feat!: Custom Domains pagination, Directory Provisioning API, and Guardian provider updates

[fern-api]

Changes

This release introduces several new features and includes breaking changes to improve API consistency and add pagination support.

---

Guardian Push Notification Providers - HTTP Method Changes

The set*Provider methods now use PUT (full replacement) instead of PATCH. New update*Provider methods added for partial updates:

Method	HTTP	Behavior
setApnsProvider()	PUT	Overwrites all APNS config
updateApnsProvider()	PATCH	Partial update APNS config
setFcmProvider()	PUT	Overwrites all FCM config
updateFcmProvider()	PATCH	Partial update FCM config
setFcmv1Provider()	PUT	Overwrites all FCMv1 config
updateFcmv1Provider()	PATCH	Partial update FCMv1 config

---

New Features

Directory Provisioning API

New API for managing directory provisioning configuration on connections:

// Get directory provisioning config
await client.connections.directoryProvisioning.get(connectionId);

// Create directory provisioning config
await client.connections.directoryProvisioning.create(connectionId, {
    mapping: [{ auth0: "email", idp: "mail" }],
    synchronize_automatically: true
});

// Update directory provisioning config
await client.connections.directoryProvisioning.update(connectionId, { ... });

// Delete directory provisioning config
await client.connections.directoryProvisioning.delete(connectionId);

// Get default attribute mapping
await client.connections.directoryProvisioning.getDefaultMapping(connectionId);

// Trigger on-demand synchronization
await client.connections.directoryProvisioning.synchronizations.create(connectionId);

Client Token Exchange Configuration

New token_exchange option for clients:

await client.clients.create({
    name: "My App",
    token_exchange: {
        allow_any_profile_of_type: ["custom_authentication"]
    }
});

Organization Discovery Domains

New use_for_organization_discovery field to control whether a discovery domain should be used for organization discovery:

await client.organizations.discoveryDomains.create(orgId, {
    domain: "example.com",
    status: "verified",
    use_for_organization_discovery: true
});

Custom Domain Metadata

New domain_metadata field for custom domains:

await client.customDomains.create({
    domain: "auth.example.com",
    type: "auth0_managed_certs",
    domain_metadata: { key: "value" }
});

Change Password Ticket Identity

New identity option for change password tickets:

await client.tickets.changePassword({
    user_id: "user_id",
    identity: { ... }
});

Token Exchange Profiles - Legal Notice

Token Exchange Profile endpoints now include legal notice about Free Trial terms in Okta's Master Subscription Agreement.

---

Other Improvements

• ACUL Rendering: context_configuration type improved, property ordering updated
• Refresh Token Policies: Added policies array with audience and scope fields
• Documentation: Removed verbose head_tags examples from rendering API docs

References

Internal API definition updates

Testing

• This change adds unit test coverage
• This change adds integration test coverage

All existing and new tests pass successfully.

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors

[codecov]

Codecov Report

❌ Patch coverage is 89.66408% with 40 lines in your changes missing coverage. Please review.
✅ Project coverage is 89.21%. Comparing base (11d2e76) to head (bfa71ec).
⚠️ Report is 1 commits behind head on master.

Files with missing lines	Patch %	Lines
...s/resources/directoryProvisioning/client/Client.ts	89.01%	20 Missing ⚠️
...actors/resources/pushNotification/client/Client.ts	88.23%	12 Missing ⚠️
...ioning/resources/synchronizations/client/Client.ts	91.11%	4 Missing ⚠️
...ement/api/resources/customDomains/client/Client.ts	92.00%	4 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1278      +/-   ##
==========================================
+ Coverage   89.18%   89.21%   +0.02%     
==========================================
  Files         364      369       +5     
  Lines       16472    16846     +374     
  Branches     8319     8374      +55     
==========================================
+ Hits        14691    15029     +338     
- Misses       1781     1817      +36     

Flag	Coverage Δ
alltests	89.21% <89.66%> (+0.02%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/management/api/requests/requests.ts	100.00% <ø> (ø)
...agement/api/resources/connections/client/Client.ts	88.46% <100.00%> (+0.13%)	⬆️
...nnections/resources/directoryProvisioning/index.ts	100.00% <100.00%> (ø)
...resources/directoryProvisioning/resources/index.ts	100.00% <100.00%> (ø)
...ryProvisioning/resources/synchronizations/index.ts	100.00% <100.00%> (ø)
...ement/api/resources/connections/resources/index.ts	100.00% <100.00%> (ø)
...ations/resources/discoveryDomains/client/Client.ts	88.82% <ø> (ø)
...urces/prompts/resources/rendering/client/Client.ts	90.50% <ø> (ø)
...i/resources/tokenExchangeProfiles/client/Client.ts	88.77% <ø> (ø)
src/management/api/types/types.ts	100.00% <ø> (ø)
... and 4 more

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[developerkunal]

LGTM