Source Okta: add permission stream under a custom role

airbyte-config/init/src/main/resources/seed/source_definitions.yaml

@@ -628,7 +628,7 @@
 - name: Okta
  sourceDefinitionId: 1d4fdb25-64fc-4569-92da-fcdca79a8372
  dockerRepository: airbyte/source-okta
- dockerImageTag: 0.1.10
+ dockerImageTag: 0.1.11
  documentationUrl: https://docs.airbyte.io/integrations/sources/okta
  icon: okta.svg
  sourceType: api

airbyte-config/init/src/main/resources/seed/source_specs.yaml

@@ -6027,7 +6027,7 @@
  - - "client_secret"
  oauthFlowOutputParameters:
  - - "access_token"
-- dockerImage: "airbyte/source-okta:0.1.10"
+- dockerImage: "airbyte/source-okta:0.1.11"
  spec:
  documentationUrl: "https://docs.airbyte.io/integrations/sources/okta"
  connectionSpecification:

airbyte-integrations/bases/source-acceptance-test/setup.py

@@ -20,6 +20,8 @@
  "dpath~=2.0.1",
  "jsonschema~=3.2.0",
  "jsonref==0.2",
+ "requests-mock",
+ "pytest-mock~=3.6.1",
 ]
 
 setuptools.setup(

airbyte-integrations/connectors/source-okta/Dockerfile

@@ -12,5 +12,5 @@ RUN pip install .
 ENV AIRBYTE_ENTRYPOINT "python /airbyte/integration_code/main.py"
 ENTRYPOINT ["python", "/airbyte/integration_code/main.py"]
 
-LABEL io.airbyte.version=0.1.10
+LABEL io.airbyte.version=0.1.11
 LABEL io.airbyte.name=airbyte/source-okta

airbyte-integrations/connectors/source-okta/README.md

@@ -6,20 +6,25 @@ For information about how to use this connector within Airbyte, see [the documen
 ## Local development
 
 ### Prerequisites
+
 **To iterate on this connector, make sure to complete this prerequisites section.**
 
 #### Build & Activate Virtual Environment and install dependencies
+
 From this connector directory, create a virtual environment:
-```
+
+```shell
 python -m venv .venv
 ```
 
 This will generate a virtualenv for this module in `.venv/`. Make sure this venv is active in your
 development environment of choice. To activate it from the terminal, run:
-```
+
+```shell
 source .venv/bin/activate
 pip install -r requirements.txt
 ```
+
 If you are in an IDE, follow your IDE's instructions to activate the virtualenv.
 
 Note that while we are installing dependencies from `requirements.txt`, you should only edit `setup.py` for your dependencies. `requirements.txt` is
@@ -28,14 +33,17 @@ If this is mumbo jumbo to you, don't worry about it, just put your deps in `setu
 should work as you expect.
 
 #### Building via Gradle
+
 You can also build the connector in Gradle. This is typically used in CI and not needed for your development workflow.
 
 To build using Gradle, from the Airbyte repository root, run:
-```
+
+```shell
 ./gradlew :airbyte-integrations:connectors:source-okta:build
 ```
 
 #### Create credentials
+
 **If you are a community contributor**, follow the instructions in the [documentation](https://docs.airbyte.io/integrations/sources/okta)
 to generate the necessary credentials. Then create a file `secrets/config.json` conforming to the `source_okta/spec.json` file.
 Note that any directory named `secrets` is gitignored across the entire Airbyte repo, so there is no danger of accidentally checking in sensitive information.
@@ -45,7 +53,8 @@ See `integration_tests/sample_config.json` for a sample config file.
 and place them into `secrets/config.json`.
 
 ### Locally running the connector
-```
+
+```shell
 python main.py spec
 python main.py check --config secrets/config.json
 python main.py discover --config secrets/config.json
@@ -55,76 +64,104 @@ python main.py read --config secrets/config.json --catalog integration_tests/con
 ### Locally running the connector docker image
 
 #### Build
+
 First, make sure you build the latest Docker image:
-```
+
+```shell
 docker build . -t airbyte/source-okta:dev
 ```
 
 You can also build the connector image via Gradle:
-```
+
+```shell
 ./gradlew :airbyte-integrations:connectors:source-okta:airbyteDocker
 ```
+
 When building via Gradle, the docker image name and tag, respectively, are the values of the `io.airbyte.name` and `io.airbyte.version` `LABEL`s in
 the Dockerfile.
 
 #### Run
+
 Then run any of the connector commands as follows:
-```
+
+```shell
 docker run --rm airbyte/source-okta:dev spec
 docker run --rm -v $(pwd)/secrets:/secrets airbyte/source-okta:dev check --config /secrets/config.json
 docker run --rm -v $(pwd)/secrets:/secrets airbyte/source-okta:dev discover --config /secrets/config.json
 docker run --rm -v $(pwd)/secrets:/secrets -v $(pwd)/integration_tests:/integration_tests airbyte/source-okta:dev read --config /secrets/config.json --catalog /integration_tests/configured_catalog.json
 ```
+
 ## Testing
+
 Make sure to familiarize yourself with [pytest test discovery](https://docs.pytest.org/en/latest/goodpractices.html#test-discovery) to know how your test files and methods should be named.
 First install test dependencies into your virtual environment:
-```
+
+```shell
 pip install .[tests]
 ```
+
 ### Unit Tests
+
 To run unit tests locally, from the connector directory run:
-```
+
+```shell
 python -m pytest unit_tests
 ```
 
 ### Integration Tests
+
 There are two types of integration tests: Acceptance Tests (Airbyte's test suite for all source connectors) and custom integration tests (which are specific to this connector).
+
 #### Custom Integration tests
-Place custom tests inside `integration_tests/` folder, then, from the connector root, run
+
+Place custom tests inside the `integration_tests``/` folder, then, from the connector root, run
+
 ```
 python -m pytest integration_tests
 ```
+
 #### Acceptance Tests
+
 Customize `acceptance-test-config.yml` file to configure tests. See [Source Acceptance Tests](https://docs.airbyte.io/connector-development/testing-connectors/source-acceptance-tests-reference) for more information.
 If your connector requires to create or destroy resources for use during acceptance tests create fixtures for it and place them inside integration_tests/acceptance.py.
 To run your integration tests with acceptance tests, from the connector root, run
+
 ```
 docker build . --no-cache -t airbyte/source-okta:dev \
 && python -m pytest -p source_acceptance_test.plugin
 ```
+
 To run your integration tests with docker
 
 ### Using gradle to run tests
+
 All commands should be run from airbyte project root.
 To run unit tests:
+
 ```
 ./gradlew :airbyte-integrations:connectors:source-okta:unitTest
 ```
+
 To run acceptance and custom integration tests:
+
 ```
 ./gradlew :airbyte-integrations:connectors:source-okta:integrationTest
 ```
 
 ## Dependency Management
+
 All of your dependencies should go in `setup.py`, NOT `requirements.txt`. The requirements file is only used to connect internal Airbyte dependencies in the monorepo for local development.
 We split dependencies between two groups, dependencies that are:
+
 * required for your connector to work need to go to `MAIN_REQUIREMENTS` list.
 * required for the testing need to go to `TEST_REQUIREMENTS` list
 
 ### Publishing a new version of the connector
+
 You've checked out the repo, implemented a million dollar feature, and you're ready to share your changes with the world. Now what?
+
 1. Make sure your changes are passing unit and integration tests.
-1. Bump the connector version in `Dockerfile` -- just increment the value of the `LABEL io.airbyte.version` appropriately (we use [SemVer](https://semver.org/)).
-1. Create a Pull Request.
-1. Pat yourself on the back for being an awesome contributor.
-1. Someone from Airbyte will take a look at your PR and iterate with you to merge it into master.
+2. Bump the connector version in `Dockerfile` -- just increment the value of the `LABEL io.airbyte.version` appropriately (we use [SemVer](https://semver.org/)).
+3. Create a Pull Request.
+4. Pat yourself on the back for being an awesome contributor.
+5. Someone from Airbyte will take a look at your PR and iterate with you to merge it into master.

airbyte-integrations/connectors/source-okta/integration_tests/catalog.json

@@ -66,6 +66,15 @@
  "sync_mode": "full_refresh",
  "destination_sync_mode": "overwrite",
  "primary_key": [["id"]]
+ },
+ {
+ "stream": {
+ "name": "permissions",
+ "json_schema": {}
+ },
+ "sync_mode": "full_refresh",
+ "destination_sync_mode": "overwrite",
+ "primary_key": [["label"]]
  }
  ]
 }

airbyte-integrations/connectors/source-okta/integration_tests/configured_catalog.json

@@ -70,6 +70,16 @@
  },
  "sync_mode": "full_refresh",
  "destination_sync_mode": "overwrite"
+ },
+ {
+ "stream": {
+ "name": "permissions",
+ "json_schema": {},
+ "supported_sync_modes": ["full_refresh"]
+ },
+ "sync_mode": "full_refresh",
+ "destination_sync_mode": "overwrite",
+ "primary_key": [["label"]]
  }
  ]
 }

airbyte-integrations/connectors/source-okta/sample_files/catalog.json

@@ -60,6 +60,25 @@
  "sync_mode": "full_refresh",
  "destination_sync_mode": "overwrite",
  "primary_key": [["id"]]
+ },
+ {
+ "stream": {
+ "name": "custom_roles",
+ "json_schema": {}
+ },
+ "sync_mode": "full_refresh",
+ "destination_sync_mode": "overwrite",
+ "primary_key": [["id"]]
+ },
+ {
+ "stream": {
+ "name": "permissions",
+ "json_schema": {},
+ "supported_sync_modes": ["full_refresh"]
+ },
+ "sync_mode": "full_refresh",
+ "destination_sync_mode": "overwrite",
+ "primary_key": [["label"]]
  }
  ]
 }

airbyte-integrations/connectors/source-okta/source_okta/schemas/custom_roles.json

@@ -1,6 +1,7 @@
 {
  "type": ["null", "object"],
  "additionalProperties": true,
+ "description": "Gets a paginated list of Custom Roles",
  "properties": {
  "id": {
  "type": ["null", "string"]

airbyte-integrations/connectors/source-okta/source_okta/schemas/permissions.json

@@ -0,0 +1,79 @@
+{
+ "description": "Gets the list of permissions included in a Custom Role identified by its id",
+ "properties": {
+ "label": {
+ "enum": [
+ "okta.users.manage",
+ "okta.users.create",
+ "okta.users.read",
+ "okta.users.credentials.manage",
+ "okta.users.credentials.resetFactors",
+ "okta.users.credentials.resetPassword",
+ "okta.users.credentials.expirePassword",
+ "okta.users.userprofile.manage",
+ "okta.users.lifecycle.manage",
+ "okta.users.lifecycle.activate",
+ "okta.users.lifecycle.deactivate",
+ "okta.users.lifecycle.suspend",
+ "okta.users.lifecycle.unsuspend",
+ "okta.users.lifecycle.delete",
+ "okta.users.lifecycle.unlock",
+ "okta.users.lifecycle.clearSessions",
+ "okta.users.groupMembership.manage",
+ "okta.users.appAssignment.manage",
+ "okta.groups.manage",
+ "okta.groups.create",
+ "okta.groups.members.manage",
+ "okta.groups.read",
+ "okta.groups.appAssignment.manage",
+ "okta.apps.read",
+ "okta.apps.manage",
+ "okta.apps.assignment.manage",
+ "okta.profilesources.import.run",
+ "okta.authzServers.read",
+ "okta.authzServers.manage",
+ "okta.customizations.read",
+ "okta.customizations.manage",
+ "okta.workflows.invoke"
+ ],
+ "type": "string",
+ "description": "Type of permissions"
+ },
+ "created": {
+ "format": "date-time",
+ "type": "string"
+ },
+ "lastUpdated": {
+ "format": "date-time",
+ "type": "string"
+ },
+ "_links": {
+ "properties": {
+ "assignee": {
+ "properties": {
+ "self": {
+ "type": ["null", "object"],
+ "additionalProperties": true,
+ "properties": {
+ "href": {
+ "type": ["null", "string"]
+ }
+ }
+ },
+ "role": {
+ "type": ["null", "object"],
+ "additionalProperties": true,
+ "properties": {
+ "href": {
+ "type": ["null", "string"]
+ }
+ }
+ }
+ }
+ }
+ },
+ "type": ["object", "null"]
+ }
+ },
+ "type": "object"
+}

airbyte-integrations/connectors/source-okta/source_okta/source.py

@@ -223,6 +223,7 @@ def request_params(
 
 
 class CustomRoles(OktaStream):
+ # https://developer.okta.com/docs/reference/api/roles/#list-roles
  primary_key = "id"
 
  def path(self, **kwargs) -> str:
@@ -250,6 +251,28 @@ def path(self, stream_slice: Mapping[str, Any] = None, **kwargs) -> str:
  return f"users/{user_id}/roles"
 
 
+class Permissions(OktaStream):
+ # https://developer.okta.com/docs/reference/api/roles/#list-permissions
+ primary_key = "label"
+ use_cache = True
+
+ def parse_response(
+ self,
+ response: requests.Response,
+ **kwargs,
+ ) -> Iterable[Mapping]:
+ yield from response.json()["permissions"]
+
+ def stream_slices(self, **kwargs):
+ custom_roles = CustomRoles(authenticator=self.authenticator, url_base=self.url_base)
+ for role in custom_roles.read_records(sync_mode=SyncMode.full_refresh):
+ yield {"role_id": role["id"]}
+
+ def path(self, stream_slice: Mapping[str, Any] = None, **kwargs) -> str:
+ role_id = stream_slice["role_id"]
+ return f"iam/roles/{role_id}/permissions"
+
+
 class OktaOauth2Authenticator(Oauth2Authenticator):
  def get_refresh_request_body(self) -> Mapping[str, Any]:
  return {
@@ -342,4 +365,5 @@ def streams(self, config: Mapping[str, Any]) -> List[Stream]:
  CustomRoles(**initialization_params),
  UserRoleAssignments(**initialization_params),
  GroupRoleAssignments(**initialization_params),
+ Permissions(**initialization_params),
  ]