Authorization Resources (external ID) endpoints and listResources endpoint

src/authorization/authorization.ts

@@ -29,6 +29,12 @@ import {
   ListPermissionsOptions,
   AuthorizationResource,
   AuthorizationResourceResponse,
+  AuthorizationResourceList,
+  AuthorizationResourceListResponse,
+  ListAuthorizationResourcesOptions,
+  GetAuthorizationResourceByExternalIdOptions,
+  UpdateAuthorizationResourceByExternalIdOptions,
+  DeleteAuthorizationResourceByExternalIdOptions,
   CreateAuthorizationResourceOptions,
   UpdateAuthorizationResourceOptions,
   AuthorizationCheckOptions,
@@ -48,6 +54,8 @@ import {
   deserializeAuthorizationResource,
   serializeCreateResourceOptions,
   serializeUpdateResourceOptions,
+  serializeUpdateResourceByExternalIdOptions,
+  serializeListAuthorizationResourcesOptions,
   serializeAuthorizationCheckOptions,
 } from './serializers';
 
@@ -280,6 +288,57 @@ export class Authorization {
     await this.workos.delete(`/authorization/resources/${resourceId}`);
   }
 
+  async listResources(
+    options?: ListAuthorizationResourcesOptions,
+  ): Promise<AuthorizationResourceList> {
+    const { data } = await this.workos.get<AuthorizationResourceListResponse>(
+      '/authorization/resources',
+      {
+        query: options
+          ? serializeListAuthorizationResourcesOptions(options)
+          : undefined,
+      },
+    );
+    return {
+      object: 'list',
+      data: data.data.map(deserializeAuthorizationResource),
+      listMetadata: {
+        before: data.list_metadata.before,
+        after: data.list_metadata.after,
+      },
+    };
+  }
+
+  async getResourceByExternalId(
+    options: GetAuthorizationResourceByExternalIdOptions,
+  ): Promise<AuthorizationResource> {
+    const { organizationId, resourceTypeSlug, externalId } = options;
+    const { data } = await this.workos.get<AuthorizationResourceResponse>(
+      `/authorization/organizations/${organizationId}/resources/${resourceTypeSlug}/${externalId}`,
+    );
+    return deserializeAuthorizationResource(data);
+  }
+
+  async updateResourceByExternalId(
+    options: UpdateAuthorizationResourceByExternalIdOptions,
+  ): Promise<AuthorizationResource> {
+    const { organizationId, resourceTypeSlug, externalId } = options;
+    const { data } = await this.workos.patch<AuthorizationResourceResponse>(
+      `/authorization/organizations/${organizationId}/resources/${resourceTypeSlug}/${externalId}`,
+      serializeUpdateResourceByExternalIdOptions(options),
+    );
+    return deserializeAuthorizationResource(data);
+  }
+
+  async deleteResourceByExternalId(
+    options: DeleteAuthorizationResourceByExternalIdOptions,
+  ): Promise<void> {
+    const { organizationId, resourceTypeSlug, externalId } = options;
+    await this.workos.delete(
+      `/authorization/organizations/${organizationId}/resources/${resourceTypeSlug}/${externalId}`,
+    );
+  }
+
   async check(
     options: AuthorizationCheckOptions,
   ): Promise<AuthorizationCheckResult> {

src/authorization/fixtures/list-resources.json

@@ -0,0 +1,33 @@
+{
+  "object": "list",
+  "data": [
+    {
+      "object": "authorization_resource",
+      "id": "authz_resource_01HXYZ123ABC456DEF789ABC",
+      "external_id": "doc-12345678",
+      "name": "Q5 Budget Report",
+      "description": "Financial report for Q5 2025",
+      "resource_type_slug": "document",
+      "organization_id": "org_01HXYZ123ABC456DEF789ABC",
+      "parent_resource_id": "authz_resource_01HXYZ123ABC456DEF789XYZ",
+      "created_at": "2024-01-15T09:30:00.000Z",
+      "updated_at": "2024-01-15T09:30:00.000Z"
+    },
+    {
+      "object": "authorization_resource",
+      "id": "authz_resource_01HXYZ123ABC456DEF789DEF",
+      "external_id": "folder-123",
+      "name": "Finance Folder",
+      "description": null,
+      "resource_type_slug": "folder",
+      "organization_id": "org_01HXYZ123ABC456DEF789ABC",
+      "parent_resource_id": null,
+      "created_at": "2024-01-14T08:00:00.000Z",
+      "updated_at": "2024-01-14T08:00:00.000Z"
+    }
+  ],
+  "list_metadata": {
+    "before": null,
+    "after": "authz_resource_01HXYZ123ABC456DEF789DEF"
+  }
+}

src/authorization/interfaces/authorization-resource.interface.ts

@@ -24,17 +24,27 @@ export interface AuthorizationResourceResponse {
   updated_at: string;
 }
 
-export interface CreateAuthorizationResourceOptions {
+interface BaseCreateAuthorizationResourceOptions {
   externalId: string;
   name: string;
   description?: string | null;
   resourceTypeSlug: string;
   organizationId: string;
-  parentResourceId?: string | null;
-  parentResourceExternalId?: string | null;
-  parentResourceTypeSlug?: string | null;
 }
 
+export interface CreateOptionsWithParentResourceId extends BaseCreateAuthorizationResourceOptions {
+  parentResourceId: string;
+}
+
+export interface CreateOptionsWithParentExternalId extends BaseCreateAuthorizationResourceOptions {
+  parentResourceExternalId: string;
+  parentResourceTypeSlug: string;
+}
+
+export type CreateAuthorizationResourceOptions =
+  | CreateOptionsWithParentResourceId
+  | CreateOptionsWithParentExternalId;
+
 export interface SerializedCreateAuthorizationResourceOptions {
   external_id: string;
   name: string;
@@ -56,3 +66,21 @@ export interface SerializedUpdateAuthorizationResourceOptions {
   name?: string;
   description?: string | null;
 }
+
+export interface AuthorizationResourceList {
+  object: 'list';
+  data: AuthorizationResource[];
+  listMetadata: {
+    before: string | null;
+    after: string | null;
+  };
+}
+
+export interface AuthorizationResourceListResponse {
+  object: 'list';
+  data: AuthorizationResourceResponse[];
+  list_metadata: {
+    before: string | null;
+    after: string | null;
+  };
+}

src/authorization/interfaces/delete-authorization-resource-by-external-id-options.interface.ts

@@ -0,0 +1,5 @@
+export interface DeleteAuthorizationResourceByExternalIdOptions {
+  organizationId: string;
+  resourceTypeSlug: string;
+  externalId: string;
+}

src/authorization/interfaces/get-authorization-resource-by-external-id-options.interface.ts

@@ -0,0 +1,5 @@
+export interface GetAuthorizationResourceByExternalIdOptions {
+  organizationId: string;
+  resourceTypeSlug: string;
+  externalId: string;
+}

src/authorization/interfaces/index.ts

@@ -14,4 +14,8 @@ export * from './create-permission-options.interface';
 export * from './update-permission-options.interface';
 export * from './list-permissions-options.interface';
 export * from './authorization-resource.interface';
+export * from './list-authorization-resources-options.interface';
+export * from './get-authorization-resource-by-external-id-options.interface';
+export * from './update-authorization-resource-by-external-id-options.interface';
+export * from './delete-authorization-resource-by-external-id-options.interface';
 export * from './authorization-resource-check.interface';

src/authorization/interfaces/list-authorization-resources-options.interface.ts

@@ -0,0 +1,23 @@
+import { PaginationOptions } from '../../common/interfaces/pagination-options.interface';
+
+export interface ListAuthorizationResourcesOptions extends PaginationOptions {
+  organizationIds?: string[];
+  resourceTypeSlugs?: string[];
+  parentResourceId?: string;
+  parentResourceTypeSlug?: string;
+  parentExternalId?: string;
+  search?: string;
+}
+
+export interface SerializedListAuthorizationResourcesOptions {
+  organization_ids?: string;
+  resource_type_slugs?: string;
+  parent_resource_id?: string;
+  parent_resource_type_slug?: string;
+  parent_external_id?: string;
+  search?: string;
+  limit?: number;
+  after?: string;
+  before?: string;
+  order?: 'asc' | 'desc';
+}

src/authorization/interfaces/update-authorization-resource-by-external-id-options.interface.ts

@@ -0,0 +1,7 @@
+export interface UpdateAuthorizationResourceByExternalIdOptions {
+  organizationId: string;
+  resourceTypeSlug: string;
+  externalId: string;
+  name?: string;
+  description?: string | null;
+}

src/authorization/serializers/create-authorization-resource-options.serializer.ts

@@ -13,13 +13,11 @@ export const serializeCreateResourceOptions = (
   ...(options.description !== undefined && {
     description: options.description,
   }),
-  ...(options.parentResourceId !== undefined && {
+  ...('parentResourceId' in options && {
     parent_resource_id: options.parentResourceId,
   }),
-  ...(options.parentResourceExternalId !== undefined && {
+  ...('parentResourceExternalId' in options && {
     parent_resource_external_id: options.parentResourceExternalId,
-  }),
-  ...(options.parentResourceTypeSlug !== undefined && {
     parent_resource_type_slug: options.parentResourceTypeSlug,
   }),
 });

src/authorization/serializers/index.ts

@@ -10,4 +10,6 @@ export * from './update-permission-options.serializer';
 export * from './authorization-resource.serializer';
 export * from './create-authorization-resource-options.serializer';
 export * from './update-authorization-resource-options.serializer';
+export * from './update-authorization-resource-by-external-id-options.serializer';
+export * from './list-authorization-resources-options.serializer';
 export * from './authorization-check-options.serializer';

src/authorization/serializers/list-authorization-resources-options.serializer.ts

@@ -0,0 +1,29 @@
+import {
+  ListAuthorizationResourcesOptions,
+  SerializedListAuthorizationResourcesOptions,
+} from '../interfaces/list-authorization-resources-options.interface';
+
+export const serializeListAuthorizationResourcesOptions = (
+  options: ListAuthorizationResourcesOptions,
+): SerializedListAuthorizationResourcesOptions => ({
+  ...(options.organizationIds && {
+    organization_ids: options.organizationIds.join(','),
+  }),
+  ...(options.resourceTypeSlugs && {
+    resource_type_slugs: options.resourceTypeSlugs.join(','),
+  }),
+  ...(options.parentResourceId && {
+    parent_resource_id: options.parentResourceId,
+  }),
+  ...(options.parentResourceTypeSlug && {
+    parent_resource_type_slug: options.parentResourceTypeSlug,
+  }),
+  ...(options.parentExternalId && {
+    parent_external_id: options.parentExternalId,
+  }),
+  ...(options.search && { search: options.search }),
+  ...(options.limit !== undefined && { limit: options.limit }),
+  ...(options.after && { after: options.after }),
+  ...(options.before && { before: options.before }),
+  ...(options.order && { order: options.order }),
+});

src/authorization/serializers/update-authorization-resource-by-external-id-options.serializer.ts

@@ -0,0 +1,11 @@
+import { UpdateAuthorizationResourceByExternalIdOptions } from '../interfaces/update-authorization-resource-by-external-id-options.interface';
+import { SerializedUpdateAuthorizationResourceOptions } from '../interfaces/authorization-resource.interface';
+
+export const serializeUpdateResourceByExternalIdOptions = (
+  options: UpdateAuthorizationResourceByExternalIdOptions,
+): SerializedUpdateAuthorizationResourceOptions => ({
+  ...(options.name !== undefined && { name: options.name }),
+  ...(options.description !== undefined && {
+    description: options.description,
+  }),
+});