Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing support for Bot Detection in attackProtection setttings #649

Open
jeremysimmons opened this issue Sep 8, 2022 · 8 comments
Open

Comments

@jeremysimmons
Copy link

Description

Missing JSON file for configuring bot detection feature

Reproduction

Detail the steps taken to reproduce this error, what was expected, and whether this issue can be reproduced consistently or if it is intermittent.

npm i -g auth0-deploy-cli
a0deploy export --config_file config.json --format directory --output_folder tenant

reference https://auth0.com/docs/deploy-monitor/deploy-cli-tool/install-and-configure-the-deploy-cli-tool

a0deploy Outputs files in
tennant/attack-protection

  • breached-password-detection.json
  • brute-force-protection.json
  • suspicious-ip-throttling.json

Missing a file for Bot Detection feature, expected utility to include, but suspect it is not, as it's not listed in the management api docs.
https://auth0.com/docs/api/management/v2#!/Attack_Protection/get_breached_password_detection
https://auth0.com/docs/api/management/v2#!/Attack_Protection/get_brute_force_protection
https://auth0.com/docs/api/management/v2#!/Attack_Protection/get_suspicious_ip_throttling

Environment

auth0-deploy-cli 7.3.0
node v16.17.0
Microsoft Windows [Version 10.0.22000.856]

@willvedd
Copy link
Contributor

willvedd commented Sep 9, 2022

As I think you've deduced, while Bot Detection is nestled under attack protection in the dashboard, it is not available in the management API yet. The appropriate teams are aware and we expect to have that endpoint established around EOY22-BOY23. At which point we'd immediately integrated into the Deploy CLI. Related: #546

@jeremysimmons
Copy link
Author

jeremysimmons commented Sep 9, 2022

Thank you for the prompt reply @willvedd .

Please emphasize to management how releasing a feature in the UI that does not have a matching API is detriment for teams that have adopted devops and code-as-configuration.

We look forward to this being supported in the future!

Sadly, Related: #377 was opened 1 year ago...

@aldodfm
Copy link

aldodfm commented Nov 24, 2022

THe same here!

@willvedd
Copy link
Contributor

willvedd commented Feb 1, 2023

Following-up again on this. We understand that this is a highly-desired feature for folks. Unfortunately, we're still blocked on this as Auth0 Management API does not support bot detection. There has been some motion internally to get this out, but I'm unable to provide an estimated delivery date for this.

@jeremysimmons
Copy link
Author

@willvedd thanks for updating the community on the status.

@michael-mcguinness
Copy link

Any update on this? It is a year since this was last commented upon. Even an estimated date would be helpful.

@kapil-gulati
Copy link

I am also looking for update on this same as Michael. Is there an ETA when we can see this available thru deploy-cli

@bku-bezell
Copy link

Any updates?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants