auth0 5.12.0 → 5.13.0

package/dist/cjs/management/api/types/types.d.ts

@@ -1915,6 +1915,8 @@ export interface Client {
     mobile?: Management.ClientMobile | undefined;
     /** Initiate login uri, must be https */
     initiate_login_uri?: string | undefined;
+    native_social_login?: Management.NativeSocialLogin | undefined;
+    fedcm_login?: Management.FedCmLogin | undefined;
     refresh_token?: (Management.ClientRefreshTokenConfiguration | null) | undefined;
     default_organization?: (Management.ClientDefaultOrganization | null) | undefined;
     organization_usage?: Management.ClientOrganizationUsageEnum | undefined;
@@ -1927,6 +1929,7 @@ export interface Client {
     /** Makes the use of Proof-of-Possession mandatory for this client */
     require_proof_of_possession?: boolean | undefined;
     signed_request_object?: Management.ClientSignedRequestObjectWithCredentialId | undefined;
+    token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithCredentialId | undefined;
     compliance_level?: (Management.ClientComplianceLevelEnum | null) | undefined;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
@@ -2900,6 +2903,20 @@ export declare const ClientTokenExchangeTypeEnum: {
     readonly OnBehalfOfTokenExchange: "on_behalf_of_token_exchange";
 };
 export type ClientTokenExchangeTypeEnum = (typeof ClientTokenExchangeTypeEnum)[keyof typeof ClientTokenExchangeTypeEnum];
+/**
+ * Settings for Token Vault Privileged Access.
+ */
+export interface ClientTokenVaultPrivilegedAccessWithCredentialId {
+    credentials: Management.CredentialId[];
+    ip_allowlist?: Management.TokenVaultPrivilegedAccessIpAllowlistEntry[] | undefined;
+}
+/**
+ * Settings for Token Vault Privileged Access.
+ */
+export interface ClientTokenVaultPrivilegedAccessWithPublicKey {
+    credentials: Management.PublicKeyCredential[];
+    ip_allowlist?: Management.TokenVaultPrivilegedAccessIpAllowlistEntry[] | undefined;
+}
 export interface ConnectedAccount {
     /** The unique identifier for the connected account. */
     id: string;
@@ -3517,6 +3534,7 @@ export interface ConnectionForList {
     metadata?: Management.ConnectionsMetadata | undefined;
     authentication?: Management.ConnectionAuthenticationPurpose | undefined;
     connected_accounts?: Management.ConnectionConnectedAccountsPurpose | undefined;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
 }
 /**
  * Connection to be added to the organization.
@@ -5976,6 +5994,7 @@ export interface ConnectionResponseContentOidc extends Management.ConnectionResp
     strategy: ConnectionResponseContentOidc.Strategy;
     authentication?: Management.ConnectionAuthenticationPurpose | undefined;
     connected_accounts?: Management.ConnectionConnectedAccountsPurposeXaa | undefined;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     options?: Management.ConnectionOptionsOidc | undefined;
     show_as_button?: Management.ConnectionShowAsButton | undefined;
 }
@@ -6005,6 +6024,7 @@ export declare namespace ConnectionResponseContentOffice365 {
  */
 export interface ConnectionResponseContentOkta extends Management.ConnectionPurposes, Management.ConnectionResponseCommon {
     strategy: ConnectionResponseContentOkta.Strategy;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     options?: Management.ConnectionOptionsOkta | undefined;
     show_as_button?: Management.ConnectionShowAsButton | undefined;
 }
@@ -6987,6 +7007,8 @@ export interface CreateClientResponseContent {
     mobile?: Management.ClientMobile | undefined;
     /** Initiate login uri, must be https */
     initiate_login_uri?: string | undefined;
+    native_social_login?: Management.NativeSocialLogin | undefined;
+    fedcm_login?: Management.FedCmLogin | undefined;
     refresh_token?: (Management.ClientRefreshTokenConfiguration | null) | undefined;
     default_organization?: (Management.ClientDefaultOrganization | null) | undefined;
     organization_usage?: Management.ClientOrganizationUsageEnum | undefined;
@@ -6999,6 +7021,7 @@ export interface CreateClientResponseContent {
     /** Makes the use of Proof-of-Possession mandatory for this client */
     require_proof_of_possession?: boolean | undefined;
     signed_request_object?: Management.ClientSignedRequestObjectWithCredentialId | undefined;
+    token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithCredentialId | undefined;
     compliance_level?: (Management.ClientComplianceLevelEnum | null) | undefined;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
@@ -7445,6 +7468,7 @@ export interface CreateConnectionRequestContentOidc extends Management.CreateCon
     strategy: CreateConnectionRequestContentOidc.Strategy;
     authentication?: Management.ConnectionAuthenticationPurpose | undefined;
     connected_accounts?: Management.ConnectionConnectedAccountsPurposeXaa | undefined;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     options?: Management.ConnectionOptionsOidc | undefined;
     show_as_button?: Management.ConnectionShowAsButton | undefined;
 }
@@ -7473,6 +7497,7 @@ export declare namespace CreateConnectionRequestContentOffice365 {
  */
 export interface CreateConnectionRequestContentOkta extends Management.CreateConnectionCommon {
     strategy: CreateConnectionRequestContentOkta.Strategy;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     options?: Management.ConnectionOptionsOkta | undefined;
     show_as_button?: Management.ConnectionShowAsButton | undefined;
 }
@@ -7792,6 +7817,7 @@ export interface CreateConnectionResponseContent {
     metadata?: Management.ConnectionsMetadata | undefined;
     authentication?: Management.ConnectionAuthenticationPurpose | undefined;
     connected_accounts?: Management.ConnectionConnectedAccountsPurpose | undefined;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
 }
 export interface CreateCustomDomainResponseContent {
     /** ID of the custom domain. */
@@ -8782,8 +8808,10 @@ export interface CreateUserResponseContent {
     phone_number?: string | undefined;
     /** Whether this phone number has been verified (true) or not (false). */
     phone_verified?: boolean | undefined;
-    created_at?: Management.UserDateSchema | undefined;
-    updated_at?: Management.UserDateSchema | undefined;
+    /** Date and time when this user was created. */
+    created_at?: string | undefined;
+    /** Date and time when this user was last updated/modified. */
+    updated_at?: string | undefined;
     /** Array of user identity objects when accounts are linked. */
     identities?: Management.UserIdentitySchema[] | undefined;
     app_metadata?: Management.UserAppMetadataSchema | undefined;
@@ -8796,11 +8824,14 @@ export interface CreateUserResponseContent {
     nickname?: string | undefined;
     /** List of multi-factor authentication providers with which this user has enrolled. */
     multifactor?: string[] | undefined;
-    multifactor_last_modified?: Management.UserDateSchema | undefined;
+    /** Last date and time this user's multi-factor authentication providers were updated. */
+    multifactor_last_modified?: string | undefined;
     /** Last IP address from which this user logged in. */
     last_ip?: string | undefined;
-    last_login?: Management.UserDateSchema | undefined;
-    last_password_reset?: Management.UserDateSchema | undefined;
+    /** Last date and time this user logged in. */
+    last_login?: string | undefined;
+    /** Last date and time this user had their password reset. */
+    last_password_reset?: string | undefined;
     /** Total number of logins this user has performed. */
     logins_count?: number | undefined;
     /** Whether this user was blocked by an administrator (true) or is not (false). */
@@ -8870,6 +8901,13 @@ export interface CredentialId {
     /** Credential ID */
     id: string;
 }
+/**
+ * Configure the connection to be used as a Requesting Application for Cross App Access.
+ */
+export interface CrossAppAccessRequestingApp {
+    /** Set to `true` to enable the connection as a Requesting Application for Cross App Access. */
+    active: boolean;
+}
 /**
  * CSP directives map. Keys are directive names, values are arrays of directive values.
  */
@@ -9116,7 +9154,7 @@ export interface DeleteUserIdentityResponseContentItem {
     /** The name of the connection for the identity. */
     connection: string;
     /** The unique identifier for the user for the identity. */
-    user_id: string;
+    user_id: Management.UserId;
     /** The type of identity provider. */
     provider: string;
     /** <code>true</code> if the identity provider is a social provider, <code>false</code>s otherwise */
@@ -9408,10 +9446,11 @@ export type EmailSparkPostRegionEnum = (typeof EmailSparkPostRegionEnum)[keyof t
  * Specific provider setting
  */
 export type EmailSpecificProviderSettingsWithAdditionalProperties = (Record<string, unknown> | null) | undefined;
-/** Template name. Can be `verify_email`, `verify_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy). */
+/** Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy). */
 export declare const EmailTemplateNameEnum: {
     readonly VerifyEmail: "verify_email";
     readonly VerifyEmailByCode: "verify_email_by_code";
+    readonly AuthEmailByCode: "auth_email_by_code";
     readonly ResetEmail: "reset_email";
     readonly ResetEmailByCode: "reset_email_by_code";
     readonly WelcomeEmail: "welcome_email";
@@ -13034,6 +13073,19 @@ export interface FedCmLoginGoogle {
     /** When true, shows the Google FedCM prompt on New Universal Login for this client */
     is_enabled?: boolean | undefined;
 }
+/**
+ * Google FedCM configuration for this client
+ */
+export interface FedCmLoginGooglePatch {
+    /** When true, shows the Google FedCM prompt on New Universal Login for this client */
+    is_enabled?: boolean | undefined;
+}
+/**
+ * Configure FedCM login settings for New Universal Login
+ */
+export interface FedCmLoginPatch {
+    google?: (Management.FedCmLoginGooglePatch | null) | undefined;
+}
 export interface FederatedConnectionTokenSet {
     id?: string | undefined;
     connection?: string | undefined;
@@ -16192,6 +16244,8 @@ export interface GetClientResponseContent {
     mobile?: Management.ClientMobile | undefined;
     /** Initiate login uri, must be https */
     initiate_login_uri?: string | undefined;
+    native_social_login?: Management.NativeSocialLogin | undefined;
+    fedcm_login?: Management.FedCmLogin | undefined;
     refresh_token?: (Management.ClientRefreshTokenConfiguration | null) | undefined;
     default_organization?: (Management.ClientDefaultOrganization | null) | undefined;
     organization_usage?: Management.ClientOrganizationUsageEnum | undefined;
@@ -16204,6 +16258,7 @@ export interface GetClientResponseContent {
     /** Makes the use of Proof-of-Possession mandatory for this client */
     require_proof_of_possession?: boolean | undefined;
     signed_request_object?: Management.ClientSignedRequestObjectWithCredentialId | undefined;
+    token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithCredentialId | undefined;
     compliance_level?: (Management.ClientComplianceLevelEnum | null) | undefined;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
@@ -16276,6 +16331,7 @@ export interface GetConnectionResponseContent {
     metadata?: Management.ConnectionsMetadata | undefined;
     authentication?: Management.ConnectionAuthenticationPurpose | undefined;
     connected_accounts?: Management.ConnectionConnectedAccountsPurpose | undefined;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
 }
 export interface GetCustomDomainResponseContent {
     /** ID of the custom domain. */
@@ -16854,6 +16910,11 @@ export interface GetOrganizationResponseContent {
  * An object containing template partials for a group of screens.
  */
 export type GetPartialsResponseContent = Record<string, unknown>;
+export interface GetPhoneProviderProtectionResponseContent {
+    type: Management.PhoneProviderProtectionBackoffStrategyEnum;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}
 export interface GetPhoneTemplateResponseContent {
     id?: string | undefined;
     channel?: string | undefined;
@@ -17261,8 +17322,10 @@ export interface GetUserResponseContent {
     phone_number?: string | undefined;
     /** Whether this phone number has been verified (true) or not (false). */
     phone_verified?: boolean | undefined;
-    created_at?: Management.UserDateSchema | undefined;
-    updated_at?: Management.UserDateSchema | undefined;
+    /** Date and time when this user was created. */
+    created_at?: string | undefined;
+    /** Date and time when this user was last updated/modified. */
+    updated_at?: string | undefined;
     /** Array of user identity objects when accounts are linked. */
     identities?: Management.UserIdentitySchema[] | undefined;
     app_metadata?: Management.UserAppMetadataSchema | undefined;
@@ -17275,11 +17338,14 @@ export interface GetUserResponseContent {
     nickname?: string | undefined;
     /** List of multi-factor authentication providers with which this user has enrolled. */
     multifactor?: string[] | undefined;
-    multifactor_last_modified?: Management.UserDateSchema | undefined;
+    /** Last date and time this user's multi-factor authentication providers were updated. */
+    multifactor_last_modified?: string | undefined;
     /** Last IP address from which this user logged in. */
     last_ip?: string | undefined;
-    last_login?: Management.UserDateSchema | undefined;
-    last_password_reset?: Management.UserDateSchema | undefined;
+    /** Last date and time this user logged in. */
+    last_login?: string | undefined;
+    /** Last date and time this user had their password reset. */
+    last_password_reset?: string | undefined;
     /** Total number of logins this user has performed. */
     logins_count?: number | undefined;
     /** Whether this user was blocked by an administrator (true) or is not (false). */
@@ -18656,6 +18722,13 @@ export interface NativeSocialLoginApple {
     /** Determine whether or not to allow signing in natively using an Apple authorization code */
     enabled?: boolean | undefined;
 }
+/**
+ * Native Social Login support for the Apple connection
+ */
+export interface NativeSocialLoginApplePatch {
+    /** Determine whether or not to allow signing in natively using an Apple authorization code */
+    enabled?: boolean | undefined;
+}
 /**
  * Native Social Login support for the Facebook connection
  */
@@ -18663,6 +18736,13 @@ export interface NativeSocialLoginFacebook {
     /** Determine whether or not to allow signing in natively using Facebook */
     enabled?: boolean | undefined;
 }
+/**
+ * Native Social Login support for the Facebook connection
+ */
+export interface NativeSocialLoginFacebookPatch {
+    /** Determine whether or not to allow signing in natively using Facebook */
+    enabled?: boolean | undefined;
+}
 /**
  * Native Social Login support for the google-oauth2 connection
  */
@@ -18670,6 +18750,21 @@ export interface NativeSocialLoginGoogle {
     /** Determine whether or not to allow signing in natively using a Google ID token */
     enabled?: boolean | undefined;
 }
+/**
+ * Native Social Login support for the google-oauth2 connection
+ */
+export interface NativeSocialLoginGooglePatch {
+    /** Determine whether or not to allow signing in natively using a Google ID token */
+    enabled?: boolean | undefined;
+}
+/**
+ * Configure native social settings
+ */
+export interface NativeSocialLoginPatch {
+    apple?: (Management.NativeSocialLoginApplePatch | null) | undefined;
+    facebook?: (Management.NativeSocialLoginFacebookPatch | null) | undefined;
+    google?: (Management.NativeSocialLoginGooglePatch | null) | undefined;
+}
 export type NetworkAclMatchConnectingIpv4Cidr = string;
 export type NetworkAclMatchConnectingIpv6Cidr = string;
 export type NetworkAclMatchIpv4Cidr = string;
@@ -19016,6 +19111,11 @@ export interface PatchClientCredentialResponseContent {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export interface PatchPhoneProviderProtectionResponseContent {
+    type: Management.PhoneProviderProtectionBackoffStrategyEnum;
+    /** Accepts any additional properties */
+    [key: string]: any;
+}
 export type PatchRateLimitPolicyConfigurationRequestContent = {
     action: "allow";
 } | {
@@ -19079,6 +19179,12 @@ export declare const PhoneProviderNameEnum: {
     readonly Custom: "custom";
 };
 export type PhoneProviderNameEnum = (typeof PhoneProviderNameEnum)[keyof typeof PhoneProviderNameEnum];
+/** The type of backoff strategy to use. */
+export declare const PhoneProviderProtectionBackoffStrategyEnum: {
+    readonly Exponential: "exponential";
+    readonly None: "none";
+};
+export type PhoneProviderProtectionBackoffStrategyEnum = (typeof PhoneProviderProtectionBackoffStrategyEnum)[keyof typeof PhoneProviderProtectionBackoffStrategyEnum];
 /**
  * Phone provider configuration schema
  */
@@ -19765,6 +19871,8 @@ export interface RotateClientSecretResponseContent {
     mobile?: Management.ClientMobile | undefined;
     /** Initiate login uri, must be https */
     initiate_login_uri?: string | undefined;
+    native_social_login?: Management.NativeSocialLogin | undefined;
+    fedcm_login?: Management.FedCmLogin | undefined;
     refresh_token?: (Management.ClientRefreshTokenConfiguration | null) | undefined;
     default_organization?: (Management.ClientDefaultOrganization | null) | undefined;
     organization_usage?: Management.ClientOrganizationUsageEnum | undefined;
@@ -19777,6 +19885,7 @@ export interface RotateClientSecretResponseContent {
     /** Makes the use of Proof-of-Possession mandatory for this client */
     require_proof_of_possession?: boolean | undefined;
     signed_request_object?: Management.ClientSignedRequestObjectWithCredentialId | undefined;
+    token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithCredentialId | undefined;
     compliance_level?: (Management.ClientComplianceLevelEnum | null) | undefined;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
@@ -20973,6 +21082,7 @@ export interface TokenQuotaConfiguration {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export type TokenVaultPrivilegedAccessIpAllowlistEntry = string;
 /**
  * Too Many Requests
  */
@@ -21295,6 +21405,8 @@ export interface UpdateClientResponseContent {
     mobile?: Management.ClientMobile | undefined;
     /** Initiate login uri, must be https */
     initiate_login_uri?: string | undefined;
+    native_social_login?: Management.NativeSocialLogin | undefined;
+    fedcm_login?: Management.FedCmLogin | undefined;
     refresh_token?: (Management.ClientRefreshTokenConfiguration | null) | undefined;
     default_organization?: (Management.ClientDefaultOrganization | null) | undefined;
     organization_usage?: Management.ClientOrganizationUsageEnum | undefined;
@@ -21307,6 +21419,7 @@ export interface UpdateClientResponseContent {
     /** Makes the use of Proof-of-Possession mandatory for this client */
     require_proof_of_possession?: boolean | undefined;
     signed_request_object?: Management.ClientSignedRequestObjectWithCredentialId | undefined;
+    token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithCredentialId | undefined;
     compliance_level?: (Management.ClientComplianceLevelEnum | null) | undefined;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
@@ -21586,6 +21699,7 @@ export interface UpdateConnectionRequestContentOidc extends Management.Connectio
     options?: Management.ConnectionOptionsOidc | undefined;
     authentication?: Management.ConnectionAuthenticationPurpose | undefined;
     connected_accounts?: Management.ConnectionConnectedAccountsPurposeXaa | undefined;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     show_as_button?: Management.ConnectionShowAsButton | undefined;
 }
 /**
@@ -21599,6 +21713,7 @@ export interface UpdateConnectionRequestContentOffice365 extends Management.Conn
  * Update a connection with strategy=okta
  */
 export interface UpdateConnectionRequestContentOkta extends Management.ConnectionCommon {
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
     options?: Management.ConnectionOptionsOkta | undefined;
     show_as_button?: Management.ConnectionShowAsButton | undefined;
 }
@@ -21758,6 +21873,7 @@ export interface UpdateConnectionResponseContent {
     metadata?: Management.ConnectionsMetadata | undefined;
     authentication?: Management.ConnectionAuthenticationPurpose | undefined;
     connected_accounts?: Management.ConnectionConnectedAccountsPurpose | undefined;
+    cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp | undefined;
 }
 export interface UpdateCustomDomainResponseContent {
     /** ID of the custom domain. */
@@ -22341,8 +22457,10 @@ export interface UpdateUserResponseContent {
     phone_number?: string | undefined;
     /** Whether this phone number has been verified (true) or not (false). */
     phone_verified?: boolean | undefined;
-    created_at?: Management.UserDateSchema | undefined;
-    updated_at?: Management.UserDateSchema | undefined;
+    /** Date and time when this user was created. */
+    created_at?: string | undefined;
+    /** Date and time when this user was last updated/modified. */
+    updated_at?: string | undefined;
     /** Array of user identity objects when accounts are linked. */
     identities?: Management.UserIdentitySchema[] | undefined;
     app_metadata?: Management.UserAppMetadataSchema | undefined;
@@ -22355,11 +22473,14 @@ export interface UpdateUserResponseContent {
     nickname?: string | undefined;
     /** List of multi-factor authentication providers with which this user has enrolled. */
     multifactor?: string[] | undefined;
-    multifactor_last_modified?: Management.UserDateSchema | undefined;
+    /** Last date and time this user's multi-factor authentication providers were updated. */
+    multifactor_last_modified?: string | undefined;
     /** Last IP address from which this user logged in. */
     last_ip?: string | undefined;
-    last_login?: Management.UserDateSchema | undefined;
-    last_password_reset?: Management.UserDateSchema | undefined;
+    /** Last date and time this user logged in. */
+    last_login?: string | undefined;
+    /** Last date and time this user had their password reset. */
+    last_password_reset?: string | undefined;
     /** Total number of logins this user has performed. */
     logins_count?: number | undefined;
     /** Whether this user was blocked by an administrator (true) or is not (false). */
@@ -22590,13 +22711,6 @@ export interface UserBlockIdentifier {
     /** Accepts any additional properties */
     [key: string]: any;
 }
-export type UserDateSchema = 
-/**
- * Date and time when this user was created (ISO_8601 format). */
-string
-/**
- * Date and time when this user was created (ISO_8601 format). */
- | Record<string, unknown>;
 export interface UserEffectivePermissionResponseContent {
     /** Resource server (API) identifier that this permission is for. */
     resource_server_identifier?: string | undefined;
@@ -22678,7 +22792,7 @@ export interface UserGroupsResponseSchema extends Management.Group {
     membership_created_at?: string | undefined;
 }
 /**
- * user_id of the secondary user account being linked.
+ * Unique identifier of the user for this identity.
  */
 export type UserId = string | number;
 export interface UserIdentity {
@@ -22760,8 +22874,7 @@ export type UserIdentityProviderEnum = (typeof UserIdentityProviderEnum)[keyof t
 export interface UserIdentitySchema {
     /** Name of the connection containing this identity. */
     connection?: string | undefined;
-    /** Unique identifier of the user user for this identity. */
-    user_id?: string | undefined;
+    user_id?: Management.UserId | undefined;
     provider?: Management.UserIdentityProviderEnum | undefined;
     /** Whether this identity is from a social provider (true) or not (false). */
     isSocial?: boolean | undefined;
@@ -22837,8 +22950,10 @@ export interface UserResponseSchema {
     phone_number?: string | undefined;
     /** Whether this phone number has been verified (true) or not (false). */
     phone_verified?: boolean | undefined;
-    created_at?: Management.UserDateSchema | undefined;
-    updated_at?: Management.UserDateSchema | undefined;
+    /** Date and time when this user was created. */
+    created_at?: string | undefined;
+    /** Date and time when this user was last updated/modified. */
+    updated_at?: string | undefined;
     /** Array of user identity objects when accounts are linked. */
     identities?: Management.UserIdentitySchema[] | undefined;
     app_metadata?: Management.UserAppMetadataSchema | undefined;
@@ -22851,11 +22966,14 @@ export interface UserResponseSchema {
     nickname?: string | undefined;
     /** List of multi-factor authentication providers with which this user has enrolled. */
     multifactor?: string[] | undefined;
-    multifactor_last_modified?: Management.UserDateSchema | undefined;
+    /** Last date and time this user's multi-factor authentication providers were updated. */
+    multifactor_last_modified?: string | undefined;
     /** Last IP address from which this user logged in. */
     last_ip?: string | undefined;
-    last_login?: Management.UserDateSchema | undefined;
-    last_password_reset?: Management.UserDateSchema | undefined;
+    /** Last date and time this user logged in. */
+    last_login?: string | undefined;
+    /** Last date and time this user had their password reset. */
+    last_password_reset?: string | undefined;
     /** Total number of logins this user has performed. */
     logins_count?: number | undefined;
     /** Whether this user was blocked by an administrator (true) or is not (false). */

package/dist/cjs/management/api/types/types.js

@@ -12,8 +12,8 @@ exports.FlowActionSalesforceUpdateLead = exports.FlowActionSalesforceSearchLeads
 exports.FlowsVaultConnectionAppIdZapierEnum = exports.FlowsVaultConnectionAppIdWhatsappEnum = exports.FlowsVaultConnectionAppIdTwilioEnum = exports.FlowsVaultConnectionAppIdTelegramEnum = exports.FlowsVaultConnectionAppIdStripeEnum = exports.FlowsVaultConnectionAppIdSlackEnum = exports.FlowsVaultConnectionAppIdSendgridEnum = exports.FlowsVaultConnectionAppIdSalesforceEnum = exports.FlowsVaultConnectionAppIdPipedriveEnum = exports.FlowsVaultConnectionAppIdMailjetEnum = exports.FlowsVaultConnectionAppIdMailchimpEnum = exports.FlowsVaultConnectionAppIdJwtEnum = exports.FlowsVaultConnectionAppIdHubspotEnum = exports.FlowsVaultConnectionAppIdHttpEnum = exports.FlowsVaultConnectionAppIdGoogleSheetsEnum = exports.FlowsVaultConnectionAppIdDocusignEnum = exports.FlowsVaultConnectionAppIdClearbitEnum = exports.FlowsVaultConnectionAppIdBigqueryEnum = exports.FlowsVaultConnectionAppIdAuth0Enum = exports.FlowsVaultConnectionAppIdAirtableEnum = exports.FlowsVaultConnectionAppIdActivecampaignEnum = exports.FlowsVaultConnectioSetupTypeWebhookEnum = exports.FlowsVaultConnectioSetupTypeTokenEnum = exports.FlowsVaultConnectioSetupTypeOauthJwtEnum = exports.FlowsVaultConnectioSetupTypeOauthCodeEnum = exports.FlowsVaultConnectioSetupTypeOauthAppEnum = exports.FlowsVaultConnectioSetupTypeKeyPairEnum = exports.FlowsVaultConnectioSetupTypeJwtEnum = exports.FlowsVaultConnectioSetupTypeBearerEnum = exports.FlowsVaultConnectioSetupTypeApiKeyEnum = exports.FlowsVaultConnectioSetupJwtAlgorithmEnum = exports.FlowActionZapierTriggerWebhookParams = exports.FlowActionZapierTriggerWebhook = exports.FlowActionXmlSerializeXml = exports.FlowActionXmlParseXml = exports.FlowActionWhatsappSendMessageParams = exports.FlowActionWhatsappSendMessage = exports.FlowActionTwilioSendSms = exports.FlowActionTwilioMakeCall = exports.FlowActionTelegramSendMessage = exports.FlowActionStripeUpdateCustomer = exports.FlowActionStripeGetCustomer = exports.FlowActionStripeFindCustomers = exports.FlowActionStripeDeleteTaxId = exports.FlowActionStripeCreatePortalSession = exports.FlowActionStripeCreateCustomer = exports.FlowActionStripeAddTaxId = exports.FlowActionSlackPostMessageParamsAttachment = exports.FlowActionSlackPostMessage = exports.FlowActionSendgridSendEmail = void 0;
 exports.FormsRequestParametersHydrateEnum = exports.FormWidgetTypeRecaptchaConst = exports.FormWidgetTypeGMapsAddressConst = exports.FormWidgetTypeAuth0VerifiableCredentialsConst = exports.FormNodeTypeStepConst = exports.FormNodeTypeRouterConst = exports.FormNodeTypeFlowConst = exports.FormFieldTypeUrlConst = exports.FormFieldTypeTextConst = exports.FormFieldTypeTelConst = exports.FormFieldTypeSocialConst = exports.FormFieldTypePaymentConst = exports.FormFieldTypePasswordConst = exports.FormFieldTypeNumberConst = exports.FormFieldTypeLegalConst = exports.FormFieldTypeFileConst = exports.FormFieldTypeEmailConst = exports.FormFieldTypeDropdownConst = exports.FormFieldTypeDateConst = exports.FormFieldTypeCustomConst = exports.FormFieldTypeChoiceConst = exports.FormFieldTypeCardsConst = exports.FormFieldTypeBooleanConst = exports.FormFieldPaymentConfigProviderEnum = exports.FormFieldPaymentConfigChargeTypeSubscriptionConst = exports.FormFieldPaymentConfigChargeTypeOneOffConst = exports.FormFieldPaymentConfigChargeOneOffCurrencyEnum = exports.FormFieldPasswordConfigHashEnum = exports.FormFieldFileConfigStorageTypeEnum = exports.FormFieldFileConfigCategoryEnum = exports.FormFieldDateConfigFormatEnum = exports.FormEndingNodeId = exports.FormComponentCategoryWidgetConst = exports.FormComponentCategoryFieldConst = exports.FormComponentCategoryBlockConst = exports.FormBlockTypeRichTextConst = exports.FormBlockTypeResendButtonConst = exports.FormBlockTypePreviousButtonConst = exports.FormBlockTypeNextButtonConst = exports.FormBlockTypeJumpButtonConst = exports.FormBlockTypeImageConst = exports.FormBlockTypeHtmlConst = exports.FormBlockTypeDividerConst = exports.FormBlockResendButtonConfigTextAlignmentEnum = exports.FormBlockImageConfigPositionEnum = exports.ForbiddenSchema = exports.FlowsVaultConnectionSetupTypeOauthClientCredentialsEnum = exports.FlowsVaultConnectionSetupTypeBasicAuthEnum = exports.FlowsVaultConnectionSetupTypeApiKeyEnum = exports.FlowsVaultConnectionHttpApiKeySetupInEnum = void 0;
 exports.PasswordSequentialCharactersPolicyEnum = exports.PasswordMaxLengthExceededPolicyEnum = exports.PasswordIdenticalCharactersPolicyEnum = exports.PasswordDefaultDictionariesEnum = exports.PasswordCharacterTypeRulePolicyEnum = exports.PasswordCharacterTypeEnum = exports.PartialGroupsEnum = exports.OrganizationUsageEnum = exports.OrganizationMemberEffectiveRoleSource = exports.OrganizationDiscoveryDomainStatus = exports.OrganizationAccessLevelEnumWithNull = exports.OrganizationAccessLevelEnum = exports.NetworkAclRuleScopeEnum = exports.MfaPolicyEnum = exports.LogStreamSumoEnum = exports.LogStreamStatusEnum = exports.LogStreamSplunkEnum = exports.LogStreamSegmentEnum = exports.LogStreamPiiMethodEnum = exports.LogStreamPiiLogFieldsEnum = exports.LogStreamPiiAlgorithmEnum = exports.LogStreamMixpanelRegionEnum = exports.LogStreamMixpanelEnum = exports.LogStreamHttpEnum = exports.LogStreamHttpContentFormatEnum = exports.LogStreamFilterTypeEnum = exports.LogStreamFilterGroupNameEnum = exports.LogStreamEventGridRegionEnum = exports.LogStreamEventGridEnum = exports.LogStreamEventBridgeSinkRegionEnum = exports.LogStreamEventBridgeEnum = exports.LogStreamDatadogRegionEnum = exports.LogStreamDatadogEnum = exports.ListFlowsRequestParametersHydrateEnum = exports.JobFileFormatEnum = exports.IntegrationRequiredParamTypeEnum = exports.IntegrationFeatureTypeEnum = exports.IdentityProviderOnlyAuth0Enum = exports.IdentityProviderEnum = exports.HookTriggerIdEnum = exports.GuardianFactorsProviderSmsProviderEnum = exports.GuardianFactorsProviderPushNotificationProviderDataEnum = exports.GuardianFactorPhoneFactorMessageTypeEnum = exports.GuardianFactorNameEnum = exports.GuardianEnrollmentStatus = exports.GuardianEnrollmentFactorEnum = exports.GroupTypeEnum = exports.GroupMemberTypeEnum = exports.GetFlowRequestParametersHydrateEnum = exports.GetFlowExecutionRequestParametersHydrateEnum = void 0;
-exports.UniversalLoginExperienceEnum = exports.UnauthorizedSchema = exports.TwilioProviderDeliveryMethodEnum = exports.TooManyRequestsSchema = exports.TokenExchangeProfileTypeEnum = exports.TenantSettingsSupportedLocalesEnum = exports.TenantSettingsResourceParameterProfile = exports.TenantSettingsDynamicClientRegistrationSecurityMode = exports.TenantSettingsDeviceFlowCharset = exports.TenantSettingsCountryCodesModeResponse = exports.TenantSettingsCountryCodesMode = exports.SynchronizeGroupsEnum = exports.SuspiciousIpThrottlingShieldsEnum = exports.SupportedLocales = exports.SignupStatusEnum = exports.SigningAlgorithmEnum = exports.SessionCookieModeEnum = exports.SessionCookieMetadataModeEnum = exports.SelfServiceProfileSsoTicketProvisioningScopeEnum = exports.SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum = exports.SelfServiceProfileSsoTicketDomainVerificationEnum = exports.SelfServiceProfileCustomTextPageEnum = exports.SelfServiceProfileCustomTextLanguageEnum = exports.SelfServiceProfileAllowedStrategyEnum = exports.SearchEngineVersionsEnum = exports.ScreenGroupNameEnum = exports.RotateConnectionKeysSigningAlgEnum = exports.ResourceServerTokenEncryptionFormatEnum = exports.ResourceServerTokenEncryptionAlgorithmEnum = exports.ResourceServerTokenDialectSchemaEnum = exports.ResourceServerTokenDialectResponseEnum = exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = exports.ResourceServerProofOfPossessionRequiredForEnum = exports.ResourceServerProofOfPossessionMechanismEnum = exports.ResourceServerConsentPolicyEnum = exports.RefreshTokenRotationTypeEnum = exports.RefreshTokenExpirationTypeEnum = exports.RateLimitPolicyResourceEnum = exports.RateLimitPolicyConsumerEnum = exports.PublicKeyCredentialTypeEnum = exports.PublicKeyCredentialAlgorithmEnum = exports.PromptLanguageEnum = exports.PromptGroupNameEnum = exports.PreferredAuthenticationMethodEnum = exports.PostConnectionKeysAlgEnum = exports.PhoneTemplateNotificationTypeEnum = exports.PhoneProviderNameEnum = exports.PhoneProviderDeliveryMethodEnum = exports.PhoneProviderChannelEnum = void 0;
-exports.XssProtectionMode = exports.X509CertificateCredentialTypeEnum = exports.VerificationMethodEnum = exports.UserMultifactorProviderEnum = exports.UserIdentityProviderEnum = exports.UserEnrollmentStatusEnum = exports.UserEnrollmentAuthMethodEnum = exports.UserEffectiveRoleSource = exports.UserEffectivePermissionSourceEnum = exports.UserEffectivePermissionRoleSourceEnum = exports.UserAuthenticationMethodPropertiesEnum = exports.UserAttributeProfileUserIdOidcStrategyOverrideMapping = exports.UserAttributeProfileUserIdOidcMappingEnum = void 0;
+exports.UnauthorizedSchema = exports.TwilioProviderDeliveryMethodEnum = exports.TooManyRequestsSchema = exports.TokenExchangeProfileTypeEnum = exports.TenantSettingsSupportedLocalesEnum = exports.TenantSettingsResourceParameterProfile = exports.TenantSettingsDynamicClientRegistrationSecurityMode = exports.TenantSettingsDeviceFlowCharset = exports.TenantSettingsCountryCodesModeResponse = exports.TenantSettingsCountryCodesMode = exports.SynchronizeGroupsEnum = exports.SuspiciousIpThrottlingShieldsEnum = exports.SupportedLocales = exports.SignupStatusEnum = exports.SigningAlgorithmEnum = exports.SessionCookieModeEnum = exports.SessionCookieMetadataModeEnum = exports.SelfServiceProfileSsoTicketProvisioningScopeEnum = exports.SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum = exports.SelfServiceProfileSsoTicketDomainVerificationEnum = exports.SelfServiceProfileCustomTextPageEnum = exports.SelfServiceProfileCustomTextLanguageEnum = exports.SelfServiceProfileAllowedStrategyEnum = exports.SearchEngineVersionsEnum = exports.ScreenGroupNameEnum = exports.RotateConnectionKeysSigningAlgEnum = exports.ResourceServerTokenEncryptionFormatEnum = exports.ResourceServerTokenEncryptionAlgorithmEnum = exports.ResourceServerTokenDialectSchemaEnum = exports.ResourceServerTokenDialectResponseEnum = exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = exports.ResourceServerProofOfPossessionRequiredForEnum = exports.ResourceServerProofOfPossessionMechanismEnum = exports.ResourceServerConsentPolicyEnum = exports.RefreshTokenRotationTypeEnum = exports.RefreshTokenExpirationTypeEnum = exports.RateLimitPolicyResourceEnum = exports.RateLimitPolicyConsumerEnum = exports.PublicKeyCredentialTypeEnum = exports.PublicKeyCredentialAlgorithmEnum = exports.PromptLanguageEnum = exports.PromptGroupNameEnum = exports.PreferredAuthenticationMethodEnum = exports.PostConnectionKeysAlgEnum = exports.PhoneTemplateNotificationTypeEnum = exports.PhoneProviderProtectionBackoffStrategyEnum = exports.PhoneProviderNameEnum = exports.PhoneProviderDeliveryMethodEnum = exports.PhoneProviderChannelEnum = void 0;
+exports.XssProtectionMode = exports.X509CertificateCredentialTypeEnum = exports.VerificationMethodEnum = exports.UserMultifactorProviderEnum = exports.UserIdentityProviderEnum = exports.UserEnrollmentStatusEnum = exports.UserEnrollmentAuthMethodEnum = exports.UserEffectiveRoleSource = exports.UserEffectivePermissionSourceEnum = exports.UserEffectivePermissionRoleSourceEnum = exports.UserAuthenticationMethodPropertiesEnum = exports.UserAttributeProfileUserIdOidcStrategyOverrideMapping = exports.UserAttributeProfileUserIdOidcMappingEnum = exports.UniversalLoginExperienceEnum = void 0;
 exports.OauthScope = {
     /**
      * Create Actions */
@@ -2294,10 +2294,11 @@ exports.EmailProviderNameEnum = {
 exports.EmailSparkPostRegionEnum = {
     Eu: "eu",
 };
-/** Template name. Can be `verify_email`, `verify_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy). */
+/** Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy). */
 exports.EmailTemplateNameEnum = {
     VerifyEmail: "verify_email",
     VerifyEmailByCode: "verify_email_by_code",
+    AuthEmailByCode: "auth_email_by_code",
     ResetEmail: "reset_email",
     ResetEmailByCode: "reset_email_by_code",
     WelcomeEmail: "welcome_email",
@@ -4367,6 +4368,11 @@ exports.PhoneProviderNameEnum = {
     Twilio: "twilio",
     Custom: "custom",
 };
+/** The type of backoff strategy to use. */
+exports.PhoneProviderProtectionBackoffStrategyEnum = {
+    Exponential: "exponential",
+    None: "none",
+};
 exports.PhoneTemplateNotificationTypeEnum = {
     OtpVerify: "otp_verify",
     OtpEnroll: "otp_enroll",

package/dist/cjs/management/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "5.12.0";
+export declare const SDK_VERSION = "5.13.0";

package/dist/cjs/management/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = "5.12.0";
+exports.SDK_VERSION = "5.13.0";

package/dist/esm/lib/models.d.mts

@@ -1,9 +1,9 @@
 import { RetryConfiguration } from "./retry.mjs";
-import { Dispatcher } from "undici-types";
+import type { Dispatcher } from "undici-types";
 /**
  * @private
  */
-export type FetchAPI = (url: URL | RequestInfo, init?: RequestInit) => Promise<Response>;
+export type FetchAPI = (url: string | URL | Request, init?: RequestInit) => Promise<Response>;
 export interface ClientOptions extends Omit<Configuration, "baseUrl" | "parseError" | "middleware"> {
     telemetry?: boolean;
     clientInfo?: {
@@ -57,7 +57,7 @@ export type HTTPBody = any | FormData | URLSearchParams;
 export type HTTPRequestInit = {
     headers?: HTTPHeaders;
     method: HTTPMethod;
-    credentials?: RequestCredentials;
+    credentials?: "include" | "omit" | "same-origin";
     body?: HTTPBody;
 };
 export type InitOverrideFunction = (requestContext: {
@@ -96,23 +96,23 @@ export declare class TextApiResponse implements ApiResponse<string> {
     static fromResponse(raw: Response): Promise<TextApiResponse>;
 }
 export interface FetchParams {
-    url: URL | RequestInfo;
+    url: string | URL | Request;
     init: RequestInit;
 }
 export interface RequestContext {
     fetch: FetchAPI;
-    url: URL | RequestInfo;
+    url: string | URL | Request;
     init: RequestInit;
 }
 export interface ResponseContext {
     fetch: FetchAPI;
-    url: URL | RequestInfo;
+    url: string | URL | Request;
     init: RequestInit;
     response: Response;
 }
 export interface ErrorContext {
     fetch: FetchAPI;
-    url: URL | RequestInfo;
+    url: string | URL | Request;
     init: RequestInit;
     error: unknown;
     response?: Response;