auth0 5.11.0 → 5.12.0

package/dist/cjs/management/api/resources/users/resources/effectiveRoles/client/Client.js

@@ -70,6 +70,7 @@ class EffectiveRolesClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -118,6 +119,8 @@ class EffectiveRolesClient {
                             throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                         case 403:
                             throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                         case 429:
                             throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                         default:

package/dist/cjs/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/groups/client/Client.d.ts

@@ -20,6 +20,7 @@ export declare class GroupsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example

package/dist/cjs/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/groups/client/Client.js

@@ -65,6 +65,7 @@ class GroupsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -115,6 +116,8 @@ class GroupsClient {
                             throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                         case 403:
                             throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                         case 429:
                             throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                         default:

package/dist/cjs/management/api/resources/users/resources/groups/client/Client.d.ts

@@ -20,6 +20,7 @@ export declare class GroupsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example

package/dist/cjs/management/api/resources/users/resources/groups/client/Client.js

@@ -65,6 +65,7 @@ class GroupsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -117,6 +118,8 @@ class GroupsClient {
                             throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                         case 403:
                             throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                         case 429:
                             throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                         default:

package/dist/cjs/management/api/resources/users/resources/organizations/client/Client.d.ts

@@ -19,6 +19,7 @@ export declare class OrganizationsClient {
      *
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example

package/dist/cjs/management/api/resources/users/resources/organizations/client/Client.js

@@ -64,6 +64,7 @@ class OrganizationsClient {
      *
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -112,6 +113,8 @@ class OrganizationsClient {
                             throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                         case 403:
                             throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                         case 429:
                             throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                         default:

package/dist/cjs/management/api/resources/users/resources/permissions/client/Client.d.ts

@@ -41,6 +41,7 @@ export declare class PermissionsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -63,6 +64,7 @@ export declare class PermissionsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example

package/dist/cjs/management/api/resources/users/resources/permissions/client/Client.js

@@ -154,6 +154,7 @@ class PermissionsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -197,6 +198,8 @@ class PermissionsClient {
                         throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                     case 403:
                         throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                     case 429:
                         throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                     default:
@@ -220,6 +223,7 @@ class PermissionsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -263,6 +267,8 @@ class PermissionsClient {
                         throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                     case 403:
                         throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                     case 429:
                         throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                     default:

package/dist/cjs/management/api/resources/users/resources/roles/client/Client.d.ts

@@ -45,6 +45,7 @@ export declare class RolesClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -65,6 +66,7 @@ export declare class RolesClient {
      *
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example

package/dist/cjs/management/api/resources/users/resources/roles/client/Client.js

@@ -158,6 +158,7 @@ class RolesClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -198,6 +199,8 @@ class RolesClient {
                         throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                     case 403:
                         throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                     case 429:
                         throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                     default:
@@ -222,6 +225,7 @@ class RolesClient {
      *
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -260,6 +264,8 @@ class RolesClient {
                         throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                     case 403:
                         throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                     case 429:
                         throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                     default:

package/dist/cjs/management/api/types/types.d.ts

@@ -1158,6 +1158,7 @@ export declare const AculContextEnum: {
     readonly UntrustedDataAuthorizationParamsUiLocales: "untrusted_data.authorization_params.ui_locales";
     readonly UserOrganizations: "user.organizations";
     readonly TransactionCustomDomainDomain: "transaction.custom_domain.domain";
+    readonly Experiment: "experiment";
 };
 export type AculContextEnum = (typeof AculContextEnum)[keyof typeof AculContextEnum];
 /**
@@ -1476,21 +1477,6 @@ export interface BrandingFont {
     /** URL for the custom font. The URL must point to a font file and not a stylesheet. Must use HTTPS. */
     url?: string | undefined;
 }
-/**
- * Identifier input display settings.
- */
-export interface BrandingIdentifiers {
-    login_display?: Management.BrandingLoginDisplayEnum | undefined;
-    /** Whether OTP autocomplete (autocomplete="one-time-code") is enabled. */
-    otp_autocomplete?: boolean | undefined;
-    phone_display?: Management.BrandingPhoneDisplay | undefined;
-}
-/** Controls identifier input presentation on the login flow. Defaults to "unified" for legacy tenants, "separate" for tenants created post-GA of this feature. */
-export declare const BrandingLoginDisplayEnum: {
-    readonly Unified: "unified";
-    readonly Separate: "separate";
-};
-export type BrandingLoginDisplayEnum = (typeof BrandingLoginDisplayEnum)[keyof typeof BrandingLoginDisplayEnum];
 /**
  * Page Background Color or Gradient.
  * Property contains either `null` to unset, a solid color as a string value `#FFFFFF`, or a gradient as an object.
@@ -1505,26 +1491,6 @@ export type BrandingLoginDisplayEnum = (typeof BrandingLoginDisplayEnum)[keyof t
  * ```
  */
 export type BrandingPageBackground = (string | null) | undefined | (Record<string, unknown> | null) | undefined;
-/**
- * Phone number display settings.
- */
-export interface BrandingPhoneDisplay {
-    masking?: Management.BrandingPhoneMaskingEnum | undefined;
-    formatting?: Management.BrandingPhoneFormattingEnum | undefined;
-}
-/** Controls the format used when displaying phone numbers. */
-export declare const BrandingPhoneFormattingEnum: {
-    readonly Regional: "regional";
-    readonly International: "international";
-};
-export type BrandingPhoneFormattingEnum = (typeof BrandingPhoneFormattingEnum)[keyof typeof BrandingPhoneFormattingEnum];
-/** Controls how phone numbers are masked when displayed back to users. */
-export declare const BrandingPhoneMaskingEnum: {
-    readonly ShowAll: "show_all";
-    readonly HideCountryCode: "hide_country_code";
-    readonly MaskDigits: "mask_digits";
-};
-export type BrandingPhoneMaskingEnum = (typeof BrandingPhoneMaskingEnum)[keyof typeof BrandingPhoneMaskingEnum];
 export interface BrandingThemeBorders {
     /** Button border radius */
     button_border_radius: number;
@@ -2677,6 +2643,8 @@ export interface ClientMyOrganizationPatchConfiguration {
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
+    /** The client ID this client uses while creating invitations through My Organization API. */
+    invitation_landing_client_id?: string | undefined;
 }
 /**
  * Configuration related to the My Organization Configuration for the client.
@@ -2689,6 +2657,8 @@ export interface ClientMyOrganizationPostConfiguration {
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
+    /** The client ID this client uses while creating invitations through My Organization API. */
+    invitation_landing_client_id?: string | undefined;
 }
 /**
  * Configuration related to the My Organization Configuration for the client.
@@ -2701,6 +2671,8 @@ export interface ClientMyOrganizationResponseConfiguration {
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
+    /** The client ID this client uses while creating invitations through My Organization API. */
+    invitation_landing_client_id?: string | undefined;
 }
 /**
  * Configuration for OIDC backchannel logout initiators
@@ -3693,6 +3665,10 @@ export type ConnectionIdTokenEncryptionAlgValuesSupported = string[];
  * JSON array containing a list of the JWE encryption algorithms (enc values) supported by the OP for the ID Token to encode the Claims in a JWT [JWT].
  */
 export type ConnectionIdTokenEncryptionEncValuesSupported = string[];
+/**
+ * Indicates whether the identity provider supports session expiry via the id_token. If true, the system will use the session_expiry claim in the id_token to determine session expiry.
+ */
+export type ConnectionIdTokenSessionExpirySupported = boolean;
 /** Algorithm allowed to verify the ID tokens. */
 export declare const ConnectionIdTokenSignedResponseAlgEnum: {
     readonly Es256: "ES256";
@@ -4229,6 +4205,7 @@ export interface ConnectionOptionsCommonOidc {
     dpop_signing_alg?: Management.ConnectionDpopSigningAlgEnum | undefined;
     federated_connections_access_tokens?: (Management.ConnectionFederatedConnectionsAccessTokens | null) | undefined;
     icon_url?: Management.ConnectionIconUrl | undefined;
+    id_token_session_expiry_supported?: Management.ConnectionIdTokenSessionExpirySupported | undefined;
     id_token_signed_response_algs?: ((Management.ConnectionIdTokenSignedResponseAlgs | undefined) | null) | undefined;
     issuer?: Management.ConnectionIssuer | undefined;
     jwks_uri?: Management.ConnectionJwksUri | undefined;
@@ -5502,6 +5479,7 @@ export interface ConnectionPropertiesOptions {
     token_endpoint_auth_method?: (Management.ConnectionTokenEndpointAuthMethodEnum | null) | undefined;
     token_endpoint_auth_signing_alg?: (Management.ConnectionTokenEndpointAuthSigningAlgEnum | null) | undefined;
     token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
+    id_token_session_expiry_supported?: Management.ConnectionIdTokenSessionExpirySupported | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -6806,6 +6784,15 @@ export type ConnectionWaadProtocolEnumAzureAd = (typeof ConnectionWaadProtocolEn
  * Metadata associated with the connection in the form of an object with string values (max 255 chars).  Maximum of 10 metadata properties allowed.
  */
 export type ConnectionsMetadata = Record<string, string | null>;
+/**
+ * Content Security Policy configuration with multi-policy support.
+ */
+export interface ContentSecurityPolicyConfig {
+    /** Whether CSP is enabled. */
+    enabled?: boolean | undefined;
+    policies?: Management.CspPolicies | undefined;
+    reporting_infrastructure?: (Management.CspReportingInfrastructure | null) | undefined;
+}
 export interface CreateActionModuleResponseContent {
     /** The unique ID of the module. */
     id?: string | undefined;
@@ -8564,7 +8551,7 @@ export interface CreatePhoneProviderSendTestResponseContent {
     message?: string | undefined;
 }
 export interface CreatePhoneTemplateResponseContent {
-    id: string;
+    id?: string | undefined;
     channel?: string | undefined;
     customizable?: boolean | undefined;
     tenant?: string | undefined;
@@ -8883,6 +8870,79 @@ export interface CredentialId {
     /** Credential ID */
     id: string;
 }
+/**
+ * CSP directives map. Keys are directive names, values are arrays of directive values.
+ */
+export type CspDirectives = Record<string, string[]>;
+export declare const CspFlag: {
+    readonly UpgradeInsecureRequests: "upgrade-insecure-requests";
+    readonly BlockAllMixedContent: "block-all-mixed-content";
+};
+export type CspFlag = (typeof CspFlag)[keyof typeof CspFlag];
+/**
+ * CSP flags (bare directives without values).
+ */
+export type CspFlags = Management.CspFlag[];
+/**
+ * Array of CSP policies (enforcing and/or reporting).
+ */
+export type CspPolicies = Management.CspPolicy[];
+/**
+ * A single CSP policy with mode, directives, flags, and optional reporting.
+ */
+export interface CspPolicy {
+    mode?: Management.CspPolicyMode | undefined;
+    directives?: Management.CspDirectives | undefined;
+    flags?: Management.CspFlags | undefined;
+    reporting?: (Management.CspPolicyReporting | null) | undefined;
+}
+/** Policy mode: enforcing or reporting. */
+export declare const CspPolicyMode: {
+    readonly Enforcing: "enforcing";
+    readonly Reporting: "reporting";
+};
+export type CspPolicyMode = (typeof CspPolicyMode)[keyof typeof CspPolicyMode];
+/**
+ * Per-policy reporting configuration.
+ */
+export interface CspPolicyReporting {
+    /** HTTPS endpoint for CSP violation reports. */
+    report_uri?: string | undefined;
+    /** Report-To group name for modern reporting. */
+    report_to_group?: string | undefined;
+}
+/**
+ * Report-To header configuration.
+ */
+export interface CspReportTo {
+    /** Reporting group identifier. */
+    group?: string | undefined;
+    /** Maximum age in seconds for the Report-To header. */
+    max_age?: number | undefined;
+    endpoints?: Management.CspReportToEndpoints | undefined;
+}
+/**
+ * A single reporting endpoint.
+ */
+export interface CspReportToEndpoint {
+    /** HTTPS URL for the reporting endpoint. */
+    url?: string | undefined;
+}
+/**
+ * Array of reporting endpoints.
+ */
+export type CspReportToEndpoints = Management.CspReportToEndpoint[];
+/**
+ * Reporting-Endpoints header configuration (key-value pairs).
+ */
+export type CspReportingEndpoints = Record<string, string>;
+/**
+ * Global reporting infrastructure configuration.
+ */
+export interface CspReportingInfrastructure {
+    report_to?: (Management.CspReportTo | null) | undefined;
+    reporting_endpoints?: Management.CspReportingEndpoints | undefined;
+}
 export interface CustomDomain {
     /** ID of the custom domain. */
     custom_domain_id: string;
@@ -15981,7 +16041,6 @@ export interface GetBrandingResponseContent {
     favicon_url?: string | undefined;
     /** URL for the logo. Must use HTTPS. */
     logo_url?: string | undefined;
-    identifiers?: Management.BrandingIdentifiers | undefined;
     font?: Management.BrandingFont | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
@@ -16796,7 +16855,7 @@ export interface GetOrganizationResponseContent {
  */
 export type GetPartialsResponseContent = Record<string, unknown>;
 export interface GetPhoneTemplateResponseContent {
-    id: string;
+    id?: string | undefined;
     channel?: string | undefined;
     customizable?: boolean | undefined;
     tenant?: string | undefined;
@@ -17067,6 +17126,7 @@ export interface GetTenantSettingsResponseContent {
     default_redirection_uri?: string | undefined;
     /** Supported locales for the user interface. */
     enabled_locales?: Management.SupportedLocales[] | undefined;
+    security_headers?: (Management.TenantSettingsNullableSecurityHeaders | null) | undefined;
     session_cookie?: (Management.SessionCookieSchema | null) | undefined;
     sessions?: (Management.TenantSettingsSessions | null) | undefined;
     oidc_logout?: Management.TenantOidcLogoutSettings | undefined;
@@ -17094,6 +17154,8 @@ export interface GetTenantSettingsResponseContent {
     phone_consolidated_experience?: boolean | undefined;
     /** Whether Auth0 Guide (AI-powered assistance) is enabled for this tenant. */
     enable_ai_guide?: boolean | undefined;
+    /** Whether session metadata is included in specific tenant logs (slo, oidc_backchannel_logout_failed, oidc_backchannel_logout_succeeded). */
+    include_session_metadata_in_tenant_logs?: boolean | undefined;
     dynamic_client_registration_security_mode?: Management.TenantSettingsDynamicClientRegistrationSecurityMode | undefined;
     country_codes?: Management.TenantSettingsCountryCodesResponse | undefined;
 }
@@ -19035,7 +19097,7 @@ export interface PhoneProviderSchemaMasked {
     updated_at?: string | undefined;
 }
 export interface PhoneTemplate {
-    id: string;
+    id?: string | undefined;
     channel?: string | undefined;
     customizable?: boolean | undefined;
     tenant?: string | undefined;
@@ -19179,6 +19241,7 @@ export declare const PromptGroupNameEnum: {
     readonly Captcha: "captcha";
     readonly BruteForceProtection: "brute-force-protection";
     readonly AsyncApprovalFlow: "async-approval-flow";
+    readonly Confirmation: "confirmation";
 };
 export type PromptGroupNameEnum = (typeof PromptGroupNameEnum)[keyof typeof PromptGroupNameEnum];
 /** Language to update. */
@@ -19424,7 +19487,7 @@ export interface RegisterCimdClientResponseContent {
 }
 export type ResetPhoneTemplateRequestContent = unknown;
 export interface ResetPhoneTemplateResponseContent {
-    id: string;
+    id?: string | undefined;
     channel?: string | undefined;
     customizable?: boolean | undefined;
     tenant?: string | undefined;
@@ -19933,6 +19996,7 @@ export declare const ScreenGroupNameEnum: {
     readonly AsyncApprovalError: "async-approval-error";
     readonly AsyncApprovalAccepted: "async-approval-accepted";
     readonly AsyncApprovalDenied: "async-approval-denied";
+    readonly Confirmation: "confirmation";
     readonly AsyncApprovalWrongUser: "async-approval-wrong-user";
 };
 export type ScreenGroupNameEnum = (typeof ScreenGroupNameEnum)[keyof typeof ScreenGroupNameEnum];
@@ -20733,6 +20797,13 @@ export interface TenantSettingsMtls {
     /** If true, enables mTLS endpoint aliases */
     enable_endpoint_aliases?: boolean | undefined;
 }
+/**
+ * Security headers configuration for tenant responses.
+ */
+export interface TenantSettingsNullableSecurityHeaders {
+    content_security_policy?: (Management.ContentSecurityPolicyConfig | null) | undefined;
+    x_xss_protection?: (Management.XssProtectionConfig | null) | undefined;
+}
 /**
  * Change Password page customization.
  */
@@ -21058,21 +21129,6 @@ export interface UpdateBrandingFont {
     /** URL for the custom font. The URL must point to a font file and not a stylesheet. Must use HTTPS. */
     url?: (string | null) | undefined;
 }
-/**
- * Identifier input display settings.
- */
-export interface UpdateBrandingIdentifiers {
-    login_display?: Management.UpdateBrandingLoginDisplayEnum | undefined;
-    /** Whether OTP autocomplete (autocomplete="one-time-code") is enabled. */
-    otp_autocomplete?: boolean | undefined;
-    phone_display?: (Management.UpdateBrandingPhoneDisplay | null) | undefined;
-}
-/** Controls identifier input presentation on the login flow. Defaults to "unified" for legacy tenants, "separate" for tenants created post-GA of this feature. */
-export declare const UpdateBrandingLoginDisplayEnum: {
-    readonly Unified: "unified";
-    readonly Separate: "separate";
-};
-export type UpdateBrandingLoginDisplayEnum = (typeof UpdateBrandingLoginDisplayEnum)[keyof typeof UpdateBrandingLoginDisplayEnum];
 /**
  * Page Background Color or Gradient.
  * Property contains either `null` to unset, a solid color as a string value `#FFFFFF`, or a gradient as an object.
@@ -21087,26 +21143,6 @@ export type UpdateBrandingLoginDisplayEnum = (typeof UpdateBrandingLoginDisplayE
  * ```
  */
 export type UpdateBrandingPageBackground = (string | null) | undefined | (Record<string, unknown> | null) | undefined;
-/**
- * Phone number display settings.
- */
-export interface UpdateBrandingPhoneDisplay {
-    masking: Management.UpdateBrandingPhoneMaskingEnum;
-    formatting: Management.UpdateBrandingPhoneFormattingEnum;
-}
-/** Controls the format used when displaying phone numbers. */
-export declare const UpdateBrandingPhoneFormattingEnum: {
-    readonly Regional: "regional";
-    readonly International: "international";
-};
-export type UpdateBrandingPhoneFormattingEnum = (typeof UpdateBrandingPhoneFormattingEnum)[keyof typeof UpdateBrandingPhoneFormattingEnum];
-/** Controls how phone numbers are masked when displayed back to users. */
-export declare const UpdateBrandingPhoneMaskingEnum: {
-    readonly ShowAll: "show_all";
-    readonly HideCountryCode: "hide_country_code";
-    readonly MaskDigits: "mask_digits";
-};
-export type UpdateBrandingPhoneMaskingEnum = (typeof UpdateBrandingPhoneMaskingEnum)[keyof typeof UpdateBrandingPhoneMaskingEnum];
 /**
  * Phone provider configuration schema
  */
@@ -21130,7 +21166,6 @@ export interface UpdateBrandingResponseContent {
     favicon_url?: string | undefined;
     /** URL for the logo. Must use HTTPS. */
     logo_url?: string | undefined;
-    identifiers?: Management.BrandingIdentifiers | undefined;
     font?: Management.BrandingFont | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
@@ -21346,6 +21381,7 @@ export interface UpdateConnectionOptions {
     token_endpoint_auth_method?: (Management.ConnectionTokenEndpointAuthMethodEnum | null) | undefined;
     token_endpoint_auth_signing_alg?: (Management.ConnectionTokenEndpointAuthSigningAlgEnum | null) | undefined;
     token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
+    id_token_session_expiry_supported?: Management.ConnectionIdTokenSessionExpirySupported | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -21990,7 +22026,7 @@ export interface UpdateOrganizationResponseContent {
     [key: string]: any;
 }
 export interface UpdatePhoneTemplateResponseContent {
-    id: string;
+    id?: string | undefined;
     channel?: string | undefined;
     customizable?: boolean | undefined;
     tenant?: string | undefined;
@@ -22217,6 +22253,7 @@ export interface UpdateTenantSettingsResponseContent {
     default_redirection_uri?: string | undefined;
     /** Supported locales for the user interface. */
     enabled_locales?: Management.SupportedLocales[] | undefined;
+    security_headers?: (Management.TenantSettingsNullableSecurityHeaders | null) | undefined;
     session_cookie?: (Management.SessionCookieSchema | null) | undefined;
     sessions?: (Management.TenantSettingsSessions | null) | undefined;
     oidc_logout?: Management.TenantOidcLogoutSettings | undefined;
@@ -22244,6 +22281,8 @@ export interface UpdateTenantSettingsResponseContent {
     phone_consolidated_experience?: boolean | undefined;
     /** Whether Auth0 Guide (AI-powered assistance) is enabled for this tenant. */
     enable_ai_guide?: boolean | undefined;
+    /** Whether session metadata is included in specific tenant logs (slo, oidc_backchannel_logout_failed, oidc_backchannel_logout_succeeded). */
+    include_session_metadata_in_tenant_logs?: boolean | undefined;
     dynamic_client_registration_security_mode?: Management.TenantSettingsDynamicClientRegistrationSecurityMode | undefined;
     country_codes?: Management.TenantSettingsCountryCodesResponse | undefined;
 }
@@ -22933,3 +22972,18 @@ export declare const X509CertificateCredentialTypeEnum: {
     readonly X509Cert: "x509_cert";
 };
 export type X509CertificateCredentialTypeEnum = (typeof X509CertificateCredentialTypeEnum)[keyof typeof X509CertificateCredentialTypeEnum];
+/**
+ * X-XSS-Protection header configuration (deprecated header, use CSP instead).
+ */
+export interface XssProtectionConfig {
+    /** Whether X-XSS-Protection header is enabled. */
+    enabled?: boolean | undefined;
+    mode?: Management.XssProtectionMode | undefined;
+    /** HTTPS endpoint for X-XSS-Protection violation reports. */
+    report_uri?: string | undefined;
+}
+/** X-XSS-Protection mode: block. */
+export declare const XssProtectionMode: {
+    readonly Block: "block";
+};
+export type XssProtectionMode = (typeof XssProtectionMode)[keyof typeof XssProtectionMode];