auth0 5.1.0 → 5.2.0

package/dist/cjs/management/api/types/types.js

@@ -1,10 +1,10 @@
 "use strict";
 // This file was auto-generated by Fern from our API Definition.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConnectionKeyUseEnum = exports.ConnectionIdentityProviderEnum = exports.ConnectionIdentifierPrecedenceEnum = exports.ClientTokenEndpointAuthMethodOrNullEnum = exports.ClientTokenEndpointAuthMethodEnum = exports.ClientSessionTransferDeviceBindingEnum = exports.ClientSessionTransferAllowedAuthenticationMethodsEnum = exports.ClientOrganizationUsagePatchEnum = exports.ClientOrganizationUsageEnum = exports.ClientOrganizationRequireBehaviorPatchEnum = exports.ClientOrganizationRequireBehaviorEnum = exports.ClientOrganizationDiscoveryEnum = exports.ClientOidcBackchannelLogoutInitiatorsModeEnum = exports.ClientOidcBackchannelLogoutInitiatorsEnum = exports.ClientGrantSubjectTypeEnum = exports.ClientGrantOrganizationUsageEnum = exports.ClientGrantOrganizationNullableUsageEnum = exports.ClientCredentialTypeEnum = exports.ClientCredentialAlgorithmEnum = exports.ClientComplianceLevelEnum = exports.ClientAppTypeEnum = exports.BreachedPasswordDetectionShieldsEnum = exports.BreachedPasswordDetectionPreUserRegistrationShieldsEnum = exports.BreachedPasswordDetectionPreChangePasswordShieldsEnum = exports.BreachedPasswordDetectionMethodEnum = exports.BreachedPasswordDetectionAdminNotificationFrequencyEnum = exports.BrandingThemeWidgetSocialButtonsLayoutEnum = exports.BrandingThemeWidgetLogoPositionEnum = exports.BrandingThemeWidgetHeaderTextAlignmentEnum = exports.BrandingThemePageBackgroundPageLayoutEnum = exports.BrandingThemeFontLinksStyleEnum = exports.BrandingThemeColorsCaptchaWidgetThemeEnum = exports.BrandingThemeBordersInputsStyleEnum = exports.BrandingThemeBordersButtonsStyleEnum = exports.BotDetectionLevelEnum = exports.BotDetectionChallengePolicyPasswordlessFlowEnum = exports.BotDetectionChallengePolicyPasswordResetFlowEnum = exports.BotDetectionChallengePolicyPasswordFlowEnum = exports.AuthenticationTypeEnum = exports.AuthenticationMethodTypeEnum = exports.AttackProtectionCaptchaProviderId = exports.AsyncApprovalNotificationsChannelsEnum = exports.AculRenderingModeEnum = exports.AculMatchTypeEnum = exports.ActionVersionBuildStatusEnum = exports.ActionExecutionStatusEnum = exports.ActionBuildStatusEnum = exports.ActionBindingTypeEnum = exports.ActionBindingRefTypeEnum = exports.OauthScope = void 0;
-exports.GuardianEnrollmentStatus = exports.GuardianEnrollmentFactorEnum = exports.GetFlowRequestParametersHydrateEnum = exports.GetBruteForceSettingsResponseContent = exports.FormsRequestParametersHydrateEnum = exports.FormFieldPaymentConfigChargeOneOffCurrencyEnum = exports.FormFieldPasswordConfigHashEnum = exports.FormFieldFileConfigStorageTypeEnum = exports.FormFieldFileConfigCategoryEnum = exports.FormFieldDateConfigFormatEnum = exports.FormBlockResendButtonConfigTextAlignmentEnum = exports.FormBlockImageConfigPositionEnum = exports.FlowsVaultConnectioSetupJwtAlgorithmEnum = exports.FlowActionZapierTriggerWebhookParams = exports.FlowActionWhatsappSendMessageParams = exports.FlowActionSlackPostMessageParamsAttachment = exports.FlowActionSalesforceSearchLeadsParams = exports.FlowActionHttpSendRequestParams = exports.FlowActionFlowDelayFlowParams = exports.FlowActionAuth0SendRequestParams = exports.EventStreamTestEventTypeEnum = exports.EventStreamStatusEnum = exports.EventStreamEventTypeEnum = exports.EventStreamEventBridgeAwsRegionEnum = exports.EventStreamDeliveryEventTypeEnum = exports.EncryptionKeyType = exports.EncryptionKeyState = exports.EmailTemplateNameEnum = exports.EmailProviderNameEnum = exports.DomainVerificationStatusEnum = exports.DomainVerificationMethodNameEnum = exports.DomainCertificateStatusEnum = exports.DomainCertificateAuthorityEnum = exports.DeviceCredentialTypeEnum = exports.CustomSigningKeyTypeEnum = exports.CustomSigningKeyCurveEnum = exports.CustomSigningKeyAlgorithmEnum = exports.CustomProviderDeliveryMethodEnum = exports.CustomDomainTypeEnum = exports.CustomDomainStatusFilterEnum = exports.CustomDomainProvisioningTypeEnum = exports.CustomDomainCustomClientIpHeaderEnum = exports.CreatedUserAuthenticationMethodTypeEnum = exports.CreatedAuthenticationMethodTypeEnum = exports.CreateEncryptionKeyType = exports.ConnectionUpstreamAliasEnum = exports.ConnectionStrategyEnum = exports.ConnectionSetUserRootAttributesEnum = exports.ConnectionPasswordPolicyEnum = exports.ConnectionPasskeyChallengeUiEnum = void 0;
-exports.SupportedLocales = exports.SignupStatusEnum = exports.SigningAlgorithmEnum = exports.SessionCookieModeEnum = exports.SessionCookieMetadataModeEnum = exports.SelfServiceProfileSsoTicketProvisioningScopeEnum = exports.SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum = exports.SelfServiceProfileSsoTicketDomainVerificationEnum = exports.SelfServiceProfileAllowedStrategyEnum = exports.SearchEngineVersionsEnum = exports.ScreenGroupNameEnum = exports.RotateConnectionKeysSigningAlgEnum = exports.ResourceServerTokenEncryptionAlgorithmEnum = exports.ResourceServerTokenDialectSchemaEnum = exports.ResourceServerTokenDialectResponseEnum = exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = exports.ResourceServerProofOfPossessionMechanismEnum = exports.RefreshTokenRotationTypeEnum = exports.RefreshTokenExpirationTypeEnum = exports.PublicKeyCredentialAlgorithmEnum = exports.PromptLanguageEnum = exports.PromptGroupNameEnum = exports.PreferredAuthenticationMethodEnum = exports.PhoneTemplateNotificationTypeEnum = exports.PhoneProviderNameEnum = exports.PhoneProviderDeliveryMethodEnum = exports.PartialGroupsEnum = exports.OrganizationUsageEnum = exports.OrganizationDiscoveryDomainStatus = exports.NetworkAclRuleScopeEnum = exports.MfaPolicyEnum = exports.LogStreamStatusEnum = exports.LogStreamPiiMethodEnum = exports.LogStreamPiiLogFieldsEnum = exports.LogStreamMixpanelRegionEnum = exports.LogStreamHttpContentFormatEnum = exports.LogStreamFilterGroupNameEnum = exports.LogStreamEventGridRegionEnum = exports.LogStreamEventBridgeSinkRegionEnum = exports.LogStreamDatadogRegionEnum = exports.JobFileFormatEnum = exports.IntegrationRequiredParamTypeEnum = exports.IntegrationFeatureTypeEnum = exports.IdentityProviderEnum = exports.HookTriggerIdEnum = exports.GuardianFactorsProviderSmsProviderEnum = exports.GuardianFactorsProviderPushNotificationProviderDataEnum = exports.GuardianFactorPhoneFactorMessageTypeEnum = exports.GuardianFactorNameEnum = void 0;
-exports.VerificationMethodEnum = exports.UserMultifactorProviderEnum = exports.UserIdentityProviderEnum = exports.UserEnrollmentStatusEnum = exports.UserEnrollmentAuthMethodEnum = exports.UserAuthenticationMethodPropertiesEnum = exports.UserAttributeProfileUserIdOidcStrategyOverrideMapping = exports.UpdateBruteForceSettingsResponseContent = exports.UniversalLoginExperienceEnum = exports.TwilioProviderDeliveryMethodEnum = exports.TenantSettingsDeviceFlowCharset = exports.SuspiciousIpThrottlingShieldsEnum = void 0;
+exports.ConnectionIdTokenSignedResponseAlgEnum = exports.ConnectionConnectionSettingsPkceEnum = exports.ClientTokenEndpointAuthMethodOrNullEnum = exports.ClientTokenEndpointAuthMethodEnum = exports.ClientSessionTransferDeviceBindingEnum = exports.ClientSessionTransferAllowedAuthenticationMethodsEnum = exports.ClientOrganizationUsagePatchEnum = exports.ClientOrganizationUsageEnum = exports.ClientOrganizationRequireBehaviorPatchEnum = exports.ClientOrganizationRequireBehaviorEnum = exports.ClientOrganizationDiscoveryEnum = exports.ClientOidcBackchannelLogoutInitiatorsModeEnum = exports.ClientOidcBackchannelLogoutInitiatorsEnum = exports.ClientGrantSubjectTypeEnum = exports.ClientGrantOrganizationUsageEnum = exports.ClientGrantOrganizationNullableUsageEnum = exports.ClientCredentialTypeEnum = exports.ClientCredentialAlgorithmEnum = exports.ClientComplianceLevelEnum = exports.ClientAppTypeEnum = exports.BreachedPasswordDetectionShieldsEnum = exports.BreachedPasswordDetectionPreUserRegistrationShieldsEnum = exports.BreachedPasswordDetectionPreChangePasswordShieldsEnum = exports.BreachedPasswordDetectionMethodEnum = exports.BreachedPasswordDetectionAdminNotificationFrequencyEnum = exports.BrandingThemeWidgetSocialButtonsLayoutEnum = exports.BrandingThemeWidgetLogoPositionEnum = exports.BrandingThemeWidgetHeaderTextAlignmentEnum = exports.BrandingThemePageBackgroundPageLayoutEnum = exports.BrandingThemeFontLinksStyleEnum = exports.BrandingThemeColorsCaptchaWidgetThemeEnum = exports.BrandingThemeBordersInputsStyleEnum = exports.BrandingThemeBordersButtonsStyleEnum = exports.BotDetectionLevelEnum = exports.BotDetectionChallengePolicyPasswordlessFlowEnum = exports.BotDetectionChallengePolicyPasswordResetFlowEnum = exports.BotDetectionChallengePolicyPasswordFlowEnum = exports.AuthenticationTypeEnum = exports.AuthenticationMethodTypeEnum = exports.AttackProtectionCaptchaProviderId = exports.AsyncApprovalNotificationsChannelsEnum = exports.AculRenderingModeEnum = exports.AculMatchTypeEnum = exports.AculContextEnum = exports.ActionVersionBuildStatusEnum = exports.ActionExecutionStatusEnum = exports.ActionBuildStatusEnum = exports.ActionBindingTypeEnum = exports.ActionBindingRefTypeEnum = exports.OauthScope = void 0;
+exports.FlowActionSlackPostMessageParamsAttachment = exports.FlowActionSalesforceSearchLeadsParams = exports.FlowActionHttpSendRequestParams = exports.FlowActionFlowDelayFlowParams = exports.FlowActionAuth0SendRequestParams = exports.EventStreamTestEventTypeEnum = exports.EventStreamStatusEnum = exports.EventStreamEventTypeEnum = exports.EventStreamEventBridgeAwsRegionEnum = exports.EventStreamDeliveryEventTypeEnum = exports.EncryptionKeyType = exports.EncryptionKeyState = exports.EnabledFeaturesEnum = exports.EmailTemplateNameEnum = exports.EmailProviderNameEnum = exports.DomainVerificationStatusEnum = exports.DomainVerificationMethodNameEnum = exports.DomainCertificateStatusEnum = exports.DomainCertificateAuthorityEnum = exports.DeviceCredentialTypeEnum = exports.CustomSigningKeyTypeEnum = exports.CustomSigningKeyCurveEnum = exports.CustomSigningKeyAlgorithmEnum = exports.CustomProviderDeliveryMethodEnum = exports.CustomDomainTypeEnum = exports.CustomDomainStatusFilterEnum = exports.CustomDomainProvisioningTypeEnum = exports.CustomDomainCustomClientIpHeaderEnum = exports.CreatedUserAuthenticationMethodTypeEnum = exports.CreatedAuthenticationMethodTypeEnum = exports.CreateEncryptionKeyType = exports.ConnectionWaadProtocolEnumAzureAd = exports.ConnectionUseridAttributeEnumAzureAd = exports.ConnectionUpstreamAliasEnum = exports.ConnectionTypeEnumOidc = exports.ConnectionTokenEndpointAuthSigningAlgEnum = exports.ConnectionTokenEndpointAuthMethodEnum = exports.ConnectionStrategyEnum = exports.ConnectionShouldTrustEmailVerifiedConnectionEnum = exports.ConnectionSetUserRootAttributesEnum = exports.ConnectionProfileOrganizationShowAsButtonEnum = exports.ConnectionProfileOrganizationAssignMembershipOnLoginEnum = exports.ConnectionPasswordPolicyEnum = exports.ConnectionPasskeyChallengeUiEnum = exports.ConnectionMappingModeEnumOkta = exports.ConnectionMappingModeEnumOidc = exports.ConnectionKeyUseEnum = exports.ConnectionIdentityProviderEnum = exports.ConnectionIdentityApiEnumAzureAd = exports.ConnectionIdentifierPrecedenceEnum = void 0;
+exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = exports.ResourceServerProofOfPossessionMechanismEnum = exports.RefreshTokenRotationTypeEnum = exports.RefreshTokenExpirationTypeEnum = exports.PublicKeyCredentialAlgorithmEnum = exports.PromptLanguageEnum = exports.PromptGroupNameEnum = exports.PreferredAuthenticationMethodEnum = exports.PhoneTemplateNotificationTypeEnum = exports.PhoneProviderNameEnum = exports.PhoneProviderDeliveryMethodEnum = exports.PartialGroupsEnum = exports.OrganizationUsageEnum = exports.OrganizationDiscoveryDomainStatus = exports.NetworkAclRuleScopeEnum = exports.MfaPolicyEnum = exports.LogStreamStatusEnum = exports.LogStreamPiiMethodEnum = exports.LogStreamPiiLogFieldsEnum = exports.LogStreamMixpanelRegionEnum = exports.LogStreamHttpContentFormatEnum = exports.LogStreamFilterGroupNameEnum = exports.LogStreamEventGridRegionEnum = exports.LogStreamEventBridgeSinkRegionEnum = exports.LogStreamDatadogRegionEnum = exports.JobFileFormatEnum = exports.IntegrationRequiredParamTypeEnum = exports.IntegrationFeatureTypeEnum = exports.IdentityProviderEnum = exports.HookTriggerIdEnum = exports.GuardianFactorsProviderSmsProviderEnum = exports.GuardianFactorsProviderPushNotificationProviderDataEnum = exports.GuardianFactorPhoneFactorMessageTypeEnum = exports.GuardianFactorNameEnum = exports.GuardianEnrollmentStatus = exports.GuardianEnrollmentFactorEnum = exports.GetFlowRequestParametersHydrateEnum = exports.GetBruteForceSettingsResponseContent = exports.FormsRequestParametersHydrateEnum = exports.FormFieldPaymentConfigChargeOneOffCurrencyEnum = exports.FormFieldPasswordConfigHashEnum = exports.FormFieldFileConfigStorageTypeEnum = exports.FormFieldFileConfigCategoryEnum = exports.FormFieldDateConfigFormatEnum = exports.FormBlockResendButtonConfigTextAlignmentEnum = exports.FormBlockImageConfigPositionEnum = exports.FlowsVaultConnectioSetupJwtAlgorithmEnum = exports.FlowActionZapierTriggerWebhookParams = exports.FlowActionWhatsappSendMessageParams = void 0;
+exports.VerificationMethodEnum = exports.UserMultifactorProviderEnum = exports.UserIdentityProviderEnum = exports.UserEnrollmentStatusEnum = exports.UserEnrollmentAuthMethodEnum = exports.UserAuthenticationMethodPropertiesEnum = exports.UserAttributeProfileUserIdOidcStrategyOverrideMapping = exports.UpdateBruteForceSettingsResponseContent = exports.UniversalLoginExperienceEnum = exports.TwilioProviderDeliveryMethodEnum = exports.TenantSettingsResourceParameterProfile = exports.TenantSettingsDeviceFlowCharset = exports.SuspiciousIpThrottlingShieldsEnum = exports.SupportedLocales = exports.SignupStatusEnum = exports.SigningAlgorithmEnum = exports.SessionCookieModeEnum = exports.SessionCookieMetadataModeEnum = exports.SelfServiceProfileSsoTicketProvisioningScopeEnum = exports.SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum = exports.SelfServiceProfileSsoTicketDomainVerificationEnum = exports.SelfServiceProfileAllowedStrategyEnum = exports.SearchEngineVersionsEnum = exports.ScreenGroupNameEnum = exports.RotateConnectionKeysSigningAlgEnum = exports.ResourceServerTokenEncryptionAlgorithmEnum = exports.ResourceServerTokenDialectSchemaEnum = exports.ResourceServerTokenDialectResponseEnum = void 0;
 exports.OauthScope = {
     /**
      * Read Actions */
@@ -270,6 +270,9 @@ exports.OauthScope = {
     /**
      * Update Event Deliveries */
     UpdateEventDeliveries: "update:event_deliveries",
+    /**
+     * Read Events */
+    ReadEvents: "read:events",
     /**
      * Read Extensions */
     ReadExtensions: "read:extensions",
@@ -792,6 +795,26 @@ exports.ActionVersionBuildStatusEnum = {
     Retrying: "retrying",
     Failed: "failed",
 };
+/** Static context values */
+exports.AculContextEnum = {
+    BrandingSettings: "branding.settings",
+    BrandingThemesDefault: "branding.themes.default",
+    ClientLogoUri: "client.logo_uri",
+    ClientDescription: "client.description",
+    OrganizationDisplayName: "organization.display_name",
+    OrganizationBranding: "organization.branding",
+    ScreenTexts: "screen.texts",
+    TenantName: "tenant.name",
+    TenantFriendlyName: "tenant.friendly_name",
+    TenantLogoUrl: "tenant.logo_url",
+    TenantEnabledLocales: "tenant.enabled_locales",
+    UntrustedDataSubmittedFormData: "untrusted_data.submitted_form_data",
+    UntrustedDataAuthorizationParamsLoginHint: "untrusted_data.authorization_params.login_hint",
+    UntrustedDataAuthorizationParamsScreenHint: "untrusted_data.authorization_params.screen_hint",
+    UntrustedDataAuthorizationParamsUiLocales: "untrusted_data.authorization_params.ui_locales",
+    UserOrganizations: "user.organizations",
+    TransactionCustomDomainDomain: "transaction.custom_domain.domain",
+};
 /** Type of match to apply */
 exports.AculMatchTypeEnum = {
     IncludesAny: "includes_any",
@@ -1065,12 +1088,31 @@ exports.ClientTokenEndpointAuthMethodOrNullEnum = {
     ClientSecretPost: "client_secret_post",
     ClientSecretBasic: "client_secret_basic",
 };
+/** PKCE configuration. */
+exports.ConnectionConnectionSettingsPkceEnum = {
+    Auto: "auto",
+    S256: "S256",
+    Plain: "plain",
+    Disabled: "disabled",
+};
+/** Algorithm allowed to verify the ID tokens. */
+exports.ConnectionIdTokenSignedResponseAlgEnum = {
+    Rs256: "RS256",
+    Rs512: "RS512",
+    Ps256: "PS256",
+    Es256: "ES256",
+};
 /** Order of precedence for attribute types */
 exports.ConnectionIdentifierPrecedenceEnum = {
     Email: "email",
     PhoneNumber: "phone_number",
     Username: "username",
 };
+/** Identity API version to use */
+exports.ConnectionIdentityApiEnumAzureAd = {
+    MicrosoftIdentityPlatformV20: "microsoft-identity-platform-v2.0",
+    AzureActiveDirectoryV10: "azure-active-directory-v1.0",
+};
 /** The identity provider identifier for the connection */
 exports.ConnectionIdentityProviderEnum = {
     Ad: "ad",
@@ -1141,6 +1183,16 @@ exports.ConnectionKeyUseEnum = {
     Encryption: "encryption",
     Signing: "signing",
 };
+/** Method used to map incoming claims when strategy=oidc. */
+exports.ConnectionMappingModeEnumOidc = {
+    BindAll: "bind_all",
+    UseMap: "use_map",
+};
+/** Method used to map incoming claims when strategy=okta. */
+exports.ConnectionMappingModeEnumOkta = {
+    BasicProfile: "basic_profile",
+    UseMap: "use_map",
+};
 /** Controls the UI used to challenge the user for their passkey. */
 exports.ConnectionPasskeyChallengeUiEnum = {
     Both: "both",
@@ -1155,12 +1207,29 @@ exports.ConnectionPasswordPolicyEnum = {
     Good: "good",
     Excellent: "excellent",
 };
+/** Indicates if membership should be assigned on login. */
+exports.ConnectionProfileOrganizationAssignMembershipOnLoginEnum = {
+    None: "none",
+    Optional: "optional",
+    Required: "required",
+};
+/** Indicates if the organization should be shown as a button. */
+exports.ConnectionProfileOrganizationShowAsButtonEnum = {
+    None: "none",
+    Optional: "optional",
+    Required: "required",
+};
 /** When using an external IdP, this flag determines  whether 'name', 'given_name', 'family_name', 'nickname', and 'picture' attributes are updated. In addition, it also determines whether the user is created when user doesnt exist previously. Possible values are 'on_each_login' (default value, it configures the connection to automatically create the user if necessary and update the root attributes from the external IdP with each user login. When this setting is used, root attributes cannot be independently updated), 'on_first_login' (configures the connection to create the user and set the root attributes on first login only, allowing them to be independently updated thereafter), and 'never_on_login' (configures the connection not to create the user and not to set the root attributes from the external IdP, allowing them to be independently updated). */
 exports.ConnectionSetUserRootAttributesEnum = {
     OnEachLogin: "on_each_login",
     OnFirstLogin: "on_first_login",
     NeverOnLogin: "never_on_login",
 };
+/** Choose how Auth0 sets the email_verified field in the user profile. */
+exports.ConnectionShouldTrustEmailVerifiedConnectionEnum = {
+    NeverSetEmailsAsVerified: "never_set_emails_as_verified",
+    AlwaysSetEmailsAsVerified: "always_set_emails_as_verified",
+};
 exports.ConnectionStrategyEnum = {
     Ad: "ad",
     Adfs: "adfs",
@@ -1226,6 +1295,23 @@ exports.ConnectionStrategyEnum = {
     Yandex: "yandex",
     Auth0Adldap: "auth0-adldap",
 };
+/** Requested Client Authentication method for the Token Endpoint. */
+exports.ConnectionTokenEndpointAuthMethodEnum = {
+    ClientSecretPost: "client_secret_post",
+    PrivateKeyJwt: "private_key_jwt",
+};
+/** Algorithm used to sign client_assertions. */
+exports.ConnectionTokenEndpointAuthSigningAlgEnum = {
+    Es256: "ES256",
+    Ps256: "PS256",
+    Rs256: "RS256",
+    Rs512: "RS512",
+};
+/** Connection type */
+exports.ConnectionTypeEnumOidc = {
+    BackChannel: "back_channel",
+    FrontChannel: "front_channel",
+};
 exports.ConnectionUpstreamAliasEnum = {
     AcrValues: "acr_values",
     Audience: "audience",
@@ -1240,6 +1326,16 @@ exports.ConnectionUpstreamAliasEnum = {
     ResponseType: "response_type",
     UiLocales: "ui_locales",
 };
+/** User ID attribute to use. Only applies when waad_protocol=openid-connect */
+exports.ConnectionUseridAttributeEnumAzureAd = {
+    Oid: "oid",
+    Sub: "sub",
+};
+/** Available WAAD protocols */
+exports.ConnectionWaadProtocolEnumAzureAd = {
+    WsFederation: "ws-federation",
+    OpenidConnect: "openid-connect",
+};
 /** Type of the encryption key to be created. */
 exports.CreateEncryptionKeyType = {
     CustomerProvidedRootKey: "customer-provided-root-key",
@@ -1366,6 +1462,11 @@ exports.EmailTemplateNameEnum = {
     PasswordReset: "password_reset",
     AsyncApproval: "async_approval",
 };
+/** Enum for enabled features. */
+exports.EnabledFeaturesEnum = {
+    Scim: "scim",
+    UniversalLogout: "universal_logout",
+};
 /** Key state */
 exports.EncryptionKeyState = {
     PreActivation: "pre-activation",
@@ -1912,11 +2013,12 @@ exports.MfaPolicyEnum = {
     AllApplications: "all-applications",
     ConfidenceScore: "confidence-score",
 };
-/** Identifies the origin of the request as the Management API (management), Authentication API (authentication), or either (tenant) */
+/** Identifies the origin of the request as the Management API (management), Authentication API (authentication), Dynamic Client Registration API (dynamic_client_registration), or any (tenant) */
 exports.NetworkAclRuleScopeEnum = {
     Management: "management",
     Authentication: "authentication",
     Tenant: "tenant",
+    DynamicClientRegistration: "dynamic_client_registration",
 };
 /** The verification status of the discovery domain. */
 exports.OrganizationDiscoveryDomainStatus = {
@@ -2281,7 +2383,7 @@ exports.SessionCookieModeEnum = {
     Persistent: "persistent",
     NonPersistent: "non-persistent",
 };
-/** Algorithm used to sign JWTs. Can be `HS256` or `RS256`. `PS256` available via addon. */
+/** Algorithm used to sign JWTs. Can be `HS256` (default) or `RS256`. `PS256` available via addon. */
 exports.SigningAlgorithmEnum = {
     Hs256: "HS256",
     Rs256: "RS256",
@@ -2385,6 +2487,11 @@ exports.TenantSettingsDeviceFlowCharset = {
     Base20: "base20",
     Digits: "digits",
 };
+/** Profile that determines how the identity of the protected resource (i.e., API) can be specified in the OAuth endpoints when access is being requested. When set to audience (default), the audience parameter is used to specify the resource server. When set to compatibility, the audience parameter is still checked first, but if it not provided, then the resource parameter can be used to specify the resource server. */
+exports.TenantSettingsResourceParameterProfile = {
+    Audience: "audience",
+    Compatibility: "compatibility",
+};
 exports.TwilioProviderDeliveryMethodEnum = {
     Text: "text",
     Voice: "voice",

package/dist/cjs/management/auth/BearerAuthProvider.d.ts

@@ -0,0 +1,16 @@
+import * as core from "../core/index.js";
+export declare namespace BearerAuthProvider {
+    interface AuthOptions {
+        token: core.Supplier<core.BearerToken>;
+    }
+    interface Options extends AuthOptions {
+    }
+}
+export declare class BearerAuthProvider implements core.AuthProvider {
+    private readonly token;
+    constructor(options: BearerAuthProvider.Options);
+    static canCreate(options: BearerAuthProvider.Options): boolean;
+    getAuthRequest(arg?: {
+        endpointMetadata?: core.EndpointMetadata;
+    }): Promise<core.AuthRequest>;
+}

package/dist/cjs/management/auth/BearerAuthProvider.js

@@ -0,0 +1,70 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BearerAuthProvider = void 0;
+const core = __importStar(require("../core/index.js"));
+const errors = __importStar(require("../errors/index.js"));
+class BearerAuthProvider {
+    constructor(options) {
+        this.token = options.token;
+    }
+    static canCreate(options) {
+        return options.token != null;
+    }
+    getAuthRequest(arg) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const token = yield core.Supplier.get(this.token);
+            if (token == null) {
+                throw new errors.ManagementError({
+                    message: "Please specify a token by passing it in to the constructor",
+                });
+            }
+            return {
+                headers: { Authorization: `Bearer ${token}` },
+            };
+        });
+    }
+}
+exports.BearerAuthProvider = BearerAuthProvider;

package/dist/cjs/management/auth/index.d.ts

@@ -0,0 +1 @@
+export { BearerAuthProvider } from "./BearerAuthProvider.js";

package/dist/cjs/management/auth/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BearerAuthProvider = void 0;
+var BearerAuthProvider_js_1 = require("./BearerAuthProvider.js");
+Object.defineProperty(exports, "BearerAuthProvider", { enumerable: true, get: function () { return BearerAuthProvider_js_1.BearerAuthProvider; } });

package/dist/cjs/management/core/auth/AuthProvider.d.ts

@@ -1,4 +1,7 @@
+import type { EndpointMetadata } from "../fetcher/EndpointMetadata.js";
 import type { AuthRequest } from "./AuthRequest.js";
 export interface AuthProvider {
-    getAuthRequest(): Promise<AuthRequest>;
+    getAuthRequest(arg?: {
+        endpointMetadata?: EndpointMetadata;
+    }): Promise<AuthRequest>;
 }

package/dist/cjs/management/core/auth/BearerToken.d.ts

@@ -1,5 +1,7 @@
 export type BearerToken = string;
+declare function toAuthorizationHeader(token: string | undefined): string | undefined;
 export declare const BearerToken: {
-    toAuthorizationHeader: (token: BearerToken | undefined) => string | undefined;
+    toAuthorizationHeader: typeof toAuthorizationHeader;
     fromAuthorizationHeader: (header: string) => BearerToken;
 };
+export {};

package/dist/cjs/management/core/auth/BearerToken.js

@@ -2,13 +2,14 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BearerToken = void 0;
 const BEARER_AUTH_HEADER_PREFIX = /^Bearer /i;
+function toAuthorizationHeader(token) {
+    if (token == null) {
+        return undefined;
+    }
+    return `Bearer ${token}`;
+}
 exports.BearerToken = {
-    toAuthorizationHeader: (token) => {
-        if (token == null) {
-            return undefined;
-        }
-        return `Bearer ${token}`;
-    },
+    toAuthorizationHeader: toAuthorizationHeader,
     fromAuthorizationHeader: (header) => {
         return header.replace(BEARER_AUTH_HEADER_PREFIX, "").trim();
     },

package/dist/cjs/management/core/auth/NoOpAuthProvider.d.ts

@@ -0,0 +1,5 @@
+import type { AuthProvider } from "./AuthProvider.js";
+import type { AuthRequest } from "./AuthRequest.js";
+export declare class NoOpAuthProvider implements AuthProvider {
+    getAuthRequest(): Promise<AuthRequest>;
+}

package/dist/cjs/management/core/auth/NoOpAuthProvider.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoOpAuthProvider = void 0;
+class NoOpAuthProvider {
+    getAuthRequest() {
+        return Promise.resolve({ headers: {} });
+    }
+}
+exports.NoOpAuthProvider = NoOpAuthProvider;

package/dist/cjs/management/core/auth/index.d.ts

@@ -2,3 +2,4 @@ export type { AuthProvider } from "./AuthProvider.js";
 export type { AuthRequest } from "./AuthRequest.js";
 export { BasicAuth } from "./BasicAuth.js";
 export { BearerToken } from "./BearerToken.js";
+export { NoOpAuthProvider } from "./NoOpAuthProvider.js";

package/dist/cjs/management/core/auth/index.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BearerToken = exports.BasicAuth = void 0;
+exports.NoOpAuthProvider = exports.BearerToken = exports.BasicAuth = void 0;
 var BasicAuth_js_1 = require("./BasicAuth.js");
 Object.defineProperty(exports, "BasicAuth", { enumerable: true, get: function () { return BasicAuth_js_1.BasicAuth; } });
 var BearerToken_js_1 = require("./BearerToken.js");
 Object.defineProperty(exports, "BearerToken", { enumerable: true, get: function () { return BearerToken_js_1.BearerToken; } });
+var NoOpAuthProvider_js_1 = require("./NoOpAuthProvider.js");
+Object.defineProperty(exports, "NoOpAuthProvider", { enumerable: true, get: function () { return NoOpAuthProvider_js_1.NoOpAuthProvider; } });

package/dist/cjs/management/core/exports.d.ts

@@ -1,2 +1,3 @@
-export * from "./pagination/exports.js";
 export * from "./file/exports.js";
+export * from "./logging/exports.js";
+export * from "./pagination/exports.js";

package/dist/cjs/management/core/exports.js

@@ -14,5 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./pagination/exports.js"), exports);
 __exportStar(require("./file/exports.js"), exports);
+__exportStar(require("./logging/exports.js"), exports);
+__exportStar(require("./pagination/exports.js"), exports);

package/dist/cjs/management/core/fetcher/BinaryResponse.d.ts

@@ -1,20 +1,19 @@
-import type { ResponseWithBody } from "./ResponseWithBody.js";
 export type BinaryResponse = {
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bodyUsed) */
-    bodyUsed: boolean;
+    bodyUsed: Response["bodyUsed"];
     /**
      * Returns a ReadableStream of the response body.
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/body)
      */
-    stream: () => ReadableStream<Uint8Array>;
+    stream: () => Response["body"];
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/arrayBuffer) */
-    arrayBuffer: () => Promise<ArrayBuffer>;
+    arrayBuffer: () => ReturnType<Response["arrayBuffer"]>;
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/blob) */
-    blob: () => Promise<Blob>;
+    blob: () => ReturnType<Response["blob"]>;
     /**
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bytes)
      * Some versions of the Fetch API may not support this method.
      */
-    bytes?(): Promise<Uint8Array>;
+    bytes?(): ReturnType<Response["bytes"]>;
 };
-export declare function getBinaryResponse(response: ResponseWithBody): BinaryResponse;
+export declare function getBinaryResponse(response: Response): BinaryResponse;

package/dist/cjs/management/core/fetcher/EndpointSupplier.d.ts

@@ -1,5 +1,5 @@
 import type { EndpointMetadata } from "./EndpointMetadata.js";
-import { Supplier } from "./Supplier.js";
+import type { Supplier } from "./Supplier.js";
 type EndpointSupplierFn<T> = (arg: {
     endpointMetadata: EndpointMetadata;
 }) => T | Promise<T>;

package/dist/cjs/management/core/fetcher/Fetcher.d.ts

@@ -1,3 +1,4 @@
+import { type LogConfig, type Logger } from "../logging/logger.js";
 import type { APIResponse } from "./APIResponse.js";
 import type { EndpointMetadata } from "./EndpointMetadata.js";
 import { EndpointSupplier } from "./EndpointSupplier.js";
@@ -19,8 +20,9 @@ export declare namespace Fetcher {
         duplex?: "half";
         endpointMetadata?: EndpointMetadata;
         fetchFn?: typeof fetch;
+        logging?: LogConfig | Logger;
     }
-    type Error = FailedStatusCodeError | NonJsonError | TimeoutError | UnknownError;
+    type Error = FailedStatusCodeError | NonJsonError | BodyIsNullError | TimeoutError | UnknownError;
     interface FailedStatusCodeError {
         reason: "status-code";
         statusCode: number;
@@ -31,6 +33,10 @@ export declare namespace Fetcher {
         statusCode: number;
         rawBody: string;
     }
+    interface BodyIsNullError {
+        reason: "body-is-null";
+        statusCode: number;
+    }
     interface TimeoutError {
         reason: "timeout";
     }