auth0 4.16.0 → 4.18.0

package/dist/cjs/auth/index.d.ts

@@ -1,8 +1,9 @@
-import { Backchannel } from './backchannel.js';
+import { IBackchannel } from './backchannel.js';
 import { AuthenticationClientOptions } from './base-auth-api.js';
 import { Database } from './database.js';
 import { OAuth } from './oauth.js';
 import { Passwordless } from './passwordless.js';
+import { ICustomTokenExchange } from './tokenExchange.js';
 export * from './database.js';
 export * from './oauth.js';
 export * from './passwordless.js';
@@ -12,6 +13,7 @@ export declare class AuthenticationClient {
     database: Database;
     oauth: OAuth;
     passwordless: Passwordless;
-    backchannel: Backchannel;
+    backchannel: IBackchannel;
+    tokenExchange: ICustomTokenExchange;
     constructor(options: AuthenticationClientOptions);
 }

package/dist/cjs/auth/index.js

@@ -19,6 +19,7 @@ const backchannel_js_1 = require("./backchannel.js");
 const database_js_1 = require("./database.js");
 const oauth_js_1 = require("./oauth.js");
 const passwordless_js_1 = require("./passwordless.js");
+const tokenExchange_js_1 = require("./tokenExchange.js");
 __exportStar(require("./database.js"), exports);
 __exportStar(require("./oauth.js"), exports);
 __exportStar(require("./passwordless.js"), exports);
@@ -32,6 +33,7 @@ class AuthenticationClient {
         this.oauth = new oauth_js_1.OAuth(options);
         this.passwordless = new passwordless_js_1.Passwordless(options);
         this.backchannel = new backchannel_js_1.Backchannel(options);
+        this.tokenExchange = new tokenExchange_js_1.CustomTokenExchange(options);
     }
 }
 exports.AuthenticationClient = AuthenticationClient;

package/dist/cjs/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,qDAA+C;AAE/C,+CAAyC;AACzC,yCAAmC;AACnC,uDAAiD;AAEjD,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,iEAAwF;AAAvD,8HAAA,qBAAqB,OAAA;AACtD,uDAA+E;AAAtE,gHAAA,YAAY,OAAA;AAErB,MAAa,oBAAoB;IAM/B,YAAY,OAAoC;QAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAK,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,8BAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;CACF;AAZD,oDAYC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,qDAA6D;AAE7D,+CAAyC;AACzC,yCAAmC;AACnC,uDAAiD;AACjD,yDAA+E;AAE/E,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,iEAAwF;AAAvD,8HAAA,qBAAqB,OAAA;AACtD,uDAA+E;AAAtE,gHAAA,YAAY,OAAA;AAErB,MAAa,oBAAoB;IAO/B,YAAY,OAAoC;QAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAK,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,8BAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,IAAI,sCAAmB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;CACF;AAdD,oDAcC"}

package/dist/cjs/auth/oauth.d.ts

@@ -1,6 +1,6 @@
 import { InitOverride, JSONApiResponse, VoidApiResponse } from '../lib/runtime.js';
 import { BaseAuthAPI, AuthenticationClientOptions } from './base-auth-api.js';
-import { IDTokenValidateOptions } from './id-token-validator.js';
+import { IDTokenValidateOptions, IDTokenValidator } from './id-token-validator.js';
 export interface TokenSet {
     /**
      * The access token.
@@ -71,11 +71,18 @@ export interface AuthorizationCodeGrantWithPKCERequest extends AuthorizationCode
      */
     code_verifier: string;
 }
+/**
+ * Represents a request for a client credentials grant in the OAuth 2.0 framework, specific to Auth0 implementation.
+ *
+ * @property audience - The unique identifier of the target API you want to access.
+ * @property organization - The identifier of the organization for which the request is being made.
+ */
 export interface ClientCredentialsGrantRequest extends ClientCredentials {
     /**
      * The unique identifier of the target API you want to access.
      */
     audience: string;
+    organization?: string;
 }
 export interface PushedAuthorizationRequest extends ClientCredentials {
     /**
@@ -228,7 +235,7 @@ export interface TokenExchangeGrantRequest {
  *  OAuth 2.0 flows.
  */
 export declare class OAuth extends BaseAuthAPI {
-    private idTokenValidator;
+    readonly idTokenValidator: IDTokenValidator;
     constructor(options: AuthenticationClientOptions);
     /**
      * This is the flow that regular web apps use to access an API.

package/dist/cjs/auth/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":";;;AAAA,kDAK2B;AAC3B,yDAAqF;AACrF,mEAAmF;AACnF,0CAAyC;AAoQzC;;GAEG;AACH,MAAa,KAAM,SAAQ,8BAAW;IAEpC,YAAY,OAAoC;QAC9C,KAAK,CAAC;YACJ,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,qBAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;SAC7E,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,wCAAgB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,8BAA8B,CAClC,cAAqD,EACrD,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzE,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,mBAAmB,CACvB,cAA0C,EAC1C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;QAE9F,MAAM,sCAAsC,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC/E,cAAc,CACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,GAAG,sCAAsC;aAC1C,CAAC;SACH,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,aAAa,CACjB,cAAoC,EACpC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,OAAO,IAAA,wBAAK,EACV,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,UAAU,EACtF,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CACrB,cAAwC,EACxC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAEjE,OAAO,IAAA,wBAAK,EACV,eAAe,EACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,kBAAkB,CACtB,cAAyC,EACzC,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;SAC1F,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;CACF;AAtRD,sBAsRC"}
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":";;;AAAA,kDAK2B;AAC3B,yDAAqF;AACrF,mEAAmF;AACnF,0CAAyC;AA2QzC;;GAEG;AACH,MAAa,KAAM,SAAQ,8BAAW;IAEpC,YAAY,OAAoC;QAC9C,KAAK,CAAC;YACJ,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,qBAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;SAC7E,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,wCAAgB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,8BAA8B,CAClC,cAAqD,EACrD,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzE,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,mBAAmB,CACvB,cAA0C,EAC1C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;QAE9F,MAAM,sCAAsC,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC/E,cAAc,CACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,GAAG,sCAAsC;aAC1C,CAAC;SACH,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,aAAa,CACjB,cAAoC,EACpC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,OAAO,IAAA,wBAAK,EACV,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,UAAU,EACtF,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CACrB,cAAwC,EACxC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAEjE,OAAO,IAAA,wBAAK,EACV,eAAe,EACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,kBAAkB,CACtB,cAAyC,EACzC,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;SAC1F,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;CACF;AAtRD,sBAsRC"}

package/dist/cjs/auth/tokenExchange.d.ts

@@ -0,0 +1,178 @@
+import { BaseAuthAPI } from './base-auth-api.js';
+/**
+ * Represents the configuration options required for initiating a Custom Token Exchange request
+ * following RFC 8693 specifications.
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc8693 | RFC 8693: OAuth 2.0 Token Exchange}
+ */
+export type CustomTokenExchangeOptions = {
+    /**
+     * The type identifier for the subject token being exchanged
+     *
+     * @pattern
+     * - Must be a namespaced URI under your organization's control
+     * - Forbidden patterns:
+     *   - `^urn:ietf:params:oauth:*` (IETF reserved)
+     *   - `^https:\/\/auth0\.com/*` (Auth0 reserved)
+     *   - `^urn:auth0:*` (Auth0 reserved)
+     *
+     * @example
+     * "urn:acme:legacy-system-token"
+     * "https://api.yourcompany.com/token-type/v1"
+     */
+    subject_token_type: string;
+    /**
+     * The opaque token value being exchanged for Auth0 tokens
+     *
+     * @security
+     * - Must be validated in Auth0 Actions using strong cryptographic verification
+     * - Implement replay attack protection
+     * - Recommended validation libraries: `jose`, `jsonwebtoken`
+     *
+     * @example
+     * "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
+     */
+    subject_token: string;
+    /**
+     * The target audience for the requested Auth0 token
+     *
+     * @remarks
+     * Must match exactly with an API identifier configured in your Auth0 tenant
+     *
+     * @example
+     * "https://api.your-service.com/v1"
+     */
+    audience: string;
+    /**
+     * Space-separated list of OAuth 2.0 scopes being requested
+     *
+     * @remarks
+     * Subject to API authorization policies configured in Auth0
+     *
+     * @example
+     * "openid profile email read:data write:data"
+     */
+    scope?: string;
+    /**
+     * Additional custom parameters for Auth0 Action processing
+     *
+     * @remarks
+     * Accessible in Action code via `event.request.body`
+     *
+     * @example
+     * ```typescript
+     * {
+     *   custom_parameter: "session_context",
+     *   device_fingerprint: "a3d8f7...",
+     * }
+     * ```
+     */
+    [key: string]: unknown;
+};
+/**
+ * Interface defining Custom Token Exchange operations
+ *
+ * @see {@link https://auth0.com/docs/authenticate/protocols/custom-token-exchange | Auth0 Custom Token Exchange Docs}
+ */
+export interface ICustomTokenExchange {
+    /**
+     * Executes RFC 8693-compliant token exchange flow
+     *
+     * @throws {Auth0Error} For structured error responses
+     * @throws {Error} For generic errors with these codes:
+     * - `invalid_request`: Invalid parameters
+     * - `consent_required`: Enable "Allow Skipping User Consent" in API settings
+     * - `too_many_attempts`: Suspicious IP throttling triggered
+     *
+     * @example
+     * ```typescript
+     * // External IdP migration scenario
+     * const tokens = await auth0.customTokenExchange.exchangeToken({
+     *   subject_token_type: 'urn:external-idp:legacy',
+     *   subject_token: externalIdPToken,
+     *   audience: 'https://api.your-service.com',
+     *   scope: 'openid profile'
+     * });
+     * ```
+     */
+    exchangeToken(options: CustomTokenExchangeOptions): Promise<TokenResponse>;
+}
+/**
+ * Implements Auth0's Custom Token Exchange functionality with security best practices
+ *
+ * @security
+ * - **HTTPS Enforcement**: All requests require TLS encryption
+ * - **Credential Protection**: Client secrets never exposed in browser contexts
+ * - **Input Validation**: Strict namespace enforcement for token types
+ *
+ * @example
+ * ```typescript
+ * // Secure token validation in Auth0 Action
+ * exports.onExecuteCustomTokenExchange = async (event, api) => {
+ *   const { jws } = require('jose');
+ *   const { createRemoteJWKSet } = require('jose/jwks');
+ *
+ *   const JWKS = createRemoteJWKSet(new URL('https://external-idp.com/.well-known/jwks.json'));
+ *
+ *   try {
+ *     const { payload } = await jws.verify(event.transaction.subject_token, JWKS);
+ *     api.authentication.setUserById(payload.sub);
+ *   } catch (error) {
+ *     api.access.rejectInvalidSubjectToken('Invalid token signature');
+ *   }
+ * };
+ * ```
+ */
+export declare class CustomTokenExchange extends BaseAuthAPI implements ICustomTokenExchange {
+    /**
+     * Executes token exchange flow with security validations
+     *
+     * @param options - Exchange configuration parameters
+     * @returns Auth0-issued tokens with requested claims
+     *
+     * @throws {Error} When:
+     * - `subject_token_type` uses prohibited namespace
+     * - Network failures occur
+     * - Auth0 returns error responses (4xx/5xx)
+     */
+    exchangeToken(options: CustomTokenExchangeOptions): Promise<TokenResponse>;
+    /**
+     * Enforces namespace ownership requirements for token types
+     *
+     * @param tokenType - Proposed subject_token_type value
+     * @throws {Error} When reserved namespace pattern detected
+     *
+     * @privateRemarks
+     * Implements RFC 8693 Section 4.1 requirements for token type URIs
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc8693#section-4.1 | RFC 8693 Section 4.1}
+     */
+    private validateTokenType;
+}
+/**
+ * Standardized token response structure for Auth0 authentication flows
+ *
+ * @remarks
+ * **Token Lifetime Management**:
+ * - Cache tokens according to `expires_in` value
+ * - Rotate refresh tokens using `offline_access` scope
+ * - Revoke compromised tokens immediately
+ *
+ * @security
+ * - Store tokens in secure, encrypted storage
+ * - Never expose in client-side code or logs
+ */
+export type TokenResponse = {
+    /** Bearer token for API authorization */
+    access_token: string;
+    /** Refresh token (requires `offline_access` scope) */
+    refresh_token?: string;
+    /** JWT containing user identity claims */
+    id_token: string;
+    /** Typically "Bearer" */
+    token_type?: string;
+    /** Token validity in seconds (default: 86400) */
+    expires_in: number;
+    /** Granted permissions space */
+    scope: string;
+};

package/dist/cjs/auth/tokenExchange.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CustomTokenExchange = void 0;
+const models_js_1 = require("../lib/models.js");
+const base_auth_api_js_1 = require("./base-auth-api.js");
+/** RFC 8693-defined grant type for token exchange */
+const TOKEN_EXCHANGE_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:token-exchange';
+/** Auth0 token endpoint path */
+const TOKEN_URL = '/oauth/token';
+/**
+ * Implements Auth0's Custom Token Exchange functionality with security best practices
+ *
+ * @security
+ * - **HTTPS Enforcement**: All requests require TLS encryption
+ * - **Credential Protection**: Client secrets never exposed in browser contexts
+ * - **Input Validation**: Strict namespace enforcement for token types
+ *
+ * @example
+ * ```typescript
+ * // Secure token validation in Auth0 Action
+ * exports.onExecuteCustomTokenExchange = async (event, api) => {
+ *   const { jws } = require('jose');
+ *   const { createRemoteJWKSet } = require('jose/jwks');
+ *
+ *   const JWKS = createRemoteJWKSet(new URL('https://external-idp.com/.well-known/jwks.json'));
+ *
+ *   try {
+ *     const { payload } = await jws.verify(event.transaction.subject_token, JWKS);
+ *     api.authentication.setUserById(payload.sub);
+ *   } catch (error) {
+ *     api.access.rejectInvalidSubjectToken('Invalid token signature');
+ *   }
+ * };
+ * ```
+ */
+class CustomTokenExchange extends base_auth_api_js_1.BaseAuthAPI {
+    /**
+     * Executes token exchange flow with security validations
+     *
+     * @param options - Exchange configuration parameters
+     * @returns Auth0-issued tokens with requested claims
+     *
+     * @throws {Error} When:
+     * - `subject_token_type` uses prohibited namespace
+     * - Network failures occur
+     * - Auth0 returns error responses (4xx/5xx)
+     */
+    async exchangeToken(options) {
+        this.validateTokenType(options.subject_token_type);
+        const body = {
+            ...options,
+            grant_type: TOKEN_EXCHANGE_GRANT_TYPE,
+            client_id: this.clientId,
+        };
+        await this.addClientAuthentication(body);
+        const response = await this.request({
+            path: TOKEN_URL,
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams(body),
+        }, {});
+        const r = await models_js_1.JSONApiResponse.fromResponse(response);
+        return r.data;
+    }
+    /**
+     * Enforces namespace ownership requirements for token types
+     *
+     * @param tokenType - Proposed subject_token_type value
+     * @throws {Error} When reserved namespace pattern detected
+     *
+     * @privateRemarks
+     * Implements RFC 8693 Section 4.1 requirements for token type URIs
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc8693#section-4.1 | RFC 8693 Section 4.1}
+     */
+    validateTokenType(tokenType) {
+        const reservedPatterns = [
+            /^urn:ietf:params:oauth:/i,
+            /^https:\/\/auth0\.com\//i,
+            /^urn:auth0:/i,
+        ];
+        if (reservedPatterns.some((pattern) => pattern.test(tokenType))) {
+            throw new Error(`Invalid subject_token_type '${tokenType}'. ` +
+                `Reserved namespaces are prohibited. Use URIs under your organization's control.`);
+        }
+    }
+}
+exports.CustomTokenExchange = CustomTokenExchange;
+//# sourceMappingURL=tokenExchange.js.map

package/dist/cjs/auth/tokenExchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenExchange.js","sourceRoot":"","sources":["../../../src/auth/tokenExchange.ts"],"names":[],"mappings":";;;AAAA,gDAAmD;AACnD,yDAAiD;AAyHjD,qDAAqD;AACrD,MAAM,yBAAyB,GAAG,iDAAiD,CAAC;AACpF,gCAAgC;AAChC,MAAM,SAAS,GAAG,cAAc,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAa,mBAAoB,SAAQ,8BAAW;IAClD;;;;;;;;;;OAUG;IACH,KAAK,CAAC,aAAa,CAAC,OAAmC;QACrD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAmC;YAC3C,GAAG,OAAO;YACV,UAAU,EAAE,yBAAyB;YACrC,SAAS,EAAE,IAAI,CAAC,QAAQ;SACzB,CAAC;QAEF,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAA8B,CAAC;SAC1D,EACD,EAAE,CACH,CAAC;QAEF,MAAM,CAAC,GAAmC,MAAM,2BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvF,OAAO,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACK,iBAAiB,CAAC,SAAiB;QACzC,MAAM,gBAAgB,GAAG;YACvB,0BAA0B;YAC1B,0BAA0B;YAC1B,cAAc;SACf,CAAC;QAEF,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE;YAC/D,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,KAAK;gBAC3C,iFAAiF,CACpF,CAAC;SACH;IACH,CAAC;CACF;AAhED,kDAgEC"}

package/dist/cjs/deprecations.d.ts

@@ -15,6 +15,7 @@ export declare const PatchProviderRequestNameEnum: {
     readonly smtp: "smtp";
     readonly azure_cs: "azure_cs";
     readonly ms365: "ms365";
+    readonly custom: "custom";
 };
 /**
  * @deprecated Use {@link EmailProviderCreate} instead.
@@ -32,6 +33,7 @@ export declare const PostProviderRequestNameEnum: {
     readonly smtp: "smtp";
     readonly azure_cs: "azure_cs";
     readonly ms365: "ms365";
+    readonly custom: "custom";
 };
 /**
  * @deprecated Use {@link EmailProviderUpdateCredentials} instead.

package/dist/cjs/management/__generated/index.d.ts

@@ -1,6 +1,6 @@
 export * from './managers/index.js';
 export * from './models/index.js';
-import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, UserBlocksManager, UsersManager, UsersByEmailManager } from './managers/index.js';
+import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, TokenExchangeProfilesManager, UserBlocksManager, UsersManager, UsersByEmailManager } from './managers/index.js';
 import { Configuration } from '../../lib/runtime.js';
 export declare abstract class ManagementClientBase {
     protected configuration: Configuration;
@@ -37,6 +37,7 @@ export declare abstract class ManagementClientBase {
     readonly stats: StatsManager;
     readonly tenants: TenantsManager;
     readonly tickets: TicketsManager;
+    readonly tokenExchangeProfiles: TokenExchangeProfilesManager;
     readonly userBlocks: UserBlocksManager;
     readonly users: UsersManager;
     readonly usersByEmail: UsersByEmailManager;

package/dist/cjs/management/__generated/index.js

@@ -54,6 +54,7 @@ class ManagementClientBase {
         this.stats = new index_js_1.StatsManager(this.configuration);
         this.tenants = new index_js_1.TenantsManager(this.configuration);
         this.tickets = new index_js_1.TicketsManager(this.configuration);
+        this.tokenExchangeProfiles = new index_js_1.TokenExchangeProfilesManager(this.configuration);
         this.userBlocks = new index_js_1.UserBlocksManager(this.configuration);
         this.users = new index_js_1.UsersManager(this.configuration);
         this.usersByEmail = new index_js_1.UsersByEmailManager(this.configuration);

package/dist/cjs/management/__generated/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/management/__generated/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,oDAAkC;AAElC,kDAqC6B;AAI7B,MAAsB,oBAAoB;IAsCxC,YAAsB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QArClC,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,qBAAgB,GAAG,IAAI,kCAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnE,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,gBAAW,GAAG,IAAI,6BAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,sBAAiB,GAAG,IAAI,mCAAwB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrE,mBAAc,GAAG,IAAI,gCAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/D,WAAM,GAAG,IAAI,wBAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,WAAM,GAAG,IAAI,wBAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,oBAAe,GAAG,IAAI,iCAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjE,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,wBAAmB,GAAG,IAAI,qCAA0B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEtB,CAAC;CACvD;AAvCD,oDAuCC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/management/__generated/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,oDAAkC;AAElC,kDAsC6B;AAI7B,MAAsB,oBAAoB;IAuCxC,YAAsB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QAtClC,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,qBAAgB,GAAG,IAAI,kCAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnE,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,gBAAW,GAAG,IAAI,6BAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,sBAAiB,GAAG,IAAI,mCAAwB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrE,mBAAc,GAAG,IAAI,gCAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/D,WAAM,GAAG,IAAI,wBAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,WAAM,GAAG,IAAI,wBAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,oBAAe,GAAG,IAAI,iCAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjE,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,wBAAmB,GAAG,IAAI,qCAA0B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,0BAAqB,GAAG,IAAI,uCAA4B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7E,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEtB,CAAC;CACvD;AAxCD,oDAwCC"}

package/dist/cjs/management/__generated/managers/clients-manager.js

@@ -102,10 +102,6 @@ class ClientsManager extends BaseAPI {
                 key: 'app_type',
                 config: {},
             },
-            {
-                key: 'client_ids',
-                config: {},
-            },
             {
                 key: 'q',
                 config: {},

package/dist/cjs/management/__generated/managers/clients-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"clients-manager.js","sourceRoot":"","sources":["../../../../../src/management/__generated/managers/clients-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iEAAmD;AAuBnD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,MAAa,cAAe,SAAQ,OAAO;IACzC;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,iBAA2C,EAC3C,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,QAAQ;SACjB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAyD,EACzD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,QAAQ;SACjB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAiDD,KAAK,CAAC,MAAM,CACV,oBAAuC,EAAE,EACzC,aAA4B;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;YAClE;gBACE,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,WAAW;gBAChB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,YAAY;gBACjB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,GAAG;gBACR,MAAM,EAAE,EAAE;aACX;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,eAAe;SACvB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,KAAK,CAAC,GAAG,CACP,iBAAwC,EACxC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;YAClE;gBACE,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,eAAe;SACvB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAClB,iBAAwC,EACxC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kCAAkC,CAAC,OAAO,CAC9C,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,KAAK;SACd,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CACjB,iBAAsD,EACtD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,KAAK;SACd,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,MAAM,CACV,iBAA0C,EAC1C,cAA4B,EAC5B,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAiE,EACjE,cAAqD,EACrD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,MAAM,CACV,cAA4B,EAC5B,aAA4B;QAE5B,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAkD,EAClD,cAAsC,EACtC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kCAAkC,CAAC,OAAO,CAC9C,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,kBAAkB,CACtB,iBAA0C,EAC1C,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,oCAAoC,CAAC,OAAO,CAChD,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,MAAM;SACf,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;CACF;AAtdD,wCAsdC"}
+{"version":3,"file":"clients-manager.js","sourceRoot":"","sources":["../../../../../src/management/__generated/managers/clients-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iEAAmD;AAuBnD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,MAAa,cAAe,SAAQ,OAAO;IACzC;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,iBAA2C,EAC3C,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,QAAQ;SACjB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAyD,EACzD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,QAAQ;SACjB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAiDD,KAAK,CAAC,MAAM,CACV,oBAAuC,EAAE,EACzC,aAA4B;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;YAClE;gBACE,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,WAAW;gBAChB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,GAAG;gBACR,MAAM,EAAE,EAAE;aACX;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,eAAe;SACvB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,KAAK,CAAC,GAAG,CACP,iBAAwC,EACxC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;YAClE;gBACE,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,eAAe;SACvB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAClB,iBAAwC,EACxC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kCAAkC,CAAC,OAAO,CAC9C,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,KAAK;SACd,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CACjB,iBAAsD,EACtD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,KAAK;SACd,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,MAAM,CACV,iBAA0C,EAC1C,cAA4B,EAC5B,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAiE,EACjE,cAAqD,EACrD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,MAAM,CACV,cAA4B,EAC5B,aAA4B;QAE5B,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAkD,EAClD,cAAsC,EACtC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kCAAkC,CAAC,OAAO,CAC9C,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,kBAAkB,CACtB,iBAA0C,EAC1C,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,oCAAoC,CAAC,OAAO,CAChD,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,MAAM;SACf,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;CACF;AAldD,wCAkdC"}

package/dist/cjs/management/__generated/managers/email-templates-manager.d.ts

@@ -7,7 +7,7 @@ declare const BaseAPI: typeof runtime.BaseAPI;
  */
 export declare class EmailTemplatesManager extends BaseAPI {
     /**
-     * Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `reset_email`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, and `user_invitation`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.
+     * Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, and `user_invitation`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.
      * Get an email template
      *
      * @throws {RequiredError}

package/dist/cjs/management/__generated/managers/email-templates-manager.js

@@ -31,7 +31,7 @@ const { BaseAPI } = runtime;
  */
 class EmailTemplatesManager extends BaseAPI {
     /**
-     * Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `reset_email`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, and `user_invitation`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.
+     * Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, and `user_invitation`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.
      * Get an email template
      *
      * @throws {RequiredError}

package/dist/cjs/management/__generated/managers/index.d.ts

@@ -31,6 +31,7 @@ export * from './sessions-manager.js';
 export * from './stats-manager.js';
 export * from './tenants-manager.js';
 export * from './tickets-manager.js';
+export * from './token-exchange-profiles-manager.js';
 export * from './user-blocks-manager.js';
 export * from './users-manager.js';
 export * from './users-by-email-manager.js';

package/dist/cjs/management/__generated/managers/index.js

@@ -47,6 +47,7 @@ __exportStar(require("./sessions-manager.js"), exports);
 __exportStar(require("./stats-manager.js"), exports);
 __exportStar(require("./tenants-manager.js"), exports);
 __exportStar(require("./tickets-manager.js"), exports);
+__exportStar(require("./token-exchange-profiles-manager.js"), exports);
 __exportStar(require("./user-blocks-manager.js"), exports);
 __exportStar(require("./users-manager.js"), exports);
 __exportStar(require("./users-by-email-manager.js"), exports);

package/dist/cjs/management/__generated/managers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/management/__generated/managers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,uDAAqC;AACrC,iEAA+C;AAC/C,0DAAwC;AACxC,wDAAsC;AACtC,6DAA2C;AAC3C,uDAAqC;AACrC,2DAAyC;AACzC,8DAA4C;AAC5C,kEAAgD;AAChD,+DAA6C;AAC7C,sDAAoC;AACpC,qDAAmC;AACnC,qDAAmC;AACnC,sDAAoC;AACpC,wDAAsC;AACtC,qDAAmC;AACnC,oDAAkC;AAClC,oDAAkC;AAClC,2DAAyC;AACzC,oDAAkC;AAClC,6DAA2C;AAC3C,uDAAqC;AACrC,8DAA4C;AAC5C,gEAA8C;AAC9C,qDAAmC;AACnC,qDAAmC;AACnC,6DAA2C;AAC3C,qEAAmD;AACnD,wDAAsC;AACtC,qDAAmC;AACnC,uDAAqC;AACrC,uDAAqC;AACrC,2DAAyC;AACzC,qDAAmC;AACnC,8DAA4C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/management/__generated/managers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,uDAAqC;AACrC,iEAA+C;AAC/C,0DAAwC;AACxC,wDAAsC;AACtC,6DAA2C;AAC3C,uDAAqC;AACrC,2DAAyC;AACzC,8DAA4C;AAC5C,kEAAgD;AAChD,+DAA6C;AAC7C,sDAAoC;AACpC,qDAAmC;AACnC,qDAAmC;AACnC,sDAAoC;AACpC,wDAAsC;AACtC,qDAAmC;AACnC,oDAAkC;AAClC,oDAAkC;AAClC,2DAAyC;AACzC,oDAAkC;AAClC,6DAA2C;AAC3C,uDAAqC;AACrC,8DAA4C;AAC5C,gEAA8C;AAC9C,qDAAmC;AACnC,qDAAmC;AACnC,6DAA2C;AAC3C,qEAAmD;AACnD,wDAAsC;AACtC,qDAAmC;AACnC,uDAAqC;AACrC,uDAAqC;AACrC,uEAAqD;AACrD,2DAAyC;AACzC,qDAAmC;AACnC,8DAA4C"}

package/dist/cjs/management/__generated/managers/prompts-manager.d.ts

@@ -1,6 +1,6 @@
 import * as runtime from '../../../lib/runtime.js';
 import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
-import type { GetRendering200Response, PatchRenderingRequest, PromptsSettings, PromptsSettingsUpdate, GetCustomTextByLanguageRequest, GetPartialsRequest, GetRenderingRequest, PatchRenderingOperationRequest, PutCustomTextByLanguageRequest, PutPartialsRequest } from '../models/index.js';
+import type { GetRendering200Response, PatchRendering200Response, PatchRenderingRequest, PromptsSettings, PromptsSettingsUpdate, GetCustomTextByLanguageRequest, GetPartialsRequest, GetRenderingRequest, PatchRenderingOperationRequest, PutCustomTextByLanguageRequest, PutPartialsRequest } from '../models/index.js';
 declare const BaseAPI: typeof runtime.BaseAPI;
 /**
  *
@@ -32,8 +32,8 @@ export declare class PromptsManager extends BaseAPI {
      */
     get(initOverrides?: InitOverride): Promise<ApiResponse<PromptsSettings>>;
     /**
-     * View the render settings for a specific screen
-     * Get render settings for a prompt
+     * Get render settings for a screen.
+     * Get render settings for a screen
      *
      * @throws {RequiredError}
      */
@@ -46,12 +46,40 @@ export declare class PromptsManager extends BaseAPI {
      */
     update(bodyParameters: PromptsSettingsUpdate, initOverrides?: InitOverride): Promise<ApiResponse<PromptsSettings>>;
     /**
-     * Configure the render settings for a specific screen
-     * Configure render settings for a prompt
+     * Learn more about <a href='https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens'>configuring render settings</a> for advanced customization.
+     *
+     * <p>
+     *   Example <code>head_tags</code> array. See our <a href='https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens'>documentation</a> on using Liquid variables within head tags.
+     * </p>
+     * <pre>{
+     *   "head_tags": [
+     *     {
+     *       "tag": "script",
+     *       "attributes": {
+     *         "defer": true,
+     *         "src": "URL_TO_ASSET",
+     *         "async": true,
+     *         "integrity": [
+     *           "ASSET_SHA"
+     *         ]
+     *       }
+     *     },
+     *     {
+     *       "tag": "link",
+     *       "attributes": {
+     *         "href": "URL_TO_ASSET",
+     *         "rel": "stylesheet"
+     *       }
+     *     }
+     *   ]
+     * }
+     * </pre>
+     *
+     * Update render settings for a screen
      *
      * @throws {RequiredError}
      */
-    updateRendering(requestParameters: PatchRenderingOperationRequest, bodyParameters: PatchRenderingRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    updateRendering(requestParameters: PatchRenderingOperationRequest, bodyParameters: PatchRenderingRequest, initOverrides?: InitOverride): Promise<ApiResponse<PatchRendering200Response>>;
     /**
      * Set custom text for a specific prompt. Existing texts will be overwritten.
      * Set custom text for a specific prompt

package/dist/cjs/management/__generated/managers/prompts-manager.js

@@ -74,8 +74,8 @@ class PromptsManager extends BaseAPI {
         return runtime.JSONApiResponse.fromResponse(response);
     }
     /**
-     * View the render settings for a specific screen
-     * Get render settings for a prompt
+     * Get render settings for a screen.
+     * Get render settings for a screen
      *
      * @throws {RequiredError}
      */
@@ -107,8 +107,36 @@ class PromptsManager extends BaseAPI {
         return runtime.JSONApiResponse.fromResponse(response);
     }
     /**
-     * Configure the render settings for a specific screen
-     * Configure render settings for a prompt
+     * Learn more about <a href='https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens'>configuring render settings</a> for advanced customization.
+     *
+     * <p>
+     *   Example <code>head_tags</code> array. See our <a href='https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens'>documentation</a> on using Liquid variables within head tags.
+     * </p>
+     * <pre>{
+     *   "head_tags": [
+     *     {
+     *       "tag": "script",
+     *       "attributes": {
+     *         "defer": true,
+     *         "src": "URL_TO_ASSET",
+     *         "async": true,
+     *         "integrity": [
+     *           "ASSET_SHA"
+     *         ]
+     *       }
+     *     },
+     *     {
+     *       "tag": "link",
+     *       "attributes": {
+     *         "href": "URL_TO_ASSET",
+     *         "rel": "stylesheet"
+     *       }
+     *     }
+     *   ]
+     * }
+     * </pre>
+     *
+     * Update render settings for a screen
      *
      * @throws {RequiredError}
      */
@@ -124,7 +152,7 @@ class PromptsManager extends BaseAPI {
             headers: headerParameters,
             body: bodyParameters,
         }, initOverrides);
-        return runtime.VoidApiResponse.fromResponse(response);
+        return runtime.JSONApiResponse.fromResponse(response);
     }
     /**
      * Set custom text for a specific prompt. Existing texts will be overwritten.