@pulumi/auth0 3.37.0-alpha.1769713949 → 3.37.0-alpha.1769831575

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/client.d.ts +1 -1
  2. package/clientGrant.d.ts +18 -5
  3. package/clientGrant.js +3 -3
  4. package/clientGrant.js.map +1 -1
  5. package/customDomain.d.ts +12 -0
  6. package/customDomain.js +2 -0
  7. package/customDomain.js.map +1 -1
  8. package/eventStream.d.ts +19 -0
  9. package/eventStream.js +19 -0
  10. package/eventStream.js.map +1 -1
  11. package/getClientGrants.d.ts +92 -0
  12. package/getClientGrants.js +92 -0
  13. package/getClientGrants.js.map +1 -1
  14. package/getCustomDomain.d.ts +4 -0
  15. package/getCustomDomain.js.map +1 -1
  16. package/organizationDiscoveryDomain.d.ts +12 -0
  17. package/organizationDiscoveryDomain.js +2 -0
  18. package/organizationDiscoveryDomain.js.map +1 -1
  19. package/package.json +2 -2
  20. package/promptScreenRenderer.d.ts +3 -3
  21. package/types/input.d.ts +74 -4
  22. package/types/output.d.ts +178 -30
package/client.d.ts CHANGED
@@ -163,7 +163,7 @@ export declare class Client extends pulumi.CustomResource {
163
163
  /**
164
164
  * Configure OIDC logout for the Client
165
165
  */
166
- readonly oidcLogout: pulumi.Output<outputs.ClientOidcLogout>;
166
+ readonly oidcLogout: pulumi.Output<outputs.ClientOidcLogout | undefined>;
167
167
  /**
168
168
  * Methods for discovering organizations during the pre*login*prompt. Can include `email` (allows users to find their organization by entering their email address) and/or `organizationName` (requires users to enter the organization name directly). These methods can be combined. Setting this property requires that `organizationRequireBehavior` is set to `preLoginPrompt`.
169
169
  */
package/clientGrant.d.ts CHANGED
@@ -57,6 +57,7 @@ import * as pulumi from "@pulumi/pulumi";
57
57
  * "payment",
58
58
  * "shipping",
59
59
  * ],
60
+ * allowAllScopes: false,
60
61
  * });
61
62
  * ```
62
63
  *
@@ -88,6 +89,10 @@ export declare class ClientGrant extends pulumi.CustomResource {
88
89
  * when multiple copies of the Pulumi SDK have been loaded into the same process.
89
90
  */
90
91
  static isInstance(obj: any): obj is ClientGrant;
92
+ /**
93
+ * When set to `true`, all scopes configured on the resource server are allowed for this client grant. `scopes` can not be provided when this is set to `true`. EA Only.
94
+ */
95
+ readonly allowAllScopes: pulumi.Output<boolean | undefined>;
91
96
  /**
92
97
  * If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations.
93
98
  */
@@ -113,9 +118,9 @@ export declare class ClientGrant extends pulumi.CustomResource {
113
118
  */
114
119
  readonly organizationUsage: pulumi.Output<string | undefined>;
115
120
  /**
116
- * Permissions (scopes) included in this grant.
121
+ * Permissions (scopes) included in this grant. Can not be provided when `allowAllScopes` is set to `true`.
117
122
  */
118
- readonly scopes: pulumi.Output<string[]>;
123
+ readonly scopes: pulumi.Output<string[] | undefined>;
119
124
  /**
120
125
  * Defines the type of subject for this grant. Can be one of `client` or `user`. Defaults to `client` when not defined.
121
126
  */
@@ -133,6 +138,10 @@ export declare class ClientGrant extends pulumi.CustomResource {
133
138
  * Input properties used for looking up and filtering ClientGrant resources.
134
139
  */
135
140
  export interface ClientGrantState {
141
+ /**
142
+ * When set to `true`, all scopes configured on the resource server are allowed for this client grant. `scopes` can not be provided when this is set to `true`. EA Only.
143
+ */
144
+ allowAllScopes?: pulumi.Input<boolean>;
136
145
  /**
137
146
  * If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations.
138
147
  */
@@ -158,7 +167,7 @@ export interface ClientGrantState {
158
167
  */
159
168
  organizationUsage?: pulumi.Input<string>;
160
169
  /**
161
- * Permissions (scopes) included in this grant.
170
+ * Permissions (scopes) included in this grant. Can not be provided when `allowAllScopes` is set to `true`.
162
171
  */
163
172
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
164
173
  /**
@@ -170,6 +179,10 @@ export interface ClientGrantState {
170
179
  * The set of arguments for constructing a ClientGrant resource.
171
180
  */
172
181
  export interface ClientGrantArgs {
182
+ /**
183
+ * When set to `true`, all scopes configured on the resource server are allowed for this client grant. `scopes` can not be provided when this is set to `true`. EA Only.
184
+ */
185
+ allowAllScopes?: pulumi.Input<boolean>;
173
186
  /**
174
187
  * If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations.
175
188
  */
@@ -191,9 +204,9 @@ export interface ClientGrantArgs {
191
204
  */
192
205
  organizationUsage?: pulumi.Input<string>;
193
206
  /**
194
- * Permissions (scopes) included in this grant.
207
+ * Permissions (scopes) included in this grant. Can not be provided when `allowAllScopes` is set to `true`.
195
208
  */
196
- scopes: pulumi.Input<pulumi.Input<string>[]>;
209
+ scopes?: pulumi.Input<pulumi.Input<string>[]>;
197
210
  /**
198
211
  * Defines the type of subject for this grant. Can be one of `client` or `user`. Defaults to `client` when not defined.
199
212
  */
package/clientGrant.js CHANGED
@@ -63,6 +63,7 @@ const utilities = require("./utilities");
63
63
  * "payment",
64
64
  * "shipping",
65
65
  * ],
66
+ * allowAllScopes: false,
66
67
  * });
67
68
  * ```
68
69
  *
@@ -106,6 +107,7 @@ class ClientGrant extends pulumi.CustomResource {
106
107
  opts = opts || {};
107
108
  if (opts.id) {
108
109
  const state = argsOrState;
110
+ resourceInputs["allowAllScopes"] = state?.allowAllScopes;
109
111
  resourceInputs["allowAnyOrganization"] = state?.allowAnyOrganization;
110
112
  resourceInputs["audience"] = state?.audience;
111
113
  resourceInputs["authorizationDetailsTypes"] = state?.authorizationDetailsTypes;
@@ -123,9 +125,7 @@ class ClientGrant extends pulumi.CustomResource {
123
125
  if (args?.clientId === undefined && !opts.urn) {
124
126
  throw new Error("Missing required property 'clientId'");
125
127
  }
126
- if (args?.scopes === undefined && !opts.urn) {
127
- throw new Error("Missing required property 'scopes'");
128
- }
128
+ resourceInputs["allowAllScopes"] = args?.allowAllScopes;
129
129
  resourceInputs["allowAnyOrganization"] = args?.allowAnyOrganization;
130
130
  resourceInputs["audience"] = args?.audience;
131
131
  resourceInputs["authorizationDetailsTypes"] = args?.authorizationDetailsTypes;
package/clientGrant.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"clientGrant.js","sourceRoot":"","sources":["../clientGrant.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA2CD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;SACtD;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAxGL,kCAyGC;AA3FG,gBAAgB;AACO,wBAAY,GAAG,qCAAqC,CAAC"}
1
+ {"version":3,"file":"clientGrant.js","sourceRoot":"","sources":["../clientGrant.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA+CD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;SACtD;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AA3GL,kCA4GC;AA9FG,gBAAgB;AACO,wBAAY,GAAG,qCAAqC,CAAC"}
package/customDomain.d.ts CHANGED
@@ -79,6 +79,10 @@ export declare class CustomDomain extends pulumi.CustomResource {
79
79
  * @deprecated Primary field is no longer used and will be removed in a future release.
80
80
  */
81
81
  readonly primary: pulumi.Output<boolean>;
82
+ /**
83
+ * Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided or set to null, the full domain will be used.
84
+ */
85
+ readonly relyingPartyIdentifier: pulumi.Output<string | undefined>;
82
86
  /**
83
87
  * Configuration status for the custom domain. Options include `disabled`, `pending`, `pendingVerification`, `ready` and `failed`.
84
88
  */
@@ -136,6 +140,10 @@ export interface CustomDomainState {
136
140
  * @deprecated Primary field is no longer used and will be removed in a future release.
137
141
  */
138
142
  primary?: pulumi.Input<boolean>;
143
+ /**
144
+ * Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided or set to null, the full domain will be used.
145
+ */
146
+ relyingPartyIdentifier?: pulumi.Input<string>;
139
147
  /**
140
148
  * Configuration status for the custom domain. Options include `disabled`, `pending`, `pendingVerification`, `ready` and `failed`.
141
149
  */
@@ -171,6 +179,10 @@ export interface CustomDomainArgs {
171
179
  domainMetadata?: pulumi.Input<{
172
180
  [key: string]: pulumi.Input<string>;
173
181
  }>;
182
+ /**
183
+ * Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided or set to null, the full domain will be used.
184
+ */
185
+ relyingPartyIdentifier?: pulumi.Input<string>;
174
186
  /**
175
187
  * TLS policy for the custom domain. Available options are: `compatible` or `recommended`. Compatible includes TLS 1.0, 1.1, 1.2, and recommended only includes TLS 1.2. Cannot be set on selfManaged domains.
176
188
  */
package/customDomain.js CHANGED
@@ -73,6 +73,7 @@ class CustomDomain extends pulumi.CustomResource {
73
73
  resourceInputs["domainMetadata"] = state?.domainMetadata;
74
74
  resourceInputs["originDomainName"] = state?.originDomainName;
75
75
  resourceInputs["primary"] = state?.primary;
76
+ resourceInputs["relyingPartyIdentifier"] = state?.relyingPartyIdentifier;
76
77
  resourceInputs["status"] = state?.status;
77
78
  resourceInputs["tlsPolicy"] = state?.tlsPolicy;
78
79
  resourceInputs["type"] = state?.type;
@@ -89,6 +90,7 @@ class CustomDomain extends pulumi.CustomResource {
89
90
  resourceInputs["customClientIpHeader"] = args?.customClientIpHeader;
90
91
  resourceInputs["domain"] = args?.domain;
91
92
  resourceInputs["domainMetadata"] = args?.domainMetadata;
93
+ resourceInputs["relyingPartyIdentifier"] = args?.relyingPartyIdentifier;
92
94
  resourceInputs["tlsPolicy"] = args?.tlsPolicy;
93
95
  resourceInputs["type"] = args?.type;
94
96
  resourceInputs["certificates"] = undefined /*out*/;
package/customDomain.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"customDomain.js","sourceRoot":"","sources":["../customDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAqDD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;SAC1D;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACvD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AAnHL,oCAoHC;AAtGG,gBAAgB;AACO,yBAAY,GAAG,uCAAuC,CAAC"}
1
+ {"version":3,"file":"customDomain.js","sourceRoot":"","sources":["../customDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAyDD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,EAAE,sBAAsB,CAAC;YACzE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;SAC1D;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,EAAE,sBAAsB,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACvD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AAzHL,oCA0HC;AA5GG,gBAAgB;AACO,yBAAY,GAAG,uCAAuC,CAAC"}
package/eventStream.d.ts CHANGED
@@ -39,6 +39,25 @@ import * as outputs from "./types/output";
39
39
  * },
40
40
  * },
41
41
  * });
42
+ * const config = new pulumi.Config();
43
+ * // The webhook token
44
+ * const webhookToken = config.require("webhookToken");
45
+ * const myEventStreamWebhookSecure = new auth0.EventStream("my_event_stream_webhook_secure", {
46
+ * name: "my-webhook-secure",
47
+ * destinationType: "webhook",
48
+ * subscriptions: [
49
+ * "user.created",
50
+ * "user.updated",
51
+ * ],
52
+ * webhookConfiguration: {
53
+ * webhookEndpoint: "https://eof28wtn4v4506o.m.pipedream.net",
54
+ * webhookAuthorization: {
55
+ * method: "bearer",
56
+ * tokenWo: webhookToken,
57
+ * tokenWoVersion: 1,
58
+ * },
59
+ * },
60
+ * });
42
61
  * ```
43
62
  *
44
63
  * ## Import
package/eventStream.js CHANGED
@@ -43,6 +43,25 @@ const utilities = require("./utilities");
43
43
  * },
44
44
  * },
45
45
  * });
46
+ * const config = new pulumi.Config();
47
+ * // The webhook token
48
+ * const webhookToken = config.require("webhookToken");
49
+ * const myEventStreamWebhookSecure = new auth0.EventStream("my_event_stream_webhook_secure", {
50
+ * name: "my-webhook-secure",
51
+ * destinationType: "webhook",
52
+ * subscriptions: [
53
+ * "user.created",
54
+ * "user.updated",
55
+ * ],
56
+ * webhookConfiguration: {
57
+ * webhookEndpoint: "https://eof28wtn4v4506o.m.pipedream.net",
58
+ * webhookAuthorization: {
59
+ * method: "bearer",
60
+ * tokenWo: webhookToken,
61
+ * tokenWoVersion: 1,
62
+ * },
63
+ * },
64
+ * });
46
65
  * ```
47
66
  *
48
67
  * ## Import
package/eventStream.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"eventStream.js","sourceRoot":"","sources":["../eventStream.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA2CD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;SACxE;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,IAAI,EAAE,eAAe,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,IAAI,IAAI,EAAE,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AArGL,kCAsGC;AAxFG,gBAAgB;AACO,wBAAY,GAAG,qCAAqC,CAAC"}
1
+ {"version":3,"file":"eventStream.js","sourceRoot":"","sources":["../eventStream.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA2CD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;SACxE;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,IAAI,EAAE,eAAe,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,IAAI,IAAI,EAAE,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AArGL,kCAsGC;AAxFG,gBAAgB;AACO,wBAAY,GAAG,qCAAqC,CAAC"}
package/getClientGrants.d.ts CHANGED
@@ -2,6 +2,52 @@ import * as pulumi from "@pulumi/pulumi";
2
2
  import * as outputs from "./types/output";
3
3
  /**
4
4
  * Data source to retrieve a client grants based on clientId and/or audience
5
+ *
6
+ * ## Example Usage
7
+ *
8
+ * ```typescript
9
+ * import * as pulumi from "@pulumi/pulumi";
10
+ * import * as auth0 from "@pulumi/auth0";
11
+ *
12
+ * const myClient = new auth0.Client("my_client", {name: "Example Application (Managed by Terraform)"});
13
+ * const myResourceServer = new auth0.ResourceServer("my_resource_server", {
14
+ * name: "Example Resource Server (Managed by Terraform)",
15
+ * identifier: "https://api.example.com/client-grant",
16
+ * authorizationDetails: [{
17
+ * type: "payment",
18
+ * }],
19
+ * subjectTypeAuthorization: {
20
+ * user: {
21
+ * policy: "allow_all",
22
+ * },
23
+ * },
24
+ * });
25
+ * const myScopes = new auth0.ResourceServerScopes("my_scopes", {
26
+ * resourceServerIdentifier: myResourceServer.identifier,
27
+ * scopes: [{
28
+ * name: "create:foo",
29
+ * }],
30
+ * }, {
31
+ * dependsOn: [myResourceServer],
32
+ * });
33
+ * const myClientGrant = new auth0.ClientGrant("my_client_grant", {
34
+ * clientId: myClient.id,
35
+ * audience: myResourceServer.identifier,
36
+ * authorizationDetailsTypes: ["payment"],
37
+ * subjectType: "user",
38
+ * allowAllScopes: true,
39
+ * });
40
+ * const filterByClientId = auth0.getClientGrantsOutput({
41
+ * clientId: myClient.id,
42
+ * });
43
+ * const filterByAudience = auth0.getClientGrantsOutput({
44
+ * audience: myResourceServer.identifier,
45
+ * });
46
+ * const filterByClientIdAndAudience = auth0.getClientGrantsOutput({
47
+ * clientId: myClient.id,
48
+ * audience: myResourceServer.identifier,
49
+ * });
50
+ * ```
5
51
  */
6
52
  export declare function getClientGrants(args?: GetClientGrantsArgs, opts?: pulumi.InvokeOptions): Promise<GetClientGrantsResult>;
7
53
  /**
@@ -40,6 +86,52 @@ export interface GetClientGrantsResult {
40
86
  }
41
87
  /**
42
88
  * Data source to retrieve a client grants based on clientId and/or audience
89
+ *
90
+ * ## Example Usage
91
+ *
92
+ * ```typescript
93
+ * import * as pulumi from "@pulumi/pulumi";
94
+ * import * as auth0 from "@pulumi/auth0";
95
+ *
96
+ * const myClient = new auth0.Client("my_client", {name: "Example Application (Managed by Terraform)"});
97
+ * const myResourceServer = new auth0.ResourceServer("my_resource_server", {
98
+ * name: "Example Resource Server (Managed by Terraform)",
99
+ * identifier: "https://api.example.com/client-grant",
100
+ * authorizationDetails: [{
101
+ * type: "payment",
102
+ * }],
103
+ * subjectTypeAuthorization: {
104
+ * user: {
105
+ * policy: "allow_all",
106
+ * },
107
+ * },
108
+ * });
109
+ * const myScopes = new auth0.ResourceServerScopes("my_scopes", {
110
+ * resourceServerIdentifier: myResourceServer.identifier,
111
+ * scopes: [{
112
+ * name: "create:foo",
113
+ * }],
114
+ * }, {
115
+ * dependsOn: [myResourceServer],
116
+ * });
117
+ * const myClientGrant = new auth0.ClientGrant("my_client_grant", {
118
+ * clientId: myClient.id,
119
+ * audience: myResourceServer.identifier,
120
+ * authorizationDetailsTypes: ["payment"],
121
+ * subjectType: "user",
122
+ * allowAllScopes: true,
123
+ * });
124
+ * const filterByClientId = auth0.getClientGrantsOutput({
125
+ * clientId: myClient.id,
126
+ * });
127
+ * const filterByAudience = auth0.getClientGrantsOutput({
128
+ * audience: myResourceServer.identifier,
129
+ * });
130
+ * const filterByClientIdAndAudience = auth0.getClientGrantsOutput({
131
+ * clientId: myClient.id,
132
+ * audience: myResourceServer.identifier,
133
+ * });
134
+ * ```
43
135
  */
44
136
  export declare function getClientGrantsOutput(args?: GetClientGrantsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetClientGrantsResult>;
45
137
  /**
package/getClientGrants.js CHANGED
@@ -7,6 +7,52 @@ const pulumi = require("@pulumi/pulumi");
7
7
  const utilities = require("./utilities");
8
8
  /**
9
9
  * Data source to retrieve a client grants based on clientId and/or audience
10
+ *
11
+ * ## Example Usage
12
+ *
13
+ * ```typescript
14
+ * import * as pulumi from "@pulumi/pulumi";
15
+ * import * as auth0 from "@pulumi/auth0";
16
+ *
17
+ * const myClient = new auth0.Client("my_client", {name: "Example Application (Managed by Terraform)"});
18
+ * const myResourceServer = new auth0.ResourceServer("my_resource_server", {
19
+ * name: "Example Resource Server (Managed by Terraform)",
20
+ * identifier: "https://api.example.com/client-grant",
21
+ * authorizationDetails: [{
22
+ * type: "payment",
23
+ * }],
24
+ * subjectTypeAuthorization: {
25
+ * user: {
26
+ * policy: "allow_all",
27
+ * },
28
+ * },
29
+ * });
30
+ * const myScopes = new auth0.ResourceServerScopes("my_scopes", {
31
+ * resourceServerIdentifier: myResourceServer.identifier,
32
+ * scopes: [{
33
+ * name: "create:foo",
34
+ * }],
35
+ * }, {
36
+ * dependsOn: [myResourceServer],
37
+ * });
38
+ * const myClientGrant = new auth0.ClientGrant("my_client_grant", {
39
+ * clientId: myClient.id,
40
+ * audience: myResourceServer.identifier,
41
+ * authorizationDetailsTypes: ["payment"],
42
+ * subjectType: "user",
43
+ * allowAllScopes: true,
44
+ * });
45
+ * const filterByClientId = auth0.getClientGrantsOutput({
46
+ * clientId: myClient.id,
47
+ * });
48
+ * const filterByAudience = auth0.getClientGrantsOutput({
49
+ * audience: myResourceServer.identifier,
50
+ * });
51
+ * const filterByClientIdAndAudience = auth0.getClientGrantsOutput({
52
+ * clientId: myClient.id,
53
+ * audience: myResourceServer.identifier,
54
+ * });
55
+ * ```
10
56
  */
11
57
  function getClientGrants(args, opts) {
12
58
  args = args || {};
@@ -19,6 +65,52 @@ function getClientGrants(args, opts) {
19
65
  exports.getClientGrants = getClientGrants;
20
66
  /**
21
67
  * Data source to retrieve a client grants based on clientId and/or audience
68
+ *
69
+ * ## Example Usage
70
+ *
71
+ * ```typescript
72
+ * import * as pulumi from "@pulumi/pulumi";
73
+ * import * as auth0 from "@pulumi/auth0";
74
+ *
75
+ * const myClient = new auth0.Client("my_client", {name: "Example Application (Managed by Terraform)"});
76
+ * const myResourceServer = new auth0.ResourceServer("my_resource_server", {
77
+ * name: "Example Resource Server (Managed by Terraform)",
78
+ * identifier: "https://api.example.com/client-grant",
79
+ * authorizationDetails: [{
80
+ * type: "payment",
81
+ * }],
82
+ * subjectTypeAuthorization: {
83
+ * user: {
84
+ * policy: "allow_all",
85
+ * },
86
+ * },
87
+ * });
88
+ * const myScopes = new auth0.ResourceServerScopes("my_scopes", {
89
+ * resourceServerIdentifier: myResourceServer.identifier,
90
+ * scopes: [{
91
+ * name: "create:foo",
92
+ * }],
93
+ * }, {
94
+ * dependsOn: [myResourceServer],
95
+ * });
96
+ * const myClientGrant = new auth0.ClientGrant("my_client_grant", {
97
+ * clientId: myClient.id,
98
+ * audience: myResourceServer.identifier,
99
+ * authorizationDetailsTypes: ["payment"],
100
+ * subjectType: "user",
101
+ * allowAllScopes: true,
102
+ * });
103
+ * const filterByClientId = auth0.getClientGrantsOutput({
104
+ * clientId: myClient.id,
105
+ * });
106
+ * const filterByAudience = auth0.getClientGrantsOutput({
107
+ * audience: myResourceServer.identifier,
108
+ * });
109
+ * const filterByClientIdAndAudience = auth0.getClientGrantsOutput({
110
+ * clientId: myClient.id,
111
+ * audience: myResourceServer.identifier,
112
+ * });
113
+ * ```
22
114
  */
23
115
  function getClientGrantsOutput(args, opts) {
24
116
  args = args || {};
package/getClientGrants.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"getClientGrants.js","sourceRoot":"","sources":["../getClientGrants.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;GAEG;AACH,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,6CAA6C,EAAE;QACxE,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,0CAOC;AAqCD;;GAEG;AACH,SAAgB,qBAAqB,CAAC,IAAgC,EAAE,IAAiC;IACrG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,6CAA6C,EAAE;QAC9E,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,sDAOC"}
1
+ {"version":3,"file":"getClientGrants.js","sourceRoot":"","sources":["../getClientGrants.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,6CAA6C,EAAE;QACxE,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,0CAOC;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,SAAgB,qBAAqB,CAAC,IAAgC,EAAE,IAAiC;IACrG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,6CAA6C,EAAE;QAC9E,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,sDAOC"}
package/getCustomDomain.d.ts CHANGED
@@ -71,6 +71,10 @@ export interface GetCustomDomainResult {
71
71
  * Indicates whether this is a primary domain.
72
72
  */
73
73
  readonly primary: boolean;
74
+ /**
75
+ * Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided or set to null, the full domain will be used.
76
+ */
77
+ readonly relyingPartyIdentifier: string;
74
78
  /**
75
79
  * Configuration status for the custom domain. Options include `disabled`, `pending`, `pendingVerification`, `ready` and `failed`.
76
80
  */
package/getCustomDomain.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"getCustomDomain.js","sourceRoot":"","sources":["../getCustomDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,6CAA6C,EAAE;QACxE,gBAAgB,EAAE,IAAI,CAAC,cAAc;KACxC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,0CAMC;AAiED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,qBAAqB,CAAC,IAAgC,EAAE,IAAiC;IACrG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,6CAA6C,EAAE;QAC9E,gBAAgB,EAAE,IAAI,CAAC,cAAc;KACxC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,sDAMC"}
1
+ {"version":3,"file":"getCustomDomain.js","sourceRoot":"","sources":["../getCustomDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,6CAA6C,EAAE;QACxE,gBAAgB,EAAE,IAAI,CAAC,cAAc;KACxC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,0CAMC;AAqED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,qBAAqB,CAAC,IAAgC,EAAE,IAAiC;IACrG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,6CAA6C,EAAE;QAC9E,gBAAgB,EAAE,IAAI,CAAC,cAAc;KACxC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,sDAMC"}
package/organizationDiscoveryDomain.d.ts CHANGED
@@ -30,6 +30,10 @@ export declare class OrganizationDiscoveryDomain extends pulumi.CustomResource {
30
30
  * Verification status. Must be either 'pending' or 'verified'.
31
31
  */
32
32
  readonly status: pulumi.Output<string>;
33
+ /**
34
+ * Indicates whether this domain should be used for organization discovery during login.
35
+ */
36
+ readonly useForOrganizationDiscovery: pulumi.Output<boolean>;
33
37
  /**
34
38
  * The full domain where the TXT record should be added.
35
39
  */
@@ -63,6 +67,10 @@ export interface OrganizationDiscoveryDomainState {
63
67
  * Verification status. Must be either 'pending' or 'verified'.
64
68
  */
65
69
  status?: pulumi.Input<string>;
70
+ /**
71
+ * Indicates whether this domain should be used for organization discovery during login.
72
+ */
73
+ useForOrganizationDiscovery?: pulumi.Input<boolean>;
66
74
  /**
67
75
  * The full domain where the TXT record should be added.
68
76
  */
@@ -88,4 +96,8 @@ export interface OrganizationDiscoveryDomainArgs {
88
96
  * Verification status. Must be either 'pending' or 'verified'.
89
97
  */
90
98
  status: pulumi.Input<string>;
99
+ /**
100
+ * Indicates whether this domain should be used for organization discovery during login.
101
+ */
102
+ useForOrganizationDiscovery?: pulumi.Input<boolean>;
91
103
  }
package/organizationDiscoveryDomain.js CHANGED
@@ -39,6 +39,7 @@ class OrganizationDiscoveryDomain extends pulumi.CustomResource {
39
39
  resourceInputs["domain"] = state?.domain;
40
40
  resourceInputs["organizationId"] = state?.organizationId;
41
41
  resourceInputs["status"] = state?.status;
42
+ resourceInputs["useForOrganizationDiscovery"] = state?.useForOrganizationDiscovery;
42
43
  resourceInputs["verificationHost"] = state?.verificationHost;
43
44
  resourceInputs["verificationTxt"] = state?.verificationTxt;
44
45
  }
@@ -56,6 +57,7 @@ class OrganizationDiscoveryDomain extends pulumi.CustomResource {
56
57
  resourceInputs["domain"] = args?.domain;
57
58
  resourceInputs["organizationId"] = args?.organizationId;
58
59
  resourceInputs["status"] = args?.status;
60
+ resourceInputs["useForOrganizationDiscovery"] = args?.useForOrganizationDiscovery;
59
61
  resourceInputs["verificationHost"] = undefined /*out*/;
60
62
  resourceInputs["verificationTxt"] = undefined /*out*/;
61
63
  }
package/organizationDiscoveryDomain.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"organizationDiscoveryDomain.js","sourceRoot":"","sources":["../organizationDiscoveryDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IAClE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwC,EAAE,IAAmC;QACtI,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAgF,EAAE,IAAmC;QAC3I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2D,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;SAC9D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0D,CAAC;YACxE,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;;AAtFL,kEAuFC;AAzEG,gBAAgB;AACO,wCAAY,GAAG,qEAAqE,CAAC"}
1
+ {"version":3,"file":"organizationDiscoveryDomain.js","sourceRoot":"","sources":["../organizationDiscoveryDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;GAEG;AACH,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IAClE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwC,EAAE,IAAmC;QACtI,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;IAmCD,YAAY,IAAY,EAAE,WAAgF,EAAE,IAAmC;QAC3I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2D,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,EAAE,2BAA2B,CAAC;YACnF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;SAC9D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0D,CAAC;YACxE,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,EAAE,2BAA2B,CAAC;YAClF,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;;AA5FL,kEA6FC;AA/EG,gBAAgB;AACO,wCAAY,GAAG,qEAAqE,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@pulumi/auth0",
3
- "version": "3.37.0-alpha.1769713949",
3
+ "version": "3.37.0-alpha.1769831575",
4
4
  "description": "A Pulumi package for creating and managing auth0 cloud resources.",
5
5
  "keywords": [
6
6
  "pulumi",
@@ -23,6 +23,6 @@
23
23
  "pulumi": {
24
24
  "resource": true,
25
25
  "name": "auth0",
26
- "version": "3.37.0-alpha.1769713949"
26
+ "version": "3.37.0-alpha.1769831575"
27
27
  }
28
28
  }
package/promptScreenRenderer.d.ts CHANGED
@@ -103,7 +103,7 @@ export declare class PromptScreenRenderer extends pulumi.CustomResource {
103
103
  */
104
104
  readonly renderingMode: pulumi.Output<string | undefined>;
105
105
  /**
106
- * The screen that you are configuring settings for. Options are: `signup-id`, `signup-password`, `login-id`, `login-password`, `login-passwordless-sms-otp`, `login-passwordless-email-code`, `phone-identifier-enrollment`, `phone-identifier-challenge`, `email-identifier-challenge`, `passkey-enrollment`, `passkey-enrollment-local`, `interstitial-captcha`, `login`, `signup`, `reset-password-request`, `reset-password-email`, `reset-password`, `reset-password-success`, `reset-password-error`, `reset-password-mfa-email-challenge`, `reset-password-mfa-otp-challenge`, `reset-password-mfa-push-challenge-push`, `reset-password-mfa-sms-challenge`, `mfa-detect-browser-capabilities`, `mfa-enroll-result`, `mfa-begin-enroll-options`, `mfa-login-options`, `mfa-country-codes`, `mfa-sms-challenge`, `mfa-sms-enrollment`, `mfa-sms-list`, `mfa-email-challenge`, `mfa-email-list`, `mfa-push-challenge-push`, `mfa-push-enrollment-qr`, `mfa-push-list`, `mfa-push-welcome`, `accept-invitation`, `organization-selection`, `organization-picker`, `mfa-otp-challenge`, `mfa-otp-enrollment-code`, `mfa-otp-enrollment-qr`, `device-code-activation`, `device-code-activation-allowed`, `device-code-activation-denied`, `device-code-confirmation`, `mfa-phone-challenge`, `mfa-phone-enrollment`, `mfa-voice-challenge`, `mfa-voice-enrollment`, `reset-password-mfa-phone-challenge`, `reset-password-mfa-voice-challenge`, `mfa-recovery-code-challenge`, `mfa-recovery-code-enrollment`, `reset-password-mfa-recovery-code-challenge`, `redeem-ticket`, `mfa-recovery-code-challenge-new-code`, `email-verification-result`, `login-email-verification`, `logout`, `logout-aborted`, `logout-complete`, `mfa-webauthn-change-key-nickname`, `mfa-webauthn-enrollment-success`, `mfa-webauthn-error`, `mfa-webauthn-platform-challenge`, `mfa-webauthn-platform-enrollment`, `mfa-webauthn-roaming-challenge`, `mfa-webauthn-roaming-enrollment`, `reset-password-mfa-webauthn-platform-challenge`, `reset-password-mfa-webauthn-roaming-challenge`, `consent`, `customized-consent`, `email-otp-challenge`, `mfa-webauthn-not-available-error`.
106
+ * The screen that you are configuring settings for. Options are: `signup-id`, `signup-password`, `login-id`, `login-password`, `login-passwordless-sms-otp`, `login-passwordless-email-code`, `phone-identifier-enrollment`, `phone-identifier-challenge`, `email-identifier-challenge`, `passkey-enrollment`, `passkey-enrollment-local`, `interstitial-captcha`, `login`, `signup`, `reset-password-request`, `reset-password-email`, `reset-password`, `reset-password-success`, `reset-password-error`, `reset-password-mfa-email-challenge`, `reset-password-mfa-otp-challenge`, `reset-password-mfa-push-challenge-push`, `reset-password-mfa-sms-challenge`, `mfa-detect-browser-capabilities`, `mfa-enroll-result`, `mfa-begin-enroll-options`, `mfa-login-options`, `mfa-country-codes`, `mfa-sms-challenge`, `mfa-sms-enrollment`, `mfa-sms-list`, `mfa-email-challenge`, `mfa-email-list`, `mfa-push-challenge-push`, `mfa-push-enrollment-qr`, `mfa-push-list`, `mfa-push-welcome`, `accept-invitation`, `organization-selection`, `organization-picker`, `pre-login-organization-picker`, `mfa-otp-challenge`, `mfa-otp-enrollment-code`, `mfa-otp-enrollment-qr`, `device-code-activation`, `device-code-activation-allowed`, `device-code-activation-denied`, `device-code-confirmation`, `mfa-phone-challenge`, `mfa-phone-enrollment`, `mfa-voice-challenge`, `mfa-voice-enrollment`, `reset-password-mfa-phone-challenge`, `reset-password-mfa-voice-challenge`, `mfa-recovery-code-challenge`, `mfa-recovery-code-enrollment`, `reset-password-mfa-recovery-code-challenge`, `redeem-ticket`, `mfa-recovery-code-challenge-new-code`, `email-verification-result`, `login-email-verification`, `logout`, `logout-aborted`, `logout-complete`, `mfa-webauthn-change-key-nickname`, `mfa-webauthn-enrollment-success`, `mfa-webauthn-error`, `mfa-webauthn-platform-challenge`, `mfa-webauthn-platform-enrollment`, `mfa-webauthn-roaming-challenge`, `mfa-webauthn-roaming-enrollment`, `reset-password-mfa-webauthn-platform-challenge`, `reset-password-mfa-webauthn-roaming-challenge`, `consent`, `customized-consent`, `email-otp-challenge`, `mfa-webauthn-not-available-error`.
107
107
  */
108
108
  readonly screenName: pulumi.Output<string>;
109
109
  /**
@@ -152,7 +152,7 @@ export interface PromptScreenRendererState {
152
152
  */
153
153
  renderingMode?: pulumi.Input<string>;
154
154
  /**
155
- * The screen that you are configuring settings for. Options are: `signup-id`, `signup-password`, `login-id`, `login-password`, `login-passwordless-sms-otp`, `login-passwordless-email-code`, `phone-identifier-enrollment`, `phone-identifier-challenge`, `email-identifier-challenge`, `passkey-enrollment`, `passkey-enrollment-local`, `interstitial-captcha`, `login`, `signup`, `reset-password-request`, `reset-password-email`, `reset-password`, `reset-password-success`, `reset-password-error`, `reset-password-mfa-email-challenge`, `reset-password-mfa-otp-challenge`, `reset-password-mfa-push-challenge-push`, `reset-password-mfa-sms-challenge`, `mfa-detect-browser-capabilities`, `mfa-enroll-result`, `mfa-begin-enroll-options`, `mfa-login-options`, `mfa-country-codes`, `mfa-sms-challenge`, `mfa-sms-enrollment`, `mfa-sms-list`, `mfa-email-challenge`, `mfa-email-list`, `mfa-push-challenge-push`, `mfa-push-enrollment-qr`, `mfa-push-list`, `mfa-push-welcome`, `accept-invitation`, `organization-selection`, `organization-picker`, `mfa-otp-challenge`, `mfa-otp-enrollment-code`, `mfa-otp-enrollment-qr`, `device-code-activation`, `device-code-activation-allowed`, `device-code-activation-denied`, `device-code-confirmation`, `mfa-phone-challenge`, `mfa-phone-enrollment`, `mfa-voice-challenge`, `mfa-voice-enrollment`, `reset-password-mfa-phone-challenge`, `reset-password-mfa-voice-challenge`, `mfa-recovery-code-challenge`, `mfa-recovery-code-enrollment`, `reset-password-mfa-recovery-code-challenge`, `redeem-ticket`, `mfa-recovery-code-challenge-new-code`, `email-verification-result`, `login-email-verification`, `logout`, `logout-aborted`, `logout-complete`, `mfa-webauthn-change-key-nickname`, `mfa-webauthn-enrollment-success`, `mfa-webauthn-error`, `mfa-webauthn-platform-challenge`, `mfa-webauthn-platform-enrollment`, `mfa-webauthn-roaming-challenge`, `mfa-webauthn-roaming-enrollment`, `reset-password-mfa-webauthn-platform-challenge`, `reset-password-mfa-webauthn-roaming-challenge`, `consent`, `customized-consent`, `email-otp-challenge`, `mfa-webauthn-not-available-error`.
155
+ * The screen that you are configuring settings for. Options are: `signup-id`, `signup-password`, `login-id`, `login-password`, `login-passwordless-sms-otp`, `login-passwordless-email-code`, `phone-identifier-enrollment`, `phone-identifier-challenge`, `email-identifier-challenge`, `passkey-enrollment`, `passkey-enrollment-local`, `interstitial-captcha`, `login`, `signup`, `reset-password-request`, `reset-password-email`, `reset-password`, `reset-password-success`, `reset-password-error`, `reset-password-mfa-email-challenge`, `reset-password-mfa-otp-challenge`, `reset-password-mfa-push-challenge-push`, `reset-password-mfa-sms-challenge`, `mfa-detect-browser-capabilities`, `mfa-enroll-result`, `mfa-begin-enroll-options`, `mfa-login-options`, `mfa-country-codes`, `mfa-sms-challenge`, `mfa-sms-enrollment`, `mfa-sms-list`, `mfa-email-challenge`, `mfa-email-list`, `mfa-push-challenge-push`, `mfa-push-enrollment-qr`, `mfa-push-list`, `mfa-push-welcome`, `accept-invitation`, `organization-selection`, `organization-picker`, `pre-login-organization-picker`, `mfa-otp-challenge`, `mfa-otp-enrollment-code`, `mfa-otp-enrollment-qr`, `device-code-activation`, `device-code-activation-allowed`, `device-code-activation-denied`, `device-code-confirmation`, `mfa-phone-challenge`, `mfa-phone-enrollment`, `mfa-voice-challenge`, `mfa-voice-enrollment`, `reset-password-mfa-phone-challenge`, `reset-password-mfa-voice-challenge`, `mfa-recovery-code-challenge`, `mfa-recovery-code-enrollment`, `reset-password-mfa-recovery-code-challenge`, `redeem-ticket`, `mfa-recovery-code-challenge-new-code`, `email-verification-result`, `login-email-verification`, `logout`, `logout-aborted`, `logout-complete`, `mfa-webauthn-change-key-nickname`, `mfa-webauthn-enrollment-success`, `mfa-webauthn-error`, `mfa-webauthn-platform-challenge`, `mfa-webauthn-platform-enrollment`, `mfa-webauthn-roaming-challenge`, `mfa-webauthn-roaming-enrollment`, `reset-password-mfa-webauthn-platform-challenge`, `reset-password-mfa-webauthn-roaming-challenge`, `consent`, `customized-consent`, `email-otp-challenge`, `mfa-webauthn-not-available-error`.
156
156
  */
157
157
  screenName?: pulumi.Input<string>;
158
158
  /**
@@ -193,7 +193,7 @@ export interface PromptScreenRendererArgs {
193
193
  */
194
194
  renderingMode?: pulumi.Input<string>;
195
195
  /**
196
- * The screen that you are configuring settings for. Options are: `signup-id`, `signup-password`, `login-id`, `login-password`, `login-passwordless-sms-otp`, `login-passwordless-email-code`, `phone-identifier-enrollment`, `phone-identifier-challenge`, `email-identifier-challenge`, `passkey-enrollment`, `passkey-enrollment-local`, `interstitial-captcha`, `login`, `signup`, `reset-password-request`, `reset-password-email`, `reset-password`, `reset-password-success`, `reset-password-error`, `reset-password-mfa-email-challenge`, `reset-password-mfa-otp-challenge`, `reset-password-mfa-push-challenge-push`, `reset-password-mfa-sms-challenge`, `mfa-detect-browser-capabilities`, `mfa-enroll-result`, `mfa-begin-enroll-options`, `mfa-login-options`, `mfa-country-codes`, `mfa-sms-challenge`, `mfa-sms-enrollment`, `mfa-sms-list`, `mfa-email-challenge`, `mfa-email-list`, `mfa-push-challenge-push`, `mfa-push-enrollment-qr`, `mfa-push-list`, `mfa-push-welcome`, `accept-invitation`, `organization-selection`, `organization-picker`, `mfa-otp-challenge`, `mfa-otp-enrollment-code`, `mfa-otp-enrollment-qr`, `device-code-activation`, `device-code-activation-allowed`, `device-code-activation-denied`, `device-code-confirmation`, `mfa-phone-challenge`, `mfa-phone-enrollment`, `mfa-voice-challenge`, `mfa-voice-enrollment`, `reset-password-mfa-phone-challenge`, `reset-password-mfa-voice-challenge`, `mfa-recovery-code-challenge`, `mfa-recovery-code-enrollment`, `reset-password-mfa-recovery-code-challenge`, `redeem-ticket`, `mfa-recovery-code-challenge-new-code`, `email-verification-result`, `login-email-verification`, `logout`, `logout-aborted`, `logout-complete`, `mfa-webauthn-change-key-nickname`, `mfa-webauthn-enrollment-success`, `mfa-webauthn-error`, `mfa-webauthn-platform-challenge`, `mfa-webauthn-platform-enrollment`, `mfa-webauthn-roaming-challenge`, `mfa-webauthn-roaming-enrollment`, `reset-password-mfa-webauthn-platform-challenge`, `reset-password-mfa-webauthn-roaming-challenge`, `consent`, `customized-consent`, `email-otp-challenge`, `mfa-webauthn-not-available-error`.
196
+ * The screen that you are configuring settings for. Options are: `signup-id`, `signup-password`, `login-id`, `login-password`, `login-passwordless-sms-otp`, `login-passwordless-email-code`, `phone-identifier-enrollment`, `phone-identifier-challenge`, `email-identifier-challenge`, `passkey-enrollment`, `passkey-enrollment-local`, `interstitial-captcha`, `login`, `signup`, `reset-password-request`, `reset-password-email`, `reset-password`, `reset-password-success`, `reset-password-error`, `reset-password-mfa-email-challenge`, `reset-password-mfa-otp-challenge`, `reset-password-mfa-push-challenge-push`, `reset-password-mfa-sms-challenge`, `mfa-detect-browser-capabilities`, `mfa-enroll-result`, `mfa-begin-enroll-options`, `mfa-login-options`, `mfa-country-codes`, `mfa-sms-challenge`, `mfa-sms-enrollment`, `mfa-sms-list`, `mfa-email-challenge`, `mfa-email-list`, `mfa-push-challenge-push`, `mfa-push-enrollment-qr`, `mfa-push-list`, `mfa-push-welcome`, `accept-invitation`, `organization-selection`, `organization-picker`, `pre-login-organization-picker`, `mfa-otp-challenge`, `mfa-otp-enrollment-code`, `mfa-otp-enrollment-qr`, `device-code-activation`, `device-code-activation-allowed`, `device-code-activation-denied`, `device-code-confirmation`, `mfa-phone-challenge`, `mfa-phone-enrollment`, `mfa-voice-challenge`, `mfa-voice-enrollment`, `reset-password-mfa-phone-challenge`, `reset-password-mfa-voice-challenge`, `mfa-recovery-code-challenge`, `mfa-recovery-code-enrollment`, `reset-password-mfa-recovery-code-challenge`, `redeem-ticket`, `mfa-recovery-code-challenge-new-code`, `email-verification-result`, `login-email-verification`, `logout`, `logout-aborted`, `logout-complete`, `mfa-webauthn-change-key-nickname`, `mfa-webauthn-enrollment-success`, `mfa-webauthn-error`, `mfa-webauthn-platform-challenge`, `mfa-webauthn-platform-enrollment`, `mfa-webauthn-roaming-challenge`, `mfa-webauthn-roaming-enrollment`, `reset-password-mfa-webauthn-platform-challenge`, `reset-password-mfa-webauthn-roaming-challenge`, `consent`, `customized-consent`, `email-otp-challenge`, `mfa-webauthn-not-available-error`.
197
197
  */
198
198
  screenName: pulumi.Input<string>;
199
199
  /**
package/types/input.d.ts CHANGED
@@ -1379,6 +1379,10 @@ export interface ClientOidcLogout {
1379
1379
  * Configure OIDC logout initiators for the Client
1380
1380
  */
1381
1381
  backchannelLogoutInitiators?: pulumi.Input<inputs.ClientOidcLogoutBackchannelLogoutInitiators>;
1382
+ /**
1383
+ * Controls whether session metadata is included in the logout token. Default value is null.
1384
+ */
1385
+ backchannelLogoutSessionMetadata?: pulumi.Input<inputs.ClientOidcLogoutBackchannelLogoutSessionMetadata>;
1382
1386
  /**
1383
1387
  * Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
1384
1388
  */
@@ -1394,6 +1398,12 @@ export interface ClientOidcLogoutBackchannelLogoutInitiators {
1394
1398
  */
1395
1399
  selectedInitiators?: pulumi.Input<pulumi.Input<string>[]>;
1396
1400
  }
1401
+ export interface ClientOidcLogoutBackchannelLogoutSessionMetadata {
1402
+ /**
1403
+ * The `include` property determines whether session metadata is included in the logout token.
1404
+ */
1405
+ include: pulumi.Input<boolean>;
1406
+ }
1397
1407
  export interface ClientRefreshToken {
1398
1408
  /**
1399
1409
  * Options include `expiring`, `non-expiring`. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is `rotating`, this must be set to `expiring`.
@@ -1584,6 +1594,10 @@ export interface ConnectionOptions {
1584
1594
  * Configure extra headers to the Token endpoint of an OAuth 2.0 provider
1585
1595
  */
1586
1596
  customHeaders?: pulumi.Input<pulumi.Input<inputs.ConnectionOptionsCustomHeader>[]>;
1597
+ /**
1598
+ * Configure custom password hashing within a connection. (EA only)
1599
+ */
1600
+ customPasswordHash?: pulumi.Input<inputs.ConnectionOptionsCustomPasswordHash>;
1587
1601
  /**
1588
1602
  * A map of scripts used to integrate with a custom database.
1589
1603
  */
@@ -1630,6 +1644,10 @@ export interface ConnectionOptions {
1630
1644
  * List of the domains that can be authenticated using the identity provider. Only needed for Identifier First authentication flows.
1631
1645
  */
1632
1646
  domainAliases?: pulumi.Input<pulumi.Input<string>[]>;
1647
+ /**
1648
+ * Indicates whether to request the email scope. Used by some OAuth2 connections (e.g., LINE).
1649
+ */
1650
+ email?: pulumi.Input<boolean>;
1633
1651
  /**
1634
1652
  * Set to `true` to inject context into custom DB scripts (warning: cannot be disabled once enabled).
1635
1653
  */
@@ -1982,6 +2000,10 @@ export interface ConnectionOptionsAttributeEmailIdentifier {
1982
2000
  * Defines whether email attribute is active as an identifier
1983
2001
  */
1984
2002
  active?: pulumi.Input<boolean>;
2003
+ /**
2004
+ * Gets and Sets the default authentication method for the email identifier type. Valid values: `password`, `emailOtp`
2005
+ */
2006
+ defaultMethod?: pulumi.Input<string>;
1985
2007
  }
1986
2008
  export interface ConnectionOptionsAttributeEmailSignup {
1987
2009
  /**
@@ -2032,6 +2054,10 @@ export interface ConnectionOptionsAttributePhoneNumberIdentifier {
2032
2054
  * Defines whether Phone Number attribute is active as an identifier
2033
2055
  */
2034
2056
  active?: pulumi.Input<boolean>;
2057
+ /**
2058
+ * Gets and Sets the default authentication method for the phoneNumber identifier type. Valid values: `password`, `phoneOtp`
2059
+ */
2060
+ defaultMethod?: pulumi.Input<string>;
2035
2061
  }
2036
2062
  export interface ConnectionOptionsAttributePhoneNumberSignup {
2037
2063
  /**
@@ -2072,6 +2098,10 @@ export interface ConnectionOptionsAttributeUsernameIdentifier {
2072
2098
  * Defines whether UserName attribute is active as an identifier
2073
2099
  */
2074
2100
  active?: pulumi.Input<boolean>;
2101
+ /**
2102
+ * Gets and Sets the default authentication method for the username identifier type. Valid value: `password`
2103
+ */
2104
+ defaultMethod?: pulumi.Input<string>;
2075
2105
  }
2076
2106
  export interface ConnectionOptionsAttributeUsernameSignup {
2077
2107
  /**
@@ -2104,6 +2134,10 @@ export interface ConnectionOptionsAttributeUsernameValidationAllowedType {
2104
2134
  phoneNumber?: pulumi.Input<boolean>;
2105
2135
  }
2106
2136
  export interface ConnectionOptionsAuthenticationMethod {
2137
+ /**
2138
+ * Configures Email OTP authentication
2139
+ */
2140
+ emailOtp?: pulumi.Input<inputs.ConnectionOptionsAuthenticationMethodEmailOtp>;
2107
2141
  /**
2108
2142
  * Configures passkey authentication
2109
2143
  */
@@ -2112,6 +2146,16 @@ export interface ConnectionOptionsAuthenticationMethod {
2112
2146
  * Configures password authentication
2113
2147
  */
2114
2148
  password?: pulumi.Input<inputs.ConnectionOptionsAuthenticationMethodPassword>;
2149
+ /**
2150
+ * Configures Phone OTP authentication
2151
+ */
2152
+ phoneOtp?: pulumi.Input<inputs.ConnectionOptionsAuthenticationMethodPhoneOtp>;
2153
+ }
2154
+ export interface ConnectionOptionsAuthenticationMethodEmailOtp {
2155
+ /**
2156
+ * Enables Email OTP authentication
2157
+ */
2158
+ enabled?: pulumi.Input<boolean>;
2115
2159
  }
2116
2160
  export interface ConnectionOptionsAuthenticationMethodPasskey {
2117
2161
  /**
@@ -2125,6 +2169,12 @@ export interface ConnectionOptionsAuthenticationMethodPassword {
2125
2169
  */
2126
2170
  enabled?: pulumi.Input<boolean>;
2127
2171
  }
2172
+ export interface ConnectionOptionsAuthenticationMethodPhoneOtp {
2173
+ /**
2174
+ * Enables Phone OTP authentication
2175
+ */
2176
+ enabled?: pulumi.Input<boolean>;
2177
+ }
2128
2178
  export interface ConnectionOptionsConnectionSettings {
2129
2179
  /**
2130
2180
  * PKCE configuration. Possible values: `auto` (uses the strongest algorithm available), `S256` (uses the SHA-256 algorithm), `plain` (uses plaintext as described in the PKCE specification) or `disabled` (disables support for PKCE).
@@ -2135,6 +2185,12 @@ export interface ConnectionOptionsCustomHeader {
2135
2185
  header: pulumi.Input<string>;
2136
2186
  value: pulumi.Input<string>;
2137
2187
  }
2188
+ export interface ConnectionOptionsCustomPasswordHash {
2189
+ /**
2190
+ * Id of an existing action that should be invoked when validating a universal password hash. This action must support password-hash-migration trigger
2191
+ */
2192
+ actionId: pulumi.Input<string>;
2193
+ }
2138
2194
  export interface ConnectionOptionsDecryptionKey {
2139
2195
  cert: pulumi.Input<string>;
2140
2196
  key: pulumi.Input<string>;
@@ -2594,16 +2650,26 @@ export interface EventStreamWebhookConfigurationWebhookAuthorization {
2594
2650
  * The authorization method used to secure the webhook endpoint. Can be either `basic` or `bearer`.
2595
2651
  */
2596
2652
  method: pulumi.Input<string>;
2653
+ password?: pulumi.Input<string>;
2597
2654
  /**
2598
- * The password for `basic` authentication. Required when `method` is set to `basic`.
2655
+ * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
2599
2656
  */
2600
- password?: pulumi.Input<string>;
2657
+ passwordWo?: pulumi.Input<string>;
2601
2658
  /**
2602
- * The token used for `bearer` authentication. Required when `method` is set to `bearer`.
2659
+ * Version number for password changes. Update this value to trigger a password change when using `passwordWo`.
2603
2660
  */
2661
+ passwordWoVersion?: pulumi.Input<number>;
2604
2662
  token?: pulumi.Input<string>;
2605
2663
  /**
2606
- * The username for `basic` authentication. Required when `method` is set to `basic`.
2664
+ * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
2665
+ */
2666
+ tokenWo?: pulumi.Input<string>;
2667
+ /**
2668
+ * Version number for token changes. Update this value to trigger a token change when using `tokenWo`.
2669
+ */
2670
+ tokenWoVersion?: pulumi.Input<number>;
2671
+ /**
2672
+ * The username for `basic` authentication. Required only when `method` is set to `basic`.
2607
2673
  */
2608
2674
  username?: pulumi.Input<string>;
2609
2675
  }
@@ -3183,6 +3249,10 @@ export interface OrganizationDiscoveryDomainsDiscoveryDomain {
3183
3249
  * Verification status. Must be either 'pending' or 'verified'.
3184
3250
  */
3185
3251
  status: pulumi.Input<string>;
3252
+ /**
3253
+ * Indicates whether this domain should be used for organization discovery during login.
3254
+ */
3255
+ useForOrganizationDiscovery?: pulumi.Input<boolean>;
3186
3256
  /**
3187
3257
  * The full domain where the TXT record should be added.
3188
3258
  */
package/types/output.d.ts CHANGED
@@ -1378,6 +1378,10 @@ export interface ClientOidcLogout {
1378
1378
  * Configure OIDC logout initiators for the Client
1379
1379
  */
1380
1380
  backchannelLogoutInitiators?: outputs.ClientOidcLogoutBackchannelLogoutInitiators;
1381
+ /**
1382
+ * Controls whether session metadata is included in the logout token. Default value is null.
1383
+ */
1384
+ backchannelLogoutSessionMetadata?: outputs.ClientOidcLogoutBackchannelLogoutSessionMetadata;
1381
1385
  /**
1382
1386
  * Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
1383
1387
  */
@@ -1393,6 +1397,12 @@ export interface ClientOidcLogoutBackchannelLogoutInitiators {
1393
1397
  */
1394
1398
  selectedInitiators?: string[];
1395
1399
  }
1400
+ export interface ClientOidcLogoutBackchannelLogoutSessionMetadata {
1401
+ /**
1402
+ * The `include` property determines whether session metadata is included in the logout token.
1403
+ */
1404
+ include: boolean;
1405
+ }
1396
1406
  export interface ClientRefreshToken {
1397
1407
  /**
1398
1408
  * Options include `expiring`, `non-expiring`. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is `rotating`, this must be set to `expiring`.
@@ -1548,7 +1558,7 @@ export interface ConnectionOptions {
1548
1558
  /**
1549
1559
  * Indicates whether to enable brute force protection, which will limit the number of signups and failed logins from a suspicious IP address.
1550
1560
  */
1551
- bruteForceProtection?: boolean;
1561
+ bruteForceProtection: boolean;
1552
1562
  /**
1553
1563
  * The strategy's client ID.
1554
1564
  */
@@ -1583,6 +1593,10 @@ export interface ConnectionOptions {
1583
1593
  * Configure extra headers to the Token endpoint of an OAuth 2.0 provider
1584
1594
  */
1585
1595
  customHeaders?: outputs.ConnectionOptionsCustomHeader[];
1596
+ /**
1597
+ * Configure custom password hashing within a connection. (EA only)
1598
+ */
1599
+ customPasswordHash?: outputs.ConnectionOptionsCustomPasswordHash;
1586
1600
  /**
1587
1601
  * A map of scripts used to integrate with a custom database.
1588
1602
  */
@@ -1629,6 +1643,10 @@ export interface ConnectionOptions {
1629
1643
  * List of the domains that can be authenticated using the identity provider. Only needed for Identifier First authentication flows.
1630
1644
  */
1631
1645
  domainAliases: string[];
1646
+ /**
1647
+ * Indicates whether to request the email scope. Used by some OAuth2 connections (e.g., LINE).
1648
+ */
1649
+ email: boolean;
1632
1650
  /**
1633
1651
  * Set to `true` to inject context into custom DB scripts (warning: cannot be disabled once enabled).
1634
1652
  */
@@ -1958,19 +1976,19 @@ export interface ConnectionOptionsAttributeEmail {
1958
1976
  /**
1959
1977
  * Connection Options Email Attribute Identifier
1960
1978
  */
1961
- identifiers?: outputs.ConnectionOptionsAttributeEmailIdentifier[];
1979
+ identifiers: outputs.ConnectionOptionsAttributeEmailIdentifier[];
1962
1980
  /**
1963
1981
  * Defines whether Profile is required
1964
1982
  */
1965
- profileRequired?: boolean;
1983
+ profileRequired: boolean;
1966
1984
  /**
1967
1985
  * Defines signup settings for Email attribute
1968
1986
  */
1969
- signups?: outputs.ConnectionOptionsAttributeEmailSignup[];
1987
+ signups: outputs.ConnectionOptionsAttributeEmailSignup[];
1970
1988
  /**
1971
1989
  * If set to false, it allow multiple accounts with the same email address
1972
1990
  */
1973
- unique?: boolean;
1991
+ unique: boolean;
1974
1992
  /**
1975
1993
  * Defines whether whether user will receive a link or an OTP during user signup for email verification and password reset for email verification
1976
1994
  */
@@ -1980,23 +1998,27 @@ export interface ConnectionOptionsAttributeEmailIdentifier {
1980
1998
  /**
1981
1999
  * Defines whether email attribute is active as an identifier
1982
2000
  */
1983
- active?: boolean;
2001
+ active: boolean;
2002
+ /**
2003
+ * Gets and Sets the default authentication method for the email identifier type. Valid values: `password`, `emailOtp`
2004
+ */
2005
+ defaultMethod?: string;
1984
2006
  }
1985
2007
  export interface ConnectionOptionsAttributeEmailSignup {
1986
2008
  /**
1987
2009
  * Defines signup status for Email Attribute
1988
2010
  */
1989
- status?: string;
2011
+ status: string;
1990
2012
  /**
1991
2013
  * Defines settings for Verification under Email attribute
1992
2014
  */
1993
- verifications?: outputs.ConnectionOptionsAttributeEmailSignupVerification[];
2015
+ verifications: outputs.ConnectionOptionsAttributeEmailSignupVerification[];
1994
2016
  }
1995
2017
  export interface ConnectionOptionsAttributeEmailSignupVerification {
1996
2018
  /**
1997
2019
  * Defines verification settings for signup attribute
1998
2020
  */
1999
- active?: boolean;
2021
+ active: boolean;
2000
2022
  }
2001
2023
  export interface ConnectionOptionsAttributeMap {
2002
2024
  /**
@@ -2016,51 +2038,55 @@ export interface ConnectionOptionsAttributePhoneNumber {
2016
2038
  /**
2017
2039
  * Connection Options Phone Number Attribute Identifier
2018
2040
  */
2019
- identifiers?: outputs.ConnectionOptionsAttributePhoneNumberIdentifier[];
2041
+ identifiers: outputs.ConnectionOptionsAttributePhoneNumberIdentifier[];
2020
2042
  /**
2021
2043
  * Defines whether Profile is required
2022
2044
  */
2023
- profileRequired?: boolean;
2045
+ profileRequired: boolean;
2024
2046
  /**
2025
2047
  * Defines signup settings for Phone Number attribute
2026
2048
  */
2027
- signups?: outputs.ConnectionOptionsAttributePhoneNumberSignup[];
2049
+ signups: outputs.ConnectionOptionsAttributePhoneNumberSignup[];
2028
2050
  }
2029
2051
  export interface ConnectionOptionsAttributePhoneNumberIdentifier {
2030
2052
  /**
2031
2053
  * Defines whether Phone Number attribute is active as an identifier
2032
2054
  */
2033
- active?: boolean;
2055
+ active: boolean;
2056
+ /**
2057
+ * Gets and Sets the default authentication method for the phoneNumber identifier type. Valid values: `password`, `phoneOtp`
2058
+ */
2059
+ defaultMethod: string;
2034
2060
  }
2035
2061
  export interface ConnectionOptionsAttributePhoneNumberSignup {
2036
2062
  /**
2037
2063
  * Defines status of signup for Phone Number attribute
2038
2064
  */
2039
- status?: string;
2065
+ status: string;
2040
2066
  /**
2041
2067
  * Defines verification settings for Phone Number attribute
2042
2068
  */
2043
- verifications?: outputs.ConnectionOptionsAttributePhoneNumberSignupVerification[];
2069
+ verifications: outputs.ConnectionOptionsAttributePhoneNumberSignupVerification[];
2044
2070
  }
2045
2071
  export interface ConnectionOptionsAttributePhoneNumberSignupVerification {
2046
2072
  /**
2047
2073
  * Defines verification settings for Phone Number attribute
2048
2074
  */
2049
- active?: boolean;
2075
+ active: boolean;
2050
2076
  }
2051
2077
  export interface ConnectionOptionsAttributeUsername {
2052
2078
  /**
2053
2079
  * Connection options for User Name Attribute Identifier
2054
2080
  */
2055
- identifiers?: outputs.ConnectionOptionsAttributeUsernameIdentifier[];
2081
+ identifiers: outputs.ConnectionOptionsAttributeUsernameIdentifier[];
2056
2082
  /**
2057
2083
  * Defines whether Profile is required
2058
2084
  */
2059
- profileRequired?: boolean;
2085
+ profileRequired: boolean;
2060
2086
  /**
2061
2087
  * Defines signup settings for User Name attribute
2062
2088
  */
2063
- signups?: outputs.ConnectionOptionsAttributeUsernameSignup[];
2089
+ signups: outputs.ConnectionOptionsAttributeUsernameSignup[];
2064
2090
  /**
2065
2091
  * Defines validation settings for User Name attribute
2066
2092
  */
@@ -2070,13 +2096,17 @@ export interface ConnectionOptionsAttributeUsernameIdentifier {
2070
2096
  /**
2071
2097
  * Defines whether UserName attribute is active as an identifier
2072
2098
  */
2073
- active?: boolean;
2099
+ active: boolean;
2100
+ /**
2101
+ * Gets and Sets the default authentication method for the username identifier type. Valid value: `password`
2102
+ */
2103
+ defaultMethod?: string;
2074
2104
  }
2075
2105
  export interface ConnectionOptionsAttributeUsernameSignup {
2076
2106
  /**
2077
2107
  * Defines whether User Name attribute is active as an identifier
2078
2108
  */
2079
- status?: string;
2109
+ status: string;
2080
2110
  }
2081
2111
  export interface ConnectionOptionsAttributeUsernameValidation {
2082
2112
  /**
@@ -2103,6 +2133,10 @@ export interface ConnectionOptionsAttributeUsernameValidationAllowedType {
2103
2133
  phoneNumber: boolean;
2104
2134
  }
2105
2135
  export interface ConnectionOptionsAuthenticationMethod {
2136
+ /**
2137
+ * Configures Email OTP authentication
2138
+ */
2139
+ emailOtp: outputs.ConnectionOptionsAuthenticationMethodEmailOtp;
2106
2140
  /**
2107
2141
  * Configures passkey authentication
2108
2142
  */
@@ -2111,6 +2145,16 @@ export interface ConnectionOptionsAuthenticationMethod {
2111
2145
  * Configures password authentication
2112
2146
  */
2113
2147
  password: outputs.ConnectionOptionsAuthenticationMethodPassword;
2148
+ /**
2149
+ * Configures Phone OTP authentication
2150
+ */
2151
+ phoneOtp: outputs.ConnectionOptionsAuthenticationMethodPhoneOtp;
2152
+ }
2153
+ export interface ConnectionOptionsAuthenticationMethodEmailOtp {
2154
+ /**
2155
+ * Enables Email OTP authentication
2156
+ */
2157
+ enabled: boolean;
2114
2158
  }
2115
2159
  export interface ConnectionOptionsAuthenticationMethodPasskey {
2116
2160
  /**
@@ -2124,6 +2168,12 @@ export interface ConnectionOptionsAuthenticationMethodPassword {
2124
2168
  */
2125
2169
  enabled: boolean;
2126
2170
  }
2171
+ export interface ConnectionOptionsAuthenticationMethodPhoneOtp {
2172
+ /**
2173
+ * Enables Phone OTP authentication
2174
+ */
2175
+ enabled: boolean;
2176
+ }
2127
2177
  export interface ConnectionOptionsConnectionSettings {
2128
2178
  /**
2129
2179
  * PKCE configuration. Possible values: `auto` (uses the strongest algorithm available), `S256` (uses the SHA-256 algorithm), `plain` (uses plaintext as described in the PKCE specification) or `disabled` (disables support for PKCE).
@@ -2134,6 +2184,12 @@ export interface ConnectionOptionsCustomHeader {
2134
2184
  header: string;
2135
2185
  value: string;
2136
2186
  }
2187
+ export interface ConnectionOptionsCustomPasswordHash {
2188
+ /**
2189
+ * Id of an existing action that should be invoked when validating a universal password hash. This action must support password-hash-migration trigger
2190
+ */
2191
+ actionId: string;
2192
+ }
2137
2193
  export interface ConnectionOptionsDecryptionKey {
2138
2194
  cert: string;
2139
2195
  key: string;
@@ -2593,16 +2649,26 @@ export interface EventStreamWebhookConfigurationWebhookAuthorization {
2593
2649
  * The authorization method used to secure the webhook endpoint. Can be either `basic` or `bearer`.
2594
2650
  */
2595
2651
  method: string;
2652
+ password?: string;
2596
2653
  /**
2597
- * The password for `basic` authentication. Required when `method` is set to `basic`.
2654
+ * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
2598
2655
  */
2599
- password?: string;
2656
+ passwordWo?: string;
2600
2657
  /**
2601
- * The token used for `bearer` authentication. Required when `method` is set to `bearer`.
2658
+ * Version number for password changes. Update this value to trigger a password change when using `passwordWo`.
2602
2659
  */
2660
+ passwordWoVersion?: number;
2603
2661
  token?: string;
2604
2662
  /**
2605
- * The username for `basic` authentication. Required when `method` is set to `basic`.
2663
+ * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
2664
+ */
2665
+ tokenWo?: string;
2666
+ /**
2667
+ * Version number for token changes. Update this value to trigger a token change when using `tokenWo`.
2668
+ */
2669
+ tokenWoVersion?: number;
2670
+ /**
2671
+ * The username for `basic` authentication. Required only when `method` is set to `basic`.
2606
2672
  */
2607
2673
  username?: string;
2608
2674
  }
@@ -3887,6 +3953,10 @@ export interface GetClientExpressConfigurationLinkedClient {
3887
3953
  clientId: string;
3888
3954
  }
3889
3955
  export interface GetClientGrantsClientGrant {
3956
+ /**
3957
+ * When enabled, all scopes configured on the resource server are allowed for this client grant. EA Only.
3958
+ */
3959
+ allowAllScopes: boolean;
3890
3960
  /**
3891
3961
  * The audience of the client grant.
3892
3962
  */
@@ -3965,6 +4035,10 @@ export interface GetClientOidcLogout {
3965
4035
  * Configure OIDC logout initiators for the Client
3966
4036
  */
3967
4037
  backchannelLogoutInitiators: outputs.GetClientOidcLogoutBackchannelLogoutInitiator[];
4038
+ /**
4039
+ * Controls whether session metadata is included in the logout token. Default value is null.
4040
+ */
4041
+ backchannelLogoutSessionMetadatas: outputs.GetClientOidcLogoutBackchannelLogoutSessionMetadata[];
3968
4042
  /**
3969
4043
  * Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
3970
4044
  */
@@ -3980,6 +4054,12 @@ export interface GetClientOidcLogoutBackchannelLogoutInitiator {
3980
4054
  */
3981
4055
  selectedInitiators: string[];
3982
4056
  }
4057
+ export interface GetClientOidcLogoutBackchannelLogoutSessionMetadata {
4058
+ /**
4059
+ * The `include` property determines whether session metadata is included in the logout token.
4060
+ */
4061
+ include: boolean;
4062
+ }
3983
4063
  export interface GetClientRefreshToken {
3984
4064
  /**
3985
4065
  * Options include `expiring`, `non-expiring`. Whether a refresh token will expire based on an absolute lifetime, after which the token can no longer be used. If rotation is `rotating`, this must be set to `expiring`.
@@ -4256,6 +4336,10 @@ export interface GetClientsClientOidcLogout {
4256
4336
  * Configure OIDC logout initiators for the Client
4257
4337
  */
4258
4338
  backchannelLogoutInitiators: outputs.GetClientsClientOidcLogoutBackchannelLogoutInitiator[];
4339
+ /**
4340
+ * Controls whether session metadata is included in the logout token. Default value is null.
4341
+ */
4342
+ backchannelLogoutSessionMetadatas: outputs.GetClientsClientOidcLogoutBackchannelLogoutSessionMetadata[];
4259
4343
  /**
4260
4344
  * Set of URLs that are valid to call back from Auth0 for OIDC backchannel logout. Currently only one URL is allowed.
4261
4345
  */
@@ -4271,6 +4355,12 @@ export interface GetClientsClientOidcLogoutBackchannelLogoutInitiator {
4271
4355
  */
4272
4356
  selectedInitiators: string[];
4273
4357
  }
4358
+ export interface GetClientsClientOidcLogoutBackchannelLogoutSessionMetadata {
4359
+ /**
4360
+ * The `include` property determines whether session metadata is included in the logout token.
4361
+ */
4362
+ include: boolean;
4363
+ }
4274
4364
  export interface GetClientsClientSessionTransfer {
4275
4365
  /**
4276
4366
  * Indicates whether the application is allowed to use a refresh token when using a sessionTransferToken session.
@@ -4484,6 +4574,10 @@ export interface GetConnectionOption {
4484
4574
  * Configure extra headers to the Token endpoint of an OAuth 2.0 provider
4485
4575
  */
4486
4576
  customHeaders: outputs.GetConnectionOptionCustomHeader[];
4577
+ /**
4578
+ * Configure custom password hashing within a connection. (EA only)
4579
+ */
4580
+ customPasswordHashes: outputs.GetConnectionOptionCustomPasswordHash[];
4487
4581
  /**
4488
4582
  * A map of scripts used to integrate with a custom database.
4489
4583
  */
@@ -4530,6 +4624,10 @@ export interface GetConnectionOption {
4530
4624
  * List of the domains that can be authenticated using the identity provider. Only needed for Identifier First authentication flows.
4531
4625
  */
4532
4626
  domainAliases: string[];
4627
+ /**
4628
+ * Indicates whether to request the email scope. Used by some OAuth2 connections (e.g., LINE).
4629
+ */
4630
+ email: boolean;
4533
4631
  /**
4534
4632
  * Set to `true` to inject context into custom DB scripts (warning: cannot be disabled once enabled).
4535
4633
  */
@@ -4882,6 +4980,10 @@ export interface GetConnectionOptionAttributeEmailIdentifier {
4882
4980
  * Defines whether email attribute is active as an identifier
4883
4981
  */
4884
4982
  active: boolean;
4983
+ /**
4984
+ * Gets and Sets the default authentication method for the email identifier type. Valid values: `password`, `emailOtp`
4985
+ */
4986
+ defaultMethod: string;
4885
4987
  }
4886
4988
  export interface GetConnectionOptionAttributeEmailSignup {
4887
4989
  /**
@@ -4932,6 +5034,10 @@ export interface GetConnectionOptionAttributePhoneNumberIdentifier {
4932
5034
  * Defines whether Phone Number attribute is active as an identifier
4933
5035
  */
4934
5036
  active: boolean;
5037
+ /**
5038
+ * Gets and Sets the default authentication method for the phoneNumber identifier type. Valid values: `password`, `phoneOtp`
5039
+ */
5040
+ defaultMethod: string;
4935
5041
  }
4936
5042
  export interface GetConnectionOptionAttributePhoneNumberSignup {
4937
5043
  /**
@@ -4972,6 +5078,10 @@ export interface GetConnectionOptionAttributeUsernameIdentifier {
4972
5078
  * Defines whether UserName attribute is active as an identifier
4973
5079
  */
4974
5080
  active: boolean;
5081
+ /**
5082
+ * Gets and Sets the default authentication method for the username identifier type. Valid value: `password`
5083
+ */
5084
+ defaultMethod: string;
4975
5085
  }
4976
5086
  export interface GetConnectionOptionAttributeUsernameSignup {
4977
5087
  /**
@@ -5004,6 +5114,10 @@ export interface GetConnectionOptionAttributeUsernameValidationAllowedType {
5004
5114
  phoneNumber: boolean;
5005
5115
  }
5006
5116
  export interface GetConnectionOptionAuthenticationMethod {
5117
+ /**
5118
+ * Configures Email OTP authentication
5119
+ */
5120
+ emailOtps: outputs.GetConnectionOptionAuthenticationMethodEmailOtp[];
5007
5121
  /**
5008
5122
  * Configures passkey authentication
5009
5123
  */
@@ -5012,6 +5126,16 @@ export interface GetConnectionOptionAuthenticationMethod {
5012
5126
  * Configures password authentication
5013
5127
  */
5014
5128
  passwords: outputs.GetConnectionOptionAuthenticationMethodPassword[];
5129
+ /**
5130
+ * Configures Phone OTP authentication
5131
+ */
5132
+ phoneOtps: outputs.GetConnectionOptionAuthenticationMethodPhoneOtp[];
5133
+ }
5134
+ export interface GetConnectionOptionAuthenticationMethodEmailOtp {
5135
+ /**
5136
+ * Enables Email OTP authentication
5137
+ */
5138
+ enabled: boolean;
5015
5139
  }
5016
5140
  export interface GetConnectionOptionAuthenticationMethodPasskey {
5017
5141
  /**
@@ -5025,6 +5149,12 @@ export interface GetConnectionOptionAuthenticationMethodPassword {
5025
5149
  */
5026
5150
  enabled: boolean;
5027
5151
  }
5152
+ export interface GetConnectionOptionAuthenticationMethodPhoneOtp {
5153
+ /**
5154
+ * Enables Phone OTP authentication
5155
+ */
5156
+ enabled: boolean;
5157
+ }
5028
5158
  export interface GetConnectionOptionConnectionSetting {
5029
5159
  /**
5030
5160
  * PKCE configuration. Possible values: `auto` (uses the strongest algorithm available), `S256` (uses the SHA-256 algorithm), `plain` (uses plaintext as described in the PKCE specification) or `disabled` (disables support for PKCE).
@@ -5035,6 +5165,12 @@ export interface GetConnectionOptionCustomHeader {
5035
5165
  header: string;
5036
5166
  value: string;
5037
5167
  }
5168
+ export interface GetConnectionOptionCustomPasswordHash {
5169
+ /**
5170
+ * Id of an existing action that should be invoked when validating a universal password hash. This action must support password-hash-migration trigger
5171
+ */
5172
+ actionId: string;
5173
+ }
5038
5174
  export interface GetConnectionOptionDecryptionKey {
5039
5175
  cert: string;
5040
5176
  key: string;
@@ -5363,6 +5499,10 @@ export interface GetCustomDomainsCustomDomain {
5363
5499
  * Indicates whether this is a primary domain.
5364
5500
  */
5365
5501
  primary: boolean;
5502
+ /**
5503
+ * Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided or set to null, the full domain will be used.
5504
+ */
5505
+ relyingPartyIdentifier: string;
5366
5506
  /**
5367
5507
  * Configuration status for the custom domain. Options include `disabled`, `pending`, `pendingVerification`, `ready` and `failed`.
5368
5508
  */
@@ -5436,16 +5576,20 @@ export interface GetEventStreamWebhookConfigurationWebhookAuthorization {
5436
5576
  * The authorization method used to secure the webhook endpoint. Can be either `basic` or `bearer`.
5437
5577
  */
5438
5578
  method: string;
5439
- /**
5440
- * The password for `basic` authentication. Required when `method` is set to `basic`.
5441
- */
5442
5579
  password: string;
5580
+ passwordWo: string;
5443
5581
  /**
5444
- * The token used for `bearer` authentication. Required when `method` is set to `bearer`.
5582
+ * Version number for password changes. Update this value to trigger a password change when using `passwordWo`.
5445
5583
  */
5584
+ passwordWoVersion: number;
5446
5585
  token: string;
5586
+ tokenWo: string;
5587
+ /**
5588
+ * Version number for token changes. Update this value to trigger a token change when using `tokenWo`.
5589
+ */
5590
+ tokenWoVersion: number;
5447
5591
  /**
5448
- * The username for `basic` authentication. Required when `method` is set to `basic`.
5592
+ * The username for `basic` authentication. Required only when `method` is set to `basic`.
5449
5593
  */
5450
5594
  username: string;
5451
5595
  }
@@ -6742,6 +6886,10 @@ export interface OrganizationDiscoveryDomainsDiscoveryDomain {
6742
6886
  * Verification status. Must be either 'pending' or 'verified'.
6743
6887
  */
6744
6888
  status: string;
6889
+ /**
6890
+ * Indicates whether this domain should be used for organization discovery during login.
6891
+ */
6892
+ useForOrganizationDiscovery: boolean;
6745
6893
  /**
6746
6894
  * The full domain where the TXT record should be added.
6747
6895
  */