Missing support for Bot Detection in attackProtection setttings

[jeremysimmons]

Description

Missing JSON file for configuring bot detection feature

Reproduction

Detail the steps taken to reproduce this error, what was expected, and whether this issue can be reproduced consistently or if it is intermittent.

npm i -g auth0-deploy-cli
a0deploy export --config_file config.json --format directory --output_folder tenant

reference https://auth0.com/docs/deploy-monitor/deploy-cli-tool/install-and-configure-the-deploy-cli-tool

a0deploy Outputs files in
tennant/attack-protection

• breached-password-detection.json
• brute-force-protection.json
• suspicious-ip-throttling.json

Missing a file for Bot Detection feature, expected utility to include, but suspect it is not, as it's not listed in the management api docs.
https://auth0.com/docs/api/management/v2#!/Attack_Protection/get_breached_password_detection
https://auth0.com/docs/api/management/v2#!/Attack_Protection/get_brute_force_protection
https://auth0.com/docs/api/management/v2#!/Attack_Protection/get_suspicious_ip_throttling

Environment

auth0-deploy-cli 7.3.0
node v16.17.0
Microsoft Windows [Version 10.0.22000.856]

[willvedd]

As I think you've deduced, while Bot Detection is nestled under attack protection in the dashboard, it is not available in the management API yet. The appropriate teams are aware and we expect to have that endpoint established around EOY22-BOY23. At which point we'd immediately integrated into the Deploy CLI. Related: #546

[jeremysimmons]

Thank you for the prompt reply @willvedd .

Please emphasize to management how releasing a feature in the UI that does not have a matching API is detriment for teams that have adopted devops and code-as-configuration.

We look forward to this being supported in the future!

Sadly, Related: #377 was opened 1 year ago...

[aldodfm]

THe same here!

[willvedd]

Following-up again on this. We understand that this is a highly-desired feature for folks. Unfortunately, we're still blocked on this as Auth0 Management API does not support bot detection. There has been some motion internally to get this out, but I'm unable to provide an estimated delivery date for this.

[jeremysimmons]

@willvedd thanks for updating the community on the status.

[michael-mcguinness]

Any update on this? It is a year since this was last commented upon. Even an estimated date would be helpful.

[kapil-gulati]

I am also looking for update on this same as Michael. Is there an ETA when we can see this available thru deploy-cli

[bku-bezell]

Any updates?

[krishnasism]

Any updates? 👀

[michali-kentico]

I've found that the support in the Auth0 Management API should be added "sometime between July and September of 2024"
https://community.auth0.com/t/bot-detection-configuration-via-management-api/136328#solution-2

[Paul171]

any update?

[dmunch]

I've found that the support in the Auth0 Management API should be added "sometime between July and September of 2024" https://community.auth0.com/t/bot-detection-configuration-via-management-api/136328#solution-2

That page doesn't seem to be available yet.
API docs don't mention bot detection either yet: https://auth0.com/docs/api/management/v2/attack-protection/get-breached-password-detection.

It seems like @willvedd moved on to OpenFGA, but maybe you're nevertheless able to provide a new contact?

Also tagging @kushalshit27 and @ramya18101.

[kushalshit27]

Hi, @dmunch ,
Apologies for the delay. We are actively working on supporting this feature by Q2 (May-July) of FY26.

@kushalshit27 and @ramya18101 are also active maintainers. We are here to assist 🙂 . Feel free to tag us.