auth0 5.6.0 → 5.8.0

package/dist/esm/management/api/types/types.mjs

@@ -955,6 +955,10 @@ export const ClientExternalMetadataCreatedByEnum = {
 export const ClientExternalMetadataTypeEnum = {
     Cimd: "cimd",
 };
+/** Applies this client grant as the default for all clients in the specified group. The only accepted value is `third_party_clients`, which applies the grant to all third-party clients. Per-client grants for the same audience take precedence. Mutually exclusive with `client_id`. */
+export const ClientGrantDefaultForEnum = {
+    ThirdPartyClients: "third_party_clients",
+};
 /** Controls how organizations may be used with this grant */
 export const ClientGrantOrganizationNullableUsageEnum = {
     Deny: "deny",
@@ -972,6 +976,21 @@ export const ClientGrantSubjectTypeEnum = {
     Client: "client",
     User: "user",
 };
+/** The allowed connection strategy values for the My Organization Configuration. */
+export const ClientMyOrganizationConfigurationAllowedStrategiesEnum = {
+    Pingfederate: "pingfederate",
+    Adfs: "adfs",
+    Waad: "waad",
+    GoogleApps: "google-apps",
+    Okta: "okta",
+    Oidc: "oidc",
+    Samlp: "samlp",
+};
+/** The deletion behavior for this client. */
+export const ClientMyOrganizationDeletionBehaviorEnum = {
+    Allow: "allow",
+    AllowIfEmpty: "allow_if_empty",
+};
 /** The `selected_initiators` property contains the list of initiators to be enabled for the given application. */
 export const ClientOidcBackchannelLogoutInitiatorsEnum = {
     RpLogout: "rp-logout",
@@ -1018,16 +1037,31 @@ export const ClientOrganizationUsagePatchEnum = {
     Allow: "allow",
     Require: "require",
 };
+/** Controls whether Auth0 redirects users to the application's callback URL on authentication errors or in email verification flows. `open_redirect_protection` shows an error page instead of redirecting, and hides the callback domain from email templates. `allow_always` enables standard redirect behavior. Defaults to `open_redirect_protection` for third-party clients. Only applies when `is_first_party` is `false` and `third_party_security_mode` is `strict`. */
+export const ClientRedirectionPolicyEnum = {
+    AllowAlways: "allow_always",
+    OpenRedirectProtection: "open_redirect_protection",
+};
 export const ClientSessionTransferAllowedAuthenticationMethodsEnum = {
     Cookie: "cookie",
     Query: "query",
 };
+/** Indicates the device binding enforcement for delegation (impersonation) access. If set to 'ip', device binding is enforced by IP. If set to 'asn', device binding is enforced by ASN. Default value is `ip`. */
+export const ClientSessionTransferDelegationDeviceBindingEnum = {
+    Ip: "ip",
+    Asn: "asn",
+};
 /** Indicates whether device binding security should be enforced for the app. If set to 'ip', the app will enforce device binding by IP, meaning that consumption of Session Transfer Token must be done from the same IP of the issuer. Likewise, if set to 'asn', device binding is enforced by ASN, meaning consumption of Session Transfer Token must be done from the same ASN as the issuer. If set to 'none', device binding is not enforced. Usually configured in the web application. Default value is `ip`. */
 export const ClientSessionTransferDeviceBindingEnum = {
     Ip: "ip",
     Asn: "asn",
     None: "none",
 };
+/** Security mode for third-party clients. `strict` enforces enhanced security controls: OAuth 2.1 alignment, explicit API authorization, and a curated set of supported features. `permissive` preserves pre-existing behavior and is only available to tenants with prior third-party client usage. Set on creation and cannot be modified. */
+export const ClientThirdPartySecurityModeEnum = {
+    Strict: "strict",
+    Permissive: "permissive",
+};
 /** Defines the requested authentication method for the token endpoint. Can be `none` (public client without a client secret), `client_secret_post` (client uses HTTP POST parameters), or `client_secret_basic` (client uses HTTP Basic). */
 export const ClientTokenEndpointAuthMethodEnum = {
     None: "none",
@@ -1040,6 +1074,7 @@ export const ClientTokenEndpointAuthMethodOrNullEnum = {
     ClientSecretPost: "client_secret_post",
     ClientSecretBasic: "client_secret_basic",
 };
+/** Token exchange type. `on_behalf_of_token_exchange`: enables On-Behalf-Of token exchange (Generally Available). `custom_authentication`: enables custom token exchange profiles (Early Access, requires entitlement). */
 export const ClientTokenExchangeTypeEnum = {
     CustomAuthentication: "custom_authentication",
     OnBehalfOfTokenExchange: "on_behalf_of_token_exchange",
@@ -1065,6 +1100,11 @@ export const ConnectionDigestAlgorithmEnumSaml = {
     Sha1: "sha1",
     Sha256: "sha256",
 };
+/** Algorithm used for DPoP proof JWT signing. */
+export const ConnectionDpopSigningAlgEnum = {
+    Es256: "ES256",
+    Ed25519: "Ed25519",
+};
 export var ConnectionEmailEmail;
 (function (ConnectionEmailEmail) {
     /** Email template syntax type */
@@ -2195,24 +2235,28 @@ export const EventStreamActionDestinationTypeEnum = {
 };
 /** Type of event */
 export const EventStreamDeliveryEventTypeEnum = {
-    UserCreated: "user.created",
-    UserDeleted: "user.deleted",
-    UserUpdated: "user.updated",
+    GroupCreated: "group.created",
+    GroupDeleted: "group.deleted",
+    GroupMemberAdded: "group.member.added",
+    GroupMemberDeleted: "group.member.deleted",
+    GroupRoleAssigned: "group.role.assigned",
+    GroupRoleDeleted: "group.role.deleted",
+    GroupUpdated: "group.updated",
+    OrganizationConnectionAdded: "organization.connection.added",
+    OrganizationConnectionRemoved: "organization.connection.removed",
+    OrganizationConnectionUpdated: "organization.connection.updated",
     OrganizationCreated: "organization.created",
-    OrganizationUpdated: "organization.updated",
     OrganizationDeleted: "organization.deleted",
+    OrganizationGroupRoleAssigned: "organization.group.role.assigned",
+    OrganizationGroupRoleDeleted: "organization.group.role.deleted",
     OrganizationMemberAdded: "organization.member.added",
     OrganizationMemberDeleted: "organization.member.deleted",
     OrganizationMemberRoleAssigned: "organization.member.role.assigned",
     OrganizationMemberRoleDeleted: "organization.member.role.deleted",
-    OrganizationConnectionAdded: "organization.connection.added",
-    OrganizationConnectionUpdated: "organization.connection.updated",
-    OrganizationConnectionRemoved: "organization.connection.removed",
-    GroupCreated: "group.created",
-    GroupUpdated: "group.updated",
-    GroupDeleted: "group.deleted",
-    GroupMemberAdded: "group.member.added",
-    GroupMemberDeleted: "group.member.deleted",
+    OrganizationUpdated: "organization.updated",
+    UserCreated: "user.created",
+    UserDeleted: "user.deleted",
+    UserUpdated: "user.updated",
 };
 /** Delivery status */
 export const EventStreamDeliveryStatusEnum = {
@@ -2261,24 +2305,28 @@ export const EventStreamEventBridgeDestinationTypeEnum = {
     Eventbridge: "eventbridge",
 };
 export const EventStreamEventTypeEnum = {
-    UserCreated: "user.created",
-    UserDeleted: "user.deleted",
-    UserUpdated: "user.updated",
+    GroupCreated: "group.created",
+    GroupDeleted: "group.deleted",
+    GroupMemberAdded: "group.member.added",
+    GroupMemberDeleted: "group.member.deleted",
+    GroupRoleAssigned: "group.role.assigned",
+    GroupRoleDeleted: "group.role.deleted",
+    GroupUpdated: "group.updated",
+    OrganizationConnectionAdded: "organization.connection.added",
+    OrganizationConnectionRemoved: "organization.connection.removed",
+    OrganizationConnectionUpdated: "organization.connection.updated",
     OrganizationCreated: "organization.created",
-    OrganizationUpdated: "organization.updated",
     OrganizationDeleted: "organization.deleted",
+    OrganizationGroupRoleAssigned: "organization.group.role.assigned",
+    OrganizationGroupRoleDeleted: "organization.group.role.deleted",
     OrganizationMemberAdded: "organization.member.added",
     OrganizationMemberDeleted: "organization.member.deleted",
     OrganizationMemberRoleAssigned: "organization.member.role.assigned",
     OrganizationMemberRoleDeleted: "organization.member.role.deleted",
-    OrganizationConnectionAdded: "organization.connection.added",
-    OrganizationConnectionUpdated: "organization.connection.updated",
-    OrganizationConnectionRemoved: "organization.connection.removed",
-    GroupCreated: "group.created",
-    GroupUpdated: "group.updated",
-    GroupDeleted: "group.deleted",
-    GroupMemberAdded: "group.member.added",
-    GroupMemberDeleted: "group.member.deleted",
+    OrganizationUpdated: "organization.updated",
+    UserCreated: "user.created",
+    UserDeleted: "user.deleted",
+    UserUpdated: "user.updated",
 };
 /** Indicates whether the event stream is actively forwarding events. */
 export const EventStreamStatusEnum = {
@@ -2287,24 +2335,28 @@ export const EventStreamStatusEnum = {
 };
 /** The type of event this test event represents. */
 export const EventStreamTestEventTypeEnum = {
-    UserCreated: "user.created",
-    UserDeleted: "user.deleted",
-    UserUpdated: "user.updated",
+    GroupCreated: "group.created",
+    GroupDeleted: "group.deleted",
+    GroupMemberAdded: "group.member.added",
+    GroupMemberDeleted: "group.member.deleted",
+    GroupRoleAssigned: "group.role.assigned",
+    GroupRoleDeleted: "group.role.deleted",
+    GroupUpdated: "group.updated",
+    OrganizationConnectionAdded: "organization.connection.added",
+    OrganizationConnectionRemoved: "organization.connection.removed",
+    OrganizationConnectionUpdated: "organization.connection.updated",
     OrganizationCreated: "organization.created",
-    OrganizationUpdated: "organization.updated",
     OrganizationDeleted: "organization.deleted",
+    OrganizationGroupRoleAssigned: "organization.group.role.assigned",
+    OrganizationGroupRoleDeleted: "organization.group.role.deleted",
     OrganizationMemberAdded: "organization.member.added",
     OrganizationMemberDeleted: "organization.member.deleted",
     OrganizationMemberRoleAssigned: "organization.member.role.assigned",
     OrganizationMemberRoleDeleted: "organization.member.role.deleted",
-    OrganizationConnectionAdded: "organization.connection.added",
-    OrganizationConnectionUpdated: "organization.connection.updated",
-    OrganizationConnectionRemoved: "organization.connection.removed",
-    GroupCreated: "group.created",
-    GroupUpdated: "group.updated",
-    GroupDeleted: "group.deleted",
-    GroupMemberAdded: "group.member.added",
-    GroupMemberDeleted: "group.member.deleted",
+    OrganizationUpdated: "organization.updated",
+    UserCreated: "user.created",
+    UserDeleted: "user.deleted",
+    UserUpdated: "user.updated",
 };
 /** Type of authorization. */
 export const EventStreamWebhookBasicAuthMethodEnum = {
@@ -4127,12 +4179,18 @@ export const SuspiciousIpThrottlingShieldsEnum = {
 export const SynchronizeGroupsEnum = {
     All: "all",
     Off: "off",
+    Selected: "selected",
 };
 /** Character set used to generate a User Code. Can be `base20` or `digits`. */
 export const TenantSettingsDeviceFlowCharset = {
     Base20: "base20",
     Digits: "digits",
 };
+/** Sets the `third_party_security_mode` assigned to clients created via Dynamic Client Registration. `strict` applies enhanced security controls. `permissive` preserves pre-existing behavior and is only available to tenants with prior third-party client usage. */
+export const TenantSettingsDynamicClientRegistrationSecurityMode = {
+    Strict: "strict",
+    Permissive: "permissive",
+};
 /** Profile that determines how the identity of the protected resource (i.e., API) can be specified in the OAuth endpoints when access is being requested. When set to audience (default), the audience parameter is used to specify the resource server. When set to compatibility, the audience parameter is still checked first, but if it not provided, then the resource parameter can be used to specify the resource server. */
 export const TenantSettingsResourceParameterProfile = {
     Audience: "audience",

package/dist/esm/management/version.d.mts

@@ -1 +1 @@
-export declare const SDK_VERSION = "5.6.0";
+export declare const SDK_VERSION = "5.8.0";

package/dist/esm/management/version.mjs

@@ -1 +1 @@
-export const SDK_VERSION = "5.6.0";
+export const SDK_VERSION = "5.8.0";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth0",
-    "version": "5.6.0",
+    "version": "5.8.0",
     "private": false,
     "repository": {
         "type": "git",