auth0 6.4.0 → 6.6.0

data/lib/auth0/mixins/httpproxy.rb

@@ -1,13 +1,14 @@
 require "addressable/uri"
 require "retryable"
 require_relative "../exception.rb"
+require_relative "../internal/http/rate_limit"
 
 module Auth0
   module Mixins
     # here's the proxy for Rest calls based on rest-client, we're building all request on that gem
     # for now, if you want to feel free to use your own http client
     module HTTPProxy
-      attr_accessor :headers, :base_uri, :timeout, :retry_count
+      attr_accessor :headers, :base_uri, :timeout, :retry_count, :rate_limit_handler
       DEFAULT_RETRIES = 3
       MAX_ALLOWED_RETRIES = 10
       MAX_REQUEST_RETRY_JITTER = 250
@@ -95,6 +96,13 @@ module Auth0
           call(method, encode_uri(uri), timeout, headers, body.to_json)
         end
 
+        # Surface rate limit for each response, including 429 retries. `call`
+        # returns nil for some errors (e.g. a dropped connection), so skip it then.
+        if @rate_limit_handler && !result.nil?
+          rate_limit = Auth0::Internal::Http::RateLimit.from_headers(result.headers)
+          Auth0::Internal::Http::RateLimit.deliver(@rate_limit_handler, rate_limit)
+        end
+
         case result.code
         when 200...226 then safe_parse_json(result.body)
         when 400       then raise Auth0::BadRequest.new(result.body, code: result.code, headers: result.headers)

data/lib/auth0/mixins/initializer.rb

@@ -21,6 +21,11 @@ module Auth0
         @management_timeout = options[:management_timeout]
         @management_max_retries = options[:management_max_retries]
         @management_additional_headers = options[:management_additional_headers]
+        handler = options[:rate_limit_handler]
+        raise ArgumentError, "rate_limit_handler must respond to #call" if handler && !handler.respond_to?(:call)
+
+        @rate_limit_handler = handler
+
         extend Auth0::Api::AuthenticationEndpoints
 
         @client_id = options[:client_id]

data/lib/auth0/portals/client.rb

@@ -0,0 +1,198 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Portals
+    class Client
+      # @param client [Auth0::Internal::Http::RawClient]
+      #
+      # @return [void]
+      def initialize(client:)
+        @client = client
+      end
+
+      # @param request_options [Hash]
+      # @param _params [Hash]
+      # @option request_options [String] :base_url
+      # @option request_options [Hash{String => Object}] :additional_headers
+      # @option request_options [Hash{String => Object}] :additional_query_parameters
+      # @option request_options [Hash{String => Object}] :additional_body_parameters
+      # @option request_options [Integer] :timeout_in_seconds
+      #
+      # @example
+      #   client.portals.list
+      #
+      # @return [Auth0::Types::ListPortalsResponseContent]
+      def list(request_options: {}, **_params)
+        request = Auth0::Internal::JSON::Request.new(
+          base_url: request_options[:base_url],
+          method: "GET",
+          path: "portals",
+          request_options: request_options
+        )
+        begin
+          response = @client.send(request)
+        rescue Net::HTTPRequestTimeout
+          raise Auth0::Errors::TimeoutError
+        end
+        code = response.code.to_i
+        if code.between?(200, 299)
+          (response.body.to_s.empty? ? nil : Auth0::Types::ListPortalsResponseContent.load(response.body))
+        else
+          error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+          raise error_class.new(response.body, code: code)
+        end
+      end
+
+      # @param request_options [Hash]
+      # @param params [Auth0::Portals::Types::CreatePortalRequestContent]
+      # @option request_options [String] :base_url
+      # @option request_options [Hash{String => Object}] :additional_headers
+      # @option request_options [Hash{String => Object}] :additional_query_parameters
+      # @option request_options [Hash{String => Object}] :additional_body_parameters
+      # @option request_options [Integer] :timeout_in_seconds
+      #
+      # @example
+      #   client.portals.create(
+      #     slug: "slug",
+      #     name: "name",
+      #     client: {
+      #       token_endpoint_auth_method: "client_secret_post",
+      #       client_id: "client_id",
+      #       client_secret: "client_secret"
+      #     }
+      #   )
+      #
+      # @return [Auth0::Types::Portal]
+      def create(request_options: {}, **params)
+        params = Auth0::Internal::Types::Utils.normalize_keys(params)
+        request = Auth0::Internal::JSON::Request.new(
+          base_url: request_options[:base_url],
+          method: "POST",
+          path: "portals",
+          body: Auth0::Portals::Types::CreatePortalRequestContent.new(params).to_h,
+          request_options: request_options
+        )
+        begin
+          response = @client.send(request)
+        rescue Net::HTTPRequestTimeout
+          raise Auth0::Errors::TimeoutError
+        end
+        code = response.code.to_i
+        if code.between?(200, 299)
+          (response.body.to_s.empty? ? nil : Auth0::Types::Portal.load(response.body))
+        else
+          error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+          raise error_class.new(response.body, code: code)
+        end
+      end
+
+      # @param request_options [Hash]
+      # @param params [Hash]
+      # @option request_options [String] :base_url
+      # @option request_options [Hash{String => Object}] :additional_headers
+      # @option request_options [Hash{String => Object}] :additional_query_parameters
+      # @option request_options [Hash{String => Object}] :additional_body_parameters
+      # @option request_options [Integer] :timeout_in_seconds
+      # @option params [Auth0::Types::PortalID] :id
+      #
+      # @example
+      #   client.portals.get(id: "id")
+      #
+      # @return [Auth0::Types::Portal]
+      def get(request_options: {}, **params)
+        params = Auth0::Internal::Types::Utils.normalize_keys(params)
+        request = Auth0::Internal::JSON::Request.new(
+          base_url: request_options[:base_url],
+          method: "GET",
+          path: "portals/#{URI.encode_uri_component(params[:id].to_s)}",
+          request_options: request_options
+        )
+        begin
+          response = @client.send(request)
+        rescue Net::HTTPRequestTimeout
+          raise Auth0::Errors::TimeoutError
+        end
+        code = response.code.to_i
+        if code.between?(200, 299)
+          (response.body.to_s.empty? ? nil : Auth0::Types::Portal.load(response.body))
+        else
+          error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+          raise error_class.new(response.body, code: code)
+        end
+      end
+
+      # @param request_options [Hash]
+      # @param params [Hash]
+      # @option request_options [String] :base_url
+      # @option request_options [Hash{String => Object}] :additional_headers
+      # @option request_options [Hash{String => Object}] :additional_query_parameters
+      # @option request_options [Hash{String => Object}] :additional_body_parameters
+      # @option request_options [Integer] :timeout_in_seconds
+      # @option params [Auth0::Types::PortalID] :id
+      #
+      # @example
+      #   client.portals.delete(id: "id")
+      #
+      # @return [untyped]
+      def delete(request_options: {}, **params)
+        params = Auth0::Internal::Types::Utils.normalize_keys(params)
+        request = Auth0::Internal::JSON::Request.new(
+          base_url: request_options[:base_url],
+          method: "DELETE",
+          path: "portals/#{URI.encode_uri_component(params[:id].to_s)}",
+          request_options: request_options
+        )
+        begin
+          response = @client.send(request)
+        rescue Net::HTTPRequestTimeout
+          raise Auth0::Errors::TimeoutError
+        end
+        code = response.code.to_i
+        return if code.between?(200, 299)
+
+        error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+        raise error_class.new(response.body, code: code)
+      end
+
+      # @param request_options [Hash]
+      # @param params [Auth0::Portals::Types::UpdatePortalRequestContent]
+      # @option request_options [String] :base_url
+      # @option request_options [Hash{String => Object}] :additional_headers
+      # @option request_options [Hash{String => Object}] :additional_query_parameters
+      # @option request_options [Hash{String => Object}] :additional_body_parameters
+      # @option request_options [Integer] :timeout_in_seconds
+      # @option params [Auth0::Types::PortalID] :id
+      #
+      # @example
+      #   client.portals.update(id: "id")
+      #
+      # @return [Auth0::Types::Portal]
+      def update(request_options: {}, **params)
+        params = Auth0::Internal::Types::Utils.normalize_keys(params)
+        request_data = Auth0::Portals::Types::UpdatePortalRequestContent.new(params).to_h
+        non_body_param_names = %w[id]
+        body = request_data.except(*non_body_param_names)
+
+        request = Auth0::Internal::JSON::Request.new(
+          base_url: request_options[:base_url],
+          method: "PATCH",
+          path: "portals/#{URI.encode_uri_component(params[:id].to_s)}",
+          body: body,
+          request_options: request_options
+        )
+        begin
+          response = @client.send(request)
+        rescue Net::HTTPRequestTimeout
+          raise Auth0::Errors::TimeoutError
+        end
+        code = response.code.to_i
+        if code.between?(200, 299)
+          (response.body.to_s.empty? ? nil : Auth0::Types::Portal.load(response.body))
+        else
+          error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+          raise error_class.new(response.body, code: code)
+        end
+      end
+    end
+  end
+end

data/lib/auth0/portals/types/create_portal_request_content.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Portals
+    module Types
+      class CreatePortalRequestContent < Internal::Types::Model
+        field :slug, -> { String }, optional: false, nullable: false
+
+        field :name, -> { String }, optional: false, nullable: false
+
+        field :client, -> { Auth0::Types::PortalClientSecretPostRequest }, optional: false, nullable: false
+
+        field :navigation, -> { Auth0::Types::PortalNavigation }, optional: true, nullable: false
+
+        field :pages, -> { Auth0::Types::PortalPagesByType }, optional: true, nullable: false
+
+        field :custom_code, -> { Auth0::Types::PortalCustomCode }, optional: true, nullable: false
+      end
+    end
+  end
+end

data/lib/auth0/portals/types/update_portal_request_content.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Portals
+    module Types
+      class UpdatePortalRequestContent < Internal::Types::Model
+        field :id, -> { String }, optional: false, nullable: false
+
+        field :slug, -> { String }, optional: true, nullable: false
+
+        field :name, -> { String }, optional: true, nullable: false
+
+        field :client, -> { Auth0::Types::PortalClientSecretPostRequest }, optional: true, nullable: false
+
+        field :navigation, -> { Auth0::Types::PortalNavigation }, optional: true, nullable: false
+
+        field :pages, -> { Auth0::Types::PortalPagesByType }, optional: true, nullable: false
+
+        field :custom_code, -> { Auth0::Types::PortalCustomCode }, optional: true, nullable: false
+      end
+    end
+  end
+end

data/lib/auth0/resource_servers/types/create_resource_server_request_content.rb

@@ -45,6 +45,10 @@ module Auth0
         field :subject_type_authorization, -> { Auth0::Types::ResourceServerSubjectTypeAuthorization }, optional: true, nullable: false
 
         field :authorization_policy, -> { Auth0::Types::ResourceServerAuthorizationPolicy }, optional: true, nullable: false
+
+        field :agent_subject_claims, -> { Auth0::Types::ResourceServerAgentSubjectClaimsSchemaEnum }, optional: true, nullable: false
+
+        field :type, -> { Auth0::Types::ResourceServerTypeEnum }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/resource_servers/types/update_resource_server_request_content.rb

@@ -45,6 +45,10 @@ module Auth0
         field :subject_type_authorization, -> { Auth0::Types::ResourceServerSubjectTypeAuthorization }, optional: true, nullable: false
 
         field :authorization_policy, -> { Auth0::Types::ResourceServerAuthorizationPolicy }, optional: true, nullable: false
+
+        field :agent_subject_claims, -> { Auth0::Types::ResourceServerAgentSubjectClaimsSchemaEnum }, optional: true, nullable: false
+
+        field :type, -> { Auth0::Types::ResourceServerTypeEnum }, optional: true, nullable: false
       end
     end
   end

data/lib/auth0/roles/client.rb

@@ -10,7 +10,8 @@ module Auth0
         @client = client
       end
 
-      # Retrieve detailed list of user roles created in your tenant.
+      # Retrieve a list of roles. Includes roles created in your tenant and, when `owner_id=auth0` is supplied,
+      # Auth0-managed System Roles.
       #
       # **Note**: The returned list does not include standard roles available for tenant members, such as Admin or
       # Support Access.

data/lib/auth0/tenants/settings/types/update_tenant_settings_request_content.rb

@@ -77,12 +77,16 @@ module Auth0
 
           field :authorization_response_iss_parameter_supported, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
+          field :dpop_strict_refresh_token_binding, -> { Internal::Types::Boolean }, optional: true, nullable: false
+
           field :skip_non_verifiable_callback_uri_confirmation_prompt, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
           field :resource_parameter_profile, -> { Auth0::Types::TenantSettingsResourceParameterProfile }, optional: true, nullable: false
 
           field :client_id_metadata_document_supported, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
+          field :client_id_metadata_document_dynamic_registration_supported, -> { Internal::Types::Boolean }, optional: true, nullable: false
+
           field :enable_ai_guide, -> { Internal::Types::Boolean }, optional: true, nullable: false
 
           field :phone_consolidated_experience, -> { Internal::Types::Boolean }, optional: true, nullable: false

data/lib/auth0/types/brute_force_protection_form_submission_mode_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module BruteForceProtectionFormSubmissionModeEnum
+      extend Auth0::Internal::Types::Enum
+
+      AUTO = "auto"
+      MANUAL = "manual"
+    end
+  end
+end

data/lib/auth0/types/cimd_external_metadata_created_by_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module CimdExternalMetadataCreatedByEnum
+      extend Auth0::Internal::Types::Enum
+
+      ADMIN = "admin"
+      CLIENT = "client"
+    end
+  end
+end

data/lib/auth0/types/client.rb

@@ -123,8 +123,12 @@ module Auth0
 
       field :anonymous_sessions, -> { Auth0::Types::AnonymousSessions }, optional: true, nullable: false
 
+      field :enforce_anon_session_transfer_network_binding, -> { Auth0::Types::ClientAnonymousSessionTransferNetworkBindingEnum }, optional: true, nullable: false
+
       field :third_party_security_mode, -> { Auth0::Types::ClientThirdPartySecurityModeEnum }, optional: true, nullable: false
 
+      field :oidc_support, -> { Auth0::Types::ClientOidcSupport }, optional: true, nullable: false
+
       field :redirection_policy, -> { Auth0::Types::ClientRedirectionPolicyEnum }, optional: true, nullable: false
 
       field :resource_server_identifier, -> { String }, optional: true, nullable: false
@@ -135,6 +139,10 @@ module Auth0
 
       field :external_metadata_created_by, -> { Auth0::Types::ClientExternalMetadataCreatedByEnum }, optional: true, nullable: false
 
+      field :external_metadata_status, -> { Auth0::Types::ClientExternalMetadataStatusEnum }, optional: true, nullable: false
+
+      field :agent_id, -> { String }, optional: true, nullable: false
+
       field :external_client_id, -> { String }, optional: true, nullable: false
 
       field :jwks_uri, -> { String }, optional: true, nullable: false

data/lib/auth0/types/client_anonymous_session_transfer_network_binding_enum.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientAnonymousSessionTransferNetworkBindingEnum
+      extend Auth0::Internal::Types::Enum
+
+      IP = "ip"
+      ASN = "asn"
+      NONE = "none"
+    end
+  end
+end

data/lib/auth0/types/client_external_metadata_status_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientExternalMetadataStatusEnum
+      extend Auth0::Internal::Types::Enum
+
+      AVAILABLE = "available"
+      UNAVAILABLE = "unavailable"
+    end
+  end
+end

data/lib/auth0/types/client_grant_sort_field_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientGrantSortFieldEnum
+      extend Auth0::Internal::Types::Enum
+
+      AUDIENCE = "audience"
+      UPDATED_AT = "updated_at"
+    end
+  end
+end

data/lib/auth0/types/client_oidc_support.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # OIDC support configuration for this client.
+    class ClientOidcSupport < Internal::Types::Model
+      field :is_allowed, -> { Internal::Types::Boolean }, optional: true, nullable: false
+
+      field :allow_all_scopes, -> { Internal::Types::Boolean }, optional: true, nullable: false
+
+      field :allowed_scopes, -> { Internal::Types::Array[Auth0::Types::ClientOidcSupportAllowedScopesEnum] }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_oidc_support_patch.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # OIDC support configuration for a client. Replaces the stored object entirely; send null to unset it.
+    class ClientOidcSupportPatch < Internal::Types::Model
+      field :is_allowed, -> { Internal::Types::Boolean }, optional: false, nullable: false
+
+      field :allow_all_scopes, -> { Internal::Types::Boolean }, optional: true, nullable: false
+
+      field :allowed_scopes, -> { Internal::Types::Array[Auth0::Types::ClientOidcSupportAllowedScopesEnum] }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    class ClientProfile < Internal::Types::Model
+      field :id, -> { String }, optional: false, nullable: false
+
+      field :name, -> { String }, optional: false, nullable: false
+
+      field :description, -> { String }, optional: true, nullable: false
+
+      field :client_configuration, -> { Auth0::Types::ClientProfileClientConfiguration }, optional: false, nullable: false
+
+      field :apply_policy, -> { Auth0::Types::ClientProfileApplyPolicy }, optional: false, nullable: false
+
+      field :created_at, -> { String }, optional: true, nullable: false
+
+      field :updated_at, -> { String }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_apply_policy.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Runtime matching rules that determine which clients this profile governs.
+    class ClientProfileApplyPolicy < Internal::Types::Model
+      field :external_metadata_type, -> { Auth0::Types::ClientProfileApplyPolicyExternalMetadataTypeEnum }, optional: false, nullable: false
+
+      field :external_metadata_created_by, -> { Auth0::Types::ClientProfileApplyPolicyExternalMetadataCreatedByEnum }, optional: false, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_apply_policy_external_metadata_created_by_enum.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileApplyPolicyExternalMetadataCreatedByEnum
+      extend Auth0::Internal::Types::Enum
+
+      CLIENT = "client"
+    end
+  end
+end

data/lib/auth0/types/client_profile_apply_policy_external_metadata_type_enum.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileApplyPolicyExternalMetadataTypeEnum
+      extend Auth0::Internal::Types::Enum
+
+      CIMD = "cimd"
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Runtime policy applied to matched clients. Omitted fields fall back to each client's own setting.
+    class ClientProfileClientConfiguration < Internal::Types::Model
+      field :refresh_token, -> { Auth0::Types::ClientProfileClientConfigurationRefreshToken }, optional: true, nullable: false
+
+      field :organization_usage, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationUsage }, optional: true, nullable: false
+
+      field :organization_require_behavior, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationRequireBehavior }, optional: true, nullable: false
+
+      field :organization_discovery_methods, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationDiscoveryMethods }, optional: true, nullable: false
+
+      field :require_proof_of_possession, -> { Auth0::Types::ClientProfileClientConfigurationRequireProofOfPossession }, optional: true, nullable: false
+
+      field :oidc_support, -> { Auth0::Types::ClientProfileClientConfigurationOidcSupport }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_oidc_support.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default OIDC support applied to matched clients.
+    class ClientProfileClientConfigurationOidcSupport < Internal::Types::Model
+      field :default_value, -> { Auth0::Types::ClientProfileClientConfigurationOidcSupportDefaultValue }, optional: false, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_oidc_support_allowed_scopes_enum.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileClientConfigurationOidcSupportAllowedScopesEnum
+      extend Auth0::Internal::Types::Enum
+
+      PROFILE = "profile"
+      EMAIL = "email"
+      ADDRESS = "address"
+      PHONE = "phone"
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_oidc_support_default_value.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # OIDC support settings applied to matched clients.
+    class ClientProfileClientConfigurationOidcSupportDefaultValue < Internal::Types::Model
+      field :is_allowed, -> { Internal::Types::Boolean }, optional: false, nullable: false
+
+      field :allow_all_scopes, -> { Internal::Types::Boolean }, optional: true, nullable: false
+
+      field :allowed_scopes, -> { Internal::Types::Array[Auth0::Types::ClientProfileClientConfigurationOidcSupportAllowedScopesEnum] }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_discovery_method_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileClientConfigurationOrganizationDiscoveryMethodEnum
+      extend Auth0::Internal::Types::Enum
+
+      EMAIL = "email"
+      ORGANIZATION_NAME = "organization_name"
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_discovery_methods.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default organization discovery methods applied to matched clients.
+    class ClientProfileClientConfigurationOrganizationDiscoveryMethods < Internal::Types::Model
+      field :default_value, -> { Internal::Types::Array[Auth0::Types::ClientProfileClientConfigurationOrganizationDiscoveryMethodEnum] }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_require_behavior.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default organization prompt behavior applied to matched clients.
+    class ClientProfileClientConfigurationOrganizationRequireBehavior < Internal::Types::Model
+      field :default_value, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationRequireBehaviorEnum }, optional: true, nullable: false
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_require_behavior_enum.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientProfileClientConfigurationOrganizationRequireBehaviorEnum
+      extend Auth0::Internal::Types::Enum
+
+      NO_PROMPT = "no_prompt"
+      PRE_LOGIN_PROMPT = "pre_login_prompt"
+      POST_LOGIN_PROMPT = "post_login_prompt"
+    end
+  end
+end

data/lib/auth0/types/client_profile_client_configuration_organization_usage.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    # Default organization usage applied to matched clients.
+    class ClientProfileClientConfigurationOrganizationUsage < Internal::Types::Model
+      field :default_value, -> { Auth0::Types::ClientProfileClientConfigurationOrganizationUsageEnum }, optional: true, nullable: false
+    end
+  end
+end