auth0 5.4.0 → 5.6.0

package/dist/cjs/management/Client.d.ts

@@ -43,6 +43,7 @@ import { UsersClient } from "./api/resources/users/client/Client.js";
 import { VerifiableCredentialsClient } from "./api/resources/verifiableCredentials/client/Client.js";
 import type { BaseClientOptions, BaseRequestOptions } from "./BaseClient.js";
 import { type NormalizedClientOptionsWithAuth } from "./BaseClient.js";
+import * as core from "./core/index.js";
 export declare namespace ManagementClient {
     type Options = BaseClientOptions;
     interface RequestOptions extends BaseRequestOptions {
@@ -137,4 +138,15 @@ export declare class ManagementClient {
     get riskAssessments(): RiskAssessmentsClient;
     get tenants(): TenantsClient;
     get verifiableCredentials(): VerifiableCredentialsClient;
+    /**
+     * Make a passthrough request using the SDK's configured auth, retry, logging, etc.
+     * This is useful for making requests to endpoints not yet supported in the SDK.
+     * The input can be a URL string, URL object, or Request object. Relative paths are resolved against the configured base URL.
+     *
+     * @param {Request | string | URL} input - The URL, path, or Request object.
+     * @param {RequestInit} init - Standard fetch RequestInit options.
+     * @param {core.PassthroughRequest.RequestOptions} requestOptions - Per-request overrides (timeout, retries, headers, abort signal).
+     * @returns {Promise<Response>} A standard Response object.
+     */
+    fetch(input: Request | string | URL, init?: RequestInit, requestOptions?: core.PassthroughRequest.RequestOptions): Promise<Response>;
 }

package/dist/cjs/management/Client.js

@@ -1,5 +1,47 @@
 "use strict";
 // This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ManagementClient = void 0;
 const Client_js_1 = require("./api/resources/actions/client/Client.js");
@@ -46,6 +88,7 @@ const Client_js_41 = require("./api/resources/userGrants/client/Client.js");
 const Client_js_42 = require("./api/resources/users/client/Client.js");
 const Client_js_43 = require("./api/resources/verifiableCredentials/client/Client.js");
 const BaseClient_js_1 = require("./BaseClient.js");
+const core = __importStar(require("./core/index.js"));
 class ManagementClient {
     constructor(options) {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
@@ -222,5 +265,29 @@ class ManagementClient {
         var _a;
         return ((_a = this._verifiableCredentials) !== null && _a !== void 0 ? _a : (this._verifiableCredentials = new Client_js_43.VerifiableCredentialsClient(this._options)));
     }
+    /**
+     * Make a passthrough request using the SDK's configured auth, retry, logging, etc.
+     * This is useful for making requests to endpoints not yet supported in the SDK.
+     * The input can be a URL string, URL object, or Request object. Relative paths are resolved against the configured base URL.
+     *
+     * @param {Request | string | URL} input - The URL, path, or Request object.
+     * @param {RequestInit} init - Standard fetch RequestInit options.
+     * @param {core.PassthroughRequest.RequestOptions} requestOptions - Per-request overrides (timeout, retries, headers, abort signal).
+     * @returns {Promise<Response>} A standard Response object.
+     */
+    fetch(input, init, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return core.makePassthroughRequest(input, init, {
+                baseUrl: (_a = this._options.baseUrl) !== null && _a !== void 0 ? _a : this._options.environment,
+                headers: this._options.headers,
+                timeoutInSeconds: this._options.timeoutInSeconds,
+                maxRetries: this._options.maxRetries,
+                fetch: this._options.fetch,
+                logging: this._options.logging,
+                getAuthHeaders: () => __awaiter(this, void 0, void 0, function* () { return (yield this._options.authProvider.getAuthRequest()).headers; }),
+            }, requestOptions);
+        });
+    }
 }
 exports.ManagementClient = ManagementClient;

package/dist/cjs/management/api/requests/requests.d.ts

@@ -3,7 +3,7 @@ import * as Management from "../index.js";
 /**
  * @example
  *     {
- *         triggerId: "triggerId",
+ *         triggerId: "post-login",
  *         actionName: "actionName",
  *         deployed: true,
  *         page: 1,
@@ -30,7 +30,7 @@ export interface ListActionsRequestParameters {
  *     {
  *         name: "name",
  *         supported_triggers: [{
- *                 id: "id"
+ *                 id: "post-login"
  *             }]
  *     }
  */
@@ -133,13 +133,12 @@ export interface ListClientGrantsRequestParameters {
 /**
  * @example
  *     {
- *         client_id: "client_id",
  *         audience: "audience"
  *     }
  */
 export interface CreateClientGrantRequestContent {
     /** ID of the client. */
-    client_id: string;
+    client_id?: string;
     /** The audience (API identifier) of this client grant */
     audience: string;
     organization_usage?: Management.ClientGrantOrganizationUsageEnum;
@@ -159,7 +158,7 @@ export interface CreateClientGrantRequestContent {
  */
 export interface UpdateClientGrantRequestContent {
     /** Scopes allowed for this client grant. */
-    scope?: string[];
+    scope?: string[] | null;
     organization_usage?: Management.ClientGrantOrganizationNullableUsageEnum | null;
     /** Controls allowing any organization to be used with this grant */
     allow_any_organization?: boolean | null;
@@ -179,6 +178,7 @@ export interface UpdateClientGrantRequestContent {
  *         is_global: true,
  *         is_first_party: true,
  *         app_type: "app_type",
+ *         external_client_id: "external_client_id",
  *         q: "q"
  *     }
  */
@@ -199,7 +199,9 @@ export interface ListClientsRequestParameters {
     is_first_party?: boolean | null;
     /** Optional filter by a comma-separated list of application types. */
     app_type?: string | null;
-    /** Advanced Query in <a href="http://www.lucenetutorial.com/lucene-query-syntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
+    /** Optional filter by the <a href="https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-04.html">Client ID Metadata Document</a> URI for CIMD-registered clients. */
+    external_client_id?: string | null;
+    /** Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
     q?: string | null;
 }
 /**
@@ -218,6 +220,7 @@ export interface CreateClientRequestContent {
     /** Comma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication. */
     callbacks?: string[];
     oidc_logout?: Management.ClientOidcBackchannelLogoutSettings;
+    /** Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout) */
     oidc_backchannel_logout?: Management.ClientOidcBackchannelLogoutSettings;
     session_transfer?: Management.ClientSessionTransferConfiguration | null;
     /** Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level (e.g., https://*.contoso.com). Query strings and hash information are not taken into account when validating these URLs. */
@@ -292,6 +295,26 @@ export interface CreateClientRequestContent {
     express_configuration?: Management.ExpressConfiguration;
     async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPostConfiguration;
 }
+/**
+ * @example
+ *     {
+ *         external_client_id: "external_client_id"
+ *     }
+ */
+export interface PreviewCimdMetadataRequestContent {
+    /** URL to the Client ID Metadata Document */
+    external_client_id: string;
+}
+/**
+ * @example
+ *     {
+ *         external_client_id: "external_client_id"
+ *     }
+ */
+export interface RegisterCimdClientRequestContent {
+    /** URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations. */
+    external_client_id: string;
+}
 /**
  * @example
  *     {
@@ -321,6 +344,7 @@ export interface UpdateClientRequestContent {
     /** A set of URLs that are valid to call back from Auth0 when authenticating users */
     callbacks?: string[];
     oidc_logout?: Management.ClientOidcBackchannelLogoutSettings;
+    /** Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout) */
     oidc_backchannel_logout?: Management.ClientOidcBackchannelLogoutSettings;
     session_transfer?: Management.ClientSessionTransferConfiguration | null;
     /** A set of URLs that represents valid origins for CORS */
@@ -335,7 +359,9 @@ export interface UpdateClientRequestContent {
     allowed_clients?: string[];
     /** URLs that are valid to redirect to after logout from Auth0 */
     allowed_logout_urls?: string[];
+    /** An object that holds settings related to how JWTs are created */
     jwt_configuration?: Management.ClientJwtConfiguration;
+    /** The client's encryption key */
     encryption_key?: Management.ClientEncryptionKey | null;
     /** <code>true</code> to use Auth0 instead of the IdP to do Single Sign On, <code>false</code> otherwise (default: <code>false</code>) */
     sso?: boolean;
@@ -363,6 +389,7 @@ export interface UpdateClientRequestContent {
     form_template?: string;
     addons?: Management.ClientAddons;
     client_metadata?: Management.ClientMetadata;
+    /** Configuration related to native mobile apps */
     mobile?: Management.ClientMobile;
     /** Initiate login uri, must be https */
     initiate_login_uri?: string;
@@ -372,7 +399,7 @@ export interface UpdateClientRequestContent {
     organization_usage?: Management.ClientOrganizationUsagePatchEnum | null;
     organization_require_behavior?: Management.ClientOrganizationRequireBehaviorPatchEnum | null;
     /** Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both. */
-    organization_discovery_methods?: Management.ClientOrganizationDiscoveryEnum[];
+    organization_discovery_methods?: Management.ClientOrganizationDiscoveryEnum[] | null;
     client_authentication_methods?: Management.ClientAuthenticationMethod | null;
     /** Makes the use of Pushed Authorization Requests mandatory for this client */
     require_pushed_authorization_requests?: boolean;
@@ -390,7 +417,7 @@ export interface UpdateClientRequestContent {
     /** Specifies how long, in seconds, a Pushed Authorization Request URI remains valid */
     par_request_expiry?: number | null;
     express_configuration?: Management.ExpressConfigurationOrNull | null;
-    async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration;
+    async_approval_notification_channels?: (Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration | undefined) | null;
 }
 /**
  * @example
@@ -469,7 +496,7 @@ export interface CreateConnectionRequestContent {
     display_name?: string;
     strategy: Management.ConnectionIdentityProviderEnum;
     options?: Management.ConnectionPropertiesOptions;
-    /** DEPRECATED property. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients. */
+    /** Use of this property is NOT RECOMMENDED. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients. */
     enabled_clients?: string[];
     /** <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.) */
     is_domain_connection?: boolean;
@@ -503,7 +530,7 @@ export interface UpdateConnectionRequestContent {
     display_name?: string;
     options?: Management.UpdateConnectionOptions | null;
     /** DEPRECATED property. Use the PATCH /v2/connections/{id}/clients endpoint to enable or disable the connection for any clients. */
-    enabled_clients?: string[];
+    enabled_clients?: string[] | null;
     /** <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.) */
     is_domain_connection?: boolean;
     /** Enables showing a button for the connection in the login page (new experience only). If false, it will be usable only by HRD. (Defaults to <code>false</code>.) */
@@ -524,7 +551,7 @@ export interface UpdateConnectionRequestContent {
  *     }
  */
 export interface ListCustomDomainsRequestParameters {
-    /** Query in <a href ="http://www.lucenetutorial.com/lucene-query-syntax.html">Lucene query string syntax</a>. */
+    /** Query in <a href ="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene query string syntax</a>. */
     q?: string | null;
     /** Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields. */
     fields?: string | null;
@@ -551,11 +578,22 @@ export interface CreateCustomDomainRequestContent {
     /** Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided, the full domain will be used. */
     relying_party_identifier?: string;
 }
+/**
+ * @example
+ *     {
+ *         domain: "domain"
+ *     }
+ */
+export interface SetDefaultCustomDomainRequestContent {
+    /** The domain to set as the default custom domain. Must be a verified custom domain or the canonical domain. */
+    domain: string;
+}
 /**
  * @example
  *     {}
  */
 export interface UpdateCustomDomainRequestContent {
+    /** recommended includes TLS 1.2 */
     tls_policy?: Management.CustomDomainTlsPolicyEnum;
     custom_client_ip_header?: Management.CustomDomainCustomClientIpHeader | undefined;
     domain_metadata?: Management.DomainMetadata;
@@ -766,7 +804,7 @@ export interface GetFlowRequestParameters {
  */
 export interface UpdateFlowRequestContent {
     name?: string;
-    actions?: Management.FlowAction[];
+    actions?: Management.FlowAction[] | null;
 }
 /**
  * @example
@@ -928,6 +966,7 @@ export interface CreateHookRequestContent {
     /** Whether this hook will be executed (true) or ignored (false). */
     enabled?: boolean;
     dependencies?: Management.HookDependencies;
+    /** Execution stage of this rule. Can be `credentials-exchange`, `pre-user-registration`, `post-user-registration`, `post-change-password`, or `send-phone-message`. */
     triggerId: Management.HookTriggerIdEnum;
 }
 /**
@@ -1021,7 +1060,6 @@ export interface ListNetworkAclsRequestParameters {
  *     {
  *         description: "description",
  *         active: true,
- *         priority: 1.1,
  *         rule: {
  *             action: {},
  *             scope: "management"
@@ -1033,7 +1071,7 @@ export interface CreateNetworkAclRequestContent {
     /** Indicates whether or not this access control list is actively being used */
     active: boolean;
     /** Indicates the order in which the ACL will be evaluated relative to other ACL rules. */
-    priority: number;
+    priority?: number;
     rule: Management.NetworkAclRule;
 }
 /**
@@ -1041,7 +1079,6 @@ export interface CreateNetworkAclRequestContent {
  *     {
  *         description: "description",
  *         active: true,
- *         priority: 1.1,
  *         rule: {
  *             action: {},
  *             scope: "management"
@@ -1053,7 +1090,7 @@ export interface SetNetworkAclRequestContent {
     /** Indicates whether or not this access control list is actively being used */
     active: boolean;
     /** Indicates the order in which the ACL will be evaluated relative to other ACL rules. */
-    priority: number;
+    priority?: number;
     rule: Management.NetworkAclRule;
 }
 /**
@@ -1125,11 +1162,37 @@ export interface UpdateSettingsRequestContent {
     /** Use WebAuthn with Device Biometrics as the first authentication factor */
     webauthn_platform_first_factor?: boolean | null;
 }
+/**
+ * @example
+ *     {
+ *         user_id: "user_id",
+ *         client_id: "client_id",
+ *         from: "from",
+ *         take: 1,
+ *         fields: "fields",
+ *         include_fields: true
+ *     }
+ */
+export interface GetRefreshTokensRequestParameters {
+    /** ID of the user whose refresh tokens to retrieve. Required. */
+    user_id: string;
+    /** Filter results by client ID. Only valid when user_id is provided. */
+    client_id?: string | null;
+    /** An opaque cursor from which to start the selection (exclusive). Expires after 24 hours. Obtained from the next property of a previous response. */
+    from?: string | null;
+    /** Number of results per page. Defaults to 50. */
+    take?: number | null;
+    /** Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields. */
+    fields?: string | null;
+    /** Whether specified fields are to be included (true) or excluded (false). */
+    include_fields?: boolean | null;
+}
 /**
  * @example
  *     {}
  */
 export interface UpdateRefreshTokenRequestContent {
+    /** Metadata associated with the refresh token. Pass null or {} to remove all metadata. */
     refresh_token_metadata?: (Management.RefreshTokenMetadata | undefined) | null;
 }
 /**
@@ -1171,6 +1234,8 @@ export interface CreateResourceServerRequestContent {
     signing_secret?: string;
     /** Whether refresh tokens can be issued for this API (true) or not (false). */
     allow_offline_access?: boolean;
+    /** Whether Online Refresh Tokens can be issued for this API (true) or not (false). */
+    allow_online_access?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
@@ -1180,7 +1245,7 @@ export interface CreateResourceServerRequestContent {
     enforce_policies?: boolean;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
-    authorization_details?: unknown[];
+    authorization_details?: unknown[] | null;
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
 }
@@ -1210,6 +1275,8 @@ export interface UpdateResourceServerRequestContent {
     skip_consent_for_verifiable_first_party_clients?: boolean;
     /** Whether refresh tokens can be issued for this API (true) or not (false). */
     allow_offline_access?: boolean;
+    /** Whether Online Refresh Tokens can be issued for this API (true) or not (false). */
+    allow_online_access?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
@@ -1217,7 +1284,7 @@ export interface UpdateResourceServerRequestContent {
     enforce_policies?: boolean;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
-    authorization_details?: unknown[];
+    authorization_details?: unknown[] | null;
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
 }
@@ -1396,6 +1463,7 @@ export interface UpdateSelfServiceProfileRequestContent {
  *     {}
  */
 export interface UpdateSessionRequestContent {
+    /** Metadata associated with the session. Pass null or {} to remove all session_metadata. */
     session_metadata?: (Management.SessionMetadata | undefined) | null;
 }
 /**
@@ -1620,7 +1688,7 @@ export interface ListUsersRequestParameters {
     fields?: string | null;
     /** Whether specified fields are to be included (true) or excluded (false). */
     include_fields?: boolean | null;
-    /** Query in <a target='_new' href ='http://www.lucenetutorial.com/lucene-query-syntax.html'>Lucene query string syntax</a>. Some query types cannot be used on metadata fields, for details see <a href='https://auth0.com/docs/users/search/v3/query-syntax#searchable-fields'>Searchable Fields</a>. */
+    /** Query in <a target='_new' href ='https://lucene.apache.org/core/2_9_4/queryparsersyntax.html'>Lucene query string syntax</a>. Some query types cannot be used on metadata fields, for details see <a href='https://auth0.com/docs/users/search/v3/query-syntax#searchable-fields'>Searchable Fields</a>. */
     q?: string | null;
     /** The version of the search engine */
     search_engine?: Management.SearchEngineVersionsEnum | null;
@@ -1711,7 +1779,9 @@ export interface UpdateUserRequestContent {
     phone_number?: string | null;
     /** Whether this phone number has been verified (true) or not (false). */
     phone_verified?: boolean;
+    /** User metadata to which this user has read/write access. */
     user_metadata?: Management.UserMetadata;
+    /** User metadata to which this user has read-only access. */
     app_metadata?: Management.AppMetadata;
     /** Given name/first name/forename of this user. */
     given_name?: string | null;
@@ -2195,6 +2265,7 @@ export interface UpdatePhoneTemplateRequestContent {
 export interface CreatePhoneTemplateTestNotificationRequestContent {
     /** Destination of the testing phone notification */
     to: string;
+    /** Medium to use to send the notification */
     delivery_method?: Management.PhoneProviderDeliveryMethodEnum;
 }
 /**
@@ -2229,6 +2300,8 @@ export interface PostClientCredentialRequestContent {
     parse_expiry_from_cert?: boolean;
     /** The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type. */
     expires_at?: string;
+    /** Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64} */
+    kid?: string;
 }
 /**
  * @example
@@ -2812,6 +2885,63 @@ export interface AssociateOrganizationClientGrantRequestContent {
     /** A Client Grant ID to add to the organization. */
     grant_id: string;
 }
+/**
+ * @example
+ *     {
+ *         page: 1,
+ *         per_page: 1,
+ *         include_totals: true,
+ *         is_enabled: true
+ *     }
+ */
+export interface ListOrganizationAllConnectionsRequestParameters {
+    /** Page index of the results to return. First page is 0. */
+    page?: number | null;
+    /** Number of results per page. Defaults to 50. */
+    per_page?: number | null;
+    /** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). */
+    include_totals?: boolean | null;
+    /** Filter connections by enabled status. */
+    is_enabled?: boolean | null;
+}
+/**
+ * @example
+ *     {
+ *         connection_id: "connection_id"
+ *     }
+ */
+export interface CreateOrganizationAllConnectionRequestParameters {
+    /** Name of the connection in the scope of this organization. */
+    organization_connection_name?: string;
+    /** When true, all users that log in with this connection will be automatically granted membership in the organization. When false, users must be granted membership in the organization before logging in with this connection. */
+    assign_membership_on_login?: boolean;
+    /** Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections. Default: true. */
+    show_as_button?: boolean;
+    /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
+    is_signup_enabled?: boolean;
+    organization_access_level?: Management.OrganizationAccessLevelEnum;
+    /** Whether the connection is enabled for the organization. */
+    is_enabled?: boolean;
+    /** Connection identifier. */
+    connection_id: string;
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdateOrganizationConnectionRequestParameters {
+    /** Name of the connection in the scope of this organization. */
+    organization_connection_name?: string | null;
+    /** When true, all users that log in with this connection will be automatically granted membership in the organization. When false, users must be granted membership in the organization before logging in with this connection. */
+    assign_membership_on_login?: boolean;
+    /** Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections. Default: true. */
+    show_as_button?: boolean;
+    /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
+    is_signup_enabled?: boolean;
+    organization_access_level?: Management.OrganizationAccessLevelEnumWithNull | null;
+    /** Whether the connection is enabled for the organization. */
+    is_enabled?: boolean | null;
+}
 /**
  * @example
  *     {
@@ -3080,14 +3210,15 @@ export interface BulkUpdateAculRequestContent {
  *     {}
  */
 export interface UpdateAculRequestContent {
+    /** Rendering mode */
     rendering_mode?: Management.AculRenderingModeEnum;
-    context_configuration?: Management.AculContextConfiguration;
+    context_configuration?: (Management.AculContextConfiguration | undefined) | null;
     /** Override Universal Login default head tags */
     default_head_tags_disabled?: boolean | null;
     /** Use page template with ACUL */
     use_page_template?: boolean | null;
     /** An array of head tags */
-    head_tags?: Management.AculHeadTag[];
+    head_tags?: Management.AculHeadTag[] | null;
     filters?: Management.AculFilters | null;
 }
 /**
@@ -3213,6 +3344,7 @@ export interface GetTenantSettingsRequestParameters {
  */
 export interface UpdateTenantSettingsRequestContent {
     change_password?: Management.TenantSettingsPasswordPage | null;
+    /** Device Flow configuration. */
     device_flow?: Management.TenantSettingsDeviceFlow | null;
     guardian_mfa_page?: Management.TenantSettingsGuardianPage | null;
     /** Default audience for API Authorization. */
@@ -3256,7 +3388,7 @@ export interface UpdateTenantSettingsRequestContent {
     /** Whether to accept an organization name instead of an ID on auth endpoints */
     allow_organization_name_in_authentication_api?: boolean | null;
     /** Supported ACR values */
-    acr_values_supported?: string[];
+    acr_values_supported?: string[] | null;
     mtls?: Management.TenantSettingsMtls | null;
     /** Enables the use of Pushed Authorization Requests */
     pushed_authorization_requests_supported?: boolean | null;
@@ -3321,6 +3453,7 @@ export interface CreateUserAuthenticationMethodRequestContent {
 export interface UpdateUserAuthenticationMethodRequestContent {
     /** A human-readable label to identify the authentication method. */
     name?: string;
+    /** Preferred phone authentication method */
     preferred_authentication_method?: Management.PreferredAuthenticationMethodEnum;
 }
 /**
@@ -3360,6 +3493,7 @@ export interface GetUserGroupsRequestParameters {
  *     {}
  */
 export interface LinkUserIdentityRequestContent {
+    /** Identity provider of the secondary user account being linked. */
     provider?: Management.UserIdentityProviderEnum;
     /** connection_id of the secondary user account being linked when more than one `auth0` database provider exists. */
     connection_id?: string;

package/dist/cjs/management/api/resources/actions/client/Client.d.ts

@@ -35,7 +35,7 @@ export declare class ActionsClient {
      *
      * @example
      *     await client.actions.list({
-     *         triggerId: "triggerId",
+     *         triggerId: "post-login",
      *         actionName: "actionName",
      *         deployed: true,
      *         page: 1,
@@ -59,7 +59,7 @@ export declare class ActionsClient {
      *     await client.actions.create({
      *         name: "name",
      *         supported_triggers: [{
-     *                 id: "id"
+     *                 id: "post-login"
      *             }]
      *     })
      */

package/dist/cjs/management/api/resources/actions/client/Client.js

@@ -88,7 +88,7 @@ class ActionsClient {
      *
      * @example
      *     await client.actions.list({
-     *         triggerId: "triggerId",
+     *         triggerId: "post-login",
      *         actionName: "actionName",
      *         deployed: true,
      *         page: 1,
@@ -102,7 +102,7 @@ class ActionsClient {
                 var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
                 const { triggerId, actionName, deployed, page = 0, per_page: perPage = 50, installed } = request;
                 const _queryParams = {
-                    triggerId,
+                    triggerId: triggerId !== undefined ? triggerId : undefined,
                     actionName,
                     deployed,
                     page,
@@ -177,7 +177,7 @@ class ActionsClient {
      *     await client.actions.create({
      *         name: "name",
      *         supported_triggers: [{
-     *                 id: "id"
+     *                 id: "post-login"
      *             }]
      *     })
      */

package/dist/cjs/management/api/resources/actions/resources/triggers/resources/bindings/client/Client.d.ts

@@ -23,7 +23,7 @@ export declare class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.list("triggerId", {
+     *     await client.actions.triggers.bindings.list("post-login", {
      *         page: 1,
      *         per_page: 1
      *     })
@@ -42,7 +42,7 @@ export declare class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.updateMany("triggerId")
+     *     await client.actions.triggers.bindings.updateMany("post-login")
      */
     updateMany(triggerId: Management.ActionTriggerTypeEnum, request?: Management.UpdateActionBindingsRequestContent, requestOptions?: BindingsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateActionBindingsResponseContent>;
     private __updateMany;

package/dist/cjs/management/api/resources/actions/resources/triggers/resources/bindings/client/Client.js

@@ -68,7 +68,7 @@ class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.list("triggerId", {
+     *     await client.actions.triggers.bindings.list("post-login", {
      *         page: 1,
      *         per_page: 1
      *     })
@@ -148,7 +148,7 @@ class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.updateMany("triggerId")
+     *     await client.actions.triggers.bindings.updateMany("post-login")
      */
     updateMany(triggerId, request = {}, requestOptions) {
         return core.HttpResponsePromise.fromPromise(this.__updateMany(triggerId, request, requestOptions));