auth0 5.0.0-beta.0 → 5.1.0

package/README.md

@@ -1,17 +1,18 @@
 ![Node.js client library for Auth0](https://cdn.auth0.com/website/sdks/banner/node-auth0-banner.png)
 
 ![Release](https://img.shields.io/npm/v/auth0)
-[![Codecov](https://img.shields.io/codecov/c/github/fern-demo/auth0-node-sdk)](https://codecov.io/gh/fern-demo/auth0-node-sdk)
+[![Codecov](https://img.shields.io/codecov/c/github/auth0/node-auth0)](https://codecov.io/gh/auth0/node-auth0)
 ![Downloads](https://img.shields.io/npm/dw/auth0)
 [![License](https://img.shields.io/:license-mit-blue.svg?style=flat)](https://opensource.org/licenses/MIT)
-[![fern shield](https://img.shields.io/badge/%F0%9F%8C%BF-Built%20with%20Fern-brightgreen)](https://buildwithfern.com?utm_source=github&utm_medium=github&utm_campaign=readme&utm_source=https%3A%2F%2Fgithub.com%2Ffern-demo%2Fauth0-node-sdk)
+[![fern shield](https://img.shields.io/badge/%F0%9F%8C%BF-Built%20with%20Fern-brightgreen)](https://buildwithfern.com?utm_source=github&utm_medium=github&utm_campaign=readme&utm_source=https%3A%2F%2Fgithub.com%2Fauth0%2Fnode-auth0)
 
 📚 [Documentation](#documentation) - 🚀 [Getting Started](#getting-started) - 💻 [API Reference](#api-reference) - 💬 [Feedback](#feedback)
 
 ## Documentation
 
 - [Docs Site](https://auth0.com/docs) - explore our docs site and learn more about Auth0
-- [API Reference](https://github.com/fern-demo/auth0-node-sdk/blob/HEAD/./reference.md) - full reference for this library
+- [SDK Documentation](http://auth0.github.io/node-auth0/) - explore the SDK documentation
+- [API Reference](https://github.com/auth0/node-auth0/blob/master/reference.md) - full reference for this library
 
 ## Getting Started
 
@@ -308,7 +309,7 @@ try {
 
 ## Pagination
 
-Some list endpoints are paginated. The SDK provides an iterator so that you can simply loop over the items:
+Some list endpoints are paginated. You can iterate through pages using default values:
 
 ```typescript
 import { ManagementClient } from "auth0";
@@ -318,15 +319,58 @@ const client = new ManagementClient({
     token: "YOUR_TOKEN",
 });
 
-const response = await client.actions.list();
-for await (const item of response) {
+// Using default pagination (page size defaults vary by endpoint)
+let page = await client.actions.list();
+for (const item of page.data) {
     console.log(item);
 }
 
-// Or you can manually iterate page-by-page
-let page = await client.actions.list();
 while (page.hasNextPage()) {
     page = await page.getNextPage();
+    for (const item of page.data) {
+        console.log(item);
+    }
+}
+```
+
+Or you can explicitly control pagination using `page` and `per_page` parameters:
+
+```typescript
+// Offset-based pagination (most endpoints)
+let page = await client.actions.list({
+    page: 0, // Page number (0-indexed)
+    per_page: 25, // Number of items per page
+});
+
+for (const item of page.data) {
+    console.log(item);
+}
+
+while (page.hasNextPage()) {
+    page = await page.getNextPage();
+    for (const item of page.data) {
+        console.log(item);
+    }
+}
+```
+
+Some endpoints use checkpoint pagination with `from` and `take` parameters:
+
+```typescript
+// Checkpoint-based pagination (e.g., connections, organizations)
+let page = await client.connections.list({
+    take: 50, // Number of items per page
+});
+
+for (const item of page.data) {
+    console.log(item);
+}
+
+while (page.hasNextPage()) {
+    page = await page.getNextPage();
+    for (const item of page.data) {
+        console.log(item);
+    }
 }
 ```
 
@@ -498,206 +542,6 @@ runtimes:
 - Bun 1.0+
 - React Native
 
-### Customizing Fetch Client
-
-The SDK defaults to `node-fetch` but will use the global fetch client if present. For most use cases, you can simply ensure your preferred fetch implementation is available globally.
-
-```typescript
-import { ManagementClient } from "auth0";
-
-// Example 1: Add request logging using a custom fetcher
-const client = new ManagementClient({
-    domain: "your-tenant.auth0.com",
-    token: "YOUR_TOKEN",
-    fetcher: async (args) => {
-        console.log(`Making ${args.method} request to: ${args.url}`);
-
-        // Use the global fetch (built into Node.js 18+)
-        const response = await fetch(args.url, {
-            method: args.method,
-            headers: args.headers as Record<string, string>,
-            body: args.body ? JSON.stringify(args.body) : undefined,
-        });
-
-        const rawResponse = {
-            headers: response.headers,
-            redirected: response.redirected,
-            status: response.status,
-            statusText: response.statusText,
-            type: response.type,
-            url: response.url,
-        };
-
-        if (response.ok) {
-            return {
-                ok: true as const,
-                body: await response.json(),
-                headers: response.headers,
-                rawResponse,
-            };
-        } else {
-            return {
-                ok: false as const,
-                error: {
-                    reason: "status-code" as const,
-                    statusCode: response.status,
-                    body: await response.text(),
-                },
-                rawResponse,
-            };
-        }
-    },
-});
-
-// Example 2: Add custom headers to all requests
-const clientWithHeaders = new ManagementClient({
-    domain: "your-tenant.auth0.com",
-    token: "YOUR_TOKEN",
-    fetcher: async (args) => {
-        // Add custom headers
-        const headers = {
-            ...(args.headers as Record<string, string>),
-            "X-Custom-Header": "my-value",
-            "X-Request-ID": crypto.randomUUID(),
-        };
-
-        const response = await fetch(args.url, {
-            method: args.method,
-            headers,
-            body: args.body ? JSON.stringify(args.body) : undefined,
-        });
-
-        const rawResponse = {
-            headers: response.headers,
-            redirected: response.redirected,
-            status: response.status,
-            statusText: response.statusText,
-            type: response.type,
-            url: response.url,
-        };
-
-        if (response.ok) {
-            return {
-                ok: true as const,
-                body: await response.json(),
-                headers: response.headers,
-                rawResponse,
-            };
-        } else {
-            return {
-                ok: false as const,
-                error: {
-                    reason: "status-code" as const,
-                    statusCode: response.status,
-                    body: await response.text(),
-                },
-                rawResponse,
-            };
-        }
-    },
-});
-
-// Example 3: Complete custom implementation with axios (advanced)
-import axios from "axios";
-
-const clientWithAxios = new ManagementClient({
-    domain: "your-tenant.auth0.com",
-    token: "YOUR_TOKEN",
-    fetcher: async (args) => {
-        try {
-            // Process headers to resolve any Supplier functions/promises
-            const resolvedHeaders: Record<string, string> = {};
-            if (args.headers) {
-                for (const [key, value] of Object.entries(args.headers)) {
-                    if (value !== undefined) {
-                        // Handle Supplier type: could be string, Promise<string>, or () => string | Promise<string>
-                        const resolvedValue = typeof value === "function" ? await value() : await value;
-                        if (typeof resolvedValue === "string") {
-                            resolvedHeaders[key] = resolvedValue;
-                        } else if (resolvedValue != null) {
-                            resolvedHeaders[key] = String(resolvedValue);
-                        }
-                    }
-                }
-            }
-
-            const response = await axios({
-                url: args.url,
-                method: args.method,
-                headers: resolvedHeaders, // Now properly typed for axios
-                data: args.body,
-                timeout: args.timeoutMs || 60000,
-                params: args.queryParameters,
-                validateStatus: () => true, // Don't throw on HTTP error status codes
-            });
-
-            // Convert axios headers to Web API Headers format for rawResponse
-            const rawHeaders = new Headers();
-            Object.entries(response.headers).forEach(([key, value]) => {
-                if (typeof value === "string") {
-                    rawHeaders.set(key, value);
-                } else if (Array.isArray(value)) {
-                    rawHeaders.set(key, value.join(", "));
-                } else if (value != null) {
-                    rawHeaders.set(key, String(value));
-                }
-            });
-
-            if (response.status >= 200 && response.status < 400) {
-                return {
-                    ok: true,
-                    body: response.data,
-                    headers: response.headers, // axios headers for legacy compatibility
-                    rawResponse: {
-                        headers: rawHeaders, // Web API Headers for rawResponse
-                        redirected: false, // axios doesn't provide this info directly
-                        status: response.status,
-                        statusText: response.statusText,
-                        type: "basic", // axios doesn't provide this, default to 'basic'
-                        url: response.config.url || args.url,
-                    },
-                };
-            } else {
-                return {
-                    ok: false,
-                    error: {
-                        reason: "status-code",
-                        statusCode: response.status,
-                        body: response.data,
-                    },
-                    rawResponse: {
-                        headers: rawHeaders,
-                        redirected: false,
-                        status: response.status,
-                        statusText: response.statusText,
-                        type: "basic",
-                        url: response.config.url || args.url,
-                    },
-                };
-            }
-        } catch (error: any) {
-            return {
-                ok: false,
-                error: {
-                    reason: "unknown",
-                    errorMessage: error?.message || "Unknown error occurred",
-                },
-                rawResponse: {
-                    headers: new Headers(), // Empty Headers object for network errors
-                    redirected: false,
-                    status: 0,
-                    statusText: "Network Error",
-                    type: "error",
-                    url: args.url,
-                },
-            };
-        }
-    },
-});
-```
-
-Note: When using a custom `fetcher`, you need to return an object that matches the expected API response format with `ok`, `body`, `headers`, and `rawResponse` properties.
-
 ## Feedback
 
 ### Contributing
@@ -717,7 +561,7 @@ On the other hand, contributions to the README are always very welcome!
 
 ### Raise an issue
 
-To provide feedback or report a bug, please [raise an issue on our issue tracker](https://github.com/fern-demo/auth0-node-sdk/issues).
+To provide feedback or report a bug, please [raise an issue on our issue tracker](https://github.com/auth0/node-auth0/issues).
 
 ### Vulnerability Reporting
 

package/dist/cjs/auth/backchannel.d.ts

@@ -34,8 +34,13 @@ export type AuthorizeOptions = {
     audience?: string;
     /**
      * Custom expiry time in seconds for this request.
+     * @deprecated Use {@link AuthorizeOptions.requested_expiry} instead.
      */
     request_expiry?: string;
+    /**
+     * Custom expiry time in seconds for this request.
+     */
+    requested_expiry?: string;
     /**
      * The user ID.
      */
@@ -50,6 +55,10 @@ export type AuthorizeOptions = {
      */
     authorization_details?: string;
 } & Record<string, string>;
+export interface AuthorizationDetails {
+    readonly type: string;
+    readonly [parameter: string]: unknown;
+}
 /**
  * The response from the token endpoint.
  */
@@ -82,7 +91,7 @@ export type TokenResponse = {
      * Optional authorization details when using Rich Authorization Requests (RAR).
      * @see https://auth0.com/docs/get-started/apis/configure-rich-authorization-requests
      */
-    authorization_details?: string;
+    authorization_details?: AuthorizationDetails[];
 };
 /**
  * Options for the token request.

package/dist/cjs/auth/backchannel.js

@@ -65,6 +65,11 @@ class Backchannel extends base_auth_api_js_1.BaseAuthAPI {
         return __awaiter(this, void 0, void 0, function* () {
             var { userId } = _a, options = __rest(_a, ["userId"]);
             const body = Object.assign(Object.assign({}, options), { login_hint: getLoginHint(userId, this.domain), client_id: this.clientId });
+            // The correct parameter is `requested_expiry`, but we also accept the deprecated `request_expiry` for backwards compatibility
+            const requestedExpiry = options.requested_expiry || options.request_expiry;
+            if (requestedExpiry) {
+                body.requested_expiry = requestedExpiry;
+            }
             yield this.addClientAuthentication(body);
             const response = yield this.request.bind(this)({
                 path: CIBA_AUTHORIZE_URL,

package/dist/cjs/auth/database.js

@@ -47,7 +47,16 @@ class Database extends base_auth_api_js_1.BaseAuthAPI {
                 },
                 body: Object.assign({ client_id: this.clientId }, bodyParameters),
             }, initOverrides);
-            return models_js_1.JSONApiResponse.fromResponse(response);
+            // Transform the response to ensure id field is always available
+            const jsonResponse = yield models_js_1.JSONApiResponse.fromResponse(response);
+            if (jsonResponse.data) {
+                const data = jsonResponse.data;
+                // Map _id or user_id to id
+                if (!data.id && (data._id || data.user_id)) {
+                    data.id = data._id || data.user_id;
+                }
+            }
+            return jsonResponse;
         });
     }
     /**

package/dist/cjs/auth/oauth.d.ts

@@ -236,13 +236,17 @@ export interface TokenExchangeGrantRequest {
  */
 export interface TokenForConnectionRequest {
     /**
-     * The subject token(refresh token in this case) to exchange for an access token for a connection.
+     * The subject token to exchange for an access token for a connection.
      */
     subject_token: string;
     /**
      * The target social provider connection (e.g., "google-oauth2").
      */
     connection: string;
+    /**
+     * An optional subject token type parameter to pass to the authorization server. If not provided, it defaults to `urn:ietf:params:oauth:token-type:refresh_token`.
+     */
+    subject_token_type?: SUBJECT_TOKEN_TYPES;
     /**
      * Optional login hint
      */
@@ -255,7 +259,26 @@ export interface TokenForConnectionResponse {
     connection: string;
     [key: string]: unknown;
 }
+export declare enum SUBJECT_TOKEN_TYPES {
+    /**
+     * Constant representing the subject type for a refresh token.
+     * This is used in OAuth 2.0 token exchange to specify that the token being exchanged is a refresh token.
+     *
+     * @see {@link https://tools.ietf.org/html/rfc8693#section-3.1 RFC 8693 Section 3.1}
+     */
+    REFRESH_TOKEN = "urn:ietf:params:oauth:token-type:refresh_token",
+    /**
+     * Constant representing the subject type for a access token.
+     * This is used in OAuth 2.0 token exchange to specify that the token being exchanged is an access token.
+     *
+     * @see {@link https://tools.ietf.org/html/rfc8693#section-3.1 RFC 8693 Section 3.1}
+     */
+    ACCESS_TOKEN = "urn:ietf:params:oauth:token-type:access_token"
+}
 export declare const TOKEN_FOR_CONNECTION_GRANT_TYPE = "urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token";
+/**
+ * @deprecated Use {@link SUBJECT_TOKEN_TYPES.REFRESH_TOKEN} instead.
+ */
 export declare const TOKEN_FOR_CONNECTION_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:refresh_token";
 export declare const TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = "http://auth0.com/oauth/token-type/federated-connection-access-token";
 export declare const TOKEN_URL = "/oauth/token";
@@ -419,12 +442,13 @@ export declare class OAuth extends BaseAuthAPI {
         initOverrides?: InitOverride;
     }): Promise<VoidApiResponse>;
     /**
-     * Exchanges a subject token (refresh token in this case) for an access token for the connection.
+     * Exchanges a subject token for an access token for the connection.
      *
      * The request body includes:
      * - client_id (and client_secret/client_assertion via addClientAuthentication)
      * - grant_type set to `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`
-     * - subject_token (refresh token) and fixed subject_token_type for refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`)
+     * - subject_token: the token to exchange
+     * - subject_token_type: the type of token being exchanged. Defaults to refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`).
      * - requested_token_type (`http://auth0.com/oauth/token-type/federated-connection-access-token`) indicating that a federated connection access token is desired
      * - connection name and an optional `login_hint` if provided
      *

package/dist/cjs/auth/oauth.js

@@ -9,12 +9,32 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth = exports.TOKEN_URL = exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_GRANT_TYPE = void 0;
+exports.OAuth = exports.TOKEN_URL = exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_GRANT_TYPE = exports.SUBJECT_TOKEN_TYPES = void 0;
 const runtime_js_1 = require("../lib/runtime.js");
 const base_auth_api_js_1 = require("./base-auth-api.js");
 const id_token_validator_js_1 = require("./id-token-validator.js");
 const utils_js_1 = require("../utils.js");
+var SUBJECT_TOKEN_TYPES;
+(function (SUBJECT_TOKEN_TYPES) {
+    /**
+     * Constant representing the subject type for a refresh token.
+     * This is used in OAuth 2.0 token exchange to specify that the token being exchanged is a refresh token.
+     *
+     * @see {@link https://tools.ietf.org/html/rfc8693#section-3.1 RFC 8693 Section 3.1}
+     */
+    SUBJECT_TOKEN_TYPES["REFRESH_TOKEN"] = "urn:ietf:params:oauth:token-type:refresh_token";
+    /**
+     * Constant representing the subject type for a access token.
+     * This is used in OAuth 2.0 token exchange to specify that the token being exchanged is an access token.
+     *
+     * @see {@link https://tools.ietf.org/html/rfc8693#section-3.1 RFC 8693 Section 3.1}
+     */
+    SUBJECT_TOKEN_TYPES["ACCESS_TOKEN"] = "urn:ietf:params:oauth:token-type:access_token";
+})(SUBJECT_TOKEN_TYPES || (exports.SUBJECT_TOKEN_TYPES = SUBJECT_TOKEN_TYPES = {}));
 exports.TOKEN_FOR_CONNECTION_GRANT_TYPE = "urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token";
+/**
+ * @deprecated Use {@link SUBJECT_TOKEN_TYPES.REFRESH_TOKEN} instead.
+ */
 exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:refresh_token";
 exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = "http://auth0.com/oauth/token-type/federated-connection-access-token";
 exports.TOKEN_URL = "/oauth/token";
@@ -226,12 +246,13 @@ class OAuth extends base_auth_api_js_1.BaseAuthAPI {
         });
     }
     /**
-     * Exchanges a subject token (refresh token in this case) for an access token for the connection.
+     * Exchanges a subject token for an access token for the connection.
      *
      * The request body includes:
      * - client_id (and client_secret/client_assertion via addClientAuthentication)
      * - grant_type set to `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`
-     * - subject_token (refresh token) and fixed subject_token_type for refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`)
+     * - subject_token: the token to exchange
+     * - subject_token_type: the type of token being exchanged. Defaults to refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`).
      * - requested_token_type (`http://auth0.com/oauth/token-type/federated-connection-access-token`) indicating that a federated connection access token is desired
      * - connection name and an optional `login_hint` if provided
      *
@@ -242,7 +263,7 @@ class OAuth extends base_auth_api_js_1.BaseAuthAPI {
     tokenForConnection(bodyParameters_1) {
         return __awaiter(this, arguments, void 0, function* (bodyParameters, options = {}) {
             (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ["connection", "subject_token"]);
-            const body = Object.assign(Object.assign({}, bodyParameters), { grant_type: exports.TOKEN_FOR_CONNECTION_GRANT_TYPE, subject_token_type: exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE, requested_token_type: exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE });
+            const body = Object.assign(Object.assign({ subject_token_type: SUBJECT_TOKEN_TYPES.REFRESH_TOKEN }, bodyParameters), { grant_type: exports.TOKEN_FOR_CONNECTION_GRANT_TYPE, requested_token_type: exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE });
             yield this.addClientAuthentication(body);
             const response = yield this.request({
                 path: exports.TOKEN_URL,

package/dist/cjs/management/BaseClient.d.ts

@@ -0,0 +1,29 @@
+import * as environments from "./environments.js";
+import * as core from "./core/index.js";
+export interface BaseClientOptions {
+    environment?: core.Supplier<environments.ManagementEnvironment | string>;
+    /** Specify a custom URL to connect the client to. */
+    baseUrl?: core.Supplier<string>;
+    token: core.Supplier<core.BearerToken>;
+    /** Additional headers to include in requests. */
+    headers?: Record<string, string | core.Supplier<string | null | undefined> | null | undefined>;
+    /** The default maximum time to wait for a response in seconds. */
+    timeoutInSeconds?: number;
+    /** The default number of times to retry the request. Defaults to 2. */
+    maxRetries?: number;
+    /** Provide a custom fetch implementation. Useful for platforms that don't have a built-in fetch or need a custom implementation. */
+    fetch?: typeof fetch;
+    fetcher?: core.FetchFunction;
+}
+export interface BaseRequestOptions {
+    /** The maximum time to wait for a response in seconds. */
+    timeoutInSeconds?: number;
+    /** The number of times to retry the request. Defaults to 2. */
+    maxRetries?: number;
+    /** A hook to abort the request. */
+    abortSignal?: AbortSignal;
+    /** Additional query string parameters to include in the request. */
+    queryParams?: Record<string, unknown>;
+    /** Additional headers to include in the request. */
+    headers?: Record<string, string | core.Supplier<string | null | undefined> | null | undefined>;
+}

package/dist/cjs/management/BaseClient.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/Client.d.ts

@@ -1,8 +1,4 @@
-/**
- * This file was auto-generated by Fern from our API Definition.
- */
-import * as environments from "./environments.js";
-import * as core from "./core/index.js";
+import type { BaseClientOptions, BaseRequestOptions } from "./BaseClient.js";
 import { Actions } from "./api/resources/actions/client/Client.js";
 import { Branding } from "./api/resources/branding/client/Client.js";
 import { ClientGrants } from "./api/resources/clientGrants/client/Client.js";
@@ -30,8 +26,10 @@ import { RulesConfigs } from "./api/resources/rulesConfigs/client/Client.js";
 import { SelfServiceProfiles } from "./api/resources/selfServiceProfiles/client/Client.js";
 import { Sessions } from "./api/resources/sessions/client/Client.js";
 import { Stats } from "./api/resources/stats/client/Client.js";
+import { SupplementalSignals } from "./api/resources/supplementalSignals/client/Client.js";
 import { Tickets } from "./api/resources/tickets/client/Client.js";
 import { TokenExchangeProfiles } from "./api/resources/tokenExchangeProfiles/client/Client.js";
+import { UserAttributeProfiles } from "./api/resources/userAttributeProfiles/client/Client.js";
 import { UserBlocks } from "./api/resources/userBlocks/client/Client.js";
 import { Users } from "./api/resources/users/client/Client.js";
 import { Anomaly } from "./api/resources/anomaly/client/Client.js";
@@ -39,29 +37,13 @@ import { AttackProtection } from "./api/resources/attackProtection/client/Client
 import { Emails } from "./api/resources/emails/client/Client.js";
 import { Guardian } from "./api/resources/guardian/client/Client.js";
 import { Keys } from "./api/resources/keys/client/Client.js";
+import { RiskAssessments } from "./api/resources/riskAssessments/client/Client.js";
 import { Tenants } from "./api/resources/tenants/client/Client.js";
 import { VerifiableCredentials } from "./api/resources/verifiableCredentials/client/Client.js";
 export declare namespace ManagementClient {
-    interface Options {
-        environment?: core.Supplier<environments.ManagementEnvironment | string>;
-        /** Specify a custom URL to connect the client to. */
-        baseUrl?: core.Supplier<string>;
-        token: core.Supplier<core.BearerToken>;
-        /** Additional headers to include in requests. */
-        headers?: Record<string, string | core.Supplier<string | undefined> | undefined>;
-        fetcher?: core.FetchFunction;
+    interface Options extends BaseClientOptions {
     }
-    interface RequestOptions {
-        /** The maximum time to wait for a response in seconds. */
-        timeoutInSeconds?: number;
-        /** The number of times to retry the request. Defaults to 2. */
-        maxRetries?: number;
-        /** A hook to abort the request. */
-        abortSignal?: AbortSignal;
-        /** Additional query string parameters to include in the request. */
-        queryParams?: Record<string, unknown>;
-        /** Additional headers to include in the request. */
-        headers?: Record<string, string | core.Supplier<string | undefined> | undefined>;
+    interface RequestOptions extends BaseRequestOptions {
     }
 }
 export declare class ManagementClient {
@@ -93,8 +75,10 @@ export declare class ManagementClient {
     protected _selfServiceProfiles: SelfServiceProfiles | undefined;
     protected _sessions: Sessions | undefined;
     protected _stats: Stats | undefined;
+    protected _supplementalSignals: SupplementalSignals | undefined;
     protected _tickets: Tickets | undefined;
     protected _tokenExchangeProfiles: TokenExchangeProfiles | undefined;
+    protected _userAttributeProfiles: UserAttributeProfiles | undefined;
     protected _userBlocks: UserBlocks | undefined;
     protected _users: Users | undefined;
     protected _anomaly: Anomaly | undefined;
@@ -102,6 +86,7 @@ export declare class ManagementClient {
     protected _emails: Emails | undefined;
     protected _guardian: Guardian | undefined;
     protected _keys: Keys | undefined;
+    protected _riskAssessments: RiskAssessments | undefined;
     protected _tenants: Tenants | undefined;
     protected _verifiableCredentials: VerifiableCredentials | undefined;
     constructor(_options: ManagementClient.Options);
@@ -132,8 +117,10 @@ export declare class ManagementClient {
     get selfServiceProfiles(): SelfServiceProfiles;
     get sessions(): Sessions;
     get stats(): Stats;
+    get supplementalSignals(): SupplementalSignals;
     get tickets(): Tickets;
     get tokenExchangeProfiles(): TokenExchangeProfiles;
+    get userAttributeProfiles(): UserAttributeProfiles;
     get userBlocks(): UserBlocks;
     get users(): Users;
     get anomaly(): Anomaly;
@@ -141,6 +128,7 @@ export declare class ManagementClient {
     get emails(): Emails;
     get guardian(): Guardian;
     get keys(): Keys;
+    get riskAssessments(): RiskAssessments;
     get tenants(): Tenants;
     get verifiableCredentials(): VerifiableCredentials;
 }