auth0 5.10.0 → 5.11.0

package/dist/cjs/management/api/types/types.js

@@ -11,9 +11,9 @@ exports.EventStreamWebhookBearerAuthMethodEnum = exports.EventStreamWebhookBasic
 exports.FlowActionSalesforceSearchLeadsParams = exports.FlowActionSalesforceSearchLeads = exports.FlowActionSalesforceGetLead = exports.FlowActionSalesforceCreateLead = exports.FlowActionPipedriveAddPerson = exports.FlowActionPipedriveAddOrganization = exports.FlowActionPipedriveAddDeal = exports.FlowActionOtpVerifyCode = exports.FlowActionOtpGenerateCode = exports.FlowActionMailjetSendEmail = exports.FlowActionMailchimpUpsertMember = exports.FlowActionJwtVerifyJwt = exports.FlowActionJwtSignJwt = exports.FlowActionJwtDecodeJwt = exports.FlowActionJsonSerializeJson = exports.FlowActionJsonParseJson = exports.FlowActionJsonCreateJson = exports.FlowActionHubspotUpsertContact = exports.FlowActionHubspotGetContact = exports.FlowActionHubspotEnrollContact = exports.FlowActionHttpSendRequestParams = exports.FlowActionHttpSendRequest = exports.FlowActionGoogleSheetsAddRow = exports.FlowActionFlowStoreVars = exports.FlowActionFlowReturnJson = exports.FlowActionFlowMapValue = exports.FlowActionFlowErrorMessage = exports.FlowActionFlowDoNothing = exports.FlowActionFlowDelayFlowParams = exports.FlowActionFlowDelayFlow = exports.FlowActionFlowBooleanCondition = exports.FlowActionEmailVerifyEmail = exports.FlowActionClearbitFindPerson = exports.FlowActionClearbitFindCompany = exports.FlowActionBigqueryInsertRows = exports.FlowActionAuth0UpdateUser = exports.FlowActionAuth0SendSms = exports.FlowActionAuth0SendRequestParams = exports.FlowActionAuth0SendRequest = exports.FlowActionAuth0SendEmail = exports.FlowActionAuth0MakeCall = exports.FlowActionAuth0GetUser = exports.FlowActionAuth0CreateUser = exports.FlowActionAirtableUpdateRecord = exports.FlowActionAirtableListRecords = exports.FlowActionAirtableCreateRecord = exports.FlowActionActivecampaignUpsertContact = exports.FlowActionActivecampaignListContacts = exports.EventStreamWebhookDestinationTypeEnum = exports.EventStreamWebhookCustomHeaderAuthMethodEnum = void 0;
 exports.FlowsVaultConnectionAppIdWhatsappEnum = exports.FlowsVaultConnectionAppIdTwilioEnum = exports.FlowsVaultConnectionAppIdTelegramEnum = exports.FlowsVaultConnectionAppIdStripeEnum = exports.FlowsVaultConnectionAppIdSlackEnum = exports.FlowsVaultConnectionAppIdSendgridEnum = exports.FlowsVaultConnectionAppIdSalesforceEnum = exports.FlowsVaultConnectionAppIdPipedriveEnum = exports.FlowsVaultConnectionAppIdMailjetEnum = exports.FlowsVaultConnectionAppIdMailchimpEnum = exports.FlowsVaultConnectionAppIdJwtEnum = exports.FlowsVaultConnectionAppIdHubspotEnum = exports.FlowsVaultConnectionAppIdHttpEnum = exports.FlowsVaultConnectionAppIdGoogleSheetsEnum = exports.FlowsVaultConnectionAppIdDocusignEnum = exports.FlowsVaultConnectionAppIdClearbitEnum = exports.FlowsVaultConnectionAppIdBigqueryEnum = exports.FlowsVaultConnectionAppIdAuth0Enum = exports.FlowsVaultConnectionAppIdAirtableEnum = exports.FlowsVaultConnectionAppIdActivecampaignEnum = exports.FlowsVaultConnectioSetupTypeWebhookEnum = exports.FlowsVaultConnectioSetupTypeTokenEnum = exports.FlowsVaultConnectioSetupTypeOauthJwtEnum = exports.FlowsVaultConnectioSetupTypeOauthCodeEnum = exports.FlowsVaultConnectioSetupTypeOauthAppEnum = exports.FlowsVaultConnectioSetupTypeKeyPairEnum = exports.FlowsVaultConnectioSetupTypeJwtEnum = exports.FlowsVaultConnectioSetupTypeBearerEnum = exports.FlowsVaultConnectioSetupTypeApiKeyEnum = exports.FlowsVaultConnectioSetupJwtAlgorithmEnum = exports.FlowActionZapierTriggerWebhookParams = exports.FlowActionZapierTriggerWebhook = exports.FlowActionXmlSerializeXml = exports.FlowActionXmlParseXml = exports.FlowActionWhatsappSendMessageParams = exports.FlowActionWhatsappSendMessage = exports.FlowActionTwilioSendSms = exports.FlowActionTwilioMakeCall = exports.FlowActionTelegramSendMessage = exports.FlowActionStripeUpdateCustomer = exports.FlowActionStripeGetCustomer = exports.FlowActionStripeFindCustomers = exports.FlowActionStripeDeleteTaxId = exports.FlowActionStripeCreatePortalSession = exports.FlowActionStripeCreateCustomer = exports.FlowActionStripeAddTaxId = exports.FlowActionSlackPostMessageParamsAttachment = exports.FlowActionSlackPostMessage = exports.FlowActionSendgridSendEmail = exports.FlowActionSalesforceUpdateLead = void 0;
 exports.FormWidgetTypeRecaptchaConst = exports.FormWidgetTypeGMapsAddressConst = exports.FormWidgetTypeAuth0VerifiableCredentialsConst = exports.FormNodeTypeStepConst = exports.FormNodeTypeRouterConst = exports.FormNodeTypeFlowConst = exports.FormFieldTypeUrlConst = exports.FormFieldTypeTextConst = exports.FormFieldTypeTelConst = exports.FormFieldTypeSocialConst = exports.FormFieldTypePaymentConst = exports.FormFieldTypePasswordConst = exports.FormFieldTypeNumberConst = exports.FormFieldTypeLegalConst = exports.FormFieldTypeFileConst = exports.FormFieldTypeEmailConst = exports.FormFieldTypeDropdownConst = exports.FormFieldTypeDateConst = exports.FormFieldTypeCustomConst = exports.FormFieldTypeChoiceConst = exports.FormFieldTypeCardsConst = exports.FormFieldTypeBooleanConst = exports.FormFieldPaymentConfigProviderEnum = exports.FormFieldPaymentConfigChargeTypeSubscriptionConst = exports.FormFieldPaymentConfigChargeTypeOneOffConst = exports.FormFieldPaymentConfigChargeOneOffCurrencyEnum = exports.FormFieldPasswordConfigHashEnum = exports.FormFieldFileConfigStorageTypeEnum = exports.FormFieldFileConfigCategoryEnum = exports.FormFieldDateConfigFormatEnum = exports.FormEndingNodeId = exports.FormComponentCategoryWidgetConst = exports.FormComponentCategoryFieldConst = exports.FormComponentCategoryBlockConst = exports.FormBlockTypeRichTextConst = exports.FormBlockTypeResendButtonConst = exports.FormBlockTypePreviousButtonConst = exports.FormBlockTypeNextButtonConst = exports.FormBlockTypeJumpButtonConst = exports.FormBlockTypeImageConst = exports.FormBlockTypeHtmlConst = exports.FormBlockTypeDividerConst = exports.FormBlockResendButtonConfigTextAlignmentEnum = exports.FormBlockImageConfigPositionEnum = exports.ForbiddenSchema = exports.FlowsVaultConnectionSetupTypeOauthClientCredentialsEnum = exports.FlowsVaultConnectionSetupTypeBasicAuthEnum = exports.FlowsVaultConnectionSetupTypeApiKeyEnum = exports.FlowsVaultConnectionHttpApiKeySetupInEnum = exports.FlowsVaultConnectionAppIdZapierEnum = void 0;
-exports.PasswordSequentialCharactersPolicyEnum = exports.PasswordMaxLengthExceededPolicyEnum = exports.PasswordIdenticalCharactersPolicyEnum = exports.PasswordDefaultDictionariesEnum = exports.PasswordCharacterTypeRulePolicyEnum = exports.PasswordCharacterTypeEnum = exports.PartialGroupsEnum = exports.OrganizationUsageEnum = exports.OrganizationDiscoveryDomainStatus = exports.OrganizationAccessLevelEnumWithNull = exports.OrganizationAccessLevelEnum = exports.NetworkAclRuleScopeEnum = exports.MfaPolicyEnum = exports.LogStreamSumoEnum = exports.LogStreamStatusEnum = exports.LogStreamSplunkEnum = exports.LogStreamSegmentEnum = exports.LogStreamPiiMethodEnum = exports.LogStreamPiiLogFieldsEnum = exports.LogStreamPiiAlgorithmEnum = exports.LogStreamMixpanelRegionEnum = exports.LogStreamMixpanelEnum = exports.LogStreamHttpEnum = exports.LogStreamHttpContentFormatEnum = exports.LogStreamFilterTypeEnum = exports.LogStreamFilterGroupNameEnum = exports.LogStreamEventGridRegionEnum = exports.LogStreamEventGridEnum = exports.LogStreamEventBridgeSinkRegionEnum = exports.LogStreamEventBridgeEnum = exports.LogStreamDatadogRegionEnum = exports.LogStreamDatadogEnum = exports.ListFlowsRequestParametersHydrateEnum = exports.JobFileFormatEnum = exports.IntegrationRequiredParamTypeEnum = exports.IntegrationFeatureTypeEnum = exports.IdentityProviderOnlyAuth0Enum = exports.IdentityProviderEnum = exports.HookTriggerIdEnum = exports.GuardianFactorsProviderSmsProviderEnum = exports.GuardianFactorsProviderPushNotificationProviderDataEnum = exports.GuardianFactorPhoneFactorMessageTypeEnum = exports.GuardianFactorNameEnum = exports.GuardianEnrollmentStatus = exports.GuardianEnrollmentFactorEnum = exports.GroupTypeEnum = exports.GroupMemberTypeEnum = exports.GetFlowRequestParametersHydrateEnum = exports.GetFlowExecutionRequestParametersHydrateEnum = exports.FormsRequestParametersHydrateEnum = void 0;
-exports.UserAttributeProfileUserIdOidcMappingEnum = exports.UpdateBrandingPhoneMaskingEnum = exports.UpdateBrandingPhoneFormattingEnum = exports.UpdateBrandingLoginDisplayEnum = exports.UniversalLoginExperienceEnum = exports.UnauthorizedSchema = exports.TwilioProviderDeliveryMethodEnum = exports.TooManyRequestsSchema = exports.TokenExchangeProfileTypeEnum = exports.TenantSettingsSupportedLocalesEnum = exports.TenantSettingsResourceParameterProfile = exports.TenantSettingsDynamicClientRegistrationSecurityMode = exports.TenantSettingsDeviceFlowCharset = exports.SynchronizeGroupsEnum = exports.SuspiciousIpThrottlingShieldsEnum = exports.SupportedLocales = exports.SignupStatusEnum = exports.SigningAlgorithmEnum = exports.SessionCookieModeEnum = exports.SessionCookieMetadataModeEnum = exports.SelfServiceProfileSsoTicketProvisioningScopeEnum = exports.SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum = exports.SelfServiceProfileSsoTicketDomainVerificationEnum = exports.SelfServiceProfileCustomTextPageEnum = exports.SelfServiceProfileCustomTextLanguageEnum = exports.SelfServiceProfileAllowedStrategyEnum = exports.SearchEngineVersionsEnum = exports.ScreenGroupNameEnum = exports.RotateConnectionKeysSigningAlgEnum = exports.ResourceServerTokenEncryptionFormatEnum = exports.ResourceServerTokenEncryptionAlgorithmEnum = exports.ResourceServerTokenDialectSchemaEnum = exports.ResourceServerTokenDialectResponseEnum = exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = exports.ResourceServerProofOfPossessionRequiredForEnum = exports.ResourceServerProofOfPossessionMechanismEnum = exports.ResourceServerConsentPolicyEnum = exports.RefreshTokenRotationTypeEnum = exports.RefreshTokenExpirationTypeEnum = exports.PublicKeyCredentialTypeEnum = exports.PublicKeyCredentialAlgorithmEnum = exports.PromptLanguageEnum = exports.PromptGroupNameEnum = exports.PreferredAuthenticationMethodEnum = exports.PostConnectionKeysAlgEnum = exports.PhoneTemplateNotificationTypeEnum = exports.PhoneProviderNameEnum = exports.PhoneProviderDeliveryMethodEnum = exports.PhoneProviderChannelEnum = void 0;
-exports.X509CertificateCredentialTypeEnum = exports.VerificationMethodEnum = exports.UserMultifactorProviderEnum = exports.UserIdentityProviderEnum = exports.UserEnrollmentStatusEnum = exports.UserEnrollmentAuthMethodEnum = exports.UserAuthenticationMethodPropertiesEnum = exports.UserAttributeProfileUserIdOidcStrategyOverrideMapping = void 0;
+exports.PasswordMaxLengthExceededPolicyEnum = exports.PasswordIdenticalCharactersPolicyEnum = exports.PasswordDefaultDictionariesEnum = exports.PasswordCharacterTypeRulePolicyEnum = exports.PasswordCharacterTypeEnum = exports.PartialGroupsEnum = exports.OrganizationUsageEnum = exports.OrganizationMemberEffectiveRoleSource = exports.OrganizationDiscoveryDomainStatus = exports.OrganizationAccessLevelEnumWithNull = exports.OrganizationAccessLevelEnum = exports.NetworkAclRuleScopeEnum = exports.MfaPolicyEnum = exports.LogStreamSumoEnum = exports.LogStreamStatusEnum = exports.LogStreamSplunkEnum = exports.LogStreamSegmentEnum = exports.LogStreamPiiMethodEnum = exports.LogStreamPiiLogFieldsEnum = exports.LogStreamPiiAlgorithmEnum = exports.LogStreamMixpanelRegionEnum = exports.LogStreamMixpanelEnum = exports.LogStreamHttpEnum = exports.LogStreamHttpContentFormatEnum = exports.LogStreamFilterTypeEnum = exports.LogStreamFilterGroupNameEnum = exports.LogStreamEventGridRegionEnum = exports.LogStreamEventGridEnum = exports.LogStreamEventBridgeSinkRegionEnum = exports.LogStreamEventBridgeEnum = exports.LogStreamDatadogRegionEnum = exports.LogStreamDatadogEnum = exports.ListFlowsRequestParametersHydrateEnum = exports.JobFileFormatEnum = exports.IntegrationRequiredParamTypeEnum = exports.IntegrationFeatureTypeEnum = exports.IdentityProviderOnlyAuth0Enum = exports.IdentityProviderEnum = exports.HookTriggerIdEnum = exports.GuardianFactorsProviderSmsProviderEnum = exports.GuardianFactorsProviderPushNotificationProviderDataEnum = exports.GuardianFactorPhoneFactorMessageTypeEnum = exports.GuardianFactorNameEnum = exports.GuardianEnrollmentStatus = exports.GuardianEnrollmentFactorEnum = exports.GroupTypeEnum = exports.GroupMemberTypeEnum = exports.GetFlowRequestParametersHydrateEnum = exports.GetFlowExecutionRequestParametersHydrateEnum = exports.FormsRequestParametersHydrateEnum = void 0;
+exports.UnauthorizedSchema = exports.TwilioProviderDeliveryMethodEnum = exports.TooManyRequestsSchema = exports.TokenExchangeProfileTypeEnum = exports.TenantSettingsSupportedLocalesEnum = exports.TenantSettingsResourceParameterProfile = exports.TenantSettingsDynamicClientRegistrationSecurityMode = exports.TenantSettingsDeviceFlowCharset = exports.TenantSettingsCountryCodesModeResponse = exports.TenantSettingsCountryCodesMode = exports.SynchronizeGroupsEnum = exports.SuspiciousIpThrottlingShieldsEnum = exports.SupportedLocales = exports.SignupStatusEnum = exports.SigningAlgorithmEnum = exports.SessionCookieModeEnum = exports.SessionCookieMetadataModeEnum = exports.SelfServiceProfileSsoTicketProvisioningScopeEnum = exports.SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum = exports.SelfServiceProfileSsoTicketDomainVerificationEnum = exports.SelfServiceProfileCustomTextPageEnum = exports.SelfServiceProfileCustomTextLanguageEnum = exports.SelfServiceProfileAllowedStrategyEnum = exports.SearchEngineVersionsEnum = exports.ScreenGroupNameEnum = exports.RotateConnectionKeysSigningAlgEnum = exports.ResourceServerTokenEncryptionFormatEnum = exports.ResourceServerTokenEncryptionAlgorithmEnum = exports.ResourceServerTokenDialectSchemaEnum = exports.ResourceServerTokenDialectResponseEnum = exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = exports.ResourceServerProofOfPossessionRequiredForEnum = exports.ResourceServerProofOfPossessionMechanismEnum = exports.ResourceServerConsentPolicyEnum = exports.RefreshTokenRotationTypeEnum = exports.RefreshTokenExpirationTypeEnum = exports.RateLimitPolicyResourceEnum = exports.RateLimitPolicyConsumerEnum = exports.PublicKeyCredentialTypeEnum = exports.PublicKeyCredentialAlgorithmEnum = exports.PromptLanguageEnum = exports.PromptGroupNameEnum = exports.PreferredAuthenticationMethodEnum = exports.PostConnectionKeysAlgEnum = exports.PhoneTemplateNotificationTypeEnum = exports.PhoneProviderNameEnum = exports.PhoneProviderDeliveryMethodEnum = exports.PhoneProviderChannelEnum = exports.PasswordSequentialCharactersPolicyEnum = void 0;
+exports.X509CertificateCredentialTypeEnum = exports.VerificationMethodEnum = exports.UserMultifactorProviderEnum = exports.UserIdentityProviderEnum = exports.UserEnrollmentStatusEnum = exports.UserEnrollmentAuthMethodEnum = exports.UserEffectiveRoleSource = exports.UserEffectivePermissionSourceEnum = exports.UserEffectivePermissionRoleSourceEnum = exports.UserAuthenticationMethodPropertiesEnum = exports.UserAttributeProfileUserIdOidcStrategyOverrideMapping = exports.UserAttributeProfileUserIdOidcMappingEnum = exports.UpdateBrandingPhoneMaskingEnum = exports.UpdateBrandingPhoneFormattingEnum = exports.UpdateBrandingLoginDisplayEnum = exports.UniversalLoginExperienceEnum = void 0;
 exports.OauthScope = {
     /**
      * Create Actions */
@@ -312,6 +312,15 @@ exports.OauthScope = {
     /**
      * Read Group Members */
     ReadGroupMembers: "read:group_members",
+    /**
+     * Create Group Roles */
+    CreateGroupRoles: "create:group_roles",
+    /**
+     * Read Group Roles */
+    ReadGroupRoles: "read:group_roles",
+    /**
+     * Delete Group Roles */
+    DeleteGroupRoles: "delete:group_roles",
     /**
      * Read Groups */
     ReadGroups: "read:groups",
@@ -414,6 +423,18 @@ exports.OauthScope = {
     /**
      * Delete Organization Discovery Domains */
     DeleteOrganizationDiscoveryDomains: "delete:organization_discovery_domains",
+    /**
+     * Create Organization Group Roles */
+    CreateOrganizationGroupRoles: "create:organization_group_roles",
+    /**
+     * Read Organization Group Roles */
+    ReadOrganizationGroupRoles: "read:organization_group_roles",
+    /**
+     * Delete Organization Group Roles */
+    DeleteOrganizationGroupRoles: "delete:organization_group_roles",
+    /**
+     * Read Organization Groups */
+    ReadOrganizationGroups: "read:organization_groups",
     /**
      * Create Organization Invitations */
     CreateOrganizationInvitations: "create:organization_invitations",
@@ -423,6 +444,12 @@ exports.OauthScope = {
     /**
      * Delete Organization Invitations */
     DeleteOrganizationInvitations: "delete:organization_invitations",
+    /**
+     * Read Organization Member Effective Roles */
+    ReadOrganizationMemberEffectiveRoles: "read:organization_member_effective_roles",
+    /**
+     * Read Organization Member Role Source Groups */
+    ReadOrganizationMemberRoleSourceGroups: "read:organization_member_role_source_groups",
     /**
      * Create Organization Member Roles */
     CreateOrganizationMemberRoles: "create:organization_member_roles",
@@ -486,6 +513,18 @@ exports.OauthScope = {
     /**
      * Update Prompts */
     UpdatePrompts: "update:prompts",
+    /**
+     * Create Rate Limit Policies */
+    CreateRateLimitPolicies: "create:rate_limit_policies",
+    /**
+     * Read Rate Limit Policies */
+    ReadRateLimitPolicies: "read:rate_limit_policies",
+    /**
+     * Update Rate Limit Policies */
+    UpdateRateLimitPolicies: "update:rate_limit_policies",
+    /**
+     * Delete Rate Limit Policies */
+    DeleteRateLimitPolicies: "delete:rate_limit_policies",
     /**
      * Read Refresh Tokens */
     ReadRefreshTokens: "read:refresh_tokens",
@@ -645,9 +684,21 @@ exports.OauthScope = {
     /**
      * Delete User Attribute Profiles */
     DeleteUserAttributeProfiles: "delete:user_attribute_profiles",
+    /**
+     * Read User Effective Permissions */
+    ReadUserEffectivePermissions: "read:user_effective_permissions",
+    /**
+     * Read User Effective Roles */
+    ReadUserEffectiveRoles: "read:user_effective_roles",
     /**
      * Read User Idp Tokens */
     ReadUserIdpTokens: "read:user_idp_tokens",
+    /**
+     * Read User Permission Source Roles */
+    ReadUserPermissionSourceRoles: "read:user_permission_source_roles",
+    /**
+     * Read User Role Source Groups */
+    ReadUserRoleSourceGroups: "read:user_role_source_groups",
     /**
      * Create User Tickets */
     CreateUserTickets: "create:user_tickets",
@@ -991,9 +1042,10 @@ exports.ClientExternalMetadataCreatedByEnum = {
     Admin: "admin",
     Client: "client",
 };
-/** Indicates the type of external metadata used to register the client. This field is omitted for regular clients. The value <code>cimd</code> identifies clients registered via a Client ID Metadata Document. */
+/** Indicates the type of external metadata used to register the client. This field is omitted for regular clients. The value <code>cimd</code> identifies clients registered via a Client ID Metadata Document. The value <code>dcr</code> identifies clients registered via Dynamic Client Registration. */
 exports.ClientExternalMetadataTypeEnum = {
     Cimd: "cimd",
+    Dcr: "dcr",
 };
 /** Applies this client grant as the default for all clients in the specified group. The only accepted value is <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants#default-permissions-for-third-party-applications">`third_party_clients`</a>, which applies the grant to all third-party clients. Per-client grants for the same audience take precedence. Mutually exclusive with `client_id`. */
 exports.ClientGrantDefaultForEnum = {
@@ -1147,6 +1199,8 @@ exports.ConnectionDigestAlgorithmEnumSaml = {
 /** Algorithm used for DPoP proof JWT signing. */
 exports.ConnectionDpopSigningAlgEnum = {
     Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
     Ed25519: "Ed25519",
 };
 var ConnectionEmailEmail;
@@ -4252,6 +4306,10 @@ exports.OrganizationDiscoveryDomainStatus = {
     Pending: "pending",
     Verified: "verified",
 };
+exports.OrganizationMemberEffectiveRoleSource = {
+    Direct: "direct",
+    Groups: "groups",
+};
 /** Defines whether organizations can be used with client credentials exchanges for this grant. */
 exports.OrganizationUsageEnum = {
     Deny: "deny",
@@ -4471,6 +4529,14 @@ exports.PublicKeyCredentialAlgorithmEnum = {
 exports.PublicKeyCredentialTypeEnum = {
     PublicKey: "public_key",
 };
+/** The consumer to which the rate limit policy applies. */
+exports.RateLimitPolicyConsumerEnum = {
+    Client: "client",
+};
+/** The API protected by the Rate Limit Policy. */
+exports.RateLimitPolicyResourceEnum = {
+    OauthAuthenticationApi: "oauth_authentication_api",
+};
 /** Refresh token expiration types, one of: expiring, non-expiring */
 exports.RefreshTokenExpirationTypeEnum = {
     Expiring: "expiring",
@@ -4797,6 +4863,16 @@ exports.SynchronizeGroupsEnum = {
     Off: "off",
     Selected: "selected",
 };
+/** Whether the list is an allowlist or denylist. */
+exports.TenantSettingsCountryCodesMode = {
+    Allow: "allow",
+    Deny: "deny",
+};
+/** Whether the list is an allowlist or denylist. */
+exports.TenantSettingsCountryCodesModeResponse = {
+    Allow: "allow",
+    Deny: "deny",
+};
 /** Character set used to generate a User Code. Can be `base20` or `digits`. */
 exports.TenantSettingsDeviceFlowCharset = {
     Base20: "base20",
@@ -4953,6 +5029,20 @@ exports.UserAuthenticationMethodPropertiesEnum = {
     Sms: "sms",
     Voice: "voice",
 };
+/** The source type of a user effective permission roles. */
+exports.UserEffectivePermissionRoleSourceEnum = {
+    Direct: "direct",
+    Groups: "groups",
+};
+/** The source type of a user effective permission. */
+exports.UserEffectivePermissionSourceEnum = {
+    Direct: "direct",
+    Roles: "roles",
+};
+exports.UserEffectiveRoleSource = {
+    Direct: "direct",
+    Groups: "groups",
+};
 /** Authentication method for this enrollment. Can be `authenticator`, `guardian`, `sms`, `webauthn-roaming`, or `webauthn-platform`. */
 exports.UserEnrollmentAuthMethodEnum = {
     Authenticator: "authenticator",

package/dist/cjs/management/core/auth/AuthProvider.d.ts

@@ -5,3 +5,4 @@ export interface AuthProvider {
         endpointMetadata?: EndpointMetadata;
     }): Promise<AuthRequest>;
 }
+export declare function isAuthProvider(value: unknown): value is AuthProvider;

package/dist/cjs/management/core/auth/AuthProvider.js

@@ -1,2 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAuthProvider = isAuthProvider;
+function isAuthProvider(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        "getAuthRequest" in value &&
+        typeof value.getAuthRequest === "function");
+}

package/dist/cjs/management/core/auth/index.d.ts

@@ -1,4 +1,4 @@
-export type { AuthProvider } from "./AuthProvider.js";
+export { type AuthProvider, isAuthProvider } from "./AuthProvider.js";
 export type { AuthRequest } from "./AuthRequest.js";
 export { BasicAuth } from "./BasicAuth.js";
 export { BearerToken } from "./BearerToken.js";

package/dist/cjs/management/core/auth/index.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NoOpAuthProvider = exports.BearerToken = exports.BasicAuth = void 0;
+exports.NoOpAuthProvider = exports.BearerToken = exports.BasicAuth = exports.isAuthProvider = void 0;
+var AuthProvider_js_1 = require("./AuthProvider.js");
+Object.defineProperty(exports, "isAuthProvider", { enumerable: true, get: function () { return AuthProvider_js_1.isAuthProvider; } });
 var BasicAuth_js_1 = require("./BasicAuth.js");
 Object.defineProperty(exports, "BasicAuth", { enumerable: true, get: function () { return BasicAuth_js_1.BasicAuth; } });
 var BearerToken_js_1 = require("./BearerToken.js");

package/dist/cjs/management/core/fetcher/requestWithRetries.js

@@ -14,6 +14,9 @@ const INITIAL_RETRY_DELAY = 1000; // in milliseconds
 const MAX_RETRY_DELAY = 60000; // in milliseconds
 const DEFAULT_MAX_RETRIES = 2;
 const JITTER_FACTOR = 0.2; // 20% random jitter
+function isRetryableStatusCode(statusCode) {
+    return [408, 429].includes(statusCode) || statusCode >= 500;
+}
 function addPositiveJitter(delay) {
     const jitterMultiplier = 1 + Math.random() * JITTER_FACTOR;
     return delay * jitterMultiplier;
@@ -53,7 +56,7 @@ function requestWithRetries(requestFn_1) {
     return __awaiter(this, arguments, void 0, function* (requestFn, maxRetries = DEFAULT_MAX_RETRIES) {
         let response = yield requestFn();
         for (let i = 0; i < maxRetries; ++i) {
-            if ([408, 429].includes(response.status) || response.status >= 500) {
+            if (isRetryableStatusCode(response.status)) {
                 const delay = getRetryDelayFromHeaders(response, i);
                 yield new Promise((resolve) => setTimeout(resolve, delay));
                 response = yield requestFn();

package/dist/cjs/management/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "5.10.0";
+export declare const SDK_VERSION = "5.11.0";

package/dist/cjs/management/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = "5.10.0";
+exports.SDK_VERSION = "5.11.0";

package/dist/esm/management/BaseClient.d.mts

@@ -1,6 +1,7 @@
 import { BearerAuthProvider } from "./auth/BearerAuthProvider.mjs";
 import * as core from "./core/index.mjs";
 import * as environments from "./environments.mjs";
+export type AuthOption = false | core.AuthProvider["getAuthRequest"] | core.AuthProvider | BearerAuthProvider.AuthOptions;
 export type BaseClientOptions = {
     environment?: core.Supplier<environments.ManagementEnvironment | string>;
     /** Specify a custom URL to connect the client to. */
@@ -16,6 +17,8 @@ export type BaseClientOptions = {
     fetcher?: core.FetchFunction;
     /** Configure logging for the client. */
     logging?: core.logging.LogConfig | core.logging.Logger;
+    /** Override auth. Pass false to disable, a function returning auth headers, an AuthProvider, or auth options. */
+    auth?: AuthOption;
 } & BearerAuthProvider.AuthOptions;
 export interface BaseRequestOptions {
     /** The maximum time to wait for a response in seconds. */

package/dist/esm/management/BaseClient.mjs

@@ -7,6 +7,21 @@ export function normalizeClientOptions(options) {
 export function normalizeClientOptionsWithAuth(options) {
     var _a;
     const normalized = normalizeClientOptions(options);
+    if (options.auth === false) {
+        normalized.authProvider = new core.NoOpAuthProvider();
+        return normalized;
+    }
+    if (options.auth != null) {
+        if (typeof options.auth === "function") {
+            normalized.authProvider = { getAuthRequest: options.auth };
+            return normalized;
+        }
+        if (core.isAuthProvider(options.auth)) {
+            normalized.authProvider = options.auth;
+            return normalized;
+        }
+        Object.assign(normalized, options.auth);
+    }
     const normalizedWithNoOpAuthProvider = withNoOpAuthProvider(normalized);
     (_a = normalized.authProvider) !== null && _a !== void 0 ? _a : (normalized.authProvider = new BearerAuthProvider(normalizedWithNoOpAuthProvider));
     return normalized;

package/dist/esm/management/Client.d.mts

@@ -24,6 +24,7 @@ import { LogStreamsClient } from "./api/resources/logStreams/client/Client.mjs";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.mjs";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.mjs";
 import { PromptsClient } from "./api/resources/prompts/client/Client.mjs";
+import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.mjs";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.mjs";
 import { ResourceServersClient } from "./api/resources/resourceServers/client/Client.mjs";
 import { RiskAssessmentsClient } from "./api/resources/riskAssessments/client/Client.mjs";
@@ -74,6 +75,7 @@ export declare class ManagementClient {
     protected _networkAcls: NetworkAclsClient | undefined;
     protected _organizations: OrganizationsClient | undefined;
     protected _prompts: PromptsClient | undefined;
+    protected _rateLimitPolicies: RateLimitPoliciesClient | undefined;
     protected _refreshTokens: RefreshTokensClient | undefined;
     protected _resourceServers: ResourceServersClient | undefined;
     protected _roles: RolesClient | undefined;
@@ -119,6 +121,7 @@ export declare class ManagementClient {
     get networkAcls(): NetworkAclsClient;
     get organizations(): OrganizationsClient;
     get prompts(): PromptsClient;
+    get rateLimitPolicies(): RateLimitPoliciesClient;
     get refreshTokens(): RefreshTokensClient;
     get resourceServers(): ResourceServersClient;
     get roles(): RolesClient;

package/dist/esm/management/Client.mjs

@@ -34,6 +34,7 @@ import { LogStreamsClient } from "./api/resources/logStreams/client/Client.mjs";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.mjs";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.mjs";
 import { PromptsClient } from "./api/resources/prompts/client/Client.mjs";
+import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.mjs";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.mjs";
 import { ResourceServersClient } from "./api/resources/resourceServers/client/Client.mjs";
 import { RiskAssessmentsClient } from "./api/resources/riskAssessments/client/Client.mjs";
@@ -146,6 +147,10 @@ export class ManagementClient {
         var _a;
         return ((_a = this._prompts) !== null && _a !== void 0 ? _a : (this._prompts = new PromptsClient(this._options)));
     }
+    get rateLimitPolicies() {
+        var _a;
+        return ((_a = this._rateLimitPolicies) !== null && _a !== void 0 ? _a : (this._rateLimitPolicies = new RateLimitPoliciesClient(this._options)));
+    }
     get refreshTokens() {
         var _a;
         return ((_a = this._refreshTokens) !== null && _a !== void 0 ? _a : (this._refreshTokens = new RefreshTokensClient(this._options)));