Support for listing authenticators and deleting specific authenticator

src/Auth0.AuthenticationApi/AuthenticationApiClient.cs

@@ -495,6 +495,40 @@ public Task<PushedAuthorizationRequestResponse> PushedAuthorizationRequestAsync(
             );
         }
 
+        /// <inheritdoc/>
+        public Task DeleteMfaAuthenticatorAsync(
+            DeleteMfaAuthenticatorRequest request,
+            CancellationToken cancellationToken = default)
+        {
+            if (request == null)
+            {
+                throw new ArgumentNullException(nameof(request));
+            }
+
+            return connection.SendAsync<object>(
+                HttpMethod.Delete,
+                BuildUri($"mfa/authenticators/{request.AuthenticatorId}"),
+                null,
+                headers: BuildHeaders(request.AccessToken),
+                cancellationToken: cancellationToken);
+        }
+
+        /// <inheritdoc/>
+        public Task<List<Authenticator>> ListMfaAuthenticatorsAsync(string accessToken, CancellationToken cancellationToken = default)
+        {
+            if (string.IsNullOrEmpty(accessToken))
+            {
+                throw new ArgumentNullException(nameof(accessToken));
+            }
+
+            return connection.SendAsync<List<Authenticator>>(
+                HttpMethod.Get,
+                BuildUri($"mfa/authenticators"),
+                null,
+                headers: BuildHeaders(accessToken),
+                cancellationToken: cancellationToken);
+        }
+
         /// <summary>
         /// Disposes of any owned disposable resources such as a <see cref="IAuthenticationConnection"/>.
         /// </summary>

src/Auth0.AuthenticationApi/IAuthenticationApiClient.cs

@@ -1,5 +1,6 @@
 using Auth0.AuthenticationApi.Models;
 using System;
+using System.Collections.Generic;
 using System.Threading;
 using System.Threading.Tasks;
 
@@ -180,5 +181,25 @@ public interface IAuthenticationApiClient : IDisposable
         /// a <see cref="PushedAuthorizationRequestResponse" /> with the details of the response.</returns>
         Task<PushedAuthorizationRequestResponse> PushedAuthorizationRequestAsync(PushedAuthorizationRequest request,
             CancellationToken cancellationToken = default);
+
+        /// <summary>
+        /// Deletes an associated authenticator using its ID.
+        /// </summary>
+        /// <param name="request"><see cref="DeleteMfaAuthenticatorRequest"/> containing information to delete an associated authenticator</param>
+        /// <param name="cancellationToken">The cancellation token to cancel operation.</param>
+        /// <returns><see cref="Task"/> representing the async operation.</returns>
+        Task DeleteMfaAuthenticatorAsync(
+            DeleteMfaAuthenticatorRequest request,
+            CancellationToken cancellationToken = default);
+
+        /// <summary>
+        /// Lists authenticators associated with the access token
+        /// </summary>
+        /// <param name="accessToken"> Access token with scope: read:authenticators and audience: https://{yourDomain}/mfa/</param>
+        /// <param name="cancellationToken">The cancellation token to cancel operation.</param>
+        /// <returns><see cref="Task"/> representing the async operation containing
+        /// List of <see cref="Authenticator"/>
+        /// </returns>
+        Task<List<Authenticator>> ListMfaAuthenticatorsAsync(string accessToken, CancellationToken cancellationToken = default);
     }
 }

src/Auth0.AuthenticationApi/Models/Authenticator.cs

@@ -0,0 +1,22 @@
+using Newtonsoft.Json;
+
+namespace Auth0.AuthenticationApi.Models
+{
+    public class Authenticator
+    {
+        [JsonProperty("id")]
+        public string Id { get; set; }
+
+        [JsonProperty("authenticator_type")]
+        public string AuthenticatorType { get; set; }
+
+        [JsonProperty("active")]
+        public bool Active { get; set; }
+
+        [JsonProperty("oob_channel")]
+        public string OobChannel { get; set; }
+
+        [JsonProperty("name")]
+        public string Name { get; set; }
+    }
+}

src/Auth0.AuthenticationApi/Models/DeleteMfaAuthenticatorRequest.cs

@@ -0,0 +1,19 @@
+using System;
+using System.Collections.Generic;
+using System.Text;
+
+namespace Auth0.AuthenticationApi.Models
+{
+    public class DeleteMfaAuthenticatorRequest
+    {
+        /// <summary>
+        /// Access token with scope: remove:authenticators and audience: https://{yourDomain}/mfa/
+        /// </summary>
+        public string AccessToken { get; set; }
+
+        /// <summary>
+        /// The ID of the authenticator to delete.
+        /// </summary>
+        public string AuthenticatorId { get; set; }
+    }
+}

tests/Auth0.AuthenticationApi.IntegrationTests/MfaTests.cs

@@ -0,0 +1,45 @@
+using System.Linq;
+using System.Threading.Tasks;
+using Auth0.AuthenticationApi.Models;
+using Auth0.Tests.Shared;
+using FluentAssertions;
+using Xunit;
+
+namespace Auth0.AuthenticationApi.IntegrationTests
+{
+    public class MfaTests : TestBase
+    {
+        public MfaTests()
+        {
+            _authenticationApiClient = new AuthenticationApiClient(GetVariable("AUTH0_AUTHENTICATION_API_URL"));
+        }
+
+        private readonly AuthenticationApiClient _authenticationApiClient;
+
+        [Fact(Skip = "Run manually")]
+        public async Task Invoking_Delete_ShouldNotThrow()
+        {
+            await _authenticationApiClient.Invoking(
+                x => x.DeleteMfaAuthenticatorAsync(
+                    new DeleteMfaAuthenticatorRequest()
+                    {
+                        AccessToken = GetVariable("MFA_ACCESS_TOKEN"),
+                        AuthenticatorId = GetVariable("AUTHENTICATOR_ID")
+                    })).Should().NotThrowAsync();
+        }
+
+        [Fact(Skip = "Run manually")]
+        public async Task Should_Return_Authenticators()
+        {
+            var response = await _authenticationApiClient.ListMfaAuthenticatorsAsync(
+                GetVariable("MFA_ACCESS_TOKEN")
+            );
+
+            response.Should().NotBeNullOrEmpty();
+            response.First().AuthenticatorType.Should().NotBeNullOrEmpty();
+            response.First().OobChannel.Should().NotBeNullOrEmpty();
+            response.First().Id.Should().NotBeNullOrEmpty();
+            response.First().Name.Should().NotBeNullOrEmpty();
+        }
+    }
+}