auth0 5.11.0 → 5.13.0

package/dist/cjs/lib/models.d.ts

@@ -1,9 +1,9 @@
 import { RetryConfiguration } from "./retry.js";
-import { Dispatcher } from "undici-types";
+import type { Dispatcher } from "undici-types";
 /**
  * @private
  */
-export type FetchAPI = (url: URL | RequestInfo, init?: RequestInit) => Promise<Response>;
+export type FetchAPI = (url: string | URL | Request, init?: RequestInit) => Promise<Response>;
 export interface ClientOptions extends Omit<Configuration, "baseUrl" | "parseError" | "middleware"> {
     telemetry?: boolean;
     clientInfo?: {
@@ -57,7 +57,7 @@ export type HTTPBody = any | FormData | URLSearchParams;
 export type HTTPRequestInit = {
     headers?: HTTPHeaders;
     method: HTTPMethod;
-    credentials?: RequestCredentials;
+    credentials?: "include" | "omit" | "same-origin";
     body?: HTTPBody;
 };
 export type InitOverrideFunction = (requestContext: {
@@ -96,23 +96,23 @@ export declare class TextApiResponse implements ApiResponse<string> {
     static fromResponse(raw: Response): Promise<TextApiResponse>;
 }
 export interface FetchParams {
-    url: URL | RequestInfo;
+    url: string | URL | Request;
     init: RequestInit;
 }
 export interface RequestContext {
     fetch: FetchAPI;
-    url: URL | RequestInfo;
+    url: string | URL | Request;
     init: RequestInit;
 }
 export interface ResponseContext {
     fetch: FetchAPI;
-    url: URL | RequestInfo;
+    url: string | URL | Request;
     init: RequestInit;
     response: Response;
 }
 export interface ErrorContext {
     fetch: FetchAPI;
-    url: URL | RequestInfo;
+    url: string | URL | Request;
     init: RequestInit;
     error: unknown;
     response?: Response;

package/dist/cjs/lib/retry.d.ts

@@ -10,11 +10,16 @@ export interface RetryConfiguration {
     enabled?: boolean;
     /**
      * Configure the max amount of retries the SDK should do.
-     * Defaults to 5.
+     * Defaults to 3.
+     * Note: this budget is shared between HTTP status code retries (e.g. 429) and
+     * transient network error retries (e.g. ECONNRESET). For example, with maxRetries: 3,
+     * 2 network retries and 1 status code retry would exhaust the full budget.
      */
     maxRetries?: number;
     /**
-     * Status Codes on which the SDK should trigger retries.
+     * HTTP Status Codes on which the SDK should trigger retries.
+     * Note: transient network errors (ECONNRESET, EPIPE, ECONNABORTED) are always retried
+     * up to maxRetries regardless of this setting. Use `enabled: false` to disable all retries.
      * Defaults to [429].
      */
     retryWhen?: number[];

package/dist/cjs/lib/retry.js

@@ -10,6 +10,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.retry = retry;
+const errors_js_1 = require("./errors.js");
 const MAX_REQUEST_RETRY_JITTER = 250;
 const MAX_REQUEST_RETRY_DELAY = 10000;
 const DEFAULT_NUMBER_RETRIES = 3;
@@ -38,6 +39,25 @@ function pause(delay) {
         return new Promise((resolve) => setTimeout(resolve, delay));
     });
 }
+// Transient network errors that are safe to retry — failures that can self-heal
+// without any config change (socket reset, broken pipe, aborted connection).
+// Deliberately excludes ENOTFOUND, ECONNREFUSED, cert errors — those won't self-heal.
+const RETRYABLE_ERROR_CODES = new Set(["ECONNRESET", "EPIPE", "ECONNABORTED"]);
+function isRetryableNetworkError(e) {
+    var _a, _b, _c;
+    if (typeof e !== "object" || e === null)
+        return false;
+    // Check both e.code (old request-lib / nock shape) and e.cause.code
+    // (native fetch / undici shape: TypeError: fetch failed { cause: { code } })
+    const err = e;
+    const code = (_c = (_a = err.code) !== null && _a !== void 0 ? _a : (_b = err.cause) === null || _b === void 0 ? void 0 : _b.code) !== null && _c !== void 0 ? _c : "";
+    return RETRYABLE_ERROR_CODES.has(code);
+}
+function calculateWait(nrOfTries) {
+    let wait = BASE_DELAY * Math.pow(2, nrOfTries - 1);
+    wait = getRandomInt(wait + 1, wait + MAX_REQUEST_RETRY_JITTER);
+    return Math.min(wait, MAX_REQUEST_RETRY_DELAY);
+}
 /**
  * @private
  * Function that retries the provided action callback for a configurable amount of time, defaults to 3.
@@ -47,13 +67,23 @@ function retry(action, { maxRetries, retryWhen }) {
     let nrOfTries = 0;
     const retryAndWait = () => __awaiter(this, void 0, void 0, function* () {
         let result;
-        result = yield action();
+        try {
+            result = yield action();
+        }
+        catch (e) {
+            if (e instanceof errors_js_1.TimeoutError) {
+                throw e;
+            }
+            if (isRetryableNetworkError(e) && nrOfTries < nrOfTriesToAttempt) {
+                nrOfTries++;
+                yield pause(calculateWait(nrOfTries));
+                return retryAndWait();
+            }
+            throw e;
+        }
         if ((retryWhen || [429]).includes(result.status) && nrOfTries < nrOfTriesToAttempt) {
             nrOfTries++;
-            let wait = BASE_DELAY * Math.pow(2, nrOfTries - 1);
-            wait = getRandomInt(wait + 1, wait + MAX_REQUEST_RETRY_JITTER);
-            wait = Math.min(wait, MAX_REQUEST_RETRY_DELAY);
-            yield pause(wait);
+            yield pause(calculateWait(nrOfTries));
             result = yield retryAndWait();
         }
         return result;

package/dist/cjs/management/api/requests/requests.d.ts

@@ -103,7 +103,6 @@ export interface UpdateBrandingRequestContent {
     favicon_url?: string | null;
     /** URL for the logo. Must use HTTPS. */
     logo_url?: string | null;
-    identifiers?: Management.UpdateBrandingIdentifiers | null;
     font?: Management.UpdateBrandingFont | null;
 }
 /**
@@ -285,6 +284,7 @@ export interface CreateClientRequestContent {
     /** Makes the use of Proof-of-Possession mandatory for this client */
     require_proof_of_possession?: boolean;
     signed_request_object?: Management.ClientSignedRequestObjectWithPublicKey;
+    token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithPublicKey;
     compliance_level?: Management.ClientComplianceLevelEnum | null;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
@@ -402,8 +402,8 @@ export interface UpdateClientRequestContent {
     mobile?: Management.ClientMobile;
     /** Initiate login uri, must be https */
     initiate_login_uri?: string;
-    native_social_login?: Management.NativeSocialLogin;
-    fedcm_login?: Management.FedCmLogin;
+    native_social_login?: Management.NativeSocialLoginPatch | null;
+    fedcm_login?: Management.FedCmLoginPatch | null;
     refresh_token?: Management.ClientRefreshTokenConfiguration | null;
     default_organization?: Management.ClientDefaultOrganization | null;
     organization_usage?: Management.ClientOrganizationUsagePatchEnum | null;
@@ -416,6 +416,7 @@ export interface UpdateClientRequestContent {
     /** Makes the use of Proof-of-Possession mandatory for this client */
     require_proof_of_possession?: boolean;
     signed_request_object?: Management.ClientSignedRequestObjectWithCredentialId;
+    token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithCredentialId;
     compliance_level?: Management.ClientComplianceLevelEnum | null;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
@@ -521,6 +522,7 @@ export interface CreateConnectionRequestContent {
     metadata?: Management.ConnectionsMetadata;
     authentication?: Management.ConnectionAuthenticationPurpose;
     connected_accounts?: Management.ConnectionConnectedAccountsPurpose;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp;
 }
 /**
  * @example
@@ -554,6 +556,7 @@ export interface UpdateConnectionRequestContent {
     metadata?: Management.ConnectionsMetadata;
     authentication?: Management.ConnectionAuthenticationPurpose;
     connected_accounts?: Management.ConnectionConnectedAccountsPurpose;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp;
 }
 /**
  * @example
@@ -1286,7 +1289,7 @@ export interface RevokeRefreshTokensRequestContent {
     ids?: string[];
     /** Revoke all refresh tokens for this user. */
     user_id?: string;
-    /** Revoke all refresh tokens for this client. */
+    /** Revoke refresh tokens for this client. Must be paired with `user_id`; optionally narrowed further with `audience`. */
     client_id?: string;
     /** Resource server identifier (audience) to scope the revocation. Must be used with both `user_id` and `client_id`. */
     audience?: string;
@@ -2107,6 +2110,15 @@ export interface UpdateAttackProtectionCaptchaRequestContent {
     recaptcha_v2?: Management.AttackProtectionUpdateCaptchaRecaptchaV2;
     simple_captcha?: Management.AttackProtectionCaptchaSimpleCaptchaResponseContent;
 }
+/**
+ * @example
+ *     {
+ *         type: "exponential"
+ *     }
+ */
+export interface PatchPhoneProviderProtectionRequestContent {
+    type: Management.PhoneProviderProtectionBackoffStrategyEnum;
+}
 /**
  * @example
  *     {}
@@ -3648,12 +3660,20 @@ export interface UpdateTenantSettingsRequestContent {
     allowed_logout_urls?: string[];
     /** Number of hours a session will stay valid. */
     session_lifetime?: number;
+    /** Number of minutes a session will stay valid. Cannot be specified together with `session_lifetime`. */
+    session_lifetime_in_minutes?: number;
     /** Number of hours for which a session can be inactive before the user must log in again. */
     idle_session_lifetime?: number;
+    /** Number of minutes a session can be inactive before the user must log in again. Cannot be specified together with `idle_session_lifetime`. */
+    idle_session_lifetime_in_minutes?: number;
     /** Number of hours an ephemeral (non-persistent) session will stay valid. */
     ephemeral_session_lifetime?: number;
     /** Number of hours for which an ephemeral (non-persistent) session can be inactive before the user must log in again. */
     idle_ephemeral_session_lifetime?: number;
+    /** Number of minutes an ephemeral (non-persistent) session will stay valid. Cannot be specified together with `ephemeral_session_lifetime`. */
+    ephemeral_session_lifetime_in_minutes?: number;
+    /** Number of minutes an ephemeral (non-persistent) session can be inactive before the user must log in again. Cannot be specified together with `idle_ephemeral_session_lifetime`. */
+    idle_ephemeral_session_lifetime_in_minutes?: number;
     /** Selected sandbox version for the extensibility environment */
     sandbox_version?: string;
     /** Selected legacy sandbox version for the extensibility environment */
@@ -3662,6 +3682,7 @@ export interface UpdateTenantSettingsRequestContent {
     default_redirection_uri?: string;
     /** Supported locales for the user interface */
     enabled_locales?: Management.TenantSettingsSupportedLocalesEnum[];
+    security_headers?: Management.TenantSettingsNullableSecurityHeaders | null;
     session_cookie?: Management.SessionCookieSchema | null;
     sessions?: Management.TenantSettingsSessions | null;
     oidc_logout?: Management.TenantOidcLogoutSettings;
@@ -3689,6 +3710,8 @@ export interface UpdateTenantSettingsRequestContent {
     enable_ai_guide?: boolean;
     /** Whether Phone Consolidated Experience is enabled for this tenant. */
     phone_consolidated_experience?: boolean;
+    /** Whether session metadata is included in specific tenant logs (slo, oidc_backchannel_logout_failed, oidc_backchannel_logout_succeeded). */
+    include_session_metadata_in_tenant_logs?: boolean;
     dynamic_client_registration_security_mode?: Management.TenantSettingsDynamicClientRegistrationSecurityMode;
     country_codes?: Management.TenantSettingsCountryCodes | null;
 }
@@ -3825,6 +3848,7 @@ export interface LinkUserIdentityRequestContent {
     provider?: Management.UserIdentityProviderEnum;
     /** connection_id of the secondary user account being linked when more than one `auth0` database provider exists. */
     connection_id?: string;
+    /** user_id of the secondary user account being linked. */
     user_id?: Management.UserId;
     /** JWT for the secondary account being linked. If sending this parameter, `provider`, `user_id`, and `connection_id` must not be sent. */
     link_with?: string;

package/dist/cjs/management/api/resources/attackProtection/client/Client.d.ts

@@ -4,6 +4,7 @@ import { BotDetectionClient } from "../resources/botDetection/client/Client.js";
 import { BreachedPasswordDetectionClient } from "../resources/breachedPasswordDetection/client/Client.js";
 import { BruteForceProtectionClient } from "../resources/bruteForceProtection/client/Client.js";
 import { CaptchaClient } from "../resources/captcha/client/Client.js";
+import { PhoneProviderProtectionClient } from "../resources/phoneProviderProtection/client/Client.js";
 import { SuspiciousIpThrottlingClient } from "../resources/suspiciousIpThrottling/client/Client.js";
 export declare namespace AttackProtectionClient {
     type Options = BaseClientOptions;
@@ -14,11 +15,13 @@ export declare class AttackProtectionClient {
     protected _breachedPasswordDetection: BreachedPasswordDetectionClient | undefined;
     protected _bruteForceProtection: BruteForceProtectionClient | undefined;
     protected _captcha: CaptchaClient | undefined;
+    protected _phoneProviderProtection: PhoneProviderProtectionClient | undefined;
     protected _suspiciousIpThrottling: SuspiciousIpThrottlingClient | undefined;
     constructor(options: AttackProtectionClient.Options);
     get botDetection(): BotDetectionClient;
     get breachedPasswordDetection(): BreachedPasswordDetectionClient;
     get bruteForceProtection(): BruteForceProtectionClient;
     get captcha(): CaptchaClient;
+    get phoneProviderProtection(): PhoneProviderProtectionClient;
     get suspiciousIpThrottling(): SuspiciousIpThrottlingClient;
 }

package/dist/cjs/management/api/resources/attackProtection/client/Client.js

@@ -7,7 +7,8 @@ const Client_js_1 = require("../resources/botDetection/client/Client.js");
 const Client_js_2 = require("../resources/breachedPasswordDetection/client/Client.js");
 const Client_js_3 = require("../resources/bruteForceProtection/client/Client.js");
 const Client_js_4 = require("../resources/captcha/client/Client.js");
-const Client_js_5 = require("../resources/suspiciousIpThrottling/client/Client.js");
+const Client_js_5 = require("../resources/phoneProviderProtection/client/Client.js");
+const Client_js_6 = require("../resources/suspiciousIpThrottling/client/Client.js");
 class AttackProtectionClient {
     constructor(options) {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
@@ -28,9 +29,13 @@ class AttackProtectionClient {
         var _a;
         return ((_a = this._captcha) !== null && _a !== void 0 ? _a : (this._captcha = new Client_js_4.CaptchaClient(this._options)));
     }
+    get phoneProviderProtection() {
+        var _a;
+        return ((_a = this._phoneProviderProtection) !== null && _a !== void 0 ? _a : (this._phoneProviderProtection = new Client_js_5.PhoneProviderProtectionClient(this._options)));
+    }
     get suspiciousIpThrottling() {
         var _a;
-        return ((_a = this._suspiciousIpThrottling) !== null && _a !== void 0 ? _a : (this._suspiciousIpThrottling = new Client_js_5.SuspiciousIpThrottlingClient(this._options)));
+        return ((_a = this._suspiciousIpThrottling) !== null && _a !== void 0 ? _a : (this._suspiciousIpThrottling = new Client_js_6.SuspiciousIpThrottlingClient(this._options)));
     }
 }
 exports.AttackProtectionClient = AttackProtectionClient;

package/dist/cjs/management/api/resources/attackProtection/resources/index.d.ts

@@ -2,4 +2,5 @@ export * as botDetection from "./botDetection/index.js";
 export * as breachedPasswordDetection from "./breachedPasswordDetection/index.js";
 export * as bruteForceProtection from "./bruteForceProtection/index.js";
 export * as captcha from "./captcha/index.js";
+export * as phoneProviderProtection from "./phoneProviderProtection/index.js";
 export * as suspiciousIpThrottling from "./suspiciousIpThrottling/index.js";

package/dist/cjs/management/api/resources/attackProtection/resources/index.js

@@ -33,9 +33,10 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.suspiciousIpThrottling = exports.captcha = exports.bruteForceProtection = exports.breachedPasswordDetection = exports.botDetection = void 0;
+exports.suspiciousIpThrottling = exports.phoneProviderProtection = exports.captcha = exports.bruteForceProtection = exports.breachedPasswordDetection = exports.botDetection = void 0;
 exports.botDetection = __importStar(require("./botDetection/index.js"));
 exports.breachedPasswordDetection = __importStar(require("./breachedPasswordDetection/index.js"));
 exports.bruteForceProtection = __importStar(require("./bruteForceProtection/index.js"));
 exports.captcha = __importStar(require("./captcha/index.js"));
+exports.phoneProviderProtection = __importStar(require("./phoneProviderProtection/index.js"));
 exports.suspiciousIpThrottling = __importStar(require("./suspiciousIpThrottling/index.js"));

package/dist/cjs/management/api/resources/attackProtection/resources/phoneProviderProtection/client/Client.d.ts

@@ -0,0 +1,45 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../BaseClient.js";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../BaseClient.js";
+import * as core from "../../../../../../core/index.js";
+import * as Management from "../../../../../index.js";
+export declare namespace PhoneProviderProtectionClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class PhoneProviderProtectionClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<PhoneProviderProtectionClient.Options>;
+    constructor(options: PhoneProviderProtectionClient.Options);
+    /**
+     * Get the phone provider protection configuration for a tenant.
+     *
+     * @param {PhoneProviderProtectionClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.phoneProviderProtection.get()
+     */
+    get(requestOptions?: PhoneProviderProtectionClient.RequestOptions): core.HttpResponsePromise<Management.GetPhoneProviderProtectionResponseContent>;
+    private __get;
+    /**
+     * Update the phone provider protection configuration for a tenant.
+     *
+     * @param {Management.PatchPhoneProviderProtectionRequestContent} request
+     * @param {PhoneProviderProtectionClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.phoneProviderProtection.patch({
+     *         type: "exponential"
+     *     })
+     */
+    patch(request: Management.PatchPhoneProviderProtectionRequestContent, requestOptions?: PhoneProviderProtectionClient.RequestOptions): core.HttpResponsePromise<Management.PatchPhoneProviderProtectionResponseContent>;
+    private __patch;
+}

package/dist/cjs/management/api/resources/attackProtection/resources/phoneProviderProtection/client/Client.js

@@ -0,0 +1,180 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PhoneProviderProtectionClient = void 0;
+const BaseClient_js_1 = require("../../../../../../BaseClient.js");
+const core = __importStar(require("../../../../../../core/index.js"));
+const headers_js_1 = require("../../../../../../core/headers.js");
+const environments = __importStar(require("../../../../../../environments.js"));
+const handleNonStatusCodeError_js_1 = require("../../../../../../errors/handleNonStatusCodeError.js");
+const errors = __importStar(require("../../../../../../errors/index.js"));
+const Management = __importStar(require("../../../../../index.js"));
+class PhoneProviderProtectionClient {
+    constructor(options) {
+        this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
+    }
+    /**
+     * Get the phone provider protection configuration for a tenant.
+     *
+     * @param {PhoneProviderProtectionClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.phoneProviderProtection.get()
+     */
+    get(requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__get(requestOptions));
+    }
+    __get(requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, "attack-protection/phone-provider-protection"),
+                method: "GET",
+                headers: _headers,
+                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
+                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: _response.body,
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 401:
+                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                    case 403:
+                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
+                    case 429:
+                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.ManagementError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "GET", "/attack-protection/phone-provider-protection");
+        });
+    }
+    /**
+     * Update the phone provider protection configuration for a tenant.
+     *
+     * @param {Management.PatchPhoneProviderProtectionRequestContent} request
+     * @param {PhoneProviderProtectionClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.phoneProviderProtection.patch({
+     *         type: "exponential"
+     *     })
+     */
+    patch(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__patch(request, requestOptions));
+    }
+    __patch(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, "attack-protection/phone-provider-protection"),
+                method: "PATCH",
+                headers: _headers,
+                contentType: "application/json",
+                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
+                requestType: "json",
+                body: request,
+                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: _response.body,
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 401:
+                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                    case 403:
+                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 429:
+                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.ManagementError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "PATCH", "/attack-protection/phone-provider-protection");
+        });
+    }
+}
+exports.PhoneProviderProtectionClient = PhoneProviderProtectionClient;

package/dist/cjs/management/api/resources/attackProtection/resources/phoneProviderProtection/client/index.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cjs/management/api/resources/attackProtection/resources/phoneProviderProtection/client/index.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/api/resources/attackProtection/resources/phoneProviderProtection/index.d.ts

@@ -0,0 +1 @@
+export * from "./client/index.js";

package/dist/cjs/management/api/resources/attackProtection/resources/phoneProviderProtection/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./client/index.js"), exports);

package/dist/cjs/management/api/resources/branding/resources/phone/resources/providers/client/Client.d.ts

@@ -11,7 +11,7 @@ export declare class ProvidersClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<ProvidersClient.Options>;
     constructor(options: ProvidersClient.Options);
     /**
-     * Retrieve a list of <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone providers</a> details set for a Tenant. A list of fields to include or exclude may also be specified.
+     * Retrieve a list of [phone providers](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details set for a Tenant. A list of fields to include or exclude may also be specified.
      *
      * @param {Management.ListBrandingPhoneProvidersRequestParameters} request
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -29,8 +29,8 @@ export declare class ProvidersClient {
     list(request?: Management.ListBrandingPhoneProvidersRequestParameters, requestOptions?: ProvidersClient.RequestOptions): core.HttpResponsePromise<Management.ListBrandingPhoneProvidersResponseContent>;
     private __list;
     /**
-     * Create a <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a>.
-     * The <code>credentials</code> object requires different properties depending on the phone provider (which is specified using the <code>name</code> property).
+     * Create a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+     * The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
      *
      * @param {Management.CreateBrandingPhoneProviderRequestContent} request
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -52,7 +52,7 @@ export declare class ProvidersClient {
     create(request: Management.CreateBrandingPhoneProviderRequestContent, requestOptions?: ProvidersClient.RequestOptions): core.HttpResponsePromise<Management.CreateBrandingPhoneProviderResponseContent>;
     private __create;
     /**
-     * Retrieve <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a> details. A list of fields to include or exclude may also be specified.
+     * Retrieve [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details. A list of fields to include or exclude may also be specified.
      *
      * @param {string} id
      * @param {ProvidersClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -85,8 +85,8 @@ export declare class ProvidersClient {
     delete(id: string, requestOptions?: ProvidersClient.RequestOptions): core.HttpResponsePromise<void>;
     private __delete;
     /**
-     * Update a <a href="https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers">phone provider</a>.
-     * The <code>credentials</code> object requires different properties depending on the phone provider (which is specified using the <code>name</code> property).
+     * Update a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+     * The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
      *
      * @param {string} id
      * @param {Management.UpdateBrandingPhoneProviderRequestContent} request