noresponse 7.1.0 → 7.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 88dd804e11c258b4c6d3c285c33195bce2f94e640ce398d730e2866176ed1c11
-  data.tar.gz: 861cc95f59c23e8f12f86b2149332026c48c09d7382c73c8c9005eacbfd6dfc6
+  metadata.gz: 021d4608e686813bec126abd424f6d58dab332fd28c285cd7b5f6f75650e368b
+  data.tar.gz: 02a3f2d5b1f60469e43b21fc3eb7e1a0638a8a7274034d140fdd45ec718e027f
 SHA512:
-  metadata.gz: a48877cc0d847931a6f7a08e298aa72a7c89acd7c772b5609f72536d3c1428fc86a8f6157df602acb2ff9880cff76964a16822454ac5b59c48b70213d4970530
-  data.tar.gz: 7a481aee2095853ebcc204369d30f484b76a54dec2edcb5257d00153994ba4339e6ed4aa995b229c6ffdbd82d888d771ab149819c55dce27c0d2882d13cc61c6
+  metadata.gz: 518cdf97de4f13ac34e54d60d193feefd4e4d36b99e05e453e9160997400168a21c614a8145fae02dbae31d4b7de07ec7d3477be0dda027409dd4d010068930a
+  data.tar.gz: 2a7eda5b4304be2347af38c4ea13cf8c39d0d6b18d429f66f0cc3e793dfd793753ca1724ed5a400487cb2b8165d91bb1ce84aa653a749c24367420c1bab238f6

data/lib/no_response/late_results.rb

@@ -10,7 +10,9 @@
 # account is in your own flow, and takes the actions the table names for that
 # state and the decision of its flow:
 #
+#   onboarding   account_creation allow         activate
 #   onboarding   account_creation review/block  fail_onboarding, revoke_sessions
+#   provisional  account_creation allow         activate
 #   provisional  account_creation review/block  reject_activation, revoke_sessions
 #   active       login review                   revoke_sessions
 #   active       login block                    restrict, revoke_sessions
@@ -27,7 +29,7 @@ require 'json'
 
 module NoResponse
   module LateResults
-    TABLE = JSON.parse('{"lifecycle":{"onboarding":{"flow":"account_creation","on":{"review":["fail_onboarding","revoke_sessions"],"block":["fail_onboarding","revoke_sessions"]}},"provisional":{"flow":"account_creation","on":{"review":["reject_activation","revoke_sessions"],"block":["reject_activation","revoke_sessions"]}},"active":{"flow":"login","on":{"review":["revoke_sessions"],"block":["restrict","revoke_sessions"]}},"restricted":{"flow":"login","on":{},"reinstate":{"allow":["unrestrict"]}},"rejected":{"flow":"account_creation","on":{}}},"providers":{"clerk":{"base_url":"https://api.clerk.com/v1","actions":{"fail_onboarding":[{"call":{"method":"POST","path":"/users/{user}/ban"}}],"reject_activation":[{"call":{"method":"POST","path":"/users/{user}/ban"}}],"restrict":[{"call":{"method":"POST","path":"/users/{user}/ban"}}],"unrestrict":[{"call":{"method":"POST","path":"/users/{user}/unban"}}],"revoke_sessions":[{"each":{"list":{"method":"GET","path":"/sessions","query":{"user_id":"{user}","status":"active","limit":"100"}},"page":{"kind":"offset","param":"offset","size":100},"where":{"status":"active"}},"call":{"method":"POST","path":"/sessions/{item}/revoke"}}]}},"workos":{"base_url":"https://api.workos.com","actions":{"fail_onboarding":[{"call":{"method":"PUT","path":"/user_management/users/{user}","body":{"metadata":{"noresponse_state":"onboarding_failed"}}}}],"reject_activation":[{"call":{"method":"PUT","path":"/user_management/users/{user}","body":{"metadata":{"noresponse_state":"activation_rejected"}}}}],"restrict":[{"call":{"method":"PUT","path":"/user_management/users/{user}","body":{"metadata":{"noresponse_state":"restricted"}}}}],"unrestrict":[{"call":{"method":"PUT","path":"/user_management/users/{user}","body":{"metadata":{"noresponse_state":null}}}}],"revoke_sessions":[{"each":{"list":{"method":"GET","path":"/user_management/users/{user}/sessions","query":{"limit":"100"}},"page":{"kind":"cursor","param":"after","next":["list_metadata","after"]},"where":{"status":"active"}},"call":{"method":"POST","path":"/user_management/sessions/revoke","body":{"session_id":"{item}"}}}]}},"auth0":{"base_url":"https://{domain}/api/v2","actions":{"fail_onboarding":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":true}}}],"reject_activation":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":true}}}],"restrict":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":true}}}],"unrestrict":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":false}}}],"revoke_sessions":[{"call":{"method":"DELETE","path":"/users/{user}/sessions"},"fallback":{"status":403,"code":"feature_not_enabled","reports":"restrict","steps":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":true}}}]}},{"call":{"method":"DELETE","path":"/users/{user}/refresh-tokens"},"fallback":{"status":403,"code":"feature_not_enabled","steps":[{"each":{"list":{"method":"GET","path":"/device-credentials","query":{"user_id":"{user}","type":"refresh_token","per_page":"100"}},"page":{"kind":"index","param":"page","size":100}},"call":{"method":"DELETE","path":"/device-credentials/{item}"}},{"each":{"list":{"method":"GET","path":"/device-credentials","query":{"user_id":"{user}","type":"rotating_refresh_token","per_page":"100"}},"page":{"kind":"index","param":"page","size":100}},"call":{"method":"DELETE","path":"/device-credentials/{item}"}}]}}]}}},"limits":{"retries":4,"budget_ms":3000,"backoff_ms":250,"max_pages":100}}').freeze
+    TABLE = JSON.parse('{"lifecycle":{"onboarding":{"flow":"account_creation","on":{"allow":["activate"],"review":["fail_onboarding","revoke_sessions"],"block":["fail_onboarding","revoke_sessions"]}},"provisional":{"flow":"account_creation","on":{"allow":["activate"],"review":["reject_activation","revoke_sessions"],"block":["reject_activation","revoke_sessions"]}},"active":{"flow":"login","on":{"review":["revoke_sessions"],"block":["restrict","revoke_sessions"]}},"restricted":{"flow":"login","on":{},"reinstate":{"allow":["unrestrict"]}},"rejected":{"flow":"account_creation","on":{}}},"providers":{"clerk":{"base_url":"https://api.clerk.com/v1","actions":{"fail_onboarding":[{"call":{"method":"POST","path":"/users/{user}/ban"}}],"reject_activation":[{"call":{"method":"POST","path":"/users/{user}/ban"}}],"activate":[],"restrict":[{"call":{"method":"POST","path":"/users/{user}/ban"}}],"unrestrict":[{"call":{"method":"POST","path":"/users/{user}/unban"}}],"revoke_sessions":[{"each":{"list":{"method":"GET","path":"/sessions","query":{"user_id":"{user}","status":"active","limit":"100"}},"page":{"kind":"offset","param":"offset","size":100},"where":{"status":"active"}},"call":{"method":"POST","path":"/sessions/{item}/revoke"}}]}},"workos":{"base_url":"https://api.workos.com","actions":{"fail_onboarding":[{"call":{"method":"PUT","path":"/user_management/users/{user}","body":{"metadata":{"noresponse_state":"onboarding_failed"}}}}],"reject_activation":[{"call":{"method":"PUT","path":"/user_management/users/{user}","body":{"metadata":{"noresponse_state":"activation_rejected"}}}}],"activate":[],"restrict":[{"call":{"method":"PUT","path":"/user_management/users/{user}","body":{"metadata":{"noresponse_state":"restricted"}}}}],"unrestrict":[{"call":{"method":"PUT","path":"/user_management/users/{user}","body":{"metadata":{"noresponse_state":null}}}}],"revoke_sessions":[{"each":{"list":{"method":"GET","path":"/user_management/users/{user}/sessions","query":{"limit":"100"}},"page":{"kind":"cursor","param":"after","next":["list_metadata","after"]},"where":{"status":"active"}},"call":{"method":"POST","path":"/user_management/sessions/revoke","body":{"session_id":"{item}"}}}]}},"auth0":{"base_url":"https://{domain}/api/v2","actions":{"fail_onboarding":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":true}}}],"reject_activation":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":true}}}],"activate":[],"restrict":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":true}}}],"unrestrict":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":false}}}],"revoke_sessions":[{"call":{"method":"DELETE","path":"/users/{user}/sessions"},"fallback":{"status":403,"code":"feature_not_enabled","reports":"restrict","steps":[{"call":{"method":"PATCH","path":"/users/{user}","body":{"blocked":true}}}]}},{"call":{"method":"DELETE","path":"/users/{user}/refresh-tokens"},"fallback":{"status":403,"code":"feature_not_enabled","steps":[{"each":{"list":{"method":"GET","path":"/device-credentials","query":{"user_id":"{user}","type":"refresh_token","per_page":"100"}},"page":{"kind":"index","param":"page","size":100}},"call":{"method":"DELETE","path":"/device-credentials/{item}"}},{"each":{"list":{"method":"GET","path":"/device-credentials","query":{"user_id":"{user}","type":"rotating_refresh_token","per_page":"100"}},"page":{"kind":"index","param":"page","size":100}},"call":{"method":"DELETE","path":"/device-credentials/{item}"}}]}}]}}},"limits":{"retries":4,"budget_ms":3000,"backoff_ms":250,"max_pages":100}}').freeze
     LIMITS = TABLE.fetch('limits')
     # Every action a provider runs, as the table names them.
     ACTIONS = TABLE.fetch('providers').values.first.fetch('actions').keys.freeze
@@ -123,8 +125,8 @@ module NoResponse
         end
 
         if actions.nil? || actions.empty?
-          # An adverse or step_up decision that needs nothing still counts as handled.
-          record.call('none', 'applied') unless decision == 'allow'
+          # A decision that needs nothing, allow too, still counts as handled, so the account leaves the unenforced feed.
+          record.call('none', 'applied')
           return EnforcementResult.new(account: account, state: state, risk_version: risk_version, enforcements: enforcements)
         end
 

data/lib/no_response/models/operations/listaccounts_request.rb

@@ -21,7 +21,7 @@ module NoResponse
           Crystalline::Nilable.new(::Integer),
           {'query_param': {'field_name': "limit", 'style': "form", 'explode': true}}
         )
-        # true lists only accounts with a decision other than allow for some flow and no applied enforcement at their current risk_version.
+        # true lists only accounts with no applied enforcement at their current risk_version that have a decision other than allow for some flow or a hold no later applied enforcement resolved.
         field(
           :unenforced,
           Crystalline::Nilable.new(Crystalline::Boolean.new),

data/lib/no_response/models/shared/enforcement.rb

@@ -35,7 +35,7 @@ module NoResponse
             }
           }
         )
-        # What the workspace did in its identity provider: revoke_sessions (signed the account out everywhere), restrict (limited what the account can do), unrestrict (lifted an earlier restriction), fail_onboarding (stopped an account that was still onboarding), reject_activation (refused to activate a provisional account) or none (decided to take no action).
+        # What the workspace did in its identity provider: revoke_sessions (signed the account out everywhere), restrict (limited what the account can do), unrestrict (lifted an earlier restriction), fail_onboarding (stopped an account that was still onboarding), reject_activation (refused to activate a provisional account), activate (let a held onboarding or provisional account in) or none (decided to take no action).
         field(
           :action,
           Models::Shared::EnforcementAction,

data/lib/no_response/models/shared/enforcementaction.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # EnforcementAction - What the workspace did in its identity provider: revoke_sessions (signed the account out everywhere), restrict (limited what the account can do), unrestrict (lifted an earlier restriction), fail_onboarding (stopped an account that was still onboarding), reject_activation (refused to activate a provisional account) or none (decided to take no action).
+      # EnforcementAction - What the workspace did in its identity provider: revoke_sessions (signed the account out everywhere), restrict (limited what the account can do), unrestrict (lifted an earlier restriction), fail_onboarding (stopped an account that was still onboarding), reject_activation (refused to activate a provisional account), activate (let a held onboarding or provisional account in) or none (decided to take no action).
       class EnforcementAction
         include ::Crystalline::Enum
         enums do
@@ -13,6 +13,7 @@ module NoResponse
           UNRESTRICT = new("unrestrict")
           FAIL_ONBOARDING = new("fail_onboarding")
           REJECT_ACTIVATION = new("reject_activation")
+          ACTIVATE = new("activate")
           NONE = new("none")
         end
 

data/lib/no_response/models/shared/enforcementrequest.rb

@@ -27,7 +27,7 @@ module NoResponse
             }
           }
         )
-        # What the workspace did in its identity provider: revoke_sessions (signed the account out everywhere), restrict (limited what the account can do), unrestrict (lifted an earlier restriction), fail_onboarding (stopped an account that was still onboarding), reject_activation (refused to activate a provisional account) or none (decided to take no action).
+        # What the workspace did in its identity provider: revoke_sessions (signed the account out everywhere), restrict (limited what the account can do), unrestrict (lifted an earlier restriction), fail_onboarding (stopped an account that was still onboarding), reject_activation (refused to activate a provisional account), activate (let a held onboarding or provisional account in) or none (decided to take no action).
         field(
           :action,
           Models::Shared::EnforcementAction,

data/lib/no_response/sdkconfiguration.rb

@@ -95,9 +95,9 @@ module NoResponse
 
       @language = "ruby"
       @openapi_doc_version = "1"
-      @sdk_version = "7.1.0"
+      @sdk_version = "7.1.2"
       @gen_version = "internal"
-      @user_agent = "noresponse-sdk/ruby 7.1.0 internal 1 noresponse"
+      @user_agent = "noresponse-sdk/ruby 7.1.2 internal 1 noresponse"
     end
 
     sig { returns([String, T::Hash[Symbol, String]]) }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: noresponse
 version: !ruby/object:Gem::Version
-  version: 7.1.0
+  version: 7.1.2
 platform: ruby
 authors:
 - NoResponse