feat(api): OpenAPI spec update via Stainless API (#363)

Author: stainless-app[bot]

src/resources/zero-trust/access/applications/applications.ts

@@ -517,6 +517,8 @@ export namespace Application {
 
       created_at?: string;
 
+      custom_claims?: AccessOIDCSaasApp.CustomClaims;
+
       /**
        * The OIDC flows supported by this application
        */
@@ -545,6 +547,41 @@ export namespace Application {
 
       updated_at?: string;
     }
+
+    export namespace AccessOIDCSaasApp {
+      export interface CustomClaims {
+        /**
+         * The name of the claim.
+         */
+        name?: string;
+
+        /**
+         * A mapping from IdP ID to claim name.
+         */
+        name_by_idp?: Record<string, string>;
+
+        /**
+         * If the claim is required when building an OIDC token.
+         */
+        required?: boolean;
+
+        /**
+         * The scope of the claim.
+         */
+        scope?: 'groups' | 'profile' | 'email' | 'openid';
+
+        source?: CustomClaims.Source;
+      }
+
+      export namespace CustomClaims {
+        export interface Source {
+          /**
+           * The name of the IdP claim.
+           */
+          name?: string;
+        }
+      }
+    }
   }
 
   export interface BrowserSSHApplication {
@@ -1104,6 +1141,11 @@ export interface SaasAppSource {
    * The name of the IdP attribute.
    */
   name?: string;
+
+  /**
+   * A mapping from IdP ID to attribute name.
+   */
+  name_by_idp?: Record<string, string>;
 }
 
 export interface SAMLSaasApp {
@@ -1176,6 +1218,11 @@ export interface SAMLSaasApp {
 
 export namespace SAMLSaasApp {
   export interface CustomAttributes {
+    /**
+     * The SAML FriendlyName of the attribute.
+     */
+    friendly_name?: string;
+
     /**
      * The name of the attribute.
      */
@@ -1186,6 +1233,11 @@ export namespace SAMLSaasApp {
      */
     name_format?: ApplicationsAPI.SaasAppNameFormat;
 
+    /**
+     * If the attribute is required when building a SAML assertion.
+     */
+    required?: boolean;
+
     source?: ApplicationsAPI.SaasAppSource;
   }
 }
@@ -1450,6 +1502,8 @@ export namespace ApplicationCreateParams {
        */
       client_secret?: string;
 
+      custom_claims?: AccessOIDCSaasApp.CustomClaims;
+
       /**
        * The OIDC flows supported by this application
        */
@@ -1476,6 +1530,41 @@ export namespace ApplicationCreateParams {
        */
       scopes?: Array<'openid' | 'groups' | 'email' | 'profile'>;
     }
+
+    export namespace AccessOIDCSaasApp {
+      export interface CustomClaims {
+        /**
+         * The name of the claim.
+         */
+        name?: string;
+
+        /**
+         * A mapping from IdP ID to claim name.
+         */
+        name_by_idp?: Record<string, string>;
+
+        /**
+         * If the claim is required when building an OIDC token.
+         */
+        required?: boolean;
+
+        /**
+         * The scope of the claim.
+         */
+        scope?: 'groups' | 'profile' | 'email' | 'openid';
+
+        source?: CustomClaims.Source;
+      }
+
+      export namespace CustomClaims {
+        export interface Source {
+          /**
+           * The name of the IdP claim.
+           */
+          name?: string;
+        }
+      }
+    }
   }
 
   export interface BrowserSSHApplication {
@@ -2182,6 +2271,8 @@ export namespace ApplicationUpdateParams {
        */
       client_secret?: string;
 
+      custom_claims?: AccessOIDCSaasApp.CustomClaims;
+
       /**
        * The OIDC flows supported by this application
        */
@@ -2208,6 +2299,41 @@ export namespace ApplicationUpdateParams {
        */
       scopes?: Array<'openid' | 'groups' | 'email' | 'profile'>;
     }
+
+    export namespace AccessOIDCSaasApp {
+      export interface CustomClaims {
+        /**
+         * The name of the claim.
+         */
+        name?: string;
+
+        /**
+         * A mapping from IdP ID to claim name.
+         */
+        name_by_idp?: Record<string, string>;
+
+        /**
+         * If the claim is required when building an OIDC token.
+         */
+        required?: boolean;
+
+        /**
+         * The scope of the claim.
+         */
+        scope?: 'groups' | 'profile' | 'email' | 'openid';
+
+        source?: CustomClaims.Source;
+      }
+
+      export namespace CustomClaims {
+        export interface Source {
+          /**
+           * The name of the IdP claim.
+           */
+          name?: string;
+        }
+      }
+    }
   }
 
   export interface BrowserSSHApplication {