BryanLewis-AtOkta
diff --git a/‎CHANGELOG.md‎
Lines changed: 71 additions & 0 deletions b/‎CHANGELOG.md‎
Lines changed: 71 additions & 0 deletions
diff --git a/‎Makefile‎
Lines changed: 2 additions & 1 deletion b/‎Makefile‎
Lines changed: 2 additions & 1 deletion
diff --git a/‎docs/data-sources/client.md‎
Lines changed: 113 additions & 1 deletion b/‎docs/data-sources/client.md‎
Lines changed: 113 additions & 1 deletion
diff --git a/‎docs/data-sources/flow.md‎
Lines changed: 32 additions & 0 deletions b/‎docs/data-sources/flow.md‎
Lines changed: 32 additions & 0 deletions
diff --git a/‎docs/data-sources/flow_vault_connection.md‎
Lines changed: 37 additions & 0 deletions b/‎docs/data-sources/flow_vault_connection.md‎
Lines changed: 37 additions & 0 deletions
diff --git a/‎docs/data-sources/form.md‎
Lines changed: 55 additions & 0 deletions b/‎docs/data-sources/form.md‎
Lines changed: 55 additions & 0 deletions
diff --git a/‎docs/data-sources/organization.md‎
Lines changed: 1 addition & 0 deletions b/‎docs/data-sources/organization.md‎
Lines changed: 1 addition & 0 deletions
@@ -1,3 +1,74 @@
+## v1.7.1
+
+BUG FIXES:
+
+- `data-source/auth0_organization`: Implemented enhanced error handling to gracefully manage "Forbidden" errors when retrieving the list of client grants via the `auth0_organization` data source. This addresses cases where the feature is not enabled for the user, preventing the error from disrupting the process ([#1049](https://github.com/auth0/terraform-provider-auth0/pull/1049/))
+- `resource/auth0_connection`: Updated documentation to clarify that `user_id_attribute` can be either `oid` or `sub` for Azure AD connections ([#1047](https://github.com/auth0/terraform-provider-auth0/pull/1047/))
+- `resource/auth0_form`: Updated docs to use `auth0_form` in examples  ([#1046](https://github.com/auth0/terraform-provider-auth0/pull/1046/))
+
+ENHANCEMENTS:
+- `data-source/auth0_roles`: Updated from `Offset Pagination` to `Checkpoint Pagination` to retrieve more than 1,000 role users ([#1048](https://github.com/auth0/terraform-provider-auth0/pull/1048/))
+
+
+## v1.7.0
+
+FEATURES:
+
+- `resource/auth0_encryption_key_manager`: Add new resource for re-keying of tenant master key ([#1031](https://github.com/auth0/terraform-provider-auth0/pull/1031/))
+- `resource/auth0_encryption_key_manager`: Add support for `customer_provided_root_key` for BYOK ([#1041](https://github.com/auth0/terraform-provider-auth0/pull/1041/))
+- `resource/auth0_organization_client_grant`: Add new resource for managing association of client-grant and organization ([#1027](https://github.com/auth0/terraform-provider-auth0/pull/1027/))
+- `resource/auth0_form`: Add new resource for managing Forms ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `resource/auth0_flow`: Add new resource for managing Flows ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `resource/auth0_flow_vault_connection`: Add new resource for managing Flow Vault Connection ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `data-source/auth0_form`: Add a data-source for retrieving Form ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `data-source/auth0_flow`: Add a data-source for retrieving Flow ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `data-source/auth0_flow_vault_connection`: Add a data-source for retrieving Flow Vault Connection. ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+
+ENHANCEMENTS:
+
+- `resource/auth0_connection`: Add support for `strategy_version` to be configurable ([#1024](https://github.com/auth0/terraform-provider-auth0/pull/1024/))  
+- `resource/auth0_connection`: Add support for `user_id_attribute` in options attribute for AzureAD connections ([#1028](https://github.com/auth0/terraform-provider-auth0/pull/1028/))
+- `data-source/auth0_organization`: Add support to fetch list of associated client grants ([#1027](https://github.com/auth0/terraform-provider-auth0/pull/1027/))
+- `resource/auth0_tenant`: Add support for `acr_values_supported`, `pushed_authorization_requests_supported` and `remove_alg_from_jwks` configuration ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+- `resource/auth0_client_credentials`: Add support for setting `signed_request_object`, `tls_client_auth` and `self_signed_tls_client_auth` ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+- `resource/auth0_client`: Add support for setting `compliance_level` and `require_proof_of_possession` ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+- `resource/auth0_resource_server`: Add support for setting `consent_policy`, `authorization_details`, `token_encryption` and `proof_of_possession` ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+- `data-source/auth0_client`: Add support to retrieve `signed_request_object`, `tls_client_auth`, `compliance_level` and `require_proof_of_possession` ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+
+BUG FIXES:
+
+- `resource/auth0_prompt_screen_partial`: Ensure removal of insertion points  ([#1043](https://github.com/auth0/terraform-provider-auth0/pull/1043/))
+
+
+## v1.6.1
+
+BUG FIXES:
+
+- `resource/auth0_client`: Fixed an issue where the `default_organization` plan failed due to `ConflictsWith` and `RequiredWith` clauses in the schema ([#1021](https://github.com/auth0/terraform-provider-auth0/pull/1021))
+
+
+## v1.6.0
+
+FEATURES:
+
+- `resource/auth0_prompt_screen_partial`: Add new resource to manage customized sign up and login experience. (1:1) ([#1013](https://github.com/auth0/terraform-provider-auth0/pull/1013))
+- `resource/auth0_prompt_screen_partials`: Add new resource to manage customized sign up and login experience. (1:many) ([#1013](https://github.com/auth0/terraform-provider-auth0/pull/1013))
+- `data_source/auth0_prompt_screen_partials`: Add new data source to retrieve prompt screen partials. ([#1013](https://github.com/auth0/terraform-provider-auth0/pull/1013))
+
+ENHANCEMENTS:
+
+- `resource/auth0_client`: Add Organizations for Client Credentials. ([#1009](https://github.com/auth0/terraform-provider-auth0/pull/1009))
+- `resource/auth0_prompt_custom_text`: Add support for fetching the language list from a CDN for prompt custom text. ([#1006](https://github.com/auth0/terraform-provider-auth0/pull/1016))
+
+BUG FIXES:
+
+- `resource/auth0_connection`: Remove MinItems validation for precedence. ([#1017](https://github.com/auth0/terraform-provider-auth0/pull/1017))
+
+NOTES:
+
+- `resource/auth0_prompt_partials`: Deprecated in favor of `resource/auth0_prompt_screen_partial` and `resource/auth0_prompt_screen_partials`. ([#1013](https://github.com/auth0/terraform-provider-auth0/pull/1013))
+
+
 ## v1.5.0
 
 FEATURES:
 
@@ -120,7 +120,8 @@ test-unit: ## Run unit tests. To run a specific test, pass the FILTER var. Usage
 
 test-acc: ## Run acceptance tests with http recordings. To run a specific test, pass the FILTER var. Usage `make test-acc FILTER="TestAccResourceServer`
 	${call print, "Running acceptance tests with http recordings"}
-	@AUTH0_HTTP_RECORDINGS=on \
+	@terraform version; \
+		AUTH0_HTTP_RECORDINGS=on \
 		AUTH0_DOMAIN=terraform-provider-auth0-dev.eu.auth0.com \
 		TF_ACC=1 \
 		go test \
 
@@ -39,12 +39,15 @@ data "auth0_client" "some-client-by-id" {
 - `app_type` (String) Type of application the client represents. Possible values are: `native`, `spa`, `regular_web`, `non_interactive`, `sso_integration`. Specific SSO integrations types accepted as well are: `rms`, `box`, `cloudbees`, `concur`, `dropbox`, `mscrm`, `echosign`, `egnyte`, `newrelic`, `office365`, `salesforce`, `sentry`, `sharepoint`, `slack`, `springcm`, `zendesk`, `zoom`.
 - `callbacks` (List of String) URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
 - `client_aliases` (List of String) List of audiences/realms for SAML protocol. Used by the wsfed addon.
+- `client_authentication_methods` (Set of Object) Defines client authentication methods. (see [below for nested schema](#nestedatt--client_authentication_methods))
 - `client_metadata` (Map of String) Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: `:,-+=_*?"/\()<>@ [Tab] [Space]`.
 - `client_secret` (String, Sensitive) Secret for the client. Keep this private. To access this attribute you need to add the `read:client_keys` scope to the Terraform client. Otherwise, the attribute will contain an empty string.
+- `compliance_level` (String) Defines the compliance level for this client, which may restrict it's capabilities. Can be one of `none`, `fapi1_adv_pkj_par`, `fapi1_adv_mtls_par`.
 - `cross_origin_auth` (Boolean) Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`).
 - `cross_origin_loc` (String) URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
 - `custom_login_page` (String) The content (HTML, CSS, JS) of the custom login page.
 - `custom_login_page_on` (Boolean) Indicates whether a custom login page is to be used.
+- `default_organization` (List of Object) Configure and associate an organization with the Client (see [below for nested schema](#nestedatt--default_organization))
 - `description` (String) Description of the purpose of the client.
 - `encryption_key` (Map of String) Encryption used for WS-Fed responses with this client.
 - `form_template` (String) HTML form template to be used for WS-Federation.
@@ -62,11 +65,13 @@ data "auth0_client" "some-client-by-id" {
 - `organization_require_behavior` (String) Defines how to proceed during an authentication transaction when `organization_usage = "require"`. Can be `no_prompt` (default), `pre_login_prompt` or  `post_login_prompt`.
 - `organization_usage` (String) Defines how to proceed during an authentication transaction with regards to an organization. Can be `deny` (default), `allow` or `require`.
 - `refresh_token` (List of Object) Configuration settings for the refresh tokens issued for this client. (see [below for nested schema](#nestedatt--refresh_token))
+- `require_proof_of_possession` (Boolean) Makes the use of Proof-of-Possession mandatory for this client.
 - `require_pushed_authorization_requests` (Boolean) Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
+- `signed_request_object` (Set of Object) Configuration for JWT-secured Authorization Requests(JAR). (see [below for nested schema](#nestedatt--signed_request_object))
 - `signing_keys` (List of Map of String) List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
 - `sso` (Boolean) Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
 - `sso_disabled` (Boolean) Indicates whether or not SSO is disabled.
-- `token_endpoint_auth_method` (String) The authentication method for the token endpoint. Results include `none` (public client without a client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic). Managing a client's authentication method can be done via the `auth0_client_credentials` resource.
+- `token_endpoint_auth_method` (String) The authentication method for the token endpoint. Results include `none` (public client without a client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic), Managing a client's authentication method can be done via the `auth0_client_credentials` resource.
 - `web_origins` (List of String) URLs that represent valid web origins for use with web message response mode.
 
 <a id="nestedatt--addons"></a>
@@ -402,6 +407,90 @@ Read-Only:
 
 
 
+<a id="nestedatt--client_authentication_methods"></a>
+### Nested Schema for `client_authentication_methods`
+
+Read-Only:
+
+- `private_key_jwt` (Set of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--private_key_jwt))
+- `self_signed_tls_client_auth` (Set of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--self_signed_tls_client_auth))
+- `tls_client_auth` (Set of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--tls_client_auth))
+
+<a id="nestedobjatt--client_authentication_methods--private_key_jwt"></a>
+### Nested Schema for `client_authentication_methods.private_key_jwt`
+
+Read-Only:
+
+- `credentials` (List of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--private_key_jwt--credentials))
+
+<a id="nestedobjatt--client_authentication_methods--private_key_jwt--credentials"></a>
+### Nested Schema for `client_authentication_methods.private_key_jwt.credentials`
+
+Read-Only:
+
+- `algorithm` (String)
+- `created_at` (String)
+- `credential_type` (String)
+- `expires_at` (String)
+- `id` (String)
+- `key_id` (String)
+- `name` (String)
+- `updated_at` (String)
+
+
+
+<a id="nestedobjatt--client_authentication_methods--self_signed_tls_client_auth"></a>
+### Nested Schema for `client_authentication_methods.self_signed_tls_client_auth`
+
+Read-Only:
+
+- `credentials` (List of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--self_signed_tls_client_auth--credentials))
+
+<a id="nestedobjatt--client_authentication_methods--self_signed_tls_client_auth--credentials"></a>
+### Nested Schema for `client_authentication_methods.self_signed_tls_client_auth.credentials`
+
+Read-Only:
+
+- `created_at` (String)
+- `credential_type` (String)
+- `id` (String)
+- `name` (String)
+- `updated_at` (String)
+
+
+
+<a id="nestedobjatt--client_authentication_methods--tls_client_auth"></a>
+### Nested Schema for `client_authentication_methods.tls_client_auth`
+
+Read-Only:
+
+- `credentials` (List of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--tls_client_auth--credentials))
+
+<a id="nestedobjatt--client_authentication_methods--tls_client_auth--credentials"></a>
+### Nested Schema for `client_authentication_methods.tls_client_auth.credentials`
+
+Read-Only:
+
+- `created_at` (String)
+- `credential_type` (String)
+- `id` (String)
+- `name` (String)
+- `subject_dn` (String)
+- `updated_at` (String)
+
+
+
+
+<a id="nestedatt--default_organization"></a>
+### Nested Schema for `default_organization`
+
+Read-Only:
+
+- `disable` (Boolean)
+- `flows` (List of String)
+- `organization_id` (String)
+
+
 <a id="nestedatt--jwt_configuration"></a>
 ### Nested Schema for `jwt_configuration`
 
@@ -479,3 +568,26 @@ Read-Only:
 - `token_lifetime` (Number)
 
 
+<a id="nestedatt--signed_request_object"></a>
+### Nested Schema for `signed_request_object`
+
+Read-Only:
+
+- `credentials` (List of Object) (see [below for nested schema](#nestedobjatt--signed_request_object--credentials))
+- `required` (Boolean)
+
+<a id="nestedobjatt--signed_request_object--credentials"></a>
+### Nested Schema for `signed_request_object.credentials`
+
+Read-Only:
+
+- `algorithm` (String)
+- `created_at` (String)
+- `credential_type` (String)
+- `expires_at` (String)
+- `id` (String)
+- `key_id` (String)
+- `name` (String)
+- `updated_at` (String)
+
+
@@ -0,0 +1,32 @@
+---
+page_title: "Data Source: auth0_flow"
+description: |-
+  Data source to retrieve a specific Auth0 Flow by id
+---
+
+# Data Source: auth0_flow
+
+Data source to retrieve a specific Auth0 Flow by `id`
+
+## Example Usage
+
+```terraform
+# An Auth0 flow loaded using its ID.
+data "auth0_flow" "my_flow_data" {
+  id = "af_5CTYdsXHLoLXD7ZVwvFHew"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `id` (String) The id of the Flow.
+
+### Read-Only
+
+- `actions` (String) Actions of the flow.
+- `name` (String) Name of the flow.
+
+
@@ -0,0 +1,37 @@
+---
+page_title: "Data Source: auth0_flow_vault_connection"
+description: |-
+  Data source to retrieve a specific Auth0 Flow Vault Connection by id
+---
+
+# Data Source: auth0_flow_vault_connection
+
+Data source to retrieve a specific Auth0 Flow Vault Connection by `id`
+
+## Example Usage
+
+```terraform
+# An Auth0 flow vault connection loaded using its ID.
+data "auth0_flow_vault_connection" "data_connection" {
+  id = "ac_9m2uqjHsqs19riN9N6sZQ7"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `id` (String) The id of the Flow Vault Connection.
+
+### Read-Only
+
+- `account_name` (String) Custom account name of the vault connection.
+- `app_id` (String) App identifier of the vault connection.
+- `environment` (String) Environment of the vault connection.
+- `fingerprint` (String) Fingerprint of the vault connection.
+- `name` (String) Name of the vault connection.
+- `ready` (Boolean) Indicates if the vault connection is configured.
+- `setup` (Map of String) Configuration of the vault connection. (Mapping information must be provided as key/value pairs)
+
+
@@ -0,0 +1,55 @@
+---
+page_title: "Data Source: auth0_form"
+description: |-
+  Data source to retrieve a specific Auth0 Form by id
+---
+
+# Data Source: auth0_form
+
+Data source to retrieve a specific Auth0 Form by `id`
+
+## Example Usage
+
+```terraform
+# An Auth0 form loaded using its ID.
+data "auth0_form" "my_form_data" {
+  id = "ap_31LxRJphZF1Kqzf2zBgmgA"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `id` (String) The id of the Form.
+
+### Read-Only
+
+- `ending` (String) Submission configuration of the form. (JSON encoded)
+- `languages` (List of Object) Language specific configuration for the form. (see [below for nested schema](#nestedatt--languages))
+- `messages` (List of Object) Message specific configuration for the form. (see [below for nested schema](#nestedatt--messages))
+- `name` (String) Name of the form.
+- `nodes` (String) Nodes of the form. (JSON encoded)
+- `start` (String) Input setup of the form. (JSON encoded)
+- `style` (String) Style specific configuration for the form. (JSON encoded)
+- `translations` (String) Translations of the form. (JSON encoded)
+
+<a id="nestedatt--languages"></a>
+### Nested Schema for `languages`
+
+Read-Only:
+
+- `default` (String)
+- `primary` (String)
+
+
+<a id="nestedatt--messages"></a>
+### Nested Schema for `messages`
+
+Read-Only:
+
+- `custom` (String)
+- `errors` (String)
+
+
@@ -33,6 +33,7 @@ data "auth0_organization" "some-organization-by-id" {
 ### Read-Only
 
 - `branding` (List of Object) Defines how to style the login pages. (see [below for nested schema](#nestedatt--branding))
+- `client_grants` (Set of String) Client Grant ID(s) that are associated to the organization.
 - `connections` (Set of Object) (see [below for nested schema](#nestedatt--connections))
 - `display_name` (String) Friendly name of this organization.
 - `id` (String) The ID of this resource.