diff --git a/src/management/__generated/models/index.ts b/src/management/__generated/models/index.ts index ea7b666498..f12d44a9ca 100644 --- a/src/management/__generated/models/index.ts +++ b/src/management/__generated/models/index.ts @@ -159,6 +159,9 @@ export interface Client { * */ allowed_logout_urls: Array; + /** + */ + session_transfer?: ClientSessionTransfer | null; /** */ oidc_logout: ClientOidcLogout; @@ -1021,6 +1024,9 @@ export interface ClientCreate { * */ callbacks?: Array; + /** + */ + session_transfer?: ClientSessionTransfer | null; /** */ oidc_logout?: ClientCreateOidcLogout; @@ -2466,6 +2472,57 @@ export interface ClientRefreshTokenPoliciesInner { */ scope: Array; } +/** + * Native to Web SSO Configuration + */ +export interface ClientSessionTransfer { + /** + * Indicates whether an app can issue a session_token through Token Exchange. If set to 'false', the app will not be able to issue a session_token. + * + */ + can_create_session_transfer_token?: boolean; + /** + * Indicates whether an app can create a session from a session_token received via indicated methods. + * + */ + allowed_authentication_methods?: Array; + /** + * Indicates whether device binding security should be enforced for the app. If set to 'ip', the app will enforce device binding by IP, meaning that consumption of session_token must be done from the same IP of the issuer. Likewise, if set to 'asn', device binding is enforced by ASN, meaning consumption of session_token must be done from the same ASN as the issuer. If set to 'null', device binding is not enforced. + * + */ + enforce_device_binding?: ClientSessionTransferEnforceDeviceBindingEnum; + /** + * Indicates whether Refresh Tokens are allowed to be issued when authenticating with a session_transfer_token. + * + */ + allow_refresh_token?: boolean; + /** + * Indicates whether Refresh Tokens created during a native-to-web session are tied to that session's lifetime. This determines if such refresh tokens should be automatically revoked when their corresponding sessions are. + * + */ + enforce_online_refresh_tokens?: boolean; + /** + * Indicates whether revoking the parent Refresh Token that initiated a Native to Web flow and was used to issue a Session Transfer Token should trigger a cascade revocation affecting its dependent child entities. + * + */ + enforce_cascade_revocation?: boolean; +} + +export const ClientSessionTransferAllowedAuthenticationMethodsEnum = { + cookie: 'cookie', + query: 'query', +} as const; +export type ClientSessionTransferAllowedAuthenticationMethodsEnum = + (typeof ClientSessionTransferAllowedAuthenticationMethodsEnum)[keyof typeof ClientSessionTransferAllowedAuthenticationMethodsEnum]; + +export const ClientSessionTransferEnforceDeviceBindingEnum = { + ip: 'ip', + asn: 'asn', + none: 'none', +} as const; +export type ClientSessionTransferEnforceDeviceBindingEnum = + (typeof ClientSessionTransferEnforceDeviceBindingEnum)[keyof typeof ClientSessionTransferEnforceDeviceBindingEnum]; + /** * JWT-secured Authorization Requests (JAR) settings. */ @@ -2529,6 +2586,9 @@ export interface ClientUpdate { * */ callbacks?: Array; + /** + */ + session_transfer?: ClientSessionTransfer | null; /** */ oidc_logout?: ClientUpdateOidcLogout | null;