@pulumi/auth0 3.41.0-alpha.1777270152 → 3.41.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (25) hide show
  1. package/client.d.ts +47 -3
  2. package/client.js +10 -0
  3. package/client.js.map +1 -1
  4. package/clientCimd.d.ts +394 -0
  5. package/clientCimd.js +162 -0
  6. package/clientCimd.js.map +1 -0
  7. package/getClient.d.ts +21 -1
  8. package/getClient.js.map +1 -1
  9. package/getClients.d.ts +12 -0
  10. package/getClients.js +2 -0
  11. package/getClients.js.map +1 -1
  12. package/getTenant.d.ts +8 -0
  13. package/getTenant.js.map +1 -1
  14. package/index.d.ts +3 -0
  15. package/index.js +9 -4
  16. package/index.js.map +1 -1
  17. package/organizationConnection.d.ts +38 -6
  18. package/organizationConnection.js +6 -0
  19. package/organizationConnection.js.map +1 -1
  20. package/package.json +2 -2
  21. package/tenant.d.ts +24 -0
  22. package/tenant.js +4 -0
  23. package/tenant.js.map +1 -1
  24. package/types/input.d.ts +120 -2
  25. package/types/output.d.ts +192 -6
package/client.d.ts CHANGED
@@ -110,6 +110,18 @@ export declare class Client extends pulumi.CustomResource {
110
110
  * Express Configuration settings for the client. Used with OIN Express Configuration.
111
111
  */
112
112
  readonly expressConfiguration: pulumi.Output<outputs.ClientExpressConfiguration>;
113
+ /**
114
+ * The URL of the Client ID Metadata Document. Only present for CIMD-registered clients.
115
+ */
116
+ readonly externalClientId: pulumi.Output<string>;
117
+ /**
118
+ * Who created the external metadata client: `admin` (via Management API), `client` (self-registered), or `unknown`.
119
+ */
120
+ readonly externalMetadataCreatedBy: pulumi.Output<string>;
121
+ /**
122
+ * Type of external metadata. Value is `cimd` for CIMD-registered clients.
123
+ */
124
+ readonly externalMetadataType: pulumi.Output<string>;
113
125
  /**
114
126
  * HTML form template to be used for WS-Federation.
115
127
  */
@@ -123,13 +135,17 @@ export declare class Client extends pulumi.CustomResource {
123
135
  */
124
136
  readonly initiateLoginUri: pulumi.Output<string | undefined>;
125
137
  /**
126
- * Indicates whether this client is a first-party client.Defaults to true from the API
138
+ * Indicates whether this client is a first-party client.
127
139
  */
128
140
  readonly isFirstParty: pulumi.Output<boolean>;
129
141
  /**
130
142
  * Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to `clientSecretPost` or `clientSecretBasic`. Setting this property when creating the resource, will default the authentication method to `clientSecretPost`. To change the authentication method to `clientSecretBasic` use the `auth0.ClientCredentials` resource.
131
143
  */
132
144
  readonly isTokenEndpointIpHeaderTrusted: pulumi.Output<boolean>;
145
+ /**
146
+ * URL for the JSON Web Key Set (JWKS) containing the public keys used for `privateKeyJwt` authentication. Only present for CIMD clients using `privateKeyJwt` authentication.
147
+ */
148
+ readonly jwksUri: pulumi.Output<string>;
133
149
  /**
134
150
  * Configuration settings for the JWTs issued for this client.
135
151
  */
@@ -142,6 +158,10 @@ export declare class Client extends pulumi.CustomResource {
142
158
  * Additional configuration for native mobile apps.
143
159
  */
144
160
  readonly mobile: pulumi.Output<outputs.ClientMobile>;
161
+ /**
162
+ * Configuration for self-service organization features, controlling how organizations are created and managed for this client.
163
+ */
164
+ readonly myOrganizationConfiguration: pulumi.Output<outputs.ClientMyOrganizationConfiguration>;
145
165
  /**
146
166
  * Name of the client.
147
167
  */
@@ -316,6 +336,18 @@ export interface ClientState {
316
336
  * Express Configuration settings for the client. Used with OIN Express Configuration.
317
337
  */
318
338
  expressConfiguration?: pulumi.Input<inputs.ClientExpressConfiguration>;
339
+ /**
340
+ * The URL of the Client ID Metadata Document. Only present for CIMD-registered clients.
341
+ */
342
+ externalClientId?: pulumi.Input<string>;
343
+ /**
344
+ * Who created the external metadata client: `admin` (via Management API), `client` (self-registered), or `unknown`.
345
+ */
346
+ externalMetadataCreatedBy?: pulumi.Input<string>;
347
+ /**
348
+ * Type of external metadata. Value is `cimd` for CIMD-registered clients.
349
+ */
350
+ externalMetadataType?: pulumi.Input<string>;
319
351
  /**
320
352
  * HTML form template to be used for WS-Federation.
321
353
  */
@@ -329,13 +361,17 @@ export interface ClientState {
329
361
  */
330
362
  initiateLoginUri?: pulumi.Input<string>;
331
363
  /**
332
- * Indicates whether this client is a first-party client.Defaults to true from the API
364
+ * Indicates whether this client is a first-party client.
333
365
  */
334
366
  isFirstParty?: pulumi.Input<boolean>;
335
367
  /**
336
368
  * Indicates whether the token endpoint IP header is trusted. Requires the authentication method to be set to `clientSecretPost` or `clientSecretBasic`. Setting this property when creating the resource, will default the authentication method to `clientSecretPost`. To change the authentication method to `clientSecretBasic` use the `auth0.ClientCredentials` resource.
337
369
  */
338
370
  isTokenEndpointIpHeaderTrusted?: pulumi.Input<boolean>;
371
+ /**
372
+ * URL for the JSON Web Key Set (JWKS) containing the public keys used for `privateKeyJwt` authentication. Only present for CIMD clients using `privateKeyJwt` authentication.
373
+ */
374
+ jwksUri?: pulumi.Input<string>;
339
375
  /**
340
376
  * Configuration settings for the JWTs issued for this client.
341
377
  */
@@ -348,6 +384,10 @@ export interface ClientState {
348
384
  * Additional configuration for native mobile apps.
349
385
  */
350
386
  mobile?: pulumi.Input<inputs.ClientMobile>;
387
+ /**
388
+ * Configuration for self-service organization features, controlling how organizations are created and managed for this client.
389
+ */
390
+ myOrganizationConfiguration?: pulumi.Input<inputs.ClientMyOrganizationConfiguration>;
351
391
  /**
352
392
  * Name of the client.
353
393
  */
@@ -523,7 +563,7 @@ export interface ClientArgs {
523
563
  */
524
564
  initiateLoginUri?: pulumi.Input<string>;
525
565
  /**
526
- * Indicates whether this client is a first-party client.Defaults to true from the API
566
+ * Indicates whether this client is a first-party client.
527
567
  */
528
568
  isFirstParty?: pulumi.Input<boolean>;
529
569
  /**
@@ -542,6 +582,10 @@ export interface ClientArgs {
542
582
  * Additional configuration for native mobile apps.
543
583
  */
544
584
  mobile?: pulumi.Input<inputs.ClientMobile>;
585
+ /**
586
+ * Configuration for self-service organization features, controlling how organizations are created and managed for this client.
587
+ */
588
+ myOrganizationConfiguration?: pulumi.Input<inputs.ClientMyOrganizationConfiguration>;
545
589
  /**
546
590
  * Name of the client.
547
591
  */
package/client.js CHANGED
@@ -65,14 +65,19 @@ class Client extends pulumi.CustomResource {
65
65
  resourceInputs["description"] = state?.description;
66
66
  resourceInputs["encryptionKey"] = state?.encryptionKey;
67
67
  resourceInputs["expressConfiguration"] = state?.expressConfiguration;
68
+ resourceInputs["externalClientId"] = state?.externalClientId;
69
+ resourceInputs["externalMetadataCreatedBy"] = state?.externalMetadataCreatedBy;
70
+ resourceInputs["externalMetadataType"] = state?.externalMetadataType;
68
71
  resourceInputs["formTemplate"] = state?.formTemplate;
69
72
  resourceInputs["grantTypes"] = state?.grantTypes;
70
73
  resourceInputs["initiateLoginUri"] = state?.initiateLoginUri;
71
74
  resourceInputs["isFirstParty"] = state?.isFirstParty;
72
75
  resourceInputs["isTokenEndpointIpHeaderTrusted"] = state?.isTokenEndpointIpHeaderTrusted;
76
+ resourceInputs["jwksUri"] = state?.jwksUri;
73
77
  resourceInputs["jwtConfiguration"] = state?.jwtConfiguration;
74
78
  resourceInputs["logoUri"] = state?.logoUri;
75
79
  resourceInputs["mobile"] = state?.mobile;
80
+ resourceInputs["myOrganizationConfiguration"] = state?.myOrganizationConfiguration;
76
81
  resourceInputs["name"] = state?.name;
77
82
  resourceInputs["nativeSocialLogin"] = state?.nativeSocialLogin;
78
83
  resourceInputs["oidcBackchannelLogoutUrls"] = state?.oidcBackchannelLogoutUrls;
@@ -122,6 +127,7 @@ class Client extends pulumi.CustomResource {
122
127
  resourceInputs["jwtConfiguration"] = args?.jwtConfiguration;
123
128
  resourceInputs["logoUri"] = args?.logoUri;
124
129
  resourceInputs["mobile"] = args?.mobile;
130
+ resourceInputs["myOrganizationConfiguration"] = args?.myOrganizationConfiguration;
125
131
  resourceInputs["name"] = args?.name;
126
132
  resourceInputs["nativeSocialLogin"] = args?.nativeSocialLogin;
127
133
  resourceInputs["oidcBackchannelLogoutUrls"] = args?.oidcBackchannelLogoutUrls;
@@ -142,6 +148,10 @@ class Client extends pulumi.CustomResource {
142
148
  resourceInputs["tokenQuota"] = args?.tokenQuota;
143
149
  resourceInputs["webOrigins"] = args?.webOrigins;
144
150
  resourceInputs["clientId"] = undefined /*out*/;
151
+ resourceInputs["externalClientId"] = undefined /*out*/;
152
+ resourceInputs["externalMetadataCreatedBy"] = undefined /*out*/;
153
+ resourceInputs["externalMetadataType"] = undefined /*out*/;
154
+ resourceInputs["jwksUri"] = undefined /*out*/;
145
155
  resourceInputs["signingKeys"] = undefined /*out*/;
146
156
  }
147
157
  opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
package/client.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"client.js","sourceRoot":"","sources":["../client.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAsMD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,mCAAmC,CAAC,GAAG,KAAK,EAAE,iCAAiC,CAAC;YAC/F,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,gCAAgC,CAAC,GAAG,KAAK,EAAE,8BAA8B,CAAC;YACzF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,EAAE,4BAA4B,CAAC;YACrF,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,EAAE,2BAA2B,CAAC;YACnF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,oCAAoC,CAAC,GAAG,KAAK,EAAE,kCAAkC,CAAC;YACjG,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,gDAAgD,CAAC,GAAG,KAAK,EAAE,8CAA8C,CAAC;YACzH,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,mCAAmC,CAAC,GAAG,IAAI,EAAE,iCAAiC,CAAC;YAC9F,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,mBAAmB,CAAC;YAC3E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,gCAAgC,CAAC,GAAG,IAAI,EAAE,8BAA8B,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,EAAE,4BAA4B,CAAC;YACpF,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,EAAE,2BAA2B,CAAC;YAClF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,oCAAoC,CAAC,GAAG,IAAI,EAAE,kCAAkC,CAAC;YAChG,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,gDAAgD,CAAC,GAAG,IAAI,EAAE,8CAA8C,CAAC;YACxH,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;YAClC,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AA1UL,wBA2UC;AA7TG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}
1
+ {"version":3,"file":"client.js","sourceRoot":"","sources":["../client.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA0ND,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,mCAAmC,CAAC,GAAG,KAAK,EAAE,iCAAiC,CAAC;YAC/F,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,gCAAgC,CAAC,GAAG,KAAK,EAAE,8BAA8B,CAAC;YACzF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,EAAE,2BAA2B,CAAC;YACnF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,EAAE,4BAA4B,CAAC;YACrF,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,EAAE,2BAA2B,CAAC;YACnF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,oCAAoC,CAAC,GAAG,KAAK,EAAE,kCAAkC,CAAC;YACjG,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,gDAAgD,CAAC,GAAG,KAAK,EAAE,8CAA8C,CAAC;YACzH,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,mCAAmC,CAAC,GAAG,IAAI,EAAE,iCAAiC,CAAC;YAC9F,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,mBAAmB,CAAC;YAC3E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,gCAAgC,CAAC,GAAG,IAAI,EAAE,8BAA8B,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,EAAE,2BAA2B,CAAC;YAClF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,EAAE,4BAA4B,CAAC;YACpF,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,EAAE,2BAA2B,CAAC;YAClF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,oCAAoC,CAAC,GAAG,IAAI,EAAE,kCAAkC,CAAC;YAChG,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,gDAAgD,CAAC,GAAG,IAAI,EAAE,8CAA8C,CAAC;YACxH,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;YAClC,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3D,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAxWL,wBAyWC;AA3VG,gBAAgB;AACO,mBAAY,GAAG,2BAA2B,CAAC"}
package/clientCimd.d.ts ADDED
@@ -0,0 +1,394 @@
1
+ import * as pulumi from "@pulumi/pulumi";
2
+ import * as inputs from "./types/input";
3
+ import * as outputs from "./types/output";
4
+ /**
5
+ * With this resource, you can register an Auth0 client from a Client ID Metadata Document (CIMD) URL. CIMD enables tenant admins to onboard MCP agent clients by providing a URL to an externally-hosted metadata document instead of using Dynamic Client Registration.
6
+ *
7
+ * Requires the `clientIdMetadataDocumentSupported` tenant setting to be enabled.
8
+ *
9
+ * ## Example Usage
10
+ *
11
+ * ```typescript
12
+ * import * as pulumi from "@pulumi/pulumi";
13
+ * import * as auth0 from "@pulumi/auth0";
14
+ *
15
+ * const minimalClient = new auth0.ClientCimd("minimal_client", {externalClientId: "https://mcp-agent1.example.com/oauth/metadata.json"});
16
+ * const myMcpAgent = new auth0.ClientCimd("my_mcp_agent", {
17
+ * externalClientId: "https://mcp-agent2.example.com/.well-known/client.json",
18
+ * externalClientIdVersion: 1,
19
+ * description: "MCP Agent - Production",
20
+ * appType: "spa",
21
+ * oidcConformant: true,
22
+ * allowedOrigins: ["https://mcp-agent2.example.com"],
23
+ * webOrigins: ["https://mcp-agent2.example.com"],
24
+ * grantTypes: [
25
+ * "authorization_code",
26
+ * "refresh_token",
27
+ * ],
28
+ * clientMetadata: {
29
+ * environment: "production",
30
+ * },
31
+ * jwtConfiguration: {
32
+ * lifetimeInSeconds: 300,
33
+ * alg: "RS256",
34
+ * },
35
+ * refreshToken: {
36
+ * rotationType: "rotating",
37
+ * expirationType: "expiring",
38
+ * tokenLifetime: 2592000,
39
+ * idleTokenLifetime: 1296000,
40
+ * infiniteTokenLifetime: false,
41
+ * infiniteIdleTokenLifetime: false,
42
+ * leeway: 0,
43
+ * },
44
+ * });
45
+ * ```
46
+ *
47
+ * ## Import
48
+ *
49
+ * This resource can be imported by specifying the client ID.
50
+ * Generally CIMD clients have a "tpc_" prefix in their client ID.
51
+ *
52
+ * Example:
53
+ *
54
+ * ```sh
55
+ * $ pulumi import auth0:index/clientCimd:ClientCimd my_mcp_agent "tpc_5FPpaVyZGSNRCBzTb2zURZ"
56
+ * ```
57
+ */
58
+ export declare class ClientCimd extends pulumi.CustomResource {
59
+ /**
60
+ * Get an existing ClientCimd resource's state with the given name, ID, and optional extra
61
+ * properties used to qualify the lookup.
62
+ *
63
+ * @param name The _unique_ name of the resulting resource.
64
+ * @param id The _unique_ provider ID of the resource to lookup.
65
+ * @param state Any extra arguments used during the lookup.
66
+ * @param opts Optional settings to control the behavior of the CustomResource.
67
+ */
68
+ static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ClientCimdState, opts?: pulumi.CustomResourceOptions): ClientCimd;
69
+ /**
70
+ * Returns true if the given object is an instance of ClientCimd. This is designed to work even
71
+ * when multiple copies of the Pulumi SDK have been loaded into the same process.
72
+ */
73
+ static isInstance(obj: any): obj is ClientCimd;
74
+ /**
75
+ * URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
76
+ */
77
+ readonly allowedOrigins: pulumi.Output<string[] | undefined>;
78
+ /**
79
+ * Type of application the client represents. CIMD clients only support `native`, `spa`, and `regularWeb`.
80
+ */
81
+ readonly appType: pulumi.Output<string>;
82
+ /**
83
+ * URLs that Auth0 may call back after authentication. Derived from the CIMD metadata document.
84
+ */
85
+ readonly callbacks: pulumi.Output<string[]>;
86
+ /**
87
+ * The ID of the client.
88
+ */
89
+ readonly clientId: pulumi.Output<string>;
90
+ /**
91
+ * Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: `:,-+=_*?"/\()<>@ [Tab] [Space]`.
92
+ */
93
+ readonly clientMetadata: pulumi.Output<{
94
+ [key: string]: string;
95
+ } | undefined>;
96
+ /**
97
+ * Configure and associate an organization with the Client
98
+ */
99
+ readonly defaultOrganization: pulumi.Output<outputs.ClientCimdDefaultOrganization | undefined>;
100
+ /**
101
+ * Description of the purpose of the client.
102
+ */
103
+ readonly description: pulumi.Output<string | undefined>;
104
+ /**
105
+ * The HTTPS URL of the Client ID Metadata Document. Must include a path component (e.g. `https://app.example.com/client.json`). This value is immutable after creation.
106
+ */
107
+ readonly externalClientId: pulumi.Output<string>;
108
+ /**
109
+ * Version number for external*client*id metadata document changes. Update this value to sync the client with the latest values of the json metadata document.
110
+ */
111
+ readonly externalClientIdVersion: pulumi.Output<number | undefined>;
112
+ /**
113
+ * Who created the external metadata client: `admin` (via Management API) or `client` (self-registered).
114
+ */
115
+ readonly externalMetadataCreatedBy: pulumi.Output<string>;
116
+ /**
117
+ * Type of external metadata. Always `cimd` for CIMD-registered clients.
118
+ */
119
+ readonly externalMetadataType: pulumi.Output<string>;
120
+ /**
121
+ * Types of grants that this client is authorized to use. CIMD clients support `authorizationCode` and `refreshToken`.
122
+ */
123
+ readonly grantTypes: pulumi.Output<string[]>;
124
+ /**
125
+ * Whether this is a first-party client. Always `false` for CIMD clients.
126
+ */
127
+ readonly isFirstParty: pulumi.Output<boolean>;
128
+ /**
129
+ * URL for the JSON Web Key Set (JWKS) containing the public keys used for `privateKeyJwt` authentication.
130
+ */
131
+ readonly jwksUri: pulumi.Output<string>;
132
+ /**
133
+ * Configuration settings for the JWTs issued for this client.
134
+ */
135
+ readonly jwtConfiguration: pulumi.Output<outputs.ClientCimdJwtConfiguration>;
136
+ /**
137
+ * URL of the logo for this client, derived from the CIMD metadata document.
138
+ */
139
+ readonly logoUri: pulumi.Output<string>;
140
+ /**
141
+ * Name of the client, derived from the CIMD metadata document.
142
+ */
143
+ readonly name: pulumi.Output<string>;
144
+ /**
145
+ * Whether this client conforms to strict OIDC specifications. Must be `true` for CIMD clients.
146
+ */
147
+ readonly oidcConformant: pulumi.Output<boolean>;
148
+ /**
149
+ * Methods for discovering organizations during the pre*login*prompt. Can include `email` (allows users to find their organization by entering their email address) and/or `organizationName` (requires users to enter the organization name directly). These methods can be combined. Setting this property requires that `organizationRequireBehavior` is set to `preLoginPrompt`.
150
+ */
151
+ readonly organizationDiscoveryMethods: pulumi.Output<string[] | undefined>;
152
+ /**
153
+ * Controls whether Auth0 redirects users to the application's callback URL on authentication errors or in email verification flows.
154
+ */
155
+ readonly redirectionPolicy: pulumi.Output<string>;
156
+ /**
157
+ * Configuration settings for the refresh tokens issued for this client.
158
+ */
159
+ readonly refreshToken: pulumi.Output<outputs.ClientCimdRefreshToken>;
160
+ /**
161
+ * Makes the use of Proof-of-Possession mandatory for this client.
162
+ */
163
+ readonly requireProofOfPossession: pulumi.Output<boolean | undefined>;
164
+ /**
165
+ * List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
166
+ */
167
+ readonly signingKeys: pulumi.Output<{
168
+ [key: string]: string;
169
+ }[]>;
170
+ /**
171
+ * Indicates whether the confirmation prompt appears when using non-verifiable callback URIs. Set to true to skip the prompt, false to show it.
172
+ */
173
+ readonly skipNonVerifiableCallbackUriConfirmationPrompt: pulumi.Output<boolean | undefined>;
174
+ /**
175
+ * Security mode for third-party clients. `strict` enforces enhanced security controls
176
+ */
177
+ readonly thirdPartySecurityMode: pulumi.Output<string>;
178
+ /**
179
+ * The token quota configuration.
180
+ */
181
+ readonly tokenQuota: pulumi.Output<outputs.ClientCimdTokenQuota | undefined>;
182
+ /**
183
+ * Validation result of the CIMD metadata document.
184
+ */
185
+ readonly validations: pulumi.Output<outputs.ClientCimdValidation[]>;
186
+ /**
187
+ * URLs that represent valid web origins for use with web message response mode.
188
+ */
189
+ readonly webOrigins: pulumi.Output<string[] | undefined>;
190
+ /**
191
+ * Create a ClientCimd resource with the given unique name, arguments, and options.
192
+ *
193
+ * @param name The _unique_ name of the resource.
194
+ * @param args The arguments to use to populate this resource's properties.
195
+ * @param opts A bag of options that control this resource's behavior.
196
+ */
197
+ constructor(name: string, args: ClientCimdArgs, opts?: pulumi.CustomResourceOptions);
198
+ }
199
+ /**
200
+ * Input properties used for looking up and filtering ClientCimd resources.
201
+ */
202
+ export interface ClientCimdState {
203
+ /**
204
+ * URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
205
+ */
206
+ allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
207
+ /**
208
+ * Type of application the client represents. CIMD clients only support `native`, `spa`, and `regularWeb`.
209
+ */
210
+ appType?: pulumi.Input<string>;
211
+ /**
212
+ * URLs that Auth0 may call back after authentication. Derived from the CIMD metadata document.
213
+ */
214
+ callbacks?: pulumi.Input<pulumi.Input<string>[]>;
215
+ /**
216
+ * The ID of the client.
217
+ */
218
+ clientId?: pulumi.Input<string>;
219
+ /**
220
+ * Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: `:,-+=_*?"/\()<>@ [Tab] [Space]`.
221
+ */
222
+ clientMetadata?: pulumi.Input<{
223
+ [key: string]: pulumi.Input<string>;
224
+ }>;
225
+ /**
226
+ * Configure and associate an organization with the Client
227
+ */
228
+ defaultOrganization?: pulumi.Input<inputs.ClientCimdDefaultOrganization>;
229
+ /**
230
+ * Description of the purpose of the client.
231
+ */
232
+ description?: pulumi.Input<string>;
233
+ /**
234
+ * The HTTPS URL of the Client ID Metadata Document. Must include a path component (e.g. `https://app.example.com/client.json`). This value is immutable after creation.
235
+ */
236
+ externalClientId?: pulumi.Input<string>;
237
+ /**
238
+ * Version number for external*client*id metadata document changes. Update this value to sync the client with the latest values of the json metadata document.
239
+ */
240
+ externalClientIdVersion?: pulumi.Input<number>;
241
+ /**
242
+ * Who created the external metadata client: `admin` (via Management API) or `client` (self-registered).
243
+ */
244
+ externalMetadataCreatedBy?: pulumi.Input<string>;
245
+ /**
246
+ * Type of external metadata. Always `cimd` for CIMD-registered clients.
247
+ */
248
+ externalMetadataType?: pulumi.Input<string>;
249
+ /**
250
+ * Types of grants that this client is authorized to use. CIMD clients support `authorizationCode` and `refreshToken`.
251
+ */
252
+ grantTypes?: pulumi.Input<pulumi.Input<string>[]>;
253
+ /**
254
+ * Whether this is a first-party client. Always `false` for CIMD clients.
255
+ */
256
+ isFirstParty?: pulumi.Input<boolean>;
257
+ /**
258
+ * URL for the JSON Web Key Set (JWKS) containing the public keys used for `privateKeyJwt` authentication.
259
+ */
260
+ jwksUri?: pulumi.Input<string>;
261
+ /**
262
+ * Configuration settings for the JWTs issued for this client.
263
+ */
264
+ jwtConfiguration?: pulumi.Input<inputs.ClientCimdJwtConfiguration>;
265
+ /**
266
+ * URL of the logo for this client, derived from the CIMD metadata document.
267
+ */
268
+ logoUri?: pulumi.Input<string>;
269
+ /**
270
+ * Name of the client, derived from the CIMD metadata document.
271
+ */
272
+ name?: pulumi.Input<string>;
273
+ /**
274
+ * Whether this client conforms to strict OIDC specifications. Must be `true` for CIMD clients.
275
+ */
276
+ oidcConformant?: pulumi.Input<boolean>;
277
+ /**
278
+ * Methods for discovering organizations during the pre*login*prompt. Can include `email` (allows users to find their organization by entering their email address) and/or `organizationName` (requires users to enter the organization name directly). These methods can be combined. Setting this property requires that `organizationRequireBehavior` is set to `preLoginPrompt`.
279
+ */
280
+ organizationDiscoveryMethods?: pulumi.Input<pulumi.Input<string>[]>;
281
+ /**
282
+ * Controls whether Auth0 redirects users to the application's callback URL on authentication errors or in email verification flows.
283
+ */
284
+ redirectionPolicy?: pulumi.Input<string>;
285
+ /**
286
+ * Configuration settings for the refresh tokens issued for this client.
287
+ */
288
+ refreshToken?: pulumi.Input<inputs.ClientCimdRefreshToken>;
289
+ /**
290
+ * Makes the use of Proof-of-Possession mandatory for this client.
291
+ */
292
+ requireProofOfPossession?: pulumi.Input<boolean>;
293
+ /**
294
+ * List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
295
+ */
296
+ signingKeys?: pulumi.Input<pulumi.Input<{
297
+ [key: string]: pulumi.Input<string>;
298
+ }>[]>;
299
+ /**
300
+ * Indicates whether the confirmation prompt appears when using non-verifiable callback URIs. Set to true to skip the prompt, false to show it.
301
+ */
302
+ skipNonVerifiableCallbackUriConfirmationPrompt?: pulumi.Input<boolean>;
303
+ /**
304
+ * Security mode for third-party clients. `strict` enforces enhanced security controls
305
+ */
306
+ thirdPartySecurityMode?: pulumi.Input<string>;
307
+ /**
308
+ * The token quota configuration.
309
+ */
310
+ tokenQuota?: pulumi.Input<inputs.ClientCimdTokenQuota>;
311
+ /**
312
+ * Validation result of the CIMD metadata document.
313
+ */
314
+ validations?: pulumi.Input<pulumi.Input<inputs.ClientCimdValidation>[]>;
315
+ /**
316
+ * URLs that represent valid web origins for use with web message response mode.
317
+ */
318
+ webOrigins?: pulumi.Input<pulumi.Input<string>[]>;
319
+ }
320
+ /**
321
+ * The set of arguments for constructing a ClientCimd resource.
322
+ */
323
+ export interface ClientCimdArgs {
324
+ /**
325
+ * URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
326
+ */
327
+ allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
328
+ /**
329
+ * Type of application the client represents. CIMD clients only support `native`, `spa`, and `regularWeb`.
330
+ */
331
+ appType?: pulumi.Input<string>;
332
+ /**
333
+ * Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: `:,-+=_*?"/\()<>@ [Tab] [Space]`.
334
+ */
335
+ clientMetadata?: pulumi.Input<{
336
+ [key: string]: pulumi.Input<string>;
337
+ }>;
338
+ /**
339
+ * Configure and associate an organization with the Client
340
+ */
341
+ defaultOrganization?: pulumi.Input<inputs.ClientCimdDefaultOrganization>;
342
+ /**
343
+ * Description of the purpose of the client.
344
+ */
345
+ description?: pulumi.Input<string>;
346
+ /**
347
+ * The HTTPS URL of the Client ID Metadata Document. Must include a path component (e.g. `https://app.example.com/client.json`). This value is immutable after creation.
348
+ */
349
+ externalClientId: pulumi.Input<string>;
350
+ /**
351
+ * Version number for external*client*id metadata document changes. Update this value to sync the client with the latest values of the json metadata document.
352
+ */
353
+ externalClientIdVersion?: pulumi.Input<number>;
354
+ /**
355
+ * Types of grants that this client is authorized to use. CIMD clients support `authorizationCode` and `refreshToken`.
356
+ */
357
+ grantTypes?: pulumi.Input<pulumi.Input<string>[]>;
358
+ /**
359
+ * Configuration settings for the JWTs issued for this client.
360
+ */
361
+ jwtConfiguration?: pulumi.Input<inputs.ClientCimdJwtConfiguration>;
362
+ /**
363
+ * Whether this client conforms to strict OIDC specifications. Must be `true` for CIMD clients.
364
+ */
365
+ oidcConformant?: pulumi.Input<boolean>;
366
+ /**
367
+ * Methods for discovering organizations during the pre*login*prompt. Can include `email` (allows users to find their organization by entering their email address) and/or `organizationName` (requires users to enter the organization name directly). These methods can be combined. Setting this property requires that `organizationRequireBehavior` is set to `preLoginPrompt`.
368
+ */
369
+ organizationDiscoveryMethods?: pulumi.Input<pulumi.Input<string>[]>;
370
+ /**
371
+ * Controls whether Auth0 redirects users to the application's callback URL on authentication errors or in email verification flows.
372
+ */
373
+ redirectionPolicy?: pulumi.Input<string>;
374
+ /**
375
+ * Configuration settings for the refresh tokens issued for this client.
376
+ */
377
+ refreshToken?: pulumi.Input<inputs.ClientCimdRefreshToken>;
378
+ /**
379
+ * Makes the use of Proof-of-Possession mandatory for this client.
380
+ */
381
+ requireProofOfPossession?: pulumi.Input<boolean>;
382
+ /**
383
+ * Indicates whether the confirmation prompt appears when using non-verifiable callback URIs. Set to true to skip the prompt, false to show it.
384
+ */
385
+ skipNonVerifiableCallbackUriConfirmationPrompt?: pulumi.Input<boolean>;
386
+ /**
387
+ * The token quota configuration.
388
+ */
389
+ tokenQuota?: pulumi.Input<inputs.ClientCimdTokenQuota>;
390
+ /**
391
+ * URLs that represent valid web origins for use with web message response mode.
392
+ */
393
+ webOrigins?: pulumi.Input<pulumi.Input<string>[]>;
394
+ }