auth0-python 5.1.0__py3-none-any.whl → 5.2.0__py3-none-any.whl

auth0/authentication/base.py

@@ -2,11 +2,10 @@ from __future__ import annotations
 
 from typing import Any
 
+from .client_authentication import add_client_authentication
 from .rest import RestClient, RestClientOptions
 from .types import RequestData, TimeoutType
 
-from .client_authentication import add_client_authentication
-
 UNKNOWN_ERROR = "a0.sdk.internal.unknown"
 
 
@@ -22,6 +21,9 @@ class AuthenticationBase:
         telemetry (bool, optional): Enable or disable telemetry (defaults to True)
         timeout (float or tuple, optional): Change the requests connect and read timeout. Pass a tuple to specify both values separately or a float to set both to it. (defaults to 5.0 for both)
         protocol (str, optional): Useful for testing. (defaults to 'https')
+        client_info (dict, optional): Custom telemetry data for the Auth0-Client header.
+            When provided, overrides the default SDK telemetry. Useful for wrapper
+            SDKs that need to identify themselves. Ignored when telemetry is False.
     """
 
     def __init__(
@@ -34,6 +36,7 @@ class AuthenticationBase:
         telemetry: bool = True,
         timeout: TimeoutType = 5.0,
         protocol: str = "https",
+        client_info: dict[str, Any] | None = None,
     ) -> None:
         self.domain = domain
         self.client_id = client_id
@@ -43,7 +46,9 @@ class AuthenticationBase:
         self.protocol = protocol
         self.client = RestClient(
             None,
-            options=RestClientOptions(telemetry=telemetry, timeout=timeout, retries=0),
+            options=RestClientOptions(
+                telemetry=telemetry, timeout=timeout, retries=0, client_info=client_info
+            ),
         )
 
     def _add_client_authentication(self, payload: dict[str, Any]) -> dict[str, Any]:

auth0/authentication/rest.py

@@ -10,7 +10,6 @@ from typing import TYPE_CHECKING, Any, Mapping
 from urllib.parse import urlencode
 
 import requests
-
 from .exceptions import Auth0Error, RateLimitError
 from .types import RequestData, TimeoutType
 
@@ -38,6 +37,13 @@ class RestClientOptions:
             times using an exponential backoff strategy, before
             raising a RateLimitError exception. 10 retries max.
             (defaults to 3)
+        client_info (dict, optional): Custom telemetry data to send
+            in the Auth0-Client header instead of the default SDK
+            info. Useful for wrapper SDKs that need to identify
+            themselves. When provided, this dict is JSON-encoded
+            and base64-encoded as the header value. Ignored when
+            telemetry is False.
+            (defaults to None)
     """
 
     def __init__(
@@ -45,10 +51,12 @@ class RestClientOptions:
         telemetry: bool = True,
         timeout: TimeoutType = 5.0,
         retries: int = 3,
+        client_info: dict[str, Any] | None = None,
     ) -> None:
         self.telemetry = telemetry
         self.timeout = timeout
         self.retries = retries
+        self.client_info = client_info
 
 
 class RestClient:
@@ -94,17 +102,20 @@ class RestClient:
 
         if options.telemetry:
             py_version = platform.python_version()
-            version = sys.modules["auth0"].__version__
 
-            auth0_client = dumps(
-                {
+            if options.client_info is not None:
+                auth0_client_dict = options.client_info
+            else:
+                version = sys.modules["auth0"].__version__
+                auth0_client_dict = {
                     "name": "auth0-python",
                     "version": version,
                     "env": {
                         "python": py_version,
                     },
                 }
-            ).encode("utf-8")
+
+            auth0_client = dumps(auth0_client_dict).encode("utf-8")
 
             self.base_headers.update(
                 {

auth0/management/__init__.py

@@ -1215,6 +1215,7 @@ if typing.TYPE_CHECKING:
     from .client import AsyncAuth0, Auth0
     from .environment import Auth0Environment
     from .event_streams import EventStreamsCreateRequest
+    from .management_client import AsyncManagementClient, ManagementClient
     from .version import __version__
 _dynamic_imports: typing.Dict[str, str] = {
     "Action": ".types",
@@ -3340,6 +3341,8 @@ __all__ = [
     "LogStreamSumoEnum",
     "LogStreamSumoResponseSchema",
     "LogStreamSumoSink",
+    "ManagementClient",
+    "AsyncManagementClient",
     "MdlPresentationProperties",
     "MdlPresentationRequest",
     "MdlPresentationRequestProperties",

auth0/management/actions/modules/raw_client.py

@@ -86,7 +86,7 @@ class RawModulesClient:
                 _items = _parsed_response.modules
                 _has_next = True
                 _get_next = lambda: self.list(
-                    page=page + len(_items or []),
+                    page=page + 1,
                     per_page=per_page,
                     request_options=request_options,
                 )
@@ -649,7 +649,7 @@ class RawModulesClient:
                 _has_next = True
                 _get_next = lambda: self.list_actions(
                     id,
-                    page=page + len(_items or []),
+                    page=page + 1,
                     per_page=per_page,
                     request_options=request_options,
                 )
@@ -885,7 +885,7 @@ class AsyncRawModulesClient:
 
                 async def _get_next():
                     return await self.list(
-                        page=page + len(_items or []),
+                        page=page + 1,
                         per_page=per_page,
                         request_options=request_options,
                     )
@@ -1453,7 +1453,7 @@ class AsyncRawModulesClient:
                 async def _get_next():
                     return await self.list_actions(
                         id,
-                        page=page + len(_items or []),
+                        page=page + 1,
                         per_page=per_page,
                         request_options=request_options,
                     )

auth0/management/actions/modules/versions/raw_client.py

@@ -81,7 +81,7 @@ class RawVersionsClient:
                 _has_next = True
                 _get_next = lambda: self.list(
                     id,
-                    page=page + len(_items or []),
+                    page=page + 1,
                     per_page=per_page,
                     request_options=request_options,
                 )
@@ -409,7 +409,7 @@ class AsyncRawVersionsClient:
                 async def _get_next():
                     return await self.list(
                         id,
-                        page=page + len(_items or []),
+                        page=page + 1,
                         per_page=per_page,
                         request_options=request_options,
                     )

auth0/management/actions/raw_client.py

@@ -110,7 +110,7 @@ class RawActionsClient:
                     trigger_id=trigger_id,
                     action_name=action_name,
                     deployed=deployed,
-                    page=page + len(_items or []),
+                    page=page + 1,
                     per_page=per_page,
                     installed=installed,
                     request_options=request_options,
@@ -887,7 +887,7 @@ class AsyncRawActionsClient:
                         trigger_id=trigger_id,
                         action_name=action_name,
                         deployed=deployed,
-                        page=page + len(_items or []),
+                        page=page + 1,
                         per_page=per_page,
                         installed=installed,
                         request_options=request_options,

auth0/management/actions/triggers/bindings/raw_client.py

@@ -83,7 +83,7 @@ class RawBindingsClient:
                 _has_next = True
                 _get_next = lambda: self.list(
                     trigger_id,
-                    page=page + len(_items or []),
+                    page=page + 1,
                     per_page=per_page,
                     request_options=request_options,
                 )
@@ -297,7 +297,7 @@ class AsyncRawBindingsClient:
                 async def _get_next():
                     return await self.list(
                         trigger_id,
-                        page=page + len(_items or []),
+                        page=page + 1,
                         per_page=per_page,
                         request_options=request_options,
                     )

auth0/management/actions/versions/raw_client.py

@@ -84,7 +84,7 @@ class RawVersionsClient:
                 _has_next = True
                 _get_next = lambda: self.list(
                     action_id,
-                    page=page + len(_items or []),
+                    page=page + 1,
                     per_page=per_page,
                     request_options=request_options,
                 )
@@ -396,7 +396,7 @@ class AsyncRawVersionsClient:
                 async def _get_next():
                     return await self.list(
                         action_id,
-                        page=page + len(_items or []),
+                        page=page + 1,
                         per_page=per_page,
                         request_options=request_options,
                     )

auth0/management/branding/phone/templates/client.py

@@ -260,6 +260,7 @@ class TemplatesClient:
             Destination of the testing phone notification
 
         delivery_method : typing.Optional[PhoneProviderDeliveryMethodEnum]
+            Medium to use to send the notification
 
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
@@ -572,6 +573,7 @@ class AsyncTemplatesClient:
             Destination of the testing phone notification
 
         delivery_method : typing.Optional[PhoneProviderDeliveryMethodEnum]
+            Medium to use to send the notification
 
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.

auth0/management/branding/phone/templates/raw_client.py

@@ -625,6 +625,7 @@ class RawTemplatesClient:
             Destination of the testing phone notification
 
         delivery_method : typing.Optional[PhoneProviderDeliveryMethodEnum]
+            Medium to use to send the notification
 
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
@@ -1311,6 +1312,7 @@ class AsyncRawTemplatesClient:
             Destination of the testing phone notification
 
         delivery_method : typing.Optional[PhoneProviderDeliveryMethodEnum]
+            Medium to use to send the notification
 
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.

auth0/management/client.py

@@ -6,6 +6,7 @@ import typing
 
 import httpx
 from .core.client_wrapper import AsyncClientWrapper, SyncClientWrapper
+from .core.logging import LogConfig, Logger
 from .environment import Auth0Environment
 
 if typing.TYPE_CHECKING:
@@ -88,6 +89,9 @@ class Auth0:
     httpx_client : typing.Optional[httpx.Client]
         The httpx client to use for making requests, a preconfigured client is used by default, however this is useful should you want to pass in any custom httpx configuration.
 
+    logging : typing.Optional[typing.Union[LogConfig, Logger]]
+        Configure logging for the SDK. Accepts a LogConfig dict with 'level' (debug/info/warn/error), 'logger' (custom logger implementation), and 'silent' (boolean, defaults to True) fields. You can also pass a pre-configured Logger instance.
+
     Examples
     --------
     from auth0 import Auth0
@@ -108,6 +112,7 @@ class Auth0:
         timeout: typing.Optional[float] = None,
         follow_redirects: typing.Optional[bool] = True,
         httpx_client: typing.Optional[httpx.Client] = None,
+        logging: typing.Optional[typing.Union[LogConfig, Logger]] = None,
     ):
         _defaulted_timeout = (
             timeout if timeout is not None else 60 if httpx_client is None else httpx_client.timeout.read
@@ -125,6 +130,7 @@ class Auth0:
             if follow_redirects is not None
             else httpx.Client(timeout=_defaulted_timeout),
             timeout=_defaulted_timeout,
+            logging=logging,
         )
         self._actions: typing.Optional[ActionsClient] = None
         self._branding: typing.Optional[BrandingClient] = None
@@ -549,6 +555,9 @@ class AsyncAuth0:
     httpx_client : typing.Optional[httpx.AsyncClient]
         The httpx client to use for making requests, a preconfigured client is used by default, however this is useful should you want to pass in any custom httpx configuration.
 
+    logging : typing.Optional[typing.Union[LogConfig, Logger]]
+        Configure logging for the SDK. Accepts a LogConfig dict with 'level' (debug/info/warn/error), 'logger' (custom logger implementation), and 'silent' (boolean, defaults to True) fields. You can also pass a pre-configured Logger instance.
+
     Examples
     --------
     from auth0 import AsyncAuth0
@@ -569,6 +578,7 @@ class AsyncAuth0:
         timeout: typing.Optional[float] = None,
         follow_redirects: typing.Optional[bool] = True,
         httpx_client: typing.Optional[httpx.AsyncClient] = None,
+        logging: typing.Optional[typing.Union[LogConfig, Logger]] = None,
     ):
         _defaulted_timeout = (
             timeout if timeout is not None else 60 if httpx_client is None else httpx_client.timeout.read
@@ -586,6 +596,7 @@ class AsyncAuth0:
             if follow_redirects is not None
             else httpx.AsyncClient(timeout=_defaulted_timeout),
             timeout=_defaulted_timeout,
+            logging=logging,
         )
         self._actions: typing.Optional[AsyncActionsClient] = None
         self._branding: typing.Optional[AsyncBrandingClient] = None

auth0/management/client_grants/client.py

@@ -117,8 +117,8 @@ class ClientGrantsClient:
     def create(
         self,
         *,
-        client_id: str,
         audience: str,
+        client_id: typing.Optional[str] = OMIT,
         organization_usage: typing.Optional[ClientGrantOrganizationUsageEnum] = OMIT,
         allow_any_organization: typing.Optional[bool] = OMIT,
         scope: typing.Optional[typing.Sequence[str]] = OMIT,
@@ -132,12 +132,12 @@ class ClientGrantsClient:
 
         Parameters
         ----------
-        client_id : str
-            ID of the client.
-
         audience : str
             The audience (API identifier) of this client grant
 
+        client_id : typing.Optional[str]
+            ID of the client.
+
         organization_usage : typing.Optional[ClientGrantOrganizationUsageEnum]
 
         allow_any_organization : typing.Optional[bool]
@@ -170,13 +170,12 @@ class ClientGrantsClient:
             token="YOUR_TOKEN",
         )
         client.client_grants.create(
-            client_id="client_id",
             audience="audience",
         )
         """
         _response = self._raw_client.create(
-            client_id=client_id,
             audience=audience,
+            client_id=client_id,
             organization_usage=organization_usage,
             allow_any_organization=allow_any_organization,
             scope=scope,
@@ -423,8 +422,8 @@ class AsyncClientGrantsClient:
     async def create(
         self,
         *,
-        client_id: str,
         audience: str,
+        client_id: typing.Optional[str] = OMIT,
         organization_usage: typing.Optional[ClientGrantOrganizationUsageEnum] = OMIT,
         allow_any_organization: typing.Optional[bool] = OMIT,
         scope: typing.Optional[typing.Sequence[str]] = OMIT,
@@ -438,12 +437,12 @@ class AsyncClientGrantsClient:
 
         Parameters
         ----------
-        client_id : str
-            ID of the client.
-
         audience : str
             The audience (API identifier) of this client grant
 
+        client_id : typing.Optional[str]
+            ID of the client.
+
         organization_usage : typing.Optional[ClientGrantOrganizationUsageEnum]
 
         allow_any_organization : typing.Optional[bool]
@@ -481,7 +480,6 @@ class AsyncClientGrantsClient:
 
         async def main() -> None:
             await client.client_grants.create(
-                client_id="client_id",
                 audience="audience",
             )
 
@@ -489,8 +487,8 @@ class AsyncClientGrantsClient:
         asyncio.run(main())
         """
         _response = await self._raw_client.create(
-            client_id=client_id,
             audience=audience,
+            client_id=client_id,
             organization_usage=organization_usage,
             allow_any_organization=allow_any_organization,
             scope=scope,

auth0/management/client_grants/raw_client.py

@@ -152,8 +152,8 @@ class RawClientGrantsClient:
     def create(
         self,
         *,
-        client_id: str,
         audience: str,
+        client_id: typing.Optional[str] = OMIT,
         organization_usage: typing.Optional[ClientGrantOrganizationUsageEnum] = OMIT,
         allow_any_organization: typing.Optional[bool] = OMIT,
         scope: typing.Optional[typing.Sequence[str]] = OMIT,
@@ -167,12 +167,12 @@ class RawClientGrantsClient:
 
         Parameters
         ----------
-        client_id : str
-            ID of the client.
-
         audience : str
             The audience (API identifier) of this client grant
 
+        client_id : typing.Optional[str]
+            ID of the client.
+
         organization_usage : typing.Optional[ClientGrantOrganizationUsageEnum]
 
         allow_any_organization : typing.Optional[bool]
@@ -707,8 +707,8 @@ class AsyncRawClientGrantsClient:
     async def create(
         self,
         *,
-        client_id: str,
         audience: str,
+        client_id: typing.Optional[str] = OMIT,
         organization_usage: typing.Optional[ClientGrantOrganizationUsageEnum] = OMIT,
         allow_any_organization: typing.Optional[bool] = OMIT,
         scope: typing.Optional[typing.Sequence[str]] = OMIT,
@@ -722,12 +722,12 @@ class AsyncRawClientGrantsClient:
 
         Parameters
         ----------
-        client_id : str
-            ID of the client.
-
         audience : str
             The audience (API identifier) of this client grant
 
+        client_id : typing.Optional[str]
+            ID of the client.
+
         organization_usage : typing.Optional[ClientGrantOrganizationUsageEnum]
 
         allow_any_organization : typing.Optional[bool]

auth0/management/clients/client.py

@@ -151,7 +151,7 @@ class ClientsClient:
             Optional filter by a comma-separated list of application types.
 
         q : typing.Optional[str]
-            Advanced Query in <a href="http://www.lucenetutorial.com/lucene-query-syntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i>
+            Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i>
 
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
@@ -288,6 +288,7 @@ class ClientsClient:
         oidc_logout : typing.Optional[ClientOidcBackchannelLogoutSettings]
 
         oidc_backchannel_logout : typing.Optional[ClientOidcBackchannelLogoutSettings]
+            Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout)
 
         session_transfer : typing.Optional[ClientSessionTransferConfiguration]
 
@@ -677,6 +678,7 @@ class ClientsClient:
         oidc_logout : typing.Optional[ClientOidcBackchannelLogoutSettings]
 
         oidc_backchannel_logout : typing.Optional[ClientOidcBackchannelLogoutSettings]
+            Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout)
 
         session_transfer : typing.Optional[ClientSessionTransferConfiguration]
 
@@ -696,11 +698,13 @@ class ClientsClient:
             Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients
 
         allowed_logout_urls : typing.Optional[typing.Sequence[str]]
-            URLs that are valid to redirect to after logout from Auth0.
+            URLs that are valid to redirect to after logout from Auth0
 
         jwt_configuration : typing.Optional[ClientJwtConfiguration]
+            An object that holds settings related to how JWTs are created
 
         encryption_key : typing.Optional[ClientEncryptionKey]
+            The client's encryption key
 
         sso : typing.Optional[bool]
             <code>true</code> to use Auth0 instead of the IdP to do Single Sign On, <code>false</code> otherwise (default: <code>false</code>)
@@ -745,6 +749,7 @@ class ClientsClient:
         client_metadata : typing.Optional[ClientMetadata]
 
         mobile : typing.Optional[ClientMobile]
+            Configuration related to native mobile apps
 
         initiate_login_uri : typing.Optional[str]
             Initiate login uri, must be https
@@ -1011,7 +1016,7 @@ class AsyncClientsClient:
             Optional filter by a comma-separated list of application types.
 
         q : typing.Optional[str]
-            Advanced Query in <a href="http://www.lucenetutorial.com/lucene-query-syntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i>
+            Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i>
 
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
@@ -1157,6 +1162,7 @@ class AsyncClientsClient:
         oidc_logout : typing.Optional[ClientOidcBackchannelLogoutSettings]
 
         oidc_backchannel_logout : typing.Optional[ClientOidcBackchannelLogoutSettings]
+            Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout)
 
         session_transfer : typing.Optional[ClientSessionTransferConfiguration]
 
@@ -1570,6 +1576,7 @@ class AsyncClientsClient:
         oidc_logout : typing.Optional[ClientOidcBackchannelLogoutSettings]
 
         oidc_backchannel_logout : typing.Optional[ClientOidcBackchannelLogoutSettings]
+            Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout)
 
         session_transfer : typing.Optional[ClientSessionTransferConfiguration]
 
@@ -1589,11 +1596,13 @@ class AsyncClientsClient:
             Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients
 
         allowed_logout_urls : typing.Optional[typing.Sequence[str]]
-            URLs that are valid to redirect to after logout from Auth0.
+            URLs that are valid to redirect to after logout from Auth0
 
         jwt_configuration : typing.Optional[ClientJwtConfiguration]
+            An object that holds settings related to how JWTs are created
 
         encryption_key : typing.Optional[ClientEncryptionKey]
+            The client's encryption key
 
         sso : typing.Optional[bool]
             <code>true</code> to use Auth0 instead of the IdP to do Single Sign On, <code>false</code> otherwise (default: <code>false</code>)
@@ -1638,6 +1647,7 @@ class AsyncClientsClient:
         client_metadata : typing.Optional[ClientMetadata]
 
         mobile : typing.Optional[ClientMobile]
+            Configuration related to native mobile apps
 
         initiate_login_uri : typing.Optional[str]
             Initiate login uri, must be https

auth0/management/clients/credentials/client.py

@@ -78,6 +78,7 @@ class CredentialsClient:
         alg: typing.Optional[PublicKeyCredentialAlgorithmEnum] = OMIT,
         parse_expiry_from_cert: typing.Optional[bool] = OMIT,
         expires_at: typing.Optional[dt.datetime] = OMIT,
+        kid: typing.Optional[str] = OMIT,
         request_options: typing.Optional[RequestOptions] = None,
     ) -> PostClientCredentialResponseContent:
         """
@@ -139,6 +140,9 @@ class CredentialsClient:
         expires_at : typing.Optional[dt.datetime]
             The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type.
 
+        kid : typing.Optional[str]
+            Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64}
+
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
 
@@ -168,6 +172,7 @@ class CredentialsClient:
             alg=alg,
             parse_expiry_from_cert=parse_expiry_from_cert,
             expires_at=expires_at,
+            kid=kid,
             request_options=request_options,
         )
         return _response.data
@@ -364,6 +369,7 @@ class AsyncCredentialsClient:
         alg: typing.Optional[PublicKeyCredentialAlgorithmEnum] = OMIT,
         parse_expiry_from_cert: typing.Optional[bool] = OMIT,
         expires_at: typing.Optional[dt.datetime] = OMIT,
+        kid: typing.Optional[str] = OMIT,
         request_options: typing.Optional[RequestOptions] = None,
     ) -> PostClientCredentialResponseContent:
         """
@@ -425,6 +431,9 @@ class AsyncCredentialsClient:
         expires_at : typing.Optional[dt.datetime]
             The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type.
 
+        kid : typing.Optional[str]
+            Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64}
+
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
 
@@ -462,6 +471,7 @@ class AsyncCredentialsClient:
             alg=alg,
             parse_expiry_from_cert=parse_expiry_from_cert,
             expires_at=expires_at,
+            kid=kid,
             request_options=request_options,
         )
         return _response.data

auth0/management/clients/credentials/raw_client.py

@@ -126,6 +126,7 @@ class RawCredentialsClient:
         alg: typing.Optional[PublicKeyCredentialAlgorithmEnum] = OMIT,
         parse_expiry_from_cert: typing.Optional[bool] = OMIT,
         expires_at: typing.Optional[dt.datetime] = OMIT,
+        kid: typing.Optional[str] = OMIT,
         request_options: typing.Optional[RequestOptions] = None,
     ) -> HttpResponse[PostClientCredentialResponseContent]:
         """
@@ -187,6 +188,9 @@ class RawCredentialsClient:
         expires_at : typing.Optional[dt.datetime]
             The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type.
 
+        kid : typing.Optional[str]
+            Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64}
+
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
 
@@ -206,6 +210,7 @@ class RawCredentialsClient:
                 "alg": alg,
                 "parse_expiry_from_cert": parse_expiry_from_cert,
                 "expires_at": expires_at,
+                "kid": kid,
             },
             headers={
                 "content-type": "application/json",
@@ -662,6 +667,7 @@ class AsyncRawCredentialsClient:
         alg: typing.Optional[PublicKeyCredentialAlgorithmEnum] = OMIT,
         parse_expiry_from_cert: typing.Optional[bool] = OMIT,
         expires_at: typing.Optional[dt.datetime] = OMIT,
+        kid: typing.Optional[str] = OMIT,
         request_options: typing.Optional[RequestOptions] = None,
     ) -> AsyncHttpResponse[PostClientCredentialResponseContent]:
         """
@@ -723,6 +729,9 @@ class AsyncRawCredentialsClient:
         expires_at : typing.Optional[dt.datetime]
             The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type.
 
+        kid : typing.Optional[str]
+            Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64}
+
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
 
@@ -742,6 +751,7 @@ class AsyncRawCredentialsClient:
                 "alg": alg,
                 "parse_expiry_from_cert": parse_expiry_from_cert,
                 "expires_at": expires_at,
+                "kid": kid,
             },
             headers={
                 "content-type": "application/json",