auth0 5.11.0 → 5.12.0

package/dist/esm/management/api/resources/clients/client/Client.d.mts

@@ -18,38 +18,30 @@ export declare class ClientsClient {
     get connections(): ConnectionsClient;
     /**
      * Retrieve clients (applications and SSO integrations) matching provided filters. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     *
-     * <ul>
-     *   <li>
-     *     The following can be retrieved with any scope:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scope:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the
-     *     <code>read:client_keys</code> or <code>read:client_credentials</code> scope:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following can be retrieved with any scope:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scope:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the
+     *     `read:client_keys` or `read:client_credentials` scope:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {Management.ListClientsRequestParameters} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -75,20 +67,20 @@ export declare class ClientsClient {
      */
     list(request?: Management.ListClientsRequestParameters, requestOptions?: ClientsClient.RequestOptions): Promise<core.Page<Management.Client, Management.ListClientsOffsetPaginatedResponseContent>>;
     /**
-     * Create a new client (application or SSO integration). For more information, read <a href="https://www.auth0.com/docs/get-started/auth0-overview/create-applications">Create Applications</a>
-     * <a href="https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on>">API Endpoints for Single Sign-On</a>.
+     * Create a new client (application or SSO integration). For more information, read [Create Applications](https://www.auth0.com/docs/get-started/auth0-overview/create-applications)
+     * [API Endpoints for Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on).
      *
      * Notes:
      * - We recommend leaving the `client_secret` parameter unspecified to allow the generation of a safe secret.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use
-     * <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code>
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use
+     * `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method`
      * to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, specify fully defined credentials.
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, specify fully defined credentials.
      * These credentials will be automatically enabled for Private Key JWT authentication on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>create:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
+     * - To configure `client_authentication_methods`, the `create:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
      *
-     * <div class="alert alert-warning">SSO Integrations created via this endpoint will accept login requests and share user profile information.</div>
+     * SSO Integrations created via this endpoint will accept login requests and share user profile information.
      *
      * @param {Management.CreateClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -133,16 +125,14 @@ export declare class ClientsClient {
      * Idempotent registration for Client ID Metadata Document (CIMD) clients.
      * Uses external_client_id as the unique identifier for upsert operations.
      *
-     * <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
-     * <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+     * **Create:** Returns 201 when a new client is created (requires `create:clients` scope).
+     * **Update:** Returns 200 when an existing client is updated (requires `update:clients` scope).
      *
      * This endpoint automatically:
-     * <ul>
-     *   <li>Fetches and validates the metadata document</li>
-     *   <li>Maps CIMD fields to Auth0 client configuration</li>
-     *   <li>Creates/rotates credentials from the JWKS</li>
-     *   <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
-     * </ul>
+     * - Fetches and validates the metadata document
+     * - Maps CIMD fields to Auth0 client configuration
+     * - Creates/rotates credentials from the JWKS
+     * - Enforces CIMD security policies (HTTPS-only, no shared secrets)
      *
      * @param {Management.RegisterCimdClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -162,36 +152,29 @@ export declare class ClientsClient {
     private __registerCimdClient;
     /**
      * Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     * <ul>
-     *   <li>
-     *     The following properties can be retrieved with any of the scopes:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scopes:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:client_keys</code> or <code>read:client_credentials</code> scopes:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following properties can be retrieved with any of the scopes:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scopes:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the `read:client_keys` or `read:client_credentials` scopes:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {string} id - ID of the client to retrieve.
      * @param {Management.GetClientRequestParameters} request
@@ -228,15 +211,15 @@ export declare class ClientsClient {
     delete(id: string, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<void>;
     private __delete;
     /**
-     * Updates a client's settings. For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
+     * Updates a client's settings. For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
      *
      * Notes:
      * - The `client_secret` and `signing_key` attributes can only be updated with the `update:client_keys` scope.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code> to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>update:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
-     * - To change a client's <code>is_first_party</code> property to <code>false</code>, the <code>organization_usage</code> and <code>organization_require_behavior</code> properties must be unset.
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method` to configure the client with client secret (basic or post) or with no authentication method (none).
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
+     * - To configure `client_authentication_methods`, the `update:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
+     * - To change a client's `is_first_party` property to `false`, the `organization_usage` and `organization_require_behavior` properties must be unset.
      *
      * @param {string} id - ID of the client to update.
      * @param {Management.UpdateClientRequestContent} request
@@ -258,7 +241,7 @@ export declare class ClientsClient {
      *
      * This endpoint cannot be used with clients configured with Private Key JWT authentication method (client_authentication_methods configured with private_key_jwt). The generated secret is NOT base64 encoded.
      *
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications/rotate-client-secret">Rotate Client Secrets</a>.
+     * For more information, read [Rotate Client Secrets](https://www.auth0.com/docs/get-started/applications/rotate-client-secret).
      *
      * @param {string} id - ID of the client that will rotate secrets.
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/esm/management/api/resources/clients/client/Client.mjs

@@ -31,38 +31,30 @@ export class ClientsClient {
     }
     /**
      * Retrieve clients (applications and SSO integrations) matching provided filters. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     *
-     * <ul>
-     *   <li>
-     *     The following can be retrieved with any scope:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scope:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the
-     *     <code>read:client_keys</code> or <code>read:client_credentials</code> scope:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following can be retrieved with any scope:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scope:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the
+     *     `read:client_keys` or `read:client_credentials` scope:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {Management.ListClientsRequestParameters} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -161,20 +153,20 @@ export class ClientsClient {
         });
     }
     /**
-     * Create a new client (application or SSO integration). For more information, read <a href="https://www.auth0.com/docs/get-started/auth0-overview/create-applications">Create Applications</a>
-     * <a href="https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on>">API Endpoints for Single Sign-On</a>.
+     * Create a new client (application or SSO integration). For more information, read [Create Applications](https://www.auth0.com/docs/get-started/auth0-overview/create-applications)
+     * [API Endpoints for Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on).
      *
      * Notes:
      * - We recommend leaving the `client_secret` parameter unspecified to allow the generation of a safe secret.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use
-     * <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code>
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use
+     * `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method`
      * to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, specify fully defined credentials.
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, specify fully defined credentials.
      * These credentials will be automatically enabled for Private Key JWT authentication on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>create:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
+     * - To configure `client_authentication_methods`, the `create:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
      *
-     * <div class="alert alert-warning">SSO Integrations created via this endpoint will accept login requests and share user profile information.</div>
+     * SSO Integrations created via this endpoint will accept login requests and share user profile information.
      *
      * @param {Management.CreateClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -317,16 +309,14 @@ export class ClientsClient {
      * Idempotent registration for Client ID Metadata Document (CIMD) clients.
      * Uses external_client_id as the unique identifier for upsert operations.
      *
-     * <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
-     * <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+     * **Create:** Returns 201 when a new client is created (requires `create:clients` scope).
+     * **Update:** Returns 200 when an existing client is updated (requires `update:clients` scope).
      *
      * This endpoint automatically:
-     * <ul>
-     *   <li>Fetches and validates the metadata document</li>
-     *   <li>Maps CIMD fields to Auth0 client configuration</li>
-     *   <li>Creates/rotates credentials from the JWKS</li>
-     *   <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
-     * </ul>
+     * - Fetches and validates the metadata document
+     * - Maps CIMD fields to Auth0 client configuration
+     * - Creates/rotates credentials from the JWKS
+     * - Enforces CIMD security policies (HTTPS-only, no shared secrets)
      *
      * @param {Management.RegisterCimdClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -395,36 +385,29 @@ export class ClientsClient {
     }
     /**
      * Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified.
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
-     * <ul>
-     *   <li>
-     *     The following properties can be retrieved with any of the scopes:
-     *     <code>client_id</code>, <code>app_type</code>, <code>name</code>, and <code>description</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:clients</code> or
-     *     <code>read:client_keys</code> scopes:
-     *     <code>callbacks</code>, <code>oidc_logout</code>, <code>allowed_origins</code>,
-     *     <code>web_origins</code>, <code>tenant</code>, <code>global</code>, <code>config_route</code>,
-     *     <code>callback_url_template</code>, <code>jwt_configuration</code>,
-     *     <code>jwt_configuration.lifetime_in_seconds</code>, <code>jwt_configuration.secret_encoded</code>,
-     *     <code>jwt_configuration.scopes</code>, <code>jwt_configuration.alg</code>, <code>api_type</code>,
-     *     <code>logo_uri</code>, <code>allowed_clients</code>, <code>owners</code>, <code>custom_login_page</code>,
-     *     <code>custom_login_page_off</code>, <code>sso</code>, <code>addons</code>, <code>form_template</code>,
-     *     <code>custom_login_page_codeview</code>, <code>resource_servers</code>, <code>client_metadata</code>,
-     *     <code>mobile</code>, <code>mobile.android</code>, <code>mobile.ios</code>, <code>allowed_logout_urls</code>,
-     *     <code>token_endpoint_auth_method</code>, <code>is_first_party</code>, <code>oidc_conformant</code>,
-     *     <code>is_token_endpoint_ip_header_trusted</code>, <code>initiate_login_uri</code>, <code>grant_types</code>,
-     *     <code>refresh_token</code>, <code>refresh_token.rotation_type</code>, <code>refresh_token.expiration_type</code>,
-     *     <code>refresh_token.leeway</code>, <code>refresh_token.token_lifetime</code>, <code>refresh_token.policies</code>, <code>organization_usage</code>,
-     *     <code>organization_require_behavior</code>.
-     *   </li>
-     *   <li>
-     *     The following properties can only be retrieved with the <code>read:client_keys</code> or <code>read:client_credentials</code> scopes:
-     *     <code>encryption_key</code>, <code>encryption_key.pub</code>, <code>encryption_key.cert</code>,
-     *     <code>client_secret</code>, <code>client_authentication_methods</code> and <code>signing_key</code>.
-     *   </li>
-     * </ul>
+     * For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+     *
+     * - The following properties can be retrieved with any of the scopes:
+     *     `client_id`, `app_type`, `name`, and `description`.
+     * - The following properties can only be retrieved with the `read:clients` or
+     *     `read:client_keys` scopes:
+     *     `callbacks`, `oidc_logout`, `allowed_origins`,
+     *     `web_origins`, `tenant`, `global`, `config_route`,
+     *     `callback_url_template`, `jwt_configuration`,
+     *     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+     *     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+     *     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+     *     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+     *     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+     *     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+     *     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+     *     `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+     *     `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+     *     `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+     *     `organization_require_behavior`.
+     * - The following properties can only be retrieved with the `read:client_keys` or `read:client_credentials` scopes:
+     *     `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+     *     `client_secret`, `client_authentication_methods` and `signing_key`.
      *
      * @param {string} id - ID of the client to retrieve.
      * @param {Management.GetClientRequestParameters} request
@@ -554,15 +537,15 @@ export class ClientsClient {
         });
     }
     /**
-     * Updates a client's settings. For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.
+     * Updates a client's settings. For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
      *
      * Notes:
      * - The `client_secret` and `signing_key` attributes can only be updated with the `update:client_keys` scope.
-     * - The <code>client_authentication_methods</code> and <code>token_endpoint_auth_method</code> properties are mutually exclusive. Use <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method. Otherwise, use <code>token_endpoint_auth_method</code> to configure the client with client secret (basic or post) or with no authentication method (none).
-     * - When using <code>client_authentication_methods</code> to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
-     * - To configure <code>client_authentication_methods</code>, the <code>update:client_credentials</code> scope is required.
-     * - To configure <code>client_authentication_methods</code>, the property <code>jwt_configuration.alg</code> must be set to RS256.
-     * - To change a client's <code>is_first_party</code> property to <code>false</code>, the <code>organization_usage</code> and <code>organization_require_behavior</code> properties must be unset.
+     * - The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method` to configure the client with client secret (basic or post) or with no authentication method (none).
+     * - When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
+     * - To configure `client_authentication_methods`, the `update:client_credentials` scope is required.
+     * - To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
+     * - To change a client's `is_first_party` property to `false`, the `organization_usage` and `organization_require_behavior` properties must be unset.
      *
      * @param {string} id - ID of the client to update.
      * @param {Management.UpdateClientRequestContent} request
@@ -633,7 +616,7 @@ export class ClientsClient {
      *
      * This endpoint cannot be used with clients configured with Private Key JWT authentication method (client_authentication_methods configured with private_key_jwt). The generated secret is NOT base64 encoded.
      *
-     * For more information, read <a href="https://www.auth0.com/docs/get-started/applications/rotate-client-secret">Rotate Client Secrets</a>.
+     * For more information, read [Rotate Client Secrets](https://www.auth0.com/docs/get-started/applications/rotate-client-secret).
      *
      * @param {string} id - ID of the client that will rotate secrets.
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/esm/management/api/resources/clients/resources/connections/client/Client.d.mts

@@ -11,15 +11,10 @@ export declare class ConnectionsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<ConnectionsClient.Options>;
     constructor(options: ConnectionsClient.Options);
     /**
-     * Retrieve all connections that are enabled for the specified <a href="https://www.auth0.com/docs/get-started/applications"> Application</a>, using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
-     * <ul>
-     *   <li>
-     *     This endpoint requires the <code>read:connections</code> scope and any one of <code>read:clients</code> or <code>read:client_summary</code>.
-     *   </li>
-     *   <li>
-     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
-     *   </li>
-     * </ul>
+     * Retrieve all connections that are enabled for the specified [Application](https://www.auth0.com/docs/get-started/applications), using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
+     *
+     * - This endpoint requires the `read:connections` scope and any one of `read:clients` or `read:client_summary`.
+     * - **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
      *
      * @param {string} id - ID of the client for which to retrieve enabled connections.
      * @param {Management.ConnectionsGetRequest} request

package/dist/esm/management/api/resources/clients/resources/connections/client/Client.mjs

@@ -20,15 +20,10 @@ export class ConnectionsClient {
         this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
-     * Retrieve all connections that are enabled for the specified <a href="https://www.auth0.com/docs/get-started/applications"> Application</a>, using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
-     * <ul>
-     *   <li>
-     *     This endpoint requires the <code>read:connections</code> scope and any one of <code>read:clients</code> or <code>read:client_summary</code>.
-     *   </li>
-     *   <li>
-     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
-     *   </li>
-     * </ul>
+     * Retrieve all connections that are enabled for the specified [Application](https://www.auth0.com/docs/get-started/applications), using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
+     *
+     * - This endpoint requires the `read:connections` scope and any one of `read:clients` or `read:client_summary`.
+     * - **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
      *
      * @param {string} id - ID of the client for which to retrieve enabled connections.
      * @param {Management.ConnectionsGetRequest} request

package/dist/esm/management/api/resources/clients/resources/credentials/client/Client.d.mts

@@ -13,7 +13,7 @@ export declare class CredentialsClient {
     /**
      * Get the details of a client credential.
      *
-     * <b>Important</b>: To enable credentials to be used for a client authentication method, set the <code>client_authentication_methods</code> property on the client. To enable credentials to be used for JWT-Secured Authorization requests set the <code>signed_request_object</code> property on the client.
+     * **Important**: To enable credentials to be used for a client authentication method, set the `client_authentication_methods` property on the client. To enable credentials to be used for JWT-Secured Authorization requests set the `signed_request_object` property on the client.
      *
      * @param {string} client_id - ID of the client.
      * @param {CredentialsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -31,37 +31,61 @@ export declare class CredentialsClient {
     /**
      * Create a client credential associated to your application. Credentials can be used to configure Private Key JWT and mTLS authentication methods, as well as for JWT-secured Authorization requests.
      *
-     * <h5>Public Key</h5>Public Key credentials can be used to set up Private Key JWT client authentication and JWT-secured Authorization requests.
+     * **Public Key**
      *
-     * Sample: <pre><code>{
+     * Public Key credentials can be used to set up Private Key JWT client authentication and JWT-secured Authorization requests.
+     *
+     * Sample:
+     *
+     * ```json
+     * {
      *   "credential_type": "public_key",
      *   "name": "string",
      *   "pem": "string",
      *   "alg": "RS256",
      *   "parse_expiry_from_cert": false,
      *   "expires_at": "2022-12-31T23:59:59Z"
-     * }</code></pre>
-     * <h5>Certificate (CA-signed & self-signed)</h5>Certificate credentials can be used to set up mTLS client authentication. CA-signed certificates can be configured either with a signed certificate or with just the certificate Subject DN.
+     * }
+     * ```
+     *
+     * **Certificate (CA-signed & self-signed)**
+     *
+     * Certificate credentials can be used to set up mTLS client authentication. CA-signed certificates can be configured either with a signed certificate or with just the certificate Subject DN.
+     *
+     * CA-signed Certificate Sample (pem):
      *
-     * CA-signed Certificate Sample (pem): <pre><code>{
+     * ```json
+     * {
      *   "credential_type": "x509_cert",
      *   "name": "string",
      *   "pem": "string"
-     * }</code></pre>CA-signed Certificate Sample (subject_dn): <pre><code>{
+     * }
+     * ```
+     *
+     * CA-signed Certificate Sample (subject_dn):
+     *
+     * ```json
+     * {
      *   "credential_type": "cert_subject_dn",
      *   "name": "string",
      *   "subject_dn": "string"
-     * }</code></pre>Self-signed Certificate Sample: <pre><code>{
+     * }
+     * ```
+     *
+     * Self-signed Certificate Sample:
+     *
+     * ```json
+     * {
      *   "credential_type": "cert_subject_dn",
      *   "name": "string",
      *   "pem": "string"
-     * }</code></pre>
+     * }
+     * ```
      *
      * The credential will be created but not yet enabled for use until you set the corresponding properties in the client:
-     * <ul>
-     *   <li>To enable the credential for Private Key JWT or mTLS authentication methods, set the <code>client_authentication_methods</code> property on the client. For more information, read <a href="https://auth0.com/docs/get-started/applications/configure-private-key-jwt">Configure Private Key JWT Authentication</a> and <a href="https://auth0.com/docs/get-started/applications/configure-mtls">Configure mTLS Authentication</a></li>
-     *   <li>To enable the credential for JWT-secured Authorization requests, set the <code>signed_request_object</code>property on the client. For more information, read <a href="https://auth0.com/docs/get-started/applications/configure-jar">Configure JWT-secured Authorization Requests (JAR)</a></li>
-     * </ul>
+     *
+     * - To enable the credential for Private Key JWT or mTLS authentication methods, set the `client_authentication_methods` property on the client. For more information, read [Configure Private Key JWT Authentication](https://auth0.com/docs/get-started/applications/configure-private-key-jwt) and [Configure mTLS Authentication](https://auth0.com/docs/get-started/applications/configure-mtls)
+     * - To enable the credential for JWT-secured Authorization requests, set the `signed_request_object`property on the client. For more information, read [Configure JWT-secured Authorization Requests (JAR)](https://auth0.com/docs/get-started/applications/configure-jar)
      *
      * @param {string} client_id - ID of the client.
      * @param {Management.PostClientCredentialRequestContent} request
@@ -83,7 +107,7 @@ export declare class CredentialsClient {
     /**
      * Get the details of a client credential.
      *
-     * <b>Important</b>: To enable credentials to be used for a client authentication method, set the <code>client_authentication_methods</code> property on the client. To enable credentials to be used for JWT-Secured Authorization requests set the <code>signed_request_object</code> property on the client.
+     * **Important**: To enable credentials to be used for a client authentication method, set the `client_authentication_methods` property on the client. To enable credentials to be used for JWT-Secured Authorization requests set the `signed_request_object` property on the client.
      *
      * @param {string} client_id - ID of the client.
      * @param {string} credential_id - ID of the credential.