Skip to content

feat: My Organization Member Management EA, Resource Server Access Token Custom Claims, and Organization Connection Member Access Level #1406

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ankita10119 merged 2 commits into from
Sep 16, 2026
Merged

feat: My Organization Member Management EA, Resource Server Access Token Custom Claims, and Organization Connection Member Access Level #1406

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
216dc4b
[fern-generated] Update SDK
fern-api[bot] Sep 15, 2026
fd6fd65
[fern-replay] Applied customizations
fern-api[bot] Sep 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1,874 changes: 1,868 additions & 6 deletions .fern/replay.lock
View file
Open in desktop

Large diffs are not rendered by default.

5 changes: 5 additions & 0 deletions src/management/api/requests/requests.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1555,6 +1555,7 @@ export interface CreateResourceServerRequestContent {
skip_consent_for_verifiable_first_party_clients?: boolean;
/** Whether to enforce authorization policies (true) or to ignore them (false). */
enforce_policies?: boolean;
access_token?: Management.ResourceServerAccessToken | null;
token_encryption?: Management.ResourceServerTokenEncryption | null;
consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
authorization_details?: unknown[] | null;
Expand Down Expand Up @@ -1630,6 +1631,7 @@ export interface UpdateResourceServerRequestContent {
token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
/** Whether authorization policies are enforced (true) or not enforced (false). */
enforce_policies?: boolean;
access_token?: Management.ResourceServerAccessToken | null;
token_encryption?: Management.ResourceServerTokenEncryption | null;
consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
authorization_details?: unknown[] | null;
Expand Down Expand Up @@ -3604,6 +3606,7 @@ export interface CreateOrganizationAllConnectionRequestParameters {
/** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
is_signup_enabled?: boolean;
organization_access_level?: Management.OrganizationAccessLevelEnum;
organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum;
/** Whether the connection is enabled for the organization. */
is_enabled?: boolean;
/** Connection identifier. */
Expand All @@ -3624,6 +3627,7 @@ export interface UpdateOrganizationConnectionRequestParameters {
/** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
is_signup_enabled?: boolean;
organization_access_level?: Management.OrganizationAccessLevelEnumWithNull | null;
organization_member_access_level?: Management.OrganizationMemberAccessLevelEnumWithNull | null;
/** Whether the connection is enabled for the organization. */
is_enabled?: boolean | null;
}
Expand Down Expand Up @@ -4260,6 +4264,7 @@ export interface UpdateTenantSettingsRequestContent {
default_redirection_uri?: string;
/** Supported locales for the user interface */
enabled_locales?: Management.TenantSettingsSupportedLocalesEnum[];
access_token?: Management.ResourceServerAccessToken | null;
security_headers?: Management.TenantSettingsNullableSecurityHeaders | null;
session_cookie?: Management.SessionCookieSchema | null;
sessions?: Management.TenantSettingsSessions | null;
Expand Down
70 changes: 70 additions & 0 deletions src/management/api/types/types.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3068,6 +3068,10 @@ export interface ClientMyOrganizationPatchConfiguration {
connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
/** The client ID this client uses while creating invitations through My Organization API. */
invitation_landing_client_id?: string | undefined;
/** When true, limits the permissions that organization admins can assign to members to only those held by the admin themselves. */
enforce_permission_ceiling?: boolean | undefined;
/** When true, prevents organization admins from assigning permissions to themselves. */
enforce_self_assignment_restriction?: boolean | undefined;
}

/**
Expand All @@ -3084,6 +3088,10 @@ export interface ClientMyOrganizationPostConfiguration {
connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
/** The client ID this client uses while creating invitations through My Organization API. */
invitation_landing_client_id?: string | undefined;
/** When true, limits the permissions that organization admins can assign to members to only those held by the admin themselves. */
enforce_permission_ceiling?: boolean | undefined;
/** When true, prevents organization admins from assigning permissions to themselves. */
enforce_self_assignment_restriction?: boolean | undefined;
}

/**
Expand All @@ -3100,6 +3108,10 @@ export interface ClientMyOrganizationResponseConfiguration {
connection_deletion_behavior: Management.ClientMyOrganizationDeletionBehaviorEnum;
/** The client ID this client uses while creating invitations through My Organization API. */
invitation_landing_client_id?: string | undefined;
/** When true, limits the permissions that organization admins can assign to members to only those held by the admin themselves. */
enforce_permission_ceiling?: boolean | undefined;
/** When true, prevents organization admins from assigning permissions to themselves. */
enforce_self_assignment_restriction?: boolean | undefined;
}

/**
Expand Down Expand Up @@ -10257,6 +10269,7 @@ export interface CreateOrganizationAllConnectionResponseContent {
/** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
is_signup_enabled?: boolean | undefined;
organization_access_level?: Management.OrganizationAccessLevelEnum | undefined;
organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum | undefined;
/** Whether the connection is enabled for the organization. */
is_enabled?: boolean | undefined;
/** Connection identifier. */
Expand Down Expand Up @@ -10407,6 +10420,7 @@ export interface CreateResourceServerResponseContent {
/** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
token_lifetime_for_anonymous_access_tokens?: number | undefined;
token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
access_token?: (Management.ResourceServerAccessToken | null) | undefined;
token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
authorization_details?: (unknown[] | null) | undefined;
Expand Down Expand Up @@ -32607,6 +32621,7 @@ export interface GetOrganizationAllConnectionResponseContent {
/** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
is_signup_enabled?: boolean | undefined;
organization_access_level?: Management.OrganizationAccessLevelEnum | undefined;
organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum | undefined;
/** Whether the connection is enabled for the organization. */
is_enabled?: boolean | undefined;
/** Connection identifier. */
Expand Down Expand Up @@ -32827,6 +32842,7 @@ export interface GetResourceServerResponseContent {
/** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
token_lifetime_for_anonymous_access_tokens?: number | undefined;
token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
access_token?: (Management.ResourceServerAccessToken | null) | undefined;
token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
authorization_details?: (unknown[] | null) | undefined;
Expand Down Expand Up @@ -33037,6 +33053,7 @@ export interface GetTenantSettingsResponseContent {
default_redirection_uri?: string | undefined;
/** Supported locales for the user interface. */
enabled_locales?: Management.SupportedLocales[] | undefined;
access_token?: (Management.ResourceServerAccessToken | null) | undefined;
security_headers?: (Management.TenantSettingsNullableSecurityHeaders | null) | undefined;
session_cookie?: (Management.SessionCookieSchema | null) | undefined;
sessions?: (Management.TenantSettingsSessions | null) | undefined;
Expand Down Expand Up @@ -35062,6 +35079,7 @@ export interface OrganizationAllConnectionPost {
/** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
is_signup_enabled?: boolean | undefined;
organization_access_level?: Management.OrganizationAccessLevelEnum | undefined;
organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum | undefined;
/** Whether the connection is enabled for the organization. */
is_enabled?: boolean | undefined;
/** Connection identifier. */
Expand Down Expand Up @@ -35256,6 +35274,26 @@ export interface OrganizationMember {
roles?: Management.OrganizationMemberRole[] | undefined;
}

/** Access level for the organization member (e.g., "none", "full"). */
export const OrganizationMemberAccessLevelEnum = {
None: "none",
Readonly: "readonly",
Limited: "limited",
Full: "full",
} as const;
export type OrganizationMemberAccessLevelEnum =
(typeof OrganizationMemberAccessLevelEnum)[keyof typeof OrganizationMemberAccessLevelEnum];

/** Access level for the organization member (e.g., "none", "full"). */
export const OrganizationMemberAccessLevelEnumWithNull = {
None: "none",
Readonly: "readonly",
Limited: "limited",
Full: "full",
} as const;
export type OrganizationMemberAccessLevelEnumWithNull =
(typeof OrganizationMemberAccessLevelEnumWithNull)[keyof typeof OrganizationMemberAccessLevelEnumWithNull];

export interface OrganizationMemberEffectiveRole {
/** Role ID */
id: string;
Expand Down Expand Up @@ -36075,6 +36113,7 @@ export interface ResourceServer {
/** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
token_lifetime_for_anonymous_access_tokens?: number | undefined;
token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
access_token?: (Management.ResourceServerAccessToken | null) | undefined;
token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
authorization_details?: (unknown[] | null) | undefined;
Expand All @@ -36085,6 +36124,33 @@ export interface ResourceServer {
client_id?: string | undefined;
}

/**
* Custom configuration for access tokens
*/
export interface ResourceServerAccessToken {
claims_mapping?: Management.ResourceServerAccessTokenClaimsMapping | undefined;
}

/**
* Custom configuration for claims in access tokens
*/
export interface ResourceServerAccessTokenClaimsMapping {
custom_claims?: Management.ResourceServerAccessTokenCustomClaimsMapping | undefined;
}

/**
* Custom claims to emit in anonymous-session access tokens. Each rule maps a value read from the anonymous-session context (via a restricted dot-path expression) onto a named access-token claim.
*/
export type ResourceServerAccessTokenCustomClaimsMapping =
Management.ResourceServerAccessTokenCustomClaimsMappingRule[];

export interface ResourceServerAccessTokenCustomClaimsMappingRule {
/** The access-token claim name to emit, stored with the casing you provide. Reserved OIDC/JWT claim names are not allowed (compared case-insensitively). */
name: string;
/** Restricted dot-path expression read from the anonymous-session context (e.g. `anonymous_session.metadata.country`). */
expression: string;
}

/**
* Authorization policy for the resource server.
*/
Expand Down Expand Up @@ -36161,6 +36227,7 @@ export interface ResourceServerSearchResponse {
/** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
token_lifetime_for_anonymous_access_tokens?: number | undefined;
token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
access_token?: (Management.ResourceServerAccessToken | null) | undefined;
token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
authorization_details?: (unknown[] | null) | undefined;
Expand Down Expand Up @@ -39137,6 +39204,7 @@ export interface UpdateOrganizationAllConnectionResponseContent {
/** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
is_signup_enabled?: boolean | undefined;
organization_access_level?: Management.OrganizationAccessLevelEnum | undefined;
organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum | undefined;
/** Whether the connection is enabled for the organization. */
is_enabled?: boolean | undefined;
/** Connection identifier. */
Expand Down Expand Up @@ -39274,6 +39342,7 @@ export interface UpdateResourceServerResponseContent {
/** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
token_lifetime_for_anonymous_access_tokens?: number | undefined;
token_dialect?: Management.ResourceServerTokenDialectResponseEnum | undefined;
access_token?: (Management.ResourceServerAccessToken | null) | undefined;
token_encryption?: (Management.ResourceServerTokenEncryption | null) | undefined;
consent_policy?: (Management.ResourceServerConsentPolicyEnum | null) | undefined;
authorization_details?: (unknown[] | null) | undefined;
Expand Down Expand Up @@ -39443,6 +39512,7 @@ export interface UpdateTenantSettingsResponseContent {
default_redirection_uri?: string | undefined;
/** Supported locales for the user interface. */
enabled_locales?: Management.SupportedLocales[] | undefined;
access_token?: (Management.ResourceServerAccessToken | null) | undefined;
security_headers?: (Management.TenantSettingsNullableSecurityHeaders | null) | undefined;
session_cookie?: (Management.SessionCookieSchema | null) | undefined;
sessions?: (Management.TenantSettingsSessions | null) | undefined;
Expand Down
Loading
Loading