GET https://coinbase.com/api/v3/brokerage/stream/orders?product_id=BTC-EUR&status=OPEN
Unofficial, but seems work - must be properly signed. However, it is stream. Unless you specify accept: text/event-stream, you just get stream of JSONs where the first is snapshot and updates follows.
It seems that event streams are part of api/v3.