auth0 4.0.0-beta.6 → 4.0.0-beta.7

package/dist/esm/management/__generated/managers/blacklists-manager.d.ts

@@ -0,0 +1,28 @@
+import * as runtime from '../../../lib/runtime.js';
+import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
+import type { Token, GetTokensRequest } from '../models/index.js';
+declare const BaseAPI: typeof runtime.BaseAPI;
+/**
+ *
+ */
+export declare class BlacklistsManager extends BaseAPI {
+    /**
+     * Retrieve the `jti` and `aud` of all tokens that are blacklisted.
+     *
+     * Note: The <a href="https://auth0.com/docs/jwt">JWT specification</a> states that the `jti` field can be used to prevent replay attacks. Though Auth0 tokens do not include a `jti`, you can nevertheless blacklist a `jti` to prevent a token being used more than a predetermined number of times. This behavior is similar to implementing a nonce (where the token's signature can be thought of as the nonce). If a token gets stolen, it (or the tokens issued after it) should be blacklisted and let expire.
+     *
+     * Get blacklisted tokens
+     *
+     * @throws {RequiredError}
+     */
+    getAll(requestParameters?: GetTokensRequest, initOverrides?: InitOverride): Promise<ApiResponse<Array<Token>>>;
+    /**
+     * Add the token identified by the `jti` to a blacklist for the tenant.
+     *
+     * Blacklist a token
+     *
+     * @throws {RequiredError}
+     */
+    add(bodyParameters: Token, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+}
+export {};

package/dist/esm/management/__generated/managers/branding-manager.d.ts

@@ -0,0 +1,103 @@
+import * as runtime from '../../../lib/runtime.js';
+import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
+import type { GetBranding200Response, GetUniversalLogin200Response, PatchBrandingRequest, PostBrandingTheme200Response, PostBrandingThemeRequest, PutUniversalLoginRequest, DeleteBrandingThemeRequest, GetBrandingThemeRequest, PatchBrandingThemeRequest } from '../models/index.js';
+declare const BaseAPI: typeof runtime.BaseAPI;
+/**
+ *
+ */
+export declare class BrandingManager extends BaseAPI {
+    /**
+     * Delete branding theme.
+     * Delete branding theme
+     *
+     * @throws {RequiredError}
+     */
+    deleteTheme(requestParameters: DeleteBrandingThemeRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Delete template for New Universal Login Experience
+     *
+     * @throws {RequiredError}
+     */
+    deleteUniversalLoginTemplate(initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Retrieve branding settings.
+     * Get branding settings
+     *
+     * @throws {RequiredError}
+     */
+    getSettings(initOverrides?: InitOverride): Promise<ApiResponse<GetBranding200Response>>;
+    /**
+     * Retrieve branding theme.
+     * Get branding theme
+     *
+     * @throws {RequiredError}
+     */
+    getTheme(requestParameters: GetBrandingThemeRequest, initOverrides?: InitOverride): Promise<ApiResponse<PostBrandingTheme200Response>>;
+    /**
+     * Retrieve default branding theme.
+     * Get default branding theme
+     *
+     * @throws {RequiredError}
+     */
+    getDefaultTheme(initOverrides?: InitOverride): Promise<ApiResponse<PostBrandingTheme200Response>>;
+    /**
+     * Get template for New Universal Login Experience
+     *
+     * @throws {RequiredError}
+     */
+    getUniversalLoginTemplate(initOverrides?: InitOverride): Promise<ApiResponse<GetUniversalLogin200Response>>;
+    /**
+     * Update branding settings.
+     * Update branding settings
+     *
+     * @throws {RequiredError}
+     */
+    updateSettings(bodyParameters: PatchBrandingRequest, initOverrides?: InitOverride): Promise<ApiResponse<GetBranding200Response>>;
+    /**
+     * Update branding theme.
+     * Update branding theme
+     *
+     * @throws {RequiredError}
+     */
+    updateTheme(requestParameters: PatchBrandingThemeRequest, bodyParameters: PostBrandingThemeRequest, initOverrides?: InitOverride): Promise<ApiResponse<PostBrandingTheme200Response>>;
+    /**
+     * Create branding theme.
+     * Create branding theme
+     *
+     * @throws {RequiredError}
+     */
+    createTheme(bodyParameters: PostBrandingThemeRequest, initOverrides?: InitOverride): Promise<ApiResponse<PostBrandingTheme200Response>>;
+    /**
+     * Update the Universal Login branding template.
+     *
+     * <p>When <code>content-type</code> header is set to <code>application/json</code>, the expected body must be JSON:</p>
+     * <pre>
+     * {
+     *   "template": "&lt;!DOCTYPE html&gt;&lt;html&gt;&lt;head&gt;{%- auth0:head -%}&lt;/head&gt;&lt;body&gt;{%- auth0:widget -%}&lt;/body&gt;&lt;/html&gt;"
+     * }
+     * </pre>
+     *
+     * <p>
+     *   When <code>content-type</code> header is set to <code>text/html</code>, the expected body must be the HTML template:
+     * </p>
+     * <pre>
+     * &lt!DOCTYPE html&gt;
+     * &lt;code&gt;
+     *   &lt;html&gt;
+     *     &lt;head&gt;
+     *      {%- auth0:head -%}
+     *     &lt;/head&gt;
+     *     &lt;body&gt;
+     *       {%- auth0:widget -%}
+     *     &lt;/body&gt;
+     *   &lt;/html&gt;
+     * &lt;/code&gt;
+     * </pre>
+     *
+     * Set template for New Universal Login Experience
+     *
+     * @throws {RequiredError}
+     */
+    setUniversalLoginTemplate(bodyParameters: PutUniversalLoginRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+}
+export {};

package/dist/esm/management/__generated/managers/client-grants-manager.d.ts

@@ -0,0 +1,42 @@
+import * as runtime from '../../../lib/runtime.js';
+import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
+import type { ClientGrant, ClientGrantCreate, PatchClientGrantsByIdRequest, GetClientGrants200ResponseOneOf, DeleteClientGrantsByIdRequest, GetClientGrantsRequest, PatchClientGrantsByIdOperationRequest } from '../models/index.js';
+declare const BaseAPI: typeof runtime.BaseAPI;
+/**
+ *
+ */
+export declare class ClientGrantsManager extends BaseAPI {
+    /**
+     * Delete a client grant.
+     * Delete client grant
+     *
+     * @throws {RequiredError}
+     */
+    delete(requestParameters: DeleteClientGrantsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Retrieve <a href="https://auth0.com/docs/api-auth/grant/client-credentials">client grants</a>.
+     *
+     * Get client grants
+     *
+     * @throws {RequiredError}
+     */
+    getAll(requestParameters: GetClientGrantsRequest & {
+        include_totals: true;
+    }, initOverrides?: InitOverride): Promise<ApiResponse<GetClientGrants200ResponseOneOf>>;
+    getAll(requestParameters?: GetClientGrantsRequest, initOverrides?: InitOverride): Promise<ApiResponse<Array<ClientGrant>>>;
+    /**
+     * Update a client grant.
+     * Update client grant
+     *
+     * @throws {RequiredError}
+     */
+    update(requestParameters: PatchClientGrantsByIdOperationRequest, bodyParameters: PatchClientGrantsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<ClientGrant>>;
+    /**
+     * Create a client grant.
+     * Create client grant
+     *
+     * @throws {RequiredError}
+     */
+    create(bodyParameters: ClientGrantCreate, initOverrides?: InitOverride): Promise<ApiResponse<ClientGrant>>;
+}
+export {};

package/dist/esm/management/__generated/managers/clients-manager.d.ts

@@ -0,0 +1,168 @@
+import * as runtime from '../../../lib/runtime.js';
+import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
+import type { Client, ClientCreate, ClientUpdate, GetCredentials200ResponseInner, PatchCredentialsByCredentialIdRequest, PostCredentialsRequest, DeleteClientsByIdRequest, DeleteCredentialsByCredentialIdRequest, GetClientsRequest, GetClientsByIdRequest, GetCredentialsRequest, GetCredentialsByCredentialIdRequest, PatchClientsByIdRequest, PatchCredentialsByCredentialIdOperationRequest, PostCredentialsOperationRequest, PostRotateSecretRequest } from '../models/index.js';
+declare const BaseAPI: typeof runtime.BaseAPI;
+/**
+ *
+ */
+export declare class ClientsManager extends BaseAPI {
+    /**
+     * Delete a client and related configuration (rules, connections, etc).
+     * Delete a client
+     *
+     * @throws {RequiredError}
+     */
+    delete(requestParameters: DeleteClientsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Delete a client credential
+     *
+     * @throws {RequiredError}
+     */
+    deleteCredential(requestParameters: DeleteCredentialsByCredentialIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Retrieve clients (applications and SSO integrations) matching provided filters. A list of fields to include or exclude
+     * may also be specified. Note:
+     * <ul>
+     *   <li><code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code> can be retrieved with
+     *     any scope.
+     *   </li>
+     *   <li><code>callbacks</code>, <code>oidc_backchannel_logout</code>, <code>allowed_origins</code>,
+     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
+     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
+     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
+     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
+     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
+     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
+     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
+     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
+     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
+     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
+     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
+     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>organization_usage</code>,
+     *     <code>organization_require_behavior</code>
+     *     properties can only be retrieved with the <code>read:clients</code> or
+     *     <code>read:client_keys</code> scope.
+     *   </li>
+     *   <li><code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
+     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code> properties can only be retrieved with the
+     *     <code>read:client_keys</code> or <code>read:client_credentials</code> scope.
+     *   </li>
+     * </ul>
+     *
+     * Get clients
+     *
+     * @throws {RequiredError}
+     */
+    getAll(requestParameters?: GetClientsRequest, initOverrides?: InitOverride): Promise<ApiResponse<Array<Client>>>;
+    /**
+     * Retrieve client details. A list of fields to include or exclude may also be specified. Note:
+     * <ul>
+     *   <li><code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code> can be retrieved with
+     *     the any of the scopes.
+     *   </li>
+     *   <li><code>callbacks</code>, <code>oidc_backchannel_logout</code>, <code>allowed_origins</code>,
+     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
+     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
+     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
+     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
+     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
+     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
+     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
+     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
+     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
+     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
+     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
+     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>organization_usage</code>,
+     *     <code>organization_require_behavior</code>
+     *     properties can only be retrieved with the <code>read:clients</code> or
+     *     <code>read:client_keys</code> scope.
+     *   </li>
+     *   <li><code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
+     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code> properties can only be retrieved with the
+     *     <code>read:client_keys</code> or <code>read:client_credentials</code> scope.
+     *   </li>
+     * </ul>
+     *
+     * Get a client
+     *
+     * @throws {RequiredError}
+     */
+    get(requestParameters: GetClientsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<Client>>;
+    /**
+     * Get the list of client credentials that are associated to the client.
+     *
+     * Important: To enable credentials to be used for Private Key JWT authentication method, set the <code>client_authentication_methods</code> property on the client.
+     * Get client credentials
+     *
+     * @throws {RequiredError}
+     */
+    getCredentials(requestParameters: GetCredentialsRequest, initOverrides?: InitOverride): Promise<ApiResponse<Array<GetCredentials200ResponseInner>>>;
+    /**
+     * Get the details of a client credential.
+     * Get client credential
+     *
+     * @throws {RequiredError}
+     */
+    getCredential(requestParameters: GetCredentialsByCredentialIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<GetCredentials200ResponseInner>>;
+    /**
+     * Notes:
+     * - The `client_secret` and `signing_key` attributes can only be updated with the `update:client_keys` scope.
+     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use
+     * <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code>
+     * to configure the client with client secret (basic or post) or with no authentication method (none).
+     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, only specify the credential IDs
+     * that were generated when creating the credentials on the client.
+     * - To configure <code>client_authentication_methods</code>, the <code>update:client_credentials</code> scope is required.
+     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
+     * Update a client
+     *
+     * @throws {RequiredError}
+     */
+    update(requestParameters: PatchClientsByIdRequest, bodyParameters: ClientUpdate, initOverrides?: InitOverride): Promise<ApiResponse<Client>>;
+    /**
+     * Update a client credential
+     *
+     * @throws {RequiredError}
+     */
+    updateCredential(requestParameters: PatchCredentialsByCredentialIdOperationRequest, bodyParameters: PatchCredentialsByCredentialIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<GetCredentials200ResponseInner>>;
+    /**
+     * Create a new client (application or SSO integration).
+     *
+     * Notes:
+     * - We recommend leaving the `client_secret` parameter unspecified to allow the generation of a safe secret.
+     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use
+     * <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code>
+     * to configure the client with client secret (basic or post) or with no authentication method (none).
+     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, specify fully defined credentials.
+     * These credentials will be automatically enabled for Private Key JWT authentication on the client.
+     * - To configure <code>client_authentication_methods</code>, the <code>create:client_credentials</code> scope is required.
+     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
+     *
+     * <div class="alert alert-warning">SSO Integrations created via this endpoint will accept login requests and share user profile information.</div>
+     *
+     * Create a client
+     *
+     * @throws {RequiredError}
+     */
+    create(bodyParameters: ClientCreate, initOverrides?: InitOverride): Promise<ApiResponse<Client>>;
+    /**
+     * Create a client credential associated to the client. The credential will be created but not yet enabled for use with Private Key JWT authentication method. To enable the credential, set the <code>client_authentication_methods</code> property on the client.
+     * Create a client credential
+     *
+     * @throws {RequiredError}
+     */
+    createCredential(requestParameters: PostCredentialsOperationRequest, bodyParameters: PostCredentialsRequest, initOverrides?: InitOverride): Promise<ApiResponse<GetCredentials200ResponseInner>>;
+    /**
+     * Rotate a client secret.
+     *
+     * This endpoint cannot be used with clients configured with Private Key JWT authentication method (client_authentication_methods configured with private_key_jwt).
+     *
+     * Note: The generated secret is NOT base64 encoded.
+     *
+     * Rotate a client secret
+     *
+     * @throws {RequiredError}
+     */
+    rotateClientSecret(requestParameters: PostRotateSecretRequest, initOverrides?: InitOverride): Promise<ApiResponse<Client>>;
+}
+export {};

package/dist/esm/management/__generated/managers/connections-manager.d.ts

@@ -0,0 +1,87 @@
+import * as runtime from '../../../lib/runtime.js';
+import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
+import type { Connection, ConnectionCreate, ConnectionUpdate, GetConnections200ResponseOneOf, DeleteConnectionsByIdRequest, DeleteUsersByEmailRequest, GetConnectionsRequest, GetConnectionsByIdRequest, GetStatusRequest, PatchConnectionsByIdRequest } from '../models/index.js';
+declare const BaseAPI: typeof runtime.BaseAPI;
+/**
+ *
+ */
+export declare class ConnectionsManager extends BaseAPI {
+    /**
+     * Deletes a connection and all its users.
+     *
+     * Delete a connection
+     *
+     * @throws {RequiredError}
+     */
+    delete(requestParameters: DeleteConnectionsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Deletes a specified connection user by its email (you cannot delete all users from specific connection). Currently, only Database Connections are supported.
+     *
+     * Delete a connection user
+     *
+     * @throws {RequiredError}
+     */
+    deleteUserByEmail(requestParameters: DeleteUsersByEmailRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Retrieves every connection matching the specified strategy. All connections are retrieved if no strategy is being specified. Accepts a list of fields to include or exclude in the resulting list of connection objects.
+     * This endpoint supports two types of pagination:
+     * - Offset pagination
+     * - Checkpoint pagination
+     *
+     * Checkpoint pagination should be used if you need to retrieve more than 1000 connections.
+     *
+     * <h2>Checkpoint Pagination</h2>
+     *
+     * To search by checkpoint, use the following parameters:
+     * - from: Optional id from which to start selection.
+     * - take: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+     *
+     * The first time you call this endpoint using Checkpoint Pagination, you should omit the <code>from</code> parameter.
+     * If there are more results, a <code>next</code> value will be included in the response. You can use this for subsequent API calls.
+     * When <code>next</code> is no longer included in the response, this indicates there are no more pages remaining.
+     *
+     * Note: The <code>include_totals</code> parameter is not supported when using checkpoint pagination.
+     * Get all connections
+     *
+     * @throws {RequiredError}
+     */
+    getAll(requestParameters: GetConnectionsRequest & {
+        include_totals: true;
+    }, initOverrides?: InitOverride): Promise<ApiResponse<GetConnections200ResponseOneOf>>;
+    getAll(requestParameters?: GetConnectionsRequest, initOverrides?: InitOverride): Promise<ApiResponse<Array<Connection>>>;
+    /**
+     * Retrieves a connection by its <code>ID</code>.
+     *
+     * Get a connection
+     *
+     * @throws {RequiredError}
+     */
+    get(requestParameters: GetConnectionsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<Connection>>;
+    /**
+     * Retrieves the status of an ad/ldap connection referenced by its <code>ID</code>. <code>200 OK</code> http status code response is returned  when the connection is online, otherwise a <code>404</code> status code is returned along with an error message
+     * Check connection status
+     *
+     * @throws {RequiredError}
+     */
+    checkStatus(requestParameters: GetStatusRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * <b>Note:</b> if you use the options parameter, the whole options object will be overridden, so ensure that all parameters are present
+     *
+     * Update a connection
+     *
+     * @throws {RequiredError}
+     */
+    update(requestParameters: PatchConnectionsByIdRequest, bodyParameters: ConnectionUpdate, initOverrides?: InitOverride): Promise<ApiResponse<Connection>>;
+    /**
+     * Creates a new connection according to the JSON object received in <code>body</code>.
+     *  The samples on the right show all available attributes. Mandatory attributes are <code>name</code> and <code>strategy</code>.
+     *  Valid Strategy names are: <code>ad</code>, <code>adfs</code>, <code>amazon</code>, <code>apple</code>, <code>dropbox</code>, <code>bitbucket</code>, <code>aol</code>, <code>auth0-oidc</code>, <code>auth0</code>, <code>baidu</code>, <code>bitly</code>, <code>box</code>, <code>custom</code>, <code>daccount</code>, <code>dwolla</code>, <code>email</code>, <code>evernote-sandbox</code>, <code>evernote</code>, <code>exact</code>, <code>facebook</code>, <code>fitbit</code>, <code>flickr</code>, <code>github</code>, <code>google-apps</code>, <code>google-oauth2</code>, <code>instagram</code>, <code>ip</code>, <code>line</code>, <code>linkedin</code>, <code>miicard</code>, <code>oauth1</code>, <code>oauth2</code>, <code>office365</code>, <code>oidc</code>, <code>okta</code>, <code>paypal</code>, <code>paypal-sandbox</code>, <code>pingfederate</code>, <code>planningcenter</code>, <code>renren</code>, <code>salesforce-community</code>, <code>salesforce-sandbox</code>, <code>salesforce</code>, <code>samlp</code>, <code>sharepoint</code>, <code>shopify</code>, <code>sms</code>, <code>soundcloud</code>, <code>thecity-sandbox</code>, <code>thecity</code>, <code>thirtysevensignals</code>, <code>twitter</code>, <code>untappd</code>, <code>vkontakte</code>, <code>waad</code>, <code>weibo</code>, <code>windowslive</code>, <code>wordpress</code>, <code>yahoo</code>, <code>yammer</code>, <code>yandex</code>
+     *
+     * <div class="alert alert-warning">Connections created via this endpoint may redirect users to log in, receive and store user identities, and update user root profiles</div>
+     * Create a connection
+     *
+     * @throws {RequiredError}
+     */
+    create(bodyParameters: ConnectionCreate, initOverrides?: InitOverride): Promise<ApiResponse<Connection>>;
+}
+export {};

package/dist/esm/management/__generated/managers/custom-domains-manager.d.ts

@@ -0,0 +1,106 @@
+import * as runtime from '../../../lib/runtime.js';
+import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
+import type { CustomDomain, PatchCustomDomainsByIdRequest, PostCustomDomains201Response, PostCustomDomainsRequest, PostVerify200Response, DeleteCustomDomainsByIdRequest, GetCustomDomainsByIdRequest, PatchCustomDomainsByIdOperationRequest, PostVerifyRequest } from '../models/index.js';
+declare const BaseAPI: typeof runtime.BaseAPI;
+/**
+ *
+ */
+export declare class CustomDomainsManager extends BaseAPI {
+    /**
+     * Delete a custom domain and stop serving requests for it.
+     * Delete custom domain configuration
+     *
+     * @throws {RequiredError}
+     */
+    delete(requestParameters: DeleteCustomDomainsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Retrieve details on <a href="https://auth0.com/docs/custom-domains">custom domains</a>.
+     * Get custom domains configurations
+     *
+     * @throws {RequiredError}
+     */
+    getAll(initOverrides?: InitOverride): Promise<ApiResponse<Array<CustomDomain>>>;
+    /**
+     * Retrieve a custom domain configuration and status.
+     * Get custom domain configuration
+     *
+     * @throws {RequiredError}
+     */
+    get(requestParameters: GetCustomDomainsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<CustomDomain>>;
+    /**
+     * Update a custom domain.
+     *
+     * These are the attributes that can be updated:
+     *
+     * - custom_client_ip_header
+     * - tls_policy
+     *
+     * <h5>Updating CUSTOM_CLIENT_IP_HEADER for a custom domain</h5>To update the <code>custom_client_ip_header</code> for a domain, the body to
+     * send should be:
+     * <pre><code>{ "custom_client_ip_header": "cf-connecting-ip" }</code></pre>
+     *
+     * <h5>Updating TLS_POLICY for a custom domain</h5>To update the <code>tls_policy</code> for a domain, the body to send should be:
+     * <pre><code>{ "tls_policy": "compatible" }</code></pre>
+     *
+     *
+     * TLS Policies:
+     *
+     * - recommended - for modern usage this includes TLS 1.2 only
+     * - compatible - compatible with older browsers this policy includes TLS 1.0, 1.1, 1.2
+     *
+     *
+     * Some considerations:
+     *
+     * - The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
+     * - Do not use the <code>compatible</code> TLS policy unless you have clients that require TLS 1.0.
+     *
+     * Update custom domain configuration
+     *
+     * @throws {RequiredError}
+     */
+    update(requestParameters: PatchCustomDomainsByIdOperationRequest, bodyParameters: PatchCustomDomainsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<PostCustomDomains201Response>>;
+    /**
+     * Create a new custom domain.
+     *
+     * Note: The custom domain will need to be verified before it will accept
+     * requests.
+     *
+     * Optional attributes that can be updated:
+     *
+     * - custom_client_ip_header
+     * - tls_policy
+     *
+     *
+     * TLS Policies:
+     *
+     * - recommended - for modern usage this includes TLS 1.2 only
+     * - compatible - compatible with older browsers this policy includes TLS 1.0, 1.1, 1.2
+     *
+     *
+     * Some considerations:
+     *
+     * - The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
+     * - Do not use the <code>compatible</code> TLS policy unless you have clients that require TLS 1.0.
+     *
+     * Configure a new custom domain
+     *
+     * @throws {RequiredError}
+     */
+    create(bodyParameters: PostCustomDomainsRequest, initOverrides?: InitOverride): Promise<ApiResponse<PostCustomDomains201Response>>;
+    /**
+     * Run the verification process on a custom domain.
+     *
+     * Note: Check the <code>status</code> field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
+     *
+     * For <code>self_managed_certs</code>, when the custom domain is verified for the first time, the response will also include the <code>cname_api_key</code> which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
+     *
+     * <a href="https://auth0.com/docs/custom-domains#step-2-verify-ownership">Learn more</a> about verifying custom domains that use Auth0 Managed certificates.
+     * <a href="https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership">Learn more</a> about verifying custom domains that use Self Managed certificates.
+     *
+     * Verify a custom domain
+     *
+     * @throws {RequiredError}
+     */
+    verify(requestParameters: PostVerifyRequest, initOverrides?: InitOverride): Promise<ApiResponse<PostVerify200Response>>;
+}
+export {};

package/dist/esm/management/__generated/managers/device-credentials-manager.d.ts

@@ -0,0 +1,42 @@
+import * as runtime from '../../../lib/runtime.js';
+import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
+import type { DeviceCredentialCreate, PostDeviceCredentials201Response, GetDeviceCredentials200ResponseOneOf, DeviceCredential, DeleteDeviceCredentialsByIdRequest, GetDeviceCredentialsRequest } from '../models/index.js';
+declare const BaseAPI: typeof runtime.BaseAPI;
+/**
+ *
+ */
+export declare class DeviceCredentialsManager extends BaseAPI {
+    /**
+     * Delete a device credential.
+     * Delete a device credential
+     *
+     * @throws {RequiredError}
+     */
+    delete(requestParameters: DeleteDeviceCredentialsByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
+     * Device Credentials relate to refresh tokens and rotating refresh tokens for a given user_id.
+     *
+     * Note: Device Credentials APIs are designed for ad-hoc administrative use only, and paging is by default enabled for GET requests.
+     * Note: When Refresh Token Rotation is enabled, the endpoint becomes eventual consistent.
+     *
+     * Retrieve device credentials
+     *
+     * @throws {RequiredError}
+     */
+    getAll(requestParameters: GetDeviceCredentialsRequest & {
+        include_totals: true;
+    }, initOverrides?: InitOverride): Promise<ApiResponse<GetDeviceCredentials200ResponseOneOf>>;
+    getAll(requestParameters?: GetDeviceCredentialsRequest, initOverrides?: InitOverride): Promise<ApiResponse<Array<DeviceCredential>>>;
+    /**
+     * Device Credentials relate to refresh tokens and rotating refresh tokens for a given user_id.
+     *
+     * Note: Device Credentials APIs are designed for ad-hoc administrative use only, and paging is by default enabled for GET requests.
+     * Note: When Refresh Token Rotation is enabled, the endpoint becomes eventual consistent.
+     *
+     * Create a device public key credential
+     *
+     * @throws {RequiredError}
+     */
+    createPublicKey(bodyParameters: DeviceCredentialCreate, initOverrides?: InitOverride): Promise<ApiResponse<PostDeviceCredentials201Response>>;
+}
+export {};

package/dist/esm/management/__generated/managers/email-templates-manager.d.ts

@@ -0,0 +1,38 @@
+import * as runtime from '../../../lib/runtime.js';
+import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
+import type { EmailTemplateUpdate, GetEmailTemplatesByTemplateName200Response, PostEmailTemplatesRequest, GetEmailTemplatesByTemplateNameRequest, PatchEmailTemplatesByTemplateNameRequest, PutEmailTemplatesByTemplateNameRequest } from '../models/index.js';
+declare const BaseAPI: typeof runtime.BaseAPI;
+/**
+ *
+ */
+export declare class EmailTemplatesManager extends BaseAPI {
+    /**
+     * Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `reset_email`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, and `user_invitation`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.
+     * Get an email template
+     *
+     * @throws {RequiredError}
+     */
+    get(requestParameters: GetEmailTemplatesByTemplateNameRequest, initOverrides?: InitOverride): Promise<ApiResponse<GetEmailTemplatesByTemplateName200Response>>;
+    /**
+     * Modify an email template.
+     * Patch an email template
+     *
+     * @throws {RequiredError}
+     */
+    update(requestParameters: PatchEmailTemplatesByTemplateNameRequest, bodyParameters: GetEmailTemplatesByTemplateName200Response, initOverrides?: InitOverride): Promise<ApiResponse<GetEmailTemplatesByTemplateName200Response>>;
+    /**
+     * Create an email template.
+     * Create an email template
+     *
+     * @throws {RequiredError}
+     */
+    create(bodyParameters: PostEmailTemplatesRequest, initOverrides?: InitOverride): Promise<ApiResponse<PostEmailTemplatesRequest>>;
+    /**
+     * Update an email template.
+     * Update an email template
+     *
+     * @throws {RequiredError}
+     */
+    put(requestParameters: PutEmailTemplatesByTemplateNameRequest, bodyParameters: EmailTemplateUpdate, initOverrides?: InitOverride): Promise<ApiResponse<PostEmailTemplatesRequest>>;
+}
+export {};