cloudflare 6.3.0 → 6.5.0

package/src/resources/zero-trust/identity-providers/identity-providers.ts

@@ -293,6 +293,12 @@ export interface AzureAD {
    */
   id?: string;
 
+  /**
+   * Indicates that the identity provider is immutable and cannot be updated or
+   * deleted via the API.
+   */
+  read_only?: boolean;
+
   /**
    * The SAML encryption certificate set details, including current and previous
    * certificates. Only present for SAML identity providers with a certificate set
@@ -591,6 +597,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -739,6 +751,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -850,6 +868,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -961,6 +985,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -1099,6 +1129,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -1242,6 +1278,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -1353,6 +1395,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -1516,6 +1564,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -1664,6 +1718,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -1807,6 +1867,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -1950,6 +2016,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -2136,6 +2208,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -2247,6 +2325,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -2367,6 +2451,12 @@ export namespace IdentityProvider {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -3513,6 +3603,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -3661,6 +3757,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -3772,6 +3874,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -3883,6 +3991,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -4021,6 +4135,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -4164,6 +4284,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -4275,6 +4401,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -4438,6 +4570,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -4586,6 +4724,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -4729,6 +4873,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -4872,6 +5022,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -5058,6 +5214,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -5169,6 +5331,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set
@@ -5289,6 +5457,12 @@ export namespace IdentityProviderListResponse {
      */
     id?: string;
 
+    /**
+     * Indicates that the identity provider is immutable and cannot be updated or
+     * deleted via the API.
+     */
+    read_only?: boolean;
+
     /**
      * The SAML encryption certificate set details, including current and previous
      * certificates. Only present for SAML identity providers with a certificate set

package/src/resources/zero-trust/networks/hostname-routes.ts

@@ -159,6 +159,11 @@ export interface HostnameRoute {
    */
   hostname?: string;
 
+  /**
+   * The type of tunnel.
+   */
+  tun_type?: 'cfd_tunnel' | 'warp_connector' | 'warp' | 'magic' | 'ip_sec' | 'gre' | 'cni';
+
   /**
    * UUID of the tunnel.
    */

package/src/resources/zero-trust/organizations/organizations.ts

@@ -279,16 +279,18 @@ export interface Organization {
   mfa_config?: Organization.MfaConfig;
 
   /**
-   * Determines whether global MFA settings apply to applications by default. The
-   * organization must have MFA enabled with at least one authentication method and a
-   * session duration configured.
+   * Configures PIV key requirements for MFA using hardware security keys.
    */
-  mfa_required_for_all_apps?: boolean;
+  mfa_piv_key_requirements?: Organization.MfaPivKeyRequirements;
 
   /**
-   * Configures SSH PIV key requirements for MFA using hardware security keys.
+   * Determines whether global MFA settings apply to applications by default. The
+   * organization must have MFA enabled with at least one authentication method and a
+   * session duration configured. Note: 'allowed_authenticators' cannot only contain
+   * 'piv_key' if the organization has any non-infrastructure applications because
+   * PIV keys are only compatible with infrastructure apps.
    */
-  mfa_ssh_piv_key_requirements?: Organization.MfaSSHPivKeyRequirements;
+  mfa_required_for_all_apps?: boolean;
 
   /**
    * The name of your Zero Trust organization.
@@ -344,7 +346,7 @@ export namespace Organization {
     /**
      * Lists the MFA methods that users can authenticate with.
      */
-    allowed_authenticators?: Array<'totp' | 'biometrics' | 'security_key' | 'ssh_piv_key'>;
+    allowed_authenticators?: Array<'totp' | 'biometrics' | 'security_key' | 'piv_key'>;
 
     /**
      * Allows a user to skip MFA via Authentication Method Reference (AMR) matching
@@ -367,9 +369,9 @@ export namespace Organization {
   }
 
   /**
-   * Configures SSH PIV key requirements for MFA using hardware security keys.
+   * Configures PIV key requirements for MFA using hardware security keys.
    */
-  export interface MfaSSHPivKeyRequirements {
+  export interface MfaPivKeyRequirements {
     /**
      * Defines when a PIN is required to use the SSH key. Valid values: `never` (no PIN
      * required), `once` (PIN required once per session), `always` (PIN required for
@@ -378,8 +380,8 @@ export namespace Organization {
     pin_policy?: 'never' | 'once' | 'always';
 
     /**
-     * Requires the SSH PIV key to be stored on a FIPS 140-2 Level 1 or higher
-     * validated device.
+     * Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated
+     * device.
      */
     require_fips_device?: boolean;
 
@@ -479,17 +481,19 @@ export interface OrganizationCreateParams {
   mfa_config?: OrganizationCreateParams.MfaConfig;
 
   /**
-   * Body param: Determines whether global MFA settings apply to applications by
-   * default. The organization must have MFA enabled with at least one authentication
-   * method and a session duration configured.
+   * Body param: Configures PIV key requirements for MFA using hardware security
+   * keys.
    */
-  mfa_required_for_all_apps?: boolean;
+  mfa_piv_key_requirements?: OrganizationCreateParams.MfaPivKeyRequirements;
 
   /**
-   * Body param: Configures SSH PIV key requirements for MFA using hardware security
-   * keys.
+   * Body param: Determines whether global MFA settings apply to applications by
+   * default. The organization must have MFA enabled with at least one authentication
+   * method and a session duration configured. Note: 'allowed_authenticators' cannot
+   * only contain 'piv_key' if the organization has any non-infrastructure
+   * applications because PIV keys are only compatible with infrastructure apps.
    */
-  mfa_ssh_piv_key_requirements?: OrganizationCreateParams.MfaSSHPivKeyRequirements;
+  mfa_required_for_all_apps?: boolean;
 
   /**
    * Body param: The amount of time that tokens issued for applications will be
@@ -528,7 +532,7 @@ export namespace OrganizationCreateParams {
     /**
      * Lists the MFA methods that users can authenticate with.
      */
-    allowed_authenticators?: Array<'totp' | 'biometrics' | 'security_key' | 'ssh_piv_key'>;
+    allowed_authenticators?: Array<'totp' | 'biometrics' | 'security_key' | 'piv_key'>;
 
     /**
      * Allows a user to skip MFA via Authentication Method Reference (AMR) matching
@@ -551,9 +555,9 @@ export namespace OrganizationCreateParams {
   }
 
   /**
-   * Configures SSH PIV key requirements for MFA using hardware security keys.
+   * Configures PIV key requirements for MFA using hardware security keys.
    */
-  export interface MfaSSHPivKeyRequirements {
+  export interface MfaPivKeyRequirements {
     /**
      * Defines when a PIN is required to use the SSH key. Valid values: `never` (no PIN
      * required), `once` (PIN required once per session), `always` (PIN required for
@@ -562,8 +566,8 @@ export namespace OrganizationCreateParams {
     pin_policy?: 'never' | 'once' | 'always';
 
     /**
-     * Requires the SSH PIV key to be stored on a FIPS 140-2 Level 1 or higher
-     * validated device.
+     * Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated
+     * device.
      */
     require_fips_device?: boolean;
 
@@ -661,17 +665,19 @@ export interface OrganizationUpdateParams {
   mfa_config?: OrganizationUpdateParams.MfaConfig;
 
   /**
-   * Body param: Determines whether global MFA settings apply to applications by
-   * default. The organization must have MFA enabled with at least one authentication
-   * method and a session duration configured.
+   * Body param: Configures PIV key requirements for MFA using hardware security
+   * keys.
    */
-  mfa_required_for_all_apps?: boolean;
+  mfa_piv_key_requirements?: OrganizationUpdateParams.MfaPivKeyRequirements;
 
   /**
-   * Body param: Configures SSH PIV key requirements for MFA using hardware security
-   * keys.
+   * Body param: Determines whether global MFA settings apply to applications by
+   * default. The organization must have MFA enabled with at least one authentication
+   * method and a session duration configured. Note: 'allowed_authenticators' cannot
+   * only contain 'piv_key' if the organization has any non-infrastructure
+   * applications because PIV keys are only compatible with infrastructure apps.
    */
-  mfa_ssh_piv_key_requirements?: OrganizationUpdateParams.MfaSSHPivKeyRequirements;
+  mfa_required_for_all_apps?: boolean;
 
   /**
    * Body param: The name of your Zero Trust organization.
@@ -728,7 +734,7 @@ export namespace OrganizationUpdateParams {
     /**
      * Lists the MFA methods that users can authenticate with.
      */
-    allowed_authenticators?: Array<'totp' | 'biometrics' | 'security_key' | 'ssh_piv_key'>;
+    allowed_authenticators?: Array<'totp' | 'biometrics' | 'security_key' | 'piv_key'>;
 
     /**
      * Allows a user to skip MFA via Authentication Method Reference (AMR) matching
@@ -751,9 +757,9 @@ export namespace OrganizationUpdateParams {
   }
 
   /**
-   * Configures SSH PIV key requirements for MFA using hardware security keys.
+   * Configures PIV key requirements for MFA using hardware security keys.
    */
-  export interface MfaSSHPivKeyRequirements {
+  export interface MfaPivKeyRequirements {
     /**
      * Defines when a PIN is required to use the SSH key. Valid values: `never` (no PIN
      * required), `once` (PIN required once per session), `always` (PIN required for
@@ -762,8 +768,8 @@ export namespace OrganizationUpdateParams {
     pin_policy?: 'never' | 'once' | 'always';
 
     /**
-     * Requires the SSH PIV key to be stored on a FIPS 140-2 Level 1 or higher
-     * validated device.
+     * Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated
+     * device.
      */
     require_fips_device?: boolean;