auth0 5.0.0-beta.0 → 5.0.0

package/dist/cjs/management/api/types/ListFlowsVaultConnectionsOffsetPaginatedResponseContent.js

@@ -0,0 +1,5 @@
+"use strict";
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/api/types/ListSelfServiceProfileCustomTextResponseContent.d.ts

@@ -4,4 +4,4 @@
 /**
  * The list of custom text keys and values.
  */
-export type ListSelfServiceProfileCustomTextResponseContent = Record<string, unknown>;
+export type ListSelfServiceProfileCustomTextResponseContent = Record<string, string>;

package/dist/cjs/management/api/types/Log.d.ts

@@ -39,6 +39,7 @@ export interface Log {
     details?: Management.LogDetails;
     /** User agent string from the client device that caused the event. */
     user_agent?: string;
+    security_context?: Management.LogSecurityContext;
     location_info?: Management.LogLocationInfo;
     /** Accepts any additional properties */
     [key: string]: any;

package/dist/cjs/management/api/types/LogSecurityContext.d.ts

@@ -0,0 +1,14 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+/**
+ * Information about security-related signals.
+ */
+export interface LogSecurityContext {
+    /** JA3 fingerprint value. */
+    ja3?: string;
+    /** JA4 fingerprint value. */
+    ja4?: string;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}

package/dist/cjs/management/api/types/LogSecurityContext.js

@@ -0,0 +1,5 @@
+"use strict";
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/api/types/LogStreamEventBridgeSinkRegionEnum.d.ts

@@ -4,22 +4,37 @@
 /**
  * The region in which the EventBridge event source will be created
  */
-export type LogStreamEventBridgeSinkRegionEnum = "ap-east-1" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-southeast-1" | "ap-southeast-2" | "ca-central-1" | "eu-central-1" | "eu-north-1" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "me-south-1" | "sa-east-1" | "us-gov-east-1" | "us-gov-west-1" | "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2";
+export type LogStreamEventBridgeSinkRegionEnum = "af-south-1" | "ap-east-1" | "ap-east-2" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-south-2" | "ap-southeast-1" | "ap-southeast-2" | "ap-southeast-3" | "ap-southeast-4" | "ap-southeast-5" | "ap-southeast-6" | "ap-southeast-7" | "ca-central-1" | "ca-west-1" | "eu-central-1" | "eu-central-2" | "eu-north-1" | "eu-south-1" | "eu-south-2" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "il-central-1" | "me-central-1" | "me-south-1" | "mx-central-1" | "sa-east-1" | "us-gov-east-1" | "us-gov-west-1" | "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2";
 export declare const LogStreamEventBridgeSinkRegionEnum: {
+    readonly AfSouth1: "af-south-1";
     readonly ApEast1: "ap-east-1";
+    readonly ApEast2: "ap-east-2";
     readonly ApNortheast1: "ap-northeast-1";
     readonly ApNortheast2: "ap-northeast-2";
     readonly ApNortheast3: "ap-northeast-3";
     readonly ApSouth1: "ap-south-1";
+    readonly ApSouth2: "ap-south-2";
     readonly ApSoutheast1: "ap-southeast-1";
     readonly ApSoutheast2: "ap-southeast-2";
+    readonly ApSoutheast3: "ap-southeast-3";
+    readonly ApSoutheast4: "ap-southeast-4";
+    readonly ApSoutheast5: "ap-southeast-5";
+    readonly ApSoutheast6: "ap-southeast-6";
+    readonly ApSoutheast7: "ap-southeast-7";
     readonly CaCentral1: "ca-central-1";
+    readonly CaWest1: "ca-west-1";
     readonly EuCentral1: "eu-central-1";
+    readonly EuCentral2: "eu-central-2";
     readonly EuNorth1: "eu-north-1";
+    readonly EuSouth1: "eu-south-1";
+    readonly EuSouth2: "eu-south-2";
     readonly EuWest1: "eu-west-1";
     readonly EuWest2: "eu-west-2";
     readonly EuWest3: "eu-west-3";
+    readonly IlCentral1: "il-central-1";
+    readonly MeCentral1: "me-central-1";
     readonly MeSouth1: "me-south-1";
+    readonly MxCentral1: "mx-central-1";
     readonly SaEast1: "sa-east-1";
     readonly UsGovEast1: "us-gov-east-1";
     readonly UsGovWest1: "us-gov-west-1";

package/dist/cjs/management/api/types/LogStreamEventBridgeSinkRegionEnum.js

@@ -5,20 +5,35 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogStreamEventBridgeSinkRegionEnum = void 0;
 exports.LogStreamEventBridgeSinkRegionEnum = {
+    AfSouth1: "af-south-1",
     ApEast1: "ap-east-1",
+    ApEast2: "ap-east-2",
     ApNortheast1: "ap-northeast-1",
     ApNortheast2: "ap-northeast-2",
     ApNortheast3: "ap-northeast-3",
     ApSouth1: "ap-south-1",
+    ApSouth2: "ap-south-2",
     ApSoutheast1: "ap-southeast-1",
     ApSoutheast2: "ap-southeast-2",
+    ApSoutheast3: "ap-southeast-3",
+    ApSoutheast4: "ap-southeast-4",
+    ApSoutheast5: "ap-southeast-5",
+    ApSoutheast6: "ap-southeast-6",
+    ApSoutheast7: "ap-southeast-7",
     CaCentral1: "ca-central-1",
+    CaWest1: "ca-west-1",
     EuCentral1: "eu-central-1",
+    EuCentral2: "eu-central-2",
     EuNorth1: "eu-north-1",
+    EuSouth1: "eu-south-1",
+    EuSouth2: "eu-south-2",
     EuWest1: "eu-west-1",
     EuWest2: "eu-west-2",
     EuWest3: "eu-west-3",
+    IlCentral1: "il-central-1",
+    MeCentral1: "me-central-1",
     MeSouth1: "me-south-1",
+    MxCentral1: "mx-central-1",
     SaEast1: "sa-east-1",
     UsGovEast1: "us-gov-east-1",
     UsGovWest1: "us-gov-west-1",

package/dist/cjs/management/api/types/OauthScope.d.ts

@@ -140,6 +140,18 @@ export type OauthScope =
 /**
  * Delete Connections */
  | "delete:connections"
+/**
+ * Read Directory Provisionings */
+ | "read:directory_provisionings"
+/**
+ * Create Directory Provisionings */
+ | "create:directory_provisionings"
+/**
+ * Update Directory Provisionings */
+ | "update:directory_provisionings"
+/**
+ * Delete Directory Provisionings */
+ | "delete:directory_provisionings"
 /**
  * Read Users */
  | "read:users"
@@ -302,6 +314,12 @@ export type OauthScope =
 /**
  * Delete Grants */
  | "delete:grants"
+/**
+ * Read Groups */
+ | "read:groups"
+/**
+ * Read Group Members */
+ | "read:group_members"
 /**
  * Create Guardian Enrollment Tickets */
  | "create:guardian_enrollment_tickets"
@@ -461,6 +479,18 @@ export type OauthScope =
 /**
  * Delete Organization Connections */
  | "delete:organization_connections"
+/**
+ * Read Organization Discovery Domains */
+ | "read:organization_discovery_domains"
+/**
+ * Create Organization Discovery Domains */
+ | "create:organization_discovery_domains"
+/**
+ * Update Organization Discovery Domains */
+ | "update:organization_discovery_domains"
+/**
+ * Delete Organization Discovery Domains */
+ | "delete:organization_discovery_domains"
 /**
  * Read Organization Invitations */
  | "read:organization_invitations"
@@ -760,6 +790,10 @@ export declare const OauthScope: {
     readonly CreateConnections: "create:connections";
     readonly UpdateConnections: "update:connections";
     readonly DeleteConnections: "delete:connections";
+    readonly ReadDirectoryProvisionings: "read:directory_provisionings";
+    readonly CreateDirectoryProvisionings: "create:directory_provisionings";
+    readonly UpdateDirectoryProvisionings: "update:directory_provisionings";
+    readonly DeleteDirectoryProvisionings: "delete:directory_provisionings";
     readonly ReadUsers: "read:users";
     readonly ReadConnectionsKeys: "read:connections_keys";
     readonly CreateConnectionsKeys: "create:connections_keys";
@@ -814,6 +848,8 @@ export declare const OauthScope: {
     readonly DeleteForms: "delete:forms";
     readonly ReadGrants: "read:grants";
     readonly DeleteGrants: "delete:grants";
+    readonly ReadGroups: "read:groups";
+    readonly ReadGroupMembers: "read:group_members";
     readonly CreateGuardianEnrollmentTickets: "create:guardian_enrollment_tickets";
     readonly ReadGuardianEnrollments: "read:guardian_enrollments";
     readonly DeleteGuardianEnrollments: "delete:guardian_enrollments";
@@ -867,6 +903,10 @@ export declare const OauthScope: {
     readonly ReadOrganizationConnections: "read:organization_connections";
     readonly UpdateOrganizationConnections: "update:organization_connections";
     readonly DeleteOrganizationConnections: "delete:organization_connections";
+    readonly ReadOrganizationDiscoveryDomains: "read:organization_discovery_domains";
+    readonly CreateOrganizationDiscoveryDomains: "create:organization_discovery_domains";
+    readonly UpdateOrganizationDiscoveryDomains: "update:organization_discovery_domains";
+    readonly DeleteOrganizationDiscoveryDomains: "delete:organization_discovery_domains";
     readonly ReadOrganizationInvitations: "read:organization_invitations";
     readonly CreateOrganizationInvitations: "create:organization_invitations";
     readonly DeleteOrganizationInvitations: "delete:organization_invitations";

package/dist/cjs/management/api/types/OauthScope.js

@@ -51,6 +51,10 @@ exports.OauthScope = {
     CreateConnections: "create:connections",
     UpdateConnections: "update:connections",
     DeleteConnections: "delete:connections",
+    ReadDirectoryProvisionings: "read:directory_provisionings",
+    CreateDirectoryProvisionings: "create:directory_provisionings",
+    UpdateDirectoryProvisionings: "update:directory_provisionings",
+    DeleteDirectoryProvisionings: "delete:directory_provisionings",
     ReadUsers: "read:users",
     ReadConnectionsKeys: "read:connections_keys",
     CreateConnectionsKeys: "create:connections_keys",
@@ -105,6 +109,8 @@ exports.OauthScope = {
     DeleteForms: "delete:forms",
     ReadGrants: "read:grants",
     DeleteGrants: "delete:grants",
+    ReadGroups: "read:groups",
+    ReadGroupMembers: "read:group_members",
     CreateGuardianEnrollmentTickets: "create:guardian_enrollment_tickets",
     ReadGuardianEnrollments: "read:guardian_enrollments",
     DeleteGuardianEnrollments: "delete:guardian_enrollments",
@@ -158,6 +164,10 @@ exports.OauthScope = {
     ReadOrganizationConnections: "read:organization_connections",
     UpdateOrganizationConnections: "update:organization_connections",
     DeleteOrganizationConnections: "delete:organization_connections",
+    ReadOrganizationDiscoveryDomains: "read:organization_discovery_domains",
+    CreateOrganizationDiscoveryDomains: "create:organization_discovery_domains",
+    UpdateOrganizationDiscoveryDomains: "update:organization_discovery_domains",
+    DeleteOrganizationDiscoveryDomains: "delete:organization_discovery_domains",
     ReadOrganizationInvitations: "read:organization_invitations",
     CreateOrganizationInvitations: "create:organization_invitations",
     DeleteOrganizationInvitations: "delete:organization_invitations",

package/dist/cjs/management/api/types/OrganizationMetadata.d.ts

@@ -4,4 +4,4 @@
 /**
  * Metadata associated with the organization, in the form of an object with string values (max 255 chars). Maximum of 25 metadata properties allowed.
  */
-export type OrganizationMetadata = Record<string, unknown>;
+export type OrganizationMetadata = Record<string, string | undefined>;

package/dist/cjs/management/api/types/PartialGroupsEnum.d.ts

@@ -1,6 +1,9 @@
 /**
  * This file was auto-generated by Fern from our API Definition.
  */
+/**
+ * Name of the prompt.
+ */
 export type PartialGroupsEnum = "login" | "login-id" | "login-password" | "login-passwordless" | "signup" | "signup-id" | "signup-password" | "customized-consent";
 export declare const PartialGroupsEnum: {
     readonly Login: "login";

package/dist/cjs/management/api/types/PatchSupplementalSignalsResponseContent.d.ts

@@ -0,0 +1,9 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+export interface PatchSupplementalSignalsResponseContent {
+    /** Indicates if incoming Akamai Headers should be processed */
+    akamai_enabled?: boolean;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}

package/dist/cjs/management/api/types/PatchSupplementalSignalsResponseContent.js

@@ -0,0 +1,5 @@
+"use strict";
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/api/types/PromptGroupNameEnum.d.ts

@@ -1,6 +1,9 @@
 /**
  * This file was auto-generated by Fern from our API Definition.
  */
+/**
+ * Name of the prompt.
+ */
 export type PromptGroupNameEnum = "login" | "login-id" | "login-password" | "login-passwordless" | "login-email-verification" | "signup" | "signup-id" | "signup-password" | "phone-identifier-enrollment" | "phone-identifier-challenge" | "email-identifier-challenge" | "reset-password" | "custom-form" | "consent" | "customized-consent" | "logout" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-sms" | "mfa-email" | "mfa-recovery-code" | "mfa" | "status" | "device-flow" | "email-verification" | "email-otp-challenge" | "organizations" | "invitation" | "common" | "passkeys" | "captcha" | "brute-force-protection";
 export declare const PromptGroupNameEnum: {
     readonly Login: "login";

package/dist/cjs/management/api/types/PromptLanguageEnum.d.ts

@@ -1,6 +1,9 @@
 /**
  * This file was auto-generated by Fern from our API Definition.
  */
+/**
+ * Language to update.
+ */
 export type PromptLanguageEnum = "am" | "ar" | "ar-EG" | "ar-SA" | "az" | "bg" | "bn" | "bs" | "ca-ES" | "cnr" | "cs" | "cy" | "da" | "de" | "el" | "en" | "en-CA" | "es" | "es-419" | "es-AR" | "es-MX" | "et" | "eu-ES" | "fa" | "fi" | "fr" | "fr-CA" | "fr-FR" | "gl-ES" | "gu" | "he" | "hi" | "hr" | "hu" | "hy" | "id" | "is" | "it" | "ja" | "ka" | "kk" | "kn" | "ko" | "lt" | "lv" | "mk" | "ml" | "mn" | "mr" | "ms" | "my" | "nb" | "nl" | "nn" | "no" | "pa" | "pl" | "pt" | "pt-BR" | "pt-PT" | "ro" | "ru" | "sk" | "sl" | "so" | "sq" | "sr" | "sv" | "sw" | "ta" | "te" | "th" | "tl" | "tr" | "uk" | "ur" | "vi" | "zgh" | "zh-CN" | "zh-HK" | "zh-TW";
 export declare const PromptLanguageEnum: {
     readonly Am: "am";

package/dist/cjs/management/api/types/ResourceServer.d.ts

@@ -31,4 +31,7 @@ export interface ResourceServer {
     consent_policy?: Management.ResourceServerConsentPolicyEnum | undefined;
     authorization_details?: unknown[];
     proof_of_possession?: Management.ResourceServerProofOfPossession;
+    subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
+    /** The client ID of the client that this resource server is linked to */
+    client_id?: string;
 }

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorization.d.ts

@@ -0,0 +1,11 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+import * as Management from "../index.js";
+/**
+ * Defines application access permission for a resource server. Use of this field is subject to the applicable Free Trial terms in Okta’s <a href="https://www.okta.com/legal/"> Master Subscription Agreement.</a>
+ */
+export interface ResourceServerSubjectTypeAuthorization {
+    user?: Management.ResourceServerSubjectTypeAuthorizationUser;
+    client?: Management.ResourceServerSubjectTypeAuthorizationClient;
+}

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorization.js

@@ -0,0 +1,5 @@
+"use strict";
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorizationClient.d.ts

@@ -0,0 +1,12 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+import * as Management from "../index.js";
+/**
+ * Access Permissions for client flows
+ */
+export interface ResourceServerSubjectTypeAuthorizationClient {
+    policy?: Management.ResourceServerSubjectTypeAuthorizationClientPolicyEnum;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorizationClient.js

@@ -0,0 +1,5 @@
+"use strict";
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorizationClientPolicyEnum.d.ts

@@ -0,0 +1,11 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+/**
+ * Defines the client flows policy for the resource server
+ */
+export type ResourceServerSubjectTypeAuthorizationClientPolicyEnum = "deny_all" | "require_client_grant";
+export declare const ResourceServerSubjectTypeAuthorizationClientPolicyEnum: {
+    readonly DenyAll: "deny_all";
+    readonly RequireClientGrant: "require_client_grant";
+};

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorizationClientPolicyEnum.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = void 0;
+exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = {
+    DenyAll: "deny_all",
+    RequireClientGrant: "require_client_grant",
+};

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorizationUser.d.ts

@@ -0,0 +1,12 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+import * as Management from "../index.js";
+/**
+ * Access Permissions for user flows
+ */
+export interface ResourceServerSubjectTypeAuthorizationUser {
+    policy?: Management.ResourceServerSubjectTypeAuthorizationUserPolicyEnum;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorizationUser.js

@@ -0,0 +1,5 @@
+"use strict";
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorizationUserPolicyEnum.d.ts

@@ -0,0 +1,12 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+/**
+ * Defines the user flows policy for the resource server
+ */
+export type ResourceServerSubjectTypeAuthorizationUserPolicyEnum = "allow_all" | "deny_all" | "require_client_grant";
+export declare const ResourceServerSubjectTypeAuthorizationUserPolicyEnum: {
+    readonly AllowAll: "allow_all";
+    readonly DenyAll: "deny_all";
+    readonly RequireClientGrant: "require_client_grant";
+};

package/dist/cjs/management/api/types/ResourceServerSubjectTypeAuthorizationUserPolicyEnum.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = void 0;
+exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = {
+    AllowAll: "allow_all",
+    DenyAll: "deny_all",
+    RequireClientGrant: "require_client_grant",
+};

package/dist/cjs/management/api/types/RotateClientSecretResponseContent.d.ts

@@ -15,8 +15,7 @@ export interface RotateClientSecretResponseContent {
     global?: boolean;
     /** Client secret (which you must not make public). */
     client_secret?: string;
-    /** Type of client used to determine which settings are applicable. Can be `spa`, `native`, `non_interactive`, or `regular_web`. */
-    app_type?: string;
+    app_type?: Management.ClientAppTypeEnum;
     /** URL of the logo to display for this client. Recommended size is 150x150 pixels. */
     logo_uri?: string;
     /** Whether this client a first party client (true) or not (false). */
@@ -37,7 +36,7 @@ export interface RotateClientSecretResponseContent {
     allowed_logout_urls?: string[];
     session_transfer?: Management.ClientSessionTransferConfiguration;
     oidc_logout?: Management.ClientOidcBackchannelLogoutSettings;
-    /** List of grant types supported for this application. Can include `authorization_code`, `implicit`, `refresh_token`, `client_credentials`, `password`, `http://auth0.com/oauth/grant-type/password-realm`, `http://auth0.com/oauth/grant-type/mfa-oob`, `http://auth0.com/oauth/grant-type/mfa-otp`, `http://auth0.com/oauth/grant-type/mfa-recovery-code`, `urn:openid:params:grant-type:ciba`, and `urn:ietf:params:oauth:grant-type:device_code`. */
+    /** List of grant types supported for this application. Can include `authorization_code`, `implicit`, `refresh_token`, `client_credentials`, `password`, `http://auth0.com/oauth/grant-type/password-realm`, `http://auth0.com/oauth/grant-type/mfa-oob`, `http://auth0.com/oauth/grant-type/mfa-otp`, `http://auth0.com/oauth/grant-type/mfa-recovery-code`, `urn:openid:params:grant-type:ciba`, `urn:ietf:params:oauth:grant-type:device_code`, and `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`. */
     grant_types?: string[];
     jwt_configuration?: Management.ClientJwtConfiguration;
     signing_keys?: Management.ClientSigningKeys;
@@ -68,6 +67,8 @@ export interface RotateClientSecretResponseContent {
     default_organization?: Management.ClientDefaultOrganization;
     organization_usage?: Management.ClientOrganizationUsageEnum;
     organization_require_behavior?: Management.ClientOrganizationRequireBehaviorEnum;
+    /** Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both. */
+    organization_discovery_methods?: Management.ClientOrganizationDiscoveryEnum[];
     client_authentication_methods?: Management.ClientAuthenticationMethod;
     /** Makes the use of Pushed Authorization Requests mandatory for this client */
     require_pushed_authorization_requests?: boolean;
@@ -78,6 +79,9 @@ export interface RotateClientSecretResponseContent {
     /** Specifies how long, in seconds, a Pushed Authorization Request URI remains valid */
     par_request_expiry?: number;
     token_quota?: Management.TokenQuota;
+    my_organization_configuration?: Management.ClientMyOrganizationConfiguration;
+    /** The identifier of the resource server that this client is linked to. */
+    resource_server_identifier?: string;
     /** Accepts any additional properties */
     [key: string]: any;
 }

package/dist/cjs/management/api/types/ScreenGroupNameEnum.d.ts

@@ -1,7 +1,10 @@
 /**
  * This file was auto-generated by Fern from our API Definition.
  */
-export type ScreenGroupNameEnum = "login" | "login-id" | "login-password" | "login-passwordless-email-code" | "login-passwordless-email-link" | "login-passwordless-sms-otp" | "login-email-verification" | "signup" | "signup-id" | "signup-password" | "phone-identifier-enrollment" | "phone-identifier-challenge" | "email-identifier-challenge" | "reset-password-request" | "reset-password-email" | "reset-password" | "reset-password-success" | "reset-password-error" | "reset-password-mfa-email-challenge" | "reset-password-mfa-otp-challenge" | "reset-password-mfa-phone-challenge" | "reset-password-mfa-push-challenge-push" | "reset-password-mfa-recovery-code-challenge" | "reset-password-mfa-sms-challenge" | "reset-password-mfa-voice-challenge" | "reset-password-mfa-webauthn-platform-challenge" | "reset-password-mfa-webauthn-roaming-challenge" | "custom-form" | "consent" | "customized-consent" | "logout" | "logout-complete" | "logout-aborted" | "mfa-push-welcome" | "mfa-push-enrollment-qr" | "mfa-push-enrollment-code" | "mfa-push-success" | "mfa-push-challenge-push" | "mfa-push-list" | "mfa-otp-enrollment-qr" | "mfa-otp-enrollment-code" | "mfa-otp-challenge" | "mfa-voice-enrollment" | "mfa-voice-challenge" | "mfa-phone-challenge" | "mfa-phone-enrollment" | "mfa-webauthn-platform-enrollment" | "mfa-webauthn-roaming-enrollment" | "mfa-webauthn-platform-challenge" | "mfa-webauthn-roaming-challenge" | "mfa-webauthn-change-key-nickname" | "mfa-webauthn-enrollment-success" | "mfa-webauthn-error" | "mfa-webauthn-not-available-error" | "mfa-country-codes" | "mfa-sms-enrollment" | "mfa-sms-challenge" | "mfa-sms-list" | "mfa-email-challenge" | "mfa-email-list" | "mfa-recovery-code-enrollment" | "mfa-recovery-code-challenge-new-code" | "mfa-recovery-code-challenge" | "mfa-detect-browser-capabilities" | "mfa-enroll-result" | "mfa-login-options" | "mfa-begin-enroll-options" | "status" | "device-code-activation" | "device-code-activation-allowed" | "device-code-activation-denied" | "device-code-confirmation" | "email-verification-result" | "email-otp-challenge" | "organization-selection" | "organization-picker" | "accept-invitation" | "redeem-ticket" | "passkey-enrollment" | "passkey-enrollment-local" | "interstitial-captcha" | "brute-force-protection-unblock" | "brute-force-protection-unblock-success" | "brute-force-protection-unblock-failure";
+/**
+ * Name of the screen
+ */
+export type ScreenGroupNameEnum = "login" | "login-id" | "login-password" | "login-passwordless-email-code" | "login-passwordless-email-link" | "login-passwordless-sms-otp" | "login-email-verification" | "signup" | "signup-id" | "signup-password" | "phone-identifier-enrollment" | "phone-identifier-challenge" | "email-identifier-challenge" | "reset-password-request" | "reset-password-email" | "reset-password" | "reset-password-success" | "reset-password-error" | "reset-password-mfa-email-challenge" | "reset-password-mfa-otp-challenge" | "reset-password-mfa-phone-challenge" | "reset-password-mfa-push-challenge-push" | "reset-password-mfa-recovery-code-challenge" | "reset-password-mfa-sms-challenge" | "reset-password-mfa-voice-challenge" | "reset-password-mfa-webauthn-platform-challenge" | "reset-password-mfa-webauthn-roaming-challenge" | "custom-form" | "consent" | "customized-consent" | "logout" | "logout-complete" | "logout-aborted" | "mfa-push-welcome" | "mfa-push-enrollment-qr" | "mfa-push-enrollment-code" | "mfa-push-success" | "mfa-push-challenge-push" | "mfa-push-list" | "mfa-otp-enrollment-qr" | "mfa-otp-enrollment-code" | "mfa-otp-challenge" | "mfa-voice-enrollment" | "mfa-voice-challenge" | "mfa-phone-challenge" | "mfa-phone-enrollment" | "mfa-webauthn-platform-enrollment" | "mfa-webauthn-roaming-enrollment" | "mfa-webauthn-platform-challenge" | "mfa-webauthn-roaming-challenge" | "mfa-webauthn-change-key-nickname" | "mfa-webauthn-enrollment-success" | "mfa-webauthn-error" | "mfa-webauthn-not-available-error" | "mfa-country-codes" | "mfa-sms-enrollment" | "mfa-sms-challenge" | "mfa-sms-list" | "mfa-email-challenge" | "mfa-email-list" | "mfa-recovery-code-enrollment" | "mfa-recovery-code-challenge-new-code" | "mfa-recovery-code-challenge" | "mfa-detect-browser-capabilities" | "mfa-enroll-result" | "mfa-login-options" | "mfa-begin-enroll-options" | "status" | "device-code-activation" | "device-code-activation-allowed" | "device-code-activation-denied" | "device-code-confirmation" | "email-verification-result" | "email-otp-challenge" | "organization-selection" | "organization-picker" | "pre-login-organization-picker" | "accept-invitation" | "redeem-ticket" | "passkey-enrollment" | "passkey-enrollment-local" | "interstitial-captcha" | "brute-force-protection-unblock" | "brute-force-protection-unblock-success" | "brute-force-protection-unblock-failure";
 export declare const ScreenGroupNameEnum: {
     readonly Login: "login";
     readonly LoginId: "login-id";
@@ -79,6 +82,7 @@ export declare const ScreenGroupNameEnum: {
     readonly EmailOtpChallenge: "email-otp-challenge";
     readonly OrganizationSelection: "organization-selection";
     readonly OrganizationPicker: "organization-picker";
+    readonly PreLoginOrganizationPicker: "pre-login-organization-picker";
     readonly AcceptInvitation: "accept-invitation";
     readonly RedeemTicket: "redeem-ticket";
     readonly PasskeyEnrollment: "passkey-enrollment";

package/dist/cjs/management/api/types/ScreenGroupNameEnum.js

@@ -81,6 +81,7 @@ exports.ScreenGroupNameEnum = {
     EmailOtpChallenge: "email-otp-challenge",
     OrganizationSelection: "organization-selection",
     OrganizationPicker: "organization-picker",
+    PreLoginOrganizationPicker: "pre-login-organization-picker",
     AcceptInvitation: "accept-invitation",
     RedeemTicket: "redeem-ticket",
     PasskeyEnrollment: "passkey-enrollment",

package/dist/cjs/management/api/types/SearchEngineVersionsEnum.d.ts

@@ -1,6 +1,9 @@
 /**
  * This file was auto-generated by Fern from our API Definition.
  */
+/**
+ * The version of the search engine
+ */
 export type SearchEngineVersionsEnum = "v1" | "v2" | "v3";
 export declare const SearchEngineVersionsEnum: {
     readonly V1: "v1";

package/dist/cjs/management/api/types/SelfServiceProfileCustomTextLanguageEnum.d.ts

@@ -1,4 +1,7 @@
 /**
  * This file was auto-generated by Fern from our API Definition.
  */
+/**
+ * The language of the custom text.
+ */
 export type SelfServiceProfileCustomTextLanguageEnum = "en";

package/dist/cjs/management/api/types/SelfServiceProfileCustomTextPageEnum.d.ts

@@ -1,4 +1,7 @@
 /**
  * This file was auto-generated by Fern from our API Definition.
  */
+/**
+ * The page where the custom text is shown.
+ */
 export type SelfServiceProfileCustomTextPageEnum = "get-started";

package/dist/cjs/management/api/types/SetSelfServiceProfileCustomTextRequestContent.d.ts

@@ -4,4 +4,4 @@
 /**
  * The list of text keys and values to customize the self-service SSO page. Values can be plain text or rich HTML content limited to basic styling tags and hyperlinks.
  */
-export type SetSelfServiceProfileCustomTextRequestContent = Record<string, unknown>;
+export type SetSelfServiceProfileCustomTextRequestContent = Record<string, string>;

package/dist/cjs/management/api/types/SetSelfServiceProfileCustomTextResponseContent.d.ts

@@ -4,4 +4,4 @@
 /**
  * The resulting list of custom text keys and values.
  */
-export type SetSelfServiceProfileCustomTextResponseContent = Record<string, unknown>;
+export type SetSelfServiceProfileCustomTextResponseContent = Record<string, string>;

package/dist/cjs/management/api/types/UpdateActionResponseContent.d.ts

@@ -19,7 +19,7 @@ export interface UpdateActionResponseContent {
     code?: string;
     /** The list of third party npm modules, and their versions, that this action depends on. */
     dependencies?: Management.ActionVersionDependency[];
-    /** The Node runtime. For example: `node12`, defaults to `node12` */
+    /** The Node runtime. For example: `node22`, defaults to `node22` */
     runtime?: string;
     /** The list of secrets that are included in an action or a version of an action. */
     secrets?: Management.ActionSecretResponse[];

package/dist/cjs/management/api/types/UpdateClientGrantResponseContent.d.ts

@@ -16,4 +16,7 @@ export interface UpdateClientGrantResponseContent {
     allow_any_organization?: boolean;
     /** If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly. */
     is_system?: boolean;
+    subject_type?: Management.ClientGrantSubjectTypeEnum;
+    /** Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta’s <a href= "https://www.okta.com/legal/"> Master Subscription Agreement.</a> */
+    authorization_details_types?: string[];
 }

package/dist/cjs/management/api/types/UpdateClientResponseContent.d.ts

@@ -15,8 +15,7 @@ export interface UpdateClientResponseContent {
     global?: boolean;
     /** Client secret (which you must not make public). */
     client_secret?: string;
-    /** Type of client used to determine which settings are applicable. Can be `spa`, `native`, `non_interactive`, or `regular_web`. */
-    app_type?: string;
+    app_type?: Management.ClientAppTypeEnum;
     /** URL of the logo to display for this client. Recommended size is 150x150 pixels. */
     logo_uri?: string;
     /** Whether this client a first party client (true) or not (false). */
@@ -37,7 +36,7 @@ export interface UpdateClientResponseContent {
     allowed_logout_urls?: string[];
     session_transfer?: Management.ClientSessionTransferConfiguration;
     oidc_logout?: Management.ClientOidcBackchannelLogoutSettings;
-    /** List of grant types supported for this application. Can include `authorization_code`, `implicit`, `refresh_token`, `client_credentials`, `password`, `http://auth0.com/oauth/grant-type/password-realm`, `http://auth0.com/oauth/grant-type/mfa-oob`, `http://auth0.com/oauth/grant-type/mfa-otp`, `http://auth0.com/oauth/grant-type/mfa-recovery-code`, `urn:openid:params:grant-type:ciba`, and `urn:ietf:params:oauth:grant-type:device_code`. */
+    /** List of grant types supported for this application. Can include `authorization_code`, `implicit`, `refresh_token`, `client_credentials`, `password`, `http://auth0.com/oauth/grant-type/password-realm`, `http://auth0.com/oauth/grant-type/mfa-oob`, `http://auth0.com/oauth/grant-type/mfa-otp`, `http://auth0.com/oauth/grant-type/mfa-recovery-code`, `urn:openid:params:grant-type:ciba`, `urn:ietf:params:oauth:grant-type:device_code`, and `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`. */
     grant_types?: string[];
     jwt_configuration?: Management.ClientJwtConfiguration;
     signing_keys?: Management.ClientSigningKeys;
@@ -68,6 +67,8 @@ export interface UpdateClientResponseContent {
     default_organization?: Management.ClientDefaultOrganization;
     organization_usage?: Management.ClientOrganizationUsageEnum;
     organization_require_behavior?: Management.ClientOrganizationRequireBehaviorEnum;
+    /** Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both. */
+    organization_discovery_methods?: Management.ClientOrganizationDiscoveryEnum[];
     client_authentication_methods?: Management.ClientAuthenticationMethod;
     /** Makes the use of Pushed Authorization Requests mandatory for this client */
     require_pushed_authorization_requests?: boolean;
@@ -78,6 +79,9 @@ export interface UpdateClientResponseContent {
     /** Specifies how long, in seconds, a Pushed Authorization Request URI remains valid */
     par_request_expiry?: number;
     token_quota?: Management.TokenQuota;
+    my_organization_configuration?: Management.ClientMyOrganizationConfiguration;
+    /** The identifier of the resource server that this client is linked to. */
+    resource_server_identifier?: string;
     /** Accepts any additional properties */
     [key: string]: any;
 }

package/dist/cjs/management/api/types/UpdateConnectionOptions.d.ts

@@ -37,6 +37,7 @@ export interface UpdateConnectionOptions {
     upstream_params?: Management.ConnectionUpstreamParams | undefined;
     set_user_root_attributes?: Management.ConnectionSetUserRootAttributesEnum;
     gateway_authentication?: Management.ConnectionGatewayAuthentication;
+    federated_connections_access_tokens?: Management.ConnectionFederatedConnectionsAccessTokens;
     /** Accepts any additional properties */
     [key: string]: any;
 }

package/dist/cjs/management/api/types/UpdateCustomDomainResponseContent.d.ts

@@ -9,7 +9,7 @@ export interface UpdateCustomDomainResponseContent {
     domain: string;
     /** Whether this is a primary domain (true) or not (false). */
     primary: boolean;
-    status: Management.CustomDomainStatusEnum;
+    status: Management.CustomDomainStatusFilterEnum;
     type: Management.CustomDomainTypeEnum;
     verification: Management.DomainVerification;
     /** The HTTP header to fetch the client's IP address */

package/dist/cjs/management/api/types/UpdateEventStreamResponseContent.d.ts

@@ -2,4 +2,4 @@
  * This file was auto-generated by Fern from our API Definition.
  */
 import * as Management from "../index.js";
-export type UpdateEventStreamResponseContent = Management.EventStreamWebhookResponseContent | Management.EventStreamEventBridgeResponseContent;
+export type UpdateEventStreamResponseContent = Management.EventStreamWebhookResponseContent | Management.EventStreamEventBridgeResponseContent | Management.EventStreamActionResponseContent;