FND-1279: First pass of Custom email terraform addition. -- Squashing…

… for Verify. Patch: Removed MinItems validation for precedence on Connection Resource (auth0#1017) * Removed min/max validation on precendence slice * reverted maxItems validation Add support for all languages for Universal Login (auth0#1016) * Fetch list of languages from CDN instead of hardcoding them * Updated linting --------- Co-authored-by: KunalOfficial <[email protected]> Add Support for `auth0_prompt_screen_partial` and `auth0_prompt_screen_partials` in Prompt Resources (auth0#1013) * Add-Support-for-Prompt-Screen-Partials * Add auth0_prompt_screen_partial Resource and Required Docs * Fix Linting * Updated Go-auth0 Version 1.9.0 to 1.10.0 * Added Testcases for other insertionpoints as well * Fixed Linting * Added More testcases * Correct depends on for datasource of prompt partials Bump github.com/hashicorp/terraform-plugin-testing from 1.9.0 to 1.10.0 (auth0#999) Bumps [github.com/hashicorp/terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/hashicorp/terraform-plugin-testing/releases) - [Changelog](https://github.com/hashicorp/terraform-plugin-testing/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-plugin-testing@v1.9.0...v1.10.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/terraform-plugin-testing dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Add Organizations for Client Credentials (auth0#1009) * Updated schema and added relevant test cases for client with default_organization * Added test recordings * Updated the resource schema and added new test recordinging * Added validation on required arguments * Fixed linting and updated test recording * Deleted a test recording * Updated go.mod Add Sorting to `screen_partials` Flattening Logic to Resolve Indexing Issues with Prompt Screen Partials (auth0#1019) * Change screen_partials to TypeSet for consistent ordering in prompt screen partials * Add Sorting to screen_partials Flattening Logic to Resolve Indexing Issues Add changelog for v1.6.0 (auth0#1020) * Added the changelog * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> --------- Co-authored-by: KunalOfficial <[email protected]> Patch: default_organization on Client Creds (auth0#1021) * Updated flow of importing default_organization * Updated logic for handling default Orgs * Updated test recordings * Updated the conditional check Add changelog for v1.6.1 (auth0#1022) * Added changelog * linting fixes * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> --------- Co-authored-by: KunalOfficial <[email protected]> Add HRI related changes to Terraform provider (auth0#1015) * Add HRI related changes to Terraform provider * Fix broken HasChange behaviour * Change ConflictWith to explicit validation in code * Move validation to plan instead of apply * Fix validation for default resources Add strategy_version support to all connections that use it (auth0#1024) * ESD-39527: Add strategy_version support to all connections that use it * Update go-auth0 dependency * Add examples for strategy_version Add user_id_attribute support to AzureAD connection options (auth0#1028) Add user_id_attribute to AzureAD connection options Bump github.com/auth0/go-auth0 from 1.10.1-0.20240920131149-720c3a081e03 to 1.11.0 (auth0#1036) Bump github.com/auth0/go-auth0 Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.10.1-0.20240920131149-720c3a081e03 to 1.11.0. - [Release notes](https://github.com/auth0/go-auth0/releases) - [Changelog](https://github.com/auth0/go-auth0/blob/main/CHANGELOG.md) - [Commits](https://github.com/auth0/go-auth0/commits/v1.11.0) --- updated-dependencies: - dependency-name: github.com/auth0/go-auth0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Added some minor updates Updated recordings docs updated Add auth0_encryption_keys resource to allow rekeying of encryption keys (auth0#1031) * Add auth0_encryption_key resource to allow rekeying of tenant encryption keys * Slight renaming, and use key_rotation_id instead of rekey attribute * Rename auth0_encryption_key to auth0_encryption_key_manager Add new resource to manage Organization Client Grants (auth0#1027) * Added new resource and data source for org client grants * minor refactoring * Added test case * Updated test recordings * Updated the test name * Fix some timing issues in resourceserver, and add terraform version to server logs * Remove unneeded lint config * rebased * minor refactoring * Added test case * Updated test recordings * Updated the test name * Fix some timing issues in resourceserver, and add terraform version to server logs * Remove unneeded lint config --------- Co-authored-by: A. Craig West <[email protected]> Add support for Form, Flow and Flow Vault Connection (auth0#1039) * form resource * flow resource * flow resource, data source added * update forms * update flow * update go-auth0 v1.11.0 * added flow vault connection * Added flow expand/flatten + tests + recordings * update flow vault connection * form, flow vault connection added unit test, recordings * form, flow vault connection doc update * form, flow vault connection examples added * form, flow vault connection examples added example, data source * form, flow vault connection examples docs updated * lint fix * form, flow unit test added * form flatten unit test added * lint * Updated recordings --------- Co-authored-by: kushalshit27 <[email protected]> PATCH: Ensure Removal of Insertion Points in `auth0_prompt_screen_partial` Resource (auth0#1043) Fix: Ensure Removal of Insertion Points in Resource API Support BYOK in Terraform provider (auth0#1041) Co-authored-by: KunalOfficial <[email protected]> Bump github.com/auth0/go-auth0 from 1.11.0 to 1.11.1 (auth0#1042) Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.11.0 to 1.11.1. - [Release notes](https://github.com/auth0/go-auth0/releases) - [Changelog](https://github.com/auth0/go-auth0/blob/main/CHANGELOG.md) - [Commits](auth0/go-auth0@v1.11.0...v1.11.1) --- updated-dependencies: - dependency-name: github.com/auth0/go-auth0 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Add changelog for 1.7.0 (auth0#1044) * Added changelog for 1.7.0 * Added further changes * removed . * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> * removed . * minor refactor --------- Co-authored-by: KunalOfficial <[email protected]> Fix docs for user_id_attribute for AzureAD connection options (auth0#1047) ESD-40277: Fix docs for user_id_attribute for AzureAD connection options PATCH: Add graceful error handling for `auth0_organization` data source when using client grants (auth0#1049) * Added check on tenants which has insufficient scopes and return a empty slice * Updated test case * minor refactoring * minor refactor * linting * linting Updated example for Form (auth0#1046) * Updated example for form PATCH: Implemented checkpoint pagination for retrieving Role users (auth0#1048) * Implemented checkpoint pagination on role users * added tests Add changelog for 1.7.1 (auth0#1050) * Added changelog * refac * refac * refac * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> * Added changelog * refac * refac * refac * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> * refac * Apply suggestions from code review Co-authored-by: KunalOfficial <[email protected]> * Added changelog * refac * refac * refac * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> * refac * Added changelog * Update CHANGELOG.md Co-authored-by: KunalOfficial <[email protected]> --------- Co-authored-by: KunalOfficial <[email protected]> Fix: Updated `TestAccConnectionAzureAD` test recording (auth0#1052) Updated recording + auth0 version bump Added a check on provider's configuration for required env vars (auth0#1053) * Added a check on provider's configuration for reqd env vars * Added linting
BryanLewis-AtOkta · Oct 24, 2024 · 0756c59 · 0756c59
1 parent beba4b9
commit 0756c59
Show file tree

Hide file tree

Showing 190 changed files with 58,543 additions and 20,859 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,74 @@
+## v1.7.1
+
+BUG FIXES:
+
+- `data-source/auth0_organization`: Implemented enhanced error handling to gracefully manage "Forbidden" errors when retrieving the list of client grants via the `auth0_organization` data source. This addresses cases where the feature is not enabled for the user, preventing the error from disrupting the process ([#1049](https://github.com/auth0/terraform-provider-auth0/pull/1049/))
+- `resource/auth0_connection`: Updated documentation to clarify that `user_id_attribute` can be either `oid` or `sub` for Azure AD connections ([#1047](https://github.com/auth0/terraform-provider-auth0/pull/1047/))
+- `resource/auth0_form`: Updated docs to use `auth0_form` in examples  ([#1046](https://github.com/auth0/terraform-provider-auth0/pull/1046/))
+
+ENHANCEMENTS:
+- `data-source/auth0_roles`: Updated from `Offset Pagination` to `Checkpoint Pagination` to retrieve more than 1,000 role users ([#1048](https://github.com/auth0/terraform-provider-auth0/pull/1048/))
+
+
+## v1.7.0
+
+FEATURES:
+
+- `resource/auth0_encryption_key_manager`: Add new resource for re-keying of tenant master key ([#1031](https://github.com/auth0/terraform-provider-auth0/pull/1031/))
+- `resource/auth0_encryption_key_manager`: Add support for `customer_provided_root_key` for BYOK ([#1041](https://github.com/auth0/terraform-provider-auth0/pull/1041/))
+- `resource/auth0_organization_client_grant`: Add new resource for managing association of client-grant and organization ([#1027](https://github.com/auth0/terraform-provider-auth0/pull/1027/))
+- `resource/auth0_form`: Add new resource for managing Forms ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `resource/auth0_flow`: Add new resource for managing Flows ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `resource/auth0_flow_vault_connection`: Add new resource for managing Flow Vault Connection ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `data-source/auth0_form`: Add a data-source for retrieving Form ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `data-source/auth0_flow`: Add a data-source for retrieving Flow ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+- `data-source/auth0_flow_vault_connection`: Add a data-source for retrieving Flow Vault Connection. ([#1039](https://github.com/auth0/terraform-provider-auth0/pull/1039/))
+
+ENHANCEMENTS:
+
+- `resource/auth0_connection`: Add support for `strategy_version` to be configurable ([#1024](https://github.com/auth0/terraform-provider-auth0/pull/1024/))  
+- `resource/auth0_connection`: Add support for `user_id_attribute` in options attribute for AzureAD connections ([#1028](https://github.com/auth0/terraform-provider-auth0/pull/1028/))
+- `data-source/auth0_organization`: Add support to fetch list of associated client grants ([#1027](https://github.com/auth0/terraform-provider-auth0/pull/1027/))
+- `resource/auth0_tenant`: Add support for `acr_values_supported`, `pushed_authorization_requests_supported` and `remove_alg_from_jwks` configuration ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+- `resource/auth0_client_credentials`: Add support for setting `signed_request_object`, `tls_client_auth` and `self_signed_tls_client_auth` ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+- `resource/auth0_client`: Add support for setting `compliance_level` and `require_proof_of_possession` ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+- `resource/auth0_resource_server`: Add support for setting `consent_policy`, `authorization_details`, `token_encryption` and `proof_of_possession` ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+- `data-source/auth0_client`: Add support to retrieve `signed_request_object`, `tls_client_auth`, `compliance_level` and `require_proof_of_possession` ([#1015](https://github.com/auth0/terraform-provider-auth0/pull/1015/))
+
+BUG FIXES:
+
+- `resource/auth0_prompt_screen_partial`: Ensure removal of insertion points  ([#1043](https://github.com/auth0/terraform-provider-auth0/pull/1043/))
+
+
+## v1.6.1
+
+BUG FIXES:
+
+- `resource/auth0_client`: Fixed an issue where the `default_organization` plan failed due to `ConflictsWith` and `RequiredWith` clauses in the schema ([#1021](https://github.com/auth0/terraform-provider-auth0/pull/1021))
+
+
+## v1.6.0
+
+FEATURES:
+
+- `resource/auth0_prompt_screen_partial`: Add new resource to manage customized sign up and login experience. (1:1) ([#1013](https://github.com/auth0/terraform-provider-auth0/pull/1013))
+- `resource/auth0_prompt_screen_partials`: Add new resource to manage customized sign up and login experience. (1:many) ([#1013](https://github.com/auth0/terraform-provider-auth0/pull/1013))
+- `data_source/auth0_prompt_screen_partials`: Add new data source to retrieve prompt screen partials. ([#1013](https://github.com/auth0/terraform-provider-auth0/pull/1013))
+
+ENHANCEMENTS:
+
+- `resource/auth0_client`: Add Organizations for Client Credentials. ([#1009](https://github.com/auth0/terraform-provider-auth0/pull/1009))
+- `resource/auth0_prompt_custom_text`: Add support for fetching the language list from a CDN for prompt custom text. ([#1006](https://github.com/auth0/terraform-provider-auth0/pull/1016))
+
+BUG FIXES:
+
+- `resource/auth0_connection`: Remove MinItems validation for precedence. ([#1017](https://github.com/auth0/terraform-provider-auth0/pull/1017))
+
+NOTES:
+
+- `resource/auth0_prompt_partials`: Deprecated in favor of `resource/auth0_prompt_screen_partial` and `resource/auth0_prompt_screen_partials`. ([#1013](https://github.com/auth0/terraform-provider-auth0/pull/1013))
+
+
 ## v1.5.0
 
 FEATURES:

diff --git a/Makefile b/Makefile
@@ -120,7 +120,8 @@ test-unit: ## Run unit tests. To run a specific test, pass the FILTER var. Usage
 
 test-acc: ## Run acceptance tests with http recordings. To run a specific test, pass the FILTER var. Usage `make test-acc FILTER="TestAccResourceServer`
 	${call print, "Running acceptance tests with http recordings"}
-	@AUTH0_HTTP_RECORDINGS=on \
+	@terraform version; \
+		AUTH0_HTTP_RECORDINGS=on \
 		AUTH0_DOMAIN=terraform-provider-auth0-dev.eu.auth0.com \
 		TF_ACC=1 \
 		go test \

diff --git a/docs/data-sources/client.md b/docs/data-sources/client.md
@@ -39,12 +39,15 @@ data "auth0_client" "some-client-by-id" {
 - `app_type` (String) Type of application the client represents. Possible values are: `native`, `spa`, `regular_web`, `non_interactive`, `sso_integration`. Specific SSO integrations types accepted as well are: `rms`, `box`, `cloudbees`, `concur`, `dropbox`, `mscrm`, `echosign`, `egnyte`, `newrelic`, `office365`, `salesforce`, `sentry`, `sharepoint`, `slack`, `springcm`, `zendesk`, `zoom`.
 - `callbacks` (List of String) URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
 - `client_aliases` (List of String) List of audiences/realms for SAML protocol. Used by the wsfed addon.
+- `client_authentication_methods` (Set of Object) Defines client authentication methods. (see [below for nested schema](#nestedatt--client_authentication_methods))
 - `client_metadata` (Map of String) Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: `:,-+=_*?"/\()<>@ [Tab] [Space]`.
 - `client_secret` (String, Sensitive) Secret for the client. Keep this private. To access this attribute you need to add the `read:client_keys` scope to the Terraform client. Otherwise, the attribute will contain an empty string.
+- `compliance_level` (String) Defines the compliance level for this client, which may restrict it's capabilities. Can be one of `none`, `fapi1_adv_pkj_par`, `fapi1_adv_mtls_par`.
 - `cross_origin_auth` (Boolean) Whether this client can be used to make cross-origin authentication requests (`true`) or it is not allowed to make such requests (`false`).
 - `cross_origin_loc` (String) URL of the location in your site where the cross-origin verification takes place for the cross-origin auth flow when performing authentication in your own domain instead of Auth0 Universal Login page.
 - `custom_login_page` (String) The content (HTML, CSS, JS) of the custom login page.
 - `custom_login_page_on` (Boolean) Indicates whether a custom login page is to be used.
+- `default_organization` (List of Object) Configure and associate an organization with the Client (see [below for nested schema](#nestedatt--default_organization))
 - `description` (String) Description of the purpose of the client.
 - `encryption_key` (Map of String) Encryption used for WS-Fed responses with this client.
 - `form_template` (String) HTML form template to be used for WS-Federation.
@@ -62,11 +65,13 @@ data "auth0_client" "some-client-by-id" {
 - `organization_require_behavior` (String) Defines how to proceed during an authentication transaction when `organization_usage = "require"`. Can be `no_prompt` (default), `pre_login_prompt` or  `post_login_prompt`.
 - `organization_usage` (String) Defines how to proceed during an authentication transaction with regards to an organization. Can be `deny` (default), `allow` or `require`.
 - `refresh_token` (List of Object) Configuration settings for the refresh tokens issued for this client. (see [below for nested schema](#nestedatt--refresh_token))
+- `require_proof_of_possession` (Boolean) Makes the use of Proof-of-Possession mandatory for this client.
 - `require_pushed_authorization_requests` (Boolean) Makes the use of Pushed Authorization Requests mandatory for this client. This feature currently needs to be enabled on the tenant in order to make use of it.
+- `signed_request_object` (Set of Object) Configuration for JWT-secured Authorization Requests(JAR). (see [below for nested schema](#nestedatt--signed_request_object))
 - `signing_keys` (List of Map of String) List containing a map of the public cert of the signing key and the public cert of the signing key in PKCS7.
 - `sso` (Boolean) Applies only to SSO clients and determines whether Auth0 will handle Single Sign-On (true) or whether the identity provider will (false).
 - `sso_disabled` (Boolean) Indicates whether or not SSO is disabled.
-- `token_endpoint_auth_method` (String) The authentication method for the token endpoint. Results include `none` (public client without a client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic). Managing a client's authentication method can be done via the `auth0_client_credentials` resource.
+- `token_endpoint_auth_method` (String) The authentication method for the token endpoint. Results include `none` (public client without a client secret), `client_secret_post` (client uses HTTP POST parameters), `client_secret_basic` (client uses HTTP Basic), Managing a client's authentication method can be done via the `auth0_client_credentials` resource.
 - `web_origins` (List of String) URLs that represent valid web origins for use with web message response mode.
 
 <a id="nestedatt--addons"></a>
@@ -402,6 +407,90 @@ Read-Only:
 
 
 
+<a id="nestedatt--client_authentication_methods"></a>
+### Nested Schema for `client_authentication_methods`
+
+Read-Only:
+
+- `private_key_jwt` (Set of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--private_key_jwt))
+- `self_signed_tls_client_auth` (Set of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--self_signed_tls_client_auth))
+- `tls_client_auth` (Set of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--tls_client_auth))
+
+<a id="nestedobjatt--client_authentication_methods--private_key_jwt"></a>
+### Nested Schema for `client_authentication_methods.private_key_jwt`
+
+Read-Only:
+
+- `credentials` (List of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--private_key_jwt--credentials))
+
+<a id="nestedobjatt--client_authentication_methods--private_key_jwt--credentials"></a>
+### Nested Schema for `client_authentication_methods.private_key_jwt.credentials`
+
+Read-Only:
+
+- `algorithm` (String)
+- `created_at` (String)
+- `credential_type` (String)
+- `expires_at` (String)
+- `id` (String)
+- `key_id` (String)
+- `name` (String)
+- `updated_at` (String)
+
+
+
+<a id="nestedobjatt--client_authentication_methods--self_signed_tls_client_auth"></a>
+### Nested Schema for `client_authentication_methods.self_signed_tls_client_auth`
+
+Read-Only:
+
+- `credentials` (List of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--self_signed_tls_client_auth--credentials))
+
+<a id="nestedobjatt--client_authentication_methods--self_signed_tls_client_auth--credentials"></a>
+### Nested Schema for `client_authentication_methods.self_signed_tls_client_auth.credentials`
+
+Read-Only:
+
+- `created_at` (String)
+- `credential_type` (String)
+- `id` (String)
+- `name` (String)
+- `updated_at` (String)
+
+
+
+<a id="nestedobjatt--client_authentication_methods--tls_client_auth"></a>
+### Nested Schema for `client_authentication_methods.tls_client_auth`
+
+Read-Only:
+
+- `credentials` (List of Object) (see [below for nested schema](#nestedobjatt--client_authentication_methods--tls_client_auth--credentials))
+
+<a id="nestedobjatt--client_authentication_methods--tls_client_auth--credentials"></a>
+### Nested Schema for `client_authentication_methods.tls_client_auth.credentials`
+
+Read-Only:
+
+- `created_at` (String)
+- `credential_type` (String)
+- `id` (String)
+- `name` (String)
+- `subject_dn` (String)
+- `updated_at` (String)
+
+
+
+
+<a id="nestedatt--default_organization"></a>
+### Nested Schema for `default_organization`
+
+Read-Only:
+
+- `disable` (Boolean)
+- `flows` (List of String)
+- `organization_id` (String)
+
+
 <a id="nestedatt--jwt_configuration"></a>
 ### Nested Schema for `jwt_configuration`
 
@@ -479,3 +568,26 @@ Read-Only:
 - `token_lifetime` (Number)
 
 
+<a id="nestedatt--signed_request_object"></a>
+### Nested Schema for `signed_request_object`
+
+Read-Only:
+
+- `credentials` (List of Object) (see [below for nested schema](#nestedobjatt--signed_request_object--credentials))
+- `required` (Boolean)
+
+<a id="nestedobjatt--signed_request_object--credentials"></a>
+### Nested Schema for `signed_request_object.credentials`
+
+Read-Only:
+
+- `algorithm` (String)
+- `created_at` (String)
+- `credential_type` (String)
+- `expires_at` (String)
+- `id` (String)
+- `key_id` (String)
+- `name` (String)
+- `updated_at` (String)
+
+
diff --git a/docs/data-sources/flow.md b/docs/data-sources/flow.md
@@ -0,0 +1,32 @@
+---
+page_title: "Data Source: auth0_flow"
+description: |-
+  Data source to retrieve a specific Auth0 Flow by id
+---
+
+# Data Source: auth0_flow
+
+Data source to retrieve a specific Auth0 Flow by `id`
+
+## Example Usage
+
+```terraform
+# An Auth0 flow loaded using its ID.
+data "auth0_flow" "my_flow_data" {
+  id = "af_5CTYdsXHLoLXD7ZVwvFHew"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `id` (String) The id of the Flow.
+
+### Read-Only
+
+- `actions` (String) Actions of the flow.
+- `name` (String) Name of the flow.
+
+
diff --git a/docs/data-sources/flow_vault_connection.md b/docs/data-sources/flow_vault_connection.md
@@ -0,0 +1,37 @@
+---
+page_title: "Data Source: auth0_flow_vault_connection"
+description: |-
+  Data source to retrieve a specific Auth0 Flow Vault Connection by id
+---
+
+# Data Source: auth0_flow_vault_connection
+
+Data source to retrieve a specific Auth0 Flow Vault Connection by `id`
+
+## Example Usage
+
+```terraform
+# An Auth0 flow vault connection loaded using its ID.
+data "auth0_flow_vault_connection" "data_connection" {
+  id = "ac_9m2uqjHsqs19riN9N6sZQ7"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `id` (String) The id of the Flow Vault Connection.
+
+### Read-Only
+
+- `account_name` (String) Custom account name of the vault connection.
+- `app_id` (String) App identifier of the vault connection.
+- `environment` (String) Environment of the vault connection.
+- `fingerprint` (String) Fingerprint of the vault connection.
+- `name` (String) Name of the vault connection.
+- `ready` (Boolean) Indicates if the vault connection is configured.
+- `setup` (Map of String) Configuration of the vault connection. (Mapping information must be provided as key/value pairs)
+
+
diff --git a/docs/data-sources/form.md b/docs/data-sources/form.md
@@ -0,0 +1,55 @@
+---
+page_title: "Data Source: auth0_form"
+description: |-
+  Data source to retrieve a specific Auth0 Form by id
+---
+
+# Data Source: auth0_form
+
+Data source to retrieve a specific Auth0 Form by `id`
+
+## Example Usage
+
+```terraform
+# An Auth0 form loaded using its ID.
+data "auth0_form" "my_form_data" {
+  id = "ap_31LxRJphZF1Kqzf2zBgmgA"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `id` (String) The id of the Form.
+
+### Read-Only
+
+- `ending` (String) Submission configuration of the form. (JSON encoded)
+- `languages` (List of Object) Language specific configuration for the form. (see [below for nested schema](#nestedatt--languages))
+- `messages` (List of Object) Message specific configuration for the form. (see [below for nested schema](#nestedatt--messages))
+- `name` (String) Name of the form.
+- `nodes` (String) Nodes of the form. (JSON encoded)
+- `start` (String) Input setup of the form. (JSON encoded)
+- `style` (String) Style specific configuration for the form. (JSON encoded)
+- `translations` (String) Translations of the form. (JSON encoded)
+
+<a id="nestedatt--languages"></a>
+### Nested Schema for `languages`
+
+Read-Only:
+
+- `default` (String)
+- `primary` (String)
+
+
+<a id="nestedatt--messages"></a>
+### Nested Schema for `messages`
+
+Read-Only:
+
+- `custom` (String)
+- `errors` (String)
+
+
diff --git a/docs/data-sources/organization.md b/docs/data-sources/organization.md
@@ -33,6 +33,7 @@ data "auth0_organization" "some-organization-by-id" {
 ### Read-Only
 
 - `branding` (List of Object) Defines how to style the login pages. (see [below for nested schema](#nestedatt--branding))
+- `client_grants` (Set of String) Client Grant ID(s) that are associated to the organization.
 - `connections` (Set of Object) (see [below for nested schema](#nestedatt--connections))
 - `display_name` (String) Friendly name of this organization.
 - `id` (String) The ID of this resource.