workos 10.0.0 → 10.2.0

data/lib/workos/shared/agent_registration_refreshed.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentRegistrationRefreshed < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      event: :event,
+      data: :data,
+      created_at: :created_at,
+      context: :context
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :event,
+      :data,
+      :created_at,
+      :context
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @event = hash[:event]
+      @data = hash[:data] ? WorkOS::AgentRegistrationRefreshedData.new(hash[:data]) : nil
+      @created_at = hash[:created_at]
+      @context = hash[:context] ? WorkOS::EventContext.new(hash[:context]) : nil
+    end
+  end
+end

data/lib/workos/shared/agent_registration_refreshed_data.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  AgentRegistrationRefreshedData = AgentRegistrationDeletedData
+end

data/lib/workos/shared/waitlist_user.rb

@@ -10,6 +10,7 @@ module WorkOS
       email: :email,
       state: :state,
       approved_at: :approved_at,
+      waitlist_id: :waitlist_id,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -20,6 +21,7 @@ module WorkOS
       :email,
       :state,
       :approved_at,
+      :waitlist_id,
       :created_at,
       :updated_at
 
@@ -30,6 +32,7 @@ module WorkOS
       @email = hash[:email]
       @state = hash[:state]
       @approved_at = hash[:approved_at]
+      @waitlist_id = hash[:waitlist_id]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end

data/lib/workos/sso/connection.rb

@@ -13,7 +13,6 @@ module WorkOS
       state: :state,
       status: :status,
       domains: :domains,
-      callback_endpoint: :callback_endpoint,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -29,7 +28,6 @@ module WorkOS
       :name,
       :state,
       :domains,
-      :callback_endpoint,
       :created_at,
       :updated_at
 
@@ -50,7 +48,6 @@ module WorkOS
       @state = hash[:state]
       @status = hash[:status]
       @domains = (hash[:domains] || []).map { |item| item ? WorkOS::ConnectionDomain.new(item) : nil }
-      @callback_endpoint = hash[:callback_endpoint]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end

data/lib/workos/sso.rb

@@ -3,6 +3,7 @@
 # This file is auto-generated by oagen. Do not edit.
 
 require "json"
+require "uri"
 
 module WorkOS
   class SSO
@@ -106,6 +107,74 @@ module WorkOS
       nil
     end
 
+    # Initiate SSO
+    # Builds the URL client-side; no HTTP request is made.
+    # @param provider_scopes [Array<String>, nil] Additional scopes to request from the identity provider. Applicable when using OAuth or OpenID Connect connections.
+    # @param provider_query_params [Hash{String => String}, nil] Key/value pairs of query parameters to pass to the OAuth provider. Only applicable when using OAuth connections.
+    # @param client_id [String, nil] The unique identifier of the WorkOS environment client. Defaults to the client's configured client_id.
+    # @param domain [String, nil] Deprecated. Use `connection` or `organization` instead. Used to initiate SSO for a connection by domain. The domain must be associated with a connection in your WorkOS environment.
+    # @param provider [WorkOS::Types::SSOProvider, nil] Used to initiate OAuth authentication with various providers.
+    # @param redirect_uri [String] Where to redirect the user after they complete the authentication process. You must use one of the redirect URIs configured via the [Redirects](https://dashboard.workos.com/redirects) page on the dashboard.
+    # @param state [String, nil] An optional parameter that can be used to encode arbitrary information to help restore application state between redirects. If included, the redirect URI received from WorkOS will contain the exact `state` that was passed.
+    # @param connection [String, nil] Used to initiate SSO for a connection. The value should be a WorkOS connection ID. You can persist the WorkOS connection ID with application user or team identifiers. WorkOS will use the connection indicated by the connection parameter to direct the user to the corresponding IdP for authentication.
+    # @param organization [String, nil] Used to initiate SSO for an organization. The value should be a WorkOS organization ID. You can persist the WorkOS organization ID with application user or team identifiers. WorkOS will use the organization ID to determine the appropriate connection and the IdP to direct the user to for authentication.
+    # @param domain_hint [String, nil] Can be used to pre-fill the domain field when initiating authentication with Microsoft OAuth or with a Google SAML connection type.
+    # @param login_hint [String, nil] Can be used to pre-fill the username/email address field of the IdP sign-in page for the user, if you know their username ahead of time. Currently supported for OAuth, OpenID Connect, Okta, Entra ID, and custom SAML connections.
+    # @param nonce [String, nil] A random string generated by the client that is used to mitigate replay attacks.
+    # @param prompt [String, nil] If set to `login`, forces re-authentication at the identity provider. For supported SAML providers this sets `ForceAuthn="true"` in the SAML request; providers that don't support it are unaffected.
+    # @return [String]
+    def get_authorization_url(
+      redirect_uri:,
+      provider_scopes: nil,
+      provider_query_params: nil,
+      client_id: nil,
+      domain: nil,
+      provider: nil,
+      state: nil,
+      connection: nil,
+      organization: nil,
+      domain_hint: nil,
+      login_hint: nil,
+      nonce: nil,
+      prompt: nil
+    )
+      params = {
+        "provider_scopes" => provider_scopes,
+        "provider_query_params" => provider_query_params,
+        "client_id" => client_id,
+        "domain" => domain,
+        "provider" => provider,
+        "redirect_uri" => redirect_uri,
+        "state" => state,
+        "connection" => connection,
+        "organization" => organization,
+        "domain_hint" => domain_hint,
+        "login_hint" => login_hint,
+        "nonce" => nonce,
+        "prompt" => prompt
+      }.compact
+      params["provider_scopes"] = provider_scopes.join(",") unless provider_scopes.nil?
+      params["provider_query_params"] = JSON.generate(provider_query_params) unless provider_query_params.nil?
+      params["response_type"] = "code"
+      params["client_id"] = @client.client_id if !params.key?("client_id") && !@client.client_id.nil?
+      uri = URI.join(@client.base_url, "/sso/authorize")
+      uri.query = URI.encode_www_form(params) unless params.empty?
+      uri.to_s
+    end
+
+    # Logout Redirect
+    # Builds the URL client-side; no HTTP request is made.
+    # @param token [String] The logout token returned from the [Logout Authorize](https://workos.com/docs/reference/sso/logout/authorize) endpoint.
+    # @return [String]
+    def get_logout_url(token:)
+      params = {
+        "token" => token
+      }
+      uri = URI.join(@client.base_url, "/sso/logout")
+      uri.query = URI.encode_www_form(params) unless params.empty?
+      uri.to_s
+    end
+
     # Logout Authorize
     # @param profile_id [String] The unique ID of the profile to log out.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -171,32 +240,10 @@ module WorkOS
     end
 
     # @oagen-ignore-start — non-spec helpers (hand-maintained)
-    # H14 — Build an SSO authorization URL (client-side, no HTTP call).
-    # Overrides the generated method which incorrectly hits the API.
-    def get_authorization_url(redirect_uri:, client_id: nil, state: nil, connection: nil,
-      organization: nil, provider: nil, domain_hint: nil,
-      login_hint: nil, nonce: nil, provider_scopes: nil,
-      provider_query_params: nil, **)
-      cid = client_id || @client.client_id
-      raise ArgumentError, "client_id is required (set on Client or pass explicitly)" if cid.nil? || cid.empty?
-      params = {
-        "client_id" => cid,
-        "redirect_uri" => redirect_uri,
-        "response_type" => "code",
-        "state" => state,
-        "connection" => connection,
-        "organization" => organization,
-        "provider" => provider,
-        "domain_hint" => domain_hint,
-        "login_hint" => login_hint,
-        "nonce" => nonce
-      }.compact
-      params["provider_scopes"] = Array(provider_scopes).join(",") if provider_scopes
-      if provider_query_params.is_a?(Hash) && !provider_query_params.empty?
-        params["provider_query_params"] = JSON.generate(provider_query_params)
-      end
-      build_url("/sso/authorize", params)
-    end
+    # H14 (sso_authorization_url) is provided by the generated
+    # `get_authorization_url` url-builder method, which accepts an optional
+    # per-call `client_id` override falling back to the client's configured
+    # value; no hand-maintained override is needed here.
 
     # H15 — SSO authorization URL with auto-generated PKCE pair + state.
     # Returns [url, code_verifier, state].

data/lib/workos/types/authenticate_response_authentication_method.rb

@@ -16,6 +16,8 @@ module WorkOS
       GIT_HUB_OAUTH = "GitHubOAuth"
       GIT_LAB_OAUTH = "GitLabOAuth"
       GOOGLE_OAUTH = "GoogleOAuth"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       LINKED_IN_OAUTH = "LinkedInOAuth"
       MICROSOFT_OAUTH = "MicrosoftOAuth"
@@ -27,7 +29,7 @@ module WorkOS
       MAGIC_AUTH = "MagicAuth"
       IMPERSONATION = "Impersonation"
       MIGRATED_SESSION = "MigratedSession"
-      ALL = [SSO, PASSWORD, PASSKEY, APPLE_OAUTH, BITBUCKET_OAUTH, CROSS_APP_AUTH, DISCORD_OAUTH, EXTERNAL_AUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH, MAGIC_AUTH, IMPERSONATION, MIGRATED_SESSION].freeze
+      ALL = [SSO, PASSWORD, PASSKEY, APPLE_OAUTH, BITBUCKET_OAUTH, CROSS_APP_AUTH, DISCORD_OAUTH, EXTERNAL_AUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH, MAGIC_AUTH, IMPERSONATION, MIGRATED_SESSION].freeze
     end
   end
 end

data/lib/workos/types/connected_account_auth_method.rb

@@ -7,7 +7,8 @@ module WorkOS
     class ConnectedAccountAuthMethod
       OAUTH = "oauth"
       API_KEY = "api_key"
-      ALL = [OAUTH, API_KEY].freeze
+      CLIENT_CREDENTIALS = "client_credentials"
+      ALL = [OAUTH, API_KEY, CLIENT_CREDENTIALS].freeze
     end
   end
 end

data/lib/workos/types/connection_activated_data_connection_type.rb

@@ -27,6 +27,8 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -55,7 +57,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/connection_type.rb

@@ -28,6 +28,8 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -56,7 +58,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [PENDING, ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [PENDING, ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/connections_connection_type.rb

@@ -26,6 +26,8 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -53,7 +55,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLOUDFLARE_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLOUDFLARE_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/create_user_password_salt_position.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class CreateUserPasswordSaltPosition
+      PREFIX = "prefix"
+      SUFFIX = "suffix"
+      ALL = [PREFIX, SUFFIX].freeze
+    end
+  end
+end

data/lib/workos/types/create_webhook_endpoint_events.rb

@@ -10,6 +10,7 @@ module WorkOS
       AGENT_REGISTRATION_CLAIM_COMPLETED = "agent.registration.claim.completed"
       AGENT_REGISTRATION_CREDENTIAL_ISSUED = "agent.registration.credential.issued"
       AGENT_REGISTRATION_DELETED = "agent.registration.deleted"
+      AGENT_REGISTRATION_REFRESHED = "agent.registration.refreshed"
       AGENT_REGISTRATION_EXPIRED = "agent.registration.expired"
       AGENT_REGISTRATION_ORGANIZATION_SWITCHED = "agent.registration.organization.switched"
       AGENT_REGISTRATION_REVOKED = "agent.registration.revoked"
@@ -97,7 +98,7 @@ module WorkOS
       WAITLIST_USER_APPROVED = "waitlist_user.approved"
       WAITLIST_USER_CREATED = "waitlist_user.created"
       WAITLIST_USER_DENIED = "waitlist_user.denied"
-      ALL = [AGENT_REGISTRATION_CREATED, AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED, AGENT_REGISTRATION_CLAIM_COMPLETED, AGENT_REGISTRATION_CREDENTIAL_ISSUED, AGENT_REGISTRATION_DELETED, AGENT_REGISTRATION_EXPIRED, AGENT_REGISTRATION_ORGANIZATION_SWITCHED, AGENT_REGISTRATION_REVOKED, AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, RADAR_CHALLENGE_CREATED, AUTHENTICATION_RADAR_RISK_DETECTED, AUTHENTICATION_REAUTHENTICATION_SUCCEEDED, API_KEY_CREATED, API_KEY_REVOKED, API_KEY_UPDATED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
+      ALL = [AGENT_REGISTRATION_CREATED, AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED, AGENT_REGISTRATION_CLAIM_COMPLETED, AGENT_REGISTRATION_CREDENTIAL_ISSUED, AGENT_REGISTRATION_DELETED, AGENT_REGISTRATION_REFRESHED, AGENT_REGISTRATION_EXPIRED, AGENT_REGISTRATION_ORGANIZATION_SWITCHED, AGENT_REGISTRATION_REVOKED, AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, RADAR_CHALLENGE_CREATED, AUTHENTICATION_RADAR_RISK_DETECTED, AUTHENTICATION_REAUTHENTICATION_SUCCEEDED, API_KEY_CREATED, API_KEY_REVOKED, API_KEY_UPDATED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
     end
   end
 end

data/lib/workos/types/update_user_password_salt_position.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    UpdateUserPasswordSaltPosition = CreateUserPasswordSaltPosition
+  end
+end

data/lib/workos/types/user_identities_get_item_provider.rb

@@ -11,6 +11,8 @@ module WorkOS
       GITHUB_OAUTH = "GithubOAuth"
       GIT_LAB_OAUTH = "GitLabOAuth"
       GOOGLE_OAUTH = "GoogleOAuth"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       LINKED_IN_OAUTH = "LinkedInOAuth"
       MICROSOFT_OAUTH = "MicrosoftOAuth"
@@ -19,7 +21,7 @@ module WorkOS
       VERCEL_MARKETPLACE_OAUTH = "VercelMarketplaceOAuth"
       VERCEL_OAUTH = "VercelOAuth"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [APPLE_OAUTH, BITBUCKET_OAUTH, DISCORD_OAUTH, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH].freeze
+      ALL = [APPLE_OAUTH, BITBUCKET_OAUTH, DISCORD_OAUTH, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/user_management/create_user.rb

@@ -17,7 +17,8 @@ module WorkOS
       signals_id: :signals_id,
       password: :password,
       password_hash: :password_hash,
-      password_hash_type: :password_hash_type
+      password_hash_type: :password_hash_type,
+      password_salt_position: :password_salt_position
     }.freeze
 
     attr_accessor \
@@ -33,7 +34,8 @@ module WorkOS
       :signals_id,
       :password,
       :password_hash,
-      :password_hash_type
+      :password_hash_type,
+      :password_salt_position
 
     def initialize(json)
       hash = self.class.normalize(json)
@@ -50,6 +52,7 @@ module WorkOS
       @password = hash[:password]
       @password_hash = hash[:password_hash]
       @password_hash_type = hash[:password_hash_type]
+      @password_salt_position = hash[:password_salt_position]
     end
   end
 end

data/lib/workos/user_management/update_user.rb

@@ -15,7 +15,8 @@ module WorkOS
       locale: :locale,
       password: :password,
       password_hash: :password_hash,
-      password_hash_type: :password_hash_type
+      password_hash_type: :password_hash_type,
+      password_salt_position: :password_salt_position
     }.freeze
 
     attr_accessor \
@@ -29,7 +30,8 @@ module WorkOS
       :locale,
       :password,
       :password_hash,
-      :password_hash_type
+      :password_hash_type,
+      :password_salt_position
 
     def initialize(json)
       hash = self.class.normalize(json)
@@ -44,6 +46,7 @@ module WorkOS
       @password = hash[:password]
       @password_hash = hash[:password_hash]
       @password_hash_type = hash[:password_hash_type]
+      @password_salt_position = hash[:password_salt_position]
     end
   end
 end