Add roles to directory user & profile (#1401)

## Description

Adds `roles` property to directory user and SSO profile to support
multiple roles.

## Documentation

Does this require changes to the WorkOS Docs? E.g. the [API
Reference](https://workos.com/docs/reference) or code snippets need
updates.

- [X] Yes

If yes, link a related docs PR and add a docs maintainer as a reviewer.
Their approval is required.

Author: kendallstrautman

src/directory-sync/directory-sync.spec.ts

@@ -128,7 +128,7 @@ describe('DirectorySync', () => {
     updated_at: '2021-12-13 12:15:45.531847',
   };
 
-  const userWithRole: DirectoryUserWithGroups = {
+  const userWithRoles: DirectoryUserWithGroups = {
     object: 'directory_user',
     id: 'directory_user_456',
     customAttributes: {
@@ -153,6 +153,7 @@ describe('DirectorySync', () => {
     state: 'active',
     username: 'jonsnow',
     role: { slug: 'super_admin' },
+    roles: [{ slug: 'super_admin' }],
     createdAt: '2021-10-27 15:21:50.640959',
     updatedAt: '2021-12-13 12:15:45.531847',
   };
@@ -182,6 +183,7 @@ describe('DirectorySync', () => {
     state: 'active',
     username: 'jonsnow',
     role: { slug: 'super_admin' },
+    roles: [{ slug: 'super_admin' }],
     created_at: '2021-10-27 15:21:50.640959',
     updated_at: '2021-12-13 12:15:45.531847',
   };
@@ -465,15 +467,15 @@ describe('DirectorySync', () => {
       expect(subject).toEqual(userWithGroup);
     });
 
-    describe('with a Role', () => {
+    describe('with roles', () => {
       it(`requests a Directory User`, async () => {
         fetchOnce(userWithRoleResponse);
 
         const subject = await workos.directorySync.getUser(
           'directory_user_456',
         );
 
-        expect(subject).toEqual(userWithRole);
+        expect(subject).toEqual(userWithRoles);
       });
     });
   });

src/directory-sync/interfaces/directory-user.interface.ts

@@ -41,6 +41,7 @@ export interface DirectoryUser<
   jobTitle: string | null;
   state: 'active' | 'inactive';
   role?: RoleResponse;
+  roles?: RoleResponse[];
   createdAt: string;
   updatedAt: string;
 }
@@ -80,6 +81,7 @@ export interface DirectoryUserResponse<
   job_title: string | null;
   state: 'active' | 'inactive';
   role?: RoleResponse;
+  roles?: RoleResponse[];
   created_at: string;
   updated_at: string;
 }

src/directory-sync/serializers/directory-user.serializer.ts

@@ -29,6 +29,7 @@ export const deserializeDirectoryUser = <
   jobTitle: directoryUser.job_title,
   state: directoryUser.state,
   role: directoryUser.role,
+  roles: directoryUser.roles,
   createdAt: directoryUser.created_at,
   updatedAt: directoryUser.updated_at,
 });
@@ -60,6 +61,7 @@ export const deserializeUpdatedEventDirectoryUser = (
   jobTitle: directoryUser.job_title,
   state: directoryUser.state,
   role: directoryUser.role,
+  roles: directoryUser.roles,
   createdAt: directoryUser.created_at,
   updatedAt: directoryUser.updated_at,
   previousAttributes: directoryUser.previous_attributes,

src/sso/__snapshots__/sso.spec.ts.snap

@@ -57,6 +57,11 @@ exports[`SSO SSO getProfileAndToken with all information provided sends a reques
   "role": {
     "slug": "admin",
   },
+  "roles": [
+    {
+      "slug": "admin",
+    },
+  ],
 }
 `;
 
@@ -91,5 +96,10 @@ exports[`SSO SSO getProfileAndToken without a groups attribute sends a request t
   "role": {
     "slug": "admin",
   },
+  "roles": [
+    {
+      "slug": "admin",
+    },
+  ],
 }
 `;

src/sso/interfaces/profile.interface.ts

@@ -12,6 +12,7 @@ export interface Profile<CustomAttributesType extends UnknownRecord> {
   firstName?: string;
   lastName?: string;
   role?: RoleResponse;
+  roles?: RoleResponse[];
   groups?: string[];
   customAttributes?: CustomAttributesType;
   rawAttributes?: { [key: string]: any };
@@ -27,6 +28,7 @@ export interface ProfileResponse<CustomAttributesType extends UnknownRecord> {
   first_name?: string;
   last_name?: string;
   role?: RoleResponse;
+  roles?: RoleResponse[];
   groups?: string[];
   custom_attributes?: CustomAttributesType;
   raw_attributes?: { [key: string]: any };

src/sso/serializers/profile.serializer.ts

@@ -13,6 +13,7 @@ export const deserializeProfile = <CustomAttributesType extends UnknownRecord>(
   firstName: profile.first_name,
   lastName: profile.last_name,
   role: profile.role,
+  roles: profile.roles,
   groups: profile.groups,
   customAttributes: profile.custom_attributes,
   rawAttributes: profile.raw_attributes,

src/sso/sso.spec.ts

@@ -278,6 +278,7 @@ describe('SSO', () => {
               role: {
                 slug: 'admin',
               },
+              roles: [{ slug: 'admin' }],
               groups: ['Admins', 'Developers'],
               raw_attributes: {
                 email: 'foo@test.com',
@@ -323,6 +324,7 @@ describe('SSO', () => {
               role: {
                 slug: 'admin',
               },
+              roles: [{ slug: 'admin' }],
               raw_attributes: {
                 email: 'foo@test.com',
                 first_name: 'foo',
@@ -363,6 +365,7 @@ describe('SSO', () => {
               role: {
                 slug: 'admin',
               },
+              roles: [{ slug: 'admin' }],
               groups: ['Admins', 'Developers'],
               raw_attributes: {
                 email: 'foo@test.com',
@@ -415,6 +418,7 @@ describe('SSO', () => {
               role: {
                 slug: 'admin',
               },
+              roles: [{ slug: 'admin' }],
               raw_attributes: {
                 email: 'foo@test.com',
                 first_name: 'foo',
@@ -453,6 +457,7 @@ describe('SSO', () => {
           role: {
             slug: 'admin',
           },
+          roles: [{ slug: 'admin' }],
           groups: ['Admins', 'Developers'],
           raw_attributes: {
             email: 'foo@test.com',