auth0 7.4.0-beta.2 → 7.4.0

package/dist/cjs/management/api/requests/requests.d.ts

@@ -341,6 +341,7 @@ export interface CreateClientRequestContent {
     resource_server_identifier?: string;
     identity_assertion_authorization_grant?: Management.CreateIdentityAssertionAuthorizationGrant;
     anonymous_sessions?: Management.CreateAnonymousSessions;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
     express_configuration?: Management.ExpressConfiguration;
@@ -469,6 +470,7 @@ export interface UpdateClientRequestContent {
     token_quota?: Management.UpdateTokenQuota | null;
     identity_assertion_authorization_grant?: Management.UpdateIdentityAssertionAuthorizationGrant | null;
     anonymous_sessions?: Management.UpdateAnonymousSessions | null;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum;
     /** Form template for WS-Federation protocol */
     form_template?: string;
     addons?: Management.ClientAddons;
@@ -1049,7 +1051,7 @@ export interface ListGroupsRequestParameters {
     fields?: string | null;
     /** Whether specified fields are to be included (true) or excluded (false). */
     include_fields?: boolean | null;
-    /** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). */
+    /** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). The returned total reflects at most 1,000 results. */
     include_totals?: boolean | null;
     /** Optional Id from which to start selection. */
     from?: string | null;
@@ -1604,8 +1606,8 @@ export interface ListRolesRequestParameters {
     name_filter?: string | null;
     /** Optional filter on the type of the role */
     type?: Management.RoleTypeEnum | null;
-    /** Filter organization-level roles by owner ID. Required when type is "organization". */
-    owner_id?: string | null;
+    /** Filter organization-level roles by owner ID. Use an organization ID to filter that organization's roles, or "auth0" to retrieve Auth0-managed System Roles. Required when type is "organization". */
+    owner_id?: Management.RoleOwnerIdFilter | null;
 }
 /**
  * @example
@@ -2923,6 +2925,7 @@ export interface UpdateExperimentRequestParameters {
     default_config?: Management.DefaultConfigEnum;
     /** Ramp experiment levels configuration. A strictly-increasing sequence of exposure percentages, each an integer in [0, 100]. Can only be modified on draft experiments. */
     levels?: number[];
+    status?: Management.ExperimentTransitionStatusEnum;
 }
 /**
  * @example
@@ -2934,15 +2937,6 @@ export interface AdvanceRampRequestContent {
     /** The target percentage level from the experiment schedule. Must be the immediate next level. */
     target_level: number;
 }
-/**
- * @example
- *     {
- *         status: "active"
- *     }
- */
-export interface UpdateExperimentStatusRequestContent {
-    status: Management.ExperimentTransitionStatusEnum;
-}
 /**
  * @example
  *     {
@@ -2986,16 +2980,8 @@ export interface UpdateFeatureFlagRequestContent {
     /** A description of what this feature flag controls */
     description?: string | null;
     parameters?: Management.UpdateFeatureFlagParameters;
-}
-/**
- * @example
- *     {
- *         status: "draft"
- *     }
- */
-export interface UpdateFeatureFlagStatusRequestContent {
-    /** The target status to transition the feature flag to. */
-    status: Management.FeatureFlagStatusEnum;
+    /** Target lifecycle status (draft → active, draft → archived, active → archived). Activating a flag requires at least 2 variations. When combined with field edits, the edits and the transition are applied together; if the transition is rejected, no edits are applied. */
+    status?: Management.FeatureFlagStatusEnum;
 }
 /**
  * @example
@@ -3039,6 +3025,8 @@ export interface UpdateSegmentRequestContent {
     description?: string | null;
     /** Replaces the entire rules array. Each rule is limited to 4KB and the whole segment to 10KB (serialized). */
     rules?: Management.SegmentRule[];
+    /** Target lifecycle status. Archiving removes the segment from the active pool and is terminal (an archived segment cannot return to active). When combined with field edits, the edits apply first and the transition follows. */
+    status?: Management.SegmentStatusEnum;
 }
 /**
  * @example
@@ -4259,6 +4247,8 @@ export interface UpdateTenantSettingsRequestContent {
     pushed_authorization_requests_supported?: boolean | null;
     /** Supports iss parameter in authorization responses */
     authorization_response_iss_parameter_supported?: boolean | null;
+    /** Enables strict DPoP refresh token binding per RFC 9449: all refresh tokens issued to public clients that present a DPoP proof are bound to the sender's key, and the binding is validated on every subsequent exchange. When disabled, DPoP refresh token binding may still apply for specific audiences for backwards compatibility. */
+    dpop_strict_refresh_token_binding?: boolean | null;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
      * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.

package/dist/cjs/management/api/resources/clients/client/Client.d.ts

@@ -141,6 +141,7 @@ export declare class ClientsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.ConflictError}
      * @throws {@link Management.TooManyRequestsError}
      * @throws {@link Management.InternalServerError}
      *

package/dist/cjs/management/api/resources/clients/client/Client.js

@@ -367,6 +367,7 @@ class ClientsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.ConflictError}
      * @throws {@link Management.TooManyRequestsError}
      * @throws {@link Management.InternalServerError}
      *
@@ -411,6 +412,8 @@ class ClientsClient {
                         throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                     case 403:
                         throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 409:
+                        throw new Management.ConflictError(_response.error.body, _response.rawResponse);
                     case 429:
                         throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                     case 500:

package/dist/cjs/management/api/resources/experimentation/resources/experiments/client/Client.d.ts

@@ -126,28 +126,6 @@ export declare class ExperimentsClient {
      */
     advanceRamp(id: string, request: Management.AdvanceRampRequestContent, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.AdvanceRampResponseContent>;
     private __advanceRamp;
-    /**
-     * Transitions an experiment through its lifecycle: draft → active, active → paused, paused → active, active/paused → completed. Activation runs full readiness validation.
-     *
-     * @param {string} id - The ID of the experiment to transition.
-     * @param {Management.UpdateExperimentStatusRequestContent} request
-     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link Management.BadRequestError}
-     * @throws {@link Management.UnauthorizedError}
-     * @throws {@link Management.ForbiddenError}
-     * @throws {@link Management.NotFoundError}
-     * @throws {@link Management.ConflictError}
-     * @throws {@link Management.UnprocessableEntityError}
-     * @throws {@link Management.TooManyRequestsError}
-     *
-     * @example
-     *     await client.experimentation.experiments.updateStatus("id", {
-     *         status: "active"
-     *     })
-     */
-    updateStatus(id: string, request: Management.UpdateExperimentStatusRequestContent, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateExperimentStatusResponseContent>;
-    private __updateStatus;
     /**
      * Checks whether an experiment is ready to be activated. Returns is_valid boolean and an errors array describing any blockers. Read-only; no state is modified.
      *

package/dist/cjs/management/api/resources/experimentation/resources/experiments/client/Client.js

@@ -477,81 +477,6 @@ class ExperimentsClient {
             return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/experimentation/experiments/{id}/advance-ramp");
         });
     }
-    /**
-     * Transitions an experiment through its lifecycle: draft → active, active → paused, paused → active, active/paused → completed. Activation runs full readiness validation.
-     *
-     * @param {string} id - The ID of the experiment to transition.
-     * @param {Management.UpdateExperimentStatusRequestContent} request
-     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link Management.BadRequestError}
-     * @throws {@link Management.UnauthorizedError}
-     * @throws {@link Management.ForbiddenError}
-     * @throws {@link Management.NotFoundError}
-     * @throws {@link Management.ConflictError}
-     * @throws {@link Management.UnprocessableEntityError}
-     * @throws {@link Management.TooManyRequestsError}
-     *
-     * @example
-     *     await client.experimentation.experiments.updateStatus("id", {
-     *         status: "active"
-     *     })
-     */
-    updateStatus(id, request, requestOptions) {
-        return core.HttpResponsePromise.fromPromise(this.__updateStatus(id, request, requestOptions));
-    }
-    __updateStatus(id, request, requestOptions) {
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
-            const _authRequest = yield this._options.authProvider.getAuthRequest();
-            let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
-            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
-                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `experimentation/experiments/${core.url.encodePathParam(id)}/status`),
-                method: "POST",
-                headers: _headers,
-                contentType: "application/json",
-                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
-                requestType: "json",
-                body: request,
-                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
-                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
-                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
-                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
-                logging: this._options.logging,
-            });
-            if (_response.ok) {
-                return {
-                    data: _response.body,
-                    rawResponse: _response.rawResponse,
-                };
-            }
-            if (_response.error.reason === "status-code") {
-                switch (_response.error.statusCode) {
-                    case 400:
-                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
-                    case 401:
-                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
-                    case 403:
-                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
-                    case 404:
-                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
-                    case 409:
-                        throw new Management.ConflictError(_response.error.body, _response.rawResponse);
-                    case 422:
-                        throw new Management.UnprocessableEntityError(_response.error.body, _response.rawResponse);
-                    case 429:
-                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
-                    default:
-                        throw new errors.ManagementError({
-                            statusCode: _response.error.statusCode,
-                            body: _response.error.body,
-                            rawResponse: _response.rawResponse,
-                        });
-                }
-            }
-            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/experimentation/experiments/{id}/status");
-        });
-    }
     /**
      * Checks whether an experiment is ready to be activated. Returns is_valid boolean and an errors array describing any blockers. Read-only; no state is modified.
      *

package/dist/cjs/management/api/resources/experimentation/resources/featureFlags/client/Client.d.ts

@@ -103,24 +103,4 @@ export declare class FeatureFlagsClient {
      */
     update(id: string, request?: Management.UpdateFeatureFlagRequestContent, requestOptions?: FeatureFlagsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateFeatureFlagResponseContent>;
     private __update;
-    /**
-     * Transitions a feature flag through its lifecycle states: draft → active, draft → archived, active → archived.
-     *
-     * @param {string} id - The ID of the feature flag to transition.
-     * @param {Management.UpdateFeatureFlagStatusRequestContent} request
-     * @param {FeatureFlagsClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link Management.BadRequestError}
-     * @throws {@link Management.UnauthorizedError}
-     * @throws {@link Management.ForbiddenError}
-     * @throws {@link Management.NotFoundError}
-     * @throws {@link Management.TooManyRequestsError}
-     *
-     * @example
-     *     await client.experimentation.featureFlags.updateStatus("id", {
-     *         status: "draft"
-     *     })
-     */
-    updateStatus(id: string, request: Management.UpdateFeatureFlagStatusRequestContent, requestOptions?: FeatureFlagsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateFeatureFlagStatusResponseContent>;
-    private __updateStatus;
 }

package/dist/cjs/management/api/resources/experimentation/resources/featureFlags/client/Client.js

@@ -398,74 +398,5 @@ class FeatureFlagsClient {
             return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "PATCH", "/experimentation/feature-flags/{id}");
         });
     }
-    /**
-     * Transitions a feature flag through its lifecycle states: draft → active, draft → archived, active → archived.
-     *
-     * @param {string} id - The ID of the feature flag to transition.
-     * @param {Management.UpdateFeatureFlagStatusRequestContent} request
-     * @param {FeatureFlagsClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link Management.BadRequestError}
-     * @throws {@link Management.UnauthorizedError}
-     * @throws {@link Management.ForbiddenError}
-     * @throws {@link Management.NotFoundError}
-     * @throws {@link Management.TooManyRequestsError}
-     *
-     * @example
-     *     await client.experimentation.featureFlags.updateStatus("id", {
-     *         status: "draft"
-     *     })
-     */
-    updateStatus(id, request, requestOptions) {
-        return core.HttpResponsePromise.fromPromise(this.__updateStatus(id, request, requestOptions));
-    }
-    __updateStatus(id, request, requestOptions) {
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
-            const _authRequest = yield this._options.authProvider.getAuthRequest();
-            let _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
-            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
-                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `experimentation/feature-flags/${core.url.encodePathParam(id)}/status`),
-                method: "POST",
-                headers: _headers,
-                contentType: "application/json",
-                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
-                requestType: "json",
-                body: request,
-                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
-                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
-                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
-                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
-                logging: this._options.logging,
-            });
-            if (_response.ok) {
-                return {
-                    data: _response.body,
-                    rawResponse: _response.rawResponse,
-                };
-            }
-            if (_response.error.reason === "status-code") {
-                switch (_response.error.statusCode) {
-                    case 400:
-                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
-                    case 401:
-                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
-                    case 403:
-                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
-                    case 404:
-                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
-                    case 429:
-                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
-                    default:
-                        throw new errors.ManagementError({
-                            statusCode: _response.error.statusCode,
-                            body: _response.error.body,
-                            rawResponse: _response.rawResponse,
-                        });
-                }
-            }
-            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/experimentation/feature-flags/{id}/status");
-        });
-    }
 }
 exports.FeatureFlagsClient = FeatureFlagsClient;

package/dist/cjs/management/api/resources/experimentation/resources/featureFlags/resources/variations/client/Client.d.ts

@@ -75,7 +75,6 @@ export declare class VariationsClient {
      * @param {string} vid - The ID of the variation to delete.
      * @param {VariationsClient.RequestOptions} requestOptions - Request-specific configuration.
      *
-     * @throws {@link Management.BadRequestError}
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.NotFoundError}
      * @throws {@link Management.ConflictError}

package/dist/cjs/management/api/resources/experimentation/resources/featureFlags/resources/variations/client/Client.js

@@ -261,7 +261,6 @@ class VariationsClient {
      * @param {string} vid - The ID of the variation to delete.
      * @param {VariationsClient.RequestOptions} requestOptions - Request-specific configuration.
      *
-     * @throws {@link Management.BadRequestError}
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.NotFoundError}
      * @throws {@link Management.ConflictError}
@@ -294,8 +293,6 @@ class VariationsClient {
             }
             if (_response.error.reason === "status-code") {
                 switch (_response.error.statusCode) {
-                    case 400:
-                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
                     case 403:
                         throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
                     case 404:

package/dist/cjs/management/api/resources/roles/client/Client.d.ts

@@ -20,7 +20,7 @@ export declare class RolesClient {
     get permissions(): PermissionsClient;
     get users(): UsersClient;
     /**
-     * Retrieve detailed list of user roles created in your tenant.
+     * Retrieve a list of roles. Includes roles created in your tenant and, when `owner_id=auth0` is supplied, Auth0-managed System Roles.
      *
      * **Note**: The returned list does not include standard roles available for tenant members, such as Admin or Support Access.
      *

package/dist/cjs/management/api/resources/roles/client/Client.js

@@ -71,7 +71,7 @@ class RolesClient {
         return ((_a = this._users) !== null && _a !== void 0 ? _a : (this._users = new Client_js_3.UsersClient(this._options)));
     }
     /**
-     * Retrieve detailed list of user roles created in your tenant.
+     * Retrieve a list of roles. Includes roles created in your tenant and, when `owner_id=auth0` is supplied, Auth0-managed System Roles.
      *
      * **Note**: The returned list does not include standard roles available for tenant members, such as Admin or Support Access.
      *