auth0 6.0.0.beta.1 → 6.0.0.beta.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9c531f6573f6ae0f70bc95547ff90a6e1af3ac77e34deee17bb6a81fb19e23c5
-  data.tar.gz: cbf22fc3ebaf439a56de418f1272e2fcccc03b9095a3034c73174b2e88b42d11
+  metadata.gz: dd0f1ff1392a41ee4f6e742b8b820662bcb9daffc8dc6cbbbf4d5398eed8a186
+  data.tar.gz: fa0bdb21e466f5bdf0ed21e7447101fbf475e4d36eae82898b2b4f01fcaefda6
 SHA512:
-  metadata.gz: 6183d33cbe1139d52822689b2584370016a2ed679b40dab2d2554e03e56a5373caa76895ab6ecd0bd4f2c64327d9dc8ff44636370feb01d2165d8da995f4aa80
-  data.tar.gz: c619c14ba5ba8c6df5b3658404e27ff291ff271ce27686690a84494fc15f2a72987e6dd4dbbc2c80ee254e223db43041a2ac8d4836b37bc257e94e5b698301ac
+  metadata.gz: df57f79b623762df1ed6e9e0cbc50554de5a0ac66dcdab9acbdb462fcb35add976558de4161f99deb1ebd90d81bc3db803be7ed359e7e6ea7377875879619fac
+  data.tar.gz: 1c8cf7f7ccd37494a7914cc61cc7888a117229f76cda2bdfe8255d3021f512b040964ee8f9659ad685121583128d206a86c7844d095bc85d502def417a5da5dd

data/.fern/metadata.json

@@ -1,7 +1,7 @@
 {
-  "cliVersion": "5.37.10",
+  "cliVersion": "5.44.9",
   "generatorName": "fernapi/fern-ruby-sdk",
-  "generatorVersion": "1.12.11",
+  "generatorVersion": "1.13.1",
   "generatorConfig": {
     "clientModuleName": "Management",
     "package-name": "auth0",
@@ -10,8 +10,9 @@
     "offsetSemantics": "page-index",
     "useDefaultRequestParameterValues": true
   },
-  "originGitCommit": "2dea4e576b178b1445800474192bb8d8d60baaf3",
-  "originGitCommitIsDirty": true,
-  "invokedBy": "manual",
-  "sdkVersion": "5.19.1"
+  "originGitCommit": "708e068ccaf8e7742dbd2e18dea25e4ba5b0ce91",
+  "originGitCommitIsDirty": false,
+  "invokedBy": "ci",
+  "ciProvider": "github",
+  "sdkVersion": "5.20.1"
 }

data/.version

@@ -1 +1 @@
-v6.0.0.beta.1
+v6.0.0.beta.3

data/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Change Log
 
+## [v6.0.0.beta.3](https://github.com/auth0/ruby-auth0/tree/v6.0.0.beta.3) (2026-06-29)
+[Full Changelog](https://github.com/auth0/ruby-auth0/compare/v6.0.0.beta.2...v6.0.0.beta.3)
+
+**Added**
+- feat: add Phone Provider Protection, Token Vault IP allowlist, and Cross App Access requesting app [\#758](https://github.com/auth0/ruby-auth0/pull/758) ([fern-api[bot]](https://github.com/apps/fern-api))
+
+## [v6.0.0.beta.2](https://github.com/auth0/ruby-auth0/tree/v6.0.0.beta.2) (2026-06-12)
+[Full Changelog](https://github.com/auth0/ruby-auth0/compare/v6.0.0.beta.1...v6.0.0.beta.2)
+
+**Added**
+- feat: add Tenant Security Headers and Connection Session Expiry; remove Branding Phone Display [\#751](https://github.com/auth0/ruby-auth0/pull/751) ([fern-api[bot]](https://github.com/apps/fern-api))
+
 ## [v6.0.0.beta.1](https://github.com/auth0/ruby-auth0/tree/v6.0.0.beta.1) (2026-05-28)
 [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v6.0.0.beta.0...v6.0.0.beta.1)
 

data/lib/auth0/attack_protection/client.rb

@@ -30,6 +30,11 @@ module Auth0
         @captcha ||= Auth0::AttackProtection::Captcha::Client.new(client: @client)
       end
 
+      # @return [Auth0::PhoneProviderProtection::Client]
+      def phone_provider_protection
+        @phone_provider_protection ||= Auth0::AttackProtection::PhoneProviderProtection::Client.new(client: @client)
+      end
+
       # @return [Auth0::SuspiciousIPThrottling::Client]
       def suspicious_ip_throttling
         @suspicious_ip_throttling ||= Auth0::AttackProtection::SuspiciousIPThrottling::Client.new(client: @client)

data/lib/auth0/attack_protection/phone_provider_protection/client.rb

@@ -0,0 +1,82 @@
+# frozen_string_literal: true
+
+module Auth0
+  module AttackProtection
+    module PhoneProviderProtection
+      class Client
+        # @param client [Auth0::Internal::Http::RawClient]
+        #
+        # @return [void]
+        def initialize(client:)
+          @client = client
+        end
+
+        # Get the phone provider protection configuration for a tenant.
+        #
+        # @param request_options [Hash]
+        # @param _params [Hash]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        #
+        # @return [Auth0::Types::GetPhoneProviderProtectionResponseContent]
+        def get(request_options: {}, **_params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "GET",
+            path: "attack-protection/phone-provider-protection",
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::GetPhoneProviderProtectionResponseContent.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+
+        # Update the phone provider protection configuration for a tenant.
+        #
+        # @param request_options [Hash]
+        # @param params [Auth0::AttackProtection::PhoneProviderProtection::Types::PatchPhoneProviderProtectionRequestContent]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        #
+        # @return [Auth0::Types::PatchPhoneProviderProtectionResponseContent]
+        def patch(request_options: {}, **params)
+          params = Auth0::Internal::Types::Utils.normalize_keys(params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "PATCH",
+            path: "attack-protection/phone-provider-protection",
+            body: Auth0::AttackProtection::PhoneProviderProtection::Types::PatchPhoneProviderProtectionRequestContent.new(params).to_h,
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::PatchPhoneProviderProtectionResponseContent.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/auth0/attack_protection/phone_provider_protection/types/patch_phone_provider_protection_request_content.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module AttackProtection
+    module PhoneProviderProtection
+      module Types
+        class PatchPhoneProviderProtectionRequestContent < Internal::Types::Model
+          field :type, -> { Auth0::Types::PhoneProviderProtectionBackoffStrategyEnum }, optional: false, nullable: false
+        end
+      end
+    end
+  end
+end

data/lib/auth0/branding/phone/providers/client.rb

@@ -12,9 +12,9 @@ module Auth0
             @client = client
           end
 
-          # Retrieve a list of <a
-          # href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone
-          # providers</a> details set for a Tenant. A list of fields to include or exclude may also be specified.
+          # Retrieve a list of [phone
+          # providers](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details set
+          # for a Tenant. A list of fields to include or exclude may also be specified.
           #
           # @param request_options [Hash]
           # @param params [Hash]
@@ -52,10 +52,10 @@ module Auth0
             end
           end
 
-          # Create a <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone
-          # provider</a>.
-          # The <code>credentials</code> object requires different properties depending on the phone provider (which is
-          # specified using the <code>name</code> property).
+          # Create a [phone
+          # provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+          # The `credentials` object requires different properties depending on the phone provider (which is specified
+          # using the `name` property).
           #
           # @param request_options [Hash]
           # @param params [Auth0::Branding::Phone::Providers::Types::CreateBrandingPhoneProviderRequestContent]
@@ -89,8 +89,9 @@ module Auth0
             end
           end
 
-          # Retrieve <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone
-          # provider</a> details. A list of fields to include or exclude may also be specified.
+          # Retrieve [phone
+          # provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details. A
+          # list of fields to include or exclude may also be specified.
           #
           # @param request_options [Hash]
           # @param params [Hash]
@@ -156,10 +157,10 @@ module Auth0
             raise error_class.new(response.body, code: code)
           end
 
-          # Update a <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone
-          # provider</a>.
-          # The <code>credentials</code> object requires different properties depending on the phone provider (which is
-          # specified using the <code>name</code> property).
+          # Update a [phone
+          # provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+          # The `credentials` object requires different properties depending on the phone provider (which is specified
+          # using the `name` property).
           #
           # @param request_options [Hash]
           # @param params [Auth0::Branding::Phone::Providers::Types::UpdateBrandingPhoneProviderRequestContent]

data/lib/auth0/branding/types/update_branding_request_content.rb

@@ -10,8 +10,6 @@ module Auth0
 
         field :logo_url, -> { String }, optional: true, nullable: false
 
-        field :identifiers, -> { Auth0::Types::UpdateBrandingIdentifiers }, optional: true, nullable: false
-
         field :font, -> { Auth0::Types::UpdateBrandingFont }, optional: true, nullable: false
       end
     end

data/lib/auth0/clients/client.rb

@@ -193,17 +193,14 @@ module Auth0
       # Idempotent registration for Client ID Metadata Document (CIMD) clients.
       # Uses external_client_id as the unique identifier for upsert operations.
       #
-      # <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
-      # <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code>
-      # scope).
+      # **Create:** Returns 201 when a new client is created (requires `create:clients` scope).
+      # **Update:** Returns 200 when an existing client is updated (requires `update:clients` scope).
       #
       # This endpoint automatically:
-      # <ul>
-      #   <li>Fetches and validates the metadata document</li>
-      #   <li>Maps CIMD fields to Auth0 client configuration</li>
-      #   <li>Creates/rotates credentials from the JWKS</li>
-      #   <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
-      # </ul>
+      # - Fetches and validates the metadata document
+      # - Maps CIMD fields to Auth0 client configuration
+      # - Creates/rotates credentials from the JWKS
+      # - Enforces CIMD security policies (HTTPS-only, no shared secrets)
       #
       # @param request_options [Hash]
       # @param params [Auth0::Clients::Types::RegisterCimdClientRequestContent]

data/lib/auth0/clients/types/create_client_request_content.rb

@@ -90,6 +90,8 @@ module Auth0
 
         field :signed_request_object, -> { Auth0::Types::ClientSignedRequestObjectWithPublicKey }, optional: true, nullable: false
 
+        field :token_vault_privileged_access, -> { Auth0::Types::ClientTokenVaultPrivilegedAccessWithPublicKey }, optional: true, nullable: false
+
         field :compliance_level, -> { Auth0::Types::ClientComplianceLevelEnum }, optional: true, nullable: false
 
         field :skip_non_verifiable_callback_uri_confirmation_prompt, -> { Internal::Types::Boolean }, optional: true, nullable: false

data/lib/auth0/clients/types/update_client_request_content.rb

@@ -74,9 +74,9 @@ module Auth0
 
         field :initiate_login_uri, -> { String }, optional: true, nullable: false
 
-        field :native_social_login, -> { Auth0::Types::NativeSocialLogin }, optional: true, nullable: false
+        field :native_social_login, -> { Auth0::Types::NativeSocialLoginPatch }, optional: true, nullable: false
 
-        field :fedcm_login, -> { Auth0::Types::FedCmLogin }, optional: true, nullable: false
+        field :fedcm_login, -> { Auth0::Types::FedCmLoginPatch }, optional: true, nullable: false
 
         field :refresh_token, -> { Auth0::Types::ClientRefreshTokenConfiguration }, optional: true, nullable: false
 
@@ -96,6 +96,8 @@ module Auth0
 
         field :signed_request_object, -> { Auth0::Types::ClientSignedRequestObjectWithCredentialID }, optional: true, nullable: false
 
+        field :token_vault_privileged_access, -> { Auth0::Types::ClientTokenVaultPrivilegedAccessWithCredentialID }, optional: true, nullable: false
+
         field :compliance_level, -> { Auth0::Types::ClientComplianceLevelEnum }, optional: true, nullable: false
 
         field :skip_non_verifiable_callback_uri_confirmation_prompt, -> { Internal::Types::Boolean }, optional: true, nullable: false

data/lib/auth0/connections/types/create_connection_request_content.rb

@@ -25,6 +25,8 @@ module Auth0
         field :authentication, -> { Auth0::Types::ConnectionAuthenticationPurpose }, optional: true, nullable: false
 
         field :connected_accounts, -> { Auth0::Types::ConnectionConnectedAccountsPurpose }, optional: true, nullable: false
+
+        field :cross_app_access_requesting_app, -> { Auth0::Types::CrossAppAccessRequestingApp }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/connections/types/update_connection_request_content.rb

@@ -23,6 +23,8 @@ module Auth0
         field :authentication, -> { Auth0::Types::ConnectionAuthenticationPurpose }, optional: true, nullable: false
 
         field :connected_accounts, -> { Auth0::Types::ConnectionConnectedAccountsPurpose }, optional: true, nullable: false
+
+        field :cross_app_access_requesting_app, -> { Auth0::Types::CrossAppAccessRequestingApp }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/email_templates/client.rb

@@ -45,9 +45,9 @@ module Auth0
       end
 
       # Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`,
-      # `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`,
-      # `enrollment_email`, `mfa_oob_code`, `user_invitation`, and `async_approval`. The names `change_password`, and
-      # `password_reset` are also supported for legacy scenarios.
+      # `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`,
+      # `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, and `async_approval`. The names
+      # `change_password`, and `password_reset` are also supported for legacy scenarios.
       #
       # @param request_options [Hash]
       # @param params [Hash]

data/lib/auth0/emails/provider/client.rb

@@ -11,8 +11,9 @@ module Auth0
           @client = client
         end
 
-        # Retrieve details of the <a href="https://auth0.com/docs/customize/email/smtp-email-providers">email provider
-        # configuration</a> in your tenant. A list of fields to include or exclude may also be specified.
+        # Retrieve details of the [email provider
+        # configuration](https://auth0.com/docs/customize/email/smtp-email-providers) in your tenant. A list of fields
+        # to include or exclude may also be specified.
         #
         # @param request_options [Hash]
         # @param params [Hash]
@@ -52,57 +53,31 @@ module Auth0
           end
         end
 
-        # Create an <a href="https://auth0.com/docs/email/providers">email provider</a>. The <code>credentials</code>
-        # object
-        # requires different properties depending on the email provider (which is specified using the <code>name</code>
-        # property):
-        # <ul>
-        #   <li><code>mandrill</code> requires <code>api_key</code></li>
-        #   <li><code>sendgrid</code> requires <code>api_key</code></li>
-        #   <li>
-        # <code>sparkpost</code> requires <code>api_key</code>. Optionally, set <code>region</code> to <code>eu</code>
-        # to use
-        # the SparkPost service hosted in Western Europe; set to <code>null</code> to use the SparkPost service hosted
-        # in
-        #     North America. <code>eu</code> or <code>null</code> are the only valid values for <code>region</code>.
-        #   </li>
-        #   <li>
-        # <code>mailgun</code> requires <code>api_key</code> and <code>domain</code>. Optionally, set
-        # <code>region</code> to
-        # <code>eu</code> to use the Mailgun service hosted in Europe; set to <code>null</code> otherwise.
-        # <code>eu</code> or
-        #     <code>null</code> are the only valid values for <code>region</code>.
-        #   </li>
-        # <li><code>ses</code> requires <code>accessKeyId</code>, <code>secretAccessKey</code>, and
-        # <code>region</code></li>
-        #   <li>
-        #     <code>smtp</code> requires <code>smtp_host</code>, <code>smtp_port</code>, <code>smtp_user</code>, and
-        #     <code>smtp_pass</code>
-        #   </li>
-        # </ul>
-        # Depending on the type of provider it is possible to specify <code>settings</code> object with different
-        # configuration
+        # Create an [email provider](https://auth0.com/docs/email/providers). The `credentials` object
+        # requires different properties depending on the email provider (which is specified using the `name` property):
+        #
+        # - `mandrill` requires `api_key`
+        # - `sendgrid` requires `api_key`
+        # - `sparkpost` requires `api_key`. Optionally, set `region` to `eu` to use
+        #     the SparkPost service hosted in Western Europe; set to `null` to use the SparkPost service hosted in
+        #     North America. `eu` or `null` are the only valid values for `region`.
+        # - `mailgun` requires `api_key` and `domain`. Optionally, set `region` to
+        #     `eu` to use the Mailgun service hosted in Europe; set to `null` otherwise. `eu` or
+        #     `null` are the only valid values for `region`.
+        # - `ses` requires `accessKeyId`, `secretAccessKey`, and `region`
+        # - `smtp` requires `smtp_host`, `smtp_port`, `smtp_user`, and
+        #     `smtp_pass`
+        #
+        # Depending on the type of provider it is possible to specify `settings` object with different configuration
         # options, which will be used when sending an email:
-        # <ul>
-        #   <li>
-        #     <code>smtp</code> provider, <code>settings</code> may contain <code>headers</code> object.
-        #     <ul>
-        #       <li>
-        #         When using AWS SES SMTP host, you may provide a name of configuration set in
-        #         <code>X-SES-Configuration-Set</code> header. Value must be a string.
-        #       </li>
-        #       <li>
-        #         When using Sparkpost host, you may provide value for
-        #         <code>X-MSYS_API</code> header. Value must be an object.
-        #       </li>
-        #     </ul>
-        #   </li>
-        #   <li>
-        # for <code>ses</code> provider, <code>settings</code> may contain <code>message</code> object, where you can
-        # provide
-        #     a name of configuration set in <code>configuration_set_name</code> property. Value must be a string.
-        #   </li>
-        # </ul>
+        #
+        # - `smtp` provider, `settings` may contain `headers` object.
+        #     - When using AWS SES SMTP host, you may provide a name of configuration set in
+        #       `X-SES-Configuration-Set` header. Value must be a string.
+        #     - When using Sparkpost host, you may provide value for
+        #       `X-MSYS_API` header. Value must be an object.
+        # - For `ses` provider, `settings` may contain `message` object, where you can provide
+        #   a name of configuration set in `configuration_set_name` property. Value must be a string.
         #
         # @param request_options [Hash]
         # @param params [Auth0::Emails::Provider::Types::CreateEmailProviderRequestContent]
@@ -166,55 +141,32 @@ module Auth0
           raise error_class.new(response.body, code: code)
         end
 
-        # Update an <a href="https://auth0.com/docs/email/providers">email provider</a>. The <code>credentials</code>
-        # object
-        # requires different properties depending on the email provider (which is specified using the <code>name</code>
-        # property):
-        # <ul>
-        #   <li><code>mandrill</code> requires <code>api_key</code></li>
-        #   <li><code>sendgrid</code> requires <code>api_key</code></li>
-        #   <li>
-        # <code>sparkpost</code> requires <code>api_key</code>. Optionally, set <code>region</code> to <code>eu</code>
-        # to use
-        # the SparkPost service hosted in Western Europe; set to <code>null</code> to use the SparkPost service hosted
-        # in
-        #     North America. <code>eu</code> or <code>null</code> are the only valid values for <code>region</code>.
-        #   </li>
-        #   <li>
-        # <code>mailgun</code> requires <code>api_key</code> and <code>domain</code>. Optionally, set
-        # <code>region</code> to
-        # <code>eu</code> to use the Mailgun service hosted in Europe; set to <code>null</code> otherwise.
-        # <code>eu</code> or
-        #     <code>null</code> are the only valid values for <code>region</code>.
-        #   </li>
-        # <li><code>ses</code> requires <code>accessKeyId</code>, <code>secretAccessKey</code>, and
-        # <code>region</code></li>
-        #   <li>
-        #     <code>smtp</code> requires <code>smtp_host</code>, <code>smtp_port</code>, <code>smtp_user</code>, and
-        #     <code>smtp_pass</code>
-        #   </li>
-        # </ul>
-        # Depending on the type of provider it is possible to specify <code>settings</code> object with different
-        # configuration
+        # Update an [email provider](https://auth0.com/docs/email/providers). The `credentials` object
+        # requires different properties depending on the email provider (which is specified using the `name` property):
+        #
+        # - `mandrill` requires `api_key`
+        # - `sendgrid` requires `api_key`
+        # - `sparkpost` requires `api_key`. Optionally, set `region` to `eu` to use
+        #     the SparkPost service hosted in Western Europe; set to `null` to use the SparkPost service hosted in
+        #     North America. `eu` or `null` are the only valid values for `region`.
+        # - `mailgun` requires `api_key` and `domain`. Optionally, set `region` to
+        #     `eu` to use the Mailgun service hosted in Europe; set to `null` otherwise. `eu` or
+        #     `null` are the only valid values for `region`.
+        # - `ses` requires `accessKeyId`, `secretAccessKey`, and `region`
+        # - `smtp` requires `smtp_host`, `smtp_port`, `smtp_user`, and
+        #     `smtp_pass`
+        #
+        # Depending on the type of provider it is possible to specify `settings` object with different configuration
         # options, which will be used when sending an email:
-        # <ul>
-        #   <li>
-        #     <code>smtp</code> provider, <code>settings</code> may contain <code>headers</code> object.
-        #     <ul>
-        #       <li>
-        #         When using AWS SES SMTP host, you may provide a name of configuration set in
-        #         <code>X-SES-Configuration-Set</code> header. Value must be a string.
-        #       </li>
-        #       <li>
-        #         When using Sparkpost host, you may provide value for
-        #         <code>X-MSYS_API</code> header. Value must be an object.
-        #       </li>
-        #     </ul>
-        # for <code>ses</code> provider, <code>settings</code> may contain <code>message</code> object, where you can
-        # provide
-        #     a name of configuration set in <code>configuration_set_name</code> property. Value must be a string.
-        #   </li>
-        # </ul>
+        #
+        # - `smtp` provider, `settings` may contain `headers` object.
+        #     - When using AWS SES SMTP host, you may provide a name of configuration set in
+        #       `X-SES-Configuration-Set` header. Value must be a string.
+        #     - When using Sparkpost host, you may provide value for
+        #       `X-MSYS_API` header. Value must be an object.
+        #
+        #   For `ses` provider, `settings` may contain `message` object, where you can provide
+        #   a name of configuration set in `configuration_set_name` property. Value must be a string.
         #
         # @param request_options [Hash]
         # @param params [Auth0::Emails::Provider::Types::UpdateEmailProviderRequestContent]

data/lib/auth0/groups/roles/client.rb

@@ -11,7 +11,7 @@ module Auth0
           @client = client
         end
 
-        # Lists the <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> assigned to a group.
+        # Lists the [roles](https://auth0.com/docs/manage-users/access-control/rbac) assigned to a group.
         #
         # @param request_options [Hash]
         # @param params [Hash]
@@ -60,8 +60,7 @@ module Auth0
           end
         end
 
-        # Assign one or more <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> to a specified
-        # group.
+        # Assign one or more [roles](https://auth0.com/docs/manage-users/access-control/rbac) to a specified group.
         #
         # @param request_options [Hash]
         # @param params [Auth0::Groups::Roles::Types::CreateGroupRolesRequestParameters]
@@ -98,8 +97,7 @@ module Auth0
           raise error_class.new(response.body, code: code)
         end
 
-        # Unassign one or more <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> from a
-        # specified group.
+        # Unassign one or more [roles](https://auth0.com/docs/manage-users/access-control/rbac) from a specified group.
         #
         # @param request_options [Hash]
         # @param params [Auth0::Groups::Roles::Types::DeleteGroupRolesRequestContent]

data/lib/auth0/refresh_tokens/client.rb

@@ -67,7 +67,7 @@ module Auth0
         end
       end
 
-      # Revoke refresh tokens in bulk by ID list, user, user+client, or client.
+      # Revoke refresh tokens in bulk by ID list, user, user+client, or user+client+audience.
       #
       # @param request_options [Hash]
       # @param params [Auth0::RefreshTokens::Types::RevokeRefreshTokensRequestContent]

data/lib/auth0/tenants/settings/types/update_tenant_settings_request_content.rb

@@ -33,12 +33,20 @@ module Auth0
 
           field :session_lifetime, -> { Integer }, optional: true, nullable: false
 
+          field :session_lifetime_in_minutes, -> { Integer }, optional: true, nullable: false
+
           field :idle_session_lifetime, -> { Integer }, optional: true, nullable: false
 
+          field :idle_session_lifetime_in_minutes, -> { Integer }, optional: true, nullable: false
+
           field :ephemeral_session_lifetime, -> { Integer }, optional: true, nullable: false
 
           field :idle_ephemeral_session_lifetime, -> { Integer }, optional: true, nullable: false
 
+          field :ephemeral_session_lifetime_in_minutes, -> { Integer }, optional: true, nullable: false
+
+          field :idle_ephemeral_session_lifetime_in_minutes, -> { Integer }, optional: true, nullable: false
+
           field :sandbox_version, -> { String }, optional: true, nullable: false
 
           field :legacy_sandbox_version, -> { String }, optional: true, nullable: false
@@ -47,6 +55,8 @@ module Auth0
 
           field :enabled_locales, -> { Internal::Types::Array[Auth0::Types::TenantSettingsSupportedLocalesEnum] }, optional: true, nullable: false
 
+          field :security_headers, -> { Auth0::Types::TenantSettingsNullableSecurityHeaders }, optional: true, nullable: false
+
           field :session_cookie, -> { Auth0::Types::SessionCookieSchema }, optional: true, nullable: false
 
           field :sessions, -> { Auth0::Types::TenantSettingsSessions }, optional: true, nullable: false
@@ -75,6 +85,8 @@ module Auth0
 
           field :phone_consolidated_experience, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
+          field :include_session_metadata_in_tenant_logs, -> { Internal::Types::Boolean }, optional: true, nullable: false
+
           field :dynamic_client_registration_security_mode, -> { Auth0::Types::TenantSettingsDynamicClientRegistrationSecurityMode }, optional: true, nullable: false
 
           field :country_codes, -> { Auth0::Types::TenantSettingsCountryCodes }, optional: true, nullable: false

data/lib/auth0/types/acul_context_enum.rb

@@ -22,6 +22,7 @@ module Auth0
       UNTRUSTED_DATA_AUTHORIZATION_PARAMS_UI_LOCALES = "untrusted_data.authorization_params.ui_locales"
       USER_ORGANIZATIONS = "user.organizations"
       TRANSACTION_CUSTOM_DOMAIN_DOMAIN = "transaction.custom_domain.domain"
+      EXPERIMENT = "experiment"
     end
   end
 end

data/lib/auth0/types/client.rb

@@ -75,6 +75,10 @@ module Auth0
 
       field :initiate_login_uri, -> { String }, optional: true, nullable: false
 
+      field :native_social_login, -> { Auth0::Types::NativeSocialLogin }, optional: true, nullable: false
+
+      field :fedcm_login, -> { Auth0::Types::FedCmLogin }, optional: true, nullable: false
+
       field :refresh_token, -> { Auth0::Types::ClientRefreshTokenConfiguration }, optional: true, nullable: false
 
       field :default_organization, -> { Auth0::Types::ClientDefaultOrganization }, optional: true, nullable: false
@@ -93,6 +97,8 @@ module Auth0
 
       field :signed_request_object, -> { Auth0::Types::ClientSignedRequestObjectWithCredentialID }, optional: true, nullable: false
 
+      field :token_vault_privileged_access, -> { Auth0::Types::ClientTokenVaultPrivilegedAccessWithCredentialID }, optional: true, nullable: false
+
       field :compliance_level, -> { Auth0::Types::ClientComplianceLevelEnum }, optional: true, nullable: false
 
       field :skip_non_verifiable_callback_uri_confirmation_prompt, -> { Internal::Types::Boolean }, optional: true, nullable: false

data/lib/auth0/types/client_my_organization_patch_configuration.rb

@@ -11,6 +11,8 @@ module Auth0
       field :allowed_strategies, -> { Internal::Types::Array[Auth0::Types::ClientMyOrganizationConfigurationAllowedStrategiesEnum] }, optional: false, nullable: false
 
       field :connection_deletion_behavior, -> { Auth0::Types::ClientMyOrganizationDeletionBehaviorEnum }, optional: false, nullable: false
+
+      field :invitation_landing_client_id, -> { String }, optional: true, nullable: false
     end
   end
 end