auth0 7.4.0-beta.2 → 7.5.0-beta.0

package/dist/cjs/management/api/requests/requests.d.ts

@@ -197,6 +197,34 @@ export interface CreateClientGrantRequestContent {
     /** If enabled, all scopes configured on the resource server are allowed for this grant. */
     allow_all_scopes?: boolean;
 }
+/**
+ * @example
+ *     {
+ *         q: "q",
+ *         parser: "scim",
+ *         fields: "fields",
+ *         include_fields: true,
+ *         take: 1,
+ *         from: "from",
+ *         sort: "audience"
+ *     }
+ */
+export interface SearchClientGrantsRequestParameters {
+    /** Filter expression in SCIM or Lucene syntax (depending on parser parameter). SCIM examples: `audience eq "https://api.example.com"`, `client_id eq "cli_abc"`, `subject_type eq "client"`, `allow_any_organization eq true`, `default_for eq "third_party_clients"`, `audience co "example" and organization_id eq "org_123"`. SCIM operators: eq, ne, sw, ew, co, pr, gt, ge, lt, le, and, or. <br /><br /><b>Supported Fields</b>:<ul><li><i>audience</i> - Filter by audience (eq, ne, sw, co, ew, pr)</li><li><i>client_id</i> - Filter by client ID (eq, ne, sw, pr)</li><li><i>subject_type</i> - Filter by subject type (eq, ne, sw, pr)</li><li><i>allow_any_organization</i> - Filter by allow_any_organization (eq, ne, pr)</li><li><i>organization_id</i> - Filter by organization ID (eq, ne, sw, pr)</li><li><i>updated_at</i> - Filter by last update date (eq, ne, gt, ge, lt, le, pr)</li><li><i>default_for</i> - Filter by default grant group (eq, ne, sw, pr)</li></ul>Maximum 5 filter operations per query. Results are eventually consistent and may not reflect recent updates. */
+    q?: string | null;
+    /** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+    parser?: Management.SearchParserEnum | null;
+    /** Comma-separated list of fields to include or exclude in the response. Works with the include_fields parameter to control projection mode. */
+    fields?: string | null;
+    /** Controls field projection mode. Set to true to include only fields specified in the fields parameter. Set to false to exclude fields specified in the fields parameter. Defaults to true if not specified. */
+    include_fields?: boolean | null;
+    /** Maximum number of results to return per page (1-100). Defaults to 50. */
+    take?: number | null;
+    /** Cursor for the next page of results. Use the value from the next field in the previous response. */
+    from?: string | null;
+    /** Field name to sort results by in ascending order. Defaults to insertion order (oldest first) if not provided. */
+    sort?: Management.ClientGrantSortFieldEnum | null;
+}
 /**
  * @example
  *     {}
@@ -341,6 +369,7 @@ export interface CreateClientRequestContent {
     resource_server_identifier?: string;
     identity_assertion_authorization_grant?: Management.CreateIdentityAssertionAuthorizationGrant;
     anonymous_sessions?: Management.CreateAnonymousSessions;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
     express_configuration?: Management.ExpressConfiguration;
@@ -469,6 +498,7 @@ export interface UpdateClientRequestContent {
     token_quota?: Management.UpdateTokenQuota | null;
     identity_assertion_authorization_grant?: Management.UpdateIdentityAssertionAuthorizationGrant | null;
     anonymous_sessions?: Management.UpdateAnonymousSessions | null;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum;
     /** Form template for WS-Federation protocol */
     form_template?: string;
     addons?: Management.ClientAddons;
@@ -1049,7 +1079,7 @@ export interface ListGroupsRequestParameters {
     fields?: string | null;
     /** Whether specified fields are to be included (true) or excluded (false). */
     include_fields?: boolean | null;
-    /** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). */
+    /** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). The returned total reflects at most 1,000 results. */
     include_totals?: boolean | null;
     /** Optional Id from which to start selection. */
     from?: string | null;
@@ -1604,8 +1634,8 @@ export interface ListRolesRequestParameters {
     name_filter?: string | null;
     /** Optional filter on the type of the role */
     type?: Management.RoleTypeEnum | null;
-    /** Filter organization-level roles by owner ID. Required when type is "organization". */
-    owner_id?: string | null;
+    /** Filter organization-level roles by owner ID. Use an organization ID to filter that organization's roles, or "auth0" to retrieve Auth0-managed System Roles. Required when type is "organization". */
+    owner_id?: Management.RoleOwnerIdFilter | null;
 }
 /**
  * @example
@@ -2301,6 +2331,39 @@ export interface UpdateAttackProtectionCaptchaRequestContent {
     recaptcha_v2?: Management.AttackProtectionUpdateCaptchaRecaptchaV2;
     simple_captcha?: Management.AttackProtectionCaptchaSimpleCaptchaResponseContent;
 }
+/**
+ * @example
+ *     {
+ *         name: "name",
+ *         priority: 1,
+ *         match: {},
+ *         action: {}
+ *     }
+ */
+export interface CreateAttackProtectionCaptchaPolicyRequestContent {
+    /** Human-readable policy name. */
+    name: string;
+    /** Description of the attack protection policy. */
+    description?: string;
+    /** Conflict resolution order. Lower number takes higher precedence. Must be unique per tenant. */
+    priority: number;
+    match: Management.AttackProtectionCaptchaPolicyMatch;
+    action: Management.AttackProtectionCaptchaPolicyActionInput;
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdateAttackProtectionCaptchaPolicyRequestContent {
+    /** Human-readable policy name. */
+    name?: string;
+    /** Description of the policy's purpose. */
+    description?: string;
+    /** Conflict resolution order. Lower number takes higher precedence. Must be unique per tenant. */
+    priority?: number;
+    match?: Management.AttackProtectionCaptchaPolicyMatch;
+    action?: Management.AttackProtectionCaptchaPolicyActionInput;
+}
 /**
  * @example
  *     {
@@ -2923,6 +2986,7 @@ export interface UpdateExperimentRequestParameters {
     default_config?: Management.DefaultConfigEnum;
     /** Ramp experiment levels configuration. A strictly-increasing sequence of exposure percentages, each an integer in [0, 100]. Can only be modified on draft experiments. */
     levels?: number[];
+    status?: Management.ExperimentTransitionStatusEnum;
 }
 /**
  * @example
@@ -2934,15 +2998,6 @@ export interface AdvanceRampRequestContent {
     /** The target percentage level from the experiment schedule. Must be the immediate next level. */
     target_level: number;
 }
-/**
- * @example
- *     {
- *         status: "active"
- *     }
- */
-export interface UpdateExperimentStatusRequestContent {
-    status: Management.ExperimentTransitionStatusEnum;
-}
 /**
  * @example
  *     {
@@ -2986,16 +3041,8 @@ export interface UpdateFeatureFlagRequestContent {
     /** A description of what this feature flag controls */
     description?: string | null;
     parameters?: Management.UpdateFeatureFlagParameters;
-}
-/**
- * @example
- *     {
- *         status: "draft"
- *     }
- */
-export interface UpdateFeatureFlagStatusRequestContent {
-    /** The target status to transition the feature flag to. */
-    status: Management.FeatureFlagStatusEnum;
+    /** Target lifecycle status (draft → active, draft → archived, active → archived). Activating a flag requires at least 2 variations. When combined with field edits, the edits and the transition are applied together; if the transition is rejected, no edits are applied. */
+    status?: Management.FeatureFlagStatusEnum;
 }
 /**
  * @example
@@ -3039,6 +3086,8 @@ export interface UpdateSegmentRequestContent {
     description?: string | null;
     /** Replaces the entire rules array. Each rule is limited to 4KB and the whole segment to 10KB (serialized). */
     rules?: Management.SegmentRule[];
+    /** Target lifecycle status. Archiving removes the segment from the active pool and is terminal (an archived segment cannot return to active). When combined with field edits, the edits apply first and the transition follows. */
+    status?: Management.SegmentStatusEnum;
 }
 /**
  * @example
@@ -4259,6 +4308,8 @@ export interface UpdateTenantSettingsRequestContent {
     pushed_authorization_requests_supported?: boolean | null;
     /** Supports iss parameter in authorization responses */
     authorization_response_iss_parameter_supported?: boolean | null;
+    /** Enables strict DPoP refresh token binding per RFC 9449: all refresh tokens issued to public clients that present a DPoP proof are bound to the sender's key, and the binding is validated on every subsequent exchange. When disabled, DPoP refresh token binding may still apply for specific audiences for backwards compatibility. */
+    dpop_strict_refresh_token_binding?: boolean | null;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
      * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.

package/dist/cjs/management/api/resources/attackProtection/client/Client.d.ts

@@ -4,6 +4,7 @@ import { BotDetectionClient } from "../resources/botDetection/client/Client.js";
 import { BreachedPasswordDetectionClient } from "../resources/breachedPasswordDetection/client/Client.js";
 import { BruteForceProtectionClient } from "../resources/bruteForceProtection/client/Client.js";
 import { CaptchaClient } from "../resources/captcha/client/Client.js";
+import { CaptchaPoliciesClient } from "../resources/captchaPolicies/client/Client.js";
 import { PhoneProviderProtectionClient } from "../resources/phoneProviderProtection/client/Client.js";
 import { SuspiciousIpThrottlingClient } from "../resources/suspiciousIpThrottling/client/Client.js";
 export declare namespace AttackProtectionClient {
@@ -15,6 +16,7 @@ export declare class AttackProtectionClient {
     protected _breachedPasswordDetection: BreachedPasswordDetectionClient | undefined;
     protected _bruteForceProtection: BruteForceProtectionClient | undefined;
     protected _captcha: CaptchaClient | undefined;
+    protected _captchaPolicies: CaptchaPoliciesClient | undefined;
     protected _phoneProviderProtection: PhoneProviderProtectionClient | undefined;
     protected _suspiciousIpThrottling: SuspiciousIpThrottlingClient | undefined;
     constructor(options: AttackProtectionClient.Options);
@@ -22,6 +24,7 @@ export declare class AttackProtectionClient {
     get breachedPasswordDetection(): BreachedPasswordDetectionClient;
     get bruteForceProtection(): BruteForceProtectionClient;
     get captcha(): CaptchaClient;
+    get captchaPolicies(): CaptchaPoliciesClient;
     get phoneProviderProtection(): PhoneProviderProtectionClient;
     get suspiciousIpThrottling(): SuspiciousIpThrottlingClient;
 }

package/dist/cjs/management/api/resources/attackProtection/client/Client.js

@@ -7,8 +7,9 @@ const Client_js_1 = require("../resources/botDetection/client/Client.js");
 const Client_js_2 = require("../resources/breachedPasswordDetection/client/Client.js");
 const Client_js_3 = require("../resources/bruteForceProtection/client/Client.js");
 const Client_js_4 = require("../resources/captcha/client/Client.js");
-const Client_js_5 = require("../resources/phoneProviderProtection/client/Client.js");
-const Client_js_6 = require("../resources/suspiciousIpThrottling/client/Client.js");
+const Client_js_5 = require("../resources/captchaPolicies/client/Client.js");
+const Client_js_6 = require("../resources/phoneProviderProtection/client/Client.js");
+const Client_js_7 = require("../resources/suspiciousIpThrottling/client/Client.js");
 class AttackProtectionClient {
     constructor(options) {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
@@ -29,13 +30,17 @@ class AttackProtectionClient {
         var _a;
         return ((_a = this._captcha) !== null && _a !== void 0 ? _a : (this._captcha = new Client_js_4.CaptchaClient(this._options)));
     }
+    get captchaPolicies() {
+        var _a;
+        return ((_a = this._captchaPolicies) !== null && _a !== void 0 ? _a : (this._captchaPolicies = new Client_js_5.CaptchaPoliciesClient(this._options)));
+    }
     get phoneProviderProtection() {
         var _a;
-        return ((_a = this._phoneProviderProtection) !== null && _a !== void 0 ? _a : (this._phoneProviderProtection = new Client_js_5.PhoneProviderProtectionClient(this._options)));
+        return ((_a = this._phoneProviderProtection) !== null && _a !== void 0 ? _a : (this._phoneProviderProtection = new Client_js_6.PhoneProviderProtectionClient(this._options)));
     }
     get suspiciousIpThrottling() {
         var _a;
-        return ((_a = this._suspiciousIpThrottling) !== null && _a !== void 0 ? _a : (this._suspiciousIpThrottling = new Client_js_6.SuspiciousIpThrottlingClient(this._options)));
+        return ((_a = this._suspiciousIpThrottling) !== null && _a !== void 0 ? _a : (this._suspiciousIpThrottling = new Client_js_7.SuspiciousIpThrottlingClient(this._options)));
     }
 }
 exports.AttackProtectionClient = AttackProtectionClient;

package/dist/cjs/management/api/resources/attackProtection/resources/captchaPolicies/client/Client.d.ts

@@ -0,0 +1,105 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../BaseClient.js";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../BaseClient.js";
+import * as core from "../../../../../../core/index.js";
+import * as Management from "../../../../../index.js";
+export declare namespace CaptchaPoliciesClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class CaptchaPoliciesClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<CaptchaPoliciesClient.Options>;
+    constructor(options: CaptchaPoliciesClient.Options);
+    /**
+     * Retrieve all CAPTCHA attack protection policies for the tenant, sorted by priority ascending.
+     *
+     * @param {CaptchaPoliciesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.captchaPolicies.list()
+     */
+    list(requestOptions?: CaptchaPoliciesClient.RequestOptions): core.HttpResponsePromise<Management.ListAttackProtectionCaptchaPoliciesResponseContent>;
+    private __list;
+    /**
+     * Create a new CAPTCHA attack protection policy for the tenant. The maximum number of policies per tenant is determined by the tenant's subscription.
+     *
+     * @param {Management.CreateAttackProtectionCaptchaPolicyRequestContent} request
+     * @param {CaptchaPoliciesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.captchaPolicies.create({
+     *         name: "name",
+     *         priority: 1,
+     *         match: {},
+     *         action: {}
+     *     })
+     */
+    create(request: Management.CreateAttackProtectionCaptchaPolicyRequestContent, requestOptions?: CaptchaPoliciesClient.RequestOptions): core.HttpResponsePromise<Management.AttackProtectionCaptchaPolicy>;
+    private __create;
+    /**
+     * Retrieve a single CAPTCHA attack protection policy for the tenant by ID.
+     *
+     * @param {string} id - ID of the CAPTCHA attack protection policy.
+     * @param {CaptchaPoliciesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.captchaPolicies.get("id")
+     */
+    get(id: string, requestOptions?: CaptchaPoliciesClient.RequestOptions): core.HttpResponsePromise<Management.AttackProtectionCaptchaPolicy>;
+    private __get;
+    /**
+     * Delete a CAPTCHA attack protection policy for the tenant.
+     *
+     * @param {string} id - ID of the CAPTCHA attack protection policy.
+     * @param {CaptchaPoliciesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.captchaPolicies.delete("id")
+     */
+    delete(id: string, requestOptions?: CaptchaPoliciesClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __delete;
+    /**
+     * Partially update a CAPTCHA attack protection policy. Only the provided fields are modified. A provided match or action replaces the stored value in full rather than merging with it; within action, a provider secret or API key that is omitted from a provided provider block keeps its stored value.
+     *
+     * @param {string} id - ID of the CAPTCHA attack protection policy.
+     * @param {Management.UpdateAttackProtectionCaptchaPolicyRequestContent} request
+     * @param {CaptchaPoliciesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.attackProtection.captchaPolicies.update("id")
+     */
+    update(id: string, request?: Management.UpdateAttackProtectionCaptchaPolicyRequestContent, requestOptions?: CaptchaPoliciesClient.RequestOptions): core.HttpResponsePromise<Management.AttackProtectionCaptchaPolicy>;
+    private __update;
+}