Skip to content

feat: Support application access permissions#1315

Merged
kushalshit27 merged 9 commits intomainfrom
DXCDT-1117-support-application-access-permissions
Sep 2, 2025
Merged

feat: Support application access permissions#1315
kushalshit27 merged 9 commits intomainfrom
DXCDT-1117-support-application-access-permissions

Conversation

@kushalshit27
Copy link
Contributor

@kushalshit27 kushalshit27 commented Aug 20, 2025

🔧 Changes

Subject Type Authorization Support

Added a new --subject-type-authorization flag to the auth0 apis create and auth0 apis update commands, allowing users to specify access policies for user and client flows via a JSON object.

Exampls:

# create
auth0 apis create --name myapi --identifier http://my-api --subject-type-authorization '{"user":{"policy":"allow_all"},"client":{"policy":"deny_all"}}'

# update
auth0 apis update <api-id|api-audience> --subject-type-authorization '{"user":{"policy":"require_client_grant"},"client":{"policy":"deny_all"}}'

📚 References

🔬 Testing

  • Unit test added
  • E2E test added

📝 Checklist

  • All new/changed/fixed functionality is covered by tests (or N/A)
  • I have added documentation for all new/changed functionality (or N/A)

- docs/auth0_apis_create.md: Add subject-type-authorization flag example
- docs/auth0_apis_update.md: Add subject-type-authorization flag example

feat(cli): Enhance API command with subject type authorization
- internal/cli/apis.go: Add subject type authorization handling in create and update commands

feat(display): Display subject type authorization in API view
- internal/display/apis.go: Include subject type authorization in API view output

chore(go): Update go-auth0 dependency to latest version
- go.mod: Bump go-auth0 from v1.25.0 to v1.26.1
- go.sum: Update go-auth0 checksum
- internal/cli/apis_test.go: Implement tests for APIs with subject type authorization.
- test/integration/apis-test-cases.yaml: Add integration tests for creating, updating, and showing APIs with subject type authorization.
@kushalshit27 kushalshit27 changed the title feat: Support application access permissions [don't merge] feat: Support application access permissions Aug 20, 2025
feat(go.sum): update go-auth0 checksum for v1.27.0
refactor(internal/cli/apis.go): simplify subject type authorization handling
refactor(internal/cli/apis.go): remove unused subject type policy constants
refactor(internal/cli/apis_test.go): remove parseSubjectTypeAuthorization test
refactor(internal/display/apis.go): change subject type authorization JSON formatting
@kushalshit27 kushalshit27 changed the title [don't merge] feat: Support application access permissions feat: Support application access permissions Aug 30, 2025
@kushalshit27 kushalshit27 marked this pull request as ready for review August 30, 2025 16:04
@kushalshit27 kushalshit27 requested a review from a team as a code owner August 30, 2025 16:04
@kushalshit27 kushalshit27 merged commit 3a9c43e into main Sep 2, 2025
8 checks passed
@kushalshit27 kushalshit27 deleted the DXCDT-1117-support-application-access-permissions branch September 2, 2025 03:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants