feat: add Network ACL Key read/delete, Cross App Access resource app, third-party client access, and useOauthSpecScope

.fern/metadata.json

@@ -1,5 +1,5 @@
 {
-  "cliVersion": "5.75.6",
+  "cliVersion": "5.92.1",
   "generatorName": "fernapi/fern-ruby-sdk",
   "generatorVersion": "1.17.8",
   "generatorConfig": {
@@ -10,9 +10,8 @@
     "offsetSemantics": "page-index",
     "useDefaultRequestParameterValues": true
   },
-  "originGitCommit": "8857b12c5a5345e87088f8d57ba9cffdb82ed9fe",
-  "originGitCommitIsDirty": false,
-  "invokedBy": "ci",
-  "ciProvider": "github",
-  "sdkVersion": "5.20.1"
+  "originGitCommit": "116b6ea19a35544baa3e3cf608e45d3990d7cc6e",
+  "originGitCommitIsDirty": true,
+  "invokedBy": "manual",
+  "sdkVersion": "6.0.1"
 }

lib/auth0.rb

@@ -64,10 +64,10 @@
 require_relative "auth0/types/get_job_generic_error_response_content"
 require_relative "auth0/jobs/errors/types/errors_get_response"
 require_relative "auth0/types/oauth_scope"
-require_relative "auth0/types/too_many_requests_error_body_error"
-require_relative "auth0/types/too_many_requests_error_body"
 require_relative "auth0/types/not_found_error_body_error"
 require_relative "auth0/types/not_found_error_body"
+require_relative "auth0/types/too_many_requests_error_body_error"
+require_relative "auth0/types/too_many_requests_error_body"
 require_relative "auth0/types/action_binding_type_enum"
 require_relative "auth0/types/action_trigger_type_enum"
 require_relative "auth0/types/action_trigger_compatible_trigger"
@@ -273,7 +273,10 @@
 require_relative "auth0/types/client_mobilei_os"
 require_relative "auth0/types/client_mobile"
 require_relative "auth0/types/client_my_organization_configuration_allowed_strategies_enum"
+require_relative "auth0/types/client_my_organization_configuration_third_party_client_access_allowed_values_enum"
+require_relative "auth0/types/client_my_organization_configuration_third_party_client_access_default_value_enum"
 require_relative "auth0/types/client_my_organization_deletion_behavior_enum"
+require_relative "auth0/types/client_my_organization_third_party_client_access_configuration"
 require_relative "auth0/types/client_my_organization_response_configuration"
 require_relative "auth0/types/client_oidc_backchannel_logout_initiators_enum"
 require_relative "auth0/types/client_oidc_backchannel_logout_initiators_mode_enum"
@@ -656,6 +659,7 @@
 require_relative "auth0/types/connection_token_endpoint_auth_method_enum"
 require_relative "auth0/types/connection_token_endpoint_auth_signing_alg_enum"
 require_relative "auth0/types/connection_token_endpoint_jwtca_aud_format_enum_oidc"
+require_relative "auth0/types/connection_use_oauth_spec_scope"
 require_relative "auth0/types/connection_options_common_oidc"
 require_relative "auth0/types/connection_options_idpinitiated_saml"
 require_relative "auth0/types/connection_protocol_binding_enum_saml"
@@ -760,6 +764,11 @@
 require_relative "auth0/types/connection_options_yahoo"
 require_relative "auth0/types/connection_options_yandex"
 require_relative "auth0/types/connection_profile_config"
+require_relative "auth0/types/connection_profile_cross_app_access_resource_app_status_value_enum"
+require_relative "auth0/types/connection_profile_cross_app_access_resource_app_status_allowed_values_enum"
+require_relative "auth0/types/connection_profile_cross_app_access_resource_app_status_default_value_enum"
+require_relative "auth0/types/connection_profile_cross_app_access_resource_app_status"
+require_relative "auth0/types/connection_profile_cross_app_access_resource_app"
 require_relative "auth0/types/enabled_features_enum"
 require_relative "auth0/types/connection_profile_enabled_features"
 require_relative "auth0/types/connection_profile_id"
@@ -1700,6 +1709,8 @@
 require_relative "auth0/types/create_hook_secret_request_content"
 require_relative "auth0/types/create_identity_assertion_authorization_grant"
 require_relative "auth0/types/create_import_users_response_content"
+require_relative "auth0/types/network_acl_key_algorithm_enum"
+require_relative "auth0/types/create_keys_network_acls_response_content"
 require_relative "auth0/types/log_stream_datadog_enum"
 require_relative "auth0/types/log_stream_datadog_region_enum"
 require_relative "auth0/types/log_stream_datadog_sink"
@@ -2627,6 +2638,8 @@
 require_relative "auth0/types/get_action_version_response_content"
 require_relative "auth0/types/get_active_users_count_stats_response_content"
 require_relative "auth0/types/get_acul_response_content"
+require_relative "auth0/types/network_acl_key"
+require_relative "auth0/types/get_all_keys_network_acls_response_content"
 require_relative "auth0/types/get_attack_protection_captcha_response_content"
 require_relative "auth0/types/get_bot_detection_settings_response_content"
 require_relative "auth0/types/get_branding_default_theme_response_content"
@@ -2704,6 +2717,7 @@
 require_relative "auth0/types/network_acl_action_redirect_enum"
 require_relative "auth0/types/network_acl_action"
 require_relative "auth0/types/network_acl_match"
+require_relative "auth0/types/network_acl_rule_match_all_enum"
 require_relative "auth0/types/network_acl_rule_scope_enum"
 require_relative "auth0/types/network_acl_rule"
 require_relative "auth0/types/get_network_acls_response_content"
@@ -3445,6 +3459,8 @@
 require_relative "auth0/keys/encryption/types/list_encryption_keys_request_parameters"
 require_relative "auth0/keys/encryption/types/create_encryption_key_request_content"
 require_relative "auth0/keys/encryption/types/import_encryption_key_request_content"
+require_relative "auth0/keys/network_acls/client"
+require_relative "auth0/keys/network_acls/types/create_keys_network_acls_request_content"
 require_relative "auth0/keys/signing/client"
 require_relative "auth0/organizations/client_grants/client"
 require_relative "auth0/organizations/client_grants/types/list_organization_client_grants_request_parameters"

lib/auth0/clients/client.rb

@@ -25,7 +25,7 @@ def initialize(client:)
       #     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
       #     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
       #     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
-      #     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+      #     `custom_login_page_on`, `sso`, `addons`, `form_template`,
       #     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
       #     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
       #     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
@@ -249,7 +249,7 @@ def register_cimd_client(request_options: {}, **params)
       #     `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
       #     `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
       #     `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
-      #     `custom_login_page_off`, `sso`, `addons`, `form_template`,
+      #     `custom_login_page_on`, `sso`, `addons`, `form_template`,
       #     `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
       #     `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
       #     `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,

lib/auth0/connection_profiles/types/create_connection_profile_request_content.rb

@@ -15,6 +15,8 @@ class CreateConnectionProfileRequestContent < Internal::Types::Model
         field :connection_config, -> { Auth0::Types::ConnectionProfileConfig }, optional: true, nullable: false
 
         field :strategy_overrides, -> { Auth0::Types::ConnectionProfileStrategyOverrides }, optional: true, nullable: false
+
+        field :cross_app_access_resource_app, -> { Auth0::Types::ConnectionProfileCrossAppAccessResourceApp }, optional: true, nullable: false
       end
     end
   end

lib/auth0/connection_profiles/types/update_connection_profile_request_content.rb

@@ -17,6 +17,8 @@ class UpdateConnectionProfileRequestContent < Internal::Types::Model
         field :connection_config, -> { Auth0::Types::ConnectionProfileConfig }, optional: true, nullable: false
 
         field :strategy_overrides, -> { Auth0::Types::ConnectionProfileStrategyOverrides }, optional: true, nullable: false
+
+        field :cross_app_access_resource_app, -> { Auth0::Types::ConnectionProfileCrossAppAccessResourceApp }, optional: true, nullable: false
       end
     end
   end

lib/auth0/connections/client.rb

@@ -210,7 +210,8 @@ def delete(request_options: {}, **params)
       # option properties for identity provider configuration.
       #
       # **Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data
-      # or other issues, ensure all parameters are present when using this option.
+      # or other issues, ensure all parameters are present when using this option. If any options are unspecified, the
+      # default will be used, even if it differs from the existing value.
       #
       # @param request_options [Hash]
       # @param params [Auth0::Connections::Types::UpdateConnectionRequestContent]

lib/auth0/keys/client.rb

@@ -20,6 +20,11 @@ def encryption
         @encryption ||= Auth0::Keys::Encryption::Client.new(client: @client)
       end
 
+      # @return [Auth0::NetworkACLs::Client]
+      def network_acls
+        @network_acls ||= Auth0::Keys::NetworkACLs::Client.new(client: @client)
+      end
+
       # @return [Auth0::Signing::Client]
       def signing
         @signing ||= Auth0::Keys::Signing::Client.new(client: @client)

lib/auth0/keys/network_acls/client.rb

@@ -0,0 +1,149 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Keys
+    module NetworkACLs
+      class Client
+        # @param client [Auth0::Internal::Http::RawClient]
+        #
+        # @return [void]
+        def initialize(client:)
+          @client = client
+        end
+
+        # Retrieve all keys used to verify HTTP Message Signatures on Network ACL rules, ordered by creation time
+        # descending.
+        #
+        # @param request_options [Hash]
+        # @param _params [Hash]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        #
+        # @return [Auth0::Types::GetAllKeysNetworkACLsResponseContent]
+        def list(request_options: {}, **_params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "GET",
+            path: "keys/network-acls",
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::GetAllKeysNetworkACLsResponseContent.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+
+        # Create a new key used to verify HTTP Message Signatures on Network ACL rules.
+        #
+        # @param request_options [Hash]
+        # @param params [Auth0::Keys::NetworkACLs::Types::CreateKeysNetworkACLsRequestContent]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        #
+        # @return [Auth0::Types::CreateKeysNetworkACLsResponseContent]
+        def create(request_options: {}, **params)
+          params = Auth0::Internal::Types::Utils.normalize_keys(params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "POST",
+            path: "keys/network-acls",
+            body: Auth0::Keys::NetworkACLs::Types::CreateKeysNetworkACLsRequestContent.new(params).to_h,
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::CreateKeysNetworkACLsResponseContent.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+
+        # Retrieve a specific key used to verify HTTP Message Signatures on Network ACL rules.
+        #
+        # @param request_options [Hash]
+        # @param params [Hash]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        # @option params [String] :id
+        #
+        # @return [Auth0::Types::NetworkACLKey]
+        def get(request_options: {}, **params)
+          params = Auth0::Internal::Types::Utils.normalize_keys(params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "GET",
+            path: "keys/network-acls/#{URI.encode_uri_component(params[:id].to_s)}",
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::NetworkACLKey.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+
+        # Delete a key used to verify HTTP Message Signatures on Network ACL rules
+        #
+        # @param request_options [Hash]
+        # @param params [Hash]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        # @option params [String] :id
+        #
+        # @return [untyped]
+        def delete(request_options: {}, **params)
+          params = Auth0::Internal::Types::Utils.normalize_keys(params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "DELETE",
+            path: "keys/network-acls/#{URI.encode_uri_component(params[:id].to_s)}",
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          return if code.between?(200, 299)
+
+          error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+          raise error_class.new(response.body, code: code)
+        end
+      end
+    end
+  end
+end

lib/auth0/keys/network_acls/types/create_keys_network_acls_request_content.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Keys
+    module NetworkACLs
+      module Types
+        class CreateKeysNetworkACLsRequestContent < Internal::Types::Model
+          field :name, -> { String }, optional: false, nullable: false
+
+          field :alg, -> { Auth0::Types::NetworkACLKeyAlgorithmEnum }, optional: false, nullable: false
+
+          field :value, -> { String }, optional: false, nullable: false
+        end
+      end
+    end
+  end
+end

lib/auth0/types/client_my_organization_configuration_third_party_client_access_allowed_values_enum.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientMyOrganizationConfigurationThirdPartyClientAccessAllowedValuesEnum
+      extend Auth0::Internal::Types::Enum
+
+      ALLOW = "allow"
+      BLOCK = "block"
+    end
+  end
+end

lib/auth0/types/client_my_organization_configuration_third_party_client_access_default_value_enum.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Auth0
+  module Types
+    module ClientMyOrganizationConfigurationThirdPartyClientAccessDefaultValueEnum
+      extend Auth0::Internal::Types::Enum
+
+      BLOCK = "block"
+    end
+  end
+end

lib/auth0/types/client_my_organization_patch_configuration.rb

@@ -10,6 +10,8 @@ class ClientMyOrganizationPatchConfiguration < Internal::Types::Model
 
       field :allowed_strategies, -> { Internal::Types::Array[Auth0::Types::ClientMyOrganizationConfigurationAllowedStrategiesEnum] }, optional: false, nullable: false
 
+      field :third_party_client_access, -> { Auth0::Types::ClientMyOrganizationThirdPartyClientAccessConfiguration }, optional: true, nullable: false
+
       field :connection_deletion_behavior, -> { Auth0::Types::ClientMyOrganizationDeletionBehaviorEnum }, optional: false, nullable: false
 
       field :invitation_landing_client_id, -> { String }, optional: true, nullable: false

lib/auth0/types/client_my_organization_post_configuration.rb

@@ -10,6 +10,8 @@ class ClientMyOrganizationPostConfiguration < Internal::Types::Model
 
       field :allowed_strategies, -> { Internal::Types::Array[Auth0::Types::ClientMyOrganizationConfigurationAllowedStrategiesEnum] }, optional: false, nullable: false
 
+      field :third_party_client_access, -> { Auth0::Types::ClientMyOrganizationThirdPartyClientAccessConfiguration }, optional: true, nullable: false
+
       field :connection_deletion_behavior, -> { Auth0::Types::ClientMyOrganizationDeletionBehaviorEnum }, optional: false, nullable: false
 
       field :invitation_landing_client_id, -> { String }, optional: true, nullable: false

lib/auth0/types/client_my_organization_response_configuration.rb

@@ -10,6 +10,8 @@ class ClientMyOrganizationResponseConfiguration < Internal::Types::Model
 
       field :allowed_strategies, -> { Internal::Types::Array[Auth0::Types::ClientMyOrganizationConfigurationAllowedStrategiesEnum] }, optional: false, nullable: false
 
+      field :third_party_client_access, -> { Auth0::Types::ClientMyOrganizationThirdPartyClientAccessConfiguration }, optional: true, nullable: false
+
       field :connection_deletion_behavior, -> { Auth0::Types::ClientMyOrganizationDeletionBehaviorEnum }, optional: false, nullable: false
 
       field :invitation_landing_client_id, -> { String }, optional: true, nullable: false