Expose client secret rotation in typescript

[joel-costigliola]

Describe the problem you'd like to have solved

In in typescript, the ManagementClient class does not provide a way to rotate a client secret.

Describe the ideal solution

Expose client secret rotation in typescript ManagementClient class that call, the method should have a retry mechanism.

Alternatives and current work-arounds

Calling directly the Auth0 REST API with the access token retrieved from ManagementClient.

const managementAPIAccessToken = await this.managementClient.getAccessToken();
const requestOptions: AxiosRequestConfig = {
    url: `https://${auth0Domain}/api/v2/clients/${clientId}/rotate-secret`,
    method: "POST",
    headers: { "content-type": "application/json", authorization: `Bearer ${managementAPIAccessToken}` },
const { data } = await axios.request(requestOptions);
return data.client_secret;

This workaround does not handle retries, we have had a few 429 HTTP Errors that would have been handled by a retry mechanism, we will likely do that if that issue is not resolved in a reasonable future.

Additional information, if any

I was not sure whether to add a comment to #572, I created a new issue to avoid bloating #572.

Also found

node-auth0/src/management/ClientsManager.js

Line 198 in 0ed8919

rotateClientSecret(params, cb) {

that shows a client secret rotation but could not find the corresponding operation in https://github.com/DefinitelyTyped/DefinitelyTyped/blob/master/types/auth0/index.d.ts

[adamjmcgrath]

Hi @joel-costigliola - thanks for raising this

We don't maintain the types currently, they're community maintained in DefinitelyTyped