noresponse 2.0.18 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d12b22a25042bbac27f9dd3f5378d961f4d16dd7ed687e34ca0fced5c77f8a14
-  data.tar.gz: ebfe7ead85cc207aba3126f8bda6ef73c5dbb1a4759d164046cf82a8c3362232
+  metadata.gz: f7f2f99e8a5df281a10706ca39f72c60dd4e0c945f6a895e95644921ef902125
+  data.tar.gz: 5c9a7bcdd021bbec006baa70a1e70c30e27845fbb0f3244e9657aefa22deb8bf
 SHA512:
-  metadata.gz: abe25bc8316302a81d67538be64b0e665c7374840d38b551e1bb570c24f73638ecf5055b84d6efec201dc8ae663dcf4671fbe2ecd35d41dde8bee562ee566b27
-  data.tar.gz: d59dfe3f0300c31fd31ee8f9e69867fb13a1ef26543a997ec3102cc1d883d345f58a36db18c508fd98d5afa8a6d115ad716931e05b477995a43feef14a8f6fe5
+  metadata.gz: bc80309fad1e4e052a6fdb5bd3a9df90c3d9aab591a940b344678fa6ab9c7026c9f528b100a6ab0c68c1ed5b6ad824164600576702106a6e422d9f77eecdc8f4
+  data.tar.gz: 60e634af7afff07030476d5697bafecea730ef81062cdaad669f73c742b82f39b30f446fb094ee2ae9fbf02923703daf3baad858868f61844654a32cc69c69a7

data/lib/no_response/integrations.rb

@@ -706,7 +706,7 @@ module NoResponse
           response: http_response
         )
         return Models::Operations::DeleteIntegrationResponse.new(
-          headers: {}
+          headers: http_response.headers
         )
       elsif Utils.match_status_code(http_response.status, ["400"])
         if Utils.match_content_type(content_type, "application/problem+json")

data/lib/no_response/late_results.rb

@@ -11,7 +11,9 @@
 # user.
 #
 # The handler verifies the delivery itself, so it never acts on an unverified
-# event. The provider calls are thin: you pass the credentials, and each
+# event, and it never acts on a test event from the send-test-event call. Every
+# provider call treats a 404 (user or session already gone) as done, so a
+# repeated delivery is safe. The provider calls are thin: you pass the credentials, and each
 # action is the provider's documented admin endpoint.
 
 require 'erb'
@@ -54,12 +56,12 @@ module NoResponse
 
     class << self
       # The action your policy names for a verified event. Only a served
-      # assessment with a recommendation can act. policy maps allow, step_up
-      # and review (as strings or symbols) to NONE, REVOKE_SESSIONS or BAN; a
-      # recommendation you leave out does nothing. An unknown action raises
-      # ArgumentError.
+      # assessment with a recommendation can act; a test event never does.
+      # policy maps allow, step_up and review (as strings or symbols) to NONE,
+      # REVOKE_SESSIONS or BAN; a recommendation you leave out does nothing. An
+      # unknown action raises ArgumentError.
       def action_for(event, policy = DEFAULT_POLICY)
-        return NONE if event.type != 'assessment.updated' || event.expired?
+        return NONE if event.type != 'assessment.updated' || event.test? || event.expired?
 
         data = event.data
         recommendation = data.recommendation || data.risk&.recommendation
@@ -111,7 +113,8 @@ module NoResponse
       # Clerk Backend API. revoke_sessions lists the user's active sessions
       # (GET /sessions?user_id&status=active) and revokes each
       # (POST /sessions/{id}/revoke). ban is POST /users/{id}/ban, which
-      # revokes every session and blocks sign-in.
+      # revokes every session and blocks sign-in. A 404 on any call (user or
+      # session already gone) counts as done, so a repeated delivery is safe.
       #
       # base_url defaults to https://api.clerk.com/v1. http_client is an
       # optional callable (method, uri, headers, body) returning
@@ -126,7 +129,9 @@ module NoResponse
       # GET /user_management/users/{id}/sessions and revokes each active one
       # with POST /user_management/sessions/revoke. WorkOS has no block or ban,
       # so ban revokes the sessions and then deletes the user
-      # (DELETE /user_management/users/{id}); deletion is permanent.
+      # (DELETE /user_management/users/{id}); deletion is permanent. A 404 on
+      # any call (user or session already gone) counts as done, so a repeated
+      # delivery is safe.
       #
       # base_url defaults to https://api.workos.com.
       def workos(api_key:, base_url: 'https://api.workos.com', http_client: nil)
@@ -141,7 +146,8 @@ module NoResponse
       # (PATCH /users/{id}), then does the same. Pass domain (such as
       # example.eu.auth0.com; the API is https://{domain}/api/v2) or base_url.
       # token is a Management API access token with update:users,
-      # delete:sessions and delete:refresh_tokens.
+      # delete:sessions and delete:refresh_tokens. A 404 on any call (user
+      # already gone) counts as done, so a repeated delivery is safe.
       def auth0(token:, domain: nil, base_url: nil, http_client: nil)
         raise ArgumentError, 'auth0 needs token' if token.to_s.empty?
 
@@ -232,16 +238,16 @@ module NoResponse
         (0...1000).each do |round|
           page = Segment.sessions(@call.call('GET', '/sessions', query: [['user_id', user_id], %w[status active],
                                                                          ['limit', PAGE.to_s],
-                                                                         ['offset', (round * PAGE).to_s]]))
+                                                                         ['offset', (round * PAGE).to_s]], allow_404: true))
           active.concat(Segment.active_ids(page))
           break if page.length < PAGE
         end
-        active.each { |id| @call.call('POST', "/sessions/#{ERB::Util.url_encode(id)}/revoke") }
+        active.each { |id| @call.call('POST', "/sessions/#{ERB::Util.url_encode(id)}/revoke", allow_404: true) }
         nil
       end
 
       def ban(user_id)
-        @call.call('POST', "/users/#{Segment.encode(user_id)}/ban")
+        @call.call('POST', "/users/#{Segment.encode(user_id)}/ban", allow_404: true)
         nil
       end
     end
@@ -260,14 +266,14 @@ module NoResponse
         1000.times do
           query = T.let([%w[limit 100]], T::Array[T::Array[String]])
           query << ['after', after] if after
-          body = @call.call('GET', "/user_management/users/#{user}/sessions", query: query)
+          body = @call.call('GET', "/user_management/users/#{user}/sessions", query: query, allow_404: true)
           active.concat(Segment.active_ids(Segment.sessions(body)))
           nxt = body.is_a?(Hash) && body['list_metadata'].is_a?(Hash) ? body['list_metadata']['after'] : nil
           break unless nxt.is_a?(String) && !nxt.empty?
 
           after = nxt
         end
-        active.each { |id| @call.call('POST', '/user_management/sessions/revoke', body: { 'session_id' => id }) }
+        active.each { |id| @call.call('POST', '/user_management/sessions/revoke', body: { 'session_id' => id }, allow_404: true) }
         nil
       end
 
@@ -287,13 +293,13 @@ module NoResponse
 
       def revoke_sessions(user_id)
         user = Segment.encode(user_id)
-        @call.call('DELETE', "/users/#{user}/sessions")
-        @call.call('DELETE', "/users/#{user}/refresh-tokens")
+        @call.call('DELETE', "/users/#{user}/sessions", allow_404: true)
+        @call.call('DELETE', "/users/#{user}/refresh-tokens", allow_404: true)
         nil
       end
 
       def ban(user_id)
-        @call.call('PATCH', "/users/#{Segment.encode(user_id)}", body: { 'blocked' => true })
+        @call.call('PATCH', "/users/#{Segment.encode(user_id)}", body: { 'blocked' => true }, allow_404: true)
         revoke_sessions(user_id)
       end
     end

data/lib/no_response/models/operations/createwebhookendpoint_response.rb

@@ -0,0 +1,34 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class CreateWebhookEndpointResponse
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field :headers, Crystalline::Hash.new(Symbol, Crystalline::Array.new(::String))
+
+        field :result, Models::Shared::WebhookEndpointCreated, {}
+
+        sig {
+          params(headers: T::Hash[Symbol, T::Array[::String]], result: Models::Shared::WebhookEndpointCreated).void
+        }
+        def initialize(headers:, result:)
+          @headers = headers
+          @result = result
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @headers == other.headers
+          return false unless @result == other.result
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/createwebhookendpoint_response.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::CreateWebhookEndpointResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::CreateWebhookEndpointResponse
+  def headers
+  end
+
+  def headers=(str_)
+  end
+
+  def result
+  end
+
+  def result=(str_)
+  end
+end

data/lib/no_response/models/operations/deletewebhookendpoint_request.rb

@@ -0,0 +1,29 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class DeleteWebhookEndpointRequest
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # The endpoint's whe_ id. An id that is unknown, malformed or another tenant's answers 404.
+        field :endpoint_id, ::String, {'path_param': {'field_name': "endpoint_id", 'style': "simple", 'explode': false}}
+
+        sig { params(endpoint_id: ::String).void }
+        def initialize(endpoint_id:)
+          @endpoint_id = endpoint_id
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @endpoint_id == other.endpoint_id
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/deletewebhookendpoint_request.rbi

@@ -0,0 +1,14 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::DeleteWebhookEndpointRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::DeleteWebhookEndpointRequest
+  def endpoint_id
+  end
+
+  def endpoint_id=(str_)
+  end
+end

data/lib/no_response/models/operations/deletewebhookendpoint_response.rb

@@ -0,0 +1,28 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class DeleteWebhookEndpointResponse
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field :headers, Crystalline::Hash.new(Symbol, Crystalline::Array.new(::String))
+
+        sig { params(headers: T::Hash[Symbol, T::Array[::String]]).void }
+        def initialize(headers:)
+          @headers = headers
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @headers == other.headers
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/deletewebhookendpoint_response.rbi

@@ -0,0 +1,14 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::DeleteWebhookEndpointResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::DeleteWebhookEndpointResponse
+  def headers
+  end
+
+  def headers=(str_)
+  end
+end

data/lib/no_response/models/operations/listwebhookendpoints_response.rb

@@ -0,0 +1,32 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class ListWebhookEndpointsResponse
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field :headers, Crystalline::Hash.new(Symbol, Crystalline::Array.new(::String))
+
+        field :result, Models::Shared::WebhookEndpointList, {}
+
+        sig { params(headers: T::Hash[Symbol, T::Array[::String]], result: Models::Shared::WebhookEndpointList).void }
+        def initialize(headers:, result:)
+          @headers = headers
+          @result = result
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @headers == other.headers
+          return false unless @result == other.result
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/listwebhookendpoints_response.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::ListWebhookEndpointsResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::ListWebhookEndpointsResponse
+  def headers
+  end
+
+  def headers=(str_)
+  end
+
+  def result
+  end
+
+  def result=(str_)
+  end
+end

data/lib/no_response/models/operations/rotatewebhooksigningkey_request.rb

@@ -0,0 +1,33 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class RotateWebhookSigningKeyRequest
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # The endpoint's whe_ id. An id that is unknown, malformed or another tenant's answers 404.
+        field :endpoint_id, ::String, {'path_param': {'field_name': "endpoint_id", 'style': "simple", 'explode': false}}
+
+        field :body, Models::Shared::WebhookKeyRotationRequest, {'request': {'media_type': "application/json"}}
+
+        sig { params(endpoint_id: ::String, body: Models::Shared::WebhookKeyRotationRequest).void }
+        def initialize(endpoint_id:, body:)
+          @endpoint_id = endpoint_id
+          @body = body
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @endpoint_id == other.endpoint_id
+          return false unless @body == other.body
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/rotatewebhooksigningkey_request.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::RotateWebhookSigningKeyRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::RotateWebhookSigningKeyRequest
+  def endpoint_id
+  end
+
+  def endpoint_id=(str_)
+  end
+
+  def body
+  end
+
+  def body=(str_)
+  end
+end

data/lib/no_response/models/operations/rotatewebhooksigningkey_response.rb

@@ -0,0 +1,32 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class RotateWebhookSigningKeyResponse
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field :headers, Crystalline::Hash.new(Symbol, Crystalline::Array.new(::String))
+
+        field :result, Models::Shared::WebhookKeyRotation, {}
+
+        sig { params(headers: T::Hash[Symbol, T::Array[::String]], result: Models::Shared::WebhookKeyRotation).void }
+        def initialize(headers:, result:)
+          @headers = headers
+          @result = result
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @headers == other.headers
+          return false unless @result == other.result
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/rotatewebhooksigningkey_response.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::RotateWebhookSigningKeyResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::RotateWebhookSigningKeyResponse
+  def headers
+  end
+
+  def headers=(str_)
+  end
+
+  def result
+  end
+
+  def result=(str_)
+  end
+end

data/lib/no_response/models/operations/sendwebhooktestevent_request.rb

@@ -0,0 +1,33 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class SendWebhookTestEventRequest
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # The endpoint's whe_ id. An id that is unknown, malformed or another tenant's answers 404.
+        field :endpoint_id, ::String, {'path_param': {'field_name': "endpoint_id", 'style': "simple", 'explode': false}}
+
+        field :body, Models::Shared::WebhookTestRequest, {'request': {'media_type': "application/json"}}
+
+        sig { params(endpoint_id: ::String, body: Models::Shared::WebhookTestRequest).void }
+        def initialize(endpoint_id:, body:)
+          @endpoint_id = endpoint_id
+          @body = body
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @endpoint_id == other.endpoint_id
+          return false unless @body == other.body
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/sendwebhooktestevent_request.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::SendWebhookTestEventRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::SendWebhookTestEventRequest
+  def endpoint_id
+  end
+
+  def endpoint_id=(str_)
+  end
+
+  def body
+  end
+
+  def body=(str_)
+  end
+end

data/lib/no_response/models/operations/sendwebhooktestevent_response.rb

@@ -0,0 +1,32 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class SendWebhookTestEventResponse
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field :headers, Crystalline::Hash.new(Symbol, Crystalline::Array.new(::String))
+
+        field :result, Models::Shared::WebhookTest, {}
+
+        sig { params(headers: T::Hash[Symbol, T::Array[::String]], result: Models::Shared::WebhookTest).void }
+        def initialize(headers:, result:)
+          @headers = headers
+          @result = result
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @headers == other.headers
+          return false unless @result == other.result
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/sendwebhooktestevent_response.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::SendWebhookTestEventResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::SendWebhookTestEventResponse
+  def headers
+  end
+
+  def headers=(str_)
+  end
+
+  def result
+  end
+
+  def result=(str_)
+  end
+end

data/lib/no_response/models/operations.rb

@@ -7,17 +7,25 @@ module NoResponse
       autoload :CreateAssessmentRequest, "no_response/models/operations/createassessment_request.rb"
       autoload :CreateAssessmentResponse, "no_response/models/operations/createassessment_response.rb"
       autoload :CreateIntegrationResponse, "no_response/models/operations/createintegration_response.rb"
+      autoload :CreateWebhookEndpointResponse, "no_response/models/operations/createwebhookendpoint_response.rb"
       autoload :DeleteIntegrationRequest, "no_response/models/operations/deleteintegration_request.rb"
       autoload :DeleteIntegrationResponse, "no_response/models/operations/deleteintegration_response.rb"
+      autoload :DeleteWebhookEndpointRequest, "no_response/models/operations/deletewebhookendpoint_request.rb"
+      autoload :DeleteWebhookEndpointResponse, "no_response/models/operations/deletewebhookendpoint_response.rb"
       autoload :GetAssessmentRequest, "no_response/models/operations/getassessment_request.rb"
       autoload :GetAssessmentResponse, "no_response/models/operations/getassessment_response.rb"
       autoload :ListIntegrationsResponse, "no_response/models/operations/listintegrations_response.rb"
+      autoload :ListWebhookEndpointsResponse, "no_response/models/operations/listwebhookendpoints_response.rb"
       autoload :QueryAccountAssessmentsResponse, "no_response/models/operations/queryaccountassessments_response.rb"
       autoload :RecordAssessmentOutcomeRequest, "no_response/models/operations/recordassessmentoutcome_request.rb"
       autoload :RecordAssessmentOutcomeResponse, "no_response/models/operations/recordassessmentoutcome_response.rb"
       autoload :RotateApiKeyResponse, "no_response/models/operations/rotateapikey_response.rb"
       autoload :RotateIntegrationSecretRequest, "no_response/models/operations/rotateintegrationsecret_request.rb"
       autoload :RotateIntegrationSecretResponse, "no_response/models/operations/rotateintegrationsecret_response.rb"
+      autoload :RotateWebhookSigningKeyRequest, "no_response/models/operations/rotatewebhooksigningkey_request.rb"
+      autoload :RotateWebhookSigningKeyResponse, "no_response/models/operations/rotatewebhooksigningkey_response.rb"
+      autoload :SendWebhookTestEventRequest, "no_response/models/operations/sendwebhooktestevent_request.rb"
+      autoload :SendWebhookTestEventResponse, "no_response/models/operations/sendwebhooktestevent_response.rb"
     end
   end
 end

data/lib/no_response/models/shared/assessment.rb

@@ -134,6 +134,12 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("assessment_url")}}
         )
+        # The identity fields of the auth context the assessment was made with, echoed for the tenant's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
+        field(
+          :auth_context,
+          Crystalline::Nilable.new(Models::Shared::AssessmentAuthContext),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("auth_context")}}
+        )
 
         sig {
           params(
@@ -154,7 +160,8 @@ module NoResponse
             risk: T.nilable(Models::Shared::Risk),
             signals: T.nilable(T::Array[Models::Shared::Signal]),
             policy_basis: ::String,
-            assessment_url: T.nilable(::String)
+            assessment_url: T.nilable(::String),
+            auth_context: T.nilable(Models::Shared::AssessmentAuthContext)
           )
             .void
         }
@@ -176,7 +183,8 @@ module NoResponse
           risk: nil,
           signals: nil,
           policy_basis: "heuristic_unvalidated",
-          assessment_url: nil
+          assessment_url: nil,
+          auth_context: nil
         )
           @assessment_id = assessment_id
           @account_id = account_id
@@ -204,6 +212,7 @@ module NoResponse
 
           @policy_basis = "heuristic_unvalidated"
           @assessment_url = assessment_url
+          @auth_context = auth_context
         end
 
         sig { params(other: T.untyped).returns(T::Boolean) }
@@ -227,6 +236,7 @@ module NoResponse
           return false unless @signals == other.signals
           return false unless @policy_basis == other.policy_basis
           return false unless @assessment_url == other.assessment_url
+          return false unless @auth_context == other.auth_context
           true
         end
       end

data/lib/no_response/models/shared/assessment.rbi

@@ -113,4 +113,10 @@ class NoResponse::Models::Shared::Assessment
 
   def assessment_url=(str_)
   end
+
+  def auth_context
+  end
+
+  def auth_context=(str_)
+  end
 end