workos 10.1.0 → 10.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4ed7a1c92c327c1fe2a2f2a582be522670e33f085ca6b7b44f8cb3c968e231bf
-  data.tar.gz: d78826116d38974783cb835dd51890b7aa98dbb2fab67a4a9bc00b8e691c3f0b
+  metadata.gz: 63f6d02af5ecf1ab9f62af255a77ef281f8763b3e6c56feeb6ee87da3817c29d
+  data.tar.gz: 1691eb9636159a73295a6baabf6b63103bfc868f4f7660e49ae12644d7f27efa
 SHA512:
-  metadata.gz: fa5d2429aa5a63556852efadafb0c01cd2d9d26500513cbe520d4501fb8ade808423a7245f302726d295c24b4a9f7714c280a955964b5bf401bdc2d17be18b9e
-  data.tar.gz: 061b36f82c50b4a2e5c0f8ba94777f1dac191ceddc3206683d472f28775979a10161bd926cf902c618cfddb22bce50f5706bee986a7088dc7678af2dcfe6a59e
+  metadata.gz: 7b421f5433d3001c3dcb8de0aeddf93805bcbddd73c1a9c475b65f6c66b4e1a442d2a6eca5c37444f9dc97481abf5c7f05799bd914431de5411f368566e85a99
+  data.tar.gz: c6376c12ff9efe67ac13aaf63e63a3c5ddcad6926272b0cc1c36cde0ac4ed858c10157b3ee064143152a73c28674d848ecd81f200a2f64b1e7ae2a23def4c44a

data/.last-synced-sha

@@ -1 +1 @@
-ae3ebbb08d9b4bf9b2391558e820b7eb6f511fb9
+a07d8e7988d035c2d727787f18f64d71b4b89a84

data/.oagen-manifest.json

@@ -279,6 +279,7 @@
     "lib/workos/pipes/data_integrations_list_response_data.rb",
     "lib/workos/pipes/data_integrations_list_response_data_connected_account.rb",
     "lib/workos/pipes/data_integrations_upsert_api_key_request.rb",
+    "lib/workos/pipes/data_integrations_upsert_client_credentials_request.rb",
     "lib/workos/pipes/data_integrations_vend_credentials_request.rb",
     "lib/workos/pipes/update_custom_provider_definition.rb",
     "lib/workos/pipes/update_data_integration.rb",
@@ -312,6 +313,8 @@
     "lib/workos/shared/agent_registration_expired_data.rb",
     "lib/workos/shared/agent_registration_organization_switched.rb",
     "lib/workos/shared/agent_registration_organization_switched_data.rb",
+    "lib/workos/shared/agent_registration_refreshed.rb",
+    "lib/workos/shared/agent_registration_refreshed_data.rb",
     "lib/workos/shared/agent_registration_revoked.rb",
     "lib/workos/shared/agent_registration_revoked_data.rb",
     "lib/workos/shared/auth_method_mismatch_error.rb",
@@ -405,6 +408,7 @@
     "lib/workos/types/create_data_integration_auth_methods.rb",
     "lib/workos/types/create_user_invite_options_locale.rb",
     "lib/workos/types/create_user_password_hash_type.rb",
+    "lib/workos/types/create_user_password_salt_position.rb",
     "lib/workos/types/create_webhook_endpoint_events.rb",
     "lib/workos/types/custom_provider_definition_authenticate_via.rb",
     "lib/workos/types/data_integration_access_token_response_error.rb",
@@ -484,6 +488,7 @@
     "lib/workos/types/sso_provider.rb",
     "lib/workos/types/update_custom_provider_definition_authenticate_via.rb",
     "lib/workos/types/update_user_password_hash_type.rb",
+    "lib/workos/types/update_user_password_salt_position.rb",
     "lib/workos/types/update_webhook_endpoint_events.rb",
     "lib/workos/types/update_webhook_endpoint_status.rb",
     "lib/workos/types/user_identities_get_item_provider.rb",
@@ -732,6 +737,8 @@
     "rbi/workos/agent_registration_expired_data.rbi",
     "rbi/workos/agent_registration_organization_switched.rbi",
     "rbi/workos/agent_registration_organization_switched_data.rbi",
+    "rbi/workos/agent_registration_refreshed.rbi",
+    "rbi/workos/agent_registration_refreshed_data.rbi",
     "rbi/workos/agent_registration_revoked.rbi",
     "rbi/workos/agent_registration_revoked_data.rbi",
     "rbi/workos/agents.rbi",
@@ -921,6 +928,7 @@
     "rbi/workos/data_integrations_list_response_data.rbi",
     "rbi/workos/data_integrations_list_response_data_connected_account.rbi",
     "rbi/workos/data_integrations_upsert_api_key_request.rbi",
+    "rbi/workos/data_integrations_upsert_client_credentials_request.rbi",
     "rbi/workos/data_integrations_vend_credentials_request.rbi",
     "rbi/workos/decrypt_request.rbi",
     "rbi/workos/decrypt_response.rbi",
@@ -2186,6 +2194,10 @@
     "GET /audit_logs/exports/{auditLogExportId}": {
       "sdkMethod": "get_export",
       "service": "audit_logs"
+    },
+    "PUT /data-integrations/{slug}/client-credentials": {
+      "sdkMethod": "update_data_integration_client_credentials",
+      "service": "pipes"
     }
   }
 }

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "10.1.0"
+  ".": "10.2.0"
 }

data/CHANGELOG.md

@@ -1,5 +1,61 @@
 # Changelog
 
+## [10.2.0](https://github.com/workos/workos-ruby/compare/v10.1.0...v10.2.0) (2026-08-11)
+
+* [#533](https://github.com/workos/workos-ruby/pull/533) feat(generated)!: regenerate from spec (2 changes)
+
+  **⚠️ Breaking**
+  * **[events](https://workos.com/docs/reference/events)**:
+    * Changed required status for parameter `Events.list.events`
+
+  **Features**
+  * **[groups](https://workos.com/docs/reference/groups)**:
+    * Added parameter `Groups.list.search`
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added `client_id` to `ConnectedAccount`
+    * Added `client_secret_last_4` to `ConnectedAccount`
+    * Added `config` to `ConnectedAccount`
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added `client_id` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `client_secret_last_4` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `config` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Changed errors for endpoint `POST /data-integrations/{slug}/credentials`
+    * Made `CustomProviderDefinition.authorization_url` optional
+    * Made `CustomProviderDefinition.token_url` optional
+    * Added model `DataIntegrationsUpsertClientCredentialsRequest`
+    * Added `client_credentials` to `CreateDataIntegrationAuthMethods`
+    * Added endpoint `PUT /data-integrations/{slug}/client-credentials`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added `XOAuth` to `ConnectionType`
+    * Added `XOAuth` to `ProfileConnectionType`
+    * Added `XOAuth` to `ConnectionsConnectionType`
+    * Added `GrokOAuth` to `ConnectionType`
+    * Added `GrokOAuth` to `ProfileConnectionType`
+    * Added `GrokOAuth` to `ConnectionsConnectionType`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `DELETE /user_management/users/{id}`
+    * Added `password_salt_position` to `CreateUser`
+    * Added `password_salt_position` to `UpdateUser`
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.verification_id` optional
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.phone_number` optional
+    * Added enum `CreateUserPasswordSaltPosition`
+    * Added enum `UpdateUserPasswordSaltPosition`
+    * Added `XOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `XOAuth` to `UserIdentitiesGetItemProvider`
+    * Added `GrokOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `GrokOAuth` to `UserIdentitiesGetItemProvider`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.registration.refreshed` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.refreshed` to `UpdateWebhookEndpointEvents`
+
+  **Fixes**
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Changed the type of `DataIntegration.credentials`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `POST /user_management/authenticate`
+    * Changed errors for endpoint `POST /user_management/users`
+    * Changed errors for endpoint `PUT /user_management/users/{id}`
+
 ## [10.1.0](https://github.com/workos/workos-ruby/compare/v10.0.0...v10.1.0) (2026-07-28)
 
 ### Features

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    workos (10.1.0)
+    workos (10.2.0)
       jwt (~> 3.1)
       logger (~> 1.7)
       zeitwerk (~> 2.6)
@@ -153,7 +153,7 @@ CHECKSUMS
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
-  workos (10.1.0)
+  workos (10.2.0)
   yard (0.9.44) sha256=eb087e9b631ccd887b049f303d489963945452d5e2a7eb49a5a74a7cf6887f28
   yard-markdown (0.7.1) sha256=06c378632dfe7ba053be9ba469eb4701aa0470e36bcf7e5546f353eb90c1bfd1
   zeitwerk (2.7.5) sha256=d8da92128c09ea6ec62c949011b00ed4a20242b255293dd66bf41545398f73dd

data/lib/workos/connect.rb

@@ -135,7 +135,7 @@ module WorkOS
       result
     end
 
-    # Create oauth application.
+    # Create OAuth application.
     # @param name [String]
     # @param is_first_party [Boolean]
     # @param description [String, nil]
@@ -175,7 +175,7 @@ module WorkOS
       WorkOS::ConnectApplication.new(response.body)
     end
 
-    # Create m2m application.
+    # Create M2M application.
     # @param name [String]
     # @param organization_id [String]
     # @param description [String, nil]

data/lib/workos/events.rb

@@ -15,18 +15,18 @@ module WorkOS
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
     # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
-    # @param events [Array<String>, nil] Filter events by one or more event types (e.g. `dsync.user.created`).
+    # @param events [Array<String>] Filter events by one or more event types (e.g. `dsync.user.created`).
     # @param range_start [String, nil] ISO-8601 date string to filter events created after this date.
     # @param range_end [String, nil] ISO-8601 date string to filter events created before this date.
     # @param organization_id [String, nil] Filter events by the [Organization](https://workos.com/docs/reference/organization) that the event is associated with.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::EventSchema>]
     def list_events(
+      events:,
       before: nil,
       after: nil,
       limit: 10,
       order: "desc",
-      events: nil,
       range_start: nil,
       range_end: nil,
       organization_id: nil,

data/lib/workos/groups.rb

@@ -16,6 +16,7 @@ module WorkOS
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
     # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param search [String, nil] Search groups by name or by group ID.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::Group>]
     def list_organization_groups(
@@ -24,13 +25,15 @@ module WorkOS
       after: nil,
       limit: 10,
       order: "desc",
+      search: nil,
       request_options: {}
     )
       params = {
         "before" => before,
         "after" => after,
         "limit" => limit,
-        "order" => order
+        "order" => order,
+        "search" => search
       }.compact
       response = @client.request(
         method: :get,
@@ -46,13 +49,14 @@ module WorkOS
           after: cursor,
           limit: limit,
           order: order,
+          search: search,
           request_options: request_options
         )
       }
       WorkOS::Types::ListStruct.from_response(
         response,
         model: WorkOS::Group,
-        filters: {organization_id: organization_id, before: before, limit: limit, order: order},
+        filters: {organization_id: organization_id, before: before, limit: limit, order: order, search: search},
         fetch_next: fetch_next
       )
     end

data/lib/workos/pipes/connected_account.rb

@@ -12,6 +12,9 @@ module WorkOS
       scopes: :scopes,
       auth_method: :auth_method,
       api_key_last_4: :api_key_last_4,
+      client_id: :client_id,
+      client_secret_last_4: :client_secret_last_4,
+      config: :config,
       state: :state,
       created_at: :created_at,
       updated_at: :updated_at
@@ -25,6 +28,9 @@ module WorkOS
       :scopes,
       :auth_method,
       :api_key_last_4,
+      :client_id,
+      :client_secret_last_4,
+      :config,
       :state,
       :created_at,
       :updated_at
@@ -38,6 +44,9 @@ module WorkOS
       @scopes = hash[:scopes] || []
       @auth_method = hash[:auth_method]
       @api_key_last_4 = hash[:api_key_last_4]
+      @client_id = hash[:client_id]
+      @client_secret_last_4 = hash[:client_secret_last_4]
+      @config = hash[:config] || {}
       @state = hash[:state]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

data/lib/workos/pipes/data_integrations_list_response_data_connected_account.rb

@@ -12,6 +12,9 @@ module WorkOS
       scopes: :scopes,
       auth_method: :auth_method,
       api_key_last_4: :api_key_last_4,
+      client_id: :client_id,
+      client_secret_last_4: :client_secret_last_4,
+      config: :config,
       state: :state,
       created_at: :created_at,
       updated_at: :updated_at,
@@ -29,6 +32,9 @@ module WorkOS
       :scopes,
       :auth_method,
       :api_key_last_4,
+      :client_id,
+      :client_secret_last_4,
+      :config,
       :state,
       :created_at,
       :updated_at
@@ -49,6 +55,9 @@ module WorkOS
       @scopes = hash[:scopes] || []
       @auth_method = hash[:auth_method]
       @api_key_last_4 = hash[:api_key_last_4]
+      @client_id = hash[:client_id]
+      @client_secret_last_4 = hash[:client_secret_last_4]
+      @config = hash[:config] || {}
       @state = hash[:state]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

data/lib/workos/pipes/data_integrations_upsert_client_credentials_request.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class DataIntegrationsUpsertClientCredentialsRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      user_id: :user_id,
+      organization_id: :organization_id,
+      client_id: :client_id,
+      client_secret: :client_secret,
+      config: :config
+    }.freeze
+
+    attr_accessor \
+      :user_id,
+      :organization_id,
+      :client_id,
+      :client_secret,
+      :config
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @user_id = hash[:user_id]
+      @organization_id = hash[:organization_id]
+      @client_id = hash[:client_id]
+      @client_secret = hash[:client_secret]
+      @config = hash[:config] || {}
+    end
+  end
+end

data/lib/workos/pipes.rb

@@ -59,8 +59,8 @@ module WorkOS
     # @param description [String, nil] An optional description of the Data Integration.
     # @param enabled [Boolean, nil] Whether the Data Integration is enabled. Defaults to `false`.
     # @param scopes [Array<String>, nil] The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted.
-    # @param auth_methods [Array<WorkOS::Types::CreateDataIntegrationAuthMethods>, nil] How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request).
-    # @param config [Hash{String => String}, nil] Provider-specific config values (e.g. a Snowflake `account_identifier`), keyed by the config field. Only fields the built-in provider declares are accepted.
+    # @param auth_methods [Array<WorkOS::Types::CreateDataIntegrationAuthMethods>, nil] How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request). Use `["client_credentials"]` to declare a client-credentials integration; `credentials` is likewise not required and client credentials are supplied per-tenant.
+    # @param config [Hash{String => String}, nil] Provider-specific config values (e.g. a Snowflake `account`), keyed by the config field. Only fields the built-in provider declares are accepted.
     # @param credentials [WorkOS::DataIntegrationCredentialsInput, nil] The OAuth credentials to configure for the Data Integration. Required for OAuth integrations; omit when `auth_methods` is `["api_key"]`.
     # @param api_key [WorkOS::ApiKeyInstallation, nil] An optional API key to install for the first tenant on an `api_key` integration. Omit to declare a keyless integration; tenants can be added later via the per-installation API key path.
     # @param custom_provider [WorkOS::CustomProviderDefinition, nil] The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider.
@@ -242,6 +242,43 @@ module WorkOS
       result
     end
 
+    # Upsert client credentials for a connected account
+    # @param slug [String] The identifier of the integration.
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization.
+    # @param client_id [String] The OAuth client ID to store for this integration.
+    # @param client_secret [String] The OAuth client secret to store for this integration.
+    # @param config [Hash{String => String}, nil] Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccount]
+    def update_data_integration_client_credentials(
+      slug:,
+      user_id:,
+      client_id:,
+      client_secret:,
+      organization_id: nil,
+      config: nil,
+      request_options: {}
+    )
+      body = {
+        "user_id" => user_id,
+        "organization_id" => organization_id,
+        "client_id" => client_id,
+        "client_secret" => client_secret,
+        "config" => config
+      }.compact
+      response = @client.request(
+        method: :put,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/client-credentials",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccount.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Vend credentials for a connected account
     # @param slug [String] The identifier of the integration.
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.

data/lib/workos/shared/agent_registration_refreshed.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentRegistrationRefreshed < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      event: :event,
+      data: :data,
+      created_at: :created_at,
+      context: :context
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :event,
+      :data,
+      :created_at,
+      :context
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @event = hash[:event]
+      @data = hash[:data] ? WorkOS::AgentRegistrationRefreshedData.new(hash[:data]) : nil
+      @created_at = hash[:created_at]
+      @context = hash[:context] ? WorkOS::EventContext.new(hash[:context]) : nil
+    end
+  end
+end

data/lib/workos/shared/agent_registration_refreshed_data.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  AgentRegistrationRefreshedData = AgentRegistrationDeletedData
+end

data/lib/workos/shared/waitlist_user.rb

@@ -10,6 +10,7 @@ module WorkOS
       email: :email,
       state: :state,
       approved_at: :approved_at,
+      waitlist_id: :waitlist_id,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -20,6 +21,7 @@ module WorkOS
       :email,
       :state,
       :approved_at,
+      :waitlist_id,
       :created_at,
       :updated_at
 
@@ -30,6 +32,7 @@ module WorkOS
       @email = hash[:email]
       @state = hash[:state]
       @approved_at = hash[:approved_at]
+      @waitlist_id = hash[:waitlist_id]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end

data/lib/workos/types/authenticate_response_authentication_method.rb

@@ -16,6 +16,8 @@ module WorkOS
       GIT_HUB_OAUTH = "GitHubOAuth"
       GIT_LAB_OAUTH = "GitLabOAuth"
       GOOGLE_OAUTH = "GoogleOAuth"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       LINKED_IN_OAUTH = "LinkedInOAuth"
       MICROSOFT_OAUTH = "MicrosoftOAuth"
@@ -27,7 +29,7 @@ module WorkOS
       MAGIC_AUTH = "MagicAuth"
       IMPERSONATION = "Impersonation"
       MIGRATED_SESSION = "MigratedSession"
-      ALL = [SSO, PASSWORD, PASSKEY, APPLE_OAUTH, BITBUCKET_OAUTH, CROSS_APP_AUTH, DISCORD_OAUTH, EXTERNAL_AUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH, MAGIC_AUTH, IMPERSONATION, MIGRATED_SESSION].freeze
+      ALL = [SSO, PASSWORD, PASSKEY, APPLE_OAUTH, BITBUCKET_OAUTH, CROSS_APP_AUTH, DISCORD_OAUTH, EXTERNAL_AUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH, MAGIC_AUTH, IMPERSONATION, MIGRATED_SESSION].freeze
     end
   end
 end

data/lib/workos/types/connection_activated_data_connection_type.rb

@@ -27,6 +27,8 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -55,7 +57,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/connection_type.rb

@@ -28,6 +28,8 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -56,7 +58,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [PENDING, ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [PENDING, ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/connections_connection_type.rb

@@ -26,6 +26,8 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -53,7 +55,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLOUDFLARE_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLOUDFLARE_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/create_data_integration_auth_methods.rb

@@ -4,10 +4,6 @@
 
 module WorkOS
   module Types
-    class CreateDataIntegrationAuthMethods
-      OAUTH = "oauth"
-      API_KEY = "api_key"
-      ALL = [OAUTH, API_KEY].freeze
-    end
+    CreateDataIntegrationAuthMethods = ConnectedAccountAuthMethod
   end
 end

data/lib/workos/types/create_user_password_salt_position.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class CreateUserPasswordSaltPosition
+      PREFIX = "prefix"
+      SUFFIX = "suffix"
+      ALL = [PREFIX, SUFFIX].freeze
+    end
+  end
+end

data/lib/workos/types/create_webhook_endpoint_events.rb

@@ -10,6 +10,7 @@ module WorkOS
       AGENT_REGISTRATION_CLAIM_COMPLETED = "agent.registration.claim.completed"
       AGENT_REGISTRATION_CREDENTIAL_ISSUED = "agent.registration.credential.issued"
       AGENT_REGISTRATION_DELETED = "agent.registration.deleted"
+      AGENT_REGISTRATION_REFRESHED = "agent.registration.refreshed"
       AGENT_REGISTRATION_EXPIRED = "agent.registration.expired"
       AGENT_REGISTRATION_ORGANIZATION_SWITCHED = "agent.registration.organization.switched"
       AGENT_REGISTRATION_REVOKED = "agent.registration.revoked"
@@ -97,7 +98,7 @@ module WorkOS
       WAITLIST_USER_APPROVED = "waitlist_user.approved"
       WAITLIST_USER_CREATED = "waitlist_user.created"
       WAITLIST_USER_DENIED = "waitlist_user.denied"
-      ALL = [AGENT_REGISTRATION_CREATED, AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED, AGENT_REGISTRATION_CLAIM_COMPLETED, AGENT_REGISTRATION_CREDENTIAL_ISSUED, AGENT_REGISTRATION_DELETED, AGENT_REGISTRATION_EXPIRED, AGENT_REGISTRATION_ORGANIZATION_SWITCHED, AGENT_REGISTRATION_REVOKED, AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, RADAR_CHALLENGE_CREATED, AUTHENTICATION_RADAR_RISK_DETECTED, AUTHENTICATION_REAUTHENTICATION_SUCCEEDED, API_KEY_CREATED, API_KEY_REVOKED, API_KEY_UPDATED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
+      ALL = [AGENT_REGISTRATION_CREATED, AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED, AGENT_REGISTRATION_CLAIM_COMPLETED, AGENT_REGISTRATION_CREDENTIAL_ISSUED, AGENT_REGISTRATION_DELETED, AGENT_REGISTRATION_REFRESHED, AGENT_REGISTRATION_EXPIRED, AGENT_REGISTRATION_ORGANIZATION_SWITCHED, AGENT_REGISTRATION_REVOKED, AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, RADAR_CHALLENGE_CREATED, AUTHENTICATION_RADAR_RISK_DETECTED, AUTHENTICATION_REAUTHENTICATION_SUCCEEDED, API_KEY_CREATED, API_KEY_REVOKED, API_KEY_UPDATED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
     end
   end
 end

data/lib/workos/types/update_user_password_salt_position.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    UpdateUserPasswordSaltPosition = CreateUserPasswordSaltPosition
+  end
+end

data/lib/workos/types/user_identities_get_item_provider.rb

@@ -11,6 +11,8 @@ module WorkOS
       GITHUB_OAUTH = "GithubOAuth"
       GIT_LAB_OAUTH = "GitLabOAuth"
       GOOGLE_OAUTH = "GoogleOAuth"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       LINKED_IN_OAUTH = "LinkedInOAuth"
       MICROSOFT_OAUTH = "MicrosoftOAuth"
@@ -19,7 +21,7 @@ module WorkOS
       VERCEL_MARKETPLACE_OAUTH = "VercelMarketplaceOAuth"
       VERCEL_OAUTH = "VercelOAuth"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [APPLE_OAUTH, BITBUCKET_OAUTH, DISCORD_OAUTH, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH].freeze
+      ALL = [APPLE_OAUTH, BITBUCKET_OAUTH, DISCORD_OAUTH, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH].freeze
     end
   end
 end