auth0 5.10.0 → 5.12.0

package/dist/esm/management/api/types/types.mjs

@@ -297,6 +297,15 @@ export const OauthScope = {
     /**
      * Read Group Members */
     ReadGroupMembers: "read:group_members",
+    /**
+     * Create Group Roles */
+    CreateGroupRoles: "create:group_roles",
+    /**
+     * Read Group Roles */
+    ReadGroupRoles: "read:group_roles",
+    /**
+     * Delete Group Roles */
+    DeleteGroupRoles: "delete:group_roles",
     /**
      * Read Groups */
     ReadGroups: "read:groups",
@@ -399,6 +408,18 @@ export const OauthScope = {
     /**
      * Delete Organization Discovery Domains */
     DeleteOrganizationDiscoveryDomains: "delete:organization_discovery_domains",
+    /**
+     * Create Organization Group Roles */
+    CreateOrganizationGroupRoles: "create:organization_group_roles",
+    /**
+     * Read Organization Group Roles */
+    ReadOrganizationGroupRoles: "read:organization_group_roles",
+    /**
+     * Delete Organization Group Roles */
+    DeleteOrganizationGroupRoles: "delete:organization_group_roles",
+    /**
+     * Read Organization Groups */
+    ReadOrganizationGroups: "read:organization_groups",
     /**
      * Create Organization Invitations */
     CreateOrganizationInvitations: "create:organization_invitations",
@@ -408,6 +429,12 @@ export const OauthScope = {
     /**
      * Delete Organization Invitations */
     DeleteOrganizationInvitations: "delete:organization_invitations",
+    /**
+     * Read Organization Member Effective Roles */
+    ReadOrganizationMemberEffectiveRoles: "read:organization_member_effective_roles",
+    /**
+     * Read Organization Member Role Source Groups */
+    ReadOrganizationMemberRoleSourceGroups: "read:organization_member_role_source_groups",
     /**
      * Create Organization Member Roles */
     CreateOrganizationMemberRoles: "create:organization_member_roles",
@@ -471,6 +498,18 @@ export const OauthScope = {
     /**
      * Update Prompts */
     UpdatePrompts: "update:prompts",
+    /**
+     * Create Rate Limit Policies */
+    CreateRateLimitPolicies: "create:rate_limit_policies",
+    /**
+     * Read Rate Limit Policies */
+    ReadRateLimitPolicies: "read:rate_limit_policies",
+    /**
+     * Update Rate Limit Policies */
+    UpdateRateLimitPolicies: "update:rate_limit_policies",
+    /**
+     * Delete Rate Limit Policies */
+    DeleteRateLimitPolicies: "delete:rate_limit_policies",
     /**
      * Read Refresh Tokens */
     ReadRefreshTokens: "read:refresh_tokens",
@@ -630,9 +669,21 @@ export const OauthScope = {
     /**
      * Delete User Attribute Profiles */
     DeleteUserAttributeProfiles: "delete:user_attribute_profiles",
+    /**
+     * Read User Effective Permissions */
+    ReadUserEffectivePermissions: "read:user_effective_permissions",
+    /**
+     * Read User Effective Roles */
+    ReadUserEffectiveRoles: "read:user_effective_roles",
     /**
      * Read User Idp Tokens */
     ReadUserIdpTokens: "read:user_idp_tokens",
+    /**
+     * Read User Permission Source Roles */
+    ReadUserPermissionSourceRoles: "read:user_permission_source_roles",
+    /**
+     * Read User Role Source Groups */
+    ReadUserRoleSourceGroups: "read:user_role_source_groups",
     /**
      * Create User Tickets */
     CreateUserTickets: "create:user_tickets",
@@ -738,6 +789,7 @@ export const AculContextEnum = {
     UntrustedDataAuthorizationParamsUiLocales: "untrusted_data.authorization_params.ui_locales",
     UserOrganizations: "user.organizations",
     TransactionCustomDomainDomain: "transaction.custom_domain.domain",
+    Experiment: "experiment",
 };
 /** Type of match to apply */
 export const AculMatchTypeEnum = {
@@ -815,22 +867,6 @@ export const BotDetectionLevelEnum = {
     Medium: "medium",
     High: "high",
 };
-/** Controls identifier input presentation on the login flow. Defaults to "unified" for legacy tenants, "separate" for tenants created post-GA of this feature. */
-export const BrandingLoginDisplayEnum = {
-    Unified: "unified",
-    Separate: "separate",
-};
-/** Controls the format used when displaying phone numbers. */
-export const BrandingPhoneFormattingEnum = {
-    Regional: "regional",
-    International: "international",
-};
-/** Controls how phone numbers are masked when displayed back to users. */
-export const BrandingPhoneMaskingEnum = {
-    ShowAll: "show_all",
-    HideCountryCode: "hide_country_code",
-    MaskDigits: "mask_digits",
-};
 /** Buttons style */
 export const BrandingThemeBordersButtonsStyleEnum = {
     Pill: "pill",
@@ -976,9 +1012,10 @@ export const ClientExternalMetadataCreatedByEnum = {
     Admin: "admin",
     Client: "client",
 };
-/** Indicates the type of external metadata used to register the client. This field is omitted for regular clients. The value <code>cimd</code> identifies clients registered via a Client ID Metadata Document. */
+/** Indicates the type of external metadata used to register the client. This field is omitted for regular clients. The value <code>cimd</code> identifies clients registered via a Client ID Metadata Document. The value <code>dcr</code> identifies clients registered via Dynamic Client Registration. */
 export const ClientExternalMetadataTypeEnum = {
     Cimd: "cimd",
+    Dcr: "dcr",
 };
 /** Applies this client grant as the default for all clients in the specified group. The only accepted value is <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants#default-permissions-for-third-party-applications">`third_party_clients`</a>, which applies the grant to all third-party clients. Per-client grants for the same audience take precedence. Mutually exclusive with `client_id`. */
 export const ClientGrantDefaultForEnum = {
@@ -1132,6 +1169,8 @@ export const ConnectionDigestAlgorithmEnumSaml = {
 /** Algorithm used for DPoP proof JWT signing. */
 export const ConnectionDpopSigningAlgEnum = {
     Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
     Ed25519: "Ed25519",
 };
 export var ConnectionEmailEmail;
@@ -2106,6 +2145,15 @@ export const CredentialDeviceTypeEnum = {
     SingleDevice: "single_device",
     MultiDevice: "multi_device",
 };
+export const CspFlag = {
+    UpgradeInsecureRequests: "upgrade-insecure-requests",
+    BlockAllMixedContent: "block-all-mixed-content",
+};
+/** Policy mode: enforcing or reporting. */
+export const CspPolicyMode = {
+    Enforcing: "enforcing",
+    Reporting: "reporting",
+};
 /** The HTTP header to fetch the client's IP address */
 export const CustomDomainCustomClientIpHeaderEnum = {
     TrueClientIp: "true-client-ip",
@@ -4237,6 +4285,10 @@ export const OrganizationDiscoveryDomainStatus = {
     Pending: "pending",
     Verified: "verified",
 };
+export const OrganizationMemberEffectiveRoleSource = {
+    Direct: "direct",
+    Groups: "groups",
+};
 /** Defines whether organizations can be used with client credentials exchanges for this grant. */
 export const OrganizationUsageEnum = {
     Deny: "deny",
@@ -4360,6 +4412,7 @@ export const PromptGroupNameEnum = {
     Captcha: "captcha",
     BruteForceProtection: "brute-force-protection",
     AsyncApprovalFlow: "async-approval-flow",
+    Confirmation: "confirmation",
 };
 /** Language to update. */
 export const PromptLanguageEnum = {
@@ -4456,6 +4509,14 @@ export const PublicKeyCredentialAlgorithmEnum = {
 export const PublicKeyCredentialTypeEnum = {
     PublicKey: "public_key",
 };
+/** The consumer to which the rate limit policy applies. */
+export const RateLimitPolicyConsumerEnum = {
+    Client: "client",
+};
+/** The API protected by the Rate Limit Policy. */
+export const RateLimitPolicyResourceEnum = {
+    OauthAuthenticationApi: "oauth_authentication_api",
+};
 /** Refresh token expiration types, one of: expiring, non-expiring */
 export const RefreshTokenExpirationTypeEnum = {
     Expiring: "expiring",
@@ -4614,6 +4675,7 @@ export const ScreenGroupNameEnum = {
     AsyncApprovalError: "async-approval-error",
     AsyncApprovalAccepted: "async-approval-accepted",
     AsyncApprovalDenied: "async-approval-denied",
+    Confirmation: "confirmation",
     AsyncApprovalWrongUser: "async-approval-wrong-user",
 };
 /** The version of the search engine */
@@ -4782,6 +4844,16 @@ export const SynchronizeGroupsEnum = {
     Off: "off",
     Selected: "selected",
 };
+/** Whether the list is an allowlist or denylist. */
+export const TenantSettingsCountryCodesMode = {
+    Allow: "allow",
+    Deny: "deny",
+};
+/** Whether the list is an allowlist or denylist. */
+export const TenantSettingsCountryCodesModeResponse = {
+    Allow: "allow",
+    Deny: "deny",
+};
 /** Character set used to generate a User Code. Can be `base20` or `digits`. */
 export const TenantSettingsDeviceFlowCharset = {
     Base20: "base20",
@@ -4906,22 +4978,6 @@ export const UniversalLoginExperienceEnum = {
     New: "new",
     Classic: "classic",
 };
-/** Controls identifier input presentation on the login flow. Defaults to "unified" for legacy tenants, "separate" for tenants created post-GA of this feature. */
-export const UpdateBrandingLoginDisplayEnum = {
-    Unified: "unified",
-    Separate: "separate",
-};
-/** Controls the format used when displaying phone numbers. */
-export const UpdateBrandingPhoneFormattingEnum = {
-    Regional: "regional",
-    International: "international",
-};
-/** Controls how phone numbers are masked when displayed back to users. */
-export const UpdateBrandingPhoneMaskingEnum = {
-    ShowAll: "show_all",
-    HideCountryCode: "hide_country_code",
-    MaskDigits: "mask_digits",
-};
 /** OIDC mapping for user ID */
 export const UserAttributeProfileUserIdOidcMappingEnum = {
     Sub: "sub",
@@ -4938,6 +4994,20 @@ export const UserAuthenticationMethodPropertiesEnum = {
     Sms: "sms",
     Voice: "voice",
 };
+/** The source type of a user effective permission roles. */
+export const UserEffectivePermissionRoleSourceEnum = {
+    Direct: "direct",
+    Groups: "groups",
+};
+/** The source type of a user effective permission. */
+export const UserEffectivePermissionSourceEnum = {
+    Direct: "direct",
+    Roles: "roles",
+};
+export const UserEffectiveRoleSource = {
+    Direct: "direct",
+    Groups: "groups",
+};
 /** Authentication method for this enrollment. Can be `authenticator`, `guardian`, `sms`, `webauthn-roaming`, or `webauthn-platform`. */
 export const UserEnrollmentAuthMethodEnum = {
     Authenticator: "authenticator",
@@ -5021,3 +5091,7 @@ export const VerificationMethodEnum = {
 export const X509CertificateCredentialTypeEnum = {
     X509Cert: "x509_cert",
 };
+/** X-XSS-Protection mode: block. */
+export const XssProtectionMode = {
+    Block: "block",
+};

package/dist/esm/management/core/auth/AuthProvider.d.mts

@@ -5,3 +5,4 @@ export interface AuthProvider {
         endpointMetadata?: EndpointMetadata;
     }): Promise<AuthRequest>;
 }
+export declare function isAuthProvider(value: unknown): value is AuthProvider;

package/dist/esm/management/core/auth/AuthProvider.mjs

@@ -1 +1,6 @@
-export {};
+export function isAuthProvider(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        "getAuthRequest" in value &&
+        typeof value.getAuthRequest === "function");
+}

package/dist/esm/management/core/auth/index.d.mts

@@ -1,4 +1,4 @@
-export type { AuthProvider } from "./AuthProvider.mjs";
+export { type AuthProvider, isAuthProvider } from "./AuthProvider.mjs";
 export type { AuthRequest } from "./AuthRequest.mjs";
 export { BasicAuth } from "./BasicAuth.mjs";
 export { BearerToken } from "./BearerToken.mjs";

package/dist/esm/management/core/auth/index.mjs

@@ -1,3 +1,4 @@
+export { isAuthProvider } from "./AuthProvider.mjs";
 export { BasicAuth } from "./BasicAuth.mjs";
 export { BearerToken } from "./BearerToken.mjs";
 export { NoOpAuthProvider } from "./NoOpAuthProvider.mjs";

package/dist/esm/management/core/fetcher/requestWithRetries.mjs

@@ -11,6 +11,9 @@ const INITIAL_RETRY_DELAY = 1000; // in milliseconds
 const MAX_RETRY_DELAY = 60000; // in milliseconds
 const DEFAULT_MAX_RETRIES = 2;
 const JITTER_FACTOR = 0.2; // 20% random jitter
+function isRetryableStatusCode(statusCode) {
+    return [408, 429].includes(statusCode) || statusCode >= 500;
+}
 function addPositiveJitter(delay) {
     const jitterMultiplier = 1 + Math.random() * JITTER_FACTOR;
     return delay * jitterMultiplier;
@@ -50,7 +53,7 @@ export function requestWithRetries(requestFn_1) {
     return __awaiter(this, arguments, void 0, function* (requestFn, maxRetries = DEFAULT_MAX_RETRIES) {
         let response = yield requestFn();
         for (let i = 0; i < maxRetries; ++i) {
-            if ([408, 429].includes(response.status) || response.status >= 500) {
+            if (isRetryableStatusCode(response.status)) {
                 const delay = getRetryDelayFromHeaders(response, i);
                 yield new Promise((resolve) => setTimeout(resolve, delay));
                 response = yield requestFn();

package/dist/esm/management/version.d.mts

@@ -1 +1 @@
-export declare const SDK_VERSION = "5.10.0";
+export declare const SDK_VERSION = "5.12.0";

package/dist/esm/management/version.mjs

@@ -1 +1 @@
-export const SDK_VERSION = "5.10.0";
+export const SDK_VERSION = "5.12.0";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth0",
-    "version": "5.10.0",
+    "version": "5.12.0",
     "private": false,
     "repository": {
         "type": "git",
@@ -73,7 +73,7 @@
     "dependencies": {
         "uuid": "^11.1.1",
         "jose": "^4.13.2",
-        "auth0-legacy": "npm:auth0@^4.27.0"
+        "auth0-legacy": "npm:auth0@^4.37.1"
     },
     "devDependencies": {
         "webpack": "^5.105.4",
@@ -84,7 +84,7 @@
         "ts-jest": "^29.3.4",
         "jest-environment-jsdom": "^29.7.0",
         "msw": "2.11.2",
-        "@types/node": "^18.19.70",
+        "@types/node": "^20.0.0",
         "typescript": "~5.9.3",
         "prettier": "3.8.1",
         "typedoc": "^0.28.7",