
@palashgdev palashgdev marked this pull request as ready for review January 5, 2026 09:35
@palashgdev palashgdev merged commit 13723fa into master Jan 8, 2026
6 checks passed
@palashgdev palashgdev deleted the DXCDT-1333-deploy-cli-Managed-connection-inclusion branch January 8, 2026 08:59
This was referenced Jan 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Managed connection inclusion

4 participants