auth0 - npm Package Compare versions

Comparing version 4.20.0 to 4.21.0

dist/cjs/auth/oauth.d.ts

@@ -235,2 +235,30 @@ import { InitOverride, JSONApiResponse, VoidApiResponse } from '../lib/runtime.js';
 /**
+ * Options to exchange a federated connection token.
+ */
+export interface TokenForConnectionRequest {
+    /**
+     * The subject token(refresh token in this case) to exchange for an access token for a connection.
+     */
+    subject_token: string;
+    /**
+     * The target social provider connection (e.g., "google-oauth2").
+     */
+    connection: string;
+    /**
+     * Optional login hint
+     */
+    login_hint?: string;
+}
+export interface TokenForConnectionResponse {
+    access_token: string;
+    scope?: string;
+    expires_at: number;
+    connection: string;
+    [key: string]: unknown;
+}
+export declare const TOKEN_FOR_CONNECTION_GRANT_TYPE = "urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token";
+export declare const TOKEN_FOR_CONNECTION_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:refresh_token";
+export declare const TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = "http://auth0.com/oauth/token-type/federated-connection-access-token";
+export declare const TOKEN_URL = "/oauth/token";
+/**
  *  OAuth 2.0 flows.
@@ -394,2 +422,19 @@ */
     }): Promise<VoidApiResponse>;
+    /**
+     * Exchanges a subject token (refresh token in this case) for an access token for the connection.
+     *
+     * The request body includes:
+     * - client_id (and client_secret/client_assertion via addClientAuthentication)
+     * - grant_type set to `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`
+     * - subject_token (refresh token) and fixed subject_token_type for refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`)
+     * - requested_token_type (`http://auth0.com/oauth/token-type/federated-connection-access-token`) indicating that a federated connection access token is desired
+     * - connection name and an optional `login_hint` if provided
+     *
+     * @param bodyParameters - The options to retrieve a token for a connection.
+     * @returns A promise with the token response data.
+     * @throws An error if the exchange fails.
+     */
+    tokenForConnection(bodyParameters: TokenForConnectionRequest, options?: {
+        initOverrides?: InitOverride;
+    }): Promise<JSONApiResponse<TokenSet>>;
 }

dist/cjs/auth/oauth.js

 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth = void 0;
+exports.OAuth = exports.TOKEN_URL = exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE = exports.TOKEN_FOR_CONNECTION_GRANT_TYPE = void 0;
 const runtime_js_1 = require("../lib/runtime.js");
@@ -8,2 +8,6 @@ const base_auth_api_js_1 = require("./base-auth-api.js");
 const utils_js_1 = require("../utils.js");
+exports.TOKEN_FOR_CONNECTION_GRANT_TYPE = 'urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token';
+exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE = 'urn:ietf:params:oauth:token-type:refresh_token';
+exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = 'http://auth0.com/oauth/token-type/federated-connection-access-token';
+exports.TOKEN_URL = '/oauth/token';
 /**
@@ -208,4 +212,37 @@ *  OAuth 2.0 flows.
     }
+    /**
+     * Exchanges a subject token (refresh token in this case) for an access token for the connection.
+     *
+     * The request body includes:
+     * - client_id (and client_secret/client_assertion via addClientAuthentication)
+     * - grant_type set to `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`
+     * - subject_token (refresh token) and fixed subject_token_type for refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`)
+     * - requested_token_type (`http://auth0.com/oauth/token-type/federated-connection-access-token`) indicating that a federated connection access token is desired
+     * - connection name and an optional `login_hint` if provided
+     *
+     * @param bodyParameters - The options to retrieve a token for a connection.
+     * @returns A promise with the token response data.
+     * @throws An error if the exchange fails.
+     */
+    async tokenForConnection(bodyParameters, options = {}) {
+        (0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['connection', 'subject_token']);
+        const body = {
+            ...bodyParameters,
+            grant_type: exports.TOKEN_FOR_CONNECTION_GRANT_TYPE,
+            subject_token_type: exports.TOKEN_FOR_CONNECTION_TOKEN_TYPE,
+            requested_token_type: exports.TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE,
+        };
+        await this.addClientAuthentication(body);
+        const response = await this.request({
+            path: exports.TOKEN_URL,
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams(body),
+        }, options.initOverrides);
+        return runtime_js_1.JSONApiResponse.fromResponse(response);
+    }
 }
 exports.OAuth = OAuth;
 //# sourceMappingURL=oauth.js.map

dist/cjs/auth/tokenExchange.d.ts

@@ -139,14 +139,2 @@ import { BaseAuthAPI } from './base-auth-api.js';
     exchangeToken(options: CustomTokenExchangeOptions): Promise<TokenResponse>;
-    /**
-     * Enforces namespace ownership requirements for token types
-     *
-     * @param tokenType - Proposed subject_token_type value
-     * @throws {Error} When reserved namespace pattern detected
-     *
-     * @privateRemarks
-     * Implements RFC 8693 Section 4.1 requirements for token type URIs
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc8693#section-4.1 | RFC 8693 Section 4.1}
-     */
-    private validateTokenType;
 }
@@ -153,0 +141,0 @@ /**

dist/cjs/auth/tokenExchange.js

@@ -49,3 +49,2 @@ "use strict";
     async exchangeToken(options) {
-        this.validateTokenType(options.subject_token_type);
         const body = {
@@ -68,26 +67,4 @@ ...options,
     }
-    /**
-     * Enforces namespace ownership requirements for token types
-     *
-     * @param tokenType - Proposed subject_token_type value
-     * @throws {Error} When reserved namespace pattern detected
-     *
-     * @privateRemarks
-     * Implements RFC 8693 Section 4.1 requirements for token type URIs
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc8693#section-4.1 | RFC 8693 Section 4.1}
-     */
-    validateTokenType(tokenType) {
-        const reservedPatterns = [
-            /^urn:ietf:params:oauth:/i,
-            /^https:\/\/auth0\.com\//i,
-            /^urn:auth0:/i,
-        ];
-        if (reservedPatterns.some((pattern) => pattern.test(tokenType))) {
-            throw new Error(`Invalid subject_token_type '${tokenType}'. ` +
-                `Reserved namespaces are prohibited. Use URIs under your organization's control.`);
-        }
-    }
 }
 exports.CustomTokenExchange = CustomTokenExchange;
 //# sourceMappingURL=tokenExchange.js.map

dist/cjs/management/__generated/index.d.ts

 export * from './managers/index.js';
 export * from './models/index.js';
-import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, TokenExchangeProfilesManager, UserBlocksManager, UsersManager, UsersByEmailManager } from './managers/index.js';
+import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, NetworkAclsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, TokenExchangeProfilesManager, UserBlocksManager, UsersManager, UsersByEmailManager } from './managers/index.js';
 import { Configuration } from '../../lib/runtime.js';
@@ -28,2 +28,3 @@ export declare abstract class ManagementClientBase {
     readonly logs: LogsManager;
+    readonly networkAcls: NetworkAclsManager;
     readonly organizations: OrganizationsManager;
@@ -30,0 +31,0 @@ readonly prompts: PromptsManager;

dist/cjs/management/__generated/index.js

@@ -45,2 +45,3 @@ "use strict";
         this.logs = new index_js_1.LogsManager(this.configuration);
+        this.networkAcls = new index_js_1.NetworkAclsManager(this.configuration);
         this.organizations = new index_js_1.OrganizationsManager(this.configuration);
@@ -47,0 +48,0 @@ this.prompts = new index_js_1.PromptsManager(this.configuration);

dist/cjs/management/__generated/managers/attack-protection-manager.d.ts

@@ -10,3 +10,4 @@ import * as runtime from '../../../lib/runtime.js';
     /**
-     * Get breached password detection settings
+     * Retrieve details of the Breached Password Detection configuration of your tenant.
+     * Get Breached Password Detection settings
      *
@@ -29,3 +30,4 @@ * @throws {RequiredError}
     /**
-     * Update breached password detection settings
+     * Update details of the Breached Password Detection configuration of your tenant.
+     * Update Breached Password Detection settings
      *
@@ -32,0 +34,0 @@ * @throws {RequiredError}

dist/cjs/management/__generated/managers/attack-protection-manager.js

@@ -34,3 +34,4 @@ "use strict";
     /**
-     * Get breached password detection settings
+     * Retrieve details of the Breached Password Detection configuration of your tenant.
+     * Get Breached Password Detection settings
      *
@@ -71,3 +72,4 @@ * @throws {RequiredError}
     /**
-     * Update breached password detection settings
+     * Update details of the Breached Password Detection configuration of your tenant.
+     * Update Breached Password Detection settings
      *
@@ -74,0 +76,0 @@ * @throws {RequiredError}

dist/cjs/management/__generated/managers/index.d.ts

@@ -22,2 +22,3 @@ export * from './actions-manager.js';
 export * from './logs-manager.js';
+export * from './network-acls-manager.js';
 export * from './organizations-manager.js';
@@ -24,0 +25,0 @@ export * from './prompts-manager.js';

dist/cjs/management/__generated/managers/index.js

@@ -38,2 +38,3 @@ "use strict";
 __exportStar(require("./logs-manager.js"), exports);
+__exportStar(require("./network-acls-manager.js"), exports);
 __exportStar(require("./organizations-manager.js"), exports);
@@ -40,0 +41,0 @@ __exportStar(require("./prompts-manager.js"), exports);

dist/cjs/management/__generated/managers/users-manager.d.ts

 import * as runtime from '../../../lib/runtime.js';
 import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
-import type { DeletePermissionsRequest, DeleteUserIdentityByUserId200ResponseInner, DeleteUserRolesRequest, GetAuthenticationMethods200ResponseOneOfInner, GetRefreshTokensForUser200Response, GetSessionsForUser200Response, GetUsers200ResponseOneOfInner, PatchAuthenticationMethodsByAuthenticationMethodIdRequest, PostAuthenticationMethods201Response, PostAuthenticationMethodsRequest, PostIdentitiesRequest, PostPermissionsRequest, PostRecoveryCodeRegeneration200Response, PostUserRolesRequest, PutAuthenticationMethods200ResponseInner, PutAuthenticationMethodsRequestInner, UserCreate, UserEnrollment, UserIdentity, UserUpdate, GetAuthenticationMethods200ResponseOneOf, GetLogs200ResponseOneOf, Log, GetPermissions200ResponseOneOf, GetPermissions200ResponseOneOfInner, GetOrganizations200ResponseOneOf, GetOrganizations200ResponseOneOfInner, GetOrganizationMemberRoles200ResponseOneOf, GetOrganizationMemberRoles200ResponseOneOfInner, GetUsers200ResponseOneOf, DeleteAuthenticationMethodsRequest, DeleteAuthenticationMethodsByAuthenticationMethodIdRequest, DeleteAuthenticatorsRequest, DeleteMultifactorByProviderRequest, DeletePermissionsOperationRequest, DeleteRefreshTokensForUserRequest, DeleteSessionsForUserRequest, DeleteUserIdentityByUserIdRequest, DeleteUserRolesOperationRequest, DeleteUsersByIdRequest, GetAuthenticationMethodsRequest, GetAuthenticationMethodsByAuthenticationMethodIdRequest, GetEnrollmentsRequest, GetLogsByUserRequest, GetPermissionsRequest, GetRefreshTokensForUserRequest, GetSessionsForUserRequest, GetUserOrganizationsRequest, GetUserRolesRequest, GetUsersRequest, GetUsersByIdRequest, PatchAuthenticationMethodsByAuthenticationMethodIdOperationRequest, PatchUsersByIdRequest, PostAuthenticationMethodsOperationRequest, PostIdentitiesOperationRequest, PostInvalidateRememberBrowserRequest, PostPermissionsOperationRequest, PostRecoveryCodeRegenerationRequest, PostUserRolesOperationRequest, PutAuthenticationMethodsRequest } from '../models/index.js';
+import type { DeletePermissionsRequest, DeleteUserIdentityByUserId200ResponseInner, DeleteUserRolesRequest, GetAuthenticationMethods200ResponseOneOfInner, GetFederatedConnectionsTokensets200ResponseInner, GetRefreshTokensForUser200Response, GetSessionsForUser200Response, GetUsers200ResponseOneOfInner, PatchAuthenticationMethodsByAuthenticationMethodIdRequest, PostAuthenticationMethods201Response, PostAuthenticationMethodsRequest, PostIdentitiesRequest, PostPermissionsRequest, PostRecoveryCodeRegeneration200Response, PostUserRolesRequest, PutAuthenticationMethods200ResponseInner, PutAuthenticationMethodsRequestInner, UserCreate, UserEnrollment, UserIdentity, UserUpdate, GetAuthenticationMethods200ResponseOneOf, GetLogs200ResponseOneOf, Log, GetPermissions200ResponseOneOf, GetPermissions200ResponseOneOfInner, GetOrganizations200ResponseOneOf, GetOrganizations200ResponseOneOfInner, GetOrganizationMemberRoles200ResponseOneOf, GetOrganizationMemberRoles200ResponseOneOfInner, GetUsers200ResponseOneOf, DeleteAuthenticationMethodsRequest, DeleteAuthenticationMethodsByAuthenticationMethodIdRequest, DeleteAuthenticatorsRequest, DeleteFederatedConnectionsTokensetsByTokensetIdRequest, DeleteMultifactorByProviderRequest, DeletePermissionsOperationRequest, DeleteRefreshTokensForUserRequest, DeleteSessionsForUserRequest, DeleteUserIdentityByUserIdRequest, DeleteUserRolesOperationRequest, DeleteUsersByIdRequest, GetAuthenticationMethodsRequest, GetAuthenticationMethodsByAuthenticationMethodIdRequest, GetEnrollmentsRequest, GetFederatedConnectionsTokensetsRequest, GetLogsByUserRequest, GetPermissionsRequest, GetRefreshTokensForUserRequest, GetSessionsForUserRequest, GetUserOrganizationsRequest, GetUserRolesRequest, GetUsersRequest, GetUsersByIdRequest, PatchAuthenticationMethodsByAuthenticationMethodIdOperationRequest, PatchUsersByIdRequest, PostAuthenticationMethodsOperationRequest, PostIdentitiesOperationRequest, PostInvalidateRememberBrowserRequest, PostPermissionsOperationRequest, PostRecoveryCodeRegenerationRequest, PostUserRolesOperationRequest, PutAuthenticationMethodsRequest } from '../models/index.js';
 declare const BaseAPI: typeof runtime.BaseAPI;
@@ -28,2 +28,8 @@ /**
     /**
+     * Deletes a tokenset for federated connections by id.
+     *
+     * @throws {RequiredError}
+     */
+    deleteTokenset(requestParameters: DeleteFederatedConnectionsTokensetsByTokensetIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
      * Delete a <a href="https://auth0.com/docs/multifactor-authentication">multifactor</a> configuration for a user. This forces the user to re-configure the multi-factor provider.
@@ -101,2 +107,9 @@ * Delete a User's Multi-factor Provider
     /**
+     * List active federated connections tokensets for a provided user
+     * Get tokensets for a user
+     *
+     * @throws {RequiredError}
+     */
+    getAllTokensets(requestParameters: GetFederatedConnectionsTokensetsRequest, initOverrides?: InitOverride): Promise<ApiResponse<Array<GetFederatedConnectionsTokensets200ResponseInner>>>;
+    /**
      * Retrieve log events for a specific user.
@@ -103,0 +116,0 @@ *

dist/cjs/management/__generated/managers/users-manager.js

@@ -75,2 +75,17 @@ "use strict";
     /**
+     * Deletes a tokenset for federated connections by id.
+     *
+     * @throws {RequiredError}
+     */
+    async deleteTokenset(requestParameters, initOverrides) {
+        runtime.validateRequiredRequestParams(requestParameters, ['id', 'tokenset_id']);
+        const response = await this.request({
+            path: `/users/{id}/federated-connections-tokensets/{tokenset_id}`
+                .replace('{id}', encodeURIComponent(String(requestParameters.id)))
+                .replace('{tokenset_id}', encodeURIComponent(String(requestParameters.tokenset_id))),
+            method: 'DELETE',
+        }, initOverrides);
+        return runtime.VoidApiResponse.fromResponse(response);
+    }
+    /**
      * Delete a <a href="https://auth0.com/docs/multifactor-authentication">multifactor</a> configuration for a user. This forces the user to re-configure the multi-factor provider.
@@ -239,2 +254,16 @@ * Delete a User's Multi-factor Provider
     }
+    /**
+     * List active federated connections tokensets for a provided user
+     * Get tokensets for a user
+     *
+     * @throws {RequiredError}
+     */
+    async getAllTokensets(requestParameters, initOverrides) {
+        runtime.validateRequiredRequestParams(requestParameters, ['id']);
+        const response = await this.request({
+            path: `/users/{id}/federated-connections-tokensets`.replace('{id}', encodeURIComponent(String(requestParameters.id))),
+            method: 'GET',
+        }, initOverrides);
+        return runtime.JSONApiResponse.fromResponse(response);
+    }
     async getLogs(requestParameters, initOverrides) {
@@ -241,0 +270,0 @@ runtime.validateRequiredRequestParams(requestParameters, ['id']);

dist/cjs/version.d.ts

@@ -1,1 +0,1 @@
-export declare const version = "4.20.0";
+export declare const version = "4.21.0";

dist/cjs/version.js

 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.version = void 0;
-exports.version = '4.20.0';
+exports.version = '4.21.0';
 //# sourceMappingURL=version.js.map

dist/esm/auth/oauth.d.ts

@@ -235,2 +235,30 @@ import { InitOverride, JSONApiResponse, VoidApiResponse } from '../lib/runtime.js';
 /**
+ * Options to exchange a federated connection token.
+ */
+export interface TokenForConnectionRequest {
+    /**
+     * The subject token(refresh token in this case) to exchange for an access token for a connection.
+     */
+    subject_token: string;
+    /**
+     * The target social provider connection (e.g., "google-oauth2").
+     */
+    connection: string;
+    /**
+     * Optional login hint
+     */
+    login_hint?: string;
+}
+export interface TokenForConnectionResponse {
+    access_token: string;
+    scope?: string;
+    expires_at: number;
+    connection: string;
+    [key: string]: unknown;
+}
+export declare const TOKEN_FOR_CONNECTION_GRANT_TYPE = "urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token";
+export declare const TOKEN_FOR_CONNECTION_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:refresh_token";
+export declare const TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = "http://auth0.com/oauth/token-type/federated-connection-access-token";
+export declare const TOKEN_URL = "/oauth/token";
+/**
  *  OAuth 2.0 flows.
@@ -394,2 +422,19 @@ */
     }): Promise<VoidApiResponse>;
+    /**
+     * Exchanges a subject token (refresh token in this case) for an access token for the connection.
+     *
+     * The request body includes:
+     * - client_id (and client_secret/client_assertion via addClientAuthentication)
+     * - grant_type set to `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`
+     * - subject_token (refresh token) and fixed subject_token_type for refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`)
+     * - requested_token_type (`http://auth0.com/oauth/token-type/federated-connection-access-token`) indicating that a federated connection access token is desired
+     * - connection name and an optional `login_hint` if provided
+     *
+     * @param bodyParameters - The options to retrieve a token for a connection.
+     * @returns A promise with the token response data.
+     * @throws An error if the exchange fails.
+     */
+    tokenForConnection(bodyParameters: TokenForConnectionRequest, options?: {
+        initOverrides?: InitOverride;
+    }): Promise<JSONApiResponse<TokenSet>>;
 }

dist/esm/auth/oauth.js

@@ -5,2 +5,6 @@ import { JSONApiResponse, VoidApiResponse, validateRequiredRequestParams, } from '../lib/runtime.js';
 import { mtlsPrefix } from '../utils.js';
+export const TOKEN_FOR_CONNECTION_GRANT_TYPE = 'urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token';
+export const TOKEN_FOR_CONNECTION_TOKEN_TYPE = 'urn:ietf:params:oauth:token-type:refresh_token';
+export const TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE = 'http://auth0.com/oauth/token-type/federated-connection-access-token';
+export const TOKEN_URL = '/oauth/token';
 /**
@@ -205,3 +209,36 @@ *  OAuth 2.0 flows.
     }
+    /**
+     * Exchanges a subject token (refresh token in this case) for an access token for the connection.
+     *
+     * The request body includes:
+     * - client_id (and client_secret/client_assertion via addClientAuthentication)
+     * - grant_type set to `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`
+     * - subject_token (refresh token) and fixed subject_token_type for refresh tokens (`urn:ietf:params:oauth:token-type:refresh_token`)
+     * - requested_token_type (`http://auth0.com/oauth/token-type/federated-connection-access-token`) indicating that a federated connection access token is desired
+     * - connection name and an optional `login_hint` if provided
+     *
+     * @param bodyParameters - The options to retrieve a token for a connection.
+     * @returns A promise with the token response data.
+     * @throws An error if the exchange fails.
+     */
+    async tokenForConnection(bodyParameters, options = {}) {
+        validateRequiredRequestParams(bodyParameters, ['connection', 'subject_token']);
+        const body = {
+            ...bodyParameters,
+            grant_type: TOKEN_FOR_CONNECTION_GRANT_TYPE,
+            subject_token_type: TOKEN_FOR_CONNECTION_TOKEN_TYPE,
+            requested_token_type: TOKEN_FOR_CONNECTION_REQUESTED_TOKEN_TYPE,
+        };
+        await this.addClientAuthentication(body);
+        const response = await this.request({
+            path: TOKEN_URL,
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams(body),
+        }, options.initOverrides);
+        return JSONApiResponse.fromResponse(response);
+    }
 }
 //# sourceMappingURL=oauth.js.map

dist/esm/auth/tokenExchange.d.ts

@@ -139,14 +139,2 @@ import { BaseAuthAPI } from './base-auth-api.js';
     exchangeToken(options: CustomTokenExchangeOptions): Promise<TokenResponse>;
-    /**
-     * Enforces namespace ownership requirements for token types
-     *
-     * @param tokenType - Proposed subject_token_type value
-     * @throws {Error} When reserved namespace pattern detected
-     *
-     * @privateRemarks
-     * Implements RFC 8693 Section 4.1 requirements for token type URIs
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc8693#section-4.1 | RFC 8693 Section 4.1}
-     */
-    private validateTokenType;
 }
@@ -153,0 +141,0 @@ /**

dist/esm/auth/tokenExchange.js

@@ -46,3 +46,2 @@ import { JSONApiResponse } from '../lib/models.js';
     async exchangeToken(options) {
-        this.validateTokenType(options.subject_token_type);
         const body = {
@@ -65,25 +64,3 @@ ...options,
     }
-    /**
-     * Enforces namespace ownership requirements for token types
-     *
-     * @param tokenType - Proposed subject_token_type value
-     * @throws {Error} When reserved namespace pattern detected
-     *
-     * @privateRemarks
-     * Implements RFC 8693 Section 4.1 requirements for token type URIs
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc8693#section-4.1 | RFC 8693 Section 4.1}
-     */
-    validateTokenType(tokenType) {
-        const reservedPatterns = [
-            /^urn:ietf:params:oauth:/i,
-            /^https:\/\/auth0\.com\//i,
-            /^urn:auth0:/i,
-        ];
-        if (reservedPatterns.some((pattern) => pattern.test(tokenType))) {
-            throw new Error(`Invalid subject_token_type '${tokenType}'. ` +
-                `Reserved namespaces are prohibited. Use URIs under your organization's control.`);
-        }
-    }
 }
 //# sourceMappingURL=tokenExchange.js.map

dist/esm/management/__generated/index.d.ts

 export * from './managers/index.js';
 export * from './models/index.js';
-import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, TokenExchangeProfilesManager, UserBlocksManager, UsersManager, UsersByEmailManager } from './managers/index.js';
+import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, NetworkAclsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, TokenExchangeProfilesManager, UserBlocksManager, UsersManager, UsersByEmailManager } from './managers/index.js';
 import { Configuration } from '../../lib/runtime.js';
@@ -28,2 +28,3 @@ export declare abstract class ManagementClientBase {
     readonly logs: LogsManager;
+    readonly networkAcls: NetworkAclsManager;
     readonly organizations: OrganizationsManager;
@@ -30,0 +31,0 @@ readonly prompts: PromptsManager;

dist/esm/management/__generated/index.js

 export * from './managers/index.js';
 export * from './models/index.js';
-import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, TokenExchangeProfilesManager, UserBlocksManager, UsersManager, UsersByEmailManager, } from './managers/index.js';
+import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, NetworkAclsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, TokenExchangeProfilesManager, UserBlocksManager, UsersManager, UsersByEmailManager, } from './managers/index.js';
 export class ManagementClientBase {
@@ -28,2 +28,3 @@ constructor(configuration) {
         this.logs = new LogsManager(this.configuration);
+        this.networkAcls = new NetworkAclsManager(this.configuration);
         this.organizations = new OrganizationsManager(this.configuration);
@@ -30,0 +31,0 @@ this.prompts = new PromptsManager(this.configuration);

dist/esm/management/__generated/managers/attack-protection-manager.d.ts

@@ -10,3 +10,4 @@ import * as runtime from '../../../lib/runtime.js';
     /**
-     * Get breached password detection settings
+     * Retrieve details of the Breached Password Detection configuration of your tenant.
+     * Get Breached Password Detection settings
      *
@@ -29,3 +30,4 @@ * @throws {RequiredError}
     /**
-     * Update breached password detection settings
+     * Update details of the Breached Password Detection configuration of your tenant.
+     * Update Breached Password Detection settings
      *
@@ -32,0 +34,0 @@ * @throws {RequiredError}

dist/esm/management/__generated/managers/attack-protection-manager.js

@@ -8,3 +8,4 @@ import * as runtime from '../../../lib/runtime.js';
     /**
-     * Get breached password detection settings
+     * Retrieve details of the Breached Password Detection configuration of your tenant.
+     * Get Breached Password Detection settings
      *
@@ -45,3 +46,4 @@ * @throws {RequiredError}
     /**
-     * Update breached password detection settings
+     * Update details of the Breached Password Detection configuration of your tenant.
+     * Update Breached Password Detection settings
      *
@@ -48,0 +50,0 @@ * @throws {RequiredError}

dist/esm/management/__generated/managers/index.d.ts

@@ -22,2 +22,3 @@ export * from './actions-manager.js';
 export * from './logs-manager.js';
+export * from './network-acls-manager.js';
 export * from './organizations-manager.js';
@@ -24,0 +25,0 @@ export * from './prompts-manager.js';

dist/esm/management/__generated/managers/index.js

@@ -22,2 +22,3 @@ export * from './actions-manager.js';
 export * from './logs-manager.js';
+export * from './network-acls-manager.js';
 export * from './organizations-manager.js';
@@ -24,0 +25,0 @@ export * from './prompts-manager.js';

dist/esm/management/__generated/managers/users-manager.d.ts

 import * as runtime from '../../../lib/runtime.js';
 import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
-import type { DeletePermissionsRequest, DeleteUserIdentityByUserId200ResponseInner, DeleteUserRolesRequest, GetAuthenticationMethods200ResponseOneOfInner, GetRefreshTokensForUser200Response, GetSessionsForUser200Response, GetUsers200ResponseOneOfInner, PatchAuthenticationMethodsByAuthenticationMethodIdRequest, PostAuthenticationMethods201Response, PostAuthenticationMethodsRequest, PostIdentitiesRequest, PostPermissionsRequest, PostRecoveryCodeRegeneration200Response, PostUserRolesRequest, PutAuthenticationMethods200ResponseInner, PutAuthenticationMethodsRequestInner, UserCreate, UserEnrollment, UserIdentity, UserUpdate, GetAuthenticationMethods200ResponseOneOf, GetLogs200ResponseOneOf, Log, GetPermissions200ResponseOneOf, GetPermissions200ResponseOneOfInner, GetOrganizations200ResponseOneOf, GetOrganizations200ResponseOneOfInner, GetOrganizationMemberRoles200ResponseOneOf, GetOrganizationMemberRoles200ResponseOneOfInner, GetUsers200ResponseOneOf, DeleteAuthenticationMethodsRequest, DeleteAuthenticationMethodsByAuthenticationMethodIdRequest, DeleteAuthenticatorsRequest, DeleteMultifactorByProviderRequest, DeletePermissionsOperationRequest, DeleteRefreshTokensForUserRequest, DeleteSessionsForUserRequest, DeleteUserIdentityByUserIdRequest, DeleteUserRolesOperationRequest, DeleteUsersByIdRequest, GetAuthenticationMethodsRequest, GetAuthenticationMethodsByAuthenticationMethodIdRequest, GetEnrollmentsRequest, GetLogsByUserRequest, GetPermissionsRequest, GetRefreshTokensForUserRequest, GetSessionsForUserRequest, GetUserOrganizationsRequest, GetUserRolesRequest, GetUsersRequest, GetUsersByIdRequest, PatchAuthenticationMethodsByAuthenticationMethodIdOperationRequest, PatchUsersByIdRequest, PostAuthenticationMethodsOperationRequest, PostIdentitiesOperationRequest, PostInvalidateRememberBrowserRequest, PostPermissionsOperationRequest, PostRecoveryCodeRegenerationRequest, PostUserRolesOperationRequest, PutAuthenticationMethodsRequest } from '../models/index.js';
+import type { DeletePermissionsRequest, DeleteUserIdentityByUserId200ResponseInner, DeleteUserRolesRequest, GetAuthenticationMethods200ResponseOneOfInner, GetFederatedConnectionsTokensets200ResponseInner, GetRefreshTokensForUser200Response, GetSessionsForUser200Response, GetUsers200ResponseOneOfInner, PatchAuthenticationMethodsByAuthenticationMethodIdRequest, PostAuthenticationMethods201Response, PostAuthenticationMethodsRequest, PostIdentitiesRequest, PostPermissionsRequest, PostRecoveryCodeRegeneration200Response, PostUserRolesRequest, PutAuthenticationMethods200ResponseInner, PutAuthenticationMethodsRequestInner, UserCreate, UserEnrollment, UserIdentity, UserUpdate, GetAuthenticationMethods200ResponseOneOf, GetLogs200ResponseOneOf, Log, GetPermissions200ResponseOneOf, GetPermissions200ResponseOneOfInner, GetOrganizations200ResponseOneOf, GetOrganizations200ResponseOneOfInner, GetOrganizationMemberRoles200ResponseOneOf, GetOrganizationMemberRoles200ResponseOneOfInner, GetUsers200ResponseOneOf, DeleteAuthenticationMethodsRequest, DeleteAuthenticationMethodsByAuthenticationMethodIdRequest, DeleteAuthenticatorsRequest, DeleteFederatedConnectionsTokensetsByTokensetIdRequest, DeleteMultifactorByProviderRequest, DeletePermissionsOperationRequest, DeleteRefreshTokensForUserRequest, DeleteSessionsForUserRequest, DeleteUserIdentityByUserIdRequest, DeleteUserRolesOperationRequest, DeleteUsersByIdRequest, GetAuthenticationMethodsRequest, GetAuthenticationMethodsByAuthenticationMethodIdRequest, GetEnrollmentsRequest, GetFederatedConnectionsTokensetsRequest, GetLogsByUserRequest, GetPermissionsRequest, GetRefreshTokensForUserRequest, GetSessionsForUserRequest, GetUserOrganizationsRequest, GetUserRolesRequest, GetUsersRequest, GetUsersByIdRequest, PatchAuthenticationMethodsByAuthenticationMethodIdOperationRequest, PatchUsersByIdRequest, PostAuthenticationMethodsOperationRequest, PostIdentitiesOperationRequest, PostInvalidateRememberBrowserRequest, PostPermissionsOperationRequest, PostRecoveryCodeRegenerationRequest, PostUserRolesOperationRequest, PutAuthenticationMethodsRequest } from '../models/index.js';
 declare const BaseAPI: typeof runtime.BaseAPI;
@@ -28,2 +28,8 @@ /**
     /**
+     * Deletes a tokenset for federated connections by id.
+     *
+     * @throws {RequiredError}
+     */
+    deleteTokenset(requestParameters: DeleteFederatedConnectionsTokensetsByTokensetIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
+    /**
      * Delete a <a href="https://auth0.com/docs/multifactor-authentication">multifactor</a> configuration for a user. This forces the user to re-configure the multi-factor provider.
@@ -101,2 +107,9 @@ * Delete a User's Multi-factor Provider
     /**
+     * List active federated connections tokensets for a provided user
+     * Get tokensets for a user
+     *
+     * @throws {RequiredError}
+     */
+    getAllTokensets(requestParameters: GetFederatedConnectionsTokensetsRequest, initOverrides?: InitOverride): Promise<ApiResponse<Array<GetFederatedConnectionsTokensets200ResponseInner>>>;
+    /**
      * Retrieve log events for a specific user.
@@ -103,0 +116,0 @@ *

dist/esm/management/__generated/managers/users-manager.js

@@ -49,2 +49,17 @@ import * as runtime from '../../../lib/runtime.js';
     /**
+     * Deletes a tokenset for federated connections by id.
+     *
+     * @throws {RequiredError}
+     */
+    async deleteTokenset(requestParameters, initOverrides) {
+        runtime.validateRequiredRequestParams(requestParameters, ['id', 'tokenset_id']);
+        const response = await this.request({
+            path: `/users/{id}/federated-connections-tokensets/{tokenset_id}`
+                .replace('{id}', encodeURIComponent(String(requestParameters.id)))
+                .replace('{tokenset_id}', encodeURIComponent(String(requestParameters.tokenset_id))),
+            method: 'DELETE',
+        }, initOverrides);
+        return runtime.VoidApiResponse.fromResponse(response);
+    }
+    /**
      * Delete a <a href="https://auth0.com/docs/multifactor-authentication">multifactor</a> configuration for a user. This forces the user to re-configure the multi-factor provider.
@@ -213,2 +228,16 @@ * Delete a User's Multi-factor Provider
     }
+    /**
+     * List active federated connections tokensets for a provided user
+     * Get tokensets for a user
+     *
+     * @throws {RequiredError}
+     */
+    async getAllTokensets(requestParameters, initOverrides) {
+        runtime.validateRequiredRequestParams(requestParameters, ['id']);
+        const response = await this.request({
+            path: `/users/{id}/federated-connections-tokensets`.replace('{id}', encodeURIComponent(String(requestParameters.id))),
+            method: 'GET',
+        }, initOverrides);
+        return runtime.JSONApiResponse.fromResponse(response);
+    }
     async getLogs(requestParameters, initOverrides) {
@@ -215,0 +244,0 @@ runtime.validateRequiredRequestParams(requestParameters, ['id']);

dist/esm/version.d.ts

@@ -1,1 +0,1 @@
-export declare const version = "4.20.0";
+export declare const version = "4.21.0";

dist/esm/version.js

@@ -1,2 +0,2 @@
-export const version = '4.20.0';
+export const version = '4.21.0';
 //# sourceMappingURL=version.js.map

package.json

 {
   "name": "auth0",
-  "version": "4.20.0",
+  "version": "4.21.0",
   "description": "SDK for Auth0 API v2",
@@ -5,0 +5,0 @@ "main": "dist/cjs/index.js",

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2879134

2.43%

Number of package files

400

1.52%

Lines of code

73498

2.37%

No dependency changes