auth0 4.6.0 → 4.8.0

package/dist/esm/management/__generated/models/index.d.ts

@@ -194,6 +194,24 @@ export interface Client {
     /**
      */
     client_authentication_methods: ClientClientAuthenticationMethods | null;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests: boolean;
+    /**
+     */
+    signed_request_object: ClientSignedRequestObject;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level: ClientComplianceLevelEnum;
 }
 export declare const ClientTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -213,6 +231,13 @@ export declare const ClientOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientOrganizationRequireBehaviorEnum = (typeof ClientOrganizationRequireBehaviorEnum)[keyof typeof ClientOrganizationRequireBehaviorEnum];
+export declare const ClientComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientComplianceLevelEnum = (typeof ClientComplianceLevelEnum)[keyof typeof ClientComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -853,6 +878,12 @@ export interface ClientClientAuthenticationMethods {
     /**
      */
     private_key_jwt: ClientClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth: ClientClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth: ClientClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * Defines `private_key_jwt` client authentication method. If this property is defined, the client is enabled to use the Private Key JWT authentication method.
@@ -874,6 +905,26 @@ export interface ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner
      */
     id: string;
 }
+/**
+ * Defines `self_signed_tls_client_auth` client authentication method. If the property is defined, the client is configured to use mTLS authentication method utilizing self-signed certificate.
+ */
+export interface ClientClientAuthenticationMethodsSelfSignedTlsClientAuth {
+    /**
+     * A list of unique and previously created credential IDs enabled on the client for mTLS authentication utilizing self-signed certificate.
+     *
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
+/**
+ * Defines `tls_client_auth` client authentication method. If the property is defined, the client is configured to use CA-based mTLS authentication method.
+ */
+export interface ClientClientAuthenticationMethodsTlsClientAuth {
+    /**
+     * A list of unique and previously created credential IDs enabled on the client for CA-based mTLS authentication.
+     *
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -1034,6 +1085,24 @@ export interface ClientCreate {
     /**
      */
     client_authentication_methods?: ClientCreateClientAuthenticationMethods;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests?: boolean;
+    /**
+     */
+    signed_request_object?: ClientCreateSignedRequestObject;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession?: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level?: ClientCreateComplianceLevelEnum;
 }
 export declare const ClientCreateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -1079,6 +1148,13 @@ export declare const ClientCreateOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientCreateOrganizationRequireBehaviorEnum = (typeof ClientCreateOrganizationRequireBehaviorEnum)[keyof typeof ClientCreateOrganizationRequireBehaviorEnum];
+export declare const ClientCreateComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientCreateComplianceLevelEnum = (typeof ClientCreateComplianceLevelEnum)[keyof typeof ClientCreateComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -1651,6 +1727,12 @@ export interface ClientCreateClientAuthenticationMethods {
     /**
      */
     private_key_jwt?: ClientCreateClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth?: ClientCreateClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth?: ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * Defines `private_key_jwt` client authentication method. If this property is defined, the client is enabled to use the Private Key JWT authentication method.
@@ -1707,6 +1789,71 @@ export declare const ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredent
     readonly PS256: "PS256";
 };
 export type ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum = (typeof ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum)[keyof typeof ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum];
+/**
+ * Defines `self_signed_tls_client_auth` client authentication method. If the property is defined, the client is configured to use mTLS authentication method utilizing self-signed certificate.
+ */
+export interface ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuth {
+    /**
+     * Fully defined credentials that will be enabled on the client for mTLS authentication utilizing self-signed certificate.
+     *
+     */
+    credentials: Array<ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInner>;
+}
+/**
+ *
+ */
+export interface ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInner {
+    /**
+     */
+    credential_type: ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum;
+    /**
+     */
+    name?: string;
+    /**
+     * PEM-formatted X509 certificate. Must be JSON escaped.
+     *
+     */
+    pem: string;
+}
+export declare const ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum: {
+    readonly x509_cert: "x509_cert";
+};
+export type ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum = (typeof ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum)[keyof typeof ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum];
+/**
+ * Defines `tls_client_auth` client authentication method. If the property is defined, the client is configured to use CA-based mTLS authentication method.
+ */
+export interface ClientCreateClientAuthenticationMethodsTlsClientAuth {
+    /**
+     * Fully defined credentials that will be enabled on the client for CA-based mTLS authentication.
+     *
+     */
+    credentials: Array<ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInner>;
+}
+/**
+ *
+ */
+export interface ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInner {
+    /**
+     */
+    credential_type?: ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum;
+    /**
+     */
+    name?: string;
+    /**
+     * Subject Distinguished Name. Mutually exclusive with `pem` property.
+     *
+     */
+    subject_dn?: string;
+    /**
+     * PEM-formatted X509 certificate. Must be JSON escaped. Mutually exclusive with `subject_dn` property.
+     *
+     */
+    pem?: string;
+}
+export declare const ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum: {
+    readonly cert_subject_dn: "cert_subject_dn";
+};
+export type ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum = (typeof ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum)[keyof typeof ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum];
 /**
  * Encryption used for WsFed responses with this client.
  */
@@ -1837,6 +1984,19 @@ export interface ClientCreateOidcLogout {
      */
     backchannel_logout_urls: Array<string>;
 }
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientCreateSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required?: boolean;
+    /**
+     */
+    credentials?: Array<ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  * Encryption used for WsFed responses with this client.
  */
@@ -2073,6 +2233,19 @@ export declare const ClientRefreshTokenExpirationTypeEnum: {
     readonly non_expiring: "non-expiring";
 };
 export type ClientRefreshTokenExpirationTypeEnum = (typeof ClientRefreshTokenExpirationTypeEnum)[keyof typeof ClientRefreshTokenExpirationTypeEnum];
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required: boolean;
+    /**
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -2257,6 +2430,24 @@ export interface ClientUpdate {
     /**
      */
     client_authentication_methods?: ClientUpdateClientAuthenticationMethods | null;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests?: boolean;
+    /**
+     */
+    signed_request_object?: ClientUpdateSignedRequestObject | null;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession?: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level?: ClientUpdateComplianceLevelEnum;
 }
 export declare const ClientUpdateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -2303,6 +2494,13 @@ export declare const ClientUpdateOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientUpdateOrganizationRequireBehaviorEnum = (typeof ClientUpdateOrganizationRequireBehaviorEnum)[keyof typeof ClientUpdateOrganizationRequireBehaviorEnum];
+export declare const ClientUpdateComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientUpdateComplianceLevelEnum = (typeof ClientUpdateComplianceLevelEnum)[keyof typeof ClientUpdateComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -2427,6 +2625,12 @@ export interface ClientUpdateClientAuthenticationMethods {
     /**
      */
     private_key_jwt?: ClientClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth?: ClientClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth?: ClientClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * The client's encryption key
@@ -2525,6 +2729,19 @@ export interface ClientUpdateOidcLogout {
      */
     backchannel_logout_urls?: Array<string>;
 }
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientUpdateSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required?: boolean;
+    /**
+     */
+    credentials?: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -4683,6 +4900,16 @@ export interface GetCredentials200ResponseInner {
      *
      */
     credential_type: string;
+    /**
+     * The X509 certificate's Subject Distinguished Name
+     *
+     */
+    subject_dn: string;
+    /**
+     * The X509 certificate's SHA256 thumbprint
+     *
+     */
+    thumbprint_sha256: string;
     /**
      * The ISO 8601 formatted date the credential was created.
      *
@@ -4705,6 +4932,16 @@ export declare const GetCredentials200ResponseInnerAlgEnum: {
     readonly PS256: "PS256";
 };
 export type GetCredentials200ResponseInnerAlgEnum = (typeof GetCredentials200ResponseInnerAlgEnum)[keyof typeof GetCredentials200ResponseInnerAlgEnum];
+/**
+ *
+ */
+export interface GetDefaultMapping200Response {
+    /**
+     * The mapping between auth0 and SCIM
+     *
+     */
+    mapping: Array<GetScimConfiguration200ResponseMappingInner>;
+}
 /**
  *
  */
@@ -6110,134 +6347,675 @@ export type GetPnProviders200ResponseProviderEnum = (typeof GetPnProviders200Res
 /**
  *
  */
-export type GetResourceServers200Response = Array<ResourceServer> | GetResourceServers200ResponseOneOf;
-/**
- *
- */
-export interface GetResourceServers200ResponseOneOf {
+export interface GetRefreshToken200Response {
+    [key: string]: any | any;
     /**
+     * The ID of the refresh token
+     *
      */
-    start: number;
+    id: string;
     /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
      */
-    limit: number;
+    user_id: string;
     /**
      */
-    total: number;
+    created_at: GetRefreshToken200ResponseCreatedAt | null;
     /**
      */
-    resource_servers: Array<ResourceServer>;
-}
-/**
- *
- */
-export type GetRolePermission200Response = Array<Permission> | GetRolePermission200ResponseOneOf;
-/**
- *
- */
-export interface GetRolePermission200ResponseOneOf {
+    idle_expires_at: GetRefreshToken200ResponseIdleExpiresAt | null;
     /**
      */
-    start: number;
+    expires_at: GetRefreshToken200ResponseExpiresAt | null;
     /**
+     * ID of the client application granted with this refresh token
+     *
      */
-    limit: number;
+    client_id: string;
     /**
+     * ID of the authenticated session used to obtain this refresh-token
+     *
      */
-    total: number;
+    session_id: string | null;
     /**
+     * True if the token is a rotating refresh token
+     *
      */
-    permissions: Array<Permission>;
+    rotating: boolean;
+    /**
+     * A list of the resource server IDs associated to this refresh-token and their granted scopes
+     *
+     */
+    resource_servers: Array<GetRefreshToken200ResponseResourceServersInner>;
 }
 /**
  *
  */
-export type GetRoleUser200Response = Array<GetRoleUser200ResponseOneOfInner> | GetRoleUser200ResponseOneOf | GetRoleUser200ResponseOneOf1;
+export type GetRefreshToken200ResponseCreatedAt = string | {
+    [key: string]: any;
+};
 /**
  *
  */
-export interface GetRoleUser200ResponseOneOf {
-    /**
-     */
-    start: number;
-    /**
-     */
-    limit: number;
+export type GetRefreshToken200ResponseExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshToken200ResponseIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export interface GetRefreshToken200ResponseResourceServersInner {
+    [key: string]: any | any;
     /**
+     * Resource server ID
+     *
      */
-    total: number;
+    audience: string;
     /**
+     * List of scopes for the refresh token
+     *
      */
-    users: Array<GetRoleUser200ResponseOneOfInner>;
+    scopes: string;
 }
 /**
  *
  */
-export interface GetRoleUser200ResponseOneOf1 {
-    /**
-     */
-    next: string;
+export interface GetRefreshTokensForUser200Response {
+    [key: string]: any | any;
     /**
      */
-    users: Array<GetRoleUser200ResponseOneOfInner>;
+    sessions: Array<GetRefreshTokensForUser200ResponseSessionsInner>;
 }
 /**
  *
  */
-export interface GetRoleUser200ResponseOneOfInner {
+export interface GetRefreshTokensForUser200ResponseSessionsInner {
+    [key: string]: any | any;
     /**
-     * ID of this user.
+     * The ID of the refresh token
      *
      */
-    user_id: string;
+    id: string;
     /**
-     * URL to a picture for this user.
+     * ID of the user which can be used when interacting with other APIs.
      *
      */
-    picture: string;
+    user_id: string;
     /**
-     * Name of this user.
-     *
      */
-    name: string;
+    created_at: GetRefreshTokensForUser200ResponseSessionsInnerCreatedAt;
     /**
-     * Email address of this user.
-     *
      */
-    email: string;
-}
-/**
- *
- */
-export type GetRules200Response = Array<Rule> | GetRules200ResponseOneOf;
-/**
- *
- */
-export interface GetRules200ResponseOneOf {
+    idle_expires_at: GetRefreshTokensForUser200ResponseSessionsInnerIdleExpiresAt;
     /**
      */
-    start: number;
+    expires_at: GetRefreshTokensForUser200ResponseSessionsInnerExpiresAt;
     /**
+     * ID of the client application granted with this refresh token
+     *
      */
-    limit: number;
+    client_id: string;
     /**
+     * ID of the authenticated session used to obtain this refresh-token
+     *
      */
-    total: number;
+    session_id: string;
     /**
+     * True if the token is a rotating refresh token
+     *
      */
-    rules: Array<Rule>;
+    rotating: boolean;
+    /**
+     * A list of the resource server IDs associated to this refresh-token and their granted scopes
+     *
+     */
+    resource_servers: Array<GetRefreshToken200ResponseResourceServersInner>;
 }
 /**
  *
  */
-export interface GetRulesConfigs200ResponseInner {
-    [key: string]: any | any;
-    /**
+export type GetRefreshTokensForUser200ResponseSessionsInnerCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshTokensForUser200ResponseSessionsInnerExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshTokensForUser200ResponseSessionsInnerIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetResourceServers200Response = Array<ResourceServer> | GetResourceServers200ResponseOneOf;
+/**
+ *
+ */
+export interface GetResourceServers200ResponseOneOf {
+    /**
+     */
+    start: number;
+    /**
+     */
+    limit: number;
+    /**
+     */
+    total: number;
+    /**
+     */
+    resource_servers: Array<ResourceServer>;
+}
+/**
+ *
+ */
+export type GetRolePermission200Response = Array<Permission> | GetRolePermission200ResponseOneOf;
+/**
+ *
+ */
+export interface GetRolePermission200ResponseOneOf {
+    /**
+     */
+    start: number;
+    /**
+     */
+    limit: number;
+    /**
+     */
+    total: number;
+    /**
+     */
+    permissions: Array<Permission>;
+}
+/**
+ *
+ */
+export type GetRoleUser200Response = Array<GetRoleUser200ResponseOneOfInner> | GetRoleUser200ResponseOneOf | GetRoleUser200ResponseOneOf1;
+/**
+ *
+ */
+export interface GetRoleUser200ResponseOneOf {
+    /**
+     */
+    start: number;
+    /**
+     */
+    limit: number;
+    /**
+     */
+    total: number;
+    /**
+     */
+    users: Array<GetRoleUser200ResponseOneOfInner>;
+}
+/**
+ *
+ */
+export interface GetRoleUser200ResponseOneOf1 {
+    /**
+     */
+    next: string;
+    /**
+     */
+    users: Array<GetRoleUser200ResponseOneOfInner>;
+}
+/**
+ *
+ */
+export interface GetRoleUser200ResponseOneOfInner {
+    /**
+     * ID of this user.
+     *
+     */
+    user_id: string;
+    /**
+     * URL to a picture for this user.
+     *
+     */
+    picture: string;
+    /**
+     * Name of this user.
+     *
+     */
+    name: string;
+    /**
+     * Email address of this user.
+     *
+     */
+    email: string;
+}
+/**
+ *
+ */
+export type GetRules200Response = Array<Rule> | GetRules200ResponseOneOf;
+/**
+ *
+ */
+export interface GetRules200ResponseOneOf {
+    /**
+     */
+    start: number;
+    /**
+     */
+    limit: number;
+    /**
+     */
+    total: number;
+    /**
+     */
+    rules: Array<Rule>;
+}
+/**
+ *
+ */
+export interface GetRulesConfigs200ResponseInner {
+    [key: string]: any | any;
+    /**
      * Key for a rules config variable.
      *
      */
     key: string;
 }
+/**
+ *
+ */
+export interface GetScimConfiguration200Response {
+    /**
+     * The connection's identifier
+     *
+     */
+    connection_id: string;
+    /**
+     * The connection's identifier
+     *
+     */
+    connection_name: string;
+    /**
+     * The connection's strategy
+     *
+     */
+    strategy: string;
+    /**
+     * The tenant's name
+     *
+     */
+    tenant_name: string;
+    /**
+     * User ID attribute for generating unique user ids
+     *
+     */
+    user_id_attribute: string;
+    /**
+     * The mapping between auth0 and SCIM
+     *
+     */
+    mapping: Array<GetScimConfiguration200ResponseMappingInner>;
+    /**
+     * The Date Time Scim Configuration was created
+     *
+     */
+    created_at: string;
+    /**
+     * The Date Time Scim Configuration was last updated
+     *
+     */
+    updated_on: string;
+}
+/**
+ *
+ */
+export interface GetScimConfiguration200ResponseMappingInner {
+    [key: string]: any | any;
+    /**
+     * The field location in the auth0 schema
+     *
+     */
+    auth0: string;
+    /**
+     * The field location in the SCIM schema
+     *
+     */
+    scim: string;
+}
+/**
+ *
+ */
+export interface GetScimTokens200ResponseInner {
+    [key: string]: any | any;
+    /**
+     * The token's identifier
+     *
+     */
+    token_id: string;
+    /**
+     * The scopes of the scim token
+     *
+     */
+    scopes: Array<string>;
+    /**
+     * The token's created at timestamp
+     *
+     */
+    created_at: string;
+    /**
+     * The token's valid until timestamp
+     *
+     */
+    valid_until: string;
+    /**
+     * The token's last used at timestamp
+     *
+     */
+    last_used_at: string;
+}
+/**
+ *
+ */
+export interface GetSession200Response {
+    [key: string]: any | any;
+    /**
+     * The ID of the session
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
+     */
+    user_id: string;
+    /**
+     */
+    created_at: GetSession200ResponseCreatedAt | null;
+    /**
+     */
+    updated_at: GetSession200ResponseUpdatedAt | null;
+    /**
+     */
+    authenticated_at: GetSession200ResponseAuthenticatedAt | null;
+    /**
+     */
+    idle_expires_at: GetSession200ResponseIdleExpiresAt | null;
+    /**
+     */
+    expires_at: GetSession200ResponseExpiresAt | null;
+    /**
+     */
+    device: GetSession200ResponseDevice;
+    /**
+     * List of client details for the session
+     *
+     */
+    clients: Array<GetSession200ResponseClientsInner>;
+    /**
+     */
+    authentication: GetSession200ResponseAuthentication;
+}
+/**
+ *
+ */
+export type GetSession200ResponseAuthenticatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Details about authentication signals obtained during the login flow
+ */
+export interface GetSession200ResponseAuthentication {
+    [key: string]: any | any;
+    /**
+     * Contains the authentication methods a user has completed during their session
+     *
+     */
+    methods: Array<GetSession200ResponseAuthenticationMethodsInner>;
+}
+/**
+ * Authentication signal details
+ */
+export interface GetSession200ResponseAuthenticationMethodsInner {
+    [key: string]: any | any;
+    /**
+     * One of: "federated", "passkey", "pwd", "sms", "email", "mfa", "mock" or a custom method denoted by a URL
+     *
+     */
+    name: string;
+    /**
+     */
+    timestamp: GetSession200ResponseAuthenticationMethodsInnerTimestamp | null;
+    /**
+     * A specific MFA factor. Only present when "name" is set to "mfa"
+     *
+     */
+    type$: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseAuthenticationMethodsInnerTimestamp = string | {
+    [key: string]: any;
+};
+/**
+ * Client details
+ */
+export interface GetSession200ResponseClientsInner {
+    [key: string]: any | any;
+    /**
+     * ID of client for the session
+     *
+     */
+    client_id: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Metadata related to the device used in the session
+ */
+export interface GetSession200ResponseDevice {
+    [key: string]: any | any;
+    /**
+     * First IP address associated with this session
+     *
+     */
+    initial_ip: string | null;
+    /**
+     * First autonomous system number associated with this session
+     *
+     */
+    initial_asn: string;
+    /**
+     * Last user agent of the device from which this user logged in
+     *
+     */
+    last_user_agent: string;
+    /**
+     * Last IP address from which this user logged in
+     *
+     */
+    last_ip: string | null;
+    /**
+     * Last autonomous system number from which this user logged in
+     *
+     */
+    last_asn: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSession200ResponseIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSession200ResponseUpdatedAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export interface GetSessionsForUser200Response {
+    [key: string]: any | any;
+    /**
+     */
+    sessions: Array<GetSessionsForUser200ResponseSessionsInner>;
+}
+/**
+ *
+ */
+export interface GetSessionsForUser200ResponseSessionsInner {
+    [key: string]: any | any;
+    /**
+     * The ID of the session
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
+     */
+    user_id: string;
+    /**
+     */
+    created_at: GetSessionsForUser200ResponseSessionsInnerCreatedAt;
+    /**
+     */
+    updated_at: GetSessionsForUser200ResponseSessionsInnerUpdatedAt;
+    /**
+     */
+    authenticated_at: GetSessionsForUser200ResponseSessionsInnerAuthenticatedAt;
+    /**
+     */
+    idle_expires_at: GetSessionsForUser200ResponseSessionsInnerIdleExpiresAt;
+    /**
+     */
+    expires_at: GetSessionsForUser200ResponseSessionsInnerExpiresAt;
+    /**
+     */
+    device: GetSessionsForUser200ResponseSessionsInnerDevice;
+    /**
+     * List of client details for the session
+     *
+     */
+    clients: Array<GetSession200ResponseClientsInner>;
+    /**
+     */
+    authentication: GetSessionsForUser200ResponseSessionsInnerAuthentication;
+}
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerAuthenticatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Details about authentication signals obtained during the login flow
+ */
+export interface GetSessionsForUser200ResponseSessionsInnerAuthentication {
+    [key: string]: any | any;
+    /**
+     * Contains the authentication methods a user has completed during their session
+     *
+     */
+    methods: Array<GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInner>;
+}
+/**
+ * Authentication signal details
+ */
+export interface GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInner {
+    [key: string]: any | any;
+    /**
+     * One of: "federated", "passkey", "pwd", "sms", "email", "mfa", "mock" or a custom method denoted by a URL
+     *
+     */
+    name: string;
+    /**
+     */
+    timestamp: GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInnerTimestamp;
+    /**
+     * A specific MFA factor. Only present when "name" is set to "mfa"
+     *
+     */
+    type$: string;
+}
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInnerTimestamp = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Metadata related to the device used in the session
+ */
+export interface GetSessionsForUser200ResponseSessionsInnerDevice {
+    [key: string]: any | any;
+    /**
+     * First IP address associated with this session
+     *
+     */
+    initial_ip: string;
+    /**
+     * First autonomous system number associated with this session
+     *
+     */
+    initial_asn: string;
+    /**
+     * Last user agent of the device from which this user logged in
+     *
+     */
+    last_user_agent: string;
+    /**
+     * Last IP address from which this user logged in
+     *
+     */
+    last_ip: string;
+    /**
+     * Last autonomous system number from which this user logged in
+     *
+     */
+    last_asn: string;
+}
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerUpdatedAt = string | {
+    [key: string]: any;
+};
 /**
  *
  */
@@ -7533,6 +8311,21 @@ export interface PatchOrganizationsByIdRequestBranding {
      */
     colors?: GetOrganizations200ResponseOneOfInnerBrandingColors;
 }
+/**
+ *
+ */
+export interface PatchScimConfigurationRequest {
+    /**
+     * User ID attribute for generating unique user ids
+     *
+     */
+    user_id_attribute: string;
+    /**
+     * The mapping between auth0 and SCIM
+     *
+     */
+    mapping: Array<PostScimConfigurationRequestMappingInner>;
+}
 /**
  *
  */
@@ -9428,6 +10221,82 @@ export interface PostRoleUsersRequest {
      */
     users: Array<string>;
 }
+/**
+ *
+ */
+export interface PostScimConfigurationRequest {
+    /**
+     * User ID attribute for generating unique user ids
+     *
+     */
+    user_id_attribute?: string;
+    /**
+     * The mapping between auth0 and SCIM
+     *
+     */
+    mapping?: Array<PostScimConfigurationRequestMappingInner>;
+}
+/**
+ *
+ */
+export interface PostScimConfigurationRequestMappingInner {
+    [key: string]: any | any;
+    /**
+     * The field location in the auth0 schema
+     *
+     */
+    auth0?: string;
+    /**
+     * The field location in the SCIM schema
+     *
+     */
+    scim?: string;
+}
+/**
+ *
+ */
+export interface PostScimToken201Response {
+    /**
+     * The token's identifier
+     *
+     */
+    token_id: string;
+    /**
+     * The scim client's token
+     *
+     */
+    token: string;
+    /**
+     * The scopes of the scim token
+     *
+     */
+    scopes: Array<string>;
+    /**
+     * The token's created at timestamp
+     *
+     */
+    created_at: string;
+    /**
+     * The token's valid until at timestamp
+     *
+     */
+    valid_until: string;
+}
+/**
+ * SCIM Token
+ */
+export interface PostScimTokenRequest {
+    /**
+     * The scopes of the scim token
+     *
+     */
+    scopes?: Array<string>;
+    /**
+     * Lifetime of the token in seconds. Must be greater than 900
+     *
+     */
+    token_lifetime?: number | null;
+}
 /**
  *
  */
@@ -10138,6 +11007,18 @@ export interface ResourceServer {
     /**
      */
     client: object;
+    /**
+     */
+    token_encryption: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy: ResourceServerConsentPolicyEnum;
+    /**
+     */
+    authorization_details: Array<any>;
+    /**
+     */
+    proof_of_possession: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10151,7 +11032,12 @@ export declare const ResourceServerTokenDialectEnum: {
     readonly rfc9068_profile: "rfc9068_profile";
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
-export type ResourceServerTokenDialectEnum = (typeof ResourceServerTokenDialectEnum)[keyof typeof ResourceServerTokenDialectEnum];
+export type ResourceServerTokenDialectEnum = (typeof ResourceServerTokenDialectEnum)[keyof typeof ResourceServerTokenDialectEnum];
+export declare const ResourceServerConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerConsentPolicyEnum = (typeof ResourceServerConsentPolicyEnum)[keyof typeof ResourceServerConsentPolicyEnum];
 /**
  *
  */
@@ -10192,7 +11078,7 @@ export interface ResourceServerCreate {
      */
     token_lifetime?: number;
     /**
-     * Dialect of access tokens that should be issued. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
+     * Dialect of issued access token. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
      *
      */
     token_dialect?: ResourceServerCreateTokenDialectEnum;
@@ -10209,6 +11095,18 @@ export interface ResourceServerCreate {
     /**
      */
     client?: object;
+    /**
+     */
+    token_encryption?: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy?: ResourceServerCreateConsentPolicyEnum;
+    /**
+     */
+    authorization_details?: Array<any>;
+    /**
+     */
+    proof_of_possession?: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerCreateSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10223,6 +11121,78 @@ export declare const ResourceServerCreateTokenDialectEnum: {
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
 export type ResourceServerCreateTokenDialectEnum = (typeof ResourceServerCreateTokenDialectEnum)[keyof typeof ResourceServerCreateTokenDialectEnum];
+export declare const ResourceServerCreateConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerCreateConsentPolicyEnum = (typeof ResourceServerCreateConsentPolicyEnum)[keyof typeof ResourceServerCreateConsentPolicyEnum];
+/**
+ * Proof-of-Possession configuration for access tokens
+ */
+export interface ResourceServerProofOfPossession {
+    /**
+     * Intended mechanism for Proof-of-Possession
+     *
+     */
+    mechanism: ResourceServerProofOfPossessionMechanismEnum;
+    /**
+     * Whether the use of Proof-of-Possession is required for the resource server
+     *
+     */
+    required: boolean;
+}
+export declare const ResourceServerProofOfPossessionMechanismEnum: {
+    readonly mtls: "mtls";
+};
+export type ResourceServerProofOfPossessionMechanismEnum = (typeof ResourceServerProofOfPossessionMechanismEnum)[keyof typeof ResourceServerProofOfPossessionMechanismEnum];
+/**
+ *
+ */
+export interface ResourceServerTokenEncryption {
+    /**
+     * Format of the encrypted JWT payload.
+     *
+     */
+    format: ResourceServerTokenEncryptionFormatEnum;
+    /**
+     */
+    encryption_key: ResourceServerTokenEncryptionEncryptionKey;
+}
+export declare const ResourceServerTokenEncryptionFormatEnum: {
+    readonly compact_nested_jwe: "compact-nested-jwe";
+};
+export type ResourceServerTokenEncryptionFormatEnum = (typeof ResourceServerTokenEncryptionFormatEnum)[keyof typeof ResourceServerTokenEncryptionFormatEnum];
+/**
+ *
+ */
+export interface ResourceServerTokenEncryptionEncryptionKey {
+    /**
+     * Name of the encryption key.
+     *
+     */
+    name?: string;
+    /**
+     * Algorithm used to encrypt the token.
+     *
+     */
+    alg: ResourceServerTokenEncryptionEncryptionKeyAlgEnum;
+    /**
+     * Key ID.
+     *
+     */
+    kid?: string;
+    /**
+     * PEM-formatted public key. Must be JSON escaped.
+     *
+     */
+    pem: string;
+}
+export declare const ResourceServerTokenEncryptionEncryptionKeyAlgEnum: {
+    readonly _256: "RSA-OAEP-256";
+    readonly _384: "RSA-OAEP-384";
+    readonly _512: "RSA-OAEP-512";
+};
+export type ResourceServerTokenEncryptionEncryptionKeyAlgEnum = (typeof ResourceServerTokenEncryptionEncryptionKeyAlgEnum)[keyof typeof ResourceServerTokenEncryptionEncryptionKeyAlgEnum];
 /**
  *
  */
@@ -10263,7 +11233,7 @@ export interface ResourceServerUpdate {
      */
     token_lifetime?: number;
     /**
-     * Dialect of access tokens that should be issued. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
+     * Dialect of issued access token. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
      *
      */
     token_dialect?: ResourceServerUpdateTokenDialectEnum;
@@ -10275,6 +11245,18 @@ export interface ResourceServerUpdate {
     /**
      */
     client?: object;
+    /**
+     */
+    token_encryption?: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy?: ResourceServerUpdateConsentPolicyEnum;
+    /**
+     */
+    authorization_details?: Array<any>;
+    /**
+     */
+    proof_of_possession?: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerUpdateSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10289,6 +11271,11 @@ export declare const ResourceServerUpdateTokenDialectEnum: {
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
 export type ResourceServerUpdateTokenDialectEnum = (typeof ResourceServerUpdateTokenDialectEnum)[keyof typeof ResourceServerUpdateTokenDialectEnum];
+export declare const ResourceServerUpdateConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerUpdateConsentPolicyEnum = (typeof ResourceServerUpdateConsentPolicyEnum)[keyof typeof ResourceServerUpdateConsentPolicyEnum];
 /**
  *
  */
@@ -10615,6 +11602,19 @@ export interface TenantSettings {
      *
      */
     customize_mfa_in_postlogin_action: boolean;
+    /**
+     * Supported ACR values
+     *
+     */
+    acr_values_supported: Array<string>;
+    /**
+     */
+    mtls: TenantSettingsMtls | null;
+    /**
+     * Enables the use of Pushed Authorization Requests
+     *
+     */
+    pushed_authorization_requests_supported: boolean;
 }
 export declare const TenantSettingsEnabledLocalesEnum: {
     readonly ar: "ar";
@@ -10837,6 +11837,11 @@ export interface TenantSettingsFlags {
      *
      */
     mfa_show_factor_list_on_enrollment: boolean;
+    /**
+     * Removes alg property from jwks .well-known endpoint
+     *
+     */
+    remove_alg_from_jwks: boolean;
 }
 /**
  * Guardian page customization.
@@ -10853,6 +11858,16 @@ export interface TenantSettingsGuardianMfaPage {
      */
     html: string;
 }
+/**
+ * mTLS configuration.
+ */
+export interface TenantSettingsMtls {
+    /**
+     * If true, enables mTLS endpoint aliases
+     *
+     */
+    enable_endpoint_aliases: boolean;
+}
 /**
  * Session cookie configuration
  */
@@ -10973,6 +11988,19 @@ export interface TenantSettingsUpdate {
      *
      */
     allow_organization_name_in_authentication_api?: boolean | null;
+    /**
+     * Supported ACR values
+     *
+     */
+    acr_values_supported?: Array<string>;
+    /**
+     */
+    mtls?: TenantSettingsUpdateMtls | null;
+    /**
+     * Enables the use of Pushed Authorization Requests
+     *
+     */
+    pushed_authorization_requests_supported?: boolean | null;
 }
 export declare const TenantSettingsUpdateEnabledLocalesEnum: {
     readonly ar: "ar";
@@ -11205,6 +12233,11 @@ export interface TenantSettingsUpdateFlags {
      *
      */
     mfa_show_factor_list_on_enrollment?: boolean;
+    /**
+     * Removes alg property from jwks .well-known endpoint
+     *
+     */
+    remove_alg_from_jwks?: boolean;
 }
 export declare const TenantSettingsUpdateFlagsChangePwdFlowV1Enum: {
     readonly false: false;
@@ -11225,6 +12258,16 @@ export interface TenantSettingsUpdateGuardianMfaPage {
      */
     html?: string;
 }
+/**
+ * mTLS configuration.
+ */
+export interface TenantSettingsUpdateMtls {
+    /**
+     * If true, enables mTLS endpoint aliases
+     *
+     */
+    enable_endpoint_aliases?: boolean;
+}
 /**
  * Sessions related settings for tenant
  */
@@ -12191,6 +13234,31 @@ export interface DeleteConnectionsByIdRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface DeleteScimConfigurationRequest {
+    /**
+     * The id of the connection to delete its SCIM configuration
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface DeleteTokensByTokenIdRequest {
+    /**
+     * The connection id that owns the SCIM token to delete
+     *
+     */
+    id: string;
+    /**
+     * The id of the scim token to delete
+     *
+     */
+    tokenId: string;
+}
 /**
  *
  */
@@ -12344,6 +13412,36 @@ export interface GetConnectionsByIdRequest {
      */
     include_fields?: boolean;
 }
+/**
+ *
+ */
+export interface GetDefaultMappingRequest {
+    /**
+     * The id of the connection to retrieve its default SCIM mapping
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetScimConfigurationRequest {
+    /**
+     * The id of the connection to retrieve its SCIM configuration
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetScimTokensRequest {
+    /**
+     * The id of the connection to retrieve its SCIM configuration
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -12364,6 +13462,36 @@ export interface PatchConnectionsByIdRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface PatchScimConfigurationOperationRequest {
+    /**
+     * The id of the connection to update its SCIM configuration
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface PostScimConfigurationOperationRequest {
+    /**
+     * The id of the connection to create its SCIM configuration
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface PostScimTokenOperationRequest {
+    /**
+     * The id of the connection to create its SCIM token
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -13570,6 +14698,26 @@ export interface PutPartialsRequest {
      */
     prompt: PutPartialsPromptEnum;
 }
+/**
+ *
+ */
+export interface DeleteRefreshTokenRequest {
+    /**
+     * ID of the refresh token to delete.
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetRefreshTokenRequest {
+    /**
+     * ID refresh token to retrieve
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -13870,6 +15018,26 @@ export interface PutRulesConfigsByKeyOperationRequest {
      */
     key: string;
 }
+/**
+ *
+ */
+export interface DeleteSessionRequest {
+    /**
+     * ID of the session to delete.
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetSessionRequest {
+    /**
+     * ID of session to retrieve
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -14024,6 +15192,26 @@ export interface DeletePermissionsOperationRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface DeleteRefreshTokensForUserRequest {
+    /**
+     * ID of the user to get remove refresh tokens for
+     *
+     */
+    user_id: string;
+}
+/**
+ *
+ */
+export interface DeleteSessionsForUserRequest {
+    /**
+     * ID of the user to get sessions for
+     *
+     */
+    user_id: string;
+}
 /**
  *
  */
@@ -14236,6 +15424,56 @@ export interface GetPermissionsRequest {
      */
     include_totals?: boolean;
 }
+/**
+ *
+ */
+export interface GetRefreshTokensForUserRequest {
+    /**
+     * ID of the user to get refresh tokens for
+     *
+     */
+    user_id: string;
+    /**
+     * Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     *
+     */
+    include_totals?: boolean;
+    /**
+     * Optional token ID from which to start selection (exclusive).
+     *
+     */
+    from?: string;
+    /**
+     * Number of results per page. Defaults to 50.
+     *
+     */
+    take?: number;
+}
+/**
+ *
+ */
+export interface GetSessionsForUserRequest {
+    /**
+     * ID of the user to get sessions for
+     *
+     */
+    user_id: string;
+    /**
+     * Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     *
+     */
+    include_totals?: boolean;
+    /**
+     * Optional session ID from which to start selection (exclusive).
+     *
+     */
+    from?: string;
+    /**
+     * Number of results per page. Defaults to 50.
+     *
+     */
+    take?: number;
+}
 /**
  *
  */