auth0 / auth0-deploy-cli

The Auth0 Deploy CLI is a tool that helps you manage your Auth0 tenant configuration. It integrates into your development workflows as a standalone CLI or as a node module.
MIT License
248 stars 155 forks source link

Issue with OIDC Configuration Validation #935

Open davidlacho opened 3 months ago

davidlacho commented 3 months ago

Checklist

Description

We are migrating our Auth0 setup to our codebase using GitHub Actions. To do this, we exported the existing tenant configuration with a0deploy export --format=yaml, which produces a tenant.yaml file along with other resource configuration files. The goal is to update parts of the Auth0 configuration and then deploy the entire setup using a0deploy import --input_file ./dev/tenant.yaml.

The Issue:

Upon attempting to deploy the configuration, we encounter the following error:

Bad Request: "options.oidc_metadata.scopes_supported" must contain less than or equal to 200 items This error suggests that our OpenID Connect (OIDC) configuration has more than 200 scopes listed in the scopes_supported field. However, this is the same configuration currently accepted and operational in our Auth0 environment, which makes this validation error puzzling.

Expectation

This validation does not limit the number of scopes

Reproduction

  1. Given that our client's OIDC Configuration contains > 200 supported_scopes values
  2. When we use our the CLI tool for deployment
  3. Then the deployment fails with the above error

Deploy CLI version

7.23.1

Node version

v20.12.2