auth0 5.8.0 → 5.9.1

package/dist/esm/management/core/fetcher/Fetcher.d.mts

@@ -8,7 +8,13 @@ export declare namespace Fetcher {
         method: string;
         contentType?: string;
         headers?: Record<string, unknown>;
+        /**
+         * @deprecated Prefer `queryString` (produced by `core.url.queryBuilder()`).
+         * Retained for backwards compatibility with custom fetchers and callers that
+         * still construct request args with a query-parameter object.
+         */
         queryParameters?: Record<string, unknown>;
+        queryString?: string;
         body?: unknown;
         timeoutMs?: number;
         maxRetries?: number;

package/dist/esm/management/core/fetcher/Fetcher.mjs

@@ -71,16 +71,11 @@ const SENSITIVE_QUERY_PARAMS = new Set([
 ]);
 function redactQueryParameters(queryParameters) {
     if (queryParameters == null) {
-        return queryParameters;
+        return undefined;
     }
     const redacted = {};
     for (const [key, value] of Object.entries(queryParameters)) {
-        if (SENSITIVE_QUERY_PARAMS.has(key.toLowerCase())) {
-            redacted[key] = "[REDACTED]";
-        }
-        else {
-            redacted[key] = value;
-        }
+        redacted[key] = SENSITIVE_QUERY_PARAMS.has(key.toLowerCase()) ? "[REDACTED]" : value;
     }
     return redacted;
 }
@@ -182,7 +177,13 @@ function getHeaders(args) {
 export function fetcherImpl(args) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a, _b, _c;
-        const url = createRequestUrl(args.url, args.queryParameters);
+        let url = args.url;
+        if (args.queryString != null && args.queryString.length > 0) {
+            url = `${url}?${args.queryString}`;
+        }
+        else {
+            url = createRequestUrl(args.url, args.queryParameters);
+        }
         const requestBody = yield getRequestBody({
             body: args.body,
             type: (_a = args.requestType) !== null && _a !== void 0 ? _a : "other",

package/dist/esm/management/core/index.d.mts

@@ -6,5 +6,6 @@ export * from "./form-data-utils/index.mjs";
 export * as logging from "./logging/index.mjs";
 export * from "./pagination/index.mjs";
 export * from "./runtime/index.mjs";
+export * from "./stream/index.mjs";
 export * as url from "./url/index.mjs";
 export * from "./utils/index.mjs";

package/dist/esm/management/core/index.mjs

@@ -6,5 +6,6 @@ export * from "./form-data-utils/index.mjs";
 export * as logging from "./logging/index.mjs";
 export * from "./pagination/index.mjs";
 export * from "./runtime/index.mjs";
+export * from "./stream/index.mjs";
 export * as url from "./url/index.mjs";
 export * from "./utils/index.mjs";

package/dist/esm/management/core/stream/Stream.d.mts

@@ -0,0 +1,56 @@
+export declare namespace Stream {
+    interface Args {
+        /**
+         * The HTTP response stream to read from.
+         */
+        stream: ReadableStream;
+        /**
+         * The event shape to use for parsing the stream data.
+         */
+        eventShape: JsonEvent | SseEvent;
+        /**
+         * An abort signal to stop the stream.
+         */
+        signal?: AbortSignal;
+    }
+    interface JsonEvent {
+        type: "json";
+        messageTerminator: string;
+    }
+    interface SseEvent {
+        type: "sse";
+        streamTerminator?: string;
+        eventDiscriminator?: string;
+    }
+}
+export declare class Stream<T> implements AsyncIterable<T> {
+    private stream;
+    private parse;
+    /**
+     * The prefix to use for each message. For example,
+     * for SSE, the prefix is "data: ".
+     */
+    private prefix;
+    private messageTerminator;
+    private streamTerminator;
+    private eventDiscriminator;
+    private controller;
+    private decoder;
+    constructor({ stream, parse, eventShape, signal }: Stream.Args & {
+        parse: (val: unknown) => Promise<T>;
+    });
+    private iterMessages;
+    private iterDataMessages;
+    private iterSseEvents;
+    /**
+     * Parses and returns a single SSE event, or returns null if the event is a stream terminator.
+     */
+    private dispatchSseEvent;
+    private injectDiscriminator;
+    [Symbol.asyncIterator](): AsyncIterator<T, void, unknown>;
+    private decodeChunk;
+}
+/**
+ * Browser polyfill for ReadableStream
+ */
+export declare function readableStreamAsyncIterable<T>(stream: any): AsyncIterableIterator<T>;

package/dist/esm/management/core/stream/Stream.mjs

@@ -0,0 +1,262 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __asyncValues = (this && this.__asyncValues) || function (o) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var m = o[Symbol.asyncIterator], i;
+    return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
+    function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
+    function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }
+};
+var __await = (this && this.__await) || function (v) { return this instanceof __await ? (this.v = v, this) : new __await(v); }
+var __asyncDelegator = (this && this.__asyncDelegator) || function (o) {
+    var i, p;
+    return i = {}, verb("next"), verb("throw", function (e) { throw e; }), verb("return"), i[Symbol.iterator] = function () { return this; }, i;
+    function verb(n, f) { i[n] = o[n] ? function (v) { return (p = !p) ? { value: __await(o[n](v)), done: false } : f ? f(v) : v; } : f; }
+};
+var __asyncGenerator = (this && this.__asyncGenerator) || function (thisArg, _arguments, generator) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var g = generator.apply(thisArg, _arguments || []), i, q = [];
+    return i = Object.create((typeof AsyncIterator === "function" ? AsyncIterator : Object).prototype), verb("next"), verb("throw"), verb("return", awaitReturn), i[Symbol.asyncIterator] = function () { return this; }, i;
+    function awaitReturn(f) { return function (v) { return Promise.resolve(v).then(f, reject); }; }
+    function verb(n, f) { if (g[n]) { i[n] = function (v) { return new Promise(function (a, b) { q.push([n, v, a, b]) > 1 || resume(n, v); }); }; if (f) i[n] = f(i[n]); } }
+    function resume(n, v) { try { step(g[n](v)); } catch (e) { settle(q[0][3], e); } }
+    function step(r) { r.value instanceof __await ? Promise.resolve(r.value.v).then(fulfill, reject) : settle(q[0][2], r); }
+    function fulfill(value) { resume("next", value); }
+    function reject(value) { resume("throw", value); }
+    function settle(f, v) { if (f(v), q.shift(), q.length) resume(q[0][0], q[0][1]); }
+};
+import { fromJson } from "../json.mjs";
+import { RUNTIME } from "../runtime/index.mjs";
+const DATA_PREFIX = "data:";
+const EVENT_PREFIX = "event:";
+export class Stream {
+    constructor({ stream, parse, eventShape, signal }) {
+        this.controller = new AbortController();
+        this.stream = stream;
+        this.parse = parse;
+        if (eventShape.type === "sse") {
+            this.prefix = DATA_PREFIX;
+            this.messageTerminator = "\n";
+            this.streamTerminator = eventShape.streamTerminator;
+            this.eventDiscriminator = eventShape.eventDiscriminator;
+        }
+        else {
+            this.messageTerminator = eventShape.messageTerminator;
+        }
+        signal === null || signal === void 0 ? void 0 : signal.addEventListener("abort", () => this.controller.abort());
+        // Initialize shared TextDecoder
+        if (typeof TextDecoder !== "undefined") {
+            this.decoder = new TextDecoder("utf-8");
+        }
+    }
+    iterMessages() {
+        return __asyncGenerator(this, arguments, function* iterMessages_1() {
+            if (this.eventDiscriminator != null) {
+                yield __await(yield* __asyncDelegator(__asyncValues(this.iterSseEvents())));
+            }
+            else {
+                yield __await(yield* __asyncDelegator(__asyncValues(this.iterDataMessages())));
+            }
+        });
+    }
+    iterDataMessages() {
+        return __asyncGenerator(this, arguments, function* iterDataMessages_1() {
+            var _a, e_1, _b, _c;
+            const stream = readableStreamAsyncIterable(this.stream);
+            let buf = "";
+            let prefixSeen = false;
+            try {
+                for (var _d = true, stream_1 = __asyncValues(stream), stream_1_1; stream_1_1 = yield __await(stream_1.next()), _a = stream_1_1.done, !_a; _d = true) {
+                    _c = stream_1_1.value;
+                    _d = false;
+                    const chunk = _c;
+                    buf += this.decodeChunk(chunk);
+                    let terminatorIndex;
+                    while ((terminatorIndex = buf.indexOf(this.messageTerminator)) >= 0) {
+                        let line = buf.slice(0, terminatorIndex);
+                        buf = buf.slice(terminatorIndex + this.messageTerminator.length);
+                        if (!line.trim()) {
+                            continue;
+                        }
+                        if (!prefixSeen && this.prefix != null) {
+                            const prefixIndex = line.indexOf(this.prefix);
+                            if (prefixIndex === -1) {
+                                continue;
+                            }
+                            prefixSeen = true;
+                            line = line.slice(prefixIndex + this.prefix.length);
+                        }
+                        if (this.streamTerminator != null && line.includes(this.streamTerminator)) {
+                            return yield __await(void 0);
+                        }
+                        const message = yield __await(this.parse(fromJson(line)));
+                        yield yield __await(message);
+                        prefixSeen = false;
+                    }
+                }
+            }
+            catch (e_1_1) { e_1 = { error: e_1_1 }; }
+            finally {
+                try {
+                    if (!_d && !_a && (_b = stream_1.return)) yield __await(_b.call(stream_1));
+                }
+                finally { if (e_1) throw e_1.error; }
+            }
+        });
+    }
+    iterSseEvents() {
+        return __asyncGenerator(this, arguments, function* iterSseEvents_1() {
+            var _a, e_2, _b, _c;
+            const stream = readableStreamAsyncIterable(this.stream);
+            let buf = "";
+            let eventType;
+            let dataValue;
+            try {
+                for (var _d = true, stream_2 = __asyncValues(stream), stream_2_1; stream_2_1 = yield __await(stream_2.next()), _a = stream_2_1.done, !_a; _d = true) {
+                    _c = stream_2_1.value;
+                    _d = false;
+                    const chunk = _c;
+                    buf += this.decodeChunk(chunk);
+                    let terminatorIndex;
+                    while ((terminatorIndex = buf.indexOf("\n")) >= 0) {
+                        const line = buf.slice(0, terminatorIndex).replace(/\r$/, "");
+                        buf = buf.slice(terminatorIndex + 1);
+                        if (!line.trim()) {
+                            if (dataValue != null) {
+                                const message = yield __await(this.dispatchSseEvent(dataValue, eventType));
+                                if (message == null) {
+                                    return yield __await(void 0);
+                                }
+                                yield yield __await(message);
+                            }
+                            eventType = undefined;
+                            dataValue = undefined;
+                            continue;
+                        }
+                        if (line.startsWith(EVENT_PREFIX)) {
+                            eventType = line.slice(EVENT_PREFIX.length).trim();
+                        }
+                        else if (line.startsWith(DATA_PREFIX)) {
+                            const val = line.slice(DATA_PREFIX.length).trim();
+                            dataValue = dataValue != null ? `${dataValue}\n${val}` : val;
+                        }
+                    }
+                }
+            }
+            catch (e_2_1) { e_2 = { error: e_2_1 }; }
+            finally {
+                try {
+                    if (!_d && !_a && (_b = stream_2.return)) yield __await(_b.call(stream_2));
+                }
+                finally { if (e_2) throw e_2.error; }
+            }
+            if (dataValue != null) {
+                const message = yield __await(this.dispatchSseEvent(dataValue, eventType));
+                if (message != null) {
+                    yield yield __await(message);
+                }
+            }
+        });
+    }
+    /**
+     * Parses and returns a single SSE event, or returns null if the event is a stream terminator.
+     */
+    dispatchSseEvent(dataValue, eventType) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this.streamTerminator != null && dataValue.includes(this.streamTerminator)) {
+                return null;
+            }
+            return this.parse(this.injectDiscriminator(fromJson(dataValue), eventType));
+        });
+    }
+    injectDiscriminator(parsed, eventType) {
+        if (this.eventDiscriminator == null || eventType == null) {
+            return parsed;
+        }
+        if (parsed == null || typeof parsed !== "object" || Array.isArray(parsed)) {
+            return parsed;
+        }
+        const obj = parsed;
+        if (this.eventDiscriminator in obj) {
+            return parsed;
+        }
+        return Object.assign({ [this.eventDiscriminator]: eventType }, obj);
+    }
+    [Symbol.asyncIterator]() {
+        return __asyncGenerator(this, arguments, function* _a() {
+            var _b, e_3, _c, _d;
+            try {
+                for (var _e = true, _f = __asyncValues(this.iterMessages()), _g; _g = yield __await(_f.next()), _b = _g.done, !_b; _e = true) {
+                    _d = _g.value;
+                    _e = false;
+                    const message = _d;
+                    yield yield __await(message);
+                }
+            }
+            catch (e_3_1) { e_3 = { error: e_3_1 }; }
+            finally {
+                try {
+                    if (!_e && !_b && (_c = _f.return)) yield __await(_c.call(_f));
+                }
+                finally { if (e_3) throw e_3.error; }
+            }
+        });
+    }
+    decodeChunk(chunk) {
+        let decoded = "";
+        // If TextDecoder is available, use the streaming decoder instance
+        if (this.decoder != null) {
+            decoded += this.decoder.decode(chunk, { stream: true });
+        }
+        // Buffer is present in Node.js environment
+        else if (RUNTIME.type === "node" && typeof chunk !== "undefined") {
+            decoded += Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        }
+        return decoded;
+    }
+}
+/**
+ * Browser polyfill for ReadableStream
+ */
+// biome-ignore lint/suspicious/noExplicitAny: allow explicit any
+export function readableStreamAsyncIterable(stream) {
+    if (stream[Symbol.asyncIterator]) {
+        return stream;
+    }
+    const reader = stream.getReader();
+    return {
+        next() {
+            return __awaiter(this, void 0, void 0, function* () {
+                try {
+                    const result = yield reader.read();
+                    if (result === null || result === void 0 ? void 0 : result.done) {
+                        reader.releaseLock();
+                    } // release lock when stream becomes closed
+                    return result;
+                }
+                catch (e) {
+                    reader.releaseLock(); // release lock when stream becomes errored
+                    throw e;
+                }
+            });
+        },
+        return() {
+            return __awaiter(this, void 0, void 0, function* () {
+                const cancelPromise = reader.cancel();
+                reader.releaseLock();
+                yield cancelPromise;
+                return { done: true, value: undefined };
+            });
+        },
+        [Symbol.asyncIterator]() {
+            return this;
+        },
+    };
+}

package/dist/esm/management/core/stream/index.d.mts

@@ -0,0 +1 @@
+export { Stream } from "./Stream.mjs";

package/dist/esm/management/core/stream/index.mjs

@@ -0,0 +1 @@
+export { Stream } from "./Stream.mjs";

package/dist/esm/management/core/url/QueryStringBuilder.d.mts

@@ -0,0 +1,47 @@
+/**
+ * Creates a fluent builder for constructing URL query strings.
+ *
+ * Each `.add()` call serializes its value immediately (like C#'s builder),
+ * so no format tracking is needed — the style is applied at add-time.
+ *
+ * Usage (generated code):
+ *
+ *     const qs = core.url.queryBuilder()
+ *         .add("limit", limit)
+ *         .add("tags", tags, { style: "comma" })   // explode: false
+ *         .mergeAdditional(requestOptions?.queryParams)
+ *         .build();
+ */
+export declare function queryBuilder(): QueryStringBuilder;
+declare class QueryStringBuilder {
+    private parts;
+    /**
+     * Adds a query parameter, serializing it immediately.
+     *
+     * By default arrays use "repeat" format (`key=a&key=b`).
+     * Pass `{ style: "comma" }` for OpenAPI `explode: false` parameters
+     * to get comma-separated values (`key=a,b,c`).
+     *
+     * Null / undefined values are silently skipped.
+     */
+    add(key: string, value: unknown, options?: {
+        style?: "comma";
+    }): this;
+    /**
+     * Adds multiple query parameters at once from a record.
+     * All parameters use the default "repeat" array format.
+     * Null / undefined values are silently skipped.
+     */
+    addMany(params: Record<string, unknown>): this;
+    /**
+     * Merges additional query parameters supplied at call-time via
+     * `requestOptions.queryParams`. Overrides existing keys (last-write-wins).
+     */
+    mergeAdditional(additionalParams?: Record<string, unknown>): this;
+    /**
+     * Returns the assembled query string (without the leading `?`).
+     * Returns an empty string when no parameters were added.
+     */
+    build(): string;
+}
+export {};

package/dist/esm/management/core/url/QueryStringBuilder.mjs

@@ -0,0 +1,80 @@
+import { toQueryString } from "./qs.mjs";
+/**
+ * Creates a fluent builder for constructing URL query strings.
+ *
+ * Each `.add()` call serializes its value immediately (like C#'s builder),
+ * so no format tracking is needed — the style is applied at add-time.
+ *
+ * Usage (generated code):
+ *
+ *     const qs = core.url.queryBuilder()
+ *         .add("limit", limit)
+ *         .add("tags", tags, { style: "comma" })   // explode: false
+ *         .mergeAdditional(requestOptions?.queryParams)
+ *         .build();
+ */
+export function queryBuilder() {
+    return new QueryStringBuilder();
+}
+class QueryStringBuilder {
+    constructor() {
+        this.parts = new Map();
+    }
+    /**
+     * Adds a query parameter, serializing it immediately.
+     *
+     * By default arrays use "repeat" format (`key=a&key=b`).
+     * Pass `{ style: "comma" }` for OpenAPI `explode: false` parameters
+     * to get comma-separated values (`key=a,b,c`).
+     *
+     * Null / undefined values are silently skipped.
+     */
+    add(key, value, options) {
+        if (value === undefined || value === null) {
+            return this;
+        }
+        const serialized = toQueryString({ [key]: value }, { arrayFormat: (options === null || options === void 0 ? void 0 : options.style) === "comma" ? "comma" : "repeat" });
+        if (serialized.length > 0) {
+            this.parts.set(key, serialized);
+        }
+        return this;
+    }
+    /**
+     * Adds multiple query parameters at once from a record.
+     * All parameters use the default "repeat" array format.
+     * Null / undefined values are silently skipped.
+     */
+    addMany(params) {
+        if (params != null) {
+            for (const [key, value] of Object.entries(params)) {
+                this.add(key, value);
+            }
+        }
+        return this;
+    }
+    /**
+     * Merges additional query parameters supplied at call-time via
+     * `requestOptions.queryParams`. Overrides existing keys (last-write-wins).
+     */
+    mergeAdditional(additionalParams) {
+        if (additionalParams != null) {
+            for (const [key, value] of Object.entries(additionalParams)) {
+                if (value === undefined || value === null) {
+                    continue;
+                }
+                const serialized = toQueryString({ [key]: value }, { arrayFormat: "repeat" });
+                if (serialized.length > 0) {
+                    this.parts.set(key, serialized);
+                }
+            }
+        }
+        return this;
+    }
+    /**
+     * Returns the assembled query string (without the leading `?`).
+     * Returns an empty string when no parameters were added.
+     */
+    build() {
+        return [...this.parts.values()].join("&");
+    }
+}

package/dist/esm/management/core/url/index.d.mts

@@ -1,3 +1,4 @@
 export { encodePathParam } from "./encodePathParam.mjs";
 export { join } from "./join.mjs";
 export { toQueryString } from "./qs.mjs";
+export { queryBuilder } from "./QueryStringBuilder.mjs";

package/dist/esm/management/core/url/index.mjs

@@ -1,3 +1,4 @@
 export { encodePathParam } from "./encodePathParam.mjs";
 export { join } from "./join.mjs";
 export { toQueryString } from "./qs.mjs";
+export { queryBuilder } from "./QueryStringBuilder.mjs";

package/dist/esm/management/core/url/qs.d.mts

@@ -1,5 +1,6 @@
+type ArrayFormat = "indices" | "repeat" | "comma";
 interface QueryStringOptions {
-    arrayFormat?: "indices" | "repeat";
+    arrayFormat?: ArrayFormat;
     encode?: boolean;
 }
 export declare function toQueryString(obj: unknown, options?: QueryStringOptions): string;

package/dist/esm/management/core/url/qs.mjs

@@ -23,19 +23,31 @@ function stringifyObject(obj, prefix = "", options) {
             if (value.length === 0) {
                 continue;
             }
-            for (let i = 0; i < value.length; i++) {
-                const item = value[i];
-                if (item === undefined) {
-                    continue;
+            const effectiveFormat = options.arrayFormat;
+            if (effectiveFormat === "comma") {
+                const encodedKey = options.encode ? encodeURIComponent(fullKey) : fullKey;
+                const encodedValues = value
+                    .filter((item) => item !== undefined && item !== null)
+                    .map((item) => encodeValue(item, options.encode));
+                if (encodedValues.length > 0) {
+                    parts.push(`${encodedKey}=${encodedValues.join(",")}`);
                 }
-                if (typeof item === "object" && !Array.isArray(item) && item !== null) {
-                    const arrayKey = options.arrayFormat === "indices" ? `${fullKey}[${i}]` : fullKey;
-                    parts.push(...stringifyObject(item, arrayKey, options));
-                }
-                else {
-                    const arrayKey = options.arrayFormat === "indices" ? `${fullKey}[${i}]` : fullKey;
-                    const encodedKey = options.encode ? encodeURIComponent(arrayKey) : arrayKey;
-                    parts.push(`${encodedKey}=${encodeValue(item, options.encode)}`);
+            }
+            else {
+                for (let i = 0; i < value.length; i++) {
+                    const item = value[i];
+                    if (item === undefined) {
+                        continue;
+                    }
+                    if (typeof item === "object" && !Array.isArray(item) && item !== null) {
+                        const arrayKey = effectiveFormat === "indices" ? `${fullKey}[${i}]` : fullKey;
+                        parts.push(...stringifyObject(item, arrayKey, options));
+                    }
+                    else {
+                        const arrayKey = effectiveFormat === "indices" ? `${fullKey}[${i}]` : fullKey;
+                        const encodedKey = options.encode ? encodeURIComponent(arrayKey) : arrayKey;
+                        parts.push(`${encodedKey}=${encodeValue(item, options.encode)}`);
+                    }
                 }
             }
         }

package/dist/esm/management/version.d.mts

@@ -1 +1 @@
-export declare const SDK_VERSION = "5.8.0";
+export declare const SDK_VERSION = "5.9.1";

package/dist/esm/management/version.mjs

@@ -1 +1 @@
-export const SDK_VERSION = "5.8.0";
+export const SDK_VERSION = "5.9.1";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth0",
-    "version": "5.8.0",
+    "version": "5.9.1",
     "private": false,
     "repository": {
         "type": "git",
@@ -71,7 +71,7 @@
         "validate": "yarn lint:check && yarn format --check && yarn build && yarn test && yarn lint:package"
     },
     "dependencies": {
-        "uuid": "^11.1.0",
+        "uuid": "^11.1.1",
         "jose": "^4.13.2",
         "auth0-legacy": "npm:auth0@^4.27.0"
     },