@descope/node-sdk 1.6.2 → 1.6.4

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as _descope_core_js_sdk from '@descope/core-js-sdk';
-import _descope_core_js_sdk__default, { DeliveryMethod, UserResponse, SdkResponse, ExchangeAccessKeyResponse } from '@descope/core-js-sdk';
+import _descope_core_js_sdk__default, { DeliveryMethod, UserResponse, SdkResponse, AccessKeyLoginOptions, ExchangeAccessKeyResponse } from '@descope/core-js-sdk';
 export { DeliveryMethod, JWTResponse, OAuthProvider, ResponseData, SdkResponse } from '@descope/core-js-sdk';
 import { JWTHeaderParameters, KeyLike } from 'jose';
 
@@ -18,7 +18,9 @@ interface AuthenticationInfo {
 }
 declare type DeliveryMethodForTestUser = DeliveryMethod | 'Embedded';
 
-/** Represents a tenant association for a User or Access Key. The tenantId is required to denote
+declare type ExpirationUnit = 'minutes' | 'hours' | 'days' | 'weeks';
+/**
+ * Represents a tenant association for a User or Access Key. The tenantId is required to denote
  * which tenant the user or access key belongs to. The roleNames array is an optional list of
  * roles for the user or access key in this specific tenant.
  */
@@ -30,6 +32,71 @@ declare type AssociatedTenant = {
 declare type CreateTenantResponse = {
     id: string;
 };
+/**
+ * Options to create or update an OIDC application.
+ *
+ * **Note:** When updating, `id` will be required to perform the operation
+ */
+declare type OidcApplicationOptions = {
+    name: string;
+    loginPageUrl: string;
+    id?: string;
+    description?: string;
+    logo?: string;
+    enabled?: boolean;
+};
+/**
+ * Options to create or update a SAML application.
+ *
+ * **Note:** When updating, `id` will be required to perform the operation
+ */
+declare type SamlApplicationOptions = {
+    name: string;
+    loginPageUrl: string;
+    id?: string;
+    description?: string;
+    logo?: string;
+    enabled?: boolean;
+    useMetadataInfo?: boolean;
+    metadataUrl?: string;
+    entityId?: string;
+    acsUrl?: string;
+    certificate?: string;
+    attributeMapping?: SamlIdpAttributeMappingInfo[];
+    groupsMapping?: SamlIdpGroupsMappingInfo[];
+    acsAllowedCallbacks?: string[];
+    subjectNameIdType?: string;
+    subjectNameIdFormat?: string;
+};
+/**
+ * Represents a SAML IDP attribute mapping object. Use this class for mapping Descope attribute
+ * to the relevant SAML Assertion attributes matching your expected SP attributes names.
+ */
+declare type SamlIdpAttributeMappingInfo = {
+    name: string;
+    type: string;
+    value: string;
+};
+/** Represents a SAML IDP Role Group mapping object. */
+declare type SAMLIDPRoleGroupMappingInfo = {
+    id: string;
+    name: string;
+};
+/**
+ * Represents a SAML IDP groups mapping object. Use this class for mapping Descope roles
+ * to the relevant SAML Assertion groups attributes that matching your expected SP groups attributes names.
+ */
+declare type SamlIdpGroupsMappingInfo = {
+    name: string;
+    type: string;
+    filterType: string;
+    value: string;
+    roles: SAMLIDPRoleGroupMappingInfo[];
+};
+/** The ID of a newly created SSO application */
+declare type CreateSSOApplicationResponse = {
+    id: string;
+};
 /** An access key that can be used to access descope */
 declare type AccessKey = {
     id: string;
@@ -42,6 +109,7 @@ declare type AccessKey = {
     expiresTime: number;
     createdBy: string;
     clientId: string;
+    boundUserId?: string;
 };
 /** Access Key extended details including created key cleartext */
 declare type CreatedAccessKeyResponse = {
@@ -72,6 +140,78 @@ declare type Tenant = {
     id: string;
     name: string;
     selfProvisioningDomains: string[];
+    customAttributes?: Record<string, string | number | boolean>;
+    domains?: string[];
+    authType?: 'none' | 'saml' | 'oidc';
+};
+/** Represents settings of a tenant in a project. It has an id, a name and an array of
+ * self provisioning domains used to associate users with that tenant.
+ */
+declare type TenantSettings = {
+    selfProvisioningDomains: string[];
+    domains?: string[];
+    authType?: 'none' | 'saml' | 'oidc';
+    sessionSettingsEnabled?: boolean;
+    refreshTokenExpiration?: number;
+    refreshTokenExpirationUnit?: ExpirationUnit;
+    sessionTokenExpiration?: number;
+    sessionTokenExpirationUnit?: ExpirationUnit;
+    stepupTokenExpiration?: number;
+    stepupTokenExpirationUnit?: ExpirationUnit;
+    enableInactivity?: boolean;
+    InactivityTime?: number;
+    InactivityTimeUnit?: ExpirationUnit;
+    JITDisabled?: boolean;
+};
+/** Represents password settings of a tenant in a project. It has the password policy details. */
+declare type PasswordSettings = {
+    enabled: boolean;
+    minLength: number;
+    lowercase: boolean;
+    uppercase: boolean;
+    number: boolean;
+    nonAlphaNumeric: boolean;
+    expiration: boolean;
+    expirationWeeks: number;
+    reuse: boolean;
+    reuseAmount: number;
+    lock: boolean;
+    lockAttempts: number;
+};
+/** Represents OIDC settings of an SSO application in a project. */
+declare type SSOApplicationOIDCSettings = {
+    loginPageUrl: string;
+    issuer: string;
+    discoveryUrl: string;
+};
+/** Represents SAML settings of an SSO application in a project. */
+declare type SSOApplicationSAMLSettings = {
+    loginPageUrl: string;
+    idpCert: string;
+    useMetadataInfo: boolean;
+    metadataUrl: string;
+    entityId: string;
+    acsUrl: string;
+    certificate: string;
+    attributeMapping: SamlIdpAttributeMappingInfo[];
+    groupsMapping: SamlIdpGroupsMappingInfo[];
+    idpMetadataUrl: string;
+    idpEntityId: string;
+    idpSsoUrl: string;
+    acsAllowedCallbacks: string[];
+    subjectNameIdType: string;
+    subjectNameIdFormat: string;
+};
+/** Represents an SSO application in a project. */
+declare type SSOApplication = {
+    id: string;
+    name: string;
+    description: string;
+    enabled: boolean;
+    logo: string;
+    appType: string;
+    samlSettings: SSOApplicationSAMLSettings;
+    oidcSettings: SSOApplicationOIDCSettings;
 };
 /** Represents a permission in a project. It has a name and optionally a description.
  * It also has a flag indicating whether it is system default or not.
@@ -89,6 +229,7 @@ declare type Role = {
     description?: string;
     permissionNames: string[];
     createdTime: number;
+    tenantId?: string;
 };
 /** Represents a group in a project. It has an id and display name and a list of group members. */
 declare type Group = {
@@ -168,6 +309,34 @@ declare type User = {
     verifiedPhone?: boolean;
     test?: boolean;
     additionalLoginIds?: string[];
+    password?: string;
+    hashedPassword?: UserPasswordHashed;
+};
+declare type UserPasswordHashed = {
+    bcrypt?: UserPasswordBcrypt;
+    pbkdf2?: UserPasswordPbkdf2;
+    firebase?: UserPasswordFirebase;
+    django?: UserPasswordDjango;
+};
+declare type UserPasswordBcrypt = {
+    hash: string;
+};
+declare type UserPasswordPbkdf2 = {
+    hash: string;
+    salt: string;
+    iterations: number;
+    type: 'sha1' | 'sha256' | 'sha512';
+};
+declare type UserPasswordFirebase = {
+    hash: string;
+    salt: string;
+    saltSeparator: string;
+    signerKey: string;
+    memory: number;
+    rounds: number;
+};
+declare type UserPasswordDjango = {
+    hash: string;
 };
 declare type UserMapping = {
     name: string;
@@ -199,6 +368,66 @@ declare type SSOSettingsResponse = {
     domains: string[];
     domain: string;
 };
+declare type SSOSAMLSettingsResponse = {
+    idpEntityId: string;
+    idpSSOUrl: string;
+    idpCertificate: string;
+    idpMetadataUrl: string;
+    spEntityId: string;
+    spACSUrl: string;
+    spCertificate: string;
+    attributeMapping: AttributeMapping;
+    groupsMapping: RoleMappings;
+    redirectUrl: string;
+};
+declare type SSOSettings = {
+    tenant: Tenant;
+    saml?: SSOSAMLSettingsResponse;
+    oidc?: SSOOIDCSettings;
+};
+declare type OIDCAttributeMapping = {
+    loginId?: string;
+    name?: string;
+    givenName?: string;
+    middleName?: string;
+    familyName?: string;
+    email?: string;
+    verifiedEmail?: string;
+    username?: string;
+    phoneNumber?: string;
+    verifiedPhone?: string;
+    picture?: string;
+};
+declare type Prompt = 'none' | 'login' | 'consent' | 'select_account';
+declare type SSOOIDCSettings = {
+    name: string;
+    clientId: string;
+    clientSecret?: string;
+    redirectUrl?: string;
+    authUrl?: string;
+    tokenUrl?: string;
+    userDataUrl?: string;
+    scope?: string[];
+    JWKsUrl?: string;
+    attributeMapping?: OIDCAttributeMapping;
+    manageProviderTokens?: boolean;
+    callbackDomain?: string;
+    prompt?: Prompt[];
+    grantType?: 'authorization_code' | 'implicit';
+    issuer?: string;
+};
+declare type SSOSAMLSettings = {
+    idpUrl: string;
+    idpCert: string;
+    entityId: string;
+    roleMappings?: RoleMappings;
+    attributeMapping?: AttributeMapping;
+};
+declare type SSOSAMLByMetadataSettings = {
+    idpMetadataUrl: string;
+    roleMappings?: RoleMappings;
+    attributeMapping?: AttributeMapping;
+};
 declare type ProviderTokenResponse = {
     provider: string;
     providerUserId: string;
@@ -324,24 +553,37 @@ declare type AuthzRelationQuery = {
     target: string;
     hasRelation?: boolean;
 };
-declare type NewProjectResponse = {
+/**
+ * AuthzModified has the list of resources and targets that were modified since given time returned from GetModified
+ */
+declare type AuthzModified = {
+    resources: string[];
+    targets: string[];
+    schemaChanged: boolean;
+};
+declare type CloneProjectResponse = {
     projectId: string;
     projectName: string;
-    projectSettingsWeb: Record<string, any>;
-    authMethodsMagicLink: Record<string, any>;
-    authMethodsOTP: Record<string, any>;
-    authMethodsSAML: Record<string, any>;
-    authMethodsOAuth: Record<string, any>;
-    authMethodsWebAuthn: Record<string, any>;
-    authMethodsTOTP: Record<string, any>;
-    messagingProvidersWeb: Record<string, any>;
-    authMethodsEnchantedLink: Record<string, any>;
-    authMethodsPassword: Record<string, any>;
-    authMethodsOIDCIDP: Record<string, any>;
-    authMethodsEmbeddedLink: Record<string, any>;
     tag?: string;
 };
 
+interface UserOptions {
+    email?: string;
+    phone?: string;
+    displayName?: string;
+    roles?: string[];
+    userTenants?: AssociatedTenant[];
+    customAttributes?: Record<string, AttributesTypes>;
+    picture?: string;
+    verifiedEmail?: boolean;
+    verifiedPhone?: boolean;
+    givenName?: string;
+    middleName?: string;
+    familyName?: string;
+    additionalLoginIds?: string[];
+    ssoAppIds?: string[];
+}
+
 /** Common Error Codes */
 declare const descopeErrors: {
     badRequest: string;
@@ -363,18 +605,53 @@ declare const nodeSdk: {
     ({ managementKey, publicKey, ...config }: NodeSdkArgs): {
         management: {
             user: {
-                create: (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[], customAttributes?: Record<string, AttributesTypes>, picture?: string, verifiedEmail?: boolean, verifiedPhone?: boolean, givenName?: string, middleName?: string, familyName?: string, additionalLoginIds?: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
-                createTestUser: (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[], customAttributes?: Record<string, AttributesTypes>, picture?: string, verifiedEmail?: boolean, verifiedPhone?: boolean, givenName?: string, middleName?: string, familyName?: string, additionalLoginIds?: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
-                invite: (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[], customAttributes?: Record<string, AttributesTypes>, picture?: string, verifiedEmail?: boolean, verifiedPhone?: boolean, inviteUrl?: string, sendMail?: boolean, sendSMS?: boolean, givenName?: string, middleName?: string, familyName?: string, additionalLoginIds?: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                create: {
+                    (loginId: string, options?: UserOptions): Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                    (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[], customAttributes?: Record<string, AttributesTypes>, picture?: string, verifiedEmail?: boolean, verifiedPhone?: boolean, givenName?: string, middleName?: string, familyName?: string, additionalLoginIds?: string[]): Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                };
+                createTestUser: {
+                    (loginId: string, options?: UserOptions): Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                    (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[], customAttributes?: Record<string, AttributesTypes>, picture?: string, verifiedEmail?: boolean, verifiedPhone?: boolean, givenName?: string, middleName?: string, familyName?: string, additionalLoginIds?: string[]): Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                };
+                invite: {
+                    (loginId: string, options?: UserOptions & {
+                        inviteUrl?: string;
+                        sendMail?: boolean;
+                        sendSMS?: boolean;
+                    }): Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                    (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[], customAttributes?: Record<string, AttributesTypes>, picture?: string, verifiedEmail?: boolean, verifiedPhone?: boolean, inviteUrl?: string, sendMail?: boolean, sendSMS?: boolean, givenName?: string, middleName?: string, familyName?: string, additionalLoginIds?: string[]): Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                };
                 inviteBatch: (users: User[], inviteUrl?: string, sendMail?: boolean, sendSMS?: boolean) => Promise<SdkResponse<InviteBatchResponse>>;
-                update: (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[], customAttributes?: Record<string, AttributesTypes>, picture?: string, verifiedEmail?: boolean, verifiedPhone?: boolean, givenName?: string, middleName?: string, familyName?: string, additionalLoginIds?: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                update: {
+                    (loginId: string, options?: UserOptions): Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                    (loginId: string, email?: string, phone?: string, displayName?: string, roles?: string[], userTenants?: AssociatedTenant[], customAttributes?: Record<string, AttributesTypes>, picture?: string, verifiedEmail?: boolean, verifiedPhone?: boolean, givenName?: string, middleName?: string, familyName?: string, additionalLoginIds?: string[]): Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                };
                 delete: (loginId: string) => Promise<SdkResponse<never>>;
+                deleteByUserId: (userId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
                 deleteAllTestUsers: () => Promise<SdkResponse<never>>;
                 load: (loginId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
                 loadByUserId: (userId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
                 logoutUser: (loginId: string) => Promise<SdkResponse<never>>;
                 logoutUserByUserId: (userId: string) => Promise<SdkResponse<never>>;
                 searchAll: (tenantIds?: string[], roles?: string[], limit?: number, page?: number, testUsersOnly?: boolean, withTestUser?: boolean, customAttributes?: Record<string, AttributesTypes>, statuses?: UserStatus[], emails?: string[], phones?: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse[]>>;
+                search: (searchReq: {
+                    page?: number;
+                    limit?: number;
+                    sort?: {
+                        field: string;
+                        desc?: boolean;
+                    }[];
+                    text?: string;
+                    emails?: string[];
+                    phones?: string[];
+                    statuses?: UserStatus[];
+                    roles?: string[];
+                    tenantIds?: string[];
+                    customAttributes?: Record<string, AttributesTypes>;
+                    withTestUser?: boolean;
+                    testUsersOnly?: boolean;
+                    ssoAppIds?: string[];
+                }) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse[]>>;
                 getProviderToken: (loginId: string, provider: string) => Promise<SdkResponse<ProviderTokenResponse>>;
                 activate: (loginId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
                 deactivate: (loginId: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
@@ -392,19 +669,28 @@ declare const nodeSdk: {
                 setTenantRoles: (loginId: string, tenantId: string, roles: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
                 addTenantRoles: (loginId: string, tenantId: string, roles: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
                 removeTenantRoles: (loginId: string, tenantId: string, roles: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                addSSOapps: (loginId: string, ssoAppIds: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                setSSOapps: (loginId: string, ssoAppIds: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                removeSSOapps: (loginId: string, ssoAppIds: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
                 generateOTPForTestUser: (deliveryMethod: DeliveryMethodForTestUser, loginId: string, loginOptions?: _descope_core_js_sdk.LoginOptions) => Promise<SdkResponse<GenerateOTPForTestResponse>>;
                 generateMagicLinkForTestUser: (deliveryMethod: DeliveryMethodForTestUser, loginId: string, uri: string, loginOptions?: _descope_core_js_sdk.LoginOptions) => Promise<SdkResponse<GenerateMagicLinkForTestResponse>>;
                 generateEnchantedLinkForTestUser: (loginId: string, uri: string, loginOptions?: _descope_core_js_sdk.LoginOptions) => Promise<SdkResponse<GenerateEnchantedLinkForTestResponse>>;
                 generateEmbeddedLink: (loginId: string, customClaims?: Record<string, any>) => Promise<SdkResponse<GenerateEmbeddedLinkResponse>>;
+                setTemporaryPassword: (loginId: string, password: string) => Promise<SdkResponse<never>>;
+                setActivePassword: (loginId: string, password: string) => Promise<SdkResponse<never>>;
                 setPassword: (loginId: string, password: string) => Promise<SdkResponse<never>>;
                 expirePassword: (loginId: string) => Promise<SdkResponse<never>>;
+                removeAllPasskeys: (loginId: string) => Promise<SdkResponse<never>>;
+                history: (userIds: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserHistoryResponse[]>>;
             };
             project: {
                 updateName: (name: string) => Promise<SdkResponse<never>>;
-                clone: (name: string, tag?: "production") => Promise<SdkResponse<NewProjectResponse>>;
+                clone: (name: string, tag?: "production") => Promise<SdkResponse<CloneProjectResponse>>;
+                export: () => Promise<SdkResponse<Record<string, any>>>;
+                import: (files: Record<string, any>) => Promise<SdkResponse<never>>;
             };
             accessKey: {
-                create: (name: string, expireTime: number, roles?: string[], keyTenants?: AssociatedTenant[]) => Promise<SdkResponse<CreatedAccessKeyResponse>>;
+                create: (name: string, expireTime: number, roles?: string[], keyTenants?: AssociatedTenant[], userId?: string) => Promise<SdkResponse<CreatedAccessKeyResponse>>;
                 load: (id: string) => Promise<SdkResponse<AccessKey>>;
                 searchAll: (tenantIds?: string[]) => Promise<SdkResponse<AccessKey[]>>;
                 update: (id: string, name: string) => Promise<SdkResponse<AccessKey>>;
@@ -420,6 +706,21 @@ declare const nodeSdk: {
                 load: (id: string) => Promise<SdkResponse<Tenant>>;
                 loadAll: () => Promise<SdkResponse<Tenant[]>>;
                 searchAll: (ids?: string[], names?: string[], selfProvisioningDomains?: string[], customAttributes?: Record<string, AttributesTypes>) => Promise<SdkResponse<Tenant[]>>;
+                getSettings: (tenantId: string) => Promise<SdkResponse<TenantSettings>>;
+                configureSettings: (tenantId: string, settings: TenantSettings) => Promise<SdkResponse<never>>;
+            };
+            ssoApplication: {
+                createOidcApplication: (options: OidcApplicationOptions) => Promise<SdkResponse<CreateSSOApplicationResponse>>;
+                createSamlApplication: (options: SamlApplicationOptions) => Promise<SdkResponse<CreateSSOApplicationResponse>>;
+                updateOidcApplication: (options: OidcApplicationOptions & {
+                    id: string;
+                }) => Promise<SdkResponse<never>>;
+                updateSamlApplication: (options: SamlApplicationOptions & {
+                    id: string;
+                }) => Promise<SdkResponse<never>>;
+                delete: (id: string) => Promise<SdkResponse<never>>;
+                load: (id: string) => Promise<SdkResponse<SSOApplication>>;
+                loadAll: () => Promise<SdkResponse<SSOApplication[]>>;
             };
             sso: {
                 getSettings: (tenantId: string) => Promise<SdkResponse<SSOSettingsResponse>>;
@@ -427,9 +728,14 @@ declare const nodeSdk: {
                 configureSettings: (tenantId: string, idpURL: string, idpCert: string, entityId: string, redirectURL: string, domains: string[]) => Promise<SdkResponse<never>>;
                 configureMetadata: (tenantId: string, idpMetadataURL: string, redirectURL: string, domains: string[]) => Promise<SdkResponse<never>>;
                 configureMapping: (tenantId: string, roleMappings?: RoleMappings, attributeMapping?: AttributeMapping) => Promise<SdkResponse<never>>;
+                configureOIDCSettings: (tenantId: string, settings: SSOOIDCSettings, domains?: string[]) => Promise<SdkResponse<never>>;
+                configureSAMLSettings: (tenantId: string, settings: SSOSAMLSettings, redirectUrl?: string, domains?: string[]) => Promise<SdkResponse<never>>;
+                configureSAMLByMetadata: (tenantId: string, settings: SSOSAMLByMetadataSettings, redirectUrl?: string, domains?: string[]) => Promise<SdkResponse<never>>;
+                loadSettings: (tenantId: string) => Promise<SdkResponse<SSOSettings>>;
             };
             jwt: {
                 update: (jwt: string, customClaims?: Record<string, any>) => Promise<SdkResponse<UpdateJWTResponse>>;
+                impersonate: (impersonatorId: string, loginId: string, validateConsent: boolean) => Promise<SdkResponse<UpdateJWTResponse>>;
             };
             permission: {
                 create: (name: string, description?: string) => Promise<SdkResponse<never>>;
@@ -437,10 +743,14 @@ declare const nodeSdk: {
                 delete: (name: string) => Promise<SdkResponse<never>>;
                 loadAll: () => Promise<SdkResponse<Permission[]>>;
             };
+            password: {
+                getSettings: (tenantId: string) => Promise<SdkResponse<PasswordSettings>>;
+                configureSettings: (tenantId: string, settings: PasswordSettings) => Promise<SdkResponse<never>>;
+            };
             role: {
-                create: (name: string, description?: string, permissionNames?: string[]) => Promise<SdkResponse<never>>;
-                update: (name: string, newName: string, description?: string, permissionNames?: string[]) => Promise<SdkResponse<never>>;
-                delete: (name: string) => Promise<SdkResponse<never>>;
+                create: (name: string, description?: string, permissionNames?: string[], tenantId?: string) => Promise<SdkResponse<never>>;
+                update: (name: string, newName: string, description?: string, permissionNames?: string[], tenantId?: string) => Promise<SdkResponse<never>>;
+                delete: (name: string, tenantId?: string) => Promise<SdkResponse<never>>;
                 loadAll: () => Promise<SdkResponse<Role[]>>;
             };
             group: {
@@ -450,6 +760,7 @@ declare const nodeSdk: {
             };
             flow: {
                 list: () => Promise<SdkResponse<FlowsResponse>>;
+                delete: (flowIds: string[]) => Promise<SdkResponse<never>>;
                 export: (flowId: string) => Promise<SdkResponse<FlowResponse>>;
                 import: (flowId: string, flow: Flow, screens?: Screen[]) => Promise<SdkResponse<FlowResponse>>;
             };
@@ -476,6 +787,7 @@ declare const nodeSdk: {
                 resourceRelations: (resource: string) => Promise<SdkResponse<AuthzRelation[]>>;
                 targetsRelations: (targets: string[]) => Promise<SdkResponse<AuthzRelation[]>>;
                 whatCanTargetAccess: (target: string) => Promise<SdkResponse<AuthzRelation[]>>;
+                getModified: (since: Date) => Promise<SdkResponse<AuthzModified>>;
             };
         };
         getKey: (header: JWTHeaderParameters) => Promise<KeyLike | Uint8Array>;
@@ -483,7 +795,7 @@ declare const nodeSdk: {
         validateSession: (sessionToken: string) => Promise<AuthenticationInfo>;
         refreshSession: (refreshToken: string) => Promise<AuthenticationInfo>;
         validateAndRefreshSession: (sessionToken?: string, refreshToken?: string) => Promise<AuthenticationInfo>;
-        exchangeAccessKey: (accessKey: string) => Promise<AuthenticationInfo>;
+        exchangeAccessKey: (accessKey: string, loginOptions?: AccessKeyLoginOptions) => Promise<AuthenticationInfo>;
         validatePermissions: (authInfo: AuthenticationInfo, permissions: string[]) => boolean;
         getMatchedPermissions: (authInfo: AuthenticationInfo, permissions: string[]) => string[];
         validateTenantPermissions: (authInfo: AuthenticationInfo, tenant: string, permissions: string[]) => boolean;
@@ -493,7 +805,7 @@ declare const nodeSdk: {
         validateTenantRoles: (authInfo: AuthenticationInfo, tenant: string, roles: string[]) => boolean;
         getMatchedTenantRoles: (authInfo: AuthenticationInfo, tenant: string, roles: string[]) => string[];
         accessKey: {
-            exchange: (accessKey: string) => Promise<SdkResponse<ExchangeAccessKeyResponse>>;
+            exchange: (accessKey: string, loginOptions?: AccessKeyLoginOptions) => Promise<SdkResponse<ExchangeAccessKeyResponse>>;
         };
         otp: {
             verify: {
@@ -511,13 +823,13 @@ declare const nodeSdk: {
                 }>>;
             };
             signIn: {
-                sms: (loginId: string) => Promise<SdkResponse<{
+                sms: (loginId: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                whatsapp: (loginId: string) => Promise<SdkResponse<{
+                whatsapp: (loginId: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                email: (loginId: string) => Promise<SdkResponse<{
+                email: (loginId: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedEmail: string;
                 }>>;
             };
@@ -529,6 +841,11 @@ declare const nodeSdk: {
                     middleName?: string;
                     familyName?: string;
                     phone?: string;
+                }, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
@@ -539,6 +856,11 @@ declare const nodeSdk: {
                     middleName?: string;
                     familyName?: string;
                     phone?: string;
+                }, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
@@ -549,18 +871,23 @@ declare const nodeSdk: {
                     middleName?: string;
                     familyName?: string;
                     phone?: string;
+                }, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<{
                     maskedEmail: string;
                 }>>;
             };
             signUpOrIn: {
-                sms: (loginId: string) => Promise<SdkResponse<{
+                sms: (loginId: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                whatsapp: (loginId: string) => Promise<SdkResponse<{
+                whatsapp: (loginId: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                email: (loginId: string) => Promise<SdkResponse<{
+                email: (loginId: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedEmail: string;
                 }>>;
             };
@@ -568,6 +895,9 @@ declare const nodeSdk: {
                 email: <T extends boolean>(loginId: string, email: string, token?: string, updateOptions?: {
                     addToLoginIDs?: T;
                     onMergeUseExisting?: T extends true ? boolean : never;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<{
                     maskedEmail: string;
                 }>>;
@@ -575,12 +905,18 @@ declare const nodeSdk: {
                     sms: <T_1 extends boolean>(loginId: string, phone: string, token?: string, updateOptions?: {
                         addToLoginIDs?: T_1;
                         onMergeUseExisting?: T_1 extends true ? boolean : never;
+                        templateOptions?: {
+                            [x: string]: string;
+                        };
                     }) => Promise<SdkResponse<{
                         maskedPhone: string;
                     }>>;
                     whatsapp: <T_1 extends boolean>(loginId: string, phone: string, token?: string, updateOptions?: {
                         addToLoginIDs?: T_1;
                         onMergeUseExisting?: T_1 extends true ? boolean : never;
+                        templateOptions?: {
+                            [x: string]: string;
+                        };
                     }) => Promise<SdkResponse<{
                         maskedPhone: string;
                     }>>;
@@ -593,56 +929,86 @@ declare const nodeSdk: {
                 cookies?: string[];
             }>>;
             signIn: {
-                sms: (loginId: string, uri: string) => Promise<SdkResponse<{
+                sms: (loginId: string, URI: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                whatsapp: (loginId: string, uri: string) => Promise<SdkResponse<{
+                whatsapp: (loginId: string, URI: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                email: (loginId: string, uri: string) => Promise<SdkResponse<{
+                email: (loginId: string, URI: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<{
                     maskedEmail: string;
                 }>>;
             };
             signUp: {
-                sms: (loginId: string, uri: string, user?: {
+                sms: (loginId: string, URI: string, user?: {
                     email?: string;
                     name?: string;
                     givenName?: string;
                     middleName?: string;
                     familyName?: string;
                     phone?: string;
+                }, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                whatsapp: (loginId: string, uri: string, user?: {
+                whatsapp: (loginId: string, URI: string, user?: {
                     email?: string;
                     name?: string;
                     givenName?: string;
                     middleName?: string;
                     familyName?: string;
                     phone?: string;
+                }, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                email: (loginId: string, uri: string, user?: {
+                email: (loginId: string, URI: string, user?: {
                     email?: string;
                     name?: string;
                     givenName?: string;
                     middleName?: string;
                     familyName?: string;
                     phone?: string;
+                }, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<{
                     maskedEmail: string;
                 }>>;
             };
             signUpOrIn: {
-                sms: (loginId: string, uri: string) => Promise<SdkResponse<{
+                sms: (loginId: string, URI?: string, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
+                }) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                whatsapp: (loginId: string, uri: string) => Promise<SdkResponse<{
+                whatsapp: (loginId: string, URI?: string, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
+                }) => Promise<SdkResponse<{
                     maskedPhone: string;
                 }>>;
-                email: (loginId: string, uri: string) => Promise<SdkResponse<{
+                email: (loginId: string, URI?: string, signUpOptions?: {
+                    customClaims?: Record<string, any>;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
+                }) => Promise<SdkResponse<{
                     maskedEmail: string;
                 }>>;
             };
@@ -650,6 +1016,9 @@ declare const nodeSdk: {
                 email: <T_2 extends boolean>(loginId: string, email: string, URI?: string, token?: string, updateOptions?: {
                     addToLoginIDs?: T_2;
                     onMergeUseExisting?: T_2 extends true ? boolean : never;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<{
                     maskedEmail: string;
                 }>>;
@@ -657,12 +1026,18 @@ declare const nodeSdk: {
                     sms: <T_3 extends boolean>(loginId: string, phone: string, URI?: string, token?: string, updateOptions?: {
                         addToLoginIDs?: T_3;
                         onMergeUseExisting?: T_3 extends true ? boolean : never;
+                        templateOptions?: {
+                            [x: string]: string;
+                        };
                     }) => Promise<SdkResponse<{
                         maskedPhone: string;
                     }>>;
                     whatsapp: <T_3 extends boolean>(loginId: string, phone: string, URI?: string, token?: string, updateOptions?: {
                         addToLoginIDs?: T_3;
                         onMergeUseExisting?: T_3 extends true ? boolean : never;
+                        templateOptions?: {
+                            [x: string]: string;
+                        };
                     }) => Promise<SdkResponse<{
                         maskedPhone: string;
                     }>>;
@@ -671,18 +1046,28 @@ declare const nodeSdk: {
         };
         enchantedLink: {
             verify: (token: string) => Promise<SdkResponse<never>>;
-            signIn: (loginId: string, uri: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse & {
+            signIn: (loginId: string, URI?: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse & {
                 refreshJwt?: string;
                 cookies?: string[];
             }>>;
-            signUpOrIn: (loginId: string, uri: string) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
-            signUp: (loginId: string, uri: string, user?: {
+            signUpOrIn: (loginId: string, URI?: string, signUpOptions?: {
+                customClaims?: Record<string, any>;
+                templateOptions?: {
+                    [x: string]: string;
+                };
+            }) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
+            signUp: (loginId: string, URI?: string, user?: {
                 email?: string;
                 name?: string;
                 givenName?: string;
                 middleName?: string;
                 familyName?: string;
                 phone?: string;
+            }, signUpOptions?: {
+                customClaims?: Record<string, any>;
+                templateOptions?: {
+                    [x: string]: string;
+                };
             }) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse & {
                 refreshJwt?: string;
                 cookies?: string[];
@@ -695,6 +1080,9 @@ declare const nodeSdk: {
                 email: <T_4 extends boolean>(loginId: string, email: string, URI?: string, token?: string, updateOptions?: {
                     addToLoginIDs?: T_4;
                     onMergeUseExisting?: T_4 extends true ? boolean : never;
+                    templateOptions?: {
+                        [x: string]: string;
+                    };
                 }) => Promise<SdkResponse<_descope_core_js_sdk.EnchantedLinkResponse>>;
             };
         };
@@ -714,6 +1102,8 @@ declare const nodeSdk: {
                 refreshJwt?: string;
                 cookies?: string[];
             }>>;
+            startNative: (provider: string, loginOptions?: _descope_core_js_sdk.LoginOptions) => Promise<SdkResponse<_descope_core_js_sdk.ResponseData>>;
+            finishNative: (provider: string, stateId: string, user?: string, code?: string, idToken?: string) => Promise<SdkResponse<_descope_core_js_sdk.ResponseData>>;
         };
         saml: {
             start: (tenantIdOrEmail: string, redirectUrl?: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.URLResponse>>;
@@ -786,7 +1176,9 @@ declare const nodeSdk: {
                 phone?: string;
             }) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
             signIn: (loginId: string, password: string) => Promise<SdkResponse<_descope_core_js_sdk.JWTResponse>>;
-            sendReset: (loginId: string, redirectUrl?: string) => Promise<SdkResponse<{
+            sendReset: (loginId: string, redirectUrl?: string, templateOptions?: {
+                [x: string]: string;
+            }) => Promise<SdkResponse<{
                 resetMethod: string;
                 pendingRef?: string;
                 linkId?: string;
@@ -811,7 +1203,7 @@ declare const nodeSdk: {
                     webAuthnSupport?: boolean;
                 };
                 lastAuth?: {
-                    authMethod?: "otp" | "oauth" | "saml" | "totp" | "webauthn" | "magiclink" | "enchantedlink";
+                    authMethod?: "saml" | "otp" | "oauth" | "totp" | "webauthn" | "magiclink" | "enchantedlink";
                     oauthProvider?: string;
                     name?: string;
                     loginId?: string;
@@ -825,6 +1217,7 @@ declare const nodeSdk: {
                 samlIdpStateId?: string;
                 samlIdpUsername?: string;
                 ssoAppId?: string;
+                oidcLoginHint?: string;
                 abTestingKey?: number;
                 startOptionsVersion?: number;
                 client?: Record<string, any>;
@@ -843,6 +1236,7 @@ declare const nodeSdk: {
         logout: (token?: string) => Promise<SdkResponse<never>>;
         logoutAll: (token?: string) => Promise<SdkResponse<never>>;
         me: (token?: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+        history: (token?: string) => Promise<SdkResponse<_descope_core_js_sdk.UserHistoryResponse>>;
         isJwtExpired: (token: string) => boolean;
         getTenants: (token: string) => string[];
         getJwtPermissions: (token: string, tenant?: string) => string[];