auth0 5.9.1 → 5.11.0

package/dist/cjs/management/api/resources/deviceCredentials/client/Client.d.ts

@@ -11,7 +11,7 @@ export declare class DeviceCredentialsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<DeviceCredentialsClient.Options>;
     constructor(options: DeviceCredentialsClient.Options);
     /**
-     * Retrieve device credential information (<code>public_key</code>, <code>refresh_token</code>, or <code>rotating_refresh_token</code>) associated with a specific user.
+     * Retrieve device credential information (`public_key`, `refresh_token`, or `rotating_refresh_token`) associated with a specific user.
      *
      * @param {Management.ListDeviceCredentialsRequestParameters} request
      * @param {DeviceCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -35,9 +35,9 @@ export declare class DeviceCredentialsClient {
      */
     list(request?: Management.ListDeviceCredentialsRequestParameters, requestOptions?: DeviceCredentialsClient.RequestOptions): Promise<core.Page<Management.DeviceCredential, Management.ListDeviceCredentialsOffsetPaginatedResponseContent>>;
     /**
-     * Create a device credential public key to manage refresh token rotation for a given <code>user_id</code>. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
+     * Create a device credential public key to manage refresh token rotation for a given `user_id`. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
      *
-     * When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read <a href="https://auth0.com/docs/get-started/tenant-settings/signing-keys"> Signing Keys</a>.
+     * When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read [Signing Keys](https://auth0.com/docs/get-started/tenant-settings/signing-keys).
      *
      * @param {Management.CreatePublicKeyDeviceCredentialRequestContent} request
      * @param {DeviceCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/deviceCredentials/client/Client.js

@@ -56,7 +56,7 @@ class DeviceCredentialsClient {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
     }
     /**
-     * Retrieve device credential information (<code>public_key</code>, <code>refresh_token</code>, or <code>rotating_refresh_token</code>) associated with a specific user.
+     * Retrieve device credential information (`public_key`, `refresh_token`, or `rotating_refresh_token`) associated with a specific user.
      *
      * @param {Management.ListDeviceCredentialsRequestParameters} request
      * @param {DeviceCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -151,9 +151,9 @@ class DeviceCredentialsClient {
         });
     }
     /**
-     * Create a device credential public key to manage refresh token rotation for a given <code>user_id</code>. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
+     * Create a device credential public key to manage refresh token rotation for a given `user_id`. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
      *
-     * When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read <a href="https://auth0.com/docs/get-started/tenant-settings/signing-keys"> Signing Keys</a>.
+     * When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read [Signing Keys](https://auth0.com/docs/get-started/tenant-settings/signing-keys).
      *
      * @param {Management.CreatePublicKeyDeviceCredentialRequestContent} request
      * @param {DeviceCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/groups/client/Client.d.ts

@@ -3,6 +3,7 @@ import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.js"
 import * as core from "../../../../core/index.js";
 import * as Management from "../../../index.js";
 import { MembersClient } from "../resources/members/client/Client.js";
+import { RolesClient } from "../resources/roles/client/Client.js";
 export declare namespace GroupsClient {
     type Options = BaseClientOptions;
     interface RequestOptions extends BaseRequestOptions {
@@ -11,8 +12,10 @@ export declare namespace GroupsClient {
 export declare class GroupsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<GroupsClient.Options>;
     protected _members: MembersClient | undefined;
+    protected _roles: RolesClient | undefined;
     constructor(options: GroupsClient.Options);
     get members(): MembersClient;
+    get roles(): RolesClient;
     /**
      * List all groups in your tenant.
      *

package/dist/cjs/management/api/resources/groups/client/Client.js

@@ -52,6 +52,7 @@ const handleNonStatusCodeError_js_1 = require("../../../../errors/handleNonStatu
 const errors = __importStar(require("../../../../errors/index.js"));
 const Management = __importStar(require("../../../index.js"));
 const Client_js_1 = require("../resources/members/client/Client.js");
+const Client_js_2 = require("../resources/roles/client/Client.js");
 class GroupsClient {
     constructor(options) {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
@@ -60,6 +61,10 @@ class GroupsClient {
         var _a;
         return ((_a = this._members) !== null && _a !== void 0 ? _a : (this._members = new Client_js_1.MembersClient(this._options)));
     }
+    get roles() {
+        var _a;
+        return ((_a = this._roles) !== null && _a !== void 0 ? _a : (this._roles = new Client_js_2.RolesClient(this._options)));
+    }
     /**
      * List all groups in your tenant.
      *

package/dist/cjs/management/api/resources/groups/resources/index.d.ts

@@ -1 +1,2 @@
 export * as members from "./members/index.js";
+export * as roles from "./roles/index.js";

package/dist/cjs/management/api/resources/groups/resources/index.js

@@ -33,5 +33,6 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.members = void 0;
+exports.roles = exports.members = void 0;
 exports.members = __importStar(require("./members/index.js"));
+exports.roles = __importStar(require("./roles/index.js"));

package/dist/cjs/management/api/resources/groups/resources/roles/client/Client.d.ts

@@ -0,0 +1,71 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../BaseClient.js";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../BaseClient.js";
+import * as core from "../../../../../../core/index.js";
+import * as Management from "../../../../../index.js";
+export declare namespace RolesClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class RolesClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<RolesClient.Options>;
+    constructor(options: RolesClient.Options);
+    /**
+     * Lists the <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> assigned to a group.
+     *
+     * @param {string} id - Unique identifier for the group (service-generated).
+     * @param {Management.ListGroupRolesRequestParameters} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.groups.roles.list("id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(id: string, request?: Management.ListGroupRolesRequestParameters, requestOptions?: RolesClient.RequestOptions): Promise<core.Page<Management.Role, Management.ListGroupRolesResponseContent>>;
+    /**
+     * Assign one or more <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> to a specified group.
+     *
+     * @param {string} id - Unique identifier for the group (service-generated).
+     * @param {Management.CreateGroupRolesRequestParameters} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.groups.roles.create("id", {
+     *         roles: ["roles"]
+     *     })
+     */
+    create(id: string, request: Management.CreateGroupRolesRequestParameters, requestOptions?: RolesClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __create;
+    /**
+     * Unassign one or more <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> from a specified group.
+     *
+     * @param {string} id - Unique identifier for the group (service-generated).
+     * @param {Management.DeleteGroupRolesRequestContent} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.groups.roles.delete("id", {
+     *         roles: ["roles"]
+     *     })
+     */
+    delete(id: string, request: Management.DeleteGroupRolesRequestContent, requestOptions?: RolesClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __delete;
+}

package/dist/cjs/management/api/resources/groups/resources/roles/client/Client.js

@@ -0,0 +1,270 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RolesClient = void 0;
+const BaseClient_js_1 = require("../../../../../../BaseClient.js");
+const core = __importStar(require("../../../../../../core/index.js"));
+const headers_js_1 = require("../../../../../../core/headers.js");
+const environments = __importStar(require("../../../../../../environments.js"));
+const handleNonStatusCodeError_js_1 = require("../../../../../../errors/handleNonStatusCodeError.js");
+const errors = __importStar(require("../../../../../../errors/index.js"));
+const Management = __importStar(require("../../../../../index.js"));
+class RolesClient {
+    constructor(options) {
+        this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
+    }
+    /**
+     * Lists the <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> assigned to a group.
+     *
+     * @param {string} id - Unique identifier for the group (service-generated).
+     * @param {Management.ListGroupRolesRequestParameters} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.groups.roles.list("id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(id_1) {
+        return __awaiter(this, arguments, void 0, function* (id, request = {}, requestOptions) {
+            const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+                const { from: from_, take = 50 } = request;
+                const _queryParams = {
+                    from: from_,
+                    take,
+                };
+                const _authRequest = yield this._options.authProvider.getAuthRequest();
+                let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+                const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                    url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `groups/${core.url.encodePathParam(id)}/roles`),
+                    method: "GET",
+                    headers: _headers,
+                    queryString: core.url
+                        .queryBuilder()
+                        .addMany(_queryParams)
+                        .mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams)
+                        .build(),
+                    timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                    maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                    abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                    fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                    logging: this._options.logging,
+                });
+                if (_response.ok) {
+                    return {
+                        data: _response.body,
+                        rawResponse: _response.rawResponse,
+                    };
+                }
+                if (_response.error.reason === "status-code") {
+                    switch (_response.error.statusCode) {
+                        case 400:
+                            throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                        case 401:
+                            throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                        case 403:
+                            throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 429:
+                            throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                        default:
+                            throw new errors.ManagementError({
+                                statusCode: _response.error.statusCode,
+                                body: _response.error.body,
+                                rawResponse: _response.rawResponse,
+                            });
+                    }
+                }
+                return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "GET", "/groups/{id}/roles");
+            }));
+            const dataWithRawResponse = yield list(request).withRawResponse();
+            return new core.Page({
+                response: dataWithRawResponse.data,
+                rawResponse: dataWithRawResponse.rawResponse,
+                hasNextPage: (response) => (response === null || response === void 0 ? void 0 : response.next) != null && !(typeof (response === null || response === void 0 ? void 0 : response.next) === "string" && (response === null || response === void 0 ? void 0 : response.next) === ""),
+                getItems: (response) => { var _a; return (_a = response === null || response === void 0 ? void 0 : response.roles) !== null && _a !== void 0 ? _a : []; },
+                loadPage: (response) => {
+                    return list(core.setObjectProperty(request, "from", response === null || response === void 0 ? void 0 : response.next));
+                },
+            });
+        });
+    }
+    /**
+     * Assign one or more <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> to a specified group.
+     *
+     * @param {string} id - Unique identifier for the group (service-generated).
+     * @param {Management.CreateGroupRolesRequestParameters} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.groups.roles.create("id", {
+     *         roles: ["roles"]
+     *     })
+     */
+    create(id, request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__create(id, request, requestOptions));
+    }
+    __create(id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `groups/${core.url.encodePathParam(id)}/roles`),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
+                requestType: "json",
+                body: request,
+                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: undefined, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                    case 401:
+                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                    case 403:
+                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
+                    case 429:
+                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.ManagementError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/groups/{id}/roles");
+        });
+    }
+    /**
+     * Unassign one or more <a href="https://auth0.com/docs/manage-users/access-control/rbac">roles</a> from a specified group.
+     *
+     * @param {string} id - Unique identifier for the group (service-generated).
+     * @param {Management.DeleteGroupRolesRequestContent} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.groups.roles.delete("id", {
+     *         roles: ["roles"]
+     *     })
+     */
+    delete(id, request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__delete(id, request, requestOptions));
+    }
+    __delete(id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `groups/${core.url.encodePathParam(id)}/roles`),
+                method: "DELETE",
+                headers: _headers,
+                contentType: "application/json",
+                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
+                requestType: "json",
+                body: request,
+                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: undefined, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                    case 401:
+                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                    case 403:
+                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 429:
+                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.ManagementError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "DELETE", "/groups/{id}/roles");
+        });
+    }
+}
+exports.RolesClient = RolesClient;

package/dist/cjs/management/api/resources/groups/resources/roles/client/index.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cjs/management/api/resources/groups/resources/roles/client/index.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/management/api/resources/groups/resources/roles/index.d.ts

@@ -0,0 +1 @@
+export * from "./client/index.js";

package/dist/cjs/management/api/resources/groups/resources/roles/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./client/index.js"), exports);

package/dist/cjs/management/api/resources/guardian/resources/enrollments/client/Client.d.ts

@@ -11,10 +11,7 @@ export declare class EnrollmentsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<EnrollmentsClient.Options>;
     constructor(options: EnrollmentsClient.Options);
     /**
-     * Create a <a href="https://auth0.com/docs/secure/multi-factor-authentication/auth0-guardian/create-custom-enrollment-tickets">multi-factor authentication (MFA) enrollment ticket</a>, and optionally send an email with the created ticket, to a given user.
-     * Create a <a href="https://auth0.com/docs/secure/multi-factor-authentication/auth0-guardian/create-custom-enrollment-tickets">multi-factor authentication (MFA) enrollment ticket</a>, and optionally send an email with the created ticket to a given user. Enrollment tickets can specify which factor users must enroll with or allow existing MFA users to enroll in additional factors.<br/>
-     *
-     * Note: Users cannot enroll in Email as a factor through custom enrollment tickets.
+     * Create a [multi-factor authentication (MFA) enrollment ticket](https://auth0.com/docs/secure/multi-factor-authentication/auth0-guardian/create-custom-enrollment-tickets), and optionally send an email with the created ticket to a given user. Enrollment tickets can specify which factor users must enroll with or allow existing MFA users to enroll in additional factors.
      *
      * @param {Management.CreateGuardianEnrollmentTicketRequestContent} request
      * @param {EnrollmentsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -47,7 +44,7 @@ export declare class EnrollmentsClient {
     get(id: string, requestOptions?: EnrollmentsClient.RequestOptions): core.HttpResponsePromise<Management.GetGuardianEnrollmentResponseContent>;
     private __get;
     /**
-     * Remove a specific multi-factor authentication (MFA) enrollment from a user's account. This allows the user to re-enroll with MFA. For more information, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/reset-user-mfa">Reset User Multi-Factor Authentication and Recovery Codes</a>.
+     * Remove a specific multi-factor authentication (MFA) enrollment from a user's account. This allows the user to re-enroll with MFA. For more information, review [Reset User Multi-Factor Authentication and Recovery Codes](https://auth0.com/docs/secure/multi-factor-authentication/reset-user-mfa).
      *
      * @param {string} id - ID of the enrollment to be deleted.
      * @param {EnrollmentsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/guardian/resources/enrollments/client/Client.js

@@ -56,10 +56,7 @@ class EnrollmentsClient {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
     }
     /**
-     * Create a <a href="https://auth0.com/docs/secure/multi-factor-authentication/auth0-guardian/create-custom-enrollment-tickets">multi-factor authentication (MFA) enrollment ticket</a>, and optionally send an email with the created ticket, to a given user.
-     * Create a <a href="https://auth0.com/docs/secure/multi-factor-authentication/auth0-guardian/create-custom-enrollment-tickets">multi-factor authentication (MFA) enrollment ticket</a>, and optionally send an email with the created ticket to a given user. Enrollment tickets can specify which factor users must enroll with or allow existing MFA users to enroll in additional factors.<br/>
-     *
-     * Note: Users cannot enroll in Email as a factor through custom enrollment tickets.
+     * Create a [multi-factor authentication (MFA) enrollment ticket](https://auth0.com/docs/secure/multi-factor-authentication/auth0-guardian/create-custom-enrollment-tickets), and optionally send an email with the created ticket to a given user. Enrollment tickets can specify which factor users must enroll with or allow existing MFA users to enroll in additional factors.
      *
      * @param {Management.CreateGuardianEnrollmentTicketRequestContent} request
      * @param {EnrollmentsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -181,7 +178,7 @@ class EnrollmentsClient {
         });
     }
     /**
-     * Remove a specific multi-factor authentication (MFA) enrollment from a user's account. This allows the user to re-enroll with MFA. For more information, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/reset-user-mfa">Reset User Multi-Factor Authentication and Recovery Codes</a>.
+     * Remove a specific multi-factor authentication (MFA) enrollment from a user's account. This allows the user to re-enroll with MFA. For more information, review [Reset User Multi-Factor Authentication and Recovery Codes](https://auth0.com/docs/secure/multi-factor-authentication/reset-user-mfa).
      *
      * @param {string} id - ID of the enrollment to be deleted.
      * @param {EnrollmentsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/guardian/resources/factors/resources/pushNotification/client/Client.d.ts

@@ -115,7 +115,7 @@ export declare class PushNotificationClient {
     updateFcmv1Provider(request?: Management.UpdateGuardianFactorsProviderPushNotificationFcmv1RequestContent, requestOptions?: PushNotificationClient.RequestOptions): core.HttpResponsePromise<Management.UpdateGuardianFactorsProviderPushNotificationFcmv1ResponseContent>;
     private __updateFcmv1Provider;
     /**
-     * Retrieve configuration details for an AWS SNS push notification provider that has been enabled for MFA. To learn more, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa">Configure Push Notifications for MFA</a>.
+     * Retrieve configuration details for an AWS SNS push notification provider that has been enabled for MFA. To learn more, review [Configure Push Notifications for MFA](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa).
      *
      * @param {PushNotificationClient.RequestOptions} requestOptions - Request-specific configuration.
      *
@@ -129,7 +129,7 @@ export declare class PushNotificationClient {
     getSnsProvider(requestOptions?: PushNotificationClient.RequestOptions): core.HttpResponsePromise<Management.GetGuardianFactorsProviderSnsResponseContent>;
     private __getSnsProvider;
     /**
-     * Configure the <a href="https://auth0.com/docs/multifactor-authentication/developer/sns-configuration">AWS SNS push notification provider configuration</a> (subscription required).
+     * Configure the [AWS SNS push notification provider configuration](https://auth0.com/docs/multifactor-authentication/developer/sns-configuration) (subscription required).
      *
      * @param {Management.SetGuardianFactorsProviderPushNotificationSnsRequestContent} request
      * @param {PushNotificationClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -144,7 +144,7 @@ export declare class PushNotificationClient {
     setSnsProvider(request?: Management.SetGuardianFactorsProviderPushNotificationSnsRequestContent, requestOptions?: PushNotificationClient.RequestOptions): core.HttpResponsePromise<Management.SetGuardianFactorsProviderPushNotificationSnsResponseContent>;
     private __setSnsProvider;
     /**
-     * Configure the <a href="https://auth0.com/docs/multifactor-authentication/developer/sns-configuration">AWS SNS push notification provider configuration</a> (subscription required).
+     * Configure the [AWS SNS push notification provider configuration](https://auth0.com/docs/multifactor-authentication/developer/sns-configuration) (subscription required).
      *
      * @param {Management.UpdateGuardianFactorsProviderPushNotificationSnsRequestContent} request
      * @param {PushNotificationClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/guardian/resources/factors/resources/pushNotification/client/Client.js

@@ -472,7 +472,7 @@ class PushNotificationClient {
         });
     }
     /**
-     * Retrieve configuration details for an AWS SNS push notification provider that has been enabled for MFA. To learn more, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa">Configure Push Notifications for MFA</a>.
+     * Retrieve configuration details for an AWS SNS push notification provider that has been enabled for MFA. To learn more, review [Configure Push Notifications for MFA](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa).
      *
      * @param {PushNotificationClient.RequestOptions} requestOptions - Request-specific configuration.
      *
@@ -528,7 +528,7 @@ class PushNotificationClient {
         });
     }
     /**
-     * Configure the <a href="https://auth0.com/docs/multifactor-authentication/developer/sns-configuration">AWS SNS push notification provider configuration</a> (subscription required).
+     * Configure the [AWS SNS push notification provider configuration](https://auth0.com/docs/multifactor-authentication/developer/sns-configuration) (subscription required).
      *
      * @param {Management.SetGuardianFactorsProviderPushNotificationSnsRequestContent} request
      * @param {PushNotificationClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -588,7 +588,7 @@ class PushNotificationClient {
         });
     }
     /**
-     * Configure the <a href="https://auth0.com/docs/multifactor-authentication/developer/sns-configuration">AWS SNS push notification provider configuration</a> (subscription required).
+     * Configure the [AWS SNS push notification provider configuration](https://auth0.com/docs/multifactor-authentication/developer/sns-configuration) (subscription required).
      *
      * @param {Management.UpdateGuardianFactorsProviderPushNotificationSnsRequestContent} request
      * @param {PushNotificationClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/guardian/resources/policies/client/Client.d.ts

@@ -11,15 +11,14 @@ export declare class PoliciesClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<PoliciesClient.Options>;
     constructor(options: PoliciesClient.Options);
     /**
-     * Retrieve the <a href="https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa">multi-factor authentication (MFA) policies</a> configured for your tenant.
+     * Retrieve the [multi-factor authentication (MFA) policies](https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa) configured for your tenant.
      *
      * The following policies are supported:
-     * <ul>
-     * <li><code>all-applications</code> policy prompts with MFA for all logins.</li>
-     * <li><code>confidence-score</code> policy prompts with MFA only for low confidence logins.</li>
-     * </ul>
      *
-     * <b>Note</b>: The <code>confidence-score</code> policy is part of the <a href="https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa">Adaptive MFA feature</a>. Adaptive MFA requires an add-on for the Enterprise plan; review <a href="https://auth0.com/pricing">Auth0 Pricing</a> for more details.
+     * - `all-applications` policy prompts with MFA for all logins.
+     * - `confidence-score` policy prompts with MFA only for low confidence logins.
+     *
+     * **Note**: The `confidence-score` policy is part of the [Adaptive MFA feature](https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa). Adaptive MFA requires an add-on for the Enterprise plan; review [Auth0 Pricing](https://auth0.com/pricing) for more details.
      *
      * @param {PoliciesClient.RequestOptions} requestOptions - Request-specific configuration.
      *
@@ -33,15 +32,14 @@ export declare class PoliciesClient {
     list(requestOptions?: PoliciesClient.RequestOptions): core.HttpResponsePromise<Management.ListGuardianPoliciesResponseContent>;
     private __list;
     /**
-     * Set <a href="https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa">multi-factor authentication (MFA) policies</a> for your tenant.
+     * Set [multi-factor authentication (MFA) policies](https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa) for your tenant.
      *
      * The following policies are supported:
-     * <ul>
-     * <li><code>all-applications</code> policy prompts with MFA for all logins.</li>
-     * <li><code>confidence-score</code> policy prompts with MFA only for low confidence logins.</li>
-     * </ul>
      *
-     * <b>Note</b>: The <code>confidence-score</code> policy is part of the <a href="https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa">Adaptive MFA feature</a>. Adaptive MFA requires an add-on for the Enterprise plan; review <a href="https://auth0.com/pricing">Auth0 Pricing</a> for more details.
+     * - `all-applications` policy prompts with MFA for all logins.
+     * - `confidence-score` policy prompts with MFA only for low confidence logins.
+     *
+     * **Note**: The `confidence-score` policy is part of the [Adaptive MFA feature](https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa). Adaptive MFA requires an add-on for the Enterprise plan; review [Auth0 Pricing](https://auth0.com/pricing) for more details.
      *
      * @param {Management.SetGuardianPoliciesRequestContent} request
      * @param {PoliciesClient.RequestOptions} requestOptions - Request-specific configuration.