auth0-python 5.4.0__py3-none-any.whl → 5.5.0__py3-none-any.whl

auth0/management/__init__.py

@@ -81,6 +81,8 @@ if typing.TYPE_CHECKING:
         AttackProtectionUpdateCaptchaRecaptchaV2,
         AuthenticationMethodTypeEnum,
         AuthenticationTypeEnum,
+        BadRequestSchema,
+        BadRequestSchemaError,
         BotDetectionAllowlist,
         BotDetectionChallengePolicyPasswordFlowEnum,
         BotDetectionChallengePolicyPasswordResetFlowEnum,
@@ -1013,6 +1015,7 @@ if typing.TYPE_CHECKING:
         CreateVerificationEmailResponseContent,
         CreatedAuthenticationMethodTypeEnum,
         CreatedUserAuthenticationMethodTypeEnum,
+        CredentialDeviceTypeEnum,
         CredentialId,
         CustomDomain,
         CustomDomainCustomClientIpHeader,
@@ -1465,6 +1468,8 @@ if typing.TYPE_CHECKING:
         ExpressConfiguration,
         ExpressConfigurationOrNull,
         ExtensibilityEmailProviderCredentials,
+        FedCmLogin,
+        FedCmLoginGoogle,
         FederatedConnectionTokenSet,
         FlowAction,
         FlowActionActivecampaign,
@@ -1866,6 +1871,8 @@ if typing.TYPE_CHECKING:
         FlowsVaultConnectionSetupTypeBasicAuthEnum,
         FlowsVaultConnectionSetupTypeOauthClientCredentialsEnum,
         FlowsVaultConnectionSummary,
+        ForbiddenSchema,
+        ForbiddenSchemaError,
         FormBlock,
         FormBlockDivider,
         FormBlockDividerConfig,
@@ -2486,9 +2493,13 @@ if typing.TYPE_CHECKING:
         TokenQuota,
         TokenQuotaClientCredentials,
         TokenQuotaConfiguration,
+        TooManyRequestsSchema,
+        TooManyRequestsSchemaError,
         TwilioProviderConfiguration,
         TwilioProviderCredentials,
         TwilioProviderDeliveryMethodEnum,
+        UnauthorizedSchema,
+        UnauthorizedSchemaError,
         UniversalLoginExperienceEnum,
         UpdateActionBindingsResponseContent,
         UpdateActionModuleResponseContent,
@@ -2815,6 +2826,8 @@ _dynamic_imports: typing.Dict[str, str] = {
     "AuthenticationMethodTypeEnum": ".types",
     "AuthenticationTypeEnum": ".types",
     "BadRequestError": ".errors",
+    "BadRequestSchema": ".types",
+    "BadRequestSchemaError": ".types",
     "BotDetectionAllowlist": ".types",
     "BotDetectionChallengePolicyPasswordFlowEnum": ".types",
     "BotDetectionChallengePolicyPasswordResetFlowEnum": ".types",
@@ -3749,6 +3762,7 @@ _dynamic_imports: typing.Dict[str, str] = {
     "CreateVerificationEmailResponseContent": ".types",
     "CreatedAuthenticationMethodTypeEnum": ".types",
     "CreatedUserAuthenticationMethodTypeEnum": ".types",
+    "CredentialDeviceTypeEnum": ".types",
     "CredentialId": ".types",
     "CustomDomain": ".types",
     "CustomDomainHeader": ".management_client",
@@ -4205,6 +4219,8 @@ _dynamic_imports: typing.Dict[str, str] = {
     "ExpressConfiguration": ".types",
     "ExpressConfigurationOrNull": ".types",
     "ExtensibilityEmailProviderCredentials": ".types",
+    "FedCmLogin": ".types",
+    "FedCmLoginGoogle": ".types",
     "FederatedConnectionTokenSet": ".types",
     "FlowAction": ".types",
     "FlowActionActivecampaign": ".types",
@@ -4607,6 +4623,8 @@ _dynamic_imports: typing.Dict[str, str] = {
     "FlowsVaultConnectionSetupTypeOauthClientCredentialsEnum": ".types",
     "FlowsVaultConnectionSummary": ".types",
     "ForbiddenError": ".errors",
+    "ForbiddenSchema": ".types",
+    "ForbiddenSchemaError": ".types",
     "FormBlock": ".types",
     "FormBlockDivider": ".types",
     "FormBlockDividerConfig": ".types",
@@ -5236,10 +5254,14 @@ _dynamic_imports: typing.Dict[str, str] = {
     "TokenQuotaConfiguration": ".types",
     "TokenProvider": ".token_provider",
     "TooManyRequestsError": ".errors",
+    "TooManyRequestsSchema": ".types",
+    "TooManyRequestsSchemaError": ".types",
     "TwilioProviderConfiguration": ".types",
     "TwilioProviderCredentials": ".types",
     "TwilioProviderDeliveryMethodEnum": ".types",
     "UnauthorizedError": ".errors",
+    "UnauthorizedSchema": ".types",
+    "UnauthorizedSchemaError": ".types",
     "UniversalLoginExperienceEnum": ".types",
     "UpdateActionBindingsResponseContent": ".types",
     "UpdateActionModuleResponseContent": ".types",
@@ -5567,6 +5589,8 @@ __all__ = [
     "AuthenticationMethodTypeEnum",
     "AuthenticationTypeEnum",
     "BadRequestError",
+    "BadRequestSchema",
+    "BadRequestSchemaError",
     "BotDetectionAllowlist",
     "BotDetectionChallengePolicyPasswordFlowEnum",
     "BotDetectionChallengePolicyPasswordResetFlowEnum",
@@ -6501,9 +6525,9 @@ __all__ = [
     "CreateVerificationEmailResponseContent",
     "CreatedAuthenticationMethodTypeEnum",
     "CreatedUserAuthenticationMethodTypeEnum",
+    "CredentialDeviceTypeEnum",
     "CredentialId",
     "CustomDomain",
-    "CustomDomainHeader",
     "CustomDomainCustomClientIpHeader",
     "CustomDomainCustomClientIpHeaderEnum",
     "CustomDomainProvisioningTypeEnum",
@@ -6957,6 +6981,8 @@ __all__ = [
     "ExpressConfiguration",
     "ExpressConfigurationOrNull",
     "ExtensibilityEmailProviderCredentials",
+    "FedCmLogin",
+    "FedCmLoginGoogle",
     "FederatedConnectionTokenSet",
     "FlowAction",
     "FlowActionActivecampaign",
@@ -7359,6 +7385,8 @@ __all__ = [
     "FlowsVaultConnectionSetupTypeOauthClientCredentialsEnum",
     "FlowsVaultConnectionSummary",
     "ForbiddenError",
+    "ForbiddenSchema",
+    "ForbiddenSchemaError",
     "FormBlock",
     "FormBlockDivider",
     "FormBlockDividerConfig",
@@ -7988,10 +8016,14 @@ __all__ = [
     "TokenQuotaClientCredentials",
     "TokenQuotaConfiguration",
     "TooManyRequestsError",
+    "TooManyRequestsSchema",
+    "TooManyRequestsSchemaError",
     "TwilioProviderConfiguration",
     "TwilioProviderCredentials",
     "TwilioProviderDeliveryMethodEnum",
     "UnauthorizedError",
+    "UnauthorizedSchema",
+    "UnauthorizedSchemaError",
     "UniversalLoginExperienceEnum",
     "UpdateActionBindingsResponseContent",
     "UpdateActionModuleResponseContent",

auth0/management/client.py

@@ -84,6 +84,9 @@ class Auth0:
     timeout : typing.Optional[float]
         The timeout to be used, in seconds, for requests. By default the timeout is 60 seconds, unless a custom httpx client is used, in which case this default is not enforced.
 
+    max_retries : typing.Optional[int]
+        The default maximum number of retries for failed requests. Defaults to 2. Per-request `max_retries` in `request_options` takes precedence over this value.
+
     follow_redirects : typing.Optional[bool]
         Whether the default httpx client follows redirects or not, this is irrelevant if a custom httpx client is passed in.
 
@@ -111,6 +114,7 @@ class Auth0:
         token: typing.Union[str, typing.Callable[[], str]],
         headers: typing.Optional[typing.Dict[str, str]] = None,
         timeout: typing.Optional[float] = None,
+        max_retries: typing.Optional[int] = None,
         follow_redirects: typing.Optional[bool] = True,
         httpx_client: typing.Optional[httpx.Client] = None,
         logging: typing.Optional[typing.Union[LogConfig, Logger]] = None,
@@ -118,6 +122,7 @@ class Auth0:
         _defaulted_timeout = (
             timeout if timeout is not None else 60 if httpx_client is None else httpx_client.timeout.read
         )
+        _defaulted_max_retries = max_retries if max_retries is not None else 2
         if tenant_domain is not None:
             _tenant_domain = tenant_domain if tenant_domain is not None else "{TENANT}.auth0.com"
             base_url = "https://{tenantDomain}/api/v2".format(tenantDomain=_tenant_domain)
@@ -131,6 +136,7 @@ class Auth0:
             if follow_redirects is not None
             else httpx.Client(timeout=_defaulted_timeout),
             timeout=_defaulted_timeout,
+            max_retries=_defaulted_max_retries,
             logging=logging,
         )
         self._actions: typing.Optional[ActionsClient] = None
@@ -580,6 +586,9 @@ class AsyncAuth0:
     timeout : typing.Optional[float]
         The timeout to be used, in seconds, for requests. By default the timeout is 60 seconds, unless a custom httpx client is used, in which case this default is not enforced.
 
+    max_retries : typing.Optional[int]
+        The default maximum number of retries for failed requests. Defaults to 2. Per-request `max_retries` in `request_options` takes precedence over this value.
+
     follow_redirects : typing.Optional[bool]
         Whether the default httpx client follows redirects or not, this is irrelevant if a custom httpx client is passed in.
 
@@ -608,6 +617,7 @@ class AsyncAuth0:
         headers: typing.Optional[typing.Dict[str, str]] = None,
         async_token: typing.Optional[typing.Callable[[], typing.Awaitable[str]]] = None,
         timeout: typing.Optional[float] = None,
+        max_retries: typing.Optional[int] = None,
         follow_redirects: typing.Optional[bool] = True,
         httpx_client: typing.Optional[httpx.AsyncClient] = None,
         logging: typing.Optional[typing.Union[LogConfig, Logger]] = None,
@@ -615,6 +625,7 @@ class AsyncAuth0:
         _defaulted_timeout = (
             timeout if timeout is not None else 60 if httpx_client is None else httpx_client.timeout.read
         )
+        _defaulted_max_retries = max_retries if max_retries is not None else 2
         if tenant_domain is not None:
             _tenant_domain = tenant_domain if tenant_domain is not None else "{TENANT}.auth0.com"
             base_url = "https://{tenantDomain}/api/v2".format(tenantDomain=_tenant_domain)
@@ -627,6 +638,7 @@ class AsyncAuth0:
             if httpx_client is not None
             else _make_default_async_client(timeout=_defaulted_timeout, follow_redirects=follow_redirects),
             timeout=_defaulted_timeout,
+            max_retries=_defaulted_max_retries,
             logging=logging,
         )
         self._actions: typing.Optional[AsyncActionsClient] = None

auth0/management/clients/client.py

@@ -46,6 +46,7 @@ from ..types.create_client_response_content import CreateClientResponseContent
 from ..types.create_token_quota import CreateTokenQuota
 from ..types.express_configuration import ExpressConfiguration
 from ..types.express_configuration_or_null import ExpressConfigurationOrNull
+from ..types.fed_cm_login import FedCmLogin
 from ..types.get_client_response_content import GetClientResponseContent
 from ..types.list_clients_offset_paginated_response_content import ListClientsOffsetPaginatedResponseContent
 from ..types.native_social_login import NativeSocialLogin
@@ -246,6 +247,7 @@ class ClientsClient:
         mobile: typing.Optional[ClientMobile] = OMIT,
         initiate_login_uri: typing.Optional[str] = OMIT,
         native_social_login: typing.Optional[NativeSocialLogin] = OMIT,
+        fedcm_login: typing.Optional[FedCmLogin] = OMIT,
         refresh_token: typing.Optional[ClientRefreshTokenConfiguration] = OMIT,
         default_organization: typing.Optional[ClientDefaultOrganization] = OMIT,
         organization_usage: typing.Optional[ClientOrganizationUsageEnum] = OMIT,
@@ -377,6 +379,8 @@ class ClientsClient:
 
         native_social_login : typing.Optional[NativeSocialLogin]
 
+        fedcm_login : typing.Optional[FedCmLogin]
+
         refresh_token : typing.Optional[ClientRefreshTokenConfiguration]
 
         default_organization : typing.Optional[ClientDefaultOrganization]
@@ -478,6 +482,7 @@ class ClientsClient:
             mobile=mobile,
             initiate_login_uri=initiate_login_uri,
             native_social_login=native_social_login,
+            fedcm_login=fedcm_login,
             refresh_token=refresh_token,
             default_organization=default_organization,
             organization_usage=organization_usage,
@@ -545,28 +550,37 @@ class ClientsClient:
         self, *, external_client_id: str, request_options: typing.Optional[RequestOptions] = None
     ) -> RegisterCimdClientResponseContent:
         """
-        
-              Idempotent registration for Client ID Metadata Document (CIMD) clients.
-              Uses external_client_id as the unique identifier for upsert operations.
-              **Create:** Returns 201 when a new client is created (requires \\
-        
+        Idempotent registration for Client ID Metadata Document (CIMD) clients.
+        Uses external_client_id as the unique identifier for upsert operations.
+
+        <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
+        <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+
+        This endpoint automatically:
+        <ul>
+          <li>Fetches and validates the metadata document</li>
+          <li>Maps CIMD fields to Auth0 client configuration</li>
+          <li>Creates/rotates credentials from the JWKS</li>
+          <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
+        </ul>
+
         Parameters
         ----------
         external_client_id : str
             URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations.
-        
+
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
-        
+
         Returns
         -------
         RegisterCimdClientResponseContent
             CIMD client successfully updated (idempotent).
-        
+
         Examples
         --------
         from auth0 import Auth0
-        
+
         client = Auth0(
             token="YOUR_TOKEN",
         )
@@ -726,6 +740,7 @@ class ClientsClient:
         mobile: typing.Optional[ClientMobile] = OMIT,
         initiate_login_uri: typing.Optional[str] = OMIT,
         native_social_login: typing.Optional[NativeSocialLogin] = OMIT,
+        fedcm_login: typing.Optional[FedCmLogin] = OMIT,
         refresh_token: typing.Optional[ClientRefreshTokenConfiguration] = OMIT,
         default_organization: typing.Optional[ClientDefaultOrganization] = OMIT,
         organization_usage: typing.Optional[ClientOrganizationUsagePatchEnum] = OMIT,
@@ -860,6 +875,8 @@ class ClientsClient:
 
         native_social_login : typing.Optional[NativeSocialLogin]
 
+        fedcm_login : typing.Optional[FedCmLogin]
+
         refresh_token : typing.Optional[ClientRefreshTokenConfiguration]
 
         default_organization : typing.Optional[ClientDefaultOrganization]
@@ -959,6 +976,7 @@ class ClientsClient:
             mobile=mobile,
             initiate_login_uri=initiate_login_uri,
             native_social_login=native_social_login,
+            fedcm_login=fedcm_login,
             refresh_token=refresh_token,
             default_organization=default_organization,
             organization_usage=organization_usage,
@@ -1227,6 +1245,7 @@ class AsyncClientsClient:
         mobile: typing.Optional[ClientMobile] = OMIT,
         initiate_login_uri: typing.Optional[str] = OMIT,
         native_social_login: typing.Optional[NativeSocialLogin] = OMIT,
+        fedcm_login: typing.Optional[FedCmLogin] = OMIT,
         refresh_token: typing.Optional[ClientRefreshTokenConfiguration] = OMIT,
         default_organization: typing.Optional[ClientDefaultOrganization] = OMIT,
         organization_usage: typing.Optional[ClientOrganizationUsageEnum] = OMIT,
@@ -1358,6 +1377,8 @@ class AsyncClientsClient:
 
         native_social_login : typing.Optional[NativeSocialLogin]
 
+        fedcm_login : typing.Optional[FedCmLogin]
+
         refresh_token : typing.Optional[ClientRefreshTokenConfiguration]
 
         default_organization : typing.Optional[ClientDefaultOrganization]
@@ -1467,6 +1488,7 @@ class AsyncClientsClient:
             mobile=mobile,
             initiate_login_uri=initiate_login_uri,
             native_social_login=native_social_login,
+            fedcm_login=fedcm_login,
             refresh_token=refresh_token,
             default_organization=default_organization,
             organization_usage=organization_usage,
@@ -1542,41 +1564,50 @@ class AsyncClientsClient:
         self, *, external_client_id: str, request_options: typing.Optional[RequestOptions] = None
     ) -> RegisterCimdClientResponseContent:
         """
-        
-              Idempotent registration for Client ID Metadata Document (CIMD) clients.
-              Uses external_client_id as the unique identifier for upsert operations.
-              **Create:** Returns 201 when a new client is created (requires \\
-        
+        Idempotent registration for Client ID Metadata Document (CIMD) clients.
+        Uses external_client_id as the unique identifier for upsert operations.
+
+        <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
+        <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+
+        This endpoint automatically:
+        <ul>
+          <li>Fetches and validates the metadata document</li>
+          <li>Maps CIMD fields to Auth0 client configuration</li>
+          <li>Creates/rotates credentials from the JWKS</li>
+          <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
+        </ul>
+
         Parameters
         ----------
         external_client_id : str
             URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations.
-        
+
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
-        
+
         Returns
         -------
         RegisterCimdClientResponseContent
             CIMD client successfully updated (idempotent).
-        
+
         Examples
         --------
         import asyncio
-        
+
         from auth0 import AsyncAuth0
-        
+
         client = AsyncAuth0(
             token="YOUR_TOKEN",
         )
-        
-        
+
+
         async def main() -> None:
             await client.clients.register_cimd_client(
                 external_client_id="external_client_id",
             )
-        
-        
+
+
         asyncio.run(main())
         """
         _response = await self._raw_client.register_cimd_client(
@@ -1747,6 +1778,7 @@ class AsyncClientsClient:
         mobile: typing.Optional[ClientMobile] = OMIT,
         initiate_login_uri: typing.Optional[str] = OMIT,
         native_social_login: typing.Optional[NativeSocialLogin] = OMIT,
+        fedcm_login: typing.Optional[FedCmLogin] = OMIT,
         refresh_token: typing.Optional[ClientRefreshTokenConfiguration] = OMIT,
         default_organization: typing.Optional[ClientDefaultOrganization] = OMIT,
         organization_usage: typing.Optional[ClientOrganizationUsagePatchEnum] = OMIT,
@@ -1881,6 +1913,8 @@ class AsyncClientsClient:
 
         native_social_login : typing.Optional[NativeSocialLogin]
 
+        fedcm_login : typing.Optional[FedCmLogin]
+
         refresh_token : typing.Optional[ClientRefreshTokenConfiguration]
 
         default_organization : typing.Optional[ClientDefaultOrganization]
@@ -1988,6 +2022,7 @@ class AsyncClientsClient:
             mobile=mobile,
             initiate_login_uri=initiate_login_uri,
             native_social_login=native_social_login,
+            fedcm_login=fedcm_login,
             refresh_token=refresh_token,
             default_organization=default_organization,
             organization_usage=organization_usage,

auth0/management/clients/raw_client.py

@@ -58,6 +58,7 @@ from ..types.create_client_response_content import CreateClientResponseContent
 from ..types.create_token_quota import CreateTokenQuota
 from ..types.express_configuration import ExpressConfiguration
 from ..types.express_configuration_or_null import ExpressConfigurationOrNull
+from ..types.fed_cm_login import FedCmLogin
 from ..types.get_client_response_content import GetClientResponseContent
 from ..types.list_clients_offset_paginated_response_content import ListClientsOffsetPaginatedResponseContent
 from ..types.native_social_login import NativeSocialLogin
@@ -299,6 +300,7 @@ class RawClientsClient:
         mobile: typing.Optional[ClientMobile] = OMIT,
         initiate_login_uri: typing.Optional[str] = OMIT,
         native_social_login: typing.Optional[NativeSocialLogin] = OMIT,
+        fedcm_login: typing.Optional[FedCmLogin] = OMIT,
         refresh_token: typing.Optional[ClientRefreshTokenConfiguration] = OMIT,
         default_organization: typing.Optional[ClientDefaultOrganization] = OMIT,
         organization_usage: typing.Optional[ClientOrganizationUsageEnum] = OMIT,
@@ -430,6 +432,8 @@ class RawClientsClient:
 
         native_social_login : typing.Optional[NativeSocialLogin]
 
+        fedcm_login : typing.Optional[FedCmLogin]
+
         refresh_token : typing.Optional[ClientRefreshTokenConfiguration]
 
         default_organization : typing.Optional[ClientDefaultOrganization]
@@ -541,6 +545,9 @@ class RawClientsClient:
                 "native_social_login": convert_and_respect_annotation_metadata(
                     object_=native_social_login, annotation=NativeSocialLogin, direction="write"
                 ),
+                "fedcm_login": convert_and_respect_annotation_metadata(
+                    object_=fedcm_login, annotation=FedCmLogin, direction="write"
+                ),
                 "refresh_token": convert_and_respect_annotation_metadata(
                     object_=refresh_token,
                     annotation=typing.Optional[ClientRefreshTokenConfiguration],
@@ -779,19 +786,28 @@ class RawClientsClient:
         self, *, external_client_id: str, request_options: typing.Optional[RequestOptions] = None
     ) -> HttpResponse[RegisterCimdClientResponseContent]:
         """
-        
-              Idempotent registration for Client ID Metadata Document (CIMD) clients.
-              Uses external_client_id as the unique identifier for upsert operations.
-              **Create:** Returns 201 when a new client is created (requires \\
-        
+        Idempotent registration for Client ID Metadata Document (CIMD) clients.
+        Uses external_client_id as the unique identifier for upsert operations.
+
+        <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
+        <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+
+        This endpoint automatically:
+        <ul>
+          <li>Fetches and validates the metadata document</li>
+          <li>Maps CIMD fields to Auth0 client configuration</li>
+          <li>Creates/rotates credentials from the JWKS</li>
+          <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
+        </ul>
+
         Parameters
         ----------
         external_client_id : str
             URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations.
-        
+
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
-        
+
         Returns
         -------
         HttpResponse[RegisterCimdClientResponseContent]
@@ -1142,6 +1158,7 @@ class RawClientsClient:
         mobile: typing.Optional[ClientMobile] = OMIT,
         initiate_login_uri: typing.Optional[str] = OMIT,
         native_social_login: typing.Optional[NativeSocialLogin] = OMIT,
+        fedcm_login: typing.Optional[FedCmLogin] = OMIT,
         refresh_token: typing.Optional[ClientRefreshTokenConfiguration] = OMIT,
         default_organization: typing.Optional[ClientDefaultOrganization] = OMIT,
         organization_usage: typing.Optional[ClientOrganizationUsagePatchEnum] = OMIT,
@@ -1276,6 +1293,8 @@ class RawClientsClient:
 
         native_social_login : typing.Optional[NativeSocialLogin]
 
+        fedcm_login : typing.Optional[FedCmLogin]
+
         refresh_token : typing.Optional[ClientRefreshTokenConfiguration]
 
         default_organization : typing.Optional[ClientDefaultOrganization]
@@ -1386,6 +1405,9 @@ class RawClientsClient:
                 "native_social_login": convert_and_respect_annotation_metadata(
                     object_=native_social_login, annotation=NativeSocialLogin, direction="write"
                 ),
+                "fedcm_login": convert_and_respect_annotation_metadata(
+                    object_=fedcm_login, annotation=FedCmLogin, direction="write"
+                ),
                 "refresh_token": convert_and_respect_annotation_metadata(
                     object_=refresh_token,
                     annotation=typing.Optional[ClientRefreshTokenConfiguration],
@@ -1846,6 +1868,7 @@ class AsyncRawClientsClient:
         mobile: typing.Optional[ClientMobile] = OMIT,
         initiate_login_uri: typing.Optional[str] = OMIT,
         native_social_login: typing.Optional[NativeSocialLogin] = OMIT,
+        fedcm_login: typing.Optional[FedCmLogin] = OMIT,
         refresh_token: typing.Optional[ClientRefreshTokenConfiguration] = OMIT,
         default_organization: typing.Optional[ClientDefaultOrganization] = OMIT,
         organization_usage: typing.Optional[ClientOrganizationUsageEnum] = OMIT,
@@ -1977,6 +2000,8 @@ class AsyncRawClientsClient:
 
         native_social_login : typing.Optional[NativeSocialLogin]
 
+        fedcm_login : typing.Optional[FedCmLogin]
+
         refresh_token : typing.Optional[ClientRefreshTokenConfiguration]
 
         default_organization : typing.Optional[ClientDefaultOrganization]
@@ -2088,6 +2113,9 @@ class AsyncRawClientsClient:
                 "native_social_login": convert_and_respect_annotation_metadata(
                     object_=native_social_login, annotation=NativeSocialLogin, direction="write"
                 ),
+                "fedcm_login": convert_and_respect_annotation_metadata(
+                    object_=fedcm_login, annotation=FedCmLogin, direction="write"
+                ),
                 "refresh_token": convert_and_respect_annotation_metadata(
                     object_=refresh_token,
                     annotation=typing.Optional[ClientRefreshTokenConfiguration],
@@ -2326,19 +2354,28 @@ class AsyncRawClientsClient:
         self, *, external_client_id: str, request_options: typing.Optional[RequestOptions] = None
     ) -> AsyncHttpResponse[RegisterCimdClientResponseContent]:
         """
-        
-              Idempotent registration for Client ID Metadata Document (CIMD) clients.
-              Uses external_client_id as the unique identifier for upsert operations.
-              **Create:** Returns 201 when a new client is created (requires \\
-        
+        Idempotent registration for Client ID Metadata Document (CIMD) clients.
+        Uses external_client_id as the unique identifier for upsert operations.
+
+        <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
+        <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+
+        This endpoint automatically:
+        <ul>
+          <li>Fetches and validates the metadata document</li>
+          <li>Maps CIMD fields to Auth0 client configuration</li>
+          <li>Creates/rotates credentials from the JWKS</li>
+          <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
+        </ul>
+
         Parameters
         ----------
         external_client_id : str
             URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations.
-        
+
         request_options : typing.Optional[RequestOptions]
             Request-specific configuration.
-        
+
         Returns
         -------
         AsyncHttpResponse[RegisterCimdClientResponseContent]
@@ -2691,6 +2728,7 @@ class AsyncRawClientsClient:
         mobile: typing.Optional[ClientMobile] = OMIT,
         initiate_login_uri: typing.Optional[str] = OMIT,
         native_social_login: typing.Optional[NativeSocialLogin] = OMIT,
+        fedcm_login: typing.Optional[FedCmLogin] = OMIT,
         refresh_token: typing.Optional[ClientRefreshTokenConfiguration] = OMIT,
         default_organization: typing.Optional[ClientDefaultOrganization] = OMIT,
         organization_usage: typing.Optional[ClientOrganizationUsagePatchEnum] = OMIT,
@@ -2825,6 +2863,8 @@ class AsyncRawClientsClient:
 
         native_social_login : typing.Optional[NativeSocialLogin]
 
+        fedcm_login : typing.Optional[FedCmLogin]
+
         refresh_token : typing.Optional[ClientRefreshTokenConfiguration]
 
         default_organization : typing.Optional[ClientDefaultOrganization]
@@ -2935,6 +2975,9 @@ class AsyncRawClientsClient:
                 "native_social_login": convert_and_respect_annotation_metadata(
                     object_=native_social_login, annotation=NativeSocialLogin, direction="write"
                 ),
+                "fedcm_login": convert_and_respect_annotation_metadata(
+                    object_=fedcm_login, annotation=FedCmLogin, direction="write"
+                ),
                 "refresh_token": convert_and_respect_annotation_metadata(
                     object_=refresh_token,
                     annotation=typing.Optional[ClientRefreshTokenConfiguration],