auth0 5.1.0 → 5.2.0

package/dist/esm/management/api/types/types.mjs

@@ -264,6 +264,9 @@ export const OauthScope = {
     /**
      * Update Event Deliveries */
     UpdateEventDeliveries: "update:event_deliveries",
+    /**
+     * Read Events */
+    ReadEvents: "read:events",
     /**
      * Read Extensions */
     ReadExtensions: "read:extensions",
@@ -786,6 +789,26 @@ export const ActionVersionBuildStatusEnum = {
     Retrying: "retrying",
     Failed: "failed",
 };
+/** Static context values */
+export const AculContextEnum = {
+    BrandingSettings: "branding.settings",
+    BrandingThemesDefault: "branding.themes.default",
+    ClientLogoUri: "client.logo_uri",
+    ClientDescription: "client.description",
+    OrganizationDisplayName: "organization.display_name",
+    OrganizationBranding: "organization.branding",
+    ScreenTexts: "screen.texts",
+    TenantName: "tenant.name",
+    TenantFriendlyName: "tenant.friendly_name",
+    TenantLogoUrl: "tenant.logo_url",
+    TenantEnabledLocales: "tenant.enabled_locales",
+    UntrustedDataSubmittedFormData: "untrusted_data.submitted_form_data",
+    UntrustedDataAuthorizationParamsLoginHint: "untrusted_data.authorization_params.login_hint",
+    UntrustedDataAuthorizationParamsScreenHint: "untrusted_data.authorization_params.screen_hint",
+    UntrustedDataAuthorizationParamsUiLocales: "untrusted_data.authorization_params.ui_locales",
+    UserOrganizations: "user.organizations",
+    TransactionCustomDomainDomain: "transaction.custom_domain.domain",
+};
 /** Type of match to apply */
 export const AculMatchTypeEnum = {
     IncludesAny: "includes_any",
@@ -1059,12 +1082,31 @@ export const ClientTokenEndpointAuthMethodOrNullEnum = {
     ClientSecretPost: "client_secret_post",
     ClientSecretBasic: "client_secret_basic",
 };
+/** PKCE configuration. */
+export const ConnectionConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm allowed to verify the ID tokens. */
+export const ConnectionIdTokenSignedResponseAlgEnum = {
+    Rs256: "RS256",
+    Rs512: "RS512",
+    Ps256: "PS256",
+    Es256: "ES256",
+};
 /** Order of precedence for attribute types */
 export const ConnectionIdentifierPrecedenceEnum = {
     Email: "email",
     PhoneNumber: "phone_number",
     Username: "username",
 };
+/** Identity API version to use */
+export const ConnectionIdentityApiEnumAzureAd = {
+    MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
+    AzureActiveDirectoryV10: "azure-active-directory-v1.0",
+};
 /** The identity provider identifier for the connection */
 export const ConnectionIdentityProviderEnum = {
     Ad: "ad",
@@ -1135,6 +1177,16 @@ export const ConnectionKeyUseEnum = {
     Encryption: "encryption",
     Signing: "signing",
 };
+/** Method used to map incoming claims when strategy=oidc. */
+export const ConnectionMappingModeEnumOidc = {
+    BindAll: "bind_all",
+    UseMap: "use_map",
+};
+/** Method used to map incoming claims when strategy=okta. */
+export const ConnectionMappingModeEnumOkta = {
+    BasicProfile: "basic_profile",
+    UseMap: "use_map",
+};
 /** Controls the UI used to challenge the user for their passkey. */
 export const ConnectionPasskeyChallengeUiEnum = {
     Both: "both",
@@ -1149,12 +1201,29 @@ export const ConnectionPasswordPolicyEnum = {
     Good: "good",
     Excellent: "excellent",
 };
+/** Indicates if membership should be assigned on login. */
+export const ConnectionProfileOrganizationAssignMembershipOnLoginEnum = {
+    None: "none",
+    Optional: "optional",
+    Required: "required",
+};
+/** Indicates if the organization should be shown as a button. */
+export const ConnectionProfileOrganizationShowAsButtonEnum = {
+    None: "none",
+    Optional: "optional",
+    Required: "required",
+};
 /** When using an external IdP, this flag determines  whether 'name', 'given_name', 'family_name', 'nickname', and 'picture' attributes are updated. In addition, it also determines whether the user is created when user doesnt exist previously. Possible values are 'on_each_login' (default value, it configures the connection to automatically create the user if necessary and update the root attributes from the external IdP with each user login. When this setting is used, root attributes cannot be independently updated), 'on_first_login' (configures the connection to create the user and set the root attributes on first login only, allowing them to be independently updated thereafter), and 'never_on_login' (configures the connection not to create the user and not to set the root attributes from the external IdP, allowing them to be independently updated). */
 export const ConnectionSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+export const ConnectionShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
 export const ConnectionStrategyEnum = {
     Ad: "ad",
     Adfs: "adfs",
@@ -1220,6 +1289,23 @@ export const ConnectionStrategyEnum = {
     Yandex: "yandex",
     Auth0Adldap: "auth0-adldap",
 };
+/** Requested Client Authentication method for the Token Endpoint. */
+export const ConnectionTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. */
+export const ConnectionTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Ps256: "PS256",
+    Rs256: "RS256",
+    Rs512: "RS512",
+};
+/** Connection type */
+export const ConnectionTypeEnumOidc = {
+    BackChannel: "back_channel",
+    FrontChannel: "front_channel",
+};
 export const ConnectionUpstreamAliasEnum = {
     AcrValues: "acr_values",
     Audience: "audience",
@@ -1234,6 +1320,16 @@ export const ConnectionUpstreamAliasEnum = {
     ResponseType: "response_type",
     UiLocales: "ui_locales",
 };
+/** User ID attribute to use. Only applies when waad_protocol=openid-connect */
+export const ConnectionUseridAttributeEnumAzureAd = {
+    Oid: "oid",
+    Sub: "sub",
+};
+/** Available WAAD protocols */
+export const ConnectionWaadProtocolEnumAzureAd = {
+    WsFederation: "ws-federation",
+    OpenidConnect: "openid-connect",
+};
 /** Type of the encryption key to be created. */
 export const CreateEncryptionKeyType = {
     CustomerProvidedRootKey: "customer-provided-root-key",
@@ -1360,6 +1456,11 @@ export const EmailTemplateNameEnum = {
     PasswordReset: "password_reset",
     AsyncApproval: "async_approval",
 };
+/** Enum for enabled features. */
+export const EnabledFeaturesEnum = {
+    Scim: "scim",
+    UniversalLogout: "universal_logout",
+};
 /** Key state */
 export const EncryptionKeyState = {
     PreActivation: "pre-activation",
@@ -1906,11 +2007,12 @@ export const MfaPolicyEnum = {
     AllApplications: "all-applications",
     ConfidenceScore: "confidence-score",
 };
-/** Identifies the origin of the request as the Management API (management), Authentication API (authentication), or either (tenant) */
+/** Identifies the origin of the request as the Management API (management), Authentication API (authentication), Dynamic Client Registration API (dynamic_client_registration), or any (tenant) */
 export const NetworkAclRuleScopeEnum = {
     Management: "management",
     Authentication: "authentication",
     Tenant: "tenant",
+    DynamicClientRegistration: "dynamic_client_registration",
 };
 /** The verification status of the discovery domain. */
 export const OrganizationDiscoveryDomainStatus = {
@@ -2275,7 +2377,7 @@ export const SessionCookieModeEnum = {
     Persistent: "persistent",
     NonPersistent: "non-persistent",
 };
-/** Algorithm used to sign JWTs. Can be `HS256` or `RS256`. `PS256` available via addon. */
+/** Algorithm used to sign JWTs. Can be `HS256` (default) or `RS256`. `PS256` available via addon. */
 export const SigningAlgorithmEnum = {
     Hs256: "HS256",
     Rs256: "RS256",
@@ -2379,6 +2481,11 @@ export const TenantSettingsDeviceFlowCharset = {
     Base20: "base20",
     Digits: "digits",
 };
+/** Profile that determines how the identity of the protected resource (i.e., API) can be specified in the OAuth endpoints when access is being requested. When set to audience (default), the audience parameter is used to specify the resource server. When set to compatibility, the audience parameter is still checked first, but if it not provided, then the resource parameter can be used to specify the resource server. */
+export const TenantSettingsResourceParameterProfile = {
+    Audience: "audience",
+    Compatibility: "compatibility",
+};
 export const TwilioProviderDeliveryMethodEnum = {
     Text: "text",
     Voice: "voice",

package/dist/esm/management/auth/BearerAuthProvider.d.mts

@@ -0,0 +1,16 @@
+import * as core from "../core/index.mjs";
+export declare namespace BearerAuthProvider {
+    interface AuthOptions {
+        token: core.Supplier<core.BearerToken>;
+    }
+    interface Options extends AuthOptions {
+    }
+}
+export declare class BearerAuthProvider implements core.AuthProvider {
+    private readonly token;
+    constructor(options: BearerAuthProvider.Options);
+    static canCreate(options: BearerAuthProvider.Options): boolean;
+    getAuthRequest(arg?: {
+        endpointMetadata?: core.EndpointMetadata;
+    }): Promise<core.AuthRequest>;
+}

package/dist/esm/management/auth/BearerAuthProvider.mjs

@@ -0,0 +1,33 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import * as core from "../core/index.mjs";
+import * as errors from "../errors/index.mjs";
+export class BearerAuthProvider {
+    constructor(options) {
+        this.token = options.token;
+    }
+    static canCreate(options) {
+        return options.token != null;
+    }
+    getAuthRequest(arg) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const token = yield core.Supplier.get(this.token);
+            if (token == null) {
+                throw new errors.ManagementError({
+                    message: "Please specify a token by passing it in to the constructor",
+                });
+            }
+            return {
+                headers: { Authorization: `Bearer ${token}` },
+            };
+        });
+    }
+}

package/dist/esm/management/auth/index.d.mts

@@ -0,0 +1 @@
+export { BearerAuthProvider } from "./BearerAuthProvider.mjs";

package/dist/esm/management/auth/index.mjs

@@ -0,0 +1 @@
+export { BearerAuthProvider } from "./BearerAuthProvider.mjs";

package/dist/esm/management/core/auth/AuthProvider.d.mts

@@ -1,4 +1,7 @@
+import type { EndpointMetadata } from "../fetcher/EndpointMetadata.mjs";
 import type { AuthRequest } from "./AuthRequest.mjs";
 export interface AuthProvider {
-    getAuthRequest(): Promise<AuthRequest>;
+    getAuthRequest(arg?: {
+        endpointMetadata?: EndpointMetadata;
+    }): Promise<AuthRequest>;
 }

package/dist/esm/management/core/auth/BearerToken.d.mts

@@ -1,5 +1,7 @@
 export type BearerToken = string;
+declare function toAuthorizationHeader(token: string | undefined): string | undefined;
 export declare const BearerToken: {
-    toAuthorizationHeader: (token: BearerToken | undefined) => string | undefined;
+    toAuthorizationHeader: typeof toAuthorizationHeader;
     fromAuthorizationHeader: (header: string) => BearerToken;
 };
+export {};

package/dist/esm/management/core/auth/BearerToken.mjs

@@ -1,11 +1,12 @@
 const BEARER_AUTH_HEADER_PREFIX = /^Bearer /i;
+function toAuthorizationHeader(token) {
+    if (token == null) {
+        return undefined;
+    }
+    return `Bearer ${token}`;
+}
 export const BearerToken = {
-    toAuthorizationHeader: (token) => {
-        if (token == null) {
-            return undefined;
-        }
-        return `Bearer ${token}`;
-    },
+    toAuthorizationHeader: toAuthorizationHeader,
     fromAuthorizationHeader: (header) => {
         return header.replace(BEARER_AUTH_HEADER_PREFIX, "").trim();
     },

package/dist/esm/management/core/auth/NoOpAuthProvider.d.mts

@@ -0,0 +1,5 @@
+import type { AuthProvider } from "./AuthProvider.mjs";
+import type { AuthRequest } from "./AuthRequest.mjs";
+export declare class NoOpAuthProvider implements AuthProvider {
+    getAuthRequest(): Promise<AuthRequest>;
+}

package/dist/esm/management/core/auth/NoOpAuthProvider.mjs

@@ -0,0 +1,5 @@
+export class NoOpAuthProvider {
+    getAuthRequest() {
+        return Promise.resolve({ headers: {} });
+    }
+}

package/dist/esm/management/core/auth/index.d.mts

@@ -2,3 +2,4 @@ export type { AuthProvider } from "./AuthProvider.mjs";
 export type { AuthRequest } from "./AuthRequest.mjs";
 export { BasicAuth } from "./BasicAuth.mjs";
 export { BearerToken } from "./BearerToken.mjs";
+export { NoOpAuthProvider } from "./NoOpAuthProvider.mjs";

package/dist/esm/management/core/auth/index.mjs

@@ -1,2 +1,3 @@
 export { BasicAuth } from "./BasicAuth.mjs";
 export { BearerToken } from "./BearerToken.mjs";
+export { NoOpAuthProvider } from "./NoOpAuthProvider.mjs";

package/dist/esm/management/core/exports.d.mts

@@ -1,2 +1,3 @@
-export * from "./pagination/exports.mjs";
 export * from "./file/exports.mjs";
+export * from "./logging/exports.mjs";
+export * from "./pagination/exports.mjs";

package/dist/esm/management/core/exports.mjs

@@ -1,2 +1,3 @@
-export * from "./pagination/exports.mjs";
 export * from "./file/exports.mjs";
+export * from "./logging/exports.mjs";
+export * from "./pagination/exports.mjs";

package/dist/esm/management/core/fetcher/BinaryResponse.d.mts

@@ -1,20 +1,19 @@
-import type { ResponseWithBody } from "./ResponseWithBody.mjs";
 export type BinaryResponse = {
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bodyUsed) */
-    bodyUsed: boolean;
+    bodyUsed: Response["bodyUsed"];
     /**
      * Returns a ReadableStream of the response body.
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/body)
      */
-    stream: () => ReadableStream<Uint8Array>;
+    stream: () => Response["body"];
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/arrayBuffer) */
-    arrayBuffer: () => Promise<ArrayBuffer>;
+    arrayBuffer: () => ReturnType<Response["arrayBuffer"]>;
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/blob) */
-    blob: () => Promise<Blob>;
+    blob: () => ReturnType<Response["blob"]>;
     /**
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bytes)
      * Some versions of the Fetch API may not support this method.
      */
-    bytes?(): Promise<Uint8Array>;
+    bytes?(): ReturnType<Response["bytes"]>;
 };
-export declare function getBinaryResponse(response: ResponseWithBody): BinaryResponse;
+export declare function getBinaryResponse(response: Response): BinaryResponse;

package/dist/esm/management/core/fetcher/EndpointSupplier.d.mts

@@ -1,5 +1,5 @@
 import type { EndpointMetadata } from "./EndpointMetadata.mjs";
-import { Supplier } from "./Supplier.mjs";
+import type { Supplier } from "./Supplier.mjs";
 type EndpointSupplierFn<T> = (arg: {
     endpointMetadata: EndpointMetadata;
 }) => T | Promise<T>;

package/dist/esm/management/core/fetcher/Fetcher.d.mts

@@ -1,3 +1,4 @@
+import { type LogConfig, type Logger } from "../logging/logger.mjs";
 import type { APIResponse } from "./APIResponse.mjs";
 import type { EndpointMetadata } from "./EndpointMetadata.mjs";
 import { EndpointSupplier } from "./EndpointSupplier.mjs";
@@ -19,8 +20,9 @@ export declare namespace Fetcher {
         duplex?: "half";
         endpointMetadata?: EndpointMetadata;
         fetchFn?: typeof fetch;
+        logging?: LogConfig | Logger;
     }
-    type Error = FailedStatusCodeError | NonJsonError | TimeoutError | UnknownError;
+    type Error = FailedStatusCodeError | NonJsonError | BodyIsNullError | TimeoutError | UnknownError;
     interface FailedStatusCodeError {
         reason: "status-code";
         statusCode: number;
@@ -31,6 +33,10 @@ export declare namespace Fetcher {
         statusCode: number;
         rawBody: string;
     }
+    interface BodyIsNullError {
+        reason: "body-is-null";
+        statusCode: number;
+    }
     interface TimeoutError {
         reason: "timeout";
     }