feat: add Phone Provider Protection, Token Vault IP allowlist, and Cross App Access requesting app (#758)

Co-authored-by: fern-api[bot] <115122769+fern-api[bot]@users.noreply.github.com>

Author: fern-api[bot]

.fern/metadata.json

@@ -10,8 +10,9 @@
     "offsetSemantics": "page-index",
     "useDefaultRequestParameterValues": true
   },
-  "originGitCommit": "df7ae8a82270ede4f3c8a94464e34131cd03ddcc",
-  "originGitCommitIsDirty": true,
-  "invokedBy": "manual",
+  "originGitCommit": "708e068ccaf8e7742dbd2e18dea25e4ba5b0ce91",
+  "originGitCommitIsDirty": false,
+  "invokedBy": "ci",
+  "ciProvider": "github",
   "sdkVersion": "5.20.1"
 }

lib/auth0.rb

@@ -289,8 +289,16 @@
 require_relative "auth0/types/client_token_endpoint_auth_method_enum"
 require_relative "auth0/types/client_token_exchange_type_enum"
 require_relative "auth0/types/client_token_exchange_configuration"
+require_relative "auth0/types/token_vault_privileged_access_ip_allowlist_entry"
+require_relative "auth0/types/client_token_vault_privileged_access_with_credential_id"
 require_relative "auth0/types/linked_client_configuration"
 require_relative "auth0/types/express_configuration"
+require_relative "auth0/types/fed_cm_login_google"
+require_relative "auth0/types/fed_cm_login"
+require_relative "auth0/types/native_social_login_apple"
+require_relative "auth0/types/native_social_login_facebook"
+require_relative "auth0/types/native_social_login_google"
+require_relative "auth0/types/native_social_login"
 require_relative "auth0/types/token_quota_client_credentials"
 require_relative "auth0/types/token_quota"
 require_relative "auth0/types/client"
@@ -323,6 +331,7 @@
 require_relative "auth0/types/client_signed_request_object_with_public_key"
 require_relative "auth0/types/client_token_endpoint_auth_method_or_null_enum"
 require_relative "auth0/types/client_token_exchange_configuration_or_null"
+require_relative "auth0/types/client_token_vault_privileged_access_with_public_key"
 require_relative "auth0/types/connected_account_access_type_enum"
 require_relative "auth0/types/connected_account"
 require_relative "auth0/types/connection_https_url_with_http_fallback255"
@@ -477,6 +486,7 @@
 require_relative "auth0/types/connection_fields_map_saml_value"
 require_relative "auth0/types/connection_fields_map_saml"
 require_relative "auth0/types/connection_options"
+require_relative "auth0/types/cross_app_access_requesting_app"
 require_relative "auth0/types/connection_for_list"
 require_relative "auth0/types/connection_for_organization"
 require_relative "auth0/types/connection_forward_req_info_sms"
@@ -1796,7 +1806,7 @@
 require_relative "auth0/types/user_authentication_method_properties"
 require_relative "auth0/types/create_user_authentication_method_response_content"
 require_relative "auth0/types/user_app_metadata_schema"
-require_relative "auth0/types/user_date_schema"
+require_relative "auth0/types/user_id"
 require_relative "auth0/types/user_identity_provider_enum"
 require_relative "auth0/types/user_profile_data"
 require_relative "auth0/types/user_identity_schema"
@@ -2186,8 +2196,8 @@
 require_relative "auth0/types/event_stream_subscribe_events_response_content"
 require_relative "auth0/types/event_stream_test_event_type_enum"
 require_relative "auth0/types/express_configuration_or_null"
-require_relative "auth0/types/fed_cm_login_google"
-require_relative "auth0/types/fed_cm_login"
+require_relative "auth0/types/fed_cm_login_google_patch"
+require_relative "auth0/types/fed_cm_login_patch"
 require_relative "auth0/types/federated_connection_token_set"
 require_relative "auth0/types/flow_execution_debug"
 require_relative "auth0/types/flow_execution_summary"
@@ -2302,6 +2312,8 @@
 require_relative "auth0/types/get_organization_invitation_response_content"
 require_relative "auth0/types/get_organization_response_content"
 require_relative "auth0/types/get_partials_response_content"
+require_relative "auth0/types/phone_provider_protection_backoff_strategy_enum"
+require_relative "auth0/types/get_phone_provider_protection_response_content"
 require_relative "auth0/types/get_phone_template_response_content"
 require_relative "auth0/types/get_rate_limit_policy_response_content"
 require_relative "auth0/types/refresh_token_date_object"
@@ -2502,14 +2514,15 @@
 require_relative "auth0/types/log_stream_response_schema"
 require_relative "auth0/types/log_stream_segment_sink"
 require_relative "auth0/types/log_stream_sink_patch"
-require_relative "auth0/types/native_social_login_apple"
-require_relative "auth0/types/native_social_login_facebook"
-require_relative "auth0/types/native_social_login_google"
-require_relative "auth0/types/native_social_login"
+require_relative "auth0/types/native_social_login_apple_patch"
+require_relative "auth0/types/native_social_login_facebook_patch"
+require_relative "auth0/types/native_social_login_google_patch"
+require_relative "auth0/types/native_social_login_patch"
 require_relative "auth0/types/organization_access_level_enum_with_null"
 require_relative "auth0/types/partial_groups_enum"
 require_relative "auth0/types/partial_phone_template_content"
 require_relative "auth0/types/patch_client_credential_response_content"
+require_relative "auth0/types/patch_phone_provider_protection_response_content"
 require_relative "auth0/types/patch_rate_limit_policy_configuration_request_content_zero_action"
 require_relative "auth0/types/patch_rate_limit_policy_configuration_request_content_zero"
 require_relative "auth0/types/patch_rate_limit_policy_configuration_request_content_one_action"
@@ -2726,7 +2739,6 @@
 require_relative "auth0/types/user_attribute_profile_patch_user_id"
 require_relative "auth0/types/user_enrollment_auth_method_enum"
 require_relative "auth0/types/user_enrollment_status_enum"
-require_relative "auth0/types/user_id"
 require_relative "auth0/types/user_identity"
 require_relative "auth0/types/user_list_log_offset_paginated_response_content"
 require_relative "auth0/types/user_multifactor_provider_enum"
@@ -2898,6 +2910,8 @@
 require_relative "auth0/attack_protection/brute_force_protection/types/update_brute_force_settings_request_content"
 require_relative "auth0/attack_protection/captcha/client"
 require_relative "auth0/attack_protection/captcha/types/update_attack_protection_captcha_request_content"
+require_relative "auth0/attack_protection/phone_provider_protection/client"
+require_relative "auth0/attack_protection/phone_provider_protection/types/patch_phone_provider_protection_request_content"
 require_relative "auth0/attack_protection/suspicious_ip_throttling/client"
 require_relative "auth0/attack_protection/suspicious_ip_throttling/types/update_suspicious_ip_throttling_settings_request_content"
 require_relative "auth0/branding/templates/client"

lib/auth0/attack_protection/client.rb

@@ -30,6 +30,11 @@ def captcha
         @captcha ||= Auth0::AttackProtection::Captcha::Client.new(client: @client)
       end
 
+      # @return [Auth0::PhoneProviderProtection::Client]
+      def phone_provider_protection
+        @phone_provider_protection ||= Auth0::AttackProtection::PhoneProviderProtection::Client.new(client: @client)
+      end
+
       # @return [Auth0::SuspiciousIPThrottling::Client]
       def suspicious_ip_throttling
         @suspicious_ip_throttling ||= Auth0::AttackProtection::SuspiciousIPThrottling::Client.new(client: @client)

lib/auth0/attack_protection/phone_provider_protection/client.rb

@@ -0,0 +1,82 @@
+# frozen_string_literal: true
+
+module Auth0
+  module AttackProtection
+    module PhoneProviderProtection
+      class Client
+        # @param client [Auth0::Internal::Http::RawClient]
+        #
+        # @return [void]
+        def initialize(client:)
+          @client = client
+        end
+
+        # Get the phone provider protection configuration for a tenant.
+        #
+        # @param request_options [Hash]
+        # @param _params [Hash]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        #
+        # @return [Auth0::Types::GetPhoneProviderProtectionResponseContent]
+        def get(request_options: {}, **_params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "GET",
+            path: "attack-protection/phone-provider-protection",
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::GetPhoneProviderProtectionResponseContent.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+
+        # Update the phone provider protection configuration for a tenant.
+        #
+        # @param request_options [Hash]
+        # @param params [Auth0::AttackProtection::PhoneProviderProtection::Types::PatchPhoneProviderProtectionRequestContent]
+        # @option request_options [String] :base_url
+        # @option request_options [Hash{String => Object}] :additional_headers
+        # @option request_options [Hash{String => Object}] :additional_query_parameters
+        # @option request_options [Hash{String => Object}] :additional_body_parameters
+        # @option request_options [Integer] :timeout_in_seconds
+        #
+        # @return [Auth0::Types::PatchPhoneProviderProtectionResponseContent]
+        def patch(request_options: {}, **params)
+          params = Auth0::Internal::Types::Utils.normalize_keys(params)
+          request = Auth0::Internal::JSON::Request.new(
+            base_url: request_options[:base_url],
+            method: "PATCH",
+            path: "attack-protection/phone-provider-protection",
+            body: Auth0::AttackProtection::PhoneProviderProtection::Types::PatchPhoneProviderProtectionRequestContent.new(params).to_h,
+            request_options: request_options
+          )
+          begin
+            response = @client.send(request)
+          rescue Net::HTTPRequestTimeout
+            raise Auth0::Errors::TimeoutError
+          end
+          code = response.code.to_i
+          if code.between?(200, 299)
+            Auth0::Types::PatchPhoneProviderProtectionResponseContent.load(response.body)
+          else
+            error_class = Auth0::Errors::ResponseError.subclass_for_code(code)
+            raise error_class.new(response.body, code: code)
+          end
+        end
+      end
+    end
+  end
+end

lib/auth0/attack_protection/phone_provider_protection/types/patch_phone_provider_protection_request_content.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Auth0
+  module AttackProtection
+    module PhoneProviderProtection
+      module Types
+        class PatchPhoneProviderProtectionRequestContent < Internal::Types::Model
+          field :type, -> { Auth0::Types::PhoneProviderProtectionBackoffStrategyEnum }, optional: false, nullable: false
+        end
+      end
+    end
+  end
+end

lib/auth0/clients/types/create_client_request_content.rb

@@ -90,6 +90,8 @@ class CreateClientRequestContent < Internal::Types::Model
 
         field :signed_request_object, -> { Auth0::Types::ClientSignedRequestObjectWithPublicKey }, optional: true, nullable: false
 
+        field :token_vault_privileged_access, -> { Auth0::Types::ClientTokenVaultPrivilegedAccessWithPublicKey }, optional: true, nullable: false
+
         field :compliance_level, -> { Auth0::Types::ClientComplianceLevelEnum }, optional: true, nullable: false
 
         field :skip_non_verifiable_callback_uri_confirmation_prompt, -> { Internal::Types::Boolean }, optional: true, nullable: false

lib/auth0/clients/types/update_client_request_content.rb

@@ -74,9 +74,9 @@ class UpdateClientRequestContent < Internal::Types::Model
 
         field :initiate_login_uri, -> { String }, optional: true, nullable: false
 
-        field :native_social_login, -> { Auth0::Types::NativeSocialLogin }, optional: true, nullable: false
+        field :native_social_login, -> { Auth0::Types::NativeSocialLoginPatch }, optional: true, nullable: false
 
-        field :fedcm_login, -> { Auth0::Types::FedCmLogin }, optional: true, nullable: false
+        field :fedcm_login, -> { Auth0::Types::FedCmLoginPatch }, optional: true, nullable: false
 
         field :refresh_token, -> { Auth0::Types::ClientRefreshTokenConfiguration }, optional: true, nullable: false
 
@@ -96,6 +96,8 @@ class UpdateClientRequestContent < Internal::Types::Model
 
         field :signed_request_object, -> { Auth0::Types::ClientSignedRequestObjectWithCredentialID }, optional: true, nullable: false
 
+        field :token_vault_privileged_access, -> { Auth0::Types::ClientTokenVaultPrivilegedAccessWithCredentialID }, optional: true, nullable: false
+
         field :compliance_level, -> { Auth0::Types::ClientComplianceLevelEnum }, optional: true, nullable: false
 
         field :skip_non_verifiable_callback_uri_confirmation_prompt, -> { Internal::Types::Boolean }, optional: true, nullable: false

lib/auth0/connections/types/create_connection_request_content.rb

@@ -25,6 +25,8 @@ class CreateConnectionRequestContent < Internal::Types::Model
         field :authentication, -> { Auth0::Types::ConnectionAuthenticationPurpose }, optional: true, nullable: false
 
         field :connected_accounts, -> { Auth0::Types::ConnectionConnectedAccountsPurpose }, optional: true, nullable: false
+
+        field :cross_app_access_requesting_app, -> { Auth0::Types::CrossAppAccessRequestingApp }, optional: true, nullable: false
       end
     end
   end

lib/auth0/connections/types/update_connection_request_content.rb

@@ -23,6 +23,8 @@ class UpdateConnectionRequestContent < Internal::Types::Model
         field :authentication, -> { Auth0::Types::ConnectionAuthenticationPurpose }, optional: true, nullable: false
 
         field :connected_accounts, -> { Auth0::Types::ConnectionConnectedAccountsPurpose }, optional: true, nullable: false
+
+        field :cross_app_access_requesting_app, -> { Auth0::Types::CrossAppAccessRequestingApp }, optional: true, nullable: false
       end
     end
   end

lib/auth0/email_templates/client.rb

@@ -45,9 +45,9 @@ def create(request_options: {}, **params)
       end
 
       # Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`,
-      # `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`,
-      # `enrollment_email`, `mfa_oob_code`, `user_invitation`, and `async_approval`. The names `change_password`, and
-      # `password_reset` are also supported for legacy scenarios.
+      # `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`,
+      # `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, and `async_approval`. The names
+      # `change_password`, and `password_reset` are also supported for legacy scenarios.
       #
       # @param request_options [Hash]
       # @param params [Hash]