auth0 5.0.0-beta.0 → 5.0.0

package/README.md

@@ -1,17 +1,17 @@
 ![Node.js client library for Auth0](https://cdn.auth0.com/website/sdks/banner/node-auth0-banner.png)
 
 ![Release](https://img.shields.io/npm/v/auth0)
-[![Codecov](https://img.shields.io/codecov/c/github/fern-demo/auth0-node-sdk)](https://codecov.io/gh/fern-demo/auth0-node-sdk)
+[![Codecov](https://img.shields.io/codecov/c/github/auth0/node-auth0)](https://codecov.io/gh/auth0/node-auth0)
 ![Downloads](https://img.shields.io/npm/dw/auth0)
 [![License](https://img.shields.io/:license-mit-blue.svg?style=flat)](https://opensource.org/licenses/MIT)
-[![fern shield](https://img.shields.io/badge/%F0%9F%8C%BF-Built%20with%20Fern-brightgreen)](https://buildwithfern.com?utm_source=github&utm_medium=github&utm_campaign=readme&utm_source=https%3A%2F%2Fgithub.com%2Ffern-demo%2Fauth0-node-sdk)
+[![fern shield](https://img.shields.io/badge/%F0%9F%8C%BF-Built%20with%20Fern-brightgreen)](https://buildwithfern.com?utm_source=github&utm_medium=github&utm_campaign=readme&utm_source=https%3A%2F%2Fgithub.com%2Fauth0%2Fnode-auth0)
 
 📚 [Documentation](#documentation) - 🚀 [Getting Started](#getting-started) - 💻 [API Reference](#api-reference) - 💬 [Feedback](#feedback)
 
 ## Documentation
 
 - [Docs Site](https://auth0.com/docs) - explore our docs site and learn more about Auth0
-- [API Reference](https://github.com/fern-demo/auth0-node-sdk/blob/HEAD/./reference.md) - full reference for this library
+- [API Reference](https://github.com/auth0/node-auth0/blob/master/reference.md) - full reference for this library
 
 ## Getting Started
 
@@ -498,206 +498,6 @@ runtimes:
 - Bun 1.0+
 - React Native
 
-### Customizing Fetch Client
-
-The SDK defaults to `node-fetch` but will use the global fetch client if present. For most use cases, you can simply ensure your preferred fetch implementation is available globally.
-
-```typescript
-import { ManagementClient } from "auth0";
-
-// Example 1: Add request logging using a custom fetcher
-const client = new ManagementClient({
-    domain: "your-tenant.auth0.com",
-    token: "YOUR_TOKEN",
-    fetcher: async (args) => {
-        console.log(`Making ${args.method} request to: ${args.url}`);
-
-        // Use the global fetch (built into Node.js 18+)
-        const response = await fetch(args.url, {
-            method: args.method,
-            headers: args.headers as Record<string, string>,
-            body: args.body ? JSON.stringify(args.body) : undefined,
-        });
-
-        const rawResponse = {
-            headers: response.headers,
-            redirected: response.redirected,
-            status: response.status,
-            statusText: response.statusText,
-            type: response.type,
-            url: response.url,
-        };
-
-        if (response.ok) {
-            return {
-                ok: true as const,
-                body: await response.json(),
-                headers: response.headers,
-                rawResponse,
-            };
-        } else {
-            return {
-                ok: false as const,
-                error: {
-                    reason: "status-code" as const,
-                    statusCode: response.status,
-                    body: await response.text(),
-                },
-                rawResponse,
-            };
-        }
-    },
-});
-
-// Example 2: Add custom headers to all requests
-const clientWithHeaders = new ManagementClient({
-    domain: "your-tenant.auth0.com",
-    token: "YOUR_TOKEN",
-    fetcher: async (args) => {
-        // Add custom headers
-        const headers = {
-            ...(args.headers as Record<string, string>),
-            "X-Custom-Header": "my-value",
-            "X-Request-ID": crypto.randomUUID(),
-        };
-
-        const response = await fetch(args.url, {
-            method: args.method,
-            headers,
-            body: args.body ? JSON.stringify(args.body) : undefined,
-        });
-
-        const rawResponse = {
-            headers: response.headers,
-            redirected: response.redirected,
-            status: response.status,
-            statusText: response.statusText,
-            type: response.type,
-            url: response.url,
-        };
-
-        if (response.ok) {
-            return {
-                ok: true as const,
-                body: await response.json(),
-                headers: response.headers,
-                rawResponse,
-            };
-        } else {
-            return {
-                ok: false as const,
-                error: {
-                    reason: "status-code" as const,
-                    statusCode: response.status,
-                    body: await response.text(),
-                },
-                rawResponse,
-            };
-        }
-    },
-});
-
-// Example 3: Complete custom implementation with axios (advanced)
-import axios from "axios";
-
-const clientWithAxios = new ManagementClient({
-    domain: "your-tenant.auth0.com",
-    token: "YOUR_TOKEN",
-    fetcher: async (args) => {
-        try {
-            // Process headers to resolve any Supplier functions/promises
-            const resolvedHeaders: Record<string, string> = {};
-            if (args.headers) {
-                for (const [key, value] of Object.entries(args.headers)) {
-                    if (value !== undefined) {
-                        // Handle Supplier type: could be string, Promise<string>, or () => string | Promise<string>
-                        const resolvedValue = typeof value === "function" ? await value() : await value;
-                        if (typeof resolvedValue === "string") {
-                            resolvedHeaders[key] = resolvedValue;
-                        } else if (resolvedValue != null) {
-                            resolvedHeaders[key] = String(resolvedValue);
-                        }
-                    }
-                }
-            }
-
-            const response = await axios({
-                url: args.url,
-                method: args.method,
-                headers: resolvedHeaders, // Now properly typed for axios
-                data: args.body,
-                timeout: args.timeoutMs || 60000,
-                params: args.queryParameters,
-                validateStatus: () => true, // Don't throw on HTTP error status codes
-            });
-
-            // Convert axios headers to Web API Headers format for rawResponse
-            const rawHeaders = new Headers();
-            Object.entries(response.headers).forEach(([key, value]) => {
-                if (typeof value === "string") {
-                    rawHeaders.set(key, value);
-                } else if (Array.isArray(value)) {
-                    rawHeaders.set(key, value.join(", "));
-                } else if (value != null) {
-                    rawHeaders.set(key, String(value));
-                }
-            });
-
-            if (response.status >= 200 && response.status < 400) {
-                return {
-                    ok: true,
-                    body: response.data,
-                    headers: response.headers, // axios headers for legacy compatibility
-                    rawResponse: {
-                        headers: rawHeaders, // Web API Headers for rawResponse
-                        redirected: false, // axios doesn't provide this info directly
-                        status: response.status,
-                        statusText: response.statusText,
-                        type: "basic", // axios doesn't provide this, default to 'basic'
-                        url: response.config.url || args.url,
-                    },
-                };
-            } else {
-                return {
-                    ok: false,
-                    error: {
-                        reason: "status-code",
-                        statusCode: response.status,
-                        body: response.data,
-                    },
-                    rawResponse: {
-                        headers: rawHeaders,
-                        redirected: false,
-                        status: response.status,
-                        statusText: response.statusText,
-                        type: "basic",
-                        url: response.config.url || args.url,
-                    },
-                };
-            }
-        } catch (error: any) {
-            return {
-                ok: false,
-                error: {
-                    reason: "unknown",
-                    errorMessage: error?.message || "Unknown error occurred",
-                },
-                rawResponse: {
-                    headers: new Headers(), // Empty Headers object for network errors
-                    redirected: false,
-                    status: 0,
-                    statusText: "Network Error",
-                    type: "error",
-                    url: args.url,
-                },
-            };
-        }
-    },
-});
-```
-
-Note: When using a custom `fetcher`, you need to return an object that matches the expected API response format with `ok`, `body`, `headers`, and `rawResponse` properties.
-
 ## Feedback
 
 ### Contributing
@@ -717,7 +517,7 @@ On the other hand, contributions to the README are always very welcome!
 
 ### Raise an issue
 
-To provide feedback or report a bug, please [raise an issue on our issue tracker](https://github.com/fern-demo/auth0-node-sdk/issues).
+To provide feedback or report a bug, please [raise an issue on our issue tracker](https://github.com/auth0/node-auth0/issues).
 
 ### Vulnerability Reporting
 

package/dist/cjs/auth/backchannel.d.ts

@@ -34,8 +34,13 @@ export type AuthorizeOptions = {
     audience?: string;
     /**
      * Custom expiry time in seconds for this request.
+     * @deprecated Use {@link AuthorizeOptions.requested_expiry} instead.
      */
     request_expiry?: string;
+    /**
+     * Custom expiry time in seconds for this request.
+     */
+    requested_expiry?: string;
     /**
      * The user ID.
      */
@@ -50,6 +55,10 @@ export type AuthorizeOptions = {
      */
     authorization_details?: string;
 } & Record<string, string>;
+export interface AuthorizationDetails {
+    readonly type: string;
+    readonly [parameter: string]: unknown;
+}
 /**
  * The response from the token endpoint.
  */
@@ -82,7 +91,7 @@ export type TokenResponse = {
      * Optional authorization details when using Rich Authorization Requests (RAR).
      * @see https://auth0.com/docs/get-started/apis/configure-rich-authorization-requests
      */
-    authorization_details?: string;
+    authorization_details?: AuthorizationDetails[];
 };
 /**
  * Options for the token request.

package/dist/cjs/auth/backchannel.js

@@ -65,6 +65,11 @@ class Backchannel extends base_auth_api_js_1.BaseAuthAPI {
         return __awaiter(this, void 0, void 0, function* () {
             var { userId } = _a, options = __rest(_a, ["userId"]);
             const body = Object.assign(Object.assign({}, options), { login_hint: getLoginHint(userId, this.domain), client_id: this.clientId });
+            // The correct parameter is `requested_expiry`, but we also accept the deprecated `request_expiry` for backwards compatibility
+            const requestedExpiry = options.requested_expiry || options.request_expiry;
+            if (requestedExpiry) {
+                body.requested_expiry = requestedExpiry;
+            }
             yield this.addClientAuthentication(body);
             const response = yield this.request.bind(this)({
                 path: CIBA_AUTHORIZE_URL,

package/dist/cjs/auth/oauth.d.ts

@@ -236,13 +236,17 @@ export interface TokenExchangeGrantRequest {
  */
 export interface TokenForConnectionRequest {
     /**
-     * The subject token(refresh token in this case) to exchange for an access token for a connection.
+     * The subject token to exchange for an access token for a connection.
      */
     subject_token: string;
     /**
      * The target social provider connection (e.g., "google-oauth2").
      */
     connection: string;
+    /**
+     * An optional subject token type parameter to pass to the authorization server. If not provided, it defaults to `urn:ietf:params:oauth:token-type:refresh_token`.
+     */
+    subject_token_type?: SUBJECT_TOKEN_TYPES;
     /**
      * Optional login hint
      */
@@ -255,7 +259,26 @@ export interface TokenForConnectionResponse {
     connection: string;
     [key: string]: unknown;
 }
+export declare enum SUBJECT_TOKEN_TYPES {
+    /**
+     * Constant representing the subject type for a refresh token.
+     * This is used in OAuth 2.0 token exchange to specify that the token being exchanged is a refresh token.
+     *
+     * @see {@link https://tools.ietf.org/html/rfc8693#section-3.1 RFC 8693 Section 3.1}
+     */
+    REFRESH_TOKEN = "urn:ietf:params:oauth:token-type:refresh_token",
+    /**
+     * Constant representing the subject type for a access token.
+     * This is used in OAuth 2.0 token exchange to specify that the token being exchanged is an access token.
+     *
+     * @see {@link https://tools.ietf.org/html/rfc8693#section-3.1 RFC 8693 Section 3.1}
+     */
+    ACCESS_TOKEN = "urn:ietf:params:oauth:token-type:access_token"
+}
 export declare const TOKEN_FOR_CONNECTION_GRANT_TYPE = "urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token";
+/**
+ * @deprecated Use {@link SUBJECT_TOKEN_TYPES.REFRESH_TOKEN} instead.
+ */
 export declare const TOKEN_FOR_CONNECTION_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:refresh_token";
 export declare const TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = "http://auth0.com/oauth/token-type/federated-connection-access-token";
 export declare const TOKEN_URL = "/oauth/token";
@@ -419,12 +442,13 @@ export declare class OAuth extends BaseAuthAPI {
         initOverrides?: InitOverride;
     }): Promise<VoidApiResponse>;
     /**
-     * Exchanges a subject token (refresh token in this case) for an access token for the connection.
+     * Exchanges a subject token for an access token for the connection.
      *
      * The request body includes:
      * - client_id (and client_secret/client_assertion via addClientAuthentication)
      * - grant_type set to `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`
-     * - subject_token (refresh token) and fixed subject_token_type for refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`)
+     * - subject_token: the token to exchange
+     * - subject_token_type: the type of token being exchanged. Defaults to refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`).
      * - requested_token_type (`http://auth0.com/oauth/token-type/federated-connection-access-token`) indicating that a federated connection access token is desired
      * - connection name and an optional `login_hint` if provided
      *

package/dist/cjs/auth/oauth.js

@@ -9,12 +9,32 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth = exports.TOKEN_URL = exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_GRANT_TYPE = void 0;
+exports.OAuth = exports.TOKEN_URL = exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_GRANT_TYPE = exports.SUBJECT_TOKEN_TYPES = void 0;
 const runtime_js_1 = require("../lib/runtime.js");
 const base_auth_api_js_1 = require("./base-auth-api.js");
 const id_token_validator_js_1 = require("./id-token-validator.js");
 const utils_js_1 = require("../utils.js");
+var SUBJECT_TOKEN_TYPES;
+(function (SUBJECT_TOKEN_TYPES) {
+    /**
+     * Constant representing the subject type for a refresh token.
+     * This is used in OAuth 2.0 token exchange to specify that the token being exchanged is a refresh token.
+     *
+     * @see {@link https://tools.ietf.org/html/rfc8693#section-3.1 RFC 8693 Section 3.1}
+     */
+    SUBJECT_TOKEN_TYPES["REFRESH_TOKEN"] = "urn:ietf:params:oauth:token-type:refresh_token";
+    /**
+     * Constant representing the subject type for a access token.
+     * This is used in OAuth 2.0 token exchange to specify that the token being exchanged is an access token.
+     *
+     * @see {@link https://tools.ietf.org/html/rfc8693#section-3.1 RFC 8693 Section 3.1}
+     */
+    SUBJECT_TOKEN_TYPES["ACCESS_TOKEN"] = "urn:ietf:params:oauth:token-type:access_token";
+})(SUBJECT_TOKEN_TYPES || (exports.SUBJECT_TOKEN_TYPES = SUBJECT_TOKEN_TYPES = {}));
 exports.TOKEN_FOR_CONNECTION_GRANT_TYPE = "urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token";
+/**
+ * @deprecated Use {@link SUBJECT_TOKEN_TYPES.REFRESH_TOKEN} instead.
+ */
 exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:refresh_token";
 exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = "http://auth0.com/oauth/token-type/federated-connection-access-token";
 exports.TOKEN_URL = "/oauth/token";
@@ -226,12 +246,13 @@ class OAuth extends base_auth_api_js_1.BaseAuthAPI {
         });
     }
     /**
-     * Exchanges a subject token (refresh token in this case) for an access token for the connection.
+     * Exchanges a subject token for an access token for the connection.
      *
      * The request body includes:
      * - client_id (and client_secret/client_assertion via addClientAuthentication)
      * - grant_type set to `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`
-     * - subject_token (refresh token) and fixed subject_token_type for refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`)
+     * - subject_token: the token to exchange
+     * - subject_token_type: the type of token being exchanged. Defaults to refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`).
      * - requested_token_type (`http://auth0.com/oauth/token-type/federated-connection-access-token`) indicating that a federated connection access token is desired
      * - connection name and an optional `login_hint` if provided
      *
@@ -242,7 +263,7 @@ class OAuth extends base_auth_api_js_1.BaseAuthAPI {
     tokenForConnection(bodyParameters_1) {
         return __awaiter(this, arguments, void 0, function* (bodyParameters, options = {}) {
             (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ["connection", "subject_token"]);
-            const body = Object.assign(Object.assign({}, bodyParameters), { grant_type: exports.TOKEN_FOR_CONNECTION_GRANT_TYPE, subject_token_type: exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE, requested_token_type: exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE });
+            const body = Object.assign(Object.assign({ subject_token_type: SUBJECT_TOKEN_TYPES.REFRESH_TOKEN }, bodyParameters), { grant_type: exports.TOKEN_FOR_CONNECTION_GRANT_TYPE, requested_token_type: exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE });
             yield this.addClientAuthentication(body);
             const response = yield this.request({
                 path: exports.TOKEN_URL,

package/dist/cjs/management/Client.d.ts

@@ -30,6 +30,7 @@ import { RulesConfigs } from "./api/resources/rulesConfigs/client/Client.js";
 import { SelfServiceProfiles } from "./api/resources/selfServiceProfiles/client/Client.js";
 import { Sessions } from "./api/resources/sessions/client/Client.js";
 import { Stats } from "./api/resources/stats/client/Client.js";
+import { SupplementalSignals } from "./api/resources/supplementalSignals/client/Client.js";
 import { Tickets } from "./api/resources/tickets/client/Client.js";
 import { TokenExchangeProfiles } from "./api/resources/tokenExchangeProfiles/client/Client.js";
 import { UserBlocks } from "./api/resources/userBlocks/client/Client.js";
@@ -37,8 +38,10 @@ import { Users } from "./api/resources/users/client/Client.js";
 import { Anomaly } from "./api/resources/anomaly/client/Client.js";
 import { AttackProtection } from "./api/resources/attackProtection/client/Client.js";
 import { Emails } from "./api/resources/emails/client/Client.js";
+import { Groups } from "./api/resources/groups/client/Client.js";
 import { Guardian } from "./api/resources/guardian/client/Client.js";
 import { Keys } from "./api/resources/keys/client/Client.js";
+import { RiskAssessments } from "./api/resources/riskAssessments/client/Client.js";
 import { Tenants } from "./api/resources/tenants/client/Client.js";
 import { VerifiableCredentials } from "./api/resources/verifiableCredentials/client/Client.js";
 export declare namespace ManagementClient {
@@ -93,6 +96,7 @@ export declare class ManagementClient {
     protected _selfServiceProfiles: SelfServiceProfiles | undefined;
     protected _sessions: Sessions | undefined;
     protected _stats: Stats | undefined;
+    protected _supplementalSignals: SupplementalSignals | undefined;
     protected _tickets: Tickets | undefined;
     protected _tokenExchangeProfiles: TokenExchangeProfiles | undefined;
     protected _userBlocks: UserBlocks | undefined;
@@ -100,8 +104,10 @@ export declare class ManagementClient {
     protected _anomaly: Anomaly | undefined;
     protected _attackProtection: AttackProtection | undefined;
     protected _emails: Emails | undefined;
+    protected _groups: Groups | undefined;
     protected _guardian: Guardian | undefined;
     protected _keys: Keys | undefined;
+    protected _riskAssessments: RiskAssessments | undefined;
     protected _tenants: Tenants | undefined;
     protected _verifiableCredentials: VerifiableCredentials | undefined;
     constructor(_options: ManagementClient.Options);
@@ -132,6 +138,7 @@ export declare class ManagementClient {
     get selfServiceProfiles(): SelfServiceProfiles;
     get sessions(): Sessions;
     get stats(): Stats;
+    get supplementalSignals(): SupplementalSignals;
     get tickets(): Tickets;
     get tokenExchangeProfiles(): TokenExchangeProfiles;
     get userBlocks(): UserBlocks;
@@ -139,8 +146,10 @@ export declare class ManagementClient {
     get anomaly(): Anomaly;
     get attackProtection(): AttackProtection;
     get emails(): Emails;
+    get groups(): Groups;
     get guardian(): Guardian;
     get keys(): Keys;
+    get riskAssessments(): RiskAssessments;
     get tenants(): Tenants;
     get verifiableCredentials(): VerifiableCredentials;
 }

package/dist/cjs/management/Client.js

@@ -31,17 +31,20 @@ const Client_js_24 = require("./api/resources/rulesConfigs/client/Client.js");
 const Client_js_25 = require("./api/resources/selfServiceProfiles/client/Client.js");
 const Client_js_26 = require("./api/resources/sessions/client/Client.js");
 const Client_js_27 = require("./api/resources/stats/client/Client.js");
-const Client_js_28 = require("./api/resources/tickets/client/Client.js");
-const Client_js_29 = require("./api/resources/tokenExchangeProfiles/client/Client.js");
-const Client_js_30 = require("./api/resources/userBlocks/client/Client.js");
-const Client_js_31 = require("./api/resources/users/client/Client.js");
-const Client_js_32 = require("./api/resources/anomaly/client/Client.js");
-const Client_js_33 = require("./api/resources/attackProtection/client/Client.js");
-const Client_js_34 = require("./api/resources/emails/client/Client.js");
-const Client_js_35 = require("./api/resources/guardian/client/Client.js");
-const Client_js_36 = require("./api/resources/keys/client/Client.js");
-const Client_js_37 = require("./api/resources/tenants/client/Client.js");
-const Client_js_38 = require("./api/resources/verifiableCredentials/client/Client.js");
+const Client_js_28 = require("./api/resources/supplementalSignals/client/Client.js");
+const Client_js_29 = require("./api/resources/tickets/client/Client.js");
+const Client_js_30 = require("./api/resources/tokenExchangeProfiles/client/Client.js");
+const Client_js_31 = require("./api/resources/userBlocks/client/Client.js");
+const Client_js_32 = require("./api/resources/users/client/Client.js");
+const Client_js_33 = require("./api/resources/anomaly/client/Client.js");
+const Client_js_34 = require("./api/resources/attackProtection/client/Client.js");
+const Client_js_35 = require("./api/resources/emails/client/Client.js");
+const Client_js_36 = require("./api/resources/groups/client/Client.js");
+const Client_js_37 = require("./api/resources/guardian/client/Client.js");
+const Client_js_38 = require("./api/resources/keys/client/Client.js");
+const Client_js_39 = require("./api/resources/riskAssessments/client/Client.js");
+const Client_js_40 = require("./api/resources/tenants/client/Client.js");
+const Client_js_41 = require("./api/resources/verifiableCredentials/client/Client.js");
 class ManagementClient {
     constructor(_options) {
         this._options = _options;
@@ -154,49 +157,61 @@ class ManagementClient {
         var _a;
         return ((_a = this._stats) !== null && _a !== void 0 ? _a : (this._stats = new Client_js_27.Stats(this._options)));
     }
+    get supplementalSignals() {
+        var _a;
+        return ((_a = this._supplementalSignals) !== null && _a !== void 0 ? _a : (this._supplementalSignals = new Client_js_28.SupplementalSignals(this._options)));
+    }
     get tickets() {
         var _a;
-        return ((_a = this._tickets) !== null && _a !== void 0 ? _a : (this._tickets = new Client_js_28.Tickets(this._options)));
+        return ((_a = this._tickets) !== null && _a !== void 0 ? _a : (this._tickets = new Client_js_29.Tickets(this._options)));
     }
     get tokenExchangeProfiles() {
         var _a;
-        return ((_a = this._tokenExchangeProfiles) !== null && _a !== void 0 ? _a : (this._tokenExchangeProfiles = new Client_js_29.TokenExchangeProfiles(this._options)));
+        return ((_a = this._tokenExchangeProfiles) !== null && _a !== void 0 ? _a : (this._tokenExchangeProfiles = new Client_js_30.TokenExchangeProfiles(this._options)));
     }
     get userBlocks() {
         var _a;
-        return ((_a = this._userBlocks) !== null && _a !== void 0 ? _a : (this._userBlocks = new Client_js_30.UserBlocks(this._options)));
+        return ((_a = this._userBlocks) !== null && _a !== void 0 ? _a : (this._userBlocks = new Client_js_31.UserBlocks(this._options)));
     }
     get users() {
         var _a;
-        return ((_a = this._users) !== null && _a !== void 0 ? _a : (this._users = new Client_js_31.Users(this._options)));
+        return ((_a = this._users) !== null && _a !== void 0 ? _a : (this._users = new Client_js_32.Users(this._options)));
     }
     get anomaly() {
         var _a;
-        return ((_a = this._anomaly) !== null && _a !== void 0 ? _a : (this._anomaly = new Client_js_32.Anomaly(this._options)));
+        return ((_a = this._anomaly) !== null && _a !== void 0 ? _a : (this._anomaly = new Client_js_33.Anomaly(this._options)));
     }
     get attackProtection() {
         var _a;
-        return ((_a = this._attackProtection) !== null && _a !== void 0 ? _a : (this._attackProtection = new Client_js_33.AttackProtection(this._options)));
+        return ((_a = this._attackProtection) !== null && _a !== void 0 ? _a : (this._attackProtection = new Client_js_34.AttackProtection(this._options)));
     }
     get emails() {
         var _a;
-        return ((_a = this._emails) !== null && _a !== void 0 ? _a : (this._emails = new Client_js_34.Emails(this._options)));
+        return ((_a = this._emails) !== null && _a !== void 0 ? _a : (this._emails = new Client_js_35.Emails(this._options)));
+    }
+    get groups() {
+        var _a;
+        return ((_a = this._groups) !== null && _a !== void 0 ? _a : (this._groups = new Client_js_36.Groups(this._options)));
     }
     get guardian() {
         var _a;
-        return ((_a = this._guardian) !== null && _a !== void 0 ? _a : (this._guardian = new Client_js_35.Guardian(this._options)));
+        return ((_a = this._guardian) !== null && _a !== void 0 ? _a : (this._guardian = new Client_js_37.Guardian(this._options)));
     }
     get keys() {
         var _a;
-        return ((_a = this._keys) !== null && _a !== void 0 ? _a : (this._keys = new Client_js_36.Keys(this._options)));
+        return ((_a = this._keys) !== null && _a !== void 0 ? _a : (this._keys = new Client_js_38.Keys(this._options)));
+    }
+    get riskAssessments() {
+        var _a;
+        return ((_a = this._riskAssessments) !== null && _a !== void 0 ? _a : (this._riskAssessments = new Client_js_39.RiskAssessments(this._options)));
     }
     get tenants() {
         var _a;
-        return ((_a = this._tenants) !== null && _a !== void 0 ? _a : (this._tenants = new Client_js_37.Tenants(this._options)));
+        return ((_a = this._tenants) !== null && _a !== void 0 ? _a : (this._tenants = new Client_js_40.Tenants(this._options)));
     }
     get verifiableCredentials() {
         var _a;
-        return ((_a = this._verifiableCredentials) !== null && _a !== void 0 ? _a : (this._verifiableCredentials = new Client_js_38.VerifiableCredentials(this._options)));
+        return ((_a = this._verifiableCredentials) !== null && _a !== void 0 ? _a : (this._verifiableCredentials = new Client_js_41.VerifiableCredentials(this._options)));
     }
 }
 exports.ManagementClient = ManagementClient;