feat: update authorization module for fga (#581)

Author: swaroopAkkineniWorkos

src/workos/authorization.py

@@ -54,6 +54,11 @@ class WarrantQueryListResource(
 
 
 class FGAModule(Protocol):
+    """
+    .. deprecated::
+        Use :class:`workos.authorization.AuthorizationModule` instead.
+    """
+
     def get_resource(
         self, *, resource_type: str, resource_id: str
     ) -> AuthorizationResource:

src/workos/fga.py

@@ -1,14 +1,33 @@
+from workos.types.authorization.access_check_response import AccessCheckResponse
+from workos.types.authorization.assignment import Assignment
 from workos.types.authorization.environment_role import (
     EnvironmentRole,
     EnvironmentRoleList,
 )
+from workos.types.authorization.organization_membership import (
+    AuthorizationOrganizationMembership,
+)
 from workos.types.authorization.organization_role import (
     OrganizationRole,
     OrganizationRoleEvent,
     OrganizationRoleList,
 )
 from workos.types.authorization.permission import Permission
+from workos.types.authorization.parent_resource_identifier import (
+    ParentResourceIdentifier,
+)
+from workos.types.authorization.authorization_resource import AuthorizationResource
+from workos.types.authorization.resource_identifier import (
+    ResourceIdentifier,
+    ResourceIdentifierByExternalId,
+    ResourceIdentifierById,
+)
 from workos.types.authorization.role import (
     Role,
     RoleList,
 )
+from workos.types.authorization.role_assignment import (
+    RoleAssignment,
+    RoleAssignmentResource,
+    RoleAssignmentRole,
+)

src/workos/types/authorization/__init__.py

@@ -0,0 +1,5 @@
+from workos.types.workos_model import WorkOSModel
+
+
+class AccessCheckResponse(WorkOSModel):
+    authorized: bool

src/workos/types/authorization/access_check_response.py

@@ -0,0 +1,3 @@
+from typing import Literal
+
+Assignment = Literal["direct", "indirect"]

src/workos/types/authorization/assignment.py

@@ -0,0 +1,18 @@
+from typing import Literal, Optional
+
+from workos.types.workos_model import WorkOSModel
+
+
+class AuthorizationResource(WorkOSModel):
+    """Representation of an Authorization Resource."""
+
+    object: Literal["authorization_resource"]
+    id: str
+    external_id: str
+    name: str
+    description: Optional[str] = None
+    resource_type_slug: str
+    organization_id: str
+    parent_resource_id: Optional[str] = None
+    created_at: str
+    updated_at: str

src/workos/types/authorization/authorization_resource.py

@@ -0,0 +1,5 @@
+from workos.types.user_management.organization_membership import (
+    BaseOrganizationMembership,
+)
+
+AuthorizationOrganizationMembership = BaseOrganizationMembership

src/workos/types/authorization/organization_membership.py

@@ -0,0 +1,15 @@
+from typing import Union
+
+from typing_extensions import TypedDict
+
+
+class ParentResourceById(TypedDict):
+    parent_resource_id: str
+
+
+class ParentResourceByExternalId(TypedDict):
+    parent_resource_external_id: str
+    parent_resource_type_slug: str
+
+
+ParentResourceIdentifier = Union[ParentResourceById, ParentResourceByExternalId]

src/workos/types/authorization/parent_resource_identifier.py

@@ -0,0 +1,15 @@
+from typing import Union
+
+from typing_extensions import TypedDict
+
+
+class ResourceIdentifierById(TypedDict):
+    resource_id: str
+
+
+class ResourceIdentifierByExternalId(TypedDict):
+    resource_external_id: str
+    resource_type_slug: str
+
+
+ResourceIdentifier = Union[ResourceIdentifierById, ResourceIdentifierByExternalId]

src/workos/types/authorization/resource_identifier.py

@@ -0,0 +1,22 @@
+from typing import Literal
+
+from workos.types.workos_model import WorkOSModel
+
+
+class RoleAssignmentRole(WorkOSModel):
+    slug: str
+
+
+class RoleAssignmentResource(WorkOSModel):
+    id: str
+    external_id: str
+    resource_type_slug: str
+
+
+class RoleAssignment(WorkOSModel):
+    object: Literal["role_assignment"]
+    id: str
+    role: RoleAssignmentRole
+    resource: RoleAssignmentResource
+    created_at: str
+    updated_at: str