auth0 4.7.0 → 4.9.0

package/dist/cjs/management/__generated/models/index.d.ts

@@ -194,6 +194,24 @@ export interface Client {
     /**
      */
     client_authentication_methods: ClientClientAuthenticationMethods | null;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests: boolean;
+    /**
+     */
+    signed_request_object: ClientSignedRequestObject;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level: ClientComplianceLevelEnum;
 }
 export declare const ClientTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -213,6 +231,13 @@ export declare const ClientOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientOrganizationRequireBehaviorEnum = (typeof ClientOrganizationRequireBehaviorEnum)[keyof typeof ClientOrganizationRequireBehaviorEnum];
+export declare const ClientComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientComplianceLevelEnum = (typeof ClientComplianceLevelEnum)[keyof typeof ClientComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -853,6 +878,12 @@ export interface ClientClientAuthenticationMethods {
     /**
      */
     private_key_jwt: ClientClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth: ClientClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth: ClientClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * Defines `private_key_jwt` client authentication method. If this property is defined, the client is enabled to use the Private Key JWT authentication method.
@@ -874,6 +905,26 @@ export interface ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner
      */
     id: string;
 }
+/**
+ * Defines `self_signed_tls_client_auth` client authentication method. If the property is defined, the client is configured to use mTLS authentication method utilizing self-signed certificate.
+ */
+export interface ClientClientAuthenticationMethodsSelfSignedTlsClientAuth {
+    /**
+     * A list of unique and previously created credential IDs enabled on the client for mTLS authentication utilizing self-signed certificate.
+     *
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
+/**
+ * Defines `tls_client_auth` client authentication method. If the property is defined, the client is configured to use CA-based mTLS authentication method.
+ */
+export interface ClientClientAuthenticationMethodsTlsClientAuth {
+    /**
+     * A list of unique and previously created credential IDs enabled on the client for CA-based mTLS authentication.
+     *
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -1034,6 +1085,24 @@ export interface ClientCreate {
     /**
      */
     client_authentication_methods?: ClientCreateClientAuthenticationMethods;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests?: boolean;
+    /**
+     */
+    signed_request_object?: ClientCreateSignedRequestObject;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession?: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level?: ClientCreateComplianceLevelEnum;
 }
 export declare const ClientCreateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -1079,6 +1148,13 @@ export declare const ClientCreateOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientCreateOrganizationRequireBehaviorEnum = (typeof ClientCreateOrganizationRequireBehaviorEnum)[keyof typeof ClientCreateOrganizationRequireBehaviorEnum];
+export declare const ClientCreateComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientCreateComplianceLevelEnum = (typeof ClientCreateComplianceLevelEnum)[keyof typeof ClientCreateComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -1651,6 +1727,12 @@ export interface ClientCreateClientAuthenticationMethods {
     /**
      */
     private_key_jwt?: ClientCreateClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth?: ClientCreateClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth?: ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * Defines `private_key_jwt` client authentication method. If this property is defined, the client is enabled to use the Private Key JWT authentication method.
@@ -1707,6 +1789,71 @@ export declare const ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredent
     readonly PS256: "PS256";
 };
 export type ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum = (typeof ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum)[keyof typeof ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInnerAlgEnum];
+/**
+ * Defines `self_signed_tls_client_auth` client authentication method. If the property is defined, the client is configured to use mTLS authentication method utilizing self-signed certificate.
+ */
+export interface ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuth {
+    /**
+     * Fully defined credentials that will be enabled on the client for mTLS authentication utilizing self-signed certificate.
+     *
+     */
+    credentials: Array<ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInner>;
+}
+/**
+ *
+ */
+export interface ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInner {
+    /**
+     */
+    credential_type: ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum;
+    /**
+     */
+    name?: string;
+    /**
+     * PEM-formatted X509 certificate. Must be JSON escaped.
+     *
+     */
+    pem: string;
+}
+export declare const ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum: {
+    readonly x509_cert: "x509_cert";
+};
+export type ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum = (typeof ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum)[keyof typeof ClientCreateClientAuthenticationMethodsSelfSignedTlsClientAuthCredentialsInnerCredentialTypeEnum];
+/**
+ * Defines `tls_client_auth` client authentication method. If the property is defined, the client is configured to use CA-based mTLS authentication method.
+ */
+export interface ClientCreateClientAuthenticationMethodsTlsClientAuth {
+    /**
+     * Fully defined credentials that will be enabled on the client for CA-based mTLS authentication.
+     *
+     */
+    credentials: Array<ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInner>;
+}
+/**
+ *
+ */
+export interface ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInner {
+    /**
+     */
+    credential_type?: ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum;
+    /**
+     */
+    name?: string;
+    /**
+     * Subject Distinguished Name. Mutually exclusive with `pem` property.
+     *
+     */
+    subject_dn?: string;
+    /**
+     * PEM-formatted X509 certificate. Must be JSON escaped. Mutually exclusive with `subject_dn` property.
+     *
+     */
+    pem?: string;
+}
+export declare const ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum: {
+    readonly cert_subject_dn: "cert_subject_dn";
+};
+export type ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum = (typeof ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum)[keyof typeof ClientCreateClientAuthenticationMethodsTlsClientAuthCredentialsInnerCredentialTypeEnum];
 /**
  * Encryption used for WsFed responses with this client.
  */
@@ -1837,6 +1984,19 @@ export interface ClientCreateOidcLogout {
      */
     backchannel_logout_urls: Array<string>;
 }
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientCreateSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required?: boolean;
+    /**
+     */
+    credentials?: Array<ClientCreateClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  * Encryption used for WsFed responses with this client.
  */
@@ -2073,6 +2233,19 @@ export declare const ClientRefreshTokenExpirationTypeEnum: {
     readonly non_expiring: "non-expiring";
 };
 export type ClientRefreshTokenExpirationTypeEnum = (typeof ClientRefreshTokenExpirationTypeEnum)[keyof typeof ClientRefreshTokenExpirationTypeEnum];
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required: boolean;
+    /**
+     */
+    credentials: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -2257,6 +2430,24 @@ export interface ClientUpdate {
     /**
      */
     client_authentication_methods?: ClientUpdateClientAuthenticationMethods | null;
+    /**
+     * Makes the use of Pushed Authorization Requests mandatory for this client
+     *
+     */
+    require_pushed_authorization_requests?: boolean;
+    /**
+     */
+    signed_request_object?: ClientUpdateSignedRequestObject | null;
+    /**
+     * Makes the use of Proof-of-Possession mandatory for this client
+     *
+     */
+    require_proof_of_possession?: boolean;
+    /**
+     * Defines the compliance level for this client, which may restrict it's capabilities
+     *
+     */
+    compliance_level?: ClientUpdateComplianceLevelEnum;
 }
 export declare const ClientUpdateTokenEndpointAuthMethodEnum: {
     readonly none: "none";
@@ -2303,6 +2494,13 @@ export declare const ClientUpdateOrganizationRequireBehaviorEnum: {
     readonly post_login_prompt: "post_login_prompt";
 };
 export type ClientUpdateOrganizationRequireBehaviorEnum = (typeof ClientUpdateOrganizationRequireBehaviorEnum)[keyof typeof ClientUpdateOrganizationRequireBehaviorEnum];
+export declare const ClientUpdateComplianceLevelEnum: {
+    readonly none: "none";
+    readonly fapi1_adv_pkj_par: "fapi1_adv_pkj_par";
+    readonly fapi1_adv_mtls_par: "fapi1_adv_mtls_par";
+    readonly null: "null";
+};
+export type ClientUpdateComplianceLevelEnum = (typeof ClientUpdateComplianceLevelEnum)[keyof typeof ClientUpdateComplianceLevelEnum];
 /**
  * Addons enabled for this client and their associated configurations.
  */
@@ -2427,6 +2625,12 @@ export interface ClientUpdateClientAuthenticationMethods {
     /**
      */
     private_key_jwt?: ClientClientAuthenticationMethodsPrivateKeyJwt;
+    /**
+     */
+    tls_client_auth?: ClientClientAuthenticationMethodsTlsClientAuth;
+    /**
+     */
+    self_signed_tls_client_auth?: ClientClientAuthenticationMethodsSelfSignedTlsClientAuth;
 }
 /**
  * The client's encryption key
@@ -2525,6 +2729,19 @@ export interface ClientUpdateOidcLogout {
      */
     backchannel_logout_urls?: Array<string>;
 }
+/**
+ * JWT-secured Authorization Requests (JAR) settings.
+ */
+export interface ClientUpdateSignedRequestObject {
+    /**
+     * Indicates whether the JAR requests are mandatory
+     *
+     */
+    required?: boolean;
+    /**
+     */
+    credentials?: Array<ClientClientAuthenticationMethodsPrivateKeyJwtCredentialsInner>;
+}
 /**
  *
  */
@@ -4683,6 +4900,16 @@ export interface GetCredentials200ResponseInner {
      *
      */
     credential_type: string;
+    /**
+     * The X509 certificate's Subject Distinguished Name
+     *
+     */
+    subject_dn: string;
+    /**
+     * The X509 certificate's SHA256 thumbprint
+     *
+     */
+    thumbprint_sha256: string;
     /**
      * The ISO 8601 formatted date the credential was created.
      *
@@ -6120,110 +6347,162 @@ export type GetPnProviders200ResponseProviderEnum = (typeof GetPnProviders200Res
 /**
  *
  */
-export type GetResourceServers200Response = Array<ResourceServer> | GetResourceServers200ResponseOneOf;
-/**
- *
- */
-export interface GetResourceServers200ResponseOneOf {
+export interface GetRefreshToken200Response {
+    [key: string]: any | any;
     /**
+     * The ID of the refresh token
+     *
      */
-    start: number;
+    id: string;
     /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
      */
-    limit: number;
+    user_id: string;
     /**
      */
-    total: number;
+    created_at: GetRefreshToken200ResponseCreatedAt | null;
     /**
      */
-    resource_servers: Array<ResourceServer>;
-}
-/**
- *
- */
-export type GetRolePermission200Response = Array<Permission> | GetRolePermission200ResponseOneOf;
-/**
- *
- */
-export interface GetRolePermission200ResponseOneOf {
+    idle_expires_at: GetRefreshToken200ResponseIdleExpiresAt | null;
     /**
      */
-    start: number;
+    expires_at: GetRefreshToken200ResponseExpiresAt | null;
     /**
+     * ID of the client application granted with this refresh token
+     *
      */
-    limit: number;
+    client_id: string;
     /**
+     * ID of the authenticated session used to obtain this refresh-token
+     *
      */
-    total: number;
+    session_id: string | null;
     /**
+     * True if the token is a rotating refresh token
+     *
      */
-    permissions: Array<Permission>;
+    rotating: boolean;
+    /**
+     * A list of the resource server IDs associated to this refresh-token and their granted scopes
+     *
+     */
+    resource_servers: Array<GetRefreshToken200ResponseResourceServersInner>;
 }
 /**
  *
  */
-export type GetRoleUser200Response = Array<GetRoleUser200ResponseOneOfInner> | GetRoleUser200ResponseOneOf | GetRoleUser200ResponseOneOf1;
+export type GetRefreshToken200ResponseCreatedAt = string | {
+    [key: string]: any;
+};
 /**
  *
  */
-export interface GetRoleUser200ResponseOneOf {
-    /**
-     */
-    start: number;
-    /**
-     */
-    limit: number;
+export type GetRefreshToken200ResponseExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshToken200ResponseIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export interface GetRefreshToken200ResponseResourceServersInner {
+    [key: string]: any | any;
     /**
+     * Resource server ID
+     *
      */
-    total: number;
+    audience: string;
     /**
+     * List of scopes for the refresh token
+     *
      */
-    users: Array<GetRoleUser200ResponseOneOfInner>;
+    scopes: string;
 }
 /**
  *
  */
-export interface GetRoleUser200ResponseOneOf1 {
-    /**
-     */
-    next: string;
+export interface GetRefreshTokensForUser200Response {
+    [key: string]: any | any;
     /**
      */
-    users: Array<GetRoleUser200ResponseOneOfInner>;
+    sessions: Array<GetRefreshTokensForUser200ResponseSessionsInner>;
 }
 /**
  *
  */
-export interface GetRoleUser200ResponseOneOfInner {
+export interface GetRefreshTokensForUser200ResponseSessionsInner {
+    [key: string]: any | any;
     /**
-     * ID of this user.
+     * The ID of the refresh token
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
      *
      */
     user_id: string;
     /**
-     * URL to a picture for this user.
+     */
+    created_at: GetRefreshTokensForUser200ResponseSessionsInnerCreatedAt;
+    /**
+     */
+    idle_expires_at: GetRefreshTokensForUser200ResponseSessionsInnerIdleExpiresAt;
+    /**
+     */
+    expires_at: GetRefreshTokensForUser200ResponseSessionsInnerExpiresAt;
+    /**
+     * ID of the client application granted with this refresh token
      *
      */
-    picture: string;
+    client_id: string;
     /**
-     * Name of this user.
+     * ID of the authenticated session used to obtain this refresh-token
      *
      */
-    name: string;
+    session_id: string;
     /**
-     * Email address of this user.
+     * True if the token is a rotating refresh token
      *
      */
-    email: string;
+    rotating: boolean;
+    /**
+     * A list of the resource server IDs associated to this refresh-token and their granted scopes
+     *
+     */
+    resource_servers: Array<GetRefreshToken200ResponseResourceServersInner>;
 }
 /**
  *
  */
-export type GetRules200Response = Array<Rule> | GetRules200ResponseOneOf;
+export type GetRefreshTokensForUser200ResponseSessionsInnerCreatedAt = string | {
+    [key: string]: any;
+};
 /**
  *
  */
-export interface GetRules200ResponseOneOf {
+export type GetRefreshTokensForUser200ResponseSessionsInnerExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetRefreshTokensForUser200ResponseSessionsInnerIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetResourceServers200Response = Array<ResourceServer> | GetResourceServers200ResponseOneOf;
+/**
+ *
+ */
+export interface GetResourceServers200ResponseOneOf {
     /**
      */
     start: number;
@@ -6235,7 +6514,106 @@ export interface GetRules200ResponseOneOf {
     total: number;
     /**
      */
-    rules: Array<Rule>;
+    resource_servers: Array<ResourceServer>;
+}
+/**
+ *
+ */
+export type GetRolePermission200Response = Array<Permission> | GetRolePermission200ResponseOneOf;
+/**
+ *
+ */
+export interface GetRolePermission200ResponseOneOf {
+    /**
+     */
+    start: number;
+    /**
+     */
+    limit: number;
+    /**
+     */
+    total: number;
+    /**
+     */
+    permissions: Array<Permission>;
+}
+/**
+ *
+ */
+export type GetRoleUser200Response = Array<GetRoleUser200ResponseOneOfInner> | GetRoleUser200ResponseOneOf | GetRoleUser200ResponseOneOf1;
+/**
+ *
+ */
+export interface GetRoleUser200ResponseOneOf {
+    /**
+     */
+    start: number;
+    /**
+     */
+    limit: number;
+    /**
+     */
+    total: number;
+    /**
+     */
+    users: Array<GetRoleUser200ResponseOneOfInner>;
+}
+/**
+ *
+ */
+export interface GetRoleUser200ResponseOneOf1 {
+    /**
+     */
+    next: string;
+    /**
+     */
+    users: Array<GetRoleUser200ResponseOneOfInner>;
+}
+/**
+ *
+ */
+export interface GetRoleUser200ResponseOneOfInner {
+    /**
+     * ID of this user.
+     *
+     */
+    user_id: string;
+    /**
+     * URL to a picture for this user.
+     *
+     */
+    picture: string;
+    /**
+     * Name of this user.
+     *
+     */
+    name: string;
+    /**
+     * Email address of this user.
+     *
+     */
+    email: string;
+}
+/**
+ *
+ */
+export type GetRules200Response = Array<Rule> | GetRules200ResponseOneOf;
+/**
+ *
+ */
+export interface GetRules200ResponseOneOf {
+    /**
+     */
+    start: number;
+    /**
+     */
+    limit: number;
+    /**
+     */
+    total: number;
+    /**
+     */
+    rules: Array<Rule>;
 }
 /**
  *
@@ -6299,47 +6677,345 @@ export interface GetScimConfiguration200Response {
 export interface GetScimConfiguration200ResponseMappingInner {
     [key: string]: any | any;
     /**
-     * The field location in the auth0 schema
-     *
+     * The field location in the auth0 schema
+     *
+     */
+    auth0: string;
+    /**
+     * The field location in the SCIM schema
+     *
+     */
+    scim: string;
+}
+/**
+ *
+ */
+export interface GetScimTokens200ResponseInner {
+    [key: string]: any | any;
+    /**
+     * The token's identifier
+     *
+     */
+    token_id: string;
+    /**
+     * The scopes of the scim token
+     *
+     */
+    scopes: Array<string>;
+    /**
+     * The token's created at timestamp
+     *
+     */
+    created_at: string;
+    /**
+     * The token's valid until timestamp
+     *
+     */
+    valid_until: string;
+    /**
+     * The token's last used at timestamp
+     *
+     */
+    last_used_at: string;
+}
+/**
+ *
+ */
+export interface GetSession200Response {
+    [key: string]: any | any;
+    /**
+     * The ID of the session
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
+     */
+    user_id: string;
+    /**
+     */
+    created_at: GetSession200ResponseCreatedAt | null;
+    /**
+     */
+    updated_at: GetSession200ResponseUpdatedAt | null;
+    /**
+     */
+    authenticated_at: GetSession200ResponseAuthenticatedAt | null;
+    /**
+     */
+    idle_expires_at: GetSession200ResponseIdleExpiresAt | null;
+    /**
+     */
+    expires_at: GetSession200ResponseExpiresAt | null;
+    /**
+     */
+    device: GetSession200ResponseDevice;
+    /**
+     * List of client details for the session
+     *
+     */
+    clients: Array<GetSession200ResponseClientsInner>;
+    /**
+     */
+    authentication: GetSession200ResponseAuthentication;
+}
+/**
+ *
+ */
+export type GetSession200ResponseAuthenticatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Details about authentication signals obtained during the login flow
+ */
+export interface GetSession200ResponseAuthentication {
+    [key: string]: any | any;
+    /**
+     * Contains the authentication methods a user has completed during their session
+     *
+     */
+    methods: Array<GetSession200ResponseAuthenticationMethodsInner>;
+}
+/**
+ * Authentication signal details
+ */
+export interface GetSession200ResponseAuthenticationMethodsInner {
+    [key: string]: any | any;
+    /**
+     * One of: "federated", "passkey", "pwd", "sms", "email", "mfa", "mock" or a custom method denoted by a URL
+     *
+     */
+    name: string;
+    /**
+     */
+    timestamp: GetSession200ResponseAuthenticationMethodsInnerTimestamp | null;
+    /**
+     * A specific MFA factor. Only present when "name" is set to "mfa"
+     *
+     */
+    type$: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseAuthenticationMethodsInnerTimestamp = string | {
+    [key: string]: any;
+};
+/**
+ * Client details
+ */
+export interface GetSession200ResponseClientsInner {
+    [key: string]: any | any;
+    /**
+     * ID of client for the session
+     *
+     */
+    client_id: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Metadata related to the device used in the session
+ */
+export interface GetSession200ResponseDevice {
+    [key: string]: any | any;
+    /**
+     * First IP address associated with this session
+     *
+     */
+    initial_ip: string | null;
+    /**
+     * First autonomous system number associated with this session
+     *
+     */
+    initial_asn: string;
+    /**
+     * Last user agent of the device from which this user logged in
+     *
+     */
+    last_user_agent: string;
+    /**
+     * Last IP address from which this user logged in
+     *
+     */
+    last_ip: string | null;
+    /**
+     * Last autonomous system number from which this user logged in
+     *
+     */
+    last_asn: string;
+}
+/**
+ *
+ */
+export type GetSession200ResponseExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSession200ResponseIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSession200ResponseUpdatedAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export interface GetSessionsForUser200Response {
+    [key: string]: any | any;
+    /**
+     */
+    sessions: Array<GetSessionsForUser200ResponseSessionsInner>;
+}
+/**
+ *
+ */
+export interface GetSessionsForUser200ResponseSessionsInner {
+    [key: string]: any | any;
+    /**
+     * The ID of the session
+     *
+     */
+    id: string;
+    /**
+     * ID of the user which can be used when interacting with other APIs.
+     *
+     */
+    user_id: string;
+    /**
+     */
+    created_at: GetSessionsForUser200ResponseSessionsInnerCreatedAt;
+    /**
+     */
+    updated_at: GetSessionsForUser200ResponseSessionsInnerUpdatedAt;
+    /**
+     */
+    authenticated_at: GetSessionsForUser200ResponseSessionsInnerAuthenticatedAt;
+    /**
+     */
+    idle_expires_at: GetSessionsForUser200ResponseSessionsInnerIdleExpiresAt;
+    /**
+     */
+    expires_at: GetSessionsForUser200ResponseSessionsInnerExpiresAt;
+    /**
+     */
+    device: GetSessionsForUser200ResponseSessionsInnerDevice;
+    /**
+     * List of client details for the session
+     *
+     */
+    clients: Array<GetSession200ResponseClientsInner>;
+    /**
+     */
+    authentication: GetSessionsForUser200ResponseSessionsInnerAuthentication;
+}
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerAuthenticatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Details about authentication signals obtained during the login flow
+ */
+export interface GetSessionsForUser200ResponseSessionsInnerAuthentication {
+    [key: string]: any | any;
+    /**
+     * Contains the authentication methods a user has completed during their session
+     *
+     */
+    methods: Array<GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInner>;
+}
+/**
+ * Authentication signal details
+ */
+export interface GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInner {
+    [key: string]: any | any;
+    /**
+     * One of: "federated", "passkey", "pwd", "sms", "email", "mfa", "mock" or a custom method denoted by a URL
+     *
+     */
+    name: string;
+    /**
      */
-    auth0: string;
+    timestamp: GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInnerTimestamp;
     /**
-     * The field location in the SCIM schema
+     * A specific MFA factor. Only present when "name" is set to "mfa"
      *
      */
-    scim: string;
+    type$: string;
 }
 /**
  *
  */
-export interface GetScimTokens200ResponseInner {
+export type GetSessionsForUser200ResponseSessionsInnerAuthenticationMethodsInnerTimestamp = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerCreatedAt = string | {
+    [key: string]: any;
+};
+/**
+ * Metadata related to the device used in the session
+ */
+export interface GetSessionsForUser200ResponseSessionsInnerDevice {
     [key: string]: any | any;
     /**
-     * The token's identifier
+     * First IP address associated with this session
      *
      */
-    token_id: string;
+    initial_ip: string;
     /**
-     * The scopes of the scim token
+     * First autonomous system number associated with this session
      *
      */
-    scopes: Array<string>;
+    initial_asn: string;
     /**
-     * The token's created at timestamp
+     * Last user agent of the device from which this user logged in
      *
      */
-    created_at: string;
+    last_user_agent: string;
     /**
-     * The token's valid until timestamp
+     * Last IP address from which this user logged in
      *
      */
-    valid_until: string;
+    last_ip: string;
     /**
-     * The token's last used at timestamp
+     * Last autonomous system number from which this user logged in
      *
      */
-    last_used_at: string;
+    last_asn: string;
 }
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerIdleExpiresAt = string | {
+    [key: string]: any;
+};
+/**
+ *
+ */
+export type GetSessionsForUser200ResponseSessionsInnerUpdatedAt = string | {
+    [key: string]: any;
+};
 /**
  *
  */
@@ -10331,6 +11007,18 @@ export interface ResourceServer {
     /**
      */
     client: object;
+    /**
+     */
+    token_encryption: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy: ResourceServerConsentPolicyEnum;
+    /**
+     */
+    authorization_details: Array<any>;
+    /**
+     */
+    proof_of_possession: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10345,6 +11033,11 @@ export declare const ResourceServerTokenDialectEnum: {
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
 export type ResourceServerTokenDialectEnum = (typeof ResourceServerTokenDialectEnum)[keyof typeof ResourceServerTokenDialectEnum];
+export declare const ResourceServerConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerConsentPolicyEnum = (typeof ResourceServerConsentPolicyEnum)[keyof typeof ResourceServerConsentPolicyEnum];
 /**
  *
  */
@@ -10385,7 +11078,7 @@ export interface ResourceServerCreate {
      */
     token_lifetime?: number;
     /**
-     * Dialect of access tokens that should be issued. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
+     * Dialect of issued access token. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
      *
      */
     token_dialect?: ResourceServerCreateTokenDialectEnum;
@@ -10402,6 +11095,18 @@ export interface ResourceServerCreate {
     /**
      */
     client?: object;
+    /**
+     */
+    token_encryption?: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy?: ResourceServerCreateConsentPolicyEnum;
+    /**
+     */
+    authorization_details?: Array<any>;
+    /**
+     */
+    proof_of_possession?: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerCreateSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10416,6 +11121,78 @@ export declare const ResourceServerCreateTokenDialectEnum: {
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
 export type ResourceServerCreateTokenDialectEnum = (typeof ResourceServerCreateTokenDialectEnum)[keyof typeof ResourceServerCreateTokenDialectEnum];
+export declare const ResourceServerCreateConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerCreateConsentPolicyEnum = (typeof ResourceServerCreateConsentPolicyEnum)[keyof typeof ResourceServerCreateConsentPolicyEnum];
+/**
+ * Proof-of-Possession configuration for access tokens
+ */
+export interface ResourceServerProofOfPossession {
+    /**
+     * Intended mechanism for Proof-of-Possession
+     *
+     */
+    mechanism: ResourceServerProofOfPossessionMechanismEnum;
+    /**
+     * Whether the use of Proof-of-Possession is required for the resource server
+     *
+     */
+    required: boolean;
+}
+export declare const ResourceServerProofOfPossessionMechanismEnum: {
+    readonly mtls: "mtls";
+};
+export type ResourceServerProofOfPossessionMechanismEnum = (typeof ResourceServerProofOfPossessionMechanismEnum)[keyof typeof ResourceServerProofOfPossessionMechanismEnum];
+/**
+ *
+ */
+export interface ResourceServerTokenEncryption {
+    /**
+     * Format of the encrypted JWT payload.
+     *
+     */
+    format: ResourceServerTokenEncryptionFormatEnum;
+    /**
+     */
+    encryption_key: ResourceServerTokenEncryptionEncryptionKey;
+}
+export declare const ResourceServerTokenEncryptionFormatEnum: {
+    readonly compact_nested_jwe: "compact-nested-jwe";
+};
+export type ResourceServerTokenEncryptionFormatEnum = (typeof ResourceServerTokenEncryptionFormatEnum)[keyof typeof ResourceServerTokenEncryptionFormatEnum];
+/**
+ *
+ */
+export interface ResourceServerTokenEncryptionEncryptionKey {
+    /**
+     * Name of the encryption key.
+     *
+     */
+    name?: string;
+    /**
+     * Algorithm used to encrypt the token.
+     *
+     */
+    alg: ResourceServerTokenEncryptionEncryptionKeyAlgEnum;
+    /**
+     * Key ID.
+     *
+     */
+    kid?: string;
+    /**
+     * PEM-formatted public key. Must be JSON escaped.
+     *
+     */
+    pem: string;
+}
+export declare const ResourceServerTokenEncryptionEncryptionKeyAlgEnum: {
+    readonly _256: "RSA-OAEP-256";
+    readonly _384: "RSA-OAEP-384";
+    readonly _512: "RSA-OAEP-512";
+};
+export type ResourceServerTokenEncryptionEncryptionKeyAlgEnum = (typeof ResourceServerTokenEncryptionEncryptionKeyAlgEnum)[keyof typeof ResourceServerTokenEncryptionEncryptionKeyAlgEnum];
 /**
  *
  */
@@ -10456,7 +11233,7 @@ export interface ResourceServerUpdate {
      */
     token_lifetime?: number;
     /**
-     * Dialect of access tokens that should be issued. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
+     * Dialect of issued access token. `access_token` is a JWT containing standard Auth0 claims; `rfc9068_profile` is a JWT conforming to the IETF JWT Access Token Profile. `access_token_authz` and `rfc9068_profile_authz` additionally include RBAC permissions claims.
      *
      */
     token_dialect?: ResourceServerUpdateTokenDialectEnum;
@@ -10468,6 +11245,18 @@ export interface ResourceServerUpdate {
     /**
      */
     client?: object;
+    /**
+     */
+    token_encryption?: ResourceServerTokenEncryption | null;
+    /**
+     */
+    consent_policy?: ResourceServerUpdateConsentPolicyEnum;
+    /**
+     */
+    authorization_details?: Array<any>;
+    /**
+     */
+    proof_of_possession?: ResourceServerProofOfPossession | null;
 }
 export declare const ResourceServerUpdateSigningAlgEnum: {
     readonly HS256: "HS256";
@@ -10482,6 +11271,11 @@ export declare const ResourceServerUpdateTokenDialectEnum: {
     readonly rfc9068_profile_authz: "rfc9068_profile_authz";
 };
 export type ResourceServerUpdateTokenDialectEnum = (typeof ResourceServerUpdateTokenDialectEnum)[keyof typeof ResourceServerUpdateTokenDialectEnum];
+export declare const ResourceServerUpdateConsentPolicyEnum: {
+    readonly transactional_authorization_with_mfa: "transactional-authorization-with-mfa";
+    readonly null: "null";
+};
+export type ResourceServerUpdateConsentPolicyEnum = (typeof ResourceServerUpdateConsentPolicyEnum)[keyof typeof ResourceServerUpdateConsentPolicyEnum];
 /**
  *
  */
@@ -10540,122 +11334,299 @@ export interface Rule {
      * Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
      *
      */
-    order: number;
+    order: number;
+    /**
+     * Execution stage of this rule. Can be `login_success`, `login_failure`, or `pre_authorize`.
+     *
+     */
+    stage: string;
+}
+/**
+ *
+ */
+export interface RuleCreate {
+    /**
+     * Name of this rule.
+     *
+     */
+    name: string;
+    /**
+     * Code to be executed when this rule runs.
+     *
+     */
+    script: string;
+    /**
+     * Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
+     *
+     */
+    order?: number;
+    /**
+     * Whether the rule is enabled (true), or disabled (false).
+     *
+     */
+    enabled?: boolean;
+}
+/**
+ *
+ */
+export interface RuleUpdate {
+    /**
+     * Code to be executed when this rule runs.
+     *
+     */
+    script?: string;
+    /**
+     * Name of this rule.
+     *
+     */
+    name?: string;
+    /**
+     * Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
+     *
+     */
+    order?: number;
+    /**
+     * Whether the rule is enabled (true), or disabled (false).
+     *
+     */
+    enabled?: boolean;
+}
+/**
+ *
+ */
+export interface Scope {
+    /**
+     * Value of this scope.
+     *
+     */
+    value: string;
+    /**
+     * User-friendly description of this scope.
+     *
+     */
+    description?: string;
+}
+/**
+ *
+ */
+export interface SmsTwilioFactorProvider {
+    /**
+     * From number
+     *
+     */
+    from: string | null;
+    /**
+     * Copilot SID
+     *
+     */
+    messaging_service_sid: string | null;
+    /**
+     * Twilio Authentication token
+     *
+     */
+    auth_token: string | null;
+    /**
+     * Twilio SID
+     *
+     */
+    sid: string | null;
+}
+/**
+ *
+ */
+export interface SnsFactorProvider {
+    /**
+     */
+    aws_access_key_id: string | null;
+    /**
+     */
+    aws_secret_access_key: string | null;
+    /**
+     */
+    aws_region: string | null;
+    /**
+     */
+    sns_apns_platform_application_arn: string | null;
+    /**
+     */
+    sns_gcm_platform_application_arn: string | null;
+}
+/**
+ *
+ */
+export interface SsProfile {
+    /**
+     * The unique ID of the self-service Profile.
+     *
+     */
+    id: string;
+    /**
+     * List of attributes to be mapped that will be shown to the user during the SS-SSO flow.
+     *
+     */
+    user_attributes: Array<SsProfileUserAttributesInner>;
+    /**
+     * The time when this self-service Profile was created.
+     *
+     */
+    created_at: string;
+    /**
+     * The time when this self-service Profile was updated.
+     *
+     */
+    updated_at: string;
+    /**
+     */
+    branding: SsProfileBranding;
+}
+/**
+ *
+ */
+export interface SsProfileBranding {
+    [key: string]: any | any;
+    /**
+     */
+    logo_url: string;
     /**
-     * Execution stage of this rule. Can be `login_success`, `login_failure`, or `pre_authorize`.
-     *
      */
-    stage: string;
+    colors: SsProfileBrandingColors;
 }
 /**
  *
  */
-export interface RuleCreate {
-    /**
-     * Name of this rule.
-     *
-     */
-    name: string;
+export interface SsProfileBrandingColors {
+    [key: string]: any | any;
     /**
-     * Code to be executed when this rule runs.
-     *
      */
-    script: string;
+    primary: string;
+}
+/**
+ *
+ */
+export interface SsProfileCreate {
     /**
-     * Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
+     * List of attributes to be mapped that will be shown to the user during the SS-SSO flow.
      *
      */
-    order?: number;
+    user_attributes?: Array<SsProfileUserAttributesInner>;
     /**
-     * Whether the rule is enabled (true), or disabled (false).
-     *
      */
-    enabled?: boolean;
+    branding?: SsProfileCreateBranding;
 }
 /**
  *
  */
-export interface RuleUpdate {
+export interface SsProfileCreateBranding {
+    [key: string]: any | any;
     /**
-     * Code to be executed when this rule runs.
-     *
      */
-    script?: string;
+    logo_url?: string;
     /**
-     * Name of this rule.
-     *
      */
-    name?: string;
+    colors?: SsProfileBrandingColors;
+}
+/**
+ *
+ */
+export interface SsProfileList extends Array<SsProfile> {
+}
+/**
+ *
+ */
+export interface SsProfileUpdate {
     /**
-     * Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
+     * List of attributes to be mapped that will be shown to the user during the SS-SSO flow.
      *
      */
-    order?: number;
+    user_attributes?: Array<SsProfileUserAttributesInner> | null;
     /**
-     * Whether the rule is enabled (true), or disabled (false).
-     *
      */
-    enabled?: boolean;
+    branding?: SsProfileUpdateBranding | null;
 }
 /**
  *
  */
-export interface Scope {
+export interface SsProfileUpdateBranding {
+    [key: string]: any | any;
     /**
-     * Value of this scope.
-     *
      */
-    value: string;
+    logo_url?: string;
     /**
-     * User-friendly description of this scope.
-     *
      */
-    description?: string;
+    colors?: SsProfileBrandingColors;
 }
 /**
  *
  */
-export interface SmsTwilioFactorProvider {
+export interface SsProfileUserAttributesInner {
     /**
-     * From number
+     * Identifier of this attribute.
      *
      */
-    from: string | null;
+    name: string;
     /**
-     * Copilot SID
+     * Description of this attribute.
      *
      */
-    messaging_service_sid: string | null;
+    description: string;
     /**
-     * Twilio Authentication token
+     * Determines if this attribute is required
      *
      */
-    auth_token: string | null;
+    is_optional: boolean;
+}
+/**
+ *
+ */
+export interface SsoAccessTicketResponse {
     /**
-     * Twilio SID
+     * The URL for the created ticket.
      *
      */
-    sid: string | null;
+    ticket: string;
 }
 /**
  *
  */
-export interface SnsFactorProvider {
+export interface SsoTicketRequestJson {
     /**
+     * If provided, this will allow editing of the provided connection during the SSO Flow
+     *
      */
-    aws_access_key_id: string | null;
+    connection_id?: string;
     /**
      */
-    aws_secret_access_key: string | null;
+    connection_config?: SsoTicketRequestJsonConnectionConfig;
     /**
+     * List of client_ids that the connection will be enabled for.
+     *
      */
-    aws_region: string | null;
+    enabled_clients?: Array<string>;
     /**
+     * List of organizations that the connection will be enabled for.
+     *
      */
-    sns_apns_platform_application_arn: string | null;
+    enabled_organizations?: Array<SsoTicketRequestJsonEnabledOrganizationsInner>;
+}
+/**
+ * If provided, this will create a new connection for the SSO flow with the given configuration
+ */
+export interface SsoTicketRequestJsonConnectionConfig {
     /**
+     * The name of the connection that will be created as a part of the SSO flow.
+     *
      */
-    sns_gcm_platform_application_arn: string | null;
+    name: string;
+}
+/**
+ *
+ */
+export interface SsoTicketRequestJsonEnabledOrganizationsInner {
+    /**
+     * Organization identifier
+     *
+     */
+    organization_id: string;
 }
 /**
  *
@@ -10808,6 +11779,19 @@ export interface TenantSettings {
      *
      */
     customize_mfa_in_postlogin_action: boolean;
+    /**
+     * Supported ACR values
+     *
+     */
+    acr_values_supported: Array<string>;
+    /**
+     */
+    mtls: TenantSettingsMtls | null;
+    /**
+     * Enables the use of Pushed Authorization Requests
+     *
+     */
+    pushed_authorization_requests_supported: boolean;
 }
 export declare const TenantSettingsEnabledLocalesEnum: {
     readonly ar: "ar";
@@ -11030,6 +12014,11 @@ export interface TenantSettingsFlags {
      *
      */
     mfa_show_factor_list_on_enrollment: boolean;
+    /**
+     * Removes alg property from jwks .well-known endpoint
+     *
+     */
+    remove_alg_from_jwks: boolean;
 }
 /**
  * Guardian page customization.
@@ -11046,6 +12035,16 @@ export interface TenantSettingsGuardianMfaPage {
      */
     html: string;
 }
+/**
+ * mTLS configuration.
+ */
+export interface TenantSettingsMtls {
+    /**
+     * If true, enables mTLS endpoint aliases
+     *
+     */
+    enable_endpoint_aliases: boolean;
+}
 /**
  * Session cookie configuration
  */
@@ -11166,6 +12165,19 @@ export interface TenantSettingsUpdate {
      *
      */
     allow_organization_name_in_authentication_api?: boolean | null;
+    /**
+     * Supported ACR values
+     *
+     */
+    acr_values_supported?: Array<string>;
+    /**
+     */
+    mtls?: TenantSettingsUpdateMtls | null;
+    /**
+     * Enables the use of Pushed Authorization Requests
+     *
+     */
+    pushed_authorization_requests_supported?: boolean | null;
 }
 export declare const TenantSettingsUpdateEnabledLocalesEnum: {
     readonly ar: "ar";
@@ -11398,6 +12410,11 @@ export interface TenantSettingsUpdateFlags {
      *
      */
     mfa_show_factor_list_on_enrollment?: boolean;
+    /**
+     * Removes alg property from jwks .well-known endpoint
+     *
+     */
+    remove_alg_from_jwks?: boolean;
 }
 export declare const TenantSettingsUpdateFlagsChangePwdFlowV1Enum: {
     readonly false: false;
@@ -11418,6 +12435,16 @@ export interface TenantSettingsUpdateGuardianMfaPage {
      */
     html?: string;
 }
+/**
+ * mTLS configuration.
+ */
+export interface TenantSettingsUpdateMtls {
+    /**
+     * If true, enables mTLS endpoint aliases
+     *
+     */
+    enable_endpoint_aliases?: boolean;
+}
 /**
  * Sessions related settings for tenant
  */
@@ -13848,6 +14875,26 @@ export interface PutPartialsRequest {
      */
     prompt: PutPartialsPromptEnum;
 }
+/**
+ *
+ */
+export interface DeleteRefreshTokenRequest {
+    /**
+     * ID of the refresh token to delete.
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetRefreshTokenRequest {
+    /**
+     * ID refresh token to retrieve
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -14148,6 +15195,66 @@ export interface PutRulesConfigsByKeyOperationRequest {
      */
     key: string;
 }
+/**
+ *
+ */
+export interface DeleteSelfServiceProfilesByIdRequest {
+    /**
+     * The id of the self-service profile to delete
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetSelfServiceProfilesByIdRequest {
+    /**
+     * The id of the self-service profile to retrieve
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface PatchSelfServiceProfilesByIdRequest {
+    /**
+     * The id of the self-service profile to update
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface PostSsoTicketRequest {
+    /**
+     * The id of the sso-profile to retrieve
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface DeleteSessionRequest {
+    /**
+     * ID of the session to delete.
+     *
+     */
+    id: string;
+}
+/**
+ *
+ */
+export interface GetSessionRequest {
+    /**
+     * ID of session to retrieve
+     *
+     */
+    id: string;
+}
 /**
  *
  */
@@ -14302,6 +15409,26 @@ export interface DeletePermissionsOperationRequest {
      */
     id: string;
 }
+/**
+ *
+ */
+export interface DeleteRefreshTokensForUserRequest {
+    /**
+     * ID of the user to get remove refresh tokens for
+     *
+     */
+    user_id: string;
+}
+/**
+ *
+ */
+export interface DeleteSessionsForUserRequest {
+    /**
+     * ID of the user to get sessions for
+     *
+     */
+    user_id: string;
+}
 /**
  *
  */
@@ -14514,6 +15641,56 @@ export interface GetPermissionsRequest {
      */
     include_totals?: boolean;
 }
+/**
+ *
+ */
+export interface GetRefreshTokensForUserRequest {
+    /**
+     * ID of the user to get refresh tokens for
+     *
+     */
+    user_id: string;
+    /**
+     * Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     *
+     */
+    include_totals?: boolean;
+    /**
+     * Optional token ID from which to start selection (exclusive).
+     *
+     */
+    from?: string;
+    /**
+     * Number of results per page. Defaults to 50.
+     *
+     */
+    take?: number;
+}
+/**
+ *
+ */
+export interface GetSessionsForUserRequest {
+    /**
+     * ID of the user to get sessions for
+     *
+     */
+    user_id: string;
+    /**
+     * Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     *
+     */
+    include_totals?: boolean;
+    /**
+     * Optional session ID from which to start selection (exclusive).
+     *
+     */
+    from?: string;
+    /**
+     * Number of results per page. Defaults to 50.
+     *
+     */
+    take?: number;
+}
 /**
  *
  */