auth0 7.6.0 → 7.7.0

package/dist/cjs/management/wrapper/token-provider.js

@@ -13,16 +13,16 @@ exports.TokenProvider = void 0;
 const jose_1 = require("jose");
 const utils_js_1 = require("../../utils.js");
 const ManagementError_js_1 = require("../errors/ManagementError.js");
+const domain_js_1 = require("./domain.js");
 const LEEWAY = 10 * 1000; // 10s refresh-ahead in ms
 class TokenProvider {
     constructor(options) {
         this.options = options;
         this.expiresAt = 0;
         this.accessToken = "";
-        // Validate domain: must be a bare hostname, no slashes or query strings.
-        if (/[/?#]/.test(options.domain)) {
-            throw new Error(`ManagementClient: invalid domain "${options.domain}". Provide a bare hostname, e.g. "tenant.auth0.com".`);
-        }
+        // TokenProvider is exported and can be constructed directly, so it validates the domain itself
+        // rather than relying on ManagementClient or createManagementAuth having done so.
+        (0, domain_js_1.validateDomain)(options.domain);
         if (options.useMTLS) {
             const { fetch: customFetch } = options;
             if (!customFetch) {

package/dist/esm/management/Client.d.mts

@@ -26,6 +26,7 @@ import { LogsClient } from "./api/resources/logs/client/Client.mjs";
 import { LogStreamsClient } from "./api/resources/logStreams/client/Client.mjs";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.mjs";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.mjs";
+import { PortalsClient } from "./api/resources/portals/client/Client.mjs";
 import { PromptsClient } from "./api/resources/prompts/client/Client.mjs";
 import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.mjs";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.mjs";
@@ -80,6 +81,7 @@ export declare class ManagementClient {
     protected _logs: LogsClient | undefined;
     protected _networkAcls: NetworkAclsClient | undefined;
     protected _organizations: OrganizationsClient | undefined;
+    protected _portals: PortalsClient | undefined;
     protected _prompts: PromptsClient | undefined;
     protected _rateLimitPolicies: RateLimitPoliciesClient | undefined;
     protected _refreshTokens: RefreshTokensClient | undefined;
@@ -129,6 +131,7 @@ export declare class ManagementClient {
     get logs(): LogsClient;
     get networkAcls(): NetworkAclsClient;
     get organizations(): OrganizationsClient;
+    get portals(): PortalsClient;
     get prompts(): PromptsClient;
     get rateLimitPolicies(): RateLimitPoliciesClient;
     get refreshTokens(): RefreshTokensClient;

package/dist/esm/management/Client.mjs

@@ -36,6 +36,7 @@ import { LogsClient } from "./api/resources/logs/client/Client.mjs";
 import { LogStreamsClient } from "./api/resources/logStreams/client/Client.mjs";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.mjs";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.mjs";
+import { PortalsClient } from "./api/resources/portals/client/Client.mjs";
 import { PromptsClient } from "./api/resources/prompts/client/Client.mjs";
 import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.mjs";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.mjs";
@@ -158,6 +159,10 @@ export class ManagementClient {
         var _a;
         return ((_a = this._organizations) !== null && _a !== void 0 ? _a : (this._organizations = new OrganizationsClient(this._options)));
     }
+    get portals() {
+        var _a;
+        return ((_a = this._portals) !== null && _a !== void 0 ? _a : (this._portals = new PortalsClient(this._options)));
+    }
     get prompts() {
         var _a;
         return ((_a = this._prompts) !== null && _a !== void 0 ? _a : (this._prompts = new PromptsClient(this._options)));

package/dist/esm/management/api/requests/requests.d.mts

@@ -292,6 +292,7 @@ export interface UpdateClientProfileRequestContent {
  *         is_first_party: true,
  *         app_type: "app_type",
  *         external_client_id: "external_client_id",
+ *         agent_id: "agent_id",
  *         q: "q"
  *     }
  */
@@ -314,6 +315,8 @@ export interface ListClientsRequestParameters {
     app_type?: string | null;
     /** Optional filter by the <a href="https://drafts.oauth.net/draft-ietf-oauth-client-id-metadata-document/draft-ietf-oauth-client-id-metadata-document.html">Client ID Metadata Document</a> URI for CIMD-registered clients. */
     external_client_id?: string | null;
+    /** Optional filter by the agent associated with the client.<br /><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Only <i>fields</i>, <i>include_fields</i>, <i>page</i>, <i>per_page</i>, and <i>include_totals</i> are supported alongside it</li><li>Checkpoint pagination (<i>from</i>, <i>take</i>) is not supported</li></ul> */
+    agent_id?: string | null;
     /** Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
     q?: string | null;
 }
@@ -416,6 +419,8 @@ export interface CreateClientRequestContent {
     b2b_integration_configuration?: Management.B2BIntegrationConfiguration;
     my_organization_configuration?: Management.ClientMyOrganizationPostConfiguration;
     async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPostConfiguration;
+    /** ID of the agent to associate with this client. */
+    agent_id?: string | null;
     oidc_support?: Management.ClientOidcSupportPost;
 }
 /**
@@ -578,6 +583,8 @@ export interface UpdateClientRequestContent {
     async_approval_notification_channels?: (Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration | undefined) | null;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
+    /** ID of the agent to associate with this client, or null to remove the association. */
+    agent_id?: string | null;
     oidc_support?: Management.ClientOidcSupportPatch | null;
 }
 /**
@@ -1405,6 +1412,38 @@ export interface UpdateOrganizationRequestContent {
     /** Whether app entitlement is active for this organization. */
     is_app_entitlement_active?: boolean;
 }
+/**
+ * @example
+ *     {
+ *         slug: "slug",
+ *         name: "name",
+ *         client: {
+ *             token_endpoint_auth_method: "client_secret_post",
+ *             client_id: "client_id",
+ *             client_secret: "client_secret"
+ *         }
+ *     }
+ */
+export interface CreatePortalRequestContent {
+    slug: Management.PortalSlug;
+    name: Management.PortalName;
+    client: Management.PortalClientSecretPostRequest;
+    navigation?: Management.PortalNavigation;
+    pages?: Management.PortalPagesByType;
+    custom_code?: Management.PortalCustomCode;
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdatePortalRequestContent {
+    slug?: Management.PortalSlug;
+    name?: Management.PortalName;
+    client?: Management.PortalClientSecretPostRequest;
+    navigation?: (Management.PortalNavigationNullable | undefined) | null;
+    pages?: (Management.PortalPagesByTypeNullable | undefined) | null;
+    custom_code?: (Management.PortalCustomCodeNullable | undefined) | null;
+}
 /**
  * @example
  *     {}
@@ -1576,6 +1615,8 @@ export interface CreateResourceServerRequestContent {
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
     authorization_policy?: Management.ResourceServerAuthorizationPolicy | null;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsSchemaEnum;
+    type?: Management.ResourceServerTypeEnum | null;
 }
 /**
  * @example
@@ -1651,6 +1692,8 @@ export interface UpdateResourceServerRequestContent {
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
     authorization_policy?: Management.ResourceServerAuthorizationPolicy | null;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsSchemaEnum;
+    type?: Management.ResourceServerTypeEnum | null;
 }
 /**
  * @example
@@ -2353,9 +2396,9 @@ export interface UpdateBruteForceSettingsRequestContent {
     /** List of trusted IP addresses that will not have attack protection enforced against them. */
     allowlist?: string[];
     mode?: Management.BruteForceProtectionModeEnum;
+    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum;
     /** Maximum number of unsuccessful attempts. */
     max_attempts?: number;
-    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum;
 }
 /**
  * @example
@@ -3057,7 +3100,8 @@ export interface UpdateFeatureFlagRequestContent {
  *     {
  *         from: "from",
  *         take: 1,
- *         type: "auth0"
+ *         type: "auth0",
+ *         status: "active"
  *     }
  */
 export interface ListSegmentsRequestParameters {
@@ -3067,6 +3111,8 @@ export interface ListSegmentsRequestParameters {
     take?: number | null;
     /** Filter by type. Exact match. */
     type?: Management.SegmentTypeFilterEnum | null;
+    /** Filter by status. Exact match. */
+    status?: Management.SegmentStatusEnum | null;
 }
 /**
  * @example

package/dist/esm/management/api/resources/clients/client/Client.d.mts

@@ -64,6 +64,7 @@ export declare class ClientsClient {
      *         is_first_party: true,
      *         app_type: "app_type",
      *         external_client_id: "external_client_id",
+     *         agent_id: "agent_id",
      *         q: "q"
      *     })
      */

package/dist/esm/management/api/resources/clients/client/Client.mjs

@@ -78,6 +78,7 @@ export class ClientsClient {
      *         is_first_party: true,
      *         app_type: "app_type",
      *         external_client_id: "external_client_id",
+     *         agent_id: "agent_id",
      *         q: "q"
      *     })
      */
@@ -85,7 +86,7 @@ export class ClientsClient {
         return __awaiter(this, arguments, void 0, function* (request = {}, requestOptions) {
             const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
-                const { fields, include_fields: includeFields, page = 0, per_page: perPage = 50, include_totals: includeTotals = true, is_global: isGlobal, is_first_party: isFirstParty, app_type: appType, external_client_id: externalClientId, q, } = request;
+                const { fields, include_fields: includeFields, page = 0, per_page: perPage = 50, include_totals: includeTotals = true, is_global: isGlobal, is_first_party: isFirstParty, app_type: appType, external_client_id: externalClientId, agent_id: agentId, q, } = request;
                 const _queryParams = {
                     fields,
                     include_fields: includeFields,
@@ -96,6 +97,7 @@ export class ClientsClient {
                     is_first_party: isFirstParty,
                     app_type: appType,
                     external_client_id: externalClientId,
+                    agent_id: agentId,
                     q,
                 };
                 const _authRequest = yield this._options.authProvider.getAuthRequest();

package/dist/esm/management/api/resources/connections/resources/keys/client/Client.d.mts

@@ -11,7 +11,7 @@ export declare class KeysClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<KeysClient.Options>;
     constructor(options: KeysClient.Options);
     /**
-     * Gets the connection keys for the Okta or OIDC connection strategy.
+     * Gets the connection keys for the Okta, OIDC, or SAML (samlp) connection strategy.
      *
      * @param {string} id - ID of the connection
      * @param {KeysClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -30,7 +30,7 @@ export declare class KeysClient {
     get(id: string, requestOptions?: KeysClient.RequestOptions): core.HttpResponsePromise<Management.ConnectionKey[]>;
     private __get;
     /**
-     * Provision initial connection keys for Okta or OIDC connection strategies. This endpoint allows you to create keys before configuring the connection to use Private Key JWT authentication, enabling zero-downtime transitions.
+     * Provision initial connection keys for Okta, OIDC, or SAML (samlp) connection strategies. This endpoint allows you to create keys before configuring the connection to use Private Key JWT authentication, enabling zero-downtime transitions.
      *
      * @param {string} id - ID of the connection
      * @param {Management.PostConnectionKeysRequestContent | null} request
@@ -51,7 +51,7 @@ export declare class KeysClient {
     create(id: string, request?: Management.PostConnectionKeysRequestContent | null, requestOptions?: KeysClient.RequestOptions): core.HttpResponsePromise<Management.PostConnectionsKeysResponseContent>;
     private __create;
     /**
-     * Rotates the connection keys for the Okta or OIDC connection strategies.
+     * Rotates the connection keys for the Okta, OIDC, or SAML (samlp) connection strategies.
      *
      * @param {string} id - ID of the connection
      * @param {Management.RotateConnectionKeysRequestContent | null} request

package/dist/esm/management/api/resources/connections/resources/keys/client/Client.mjs

@@ -21,7 +21,7 @@ export class KeysClient {
         this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
-     * Gets the connection keys for the Okta or OIDC connection strategy.
+     * Gets the connection keys for the Okta, OIDC, or SAML (samlp) connection strategy.
      *
      * @param {string} id - ID of the connection
      * @param {KeysClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -83,7 +83,7 @@ export class KeysClient {
         });
     }
     /**
-     * Provision initial connection keys for Okta or OIDC connection strategies. This endpoint allows you to create keys before configuring the connection to use Private Key JWT authentication, enabling zero-downtime transitions.
+     * Provision initial connection keys for Okta, OIDC, or SAML (samlp) connection strategies. This endpoint allows you to create keys before configuring the connection to use Private Key JWT authentication, enabling zero-downtime transitions.
      *
      * @param {string} id - ID of the connection
      * @param {Management.PostConnectionKeysRequestContent | null} request
@@ -155,7 +155,7 @@ export class KeysClient {
         });
     }
     /**
-     * Rotates the connection keys for the Okta or OIDC connection strategies.
+     * Rotates the connection keys for the Okta, OIDC, or SAML (samlp) connection strategies.
      *
      * @param {string} id - ID of the connection
      * @param {Management.RotateConnectionKeysRequestContent | null} request

package/dist/esm/management/api/resources/experimentation/resources/segments/client/Client.d.mts

@@ -27,7 +27,8 @@ export declare class SegmentsClient {
      *     await client.experimentation.segments.list({
      *         from: "from",
      *         take: 1,
-     *         type: "auth0"
+     *         type: "auth0",
+     *         status: "active"
      *     })
      */
     list(request?: Management.ListSegmentsRequestParameters, requestOptions?: SegmentsClient.RequestOptions): Promise<core.Page<Management.Segment, Management.ListSegmentsResponseContent>>;

package/dist/esm/management/api/resources/experimentation/resources/segments/client/Client.mjs

@@ -37,18 +37,20 @@ export class SegmentsClient {
      *     await client.experimentation.segments.list({
      *         from: "from",
      *         take: 1,
-     *         type: "auth0"
+     *         type: "auth0",
+     *         status: "active"
      *     })
      */
     list() {
         return __awaiter(this, arguments, void 0, function* (request = {}, requestOptions) {
             const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
-                const { from: from_, take = 50, type: type_ } = request;
+                const { from: from_, take = 50, type: type_, status } = request;
                 const _queryParams = {
                     from: from_,
                     take,
                     type: type_ !== undefined ? type_ : undefined,
+                    status: status !== undefined ? status : undefined,
                 };
                 const _authRequest = yield this._options.authProvider.getAuthRequest();
                 let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);

package/dist/esm/management/api/resources/index.d.mts

@@ -27,6 +27,7 @@ export * as logs from "./logs/index.mjs";
 export * as logStreams from "./logStreams/index.mjs";
 export * as networkAcls from "./networkAcls/index.mjs";
 export * as organizations from "./organizations/index.mjs";
+export * as portals from "./portals/index.mjs";
 export * as prompts from "./prompts/index.mjs";
 export * as rateLimitPolicies from "./rateLimitPolicies/index.mjs";
 export * as refreshTokens from "./refreshTokens/index.mjs";

package/dist/esm/management/api/resources/index.mjs

@@ -27,6 +27,7 @@ export * as logs from "./logs/index.mjs";
 export * as logStreams from "./logStreams/index.mjs";
 export * as networkAcls from "./networkAcls/index.mjs";
 export * as organizations from "./organizations/index.mjs";
+export * as portals from "./portals/index.mjs";
 export * as prompts from "./prompts/index.mjs";
 export * as rateLimitPolicies from "./rateLimitPolicies/index.mjs";
 export * as refreshTokens from "./refreshTokens/index.mjs";

package/dist/esm/management/api/resources/portals/client/Client.d.mts

@@ -0,0 +1,112 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import * as core from "../../../../core/index.mjs";
+import * as Management from "../../../index.mjs";
+export declare namespace PortalsClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class PortalsClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<PortalsClient.Options>;
+    constructor(options: PortalsClient.Options);
+    /**
+     * @param {PortalsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
+     *
+     * @example
+     *     await client.portals.list()
+     */
+    list(requestOptions?: PortalsClient.RequestOptions): core.HttpResponsePromise<Management.ListPortalsResponseContent>;
+    private __list;
+    /**
+     * @param {Management.CreatePortalRequestContent} request
+     * @param {PortalsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
+     *
+     * @example
+     *     await client.portals.create({
+     *         slug: "slug",
+     *         name: "name",
+     *         client: {
+     *             token_endpoint_auth_method: "client_secret_post",
+     *             client_id: "client_id",
+     *             client_secret: "client_secret"
+     *         }
+     *     })
+     */
+    create(request: Management.CreatePortalRequestContent, requestOptions?: PortalsClient.RequestOptions): core.HttpResponsePromise<Management.Portal>;
+    private __create;
+    /**
+     * @param {Management.PortalId} id
+     * @param {PortalsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
+     *
+     * @example
+     *     await client.portals.get("id")
+     */
+    get(id: Management.PortalId, requestOptions?: PortalsClient.RequestOptions): core.HttpResponsePromise<Management.Portal>;
+    private __get;
+    /**
+     * @param {Management.PortalId} id
+     * @param {PortalsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
+     *
+     * @example
+     *     await client.portals.delete("id")
+     */
+    delete(id: Management.PortalId, requestOptions?: PortalsClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __delete;
+    /**
+     * @param {Management.PortalId} id
+     * @param {Management.UpdatePortalRequestContent} request
+     * @param {PortalsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
+     *
+     * @example
+     *     await client.portals.update("id")
+     */
+    update(id: Management.PortalId, request?: Management.UpdatePortalRequestContent, requestOptions?: PortalsClient.RequestOptions): core.HttpResponsePromise<Management.Portal>;
+    private __update;
+}