@mastra/auth-workos 0.10.5-alpha.0 → 0.10.5-alpha.1

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @mastra/auth-workos
 
+## 0.10.5-alpha.1
+
+### Patch Changes
+
+- [#7343](https://github.com/mastra-ai/mastra/pull/7343) [`de3cbc6`](https://github.com/mastra-ai/mastra/commit/de3cbc61079211431bd30487982ea3653517278e) Thanks [@LekoArts](https://github.com/LekoArts)! - Update the `package.json` file to include additional fields like `repository`, `homepage` or `files`.
+
+- Updated dependencies [[`de3cbc6`](https://github.com/mastra-ai/mastra/commit/de3cbc61079211431bd30487982ea3653517278e)]:
+  - @mastra/auth@0.1.3-alpha.0
+
 ## 0.10.5-alpha.0
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/auth-workos",
-  "version": "0.10.5-alpha.0",
+  "version": "0.10.5-alpha.1",
   "description": "Mastra WorkOS Auth integration",
   "type": "module",
   "main": "dist/index.js",
@@ -21,7 +21,7 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@workos-inc/node": "^7.69.1",
-    "@mastra/auth": "0.1.2"
+    "@mastra/auth": "0.1.3-alpha.0"
   },
   "devDependencies": {
     "@types/node": "^20.19.0",
@@ -29,9 +29,22 @@
     "tsup": "^8.5.0",
     "typescript": "^5.8.3",
     "vitest": "^3.2.4",
-    "@mastra/core": "0.15.3-alpha.4",
+    "@internal/types-builder": "0.0.9",
     "@internal/lint": "0.0.34",
-    "@internal/types-builder": "0.0.9"
+    "@mastra/core": "0.15.3-alpha.5"
+  },
+  "files": [
+    "dist",
+    "CHANGELOG.md"
+  ],
+  "homepage": "https://mastra.ai",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mastra-ai/mastra.git",
+    "directory": "auth/workos"
+  },
+  "bugs": {
+    "url": "https://github.com/mastra-ai/mastra/issues"
   },
   "scripts": {
     "build": "tsup --silent --config tsup.config.ts",

package/.turbo/turbo-build.log

@@ -1,4 +0,0 @@
-
-> @mastra/auth-workos@0.10.5-alpha.0 build /home/runner/work/mastra/mastra/auth/workos
-> tsup --silent --config tsup.config.ts
-

package/eslint.config.js

@@ -1,6 +0,0 @@
-import { createConfig } from '@internal/lint/eslint';
-
-const config = await createConfig();
-
-/** @type {import("eslint").Linter.Config[]} */
-export default [...config];

package/src/index.test.ts

@@ -1,185 +0,0 @@
-import type { JwtPayload } from '@mastra/auth';
-import { verifyJwks } from '@mastra/auth';
-import { WorkOS } from '@workos-inc/node';
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { MastraAuthWorkos } from './index';
-
-// Mock the WorkOS class
-vi.mock('@workos-inc/node', () => ({
-  WorkOS: vi.fn().mockImplementation(() => ({
-    userManagement: {
-      getJwksUrl: vi.fn().mockReturnValue('https://mock-jwks-url'),
-      listOrganizationMemberships: vi.fn().mockResolvedValue({
-        data: [{ role: { slug: 'admin' } }, { role: { slug: 'member' } }],
-      }),
-    },
-  })),
-}));
-
-// Mock the verifyJwks function
-vi.mock('@mastra/auth', () => ({
-  verifyJwks: vi.fn().mockResolvedValue({
-    sub: 'user123',
-    email: 'test@example.com',
-  } as JwtPayload),
-}));
-
-describe('MastraAuthWorkos', () => {
-  const mockApiKey = 'test-api-key';
-  const mockClientId = 'test-client-id';
-
-  beforeEach(() => {
-    vi.clearAllMocks();
-    // Reset environment variables
-    delete process.env.WORKOS_API_KEY;
-    delete process.env.WORKOS_CLIENT_ID;
-  });
-
-  describe('constructor', () => {
-    it('should initialize with provided options', () => {
-      new MastraAuthWorkos({
-        apiKey: mockApiKey,
-        clientId: mockClientId,
-      });
-
-      expect(WorkOS).toHaveBeenCalledWith(mockApiKey, {
-        clientId: mockClientId,
-      });
-    });
-
-    it('should initialize with environment variables', () => {
-      process.env.WORKOS_API_KEY = mockApiKey;
-      process.env.WORKOS_CLIENT_ID = mockClientId;
-
-      new MastraAuthWorkos();
-
-      expect(WorkOS).toHaveBeenCalledWith(mockApiKey, {
-        clientId: mockClientId,
-      });
-    });
-
-    it('should throw error when neither options nor environment variables are provided', () => {
-      expect(() => new MastraAuthWorkos()).toThrow('WorkOS API key and client ID are required');
-    });
-  });
-
-  describe('authenticateToken', () => {
-    it('should authenticate a valid token', async () => {
-      const auth = new MastraAuthWorkos({
-        apiKey: mockApiKey,
-        clientId: mockClientId,
-      });
-
-      const mockToken = 'valid-token';
-      const result = await auth.authenticateToken(mockToken);
-
-      expect(verifyJwks).toHaveBeenCalledWith(mockToken, 'https://mock-jwks-url');
-      expect(result).toEqual({
-        sub: 'user123',
-        email: 'test@example.com',
-      });
-    });
-
-    it('should return null for invalid token', async () => {
-      vi.mocked(verifyJwks).mockResolvedValueOnce(null as unknown as JwtPayload);
-
-      const auth = new MastraAuthWorkos({
-        apiKey: mockApiKey,
-        clientId: mockClientId,
-      });
-
-      const result = await auth.authenticateToken('invalid-token');
-      expect(result).toBeNull();
-    });
-  });
-
-  describe('authorizeUser', () => {
-    it('should return true for admin users', async () => {
-      const auth = new MastraAuthWorkos({
-        apiKey: mockApiKey,
-        clientId: mockClientId,
-      });
-
-      const result = await auth.authorizeUser({
-        sub: 'user123',
-        email: 'test@example.com',
-      });
-
-      expect(result).toBe(true);
-    });
-
-    it('should return false for non-admin users', async () => {
-      vi.mocked(WorkOS).mockImplementationOnce(
-        () =>
-          ({
-            userManagement: {
-              getJwksUrl: vi.fn().mockReturnValue('https://mock-jwks-url'),
-              listOrganizationMemberships: vi.fn().mockResolvedValue({
-                data: [{ role: { slug: 'member' } }],
-              }),
-            },
-          }) as unknown as WorkOS,
-      );
-
-      const auth = new MastraAuthWorkos({
-        apiKey: mockApiKey,
-        clientId: mockClientId,
-      });
-
-      const result = await auth.authorizeUser({
-        sub: 'user123',
-        email: 'test@example.com',
-      });
-
-      expect(result).toBe(false);
-    });
-
-    it('should return false for falsy user', async () => {
-      vi.mocked(WorkOS).mockImplementationOnce(
-        () =>
-          ({
-            userManagement: {
-              getJwksUrl: vi.fn().mockReturnValue('https://mock-jwks-url'),
-              listOrganizationMemberships: vi.fn().mockResolvedValue({
-                data: [], // Empty data array means no roles
-              }),
-            },
-          }) as unknown as WorkOS,
-      );
-
-      const auth = new MastraAuthWorkos({
-        apiKey: mockApiKey,
-        clientId: mockClientId,
-      });
-
-      const result = await auth.authorizeUser({
-        sub: '',
-        email: '',
-      });
-      expect(result).toBe(false);
-    });
-  });
-
-  it('can be overridden with custom authorization logic', async () => {
-    const workos = new MastraAuthWorkos({
-      apiKey: mockApiKey,
-      clientId: mockClientId,
-      async authorizeUser(user: any): Promise<boolean> {
-        // Custom authorization logic that checks for specific permissions
-        return user?.permissions?.includes('admin') ?? false;
-      },
-    });
-
-    // Test with admin user
-    const adminUser = { sub: 'user123', permissions: ['admin'] };
-    expect(await workos.authorizeUser(adminUser)).toBe(true);
-
-    // Test with non-admin user
-    const regularUser = { sub: 'user456', permissions: ['read'] };
-    expect(await workos.authorizeUser(regularUser)).toBe(false);
-
-    // Test with user without permissions
-    const noPermissionsUser = { sub: 'user789' };
-    expect(await workos.authorizeUser(noPermissionsUser)).toBe(false);
-  });
-});

package/src/index.ts

@@ -1,57 +0,0 @@
-import { verifyJwks } from '@mastra/auth';
-import type { JwtPayload } from '@mastra/auth';
-import type { MastraAuthProviderOptions } from '@mastra/core/server';
-import { MastraAuthProvider } from '@mastra/core/server';
-import { WorkOS } from '@workos-inc/node';
-
-type WorkosUser = JwtPayload;
-
-interface MastraAuthWorkosOptions extends MastraAuthProviderOptions<WorkosUser> {
-  apiKey?: string;
-  clientId?: string;
-}
-
-export class MastraAuthWorkos extends MastraAuthProvider<WorkosUser> {
-  protected workos: WorkOS;
-
-  constructor(options?: MastraAuthWorkosOptions) {
-    super({ name: options?.name ?? 'workos' });
-
-    const apiKey = options?.apiKey ?? process.env.WORKOS_API_KEY;
-    const clientId = options?.clientId ?? process.env.WORKOS_CLIENT_ID;
-
-    if (!apiKey || !clientId) {
-      throw new Error(
-        'WorkOS API key and client ID are required, please provide them in the options or set the environment variables WORKOS_API_KEY and WORKOS_CLIENT_ID',
-      );
-    }
-
-    this.workos = new WorkOS(apiKey, {
-      clientId,
-    });
-
-    this.registerOptions(options);
-  }
-
-  async authenticateToken(token: string): Promise<WorkosUser | null> {
-    const jwksUri = this.workos.userManagement.getJwksUrl(process.env.WORKOS_CLIENT_ID!);
-    const user = await verifyJwks(token, jwksUri);
-    return user;
-  }
-
-  async authorizeUser(user: WorkosUser) {
-    if (!user) {
-      return false;
-    }
-
-    const org = await this.workos.userManagement.listOrganizationMemberships({
-      userId: user.sub,
-    });
-
-    const roles = org.data.map(org => org.role);
-
-    const isAdmin = roles.some(role => role.slug === 'admin');
-
-    return isAdmin;
-  }
-}

package/tsconfig.build.json

@@ -1,9 +0,0 @@
-{
-  "extends": ["./tsconfig.json", "../../tsconfig.build.json"],
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "**/*.test.ts", "src/**/*.mock.ts"]
-}

package/tsconfig.json

@@ -1,5 +0,0 @@
-{
-  "extends": "../../tsconfig.node.json",
-  "include": ["src/**/*", "tsup.config.ts"],
-  "exclude": ["node_modules", "**/*.test.ts"]
-}

package/tsup.config.ts

@@ -1,17 +0,0 @@
-import { generateTypes } from '@internal/types-builder';
-import { defineConfig } from 'tsup';
-
-export default defineConfig({
-  entry: ['src/index.ts'],
-  format: ['esm', 'cjs'],
-  clean: true,
-  dts: false,
-  splitting: true,
-  treeshake: {
-    preset: 'smallest',
-  },
-  sourcemap: true,
-  onSuccess: async () => {
-    await generateTypes(process.cwd());
-  },
-});

package/vitest.config.ts

@@ -1,8 +0,0 @@
-import { defineConfig } from 'vitest/config';
-
-export default defineConfig({
-  test: {
-    globals: true,
-    include: ['src/**/*.test.ts'],
-  },
-});