feat: add XAA resource app, branding identifiers, session actor, and 3P SSO ticket config

src/management/api/requests/requests.ts

@@ -216,7 +216,7 @@ export interface ListClientsRequestParameters {
     is_first_party?: boolean | null;
     /** Optional filter by a comma-separated list of application types. */
     app_type?: string | null;
-    /** Optional filter by the <a href="https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-04.html">Client ID Metadata Document</a> URI for CIMD-registered clients. */
+    /** Optional filter by the <a href="https://drafts.oauth.net/draft-ietf-oauth-client-id-metadata-document/draft-ietf-oauth-client-id-metadata-document.html">Client ID Metadata Document</a> URI for CIMD-registered clients. */
     external_client_id?: string | null;
     /** Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
     q?: string | null;
@@ -312,6 +312,7 @@ export interface CreateClientRequestContent {
     token_quota?: Management.CreateTokenQuota;
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string;
+    identity_assertion_authorization_grant?: Management.CreateIdentityAssertionAuthorizationGrant;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
     express_configuration?: Management.ExpressConfiguration;
@@ -412,6 +413,7 @@ export interface UpdateClientRequestContent {
     custom_login_page?: string;
     custom_login_page_preview?: string;
     token_quota?: Management.UpdateTokenQuota | null;
+    identity_assertion_authorization_grant?: Management.UpdateIdentityAssertionAuthorizationGrant | null;
     /** Form template for WS-Federation protocol */
     form_template?: string;
     addons?: Management.ClientAddons;
@@ -548,6 +550,7 @@ export interface CreateConnectionRequestContent {
     authentication?: Management.ConnectionAuthenticationPurpose;
     connected_accounts?: Management.ConnectionConnectedAccountsPurpose;
     cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp;
+    cross_app_access_resource_app?: Management.CreateCrossAppAccessResourceApp;
 }
 
 /**
@@ -584,6 +587,7 @@ export interface UpdateConnectionRequestContent {
     authentication?: Management.ConnectionAuthenticationPurpose;
     connected_accounts?: Management.ConnectionConnectedAccountsPurpose;
     cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp;
+    cross_app_access_resource_app?: Management.UpdateCrossAppAccessResourceApp | null;
 }
 
 /**
@@ -2349,6 +2353,7 @@ export interface CreateBrandingThemeRequestContent {
     /** Display Name */
     displayName?: string;
     fonts: Management.BrandingThemeFonts;
+    identifiers?: Management.BrandingThemeIdentifiers;
     page_background: Management.BrandingThemePageBackground;
     widget: Management.BrandingThemeWidget;
 }
@@ -2434,6 +2439,7 @@ export interface UpdateBrandingThemeRequestContent {
     /** Display Name */
     displayName?: string;
     fonts: Management.BrandingThemeFonts;
+    identifiers?: Management.BrandingThemeIdentifiers;
     page_background: Management.BrandingThemePageBackground;
     widget: Management.BrandingThemeWidget;
 }
@@ -3874,6 +3880,7 @@ export interface CreateSelfServiceProfileSsoTicketRequestContent {
     provisioning_config?: Management.SelfServiceProfileSsoTicketProvisioningConfig;
     /** Indicates whether a verified domain should be used for organization discovery during authentication. */
     use_for_organization_discovery?: boolean;
+    third_party_client_access_config?: Management.ThirdPartyClientAccessConfig;
     enabled_features?: Management.SelfServiceProfileSsoTicketEnabledFeatures;
 }
 

src/management/tests/wire/branding/themes.test.ts

@@ -108,6 +108,11 @@ describe("ThemesClient", () => {
                 subtitle: { bold: true, size: 1.1 },
                 title: { bold: true, size: 1.1 },
             },
+            identifiers: {
+                login_display: "separate",
+                otp_autocomplete: true,
+                phone_display: { formatting: "international", masking: "hide_country_code" },
+            },
             page_background: {
                 background_color: "background_color",
                 background_image_url: "background_image_url",
@@ -977,6 +982,11 @@ describe("ThemesClient", () => {
                 subtitle: { bold: true, size: 1.1 },
                 title: { bold: true, size: 1.1 },
             },
+            identifiers: {
+                login_display: "separate",
+                otp_autocomplete: true,
+                phone_display: { formatting: "international", masking: "hide_country_code" },
+            },
             page_background: {
                 background_color: "background_color",
                 background_image_url: "background_image_url",
@@ -1130,6 +1140,11 @@ describe("ThemesClient", () => {
                 subtitle: { bold: true, size: 1.1 },
                 title: { bold: true, size: 1.1 },
             },
+            identifiers: {
+                login_display: "separate",
+                otp_autocomplete: true,
+                phone_display: { formatting: "international", masking: "hide_country_code" },
+            },
             page_background: {
                 background_color: "background_color",
                 background_image_url: "background_image_url",
@@ -1422,6 +1437,11 @@ describe("ThemesClient", () => {
                 subtitle: { bold: true, size: 1.1 },
                 title: { bold: true, size: 1.1 },
             },
+            identifiers: {
+                login_display: "separate",
+                otp_autocomplete: true,
+                phone_display: { formatting: "international", masking: "hide_country_code" },
+            },
             page_background: {
                 background_color: "background_color",
                 background_image_url: "background_image_url",

src/management/tests/wire/clients.test.ts

@@ -70,6 +70,7 @@ describe("ClientsClient", () => {
                         allowed_strategies: ["pingfederate"],
                         connection_deletion_behavior: "allow",
                     },
+                    identity_assertion_authorization_grant: { active: true },
                     third_party_security_mode: "strict",
                     redirection_policy: "allow_always",
                     resource_server_identifier: "resource_server_identifier",
@@ -393,6 +394,7 @@ describe("ClientsClient", () => {
                 connection_deletion_behavior: "allow",
                 invitation_landing_client_id: "invitation_landing_client_id",
             },
+            identity_assertion_authorization_grant: { active: true },
             third_party_security_mode: "strict",
             redirection_policy: "allow_always",
             resource_server_identifier: "resource_server_identifier",
@@ -1054,6 +1056,7 @@ describe("ClientsClient", () => {
                 connection_deletion_behavior: "allow",
                 invitation_landing_client_id: "invitation_landing_client_id",
             },
+            identity_assertion_authorization_grant: { active: true },
             third_party_security_mode: "strict",
             redirection_policy: "allow_always",
             resource_server_identifier: "resource_server_identifier",
@@ -1407,6 +1410,7 @@ describe("ClientsClient", () => {
                 connection_deletion_behavior: "allow",
                 invitation_landing_client_id: "invitation_landing_client_id",
             },
+            identity_assertion_authorization_grant: { active: true },
             third_party_security_mode: "strict",
             redirection_policy: "allow_always",
             resource_server_identifier: "resource_server_identifier",
@@ -1737,6 +1741,7 @@ describe("ClientsClient", () => {
                 connection_deletion_behavior: "allow",
                 invitation_landing_client_id: "invitation_landing_client_id",
             },
+            identity_assertion_authorization_grant: { active: true },
             third_party_security_mode: "strict",
             redirection_policy: "allow_always",
             resource_server_identifier: "resource_server_identifier",

src/management/tests/wire/clients/connections.test.ts

@@ -23,6 +23,7 @@ describe("ConnectionsClient", () => {
                     authentication: { active: true },
                     connected_accounts: { active: true },
                     cross_app_access_requesting_app: { active: true },
+                    cross_app_access_resource_app: { status: "enabled" },
                 },
             ],
             next: "next",

src/management/tests/wire/connections.test.ts

@@ -24,6 +24,7 @@ describe("ConnectionsClient", () => {
                     authentication: { active: true },
                     connected_accounts: { active: true },
                     cross_app_access_requesting_app: { active: true },
+                    cross_app_access_resource_app: { status: "enabled" },
                 },
             ],
         };
@@ -122,6 +123,7 @@ describe("ConnectionsClient", () => {
             authentication: { active: true },
             connected_accounts: { active: true, cross_app_access: true },
             cross_app_access_requesting_app: { active: true },
+            cross_app_access_resource_app: { status: "enabled" },
         };
 
         server
@@ -273,6 +275,7 @@ describe("ConnectionsClient", () => {
             authentication: { active: true },
             connected_accounts: { active: true, cross_app_access: true },
             cross_app_access_requesting_app: { active: true },
+            cross_app_access_resource_app: { status: "enabled" },
         };
 
         server.mockEndpoint().get("/connections/id").respondWith().statusCode(200).jsonBody(rawResponseBody).build();
@@ -429,6 +432,7 @@ describe("ConnectionsClient", () => {
             authentication: { active: true },
             connected_accounts: { active: true, cross_app_access: true },
             cross_app_access_requesting_app: { active: true },
+            cross_app_access_resource_app: { status: "enabled" },
         };
 
         server

src/management/tests/wire/sessions.test.ts

@@ -30,6 +30,7 @@ describe("SessionsClient", () => {
             authentication: { methods: [{}] },
             cookie: { mode: "non-persistent" },
             session_metadata: { key: "value" },
+            actor: { sub: "sub" },
         };
 
         server.mockEndpoint().get("/sessions/id").respondWith().statusCode(200).jsonBody(rawResponseBody).build();
@@ -177,6 +178,7 @@ describe("SessionsClient", () => {
             authentication: { methods: [{}] },
             cookie: { mode: "non-persistent" },
             session_metadata: { key: "value" },
+            actor: { sub: "sub" },
         };
 
         server

src/management/tests/wire/users/sessions.test.ts

@@ -22,6 +22,7 @@ describe("SessionsClient", () => {
                     last_interacted_at: "2024-01-15T09:30:00Z",
                     clients: [{}],
                     session_metadata: { key: "value" },
+                    actor: { sub: "sub" },
                 },
             ],
             next: "next",

src/management/version.ts

@@ -1 +1 @@
-export const SDK_VERSION = "5.14.0";
+export const SDK_VERSION = "6.0.0";