workos 9.0.0 → 9.2.0

data/CHANGELOG.md

@@ -1,5 +1,94 @@
 # Changelog
 
+## [9.2.0](https://github.com/workos/workos-ruby/compare/v9.1.0...v9.2.0) (2026-06-18)
+
+- [#501](https://github.com/workos/workos-ruby/pull/501) feat(generated)!: regenerate from spec (12 changes)
+
+  **Features**
+  - **[authorization](https://workos.com/docs/reference/fga)**:
+    - Added model `ReplaceGroupRoleAssignmentEntry`
+    - Added model `ReplaceGroupRoleAssignments`
+    - Added model `DeleteGroupRoleAssignmentsByCriteria`
+    - Added endpoint `POST /authorization/groups/{group_id}/role_assignments`
+    - Added endpoint `PUT /authorization/groups/{group_id}/role_assignments`
+    - Added endpoint `DELETE /authorization/groups/{group_id}/role_assignments`
+    - Added endpoint `GET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}`
+    - Added endpoint `DELETE /authorization/groups/{group_id}/role_assignments/{role_assignment_id}`
+  - **[client](https://workos.com/docs/reference)**:
+    - Added model `ClientApiToken`
+    - Added model `ClientApiTokenResponse`
+    - Added service `Client`
+  - **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    - Added `auth_method` to `ConnectedAccount`
+    - Added `api_key_last_4` to `ConnectedAccount`
+    - Added enum `ConnectedAccountAuthMethod`
+  - **[groups](https://workos.com/docs/reference/groups)**:
+    - Added model `CreateGroupRoleAssignment`
+    - Added model `GroupRoleAssignment`
+    - Added model `GroupRoleAssignmentList`
+    - Added model `GroupRoleAssignmentResource`
+  - **[organization_membership](https://workos.com/docs/reference/authkit/organization-membership)**:
+    - Added model `UserOrganizationMembershipList`
+    - Added model `UserOrganizationMembershipListListMetadata`
+  - **[pipes](https://workos.com/docs/reference/pipes)**:
+    - Added model `DataIntegrationCredentials`
+    - Added model `DataIntegrationConfigurationResponse`
+    - Added model `DataIntegrationConfigurationListResponse`
+    - Added model `ConfigureDataIntegrationBody`
+    - Added `auth_methods` to `DataIntegrationsListResponseData`
+    - Added `auth_method` to `DataIntegrationsListResponseDataConnectedAccount`
+    - Added `api_key_last_4` to `DataIntegrationsListResponseDataConnectedAccount`
+    - Added enum `DataIntegrationCredentialsCredentialsType`
+    - Added enum `DataIntegrationsListResponseDataAuthMethods`
+    - Added enum `DataIntegrationsListResponseDataConnectedAccountAuthMethod`
+    - Added service `PipesProvider`
+  - **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    - Added model `UserInviteList`
+    - Added model `UserInviteListListMetadata`
+    - Made `AuthorizationCodeSessionAuthenticateRequest.client_secret` optional
+    - Made `RefreshTokenSessionAuthenticateRequest.client_secret` optional
+  - **[widgets](https://workos.com/docs/reference/widgets)**:
+    - Added `widgets:pipes:manage` to `WidgetSessionTokenScopes`
+
+  **Fixes**
+  - **[organization_membership](https://workos.com/docs/reference/authkit/organization-membership)**:
+    - Changed response of `UserManagementOrganizationMembership.list` from `UserOrganizationMembership` to `UserOrganizationMembershipList`
+  - **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    - Changed response of `UserManagementInvitations.list` from `UserInvite` to `UserInviteList`
+
+## [9.1.0](https://github.com/workos/workos-ruby/compare/v9.0.0...v9.1.0) (2026-06-17)
+
+### Bug Fixes
+
+* **renovate:** explicitly enable minor and patch updates ([#493](https://github.com/workos/workos-ruby/issues/493)) ([c6da3f3](https://github.com/workos/workos-ruby/commit/c6da3f3acdf4dd7a6a65b3ae6463102ff0c024e1))
+* Use Thread.current[] instead of Fiber[] for connection cache ([#499](https://github.com/workos/workos-ruby/issues/499)) ([a44d650](https://github.com/workos/workos-ruby/commit/a44d6500b29d05fe7a5a0ac7449d1a4bee88fd38))
+
+- [#495](https://github.com/workos/workos-ruby/pull/495) feat(generated): regenerate from spec (8 changes)
+
+  **Features**
+  - **[api_keys](https://workos.com/docs/reference/authkit/api-keys)**:
+    - Added model `ExpireApiKey`
+    - Added model `ApiKeyUpdated`
+    - Added model `ApiKeyUpdatedData`
+    - Added model `ApiKeyUpdatedDataOwner`
+    - Added model `UserApiKeyUpdatedDataOwner`
+    - Added model `ApiKeyUpdatedDataPreviousAttribute`
+    - Added endpoint `POST /api_keys/{id}/expire`
+  - **[audit_logs](https://workos.com/docs/reference/audit-logs)**:
+    - Added `Snowflake` to `AuditLogConfigurationLogStreamType`
+  - **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    - Added `name` to `UserObject`
+  - **[directory_sync](https://workos.com/docs/reference/directory-sync)**:
+    - Added model `DsyncTokenCreated`
+    - Added model `DsyncTokenCreatedData`
+    - Added model `DsyncTokenRevoked`
+    - Added model `DsyncTokenRevokedData`
+  - **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    - Added `name` to user management models
+  - **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    - Added `api_key.updated` to `CreateWebhookEndpointEvents`
+    - Added `api_key.updated` to `UpdateWebhookEndpointEvents`
+
 ## [9.0.0](https://github.com/workos/workos-ruby/compare/v8.0.1...v9.0.0) (2026-05-26)
 
 ### Bug Fixes

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    workos (9.0.0)
+    workos (9.2.0)
       jwt (~> 3.1)
       logger (~> 1.7)
       zeitwerk (~> 2.6)
@@ -90,7 +90,7 @@ GEM
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
     webrick (1.9.2)
-    yard (0.9.43)
+    yard (0.9.44)
     yard-markdown (0.7.1)
       csv
       rdoc
@@ -153,8 +153,8 @@ CHECKSUMS
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
-  workos (9.0.0)
-  yard (0.9.43) sha256=cf8733a8f0485df2a162927e9b5f182215a61f6d22de096b8f402c726a1c5821
+  workos (9.2.0)
+  yard (0.9.44) sha256=eb087e9b631ccd887b049f303d489963945452d5e2a7eb49a5a74a7cf6887f28
   yard-markdown (0.7.1) sha256=06c378632dfe7ba053be9ba469eb4701aa0470e36bcf7e5546f353eb90c1bfd1
   zeitwerk (2.7.5) sha256=d8da92128c09ea6ec62c949011b00ed4a20242b255293dd66bf41545398f73dd
 

data/lib/workos/{directory_sync/dsync_deactivated.rb → api_keys/api_key_updated.rb}

@@ -3,7 +3,7 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  class DsyncDeactivated < WorkOS::Types::BaseModel
+  class ApiKeyUpdated < WorkOS::Types::BaseModel
     HASH_ATTRS = {
       object: :object,
       id: :id,
@@ -26,7 +26,7 @@ module WorkOS
       @object = hash[:object]
       @id = hash[:id]
       @event = hash[:event]
-      @data = hash[:data] ? WorkOS::DsyncDeactivatedData.new(hash[:data]) : nil
+      @data = hash[:data] ? WorkOS::ApiKeyUpdatedData.new(hash[:data]) : nil
       @created_at = hash[:created_at]
       @context = hash[:context] ? WorkOS::EventContext.new(hash[:context]) : nil
     end

data/lib/workos/api_keys/api_key_updated_data.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ApiKeyUpdatedData < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      owner: :owner,
+      name: :name,
+      obfuscated_value: :obfuscated_value,
+      last_used_at: :last_used_at,
+      expires_at: :expires_at,
+      permissions: :permissions,
+      created_at: :created_at,
+      updated_at: :updated_at,
+      previous_attributes: :previous_attributes
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :owner,
+      :name,
+      :obfuscated_value,
+      :last_used_at,
+      :expires_at,
+      :permissions,
+      :created_at,
+      :updated_at,
+      :previous_attributes
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @owner = hash[:owner] ? (case hash[:owner][:type] when "organization" then WorkOS::ApiKeyUpdatedDataOwner.new(hash[:owner]) when "user" then WorkOS::UserApiKeyUpdatedDataOwner.new(hash[:owner]) else hash[:owner] end) : nil
+      @name = hash[:name]
+      @obfuscated_value = hash[:obfuscated_value]
+      @last_used_at = hash[:last_used_at]
+      @expires_at = hash[:expires_at]
+      @permissions = hash[:permissions] || []
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+      @previous_attributes = hash[:previous_attributes] ? WorkOS::ApiKeyUpdatedDataPreviousAttribute.new(hash[:previous_attributes]) : nil
+    end
+  end
+end

data/lib/workos/{directory_sync/dsync_deactivated_data_domain.rb → api_keys/api_key_updated_data_owner.rb}

@@ -3,5 +3,5 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  DsyncDeactivatedDataDomain = DsyncActivatedDataDomain
+  ApiKeyUpdatedDataOwner = ApiKeyCreatedDataOwner
 end

data/lib/workos/api_keys/api_key_updated_data_previous_attribute.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ApiKeyUpdatedDataPreviousAttribute < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      expires_at: :expires_at
+    }.freeze
+
+    attr_accessor :expires_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @expires_at = hash[:expires_at]
+    end
+  end
+end

data/lib/workos/api_keys/expire_api_key.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ExpireApiKey < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      expires_at: :expires_at
+    }.freeze
+
+    attr_accessor :expires_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @expires_at = hash[:expires_at]
+    end
+  end
+end

data/lib/workos/api_keys.rb

@@ -127,5 +127,30 @@ module WorkOS
       )
       nil
     end
+
+    # Expire an API key
+    # @param id [String] The unique ID of the API key.
+    # @param expires_at [String, nil] When the API key should expire. If omitted or in the past, the key expires immediately. Use null to clear a scheduled future expiration.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ApiKey]
+    def create_api_key_expire(
+      id:,
+      expires_at: nil,
+      request_options: {}
+    )
+      body = {
+        "expires_at" => expires_at
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/api_keys/#{WorkOS::Util.encode_path(id)}/expire",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ApiKey.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
   end
 end

data/lib/workos/{types/dsync_deactivated_data_type.rb → authorization/create_group_role_assignment.rb}

@@ -3,7 +3,5 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  module Types
-    DsyncDeactivatedDataType = DsyncActivatedDataType
-  end
+  CreateGroupRoleAssignment = AssignRole
 end

data/lib/workos/authorization/delete_group_role_assignments_by_criteria.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  DeleteGroupRoleAssignmentsByCriteria = AssignRole
+end

data/lib/workos/authorization/group_role_assignment.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class GroupRoleAssignment < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      group_id: :group_id,
+      role: :role,
+      resource: :resource,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :group_id,
+      :role,
+      :resource,
+      :created_at,
+      :updated_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @group_id = hash[:group_id]
+      @role = hash[:role] ? WorkOS::SlimRole.new(hash[:role]) : nil
+      @resource = hash[:resource] ? WorkOS::GroupRoleAssignmentResource.new(hash[:resource]) : nil
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end

data/lib/workos/authorization/group_role_assignment_list.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class GroupRoleAssignmentList < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      data: :data,
+      list_metadata: :list_metadata
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :data,
+      :list_metadata
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @data = (hash[:data] || []).map { |item| item ? WorkOS::GroupRoleAssignment.new(item) : nil }
+      @list_metadata = hash[:list_metadata] ? WorkOS::ListMetadata.new(hash[:list_metadata]) : nil
+    end
+  end
+end

data/lib/workos/authorization/group_role_assignment_resource.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class GroupRoleAssignmentResource < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      id: :id,
+      external_id: :external_id,
+      resource_type_slug: :resource_type_slug
+    }.freeze
+
+    attr_accessor \
+      :id,
+      :external_id,
+      :resource_type_slug
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @id = hash[:id]
+      @external_id = hash[:external_id]
+      @resource_type_slug = hash[:resource_type_slug]
+    end
+  end
+end

data/lib/workos/authorization/replace_group_role_assignment_entry.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  ReplaceGroupRoleAssignmentEntry = AssignRole
+end

data/lib/workos/authorization/replace_group_role_assignments.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ReplaceGroupRoleAssignments < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      role_assignments: :role_assignments
+    }.freeze
+
+    attr_accessor :role_assignments
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @role_assignments = (hash[:role_assignments] || []).map { |item| item ? WorkOS::ReplaceGroupRoleAssignmentEntry.new(item) : nil }
+    end
+  end
+end

data/lib/workos/authorization/user_role_assignment_resource.rb

@@ -3,23 +3,5 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  class UserRoleAssignmentResource < WorkOS::Types::BaseModel
-    HASH_ATTRS = {
-      id: :id,
-      external_id: :external_id,
-      resource_type_slug: :resource_type_slug
-    }.freeze
-
-    attr_accessor \
-      :id,
-      :external_id,
-      :resource_type_slug
-
-    def initialize(json)
-      hash = self.class.normalize(json)
-      @id = hash[:id]
-      @external_id = hash[:external_id]
-      @resource_type_slug = hash[:resource_type_slug]
-    end
-  end
+  UserRoleAssignmentResource = GroupRoleAssignmentResource
 end