Update verified state (#243)

* Expose verified email/phone on update request
related to descope/etc#2455
+ tests

* remove settings string

* Fix linting

Author: aviadl

descope/management/user.py

@@ -177,6 +177,8 @@ def update(
         user_tenants: List[AssociatedTenant] = None,
         picture: str = None,
         custom_attributes: dict = None,
+        verified_email: bool = None,
+        verified_phone: bool = None,
     ):
         """
         Update an existing user with the given various fields. IMPORTANT: All parameters are used as overrides
@@ -212,6 +214,8 @@ def update(
                 False,
                 picture,
                 custom_attributes,
+                verified_email,
+                verified_phone,
             ),
             pswd=self._auth.management_key,
         )
@@ -953,8 +957,10 @@ def _compose_update_body(
         test: bool,
         picture: str,
         custom_attributes: dict,
+        verified_email: bool = None,
+        verified_phone: bool = None,
     ) -> dict:
-        return {
+        res = {
             "loginId": login_id,
             "email": email,
             "phone": phone,
@@ -965,3 +971,8 @@ def _compose_update_body(
             "picture": picture,
             "customAttributes": custom_attributes,
         }
+        if verified_email is not None:
+            res["verifiedEmail"] = verified_email
+        if verified_phone is not None:
+            res["verifiedPhone"] = verified_phone
+        return res

tests/management/test_user.py

@@ -241,6 +241,38 @@ def test_update(self):
                 verify=True,
                 timeout=DEFAULT_TIMEOUT_SECONDS,
             )
+        # Test success flow with verified flags
+        with patch("requests.post") as mock_post:
+            mock_post.return_value.ok = True
+            self.assertIsNone(
+                self.client.mgmt.user.update(
+                    "id", verified_email=True, verified_phone=False
+                )
+            )
+            mock_post.assert_called_with(
+                f"{common.DEFAULT_BASE_URL}{MgmtV1.user_update_path}",
+                headers={
+                    **common.default_headers,
+                    "Authorization": f"Bearer {self.dummy_project_id}:{self.dummy_management_key}",
+                },
+                params=None,
+                json={
+                    "loginId": "id",
+                    "email": None,
+                    "phone": None,
+                    "displayName": None,
+                    "roleNames": [],
+                    "userTenants": [],
+                    "test": False,
+                    "picture": None,
+                    "customAttributes": None,
+                    "verifiedEmail": True,
+                    "verifiedPhone": False,
+                },
+                allow_redirects=False,
+                verify=True,
+                timeout=DEFAULT_TIMEOUT_SECONDS,
+            )
 
     def test_delete(self):
         # Test failed flows