chore(deps): Bump Auth0.ManagementApi from 10.1.0 to 10.3.0

[dependabot]

Updated Auth0.ManagementApi from 10.1.0 to 10.3.0.

Release notes

Sourced from Auth0.ManagementApi's releases.

10.3.0

Added

• My Organization member management controls (EA): Two new optional safety controls are available on the my_organization_configuration block of application clients. Setting EnforcePermissionCeiling = true ensures that organization admins can only assign permissions to members that they themselves already hold - preventing privilege escalation within the organization. Setting EnforceSelfAssignmentRestriction = true prevents admins from assigning permissions to themselves. Both settings default to false and are available when creating, updating, or reading a client #​1110 (fern-api[bot])
• Organization connection member access level: Organization connections now expose an OrganizationMemberAccessLevel field that specifies the level of access members gain through that connection when joining an organization. The supported values are none, readonly, limited, and full. The field is available on connection create, update, and read operations #​1110 (fern-api[bot])
• Access token custom claims mapping on resource servers and tenant settings: Resource servers and tenant settings now accept an AccessToken.ClaimsMapping.CustomClaims list of mapping rules. Each rule pairs a Name - the claim name to emit in the access token - with an Expression, a dot-path into the anonymous-session context (e.g. anonymous_session.metadata.country). This lets you declaratively map values from an anonymous session into named claims on the issued access token without writing an Action #​1110 (fern-api[bot])

10.2.0

⚠️ BREAKING CHANGES

OrganizationTemplates sub-client removed - #​1108 (fern-api[bot])

• The top-level client.OrganizationTemplates sub-client introduced in mgmt-10.1.0 has been removed along with its associated request and parameter types (CreateOrganizationTemplateRequestContent, UpdateOrganizationTemplateRequestContent, ListOrganizationTemplatesRequestParameters, ListTemplateOrganizationsRequestParameters). Any code that references client.OrganizationTemplates will fail to compile and must be removed.

Added

• Guardian tenant-level MFA settings: client.Guardian now exposes GetAsync() and SetAsync() to read and write tenant-level MFA settings - whether the "Remember Me" checkbox is shown on the Universal Login MFA prompt and its default checked state, plus the inactivity and overall session timeouts that control how long an MFA session remains valid #​1108 (fern-api[bot])
• Guardian email and phone factor settings: Two new sub-clients, client.Guardian.Factors.Email and client.Guardian.Factors.Phone, each expose GetAsync() and SetAsync() to configure factor-specific settings such as OTP length and expiry for the email and phone MFA factors #​1108 (fern-api[bot])
• Anonymous sessions on application clients: Application clients now support an AnonymousSessions property on create, update, and read operations. Setting Active = true permits the client to initiate anonymous sessions #​1108 (fern-api[bot])
• Anonymous session tenant settings: Tenant settings now expose a Sessions.Anonymous block (TenantSettingsSessionsAnonymous) for configuring anonymous sessions at the tenant level - the session lifetime in minutes (defaulting to 30 days, up to 1 year) and whether the auth0_anon cookie is issued #​1108 (fern-api[bot])
• Anonymous user access policy on resource servers: Resource server subject-type authorization now includes a ResourceServerSubjectTypeAuthorizationAnonymousUser block, with a Policy field that controls whether anonymous users may obtain access tokens for the API - either deny_all or require_client_grant #​1108 (fern-api[bot])
• Organization search API: client.Organizations.SearchAsync(SearchOrganizationsRequestParameters) enables Lucene and SCIM-syntax queries over organizations, returning cursor-paginated results (Pager<SearchOrganization>). Requests support a free-text query (Q), parser selection (SearchParserEnum.Lucene / Scim), sort by OrganizationSortFieldEnum, and checkpoint pagination via From / Take #​1108 (fern-api[bot])
• Resource server search API: client.ResourceServers.SearchAsync(SearchResourceServersRequestParameters) adds the same query-and-pagination capability for APIs/resource servers, returning Pager<ResourceServerSearchResponse> and supporting Lucene or SCIM queries, field projection (Fields, IncludeFields), and sort by ResourceServerSortFieldEnum #​1108 (fern-api[bot])
• Experimentation: advance ramp: A new client.Experimentation.Experiments.AdvanceRampAsync(id, request) call progresses a feature-flag experiment's traffic ramp. client.Experimentation is now part of the IManagementApiClient interface, and a new OauthScope.UpdateExperimentation (update:experimentation) scope is available for authorizing these operations #​1108 (fern-api[bot])
• Gateway timeout error: A typed GatewayTimeoutError is now raised on HTTP 504 responses, making upstream-timeout failures distinguishable from other error conditions #​1108 (fern-api[bot])

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #18.