auth0 5.10.0 → 5.12.0

package/dist/esm/management/api/resources/clientGrants/client/Client.mjs

@@ -25,7 +25,7 @@ export class ClientGrantsClient {
         return ((_a = this._organizations) !== null && _a !== void 0 ? _a : (this._organizations = new OrganizationsClient(this._options)));
     }
     /**
-     * Retrieve a list of <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants">client grants</a>, including the scopes associated with the application/API pair.
+     * Retrieve a list of [client grants](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the scopes associated with the application/API pair.
      *
      * @param {Management.ListClientGrantsRequestParameters} request
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -113,7 +113,7 @@ export class ClientGrantsClient {
         });
     }
     /**
-     * Create a client grant for a machine-to-machine login flow. To learn more, read <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a>.
+     * Create a client grant for a machine-to-machine login flow. To learn more, read [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow).
      *
      * @param {Management.CreateClientGrantRequestContent} request
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -184,7 +184,7 @@ export class ClientGrantsClient {
         });
     }
     /**
-     * Retrieve a single <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants">client grant</a>, including the
+     * Retrieve a single [client grant](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the
      * scopes associated with the application/API pair.
      *
      * @param {string} id - The ID of the client grant to retrieve.
@@ -245,7 +245,7 @@ export class ClientGrantsClient {
         });
     }
     /**
-     * Delete the <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a> from your machine-to-machine application.
+     * Delete the [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow) from your machine-to-machine application.
      *
      * @param {string} id - ID of the client grant to delete.
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/esm/management/api/resources/clientGrants/resources/organizations/client/Client.d.mts

@@ -18,6 +18,7 @@ export declare class OrganizationsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example

package/dist/esm/management/api/resources/clientGrants/resources/organizations/client/Client.mjs

@@ -27,6 +27,7 @@ export class OrganizationsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -75,6 +76,8 @@ export class OrganizationsClient {
                             throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                         case 403:
                             throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                         case 429:
                             throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                         default:

package/dist/esm/management/api/resources/clients/client/Client.d.mts

@@ -18,38 +18,30 @@ export declare class ClientsClient {
     get connections(): ConnectionsClient;
     /**
      * Retrieve clients (applications and SSO integrations) matching provided filters. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     *
-     * <ul>
-     *   <li>
-     *     The following can be retrieved with any scope:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scope:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the
-     *     <code>read:client_keys</code> or <code>read:client_credentials</code> scope:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following can be retrieved with any scope:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scope:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the
+     *     `read:client_keys` or `read:client_credentials` scope:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {Management.ListClientsRequestParameters} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -75,20 +67,20 @@ export declare class ClientsClient {
      */
     list(request?: Management.ListClientsRequestParameters, requestOptions?: ClientsClient.RequestOptions): Promise<core.Page<Management.Client, Management.ListClientsOffsetPaginatedResponseContent>>;
     /**
-     * Create a new client (application or SSO integration). For more information, read <a href="https://www.auth0.com/docs/get-started/auth0-overview/create-applications">Create Applications</a>
-     * <a href="https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on>">API Endpoints for Single Sign-On</a>.
+     * Create a new client (application or SSO integration). For more information, read [Create Applications](https://www.auth0.com/docs/get-started/auth0-overview/create-applications)
+     * [API Endpoints for Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on).
      *
      * Notes:
      * - We recommend leaving the `client_secret` parameter unspecified to allow the generation of a safe secret.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use
-     * <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code>
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use
+     * `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method`
      * to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, specify fully defined credentials.
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, specify fully defined credentials.
      * These credentials will be automatically enabled for Private Key JWT authentication on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>create:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
+     * - To configure `client_authentication_methods`, the `create:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
      *
-     * <div class="alert alert-warning">SSO Integrations created via this endpoint will accept login requests and share user profile information.</div>
+     * SSO Integrations created via this endpoint will accept login requests and share user profile information.
      *
      * @param {Management.CreateClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -130,10 +122,17 @@ export declare class ClientsClient {
     previewCimdMetadata(request: Management.PreviewCimdMetadataRequestContent, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<Management.PreviewCimdMetadataResponseContent>;
     private __previewCimdMetadata;
     /**
+     * Idempotent registration for Client ID Metadata Document (CIMD) clients.
+     * Uses external_client_id as the unique identifier for upsert operations.
      *
-     *       Idempotent registration for Client ID Metadata Document (CIMD) clients.
-     *       Uses external_client_id as the unique identifier for upsert operations.
-     *       **Create:** Returns 201 when a new client is created (requires \
+     * **Create:** Returns 201 when a new client is created (requires `create:clients` scope).
+     * **Update:** Returns 200 when an existing client is updated (requires `update:clients` scope).
+     *
+     * This endpoint automatically:
+     * - Fetches and validates the metadata document
+     * - Maps CIMD fields to Auth0 client configuration
+     * - Creates/rotates credentials from the JWKS
+     * - Enforces CIMD security policies (HTTPS-only, no shared secrets)
      *
      * @param {Management.RegisterCimdClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -153,36 +152,29 @@ export declare class ClientsClient {
     private __registerCimdClient;
     /**
      * Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     * <ul>
-     *   <li>
-     *     The following properties can be retrieved with any of the scopes:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scopes:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:client_keys</code> or <code>read:client_credentials</code> scopes:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following properties can be retrieved with any of the scopes:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scopes:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the `read:client_keys` or `read:client_credentials` scopes:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {string} id - ID of the client to retrieve.
      * @param {Management.GetClientRequestParameters} request
@@ -219,15 +211,15 @@ export declare class ClientsClient {
     delete(id: string, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<void>;
     private __delete;
     /**
-     * Updates a client's settings. For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
+     * Updates a client's settings. For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
      *
      * Notes:
      * - The `client_secret` and `signing_key` attributes can only be updated with the `update:client_keys` scope.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code> to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>update:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
-     * - To change a client's <code>is_first_party</code> property to <code>false</code>, the <code>organization_usage</code> and <code>organization_require_behavior</code> properties must be unset.
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method` to configure the client with client secret (basic or post) or with no authentication method (none).
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
+     * - To configure `client_authentication_methods`, the `update:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
+     * - To change a client's `is_first_party` property to `false`, the `organization_usage` and `organization_require_behavior` properties must be unset.
      *
      * @param {string} id - ID of the client to update.
      * @param {Management.UpdateClientRequestContent} request
@@ -249,7 +241,7 @@ export declare class ClientsClient {
      *
      * This endpoint cannot be used with clients configured with Private Key JWT authentication method (client_authentication_methods configured with private_key_jwt). The generated secret is NOT base64 encoded.
      *
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications/rotate-client-secret">Rotate Client Secrets</a>.
+     * For more information, read [Rotate Client Secrets](https://www.auth0.com/docs/get-started/applications/rotate-client-secret).
      *
      * @param {string} id - ID of the client that will rotate secrets.
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/esm/management/api/resources/clients/client/Client.mjs

@@ -31,38 +31,30 @@ export class ClientsClient {
     }
     /**
      * Retrieve clients (applications and SSO integrations) matching provided filters. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     *
-     * <ul>
-     *   <li>
-     *     The following can be retrieved with any scope:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scope:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the
-     *     <code>read:client_keys</code> or <code>read:client_credentials</code> scope:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following can be retrieved with any scope:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scope:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the
+     *     `read:client_keys` or `read:client_credentials` scope:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {Management.ListClientsRequestParameters} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -161,20 +153,20 @@ export class ClientsClient {
         });
     }
     /**
-     * Create a new client (application or SSO integration). For more information, read <a href="https://www.auth0.com/docs/get-started/auth0-overview/create-applications">Create Applications</a>
-     * <a href="https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on>">API Endpoints for Single Sign-On</a>.
+     * Create a new client (application or SSO integration). For more information, read [Create Applications](https://www.auth0.com/docs/get-started/auth0-overview/create-applications)
+     * [API Endpoints for Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on).
      *
      * Notes:
      * - We recommend leaving the `client_secret` parameter unspecified to allow the generation of a safe secret.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use
-     * <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code>
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use
+     * `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method`
      * to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, specify fully defined credentials.
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, specify fully defined credentials.
      * These credentials will be automatically enabled for Private Key JWT authentication on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>create:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
+     * - To configure `client_authentication_methods`, the `create:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
      *
-     * <div class="alert alert-warning">SSO Integrations created via this endpoint will accept login requests and share user profile information.</div>
+     * SSO Integrations created via this endpoint will accept login requests and share user profile information.
      *
      * @param {Management.CreateClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -314,10 +306,17 @@ export class ClientsClient {
         });
     }
     /**
+     * Idempotent registration for Client ID Metadata Document (CIMD) clients.
+     * Uses external_client_id as the unique identifier for upsert operations.
      *
-     *       Idempotent registration for Client ID Metadata Document (CIMD) clients.
-     *       Uses external_client_id as the unique identifier for upsert operations.
-     *       **Create:** Returns 201 when a new client is created (requires \
+     * **Create:** Returns 201 when a new client is created (requires `create:clients` scope).
+     * **Update:** Returns 200 when an existing client is updated (requires `update:clients` scope).
+     *
+     * This endpoint automatically:
+     * - Fetches and validates the metadata document
+     * - Maps CIMD fields to Auth0 client configuration
+     * - Creates/rotates credentials from the JWKS
+     * - Enforces CIMD security policies (HTTPS-only, no shared secrets)
      *
      * @param {Management.RegisterCimdClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -386,36 +385,29 @@ export class ClientsClient {
     }
     /**
      * Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     * <ul>
-     *   <li>
-     *     The following properties can be retrieved with any of the scopes:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scopes:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:client_keys</code> or <code>read:client_credentials</code> scopes:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following properties can be retrieved with any of the scopes:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scopes:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the `read:client_keys` or `read:client_credentials` scopes:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {string} id - ID of the client to retrieve.
      * @param {Management.GetClientRequestParameters} request
@@ -545,15 +537,15 @@ export class ClientsClient {
         });
     }
     /**
-     * Updates a client's settings. For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
+     * Updates a client's settings. For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
      *
      * Notes:
      * - The `client_secret` and `signing_key` attributes can only be updated with the `update:client_keys` scope.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code> to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>update:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
-     * - To change a client's <code>is_first_party</code> property to <code>false</code>, the <code>organization_usage</code> and <code>organization_require_behavior</code> properties must be unset.
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method` to configure the client with client secret (basic or post) or with no authentication method (none).
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
+     * - To configure `client_authentication_methods`, the `update:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
+     * - To change a client's `is_first_party` property to `false`, the `organization_usage` and `organization_require_behavior` properties must be unset.
      *
      * @param {string} id - ID of the client to update.
      * @param {Management.UpdateClientRequestContent} request
@@ -624,7 +616,7 @@ export class ClientsClient {
      *
      * This endpoint cannot be used with clients configured with Private Key JWT authentication method (client_authentication_methods configured with private_key_jwt). The generated secret is NOT base64 encoded.
      *
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications/rotate-client-secret">Rotate Client Secrets</a>.
+     * For more information, read [Rotate Client Secrets](https://www.auth0.com/docs/get-started/applications/rotate-client-secret).
      *
      * @param {string} id - ID of the client that will rotate secrets.
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/esm/management/api/resources/clients/resources/connections/client/Client.d.mts

@@ -11,15 +11,10 @@ export declare class ConnectionsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<ConnectionsClient.Options>;
     constructor(options: ConnectionsClient.Options);
     /**
-     * Retrieve all connections that are enabled for the specified <a href="https://www.auth0.com/docs/get-started/applications"> Application</a>, using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
-     * <ul>
-     *   <li>
-     *     This endpoint requires the <code>read:connections</code> scope and any one of <code>read:clients</code> or <code>read:client_summary</code>.
-     *   </li>
-     *   <li>
-     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
-     *   </li>
-     * </ul>
+     * Retrieve all connections that are enabled for the specified [Application](https://www.auth0.com/docs/get-started/applications), using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
+     *
+     * - This endpoint requires the `read:connections` scope and any one of `read:clients` or `read:client_summary`.
+     * - **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
      *
      * @param {string} id - ID of the client for which to retrieve enabled connections.
      * @param {Management.ConnectionsGetRequest} request

package/dist/esm/management/api/resources/clients/resources/connections/client/Client.mjs

@@ -20,15 +20,10 @@ export class ConnectionsClient {
         this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
-     * Retrieve all connections that are enabled for the specified <a href="https://www.auth0.com/docs/get-started/applications"> Application</a>, using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
-     * <ul>
-     *   <li>
-     *     This endpoint requires the <code>read:connections</code> scope and any one of <code>read:clients</code> or <code>read:client_summary</code>.
-     *   </li>
-     *   <li>
-     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
-     *   </li>
-     * </ul>
+     * Retrieve all connections that are enabled for the specified [Application](https://www.auth0.com/docs/get-started/applications), using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
+     *
+     * - This endpoint requires the `read:connections` scope and any one of `read:clients` or `read:client_summary`.
+     * - **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
      *
      * @param {string} id - ID of the client for which to retrieve enabled connections.
      * @param {Management.ConnectionsGetRequest} request