7.3.0

What's Changed

• added actions attribute to PolicyRule by @tanish-okta in #447 | Fixes #423
• added support for dpop auth by @tanish-okta in #450

Full Changelog: okta-sdk-nodejs-7.2.1...okta-sdk-nodejs-7.3.0

7.2.1

Fixes

• #442

  • Fixed schemas:
    • OrgCAPTCHASettings
    • EmailServerListResponse
    • UISchemaObject (elements)
  • Fixed return type for:
    • applicationApi.listJwk
    • logStreamApi.activateLogStream
    • logStreamApi.deactivateLogStream
    • emailServerApi.getEmailServer
  • Fixed request type for:
    • logStreamApi.createLogStream
  • Fixes detection of affected resources for caching middleware

• #445 fix: upgrades form-data version to 4.0.4 to pull in CVE-2025-7783 resolution

7.2.0

Features

• #438 SDK has been regenerated using latest version of openapi-generator-cli (7.13.0) and latest Okta OpenAPI spec (as on 20 June 2025)

• #438 Added new APIs:

  • ResourceSetApi
  • IntegrationsApi
  • RoleApi
  • AttackProtectionApi
  • CAPTCHAApi
  • DeviceAccessApi
  • DeviceIntegrationsApi
  • DevicePostureCheckApi
  • DirectoriesIntegrationApi
  • DisasterRecoveryApi
  • EmailDomainApi
  • EmailServerApi
  • GovernanceBundleApi
  • GroupOwnerApi
  • HookKeyApi
  • IdentitySourceApi
  • LogStreamApi
  • OktaApplicationSettingsApi
  • OktaPersonalSettingsApi
  • OrgCreatorApi
  • PrivilegedResourceApi
  • RateLimitSettingsApi
  • RealmApi
  • RealmAssignmentApi
  • RiskEventApi
  • RiskProviderApi
  • SSFReceiverApi
  • SSFSecurityEventTokenApi
  • SSFTransmitterApi
  • ServiceAccountApi
  • UISchemaApi
  • WebAuthnPreregistrationApi

• #438 Updated APIs:

  • ApplicationApi:
    • Added new methods from ApplicationCWOConnectionsApi, ApplicationExpressConfigurationApi, ApplicationPoliciesApi
    • Added new methods from ApplicationSSOApi, ApplicationSSOCredentialOAuth2ClientAuthApi, ApplicationSSOFederatedClaimsApi
  • AuthorizationServerApi:
    • Added new methods from AuthorizationServerClientsApi, AuthorizationServerAssocApi
  • CustomizationApi:
    • Added new methods from EmailCustomizationApi, CustomPagesApi
  • RoleAssignmentApi
    • Added new methods from RoleAssignmentClientApi
  • RoleTargetApi
    • Added new methods from RoleBTargetBGroupApi, RoleBTargetClientApi
  • UserApi:
    • Added new methods from UserClassificationApi, UserOAuthApi, UserRiskApi

7.1.1

Fixes

• #418 fix: upgrades njwt version to 2.0.1 to pull in CVE-2024-34273 resolution

7.1.0

Features

• #389 Added Device API

7.0.1

Bug Fixes

• #395 fix: Encode special characters in path parameters

7.0.0

Breaking changes

• #373 Uses openapi-generator for creating SDK.

  • Methods are invoked on scoped clients
  • Method params are passed as a single object
  • Models no longer have CRUD methods
  • Methods which return Collection become async
  • Enums are replaced with union types
  • Model properties are optional

  - await client.getUser('ausmvdt5xg8wRVI1d0g3')
  + await client.userApi.getUser({ userId: 'ausmvdt5xg8wRVI1d0g3' })

  - await user.deactivate()
  + await client.userApi.deactivateUser({ userId: user.id })

6.6.0

Bug Fixes

• #360 Fixes path and type signature issues for MemoryStore.
• #365 Adds support for custom attributes in UserProfile and GroupProfile

6.5.0

Features

• #329 Supports EC private keys for OAuth2 service applications

Other

• #323 Adds userAgent property to configurtation type and documents its usage

6.4.0

Features

• #307 Supports HTTPS proxy for Okta http client
• #306
  • Adds Email Template API
    • new models:
      • EmailTemplate
      • EmailTemplateContent
      • EmailTemplateCustomization
      • EmailTemplateCustomizationRequest
      • EmailTemplateTestRequest
    • Client:
      • listEmailTemplates
      • getEmailTemplate
      • deleteEmailTemplateCustomizations
      • listEmailTemplateCustomizations
      • createEmailTemplateCustomization
      • deleteEmailTemplateCustomization
      • getEmailTemplateCustomization
      • updateEmailTemplateCustomization
      • getEmailTemplateCustomizationPreview
      • getEmailTemplateDefaultContent
      • getEmailTemplateDefaultContentPreview
      • sendTestEmail

Others

• #308 Uses node-fetch instead of isomorphic-fetch to address vulnerability issues