yandex360 3.2.0 → 4.0.0

data/lib/yandex360/resources/two_fa.rb

@@ -1,31 +1,51 @@
 # frozen_string_literal: true
 
 module Yandex360
+  # Mandatory two-factor authentication for the whole organization.
+  #
+  # All three operations share one path and differ only by verb, which is why
+  # there is no separate enable or disable endpoint to call.
+  #
+  # Per-employee two-factor authentication is not here: reading it is
+  # users.get2FA and clearing the phone is users.delete_2fa_phone, both on
+  # UserService.
+  #
+  # See https://yandex.ru/dev/api360/doc/ru/ref/Domain2FAService/
   class TwoFaResource < Resource
-    def enable(org_id:, user_id:)
-      validate_required_params({org_id: org_id, user_id: user_id}, %i[org_id user_id])
-      Response.new post("/security/v1/org/#{org_id}/users/#{user_id}/2fa/enable", body: {}).body
+    include ParamBuilder
+
+    def status(org_id:)
+      validate_required_params({org_id: org_id}, [:org_id])
+      Domain2FA.new get(domain_path(org_id)).body
     end
 
-    def disable(org_id:, user_id:)
-      validate_required_params({org_id: org_id, user_id: user_id}, %i[org_id user_id])
-      Response.new post("/security/v1/org/#{org_id}/users/#{user_id}/2fa/disable", body: {}).body
+    # duration is how long, in seconds, an employee may postpone setting 2FA up
+    # during sign-in. validation_method is "default" or "phone".
+    def enable(org_id:, duration:, logout_users: nil, validation_method: nil)
+      validate_required_params({org_id: org_id, duration: duration}, %i[org_id duration])
+      body = {duration: duration}
+      body[:logoutUsers] = logout_users unless logout_users.nil?
+      body[:validationMethod] = validation_method unless validation_method.nil?
+
+      Domain2FA.new post(domain_path(org_id), body: body).body
     end
 
-    def status(org_id:, user_id:)
-      validate_required_params({org_id: org_id, user_id: user_id}, %i[org_id user_id])
-      Response.new get("/security/v1/org/#{org_id}/users/#{user_id}/2fa/status").body
+    def disable(org_id:)
+      validate_required_params({org_id: org_id}, [:org_id])
+      Domain2FA.new delete_request(domain_path(org_id)).body
     end
 
+    # Deprecated: the name #status carried before this resource was corrected.
+    # Removed in 5.0.
     def domain_status(org_id:)
-      validate_required_params({org_id: org_id}, [:org_id])
-      Response.new get("/security/v1/org/#{org_id}/domain_2fa").body
+      warn "[yandex360] two_fa.domain_status is deprecated, use two_fa.status", uplevel: 1
+      status(org_id: org_id)
     end
 
-    def configure_domain(org_id:, enabled:)
-      validate_required_params({org_id: org_id, enabled: enabled}, %i[org_id enabled])
-      body = {enabled: enabled}
-      Response.new post("/security/v1/org/#{org_id}/domain_2fa", body: body).body
+    private
+
+    def domain_path(org_id)
+      "/security/v1/org/#{org_id}/domain_2fa"
     end
   end
 end

data/lib/yandex360/resources/users.rb

@@ -14,7 +14,8 @@ module Yandex360
       validate_required_params({org_id: org_id, user_id: user_id, user_alias: user_alias},
                                %i[org_id user_id user_alias])
       body = {alias: user_alias}
-      Alias.new post("/directory/v1/org/#{org_id}/users/#{user_id}/aliases", body: body).body
+      # The reply is the whole employee, aliases included, not the alias.
+      User.new post("/directory/v1/org/#{org_id}/users/#{user_id}/aliases", body: body).body
     end
 
     def update(org_id:, user_id:, **user_params)

data/lib/yandex360/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Yandex360
-  VERSION = "3.2.0"
+  VERSION = "4.0.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: yandex360
 version: !ruby/object:Gem::Version
-  version: 3.2.0
+  version: 4.0.0
 platform: ruby
 authors:
 - Ilya Brin
@@ -208,10 +208,10 @@ files:
 - lib/yandex360/resources/domains.rb
 - lib/yandex360/resources/external_contacts.rb
 - lib/yandex360/resources/groups.rb
+- lib/yandex360/resources/mail_settings.rb
 - lib/yandex360/resources/mailboxes.rb
 - lib/yandex360/resources/organizations.rb
 - lib/yandex360/resources/passwords.rb
-- lib/yandex360/resources/post_settings.rb
 - lib/yandex360/resources/routing.rb
 - lib/yandex360/resources/service_applications.rb
 - lib/yandex360/resources/sessions.rb

data/lib/yandex360/resources/post_settings.rb

@@ -1,36 +0,0 @@
-# frozen_string_literal: true
-
-module Yandex360
-  class PostSettingsResource < Resource
-    include ParamBuilder
-
-    def list(org_id:, user_id:)
-      validate_required_params({org_id: org_id, user_id: user_id}, %i[org_id user_id])
-      Response.new get("/directory/v1/org/#{org_id}/users/#{user_id}/settings/mail").body
-    end
-
-    def update(org_id:, user_id:, **params)
-      validate_required_params({org_id: org_id, user_id: user_id}, %i[org_id user_id])
-      settings = build_params({}, params)
-      Response.new patch("/directory/v1/org/#{org_id}/users/#{user_id}/settings/mail", body: settings).body
-    end
-
-    def forwarding_list(org_id:, user_id:)
-      validate_required_params({org_id: org_id, user_id: user_id}, %i[org_id user_id])
-      resp = get("/directory/v1/org/#{org_id}/users/#{user_id}/settings/mail/forwarding")
-      Collection.from_response(resp, key: "forwardings", type: Response)
-    end
-
-    def add_forwarding(org_id:, user_id:, address:)
-      validate_required_params({org_id: org_id, user_id: user_id, address: address}, %i[org_id user_id address])
-      body = {address: address}
-      Response.new post("/directory/v1/org/#{org_id}/users/#{user_id}/settings/mail/forwarding", body: body).body
-    end
-
-    def delete_forwarding(org_id:, user_id:, address:)
-      validate_required_params({org_id: org_id, user_id: user_id, address: address}, %i[org_id user_id address])
-      path = "/directory/v1/org/#{org_id}/users/#{user_id}/settings/mail/forwarding/#{address}"
-      Response.new delete_request(path).body
-    end
-  end
-end