auth0 6.2.0 → 6.3.0

package/dist/esm/management/api/types/types.d.mts

@@ -732,27 +732,33 @@ export declare const OauthScope: {
     /**
      * Delete Organization Client Associations */
     readonly DeleteOrganizationClients: "delete:organization_clients";
+    /**
+     * Create Network ACL Keys */
+    readonly CreateNetworkAclKeys: "create:network_acl_keys";
+    /**
+     * Read Network ACL Keys */
+    readonly ReadNetworkAclKeys: "read:network_acl_keys";
 };
 export type OauthScope = (typeof OauthScope)[keyof typeof OauthScope];
-export interface TooManyRequestsErrorBody {
+export interface NotFoundErrorBody {
     message: string;
     statusCode: string;
-    error: TooManyRequestsErrorBody.Error_;
+    error: NotFoundErrorBody.Error_;
 }
-export declare namespace TooManyRequestsErrorBody {
+export declare namespace NotFoundErrorBody {
     const Error_: {
-        readonly TooManyRequests: "Too Many Requests";
+        readonly NotFound: "Not Found";
     };
     type Error_ = (typeof Error_)[keyof typeof Error_];
 }
-export interface NotFoundErrorBody {
+export interface TooManyRequestsErrorBody {
     message: string;
     statusCode: string;
-    error: NotFoundErrorBody.Error_;
+    error: TooManyRequestsErrorBody.Error_;
 }
-export declare namespace NotFoundErrorBody {
+export declare namespace TooManyRequestsErrorBody {
     const Error_: {
-        readonly NotFound: "Not Found";
+        readonly TooManyRequests: "Too Many Requests";
     };
     type Error_ = (typeof Error_)[keyof typeof Error_];
 }
@@ -2722,6 +2728,17 @@ export declare const ClientMyOrganizationConfigurationAllowedStrategiesEnum: {
     readonly Samlp: "samlp";
 };
 export type ClientMyOrganizationConfigurationAllowedStrategiesEnum = (typeof ClientMyOrganizationConfigurationAllowedStrategiesEnum)[keyof typeof ClientMyOrganizationConfigurationAllowedStrategiesEnum];
+/** A valid third-party client access value for the My Organization Configuration. */
+export declare const ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum: {
+    readonly Allow: "allow";
+    readonly Block: "block";
+};
+export type ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum = (typeof ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum)[keyof typeof ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum];
+/** The default third-party client access value for the My Organization Configuration. */
+export declare const ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum: {
+    readonly Block: "block";
+};
+export type ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum = (typeof ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum)[keyof typeof ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum];
 /** The deletion behavior for this client. */
 export declare const ClientMyOrganizationDeletionBehaviorEnum: {
     readonly Allow: "allow";
@@ -2738,6 +2755,7 @@ export interface ClientMyOrganizationPatchConfiguration {
     user_attribute_profile_id?: string | undefined;
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
+    third_party_client_access?: Management.ClientMyOrganizationThirdPartyClientAccessConfiguration | undefined;
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
@@ -2752,6 +2770,7 @@ export interface ClientMyOrganizationPostConfiguration {
     user_attribute_profile_id?: string | undefined;
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
+    third_party_client_access?: Management.ClientMyOrganizationThirdPartyClientAccessConfiguration | undefined;
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
@@ -2766,10 +2785,19 @@ export interface ClientMyOrganizationResponseConfiguration {
     user_attribute_profile_id?: string | undefined;
     /** The allowed connection strategies for the My Organization Configuration. */
     allowed_strategies: Management.ClientMyOrganizationConfigurationAllowedStrategiesEnum[];
+    third_party_client_access?: Management.ClientMyOrganizationThirdPartyClientAccessConfiguration | undefined;
     connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
     /** The client ID this client uses while creating invitations through My Organization API. */
     invitation_landing_client_id?: string | undefined;
 }
+/**
+ * The third-party client access configuration for the My Organization Configuration.
+ */
+export interface ClientMyOrganizationThirdPartyClientAccessConfiguration {
+    default_value: Management.ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum;
+    /** The allowed third-party client access values for the My Organization Configuration. */
+    allowed_values: Management.ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum[];
+}
 /**
  * Configuration for OIDC backchannel logout initiators
  */
@@ -4349,6 +4377,7 @@ export interface ConnectionOptionsCommonOidc {
     token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
     upstream_params?: ((Management.ConnectionUpstreamParams | undefined) | null) | undefined;
     userinfo_endpoint?: Management.ConnectionUserinfoEndpoint | undefined;
+    useOauthSpecScope?: Management.ConnectionUseOauthSpecScope | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -5470,6 +5499,7 @@ export interface ConnectionProfile {
     enabled_features?: Management.ConnectionProfileEnabledFeatures | undefined;
     connection_config?: Management.ConnectionProfileConfig | undefined;
     strategy_overrides?: Management.ConnectionProfileStrategyOverrides | undefined;
+    cross_app_access_resource_app?: Management.ConnectionProfileCrossAppAccessResourceApp | undefined;
 }
 /**
  * `profile` is a boolean that controls whether basic profile information (name, picture, email) is requested from Bitbucket during authentication. When `true`, the connection requests access to the user's basic profile data.
@@ -5480,6 +5510,35 @@ export type ConnectionProfileBitbucket = boolean;
  */
 export interface ConnectionProfileConfig {
 }
+/**
+ * Controls whether organization admins may enable Cross App Access (XAA) on their Identity Providers.
+ */
+export interface ConnectionProfileCrossAppAccessResourceApp {
+    status: Management.ConnectionProfileCrossAppAccessResourceAppStatus;
+}
+/**
+ * The Cross App Access resource app status configuration.
+ */
+export interface ConnectionProfileCrossAppAccessResourceAppStatus {
+    default_value: Management.ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum;
+    allowed_values?: Management.ConnectionProfileCrossAppAccessResourceAppStatusAllowedValuesEnum | undefined;
+}
+/**
+ * The allowed Cross App Access resource app status values.
+ */
+export type ConnectionProfileCrossAppAccessResourceAppStatusAllowedValuesEnum = Management.ConnectionProfileCrossAppAccessResourceAppStatusValueEnum[];
+/** The default Cross App Access resource app status. */
+export declare const ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum: {
+    readonly Enabled: "enabled";
+    readonly Disabled: "disabled";
+};
+export type ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum = (typeof ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum)[keyof typeof ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum];
+/** A Cross App Access resource app status value. */
+export declare const ConnectionProfileCrossAppAccessResourceAppStatusValueEnum: {
+    readonly Enabled: "enabled";
+    readonly Disabled: "disabled";
+};
+export type ConnectionProfileCrossAppAccessResourceAppStatusValueEnum = (typeof ConnectionProfileCrossAppAccessResourceAppStatusValueEnum)[keyof typeof ConnectionProfileCrossAppAccessResourceAppStatusValueEnum];
 /**
  * Enabled features for the connection profile.
  */
@@ -5607,6 +5666,7 @@ export interface ConnectionPropertiesOptions {
     token_endpoint_auth_signing_alg?: (Management.ConnectionTokenEndpointAuthSigningAlgEnum | null) | undefined;
     token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
     id_token_session_expiry_supported?: Management.ConnectionIdTokenSessionExpirySupported | undefined;
+    useOauthSpecScope?: Management.ConnectionUseOauthSpecScope | undefined;
     discovery_url?: ((Management.ConnectionsDiscoveryUrl | undefined) | null) | undefined;
     oidc_metadata?: (Management.ConnectionsOidcMetadata | null) | undefined;
     /** Accepts any additional properties */
@@ -6858,6 +6918,10 @@ export interface ConnectionUpstreamValue {
  * When enabled (true), uses the Azure AD common endpoint for multi-tenant authentication. Allows users from any Azure AD organization to sign in. Requires userid_attribute set to 'sub' (not 'oid'). Cannot be used with SCIM provisioning. Defaults to false.
  */
 export type ConnectionUseCommonEndpointAzureAd = boolean;
+/**
+ * When true, uses space-delimited scopes (per OAuth 2.0 spec) instead of comma-delimited when calling the identity provider's authorization endpoint. Only relevant when using the connection_scope parameter. See https://auth0.com/docs/authenticate/identity-providers/adding-scopes-for-an-external-idp#pass-scopes-to-authorize-endpoint
+ */
+export type ConnectionUseOauthSpecScope = boolean;
 /**
  * The URL of the OAuth 1.0a user-authorization endpoint. This endpoint is used to redirect users to the provider's site to authorize the temporary request token obtained from the request-token endpoint during the OAuth 1.0a authentication flow.
  */
@@ -7264,6 +7328,7 @@ export interface CreateConnectionProfileResponseContent {
     enabled_features?: Management.ConnectionProfileEnabledFeatures | undefined;
     connection_config?: Management.ConnectionProfileConfig | undefined;
     strategy_overrides?: Management.ConnectionProfileStrategyOverrides | undefined;
+    cross_app_access_resource_app?: Management.ConnectionProfileCrossAppAccessResourceApp | undefined;
 }
 /**
  * Create a connection with strategy=ad
@@ -8611,6 +8676,19 @@ export interface CreateImportUsersResponseContent {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export interface CreateKeysNetworkAclsResponseContent {
+    /** Auth0-generated identifier for the key. Used to reference the key from a Network ACL and to identify it in Tenant Logs. */
+    id: string;
+    /** Customer-supplied label with no cryptographic meaning. */
+    name: string;
+    alg: Management.NetworkAclKeyAlgorithmEnum;
+    /** Fingerprint of the key material, determined by the algorithm specified. Currently only HMAC-SHA256 is supported. */
+    fingerprint: string;
+    /** Time when the key was created. */
+    created_at: string;
+    /** Time when the key was last updated. */
+    updated_at: string;
+}
 export interface CreateLogStreamDatadogRequestBody {
     /** log stream name */
     name?: string | undefined;
@@ -17962,7 +18040,7 @@ export declare namespace FlowActionFlowMapValue {
 export interface FlowActionFlowMapValueParams {
     input: Management.FlowActionFlowMapValueParamsInput;
     cases?: Management.FlowActionFlowMapValueParamsCases | undefined;
-    fallback?: Management.FlowActionFlowMapValueParamsFallback | undefined;
+    fallback?: (Management.FlowActionFlowMapValueParamsFallback | null) | undefined;
 }
 export type FlowActionFlowMapValueParamsCases = Record<string, unknown>;
 export type FlowActionFlowMapValueParamsFallback = string | number | Management.FlowActionFlowMapValueParamsFallbackObject | unknown[];
@@ -20342,6 +20420,10 @@ export interface GetAculResponseContent {
     /** Accepts any additional properties */
     [key: string]: any;
 }
+export interface GetAllKeysNetworkAclsResponseContent {
+    /** The tenant's Network ACL Keys. */
+    keys: Management.NetworkAclKey[];
+}
 export interface GetAttackProtectionCaptchaResponseContent {
     active_provider_id?: string | undefined;
     arkose?: Management.AttackProtectionCaptchaArkoseResponseContent | undefined;
@@ -20608,6 +20690,7 @@ export interface GetConnectionProfileResponseContent {
     enabled_features?: Management.ConnectionProfileEnabledFeatures | undefined;
     connection_config?: Management.ConnectionProfileConfig | undefined;
     strategy_overrides?: Management.ConnectionProfileStrategyOverrides | undefined;
+    cross_app_access_resource_app?: Management.ConnectionProfileCrossAppAccessResourceApp | undefined;
 }
 export interface GetConnectionProfileTemplateResponseContent {
     /** The id of the template. */
@@ -21265,9 +21348,9 @@ export interface GetRefreshTokenResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.RefreshTokenDate | undefined;
-    idle_expires_at?: Management.RefreshTokenDate | undefined;
-    expires_at?: Management.RefreshTokenDate | undefined;
+    created_at?: (Management.RefreshTokenDate | null) | undefined;
+    idle_expires_at?: (Management.RefreshTokenDate | null) | undefined;
+    expires_at?: (Management.RefreshTokenDate | null) | undefined;
     device?: Management.RefreshTokenDevice | undefined;
     /** ID of the client application granted with this refresh token */
     client_id?: string | undefined;
@@ -21277,7 +21360,7 @@ export interface GetRefreshTokenResponseContent {
     /** A list of the resource server IDs associated to this refresh-token and their granted scopes */
     resource_servers?: Management.RefreshTokenResourceServer[] | undefined;
     refresh_token_metadata?: ((Management.RefreshTokenMetadata | undefined) | null) | undefined;
-    last_exchanged_at?: Management.RefreshTokenDate | undefined;
+    last_exchanged_at?: (Management.RefreshTokenDate | null) | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -21409,12 +21492,12 @@ export interface GetSessionResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.SessionDate | undefined;
-    updated_at?: Management.SessionDate | undefined;
-    authenticated_at?: Management.SessionDate | undefined;
-    idle_expires_at?: Management.SessionDate | undefined;
-    expires_at?: Management.SessionDate | undefined;
-    last_interacted_at?: Management.SessionDate | undefined;
+    created_at?: (Management.SessionDate | null) | undefined;
+    updated_at?: (Management.SessionDate | null) | undefined;
+    authenticated_at?: (Management.SessionDate | null) | undefined;
+    idle_expires_at?: (Management.SessionDate | null) | undefined;
+    expires_at?: (Management.SessionDate | null) | undefined;
+    last_interacted_at?: (Management.SessionDate | null) | undefined;
     device?: Management.SessionDeviceMetadata | undefined;
     /** List of client details for the session */
     clients?: Management.SessionClientMetadata[] | undefined;
@@ -23169,6 +23252,24 @@ export type NetworkAclActionLogEnum = boolean;
  * Indicates the rule will redirect requests that either match or not_match specific criteria
  */
 export type NetworkAclActionRedirectEnum = boolean;
+export interface NetworkAclKey {
+    /** Generated identifier for the key. Used to reference the key from a Network ACL and to identify it in Tenant Logs. */
+    id: string;
+    /** User supplied label for the key. */
+    name: string;
+    alg: Management.NetworkAclKeyAlgorithmEnum;
+    /** Fingerprint of the key material, determined by the algorithm specified. Currently only HMAC-SHA256 is supported. */
+    fingerprint: string;
+    /** Time when the key was created. */
+    created_at: string;
+    /** Time when the key was last updated. */
+    updated_at: string;
+}
+/** Signing algorithm used to verify the signature. Currently only HMAC-SHA256 is supported. */
+export declare const NetworkAclKeyAlgorithmEnum: {
+    readonly HmacSha256: "hmac-sha256";
+};
+export type NetworkAclKeyAlgorithmEnum = (typeof NetworkAclKeyAlgorithmEnum)[keyof typeof NetworkAclKeyAlgorithmEnum];
 export interface NetworkAclMatch {
     asns?: number[] | undefined;
     auth0_managed?: string[] | undefined;
@@ -23187,8 +23288,13 @@ export interface NetworkAclRule {
     action: Management.NetworkAclAction;
     match?: Management.NetworkAclMatch | undefined;
     not_match?: Management.NetworkAclMatch | undefined;
+    match_all?: Management.NetworkAclRuleMatchAllEnum | undefined;
     scope: Management.NetworkAclRuleScopeEnum;
 }
+/**
+ * When true, the rule unconditionally matches all traffic regardless of any other signals. Mutually exclusive with `match` and `not_match`.
+ */
+export type NetworkAclRuleMatchAllEnum = boolean;
 /** Identifies the origin of the request as the Management API (management), Authentication API (authentication), Dynamic Client Registration API (dynamic_client_registration), or any (tenant) */
 export declare const NetworkAclRuleScopeEnum: {
     readonly Management: "management";
@@ -23992,9 +24098,9 @@ export interface RefreshTokenResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.RefreshTokenDate | undefined;
-    idle_expires_at?: Management.RefreshTokenDate | undefined;
-    expires_at?: Management.RefreshTokenDate | undefined;
+    created_at?: (Management.RefreshTokenDate | null) | undefined;
+    idle_expires_at?: (Management.RefreshTokenDate | null) | undefined;
+    expires_at?: (Management.RefreshTokenDate | null) | undefined;
     device?: Management.RefreshTokenDevice | undefined;
     /** ID of the client application granted with this refresh token */
     client_id?: string | undefined;
@@ -24004,7 +24110,7 @@ export interface RefreshTokenResponseContent {
     /** A list of the resource server IDs associated to this refresh-token and their granted scopes */
     resource_servers?: Management.RefreshTokenResourceServer[] | undefined;
     refresh_token_metadata?: ((Management.RefreshTokenMetadata | undefined) | null) | undefined;
-    last_exchanged_at?: Management.RefreshTokenDate | undefined;
+    last_exchanged_at?: (Management.RefreshTokenDate | null) | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -24800,7 +24906,7 @@ export interface SessionActorMetadata {
 export interface SessionAuthenticationSignal {
     /** One of: "federated", "passkey", "pwd", "sms", "email", "mfa", "mock" or a custom method denoted by a URL */
     name?: string | undefined;
-    timestamp?: Management.SessionDate | undefined;
+    timestamp?: (Management.SessionDate | null) | undefined;
     /** A specific MFA factor. Only present when "name" is set to "mfa" */
     type?: string | undefined;
     /** Accepts any additional properties */
@@ -24887,12 +24993,12 @@ export interface SessionResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.SessionDate | undefined;
-    updated_at?: Management.SessionDate | undefined;
-    authenticated_at?: Management.SessionDate | undefined;
-    idle_expires_at?: Management.SessionDate | undefined;
-    expires_at?: Management.SessionDate | undefined;
-    last_interacted_at?: Management.SessionDate | undefined;
+    created_at?: (Management.SessionDate | null) | undefined;
+    updated_at?: (Management.SessionDate | null) | undefined;
+    authenticated_at?: (Management.SessionDate | null) | undefined;
+    idle_expires_at?: (Management.SessionDate | null) | undefined;
+    expires_at?: (Management.SessionDate | null) | undefined;
+    last_interacted_at?: (Management.SessionDate | null) | undefined;
     device?: Management.SessionDeviceMetadata | undefined;
     /** List of client details for the session */
     clients?: Management.SessionClientMetadata[] | undefined;
@@ -26028,6 +26134,7 @@ export interface UpdateConnectionOptions {
     token_endpoint_auth_signing_alg?: (Management.ConnectionTokenEndpointAuthSigningAlgEnum | null) | undefined;
     token_endpoint_jwtca_aud_format?: Management.ConnectionTokenEndpointJwtcaAudFormatEnumOidc | undefined;
     id_token_session_expiry_supported?: Management.ConnectionIdTokenSessionExpirySupported | undefined;
+    useOauthSpecScope?: Management.ConnectionUseOauthSpecScope | undefined;
     discovery_url?: ((Management.ConnectionsDiscoveryUrl | undefined) | null) | undefined;
     oidc_metadata?: (Management.ConnectionsOidcMetadata | null) | undefined;
     /** Accepts any additional properties */
@@ -26041,6 +26148,7 @@ export interface UpdateConnectionProfileResponseContent {
     enabled_features?: Management.ConnectionProfileEnabledFeatures | undefined;
     connection_config?: Management.ConnectionProfileConfig | undefined;
     strategy_overrides?: Management.ConnectionProfileStrategyOverrides | undefined;
+    cross_app_access_resource_app?: Management.ConnectionProfileCrossAppAccessResourceApp | undefined;
 }
 /**
  * Update a connection with strategy=ad
@@ -26730,9 +26838,9 @@ export interface UpdateRefreshTokenResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.RefreshTokenDate | undefined;
-    idle_expires_at?: Management.RefreshTokenDate | undefined;
-    expires_at?: Management.RefreshTokenDate | undefined;
+    created_at?: (Management.RefreshTokenDate | null) | undefined;
+    idle_expires_at?: (Management.RefreshTokenDate | null) | undefined;
+    expires_at?: (Management.RefreshTokenDate | null) | undefined;
     device?: Management.RefreshTokenDevice | undefined;
     /** ID of the client application granted with this refresh token */
     client_id?: string | undefined;
@@ -26742,7 +26850,7 @@ export interface UpdateRefreshTokenResponseContent {
     /** A list of the resource server IDs associated to this refresh-token and their granted scopes */
     resource_servers?: Management.RefreshTokenResourceServer[] | undefined;
     refresh_token_metadata?: ((Management.RefreshTokenMetadata | undefined) | null) | undefined;
-    last_exchanged_at?: Management.RefreshTokenDate | undefined;
+    last_exchanged_at?: (Management.RefreshTokenDate | null) | undefined;
     /** Accepts any additional properties */
     [key: string]: any;
 }
@@ -26859,12 +26967,12 @@ export interface UpdateSessionResponseContent {
     id?: string | undefined;
     /** ID of the user which can be used when interacting with other APIs. */
     user_id?: string | undefined;
-    created_at?: Management.SessionDate | undefined;
-    updated_at?: Management.SessionDate | undefined;
-    authenticated_at?: Management.SessionDate | undefined;
-    idle_expires_at?: Management.SessionDate | undefined;
-    expires_at?: Management.SessionDate | undefined;
-    last_interacted_at?: Management.SessionDate | undefined;
+    created_at?: (Management.SessionDate | null) | undefined;
+    updated_at?: (Management.SessionDate | null) | undefined;
+    authenticated_at?: (Management.SessionDate | null) | undefined;
+    idle_expires_at?: (Management.SessionDate | null) | undefined;
+    expires_at?: (Management.SessionDate | null) | undefined;
+    last_interacted_at?: (Management.SessionDate | null) | undefined;
     device?: Management.SessionDeviceMetadata | undefined;
     /** List of client details for the session */
     clients?: Management.SessionClientMetadata[] | undefined;

package/dist/esm/management/api/types/types.mjs

@@ -732,19 +732,25 @@ export const OauthScope = {
     /**
      * Delete Organization Client Associations */
     DeleteOrganizationClients: "delete:organization_clients",
+    /**
+     * Create Network ACL Keys */
+    CreateNetworkAclKeys: "create:network_acl_keys",
+    /**
+     * Read Network ACL Keys */
+    ReadNetworkAclKeys: "read:network_acl_keys",
 };
-export var TooManyRequestsErrorBody;
-(function (TooManyRequestsErrorBody) {
-    TooManyRequestsErrorBody.Error_ = {
-        TooManyRequests: "Too Many Requests",
-    };
-})(TooManyRequestsErrorBody || (TooManyRequestsErrorBody = {}));
 export var NotFoundErrorBody;
 (function (NotFoundErrorBody) {
     NotFoundErrorBody.Error_ = {
         NotFound: "Not Found",
     };
 })(NotFoundErrorBody || (NotFoundErrorBody = {}));
+export var TooManyRequestsErrorBody;
+(function (TooManyRequestsErrorBody) {
+    TooManyRequestsErrorBody.Error_ = {
+        TooManyRequests: "Too Many Requests",
+    };
+})(TooManyRequestsErrorBody || (TooManyRequestsErrorBody = {}));
 /** How the action is being referred to: `action_id` or `action_name`. */
 export const ActionBindingRefTypeEnum = {
     BindingId: "binding_id",
@@ -1097,6 +1103,15 @@ export const ClientMyOrganizationConfigurationAllowedStrategiesEnum = {
     Oidc: "oidc",
     Samlp: "samlp",
 };
+/** A valid third-party client access value for the My Organization Configuration. */
+export const ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum = {
+    Allow: "allow",
+    Block: "block",
+};
+/** The default third-party client access value for the My Organization Configuration. */
+export const ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum = {
+    Block: "block",
+};
 /** The deletion behavior for this client. */
 export const ClientMyOrganizationDeletionBehaviorEnum = {
     Allow: "allow",
@@ -1358,6 +1373,16 @@ export const ConnectionPasswordPolicyEnum = {
     Good: "good",
     Excellent: "excellent",
 };
+/** The default Cross App Access resource app status. */
+export const ConnectionProfileCrossAppAccessResourceAppStatusDefaultValueEnum = {
+    Enabled: "enabled",
+    Disabled: "disabled",
+};
+/** A Cross App Access resource app status value. */
+export const ConnectionProfileCrossAppAccessResourceAppStatusValueEnum = {
+    Enabled: "enabled",
+    Disabled: "disabled",
+};
 /** Indicates if membership should be assigned on login. */
 export const ConnectionProfileOrganizationAssignMembershipOnLoginEnum = {
     None: "none",
@@ -5185,6 +5210,10 @@ export const MfaPolicyEnum = {
     AllApplications: "all-applications",
     ConfidenceScore: "confidence-score",
 };
+/** Signing algorithm used to verify the signature. Currently only HMAC-SHA256 is supported. */
+export const NetworkAclKeyAlgorithmEnum = {
+    HmacSha256: "hmac-sha256",
+};
 /** Identifies the origin of the request as the Management API (management), Authentication API (authentication), Dynamic Client Registration API (dynamic_client_registration), or any (tenant) */
 export const NetworkAclRuleScopeEnum = {
     Management: "management",

package/dist/esm/management/version.d.mts

@@ -1 +1 @@
-export declare const SDK_VERSION = "6.2.0";
+export declare const SDK_VERSION = "6.3.0";

package/dist/esm/management/version.mjs

@@ -1 +1 @@
-export const SDK_VERSION = "6.2.0";
+export const SDK_VERSION = "6.3.0";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth0",
-    "version": "6.2.0",
+    "version": "6.3.0",
     "private": false,
     "repository": {
         "type": "git",
@@ -1057,6 +1057,17 @@
             },
             "default": "./dist/cjs/management/api/resources/keys/resources/encryption/exports.js"
         },
+        "./keys/networkAcls": {
+            "import": {
+                "types": "./dist/esm/management/api/resources/keys/resources/networkAcls/exports.d.mts",
+                "default": "./dist/esm/management/api/resources/keys/resources/networkAcls/exports.mjs"
+            },
+            "require": {
+                "types": "./dist/cjs/management/api/resources/keys/resources/networkAcls/exports.d.ts",
+                "default": "./dist/cjs/management/api/resources/keys/resources/networkAcls/exports.js"
+            },
+            "default": "./dist/cjs/management/api/resources/keys/resources/networkAcls/exports.js"
+        },
         "./keys/signing": {
             "import": {
                 "types": "./dist/esm/management/api/resources/keys/resources/signing/exports.d.mts",