auth0 5.11.0 → 5.12.0

package/dist/cjs/lib/retry.d.ts

@@ -10,11 +10,16 @@ export interface RetryConfiguration {
     enabled?: boolean;
     /**
      * Configure the max amount of retries the SDK should do.
-     * Defaults to 5.
+     * Defaults to 3.
+     * Note: this budget is shared between HTTP status code retries (e.g. 429) and
+     * transient network error retries (e.g. ECONNRESET). For example, with maxRetries: 3,
+     * 2 network retries and 1 status code retry would exhaust the full budget.
      */
     maxRetries?: number;
     /**
-     * Status Codes on which the SDK should trigger retries.
+     * HTTP Status Codes on which the SDK should trigger retries.
+     * Note: transient network errors (ECONNRESET, EPIPE, ECONNABORTED) are always retried
+     * up to maxRetries regardless of this setting. Use `enabled: false` to disable all retries.
      * Defaults to [429].
      */
     retryWhen?: number[];

package/dist/cjs/lib/retry.js

@@ -10,6 +10,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.retry = retry;
+const errors_js_1 = require("./errors.js");
 const MAX_REQUEST_RETRY_JITTER = 250;
 const MAX_REQUEST_RETRY_DELAY = 10000;
 const DEFAULT_NUMBER_RETRIES = 3;
@@ -38,6 +39,25 @@ function pause(delay) {
         return new Promise((resolve) => setTimeout(resolve, delay));
     });
 }
+// Transient network errors that are safe to retry — failures that can self-heal
+// without any config change (socket reset, broken pipe, aborted connection).
+// Deliberately excludes ENOTFOUND, ECONNREFUSED, cert errors — those won't self-heal.
+const RETRYABLE_ERROR_CODES = new Set(["ECONNRESET", "EPIPE", "ECONNABORTED"]);
+function isRetryableNetworkError(e) {
+    var _a, _b, _c;
+    if (typeof e !== "object" || e === null)
+        return false;
+    // Check both e.code (old request-lib / nock shape) and e.cause.code
+    // (native fetch / undici shape: TypeError: fetch failed { cause: { code } })
+    const err = e;
+    const code = (_c = (_a = err.code) !== null && _a !== void 0 ? _a : (_b = err.cause) === null || _b === void 0 ? void 0 : _b.code) !== null && _c !== void 0 ? _c : "";
+    return RETRYABLE_ERROR_CODES.has(code);
+}
+function calculateWait(nrOfTries) {
+    let wait = BASE_DELAY * Math.pow(2, nrOfTries - 1);
+    wait = getRandomInt(wait + 1, wait + MAX_REQUEST_RETRY_JITTER);
+    return Math.min(wait, MAX_REQUEST_RETRY_DELAY);
+}
 /**
  * @private
  * Function that retries the provided action callback for a configurable amount of time, defaults to 3.
@@ -47,13 +67,23 @@ function retry(action, { maxRetries, retryWhen }) {
     let nrOfTries = 0;
     const retryAndWait = () => __awaiter(this, void 0, void 0, function* () {
         let result;
-        result = yield action();
+        try {
+            result = yield action();
+        }
+        catch (e) {
+            if (e instanceof errors_js_1.TimeoutError) {
+                throw e;
+            }
+            if (isRetryableNetworkError(e) && nrOfTries < nrOfTriesToAttempt) {
+                nrOfTries++;
+                yield pause(calculateWait(nrOfTries));
+                return retryAndWait();
+            }
+            throw e;
+        }
         if ((retryWhen || [429]).includes(result.status) && nrOfTries < nrOfTriesToAttempt) {
             nrOfTries++;
-            let wait = BASE_DELAY * Math.pow(2, nrOfTries - 1);
-            wait = getRandomInt(wait + 1, wait + MAX_REQUEST_RETRY_JITTER);
-            wait = Math.min(wait, MAX_REQUEST_RETRY_DELAY);
-            yield pause(wait);
+            yield pause(calculateWait(nrOfTries));
             result = yield retryAndWait();
         }
         return result;

package/dist/cjs/management/api/requests/requests.d.ts

@@ -103,7 +103,6 @@ export interface UpdateBrandingRequestContent {
     favicon_url?: string | null;
     /** URL for the logo. Must use HTTPS. */
     logo_url?: string | null;
-    identifiers?: Management.UpdateBrandingIdentifiers | null;
     font?: Management.UpdateBrandingFont | null;
 }
 /**
@@ -1286,7 +1285,7 @@ export interface RevokeRefreshTokensRequestContent {
     ids?: string[];
     /** Revoke all refresh tokens for this user. */
     user_id?: string;
-    /** Revoke all refresh tokens for this client. */
+    /** Revoke refresh tokens for this client. Must be paired with `user_id`; optionally narrowed further with `audience`. */
     client_id?: string;
     /** Resource server identifier (audience) to scope the revocation. Must be used with both `user_id` and `client_id`. */
     audience?: string;
@@ -3648,12 +3647,20 @@ export interface UpdateTenantSettingsRequestContent {
     allowed_logout_urls?: string[];
     /** Number of hours a session will stay valid. */
     session_lifetime?: number;
+    /** Number of minutes a session will stay valid. Cannot be specified together with `session_lifetime`. */
+    session_lifetime_in_minutes?: number;
     /** Number of hours for which a session can be inactive before the user must log in again. */
     idle_session_lifetime?: number;
+    /** Number of minutes a session can be inactive before the user must log in again. Cannot be specified together with `idle_session_lifetime`. */
+    idle_session_lifetime_in_minutes?: number;
     /** Number of hours an ephemeral (non-persistent) session will stay valid. */
     ephemeral_session_lifetime?: number;
     /** Number of hours for which an ephemeral (non-persistent) session can be inactive before the user must log in again. */
     idle_ephemeral_session_lifetime?: number;
+    /** Number of minutes an ephemeral (non-persistent) session will stay valid. Cannot be specified together with `ephemeral_session_lifetime`. */
+    ephemeral_session_lifetime_in_minutes?: number;
+    /** Number of minutes an ephemeral (non-persistent) session can be inactive before the user must log in again. Cannot be specified together with `idle_ephemeral_session_lifetime`. */
+    idle_ephemeral_session_lifetime_in_minutes?: number;
     /** Selected sandbox version for the extensibility environment */
     sandbox_version?: string;
     /** Selected legacy sandbox version for the extensibility environment */
@@ -3662,6 +3669,7 @@ export interface UpdateTenantSettingsRequestContent {
     default_redirection_uri?: string;
     /** Supported locales for the user interface */
     enabled_locales?: Management.TenantSettingsSupportedLocalesEnum[];
+    security_headers?: Management.TenantSettingsNullableSecurityHeaders | null;
     session_cookie?: Management.SessionCookieSchema | null;
     sessions?: Management.TenantSettingsSessions | null;
     oidc_logout?: Management.TenantOidcLogoutSettings;
@@ -3689,6 +3697,8 @@ export interface UpdateTenantSettingsRequestContent {
     enable_ai_guide?: boolean;
     /** Whether Phone Consolidated Experience is enabled for this tenant. */
     phone_consolidated_experience?: boolean;
+    /** Whether session metadata is included in specific tenant logs (slo, oidc_backchannel_logout_failed, oidc_backchannel_logout_succeeded). */
+    include_session_metadata_in_tenant_logs?: boolean;
     dynamic_client_registration_security_mode?: Management.TenantSettingsDynamicClientRegistrationSecurityMode;
     country_codes?: Management.TenantSettingsCountryCodes | null;
 }

package/dist/cjs/management/api/resources/branding/resources/phone/resources/providers/client/Client.d.ts

@@ -11,7 +11,7 @@ export declare class ProvidersClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<ProvidersClient.Options>;
     constructor(options: ProvidersClient.Options);
     /**
-     * Retrieve a list of <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone providers</a> details set for a Tenant. A list of fields to include or exclude may also be specified.
+     * Retrieve a list of [phone providers](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details set for a Tenant. A list of fields to include or exclude may also be specified.
      *
      * @param {Management.ListBrandingPhoneProvidersRequestParameters} request
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -29,8 +29,8 @@ export declare class ProvidersClient {
     list(request?: Management.ListBrandingPhoneProvidersRequestParameters, requestOptions?: ProvidersClient.RequestOptions): core.HttpResponsePromise<Management.ListBrandingPhoneProvidersResponseContent>;
     private __list;
     /**
-     * Create a <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a>.
-     * The <code>credentials</code> object requires different properties depending on the phone provider (which is specified using the <code>name</code> property).
+     * Create a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+     * The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
      *
      * @param {Management.CreateBrandingPhoneProviderRequestContent} request
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -52,7 +52,7 @@ export declare class ProvidersClient {
     create(request: Management.CreateBrandingPhoneProviderRequestContent, requestOptions?: ProvidersClient.RequestOptions): core.HttpResponsePromise<Management.CreateBrandingPhoneProviderResponseContent>;
     private __create;
     /**
-     * Retrieve <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a> details. A list of fields to include or exclude may also be specified.
+     * Retrieve [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details. A list of fields to include or exclude may also be specified.
      *
      * @param {string} id
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -85,8 +85,8 @@ export declare class ProvidersClient {
     delete(id: string, requestOptions?: ProvidersClient.RequestOptions): core.HttpResponsePromise<void>;
     private __delete;
     /**
-     * Update a <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a>.
-     * The <code>credentials</code> object requires different properties depending on the phone provider (which is specified using the <code>name</code> property).
+     * Update a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+     * The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
      *
      * @param {string} id
      * @param {Management.UpdateBrandingPhoneProviderRequestContent} request

package/dist/cjs/management/api/resources/branding/resources/phone/resources/providers/client/Client.js

@@ -56,7 +56,7 @@ class ProvidersClient {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
     }
     /**
-     * Retrieve a list of <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone providers</a> details set for a Tenant. A list of fields to include or exclude may also be specified.
+     * Retrieve a list of [phone providers](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details set for a Tenant. A list of fields to include or exclude may also be specified.
      *
      * @param {Management.ListBrandingPhoneProvidersRequestParameters} request
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -126,8 +126,8 @@ class ProvidersClient {
         });
     }
     /**
-     * Create a <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a>.
-     * The <code>credentials</code> object requires different properties depending on the phone provider (which is specified using the <code>name</code> property).
+     * Create a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+     * The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
      *
      * @param {Management.CreateBrandingPhoneProviderRequestContent} request
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -198,7 +198,7 @@ class ProvidersClient {
         });
     }
     /**
-     * Retrieve <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a> details. A list of fields to include or exclude may also be specified.
+     * Retrieve [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details. A list of fields to include or exclude may also be specified.
      *
      * @param {string} id
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -318,8 +318,8 @@ class ProvidersClient {
         });
     }
     /**
-     * Update a <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a>.
-     * The <code>credentials</code> object requires different properties depending on the phone provider (which is specified using the <code>name</code> property).
+     * Update a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+     * The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
      *
      * @param {string} id
      * @param {Management.UpdateBrandingPhoneProviderRequestContent} request

package/dist/cjs/management/api/resources/clientGrants/client/Client.d.ts

@@ -14,7 +14,7 @@ export declare class ClientGrantsClient {
     constructor(options: ClientGrantsClient.Options);
     get organizations(): OrganizationsClient;
     /**
-     * Retrieve a list of <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants">client grants</a>, including the scopes associated with the application/API pair.
+     * Retrieve a list of [client grants](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the scopes associated with the application/API pair.
      *
      * @param {Management.ListClientGrantsRequestParameters} request
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -36,7 +36,7 @@ export declare class ClientGrantsClient {
      */
     list(request?: Management.ListClientGrantsRequestParameters, requestOptions?: ClientGrantsClient.RequestOptions): Promise<core.Page<Management.ClientGrantResponseContent, Management.ListClientGrantPaginatedResponseContent>>;
     /**
-     * Create a client grant for a machine-to-machine login flow. To learn more, read <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a>.
+     * Create a client grant for a machine-to-machine login flow. To learn more, read [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow).
      *
      * @param {Management.CreateClientGrantRequestContent} request
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -56,7 +56,7 @@ export declare class ClientGrantsClient {
     create(request: Management.CreateClientGrantRequestContent, requestOptions?: ClientGrantsClient.RequestOptions): core.HttpResponsePromise<Management.CreateClientGrantResponseContent>;
     private __create;
     /**
-     * Retrieve a single <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants">client grant</a>, including the
+     * Retrieve a single [client grant](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the
      * scopes associated with the application/API pair.
      *
      * @param {string} id - The ID of the client grant to retrieve.
@@ -73,7 +73,7 @@ export declare class ClientGrantsClient {
     get(id: string, requestOptions?: ClientGrantsClient.RequestOptions): core.HttpResponsePromise<Management.GetClientGrantResponseContent>;
     private __get;
     /**
-     * Delete the <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a> from your machine-to-machine application.
+     * Delete the [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow) from your machine-to-machine application.
      *
      * @param {string} id - ID of the client grant to delete.
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/clientGrants/client/Client.js

@@ -61,7 +61,7 @@ class ClientGrantsClient {
         return ((_a = this._organizations) !== null && _a !== void 0 ? _a : (this._organizations = new Client_js_1.OrganizationsClient(this._options)));
     }
     /**
-     * Retrieve a list of <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants">client grants</a>, including the scopes associated with the application/API pair.
+     * Retrieve a list of [client grants](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the scopes associated with the application/API pair.
      *
      * @param {Management.ListClientGrantsRequestParameters} request
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -149,7 +149,7 @@ class ClientGrantsClient {
         });
     }
     /**
-     * Create a client grant for a machine-to-machine login flow. To learn more, read <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a>.
+     * Create a client grant for a machine-to-machine login flow. To learn more, read [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow).
      *
      * @param {Management.CreateClientGrantRequestContent} request
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -220,7 +220,7 @@ class ClientGrantsClient {
         });
     }
     /**
-     * Retrieve a single <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants">client grant</a>, including the
+     * Retrieve a single [client grant](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the
      * scopes associated with the application/API pair.
      *
      * @param {string} id - The ID of the client grant to retrieve.
@@ -281,7 +281,7 @@ class ClientGrantsClient {
         });
     }
     /**
-     * Delete the <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a> from your machine-to-machine application.
+     * Delete the [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow) from your machine-to-machine application.
      *
      * @param {string} id - ID of the client grant to delete.
      * @param {ClientGrantsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/clientGrants/resources/organizations/client/Client.d.ts

@@ -18,6 +18,7 @@ export declare class OrganizationsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example

package/dist/cjs/management/api/resources/clientGrants/resources/organizations/client/Client.js

@@ -63,6 +63,7 @@ class OrganizationsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -111,6 +112,8 @@ class OrganizationsClient {
                             throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                         case 403:
                             throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                         case 429:
                             throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                         default:

package/dist/cjs/management/api/resources/clients/client/Client.d.ts

@@ -18,38 +18,30 @@ export declare class ClientsClient {
     get connections(): ConnectionsClient;
     /**
      * Retrieve clients (applications and SSO integrations) matching provided filters. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     *
-     * <ul>
-     *   <li>
-     *     The following can be retrieved with any scope:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scope:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the
-     *     <code>read:client_keys</code> or <code>read:client_credentials</code> scope:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following can be retrieved with any scope:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scope:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the
+     *     `read:client_keys` or `read:client_credentials` scope:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {Management.ListClientsRequestParameters} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -75,20 +67,20 @@ export declare class ClientsClient {
      */
     list(request?: Management.ListClientsRequestParameters, requestOptions?: ClientsClient.RequestOptions): Promise<core.Page<Management.Client, Management.ListClientsOffsetPaginatedResponseContent>>;
     /**
-     * Create a new client (application or SSO integration). For more information, read <a href="https://www.auth0.com/docs/get-started/auth0-overview/create-applications">Create Applications</a>
-     * <a href="https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on>">API Endpoints for Single Sign-On</a>.
+     * Create a new client (application or SSO integration). For more information, read [Create Applications](https://www.auth0.com/docs/get-started/auth0-overview/create-applications)
+     * [API Endpoints for Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on).
      *
      * Notes:
      * - We recommend leaving the `client_secret` parameter unspecified to allow the generation of a safe secret.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use
-     * <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code>
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use
+     * `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method`
      * to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, specify fully defined credentials.
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, specify fully defined credentials.
      * These credentials will be automatically enabled for Private Key JWT authentication on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>create:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
+     * - To configure `client_authentication_methods`, the `create:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
      *
-     * <div class="alert alert-warning">SSO Integrations created via this endpoint will accept login requests and share user profile information.</div>
+     * SSO Integrations created via this endpoint will accept login requests and share user profile information.
      *
      * @param {Management.CreateClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -133,16 +125,14 @@ export declare class ClientsClient {
      * Idempotent registration for Client ID Metadata Document (CIMD) clients.
      * Uses external_client_id as the unique identifier for upsert operations.
      *
-     * <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
-     * <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+     * **Create:** Returns 201 when a new client is created (requires `create:clients` scope).
+     * **Update:** Returns 200 when an existing client is updated (requires `update:clients` scope).
      *
      * This endpoint automatically:
-     * <ul>
-     *   <li>Fetches and validates the metadata document</li>
-     *   <li>Maps CIMD fields to Auth0 client configuration</li>
-     *   <li>Creates/rotates credentials from the JWKS</li>
-     *   <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
-     * </ul>
+     * - Fetches and validates the metadata document
+     * - Maps CIMD fields to Auth0 client configuration
+     * - Creates/rotates credentials from the JWKS
+     * - Enforces CIMD security policies (HTTPS-only, no shared secrets)
      *
      * @param {Management.RegisterCimdClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -162,36 +152,29 @@ export declare class ClientsClient {
     private __registerCimdClient;
     /**
      * Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     * <ul>
-     *   <li>
-     *     The following properties can be retrieved with any of the scopes:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scopes:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:client_keys</code> or <code>read:client_credentials</code> scopes:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following properties can be retrieved with any of the scopes:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scopes:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the `read:client_keys` or `read:client_credentials` scopes:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {string} id - ID of the client to retrieve.
      * @param {Management.GetClientRequestParameters} request
@@ -228,15 +211,15 @@ export declare class ClientsClient {
     delete(id: string, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<void>;
     private __delete;
     /**
-     * Updates a client's settings. For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
+     * Updates a client's settings. For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
      *
      * Notes:
      * - The `client_secret` and `signing_key` attributes can only be updated with the `update:client_keys` scope.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code> to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>update:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
-     * - To change a client's <code>is_first_party</code> property to <code>false</code>, the <code>organization_usage</code> and <code>organization_require_behavior</code> properties must be unset.
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method` to configure the client with client secret (basic or post) or with no authentication method (none).
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
+     * - To configure `client_authentication_methods`, the `update:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
+     * - To change a client's `is_first_party` property to `false`, the `organization_usage` and `organization_require_behavior` properties must be unset.
      *
      * @param {string} id - ID of the client to update.
      * @param {Management.UpdateClientRequestContent} request
@@ -258,7 +241,7 @@ export declare class ClientsClient {
      *
      * This endpoint cannot be used with clients configured with Private Key JWT authentication method (client_authentication_methods configured with private_key_jwt). The generated secret is NOT base64 encoded.
      *
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications/rotate-client-secret">Rotate Client Secrets</a>.
+     * For more information, read [Rotate Client Secrets](https://www.auth0.com/docs/get-started/applications/rotate-client-secret).
      *
      * @param {string} id - ID of the client that will rotate secrets.
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.