auth0 5.5.0 → 5.7.0

package/dist/cjs/management/Client.d.ts

@@ -43,6 +43,7 @@ import { UsersClient } from "./api/resources/users/client/Client.js";
 import { VerifiableCredentialsClient } from "./api/resources/verifiableCredentials/client/Client.js";
 import type { BaseClientOptions, BaseRequestOptions } from "./BaseClient.js";
 import { type NormalizedClientOptionsWithAuth } from "./BaseClient.js";
+import * as core from "./core/index.js";
 export declare namespace ManagementClient {
     type Options = BaseClientOptions;
     interface RequestOptions extends BaseRequestOptions {
@@ -137,4 +138,15 @@ export declare class ManagementClient {
     get riskAssessments(): RiskAssessmentsClient;
     get tenants(): TenantsClient;
     get verifiableCredentials(): VerifiableCredentialsClient;
+    /**
+     * Make a passthrough request using the SDK's configured auth, retry, logging, etc.
+     * This is useful for making requests to endpoints not yet supported in the SDK.
+     * The input can be a URL string, URL object, or Request object. Relative paths are resolved against the configured base URL.
+     *
+     * @param {Request | string | URL} input - The URL, path, or Request object.
+     * @param {RequestInit} init - Standard fetch RequestInit options.
+     * @param {core.PassthroughRequest.RequestOptions} requestOptions - Per-request overrides (timeout, retries, headers, abort signal).
+     * @returns {Promise<Response>} A standard Response object.
+     */
+    fetch(input: Request | string | URL, init?: RequestInit, requestOptions?: core.PassthroughRequest.RequestOptions): Promise<Response>;
 }

package/dist/cjs/management/Client.js

@@ -1,5 +1,47 @@
 "use strict";
 // This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ManagementClient = void 0;
 const Client_js_1 = require("./api/resources/actions/client/Client.js");
@@ -46,6 +88,7 @@ const Client_js_41 = require("./api/resources/userGrants/client/Client.js");
 const Client_js_42 = require("./api/resources/users/client/Client.js");
 const Client_js_43 = require("./api/resources/verifiableCredentials/client/Client.js");
 const BaseClient_js_1 = require("./BaseClient.js");
+const core = __importStar(require("./core/index.js"));
 class ManagementClient {
     constructor(options) {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
@@ -222,5 +265,29 @@ class ManagementClient {
         var _a;
         return ((_a = this._verifiableCredentials) !== null && _a !== void 0 ? _a : (this._verifiableCredentials = new Client_js_43.VerifiableCredentialsClient(this._options)));
     }
+    /**
+     * Make a passthrough request using the SDK's configured auth, retry, logging, etc.
+     * This is useful for making requests to endpoints not yet supported in the SDK.
+     * The input can be a URL string, URL object, or Request object. Relative paths are resolved against the configured base URL.
+     *
+     * @param {Request | string | URL} input - The URL, path, or Request object.
+     * @param {RequestInit} init - Standard fetch RequestInit options.
+     * @param {core.PassthroughRequest.RequestOptions} requestOptions - Per-request overrides (timeout, retries, headers, abort signal).
+     * @returns {Promise<Response>} A standard Response object.
+     */
+    fetch(input, init, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return core.makePassthroughRequest(input, init, {
+                baseUrl: (_a = this._options.baseUrl) !== null && _a !== void 0 ? _a : this._options.environment,
+                headers: this._options.headers,
+                timeoutInSeconds: this._options.timeoutInSeconds,
+                maxRetries: this._options.maxRetries,
+                fetch: this._options.fetch,
+                logging: this._options.logging,
+                getAuthHeaders: () => __awaiter(this, void 0, void 0, function* () { return (yield this._options.authProvider.getAuthRequest()).headers; }),
+            }, requestOptions);
+        });
+    }
 }
 exports.ManagementClient = ManagementClient;

package/dist/cjs/management/api/requests/requests.d.ts

@@ -3,7 +3,7 @@ import * as Management from "../index.js";
 /**
  * @example
  *     {
- *         triggerId: "triggerId",
+ *         triggerId: "post-login",
  *         actionName: "actionName",
  *         deployed: true,
  *         page: 1,
@@ -30,7 +30,7 @@ export interface ListActionsRequestParameters {
  *     {
  *         name: "name",
  *         supported_triggers: [{
- *                 id: "id"
+ *                 id: "post-login"
  *             }]
  *     }
  */
@@ -113,7 +113,8 @@ export interface UpdateBrandingRequestContent {
  *         audience: "audience",
  *         client_id: "client_id",
  *         allow_any_organization: true,
- *         subject_type: "client"
+ *         subject_type: "client",
+ *         default_for: "third_party_clients"
  *     }
  */
 export interface ListClientGrantsRequestParameters {
@@ -129,19 +130,22 @@ export interface ListClientGrantsRequestParameters {
     allow_any_organization?: Management.ClientGrantAllowAnyOrganizationEnum | null;
     /** The type of application access the client grant allows. */
     subject_type?: Management.ClientGrantSubjectTypeEnum | null;
+    /** Used to filter the returned client grants to include only default client grants for the specified group of clients. */
+    default_for?: Management.ClientGrantDefaultForEnum | null;
 }
 /**
  * @example
  *     {
- *         client_id: "client_id",
  *         audience: "audience"
  *     }
  */
 export interface CreateClientGrantRequestContent {
     /** ID of the client. */
-    client_id: string;
+    client_id?: string;
     /** The audience (API identifier) of this client grant */
     audience: string;
+    /** Applies this client grant as the default for all clients in the specified group. The only accepted value is `third_party_clients`, which applies the grant to all third-party clients. Per-client grants for the same audience take precedence. Mutually exclusive with `client_id`. If specified, a value for `client_id` must not be specified. */
+    default_for?: Management.ClientGrantDefaultForEnum;
     organization_usage?: Management.ClientGrantOrganizationUsageEnum;
     /** If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations. */
     allow_any_organization?: boolean;
@@ -159,7 +163,7 @@ export interface CreateClientGrantRequestContent {
  */
 export interface UpdateClientGrantRequestContent {
     /** Scopes allowed for this client grant. */
-    scope?: string[];
+    scope?: string[] | null;
     organization_usage?: Management.ClientGrantOrganizationNullableUsageEnum | null;
     /** Controls allowing any organization to be used with this grant */
     allow_any_organization?: boolean | null;
@@ -179,6 +183,7 @@ export interface UpdateClientGrantRequestContent {
  *         is_global: true,
  *         is_first_party: true,
  *         app_type: "app_type",
+ *         external_client_id: "external_client_id",
  *         q: "q"
  *     }
  */
@@ -199,7 +204,9 @@ export interface ListClientsRequestParameters {
     is_first_party?: boolean | null;
     /** Optional filter by a comma-separated list of application types. */
     app_type?: string | null;
-    /** Advanced Query in <a href="http://www.lucenetutorial.com/lucene-query-syntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
+    /** Optional filter by the <a href="https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-04.html">Client ID Metadata Document</a> URI for CIMD-registered clients. */
+    external_client_id?: string | null;
+    /** Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
     q?: string | null;
 }
 /**
@@ -290,9 +297,32 @@ export interface CreateClientRequestContent {
     token_quota?: Management.CreateTokenQuota;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string;
+    third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
+    redirection_policy?: Management.ClientRedirectionPolicyEnum;
     express_configuration?: Management.ExpressConfiguration;
+    my_organization_configuration?: Management.ClientMyOrganizationPostConfiguration;
     async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPostConfiguration;
 }
+/**
+ * @example
+ *     {
+ *         external_client_id: "external_client_id"
+ *     }
+ */
+export interface PreviewCimdMetadataRequestContent {
+    /** URL to the Client ID Metadata Document */
+    external_client_id: string;
+}
+/**
+ * @example
+ *     {
+ *         external_client_id: "external_client_id"
+ *     }
+ */
+export interface RegisterCimdClientRequestContent {
+    /** URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations. */
+    external_client_id: string;
+}
 /**
  * @example
  *     {
@@ -377,7 +407,7 @@ export interface UpdateClientRequestContent {
     organization_usage?: Management.ClientOrganizationUsagePatchEnum | null;
     organization_require_behavior?: Management.ClientOrganizationRequireBehaviorPatchEnum | null;
     /** Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both. */
-    organization_discovery_methods?: Management.ClientOrganizationDiscoveryEnum[];
+    organization_discovery_methods?: Management.ClientOrganizationDiscoveryEnum[] | null;
     client_authentication_methods?: Management.ClientAuthenticationMethod | null;
     /** Makes the use of Pushed Authorization Requests mandatory for this client */
     require_pushed_authorization_requests?: boolean;
@@ -395,7 +425,10 @@ export interface UpdateClientRequestContent {
     /** Specifies how long, in seconds, a Pushed Authorization Request URI remains valid */
     par_request_expiry?: number | null;
     express_configuration?: Management.ExpressConfigurationOrNull | null;
-    async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration;
+    my_organization_configuration?: Management.ClientMyOrganizationPatchConfiguration | null;
+    async_approval_notification_channels?: (Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration | undefined) | null;
+    third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
+    redirection_policy?: Management.ClientRedirectionPolicyEnum;
 }
 /**
  * @example
@@ -474,7 +507,7 @@ export interface CreateConnectionRequestContent {
     display_name?: string;
     strategy: Management.ConnectionIdentityProviderEnum;
     options?: Management.ConnectionPropertiesOptions;
-    /** DEPRECATED property. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients. */
+    /** Use of this property is NOT RECOMMENDED. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients. */
     enabled_clients?: string[];
     /** <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.) */
     is_domain_connection?: boolean;
@@ -508,7 +541,7 @@ export interface UpdateConnectionRequestContent {
     display_name?: string;
     options?: Management.UpdateConnectionOptions | null;
     /** DEPRECATED property. Use the PATCH /v2/connections/{id}/clients endpoint to enable or disable the connection for any clients. */
-    enabled_clients?: string[];
+    enabled_clients?: string[] | null;
     /** <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.) */
     is_domain_connection?: boolean;
     /** Enables showing a button for the connection in the login page (new experience only). If false, it will be usable only by HRD. (Defaults to <code>false</code>.) */
@@ -529,7 +562,7 @@ export interface UpdateConnectionRequestContent {
  *     }
  */
 export interface ListCustomDomainsRequestParameters {
-    /** Query in <a href ="http://www.lucenetutorial.com/lucene-query-syntax.html">Lucene query string syntax</a>. */
+    /** Query in <a href ="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene query string syntax</a>. */
     q?: string | null;
     /** Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields. */
     fields?: string | null;
@@ -556,6 +589,16 @@ export interface CreateCustomDomainRequestContent {
     /** Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided, the full domain will be used. */
     relying_party_identifier?: string;
 }
+/**
+ * @example
+ *     {
+ *         domain: "domain"
+ *     }
+ */
+export interface SetDefaultCustomDomainRequestContent {
+    /** The domain to set as the default custom domain. Must be a verified custom domain or the canonical domain. */
+    domain: string;
+}
 /**
  * @example
  *     {}
@@ -720,7 +763,7 @@ export interface UpdateEventStreamRequestContent {
 /**
  * @example
  *     {
- *         event_type: "user.created"
+ *         event_type: "group.created"
  *     }
  */
 export interface CreateEventStreamTestEventRequestContent {
@@ -772,7 +815,7 @@ export interface GetFlowRequestParameters {
  */
 export interface UpdateFlowRequestContent {
     name?: string;
-    actions?: Management.FlowAction[];
+    actions?: Management.FlowAction[] | null;
 }
 /**
  * @example
@@ -1028,7 +1071,6 @@ export interface ListNetworkAclsRequestParameters {
  *     {
  *         description: "description",
  *         active: true,
- *         priority: 1.1,
  *         rule: {
  *             action: {},
  *             scope: "management"
@@ -1040,7 +1082,7 @@ export interface CreateNetworkAclRequestContent {
     /** Indicates whether or not this access control list is actively being used */
     active: boolean;
     /** Indicates the order in which the ACL will be evaluated relative to other ACL rules. */
-    priority: number;
+    priority?: number;
     rule: Management.NetworkAclRule;
 }
 /**
@@ -1048,7 +1090,6 @@ export interface CreateNetworkAclRequestContent {
  *     {
  *         description: "description",
  *         active: true,
- *         priority: 1.1,
  *         rule: {
  *             action: {},
  *             scope: "management"
@@ -1060,7 +1101,7 @@ export interface SetNetworkAclRequestContent {
     /** Indicates whether or not this access control list is actively being used */
     active: boolean;
     /** Indicates the order in which the ACL will be evaluated relative to other ACL rules. */
-    priority: number;
+    priority?: number;
     rule: Management.NetworkAclRule;
 }
 /**
@@ -1132,6 +1173,31 @@ export interface UpdateSettingsRequestContent {
     /** Use WebAuthn with Device Biometrics as the first authentication factor */
     webauthn_platform_first_factor?: boolean | null;
 }
+/**
+ * @example
+ *     {
+ *         user_id: "user_id",
+ *         client_id: "client_id",
+ *         from: "from",
+ *         take: 1,
+ *         fields: "fields",
+ *         include_fields: true
+ *     }
+ */
+export interface GetRefreshTokensRequestParameters {
+    /** ID of the user whose refresh tokens to retrieve. Required. */
+    user_id: string;
+    /** Filter results by client ID. Only valid when user_id is provided. */
+    client_id?: string | null;
+    /** An opaque cursor from which to start the selection (exclusive). Expires after 24 hours. Obtained from the next property of a previous response. */
+    from?: string | null;
+    /** Number of results per page. Defaults to 50. */
+    take?: number | null;
+    /** Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields. */
+    fields?: string | null;
+    /** Whether specified fields are to be included (true) or excluded (false). */
+    include_fields?: boolean | null;
+}
 /**
  * @example
  *     {}
@@ -1179,6 +1245,8 @@ export interface CreateResourceServerRequestContent {
     signing_secret?: string;
     /** Whether refresh tokens can be issued for this API (true) or not (false). */
     allow_offline_access?: boolean;
+    /** Whether Online Refresh Tokens can be issued for this API (true) or not (false). */
+    allow_online_access?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
@@ -1188,7 +1256,7 @@ export interface CreateResourceServerRequestContent {
     enforce_policies?: boolean;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
-    authorization_details?: unknown[];
+    authorization_details?: unknown[] | null;
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
 }
@@ -1218,6 +1286,8 @@ export interface UpdateResourceServerRequestContent {
     skip_consent_for_verifiable_first_party_clients?: boolean;
     /** Whether refresh tokens can be issued for this API (true) or not (false). */
     allow_offline_access?: boolean;
+    /** Whether Online Refresh Tokens can be issued for this API (true) or not (false). */
+    allow_online_access?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
@@ -1225,7 +1295,7 @@ export interface UpdateResourceServerRequestContent {
     enforce_policies?: boolean;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
-    authorization_details?: unknown[];
+    authorization_details?: unknown[] | null;
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
 }
@@ -1629,7 +1699,7 @@ export interface ListUsersRequestParameters {
     fields?: string | null;
     /** Whether specified fields are to be included (true) or excluded (false). */
     include_fields?: boolean | null;
-    /** Query in <a target='_new' href ='http://www.lucenetutorial.com/lucene-query-syntax.html'>Lucene query string syntax</a>. Some query types cannot be used on metadata fields, for details see <a href='https://auth0.com/docs/users/search/v3/query-syntax#searchable-fields'>Searchable Fields</a>. */
+    /** Query in <a target='_new' href ='https://lucene.apache.org/core/2_9_4/queryparsersyntax.html'>Lucene query string syntax</a>. Some query types cannot be used on metadata fields, for details see <a href='https://auth0.com/docs/users/search/v3/query-syntax#searchable-fields'>Searchable Fields</a>. */
     q?: string | null;
     /** The version of the search engine */
     search_engine?: Management.SearchEngineVersionsEnum | null;
@@ -2241,6 +2311,8 @@ export interface PostClientCredentialRequestContent {
     parse_expiry_from_cert?: boolean;
     /** The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type. */
     expires_at?: string;
+    /** Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64} */
+    kid?: string;
 }
 /**
  * @example
@@ -2284,6 +2356,31 @@ export interface ListDirectoryProvisioningsRequestParameters {
     /** Number of results per page. Defaults to 50. */
     take?: number | null;
 }
+/**
+ * @example
+ *     {
+ *         from: "from",
+ *         take: 1
+ *     }
+ */
+export interface ListSynchronizedGroupsRequestParameters {
+    /** Optional Id from which to start selection. */
+    from?: string | null;
+    /** Number of results per page. Defaults to 50. */
+    take?: number | null;
+}
+/**
+ * @example
+ *     {
+ *         groups: [{
+ *                 id: "id"
+ *             }]
+ *     }
+ */
+export interface ReplaceSynchronizedGroupsRequestContent {
+    /** Array of Google Workspace Directory group objects to synchronize. */
+    groups: Management.SynchronizedGroupPayload[];
+}
 /**
  * @example
  *     {
@@ -2824,6 +2921,63 @@ export interface AssociateOrganizationClientGrantRequestContent {
     /** A Client Grant ID to add to the organization. */
     grant_id: string;
 }
+/**
+ * @example
+ *     {
+ *         page: 1,
+ *         per_page: 1,
+ *         include_totals: true,
+ *         is_enabled: true
+ *     }
+ */
+export interface ListOrganizationAllConnectionsRequestParameters {
+    /** Page index of the results to return. First page is 0. */
+    page?: number | null;
+    /** Number of results per page. Defaults to 50. */
+    per_page?: number | null;
+    /** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). */
+    include_totals?: boolean | null;
+    /** Filter connections by enabled status. */
+    is_enabled?: boolean | null;
+}
+/**
+ * @example
+ *     {
+ *         connection_id: "connection_id"
+ *     }
+ */
+export interface CreateOrganizationAllConnectionRequestParameters {
+    /** Name of the connection in the scope of this organization. */
+    organization_connection_name?: string;
+    /** When true, all users that log in with this connection will be automatically granted membership in the organization. When false, users must be granted membership in the organization before logging in with this connection. */
+    assign_membership_on_login?: boolean;
+    /** Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections. Default: true. */
+    show_as_button?: boolean;
+    /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
+    is_signup_enabled?: boolean;
+    organization_access_level?: Management.OrganizationAccessLevelEnum;
+    /** Whether the connection is enabled for the organization. */
+    is_enabled?: boolean;
+    /** Connection identifier. */
+    connection_id: string;
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdateOrganizationConnectionRequestParameters {
+    /** Name of the connection in the scope of this organization. */
+    organization_connection_name?: string | null;
+    /** When true, all users that log in with this connection will be automatically granted membership in the organization. When false, users must be granted membership in the organization before logging in with this connection. */
+    assign_membership_on_login?: boolean;
+    /** Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections. Default: true. */
+    show_as_button?: boolean;
+    /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
+    is_signup_enabled?: boolean;
+    organization_access_level?: Management.OrganizationAccessLevelEnumWithNull | null;
+    /** Whether the connection is enabled for the organization. */
+    is_enabled?: boolean | null;
+}
 /**
  * @example
  *     {
@@ -3094,13 +3248,13 @@ export interface BulkUpdateAculRequestContent {
 export interface UpdateAculRequestContent {
     /** Rendering mode */
     rendering_mode?: Management.AculRenderingModeEnum;
-    context_configuration?: Management.AculContextConfiguration;
+    context_configuration?: (Management.AculContextConfiguration | undefined) | null;
     /** Override Universal Login default head tags */
     default_head_tags_disabled?: boolean | null;
     /** Use page template with ACUL */
     use_page_template?: boolean | null;
     /** An array of head tags */
-    head_tags?: Management.AculHeadTag[];
+    head_tags?: Management.AculHeadTag[] | null;
     filters?: Management.AculFilters | null;
 }
 /**
@@ -3270,7 +3424,7 @@ export interface UpdateTenantSettingsRequestContent {
     /** Whether to accept an organization name instead of an ID on auth endpoints */
     allow_organization_name_in_authentication_api?: boolean | null;
     /** Supported ACR values */
-    acr_values_supported?: string[];
+    acr_values_supported?: string[] | null;
     mtls?: Management.TenantSettingsMtls | null;
     /** Enables the use of Pushed Authorization Requests */
     pushed_authorization_requests_supported?: boolean | null;
@@ -3283,10 +3437,13 @@ export interface UpdateTenantSettingsRequestContent {
      */
     skip_non_verifiable_callback_uri_confirmation_prompt?: boolean | null;
     resource_parameter_profile?: Management.TenantSettingsResourceParameterProfile;
+    /** Whether the authorization server supports retrieving client metadata from a client_id URL. */
+    client_id_metadata_document_supported?: boolean;
     /** Whether Auth0 Guide (AI-powered assistance) is enabled for this tenant. */
     enable_ai_guide?: boolean;
     /** Whether Phone Consolidated Experience is enabled for this tenant. */
     phone_consolidated_experience?: boolean;
+    dynamic_client_registration_security_mode?: Management.TenantSettingsDynamicClientRegistrationSecurityMode;
 }
 /**
  * @example

package/dist/cjs/management/api/resources/actions/client/Client.d.ts

@@ -35,7 +35,7 @@ export declare class ActionsClient {
      *
      * @example
      *     await client.actions.list({
-     *         triggerId: "triggerId",
+     *         triggerId: "post-login",
      *         actionName: "actionName",
      *         deployed: true,
      *         page: 1,
@@ -59,7 +59,7 @@ export declare class ActionsClient {
      *     await client.actions.create({
      *         name: "name",
      *         supported_triggers: [{
-     *                 id: "id"
+     *                 id: "post-login"
      *             }]
      *     })
      */

package/dist/cjs/management/api/resources/actions/client/Client.js

@@ -88,7 +88,7 @@ class ActionsClient {
      *
      * @example
      *     await client.actions.list({
-     *         triggerId: "triggerId",
+     *         triggerId: "post-login",
      *         actionName: "actionName",
      *         deployed: true,
      *         page: 1,
@@ -102,7 +102,7 @@ class ActionsClient {
                 var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
                 const { triggerId, actionName, deployed, page = 0, per_page: perPage = 50, installed } = request;
                 const _queryParams = {
-                    triggerId,
+                    triggerId: triggerId !== undefined ? triggerId : undefined,
                     actionName,
                     deployed,
                     page,
@@ -177,7 +177,7 @@ class ActionsClient {
      *     await client.actions.create({
      *         name: "name",
      *         supported_triggers: [{
-     *                 id: "id"
+     *                 id: "post-login"
      *             }]
      *     })
      */

package/dist/cjs/management/api/resources/actions/resources/triggers/resources/bindings/client/Client.d.ts

@@ -23,7 +23,7 @@ export declare class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.list("triggerId", {
+     *     await client.actions.triggers.bindings.list("post-login", {
      *         page: 1,
      *         per_page: 1
      *     })
@@ -42,7 +42,7 @@ export declare class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.updateMany("triggerId")
+     *     await client.actions.triggers.bindings.updateMany("post-login")
      */
     updateMany(triggerId: Management.ActionTriggerTypeEnum, request?: Management.UpdateActionBindingsRequestContent, requestOptions?: BindingsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateActionBindingsResponseContent>;
     private __updateMany;

package/dist/cjs/management/api/resources/actions/resources/triggers/resources/bindings/client/Client.js

@@ -68,7 +68,7 @@ class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.list("triggerId", {
+     *     await client.actions.triggers.bindings.list("post-login", {
      *         page: 1,
      *         per_page: 1
      *     })
@@ -148,7 +148,7 @@ class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.updateMany("triggerId")
+     *     await client.actions.triggers.bindings.updateMany("post-login")
      */
     updateMany(triggerId, request = {}, requestOptions) {
         return core.HttpResponsePromise.fromPromise(this.__updateMany(triggerId, request, requestOptions));

package/dist/cjs/management/api/resources/clientGrants/client/Client.d.ts

@@ -30,7 +30,8 @@ export declare class ClientGrantsClient {
      *         audience: "audience",
      *         client_id: "client_id",
      *         allow_any_organization: true,
-     *         subject_type: "client"
+     *         subject_type: "client",
+     *         default_for: "third_party_clients"
      *     })
      */
     list(request?: Management.ListClientGrantsRequestParameters, requestOptions?: ClientGrantsClient.RequestOptions): Promise<core.Page<Management.ClientGrantResponseContent, Management.ListClientGrantPaginatedResponseContent>>;
@@ -49,7 +50,6 @@ export declare class ClientGrantsClient {
      *
      * @example
      *     await client.clientGrants.create({
-     *         client_id: "client_id",
      *         audience: "audience"
      *     })
      */