noresponse 7.1.5 → 7.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: afed5c860eee2ebae15e91a578ef6e6c9c7494834afec0af08c6c71a892a9ee1
-  data.tar.gz: 653448a81ccaa9d249e97059952e2a68ad4214fb3e7b181e93a7df7d67ff047c
+  metadata.gz: a97a4b3919011a607db3752a122ba7eb9a565b043606a6334a53f59b2f1da769
+  data.tar.gz: 7bc76a1e03c80c265616b71450aaac189791a5cc306e6f12ad48844cd7f2e0de
 SHA512:
-  metadata.gz: f7e8aaf86aa6d8943735f8a5f1082b35b7ba5faba07743ae0b484480bb5c6ba15c7c97e55dcbea4076fd7f6e41b10cf28a24ae95aeab2512ae3e8b4d2500abc2
-  data.tar.gz: d7d59913e1bc556429062e51a9736b588d258b8113b7714ea26e991387bfc785c7e79c77c94f13885a8fc48302d0e251f97c96b5909dfcd0c756ce82c6a9900a
+  metadata.gz: e45246fd1b8c282d8b0baaeaec0e59edb70d3313c32007f80fd94170673a5168f526c149b883640af22479af0ae3917a39184ad2b56d524928b97be8cb80217d
+  data.tar.gz: b9bf9c806e2dd601ced259236ea4593458e8c2e4ccaba515e64225458c79d44c67e2daea3915a897e642f74f263c415f4a203f3619ca4033499b7f9e867356a7

data/lib/no_response/integrations.rb

@@ -47,7 +47,7 @@ module NoResponse
     }
     def create(request:, timeout_ms: nil, http_headers: nil)
       # create - Register a hosted provider integration.
-      # Registers a WorkOS or Auth0 integration and returns its hosted endpoint, url, so a sign-up or sign-in is scored with no server of your own. For WorkOS, send the Actions signing secret from the WorkOS dashboard and point the user registration and authentication Actions at url. For Auth0, the answer's secret is the shared secret of the NoResponse Auth0 Action, shown once: store it as an Action secret. hook_points defaults to both pre_registration and post_login; an event that is not listed is allowed without an assessment. The endpoint waits for the full assessment for at most 2.5 seconds (WorkOS) or 4.5 seconds (Auth0), denies only when risk.block is true and allows on any failure. Requires the integrations scope; at most 10 per account. Not idempotent: a retry after a lost answer registers another integration.
+      # Registers a WorkOS, Auth0 or Supabase integration and returns its hosted endpoint, url, so a sign-up or sign-in is scored with no server of your own. For WorkOS, send the Actions signing secret from the WorkOS dashboard and point the user registration and authentication Actions at url. For Supabase, send the hook secret Supabase generates (v1,whsec_...) and set url as the Before User Created hook's HTTPS endpoint. For Auth0, the answer's secret is the shared secret of the NoResponse Auth0 Action, shown once: store it as an Action secret. hook_points defaults to every hook point the platform has (Supabase has only pre_registration); an event that is not listed is allowed without an assessment. The endpoint waits for the full assessment for at most 2.5 seconds (WorkOS, Supabase) or 4.5 seconds (Auth0), denies only when risk.block is true and allows on any failure. Requires the integrations scope; at most 10 per account. Not idempotent: a retry after a lost answer registers another integration.
       url, params = @sdk_configuration.get_server_details
       base_url = Utils.template_url(url, params)
       url = "#{base_url}/v1/integrations"
@@ -876,7 +876,7 @@ module NoResponse
     }
     def rotate(body:, integration_id:, timeout_ms: nil, http_headers: nil)
       # rotate - Replace an integration's secret.
-      # For Auth0, send {} and the answer's secret is the new shared secret, shown once. For WorkOS, regenerate the Actions secret in the WorkOS dashboard and send it as signing_secret. The replaced secret is still accepted for 24 hours (previous_secret_expires_at). Requires the integrations scope. Not idempotent: a retry after a lost answer rotates again.
+      # For Auth0, send {} and the answer's secret is the new shared secret, shown once. For WorkOS, regenerate the Actions secret in the WorkOS dashboard and send it as signing_secret; for Supabase, generate a new hook secret in the Supabase dashboard and send it as signing_secret. The replaced secret is still accepted for 24 hours (previous_secret_expires_at). Requires the integrations scope. Not idempotent: a retry after a lost answer rotates again.
       request = Models::Operations::RotateIntegrationSecretRequest.new(
         integration_id: integration_id,
         body: body

data/lib/no_response/models/shared/assessmentrequestidentifiers.rb

@@ -27,7 +27,7 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("phone")}}
         )
-        # The full name as the user typed it, 1 to 128 characters with no control or invisible characters. It is used only to match names in the evidence.
+        # The full name as the user typed it, 1 to 128 characters with no control or invisible characters. It is searched in breach data and matched against names in the evidence. A row holding the signup's own email or username confirms the name; rows sharing another identifier add to the identity's history.
         field(
           :name,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/breach.rb

@@ -22,7 +22,7 @@ module NoResponse
             }
           }
         )
-        # The submitted identifier a breach table matched on: email or username. Phone and name are not breach selectors.
+        # The submitted email or username whose own search matched the table. A submitted full name is searched as well, and what it finds feeds the identity's reasons rather than this list.
         field(
           :matched_on,
           Models::Shared::BreachSelector,

data/lib/no_response/models/shared/breachselector.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # BreachSelector - The submitted identifier a breach table matched on: email or username. Phone and name are not breach selectors.
+      # BreachSelector - The submitted email or username whose own search matched the table. A submitted full name is searched as well, and what it finds feeds the identity's reasons rather than this list.
       class BreachSelector
         include ::Crystalline::Enum
         enums do

data/lib/no_response/models/shared/integrationplatform.rb

@@ -10,6 +10,7 @@ module NoResponse
         enums do
           WORKOS = new("workos")
           AUTH0 = new("auth0")
+          SUPABASE = new("supabase")
         end
 
         open!

data/lib/no_response/models/shared/integrationrequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/integrations body. Registers a hosted endpoint for one authentication provider. The workspace is the API key that signs the request, so the body has no workspace field and refuses one like any other unknown member. A WorkOS integration needs signing_secret, the Actions secret shown in the WorkOS dashboard, which NoResponse uses to verify each Action request and to sign its answer. An Auth0 integration sends no signing_secret: NoResponse generates the shared secret and returns it once.
+      # POST /v1/integrations body. Registers a hosted endpoint for one authentication provider. The workspace is the API key that signs the request, so the body has no workspace field and refuses one like any other unknown member. A WorkOS integration needs signing_secret, the Actions secret shown in the WorkOS dashboard, which NoResponse uses to verify each Action request and to sign its answer. A Supabase integration needs signing_secret, the hook secret Supabase generates for a Before User Created HTTPS hook (v1,whsec_ and base64), which NoResponse uses to verify each call. An Auth0 integration sends no signing_secret: NoResponse generates the shared secret and returns it once.
       class IntegrationRequest
         extend T::Sig
         include Crystalline::MetadataFields
@@ -21,13 +21,13 @@ module NoResponse
             }
           }
         )
-        # The provider events the endpoint scores. Default both: pre_registration (WorkOS user registration Action, Auth0 pre-user-registration trigger) and post_login (WorkOS authentication Action, Auth0 post-login trigger). An event that is not listed is answered allow without an assessment.
+        # The provider events the endpoint scores. Default every hook point the platform has: pre_registration (WorkOS user registration Action, Auth0 pre-user-registration trigger, Supabase Before User Created hook) and post_login (WorkOS authentication Action, Auth0 post-login trigger). Supabase has only pre_registration, so a Supabase integration that lists post_login is refused. An event that is not listed is answered allow without an assessment.
         field(
           :hook_points,
           Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IntegrationHookPoint)),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("hook_points")}}
         )
-        # The WorkOS Actions signing secret, as the WorkOS dashboard shows it: 16 to 256 printable ASCII characters with no spaces. It is stored sealed and is not returned.
+        # The WorkOS Actions signing secret or the Supabase hook secret, as the provider's dashboard shows it: 16 to 256 printable ASCII characters with no spaces. It is stored sealed and is not returned.
         field(
           :signing_secret,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/integrationrotationrequest.rb

@@ -4,12 +4,12 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/integrations/{integration_id}/rotate body. For an Auth0 integration send {}: NoResponse generates a new shared secret and returns it once. For a WorkOS integration send the new signing_secret after regenerating it in the WorkOS dashboard. Either way the previous secret is still accepted for 24 hours, so the provider can be switched over without a refused call.
+      # POST /v1/integrations/{integration_id}/rotate body. For an Auth0 integration send {}: NoResponse generates a new shared secret and returns it once. For a WorkOS or Supabase integration send the new signing_secret after regenerating it in the provider's dashboard. Either way the previous secret is still accepted for 24 hours, so the provider can be switched over without a refused call.
       class IntegrationRotationRequest
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The WorkOS Actions signing secret, as the WorkOS dashboard shows it: 16 to 256 printable ASCII characters with no spaces. It is stored sealed and is not returned.
+        # The WorkOS Actions signing secret or the Supabase hook secret, as the provider's dashboard shows it: 16 to 256 printable ASCII characters with no spaces. It is stored sealed and is not returned.
         field(
           :signing_secret,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/reasoncode.rb

@@ -50,6 +50,12 @@ module NoResponse
           EMAIL_DOMAIN_NONEXISTENT = new("email_domain_nonexistent")
           FORUM_SANCTIONED = new("forum_sanctioned")
           PRIOR_PAYMENT_ABUSE = new("prior_payment_abuse")
+          IP_HISTORY_MATCH = new("ip_history_match")
+          IDENTITY_ATTRIBUTE_CONFLICT = new("identity_attribute_conflict")
+          IMPOSSIBLE_IDENTITY_AGE = new("impossible_identity_age")
+          BREACH_SHARED_IP = new("breach_shared_ip")
+          NATIONALITY_MISMATCH = new("nationality_mismatch")
+          MINOR_IDENTITY = new("minor_identity")
         end
 
         open!

data/lib/no_response/sdkconfiguration.rb

@@ -95,9 +95,9 @@ module NoResponse
 
       @language = "ruby"
       @openapi_doc_version = "1"
-      @sdk_version = "7.1.5"
+      @sdk_version = "7.1.7"
       @gen_version = "internal"
-      @user_agent = "noresponse-sdk/ruby 7.1.5 internal 1 noresponse"
+      @user_agent = "noresponse-sdk/ruby 7.1.7 internal 1 noresponse"
     end
 
     sig { returns([String, T::Hash[Symbol, String]]) }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: noresponse
 version: !ruby/object:Gem::Version
-  version: 7.1.5
+  version: 7.1.7
 platform: ruby
 authors:
 - NoResponse