Changes

This PR adds support for an optional Auth0-Custom-Domain HTTP header on whitelisted Management API endpoints.

• New CustomDomainHeader static class exposing the Auth0-Custom-Domain header name constant
• New overloads of ManagementApiClient constructors accepting an optional customDomain parameter:
  • ManagementApiClient(string token, Uri baseUri, IManagementConnection managementConnection, string? customDomain)
  • ManagementApiClient(string token, string domain, IManagementConnection connection, string? customDomain)
• New overload of HttpClientManagementConnection constructor accepting an optional customDomain parameter
• When a customDomain is provided, the Auth0-Custom-Domain header is automatically included on requests to the following whitelisted endpoints only:
  • POST /api/v2/jobs/verification-email
  • POST /api/v2/tickets/email-verification
  • POST /api/v2/tickets/password-change
  • POST /api/v2/organizations/{id}/invitations
  • GET/POST /api/v2/users
  • GET /api/v2/users/{id}
  • POST /api/v2/guardian/enrollments/ticket
  • POST /api/v2/self-service-profiles/{id}/sso-ticket
• The header is silently omitted on all non-whitelisted endpoints
• AssemblyInfo.cs updated to expose internals to Auth0.Core.UnitTests for testability

Usage example:

// With domain string
var client = new ManagementApiClient(token, "tenant.auth0.com", customDomain: "login.example.com");

// With URI
var client = new ManagementApiClient(token, new Uri("https://tenant.auth0.com/api/v2"), customDomain: "login.example.com");

References

Testing

• This change adds unit test coverage

• This change adds integration test coverage

• This change has been tested on the latest version of the platform/language or why not

Checklist

• I have read the Auth0 general contribution guidelines

• I have read the Auth0 Code of Conduct

• All existing and new tests complete without errors