auth0 6.4.0 → 6.5.0

data/lib/auth0/types/{update_feature_flag_status_response_content.rb → attack_protection_captcha_policy.rb}

@@ -2,18 +2,19 @@
 
 module Auth0
   module Types
-    class UpdateFeatureFlagStatusResponseContent < Internal::Types::Model
+    # An attack protection policy override for CAPTCHA.
+    class AttackProtectionCaptchaPolicy < Internal::Types::Model
       field :id, -> { String }, optional: false, nullable: false
 
       field :name, -> { String }, optional: false, nullable: false
 
       field :description, -> { String }, optional: true, nullable: false
 
-      field :type, -> { Auth0::Types::FeatureFlagTypeEnum }, optional: false, nullable: false
+      field :priority, -> { Integer }, optional: false, nullable: false
 
-      field :status, -> { Auth0::Types::FeatureFlagStatusEnum }, optional: false, nullable: false
+      field :match, -> { Auth0::Types::AttackProtectionCaptchaPolicyMatch }, optional: false, nullable: false
 
-      field :parameters, -> { Internal::Types::Hash[String, Auth0::Types::FeatureFlagConfigParam] }, optional: true, nullable: false
+      field :action, -> { Auth0::Types::AttackProtectionCaptchaPolicyAction }, optional: false, nullable: false
 
       field :created_at, -> { String }, optional: false, nullable: false
 

data/lib/auth0/types/attack_protection_captcha_policy_action.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # CAPTCHA configuration override stored for this policy.
+    class AttackProtectionCaptchaPolicyAction < Internal::Types::Model
+      field :active_provider_id, -> { Auth0::Types::CaptchaActiveProviderEnum }, optional: true, nullable: false
+
+      field :simple_captcha, -> { Auth0::Types::CaptchaPolicyActionSimpleCaptcha }, optional: true, nullable: false
+
+      field :auth_challenge, -> { Auth0::Types::CaptchaPolicyActionAuthChallenge }, optional: true, nullable: false
+
+      field :recaptcha_v2, -> { Auth0::Types::CaptchaPolicyActionRecaptchaV2 }, optional: true, nullable: false
+
+      field :recaptcha_enterprise, -> { Auth0::Types::CaptchaPolicyActionRecaptchaEnterprise }, optional: true, nullable: false
+
+      field :hcaptcha, -> { Auth0::Types::CaptchaPolicyActionHcaptcha }, optional: true, nullable: false
+
+      field :friendly_captcha, -> { Auth0::Types::CaptchaPolicyActionFriendlyCaptcha }, optional: true, nullable: false
+
+      field :arkose, -> { Auth0::Types::CaptchaPolicyActionArkose }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/attack_protection_captcha_policy_action_input.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # CAPTCHA configuration override for this policy.
+    class AttackProtectionCaptchaPolicyActionInput < Internal::Types::Model
+      field :active_provider_id, -> { Auth0::Types::CaptchaActiveProviderEnum }, optional: true, nullable: false
+
+      field :simple_captcha, -> { Auth0::Types::CaptchaPolicyActionSimpleCaptcha }, optional: true, nullable: false
+
+      field :auth_challenge, -> { Auth0::Types::CaptchaPolicyActionAuthChallenge }, optional: true, nullable: false
+
+      field :recaptcha_v2, -> { Auth0::Types::CaptchaPolicyActionRecaptchaV2Input }, optional: true, nullable: false
+
+      field :recaptcha_enterprise, -> { Auth0::Types::CaptchaPolicyActionRecaptchaEnterpriseInput }, optional: true, nullable: false
+
+      field :hcaptcha, -> { Auth0::Types::CaptchaPolicyActionHcaptchaInput }, optional: true, nullable: false
+
+      field :friendly_captcha, -> { Auth0::Types::CaptchaPolicyActionFriendlyCaptchaInput }, optional: true, nullable: false
+
+      field :arkose, -> { Auth0::Types::CaptchaPolicyActionArkoseInput }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/attack_protection_captcha_policy_match.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Traffic matching criteria for the policy. Exactly one of auth0_managed or geo_country_codes must be specified.
+    class AttackProtectionCaptchaPolicyMatch < Internal::Types::Model
+      field :auth0managed, -> { Internal::Types::Array[String] }, optional: true, nullable: false, api_name: "auth0_managed"
+
+      field :geo_country_codes, -> { Internal::Types::Array[String] }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/brute_force_protection_form_submission_mode_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module BruteForceProtectionFormSubmissionModeEnum
+      extend Auth0::Internal::Types::Enum
+
+      AUTO = "auto"
+      MANUAL = "manual"
+    end
+  end
+end

data/lib/auth0/types/captcha_active_provider_enum.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module CaptchaActiveProviderEnum
+      extend Auth0::Internal::Types::Enum
+
+      SIMPLE_CAPTCHA = "simple_captcha"
+      AUTH_CHALLENGE = "auth_challenge"
+      RECAPTCHA_V2 = "recaptcha_v2"
+      RECAPTCHA_ENTERPRISE = "recaptcha_enterprise"
+      HCAPTCHA = "hcaptcha"
+      FRIENDLY_CAPTCHA = "friendly_captcha"
+      ARKOSE = "arkose"
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_arkose.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Arkose Labs provider configuration.
+    class CaptchaPolicyActionArkose < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+
+      field :client_subdomain, -> { String }, optional: true, nullable: false
+
+      field :verify_subdomain, -> { String }, optional: true, nullable: false
+
+      field :fail_open, -> { Internal::Types::Boolean }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_arkose_input.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Arkose Labs provider configuration.
+    class CaptchaPolicyActionArkoseInput < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+
+      field :secret, -> { String }, optional: true, nullable: false
+
+      field :client_subdomain, -> { String }, optional: true, nullable: false
+
+      field :verify_subdomain, -> { String }, optional: true, nullable: false
+
+      field :fail_open, -> { Internal::Types::Boolean }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_auth_challenge.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Auth Challenge CAPTCHA provider configuration.
+    class CaptchaPolicyActionAuthChallenge < Internal::Types::Model
+      field :fail_open, -> { Internal::Types::Boolean }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_friendly_captcha.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Friendly Captcha provider configuration.
+    class CaptchaPolicyActionFriendlyCaptcha < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_friendly_captcha_input.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Friendly Captcha provider configuration.
+    class CaptchaPolicyActionFriendlyCaptchaInput < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+
+      field :secret, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_hcaptcha.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # hCaptcha provider configuration.
+    class CaptchaPolicyActionHcaptcha < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_hcaptcha_input.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # hCaptcha provider configuration.
+    class CaptchaPolicyActionHcaptchaInput < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+
+      field :secret, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_recaptcha_enterprise.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # reCAPTCHA Enterprise provider configuration.
+    class CaptchaPolicyActionRecaptchaEnterprise < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+
+      field :project_id, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_recaptcha_enterprise_input.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # reCAPTCHA Enterprise provider configuration.
+    class CaptchaPolicyActionRecaptchaEnterpriseInput < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+
+      field :project_id, -> { String }, optional: true, nullable: false
+
+      field :api_key, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_recaptcha_v2.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # reCAPTCHA v2 provider configuration.
+    class CaptchaPolicyActionRecaptchaV2 < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_recaptcha_v2input.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # reCAPTCHA v2 provider configuration.
+    class CaptchaPolicyActionRecaptchaV2Input < Internal::Types::Model
+      field :site_key, -> { String }, optional: true, nullable: false
+
+      field :secret, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/captcha_policy_action_simple_captcha.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Simple CAPTCHA provider configuration.
+    class CaptchaPolicyActionSimpleCaptcha < Internal::Types::Model; end
+  end
+end

data/lib/auth0/types/cimd_external_metadata_created_by_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module CimdExternalMetadataCreatedByEnum
+      extend Auth0::Internal::Types::Enum
+
+      ADMIN = "admin"
+      CLIENT = "client"
+    end
+  end
+end

data/lib/auth0/types/client.rb

@@ -123,6 +123,8 @@ module Auth0
 
       field :anonymous_sessions, -> { Auth0::Types::AnonymousSessions }, optional: true, nullable: false
 
+      field :enforce_anon_session_transfer_network_binding, -> { Auth0::Types::ClientAnonymousSessionTransferNetworkBindingEnum }, optional: true, nullable: false
+
       field :third_party_security_mode, -> { Auth0::Types::ClientThirdPartySecurityModeEnum }, optional: true, nullable: false
 
       field :redirection_policy, -> { Auth0::Types::ClientRedirectionPolicyEnum }, optional: true, nullable: false
@@ -135,6 +137,8 @@ module Auth0
 
       field :external_metadata_created_by, -> { Auth0::Types::ClientExternalMetadataCreatedByEnum }, optional: true, nullable: false
 
+      field :external_metadata_status, -> { Auth0::Types::ClientExternalMetadataStatusEnum }, optional: true, nullable: false
+
       field :external_client_id, -> { String }, optional: true, nullable: false
 
       field :jwks_uri, -> { String }, optional: true, nullable: false

data/lib/auth0/types/client_anonymous_session_transfer_network_binding_enum.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientAnonymousSessionTransferNetworkBindingEnum
+      extend Auth0::Internal::Types::Enum
+
+      IP = "ip"
+      ASN = "asn"
+      NONE = "none"
+    end
+  end
+end

data/lib/auth0/types/client_external_metadata_status_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientExternalMetadataStatusEnum
+      extend Auth0::Internal::Types::Enum
+
+      AVAILABLE = "available"
+      UNAVAILABLE = "unavailable"
+    end
+  end
+end

data/lib/auth0/types/client_grant_sort_field_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientGrantSortFieldEnum
+      extend Auth0::Internal::Types::Enum
+
+      AUDIENCE = "audience"
+      UPDATED_AT = "updated_at"
+    end
+  end
+end

data/lib/auth0/types/client_oidc_support_patch.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # OIDC support configuration for a client. Replaces the stored object entirely; send null to unset it.
+    class ClientOidcSupportPatch < Internal::Types::Model
+      field :is_allowed, -> { Internal::Types::Boolean }, optional: false, nullable: false
+
+      field :allow_all_scopes, -> { Internal::Types::Boolean }, optional: true, nullable: false
+
+      field :allowed_scopes, -> { Internal::Types::Array[Auth0::Types::ClientOidcSupportAllowedScopesEnum] }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    class ClientProfile < Internal::Types::Model
+      field :id, -> { String }, optional: false, nullable: false
+
+      field :name, -> { String }, optional: false, nullable: false
+
+      field :description, -> { String }, optional: true, nullable: false
+
+      field :client_configuration, -> { Auth0::Types::ClientProfileClientConfiguration }, optional: false, nullable: false
+
+      field :apply_policy, -> { Auth0::Types::ClientProfileApplyPolicy }, optional: false, nullable: false
+
+      field :created_at, -> { String }, optional: true, nullable: false
+
+      field :updated_at, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_apply_policy.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Runtime matching rules that determine which clients this profile governs.
+    class ClientProfileApplyPolicy < Internal::Types::Model
+      field :external_metadata_type, -> { Auth0::Types::ClientProfileApplyPolicyExternalMetadataTypeEnum }, optional: false, nullable: false
+
+      field :external_metadata_created_by, -> { Auth0::Types::ClientProfileApplyPolicyExternalMetadataCreatedByEnum }, optional: false, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_apply_policy_external_metadata_created_by_enum.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileApplyPolicyExternalMetadataCreatedByEnum
+      extend Auth0::Internal::Types::Enum
+
+      CLIENT = "client"
+    end
+  end
+end

data/lib/auth0/types/client_profile_apply_policy_external_metadata_type_enum.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileApplyPolicyExternalMetadataTypeEnum
+      extend Auth0::Internal::Types::Enum
+
+      CIMD = "cimd"
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Runtime policy applied to matched clients. Omitted fields fall back to each client's own setting.
+    class ClientProfileClientConfiguration < Internal::Types::Model
+      field :refresh_token, -> { Auth0::Types::ClientProfileClientConfigurationRefreshToken }, optional: true, nullable: false
+
+      field :organization_usage, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationUsage }, optional: true, nullable: false
+
+      field :organization_require_behavior, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationRequireBehavior }, optional: true, nullable: false
+
+      field :organization_discovery_methods, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationDiscoveryMethods }, optional: true, nullable: false
+
+      field :require_proof_of_possession, -> { Auth0::Types::ClientProfileClientConfigurationRequireProofOfPossession }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_discovery_method_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileClientConfigurationOrganizationDiscoveryMethodEnum
+      extend Auth0::Internal::Types::Enum
+
+      EMAIL = "email"
+      ORGANIZATION_NAME = "organization_name"
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_discovery_methods.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default organization discovery methods applied to matched clients.
+    class ClientProfileClientConfigurationOrganizationDiscoveryMethods < Internal::Types::Model
+      field :default_value, -> { Internal::Types::Array[Auth0::Types::ClientProfileClientConfigurationOrganizationDiscoveryMethodEnum] }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_require_behavior.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default organization prompt behavior applied to matched clients.
+    class ClientProfileClientConfigurationOrganizationRequireBehavior < Internal::Types::Model
+      field :default_value, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationRequireBehaviorEnum }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_require_behavior_enum.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileClientConfigurationOrganizationRequireBehaviorEnum
+      extend Auth0::Internal::Types::Enum
+
+      NO_PROMPT = "no_prompt"
+      PRE_LOGIN_PROMPT = "pre_login_prompt"
+      POST_LOGIN_PROMPT = "post_login_prompt"
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_usage.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default organization usage applied to matched clients.
+    class ClientProfileClientConfigurationOrganizationUsage < Internal::Types::Model
+      field :default_value, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationUsageEnum }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_usage_enum.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileClientConfigurationOrganizationUsageEnum
+      extend Auth0::Internal::Types::Enum
+
+      DENY = "deny"
+      ALLOW = "allow"
+      REQUIRE = "require"
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_refresh_token.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Refresh token settings. Omit any sub-field to use the client's own value.
+    class ClientProfileClientConfigurationRefreshToken < Internal::Types::Model
+      field :token_lifetime, -> { Auth0::Types::ClientProfileRefreshTokenTokenLifetime }, optional: true, nullable: false
+
+      field :idle_token_lifetime, -> { Auth0::Types::ClientProfileRefreshTokenIdleTokenLifetime }, optional: true, nullable: false
+
+      field :leeway, -> { Auth0::Types::ClientProfileRefreshTokenLeeway }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_require_proof_of_possession.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Whether matched clients default to requiring proof of possession.
+    class ClientProfileClientConfigurationRequireProofOfPossession < Internal::Types::Model
+      field :default_value, -> { Internal::Types::Boolean }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_description.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileDescription
+      # ClientProfileDescription is an alias for Object
+
+      # @option str [String]
+      #
+      # @return [untyped]
+      def self.load(str)
+        ::JSON.parse(str)
+      end
+
+      # @option value [untyped]
+      #
+      # @return [String]
+      def self.dump(value)
+        ::JSON.generate(value)
+      end
+    end
+  end
+end

data/lib/auth0/types/client_profile_id.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileID
+      # ClientProfileID is an alias for String
+
+      # @option str [String]
+      #
+      # @return [untyped]
+      def self.load(str)
+        ::JSON.parse(str)
+      end
+
+      # @option value [untyped]
+      #
+      # @return [String]
+      def self.dump(value)
+        ::JSON.generate(value)
+      end
+    end
+  end
+end

data/lib/auth0/types/client_profile_name.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileName
+      # ClientProfileName is an alias for String
+
+      # @option str [String]
+      #
+      # @return [untyped]
+      def self.load(str)
+        ::JSON.parse(str)
+      end
+
+      # @option value [untyped]
+      #
+      # @return [String]
+      def self.dump(value)
+        ::JSON.generate(value)
+      end
+    end
+  end
+end

data/lib/auth0/types/client_profile_refresh_token_idle_token_lifetime.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default idle refresh token lifetime, in seconds, applied to matched clients.
+    class ClientProfileRefreshTokenIdleTokenLifetime < Internal::Types::Model
+      field :default_value, -> { Integer }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_refresh_token_leeway.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default refresh token rotation leeway, in seconds, applied to matched clients.
+    class ClientProfileRefreshTokenLeeway < Internal::Types::Model
+      field :default_value, -> { Integer }, optional: true, nullable: false
+    end
+  end
+end