auth0 5.9.1 → 5.11.0

package/dist/esm/management/api/resources/users/resources/enrollments/client/Client.mjs

@@ -20,7 +20,7 @@ export class EnrollmentsClient {
         this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
-     * Retrieve the first <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors">multi-factor authentication</a> enrollment that a specific user has confirmed.
+     * Retrieve the first [multi-factor authentication](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors) enrollment that a specific user has confirmed.
      *
      * @param {string} id - ID of the user to list enrollments for.
      * @param {EnrollmentsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/esm/management/api/resources/users/resources/identities/client/Client.d.mts

@@ -15,30 +15,31 @@ export declare class IdentitiesClient {
      *
      * Note: There are two ways of invoking the endpoint:
      *
-     * <ul>
-     *   <li>With the authenticated primary account's JWT in the Authorization header, which has the <code>update:current_user_identities</code> scope:
-     *     <pre>
-     *       POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
-     *       Authorization: "Bearer PRIMARY_ACCOUNT_JWT"
-     *       {
-     *         "link_with": "SECONDARY_ACCOUNT_JWT"
-     *       }
-     *     </pre>
-     *     In this case, only the <code>link_with</code> param is required in the body, which also contains the JWT obtained upon the secondary account's authentication.
-     *   </li>
-     *   <li>With a token generated by the API V2 containing the <code>update:users</code> scope:
-     *     <pre>
-     *     POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
-     *     Authorization: "Bearer YOUR_API_V2_TOKEN"
-     *     {
-     *       "provider": "SECONDARY_ACCOUNT_PROVIDER",
-     *       "connection_id": "SECONDARY_ACCOUNT_CONNECTION_ID(OPTIONAL)",
-     *       "user_id": "SECONDARY_ACCOUNT_USER_ID"
-     *     }
-     *     </pre>
-     *     In this case you need to send <code>provider</code> and <code>user_id</code> in the body. Optionally you can also send the <code>connection_id</code> param which is suitable for identifying a particular database connection for the 'auth0' provider.
-     *   </li>
-     * </ul>
+     * - With the authenticated primary account's JWT in the Authorization header, which has the `update:current_user_identities` scope:
+     *
+     *   ```http
+     *   POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
+     *   Authorization: "Bearer PRIMARY_ACCOUNT_JWT"
+     *   {
+     *     "link_with": "SECONDARY_ACCOUNT_JWT"
+     *   }
+     *   ```
+     *
+     *   In this case, only the `link_with` param is required in the body, which also contains the JWT obtained upon the secondary account's authentication.
+     *
+     * - With a token generated by the API V2 containing the `update:users` scope:
+     *
+     *   ```http
+     *   POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
+     *   Authorization: "Bearer YOUR_API_V2_TOKEN"
+     *   {
+     *     "provider": "SECONDARY_ACCOUNT_PROVIDER",
+     *     "connection_id": "SECONDARY_ACCOUNT_CONNECTION_ID(OPTIONAL)",
+     *     "user_id": "SECONDARY_ACCOUNT_USER_ID"
+     *   }
+     *   ```
+     *
+     *   In this case you need to send `provider` and `user_id` in the body. Optionally you can also send the `connection_id` param which is suitable for identifying a particular database connection for the 'auth0' provider.
      *
      * @param {string} id - ID of the primary user account to link a second user account to.
      * @param {Management.LinkUserIdentityRequestContent} request
@@ -58,7 +59,7 @@ export declare class IdentitiesClient {
     /**
      * Unlink a specific secondary account from a target user. This action requires the ID of both the target user and the secondary account.
      *
-     * Unlinking the secondary account removes it from the identities array of the target user and creates a new standalone profile for the secondary account. To learn more, review <a href="https://auth0.com/docs/manage-users/user-accounts/user-account-linking/unlink-user-accounts">Unlink User Accounts</a>.
+     * Unlinking the secondary account removes it from the identities array of the target user and creates a new standalone profile for the secondary account. To learn more, review [Unlink User Accounts](https://auth0.com/docs/manage-users/user-accounts/user-account-linking/unlink-user-accounts).
      *
      * @param {string} id - ID of the primary user account.
      * @param {Management.UserIdentityProviderEnum} provider - Identity provider name of the secondary linked account (e.g. `google-oauth2`).

package/dist/esm/management/api/resources/users/resources/identities/client/Client.mjs

@@ -24,30 +24,31 @@ export class IdentitiesClient {
      *
      * Note: There are two ways of invoking the endpoint:
      *
-     * <ul>
-     *   <li>With the authenticated primary account's JWT in the Authorization header, which has the <code>update:current_user_identities</code> scope:
-     *     <pre>
-     *       POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
-     *       Authorization: "Bearer PRIMARY_ACCOUNT_JWT"
-     *       {
-     *         "link_with": "SECONDARY_ACCOUNT_JWT"
-     *       }
-     *     </pre>
-     *     In this case, only the <code>link_with</code> param is required in the body, which also contains the JWT obtained upon the secondary account's authentication.
-     *   </li>
-     *   <li>With a token generated by the API V2 containing the <code>update:users</code> scope:
-     *     <pre>
-     *     POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
-     *     Authorization: "Bearer YOUR_API_V2_TOKEN"
-     *     {
-     *       "provider": "SECONDARY_ACCOUNT_PROVIDER",
-     *       "connection_id": "SECONDARY_ACCOUNT_CONNECTION_ID(OPTIONAL)",
-     *       "user_id": "SECONDARY_ACCOUNT_USER_ID"
-     *     }
-     *     </pre>
-     *     In this case you need to send <code>provider</code> and <code>user_id</code> in the body. Optionally you can also send the <code>connection_id</code> param which is suitable for identifying a particular database connection for the 'auth0' provider.
-     *   </li>
-     * </ul>
+     * - With the authenticated primary account's JWT in the Authorization header, which has the `update:current_user_identities` scope:
+     *
+     *   ```http
+     *   POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
+     *   Authorization: "Bearer PRIMARY_ACCOUNT_JWT"
+     *   {
+     *     "link_with": "SECONDARY_ACCOUNT_JWT"
+     *   }
+     *   ```
+     *
+     *   In this case, only the `link_with` param is required in the body, which also contains the JWT obtained upon the secondary account's authentication.
+     *
+     * - With a token generated by the API V2 containing the `update:users` scope:
+     *
+     *   ```http
+     *   POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
+     *   Authorization: "Bearer YOUR_API_V2_TOKEN"
+     *   {
+     *     "provider": "SECONDARY_ACCOUNT_PROVIDER",
+     *     "connection_id": "SECONDARY_ACCOUNT_CONNECTION_ID(OPTIONAL)",
+     *     "user_id": "SECONDARY_ACCOUNT_USER_ID"
+     *   }
+     *   ```
+     *
+     *   In this case you need to send `provider` and `user_id` in the body. Optionally you can also send the `connection_id` param which is suitable for identifying a particular database connection for the 'auth0' provider.
      *
      * @param {string} id - ID of the primary user account to link a second user account to.
      * @param {Management.LinkUserIdentityRequestContent} request
@@ -113,7 +114,7 @@ export class IdentitiesClient {
     /**
      * Unlink a specific secondary account from a target user. This action requires the ID of both the target user and the secondary account.
      *
-     * Unlinking the secondary account removes it from the identities array of the target user and creates a new standalone profile for the secondary account. To learn more, review <a href="https://auth0.com/docs/manage-users/user-accounts/user-account-linking/unlink-user-accounts">Unlink User Accounts</a>.
+     * Unlinking the secondary account removes it from the identities array of the target user and creates a new standalone profile for the secondary account. To learn more, review [Unlink User Accounts](https://auth0.com/docs/manage-users/user-accounts/user-account-linking/unlink-user-accounts).
      *
      * @param {string} id - ID of the primary user account.
      * @param {Management.UserIdentityProviderEnum} provider - Identity provider name of the secondary linked account (e.g. `google-oauth2`).

package/dist/esm/management/api/resources/users/resources/index.d.mts

@@ -1,6 +1,8 @@
 export * as authenticationMethods from "./authenticationMethods/index.mjs";
 export * as authenticators from "./authenticators/index.mjs";
 export * as connectedAccounts from "./connectedAccounts/index.mjs";
+export * as effectivePermissions from "./effectivePermissions/index.mjs";
+export * as effectiveRoles from "./effectiveRoles/index.mjs";
 export * as enrollments from "./enrollments/index.mjs";
 export * as federatedConnectionsTokensets from "./federatedConnectionsTokensets/index.mjs";
 export * as groups from "./groups/index.mjs";

package/dist/esm/management/api/resources/users/resources/index.mjs

@@ -1,6 +1,8 @@
 export * as authenticationMethods from "./authenticationMethods/index.mjs";
 export * as authenticators from "./authenticators/index.mjs";
 export * as connectedAccounts from "./connectedAccounts/index.mjs";
+export * as effectivePermissions from "./effectivePermissions/index.mjs";
+export * as effectiveRoles from "./effectiveRoles/index.mjs";
 export * as enrollments from "./enrollments/index.mjs";
 export * as federatedConnectionsTokensets from "./federatedConnectionsTokensets/index.mjs";
 export * as groups from "./groups/index.mjs";

package/dist/esm/management/api/resources/users/resources/multifactor/client/Client.d.mts

@@ -11,7 +11,7 @@ export declare class MultifactorClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<MultifactorClient.Options>;
     constructor(options: MultifactorClient.Options);
     /**
-     * Invalidate all remembered browsers across all <a href="https://auth0.com/docs/multifactor-authentication">authentication factors</a> for a user.
+     * Invalidate all remembered browsers across all [authentication factors](https://auth0.com/docs/multifactor-authentication) for a user.
      *
      * @param {string} id - ID of the user to invalidate all remembered browsers and authentication factors for.
      * @param {MultifactorClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -26,7 +26,7 @@ export declare class MultifactorClient {
     invalidateRememberBrowser(id: string, requestOptions?: MultifactorClient.RequestOptions): core.HttpResponsePromise<void>;
     private __invalidateRememberBrowser;
     /**
-     * Remove a <a href="https://auth0.com/docs/multifactor-authentication">multifactor</a> authentication configuration from a user's account. This forces the user to manually reconfigure the multi-factor provider.
+     * Remove a [multifactor](https://auth0.com/docs/multifactor-authentication) authentication configuration from a user's account. This forces the user to manually reconfigure the multi-factor provider.
      *
      * @param {string} id - ID of the user to remove a multifactor configuration from.
      * @param {Management.UserMultifactorProviderEnum} provider - The multi-factor provider. Supported values 'duo' or 'google-authenticator'

package/dist/esm/management/api/resources/users/resources/multifactor/client/Client.mjs

@@ -20,7 +20,7 @@ export class MultifactorClient {
         this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
-     * Invalidate all remembered browsers across all <a href="https://auth0.com/docs/multifactor-authentication">authentication factors</a> for a user.
+     * Invalidate all remembered browsers across all [authentication factors](https://auth0.com/docs/multifactor-authentication) for a user.
      *
      * @param {string} id - ID of the user to invalidate all remembered browsers and authentication factors for.
      * @param {MultifactorClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -74,7 +74,7 @@ export class MultifactorClient {
         });
     }
     /**
-     * Remove a <a href="https://auth0.com/docs/multifactor-authentication">multifactor</a> authentication configuration from a user's account. This forces the user to manually reconfigure the multi-factor provider.
+     * Remove a [multifactor](https://auth0.com/docs/multifactor-authentication) authentication configuration from a user's account. This forces the user to manually reconfigure the multi-factor provider.
      *
      * @param {string} id - ID of the user to remove a multifactor configuration from.
      * @param {Management.UserMultifactorProviderEnum} provider - The multi-factor provider. Supported values 'duo' or 'google-authenticator'

package/dist/esm/management/api/resources/users/resources/organizations/client/Client.d.mts

@@ -11,7 +11,7 @@ export declare class OrganizationsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<OrganizationsClient.Options>;
     constructor(options: OrganizationsClient.Options);
     /**
-     * Retrieve list of the specified user's current Organization memberships. User must be specified by user ID. For more information, review <a href="https://auth0.com/docs/manage-users/organizations">Auth0 Organizations</a>.
+     * Retrieve list of the specified user's current Organization memberships. User must be specified by user ID. For more information, review [Auth0 Organizations](https://auth0.com/docs/manage-users/organizations).
      *
      * @param {string} id - ID of the user to retrieve the organizations for.
      * @param {Management.ListUserOrganizationsRequestParameters} request

package/dist/esm/management/api/resources/users/resources/organizations/client/Client.mjs

@@ -20,7 +20,7 @@ export class OrganizationsClient {
         this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
-     * Retrieve list of the specified user's current Organization memberships. User must be specified by user ID. For more information, review <a href="https://auth0.com/docs/manage-users/organizations">Auth0 Organizations</a>.
+     * Retrieve list of the specified user's current Organization memberships. User must be specified by user ID. For more information, review [Auth0 Organizations](https://auth0.com/docs/manage-users/organizations).
      *
      * @param {string} id - ID of the user to retrieve the organizations for.
      * @param {Management.ListUserOrganizationsRequestParameters} request

package/dist/esm/management/api/resources/users/resources/roles/client/Client.d.mts

@@ -13,14 +13,16 @@ export declare class RolesClient {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      *
-     * <b>Note</b>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.
+     * **Note**: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: [Get user roles assigned to an Organization member](https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles).
      *
      * @param {string} id - ID of the user to list roles for.
      * @param {Management.ListUserRolesRequestParameters} request
      * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
      *
+     * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -32,9 +34,9 @@ export declare class RolesClient {
      */
     list(id: string, request?: Management.ListUserRolesRequestParameters, requestOptions?: RolesClient.RequestOptions): Promise<core.Page<Management.Role, Management.ListUserRolesOffsetPaginatedResponseContent>>;
     /**
-     * Assign one or more existing user roles to a user. For more information, review <a href="https://auth0.com/docs/manage-users/access-control/rbac">Role-Based Access Control</a>.
+     * Assign one or more existing user roles to a user. For more information, review [Role-Based Access Control](https://auth0.com/docs/manage-users/access-control/rbac).
      *
-     * <b>Note</b>: New roles cannot be created through this action. Additionally, this action is used to assign roles to a user in the context of your whole tenant. To assign roles in the context of a specific Organization, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/post-organization-member-roles">Assign user roles to an Organization member</a>.
+     * **Note**: New roles cannot be created through this action. Additionally, this action is used to assign roles to a user in the context of your whole tenant. To assign roles in the context of a specific Organization, use the following endpoint: [Assign user roles to an Organization member](https://auth0.com/docs/api/management/v2/organizations/post-organization-member-roles).
      *
      * @param {string} id - ID of the user to associate roles with.
      * @param {Management.AssignUserRolesRequestContent} request
@@ -55,7 +57,7 @@ export declare class RolesClient {
     /**
      * Remove one or more specified user roles assigned to a user.
      *
-     * <b>Note</b>: This action removes a role from a user in the context of your whole tenant. If you want to unassign a role from a user in the context of a specific Organization, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/delete-organization-member-roles">Delete user roles from an Organization member</a>.
+     * **Note**: This action removes a role from a user in the context of your whole tenant. If you want to unassign a role from a user in the context of a specific Organization, use the following endpoint: [Delete user roles from an Organization member](https://auth0.com/docs/api/management/v2/organizations/delete-organization-member-roles).
      *
      * @param {string} id - ID of the user to remove roles from.
      * @param {Management.DeleteUserRolesRequestContent} request

package/dist/esm/management/api/resources/users/resources/roles/client/Client.mjs

@@ -22,14 +22,16 @@ export class RolesClient {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      *
-     * <b>Note</b>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.
+     * **Note**: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: [Get user roles assigned to an Organization member](https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles).
      *
      * @param {string} id - ID of the user to list roles for.
      * @param {Management.ListUserRolesRequestParameters} request
      * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
      *
+     * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -74,10 +76,14 @@ export class RolesClient {
                 }
                 if (_response.error.reason === "status-code") {
                     switch (_response.error.statusCode) {
+                        case 400:
+                            throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
                         case 401:
                             throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                         case 403:
                             throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                         case 429:
                             throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                         default:
@@ -105,9 +111,9 @@ export class RolesClient {
         });
     }
     /**
-     * Assign one or more existing user roles to a user. For more information, review <a href="https://auth0.com/docs/manage-users/access-control/rbac">Role-Based Access Control</a>.
+     * Assign one or more existing user roles to a user. For more information, review [Role-Based Access Control](https://auth0.com/docs/manage-users/access-control/rbac).
      *
-     * <b>Note</b>: New roles cannot be created through this action. Additionally, this action is used to assign roles to a user in the context of your whole tenant. To assign roles in the context of a specific Organization, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/post-organization-member-roles">Assign user roles to an Organization member</a>.
+     * **Note**: New roles cannot be created through this action. Additionally, this action is used to assign roles to a user in the context of your whole tenant. To assign roles in the context of a specific Organization, use the following endpoint: [Assign user roles to an Organization member](https://auth0.com/docs/api/management/v2/organizations/post-organization-member-roles).
      *
      * @param {string} id - ID of the user to associate roles with.
      * @param {Management.AssignUserRolesRequestContent} request
@@ -172,7 +178,7 @@ export class RolesClient {
     /**
      * Remove one or more specified user roles assigned to a user.
      *
-     * <b>Note</b>: This action removes a role from a user in the context of your whole tenant. If you want to unassign a role from a user in the context of a specific Organization, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/delete-organization-member-roles">Delete user roles from an Organization member</a>.
+     * **Note**: This action removes a role from a user in the context of your whole tenant. If you want to unassign a role from a user in the context of a specific Organization, use the following endpoint: [Delete user roles from an Organization member](https://auth0.com/docs/api/management/v2/organizations/delete-organization-member-roles).
      *
      * @param {string} id - ID of the user to remove roles from.
      * @param {Management.DeleteUserRolesRequestContent} request