workos 10.0.0 → 10.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ae1955beb480140b9d2077fc53a2bfc640f2f16eafd98e19f0d786c80772fd6f
-  data.tar.gz: aa84bb04105d0279fa37ed0230839cc1b2c9e2b462643e49f4478a78fff1c4e4
+  metadata.gz: 63f6d02af5ecf1ab9f62af255a77ef281f8763b3e6c56feeb6ee87da3817c29d
+  data.tar.gz: 1691eb9636159a73295a6baabf6b63103bfc868f4f7660e49ae12644d7f27efa
 SHA512:
-  metadata.gz: b8a6150249b80f0908f74faa1425257036944f6b7d1a2a9950575d9a1d4116a42d5cbd97180702810b318cc736bdc3ac72d1ab283ff35bb04482bec1d19244f9
-  data.tar.gz: 330aada99bb23953b0914de7fd0dc9f23a60dc3203568d68e805e1fd5c7ff6217a53dbd3b24ca2e0989dcf684e4cc97598ea5a158b43daeef314c407ab8898c6
+  metadata.gz: 7b421f5433d3001c3dcb8de0aeddf93805bcbddd73c1a9c475b65f6c66b4e1a442d2a6eca5c37444f9dc97481abf5c7f05799bd914431de5411f368566e85a99
+  data.tar.gz: c6376c12ff9efe67ac13aaf63e63a3c5ddcad6926272b0cc1c36cde0ac4ed858c10157b3ee064143152a73c28674d848ecd81f200a2f64b1e7ae2a23def4c44a

data/.claude/CLAUDE.md

@@ -0,0 +1,38 @@
+# WorkOS Ruby SDK — Agent Context
+
+Most code in this repository is **auto-generated**. It is emitted by the
+oagen pipeline from the WorkOS OpenAPI spec. It is not hand-written here,
+and most bugs in it cannot be fixed here.
+
+## The generation pipeline
+
+| Repo | Role |
+| --- | --- |
+| [workos/openapi-spec](https://github.com/workos/openapi-spec) | Source of truth for the API surface (the OpenAPI spec, exported by the WorkOS API) and the orchestration entrypoint for all SDK generation |
+| [workos/oagen](https://github.com/workos/oagen) | The generator engine (spec → IR → code) |
+| [workos/oagen-emitters](https://github.com/workos/oagen-emitters) | The per-language emitters, including the Ruby emitter that produces this repo's code |
+
+Regeneration runs from a checkout of `openapi-spec`, never from this repo:
+
+```bash
+npm run sdk:generate -- --lang ruby --output workos-ruby
+```
+
+## Generated vs. hand-maintained code
+
+- Generated files begin with the header `# This file is auto-generated by oagen. Do not edit.` — treat them as build artifacts.
+- Hand-maintained code is fenced with `@oagen-ignore-start` / `@oagen-ignore-end` markers, or lives in files marked `@oagen-ignore-file`. Only this code is editable in this repo.
+
+## Where to fix an issue
+
+| Symptom | Fix it in |
+| --- | --- |
+| Wrong or missing endpoint, field, type, or enum value | [workos/openapi-spec](https://github.com/workos/openapi-spec) (or the WorkOS API that exports the spec) |
+| Generated Ruby code is broken or un-idiomatic | [workos/oagen-emitters](https://github.com/workos/oagen-emitters) |
+| Generator behavior: naming, IR, pagination, compat checks | [workos/oagen](https://github.com/workos/oagen) |
+| Code inside `@oagen-ignore` fences or ignore-marked files | This repo — edit normally |
+
+Don't hand-edit a file that has the generated header — the next
+`sdk:generate` run silently overwrites it. Instead, fix the emitter or the
+spec upstream and regenerate. If a requested fix lands in a generated file,
+say so and point at the upstream repo rather than patching it here.

data/.last-synced-sha

@@ -1 +1 @@
-f40851a620a1ba0badec95e80faac475382c8dd0
+a07d8e7988d035c2d727787f18f64d71b4b89a84

data/.oagen-manifest.json

@@ -279,6 +279,7 @@
     "lib/workos/pipes/data_integrations_list_response_data.rb",
     "lib/workos/pipes/data_integrations_list_response_data_connected_account.rb",
     "lib/workos/pipes/data_integrations_upsert_api_key_request.rb",
+    "lib/workos/pipes/data_integrations_upsert_client_credentials_request.rb",
     "lib/workos/pipes/data_integrations_vend_credentials_request.rb",
     "lib/workos/pipes/update_custom_provider_definition.rb",
     "lib/workos/pipes/update_data_integration.rb",
@@ -312,6 +313,8 @@
     "lib/workos/shared/agent_registration_expired_data.rb",
     "lib/workos/shared/agent_registration_organization_switched.rb",
     "lib/workos/shared/agent_registration_organization_switched_data.rb",
+    "lib/workos/shared/agent_registration_refreshed.rb",
+    "lib/workos/shared/agent_registration_refreshed_data.rb",
     "lib/workos/shared/agent_registration_revoked.rb",
     "lib/workos/shared/agent_registration_revoked_data.rb",
     "lib/workos/shared/auth_method_mismatch_error.rb",
@@ -405,6 +408,7 @@
     "lib/workos/types/create_data_integration_auth_methods.rb",
     "lib/workos/types/create_user_invite_options_locale.rb",
     "lib/workos/types/create_user_password_hash_type.rb",
+    "lib/workos/types/create_user_password_salt_position.rb",
     "lib/workos/types/create_webhook_endpoint_events.rb",
     "lib/workos/types/custom_provider_definition_authenticate_via.rb",
     "lib/workos/types/data_integration_access_token_response_error.rb",
@@ -484,6 +488,7 @@
     "lib/workos/types/sso_provider.rb",
     "lib/workos/types/update_custom_provider_definition_authenticate_via.rb",
     "lib/workos/types/update_user_password_hash_type.rb",
+    "lib/workos/types/update_user_password_salt_position.rb",
     "lib/workos/types/update_webhook_endpoint_events.rb",
     "lib/workos/types/update_webhook_endpoint_status.rb",
     "lib/workos/types/user_identities_get_item_provider.rb",
@@ -732,6 +737,8 @@
     "rbi/workos/agent_registration_expired_data.rbi",
     "rbi/workos/agent_registration_organization_switched.rbi",
     "rbi/workos/agent_registration_organization_switched_data.rbi",
+    "rbi/workos/agent_registration_refreshed.rbi",
+    "rbi/workos/agent_registration_refreshed_data.rbi",
     "rbi/workos/agent_registration_revoked.rbi",
     "rbi/workos/agent_registration_revoked_data.rbi",
     "rbi/workos/agents.rbi",
@@ -921,6 +928,7 @@
     "rbi/workos/data_integrations_list_response_data.rbi",
     "rbi/workos/data_integrations_list_response_data_connected_account.rbi",
     "rbi/workos/data_integrations_upsert_api_key_request.rbi",
+    "rbi/workos/data_integrations_upsert_client_credentials_request.rbi",
     "rbi/workos/data_integrations_vend_credentials_request.rbi",
     "rbi/workos/decrypt_request.rbi",
     "rbi/workos/decrypt_response.rbi",
@@ -2186,6 +2194,10 @@
     "GET /audit_logs/exports/{auditLogExportId}": {
       "sdkMethod": "get_export",
       "service": "audit_logs"
+    },
+    "PUT /data-integrations/{slug}/client-credentials": {
+      "sdkMethod": "update_data_integration_client_credentials",
+      "service": "pipes"
     }
   }
 }

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "10.0.0"
+  ".": "10.2.0"
 }

data/AGENTS.md

@@ -0,0 +1 @@
+.claude/CLAUDE.md

data/CHANGELOG.md

@@ -1,5 +1,92 @@
 # Changelog
 
+## [10.2.0](https://github.com/workos/workos-ruby/compare/v10.1.0...v10.2.0) (2026-08-11)
+
+* [#533](https://github.com/workos/workos-ruby/pull/533) feat(generated)!: regenerate from spec (2 changes)
+
+  **⚠️ Breaking**
+  * **[events](https://workos.com/docs/reference/events)**:
+    * Changed required status for parameter `Events.list.events`
+
+  **Features**
+  * **[groups](https://workos.com/docs/reference/groups)**:
+    * Added parameter `Groups.list.search`
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added `client_id` to `ConnectedAccount`
+    * Added `client_secret_last_4` to `ConnectedAccount`
+    * Added `config` to `ConnectedAccount`
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added `client_id` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `client_secret_last_4` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `config` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Changed errors for endpoint `POST /data-integrations/{slug}/credentials`
+    * Made `CustomProviderDefinition.authorization_url` optional
+    * Made `CustomProviderDefinition.token_url` optional
+    * Added model `DataIntegrationsUpsertClientCredentialsRequest`
+    * Added `client_credentials` to `CreateDataIntegrationAuthMethods`
+    * Added endpoint `PUT /data-integrations/{slug}/client-credentials`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added `XOAuth` to `ConnectionType`
+    * Added `XOAuth` to `ProfileConnectionType`
+    * Added `XOAuth` to `ConnectionsConnectionType`
+    * Added `GrokOAuth` to `ConnectionType`
+    * Added `GrokOAuth` to `ProfileConnectionType`
+    * Added `GrokOAuth` to `ConnectionsConnectionType`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `DELETE /user_management/users/{id}`
+    * Added `password_salt_position` to `CreateUser`
+    * Added `password_salt_position` to `UpdateUser`
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.verification_id` optional
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.phone_number` optional
+    * Added enum `CreateUserPasswordSaltPosition`
+    * Added enum `UpdateUserPasswordSaltPosition`
+    * Added `XOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `XOAuth` to `UserIdentitiesGetItemProvider`
+    * Added `GrokOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `GrokOAuth` to `UserIdentitiesGetItemProvider`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.registration.refreshed` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.refreshed` to `UpdateWebhookEndpointEvents`
+
+  **Fixes**
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Changed the type of `DataIntegration.credentials`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `POST /user_management/authenticate`
+    * Changed errors for endpoint `POST /user_management/users`
+    * Changed errors for endpoint `PUT /user_management/users/{id}`
+
+## [10.1.0](https://github.com/workos/workos-ruby/compare/v10.0.0...v10.1.0) (2026-07-28)
+
+### Features
+
+* replace hand-written URL builders with generated ones ([b162486](https://github.com/workos/workos-ruby/commit/b1624866137d8364dda1726b0302b70bed00a75c))
+
+* [#531](https://github.com/workos/workos-ruby/pull/531) fix(generated): regenerate from spec
+
+  **Features**
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added `config` to `DataIntegrationsGetDataIntegrationAuthorizeUrlRequest`
+    * Added `client_credentials` to `DataIntegrationAuthMethods`
+    * Added `client_credentials` to `DataIntegrationsListResponseDataAuthMethods`
+    * Added `client_credentials` to `DataIntegrationsListResponseDataConnectedAccountAuthMethod`
+    * Added `config` to Pipes models
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added `client_credentials` to `ConnectedAccountAuthMethod`
+
+  **Fixes**
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `POST /user_management/invitations`
+    * Changed errors for endpoint `POST /user_management/invitations/{id}/resend`
+    * Changed errors for endpoint `POST /user_management/magic_auth`
+    * Changed errors for endpoint `POST /user_management/authenticate`
+
+* [#532](https://github.com/workos/workos-ruby/pull/532) fix(generated): regenerate from spec
+
+  **Fixes**
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Removed `callback_endpoint` from `Connection`
+
 ## [10.0.0](https://github.com/workos/workos-ruby/compare/v9.5.0...v10.0.0) (2026-07-22)
 
 ### Bug Fixes

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    workos (10.0.0)
+    workos (10.2.0)
       jwt (~> 3.1)
       logger (~> 1.7)
       zeitwerk (~> 2.6)
@@ -153,7 +153,7 @@ CHECKSUMS
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
-  workos (10.0.0)
+  workos (10.2.0)
   yard (0.9.44) sha256=eb087e9b631ccd887b049f303d489963945452d5e2a7eb49a5a74a7cf6887f28
   yard-markdown (0.7.1) sha256=06c378632dfe7ba053be9ba469eb4701aa0470e36bcf7e5546f353eb90c1bfd1
   zeitwerk (2.7.5) sha256=d8da92128c09ea6ec62c949011b00ed4a20242b255293dd66bf41545398f73dd

data/lib/workos/connect.rb

@@ -135,7 +135,7 @@ module WorkOS
       result
     end
 
-    # Create oauth application.
+    # Create OAuth application.
     # @param name [String]
     # @param is_first_party [Boolean]
     # @param description [String, nil]
@@ -175,7 +175,7 @@ module WorkOS
       WorkOS::ConnectApplication.new(response.body)
     end
 
-    # Create m2m application.
+    # Create M2M application.
     # @param name [String]
     # @param organization_id [String]
     # @param description [String, nil]

data/lib/workos/events.rb

@@ -15,18 +15,18 @@ module WorkOS
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
     # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
-    # @param events [Array<String>, nil] Filter events by one or more event types (e.g. `dsync.user.created`).
+    # @param events [Array<String>] Filter events by one or more event types (e.g. `dsync.user.created`).
     # @param range_start [String, nil] ISO-8601 date string to filter events created after this date.
     # @param range_end [String, nil] ISO-8601 date string to filter events created before this date.
     # @param organization_id [String, nil] Filter events by the [Organization](https://workos.com/docs/reference/organization) that the event is associated with.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::EventSchema>]
     def list_events(
+      events:,
       before: nil,
       after: nil,
       limit: 10,
       order: "desc",
-      events: nil,
       range_start: nil,
       range_end: nil,
       organization_id: nil,

data/lib/workos/groups.rb

@@ -16,6 +16,7 @@ module WorkOS
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
     # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param search [String, nil] Search groups by name or by group ID.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::Group>]
     def list_organization_groups(
@@ -24,13 +25,15 @@ module WorkOS
       after: nil,
       limit: 10,
       order: "desc",
+      search: nil,
       request_options: {}
     )
       params = {
         "before" => before,
         "after" => after,
         "limit" => limit,
-        "order" => order
+        "order" => order,
+        "search" => search
       }.compact
       response = @client.request(
         method: :get,
@@ -46,13 +49,14 @@ module WorkOS
           after: cursor,
           limit: limit,
           order: order,
+          search: search,
           request_options: request_options
         )
       }
       WorkOS::Types::ListStruct.from_response(
         response,
         model: WorkOS::Group,
-        filters: {organization_id: organization_id, before: before, limit: limit, order: order},
+        filters: {organization_id: organization_id, before: before, limit: limit, order: order, search: search},
         fetch_next: fetch_next
       )
     end

data/lib/workos/pipes/connected_account.rb

@@ -12,6 +12,9 @@ module WorkOS
       scopes: :scopes,
       auth_method: :auth_method,
       api_key_last_4: :api_key_last_4,
+      client_id: :client_id,
+      client_secret_last_4: :client_secret_last_4,
+      config: :config,
       state: :state,
       created_at: :created_at,
       updated_at: :updated_at
@@ -25,6 +28,9 @@ module WorkOS
       :scopes,
       :auth_method,
       :api_key_last_4,
+      :client_id,
+      :client_secret_last_4,
+      :config,
       :state,
       :created_at,
       :updated_at
@@ -38,6 +44,9 @@ module WorkOS
       @scopes = hash[:scopes] || []
       @auth_method = hash[:auth_method]
       @api_key_last_4 = hash[:api_key_last_4]
+      @client_id = hash[:client_id]
+      @client_secret_last_4 = hash[:client_secret_last_4]
+      @config = hash[:config] || {}
       @state = hash[:state]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

data/lib/workos/pipes/create_data_integration.rb

@@ -10,6 +10,7 @@ module WorkOS
       enabled: :enabled,
       scopes: :scopes,
       auth_methods: :auth_methods,
+      config: :config,
       credentials: :credentials,
       api_key: :api_key,
       custom_provider: :custom_provider
@@ -21,6 +22,7 @@ module WorkOS
       :enabled,
       :scopes,
       :auth_methods,
+      :config,
       :credentials,
       :api_key,
       :custom_provider
@@ -32,6 +34,7 @@ module WorkOS
       @enabled = hash[:enabled]
       @scopes = hash[:scopes] || []
       @auth_methods = hash[:auth_methods] || []
+      @config = hash[:config] || {}
       @credentials = hash[:credentials] ? WorkOS::DataIntegrationCredentialsInput.new(hash[:credentials]) : nil
       @api_key = hash[:api_key] ? WorkOS::ApiKeyInstallation.new(hash[:api_key]) : nil
       @custom_provider = hash[:custom_provider] ? WorkOS::CustomProviderDefinition.new(hash[:custom_provider]) : nil

data/lib/workos/pipes/data_integration.rb

@@ -17,6 +17,7 @@ module WorkOS
       auth_methods: :auth_methods,
       credentials: :credentials,
       installation: :installation,
+      config: :config,
       custom_provider: :custom_provider,
       created_at: :created_at,
       updated_at: :updated_at
@@ -35,6 +36,7 @@ module WorkOS
       :auth_methods,
       :credentials,
       :installation,
+      :config,
       :custom_provider,
       :created_at,
       :updated_at
@@ -53,6 +55,7 @@ module WorkOS
       @auth_methods = hash[:auth_methods] || []
       @credentials = hash[:credentials] ? WorkOS::DataIntegrationCredential.new(hash[:credentials]) : nil
       @installation = hash[:installation] ? WorkOS::DataIntegrationInstallation.new(hash[:installation]) : nil
+      @config = hash[:config] || {}
       @custom_provider = hash[:custom_provider] ? WorkOS::DataIntegrationCustomProvider.new(hash[:custom_provider]) : nil
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

data/lib/workos/pipes/data_integrations_get_data_integration_authorize_url_request.rb

@@ -7,19 +7,22 @@ module WorkOS
     HASH_ATTRS = {
       user_id: :user_id,
       organization_id: :organization_id,
-      return_to: :return_to
+      return_to: :return_to,
+      config: :config
     }.freeze
 
     attr_accessor \
       :user_id,
       :organization_id,
-      :return_to
+      :return_to,
+      :config
 
     def initialize(json)
       hash = self.class.normalize(json)
       @user_id = hash[:user_id]
       @organization_id = hash[:organization_id]
       @return_to = hash[:return_to]
+      @config = hash[:config] || {}
     end
   end
 end

data/lib/workos/pipes/data_integrations_list_response_data_connected_account.rb

@@ -12,6 +12,9 @@ module WorkOS
       scopes: :scopes,
       auth_method: :auth_method,
       api_key_last_4: :api_key_last_4,
+      client_id: :client_id,
+      client_secret_last_4: :client_secret_last_4,
+      config: :config,
       state: :state,
       created_at: :created_at,
       updated_at: :updated_at,
@@ -29,6 +32,9 @@ module WorkOS
       :scopes,
       :auth_method,
       :api_key_last_4,
+      :client_id,
+      :client_secret_last_4,
+      :config,
       :state,
       :created_at,
       :updated_at
@@ -49,6 +55,9 @@ module WorkOS
       @scopes = hash[:scopes] || []
       @auth_method = hash[:auth_method]
       @api_key_last_4 = hash[:api_key_last_4]
+      @client_id = hash[:client_id]
+      @client_secret_last_4 = hash[:client_secret_last_4]
+      @config = hash[:config] || {}
       @state = hash[:state]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

data/lib/workos/pipes/data_integrations_upsert_client_credentials_request.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class DataIntegrationsUpsertClientCredentialsRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      user_id: :user_id,
+      organization_id: :organization_id,
+      client_id: :client_id,
+      client_secret: :client_secret,
+      config: :config
+    }.freeze
+
+    attr_accessor \
+      :user_id,
+      :organization_id,
+      :client_id,
+      :client_secret,
+      :config
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @user_id = hash[:user_id]
+      @organization_id = hash[:organization_id]
+      @client_id = hash[:client_id]
+      @client_secret = hash[:client_secret]
+      @config = hash[:config] || {}
+    end
+  end
+end

data/lib/workos/pipes.rb

@@ -59,7 +59,8 @@ module WorkOS
     # @param description [String, nil] An optional description of the Data Integration.
     # @param enabled [Boolean, nil] Whether the Data Integration is enabled. Defaults to `false`.
     # @param scopes [Array<String>, nil] The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted.
-    # @param auth_methods [Array<WorkOS::Types::CreateDataIntegrationAuthMethods>, nil] How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request).
+    # @param auth_methods [Array<WorkOS::Types::CreateDataIntegrationAuthMethods>, nil] How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request). Use `["client_credentials"]` to declare a client-credentials integration; `credentials` is likewise not required and client credentials are supplied per-tenant.
+    # @param config [Hash{String => String}, nil] Provider-specific config values (e.g. a Snowflake `account`), keyed by the config field. Only fields the built-in provider declares are accepted.
     # @param credentials [WorkOS::DataIntegrationCredentialsInput, nil] The OAuth credentials to configure for the Data Integration. Required for OAuth integrations; omit when `auth_methods` is `["api_key"]`.
     # @param api_key [WorkOS::ApiKeyInstallation, nil] An optional API key to install for the first tenant on an `api_key` integration. Omit to declare a keyless integration; tenants can be added later via the per-installation API key path.
     # @param custom_provider [WorkOS::CustomProviderDefinition, nil] The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider.
@@ -71,6 +72,7 @@ module WorkOS
       enabled: nil,
       scopes: WorkOS::OMIT,
       auth_methods: nil,
+      config: nil,
       credentials: nil,
       api_key: nil,
       custom_provider: nil,
@@ -80,6 +82,7 @@ module WorkOS
         "provider" => provider,
         "enabled" => enabled,
         "auth_methods" => auth_methods,
+        "config" => config,
         "credentials" => credentials,
         "api_key" => api_key,
         "custom_provider" => custom_provider
@@ -210,6 +213,7 @@ module WorkOS
     # @param user_id [String] The ID of the user to authorize.
     # @param organization_id [String, nil] An organization ID to scope the authorization to a specific organization.
     # @param return_to [String, nil] The URL to redirect the user to after authorization.
+    # @param config [Hash{String => String}, nil] Connect-time config values for the provider-declared `installation`-scope fields (e.g. a Zendesk `subdomain`), keyed by the config field. Only fields the provider declares may be supplied, and required fields must be provided unless already pinned on the integration.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::DataIntegrationAuthorizeUrlResponse]
     def authorize_data_integration(
@@ -217,12 +221,14 @@ module WorkOS
       user_id:,
       organization_id: nil,
       return_to: nil,
+      config: nil,
       request_options: {}
     )
       body = {
         "user_id" => user_id,
         "organization_id" => organization_id,
-        "return_to" => return_to
+        "return_to" => return_to,
+        "config" => config
       }.compact
       response = @client.request(
         method: :post,
@@ -236,6 +242,43 @@ module WorkOS
       result
     end
 
+    # Upsert client credentials for a connected account
+    # @param slug [String] The identifier of the integration.
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization.
+    # @param client_id [String] The OAuth client ID to store for this integration.
+    # @param client_secret [String] The OAuth client secret to store for this integration.
+    # @param config [Hash{String => String}, nil] Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccount]
+    def update_data_integration_client_credentials(
+      slug:,
+      user_id:,
+      client_id:,
+      client_secret:,
+      organization_id: nil,
+      config: nil,
+      request_options: {}
+    )
+      body = {
+        "user_id" => user_id,
+        "organization_id" => organization_id,
+        "client_id" => client_id,
+        "client_secret" => client_secret,
+        "config" => config
+      }.compact
+      response = @client.request(
+        method: :put,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/client-credentials",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccount.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Vend credentials for a connected account
     # @param slug [String] The identifier of the integration.
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.

data/lib/workos/pipes_provider/configure_data_integration_body.rb

@@ -8,14 +8,16 @@ module WorkOS
       enabled: :enabled,
       scopes: :scopes,
       client_id: :client_id,
-      client_secret: :client_secret
+      client_secret: :client_secret,
+      config: :config
     }.freeze
 
     attr_accessor \
       :enabled,
       :scopes,
       :client_id,
-      :client_secret
+      :client_secret,
+      :config
 
     def initialize(json)
       hash = self.class.normalize(json)
@@ -23,6 +25,7 @@ module WorkOS
       @scopes = hash[:scopes] || []
       @client_id = hash[:client_id]
       @client_secret = hash[:client_secret]
+      @config = hash[:config] || {}
     end
   end
 end

data/lib/workos/pipes_provider/data_integration_configuration_response.rb

@@ -12,6 +12,7 @@ module WorkOS
       name: :name,
       enabled: :enabled,
       scopes: :scopes,
+      config: :config,
       created_at: :created_at,
       updated_at: :updated_at,
       credentials: :credentials
@@ -25,6 +26,7 @@ module WorkOS
       :name,
       :enabled,
       :scopes,
+      :config,
       :created_at,
       :updated_at,
       :credentials
@@ -38,6 +40,7 @@ module WorkOS
       @name = hash[:name]
       @enabled = hash[:enabled]
       @scopes = hash[:scopes] || []
+      @config = hash[:config] || {}
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
       @credentials = hash[:credentials] ? WorkOS::DataIntegrationCredentials.new(hash[:credentials]) : nil

data/lib/workos/pipes_provider.rb

@@ -36,6 +36,7 @@ module WorkOS
     # @param scopes [Array<String>, nil] The OAuth scopes to request for the organization. Pass `null` to inherit the provider scopes.
     # @param client_id [String, nil] The OAuth client ID of the organization's own application. Must be provided together with `client_secret`, and only for providers whose credentials are supplied by the organization.
     # @param client_secret [String, nil] The OAuth client secret of the organization's own application. Must be provided together with `client_id`.
+    # @param config [Hash{String => String}, nil] Provider-specific config values to set for the organization, keyed by config field. Only fields the provider declares are accepted, and each value must match that field's pattern. Accepted only for providers whose credentials are organization-managed; for shared or custom credential providers, config belongs on the integration itself (via the data-integrations API) and supplying it here is rejected.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::DataIntegrationConfigurationResponse]
     def update_organization_data_integration_configuration(
@@ -45,12 +46,14 @@ module WorkOS
       scopes: WorkOS::OMIT,
       client_id: nil,
       client_secret: nil,
+      config: nil,
       request_options: {}
     )
       body = {
         "enabled" => enabled,
         "client_id" => client_id,
-        "client_secret" => client_secret
+        "client_secret" => client_secret,
+        "config" => config
       }.compact
       body["scopes"] = scopes unless scopes.equal?(WorkOS::OMIT)
       response = @client.request(