feat(generated): UserManagement, Radar (batch f510ddfb) (#281)

Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>

Author: workos-sdk-automation[bot]

.changelog-pending/2026-07-06T15-36-42-a2c464df57c9c25ad289cf11417e5df4ada5c726.md

@@ -0,0 +1,13 @@
+* [#281](https://github.com/workos/workos-dotnet/pull/281) fix(generated): regenerate from spec
+
+  **Features**
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Added model `UserRoleAssignmentSource`
+    * Added `source` to `UserRoleAssignment`
+    * Added enum `UserRoleAssignmentSourceType`
+    * Added parameter `UserManagementAuthentication.authorize.max_age`
+    * Added endpoint `GET /user_management/cors_origins`
+    * Added endpoint `GET /user_management/redirect_uris`
+
+  **Fixes**
+  * Restore mistakenly removed CreateMagicAuth logic from previous release

.last-synced-sha

@@ -1 +1 @@
-4b4e0618779460dbebc1cf5e0f02197c21796d1f
+23faa38318d596e581656934ed72c4a18476d742

.oagen-manifest.json

@@ -1,7 +1,6 @@
 {
   "version": 2,
   "language": "dotnet",
-  "generatedAt": "2026-07-02T17:29:50.293Z",
   "files": [
     "src/WorkOS.net/Client/Utilities/AgentRegistrationCredentialIssuedDataDetailDiscriminatorConverter.cs",
     "src/WorkOS.net/Client/Utilities/ApiKeyCreatedDataOwnerDiscriminatorConverter.cs",
@@ -294,6 +293,7 @@
     "src/WorkOS.net/Entities/UserAuthenticationFactorEnrollResponse.cs",
     "src/WorkOS.net/Entities/UserConsentOption.cs",
     "src/WorkOS.net/Entities/UserConsentOptionChoice.cs",
+    "src/WorkOS.net/Entities/UserCreateResponse.cs",
     "src/WorkOS.net/Entities/UserCreated.cs",
     "src/WorkOS.net/Entities/UserDeleted.cs",
     "src/WorkOS.net/Entities/UserIdentitiesGetItem.cs",

src/WorkOS.net/Entities/MagicAuthSendMagicAuthCodeAndReturnResponse.cs

@@ -2,11 +2,36 @@
 
 namespace WorkOS
 {
+    using System;
 
     /// <summary>Represents a magic auth send magic auth code and return response.</summary>
     public class MagicAuthSendMagicAuthCodeAndReturnResponse
     {
 
+        /// <summary>Distinguishes the Magic Auth object.</summary>
+        public string Object { get; internal set; } = "magic_auth";
+
+        /// <summary>The unique ID of the Magic Auth code.</summary>
+        public string Id { get; set; } = default!;
+
+        /// <summary>The unique ID of the user.</summary>
+        public string UserId { get; set; } = default!;
+
+        /// <summary>The email address of the user.</summary>
+        public string Email { get; set; } = default!;
+
+        /// <summary>The timestamp when the Magic Auth code expires.</summary>
+        public DateTimeOffset ExpiresAt { get; set; }
+
+        /// <summary>An ISO 8601 timestamp.</summary>
+        public DateTimeOffset CreatedAt { get; set; }
+
+        /// <summary>An ISO 8601 timestamp.</summary>
+        public DateTimeOffset UpdatedAt { get; set; }
+
+        /// <summary>The code used to verify the Magic Auth code.</summary>
+        public string Code { get; set; } = default!;
+
         /// <summary>The ID of the Radar authentication attempt created for this request when Radar is enabled. Pass this value to the authenticate endpoint to associate the subsequent authentication with this Radar attempt.</summary>
         public string? RadarAuthAttemptId { get; set; }
     }

src/WorkOS.net/Entities/UserCreateResponse.cs

@@ -0,0 +1,57 @@
+// This file is auto-generated by oagen. Do not edit.
+
+namespace WorkOS
+{
+    using System;
+    using System.Collections.Generic;
+
+    /// <summary>Represents an user create response.</summary>
+    public class UserCreateResponse
+    {
+
+        /// <summary>Distinguishes the user object.</summary>
+        public string Object { get; internal set; } = "user";
+
+        /// <summary>The unique ID of the user.</summary>
+        public string Id { get; set; } = default!;
+
+        /// <summary>The first name of the user.</summary>
+        public string? FirstName { get; set; }
+
+        /// <summary>The last name of the user.</summary>
+        public string? LastName { get; set; }
+
+        /// <summary>The user's full name.</summary>
+        public string? Name { get; set; }
+
+        /// <summary>A URL reference to an image representing the user.</summary>
+        public string? ProfilePictureUrl { get; set; }
+
+        /// <summary>The email address of the user.</summary>
+        public string Email { get; set; } = default!;
+
+        /// <summary>Whether the user's email has been verified.</summary>
+        public bool EmailVerified { get; set; }
+
+        /// <summary>The external ID of the user.</summary>
+        public string? ExternalId { get; set; }
+
+        /// <summary>Object containing metadata key/value pairs associated with the user.</summary>
+        public Dictionary<string, string>? Metadata { get; set; }
+
+        /// <summary>The timestamp when the user last signed in.</summary>
+        public DateTimeOffset? LastSignInAt { get; set; }
+
+        /// <summary>The user's preferred locale.</summary>
+        public string? Locale { get; set; }
+
+        /// <summary>An ISO 8601 timestamp.</summary>
+        public DateTimeOffset CreatedAt { get; set; }
+
+        /// <summary>An ISO 8601 timestamp.</summary>
+        public DateTimeOffset UpdatedAt { get; set; }
+
+        /// <summary>The ID of the Radar authentication attempt created for this request when Radar is enabled. Pass this value to the authenticate endpoint to associate the subsequent authentication with this Radar attempt.</summary>
+        public string? RadarAuthAttemptId { get; set; }
+    }
+}

src/WorkOS.net/Services/UserManagement/UserManagementService.cs

@@ -195,6 +195,44 @@ public Task<AuthenticateResponse> AuthenticateWithDeviceCode(AuthenticateWithDev
             return this.AuthenticateWithDeviceCodeAsync(options, requestOptions, cancellationToken);
         }
 
+        /// <summary>Authenticate with radar email challenge.</summary>
+        /// <param name="options">Request options.</param>
+        /// <param name="requestOptions">Per-request configuration overrides.</param>
+        /// <param name="cancellationToken">Cancellation token.</param>
+        /// <returns>The <see cref="AuthenticateResponse"/> result.</returns>
+        public async Task<AuthenticateResponse> AuthenticateWithRadarEmailChallengeAsync(AuthenticateWithRadarEmailChallengeOptions options, RequestOptions? requestOptions = null, CancellationToken cancellationToken = default)
+        {
+            options.GrantType = "urn:workos:oauth:grant-type:radar-email-challenge:code";
+            options.ClientId = this.Client.RequireClientId();
+            options.ClientSecret = this.Client.ApiKey ?? string.Empty;
+            return await this.PostAsync<AuthenticateResponse>("/user_management/authenticate", options, requestOptions, cancellationToken);
+        }
+
+        /// <summary>Compatibility wrapper for <see cref="AuthenticateWithRadarEmailChallengeAsync"/>.</summary>
+        public Task<AuthenticateResponse> AuthenticateWithRadarEmailChallenge(AuthenticateWithRadarEmailChallengeOptions options, RequestOptions? requestOptions = null, CancellationToken cancellationToken = default)
+        {
+            return this.AuthenticateWithRadarEmailChallengeAsync(options, requestOptions, cancellationToken);
+        }
+
+        /// <summary>Authenticate with radar sms challenge.</summary>
+        /// <param name="options">Request options.</param>
+        /// <param name="requestOptions">Per-request configuration overrides.</param>
+        /// <param name="cancellationToken">Cancellation token.</param>
+        /// <returns>The <see cref="AuthenticateResponse"/> result.</returns>
+        public async Task<AuthenticateResponse> AuthenticateWithRadarSmsChallengeAsync(AuthenticateWithRadarSmsChallengeOptions options, RequestOptions? requestOptions = null, CancellationToken cancellationToken = default)
+        {
+            options.GrantType = "urn:workos:oauth:grant-type:radar-sms-challenge:code";
+            options.ClientId = this.Client.RequireClientId();
+            options.ClientSecret = this.Client.ApiKey ?? string.Empty;
+            return await this.PostAsync<AuthenticateResponse>("/user_management/authenticate", options, requestOptions, cancellationToken);
+        }
+
+        /// <summary>Compatibility wrapper for <see cref="AuthenticateWithRadarSmsChallengeAsync"/>.</summary>
+        public Task<AuthenticateResponse> AuthenticateWithRadarSmsChallenge(AuthenticateWithRadarSmsChallengeOptions options, RequestOptions? requestOptions = null, CancellationToken cancellationToken = default)
+        {
+            return this.AuthenticateWithRadarSmsChallengeAsync(options, requestOptions, cancellationToken);
+        }
+
         /// <summary>Get an authorization URL</summary>
         /// <remarks>
         /// Generates an OAuth 2.0 authorization URL to authenticate a user with AuthKit or SSO.
@@ -448,8 +486,8 @@ public virtual IAsyncEnumerable<User> ListAutoPagingAsync(UserManagementListOpti
         /// <param name="options">Request options.</param>
         /// <param name="requestOptions">Per-request configuration overrides.</param>
         /// <param name="cancellationToken">Cancellation token.</param>
-        /// <returns>The <see cref="MagicAuthSendMagicAuthCodeAndReturnResponse"/> result.</returns>
-        public virtual async Task<MagicAuthSendMagicAuthCodeAndReturnResponse> CreateAsync(UserManagementCreateOptions options, RequestOptions? requestOptions = null, CancellationToken cancellationToken = default)
+        /// <returns>The <see cref="UserCreateResponse"/> result.</returns>
+        public virtual async Task<UserCreateResponse> CreateAsync(UserManagementCreateOptions options, RequestOptions? requestOptions = null, CancellationToken cancellationToken = default)
         {
             var request = new WorkOSRequest
             {
@@ -476,11 +514,11 @@ public virtual async Task<MagicAuthSendMagicAuthCodeAndReturnResponse> CreateAsy
                 request.AddBodyParam("password_hash_type", JsonConvert.SerializeObject(hashed.PasswordHashType).Trim('"'));
             }
 
-            return await this.Client.MakeAPIRequest<MagicAuthSendMagicAuthCodeAndReturnResponse>(request, cancellationToken);
+            return await this.Client.MakeAPIRequest<UserCreateResponse>(request, cancellationToken);
         }
 
         /// <summary>Compatibility wrapper for <see cref="CreateAsync"/>.</summary>
-        public virtual Task<MagicAuthSendMagicAuthCodeAndReturnResponse> Create(UserManagementCreateOptions options, RequestOptions? requestOptions = null, CancellationToken cancellationToken = default)
+        public virtual Task<UserCreateResponse> Create(UserManagementCreateOptions options, RequestOptions? requestOptions = null, CancellationToken cancellationToken = default)
         {
             return this.CreateAsync(options, requestOptions, cancellationToken);
         }

src/WorkOS.net/Services/UserManagement/_interfaces/UserManagementWrapperOptions.cs

@@ -26,6 +26,12 @@ public class AuthenticateWithPasswordOptions : BaseOptions
         /// <summary>The user agent string from the user's browser.</summary>
         public string? UserAgent { get; set; }
 
+        /// <summary>An optional Radar signals ID to correlate client-side signals with this authentication attempt.</summary>
+        public string? SignalsId { get; set; }
+
+        /// <summary>The ID of an existing Radar authentication attempt to associate with this authentication.</summary>
+        public string? RadarAuthAttemptId { get; set; }
+
         internal string GrantType { get; set; } = default!;
 
         internal string ClientId { get; set; } = default!;
@@ -54,6 +60,9 @@ public class AuthenticateWithCodeOptions : BaseOptions
         /// <summary>The user agent string from the user's browser.</summary>
         public string? UserAgent { get; set; }
 
+        /// <summary>An optional Radar signals ID to correlate client-side signals with this authentication attempt.</summary>
+        public string? SignalsId { get; set; }
+
         internal string GrantType { get; set; } = default!;
 
         internal string ClientId { get; set; } = default!;
@@ -101,6 +110,8 @@ public class AuthenticateWithMagicAuthOptions : BaseOptions
 
         public string? UserAgent { get; set; }
 
+        public string? RadarAuthAttemptId { get; set; }
+
         internal string GrantType { get; set; } = default!;
 
         internal string ClientId { get; set; } = default!;
@@ -186,4 +197,50 @@ public class AuthenticateWithDeviceCodeOptions : BaseOptions
         internal string ClientId { get; set; } = default!;
 
     }
+
+    public class AuthenticateWithRadarEmailChallengeOptions : BaseOptions
+    {
+        public string Code { get; set; } = default!;
+
+        public string RadarChallengeId { get; set; } = default!;
+
+        public string PendingAuthenticationToken { get; set; } = default!;
+
+        public string? IpAddress { get; set; }
+
+        public string? DeviceId { get; set; }
+
+        public string? UserAgent { get; set; }
+
+        internal string GrantType { get; set; } = default!;
+
+        internal string ClientId { get; set; } = default!;
+
+        internal string ClientSecret { get; set; } = default!;
+
+    }
+
+    public class AuthenticateWithRadarSmsChallengeOptions : BaseOptions
+    {
+        public string Code { get; set; } = default!;
+
+        public string VerificationId { get; set; } = default!;
+
+        public string PhoneNumber { get; set; } = default!;
+
+        public string PendingAuthenticationToken { get; set; } = default!;
+
+        public string? IpAddress { get; set; }
+
+        public string? DeviceId { get; set; }
+
+        public string? UserAgent { get; set; }
+
+        internal string GrantType { get; set; } = default!;
+
+        internal string ClientId { get; set; } = default!;
+
+        internal string ClientSecret { get; set; } = default!;
+
+    }
 }

test/WorkOSTests/Tests/UserManagementServiceTest.cs

@@ -209,12 +209,14 @@ public async Task TestListAsyncEmpty()
         [Fact]
         public async Task TestCreateAsync()
         {
-            var fixture = System.IO.File.ReadAllText("testdata/magic_auth_send_magic_auth_code_and_return_response.json");
+            var fixture = System.IO.File.ReadAllText("testdata/user_create_response.json");
             this.httpMock.MockResponse(HttpMethod.Post, "/user_management/users", HttpStatusCode.OK, fixture);
             var options = new UserManagementCreateOptions();
             options.Email = "test_email";
             var result = await this.service.CreateAsync(options);
             Assert.NotNull(result);
+            Assert.Equal("user_01E4ZCR3C56J083X43JQXF3JK5", result.Id);
+            Assert.Equal("marcelina.davis@example.com", result.Email);
             this.httpMock.AssertRequestWasMade(HttpMethod.Post, "/user_management/users");
             await this.httpMock.AssertRequestBodyContainsAsync("email", "test_email");
         }
@@ -480,6 +482,9 @@ public async Task TestCreateMagicAuthAsync()
             options.Email = "test_email";
             var result = await this.service.CreateMagicAuthAsync(options);
             Assert.NotNull(result);
+            Assert.Equal("magic_auth_01HWZBQZY2M3AMQW166Q22K88F", result.Id);
+            Assert.Equal("user_01E4ZCR3C56J083X43JQXF3JK5", result.UserId);
+            Assert.Equal("marcelina.davis@example.com", result.Email);
             this.httpMock.AssertRequestWasMade(HttpMethod.Post, "/user_management/magic_auth");
             await this.httpMock.AssertRequestBodyContainsAsync("email", "test_email");
         }
@@ -903,6 +908,26 @@ public async Task TestAuthenticateWithDeviceCodeAsync()
             this.httpMock.AssertRequestWasMade(HttpMethod.Post, "/user_management/authenticate");
         }
 
+        [Fact]
+        public async Task TestAuthenticateWithRadarEmailChallengeAsync()
+        {
+            var fixture = System.IO.File.ReadAllText("testdata/authenticate_response.json");
+            this.httpMock.MockResponse(HttpMethod.Post, "/user_management/authenticate", HttpStatusCode.OK, fixture);
+            var result = await this.service.AuthenticateWithRadarEmailChallengeAsync(new AuthenticateWithRadarEmailChallengeOptions());
+            Assert.NotNull(result);
+            this.httpMock.AssertRequestWasMade(HttpMethod.Post, "/user_management/authenticate");
+        }
+
+        [Fact]
+        public async Task TestAuthenticateWithRadarSmsChallengeAsync()
+        {
+            var fixture = System.IO.File.ReadAllText("testdata/authenticate_response.json");
+            this.httpMock.MockResponse(HttpMethod.Post, "/user_management/authenticate", HttpStatusCode.OK, fixture);
+            var result = await this.service.AuthenticateWithRadarSmsChallengeAsync(new AuthenticateWithRadarSmsChallengeOptions());
+            Assert.NotNull(result);
+            this.httpMock.AssertRequestWasMade(HttpMethod.Post, "/user_management/authenticate");
+        }
+
         [Fact]
         public async Task TestError401()
         {

test/WorkOSTests/testdata/authenticate_response.json

@@ -4,6 +4,7 @@
     "id": "user_01E4ZCR3C56J083X43JQXF3JK5",
     "first_name": "Marcelina",
     "last_name": "Davis",
+    "name": "Marcelina Davis",
     "profile_picture_url": "https://workoscdn.com/images/v1/123abc",
     "email": "marcelina.davis@example.com",
     "email_verified": true,
@@ -14,8 +15,7 @@
     "last_sign_in_at": "2025-06-25T19:07:33.155Z",
     "locale": "en-US",
     "created_at": "2026-01-15T12:00:00.000Z",
-    "updated_at": "2026-01-15T12:00:00.000Z",
-    "name": "Marcelina Davis"
+    "updated_at": "2026-01-15T12:00:00.000Z"
   },
   "organization_id": "org_01H945H0YD4F97JN9MATX7BYAG",
   "authkit_authorization_code": "authkit_authz_code_abc123",

test/WorkOSTests/testdata/authenticate_response_nulls.json

@@ -4,6 +4,7 @@
     "id": "user_01E4ZCR3C56J083X43JQXF3JK5",
     "first_name": "Marcelina",
     "last_name": "Davis",
+    "name": "Marcelina Davis",
     "profile_picture_url": "https://workoscdn.com/images/v1/123abc",
     "email": "marcelina.davis@example.com",
     "email_verified": true,
@@ -14,8 +15,7 @@
     "last_sign_in_at": "2025-06-25T19:07:33.155Z",
     "locale": "en-US",
     "created_at": "2026-01-15T12:00:00.000Z",
-    "updated_at": "2026-01-15T12:00:00.000Z",
-    "name": "Marcelina Davis"
+    "updated_at": "2026-01-15T12:00:00.000Z"
   },
   "organization_id": null,
   "authkit_authorization_code": null,