auth0 6.0.0.beta.3 → 6.0.0.beta.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dd0f1ff1392a41ee4f6e742b8b820662bcb9daffc8dc6cbbbf4d5398eed8a186
-  data.tar.gz: fa0bdb21e466f5bdf0ed21e7447101fbf475e4d36eae82898b2b4f01fcaefda6
+  metadata.gz: 9e241ac2a91d98b8a1ea47e5e608745bf4a079599ae4984328a7c164e5f638ee
+  data.tar.gz: '08d0a78287039e8acb0c143c141ad40b87c363b2bc0a4ec8f2112209b1010f7a'
 SHA512:
-  metadata.gz: df57f79b623762df1ed6e9e0cbc50554de5a0ac66dcdab9acbdb462fcb35add976558de4161f99deb1ebd90d81bc3db803be7ed359e7e6ea7377875879619fac
-  data.tar.gz: 1c8cf7f7ccd37494a7914cc61cc7888a117229f76cda2bdfe8255d3021f512b040964ee8f9659ad685121583128d206a86c7844d095bc85d502def417a5da5dd
+  metadata.gz: 932d565d27507eb9f5bb90ca5ae05fba481ca715cb38cc9dd0a096068bbfd2180a7a38d165fe863eab49b9338558c8075235c617545cb09380217eb69da05185
+  data.tar.gz: f2a217f155ac1bf1040efa0a0df6e9831f9dac594c586edfb75b94fa5f4dd3ba93f78ab27041610693a5dba7f3586dd21a27168423e0d480e45e4714445bcec7

data/.fern/metadata.json

@@ -1,7 +1,7 @@
 {
-  "cliVersion": "5.44.9",
+  "cliVersion": "5.75.6",
   "generatorName": "fernapi/fern-ruby-sdk",
-  "generatorVersion": "1.13.1",
+  "generatorVersion": "1.17.8",
   "generatorConfig": {
     "clientModuleName": "Management",
     "package-name": "auth0",
@@ -10,7 +10,7 @@
     "offsetSemantics": "page-index",
     "useDefaultRequestParameterValues": true
   },
-  "originGitCommit": "708e068ccaf8e7742dbd2e18dea25e4ba5b0ce91",
+  "originGitCommit": "e2027b1584b1668f39ed802f114e54458b09bb57",
   "originGitCommitIsDirty": false,
   "invokedBy": "ci",
   "ciProvider": "github",

data/.fern/replay.lock

@@ -0,0 +1,28 @@
+# DO NOT EDIT MANUALLY - Managed by Fern Replay
+version: "1.0"
+generations:
+  - commit_sha: 78ff190749feb3803b4e9629d57294e4b09d3ead
+    tree_hash: c3e180060dcea59de5c4290a242c66639e5cecff
+    timestamp: 2026-07-14T04:31:08.668Z
+    cli_version: unknown
+    generator_versions: {}
+  - commit_sha: 6caf043a4469185ba0f690eb2da7c6889138f4d7
+    tree_hash: dbc1a9fac4f5566751f2760dc8e1191d47892bd5
+    timestamp: 2026-07-14T04:31:09.152Z
+    cli_version: unknown
+    generator_versions:
+      fernapi/fern-ruby-sdk: 1.13.1
+  - commit_sha: 428032101d1791fe97573af36427e664fe4e1e88
+    tree_hash: 231d5c443ba4120855bd439d858060fc178043cd
+    timestamp: 2026-07-15T09:11:13.405Z
+    cli_version: unknown
+    generator_versions:
+      fernapi/fern-ruby-sdk: 1.13.1
+  - commit_sha: d8a88028849ce519e8fdc20765c78e367f372110
+    tree_hash: 3e4eff170915344776a2c1e921a378a13c54afd1
+    timestamp: 2026-07-21T07:06:12.329Z
+    cli_version: unknown
+    generator_versions:
+      fernapi/fern-ruby-sdk: 1.17.8
+current_generation: d8a88028849ce519e8fdc20765c78e367f372110
+patches: []

data/.fernignore

@@ -1,7 +1,6 @@
 # Specify files that shouldn't be modified by Fern
 
 # Custom SDK files
-lib/auth0/client.rb
 lib/auth0/auth_client.rb
 lib/auth0/exception.rb
 lib/auth0/algorithm.rb
@@ -51,9 +50,13 @@ reference.md
 # GitHub (entire directory - workflows, actions, templates, CODEOWNERS)
 .github/
 
-# Tests
-test/
-wiremock/
+# Tests (custom only - Fern owns test/wire/)
+test/unit/
+test/test_helper.rb
+test/custom.test.rb
 
 # Examples
 examples/
+.fern/replay.lock
+.fern/replay.yml
+.gitattributes

data/.version

@@ -1 +1 @@
-v6.0.0.beta.3
+v6.0.0.beta.4

data/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Change Log
 
+## [v6.0.0.beta.4](https://github.com/auth0/ruby-auth0/tree/v6.0.0.beta.4) (2026-07-22)
+[Full Changelog](https://github.com/auth0/ruby-auth0/compare/v6.0.0.beta.3...v6.0.0.beta.4)
+
+**Added**
+- feat: add Organization Role Members, Connection event streams, and Token Vault access grants [\#762](https://github.com/auth0/ruby-auth0/pull/762) ([fern-api[bot]](https://github.com/apps/fern-api))
+- feat: add Events and Rate Limit Policies clients, remove Federated Connections Tokensets [\#767](https://github.com/auth0/ruby-auth0/pull/767) ([fern-api[bot]](https://github.com/apps/fern-api))
+- feat: add Cross App Access and Identity Assertion grants, Branding Theme Identifiers, and Session actor [\#771](https://github.com/auth0/ruby-auth0/pull/771) ([fern-api[bot]](https://github.com/apps/fern-api))
+
+**Breaking Changes**
+- Rename `ConnectionAttributeIdentifier` to `EmailAttributeIdentifier`; the `identifier` field on email, phone, and username attributes is now `EmailAttributeIdentifier`, `PhoneAttributeIdentifier`, and `UsernameAttributeIdentifier` respectively [\#762](https://github.com/auth0/ruby-auth0/pull/762)
+- Replace the `none` member on `PhoneProviderProtectionBackoffStrategyEnum` with `default` [\#762](https://github.com/auth0/ruby-auth0/pull/762)
+- `start`, `limit`, and `total` on `ListRolesOffsetPaginatedResponseContent` are now required [\#762](https://github.com/auth0/ruby-auth0/pull/762)
+- Remove the Federated Connections Tokensets client (`users.federated_connections_tokensets`) and the `FederatedConnectionTokenSet` type [\#767](https://github.com/auth0/ruby-auth0/pull/767)
+
 ## [v6.0.0.beta.3](https://github.com/auth0/ruby-auth0/tree/v6.0.0.beta.3) (2026-06-29)
 [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v6.0.0.beta.2...v6.0.0.beta.3)
 

data/lib/auth0/branding/themes/types/create_branding_theme_request_content.rb

@@ -13,6 +13,8 @@ module Auth0
 
           field :fonts, -> { Auth0::Types::BrandingThemeFonts }, optional: false, nullable: false
 
+          field :identifiers, -> { Auth0::Types::BrandingThemeIdentifiers }, optional: true, nullable: false
+
           field :page_background, -> { Auth0::Types::BrandingThemePageBackground }, optional: false, nullable: false
 
           field :widget, -> { Auth0::Types::BrandingThemeWidget }, optional: false, nullable: false

data/lib/auth0/branding/themes/types/update_branding_theme_request_content.rb

@@ -15,6 +15,8 @@ module Auth0
 
           field :fonts, -> { Auth0::Types::BrandingThemeFonts }, optional: false, nullable: false
 
+          field :identifiers, -> { Auth0::Types::BrandingThemeIdentifiers }, optional: true, nullable: false
+
           field :page_background, -> { Auth0::Types::BrandingThemePageBackground }, optional: false, nullable: false
 
           field :widget, -> { Auth0::Types::BrandingThemeWidget }, optional: false, nullable: false

data/lib/auth0/client.rb

@@ -2,8 +2,8 @@
 
 module Auth0
   class Management
-    # @param base_url [String, nil]
     # @param token [String]
+    # @param base_url [String, nil]
     # @param timeout [Float, nil] Request timeout in seconds.
     # @param max_retries [Integer, nil] Maximum number of request retries.
     # @param headers [Hash, nil] Additional headers to include in requests.
@@ -73,6 +73,11 @@ module Auth0
       @event_streams ||= Auth0::EventStreams::Client.new(client: @raw_client)
     end
 
+    # @return [Auth0::Events::Client]
+    def events
+      @events ||= Auth0::Events::Client.new(client: @raw_client)
+    end
+
     # @return [Auth0::Flows::Client]
     def flows
       @flows ||= Auth0::Flows::Client.new(client: @raw_client)
@@ -128,6 +133,11 @@ module Auth0
       @prompts ||= Auth0::Prompts::Client.new(client: @raw_client)
     end
 
+    # @return [Auth0::RateLimitPolicies::Client]
+    def rate_limit_policies
+      @rate_limit_policies ||= Auth0::RateLimitPolicies::Client.new(client: @raw_client)
+    end
+
     # @return [Auth0::RefreshTokens::Client]
     def refresh_tokens
       @refresh_tokens ||= Auth0::RefreshTokens::Client.new(client: @raw_client)

data/lib/auth0/clients/types/create_client_request_content.rb

@@ -104,6 +104,8 @@ module Auth0
 
         field :resource_server_identifier, -> { String }, optional: true, nullable: false
 
+        field :identity_assertion_authorization_grant, -> { Auth0::Types::CreateIdentityAssertionAuthorizationGrant }, optional: true, nullable: false
+
         field :third_party_security_mode, -> { Auth0::Types::ClientThirdPartySecurityModeEnum }, optional: true, nullable: false
 
         field :redirection_policy, -> { Auth0::Types::ClientRedirectionPolicyEnum }, optional: true, nullable: false

data/lib/auth0/clients/types/update_client_request_content.rb

@@ -64,6 +64,8 @@ module Auth0
 
         field :token_quota, -> { Auth0::Types::UpdateTokenQuota }, optional: true, nullable: false
 
+        field :identity_assertion_authorization_grant, -> { Auth0::Types::UpdateIdentityAssertionAuthorizationGrant }, optional: true, nullable: false
+
         field :form_template, -> { String }, optional: true, nullable: false
 
         field :addons, -> { Auth0::Types::ClientAddons }, optional: true, nullable: false

data/lib/auth0/connections/types/create_connection_request_content.rb

@@ -27,6 +27,8 @@ module Auth0
         field :connected_accounts, -> { Auth0::Types::ConnectionConnectedAccountsPurpose }, optional: true, nullable: false
 
         field :cross_app_access_requesting_app, -> { Auth0::Types::CrossAppAccessRequestingApp }, optional: true, nullable: false
+
+        field :cross_app_access_resource_app, -> { Auth0::Types::CreateCrossAppAccessResourceApp }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/connections/types/update_connection_request_content.rb

@@ -25,6 +25,8 @@ module Auth0
         field :connected_accounts, -> { Auth0::Types::ConnectionConnectedAccountsPurpose }, optional: true, nullable: false
 
         field :cross_app_access_requesting_app, -> { Auth0::Types::CrossAppAccessRequestingApp }, optional: true, nullable: false
+
+        field :cross_app_access_resource_app, -> { Auth0::Types::UpdateCrossAppAccessResourceApp }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/guardian/factors/sms/client.rb

@@ -178,7 +178,7 @@ module Auth0
           # @option request_options [Hash{String => Object}] :additional_body_parameters
           # @option request_options [Integer] :timeout_in_seconds
           #
-          # @return [Auth0::Types::GetGuardianFactorSmsTemplatesResponseContent]
+          # @return [Auth0::Types::GetGuardianFactorSmsTemplatesResponseContent, nil]
           def get_templates(request_options: {}, **_params)
             request = Auth0::Internal::JSON::Request.new(
               base_url: request_options[:base_url],
@@ -192,12 +192,10 @@ module Auth0
               raise Auth0::Errors::TimeoutError
             end
             code = response.code.to_i
-            if code.between?(200, 299)
-              Auth0::Types::GetGuardianFactorSmsTemplatesResponseContent.load(response.body)
-            else
-              error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
-              raise error_class.new(response.body, code: code)
-            end
+            return if code.between?(200, 299)
+
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
           end
 
           # This endpoint has been deprecated. To complete this action, use the <a

data/lib/auth0/jobs/errors/client.rb

@@ -22,7 +22,7 @@ module Auth0
         # @option request_options [Integer] :timeout_in_seconds
         # @option params [String] :id
         #
-        # @return [Auth0::Jobs::Errors::Types::ErrorsGetResponse]
+        # @return [Auth0::Jobs::Errors::Types::ErrorsGetResponse, nil]
         def get(request_options: {}, **params)
           params = Auth0::Internal::Types::Utils.normalize_keys(params)
           request = Auth0::Internal::JSON::Request.new(
@@ -37,12 +37,10 @@ module Auth0
             raise Auth0::Errors::TimeoutError
           end
           code = response.code.to_i
-          if code.between?(200, 299)
-            Auth0::Jobs::Errors::Types::ErrorsGetResponse.load(response.body)
-          else
-            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
-            raise error_class.new(response.body, code: code)
-          end
+          return if code.between?(200, 299)
+
+          error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+          raise error_class.new(response.body, code: code)
         end
       end
     end

data/lib/auth0/organizations/client.rb

@@ -293,6 +293,11 @@ module Auth0
       def groups
         @groups ||= Auth0::Organizations::Groups::Client.new(client: @client)
       end
+
+      # @return [Auth0::Roles::Client]
+      def roles
+        @roles ||= Auth0::Organizations::Roles::Client.new(client: @client)
+      end
     end
   end
 end

data/lib/auth0/organizations/roles/client.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Organizations
+    module Roles
+      class Client
+        # @param client [Auth0::Internal::Http::RawClient]
+        #
+        # @return [void]
+        def initialize(client:)
+          @client = client
+        end
+
+        # @return [Auth0::Members::Client]
+        def members
+          @members ||= Auth0::Organizations::Roles::Members::Client.new(client: @client)
+        end
+      end
+    end
+  end
+end

data/lib/auth0/organizations/roles/members/client.rb

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Organizations
+    module Roles
+      module Members
+        class Client
+          # @param client [Auth0::Internal::Http::RawClient]
+          #
+          # @return [void]
+          def initialize(client:)
+            @client = client
+          end
+
+          # List the organization members assigned a specific role within the context of an organization.
+          #
+          # @param request_options [Hash]
+          # @param params [Hash]
+          # @option request_options [String] :base_url
+          # @option request_options [Hash{String => Object}] :additional_headers
+          # @option request_options [Hash{String => Object}] :additional_query_parameters
+          # @option request_options [Hash{String => Object}] :additional_body_parameters
+          # @option request_options [Integer] :timeout_in_seconds
+          # @option params [String] :id
+          # @option params [String] :role_id
+          # @option params [String, nil] :from
+          # @option params [Integer, nil] :take
+          # @option params [String, nil] :fields
+          # @option params [Boolean, nil] :include_fields
+          #
+          # @return [Auth0::Types::ListOrganizationRoleMembersResponseContent]
+          def list(request_options: {}, **params)
+            params = Auth0::Internal::Types::Utils.normalize_keys(params)
+            query_params = {}
+            query_params["from"] = params[:from] if params.key?(:from)
+            query_params["take"] = params.fetch(:take, 50)
+            query_params["fields"] = params[:fields] if params.key?(:fields)
+            query_params["include_fields"] = params.fetch(:include_fields, true)
+
+            Auth0::Internal::CursorItemIterator.new(
+              cursor_field: :next_,
+              item_field: :members,
+              initial_cursor: query_params["from"]
+            ) do |next_cursor|
+              query_params["from"] = next_cursor
+              request = Auth0::Internal::JSON::Request.new(
+                base_url: request_options[:base_url],
+                method: "GET",
+                path: "organizations/#{URI.encode_uri_component(params[:id].to_s)}/roles/#{URI.encode_uri_component(params[:role_id].to_s)}/members",
+                query: query_params,
+                request_options: request_options
+              )
+              begin
+                response = @client.send(request)
+              rescue Net::HTTPRequestTimeout
+                raise Auth0::Errors::TimeoutError
+              end
+              code = response.code.to_i
+              if code.between?(200, 299)
+                parsed_response = Auth0::Types::ListOrganizationRoleMembersResponseContent.load(response.body)
+                [parsed_response, response]
+              else
+                error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+                raise error_class.new(response.body, code: code)
+              end
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/auth0/organizations/roles/members/types/list_organization_role_members_request_parameters.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Organizations
+    module Roles
+      module Members
+        module Types
+          class ListOrganizationRoleMembersRequestParameters < Internal::Types::Model
+            field :id, -> { String }, optional: false, nullable: false
+
+            field :role_id, -> { String }, optional: false, nullable: false
+
+            field :from, -> { String }, optional: true, nullable: false
+
+            field :take, -> { Integer }, optional: true, nullable: false
+
+            field :fields, -> { String }, optional: true, nullable: false
+
+            field :include_fields, -> { Internal::Types::Boolean }, optional: true, nullable: false
+          end
+        end
+      end
+    end
+  end
+end

data/lib/auth0/organizations/types/create_organization_request_content.rb

@@ -15,6 +15,8 @@ module Auth0
         field :enabled_connections, -> { Internal::Types::Array[Auth0::Types::ConnectionForOrganization] }, optional: true, nullable: false
 
         field :token_quota, -> { Auth0::Types::CreateTokenQuota }, optional: true, nullable: false
+
+        field :third_party_client_access, -> { Auth0::Types::OrganizationThirdPartyClientAccessEnum }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/organizations/types/update_organization_request_content.rb

@@ -15,6 +15,8 @@ module Auth0
         field :metadata, -> { Internal::Types::Hash[String, String] }, optional: true, nullable: false
 
         field :token_quota, -> { Auth0::Types::UpdateTokenQuota }, optional: true, nullable: false
+
+        field :third_party_client_access, -> { Auth0::Types::OrganizationThirdPartyClientAccessEnum }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/self_service_profiles/sso_ticket/types/create_self_service_profile_sso_ticket_request_content.rb

@@ -23,6 +23,8 @@ module Auth0
 
           field :use_for_organization_discovery, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
+          field :third_party_client_access_config, -> { Auth0::Types::ThirdPartyClientAccessConfig }, optional: true, nullable: false
+
           field :enabled_features, -> { Auth0::Types::SelfServiceProfileSSOTicketEnabledFeatures }, optional: true, nullable: false
         end
       end

data/lib/auth0/types/branding_theme_identifiers.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    class BrandingThemeIdentifiers < Internal::Types::Model
+      field :login_display, -> { Auth0::Types::BrandingThemeIdentifiersLoginDisplayEnum }, optional: false, nullable: false
+
+      field :otp_autocomplete, -> { Internal::Types::Boolean }, optional: false, nullable: false
+
+      field :phone_display, -> { Auth0::Types::BrandingThemeIdentifiersPhoneDisplay }, optional: false, nullable: false
+    end
+  end
+end

data/lib/auth0/types/branding_theme_identifiers_login_display_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module BrandingThemeIdentifiersLoginDisplayEnum
+      extend Auth0::Internal::Types::Enum
+
+      SEPARATE = "separate"
+      UNIFIED = "unified"
+    end
+  end
+end

data/lib/auth0/types/branding_theme_identifiers_phone_display.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Phone display
+    class BrandingThemeIdentifiersPhoneDisplay < Internal::Types::Model
+      field :formatting, -> { Auth0::Types::BrandingThemeIdentifiersPhoneDisplayFormattingEnum }, optional: false, nullable: false
+
+      field :masking, -> { Auth0::Types::BrandingThemeIdentifiersPhoneDisplayMaskingEnum }, optional: false, nullable: false
+    end
+  end
+end

data/lib/auth0/types/branding_theme_identifiers_phone_display_formatting_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module BrandingThemeIdentifiersPhoneDisplayFormattingEnum
+      extend Auth0::Internal::Types::Enum
+
+      INTERNATIONAL = "international"
+      REGIONAL = "regional"
+    end
+  end
+end

data/lib/auth0/types/branding_theme_identifiers_phone_display_masking_enum.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module BrandingThemeIdentifiersPhoneDisplayMaskingEnum
+      extend Auth0::Internal::Types::Enum
+
+      HIDE_COUNTRY_CODE = "hide_country_code"
+      MASK_DIGITS = "mask_digits"
+      SHOW_ALL = "show_all"
+    end
+  end
+end

data/lib/auth0/types/client.rb

@@ -113,6 +113,8 @@ module Auth0
 
       field :my_organization_configuration, -> { Auth0::Types::ClientMyOrganizationResponseConfiguration }, optional: true, nullable: false
 
+      field :identity_assertion_authorization_grant, -> { Auth0::Types::IdentityAssertionAuthorizationGrant }, optional: true, nullable: false
+
       field :third_party_security_mode, -> { Auth0::Types::ClientThirdPartySecurityModeEnum }, optional: true, nullable: false
 
       field :redirection_policy, -> { Auth0::Types::ClientRedirectionPolicyEnum }, optional: true, nullable: false

data/lib/auth0/types/client_app_type_enum.rb

@@ -11,6 +11,7 @@ module Auth0
       NON_INTERACTIVE = "non_interactive"
       RESOURCE_SERVER = "resource_server"
       EXPRESS_CONFIGURATION = "express_configuration"
+      B2B_INTEGRATION = "b2b_integration"
       RMS = "rms"
       BOX = "box"
       CLOUDBEES = "cloudbees"

data/lib/auth0/types/client_grant_subject_type_enum.rb

@@ -7,6 +7,7 @@ module Auth0
 
       CLIENT = "client"
       USER = "user"
+      ANONYMOUS_USER = "anonymous_user"
     end
   end
 end

data/lib/auth0/types/client_session_transfer_delegation_device_binding_enum.rb

@@ -6,7 +6,6 @@ module Auth0
       extend Auth0::Internal::Types::Enum
 
       IP = "ip"
-      ASN = "asn"
     end
   end
 end

data/lib/auth0/types/client_token_vault_privileged_access_with_credential_id.rb

@@ -7,6 +7,8 @@ module Auth0
       field :credentials, -> { Internal::Types::Array[Auth0::Types::CredentialID] }, optional: false, nullable: false
 
       field :ip_allowlist, -> { Internal::Types::Array[String] }, optional: true, nullable: false
+
+      field :grants, -> { Internal::Types::Array[Auth0::Types::TokenVaultPrivilegedAccessGrant] }, optional: true, nullable: false
     end
   end
 end

data/lib/auth0/types/client_token_vault_privileged_access_with_public_key.rb

@@ -7,6 +7,8 @@ module Auth0
       field :credentials, -> { Internal::Types::Array[Auth0::Types::PublicKeyCredential] }, optional: false, nullable: false
 
       field :ip_allowlist, -> { Internal::Types::Array[String] }, optional: true, nullable: false
+
+      field :grants, -> { Internal::Types::Array[Auth0::Types::TokenVaultPrivilegedAccessGrant] }, optional: true, nullable: false
     end
   end
 end

data/lib/auth0/types/connection_cross_app_access_resource_app.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Cross App Access - Resource App settings that apply to this connection.
+    class ConnectionCrossAppAccessResourceApp < Internal::Types::Model
+      field :status, -> { Auth0::Types::ConnectionCrossAppAccessResourceAppStatusEnum }, optional: false, nullable: false
+    end
+  end
+end

data/lib/auth0/types/connection_cross_app_access_resource_app_status_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ConnectionCrossAppAccessResourceAppStatusEnum
+      extend Auth0::Internal::Types::Enum
+
+      DISABLED = "disabled"
+      ENABLED = "enabled"
+    end
+  end
+end

data/lib/auth0/types/connection_for_list.rb

@@ -26,6 +26,8 @@ module Auth0
       field :connected_accounts, -> { Auth0::Types::ConnectionConnectedAccountsPurpose }, optional: true, nullable: false
 
       field :cross_app_access_requesting_app, -> { Auth0::Types::CrossAppAccessRequestingApp }, optional: true, nullable: false
+
+      field :cross_app_access_resource_app, -> { Auth0::Types::CrossAppAccessResourceApp }, optional: true, nullable: false
     end
   end
 end

data/lib/auth0/types/connection_options_azure_ad.rb

@@ -108,8 +108,6 @@ module Auth0
 
       field :ext_user_id, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
-      field :federated_connections_access_tokens, -> { Auth0::Types::ConnectionFederatedConnectionsAccessTokens }, optional: true, nullable: false
-
       field :granted, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
       field :icon_url, -> { String }, optional: true, nullable: false

data/lib/auth0/types/connection_options_common_oidc.rb

@@ -16,8 +16,6 @@ module Auth0
 
       field :dpop_signing_alg, -> { Auth0::Types::ConnectionDpopSigningAlgEnum }, optional: true, nullable: false
 
-      field :federated_connections_access_tokens, -> { Auth0::Types::ConnectionFederatedConnectionsAccessTokens }, optional: true, nullable: false
-
       field :icon_url, -> { String }, optional: true, nullable: false
 
       field :id_token_session_expiry_supported, -> { Internal::Types::Boolean }, optional: true, nullable: false

data/lib/auth0/types/connection_options_google_apps.rb

@@ -38,8 +38,6 @@ module Auth0
 
       field :ext_is_suspended, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
-      field :federated_connections_access_tokens, -> { Auth0::Types::ConnectionFederatedConnectionsAccessTokens }, optional: true, nullable: false
-
       field :handle_login_from_social, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
       field :icon_url, -> { String }, optional: true, nullable: false

data/lib/auth0/types/connection_options_oidc.rb

@@ -16,8 +16,6 @@ module Auth0
 
       field :dpop_signing_alg, -> { Auth0::Types::ConnectionDpopSigningAlgEnum }, optional: true, nullable: false
 
-      field :federated_connections_access_tokens, -> { Auth0::Types::ConnectionFederatedConnectionsAccessTokens }, optional: true, nullable: false
-
       field :icon_url, -> { String }, optional: true, nullable: false
 
       field :id_token_session_expiry_supported, -> { Internal::Types::Boolean }, optional: true, nullable: false

data/lib/auth0/types/connection_options_okta.rb

@@ -18,8 +18,6 @@ module Auth0
 
       field :dpop_signing_alg, -> { Auth0::Types::ConnectionDpopSigningAlgEnum }, optional: true, nullable: false
 
-      field :federated_connections_access_tokens, -> { Auth0::Types::ConnectionFederatedConnectionsAccessTokens }, optional: true, nullable: false
-
       field :icon_url, -> { String }, optional: true, nullable: false
 
       field :id_token_session_expiry_supported, -> { Internal::Types::Boolean }, optional: true, nullable: false