Support for On-behalf-of Token Exchange

[bkiran6398]

🔧 Changes

Adds CLI support for three new Management API features across apis and apps commands:

APIs (Resource Servers):

• --enforce-policies flag on auth0 apis create and auth0 apis update — enables authorization policy enforcement for the API.
• --token-dialect flag on auth0 apis create and auth0 apis update — sets the access token dialect. Accepts access_token, access_token_authz, rfc9068_profile, or rfc9068_profile_authz.

Apps (Clients):

• --allow-any-profile-of-type (-p) flag on auth0 apps create and auth0 apps update — sets enabled token exchange types on a client. Accepts a comma-separated list (e.g., custom_authentication, on_behalf_of_token_exchange). Passing an empty value on update clears the configuration.

Display output updated to show ENFORCE POLICIES, TOKEN DIALECT, and TOKEN EXCHANGE TYPES fields.

Examples

auth0 apis create --name "MCP Tools API" --identifier "http://localhost:3001/" \
  --signing-alg RS256 --token-dialect rfc9068_profile_authz --enforce-policies \
  --scopes "tool:whoami,tool:greet" --no-input
  
auth0 apis create --name "Protected First Party API" --identifier "http://localhost:8787/" \                             10s
  --signing-alg RS256 --enforce-policies --scopes "read:private" --no-input
  
auth0 apps create --name "MCP Server Client" --type resource_server \
  --resource-server-identifier "http://localhost:3001/" \
  --allow-any-profile-of-type custom_authentication --no-input

📚 References

• create-an-api-to-represent-your-mcp-server
• create-a-first-party-api-to-call-from-the-mcp-server

🔬 Testing

• Unit tests added for excludeEmptyEntries helper (apps_test.go).
• Integration tests added for all new flags:
  • apis create/update with --enforce-policies and --token-dialect (test cases 024–032).
  • apps create/update/show with --allow-any-profile-of-type (test cases 042–044).
• Manual verification:
  • Verified creation/updation of new api parameters.

📝 Checklist

• All new/changed/fixed functionality is covered by tests (or N/A)
• I have added documentation for all new/changed functionality (or N/A)