feat(generated): UserManagement, Radar (batch f510ddfb)

.changelog-pending/2026-07-06T15-36-50-a2c464df57c9c25ad289cf11417e5df4ada5c726.md

@@ -0,0 +1,13 @@
+* [#514](https://github.com/workos/workos-ruby/pull/514) fix(generated): regenerate from spec
+
+  **Features**
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Added model `UserRoleAssignmentSource`
+    * Added `source` to `UserRoleAssignment`
+    * Added enum `UserRoleAssignmentSourceType`
+    * Added parameter `UserManagementAuthentication.authorize.max_age`
+    * Added endpoint `GET /user_management/cors_origins`
+    * Added endpoint `GET /user_management/redirect_uris`
+
+  **Fixes**
+  * Restore mistakenly removed CreateMagicAuth logic from previous release

.last-synced-sha

@@ -1 +1 @@
-4b4e0618779460dbebc1cf5e0f02197c21796d1f
+23faa38318d596e581656934ed72c4a18476d742

.oagen-manifest.json

@@ -1,7 +1,6 @@
 {
   "version": 2,
   "language": "ruby",
-  "generatedAt": "2026-07-02T17:29:49.181Z",
   "files": [
     "lib/workos.rb",
     "lib/workos/admin_portal.rb",
@@ -2057,6 +2056,14 @@
     "PUT /user_management/users/{user_id}/connected_accounts/{slug}": {
       "sdkMethod": "update_user_connected_account",
       "service": "pipes"
+    },
+    "POST /user_management/authenticate#RadarEmailChallengeCodeSessionAuthenticateRequest": {
+      "sdkMethod": "authenticate_with_radar_email_challenge",
+      "service": "user_management"
+    },
+    "POST /user_management/authenticate#RadarSmsChallengeCodeSessionAuthenticateRequest": {
+      "sdkMethod": "authenticate_with_radar_sms_challenge",
+      "service": "user_management"
     }
   }
 }

lib/workos/user_management.rb

@@ -133,6 +133,8 @@ def create_authenticate(
     # @param ip_address [String, nil]
     # @param device_id [String, nil]
     # @param user_agent [String, nil]
+    # @param signals_id [String, nil]
+    # @param radar_auth_attempt_id [String, nil]
     # @param request_options [Hash] Per-request overrides.
     # @return [WorkOS::AuthenticateResponse]
     def authenticate_with_password(
@@ -142,6 +144,8 @@ def authenticate_with_password(
       ip_address: nil,
       device_id: nil,
       user_agent: nil,
+      signals_id: nil,
+      radar_auth_attempt_id: nil,
       request_options: {}
     )
       body = {
@@ -153,7 +157,9 @@ def authenticate_with_password(
         "invitation_token" => invitation_token,
         "ip_address" => ip_address,
         "device_id" => device_id,
-        "user_agent" => user_agent
+        "user_agent" => user_agent,
+        "signals_id" => signals_id,
+        "radar_auth_attempt_id" => radar_auth_attempt_id
       }.compact
       response = @client.request(
         method: :post,
@@ -172,6 +178,7 @@ def authenticate_with_password(
     # @param ip_address [String, nil]
     # @param device_id [String, nil]
     # @param user_agent [String, nil]
+    # @param signals_id [String, nil]
     # @param request_options [Hash] Per-request overrides.
     # @return [WorkOS::AuthenticateResponse]
     def authenticate_with_code(
@@ -181,6 +188,7 @@ def authenticate_with_code(
       ip_address: nil,
       device_id: nil,
       user_agent: nil,
+      signals_id: nil,
       request_options: {}
     )
       body = {
@@ -192,7 +200,8 @@ def authenticate_with_code(
         "invitation_token" => invitation_token,
         "ip_address" => ip_address,
         "device_id" => device_id,
-        "user_agent" => user_agent
+        "user_agent" => user_agent,
+        "signals_id" => signals_id
       }.compact
       response = @client.request(
         method: :post,
@@ -247,6 +256,7 @@ def authenticate_with_refresh_token(
     # @param ip_address [String, nil]
     # @param device_id [String, nil]
     # @param user_agent [String, nil]
+    # @param radar_auth_attempt_id [String, nil]
     # @param request_options [Hash] Per-request overrides.
     # @return [WorkOS::AuthenticateResponse]
     def authenticate_with_magic_auth(
@@ -256,6 +266,7 @@ def authenticate_with_magic_auth(
       ip_address: nil,
       device_id: nil,
       user_agent: nil,
+      radar_auth_attempt_id: nil,
       request_options: {}
     )
       body = {
@@ -267,7 +278,8 @@ def authenticate_with_magic_auth(
         "invitation_token" => invitation_token,
         "ip_address" => ip_address,
         "device_id" => device_id,
-        "user_agent" => user_agent
+        "user_agent" => user_agent,
+        "radar_auth_attempt_id" => radar_auth_attempt_id
       }.compact
       response = @client.request(
         method: :post,
@@ -422,6 +434,87 @@ def authenticate_with_device_code(
       WorkOS::AuthenticateResponse.new(response.body)
     end
 
+    # Authenticate with radar email challenge.
+    # @param code [String]
+    # @param radar_challenge_id [String]
+    # @param pending_authentication_token [String]
+    # @param ip_address [String, nil]
+    # @param device_id [String, nil]
+    # @param user_agent [String, nil]
+    # @param request_options [Hash] Per-request overrides.
+    # @return [WorkOS::AuthenticateResponse]
+    def authenticate_with_radar_email_challenge(
+      code:,
+      radar_challenge_id:,
+      pending_authentication_token:,
+      ip_address: nil,
+      device_id: nil,
+      user_agent: nil,
+      request_options: {}
+    )
+      body = {
+        "grant_type" => "urn:workos:oauth:grant-type:radar-email-challenge:code",
+        "client_id" => @client.client_id,
+        "client_secret" => @client.api_key,
+        "code" => code,
+        "radar_challenge_id" => radar_challenge_id,
+        "pending_authentication_token" => pending_authentication_token,
+        "ip_address" => ip_address,
+        "device_id" => device_id,
+        "user_agent" => user_agent
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/user_management/authenticate",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      WorkOS::AuthenticateResponse.new(response.body)
+    end
+
+    # Authenticate with radar sms challenge.
+    # @param code [String]
+    # @param verification_id [String]
+    # @param phone_number [String]
+    # @param pending_authentication_token [String]
+    # @param ip_address [String, nil]
+    # @param device_id [String, nil]
+    # @param user_agent [String, nil]
+    # @param request_options [Hash] Per-request overrides.
+    # @return [WorkOS::AuthenticateResponse]
+    def authenticate_with_radar_sms_challenge(
+      code:,
+      verification_id:,
+      phone_number:,
+      pending_authentication_token:,
+      ip_address: nil,
+      device_id: nil,
+      user_agent: nil,
+      request_options: {}
+    )
+      body = {
+        "grant_type" => "urn:workos:oauth:grant-type:radar-sms-challenge:code",
+        "client_id" => @client.client_id,
+        "client_secret" => @client.api_key,
+        "code" => code,
+        "verification_id" => verification_id,
+        "phone_number" => phone_number,
+        "pending_authentication_token" => pending_authentication_token,
+        "ip_address" => ip_address,
+        "device_id" => device_id,
+        "user_agent" => user_agent
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/user_management/authenticate",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      WorkOS::AuthenticateResponse.new(response.body)
+    end
+
     # Get device authorization URL
     # @param client_id [String] The WorkOS client ID for your application.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)

lib/workos/user_management/magic_auth_send_magic_auth_code_and_return_response.rb

@@ -5,13 +5,38 @@
 module WorkOS
   class MagicAuthSendMagicAuthCodeAndReturnResponse < WorkOS::Types::BaseModel
     HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      user_id: :user_id,
+      email: :email,
+      expires_at: :expires_at,
+      created_at: :created_at,
+      updated_at: :updated_at,
+      code: :code,
       radar_auth_attempt_id: :radar_auth_attempt_id
     }.freeze
 
-    attr_accessor :radar_auth_attempt_id
+    attr_accessor \
+      :object,
+      :id,
+      :user_id,
+      :email,
+      :expires_at,
+      :created_at,
+      :updated_at,
+      :code,
+      :radar_auth_attempt_id
 
     def initialize(json)
       hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @user_id = hash[:user_id]
+      @email = hash[:email]
+      @expires_at = hash[:expires_at]
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+      @code = hash[:code]
       @radar_auth_attempt_id = hash[:radar_auth_attempt_id]
     end
   end

lib/workos/user_management/user_create_response.rb

@@ -3,5 +3,59 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  UserCreateResponse = MagicAuthSendMagicAuthCodeAndReturnResponse
+  class UserCreateResponse < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      first_name: :first_name,
+      last_name: :last_name,
+      name: :name,
+      profile_picture_url: :profile_picture_url,
+      email: :email,
+      email_verified: :email_verified,
+      external_id: :external_id,
+      metadata: :metadata,
+      last_sign_in_at: :last_sign_in_at,
+      locale: :locale,
+      created_at: :created_at,
+      updated_at: :updated_at,
+      radar_auth_attempt_id: :radar_auth_attempt_id
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :first_name,
+      :last_name,
+      :name,
+      :profile_picture_url,
+      :email,
+      :email_verified,
+      :external_id,
+      :metadata,
+      :last_sign_in_at,
+      :locale,
+      :created_at,
+      :updated_at,
+      :radar_auth_attempt_id
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @first_name = hash[:first_name]
+      @last_name = hash[:last_name]
+      @name = hash[:name]
+      @profile_picture_url = hash[:profile_picture_url]
+      @email = hash[:email]
+      @email_verified = hash[:email_verified]
+      @external_id = hash[:external_id]
+      @metadata = hash[:metadata] || {}
+      @last_sign_in_at = hash[:last_sign_in_at]
+      @locale = hash[:locale]
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+      @radar_auth_attempt_id = hash[:radar_auth_attempt_id]
+    end
+  end
 end

rbi/workos/magic_auth_send_magic_auth_code_and_return_response.rbi

@@ -9,6 +9,54 @@ module WorkOS
     sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
     def initialize(json); end
 
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
+    sig { returns(String) }
+    def id; end
+
+    sig { params(value: String).returns(String) }
+    def id=(value); end
+
+    sig { returns(String) }
+    def user_id; end
+
+    sig { params(value: String).returns(String) }
+    def user_id=(value); end
+
+    sig { returns(String) }
+    def email; end
+
+    sig { params(value: String).returns(String) }
+    def email=(value); end
+
+    sig { returns(String) }
+    def expires_at; end
+
+    sig { params(value: String).returns(String) }
+    def expires_at=(value); end
+
+    sig { returns(String) }
+    def created_at; end
+
+    sig { params(value: String).returns(String) }
+    def created_at=(value); end
+
+    sig { returns(String) }
+    def updated_at; end
+
+    sig { params(value: String).returns(String) }
+    def updated_at=(value); end
+
+    sig { returns(String) }
+    def code; end
+
+    sig { params(value: String).returns(String) }
+    def code=(value); end
+
     sig { returns(T.nilable(String)) }
     def radar_auth_attempt_id; end