auth0 4.32.0 → 4.34.0

package/dist/cjs/management/__generated/models/index.d.ts

@@ -256,6 +256,11 @@ export interface Client {
      *
      */
     organization_require_behavior: ClientOrganizationRequireBehaviorEnum;
+    /**
+     * Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
+     *
+     */
+    organization_discovery_methods?: Array<ClientOrganizationDiscoveryEnum>;
     /**
      */
     client_authentication_methods: ClientClientAuthenticationMethods | null;
@@ -285,6 +290,13 @@ export interface Client {
     /**
      */
     token_quota: TokenQuota;
+    /**
+     * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
+     * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
+     * See {{DOCS LINK}} for more information.
+     *
+     */
+    skip_non_verifiable_callback_uri_confirmation_prompt?: boolean;
 }
 export declare const ClientAppTypeEnum: {
     readonly native: "native";
@@ -1189,6 +1201,11 @@ export interface ClientCreate {
      *
      */
     organization_require_behavior?: ClientCreateOrganizationRequireBehaviorEnum;
+    /**
+     * Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
+     *
+     */
+    organization_discovery_methods?: Array<ClientOrganizationDiscoveryEnum>;
     /**
      */
     client_authentication_methods?: ClientCreateClientAuthenticationMethods;
@@ -1223,6 +1240,13 @@ export interface ClientCreate {
      *
      */
     resource_server_identifier?: string;
+    /**
+     * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
+     * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
+     * See {{DOCS LINK}} for more information.
+     *
+     */
+    skip_non_verifiable_callback_uri_confirmation_prompt?: boolean;
 }
 export declare const ClientCreateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -2425,6 +2449,14 @@ export declare const ClientOidcLogoutBackchannelLogoutInitiatorsSelectedInitiato
     readonly account_deactivated: "account-deactivated";
 };
 export type ClientOidcLogoutBackchannelLogoutInitiatorsSelectedInitiatorsEnum = (typeof ClientOidcLogoutBackchannelLogoutInitiatorsSelectedInitiatorsEnum)[keyof typeof ClientOidcLogoutBackchannelLogoutInitiatorsSelectedInitiatorsEnum];
+/**
+ * Method for discovering organizations during the `pre_login_prompt`. `email` allows users to find their organization by entering their email address and performing domain matching, while `organization_name` requires users to enter the organization name directly. These methods can be combined.
+ */
+export declare const ClientOrganizationDiscoveryEnum: {
+    readonly email: "email";
+    readonly organization_name: "organization_name";
+};
+export type ClientOrganizationDiscoveryEnum = (typeof ClientOrganizationDiscoveryEnum)[keyof typeof ClientOrganizationDiscoveryEnum];
 /**
  * Refresh token configuration
  */
@@ -2744,6 +2776,11 @@ export interface ClientUpdate {
      *
      */
     organization_require_behavior?: ClientUpdateOrganizationRequireBehaviorEnum;
+    /**
+     * Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
+     *
+     */
+    organization_discovery_methods?: Array<ClientOrganizationDiscoveryEnum>;
     /**
      */
     client_authentication_methods?: ClientUpdateClientAuthenticationMethods | null;
@@ -2765,6 +2802,13 @@ export interface ClientUpdate {
      *
      */
     compliance_level?: ClientUpdateComplianceLevelEnum;
+    /**
+     * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
+     * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
+     * See {{DOCS LINK}} for more information.
+     *
+     */
+    skip_non_verifiable_callback_uri_confirmation_prompt?: boolean;
 }
 export declare const ClientUpdateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -3165,6 +3209,56 @@ export interface ClientUpdateSignedRequestObject {
      */
     credentials?: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
 }
+/**
+ *
+ */
+export interface ConnectedAccount {
+    /**
+     * The unique identifier for the connected account.
+     *
+     */
+    id: string;
+    /**
+     * The name of the connection associated with the account.
+     *
+     */
+    connection: string;
+    /**
+     * The unique identifier of the connection associated with the account.
+     *
+     */
+    connection_id: string;
+    /**
+     * The authentication strategy used by the connection.
+     *
+     */
+    strategy: string;
+    /**
+     */
+    access_type: ConnectedAccountAccessTypeEnum;
+    /**
+     * The scopes granted for this connected account.
+     *
+     */
+    scopes?: Array<string>;
+    /**
+     * ISO 8601 timestamp when the connected account was created.
+     *
+     */
+    created_at: string;
+    /**
+     * ISO 8601 timestamp when the connected account expires.
+     *
+     */
+    expires_at?: string;
+}
+/**
+ * The access type for the connected account.
+ */
+export declare const ConnectedAccountAccessTypeEnum: {
+    readonly offline: "offline";
+};
+export type ConnectedAccountAccessTypeEnum = (typeof ConnectedAccountAccessTypeEnum)[keyof typeof ConnectedAccountAccessTypeEnum];
 /**
  *
  */
@@ -3378,6 +3472,9 @@ export interface ConnectionCreateOptions {
      *
      */
     non_persistent_attrs?: Array<string>;
+    /**
+     */
+    attributes?: ConnectionCreateOptionsAttributes;
     /**
      */
     enable_script_context?: boolean;
@@ -3474,6 +3571,148 @@ export declare const ConnectionCreateOptionsSetUserRootAttributesEnum: {
     readonly first_login: "on_first_login";
 };
 export type ConnectionCreateOptionsSetUserRootAttributesEnum = (typeof ConnectionCreateOptionsSetUserRootAttributesEnum)[keyof typeof ConnectionCreateOptionsSetUserRootAttributesEnum];
+/**
+ * Attribute configuration
+ */
+export interface ConnectionCreateOptionsAttributes {
+    /**
+     */
+    email?: ConnectionCreateOptionsAttributesEmail;
+    /**
+     */
+    phone_number?: ConnectionCreateOptionsAttributesPhoneNumber;
+    /**
+     */
+    username?: ConnectionCreateOptionsAttributesUsername;
+}
+/**
+ * Configuration for the email attribute for users.
+ */
+export interface ConnectionCreateOptionsAttributesEmail {
+    /**
+     */
+    identifier?: ConnectionCreateOptionsAttributesEmailIdentifier;
+    /**
+     * Determines if the attribute is unique in a given connection
+     *
+     */
+    unique?: boolean;
+    /**
+     * Determines if property should be required for users
+     *
+     */
+    profile_required?: boolean;
+    /**
+     */
+    verification_method?: ConnectionCreateOptionsAttributesEmailVerificationMethodEnum;
+    /**
+     */
+    signup?: ConnectionCreateOptionsAttributesEmailSignup;
+}
+export declare const ConnectionCreateOptionsAttributesEmailVerificationMethodEnum: {
+    readonly link: "link";
+    readonly otp: "otp";
+};
+export type ConnectionCreateOptionsAttributesEmailVerificationMethodEnum = (typeof ConnectionCreateOptionsAttributesEmailVerificationMethodEnum)[keyof typeof ConnectionCreateOptionsAttributesEmailVerificationMethodEnum];
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesEmailIdentifier {
+    /**
+     * Determines if the attribute is used for identification
+     *
+     */
+    active?: boolean;
+}
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesEmailSignup {
+    /**
+     */
+    status?: ConnectionCreateOptionsAttributesEmailSignupStatusEnum;
+    /**
+     */
+    verification?: ConnectionCreateOptionsAttributesEmailSignupVerification;
+}
+export declare const ConnectionCreateOptionsAttributesEmailSignupStatusEnum: {
+    readonly required: "required";
+    readonly optional: "optional";
+    readonly inactive: "inactive";
+};
+export type ConnectionCreateOptionsAttributesEmailSignupStatusEnum = (typeof ConnectionCreateOptionsAttributesEmailSignupStatusEnum)[keyof typeof ConnectionCreateOptionsAttributesEmailSignupStatusEnum];
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesEmailSignupVerification {
+    /**
+     */
+    active?: boolean;
+}
+/**
+ * Configuration for the phone number attribute for users.
+ */
+export interface ConnectionCreateOptionsAttributesPhoneNumber {
+    /**
+     */
+    identifier?: ConnectionCreateOptionsAttributesEmailIdentifier;
+    /**
+     * Determines if property should be required for users
+     *
+     */
+    profile_required?: boolean;
+    /**
+     */
+    signup?: ConnectionCreateOptionsAttributesEmailSignup;
+}
+/**
+ * Configuration for the username attribute for users.
+ */
+export interface ConnectionCreateOptionsAttributesUsername {
+    /**
+     */
+    identifier?: ConnectionCreateOptionsAttributesEmailIdentifier;
+    /**
+     * Determines if property should be required for users
+     *
+     */
+    profile_required?: boolean;
+    /**
+     */
+    signup?: ConnectionCreateOptionsAttributesEmailSignup;
+    /**
+     */
+    validation?: ConnectionCreateOptionsAttributesUsernameValidation;
+}
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesUsernameValidation {
+    /**
+     * Minimum allowed length
+     *
+     */
+    min_length?: number;
+    /**
+     * Maximum allowed length
+     *
+     */
+    max_length?: number;
+    /**
+     */
+    allowed_types?: ConnectionCreateOptionsAttributesUsernameValidationAllowedTypes;
+}
+/**
+ *
+ */
+export interface ConnectionCreateOptionsAttributesUsernameValidationAllowedTypes {
+    /**
+     */
+    email?: boolean;
+    /**
+     */
+    phone_number?: boolean;
+}
 /**
  * Options for enabling authentication methods.
  */
@@ -3764,6 +4003,9 @@ export interface ConnectionUpdateOptions {
      *
      */
     non_persistent_attrs?: Array<string>;
+    /**
+     */
+    attributes?: ConnectionCreateOptionsAttributes;
     /**
      */
     enable_script_context?: boolean;
@@ -3860,6 +4102,47 @@ export declare const ConnectionUpdateOptionsSetUserRootAttributesEnum: {
     readonly first_login: "on_first_login";
 };
 export type ConnectionUpdateOptionsSetUserRootAttributesEnum = (typeof ConnectionUpdateOptionsSetUserRootAttributesEnum)[keyof typeof ConnectionUpdateOptionsSetUserRootAttributesEnum];
+/**
+ *
+ */
+export interface CreateOrganizationDiscoveryDomainRequestContent {
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status?: OrganizationDiscoveryDomainStatus;
+}
+/**
+ *
+ */
+export interface CreateOrganizationDiscoveryDomainResponseContent {
+    /**
+     * Organization discovery domain identifier.
+     *
+     */
+    id: string;
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status: OrganizationDiscoveryDomainStatus;
+    /**
+     * A unique token generated for the discovery domain. This must be placed in a DNS TXT record at the location specified by the verification_host field to prove domain ownership.
+     *
+     */
+    verification_txt: string;
+    /**
+     * The full domain where the TXT record should be added.
+     *
+     */
+    verification_host: string;
+}
 /**
  * Phone provider configuration schema
  */
@@ -7925,6 +8208,34 @@ export interface GetOrganizationClientGrants200ResponseOneOfInner {
      */
     scope: Array<string>;
 }
+/**
+ *
+ */
+export interface GetOrganizationDiscoveryDomainResponseContent {
+    /**
+     * Organization discovery domain identifier.
+     *
+     */
+    id: string;
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status: OrganizationDiscoveryDomainStatus;
+    /**
+     * A unique token generated for the discovery domain. This must be placed in a DNS TXT record at the location specified by the verification_host field to prove domain ownership.
+     *
+     */
+    verification_txt: string;
+    /**
+     * The full domain where the TXT record should be added.
+     *
+     */
+    verification_host: string;
+}
 /**
  *
  */
@@ -9720,6 +10031,17 @@ export declare const JobFormatEnum: {
     readonly csv: "csv";
 };
 export type JobFormatEnum = (typeof JobFormatEnum)[keyof typeof JobFormatEnum];
+/**
+ *
+ */
+export interface ListOrganizationDiscoveryDomainsResponseContent {
+    /**
+     */
+    next?: string;
+    /**
+     */
+    domains: Array<OrganizationDiscoveryDomain>;
+}
 /**
  *
  */
@@ -9749,6 +10071,19 @@ export interface ListUserAttributeProfilesPaginatedResponseContent {
      */
     user_attribute_profiles?: Array<UserAttributeProfile>;
 }
+/**
+ *
+ */
+export interface ListUserConnectedAccountsResponseContent {
+    /**
+     */
+    connected_accounts: Array<ConnectedAccount>;
+    /**
+     * The token to retrieve the next page of connected accounts (if there is one)
+     *
+     */
+    next?: string;
+}
 /**
  *
  */
@@ -9933,6 +10268,42 @@ export interface OrganizationBrandingColors {
      */
     page_background: string;
 }
+/**
+ *
+ */
+export interface OrganizationDiscoveryDomain {
+    /**
+     * Organization discovery domain identifier.
+     *
+     */
+    id: string;
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status: OrganizationDiscoveryDomainStatus;
+    /**
+     * A unique token generated for the discovery domain. This must be placed in a DNS TXT record at the location specified by the verification_host field to prove domain ownership.
+     *
+     */
+    verification_txt: string;
+    /**
+     * The full domain where the TXT record should be added.
+     *
+     */
+    verification_host: string;
+}
+/**
+ * The verification status of the discovery domain.
+ */
+export declare const OrganizationDiscoveryDomainStatus: {
+    readonly pending: "pending";
+    readonly verified: "verified";
+};
+export type OrganizationDiscoveryDomainStatus = (typeof OrganizationDiscoveryDomainStatus)[keyof typeof OrganizationDiscoveryDomainStatus];
 /**
  * Metadata associated with the organization, in the form of an object with string values (max 255 chars). Maximum of 25 metadata properties allowed.
  */
@@ -16989,6 +17360,13 @@ export interface TenantSettings {
      *
      */
     authorization_response_iss_parameter_supported: boolean | null;
+    /**
+     * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
+     * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
+     * See {{DOCS LINK}} for more information.
+     *
+     */
+    skip_non_verifiable_callback_uri_confirmation_prompt?: boolean | null;
 }
 export declare const TenantSettingsEnabledLocalesEnum: {
     readonly am: "am";
@@ -17463,6 +17841,13 @@ export interface TenantSettingsUpdate {
      *
      */
     authorization_response_iss_parameter_supported?: boolean | null;
+    /**
+     * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
+     * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
+     * See {{DOCS LINK}} for more information.
+     *
+     */
+    skip_non_verifiable_callback_uri_confirmation_prompt?: boolean | null;
 }
 export declare const TenantSettingsUpdateEnabledLocalesEnum: {
     readonly am: "am";
@@ -17869,6 +18254,42 @@ export interface TwilioFactorProvider {
      */
     sid: string | null;
 }
+/**
+ *
+ */
+export interface UpdateOrganizationDiscoveryDomainRequestContent {
+    /**
+     */
+    status?: OrganizationDiscoveryDomainStatus;
+}
+/**
+ *
+ */
+export interface UpdateOrganizationDiscoveryDomainResponseContent {
+    /**
+     * Organization discovery domain identifier.
+     *
+     */
+    id: string;
+    /**
+     * The domain name to associate with the organization e.g. acme.com.
+     *
+     */
+    domain: string;
+    /**
+     */
+    status: OrganizationDiscoveryDomainStatus;
+    /**
+     * A unique token generated for the discovery domain. This must be placed in a DNS TXT record at the location specified by the verification_host field to prove domain ownership.
+     *
+     */
+    verification_txt: string;
+    /**
+     * The full domain where the TXT record should be added.
+     *
+     */
+    verification_host: string;
+}
 /**
  *
  */
@@ -20806,6 +21227,21 @@ export interface DeleteClientGrantsByGrantIdRequest {
      */
     grant_id: string;
 }
+/**
+ *
+ */
+export interface DeleteDiscoveryDomainsByDiscoveryDomainIdRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+    /**
+     * ID of the discovery domain.
+     *
+     */
+    discovery_domain_id: string;
+}
 /**
  *
  */
@@ -20871,6 +21307,41 @@ export interface DeleteOrganizationsByIdRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface GetDiscoveryDomainsRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+    /**
+     * Optional Id from which to start selection.
+     *
+     */
+    from?: string;
+    /**
+     * Number of results per page. Defaults to 50.
+     *
+     */
+    take?: number;
+}
+/**
+ *
+ */
+export interface GetDiscoveryDomainsByDiscoveryDomainIdRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+    /**
+     * ID of the discovery domain.
+     *
+     */
+    discovery_domain_id: string;
+}
 /**
  *
  */
@@ -21146,6 +21617,21 @@ export interface GetOrganizationsByIdRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface PatchDiscoveryDomainsByDiscoveryDomainIdRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+    /**
+     * ID of the discovery domain to update.
+     *
+     */
+    discovery_domain_id: string;
+}
 /**
  *
  */
@@ -21171,6 +21657,16 @@ export interface PatchOrganizationsByIdOperationRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface PostDiscoveryDomainsRequest {
+    /**
+     * ID of the organization.
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -22817,6 +23313,26 @@ export interface GetAuthenticationMethodsByAuthenticationMethodIdRequest {
      */
     authentication_method_id: string;
 }
+/**
+ *
+ */
+export interface GetConnectedAccountsRequest {
+    /**
+     * ID of the user to list connected accounts for.
+     *
+     */
+    id: string;
+    /**
+     * Optional Id from which to start selection.
+     *
+     */
+    from?: string;
+    /**
+     * Number of results to return.  Defaults to 10 with a maximum of 20
+     *
+     */
+    take?: number;
+}
 /**
  *
  */