[fern-api]

Changes

SDK regeneration from the Auth0 OpenAPI spec via Fern. Adds Client Profiles, Captcha Policies, and search endpoints for clients and client grants, along with new fields on clients, tenant settings, brute force protection, connection profiles, segments, and organization connection events. Removes the update_status methods from Experiment Center experiments and feature flags in favor of a status field on update.

🆕 New endpoints / types:

• Client Profiles - new client.client_profiles accessor with list, create, get, delete, and update on client-profiles, backed by ClientProfile, ClientProfileClientConfiguration, ClientProfileApplyPolicy, and ListClientProfilesPaginatedResponseContent, with new OauthScope constants create:client_profiles, read:client_profiles, update:client_profiles, and delete:client_profiles
• Captcha Policies - new client.attack_protection.captcha_policies accessor with list, create, get, delete, and update, backed by AttackProtectionCaptchaPolicy, AttackProtectionCaptchaPolicyMatch, AttackProtectionCaptchaPolicyAction, ListAttackProtectionCaptchaPoliciesResponseContent, and CaptchaActiveProviderEnum (simple_captcha, auth_challenge, recaptcha_v2, recaptcha_enterprise, hcaptcha, friendly_captcha, arkose)
• Clients search - new clients.search on GET /clients/search with cursor pagination, backed by SearchClientsRequestParameters, SearchClientsResponseContent, ClientSearchResponse, and ClientSortFieldEnum (name, updated_at)
• Client Grants search - new client_grants.search on GET /client-grants/search with cursor pagination, backed by SearchClientGrantsRequestParameters, SearchClientGrantsResponseContent, and ClientGrantSortFieldEnum (audience, updated_at)

✏️ Modified endpoints (new properties):

• Client OIDC support on update - oidc_support on client update (PATCH /clients/{id}), backed by new ClientOidcSupportPatch (is_allowed, allow_all_scopes, allowed_scopes)
• Anonymous session transfer network binding - enforce_anon_session_transfer_network_binding (ip, asn, none) on client create, update, and response types, backed by new ClientAnonymousSessionTransferNetworkBindingEnum
• Client external metadata status - external_metadata_status (available, unavailable) on client response types, backed by new ClientExternalMetadataStatusEnum
• CIMD metadata creator - external_metadata_created_by on PreviewCimdMetadataResponseContent, backed by new CimdExternalMetadataCreatedByEnum
• Dynamic client registration for CIMD - client_id_metadata_document_dynamic_registration_supported on Tenant Settings get/update
• Strict DPoP refresh token binding - dpop_strict_refresh_token_binding on Tenant Settings get/update
• Brute force protection form submission mode - form_submission_mode (auto, manual) on Brute Force Protection get/update, backed by new BruteForceProtectionFormSubmissionModeEnum
• Google Workspace provisioning - google_workspace (sync_users) on ConnectionProfileProvisioning and ConnectionProfileStrategyOverridesProvisioning, backed by new ConnectionProfileProvisioningGoogleWorkspace
• Directory sync feature - directory_sync added to EnabledFeaturesEnum on connection profiles
• Experiment status on update - status (ExperimentTransitionStatusEnum) on experiment update
• Feature flag status on update - status (FeatureFlagStatusEnum) on feature flag update
• Segment status - status (active, archived) on segment update and on segment create/get/update responses, backed by new SegmentStatusEnum
• Organization member access level on connection events - organization_member_access_level on the object and previous object of the organization connection added and updated event streams

⚠️ Breaking Changes:

• update_status removed from experiments and feature flags - client.experimentation.experiments.update_status and client.experimentation.feature_flags.update_status are removed, along with UpdateExperimentStatusRequestContent, UpdateExperimentStatusResponseContent, UpdateFeatureFlagStatusRequestContent, and UpdateFeatureFlagStatusResponseContent. Migration: pass status to the corresponding update method instead.
• SearchOrganization.metadata removed - the metadata field is no longer present on SearchOrganization. Migration: read metadata from client.organizations.get, which still returns it.

Testing

New wire tests cover captcha policies and client profiles, and the existing wire test mappings were regenerated to match the updated client.

• This change adds unit test coverage
• This change adds integration test coverage
• This change has been tested on the latest version of Ruby

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors
• Rubocop passes on all added/modified files
• All active GitHub checks have passed

[kishore7snehil]

LGTM!