feat(analytics): improve error handling for API responses

Author: ramya18101

internal/cli/api.go

@@ -10,6 +10,7 @@ import (
 	"regexp"
 	"strings"
 
+	"github.com/auth0/go-auth0/v2/management/core"
 	"github.com/spf13/cobra"
 
 	"github.com/auth0/auth0-cli/internal/ansi"
@@ -171,6 +172,10 @@ func apiCmdRun(cli *cli, inputs *apiCmdInputs) func(cmd *cobra.Command, args []s
 			return err
 		}
 
+		if response.StatusCode >= http.StatusBadRequest {
+			return newAPIResponseError(response.StatusCode, response.Header, rawBodyJSON)
+		}
+
 		if len(rawBodyJSON) == 0 {
 			if cli.debug {
 				cli.renderer.Infof("Response body is empty.")
@@ -279,6 +284,19 @@ func (i *apiCmdInputs) parseRaw(args []string) {
 	i.RawURI = args[lenArgs-1]
 }
 
+// newAPIResponseError builds a go-auth0 v2 management error from a non-2xx raw
+// `auth0 api` response. Using the real management error type (rather than a
+// bespoke one) means classifyCommandFailure maps the status to an error_class
+// through the same path as the typed SDK commands.
+func newAPIResponseError(statusCode int, header http.Header, body []byte) error {
+	message := strings.TrimSpace(string(body))
+	if message == "" {
+		message = http.StatusText(statusCode)
+	}
+
+	return core.NewAPIError(statusCode, header, fmt.Errorf("API request failed: %s", message))
+}
+
 func isInsufficientScopeError(r *http.Response) error {
 	if r.StatusCode != 403 {
 		return nil

internal/cli/root.go

@@ -10,6 +10,7 @@ import (
 	"unicode"
 
 	"github.com/auth0/go-auth0/management"
+	"github.com/auth0/go-auth0/v2/management/core"
 	"github.com/spf13/cobra"
 
 	"github.com/auth0/auth0-cli/internal/analytics"
@@ -277,22 +278,43 @@ func classifyCommandFailure(err error) map[string]string {
 		return properties
 	}
 
-	var managementErr management.Error
-	if errors.As(err, &managementErr) {
-		status := managementErr.Status()
-		switch {
-		case status == 401 || status == 403:
-			properties["error_class"] = "auth"
-		case status == 400 || status == 422:
-			properties["error_class"] = "validation"
-		case status == 404:
-			properties["error_class"] = "not_found"
-		case status == 429:
-			properties["error_class"] = "rate_limit"
-		case status >= 500:
-			properties["error_class"] = "api"
-		}
+	if status, ok := managementHTTPStatus(err); ok {
+		properties["error_class"] = errorClassForHTTPStatus(status)
 	}
 
 	return properties
 }
+
+// managementHTTPStatus extracts the HTTP status from a go-auth0 management API
+// error anywhere in the error chain, supporting both the v1 (management.Error)
+// and v2 (*core.APIError) SDK error types.
+func managementHTTPStatus(err error) (int, bool) {
+	var v1 management.Error
+	if errors.As(err, &v1) {
+		return v1.Status(), true
+	}
+
+	var v2 *core.APIError
+	if errors.As(err, &v2) {
+		return v2.StatusCode, true
+	}
+
+	return 0, false
+}
+
+func errorClassForHTTPStatus(status int) string {
+	switch {
+	case status == 401 || status == 403:
+		return "auth"
+	case status == 400 || status == 422:
+		return "validation"
+	case status == 404:
+		return "not_found"
+	case status == 429:
+		return "rate_limit"
+	case status >= 500:
+		return "api"
+	default:
+		return "unknown"
+	}
+}