auth0 5.6.0 → 5.7.0

package/dist/esm/management/api/types/types.mjs

@@ -955,6 +955,10 @@ export const ClientExternalMetadataCreatedByEnum = {
 export const ClientExternalMetadataTypeEnum = {
     Cimd: "cimd",
 };
+/** Used to filter the returned client grants to include only default client grants for the specified group of clients. */
+export const ClientGrantDefaultForEnum = {
+    ThirdPartyClients: "third_party_clients",
+};
 /** Controls how organizations may be used with this grant */
 export const ClientGrantOrganizationNullableUsageEnum = {
     Deny: "deny",
@@ -972,6 +976,21 @@ export const ClientGrantSubjectTypeEnum = {
     Client: "client",
     User: "user",
 };
+/** The allowed connection strategy values for the My Organization Configuration. */
+export const ClientMyOrganizationConfigurationAllowedStrategiesEnum = {
+    Pingfederate: "pingfederate",
+    Adfs: "adfs",
+    Waad: "waad",
+    GoogleApps: "google-apps",
+    Okta: "okta",
+    Oidc: "oidc",
+    Samlp: "samlp",
+};
+/** The deletion behavior for this client. */
+export const ClientMyOrganizationDeletionBehaviorEnum = {
+    Allow: "allow",
+    AllowIfEmpty: "allow_if_empty",
+};
 /** The `selected_initiators` property contains the list of initiators to be enabled for the given application. */
 export const ClientOidcBackchannelLogoutInitiatorsEnum = {
     RpLogout: "rp-logout",
@@ -1018,6 +1037,11 @@ export const ClientOrganizationUsagePatchEnum = {
     Allow: "allow",
     Require: "require",
 };
+/** Controls whether Auth0 redirects users to the application's callback URL on authentication errors or in email verification flows. `open_redirect_protection` shows an error page instead of redirecting, and hides the callback domain from email templates. `allow_always` enables standard redirect behavior. Defaults to `open_redirect_protection` for third-party clients. Only applies when `is_first_party` is `false` and `third_party_security_mode` is `strict`. */
+export const ClientRedirectionPolicyEnum = {
+    AllowAlways: "allow_always",
+    OpenRedirectProtection: "open_redirect_protection",
+};
 export const ClientSessionTransferAllowedAuthenticationMethodsEnum = {
     Cookie: "cookie",
     Query: "query",
@@ -1028,6 +1052,11 @@ export const ClientSessionTransferDeviceBindingEnum = {
     Asn: "asn",
     None: "none",
 };
+/** Security mode for third-party clients. `strict` enforces enhanced security controls: OAuth 2.1 alignment, explicit API authorization, and a curated set of supported features. `permissive` preserves pre-existing behavior and is only available to tenants with prior third-party client usage. Set on creation and cannot be modified. */
+export const ClientThirdPartySecurityModeEnum = {
+    Strict: "strict",
+    Permissive: "permissive",
+};
 /** Defines the requested authentication method for the token endpoint. Can be `none` (public client without a client secret), `client_secret_post` (client uses HTTP POST parameters), or `client_secret_basic` (client uses HTTP Basic). */
 export const ClientTokenEndpointAuthMethodEnum = {
     None: "none",
@@ -1040,6 +1069,7 @@ export const ClientTokenEndpointAuthMethodOrNullEnum = {
     ClientSecretPost: "client_secret_post",
     ClientSecretBasic: "client_secret_basic",
 };
+/** Token exchange type. `on_behalf_of_token_exchange`: enables On-Behalf-Of token exchange (Generally Available). `custom_authentication`: enables custom token exchange profiles (Early Access, requires entitlement). */
 export const ClientTokenExchangeTypeEnum = {
     CustomAuthentication: "custom_authentication",
     OnBehalfOfTokenExchange: "on_behalf_of_token_exchange",
@@ -1065,6 +1095,11 @@ export const ConnectionDigestAlgorithmEnumSaml = {
     Sha1: "sha1",
     Sha256: "sha256",
 };
+/** Algorithm used for DPoP proof JWT signing. */
+export const ConnectionDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Ed25519: "Ed25519",
+};
 export var ConnectionEmailEmail;
 (function (ConnectionEmailEmail) {
     /** Email template syntax type */
@@ -2195,24 +2230,28 @@ export const EventStreamActionDestinationTypeEnum = {
 };
 /** Type of event */
 export const EventStreamDeliveryEventTypeEnum = {
-    UserCreated: "user.created",
-    UserDeleted: "user.deleted",
-    UserUpdated: "user.updated",
+    GroupCreated: "group.created",
+    GroupDeleted: "group.deleted",
+    GroupMemberAdded: "group.member.added",
+    GroupMemberDeleted: "group.member.deleted",
+    GroupRoleAssigned: "group.role.assigned",
+    GroupRoleDeleted: "group.role.deleted",
+    GroupUpdated: "group.updated",
+    OrganizationConnectionAdded: "organization.connection.added",
+    OrganizationConnectionRemoved: "organization.connection.removed",
+    OrganizationConnectionUpdated: "organization.connection.updated",
     OrganizationCreated: "organization.created",
-    OrganizationUpdated: "organization.updated",
     OrganizationDeleted: "organization.deleted",
+    OrganizationGroupRoleAssigned: "organization.group.role.assigned",
+    OrganizationGroupRoleDeleted: "organization.group.role.deleted",
     OrganizationMemberAdded: "organization.member.added",
     OrganizationMemberDeleted: "organization.member.deleted",
     OrganizationMemberRoleAssigned: "organization.member.role.assigned",
     OrganizationMemberRoleDeleted: "organization.member.role.deleted",
-    OrganizationConnectionAdded: "organization.connection.added",
-    OrganizationConnectionUpdated: "organization.connection.updated",
-    OrganizationConnectionRemoved: "organization.connection.removed",
-    GroupCreated: "group.created",
-    GroupUpdated: "group.updated",
-    GroupDeleted: "group.deleted",
-    GroupMemberAdded: "group.member.added",
-    GroupMemberDeleted: "group.member.deleted",
+    OrganizationUpdated: "organization.updated",
+    UserCreated: "user.created",
+    UserDeleted: "user.deleted",
+    UserUpdated: "user.updated",
 };
 /** Delivery status */
 export const EventStreamDeliveryStatusEnum = {
@@ -2261,24 +2300,28 @@ export const EventStreamEventBridgeDestinationTypeEnum = {
     Eventbridge: "eventbridge",
 };
 export const EventStreamEventTypeEnum = {
-    UserCreated: "user.created",
-    UserDeleted: "user.deleted",
-    UserUpdated: "user.updated",
+    GroupCreated: "group.created",
+    GroupDeleted: "group.deleted",
+    GroupMemberAdded: "group.member.added",
+    GroupMemberDeleted: "group.member.deleted",
+    GroupRoleAssigned: "group.role.assigned",
+    GroupRoleDeleted: "group.role.deleted",
+    GroupUpdated: "group.updated",
+    OrganizationConnectionAdded: "organization.connection.added",
+    OrganizationConnectionRemoved: "organization.connection.removed",
+    OrganizationConnectionUpdated: "organization.connection.updated",
     OrganizationCreated: "organization.created",
-    OrganizationUpdated: "organization.updated",
     OrganizationDeleted: "organization.deleted",
+    OrganizationGroupRoleAssigned: "organization.group.role.assigned",
+    OrganizationGroupRoleDeleted: "organization.group.role.deleted",
     OrganizationMemberAdded: "organization.member.added",
     OrganizationMemberDeleted: "organization.member.deleted",
     OrganizationMemberRoleAssigned: "organization.member.role.assigned",
     OrganizationMemberRoleDeleted: "organization.member.role.deleted",
-    OrganizationConnectionAdded: "organization.connection.added",
-    OrganizationConnectionUpdated: "organization.connection.updated",
-    OrganizationConnectionRemoved: "organization.connection.removed",
-    GroupCreated: "group.created",
-    GroupUpdated: "group.updated",
-    GroupDeleted: "group.deleted",
-    GroupMemberAdded: "group.member.added",
-    GroupMemberDeleted: "group.member.deleted",
+    OrganizationUpdated: "organization.updated",
+    UserCreated: "user.created",
+    UserDeleted: "user.deleted",
+    UserUpdated: "user.updated",
 };
 /** Indicates whether the event stream is actively forwarding events. */
 export const EventStreamStatusEnum = {
@@ -2287,24 +2330,28 @@ export const EventStreamStatusEnum = {
 };
 /** The type of event this test event represents. */
 export const EventStreamTestEventTypeEnum = {
-    UserCreated: "user.created",
-    UserDeleted: "user.deleted",
-    UserUpdated: "user.updated",
+    GroupCreated: "group.created",
+    GroupDeleted: "group.deleted",
+    GroupMemberAdded: "group.member.added",
+    GroupMemberDeleted: "group.member.deleted",
+    GroupRoleAssigned: "group.role.assigned",
+    GroupRoleDeleted: "group.role.deleted",
+    GroupUpdated: "group.updated",
+    OrganizationConnectionAdded: "organization.connection.added",
+    OrganizationConnectionRemoved: "organization.connection.removed",
+    OrganizationConnectionUpdated: "organization.connection.updated",
     OrganizationCreated: "organization.created",
-    OrganizationUpdated: "organization.updated",
     OrganizationDeleted: "organization.deleted",
+    OrganizationGroupRoleAssigned: "organization.group.role.assigned",
+    OrganizationGroupRoleDeleted: "organization.group.role.deleted",
     OrganizationMemberAdded: "organization.member.added",
     OrganizationMemberDeleted: "organization.member.deleted",
     OrganizationMemberRoleAssigned: "organization.member.role.assigned",
     OrganizationMemberRoleDeleted: "organization.member.role.deleted",
-    OrganizationConnectionAdded: "organization.connection.added",
-    OrganizationConnectionUpdated: "organization.connection.updated",
-    OrganizationConnectionRemoved: "organization.connection.removed",
-    GroupCreated: "group.created",
-    GroupUpdated: "group.updated",
-    GroupDeleted: "group.deleted",
-    GroupMemberAdded: "group.member.added",
-    GroupMemberDeleted: "group.member.deleted",
+    OrganizationUpdated: "organization.updated",
+    UserCreated: "user.created",
+    UserDeleted: "user.deleted",
+    UserUpdated: "user.updated",
 };
 /** Type of authorization. */
 export const EventStreamWebhookBasicAuthMethodEnum = {
@@ -4127,12 +4174,18 @@ export const SuspiciousIpThrottlingShieldsEnum = {
 export const SynchronizeGroupsEnum = {
     All: "all",
     Off: "off",
+    Selected: "selected",
 };
 /** Character set used to generate a User Code. Can be `base20` or `digits`. */
 export const TenantSettingsDeviceFlowCharset = {
     Base20: "base20",
     Digits: "digits",
 };
+/** Sets the `third_party_security_mode` assigned to clients created via Dynamic Client Registration. `strict` applies enhanced security controls. `permissive` preserves pre-existing behavior and is only available to tenants with prior third-party client usage. */
+export const TenantSettingsDynamicClientRegistrationSecurityMode = {
+    Strict: "strict",
+    Permissive: "permissive",
+};
 /** Profile that determines how the identity of the protected resource (i.e., API) can be specified in the OAuth endpoints when access is being requested. When set to audience (default), the audience parameter is used to specify the resource server. When set to compatibility, the audience parameter is still checked first, but if it not provided, then the resource parameter can be used to specify the resource server. */
 export const TenantSettingsResourceParameterProfile = {
     Audience: "audience",

package/dist/esm/management/version.d.mts

@@ -1 +1 @@
-export declare const SDK_VERSION = "5.6.0";
+export declare const SDK_VERSION = "5.7.0";

package/dist/esm/management/version.mjs

@@ -1 +1 @@
-export const SDK_VERSION = "5.6.0";
+export const SDK_VERSION = "5.7.0";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth0",
-    "version": "5.6.0",
+    "version": "5.7.0",
     "private": false,
     "repository": {
         "type": "git",

package/reference.md

@@ -663,6 +663,7 @@ const pageableResponse = await client.clientGrants.list({
     client_id: "client_id",
     allow_any_organization: true,
     subject_type: "client",
+    default_for: "third_party_clients",
 });
 for await (const item of pageableResponse) {
     console.log(item);
@@ -676,6 +677,7 @@ let page = await client.clientGrants.list({
     client_id: "client_id",
     allow_any_organization: true,
     subject_type: "client",
+    default_for: "third_party_clients",
 });
 while (page.hasNextPage()) {
     page = page.getNextPage();
@@ -3962,7 +3964,7 @@ await client.eventStreams.update("id");
 
 ```typescript
 await client.eventStreams.test("id", {
-    event_type: "user.created",
+    event_type: "group.created",
 });
 ```
 
@@ -15929,6 +15931,172 @@ await client.connections.directoryProvisioning.getDefaultMapping("id");
 </dl>
 </details>
 
+<details><summary><code>client.connections.directoryProvisioning.<a href="/src/management/api/resources/connections/resources/directoryProvisioning/client/Client.ts">listSynchronizedGroups</a>(id, { ...params }) -> core.Page&lt;Management.SynchronizedGroupPayload, Management.ListSynchronizedGroupsResponseContent&gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve the configured synchronized groups for a connection directory provisioning configuration.
+
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```typescript
+const pageableResponse = await client.connections.directoryProvisioning.listSynchronizedGroups("id", {
+    from: "from",
+    take: 1,
+});
+for await (const item of pageableResponse) {
+    console.log(item);
+}
+
+// Or you can manually iterate page-by-page
+let page = await client.connections.directoryProvisioning.listSynchronizedGroups("id", {
+    from: "from",
+    take: 1,
+});
+while (page.hasNextPage()) {
+    page = page.getNextPage();
+}
+
+// You can also access the underlying response
+const response = page.response;
+```
+
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `string` — The id of the connection to list synchronized groups for.
+
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**request:** `Management.ListSynchronizedGroupsRequestParameters`
+
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**requestOptions:** `DirectoryProvisioningClient.RequestOptions`
+
+</dd>
+</dl>
+</dd>
+</dl>
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.connections.directoryProvisioning.<a href="/src/management/api/resources/connections/resources/directoryProvisioning/client/Client.ts">set</a>(id, { ...params }) -> void</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Create or replace the selected groups for a connection directory provisioning configuration.
+
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```typescript
+await client.connections.directoryProvisioning.set("id", {
+    groups: [
+        {
+            id: "id",
+        },
+    ],
+});
+```
+
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `string` — The id of the connection to create or replace synchronized groups for
+
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**request:** `Management.ReplaceSynchronizedGroupsRequestContent`
+
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**requestOptions:** `DirectoryProvisioningClient.RequestOptions`
+
+</dd>
+</dl>
+</dd>
+</dl>
+
+</dd>
+</dl>
+</details>
+
 ## Connections ScimConfiguration
 
 <details><summary><code>client.connections.scimConfiguration.<a href="/src/management/api/resources/connections/resources/scimConfiguration/client/Client.ts">list</a>({ ...params }) -> core.Page&lt;Management.ScimConfiguration, Management.ListScimConfigurationsResponseContent&gt;</code></summary>