Changes for MyAccount Factors Schema

Author: rmad17

src/auth0_server_python/auth_server/my_account_client.py

@@ -412,7 +412,10 @@ async def get_factors(
                         validation_errors=error_data.get("validation_errors", None),
                     )
 
-                return GetFactorsResponse.model_validate(response.json())
+                # Auth0 /me/v1/factors returns a plain array, not {"factors":[...]}
+                raw = response.json()
+                payload = raw if isinstance(raw, dict) else {"factors": raw}
+                return GetFactorsResponse.model_validate(payload)
 
         except Exception as e:
             if isinstance(e, (MyAccountApiError, ApiError)):

src/auth0_server_python/auth_types/__init__.py

@@ -717,7 +717,7 @@ class EnrollAuthenticationMethodRequest(BaseModel):
     email: Optional[str] = None
     phone_number: Optional[str] = None
     preferred_authentication_method: Optional[PreferredAuthMethod] = None
-    user_identity_id: Optional[str] = None
+    identity_user_id: Optional[str] = None  # OAS: IdentityAuthenticationMethodBase.identity_user_id
     connection: Optional[str] = None
 
 
@@ -790,9 +790,8 @@ class ListAuthenticationMethodsResponse(BaseModel):
 
 class Factor(BaseModel):
     model_config = ConfigDict(extra="allow")
-    name: str
-    enabled: Optional[bool] = None
-    trial_expired: Optional[bool] = None
+    type: str
+    usage: Optional[list[str]] = None
 
 
 class GetFactorsResponse(BaseModel):

src/auth0_server_python/tests/test_my_account_client.py

@@ -525,15 +525,17 @@ async def test_get_factors_success(mocker):
     client = MyAccountClient(domain="auth0.local")
     response = AsyncMock()
     response.status_code = 200
-    response.json = MagicMock(return_value={"factors": [{"name": "sms", "enabled": True}]})
+    response.json = MagicMock(
+        return_value={"factors": [{"type": "phone", "usage": ["primary"]}]}
+    )
     mocker.patch("httpx.AsyncClient.get", new_callable=AsyncMock, return_value=response)
 
     result = await client.get_factors(access_token="token123")
 
     assert isinstance(result, GetFactorsResponse)
     assert len(result.factors) == 1
-    assert result.factors[0].name == "sms"
-    assert result.factors[0].enabled is True
+    assert result.factors[0].type == "phone"
+    assert result.factors[0].usage == ["primary"]
 
 
 @pytest.mark.asyncio
@@ -596,12 +598,13 @@ async def test_get_factors_extra_fields(mocker):
     response = AsyncMock()
     response.status_code = 200
     response.json = MagicMock(return_value={
-        "factors": [{"name": "webauthn-roaming", "enabled": True, "future_field": "value"}]
+        "factors": [{"type": "webauthn-roaming", "usage": ["secondary"], "future_field": "value"}]
     })
     mocker.patch("httpx.AsyncClient.get", new_callable=AsyncMock, return_value=response)
 
     result = await client.get_factors(access_token="token123")
-    assert result.factors[0].name == "webauthn-roaming"
+    assert result.factors[0].type == "webauthn-roaming"
+    assert result.factors[0].model_extra["future_field"] == "value"
 
 
 @pytest.mark.asyncio
@@ -804,6 +807,26 @@ async def test_enroll_authentication_method_success(mocker):
     assert result.authn_params_public_key.user.display_name == "Test User"
 
 
+@pytest.mark.asyncio
+async def test_enroll_authentication_method_sends_identity_user_id(mocker):
+    """identity_user_id must serialize to the request body under its OAS wire key."""
+    client = MyAccountClient(domain="auth0.local")
+    response = AsyncMock()
+    response.status_code = 202
+    response.headers = {"location": "/me/v1/authentication-methods/passkey|new"}
+    response.json = MagicMock(return_value={"auth_session": "session_abc"})
+    mock_post = mocker.patch(
+        "httpx.AsyncClient.post", new_callable=AsyncMock, return_value=response
+    )
+
+    req = EnrollAuthenticationMethodRequest(type="passkey", identity_user_id="auth0|abc123")
+    await client.enroll_authentication_method(access_token="token123", request=req)
+
+    sent_body = mock_post.call_args[1]["json"]
+    assert sent_body["identity_user_id"] == "auth0|abc123"
+    assert "user_identity_id" not in sent_body
+
+
 @pytest.mark.asyncio
 async def test_enroll_authentication_method_public_key_extra_fields_preserved(mocker):
     """Unknown WebAuthn fields (excludeCredentials, attestation, extensions) must not be dropped."""
@@ -1012,7 +1035,9 @@ async def test_get_factors_with_dpop_key(mocker):
     client = MyAccountClient(domain="auth0.local")
     response = AsyncMock()
     response.status_code = 200
-    response.json = MagicMock(return_value={"factors": [{"name": "sms", "enabled": True}]})
+    response.json = MagicMock(
+        return_value={"factors": [{"type": "phone", "usage": ["primary"]}]}
+    )
     mock_get = mocker.patch("httpx.AsyncClient.get", new_callable=AsyncMock, return_value=response)
 
     dpop_key = jwk_module.JWK.generate(kty="EC", crv="P-256")