auth0 5.9.1 → 5.11.0

package/dist/esm/management/api/types/types.mjs

@@ -297,6 +297,15 @@ export const OauthScope = {
     /**
      * Read Group Members */
     ReadGroupMembers: "read:group_members",
+    /**
+     * Create Group Roles */
+    CreateGroupRoles: "create:group_roles",
+    /**
+     * Read Group Roles */
+    ReadGroupRoles: "read:group_roles",
+    /**
+     * Delete Group Roles */
+    DeleteGroupRoles: "delete:group_roles",
     /**
      * Read Groups */
     ReadGroups: "read:groups",
@@ -399,6 +408,18 @@ export const OauthScope = {
     /**
      * Delete Organization Discovery Domains */
     DeleteOrganizationDiscoveryDomains: "delete:organization_discovery_domains",
+    /**
+     * Create Organization Group Roles */
+    CreateOrganizationGroupRoles: "create:organization_group_roles",
+    /**
+     * Read Organization Group Roles */
+    ReadOrganizationGroupRoles: "read:organization_group_roles",
+    /**
+     * Delete Organization Group Roles */
+    DeleteOrganizationGroupRoles: "delete:organization_group_roles",
+    /**
+     * Read Organization Groups */
+    ReadOrganizationGroups: "read:organization_groups",
     /**
      * Create Organization Invitations */
     CreateOrganizationInvitations: "create:organization_invitations",
@@ -408,6 +429,12 @@ export const OauthScope = {
     /**
      * Delete Organization Invitations */
     DeleteOrganizationInvitations: "delete:organization_invitations",
+    /**
+     * Read Organization Member Effective Roles */
+    ReadOrganizationMemberEffectiveRoles: "read:organization_member_effective_roles",
+    /**
+     * Read Organization Member Role Source Groups */
+    ReadOrganizationMemberRoleSourceGroups: "read:organization_member_role_source_groups",
     /**
      * Create Organization Member Roles */
     CreateOrganizationMemberRoles: "create:organization_member_roles",
@@ -471,6 +498,18 @@ export const OauthScope = {
     /**
      * Update Prompts */
     UpdatePrompts: "update:prompts",
+    /**
+     * Create Rate Limit Policies */
+    CreateRateLimitPolicies: "create:rate_limit_policies",
+    /**
+     * Read Rate Limit Policies */
+    ReadRateLimitPolicies: "read:rate_limit_policies",
+    /**
+     * Update Rate Limit Policies */
+    UpdateRateLimitPolicies: "update:rate_limit_policies",
+    /**
+     * Delete Rate Limit Policies */
+    DeleteRateLimitPolicies: "delete:rate_limit_policies",
     /**
      * Read Refresh Tokens */
     ReadRefreshTokens: "read:refresh_tokens",
@@ -630,9 +669,21 @@ export const OauthScope = {
     /**
      * Delete User Attribute Profiles */
     DeleteUserAttributeProfiles: "delete:user_attribute_profiles",
+    /**
+     * Read User Effective Permissions */
+    ReadUserEffectivePermissions: "read:user_effective_permissions",
+    /**
+     * Read User Effective Roles */
+    ReadUserEffectiveRoles: "read:user_effective_roles",
     /**
      * Read User Idp Tokens */
     ReadUserIdpTokens: "read:user_idp_tokens",
+    /**
+     * Read User Permission Source Roles */
+    ReadUserPermissionSourceRoles: "read:user_permission_source_roles",
+    /**
+     * Read User Role Source Groups */
+    ReadUserRoleSourceGroups: "read:user_role_source_groups",
     /**
      * Create User Tickets */
     CreateUserTickets: "create:user_tickets",
@@ -785,6 +836,12 @@ export const AuthenticationTypeEnum = {
     Email: "email",
     Totp: "totp",
 };
+export var BadRequestSchema;
+(function (BadRequestSchema) {
+    BadRequestSchema.Error_ = {
+        BadRequest: "Bad Request",
+    };
+})(BadRequestSchema || (BadRequestSchema = {}));
 /** The policy that defines how often to show CAPTCHA */
 export const BotDetectionChallengePolicyPasswordFlowEnum = {
     Never: "never",
@@ -970,9 +1027,10 @@ export const ClientExternalMetadataCreatedByEnum = {
     Admin: "admin",
     Client: "client",
 };
-/** Indicates the type of external metadata used to register the client. This field is omitted for regular clients. The value <code>cimd</code> identifies clients registered via a Client ID Metadata Document. */
+/** Indicates the type of external metadata used to register the client. This field is omitted for regular clients. The value <code>cimd</code> identifies clients registered via a Client ID Metadata Document. The value <code>dcr</code> identifies clients registered via Dynamic Client Registration. */
 export const ClientExternalMetadataTypeEnum = {
     Cimd: "cimd",
+    Dcr: "dcr",
 };
 /** Applies this client grant as the default for all clients in the specified group. The only accepted value is <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants#default-permissions-for-third-party-applications">`third_party_clients`</a>, which applies the grant to all third-party clients. Per-client grants for the same audience take precedence. Mutually exclusive with `client_id`. */
 export const ClientGrantDefaultForEnum = {
@@ -1126,6 +1184,8 @@ export const ConnectionDigestAlgorithmEnumSaml = {
 /** Algorithm used for DPoP proof JWT signing. */
 export const ConnectionDpopSigningAlgEnum = {
     Es256: "ES256",
+    Es384: "ES384",
+    Es512: "ES512",
     Ed25519: "Ed25519",
 };
 export var ConnectionEmailEmail;
@@ -2095,6 +2155,11 @@ export const CreatedUserAuthenticationMethodTypeEnum = {
     WebauthnRoaming: "webauthn-roaming",
     Passkey: "passkey",
 };
+/** Applies to passkeys only. The kind of device the credential is stored on as defined by backup eligibility. "single_device" credentials cannot be backed up and synced to another device, "multi_device" credentials can be backed up if enabled by the end-user. */
+export const CredentialDeviceTypeEnum = {
+    SingleDevice: "single_device",
+    MultiDevice: "multi_device",
+};
 /** The HTTP header to fetch the client's IP address */
 export const CustomDomainCustomClientIpHeaderEnum = {
     TrueClientIp: "true-client-ip",
@@ -3717,6 +3782,12 @@ export const FlowsVaultConnectionSetupTypeBasicAuthEnum = {
 export const FlowsVaultConnectionSetupTypeOauthClientCredentialsEnum = {
     OauthClientCredentials: "OAUTH_CLIENT_CREDENTIALS",
 };
+export var ForbiddenSchema;
+(function (ForbiddenSchema) {
+    ForbiddenSchema.Error_ = {
+        Forbidden: "Forbidden",
+    };
+})(ForbiddenSchema || (ForbiddenSchema = {}));
 export const FormBlockImageConfigPositionEnum = {
     Left: "LEFT",
     Center: "CENTER",
@@ -4220,6 +4291,10 @@ export const OrganizationDiscoveryDomainStatus = {
     Pending: "pending",
     Verified: "verified",
 };
+export const OrganizationMemberEffectiveRoleSource = {
+    Direct: "direct",
+    Groups: "groups",
+};
 /** Defines whether organizations can be used with client credentials exchanges for this grant. */
 export const OrganizationUsageEnum = {
     Deny: "deny",
@@ -4439,6 +4514,14 @@ export const PublicKeyCredentialAlgorithmEnum = {
 export const PublicKeyCredentialTypeEnum = {
     PublicKey: "public_key",
 };
+/** The consumer to which the rate limit policy applies. */
+export const RateLimitPolicyConsumerEnum = {
+    Client: "client",
+};
+/** The API protected by the Rate Limit Policy. */
+export const RateLimitPolicyResourceEnum = {
+    OauthAuthenticationApi: "oauth_authentication_api",
+};
 /** Refresh token expiration types, one of: expiring, non-expiring */
 export const RefreshTokenExpirationTypeEnum = {
     Expiring: "expiring",
@@ -4765,6 +4848,16 @@ export const SynchronizeGroupsEnum = {
     Off: "off",
     Selected: "selected",
 };
+/** Whether the list is an allowlist or denylist. */
+export const TenantSettingsCountryCodesMode = {
+    Allow: "allow",
+    Deny: "deny",
+};
+/** Whether the list is an allowlist or denylist. */
+export const TenantSettingsCountryCodesModeResponse = {
+    Allow: "allow",
+    Deny: "deny",
+};
 /** Character set used to generate a User Code. Can be `base20` or `digits`. */
 export const TenantSettingsDeviceFlowCharset = {
     Base20: "base20",
@@ -4868,10 +4961,22 @@ export const TenantSettingsSupportedLocalesEnum = {
 export const TokenExchangeProfileTypeEnum = {
     CustomAuthentication: "custom_authentication",
 };
+export var TooManyRequestsSchema;
+(function (TooManyRequestsSchema) {
+    TooManyRequestsSchema.Error_ = {
+        TooManyRequests: "Too Many Requests",
+    };
+})(TooManyRequestsSchema || (TooManyRequestsSchema = {}));
 export const TwilioProviderDeliveryMethodEnum = {
     Text: "text",
     Voice: "voice",
 };
+export var UnauthorizedSchema;
+(function (UnauthorizedSchema) {
+    UnauthorizedSchema.Error_ = {
+        Unauthorized: "Unauthorized",
+    };
+})(UnauthorizedSchema || (UnauthorizedSchema = {}));
 /** Which login experience to use. Can be `new` or `classic`. */
 export const UniversalLoginExperienceEnum = {
     New: "new",
@@ -4909,6 +5014,20 @@ export const UserAuthenticationMethodPropertiesEnum = {
     Sms: "sms",
     Voice: "voice",
 };
+/** The source type of a user effective permission roles. */
+export const UserEffectivePermissionRoleSourceEnum = {
+    Direct: "direct",
+    Groups: "groups",
+};
+/** The source type of a user effective permission. */
+export const UserEffectivePermissionSourceEnum = {
+    Direct: "direct",
+    Roles: "roles",
+};
+export const UserEffectiveRoleSource = {
+    Direct: "direct",
+    Groups: "groups",
+};
 /** Authentication method for this enrollment. Can be `authenticator`, `guardian`, `sms`, `webauthn-roaming`, or `webauthn-platform`. */
 export const UserEnrollmentAuthMethodEnum = {
     Authenticator: "authenticator",

package/dist/esm/management/core/auth/AuthProvider.d.mts

@@ -5,3 +5,4 @@ export interface AuthProvider {
         endpointMetadata?: EndpointMetadata;
     }): Promise<AuthRequest>;
 }
+export declare function isAuthProvider(value: unknown): value is AuthProvider;

package/dist/esm/management/core/auth/AuthProvider.mjs

@@ -1 +1,6 @@
-export {};
+export function isAuthProvider(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        "getAuthRequest" in value &&
+        typeof value.getAuthRequest === "function");
+}

package/dist/esm/management/core/auth/index.d.mts

@@ -1,4 +1,4 @@
-export type { AuthProvider } from "./AuthProvider.mjs";
+export { type AuthProvider, isAuthProvider } from "./AuthProvider.mjs";
 export type { AuthRequest } from "./AuthRequest.mjs";
 export { BasicAuth } from "./BasicAuth.mjs";
 export { BearerToken } from "./BearerToken.mjs";

package/dist/esm/management/core/auth/index.mjs

@@ -1,3 +1,4 @@
+export { isAuthProvider } from "./AuthProvider.mjs";
 export { BasicAuth } from "./BasicAuth.mjs";
 export { BearerToken } from "./BearerToken.mjs";
 export { NoOpAuthProvider } from "./NoOpAuthProvider.mjs";

package/dist/esm/management/core/fetcher/requestWithRetries.mjs

@@ -11,6 +11,9 @@ const INITIAL_RETRY_DELAY = 1000; // in milliseconds
 const MAX_RETRY_DELAY = 60000; // in milliseconds
 const DEFAULT_MAX_RETRIES = 2;
 const JITTER_FACTOR = 0.2; // 20% random jitter
+function isRetryableStatusCode(statusCode) {
+    return [408, 429].includes(statusCode) || statusCode >= 500;
+}
 function addPositiveJitter(delay) {
     const jitterMultiplier = 1 + Math.random() * JITTER_FACTOR;
     return delay * jitterMultiplier;
@@ -50,7 +53,7 @@ export function requestWithRetries(requestFn_1) {
     return __awaiter(this, arguments, void 0, function* (requestFn, maxRetries = DEFAULT_MAX_RETRIES) {
         let response = yield requestFn();
         for (let i = 0; i < maxRetries; ++i) {
-            if ([408, 429].includes(response.status) || response.status >= 500) {
+            if (isRetryableStatusCode(response.status)) {
                 const delay = getRetryDelayFromHeaders(response, i);
                 yield new Promise((resolve) => setTimeout(resolve, delay));
                 response = yield requestFn();

package/dist/esm/management/version.d.mts

@@ -1 +1 @@
-export declare const SDK_VERSION = "5.9.1";
+export declare const SDK_VERSION = "5.11.0";

package/dist/esm/management/version.mjs

@@ -1 +1 @@
-export const SDK_VERSION = "5.9.1";
+export const SDK_VERSION = "5.11.0";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth0",
-    "version": "5.9.1",
+    "version": "5.11.0",
     "private": false,
     "repository": {
         "type": "git",
@@ -73,7 +73,7 @@
     "dependencies": {
         "uuid": "^11.1.1",
         "jose": "^4.13.2",
-        "auth0-legacy": "npm:auth0@^4.27.0"
+        "auth0-legacy": "npm:auth0@^4.37.1"
     },
     "devDependencies": {
         "webpack": "^5.105.4",
@@ -84,7 +84,7 @@
         "ts-jest": "^29.3.4",
         "jest-environment-jsdom": "^29.7.0",
         "msw": "2.11.2",
-        "@types/node": "^18.19.70",
+        "@types/node": "^20.0.0",
         "typescript": "~5.9.3",
         "prettier": "3.8.1",
         "typedoc": "^0.28.7",