feat(ciba): support RAR requests

[cristiandouce]

This pull request introduces support for handling authorization_details in the CIBA (Client-Initiated Backchannel Authentication) authorization flow. The changes allow authorization_details to be specified as either a static list of dictionaries or a callable that resolves to such a list. Below are the key updates:

Enhancements to CIBA Authorization Flow:

• Support for authorization_details in _get_authorize_params: Updated the _get_authorize_params method in ciba_authorizer_base.py to handle authorization_details dynamically. It checks whether authorization_details is a list, a coroutine function, or a callable, and processes it accordingly.

• New authorization_details attribute in CIBAAuthorizerParams: Added the authorization_details attribute to the CIBAAuthorizerParams class in ciba_authorizer_params.py. This attribute can either be a list of dictionaries or a callable that resolves to such a list, providing more flexibility in specifying authorization details. [1] [2]

[Copilot]

Pull Request Overview

This PR adds support for authorization_details in the CIBA flow, allowing static lists or callables to be resolved dynamically in authorization requests.

• Introduces a new authorization_details field in CIBAAuthorizerParams
• Updates _get_authorize_params to handle static lists, async callables, and sync callables for authorization details

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File	Description
packages/auth0-ai/auth0_ai/authorizers/ciba/ciba_authorizer_params.py	Adds authorization_details to the TypedDict definition
packages/auth0-ai/auth0_ai/authorizers/ciba/ciba_authorizer_base.py	Implements logic in _get_authorize_params to resolve authorization_details

Comments suppressed due to low confidence (2)

packages/auth0-ai/auth0_ai/authorizers/ciba/ciba_authorizer_base.py:132

• Add unit tests covering cases where authorization_details is a static list, a synchronous callable, and an asynchronous callable to ensure correct resolution.

if isinstance(self.params.get("authorization_details"), list):

packages/auth0-ai/auth0_ai/authorizers/ciba/ciba_authorizer_base.py:129

• Update the docstring for _get_authorize_params to describe the new authorization_details handling (static list, sync callable, async callable) so documentation matches behavior.

async def _get_authorize_params(self, *args: ToolInput.args, **kwargs: ToolInput

[siacomuzzi]

minor: declare this arg after all mandatory args

[cristiandouce]

done 🎉

[siacomuzzi]

Suggested change

	authorization_details (Optional[Union[list[dict], Callable[..., Awaitable[list[dict]]]]]):
	Authorization details that specify what the user is authorizing. Can be:
	- A list of dictionaries with authorization details (e.g., [{ type: "custom_type", param: "example", ...}] details)
	- A function that resolves to a list of dictionaries
	authorization_details (Optional[Union[list[dict], Callable[..., list[dict]], Callable[..., Awaitable[list[dict]]]]]): The authorization requirements list (e.g., [{ type: "custom_type", param: "example", ...}]), or a function that resolves it. More info: https://auth0.com/docs/get-started/authentication-and-authorization-flow/client-initiated-backchannel-authentication-flow/user-authorization-with-ciba

[cristiandouce]

done! 🎉