workos 10.2.1 → 10.4.0

data/lib/workos/audit_logs.rb

@@ -6,6 +6,18 @@ require "json"
 
 module WorkOS
   class AuditLogs
+    # Identifies the retention (period variant).
+    #
+    # @!attribute [r] retention_period
+    #   @return [WorkOS::Types::UpdateAuditLogsRetentionRetentionPeriod]
+    RetentionPeriod = Data.define(:retention_period)
+
+    # Identifies the retention (period in days variant).
+    #
+    # @!attribute [r] retention_period_in_days
+    #   @return [Integer]
+    RetentionPeriodInDays = Data.define(:retention_period_in_days)
+
     def initialize(client)
       @client = client
     end
@@ -31,17 +43,23 @@ module WorkOS
 
     # Set Retention
     # @param id [String] Unique identifier of the Organization.
-    # @param retention_period_in_days [Integer] The number of days Audit Log events will be retained. Valid values are `30` and `365`.
+    # @param retention [WorkOS::AuditLogs::RetentionPeriod, WorkOS::AuditLogs::RetentionPeriodInDays] Identifies the retention.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::AuditLogsRetention]
     def update_organization_audit_logs_retention(
       id:,
-      retention_period_in_days:,
+      retention:,
       request_options: {}
     )
-      body = {
-        "retention_period_in_days" => retention_period_in_days
-      }
+      body = {}
+      case retention
+      when WorkOS::AuditLogs::RetentionPeriod
+        body["retention_period"] = retention.retention_period
+      when WorkOS::AuditLogs::RetentionPeriodInDays
+        body["retention_period_in_days"] = retention.retention_period_in_days
+      else
+        raise ArgumentError, "expected retention to be one of: WorkOS::AuditLogs::RetentionPeriod, WorkOS::AuditLogs::RetentionPeriodInDays, got #{retention.class}"
+      end
       response = @client.request(
         method: :put,
         path: "/organizations/#{WorkOS::Util.encode_path(id)}/audit_logs_retention",

data/lib/workos/authorization.rb

@@ -834,8 +834,8 @@ module WorkOS
         when WorkOS::Authorization::ParentResourceById
           body["parent_resource_id"] = parent_resource.parent_resource_id
         when WorkOS::Authorization::ParentResourceByExternalId
-          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
           body["parent_resource_type_slug"] = parent_resource.parent_resource_type_slug
+          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
         else
           raise ArgumentError, "expected parent_resource to be one of: WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId, got #{parent_resource.class}"
         end
@@ -1097,8 +1097,8 @@ module WorkOS
         when WorkOS::Authorization::ParentResourceById
           body["parent_resource_id"] = parent_resource.parent_resource_id
         when WorkOS::Authorization::ParentResourceByExternalId
-          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
           body["parent_resource_type_slug"] = parent_resource.parent_resource_type_slug
+          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
         else
           raise ArgumentError, "expected parent_resource to be one of: WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId, got #{parent_resource.class}"
         end
@@ -1157,8 +1157,8 @@ module WorkOS
         when WorkOS::Authorization::ParentResourceById
           body["parent_resource_id"] = parent_resource.parent_resource_id
         when WorkOS::Authorization::ParentResourceByExternalId
-          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
           body["parent_resource_type_slug"] = parent_resource.parent_resource_type_slug
+          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
         else
           raise ArgumentError, "expected parent_resource to be one of: WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId, got #{parent_resource.class}"
         end

data/lib/workos/base_client.rb

@@ -41,11 +41,14 @@ module WorkOS
       "v#{WorkOS::VERSION}"
     ].join("; ").freeze
 
-    attr_reader :api_key, :base_url, :client_id, :timeout, :max_retries, :logger, :log_level
+    attr_reader :api_key, :base_url, :client_id, :timeout, :max_retries, :logger, :log_level, :jwt_issuer
 
+    # @param jwt_issuer [String, Array<String>, nil] Expected `iss` claim of
+    #   session access tokens (one issuer or a list of accepted issuers).
+    #   When nil, the issuer is not validated.
     def initialize(api_key: nil, base_url: DEFAULT_BASE_URL, client_id: nil,
       timeout: DEFAULT_TIMEOUT, max_retries: DEFAULT_MAX_RETRIES,
-      logger: nil, log_level: nil, random: Random.new)
+      logger: nil, log_level: nil, jwt_issuer: nil, random: Random.new)
       @api_key = api_key
       @base_url = base_url
       @client_id = client_id
@@ -53,6 +56,7 @@ module WorkOS
       @max_retries = max_retries
       @logger = logger
       @log_level = log_level
+      @jwt_issuer = jwt_issuer
       @random = random
     end
 

data/lib/workos/client.rb

@@ -64,6 +64,10 @@ module WorkOS
       @groups ||= WorkOS::Groups.new(self)
     end
 
+    def platform_teams
+      @platform_teams ||= WorkOS::PlatformTeams.new(self)
+    end
+
     def admin_portal
       @admin_portal ||= WorkOS::AdminPortal.new(self)
     end

data/lib/workos/configuration.rb

@@ -12,7 +12,7 @@ module WorkOS
   #     config.log_level = :info
   #   end
   class Configuration
-    attr_accessor :api_key, :base_url, :client_id, :timeout, :max_retries, :logger, :log_level
+    attr_accessor :api_key, :base_url, :client_id, :timeout, :max_retries, :logger, :log_level, :jwt_issuer
 
     def initialize
       @base_url = WorkOS::BaseClient::DEFAULT_BASE_URL
@@ -47,7 +47,8 @@ module WorkOS
         timeout: configuration.timeout,
         max_retries: configuration.max_retries,
         logger: configuration.logger,
-        log_level: configuration.log_level
+        log_level: configuration.log_level,
+        jwt_issuer: configuration.jwt_issuer
       )
     end
 

data/lib/workos/inflections.rb

@@ -31,6 +31,7 @@ WORKOS_INFLECTIONS = {
   "authentication_sso_timed_out_data" => "AuthenticationSSOTimedOutData",
   "authentication_sso_timed_out_data_error" => "AuthenticationSSOTimedOutDataError",
   "authentication_sso_timed_out_data_sso" => "AuthenticationSSOTimedOutDataSSO",
+  "authkit_oauth_resource" => "AuthkitOAuthResource",
   "connect_application_m2m" => "ConnectApplicationM2M",
   "connect_application_oauth" => "ConnectApplicationOAuth",
   "connect_application_oauth_redirect_uris" => "ConnectApplicationOAuthRedirectUris",
@@ -45,15 +46,31 @@ WORKOS_INFLECTIONS = {
   "connection_saml_certificate_renewed_data_certificate_certificate_type" => "ConnectionSAMLCertificateRenewedDataCertificateCertificateType",
   "connection_saml_certificate_renewed_data_connection" => "ConnectionSAMLCertificateRenewedDataConnection",
   "cors_origin_response" => "CORSOriginResponse",
+  "create_authkit_oauth_resource" => "CreateAuthkitOAuthResource",
+  "create_connection_oidc_options" => "CreateConnectionOIDCOptions",
+  "create_connection_oidc_options_id_token_signature_algorithm" => "CreateConnectionOIDCOptionsIdTokenSignatureAlgorithm",
+  "create_connection_oidc_options_token_authentication_method" => "CreateConnectionOIDCOptionsTokenAuthenticationMethod",
+  "create_connection_saml_options" => "CreateConnectionSAMLOptions",
   "create_cors_origin" => "CreateCORSOrigin",
   "create_m2m_application" => "CreateM2MApplication",
   "create_oauth_application" => "CreateOAuthApplication",
+  "create_saml_idp_signing_certificate" => "CreateSAMLIdpSigningCertificate",
   "jwt_template_response" => "JWTTemplateResponse",
   "mfa_totp_session_authenticate_request" => "MFATotpSessionAuthenticateRequest",
+  "patch_connection_oidc_options" => "PatchConnectionOIDCOptions",
+  "patch_connection_oidc_options_id_token_signature_algorithm" => "PatchConnectionOIDCOptionsIdTokenSignatureAlgorithm",
+  "patch_connection_oidc_options_token_authentication_method" => "PatchConnectionOIDCOptionsTokenAuthenticationMethod",
+  "patch_connection_saml_options" => "PatchConnectionSAMLOptions",
   "pkce" => "PKCE",
+  "saml_idp_signing_certificate" => "SAMLIdpSigningCertificate",
+  "saml_idp_signing_certificate_list" => "SAMLIdpSigningCertificateList",
+  "saml_sp_encryption_certificate" => "SAMLSpEncryptionCertificate",
+  "saml_sp_encryption_certificate_list" => "SAMLSpEncryptionCertificateList",
+  "saml_sp_signing_certificate" => "SAMLSpSigningCertificate",
   "sso" => "SSO",
   "sso_authorize_url_response" => "SSOAuthorizeUrlResponse",
   "sso_device_authorization_request" => "SSODeviceAuthorizationRequest",
+  "sso_grant_type" => "SSOGrantType",
   "sso_logout_authorize_request" => "SSOLogoutAuthorizeRequest",
   "sso_logout_authorize_response" => "SSOLogoutAuthorizeResponse",
   "sso_provider" => "SSOProvider",

data/lib/workos/multi_factor_auth.rb

@@ -108,7 +108,7 @@ module WorkOS
 
     # Challenge Factor
     # @param id [String] The unique ID of the Authentication Factor to be challenged.
-    # @param sms_template [String, nil] A custom template for the SMS message. Use the {{code}} placeholder to include the verification code.
+    # @param sms_template [String, nil] A custom template for the SMS message. Use the {{code}} placeholder to include the verification code. Must not contain URLs or domain names.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::AuthenticationChallenge]
     def challenge_factor(

data/lib/workos/organizations/create_it_contact.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class CreateItContact < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      email: :email
+    }.freeze
+
+    attr_accessor :email
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @email = hash[:email]
+    end
+  end
+end

data/lib/workos/organizations/invite_it_contact.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class InviteItContact < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      intents: :intents
+    }.freeze
+
+    attr_accessor :intents
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @intents = hash[:intents] || []
+    end
+  end
+end

data/lib/workos/organizations/it_contact.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ItContact < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      email: :email,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :email,
+      :created_at,
+      :updated_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @email = hash[:email]
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end

data/lib/workos/organizations/it_contact_list.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ItContactList < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      data: :data,
+      list_metadata: :list_metadata
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :data,
+      :list_metadata
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @data = (hash[:data] || []).map { |item| item ? WorkOS::ItContact.new(item) : nil }
+      @list_metadata = hash[:list_metadata] ? WorkOS::ItContactListListMetadata.new(hash[:list_metadata]) : nil
+    end
+  end
+end

data/lib/workos/organizations/organization_input.rb

@@ -13,14 +13,23 @@ module WorkOS
       external_id: :external_id
     }.freeze
 
+    # @!attribute domains
+    #   @deprecated The domains associated with the organization. Deprecated in favor of `domain_data`.
+
     attr_accessor \
       :name,
       :allow_profiles_outside_organization,
-      :domains,
       :domain_data,
       :metadata,
       :external_id
 
+    def domains
+      warn "[DEPRECATION] `domains` is deprecated and will be removed in a future version.", uplevel: 1
+      @domains
+    end
+
+    attr_writer :domains
+
     def initialize(json)
       hash = self.class.normalize(json)
       @name = hash[:name]

data/lib/workos/organizations/update_audit_logs_retention.rb

@@ -5,13 +5,25 @@
 module WorkOS
   class UpdateAuditLogsRetention < WorkOS::Types::BaseModel
     HASH_ATTRS = {
+      retention_period: :retention_period,
       retention_period_in_days: :retention_period_in_days
     }.freeze
 
-    attr_accessor :retention_period_in_days
+    # @!attribute retention_period_in_days
+    #   @deprecated The number of days Audit Log events will be retained. Valid values are `30` through `330` in 30-day increments and `365` through `3650` in 365-day increments. Deprecated: use `retention_period` instead. Mutually exclusive with `retention_period`.
+
+    attr_accessor :retention_period
+
+    def retention_period_in_days
+      warn "[DEPRECATION] `retention_period_in_days` is deprecated and will be removed in a future version.", uplevel: 1
+      @retention_period_in_days
+    end
+
+    attr_writer :retention_period_in_days
 
     def initialize(json)
       hash = self.class.normalize(json)
+      @retention_period = hash[:retention_period]
       @retention_period_in_days = hash[:retention_period_in_days]
     end
   end

data/lib/workos/organizations.rb

@@ -65,7 +65,7 @@ module WorkOS
     # Create an Organization
     # @param name [String] The name of the organization.
     # @param allow_profiles_outside_organization [Boolean, nil] Whether the organization allows profiles from outside the organization to sign in.
-    # @param domains [Array<String>, nil] The domains associated with the organization. Deprecated in favor of `domain_data`.
+    # @param domains [Array<String>, nil] (deprecated) The domains associated with the organization. Deprecated in favor of `domain_data`.
     # @param domain_data [Array<WorkOS::OrganizationDomainData>, nil] The domains associated with the organization, including verification state.
     # @param metadata [Hash{String => String}, nil] Object containing [metadata](https://workos.com/docs/authkit/metadata) key/value pairs associated with the Organization.
     # @param external_id [String, nil] An external identifier for the Organization.
@@ -263,5 +263,114 @@ module WorkOS
         fetch_next: fetch_next
       )
     end
+
+    # List IT contacts
+    # @param organization_id [String] The ID of the organization.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::ItContact>]
+    def list_it_contacts(
+      organization_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/it_contacts",
+        auth: true,
+        request_options: request_options
+      )
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::ItContact,
+        filters: {organization_id: organization_id}
+      )
+    end
+
+    # Create an IT contact
+    # @param organization_id [String] The ID of the organization.
+    # @param email [String] The email address of the IT contact.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ItContact]
+    def create_it_contact(
+      organization_id:,
+      email:,
+      request_options: {}
+    )
+      body = {
+        "email" => email
+      }
+      response = @client.request(
+        method: :post,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/it_contacts",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ItContact.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete an IT contact
+    # @param organization_id [String] The ID of the organization.
+    # @param contact_id [String] The ID of the IT contact.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_it_contact(
+      organization_id:,
+      contact_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/it_contacts/#{WorkOS::Util.encode_path(contact_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # Invite an IT contact
+    # @param organization_id [String] The ID of the organization.
+    # @param contact_id [String] The ID of the IT contact.
+    # @param intents [Array<WorkOS::Types::InviteItContactIntents>] The Admin Portal features that the IT contact can configure.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def invite_it_contact(
+      organization_id:,
+      contact_id:,
+      intents:,
+      request_options: {}
+    )
+      body = {
+        "intents" => intents
+      }
+      @client.request(
+        method: :post,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/it_contacts/#{WorkOS::Util.encode_path(contact_id)}/invite",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # Revoke an IT contact's invitation
+    # @param organization_id [String] The ID of the organization.
+    # @param contact_id [String] The ID of the IT contact.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def revoke_it_contact(
+      organization_id:,
+      contact_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :post,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/it_contacts/#{WorkOS::Util.encode_path(contact_id)}/revoke",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
   end
 end

data/lib/workos/pipes/connected_account.rb

@@ -7,6 +7,9 @@ module WorkOS
     HASH_ATTRS = {
       object: :object,
       id: :id,
+      connection_role: :connection_role,
+      account_identifier: :account_identifier,
+      account_display_name: :account_display_name,
       user_id: :user_id,
       organization_id: :organization_id,
       scopes: :scopes,
@@ -23,6 +26,9 @@ module WorkOS
     attr_accessor \
       :object,
       :id,
+      :connection_role,
+      :account_identifier,
+      :account_display_name,
       :user_id,
       :organization_id,
       :scopes,
@@ -39,6 +45,9 @@ module WorkOS
       hash = self.class.normalize(json)
       @object = hash[:object]
       @id = hash[:id]
+      @connection_role = hash[:connection_role]
+      @account_identifier = hash[:account_identifier]
+      @account_display_name = hash[:account_display_name]
       @user_id = hash[:user_id]
       @organization_id = hash[:organization_id]
       @scopes = hash[:scopes] || []

data/lib/workos/pipes/create_data_integration.rb

@@ -6,6 +6,7 @@ module WorkOS
   class CreateDataIntegration < WorkOS::Types::BaseModel
     HASH_ATTRS = {
       provider: :provider,
+      ownership: :ownership,
       description: :description,
       enabled: :enabled,
       scopes: :scopes,
@@ -18,6 +19,7 @@ module WorkOS
 
     attr_accessor \
       :provider,
+      :ownership,
       :description,
       :enabled,
       :scopes,
@@ -30,6 +32,7 @@ module WorkOS
     def initialize(json)
       hash = self.class.normalize(json)
       @provider = hash[:provider]
+      @ownership = hash[:ownership]
       @description = hash[:description]
       @enabled = hash[:enabled]
       @scopes = hash[:scopes] || []

data/lib/workos/pipes/data_integration.rb

@@ -9,6 +9,7 @@ module WorkOS
       id: :id,
       slug: :slug,
       integration_type: :integration_type,
+      ownership: :ownership,
       description: :description,
       enabled: :enabled,
       state: :state,
@@ -28,6 +29,7 @@ module WorkOS
       :id,
       :slug,
       :integration_type,
+      :ownership,
       :description,
       :enabled,
       :state,
@@ -47,6 +49,7 @@ module WorkOS
       @id = hash[:id]
       @slug = hash[:slug]
       @integration_type = hash[:integration_type]
+      @ownership = hash[:ownership]
       @description = hash[:description]
       @enabled = hash[:enabled]
       @state = hash[:state]

data/lib/workos/pipes/data_integration_installation.rb

@@ -6,6 +6,9 @@ module WorkOS
   class DataIntegrationInstallation < WorkOS::Types::BaseModel
     HASH_ATTRS = {
       id: :id,
+      connection_role: :connection_role,
+      account_identifier: :account_identifier,
+      account_display_name: :account_display_name,
       user_id: :user_id,
       organization_id: :organization_id,
       api_key_last_4: :api_key_last_4
@@ -13,6 +16,9 @@ module WorkOS
 
     attr_accessor \
       :id,
+      :connection_role,
+      :account_identifier,
+      :account_display_name,
       :user_id,
       :organization_id,
       :api_key_last_4
@@ -20,6 +26,9 @@ module WorkOS
     def initialize(json)
       hash = self.class.normalize(json)
       @id = hash[:id]
+      @connection_role = hash[:connection_role]
+      @account_identifier = hash[:account_identifier]
+      @account_display_name = hash[:account_display_name]
       @user_id = hash[:user_id]
       @organization_id = hash[:organization_id]
       @api_key_last_4 = hash[:api_key_last_4]

data/lib/workos/pipes/data_integrations_get_data_integration_authorize_url_request.rb

@@ -7,6 +7,7 @@ module WorkOS
     HASH_ATTRS = {
       user_id: :user_id,
       organization_id: :organization_id,
+      connection_owner: :connection_owner,
       return_to: :return_to,
       config: :config
     }.freeze
@@ -14,6 +15,7 @@ module WorkOS
     attr_accessor \
       :user_id,
       :organization_id,
+      :connection_owner,
       :return_to,
       :config
 
@@ -21,6 +23,7 @@ module WorkOS
       hash = self.class.normalize(json)
       @user_id = hash[:user_id]
       @organization_id = hash[:organization_id]
+      @connection_owner = hash[:connection_owner]
       @return_to = hash[:return_to]
       @config = hash[:config] || {}
     end

data/lib/workos/pipes/data_integrations_get_user_token_request.rb

@@ -6,17 +6,26 @@ module WorkOS
   class DataIntegrationsGetUserTokenRequest < WorkOS::Types::BaseModel
     HASH_ATTRS = {
       user_id: :user_id,
-      organization_id: :organization_id
+      organization_id: :organization_id,
+      connected_account_id: :connected_account_id,
+      connection_owner: :connection_owner,
+      supports_multiple_connections: :supports_multiple_connections
     }.freeze
 
     attr_accessor \
       :user_id,
-      :organization_id
+      :organization_id,
+      :connected_account_id,
+      :connection_owner,
+      :supports_multiple_connections
 
     def initialize(json)
       hash = self.class.normalize(json)
       @user_id = hash[:user_id]
       @organization_id = hash[:organization_id]
+      @connected_account_id = hash[:connected_account_id]
+      @connection_owner = hash[:connection_owner]
+      @supports_multiple_connections = hash[:supports_multiple_connections]
     end
   end
 end

data/lib/workos/pipes/data_integrations_list_response_data.rb

@@ -14,12 +14,17 @@ module WorkOS
       credentials_type: :credentials_type,
       scopes: :scopes,
       auth_methods: :auth_methods,
+      connection_owner: :connection_owner,
       ownership: :ownership,
       created_at: :created_at,
       updated_at: :updated_at,
-      connected_account: :connected_account
+      connected_account: :connected_account,
+      connected_accounts: :connected_accounts
     }.freeze
 
+    # @!attribute ownership
+    #   @deprecated Use `connection_owner` instead. Legacy spelling of the same value: `userland_user` corresponds to `connection_owner: "user"` and `organization` to `connection_owner: "organization"`.
+
     attr_accessor \
       :object,
       :id,
@@ -30,10 +35,18 @@ module WorkOS
       :credentials_type,
       :scopes,
       :auth_methods,
-      :ownership,
+      :connection_owner,
       :created_at,
       :updated_at,
-      :connected_account
+      :connected_account,
+      :connected_accounts
+
+    def ownership
+      warn "[DEPRECATION] `ownership` is deprecated and will be removed in a future version.", uplevel: 1
+      @ownership
+    end
+
+    attr_writer :ownership
 
     def initialize(json)
       hash = self.class.normalize(json)
@@ -46,10 +59,12 @@ module WorkOS
       @credentials_type = hash[:credentials_type]
       @scopes = hash[:scopes] || []
       @auth_methods = hash[:auth_methods] || []
+      @connection_owner = hash[:connection_owner]
       @ownership = hash[:ownership]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
       @connected_account = hash[:connected_account] ? WorkOS::DataIntegrationsListResponseDataConnectedAccount.new(hash[:connected_account]) : nil
+      @connected_accounts = (hash[:connected_accounts] || []).map { |item| item ? WorkOS::DataIntegrationsListResponseDataConnectedAccount.new(item) : nil }
     end
   end
 end