auth0/terraform-provider-auth0 v1.58.0

on GitHub

FEATURES:

• resource/auth0_tenant – Add sessions.anonymous block with lifetime_in_minutes and activate_cookie attributes for managing anonymous session lifetime and activation (EA only) (#1712)
• resource/auth0_client – Add anonymous_sessions block with active attribute to opt a client into anonymous session support; removing the block clears the setting on the API (EA only) (#1712)
• resource/auth0_resource_server – Add subject_type_authorization.anonymous_user.policy and token_lifetime_for_anonymous_access_tokens for anonymous user authorization settings (EA only) (#1712)
• resource/auth0_client_grant – Add anonymous_user as an accepted value for subject_type (EA only) (#1712)
• resource/auth0_resource_server – Add access_token block with claims_mapping.custom_claims (a list of { name, expression } rules, max 20) for custom claims mapping into resource server access tokens (EA only) (#1721)
• data-source/auth0_resource_server – Expose access_token block with claims_mapping.custom_claims (EA only) (#1721)
• resource/auth0_client – Add enforce_permission_ceiling and enforce_self_assignment_restriction boolean attributes to my_organization_configuration for member management controls (EA only) (#1720)

ENHANCEMENTS:

• resource/auth0_guardian – Add settings block with display_remember_me_checkbox, remember_me_default_value, mfa_session_inactivity_timeout, and mfa_session_overall_timeout for advanced MFA session configuration (#1684)
• resource/auth0_guardian – Add phone_settings and email_settings blocks with otp_length and otp_expiration_time for per-factor OTP configuration (#1684)
• resource/auth0_guardian – Surface missing Adaptive MFA entitlement as a non-fatal warning instead of a hard error, allowing apply to succeed on tenants without the add-on (#1716)
• resource/auth0_risk_assessments – Surface missing Adaptive MFA entitlement as a non-fatal warning (#1716)
• resource/auth0_risk_assessments_new_device – Surface missing Adaptive MFA entitlement as a non-fatal warning (#1716)
• resource/auth0_prompt_screen_partials – Add confirmation as an accepted prompt_type value (#1710)
• resource/auth0_prompt_custom_text – Add confirmation as an accepted prompt value (#1710)
• resource/auth0_action – Add post-credential-validation as an accepted trigger value (limited release; enabled per tenant by Auth0) (#1714)

BUG FIXES:

• resource/auth0_action – Add status as a Computed attribute; a deploy = true action stuck in failed state now surfaces a replacement plan instead of silently reporting no changes (#1705)
• resource/auth0_user_attribute_profile – Preserve the configured order of user_attributes to eliminate perpetual plan drift when the attribute order differs from alphabetical (#1711)
• resource/auth0_log_stream – Preserve pii_config when updating other fields (e.g. filters), preventing silent resets of PII obfuscation settings (#1713)