auth0 5.6.0 → 5.8.0

package/dist/cjs/management/api/requests/requests.d.ts

@@ -113,7 +113,8 @@ export interface UpdateBrandingRequestContent {
  *         audience: "audience",
  *         client_id: "client_id",
  *         allow_any_organization: true,
- *         subject_type: "client"
+ *         subject_type: "client",
+ *         default_for: "third_party_clients"
  *     }
  */
 export interface ListClientGrantsRequestParameters {
@@ -129,6 +130,8 @@ export interface ListClientGrantsRequestParameters {
     allow_any_organization?: Management.ClientGrantAllowAnyOrganizationEnum | null;
     /** The type of application access the client grant allows. */
     subject_type?: Management.ClientGrantSubjectTypeEnum | null;
+    /** Applies this client grant as the default for all clients in the specified group. The only accepted value is `third_party_clients`, which applies the grant to all third-party clients. Per-client grants for the same audience take precedence. Mutually exclusive with `client_id`. */
+    default_for?: Management.ClientGrantDefaultForEnum | null;
 }
 /**
  * @example
@@ -141,6 +144,7 @@ export interface CreateClientGrantRequestContent {
     client_id?: string;
     /** The audience (API identifier) of this client grant */
     audience: string;
+    default_for?: Management.ClientGrantDefaultForEnum;
     organization_usage?: Management.ClientGrantOrganizationUsageEnum;
     /** If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations. */
     allow_any_organization?: boolean;
@@ -292,7 +296,10 @@ export interface CreateClientRequestContent {
     token_quota?: Management.CreateTokenQuota;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string;
+    third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
+    redirection_policy?: Management.ClientRedirectionPolicyEnum;
     express_configuration?: Management.ExpressConfiguration;
+    my_organization_configuration?: Management.ClientMyOrganizationPostConfiguration;
     async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPostConfiguration;
 }
 /**
@@ -417,7 +424,10 @@ export interface UpdateClientRequestContent {
     /** Specifies how long, in seconds, a Pushed Authorization Request URI remains valid */
     par_request_expiry?: number | null;
     express_configuration?: Management.ExpressConfigurationOrNull | null;
+    my_organization_configuration?: Management.ClientMyOrganizationPatchConfiguration | null;
     async_approval_notification_channels?: (Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration | undefined) | null;
+    third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
+    redirection_policy?: Management.ClientRedirectionPolicyEnum;
 }
 /**
  * @example
@@ -752,7 +762,7 @@ export interface UpdateEventStreamRequestContent {
 /**
  * @example
  *     {
- *         event_type: "user.created"
+ *         event_type: "group.created"
  *     }
  */
 export interface CreateEventStreamTestEventRequestContent {
@@ -2345,6 +2355,31 @@ export interface ListDirectoryProvisioningsRequestParameters {
     /** Number of results per page. Defaults to 50. */
     take?: number | null;
 }
+/**
+ * @example
+ *     {
+ *         from: "from",
+ *         take: 1
+ *     }
+ */
+export interface ListSynchronizedGroupsRequestParameters {
+    /** Optional Id from which to start selection. */
+    from?: string | null;
+    /** Number of results per page. Defaults to 50. */
+    take?: number | null;
+}
+/**
+ * @example
+ *     {
+ *         groups: [{
+ *                 id: "id"
+ *             }]
+ *     }
+ */
+export interface ReplaceSynchronizedGroupsRequestContent {
+    /** Array of Google Workspace Directory group objects to synchronize. */
+    groups: Management.SynchronizedGroupPayload[];
+}
 /**
  * @example
  *     {
@@ -3324,6 +3359,7 @@ export interface CreateSelfServiceProfileSsoTicketRequestContent {
     provisioning_config?: Management.SelfServiceProfileSsoTicketProvisioningConfig;
     /** Indicates whether a verified domain should be used for organization discovery during authentication. */
     use_for_organization_discovery?: boolean;
+    enabled_features?: Management.SelfServiceProfileSsoTicketEnabledFeatures;
 }
 /**
  * @example
@@ -3401,10 +3437,13 @@ export interface UpdateTenantSettingsRequestContent {
      */
     skip_non_verifiable_callback_uri_confirmation_prompt?: boolean | null;
     resource_parameter_profile?: Management.TenantSettingsResourceParameterProfile;
+    /** Whether the authorization server supports retrieving client metadata from a client_id URL. */
+    client_id_metadata_document_supported?: boolean;
     /** Whether Auth0 Guide (AI-powered assistance) is enabled for this tenant. */
     enable_ai_guide?: boolean;
     /** Whether Phone Consolidated Experience is enabled for this tenant. */
     phone_consolidated_experience?: boolean;
+    dynamic_client_registration_security_mode?: Management.TenantSettingsDynamicClientRegistrationSecurityMode;
 }
 /**
  * @example

package/dist/cjs/management/api/resources/clientGrants/client/Client.d.ts

@@ -30,7 +30,8 @@ export declare class ClientGrantsClient {
      *         audience: "audience",
      *         client_id: "client_id",
      *         allow_any_organization: true,
-     *         subject_type: "client"
+     *         subject_type: "client",
+     *         default_for: "third_party_clients"
      *     })
      */
     list(request?: Management.ListClientGrantsRequestParameters, requestOptions?: ClientGrantsClient.RequestOptions): Promise<core.Page<Management.ClientGrantResponseContent, Management.ListClientGrantPaginatedResponseContent>>;

package/dist/cjs/management/api/resources/clientGrants/client/Client.js

@@ -77,14 +77,15 @@ class ClientGrantsClient {
      *         audience: "audience",
      *         client_id: "client_id",
      *         allow_any_organization: true,
-     *         subject_type: "client"
+     *         subject_type: "client",
+     *         default_for: "third_party_clients"
      *     })
      */
     list() {
         return __awaiter(this, arguments, void 0, function* (request = {}, requestOptions) {
             const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
-                const { from: from_, take = 50, audience, client_id: clientId, allow_any_organization: allowAnyOrganization, subject_type: subjectType, } = request;
+                const { from: from_, take = 50, audience, client_id: clientId, allow_any_organization: allowAnyOrganization, subject_type: subjectType, default_for: defaultFor, } = request;
                 const _queryParams = {
                     from: from_,
                     take,
@@ -92,6 +93,7 @@ class ClientGrantsClient {
                     client_id: clientId,
                     allow_any_organization: allowAnyOrganization,
                     subject_type: subjectType !== undefined ? subjectType : undefined,
+                    default_for: defaultFor !== undefined ? defaultFor : undefined,
                 };
                 const _authRequest = yield this._options.authProvider.getAuthRequest();
                 let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);

package/dist/cjs/management/api/resources/connections/resources/directoryProvisioning/client/Client.d.ts

@@ -119,4 +119,47 @@ export declare class DirectoryProvisioningClient {
      */
     getDefaultMapping(id: string, requestOptions?: DirectoryProvisioningClient.RequestOptions): core.HttpResponsePromise<Management.GetDirectoryProvisioningDefaultMappingResponseContent>;
     private __getDefaultMapping;
+    /**
+     * Retrieve the configured synchronized groups for a connection directory provisioning configuration.
+     *
+     * @param {string} id - The id of the connection to list synchronized groups for.
+     * @param {Management.ListSynchronizedGroupsRequestParameters} request
+     * @param {DirectoryProvisioningClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.connections.directoryProvisioning.listSynchronizedGroups("id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    listSynchronizedGroups(id: string, request?: Management.ListSynchronizedGroupsRequestParameters, requestOptions?: DirectoryProvisioningClient.RequestOptions): Promise<core.Page<Management.SynchronizedGroupPayload, Management.ListSynchronizedGroupsResponseContent>>;
+    /**
+     * Create or replace the selected groups for a connection directory provisioning configuration.
+     *
+     * @param {string} id - The id of the connection to create or replace synchronized groups for
+     * @param {Management.ReplaceSynchronizedGroupsRequestContent} request
+     * @param {DirectoryProvisioningClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.connections.directoryProvisioning.set("id", {
+     *         groups: [{
+     *                 id: "id"
+     *             }]
+     *     })
+     */
+    set(id: string, request: Management.ReplaceSynchronizedGroupsRequestContent, requestOptions?: DirectoryProvisioningClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __set;
 }

package/dist/cjs/management/api/resources/connections/resources/directoryProvisioning/client/Client.js

@@ -460,5 +460,157 @@ class DirectoryProvisioningClient {
             return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "GET", "/connections/{id}/directory-provisioning/default-mapping");
         });
     }
+    /**
+     * Retrieve the configured synchronized groups for a connection directory provisioning configuration.
+     *
+     * @param {string} id - The id of the connection to list synchronized groups for.
+     * @param {Management.ListSynchronizedGroupsRequestParameters} request
+     * @param {DirectoryProvisioningClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.connections.directoryProvisioning.listSynchronizedGroups("id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    listSynchronizedGroups(id_1) {
+        return __awaiter(this, arguments, void 0, function* (id, request = {}, requestOptions) {
+            const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+                const { from: from_, take = 50 } = request;
+                const _queryParams = {
+                    from: from_,
+                    take,
+                };
+                const _authRequest = yield this._options.authProvider.getAuthRequest();
+                let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+                const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                    url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `connections/${core.url.encodePathParam(id)}/directory-provisioning/synchronized-groups`),
+                    method: "GET",
+                    headers: _headers,
+                    queryParameters: Object.assign(Object.assign({}, _queryParams), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams),
+                    timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                    maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                    abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                    fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                    logging: this._options.logging,
+                });
+                if (_response.ok) {
+                    return {
+                        data: _response.body,
+                        rawResponse: _response.rawResponse,
+                    };
+                }
+                if (_response.error.reason === "status-code") {
+                    switch (_response.error.statusCode) {
+                        case 400:
+                            throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                        case 401:
+                            throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                        case 403:
+                            throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
+                        case 429:
+                            throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                        default:
+                            throw new errors.ManagementError({
+                                statusCode: _response.error.statusCode,
+                                body: _response.error.body,
+                                rawResponse: _response.rawResponse,
+                            });
+                    }
+                }
+                return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "GET", "/connections/{id}/directory-provisioning/synchronized-groups");
+            }));
+            const dataWithRawResponse = yield list(request).withRawResponse();
+            return new core.Page({
+                response: dataWithRawResponse.data,
+                rawResponse: dataWithRawResponse.rawResponse,
+                hasNextPage: (response) => (response === null || response === void 0 ? void 0 : response.next) != null && !(typeof (response === null || response === void 0 ? void 0 : response.next) === "string" && (response === null || response === void 0 ? void 0 : response.next) === ""),
+                getItems: (response) => { var _a; return (_a = response === null || response === void 0 ? void 0 : response.groups) !== null && _a !== void 0 ? _a : []; },
+                loadPage: (response) => {
+                    return list(core.setObjectProperty(request, "from", response === null || response === void 0 ? void 0 : response.next));
+                },
+            });
+        });
+    }
+    /**
+     * Create or replace the selected groups for a connection directory provisioning configuration.
+     *
+     * @param {string} id - The id of the connection to create or replace synchronized groups for
+     * @param {Management.ReplaceSynchronizedGroupsRequestContent} request
+     * @param {DirectoryProvisioningClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.connections.directoryProvisioning.set("id", {
+     *         groups: [{
+     *                 id: "id"
+     *             }]
+     *     })
+     */
+    set(id, request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__set(id, request, requestOptions));
+    }
+    __set(id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `connections/${core.url.encodePathParam(id)}/directory-provisioning/synchronized-groups`),
+                method: "PUT",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: request,
+                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: undefined, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                    case 401:
+                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                    case 403:
+                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
+                    case 409:
+                        throw new Management.ConflictError(_response.error.body, _response.rawResponse);
+                    case 429:
+                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.ManagementError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "PUT", "/connections/{id}/directory-provisioning/synchronized-groups");
+        });
+    }
 }
 exports.DirectoryProvisioningClient = DirectoryProvisioningClient;

package/dist/cjs/management/api/resources/eventStreams/client/Client.d.ts

@@ -112,7 +112,7 @@ export declare class EventStreamsClient {
      *
      * @example
      *     await client.eventStreams.test("id", {
-     *         event_type: "user.created"
+     *         event_type: "group.created"
      *     })
      */
     test(id: string, request: Management.CreateEventStreamTestEventRequestContent, requestOptions?: EventStreamsClient.RequestOptions): core.HttpResponsePromise<Management.CreateEventStreamTestEventResponseContent>;

package/dist/cjs/management/api/resources/eventStreams/client/Client.js

@@ -401,7 +401,7 @@ class EventStreamsClient {
      *
      * @example
      *     await client.eventStreams.test("id", {
-     *         event_type: "user.created"
+     *         event_type: "group.created"
      *     })
      */
     test(id, request, requestOptions) {