workos 8.0.2 → 9.0.0

data/rbi/workos/vault_dek_read.rbi

@@ -9,6 +9,12 @@ module WorkOS
     sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
     def initialize(json); end
 
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
     sig { returns(String) }
     def id; end
 
@@ -39,12 +45,6 @@ module WorkOS
     sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
     def context=(value); end
 
-    sig { returns(String) }
-    def object; end
-
-    sig { params(value: String).returns(String) }
-    def object=(value); end
-
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/vault_kek_created.rbi

@@ -9,6 +9,12 @@ module WorkOS
     sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
     def initialize(json); end
 
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
     sig { returns(String) }
     def id; end
 
@@ -39,12 +45,6 @@ module WorkOS
     sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
     def context=(value); end
 
-    sig { returns(String) }
-    def object; end
-
-    sig { params(value: String).returns(String) }
-    def object=(value); end
-
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/vault_metadata_read.rbi

@@ -9,6 +9,12 @@ module WorkOS
     sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
     def initialize(json); end
 
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
     sig { returns(String) }
     def id; end
 
@@ -39,12 +45,6 @@ module WorkOS
     sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
     def context=(value); end
 
-    sig { returns(String) }
-    def object; end
-
-    sig { params(value: String).returns(String) }
-    def object=(value); end
-
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/vault_names_listed.rbi

@@ -9,6 +9,12 @@ module WorkOS
     sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
     def initialize(json); end
 
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
     sig { returns(String) }
     def id; end
 
@@ -39,12 +45,6 @@ module WorkOS
     sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
     def context=(value); end
 
-    sig { returns(String) }
-    def object; end
-
-    sig { params(value: String).returns(String) }
-    def object=(value); end
-
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/waitlist_user_approved.rbi

@@ -9,6 +9,12 @@ module WorkOS
     sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
     def initialize(json); end
 
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
     sig { returns(String) }
     def id; end
 
@@ -39,12 +45,6 @@ module WorkOS
     sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
     def context=(value); end
 
-    sig { returns(String) }
-    def object; end
-
-    sig { params(value: String).returns(String) }
-    def object=(value); end
-
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/waitlist_user_created.rbi

@@ -9,6 +9,12 @@ module WorkOS
     sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
     def initialize(json); end
 
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
     sig { returns(String) }
     def id; end
 
@@ -39,12 +45,6 @@ module WorkOS
     sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
     def context=(value); end
 
-    sig { returns(String) }
-    def object; end
-
-    sig { params(value: String).returns(String) }
-    def object=(value); end
-
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/waitlist_user_denied.rbi

@@ -9,6 +9,12 @@ module WorkOS
     sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
     def initialize(json); end
 
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
     sig { returns(String) }
     def id; end
 
@@ -39,12 +45,6 @@ module WorkOS
     sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
     def context=(value); end
 
-    sig { returns(String) }
-    def object; end
-
-    sig { params(value: String).returns(String) }
-    def object=(value); end
-
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/webhook_endpoint.rbi

@@ -1,4 +1,5 @@
 # frozen_string_literal: true
+
 # This file is auto-generated by oagen. Do not edit.
 
 # typed: strong

data/rbi/workos/webhooks.rbi

@@ -25,7 +25,7 @@ module WorkOS
         endpoint_url: String,
         events: T::Array[String],
         request_options: T::Hash[Symbol, T.untyped]
-      ).returns(WorkOS::WebhookEndpointJson)
+      ).returns(WorkOS::WebhookEndpoint)
     end
     def create_webhook_endpoint(endpoint_url:, events:, request_options:); end
 
@@ -36,7 +36,7 @@ module WorkOS
         status: T.nilable(String),
         events: T.nilable(T::Array[String]),
         request_options: T::Hash[Symbol, T.untyped]
-      ).returns(WorkOS::WebhookEndpointJson)
+      ).returns(WorkOS::WebhookEndpoint)
     end
     def update_webhook_endpoint(id:, endpoint_url:, status:, events:, request_options:); end
 

data/renovate.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
+    "github>workos/renovate-config"
   ],
   "dependencyDashboard": false,
   "schedule": [

data/test/workos/test_base_client.rb

@@ -82,36 +82,10 @@ class BaseClientTest < Minitest::Test
     end
   end
 
-  # A pooled connection that either returns a canned response or raises when
-  # driven, so execute_request can be exercised without real TCP+TLS.
-  class StubConnection < FakeConnection
-    attr_accessor :read_timeout, :open_timeout
-
-    def initialize(response: nil, error: nil, **kwargs)
-      super(**kwargs)
-      @response = response
-      @error = error
-    end
-
-    def request(_request)
-      raise @error if @error
-
-      @response
-    end
-  end
-
   def setup
     @client = WorkOS::BaseClient.new(api_key: "sk_test_123", max_retries: 1)
   end
 
-  def teardown
-    super
-    # Close any open connections and clear the fiber-local cache to avoid
-    # leaking pooled connections between tests.
-    @client.shutdown
-    Fiber[:workos_connections] = nil
-  end
-
   def test_request_dispatches_known_methods
     client = RecordingClient.new(api_key: "sk_test_123")
 
@@ -240,141 +214,4 @@ class BaseClientTest < Minitest::Test
     redacted = @client.send(:redact_path, "/user_management/magic_auth/magic_secret?token=qs_token")
     assert_equal "/user_management/magic_auth/[REDACTED]?token=[REDACTED]", redacted
   end
-
-  # An exception execute_request's rescue clause doesn't list still leaves the
-  # socket mid-stream, so the connection must not survive in the pool for the
-  # next request on this thread to pick up.
-  def test_unlisted_request_error_evicts_the_pooled_connection
-    conn = StubConnection.new(error: Net::HTTPBadResponse.new("wrong version"))
-    cache = @client.send(:thread_connections)
-    cache["https:api.workos.com:443:30"] = conn
-
-    assert_raises(Net::HTTPBadResponse) do
-      @client.execute_request(request: Net::HTTP::Get.new("/things"))
-    end
-
-    refute cache.key?("https:api.workos.com:443:30"),
-      "a connection whose request did not complete must not stay pooled"
-    assert conn.finished
-  end
-
-  def test_completed_request_keeps_the_connection_pooled
-    conn = StubConnection.new(response: Net::HTTPOK.new("1.1", "200", "OK"))
-    cache = @client.send(:thread_connections)
-    cache["https:api.workos.com:443:30"] = conn
-
-    @client.execute_request(request: Net::HTTP::Get.new("/things"))
-
-    assert cache.key?("https:api.workos.com:443:30")
-    refute conn.finished
-  end
-
-  # Raised asynchronously into the worker thread to stand in for a caller-side
-  # abort: Timeout.timeout, Thread#kill, a signal handler unwinding the stack.
-  # It descends from Exception rather than StandardError so that nothing in
-  # execute_request can catch it — the `ensure` is the only cleanup that runs.
-  class AbortSignal < Exception; end # standard:disable Lint/InheritException
-
-  # End-to-end regression test over a real keep-alive socket, for the failure
-  # the eviction actually prevents: request one is abandoned mid-flight, the
-  # server then writes response one onto that socket, and request two on the
-  # same thread reads those stale bytes as if they were its own response.
-  #
-  # Before the fix, request two sees marker "one" (or a mangled response) off
-  # the pooled socket. After it, the abandoned socket is closed and the server
-  # accepts a fresh connection for request two.
-  def test_aborted_request_does_not_leak_its_response_to_the_next_request
-    WebMock.disable!
-    server = TCPServer.new("127.0.0.1", 0)
-    port = server.addr[1]
-    client = WorkOS::BaseClient.new(
-      api_key: "sk_test_123",
-      base_url: "http://127.0.0.1:#{port}",
-      timeout: 5,
-      max_retries: 0
-    )
-
-    request_one_read = Queue.new
-    release_response_one = Queue.new
-    response_one_written = Queue.new
-    aborted = Queue.new
-    connections = Queue.new
-
-    server_thread = Thread.new do
-      # Connection one: read the request, then hold the response back until
-      # the client has been aborted and has unwound.
-      first = server.accept
-      connections << first
-      read_http_request(first)
-      request_one_read << true
-      release_response_one.pop
-      begin
-        write_http_response(first, {marker: "one"})
-      rescue Errno::EPIPE, Errno::ECONNRESET, IOError
-        # Expected once the fix closes the abandoned socket.
-      end
-      response_one_written << true
-
-      # Connection two: a fresh accept, which only completes because the
-      # client did not reuse the socket above.
-      second = server.accept
-      connections << second
-      read_http_request(second)
-      write_http_response(second, {marker: "two"})
-    end
-
-    worker = Thread.new do
-      begin
-        client.execute_request(request: Net::HTTP::Get.new("/one"))
-      rescue AbortSignal
-        # The caller unwinds but the thread survives and goes on to serve more
-        # work, the way a Puma or Solid Queue worker does. execute_request's
-        # `ensure` has already run by the time this body executes.
-        aborted << true
-        response_one_written.pop
-      end
-      response = client.execute_request(request: Net::HTTP::Get.new("/two"))
-      JSON.parse(response.body)["marker"]
-    end
-
-    marker = Timeout.timeout(15) do
-      request_one_read.pop
-      worker.raise(AbortSignal)
-      aborted.pop
-      release_response_one << true
-      worker.value
-    end
-
-    assert_equal "two", marker,
-      "request two read the abandoned socket's response instead of its own"
-  ensure
-    server_thread&.kill
-    worker&.kill
-    until connections.nil? || connections.empty?
-      socket = connections.pop
-      socket.close unless socket.closed?
-    end
-    server&.close
-    WebMock.enable!
-  end
-
-  def read_http_request(socket)
-    socket.gets # request line
-    loop do
-      line = socket.gets
-      break if line.nil? || line == "\r\n"
-    end
-  end
-
-  def write_http_response(socket, body)
-    payload = JSON.generate(body)
-    socket.write(
-      "HTTP/1.1 200 OK\r\n" \
-      "Content-Type: application/json\r\n" \
-      "Content-Length: #{payload.bytesize}\r\n" \
-      "Connection: keep-alive\r\n" \
-      "\r\n#{payload}"
-    )
-    socket.flush
-  end
 end