workos 7.1.2 → 8.0.1

data/test/workos/test_webhook_verify.rb

@@ -60,6 +60,17 @@ class WebhookVerifyTest < Minitest::Test
     assert_match(/Timestamp outside the tolerance zone/, err.message)
   end
 
+  def test_verify_header_raises_on_future_timestamp
+    payload = '{"x":1}'
+    future_ts = now_ms + (10 * 60 * 1000) # 10 minutes ahead
+    sig = OpenSSL::HMAC.hexdigest("SHA256", SECRET, "#{future_ts}.#{payload}")
+    header = "t=#{future_ts}, v1=#{sig}"
+    err = assert_raises(WorkOS::SignatureVerificationError) do
+      @webhooks.verify_header(payload: payload, sig_header: header, secret: SECRET, tolerance: 60)
+    end
+    assert_match(/Timestamp outside the tolerance zone/, err.message)
+  end
+
   def test_verify_header_raises_on_malformed_header
     assert_raises(WorkOS::SignatureVerificationError) do
       @webhooks.verify_header(payload: "{}", sig_header: "garbage", secret: SECRET)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: workos
 version: !ruby/object:Gem::Version
-  version: 7.1.2
+  version: 8.0.1
 platform: ruby
 authors:
 - WorkOS
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-05-06 00:00:00.000000000 Z
+date: 2026-05-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -132,6 +132,7 @@ files:
 - ".github/CODEOWNERS"
 - ".github/pull_request_template.md"
 - ".github/workflows/ci.yml"
+- ".github/workflows/docs.yml"
 - ".github/workflows/lint-pr-title.yml"
 - ".github/workflows/lint.yml"
 - ".github/workflows/release-please.yml"
@@ -142,6 +143,7 @@ files:
 - ".release-please-manifest.json"
 - ".ruby-version"
 - ".standard.yml"
+- ".yardopts"
 - CHANGELOG.md
 - Gemfile
 - Gemfile.lock
@@ -171,9 +173,11 @@ files:
 - lib/workos/api_keys/api_key_revoked_data.rb
 - lib/workos/api_keys/api_key_revoked_data_owner.rb
 - lib/workos/api_keys/api_key_validation_response.rb
-- lib/workos/api_keys/api_key_with_value.rb
-- lib/workos/api_keys/api_key_with_value_owner.rb
 - lib/workos/api_keys/create_organization_api_key.rb
+- lib/workos/api_keys/organization_api_key.rb
+- lib/workos/api_keys/organization_api_key_owner.rb
+- lib/workos/api_keys/organization_api_key_with_value.rb
+- lib/workos/api_keys/organization_api_key_with_value_owner.rb
 - lib/workos/api_keys/validate_api_key.rb
 - lib/workos/audit_logs.rb
 - lib/workos/audit_logs/audit_log_action.rb
@@ -213,8 +217,6 @@ files:
 - lib/workos/authorization/permission_updated_data.rb
 - lib/workos/authorization/remove_role.rb
 - lib/workos/authorization/role.rb
-- lib/workos/authorization/role_assignment.rb
-- lib/workos/authorization/role_assignment_resource.rb
 - lib/workos/authorization/role_created.rb
 - lib/workos/authorization/role_created_data.rb
 - lib/workos/authorization/role_deleted.rb
@@ -229,6 +231,8 @@ files:
 - lib/workos/authorization/update_organization_role.rb
 - lib/workos/authorization/update_role.rb
 - lib/workos/authorization/user_organization_membership_base_list_data.rb
+- lib/workos/authorization/user_role_assignment.rb
+- lib/workos/authorization/user_role_assignment_resource.rb
 - lib/workos/base_client.rb
 - lib/workos/client.rb
 - lib/workos/configuration.rb
@@ -449,20 +453,17 @@ files:
 - lib/workos/sso/sso_token_response_oauth_token.rb
 - lib/workos/sso/token_query.rb
 - lib/workos/types/api_response.rb
-- lib/workos/types/applications_order.rb
 - lib/workos/types/audit_log_configuration_log_stream_state.rb
 - lib/workos/types/audit_log_configuration_log_stream_type.rb
 - lib/workos/types/audit_log_configuration_state.rb
 - lib/workos/types/audit_log_export_json_state.rb
 - lib/workos/types/audit_log_export_state.rb
-- lib/workos/types/audit_logs_order.rb
 - lib/workos/types/authenticate_response_authentication_method.rb
 - lib/workos/types/authentication_factor_enrolled_type.rb
 - lib/workos/types/authentication_factor_type.rb
 - lib/workos/types/authentication_factors_create_request_type.rb
 - lib/workos/types/authentication_radar_risk_detected_data_action.rb
 - lib/workos/types/authorization_assignment.rb
-- lib/workos/types/authorization_order.rb
 - lib/workos/types/base_model.rb
 - lib/workos/types/connected_account_state.rb
 - lib/workos/types/connection_activated_data_connection_type.rb
@@ -479,20 +480,16 @@ files:
 - lib/workos/types/connection_status.rb
 - lib/workos/types/connection_type.rb
 - lib/workos/types/connections_connection_type.rb
-- lib/workos/types/connections_order.rb
 - lib/workos/types/create_user_invite_options_locale.rb
 - lib/workos/types/create_user_password_hash_type.rb
 - lib/workos/types/create_webhook_endpoint_events.rb
 - lib/workos/types/data_integration_access_token_response_error.rb
 - lib/workos/types/data_integrations_list_response_data_connected_account_state.rb
 - lib/workos/types/data_integrations_list_response_data_ownership.rb
-- lib/workos/types/directories_order.rb
-- lib/workos/types/directory_groups_order.rb
 - lib/workos/types/directory_state.rb
 - lib/workos/types/directory_type.rb
 - lib/workos/types/directory_user_state.rb
 - lib/workos/types/directory_user_with_groups_state.rb
-- lib/workos/types/directory_users_order.rb
 - lib/workos/types/dsync_activated_data_state.rb
 - lib/workos/types/dsync_activated_data_type.rb
 - lib/workos/types/dsync_deactivated_data_state.rb
@@ -501,8 +498,6 @@ files:
 - lib/workos/types/dsync_deleted_data_type.rb
 - lib/workos/types/dsync_user_updated_data_state.rb
 - lib/workos/types/event_context_actor_source.rb
-- lib/workos/types/events_order.rb
-- lib/workos/types/feature_flags_order.rb
 - lib/workos/types/flag_created_context_actor_source.rb
 - lib/workos/types/flag_deleted_context_actor_source.rb
 - lib/workos/types/flag_rule_updated_context_access_type.rb
@@ -510,7 +505,6 @@ files:
 - lib/workos/types/flag_rule_updated_context_previous_attribute_context_access_type.rb
 - lib/workos/types/flag_updated_context_actor_source.rb
 - lib/workos/types/generate_link_intent.rb
-- lib/workos/types/groups_order.rb
 - lib/workos/types/invitation_accepted_data_state.rb
 - lib/workos/types/invitation_created_data_state.rb
 - lib/workos/types/invitation_resent_data_state.rb
@@ -543,10 +537,7 @@ files:
 - lib/workos/types/organization_membership_updated_data_status.rb
 - lib/workos/types/organization_updated_data_domain_state.rb
 - lib/workos/types/organization_updated_data_domain_verification_strategy.rb
-- lib/workos/types/organizations_api_keys_order.rb
-- lib/workos/types/organizations_feature_flags_order.rb
-- lib/workos/types/organizations_order.rb
-- lib/workos/types/permissions_order.rb
+- lib/workos/types/pagination_order.rb
 - lib/workos/types/profile_connection_type.rb
 - lib/workos/types/radar_action.rb
 - lib/workos/types/radar_standalone_assess_request_action.rb
@@ -570,19 +561,12 @@ files:
 - lib/workos/types/user_invite_state.rb
 - lib/workos/types/user_management_authentication_provider.rb
 - lib/workos/types/user_management_authentication_screen_hint.rb
-- lib/workos/types/user_management_invitations_order.rb
-- lib/workos/types/user_management_multi_factor_authentication_order.rb
-- lib/workos/types/user_management_organization_membership_groups_order.rb
-- lib/workos/types/user_management_organization_membership_order.rb
 - lib/workos/types/user_management_organization_membership_statuses.rb
-- lib/workos/types/user_management_users_authorized_applications_order.rb
-- lib/workos/types/user_management_users_feature_flags_order.rb
-- lib/workos/types/user_management_users_order.rb
 - lib/workos/types/user_organization_membership_base_list_data_status.rb
 - lib/workos/types/user_organization_membership_status.rb
 - lib/workos/types/user_sessions_auth_method.rb
 - lib/workos/types/user_sessions_status.rb
-- lib/workos/types/vault_byok_key_verification_completed_data_key_provider.rb
+- lib/workos/types/vault_byok_key_provider.rb
 - lib/workos/types/vault_data_created_data_actor_source.rb
 - lib/workos/types/vault_data_deleted_data_actor_source.rb
 - lib/workos/types/vault_data_read_data_actor_source.rb
@@ -595,7 +579,6 @@ files:
 - lib/workos/types/waitlist_user_state.rb
 - lib/workos/types/webhook_endpoint_json_status.rb
 - lib/workos/types/webhook_endpoint_status.rb
-- lib/workos/types/webhooks_order.rb
 - lib/workos/types/widget_session_token_scopes.rb
 - lib/workos/user_management.rb
 - lib/workos/user_management/action_authentication_denied.rb
@@ -661,6 +644,7 @@ files:
 - lib/workos/user_management/create_password_reset_token.rb
 - lib/workos/user_management/create_redirect_uri.rb
 - lib/workos/user_management/create_user.rb
+- lib/workos/user_management/create_user_api_key.rb
 - lib/workos/user_management/create_user_invite_options.rb
 - lib/workos/user_management/create_user_organization_membership.rb
 - lib/workos/user_management/device_authorization_response.rb
@@ -715,6 +699,12 @@ files:
 - lib/workos/user_management/update_user.rb
 - lib/workos/user_management/update_user_organization_membership.rb
 - lib/workos/user_management/user.rb
+- lib/workos/user_management/user_api_key.rb
+- lib/workos/user_management/user_api_key_created_data_owner.rb
+- lib/workos/user_management/user_api_key_owner.rb
+- lib/workos/user_management/user_api_key_revoked_data_owner.rb
+- lib/workos/user_management/user_api_key_with_value.rb
+- lib/workos/user_management/user_api_key_with_value_owner.rb
 - lib/workos/user_management/user_created.rb
 - lib/workos/user_management/user_deleted.rb
 - lib/workos/user_management/user_identities_get_item.rb
@@ -729,6 +719,8 @@ files:
 - lib/workos/util.rb
 - lib/workos/util/signature.rb
 - lib/workos/vault.rb
+- lib/workos/vault/vault_byok_key_deleted.rb
+- lib/workos/vault/vault_byok_key_deleted_data.rb
 - lib/workos/vault/vault_byok_key_verification_completed.rb
 - lib/workos/vault/vault_byok_key_verification_completed_data.rb
 - lib/workos/vault/vault_data_created.rb
@@ -775,8 +767,6 @@ files:
 - rbi/workos/api_key_revoked_data.rbi
 - rbi/workos/api_key_revoked_data_owner.rbi
 - rbi/workos/api_key_validation_response.rbi
-- rbi/workos/api_key_with_value.rbi
-- rbi/workos/api_key_with_value_owner.rbi
 - rbi/workos/api_keys.rbi
 - rbi/workos/application_credentials_list_item.rbi
 - rbi/workos/assign_role.rbi
@@ -913,6 +903,7 @@ files:
 - rbi/workos/create_redirect_uri.rbi
 - rbi/workos/create_role.rbi
 - rbi/workos/create_user.rbi
+- rbi/workos/create_user_api_key.rbi
 - rbi/workos/create_user_invite_options.rbi
 - rbi/workos/create_user_organization_membership.rbi
 - rbi/workos/create_webhook_endpoint.rbi
@@ -1042,6 +1033,10 @@ files:
 - rbi/workos/multi_factor_auth.rbi
 - rbi/workos/new_connect_application_secret.rbi
 - rbi/workos/organization.rbi
+- rbi/workos/organization_api_key.rbi
+- rbi/workos/organization_api_key_owner.rbi
+- rbi/workos/organization_api_key_with_value.rbi
+- rbi/workos/organization_api_key_with_value_owner.rbi
 - rbi/workos/organization_created.rbi
 - rbi/workos/organization_created_data.rbi
 - rbi/workos/organization_created_data_domain.rbi
@@ -1115,8 +1110,6 @@ files:
 - rbi/workos/reset_password_response.rbi
 - rbi/workos/revoke_session.rbi
 - rbi/workos/role.rbi
-- rbi/workos/role_assignment.rbi
-- rbi/workos/role_assignment_resource.rbi
 - rbi/workos/role_created.rbi
 - rbi/workos/role_created_data.rbi
 - rbi/workos/role_deleted.rbi
@@ -1162,6 +1155,12 @@ files:
 - rbi/workos/update_user_organization_membership.rbi
 - rbi/workos/update_webhook_endpoint.rbi
 - rbi/workos/user.rbi
+- rbi/workos/user_api_key.rbi
+- rbi/workos/user_api_key_created_data_owner.rbi
+- rbi/workos/user_api_key_owner.rbi
+- rbi/workos/user_api_key_revoked_data_owner.rbi
+- rbi/workos/user_api_key_with_value.rbi
+- rbi/workos/user_api_key_with_value_owner.rbi
 - rbi/workos/user_authentication_factor_enroll_response.rbi
 - rbi/workos/user_consent_option.rbi
 - rbi/workos/user_consent_option_choice.rbi
@@ -1175,12 +1174,16 @@ files:
 - rbi/workos/user_object.rbi
 - rbi/workos/user_organization_membership.rbi
 - rbi/workos/user_organization_membership_base_list_data.rbi
+- rbi/workos/user_role_assignment.rbi
+- rbi/workos/user_role_assignment_resource.rbi
 - rbi/workos/user_sessions_impersonator.rbi
 - rbi/workos/user_sessions_list_item.rbi
 - rbi/workos/user_updated.rbi
 - rbi/workos/util.rbi
 - rbi/workos/validate_api_key.rbi
 - rbi/workos/vault.rbi
+- rbi/workos/vault_byok_key_deleted.rbi
+- rbi/workos/vault_byok_key_deleted_data.rbi
 - rbi/workos/vault_byok_key_verification_completed.rbi
 - rbi/workos/vault_byok_key_verification_completed_data.rbi
 - rbi/workos/vault_data_created.rbi
@@ -1216,6 +1219,9 @@ files:
 - release-please-config.json
 - renovate.json
 - script/ci
+- script/docs
+- script/docs-serve
+- script/llms-txt
 - test/test_helper.rb
 - test/workos/test_actions.rb
 - test/workos/test_admin_portal.rb

data/lib/workos/types/authorization_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    AuthorizationOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/connections_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    ConnectionsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/directories_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    DirectoriesOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/directory_groups_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    DirectoryGroupsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/directory_users_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    DirectoryUsersOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/feature_flags_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    FeatureFlagsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/organizations_api_keys_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    OrganizationsApiKeysOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/organizations_feature_flags_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    OrganizationsFeatureFlagsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/organizations_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    OrganizationsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/permissions_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    PermissionsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/user_management_invitations_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    UserManagementInvitationsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/user_management_multi_factor_authentication_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    UserManagementMultiFactorAuthenticationOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/user_management_organization_membership_groups_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    UserManagementOrganizationMembershipGroupsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/user_management_organization_membership_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    UserManagementOrganizationMembershipOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/user_management_users_authorized_applications_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    UserManagementUsersAuthorizedApplicationsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/user_management_users_feature_flags_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    UserManagementUsersFeatureFlagsOrder = ApplicationsOrder
-  end
-end

data/lib/workos/types/user_management_users_order.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# This file is auto-generated by oagen. Do not edit.
-
-module WorkOS
-  module Types
-    UserManagementUsersOrder = ApplicationsOrder
-  end
-end