add zod

Author: stephenkiers

clients/admin-ui/src/features/config-wizard/AuthenticateOktaForm.tsx

@@ -73,7 +73,21 @@ const ValidationSchema = Yup.object().shape({
     .required()
     .trim()
     .label("Scopes")
-    .default("okta.apps.read"),
+    .default("okta.apps.read")
+    .test(
+      "valid-scopes",
+      "Scopes must be a single scope or comma-separated list (e.g., 'okta.apps.read' or 'okta.apps.read, okta.users.read')",
+      (value) => {
+        if (!value) {
+          return true;
+        }
+        // Split on comma and check each scope is non-empty and has no internal whitespace
+        const scopes = value.split(",").map((s) => s.trim());
+        return scopes.every(
+          (scope) => scope.length > 0 && !/\s/.test(scope),
+        );
+      },
+    ),
 });
 
 const AuthenticateOktaForm = () => {

clients/admin-ui/src/features/integrations/integration-type-info/oktaInfo.tsx

@@ -21,7 +21,6 @@ export const OKTA_DESCRIPTION = (
   </>
 );
 
-/** Full authentication description for Okta OAuth2 setup */
 export const OKTA_AUTH_DESCRIPTION =
   "Okta integration uses OAuth2 Client Credentials with private_key_jwt for secure authentication. You will need to generate an RSA key in Okta and copy the JSON key to use in Fides.";
 

src/fides/cli/utils.py

@@ -327,7 +327,7 @@ def handle_okta_credentials_options(
                 "Illegal usage: org-url/client-id/private-key and credentials-id cannot be used together"
             )
         okta_config = OktaConfig(
-            orgUrl=org_url, clientId=client_id, privateKey=private_key
+            org_url=org_url, client_id=client_id, private_key=private_key
         )
     if credentials_id:
         okta_config = get_config_okta_credentials(