Skip to content

feat: add phone provider protection, token vault access, and cross-app connection support #1359

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ankita10119 merged 1 commit into from
Jun 24, 2026
Merged

feat: add phone provider protection, token vault access, and cross-app connection support #1359

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
130 changes: 126 additions & 4 deletions reference.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3477,7 +3477,7 @@ await client.emailTemplates.create({
<dl>
<dd>

Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, and `async_approval`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.
Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, and `async_approval`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.

</dd>
</dl>
Expand Down Expand Up @@ -3509,7 +3509,7 @@ await client.emailTemplates.get("verify_email");
<dl>
<dd>

**templateName:** `Management.EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
**templateName:** `Management.EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).

</dd>
</dl>
Expand Down Expand Up @@ -3574,7 +3574,7 @@ await client.emailTemplates.set("verify_email", {
<dl>
<dd>

**templateName:** `Management.EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
**templateName:** `Management.EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).

</dd>
</dl>
Expand Down Expand Up @@ -3645,7 +3645,7 @@ await client.emailTemplates.update("verify_email");
<dl>
<dd>

**templateName:** `Management.EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
**templateName:** `Management.EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).

</dd>
</dl>
Expand Down Expand Up @@ -14061,6 +14061,128 @@ await client.attackProtection.captcha.update();
</dl>
</details>

## AttackProtection PhoneProviderProtection

<details><summary><code>client.attackProtection.phoneProviderProtection.<a href="/src/management/api/resources/attackProtection/resources/phoneProviderProtection/client/Client.ts">get</a>() -> Management.GetPhoneProviderProtectionResponseContent</code></summary>
<dl>
<dd>

#### 📝 Description

<dl>
<dd>

<dl>
<dd>

Get the phone provider protection configuration for a tenant.

</dd>
</dl>
</dd>
</dl>

#### 🔌 Usage

<dl>
<dd>

<dl>
<dd>

```typescript
await client.attackProtection.phoneProviderProtection.get();
```

</dd>
</dl>
</dd>
</dl>

#### ⚙️ Parameters

<dl>
<dd>

<dl>
<dd>

**requestOptions:** `PhoneProviderProtectionClient.RequestOptions`

</dd>
</dl>
</dd>
</dl>

</dd>
</dl>
</details>

<details><summary><code>client.attackProtection.phoneProviderProtection.<a href="/src/management/api/resources/attackProtection/resources/phoneProviderProtection/client/Client.ts">patch</a>({ ...params }) -> Management.PatchPhoneProviderProtectionResponseContent</code></summary>
<dl>
<dd>

#### 📝 Description

<dl>
<dd>

<dl>
<dd>

Update the phone provider protection configuration for a tenant.

</dd>
</dl>
</dd>
</dl>

#### 🔌 Usage

<dl>
<dd>

<dl>
<dd>

```typescript
await client.attackProtection.phoneProviderProtection.patch({
type: "exponential",
});
```

</dd>
</dl>
</dd>
</dl>

#### ⚙️ Parameters

<dl>
<dd>

<dl>
<dd>

**request:** `Management.PatchPhoneProviderProtectionRequestContent`

</dd>
</dl>

<dl>
<dd>

**requestOptions:** `PhoneProviderProtectionClient.RequestOptions`

</dd>
</dl>
</dd>
</dl>

</dd>
</dl>
</details>

## AttackProtection SuspiciousIpThrottling

<details><summary><code>client.attackProtection.suspiciousIpThrottling.<a href="/src/management/api/resources/attackProtection/resources/suspiciousIpThrottling/client/Client.ts">get</a>() -> Management.GetSuspiciousIpThrottlingSettingsResponseContent</code></summary>
Expand Down
19 changes: 17 additions & 2 deletions src/management/api/requests/requests.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -298,6 +298,7 @@ export interface CreateClientRequestContent {
/** Makes the use of Proof-of-Possession mandatory for this client */
require_proof_of_possession?: boolean;
signed_request_object?: Management.ClientSignedRequestObjectWithPublicKey;
token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithPublicKey;
compliance_level?: Management.ClientComplianceLevelEnum | null;
/**
* Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
Expand Down Expand Up @@ -419,8 +420,8 @@ export interface UpdateClientRequestContent {
mobile?: Management.ClientMobile;
/** Initiate login uri, must be https */
initiate_login_uri?: string;
native_social_login?: Management.NativeSocialLogin;
fedcm_login?: Management.FedCmLogin;
native_social_login?: Management.NativeSocialLoginPatch | null;
fedcm_login?: Management.FedCmLoginPatch | null;
refresh_token?: Management.ClientRefreshTokenConfiguration | null;
default_organization?: Management.ClientDefaultOrganization | null;
organization_usage?: Management.ClientOrganizationUsagePatchEnum | null;
Expand All @@ -433,6 +434,7 @@ export interface UpdateClientRequestContent {
/** Makes the use of Proof-of-Possession mandatory for this client */
require_proof_of_possession?: boolean;
signed_request_object?: Management.ClientSignedRequestObjectWithCredentialId;
token_vault_privileged_access?: Management.ClientTokenVaultPrivilegedAccessWithCredentialId;
compliance_level?: Management.ClientComplianceLevelEnum | null;
/**
* Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
Expand Down Expand Up @@ -545,6 +547,7 @@ export interface CreateConnectionRequestContent {
metadata?: Management.ConnectionsMetadata;
authentication?: Management.ConnectionAuthenticationPurpose;
connected_accounts?: Management.ConnectionConnectedAccountsPurpose;
cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp;
}

/**
Expand Down Expand Up @@ -580,6 +583,7 @@ export interface UpdateConnectionRequestContent {
metadata?: Management.ConnectionsMetadata;
authentication?: Management.ConnectionAuthenticationPurpose;
connected_accounts?: Management.ConnectionConnectedAccountsPurpose;
cross_app_access_requesting_app?: Management.CrossAppAccessRequestingApp;
}

/**
Expand Down Expand Up @@ -2236,6 +2240,16 @@ export interface UpdateAttackProtectionCaptchaRequestContent {
simple_captcha?: Management.AttackProtectionCaptchaSimpleCaptchaResponseContent;
}

/**
* @example
* {
* type: "exponential"
* }
*/
export interface PatchPhoneProviderProtectionRequestContent {
type: Management.PhoneProviderProtectionBackoffStrategyEnum;
}

/**
* @example
* {}
Expand Down Expand Up @@ -4079,6 +4093,7 @@ export interface LinkUserIdentityRequestContent {
provider?: Management.UserIdentityProviderEnum;
/** connection_id of the secondary user account being linked when more than one `auth0` database provider exists. */
connection_id?: string;
/** user_id of the secondary user account being linked. */
user_id?: Management.UserId;
/** JWT for the secondary account being linked. If sending this parameter, `provider`, `user_id`, and `connection_id` must not be sent. */
link_with?: string;
Expand Down
6 changes: 6 additions & 0 deletions src/management/api/resources/attackProtection/client/Client.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ import { BotDetectionClient } from "../resources/botDetection/client/Client.js";
import { BreachedPasswordDetectionClient } from "../resources/breachedPasswordDetection/client/Client.js";
import { BruteForceProtectionClient } from "../resources/bruteForceProtection/client/Client.js";
import { CaptchaClient } from "../resources/captcha/client/Client.js";
import { PhoneProviderProtectionClient } from "../resources/phoneProviderProtection/client/Client.js";
import { SuspiciousIpThrottlingClient } from "../resources/suspiciousIpThrottling/client/Client.js";

export declare namespace AttackProtectionClient {
Expand All @@ -20,6 +21,7 @@ export class AttackProtectionClient {
protected _breachedPasswordDetection: BreachedPasswordDetectionClient | undefined;
protected _bruteForceProtection: BruteForceProtectionClient | undefined;
protected _captcha: CaptchaClient | undefined;
protected _phoneProviderProtection: PhoneProviderProtectionClient | undefined;
protected _suspiciousIpThrottling: SuspiciousIpThrottlingClient | undefined;

constructor(options: AttackProtectionClient.Options) {
Expand All @@ -42,6 +44,10 @@ export class AttackProtectionClient {
return (this._captcha ??= new CaptchaClient(this._options));
}

public get phoneProviderProtection(): PhoneProviderProtectionClient {
return (this._phoneProviderProtection ??= new PhoneProviderProtectionClient(this._options));
}

public get suspiciousIpThrottling(): SuspiciousIpThrottlingClient {
return (this._suspiciousIpThrottling ??= new SuspiciousIpThrottlingClient(this._options));
}
Expand Down
1 change: 1 addition & 0 deletions src/management/api/resources/attackProtection/resources/index.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,5 @@ export * as botDetection from "./botDetection/index.js";
export * as breachedPasswordDetection from "./breachedPasswordDetection/index.js";
export * as bruteForceProtection from "./bruteForceProtection/index.js";
export * as captcha from "./captcha/index.js";
export * as phoneProviderProtection from "./phoneProviderProtection/index.js";
export * as suspiciousIpThrottling from "./suspiciousIpThrottling/index.js";
Loading
Loading