@@ -261,8 +261,10 @@ export interface ManagedAuth {
261261 status : 'AUTHENTICATED' | 'NEEDS_AUTH' ;
262262
263263 /**
264- * Additional domains that are valid for this auth flow (besides the primary
265- * domain). Useful when login pages redirect to different domains.
264+ * Additional hostname roots valid for this auth flow, besides the primary domain.
265+ * Each value allows credential entry on that exact hostname and its subdomains.
266+ * Leading `www.` and `*.` labels are normalized away. When omitted or empty,
267+ * credential entry is unrestricted.
266268 *
267269 * The following SSO/OAuth provider domains are automatically allowed by default
268270 * and do not need to be specified:
@@ -1016,8 +1018,10 @@ export interface ManagedAuthCreateRequest {
10161018 profile_name : string ;
10171019
10181020 /**
1019- * Additional domains valid for this auth flow (besides the primary domain). Useful
1020- * when login pages redirect to different domains.
1021+ * Additional hostname roots valid for this auth flow, besides the primary domain.
1022+ * Each value allows credential entry on that exact hostname and its subdomains.
1023+ * Leading `www.` and `*.` labels are normalized away. When omitted or empty,
1024+ * credential entry is unrestricted.
10211025 *
10221026 * The following SSO/OAuth provider domains are automatically allowed by default
10231027 * and do not need to be specified:
@@ -1336,7 +1340,10 @@ export interface ManagedAuthTimelineEvent {
13361340 */
13371341export interface ManagedAuthUpdateRequest {
13381342 /**
1339- * Additional domains valid for this auth flow (replaces existing list)
1343+ * Additional hostname roots valid for this auth flow. Each value allows credential
1344+ * entry on that exact hostname and its subdomains; leading `www.` and `*.` labels
1345+ * are normalized away. An empty list leaves credential entry unrestricted.
1346+ * Replaces the existing list.
13401347 */
13411348 allowed_domains ?: Array < string > ;
13421349
@@ -1967,8 +1974,10 @@ export interface ConnectionCreateParams {
19671974 profile_name : string ;
19681975
19691976 /**
1970- * Additional domains valid for this auth flow (besides the primary domain). Useful
1971- * when login pages redirect to different domains.
1977+ * Additional hostname roots valid for this auth flow, besides the primary domain.
1978+ * Each value allows credential entry on that exact hostname and its subdomains.
1979+ * Leading `www.` and `*.` labels are normalized away. When omitted or empty,
1980+ * credential entry is unrestricted.
19721981 *
19731982 * The following SSO/OAuth provider domains are automatically allowed by default
19741983 * and do not need to be specified:
@@ -2199,7 +2208,10 @@ export namespace ConnectionCreateParams {
21992208
22002209export interface ConnectionUpdateParams {
22012210 /**
2202- * Additional domains valid for this auth flow (replaces existing list)
2211+ * Additional hostname roots valid for this auth flow. Each value allows credential
2212+ * entry on that exact hostname and its subdomains; leading `www.` and `*.` labels
2213+ * are normalized away. An empty list leaves credential entry unrestricted.
2214+ * Replaces the existing list.
22032215 */
22042216 allowed_domains ?: Array < string > ;
22052217
0 commit comments