auth0 6.0.0.beta.5 → 6.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 44661a16cc8215e532d46465e5c647b067908ee2d302802b1533b62dc3ad201b
-  data.tar.gz: dd5f4eb1891e573e222dc8cbb0805fb5feb163ba605ddb295794e53785a4537b
+  metadata.gz: d6102c49b900b0bc76d006d48f7a66f61fd9128c01df08642232d0754d50265a
+  data.tar.gz: ab0a848a58ffc9fbcbc7d2d589d801a018edd0652d609447be7095e6ffaa8383
 SHA512:
-  metadata.gz: 0eff9acb7ca50565e1743084fe3d617ba4fe76249dac4e8937384638225bfa2ca05d2e09c4dc1c457101345fcf2e459ec5c05611b48fb2803140f728d8d10f7b
-  data.tar.gz: 32905d9e1bf76a1baff84734f5d03d97e0592256f76693690e882193ad939dc022b4c10c3486ba9436ad0f45ad0b6562f819a53d7e7a5ed824545becd9565161
+  metadata.gz: 45df9f724dfc9f2f4374d2fb97deb7746e06d83e6e8a66208c3cc56e3ee885a2d6d2824e2e607cb42d09ddf1fe228a9674e0ca6a7894b12eeb0c250be3e04640
+  data.tar.gz: 37254b01d3e97c61faa86e0f140a0de5c45dfb9bab0a17834aded88015dc2d0729af56f22e2ad6a440f656fe0ff768010c8b75161972224e251905aaf26ea811

data/.fern/metadata.json

@@ -1,5 +1,5 @@
 {
-  "cliVersion": "5.75.6",
+  "cliVersion": "5.92.1",
   "generatorName": "fernapi/fern-ruby-sdk",
   "generatorVersion": "1.17.8",
   "generatorConfig": {
@@ -10,9 +10,8 @@
     "offsetSemantics": "page-index",
     "useDefaultRequestParameterValues": true
   },
-  "originGitCommit": "8857b12c5a5345e87088f8d57ba9cffdb82ed9fe",
-  "originGitCommitIsDirty": false,
-  "invokedBy": "ci",
-  "ciProvider": "github",
-  "sdkVersion": "5.20.1"
+  "originGitCommit": "116b6ea19a35544baa3e3cf608e45d3990d7cc6e",
+  "originGitCommitIsDirty": true,
+  "invokedBy": "manual",
+  "sdkVersion": "6.0.1"
 }

data/.fern/replay.lock

@@ -30,5 +30,11 @@ generations:
     cli_version: unknown
     generator_versions:
       fernapi/fern-ruby-sdk: 1.17.8
-current_generation: ff82f16a518e8ee51b23570ed1a303f3c070ff02
+  - commit_sha: 1cfe82c679b6122773317ebd41bff24b09388b3d
+    tree_hash: a7034ef350a9bfaa17781b64316723f688b91e18
+    timestamp: 2026-08-19T06:07:50.024Z
+    cli_version: unknown
+    generator_versions:
+      fernapi/fern-ruby-sdk: 1.17.8
+current_generation: 1cfe82c679b6122773317ebd41bff24b09388b3d
 patches: []

data/.version

@@ -1 +1 @@
-v6.0.0.beta.5
+v6.1.0

data/CHANGELOG.md

@@ -1,5 +1,41 @@
 # Change Log
 
+## [v6.1.0](https://github.com/auth0/ruby-auth0/tree/v6.1.0) (2026-08-19)
+[Full Changelog](https://github.com/auth0/ruby-auth0/compare/v6.0.0...v6.1.0)
+
+**Added**
+- feat: add Network ACL Key read/delete, Cross App Access resource app, third-party client access, and useOauthSpecScope [\#788](https://github.com/auth0/ruby-auth0/pull/788) ([fern-api[bot]](https://github.com/apps/fern-api))
+
+## [v6.0.0](https://github.com/auth0/ruby-auth0/tree/v6.0.0) (2026-08-13)
+[Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.20.0...v6.0.0)
+
+Note: As this is a major release it is recommended to understand the **Breaking Changes** section before upgrading. The [v6 Migration Guide](v6_MIGRATION_GUIDE.md) contains detailed upgrade instructions.
+
+v6.0.0 is the first stable release of the v6 line. The Management API client is now generated from Auth0's OpenAPI specification via [Fern](https://buildwithfern.com/), with strongly-typed requests and responses, built-in pagination, and automatic token management through the unified `Auth0::Client`. The Authentication API is ported from v5 and maintains full feature parity.
+
+**Breaking Changes**
+- Management API client rewritten using Fern code generation
+- `Auth0Client` replaced by `Auth0::Client` (unified client for Authentication + Management APIs; `Auth0Client` remains as a backward-compatible alias)
+- Management API methods accessed via namespaced sub-clients (`client.users.list` instead of `client.users`)
+- Method names follow a consistent pattern (`list`, `create`, `get`, `update`, `delete`), and sub-resource operations moved to dedicated sub-clients
+- All Management API methods use keyword arguments instead of positional parameters
+- API methods return strongly-typed response objects instead of raw hashes
+- List methods return paginated iterators instead of arrays
+- Non-2xx responses raise typed exceptions (`Auth0::Errors::NotFoundError`, etc.) instead of returning error hashes
+- The `api_version` parameter has been removed (v6 supports Management API v2 only)
+- `rest-client` dependency removed; uses `net/http` internally
+- Minimum Ruby version raised to 3.3
+
+**Added**
+- Auto-generated Management API with complete endpoint coverage from Auth0's OpenAPI spec
+- Automatic OAuth 2.0 client credentials token management, with a new `token_provider` option for supplying tokens from an external source
+- Built-in retry with exponential backoff for transient failures (408, 429, 5xx)
+- Automatic pagination through iterator objects for all list endpoints
+- `v6_MIGRATION_GUIDE.md` for upgrading from v5
+
+**Unchanged**
+- Authentication API (login, signup, token exchange, passwordless, MFA)
+
 ## [v6.0.0.beta.5](https://github.com/auth0/ruby-auth0/tree/v6.0.0.beta.5) (2026-08-05)
 [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v6.0.0.beta.4...v6.0.0.beta.5)
 
@@ -32,6 +68,18 @@
 **Added**
 - feat: add Tenant Security Headers and Connection Session Expiry; remove Branding Phone Display [\#751](https://github.com/auth0/ruby-auth0/pull/751) ([fern-api[bot]](https://github.com/apps/fern-api))
 
+## [v5.20.0](https://github.com/auth0/ruby-auth0/tree/v5.20.0) (2026-05-29)
+[Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.19.0...v5.20.0)
+
+**Changed**
+- Support jwt gem 3.x alongside 2.x [\#726](https://github.com/auth0/ruby-auth0/pull/726) ([dan98765](https://github.com/dan98765))
+
+**Fixed**
+- Fix YARD comment with extra space [\#637](https://github.com/auth0/ruby-auth0/pull/637) ([qtro](https://github.com/qtro))
+
+**Security**
+- chore(deps): bump jwt from 3.1.2 to 3.2.0 [\#745](https://github.com/auth0/ruby-auth0/pull/745) ([dependabot[bot]](https://github.com/apps/dependabot))
+
 ## [v6.0.0.beta.1](https://github.com/auth0/ruby-auth0/tree/v6.0.0.beta.1) (2026-05-28)
 [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v6.0.0.beta.0...v6.0.0.beta.1)
 
@@ -39,6 +87,15 @@
 - feat: Events API, Rate Limit Policies, refresh token revocation, FedCM, DPoP GA [\#732](https://github.com/auth0/ruby-auth0/pull/732) ([fern-api[bot]](https://github.com/apps/fern-api))
 - feat: add SCIM Groups RBAC, User Effective Permissions/Roles, and Tenant Country Codes [\#742](https://github.com/auth0/ruby-auth0/pull/742) ([fern-api[bot]](https://github.com/apps/fern-api))
 
+## [v5.19.0](https://github.com/auth0/ruby-auth0/tree/v5.19.0) (2026-05-08)
+[Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.18.1...v5.19.0)
+
+**Added**
+- Make Auth0::Client#get_token public [\#725](https://github.com/auth0/ruby-auth0/pull/725) ([ttstarck](https://github.com/ttstarck))
+
+**Fixed**
+- Ship only runtime files in packaged gem to eliminate scanner false positives [\#721](https://github.com/auth0/ruby-auth0/pull/721) ([tmertens](https://github.com/tmertens))
+
 ## 6.0.0-beta.0 (2026-04-30)
 
 [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.18.1...v6.0.0.beta.0)

data/README.md

@@ -3,10 +3,13 @@
 Ruby API client for the [Auth0](https://auth0.com) platform.
 
 [![Gem Version](https://badge.fury.io/rb/auth0.svg)](http://badge.fury.io/rb/auth0)
+[![codecov](https://codecov.io/gh/auth0/ruby-auth0/branch/master/graph/badge.svg)](https://codecov.io/gh/auth0/ruby-auth0)
+[![Yard Docs](http://img.shields.io/badge/yard-docs-blue.svg)](https://www.rubydoc.info/gems/auth0)
 [![MIT licensed](https://img.shields.io/dub/l/vibe-d.svg?style=flat)](https://github.com/auth0/ruby-auth0/blob/master/LICENSE)
+[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/auth0/ruby-auth0)
 
 <div>
-  <a href="#documentation">Documentation</a> - <a href="#getting-started">Getting started</a> - <a href="#api-reference">API reference</a> - <a href="#feedback">Feedback</a>
+📚 <a href="#documentation">Documentation</a> - 🚀 <a href="#getting-started">Getting started</a> - 💻 <a href="#api-reference">API reference</a> - 💬 <a href="#feedback">Feedback</a>
 </div>
 
 ## Documentation

data/custom.gemspec.rb

@@ -8,7 +8,7 @@
 
 def add_custom_gemspec_data(spec)
   spec.add_dependency "rest-client", "~> 2.1"
-  spec.add_dependency "jwt", "~> 2.7"
+  spec.add_dependency "jwt", ">= 2.7", "< 4.0"
   spec.add_dependency "zache", "~> 0.12"
   spec.add_dependency "addressable", "~> 2.8"
   spec.add_dependency "retryable", "~> 3.0"

data/examples/ruby-api/Gemfile.lock

@@ -1,9 +1,9 @@
 PATH
   remote: ../..
   specs:
-    auth0 (0.0.0)
+    auth0 (6.1.0)
       addressable (~> 2.8)
-      jwt (~> 2.7)
+      jwt (>= 2.7, < 4.0)
       rest-client (~> 2.1)
       retryable (~> 3.0)
       zache (~> 0.12)
@@ -19,7 +19,7 @@ GEM
     http-accept (1.7.0)
     http-cookie (1.1.6)
       domain_name (~> 0.5)
-    jwt (2.10.2)
+    jwt (2.10.3)
       base64
     logger (1.7.0)
     mime-types (3.7.0)

data/lib/auth0/clients/client.rb

@@ -25,7 +25,7 @@ module Auth0
       #     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
       #     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
       #     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
-      #     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+      #     `custom_login_page_on`, `sso`, `addons`, `form_template`,
       #     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
       #     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
       #     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
@@ -249,7 +249,7 @@ module Auth0
       #     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
       #     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
       #     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
-      #     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+      #     `custom_login_page_on`, `sso`, `addons`, `form_template`,
       #     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
       #     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
       #     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,

data/lib/auth0/connection_profiles/types/create_connection_profile_request_content.rb

@@ -15,6 +15,8 @@ module Auth0
         field :connection_config, -> { Auth0::Types::ConnectionProfileConfig }, optional: true, nullable: false
 
         field :strategy_overrides, -> { Auth0::Types::ConnectionProfileStrategyOverrides }, optional: true, nullable: false
+
+        field :cross_app_access_resource_app, -> { Auth0::Types::ConnectionProfileCrossAppAccessResourceApp }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/connection_profiles/types/update_connection_profile_request_content.rb

@@ -17,6 +17,8 @@ module Auth0
         field :connection_config, -> { Auth0::Types::ConnectionProfileConfig }, optional: true, nullable: false
 
         field :strategy_overrides, -> { Auth0::Types::ConnectionProfileStrategyOverrides }, optional: true, nullable: false
+
+        field :cross_app_access_resource_app, -> { Auth0::Types::ConnectionProfileCrossAppAccessResourceApp }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/connections/client.rb

@@ -210,7 +210,8 @@ module Auth0
       # option properties for identity provider configuration.
       #
       # **Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data
-      # or other issues, ensure all parameters are present when using this option.
+      # or other issues, ensure all parameters are present when using this option. If any options are unspecified, the
+      # default will be used, even if it differs from the existing value.
       #
       # @param request_options [Hash]
       # @param params [Auth0::Connections::Types::UpdateConnectionRequestContent]

data/lib/auth0/keys/client.rb

@@ -20,6 +20,11 @@ module Auth0
         @encryption ||= Auth0::Keys::Encryption::Client.new(client: @client)
       end
 
+      # @return [Auth0::NetworkACLs::Client]
+      def network_acls
+        @network_acls ||= Auth0::Keys::NetworkACLs::Client.new(client: @client)
+      end
+
       # @return [Auth0::Signing::Client]
       def signing
         @signing ||= Auth0::Keys::Signing::Client.new(client: @client)

data/lib/auth0/keys/network_acls/client.rb

@@ -0,0 +1,149 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Keys
+    module NetworkACLs
+      class Client
+        # @param client [Auth0::Internal::Http::RawClient]
+        #
+        # @return [void]
+        def initialize(client:)
+          @client = client
+        end
+
+        # Retrieve all keys used to verify HTTP Message Signatures on Network ACL rules, ordered by creation time
+        # descending.
+        #
+        # @param request_options [Hash]
+        # @param _params [Hash]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        #
+        # @return [Auth0::Types::GetAllKeysNetworkACLsResponseContent]
+        def list(request_options: {}, **_params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "GET",
+            path: "keys/network-acls",
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::GetAllKeysNetworkACLsResponseContent.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+
+        # Create a new key used to verify HTTP Message Signatures on Network ACL rules.
+        #
+        # @param request_options [Hash]
+        # @param params [Auth0::Keys::NetworkACLs::Types::CreateKeysNetworkACLsRequestContent]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        #
+        # @return [Auth0::Types::CreateKeysNetworkACLsResponseContent]
+        def create(request_options: {}, **params)
+          params = Auth0::Internal::Types::Utils.normalize_keys(params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "POST",
+            path: "keys/network-acls",
+            body: Auth0::Keys::NetworkACLs::Types::CreateKeysNetworkACLsRequestContent.new(params).to_h,
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::CreateKeysNetworkACLsResponseContent.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+
+        # Retrieve a specific key used to verify HTTP Message Signatures on Network ACL rules.
+        #
+        # @param request_options [Hash]
+        # @param params [Hash]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        # @option params [String] :id
+        #
+        # @return [Auth0::Types::NetworkACLKey]
+        def get(request_options: {}, **params)
+          params = Auth0::Internal::Types::Utils.normalize_keys(params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "GET",
+            path: "keys/network-acls/#{URI.encode_uri_component(params[:id].to_s)}",
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::NetworkACLKey.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+
+        # Delete a key used to verify HTTP Message Signatures on Network ACL rules
+        #
+        # @param request_options [Hash]
+        # @param params [Hash]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        # @option params [String] :id
+        #
+        # @return [untyped]
+        def delete(request_options: {}, **params)
+          params = Auth0::Internal::Types::Utils.normalize_keys(params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "DELETE",
+            path: "keys/network-acls/#{URI.encode_uri_component(params[:id].to_s)}",
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          return if code.between?(200, 299)
+
+          error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+          raise error_class.new(response.body, code: code)
+        end
+      end
+    end
+  end
+end

data/lib/auth0/keys/network_acls/types/create_keys_network_acls_request_content.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Keys
+    module NetworkACLs
+      module Types
+        class CreateKeysNetworkACLsRequestContent < Internal::Types::Model
+          field :name, -> { String }, optional: false, nullable: false
+
+          field :alg, -> { Auth0::Types::NetworkACLKeyAlgorithmEnum }, optional: false, nullable: false
+
+          field :value, -> { String }, optional: false, nullable: false
+        end
+      end
+    end
+  end
+end

data/lib/auth0/mixins/token_management.rb

@@ -2,17 +2,10 @@ module Auth0
   module Mixins
     module TokenManagement
 
-      private
-
-      def initialize_token(options)
-        @token = options[:access_token] || options[:token]
-        # default expiry to an hour if a token was given but no expires_at
-        @token_expires_at = @token ? options[:token_expires_at] || Time.now.to_i + 3600 : nil
-
-        @audience = options[:api_identifier] || "https://#{@domain}/api/v2/"
-        get_token() if @token.nil?
-      end
-
+      # Get the Client's api token (or generate a new one if it has expired).
+      #
+      # @note This method may perform a network request to refresh an expired token. It is not thread-safe.
+      # @return [String] the api token
       def get_token
         has_expired = @token && @token_expires_at ? @token_expires_at < (Time.now.to_i + 10) : false
 
@@ -30,6 +23,17 @@ module Auth0
           @token
         end
       end
+
+      private
+
+      def initialize_token(options)
+        @token = options[:access_token] || options[:token]
+        # default expiry to an hour if a token was given but no expires_at
+        @token_expires_at = @token ? options[:token_expires_at] || Time.now.to_i + 3600 : nil
+
+        @audience = options[:api_identifier] || "https://#{@domain}/api/v2/"
+        get_token() if @token.nil?
+      end
     end
   end
 end

data/lib/auth0/types/client_my_organization_configuration_third_party_client_access_allowed_values_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum
+      extend Auth0::Internal::Types::Enum
+
+      ALLOW = "allow"
+      BLOCK = "block"
+    end
+  end
+end

data/lib/auth0/types/client_my_organization_configuration_third_party_client_access_default_value_enum.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum
+      extend Auth0::Internal::Types::Enum
+
+      BLOCK = "block"
+    end
+  end
+end

data/lib/auth0/types/client_my_organization_patch_configuration.rb

@@ -10,6 +10,8 @@ module Auth0
 
       field :allowed_strategies, -> { Internal::Types::Array[Auth0::Types::ClientMyOrganizationConfigurationAllowedStrategiesEnum] }, optional: false, nullable: false
 
+      field :third_party_client_access, -> { Auth0::Types::ClientMyOrganizationThirdPartyClientAccessConfiguration }, optional: true, nullable: false
+
       field :connection_deletion_behavior, -> { Auth0::Types::ClientMyOrganizationDeletionBehaviorEnum }, optional: false, nullable: false
 
       field :invitation_landing_client_id, -> { String }, optional: true, nullable: false

data/lib/auth0/types/client_my_organization_post_configuration.rb

@@ -10,6 +10,8 @@ module Auth0
 
       field :allowed_strategies, -> { Internal::Types::Array[Auth0::Types::ClientMyOrganizationConfigurationAllowedStrategiesEnum] }, optional: false, nullable: false
 
+      field :third_party_client_access, -> { Auth0::Types::ClientMyOrganizationThirdPartyClientAccessConfiguration }, optional: true, nullable: false
+
       field :connection_deletion_behavior, -> { Auth0::Types::ClientMyOrganizationDeletionBehaviorEnum }, optional: false, nullable: false
 
       field :invitation_landing_client_id, -> { String }, optional: true, nullable: false

data/lib/auth0/types/client_my_organization_response_configuration.rb

@@ -10,6 +10,8 @@ module Auth0
 
       field :allowed_strategies, -> { Internal::Types::Array[Auth0::Types::ClientMyOrganizationConfigurationAllowedStrategiesEnum] }, optional: false, nullable: false
 
+      field :third_party_client_access, -> { Auth0::Types::ClientMyOrganizationThirdPartyClientAccessConfiguration }, optional: true, nullable: false
+
       field :connection_deletion_behavior, -> { Auth0::Types::ClientMyOrganizationDeletionBehaviorEnum }, optional: false, nullable: false
 
       field :invitation_landing_client_id, -> { String }, optional: true, nullable: false

data/lib/auth0/types/client_my_organization_third_party_client_access_configuration.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # The third-party client access configuration for the My Organization Configuration.
+    class ClientMyOrganizationThirdPartyClientAccessConfiguration < Internal::Types::Model
+      field :default_value, -> { Auth0::Types::ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum }, optional: false, nullable: false
+
+      field :allowed_values, -> { Internal::Types::Array[Auth0::Types::ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum] }, optional: false, nullable: false
+    end
+  end
+end

data/lib/auth0/types/connection_identity_provider_enum.rb

@@ -60,6 +60,7 @@ module Auth0
       WORDPRESS = "wordpress"
       YAHOO = "yahoo"
       YANDEX = "yandex"
+      NOTION_MCP = "notion-mcp"
     end
   end
 end

data/lib/auth0/types/connection_options_common_oidc.rb

@@ -47,6 +47,8 @@ module Auth0
       field :upstream_params, -> { Internal::Types::Hash[String, Auth0::Types::ConnectionUpstreamAdditionalProperties] }, optional: true, nullable: false
 
       field :userinfo_endpoint, -> { String }, optional: true, nullable: false
+
+      field :use_oauth_spec_scope, -> { Internal::Types::Boolean }, optional: true, nullable: false, api_name: "useOauthSpecScope"
     end
   end
 end

data/lib/auth0/types/connection_options_oidc.rb

@@ -48,6 +48,8 @@ module Auth0
 
       field :userinfo_endpoint, -> { String }, optional: true, nullable: false
 
+      field :use_oauth_spec_scope, -> { Internal::Types::Boolean }, optional: true, nullable: false, api_name: "useOauthSpecScope"
+
       field :non_persistent_attrs, -> { Internal::Types::Array[String] }, optional: true, nullable: false
 
       field :attribute_map, -> { Auth0::Types::ConnectionAttributeMapOidc }, optional: true, nullable: false

data/lib/auth0/types/connection_options_okta.rb

@@ -50,6 +50,8 @@ module Auth0
 
       field :userinfo_endpoint, -> { String }, optional: true, nullable: false
 
+      field :use_oauth_spec_scope, -> { Internal::Types::Boolean }, optional: true, nullable: false, api_name: "useOauthSpecScope"
+
       field :attribute_map, -> { Auth0::Types::ConnectionAttributeMapOkta }, optional: true, nullable: false
 
       field :domain, -> { String }, optional: true, nullable: false

data/lib/auth0/types/connection_profile.rb

@@ -16,6 +16,8 @@ module Auth0
       field :connection_config, -> { Auth0::Types::ConnectionProfileConfig }, optional: true, nullable: false
 
       field :strategy_overrides, -> { Auth0::Types::ConnectionProfileStrategyOverrides }, optional: true, nullable: false
+
+      field :cross_app_access_resource_app, -> { Auth0::Types::ConnectionProfileCrossAppAccessResourceApp }, optional: true, nullable: false
     end
   end
 end

data/lib/auth0/types/connection_profile_cross_app_access_resource_app.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Controls whether organization admins may enable Cross App Access (XAA) on their Identity Providers.
+    class ConnectionProfileCrossAppAccessResourceApp < Internal::Types::Model
+      field :status, -> { Auth0::Types::ConnectionProfileCrossAppAccessResourceAppStatus }, optional: false, nullable: false
+    end
+  end
+end

data/lib/auth0/types/connection_profile_cross_app_access_resource_app_status.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # The Cross App Access resource app status configuration.
+    class ConnectionProfileCrossAppAccessResourceAppStatus < Internal::Types::Model
+      field :default_value, -> { Auth0::Types::ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum }, optional: false, nullable: false
+
+      field :allowed_values, -> { Internal::Types::Array[Auth0::Types::ConnectionProfileCrossAppAccessResourceAppStatusValueEnum] }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/connection_profile_cross_app_access_resource_app_status_allowed_values_enum.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ConnectionProfileCrossAppAccessResourceAppStatusAllowedValuesEnum
+      # ConnectionProfileCrossAppAccessResourceAppStatusAllowedValuesEnum is an alias for Array
+
+      # @option str [String]
+      #
+      # @return [untyped]
+      def self.load(str)
+        ::JSON.parse(str)
+      end
+
+      # @option value [untyped]
+      #
+      # @return [String]
+      def self.dump(value)
+        ::JSON.generate(value)
+      end
+    end
+  end
+end

data/lib/auth0/types/connection_profile_cross_app_access_resource_app_status_default_value_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum
+      extend Auth0::Internal::Types::Enum
+
+      ENABLED = "enabled"
+      DISABLED = "disabled"
+    end
+  end
+end

data/lib/auth0/types/connection_profile_cross_app_access_resource_app_status_value_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ConnectionProfileCrossAppAccessResourceAppStatusValueEnum
+      extend Auth0::Internal::Types::Enum
+
+      ENABLED = "enabled"
+      DISABLED = "disabled"
+    end
+  end
+end