auth0 4.7.0 → 4.8.0

package/dist/esm/management/__generated/models/index.d.ts

@@ -194,6 +194,24 @@ export interface Client {
     /**
      */
     client_authentication_methods: ClientClientAuthenticationMethods | null;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests: boolean;
+    /**
+     */
+    signed_request_object: ClientSignedRequestObject;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level: ClientComplianceLevelEnum;
 }
 export declare const ClientTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -213,6 +231,13 @@ export declare const ClientOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientOrganizationRequireBehaviorEnum = (typeof ClientOrganizationRequireBehaviorEnum)[keyof typeof ClientOrganizationRequireBehaviorEnum];
+export declare const ClientComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientComplianceLevelEnum = (typeof ClientComplianceLevelEnum)[keyof typeof ClientComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -853,6 +878,12 @@ export interface ClientClientAuthenticationMethods {
     /**
      */
     private_key_jwt: ClientClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth: ClientClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth: ClientClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * Defines `private_key_jwt` client authentication method. If this property is defined, the client is enabled to use the Private Key JWT authentication method.
@@ -874,6 +905,26 @@ export interface ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner
      */
     id: string;
 }
+/**
+ * Defines `self_signed_tls_client_auth` client authentication method. If the property is defined, the client is configured to use mTLS authentication method utilizing self-signed certificate.
+ */
+export interface ClientClientAuthenticationMethodsSelfSignedTlsClientAuth {
+    /**
+     * A list of unique and previously created credential IDs enabled on the client for mTLS authentication utilizing self-signed certificate.
+     *
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
+/**
+ * Defines `tls_client_auth` client authentication method. If the property is defined, the client is configured to use CA-based mTLS authentication method.
+ */
+export interface ClientClientAuthenticationMethodsTlsClientAuth {
+    /**
+     * A list of unique and previously created credential IDs enabled on the client for CA-based mTLS authentication.
+     *
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -1034,6 +1085,24 @@ export interface ClientCreate {
     /**
      */
     client_authentication_methods?: ClientCreateClientAuthenticationMethods;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests?: boolean;
+    /**
+     */
+    signed_request_object?: ClientCreateSignedRequestObject;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession?: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level?: ClientCreateComplianceLevelEnum;
 }
 export declare const ClientCreateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -1079,6 +1148,13 @@ export declare const ClientCreateOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientCreateOrganizationRequireBehaviorEnum = (typeof ClientCreateOrganizationRequireBehaviorEnum)[keyof typeof ClientCreateOrganizationRequireBehaviorEnum];
+export declare const ClientCreateComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientCreateComplianceLevelEnum = (typeof ClientCreateComplianceLevelEnum)[keyof typeof ClientCreateComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -1651,6 +1727,12 @@ export interface ClientCreateClientAuthenticationMethods {
     /**
      */
     private_key_jwt?: ClientCreateClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth?: ClientCreateClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth?: ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * Defines `private_key_jwt` client authentication method. If this property is defined, the client is enabled to use the Private Key JWT authentication method.
@@ -1707,6 +1789,71 @@ export declare const ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredent
     readonly PS256: "PS256";
 };
 export type ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum = (typeof ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum)[keyof typeof ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum];
+/**
+ * Defines `self_signed_tls_client_auth` client authentication method. If the property is defined, the client is configured to use mTLS authentication method utilizing self-signed certificate.
+ */
+export interface ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuth {
+    /**
+     * Fully defined credentials that will be enabled on the client for mTLS authentication utilizing self-signed certificate.
+     *
+     */
+    credentials: Array<ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInner>;
+}
+/**
+ *
+ */
+export interface ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInner {
+    /**
+     */
+    credential_type: ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum;
+    /**
+     */
+    name?: string;
+    /**
+     * PEM-formatted X509 certificate. Must be JSON escaped.
+     *
+     */
+    pem: string;
+}
+export declare const ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum: {
+    readonly x509_cert: "x509_cert";
+};
+export type ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum = (typeof ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum)[keyof typeof ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum];
+/**
+ * Defines `tls_client_auth` client authentication method. If the property is defined, the client is configured to use CA-based mTLS authentication method.
+ */
+export interface ClientCreateClientAuthenticationMethodsTlsClientAuth {
+    /**
+     * Fully defined credentials that will be enabled on the client for CA-based mTLS authentication.
+     *
+     */
+    credentials: Array<ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInner>;
+}
+/**
+ *
+ */
+export interface ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInner {
+    /**
+     */
+    credential_type?: ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum;
+    /**
+     */
+    name?: string;
+    /**
+     * Subject Distinguished Name. Mutually exclusive with `pem` property.
+     *
+     */
+    subject_dn?: string;
+    /**
+     * PEM-formatted X509 certificate. Must be JSON escaped. Mutually exclusive with `subject_dn` property.
+     *
+     */
+    pem?: string;
+}
+export declare const ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum: {
+    readonly cert_subject_dn: "cert_subject_dn";
+};
+export type ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum = (typeof ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum)[keyof typeof ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum];
 /**
  * Encryption used for WsFed responses with this client.
  */
@@ -1837,6 +1984,19 @@ export interface ClientCreateOidcLogout {
      */
     backchannel_logout_urls: Array<string>;
 }
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientCreateSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required?: boolean;
+    /**
+     */
+    credentials?: Array<ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  * Encryption used for WsFed responses with this client.
  */
@@ -2073,6 +2233,19 @@ export declare const ClientRefreshTokenExpirationTypeEnum: {
     readonly non_expiring: "non-expiring";
 };
 export type ClientRefreshTokenExpirationTypeEnum = (typeof ClientRefreshTokenExpirationTypeEnum)[keyof typeof ClientRefreshTokenExpirationTypeEnum];
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required: boolean;
+    /**
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -2257,6 +2430,24 @@ export interface ClientUpdate {
     /**
      */
     client_authentication_methods?: ClientUpdateClientAuthenticationMethods | null;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests?: boolean;
+    /**
+     */
+    signed_request_object?: ClientUpdateSignedRequestObject | null;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession?: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level?: ClientUpdateComplianceLevelEnum;
 }
 export declare const ClientUpdateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -2303,6 +2494,13 @@ export declare const ClientUpdateOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientUpdateOrganizationRequireBehaviorEnum = (typeof ClientUpdateOrganizationRequireBehaviorEnum)[keyof typeof ClientUpdateOrganizationRequireBehaviorEnum];
+export declare const ClientUpdateComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientUpdateComplianceLevelEnum = (typeof ClientUpdateComplianceLevelEnum)[keyof typeof ClientUpdateComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -2427,6 +2625,12 @@ export interface ClientUpdateClientAuthenticationMethods {
     /**
      */
     private_key_jwt?: ClientClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth?: ClientClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth?: ClientClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * The client's encryption key
@@ -2525,6 +2729,19 @@ export interface ClientUpdateOidcLogout {
      */
     backchannel_logout_urls?: Array<string>;
 }
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientUpdateSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required?: boolean;
+    /**
+     */
+    credentials?: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -4683,6 +4900,16 @@ export interface GetCredentials200ResponseInner {
      *
      */
     credential_type: string;
+    /**
+     * The X509 certificate's Subject Distinguished Name
+     *
+     */
+    subject_dn: string;
+    /**
+     * The X509 certificate's SHA256 thumbprint
+     *
+     */
+    thumbprint_sha256: string;
     /**
      * The ISO 8601 formatted date the credential was created.
      *
@@ -6117,6 +6344,157 @@ export declare const GetPnProviders200ResponseProviderEnum: {
     readonly direct: "direct";
 };
 export type GetPnProviders200ResponseProviderEnum = (typeof GetPnProviders200ResponseProviderEnum)[keyof typeof GetPnProviders200ResponseProviderEnum];
+/**
+ *
+ */
+export interface GetRefreshToken200Response {
+    [key: string]: any | any;
+    /**
+     * The ID of the refresh token
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
+     */
+    user_id: string;
+    /**
+     */
+    created_at: GetRefreshToken200ResponseCreatedAt | null;
+    /**
+     */
+    idle_expires_at: GetRefreshToken200ResponseIdleExpiresAt | null;
+    /**
+     */
+    expires_at: GetRefreshToken200ResponseExpiresAt | null;
+    /**
+     * ID of the client application granted with this refresh token
+     *
+     */
+    client_id: string;
+    /**
+     * ID of the authenticated session used to obtain this refresh-token
+     *
+     */
+    session_id: string | null;
+    /**
+     * True if the token is a rotating refresh token
+     *
+     */
+    rotating: boolean;
+    /**
+     * A list of the resource server IDs associated to this refresh-token and their granted scopes
+     *
+     */
+    resource_servers: Array<GetRefreshToken200ResponseResourceServersInner>;
+}
+/**
+ *
+ */
+export type GetRefreshToken200ResponseCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshToken200ResponseExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshToken200ResponseIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export interface GetRefreshToken200ResponseResourceServersInner {
+    [key: string]: any | any;
+    /**
+     * Resource server ID
+     *
+     */
+    audience: string;
+    /**
+     * List of scopes for the refresh token
+     *
+     */
+    scopes: string;
+}
+/**
+ *
+ */
+export interface GetRefreshTokensForUser200Response {
+    [key: string]: any | any;
+    /**
+     */
+    sessions: Array<GetRefreshTokensForUser200ResponseSessionsInner>;
+}
+/**
+ *
+ */
+export interface GetRefreshTokensForUser200ResponseSessionsInner {
+    [key: string]: any | any;
+    /**
+     * The ID of the refresh token
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
+     */
+    user_id: string;
+    /**
+     */
+    created_at: GetRefreshTokensForUser200ResponseSessionsInnerCreatedAt;
+    /**
+     */
+    idle_expires_at: GetRefreshTokensForUser200ResponseSessionsInnerIdleExpiresAt;
+    /**
+     */
+    expires_at: GetRefreshTokensForUser200ResponseSessionsInnerExpiresAt;
+    /**
+     * ID of the client application granted with this refresh token
+     *
+     */
+    client_id: string;
+    /**
+     * ID of the authenticated session used to obtain this refresh-token
+     *
+     */
+    session_id: string;
+    /**
+     * True if the token is a rotating refresh token
+     *
+     */
+    rotating: boolean;
+    /**
+     * A list of the resource server IDs associated to this refresh-token and their granted scopes
+     *
+     */
+    resource_servers: Array<GetRefreshToken200ResponseResourceServersInner>;
+}
+/**
+ *
+ */
+export type GetRefreshTokensForUser200ResponseSessionsInnerCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshTokensForUser200ResponseSessionsInnerExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshTokensForUser200ResponseSessionsInnerIdleExpiresAt = string | {
+    [key: string]: any;
+};
 /**
  *
  */
@@ -6286,60 +6664,358 @@ export interface GetScimConfiguration200Response {
      * The Date Time Scim Configuration was created
      *
      */
-    created_at: string;
+    created_at: string;
+    /**
+     * The Date Time Scim Configuration was last updated
+     *
+     */
+    updated_on: string;
+}
+/**
+ *
+ */
+export interface GetScimConfiguration200ResponseMappingInner {
+    [key: string]: any | any;
+    /**
+     * The field location in the auth0 schema
+     *
+     */
+    auth0: string;
+    /**
+     * The field location in the SCIM schema
+     *
+     */
+    scim: string;
+}
+/**
+ *
+ */
+export interface GetScimTokens200ResponseInner {
+    [key: string]: any | any;
+    /**
+     * The token's identifier
+     *
+     */
+    token_id: string;
+    /**
+     * The scopes of the scim token
+     *
+     */
+    scopes: Array<string>;
+    /**
+     * The token's created at timestamp
+     *
+     */
+    created_at: string;
+    /**
+     * The token's valid until timestamp
+     *
+     */
+    valid_until: string;
+    /**
+     * The token's last used at timestamp
+     *
+     */
+    last_used_at: string;
+}
+/**
+ *
+ */
+export interface GetSession200Response {
+    [key: string]: any | any;
+    /**
+     * The ID of the session
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
+     */
+    user_id: string;
+    /**
+     */
+    created_at: GetSession200ResponseCreatedAt | null;
+    /**
+     */
+    updated_at: GetSession200ResponseUpdatedAt | null;
+    /**
+     */
+    authenticated_at: GetSession200ResponseAuthenticatedAt | null;
+    /**
+     */
+    idle_expires_at: GetSession200ResponseIdleExpiresAt | null;
+    /**
+     */
+    expires_at: GetSession200ResponseExpiresAt | null;
+    /**
+     */
+    device: GetSession200ResponseDevice;
+    /**
+     * List of client details for the session
+     *
+     */
+    clients: Array<GetSession200ResponseClientsInner>;
+    /**
+     */
+    authentication: GetSession200ResponseAuthentication;
+}
+/**
+ *
+ */
+export type GetSession200ResponseAuthenticatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Details about authentication signals obtained during the login flow
+ */
+export interface GetSession200ResponseAuthentication {
+    [key: string]: any | any;
+    /**
+     * Contains the authentication methods a user has completed during their session
+     *
+     */
+    methods: Array<GetSession200ResponseAuthenticationMethodsInner>;
+}
+/**
+ * Authentication signal details
+ */
+export interface GetSession200ResponseAuthenticationMethodsInner {
+    [key: string]: any | any;
+    /**
+     * One of: "federated", "passkey", "pwd", "sms", "email", "mfa", "mock" or a custom method denoted by a URL
+     *
+     */
+    name: string;
+    /**
+     */
+    timestamp: GetSession200ResponseAuthenticationMethodsInnerTimestamp | null;
+    /**
+     * A specific MFA factor. Only present when "name" is set to "mfa"
+     *
+     */
+    type$: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseAuthenticationMethodsInnerTimestamp = string | {
+    [key: string]: any;
+};
+/**
+ * Client details
+ */
+export interface GetSession200ResponseClientsInner {
+    [key: string]: any | any;
+    /**
+     * ID of client for the session
+     *
+     */
+    client_id: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Metadata related to the device used in the session
+ */
+export interface GetSession200ResponseDevice {
+    [key: string]: any | any;
+    /**
+     * First IP address associated with this session
+     *
+     */
+    initial_ip: string | null;
+    /**
+     * First autonomous system number associated with this session
+     *
+     */
+    initial_asn: string;
+    /**
+     * Last user agent of the device from which this user logged in
+     *
+     */
+    last_user_agent: string;
+    /**
+     * Last IP address from which this user logged in
+     *
+     */
+    last_ip: string | null;
+    /**
+     * Last autonomous system number from which this user logged in
+     *
+     */
+    last_asn: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSession200ResponseIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSession200ResponseUpdatedAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export interface GetSessionsForUser200Response {
+    [key: string]: any | any;
+    /**
+     */
+    sessions: Array<GetSessionsForUser200ResponseSessionsInner>;
+}
+/**
+ *
+ */
+export interface GetSessionsForUser200ResponseSessionsInner {
+    [key: string]: any | any;
+    /**
+     * The ID of the session
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
+     */
+    user_id: string;
+    /**
+     */
+    created_at: GetSessionsForUser200ResponseSessionsInnerCreatedAt;
+    /**
+     */
+    updated_at: GetSessionsForUser200ResponseSessionsInnerUpdatedAt;
+    /**
+     */
+    authenticated_at: GetSessionsForUser200ResponseSessionsInnerAuthenticatedAt;
+    /**
+     */
+    idle_expires_at: GetSessionsForUser200ResponseSessionsInnerIdleExpiresAt;
+    /**
+     */
+    expires_at: GetSessionsForUser200ResponseSessionsInnerExpiresAt;
+    /**
+     */
+    device: GetSessionsForUser200ResponseSessionsInnerDevice;
+    /**
+     * List of client details for the session
+     *
+     */
+    clients: Array<GetSession200ResponseClientsInner>;
+    /**
+     */
+    authentication: GetSessionsForUser200ResponseSessionsInnerAuthentication;
+}
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerAuthenticatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Details about authentication signals obtained during the login flow
+ */
+export interface GetSessionsForUser200ResponseSessionsInnerAuthentication {
+    [key: string]: any | any;
     /**
-     * The Date Time Scim Configuration was last updated
+     * Contains the authentication methods a user has completed during their session
      *
      */
-    updated_on: string;
+    methods: Array<GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInner>;
 }
 /**
- *
+ * Authentication signal details
  */
-export interface GetScimConfiguration200ResponseMappingInner {
+export interface GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInner {
     [key: string]: any | any;
     /**
-     * The field location in the auth0 schema
+     * One of: "federated", "passkey", "pwd", "sms", "email", "mfa", "mock" or a custom method denoted by a URL
      *
      */
-    auth0: string;
+    name: string;
     /**
-     * The field location in the SCIM schema
+     */
+    timestamp: GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInnerTimestamp;
+    /**
+     * A specific MFA factor. Only present when "name" is set to "mfa"
      *
      */
-    scim: string;
+    type$: string;
 }
 /**
  *
  */
-export interface GetScimTokens200ResponseInner {
+export type GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInnerTimestamp = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Metadata related to the device used in the session
+ */
+export interface GetSessionsForUser200ResponseSessionsInnerDevice {
     [key: string]: any | any;
     /**
-     * The token's identifier
+     * First IP address associated with this session
      *
      */
-    token_id: string;
+    initial_ip: string;
     /**
-     * The scopes of the scim token
+     * First autonomous system number associated with this session
      *
      */
-    scopes: Array<string>;
+    initial_asn: string;
     /**
-     * The token's created at timestamp
+     * Last user agent of the device from which this user logged in
      *
      */
-    created_at: string;
+    last_user_agent: string;
     /**
-     * The token's valid until timestamp
+     * Last IP address from which this user logged in
      *
      */
-    valid_until: string;
+    last_ip: string;
     /**
-     * The token's last used at timestamp
+     * Last autonomous system number from which this user logged in
      *
      */
-    last_used_at: string;
+    last_asn: string;
 }
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerUpdatedAt = string | {
+    [key: string]: any;
+};
 /**
  *
  */
@@ -10331,6 +11007,18 @@ export interface ResourceServer {
     /**
      */
     client: object;
+    /**
+     */
+    token_encryption: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy: ResourceServerConsentPolicyEnum;
+    /**
+     */
+    authorization_details: Array<any>;
+    /**
+     */
+    proof_of_possession: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10345,6 +11033,11 @@ export declare const ResourceServerTokenDialectEnum: {
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
 export type ResourceServerTokenDialectEnum = (typeof ResourceServerTokenDialectEnum)[keyof typeof ResourceServerTokenDialectEnum];
+export declare const ResourceServerConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerConsentPolicyEnum = (typeof ResourceServerConsentPolicyEnum)[keyof typeof ResourceServerConsentPolicyEnum];
 /**
  *
  */
@@ -10385,7 +11078,7 @@ export interface ResourceServerCreate {
      */
     token_lifetime?: number;
     /**
-     * Dialect of access tokens that should be issued. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
+     * Dialect of issued access token. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
      *
      */
     token_dialect?: ResourceServerCreateTokenDialectEnum;
@@ -10402,6 +11095,18 @@ export interface ResourceServerCreate {
     /**
      */
     client?: object;
+    /**
+     */
+    token_encryption?: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy?: ResourceServerCreateConsentPolicyEnum;
+    /**
+     */
+    authorization_details?: Array<any>;
+    /**
+     */
+    proof_of_possession?: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerCreateSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10416,6 +11121,78 @@ export declare const ResourceServerCreateTokenDialectEnum: {
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
 export type ResourceServerCreateTokenDialectEnum = (typeof ResourceServerCreateTokenDialectEnum)[keyof typeof ResourceServerCreateTokenDialectEnum];
+export declare const ResourceServerCreateConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerCreateConsentPolicyEnum = (typeof ResourceServerCreateConsentPolicyEnum)[keyof typeof ResourceServerCreateConsentPolicyEnum];
+/**
+ * Proof-of-Possession configuration for access tokens
+ */
+export interface ResourceServerProofOfPossession {
+    /**
+     * Intended mechanism for Proof-of-Possession
+     *
+     */
+    mechanism: ResourceServerProofOfPossessionMechanismEnum;
+    /**
+     * Whether the use of Proof-of-Possession is required for the resource server
+     *
+     */
+    required: boolean;
+}
+export declare const ResourceServerProofOfPossessionMechanismEnum: {
+    readonly mtls: "mtls";
+};
+export type ResourceServerProofOfPossessionMechanismEnum = (typeof ResourceServerProofOfPossessionMechanismEnum)[keyof typeof ResourceServerProofOfPossessionMechanismEnum];
+/**
+ *
+ */
+export interface ResourceServerTokenEncryption {
+    /**
+     * Format of the encrypted JWT payload.
+     *
+     */
+    format: ResourceServerTokenEncryptionFormatEnum;
+    /**
+     */
+    encryption_key: ResourceServerTokenEncryptionEncryptionKey;
+}
+export declare const ResourceServerTokenEncryptionFormatEnum: {
+    readonly compact_nested_jwe: "compact-nested-jwe";
+};
+export type ResourceServerTokenEncryptionFormatEnum = (typeof ResourceServerTokenEncryptionFormatEnum)[keyof typeof ResourceServerTokenEncryptionFormatEnum];
+/**
+ *
+ */
+export interface ResourceServerTokenEncryptionEncryptionKey {
+    /**
+     * Name of the encryption key.
+     *
+     */
+    name?: string;
+    /**
+     * Algorithm used to encrypt the token.
+     *
+     */
+    alg: ResourceServerTokenEncryptionEncryptionKeyAlgEnum;
+    /**
+     * Key ID.
+     *
+     */
+    kid?: string;
+    /**
+     * PEM-formatted public key. Must be JSON escaped.
+     *
+     */
+    pem: string;
+}
+export declare const ResourceServerTokenEncryptionEncryptionKeyAlgEnum: {
+    readonly _256: "RSA-OAEP-256";
+    readonly _384: "RSA-OAEP-384";
+    readonly _512: "RSA-OAEP-512";
+};
+export type ResourceServerTokenEncryptionEncryptionKeyAlgEnum = (typeof ResourceServerTokenEncryptionEncryptionKeyAlgEnum)[keyof typeof ResourceServerTokenEncryptionEncryptionKeyAlgEnum];
 /**
  *
  */
@@ -10456,7 +11233,7 @@ export interface ResourceServerUpdate {
      */
     token_lifetime?: number;
     /**
-     * Dialect of access tokens that should be issued. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
+     * Dialect of issued access token. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
      *
      */
     token_dialect?: ResourceServerUpdateTokenDialectEnum;
@@ -10468,6 +11245,18 @@ export interface ResourceServerUpdate {
     /**
      */
     client?: object;
+    /**
+     */
+    token_encryption?: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy?: ResourceServerUpdateConsentPolicyEnum;
+    /**
+     */
+    authorization_details?: Array<any>;
+    /**
+     */
+    proof_of_possession?: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerUpdateSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10482,6 +11271,11 @@ export declare const ResourceServerUpdateTokenDialectEnum: {
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
 export type ResourceServerUpdateTokenDialectEnum = (typeof ResourceServerUpdateTokenDialectEnum)[keyof typeof ResourceServerUpdateTokenDialectEnum];
+export declare const ResourceServerUpdateConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerUpdateConsentPolicyEnum = (typeof ResourceServerUpdateConsentPolicyEnum)[keyof typeof ResourceServerUpdateConsentPolicyEnum];
 /**
  *
  */
@@ -10808,6 +11602,19 @@ export interface TenantSettings {
      *
      */
     customize_mfa_in_postlogin_action: boolean;
+    /**
+     * Supported ACR values
+     *
+     */
+    acr_values_supported: Array<string>;
+    /**
+     */
+    mtls: TenantSettingsMtls | null;
+    /**
+     * Enables the use of Pushed Authorization Requests
+     *
+     */
+    pushed_authorization_requests_supported: boolean;
 }
 export declare const TenantSettingsEnabledLocalesEnum: {
     readonly ar: "ar";
@@ -11030,6 +11837,11 @@ export interface TenantSettingsFlags {
      *
      */
     mfa_show_factor_list_on_enrollment: boolean;
+    /**
+     * Removes alg property from jwks .well-known endpoint
+     *
+     */
+    remove_alg_from_jwks: boolean;
 }
 /**
  * Guardian page customization.
@@ -11046,6 +11858,16 @@ export interface TenantSettingsGuardianMfaPage {
      */
     html: string;
 }
+/**
+ * mTLS configuration.
+ */
+export interface TenantSettingsMtls {
+    /**
+     * If true, enables mTLS endpoint aliases
+     *
+     */
+    enable_endpoint_aliases: boolean;
+}
 /**
  * Session cookie configuration
  */
@@ -11166,6 +11988,19 @@ export interface TenantSettingsUpdate {
      *
      */
     allow_organization_name_in_authentication_api?: boolean | null;
+    /**
+     * Supported ACR values
+     *
+     */
+    acr_values_supported?: Array<string>;
+    /**
+     */
+    mtls?: TenantSettingsUpdateMtls | null;
+    /**
+     * Enables the use of Pushed Authorization Requests
+     *
+     */
+    pushed_authorization_requests_supported?: boolean | null;
 }
 export declare const TenantSettingsUpdateEnabledLocalesEnum: {
     readonly ar: "ar";
@@ -11398,6 +12233,11 @@ export interface TenantSettingsUpdateFlags {
      *
      */
     mfa_show_factor_list_on_enrollment?: boolean;
+    /**
+     * Removes alg property from jwks .well-known endpoint
+     *
+     */
+    remove_alg_from_jwks?: boolean;
 }
 export declare const TenantSettingsUpdateFlagsChangePwdFlowV1Enum: {
     readonly false: false;
@@ -11418,6 +12258,16 @@ export interface TenantSettingsUpdateGuardianMfaPage {
      */
     html?: string;
 }
+/**
+ * mTLS configuration.
+ */
+export interface TenantSettingsUpdateMtls {
+    /**
+     * If true, enables mTLS endpoint aliases
+     *
+     */
+    enable_endpoint_aliases?: boolean;
+}
 /**
  * Sessions related settings for tenant
  */
@@ -13848,6 +14698,26 @@ export interface PutPartialsRequest {
      */
     prompt: PutPartialsPromptEnum;
 }
+/**
+ *
+ */
+export interface DeleteRefreshTokenRequest {
+    /**
+     * ID of the refresh token to delete.
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetRefreshTokenRequest {
+    /**
+     * ID refresh token to retrieve
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -14148,6 +15018,26 @@ export interface PutRulesConfigsByKeyOperationRequest {
      */
     key: string;
 }
+/**
+ *
+ */
+export interface DeleteSessionRequest {
+    /**
+     * ID of the session to delete.
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetSessionRequest {
+    /**
+     * ID of session to retrieve
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -14302,6 +15192,26 @@ export interface DeletePermissionsOperationRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface DeleteRefreshTokensForUserRequest {
+    /**
+     * ID of the user to get remove refresh tokens for
+     *
+     */
+    user_id: string;
+}
+/**
+ *
+ */
+export interface DeleteSessionsForUserRequest {
+    /**
+     * ID of the user to get sessions for
+     *
+     */
+    user_id: string;
+}
 /**
  *
  */
@@ -14514,6 +15424,56 @@ export interface GetPermissionsRequest {
      */
     include_totals?: boolean;
 }
+/**
+ *
+ */
+export interface GetRefreshTokensForUserRequest {
+    /**
+     * ID of the user to get refresh tokens for
+     *
+     */
+    user_id: string;
+    /**
+     * Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     *
+     */
+    include_totals?: boolean;
+    /**
+     * Optional token ID from which to start selection (exclusive).
+     *
+     */
+    from?: string;
+    /**
+     * Number of results per page. Defaults to 50.
+     *
+     */
+    take?: number;
+}
+/**
+ *
+ */
+export interface GetSessionsForUserRequest {
+    /**
+     * ID of the user to get sessions for
+     *
+     */
+    user_id: string;
+    /**
+     * Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     *
+     */
+    include_totals?: boolean;
+    /**
+     * Optional session ID from which to start selection (exclusive).
+     *
+     */
+    from?: string;
+    /**
+     * Number of results per page. Defaults to 50.
+     *
+     */
+    take?: number;
+}
 /**
  *
  */