moov_ruby 26.10.0.pre.dev.0 → 26.10.0.pre.dev.1

data/lib/moov/sdk_hooks/clientcredentials.rb

@@ -0,0 +1,386 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: true
+# frozen_string_literal: true
+
+require 'digest'
+require 'json'
+require 'net/http'
+require 'uri'
+
+require_relative './types'
+
+module Moov
+  module SDKHooks
+    class Credentials
+      extend T::Sig
+
+      sig { returns(String) }
+      attr_reader :client_id
+
+      sig { returns(String) }
+      attr_reader :client_secret
+
+      sig { returns(String) }
+      attr_reader :token_url
+
+      sig { returns(T.nilable(T::Array[String])) }
+      attr_reader :scopes
+
+      sig { returns(T::Hash[String, String]) }
+      attr_reader :additional_properties
+
+      sig do
+        params(
+          client_id: String,
+          client_secret: String,
+          token_url: String,
+          scopes: T.nilable(T::Array[String]),
+          additional_properties: T::Hash[String, String]
+        ).void
+      end
+      def initialize(client_id:, client_secret:, token_url:, scopes: nil, additional_properties: {})
+        @client_id = client_id
+        @client_secret = client_secret
+        @token_url = token_url
+        @scopes = scopes
+        @additional_properties = additional_properties
+      end
+    end
+
+    class Session
+      extend T::Sig
+
+      sig { returns(Credentials) }
+      attr_reader :credentials
+
+      sig { returns(String) }
+      attr_reader :token
+
+      sig { returns(T::Array[String]) }
+      attr_reader :scopes
+
+      sig { returns(T.nilable(Integer)) }
+      attr_reader :expires_at
+
+      sig do
+        params(
+          credentials: Credentials,
+          token: String,
+          scopes: T::Array[String],
+          expires_at: T.nilable(Integer)
+        ).void
+      end
+      def initialize(credentials:, token:, scopes:, expires_at: nil)
+        @credentials = credentials
+        @token = token
+        @scopes = scopes
+        @expires_at = expires_at
+      end
+    end
+
+    class ClientCredentialsHook < AbstractSDKHook
+
+      extend T::Sig
+
+      @global_lock = Mutex.new
+      @client_locks = {}
+      @sessions = {}
+
+      class << self
+        attr_reader :global_lock
+        attr_accessor :client_locks, :sessions
+      end
+
+      sig { override.params(config: SDKConfiguration).returns(SDKConfiguration) }
+      def sdk_init(config:)
+        raise 'Client is required' if config.client.nil?
+
+        @client = config.client
+        config
+      end
+
+      sig do
+        override.params(
+          hook_ctx: BeforeRequestHookContext,
+          request: Faraday::Request
+        ).returns(Faraday::Request)
+      end
+      def before_request(hook_ctx:, request:)
+        return request if hook_disabled?(hook_ctx)
+
+        credentials = get_credentials(hook_ctx)
+        return request if credentials.nil?
+
+        session_key = get_session_key(credentials.client_id, credentials.client_secret)
+        scopes = get_required_scopes(credentials, hook_ctx)
+        session = get_existing_session(session_key, scopes)
+
+        if session.nil?
+          token_url = resolve_token_endpoint(hook_ctx.base_url, credentials.token_url)
+          session = do_token_request(token_url, credentials, scopes)
+          store_session(session_key, scopes, session)
+        end
+
+        request.headers['Authorization'] = "Bearer #{session.token}"
+        request
+      end
+
+      sig do
+        override.params(
+          error: T.nilable(StandardError),
+          hook_ctx: AfterErrorHookContext,
+          response: T.nilable(Faraday::Response)
+        ).returns(T.nilable(Faraday::Response))
+      end
+      def after_error(error:, hook_ctx:, response:)
+        return response if hook_disabled?(hook_ctx)
+
+        # We don't want to refresh the token if the error is not related to the token
+        return response unless error.nil?
+
+        credentials = get_credentials(hook_ctx)
+        return response if credentials.nil?
+
+        if !response.nil? && response.status == 401
+          session_key = get_session_key(credentials.client_id, credentials.client_secret)
+          scopes = get_required_scopes(credentials, hook_ctx)
+          scope_key = get_scope_key(scopes)
+          remove_session(session_key, scope_key)
+        end
+
+        response
+      end
+
+      private
+
+      sig { params(hook_ctx: HookContext).returns(T::Boolean) }
+      def hook_disabled?(hook_ctx)
+        hook_ctx.oauth2_scopes.nil?
+      end
+
+
+      sig { params(hook_ctx: HookContext).returns(T.nilable(Credentials)) }
+      def get_credentials(hook_ctx)
+        source = hook_ctx.security_source
+        return nil if source.nil?
+
+        security = source.call
+
+        case hook_ctx.operation_id
+        when 'uploadAvatar'
+          return get_credentials_upload_avatar(security)
+        when 'deleteAvatar'
+          return get_credentials_delete_avatar(security)
+        end
+        
+        nil
+      end
+
+
+      sig { params(security: T.untyped).returns(T.nilable(Credentials)) }
+      def get_credentials_upload_avatar(security)
+        return nil if security.nil? || security.o_auth2_auth.nil?
+        
+        # Extract additional properties from security object
+        additional_properties = {}
+        security.o_auth2_auth.class.fields.each do |f|
+          name = f.name.to_s
+          next if %w[client_id client_secret token_url scopes].include?(name)
+        
+          metadata = f.metadata&.dig(:security)
+          next if metadata.nil?
+        
+          field_name = metadata[:field_name] || name
+          value = security.o_auth2_auth.send(f.name)
+          additional_properties[field_name] = value.to_s unless value.nil?
+        end
+        
+        Credentials.new(
+          client_id: security.o_auth2_auth.client_id,
+          client_secret: security.o_auth2_auth.client_secret,
+          token_url: security.o_auth2_auth.token_url,
+          scopes: nil,
+          additional_properties: additional_properties
+        )
+      end
+
+      sig { params(security: T.untyped).returns(T.nilable(Credentials)) }
+      def get_credentials_delete_avatar(security)
+        return nil if security.nil? || security.o_auth2_auth.nil?
+        
+        # Extract additional properties from security object
+        additional_properties = {}
+        security.o_auth2_auth.class.fields.each do |f|
+          name = f.name.to_s
+          next if %w[client_id client_secret token_url scopes].include?(name)
+        
+          metadata = f.metadata&.dig(:security)
+          next if metadata.nil?
+        
+          field_name = metadata[:field_name] || name
+          value = security.o_auth2_auth.send(f.name)
+          additional_properties[field_name] = value.to_s unless value.nil?
+        end
+        
+        Credentials.new(
+          client_id: security.o_auth2_auth.client_id,
+          client_secret: security.o_auth2_auth.client_secret,
+          token_url: security.o_auth2_auth.token_url,
+          scopes: nil,
+          additional_properties: additional_properties
+        )
+      end
+
+
+      sig { params(base_url: String, token_url: String).returns(String) }
+      def resolve_token_endpoint(base_url, token_url)
+        parsed = URI.parse(token_url)
+        return token_url if parsed.host
+
+        base = base_url.chomp('/')
+        URI.join("#{base}/", token_url).to_s
+      end
+
+      sig { params(token_url: String, credentials: Credentials, scopes: T::Array[String]).returns(Session) }
+      def do_token_request(token_url, credentials, scopes)
+        payload = {
+          'grant_type' => 'client_credentials',
+          'client_id' => credentials.client_id,
+          'client_secret' => credentials.client_secret
+        }
+
+        payload['scope'] = scopes.join(' ') unless scopes.empty?
+
+        # Add additional properties to payload
+        credentials.additional_properties.each do |key, value|
+          payload[key] = value
+        end
+        response = @client.post(token_url) do |req|
+          req.headers['Content-Type'] = 'application/x-www-form-urlencoded'
+          req.body = URI.encode_www_form(payload)
+        end
+
+        raise "Unexpected status code #{response.status} from token endpoint" unless response.status >= 200 && response.status < 300
+
+        response_data = JSON.parse(response.body)
+
+        raise 'Unexpected token type from token endpoint' unless response_data.fetch('token_type', '').downcase == 'bearer'
+
+        expires_at = nil
+        if response_data.key?('expires_in')
+          expires_at = Time.now.to_i + response_data['expires_in'].to_i
+        end
+
+        Session.new(
+          credentials: credentials,
+          token: response_data['access_token'],
+          scopes: scopes,
+          expires_at: expires_at
+        )
+      end
+
+      sig { params(client_id: String, client_secret: String).returns(String) }
+      def get_session_key(client_id, client_secret)
+        Digest::MD5.hexdigest("#{client_id}:#{client_secret}")
+      end
+
+      sig { params(credentials: Credentials, hook_ctx: HookContext).returns(T::Array[String]) }
+      def get_required_scopes(credentials, hook_ctx)
+        return T.must(credentials.scopes) unless credentials.scopes.nil?
+
+        hook_ctx.oauth2_scopes || []
+      end
+
+      sig { params(scopes: T::Array[String]).returns(String) }
+      def get_scope_key(scopes)
+        return '' if scopes.empty?
+
+        scopes.sort.join('&')
+      end
+
+      sig { params(client_key: String, scopes: T::Array[String], session: Session).void }
+      def store_session(client_key, scopes, session)
+        scope_key = get_scope_key(scopes)
+        lock = get_client_lock(client_key)
+        lock.synchronize do
+          self.class.sessions[client_key] ||= {}
+          self.class.sessions[client_key][scope_key] = session
+        end
+      end
+
+      sig { params(client_key: String, scope_key: String).void }
+      def remove_session(client_key, scope_key)
+        lock = get_client_lock(client_key)
+        lock.synchronize do
+          if self.class.sessions.key?(client_key) && self.class.sessions[client_key].key?(scope_key)
+            self.class.sessions[client_key].delete(scope_key)
+            self.class.sessions.delete(client_key) if self.class.sessions[client_key].empty?
+          end
+        end
+      end
+
+      sig { params(client_key: String, required_scopes: T::Array[String]).returns(T.nilable(Session)) }
+      def get_existing_session(client_key, required_scopes)
+        scope_key = get_scope_key(required_scopes)
+        expired_keys = []
+        result = T.let(nil, T.untyped)
+
+        lock = get_client_lock(client_key)
+        lock.synchronize do
+          return nil unless self.class.sessions.key?(client_key)
+
+          client_sessions = self.class.sessions[client_key]
+
+          # Check for exact scope match first
+          if client_sessions.key?(scope_key)
+            exact_match = client_sessions[scope_key]
+            if token_expired?(exact_match.expires_at)
+              expired_keys << scope_key
+            else
+              result = exact_match
+            end
+          end
+
+          # If no exact match, look for a superset match
+          if result.nil?
+            found = T.let(false, T::Boolean)
+            client_sessions.each do |key, session|
+              if token_expired?(session.expires_at)
+                expired_keys << key
+              elsif !found && required_scopes?(session.scopes, required_scopes)
+                result = session
+                found = true
+              end
+            end
+          end
+
+          # Clean up expired sessions
+          expired_keys.each { |key| client_sessions.delete(key) }
+
+          # Clean up empty client sessions
+          self.class.sessions.delete(client_key) if self.class.sessions.key?(client_key) && self.class.sessions[client_key].empty?
+        end
+
+        result
+      end
+
+      sig { params(scopes: T::Array[String], required_scopes: T::Array[String]).returns(T::Boolean) }
+      def required_scopes?(scopes, required_scopes)
+        required_scopes.all? { |scope| scopes.include?(scope) }
+      end
+
+      sig { params(expires_at: T.nilable(Integer)).returns(T::Boolean) }
+      def token_expired?(expires_at)
+        !expires_at.nil? && Time.now.to_i + 60 >= expires_at
+      end
+
+      sig { params(client_key: String).returns(Mutex) }
+      def get_client_lock(client_key)
+        self.class.global_lock.synchronize do
+          self.class.client_locks[client_key] ||= Mutex.new
+        end
+      end
+    end
+  end
+end

data/lib/moov/sdk_hooks/hooks.rb

@@ -5,6 +5,8 @@
 
 require_relative './types'
 require_relative './registration'
+require_relative './oauth2scopes'
+require_relative './clientcredentials'
 
 module Moov
   module SDKHooks
@@ -17,6 +19,10 @@ module Moov
         @before_request_hooks = T.let([], T::Array[AbstractSDKHook])
         @after_success_hooks = T.let([], T::Array[AbstractSDKHook])
         @after_error_hooks = T.let([], T::Array[AbstractSDKHook])
+        cc_hook = ClientCredentialsHook.new
+        register_sdk_init_hook cc_hook
+        register_before_request_hook cc_hook
+        register_after_error_hook cc_hook
         Registration.init_hooks self
       end
 

data/lib/moov/sdk_hooks/oauth2scopes.rb

@@ -0,0 +1,18 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: true
+# frozen_string_literal: true
+
+module Moov
+  module SDKHooks
+
+    # OAuth2AuthOAuth2Scope - Available scopes for the OAuth2Auth OAuth 2.0 scheme (clientCredentials flow).
+    class OAuth2AuthOAuth2Scope < T::Enum
+
+      enums do
+        # ROOT_ACCOUNTS_WRITE
+        ROOT_ACCOUNTS_WRITE = new('/accounts.write')
+      end
+    end
+  end
+end

data/lib/moov/sdkconfiguration.rb

@@ -88,9 +88,9 @@ module Moov
       end
       @language = 'ruby'
       @openapi_doc_version = 'v2026.10.00'
-      @sdk_version = '26.10.0-dev.0'
-      @gen_version = '2.917.0'
-      @user_agent = 'speakeasy-sdk/ruby 26.10.0-dev.0 2.917.0 v2026.10.00 moov_ruby'
+      @sdk_version = '26.10.0-dev.1'
+      @gen_version = '2.924.0'
+      @user_agent = 'speakeasy-sdk/ruby 26.10.0-dev.1 2.924.0 v2026.10.00 moov_ruby'
     end
 
     sig { returns([String, T::Hash[Symbol, String]]) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: moov_ruby
 version: !ruby/object:Gem::Version
-  version: 26.10.0.pre.dev.0
+  version: 26.10.0.pre.dev.1
 platform: ruby
 authors:
 - Speakeasy
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-07-13 00:00:00.000000000 Z
+date: 2026-07-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -407,6 +407,10 @@ files:
 - lib/moov/models/components/authtoken.rbi
 - lib/moov/models/components/authtokenrequest.rb
 - lib/moov/models/components/authtokenrequest.rbi
+- lib/moov/models/components/avataruploadrequest.rb
+- lib/moov/models/components/avataruploadrequest.rbi
+- lib/moov/models/components/avataruploadrequest_file.rb
+- lib/moov/models/components/avataruploadrequest_file.rbi
 - lib/moov/models/components/bankaccount.rb
 - lib/moov/models/components/bankaccount.rbi
 - lib/moov/models/components/bankaccountexception.rb
@@ -827,6 +831,8 @@ files:
 - lib/moov/models/components/feecategory.rbi
 - lib/moov/models/components/feemodel.rb
 - lib/moov/models/components/feemodel.rbi
+- lib/moov/models/components/feepaidby.rb
+- lib/moov/models/components/feepaidby.rbi
 - lib/moov/models/components/feeplan.rb
 - lib/moov/models/components/feeplan.rbi
 - lib/moov/models/components/feeplanagreement.rb
@@ -1203,6 +1209,10 @@ files:
 - lib/moov/models/components/primaryregulator.rbi
 - lib/moov/models/components/product.rb
 - lib/moov/models/components/product.rbi
+- lib/moov/models/components/productcategories.rb
+- lib/moov/models/components/productcategories.rbi
+- lib/moov/models/components/productcategory.rb
+- lib/moov/models/components/productcategory.rbi
 - lib/moov/models/components/productimagemetadata.rb
 - lib/moov/models/components/productimagemetadata.rbi
 - lib/moov/models/components/productoption.rb
@@ -1373,6 +1383,10 @@ files:
 - lib/moov/models/components/schedulepaymentmethod.rbi
 - lib/moov/models/components/scheduleresponse.rb
 - lib/moov/models/components/scheduleresponse.rbi
+- lib/moov/models/components/schemebasicauth.rb
+- lib/moov/models/components/schemebasicauth.rbi
+- lib/moov/models/components/schemeoauth2auth.rb
+- lib/moov/models/components/schemeoauth2auth.rbi
 - lib/moov/models/components/seccode.rb
 - lib/moov/models/components/seccode.rbi
 - lib/moov/models/components/security.rb
@@ -1495,6 +1509,8 @@ files:
 - lib/moov/models/components/transferentrymode.rbi
 - lib/moov/models/components/transferfailurereason.rb
 - lib/moov/models/components/transferfailurereason.rbi
+- lib/moov/models/components/transferfeepaidby.rb
+- lib/moov/models/components/transferfeepaidby.rbi
 - lib/moov/models/components/transferlineitem.rb
 - lib/moov/models/components/transferlineitem.rbi
 - lib/moov/models/components/transferlineitemimagemetadata.rb
@@ -1949,6 +1965,12 @@ files:
 - lib/moov/models/operations/createwallet_response.rbi
 - lib/moov/models/operations/createwebhook_response.rb
 - lib/moov/models/operations/createwebhook_response.rbi
+- lib/moov/models/operations/deleteavatar_request.rb
+- lib/moov/models/operations/deleteavatar_request.rbi
+- lib/moov/models/operations/deleteavatar_response.rb
+- lib/moov/models/operations/deleteavatar_response.rbi
+- lib/moov/models/operations/deleteavatar_security.rb
+- lib/moov/models/operations/deleteavatar_security.rbi
 - lib/moov/models/operations/deletedisputeevidencefile_request.rb
 - lib/moov/models/operations/deletedisputeevidencefile_request.rbi
 - lib/moov/models/operations/deletedisputeevidencefile_response.rb
@@ -2357,6 +2379,8 @@ files:
 - lib/moov/models/operations/listpaymentmethods_request.rbi
 - lib/moov/models/operations/listpaymentmethods_response.rb
 - lib/moov/models/operations/listpaymentmethods_response.rbi
+- lib/moov/models/operations/listproductcategories_response.rb
+- lib/moov/models/operations/listproductcategories_response.rbi
 - lib/moov/models/operations/listproducts_request.rb
 - lib/moov/models/operations/listproducts_request.rbi
 - lib/moov/models/operations/listproducts_response.rb
@@ -2541,6 +2565,12 @@ files:
 - lib/moov/models/operations/updatewebhook_request.rbi
 - lib/moov/models/operations/updatewebhook_response.rb
 - lib/moov/models/operations/updatewebhook_response.rbi
+- lib/moov/models/operations/uploadavatar_request.rb
+- lib/moov/models/operations/uploadavatar_request.rbi
+- lib/moov/models/operations/uploadavatar_response.rb
+- lib/moov/models/operations/uploadavatar_response.rbi
+- lib/moov/models/operations/uploadavatar_security.rb
+- lib/moov/models/operations/uploadavatar_security.rbi
 - lib/moov/models/operations/uploaddisputeevidencefile_request.rb
 - lib/moov/models/operations/uploaddisputeevidencefile_request.rbi
 - lib/moov/models/operations/uploaddisputeevidencefile_response.rb
@@ -2574,8 +2604,10 @@ files:
 - lib/moov/representatives.rb
 - lib/moov/resolution_links.rb
 - lib/moov/scheduling.rb
+- lib/moov/sdk_hooks/clientcredentials.rb
 - lib/moov/sdk_hooks/hooks.rb
 - lib/moov/sdk_hooks/moov_version.rb
+- lib/moov/sdk_hooks/oauth2scopes.rb
 - lib/moov/sdk_hooks/registration.rb
 - lib/moov/sdk_hooks/types.rb
 - lib/moov/sdkconfiguration.rb