Skip to content

Add bot detection commands#1435

Open
bkiran6398 wants to merge 5 commits intomainfrom
DXCDT-1069/add_bot_detection
Open

Add bot detection commands#1435
bkiran6398 wants to merge 5 commits intomainfrom
DXCDT-1069/add_bot_detection

Conversation

@bkiran6398
Copy link
Contributor

@bkiran6398 bkiran6398 commented Feb 11, 2026

Adds bot detection management commands to the Auth0 CLI.

🔧 Changes

New Commands:

  • auth0 protection bot-detection show - Display current settings
  • auth0 protection bot-detection update - Update settings

Configurable Settings:

  • Detection sensitivity level (low, medium, high)
  • CAPTCHA challenge policies for password, passwordless, and password reset flows
  • IP allowlist for trusted addresses
  • Monitoring mode (logs without blocking)

Additional Changes:

  • Updated go-auth0 SDK to support bot detection API
  • Consolidated attack protection integration tests into dedicated file

📚 References

🔬 Testing

Automated Testing:

  • Integration tests for show and update commands
  • All existing attack protection tests pass

Manual Testing:

  • Interactive prompts when flags omitted
  • Flag combinations (short and long forms)
  • JSON and JSON-compact output formats
  • IP allowlist with IPv4, IPv6, and CIDR notation

📝 Checklist

  • All new/changed/fixed functionality is covered by tests (or N/A)
  • I have added documentation for all new/changed functionality (or N/A)

…etection branch commit

- Updated the go-auth0 dependency from v1.33.0 to v1.33.1-0.20260211120643-ac1cfcb90495.
- This change ensures compatibility with the latest features and fixes provided by the go-auth0 library.
- Introduced new commands for managing bot detection settings, including:
  - `bot-detection show`: Displays current bot detection settings.
  - `bot-detection update`: Updates bot detection settings with user-defined parameters.
- Added `GetBotDetection` and `UpdateBotDetection` methods to the AttackProtectionAPI interface for retrieving and updating settings.
- Implemented a new `botDetectionView` struct for rendering bot detection settings in the CLI.
- Enhanced the attack protection command structure to include bot detection management.
- Introduced new test cases for bot detection functionality.
- Added tests for both showing and updating bot detection settings.
- Ensured that the output contains relevant fields.
- These changes enhance the coverage of the attack protection feature.
…ated file

- Created a new YAML file for integration test cases specifically for
  attack protection features, including bot detection.
- Moved existing test cases related to attack protection from
  `test-cases.yaml` to `attack-protection-test-cases.yaml` for better
  organization and clarity.
- Each test case verifies the expected output and exit codes for
  various attack protection commands, ensuring functionality and
  reliability of the bot detection feature.
- Updated `auth0_protection.md` to include a link to the new bot detection management commands.
- Created `auth0_protection_bot-detection.md` to describe bot detection features and settings.
- Added `auth0_protection_bot-detection_show.md` for displaying current bot detection settings.
- Added `auth0_protection_bot-detection_update.md` for updating bot detection settings.
@bkiran6398 bkiran6398 marked this pull request as ready for review February 12, 2026 08:51
@bkiran6398 bkiran6398 requested a review from a team as a code owner February 12, 2026 08:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant