workos 7.0.0 → 7.1.1

data/lib/workos/groups.rb

@@ -0,0 +1,256 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+require "json"
+
+module WorkOS
+  class Groups
+    def initialize(client)
+      @client = client
+    end
+
+    # List groups
+    # @param organization_id [String] The ID of the organization.
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::GroupsOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::Group>]
+    def list_organization_groups(
+      organization_id:,
+      before: nil,
+      after: nil,
+      limit: nil,
+      order: "desc",
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/groups",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_organization_groups(
+          organization_id: organization_id,
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::Group,
+        filters: {organization_id: organization_id, before: before, limit: limit, order: order},
+        fetch_next: fetch_next
+      )
+    end
+
+    # Create a group
+    # @param organization_id [String] The ID of the organization.
+    # @param name [String] The name of the Group.
+    # @param description [String, nil] An optional description of the Group.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Group]
+    def create_organization_group(
+      organization_id:,
+      name:,
+      description: nil,
+      request_options: {}
+    )
+      body = {
+        "name" => name,
+        "description" => description
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/groups",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::Group.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Get a group
+    # @param organization_id [String] The ID of the organization.
+    # @param group_id [String] The ID of the group.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Group]
+    def get_organization_group(
+      organization_id:,
+      group_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/groups/#{WorkOS::Util.encode_path(group_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::Group.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Update a group
+    # @param organization_id [String] The ID of the organization.
+    # @param group_id [String] The ID of the group.
+    # @param name [String, nil] The name of the Group.
+    # @param description [String, nil] An optional description of the Group.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Group]
+    def update_organization_group(
+      organization_id:,
+      group_id:,
+      name: nil,
+      description: nil,
+      request_options: {}
+    )
+      body = {
+        "name" => name,
+        "description" => description
+      }.compact
+      response = @client.request(
+        method: :patch,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/groups/#{WorkOS::Util.encode_path(group_id)}",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::Group.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete a group
+    # @param organization_id [String] The ID of the organization.
+    # @param group_id [String] The ID of the group.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_organization_group(
+      organization_id:,
+      group_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/groups/#{WorkOS::Util.encode_path(group_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # List Group members
+    # @param organization_id [String] Unique identifier of the Organization.
+    # @param group_id [String] Unique identifier of the Group.
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::GroupsOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::UserOrganizationMembershipBaseListData>]
+    def list_group_organization_memberships(
+      organization_id:,
+      group_id:,
+      before: nil,
+      after: nil,
+      limit: nil,
+      order: "desc",
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/groups/#{WorkOS::Util.encode_path(group_id)}/organization-memberships",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_group_organization_memberships(
+          organization_id: organization_id,
+          group_id: group_id,
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::UserOrganizationMembershipBaseListData,
+        filters: {organization_id: organization_id, group_id: group_id, before: before, limit: limit, order: order},
+        fetch_next: fetch_next
+      )
+    end
+
+    # Add a member to a Group
+    # @param organization_id [String] Unique identifier of the Organization.
+    # @param group_id [String] Unique identifier of the Group.
+    # @param organization_membership_id [String] The ID of the Organization Membership to add to the group.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Group]
+    def create_group_organization_membership(
+      organization_id:,
+      group_id:,
+      organization_membership_id:,
+      request_options: {}
+    )
+      body = {
+        "organization_membership_id" => organization_membership_id
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/groups/#{WorkOS::Util.encode_path(group_id)}/organization-memberships",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::Group.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Remove a member from a Group
+    # @param organization_id [String] Unique identifier of the Organization.
+    # @param group_id [String] Unique identifier of the Group.
+    # @param om_id [String] Unique identifier of the Organization Membership.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_group_organization_membership(
+      organization_id:,
+      group_id:,
+      om_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/groups/#{WorkOS::Util.encode_path(group_id)}/organization-memberships/#{WorkOS::Util.encode_path(om_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+  end
+end

data/lib/workos/session.rb

@@ -90,18 +90,27 @@ module WorkOS
       body = {
         "grant_type" => "refresh_token",
         "client_id" => @client.client_id,
-        "refresh_token" => session["refresh_token"],
-        "session" => {"seal_session" => true, "cookie_password" => effective_password}
+        "refresh_token" => session["refresh_token"]
       }
       body["organization_id"] = organization_id if organization_id
 
       response = @client.request(method: :post, path: "/user_management/authenticate", auth: true, body: body)
       auth_response = JSON.parse(response.body)
-      sealed = auth_response["sealed_session"].to_s
-      @seal_data = sealed
-      @cookie_password = effective_password
 
+      sealed = @manager.seal_session_from_auth_response(
+        access_token: auth_response["access_token"],
+        refresh_token: auth_response["refresh_token"],
+        cookie_password: effective_password,
+        user: auth_response["user"],
+        impersonator: auth_response["impersonator"]
+      )
+
+      # Decode before mutating session state so a malformed access_token
+      # doesn't leave the Session half-updated.
       decoded = @manager.decode_jwt(auth_response["access_token"])
+
+      @seal_data = sealed
+      @cookie_password = effective_password
       SessionManager::RefreshSuccess.new(
         authenticated: true,
         sealed_session: sealed,
@@ -117,6 +126,8 @@ module WorkOS
       )
     rescue WorkOS::AuthenticationError, WorkOS::InvalidRequestError => e
       SessionManager::RefreshError.new(authenticated: false, reason: e.message)
+    rescue JWT::DecodeError => e
+      SessionManager::RefreshError.new(authenticated: false, reason: e.message)
     end
 
     # Build the WorkOS session-logout URL for the currently authenticated session.

data/lib/workos/shared/waitlist_user.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class WaitlistUser < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      email: :email,
+      state: :state,
+      approved_at: :approved_at,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :email,
+      :state,
+      :approved_at,
+      :created_at,
+      :updated_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @email = hash[:email]
+      @state = hash[:state]
+      @approved_at = hash[:approved_at]
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end

data/lib/workos/shared/waitlist_user_approved.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class WaitlistUserApproved < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      id: :id,
+      event: :event,
+      data: :data,
+      created_at: :created_at,
+      context: :context,
+      object: :object
+    }.freeze
+
+    attr_accessor \
+      :id,
+      :event,
+      :data,
+      :created_at,
+      :context,
+      :object
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @id = hash[:id]
+      @event = hash[:event]
+      @data = hash[:data] ? WorkOS::WaitlistUser.new(hash[:data]) : nil
+      @created_at = hash[:created_at]
+      @context = hash[:context] ? WorkOS::EventContext.new(hash[:context]) : nil
+      @object = hash[:object]
+    end
+  end
+end

data/lib/workos/shared/waitlist_user_created.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class WaitlistUserCreated < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      id: :id,
+      event: :event,
+      data: :data,
+      created_at: :created_at,
+      context: :context,
+      object: :object
+    }.freeze
+
+    attr_accessor \
+      :id,
+      :event,
+      :data,
+      :created_at,
+      :context,
+      :object
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @id = hash[:id]
+      @event = hash[:event]
+      @data = hash[:data] ? WorkOS::WaitlistUser.new(hash[:data]) : nil
+      @created_at = hash[:created_at]
+      @context = hash[:context] ? WorkOS::EventContext.new(hash[:context]) : nil
+      @object = hash[:object]
+    end
+  end
+end

data/lib/workos/shared/waitlist_user_denied.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class WaitlistUserDenied < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      id: :id,
+      event: :event,
+      data: :data,
+      created_at: :created_at,
+      context: :context,
+      object: :object
+    }.freeze
+
+    attr_accessor \
+      :id,
+      :event,
+      :data,
+      :created_at,
+      :context,
+      :object
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @id = hash[:id]
+      @event = hash[:event]
+      @data = hash[:data] ? WorkOS::WaitlistUser.new(hash[:data]) : nil
+      @created_at = hash[:created_at]
+      @context = hash[:context] ? WorkOS::EventContext.new(hash[:context]) : nil
+      @object = hash[:object]
+    end
+  end
+end

data/lib/workos/types/create_webhook_endpoint_events.rb

@@ -79,7 +79,10 @@ module WorkOS
       PERMISSION_UPDATED = "permission.updated"
       SESSION_CREATED = "session.created"
       SESSION_REVOKED = "session.revoked"
-      ALL = [AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, AUTHENTICATION_RADAR_RISK_DETECTED, API_KEY_CREATED, API_KEY_REVOKED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, SESSION_CREATED, SESSION_REVOKED].freeze
+      WAITLIST_USER_APPROVED = "waitlist_user.approved"
+      WAITLIST_USER_CREATED = "waitlist_user.created"
+      WAITLIST_USER_DENIED = "waitlist_user.denied"
+      ALL = [AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, AUTHENTICATION_RADAR_RISK_DETECTED, API_KEY_CREATED, API_KEY_REVOKED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
     end
   end
 end

data/lib/workos/types/groups_order.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    GroupsOrder = ApplicationsOrder
+  end
+end

data/lib/workos/types/sso_provider.rb

@@ -6,10 +6,19 @@ module WorkOS
   module Types
     class SSOProvider
       APPLE_OAUTH = "AppleOAuth"
+      BITBUCKET_OAUTH = "BitbucketOAuth"
       GIT_HUB_OAUTH = "GitHubOAuth"
+      GIT_LAB_OAUTH = "GitLabOAuth"
       GOOGLE_OAUTH = "GoogleOAuth"
+      INTUIT_OAUTH = "IntuitOAuth"
+      LINKED_IN_OAUTH = "LinkedInOAuth"
       MICROSOFT_OAUTH = "MicrosoftOAuth"
-      ALL = [APPLE_OAUTH, GIT_HUB_OAUTH, GOOGLE_OAUTH, MICROSOFT_OAUTH].freeze
+      SALESFORCE_OAUTH = "SalesforceOAuth"
+      SLACK_OAUTH = "SlackOAuth"
+      VERCEL_MARKETPLACE_OAUTH = "VercelMarketplaceOAuth"
+      VERCEL_OAUTH = "VercelOAuth"
+      XERO_OAUTH = "XeroOAuth"
+      ALL = [APPLE_OAUTH, BITBUCKET_OAUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/user_management_authentication_provider.rb

@@ -7,10 +7,19 @@ module WorkOS
     class UserManagementAuthenticationProvider
       AUTHKIT = "authkit"
       APPLE_OAUTH = "AppleOAuth"
+      BITBUCKET_OAUTH = "BitbucketOAuth"
       GIT_HUB_OAUTH = "GitHubOAuth"
+      GIT_LAB_OAUTH = "GitLabOAuth"
       GOOGLE_OAUTH = "GoogleOAuth"
+      INTUIT_OAUTH = "IntuitOAuth"
+      LINKED_IN_OAUTH = "LinkedInOAuth"
       MICROSOFT_OAUTH = "MicrosoftOAuth"
-      ALL = [AUTHKIT, APPLE_OAUTH, GIT_HUB_OAUTH, GOOGLE_OAUTH, MICROSOFT_OAUTH].freeze
+      SALESFORCE_OAUTH = "SalesforceOAuth"
+      SLACK_OAUTH = "SlackOAuth"
+      VERCEL_MARKETPLACE_OAUTH = "VercelMarketplaceOAuth"
+      VERCEL_OAUTH = "VercelOAuth"
+      XERO_OAUTH = "XeroOAuth"
+      ALL = [AUTHKIT, APPLE_OAUTH, BITBUCKET_OAUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/user_management_organization_membership_groups_order.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    UserManagementOrganizationMembershipGroupsOrder = ApplicationsOrder
+  end
+end

data/lib/workos/types/waitlist_user_state.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class WaitlistUserState
+      PENDING = "pending"
+      APPROVED = "approved"
+      DENIED = "denied"
+      ALL = [PENDING, APPROVED, DENIED].freeze
+    end
+  end
+end

data/lib/workos/user_management/invitation.rb

@@ -15,6 +15,7 @@ module WorkOS
       organization_id: :organization_id,
       inviter_user_id: :inviter_user_id,
       accepted_user_id: :accepted_user_id,
+      role_slug: :role_slug,
       created_at: :created_at,
       updated_at: :updated_at,
       token: :token,
@@ -32,6 +33,7 @@ module WorkOS
       :organization_id,
       :inviter_user_id,
       :accepted_user_id,
+      :role_slug,
       :created_at,
       :updated_at,
       :token,
@@ -49,6 +51,7 @@ module WorkOS
       @organization_id = hash[:organization_id]
       @inviter_user_id = hash[:inviter_user_id]
       @accepted_user_id = hash[:accepted_user_id]
+      @role_slug = hash[:role_slug]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
       @token = hash[:token]

data/lib/workos/user_management/invitation_accepted_data.rb

@@ -15,6 +15,7 @@ module WorkOS
       organization_id: :organization_id,
       inviter_user_id: :inviter_user_id,
       accepted_user_id: :accepted_user_id,
+      role_slug: :role_slug,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -30,6 +31,7 @@ module WorkOS
       :organization_id,
       :inviter_user_id,
       :accepted_user_id,
+      :role_slug,
       :created_at,
       :updated_at
 
@@ -45,6 +47,7 @@ module WorkOS
       @organization_id = hash[:organization_id]
       @inviter_user_id = hash[:inviter_user_id]
       @accepted_user_id = hash[:accepted_user_id]
+      @role_slug = hash[:role_slug]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end

data/lib/workos/user_management/invitation_created_data.rb

@@ -15,6 +15,7 @@ module WorkOS
       organization_id: :organization_id,
       inviter_user_id: :inviter_user_id,
       accepted_user_id: :accepted_user_id,
+      role_slug: :role_slug,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -30,6 +31,7 @@ module WorkOS
       :organization_id,
       :inviter_user_id,
       :accepted_user_id,
+      :role_slug,
       :created_at,
       :updated_at
 
@@ -45,6 +47,7 @@ module WorkOS
       @organization_id = hash[:organization_id]
       @inviter_user_id = hash[:inviter_user_id]
       @accepted_user_id = hash[:accepted_user_id]
+      @role_slug = hash[:role_slug]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end

data/lib/workos/user_management/invitation_resent_data.rb

@@ -15,6 +15,7 @@ module WorkOS
       organization_id: :organization_id,
       inviter_user_id: :inviter_user_id,
       accepted_user_id: :accepted_user_id,
+      role_slug: :role_slug,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -30,6 +31,7 @@ module WorkOS
       :organization_id,
       :inviter_user_id,
       :accepted_user_id,
+      :role_slug,
       :created_at,
       :updated_at
 
@@ -45,6 +47,7 @@ module WorkOS
       @organization_id = hash[:organization_id]
       @inviter_user_id = hash[:inviter_user_id]
       @accepted_user_id = hash[:accepted_user_id]
+      @role_slug = hash[:role_slug]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end

data/lib/workos/user_management/invitation_revoked_data.rb

@@ -15,6 +15,7 @@ module WorkOS
       organization_id: :organization_id,
       inviter_user_id: :inviter_user_id,
       accepted_user_id: :accepted_user_id,
+      role_slug: :role_slug,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -30,6 +31,7 @@ module WorkOS
       :organization_id,
       :inviter_user_id,
       :accepted_user_id,
+      :role_slug,
       :created_at,
       :updated_at
 
@@ -45,6 +47,7 @@ module WorkOS
       @organization_id = hash[:organization_id]
       @inviter_user_id = hash[:inviter_user_id]
       @accepted_user_id = hash[:accepted_user_id]
+      @role_slug = hash[:role_slug]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end