@whop/sdk 0.0.37 → 0.0.39

package/src/lib/verify-user-token.ts

@@ -1,9 +1,26 @@
-import { importJWK, jwtVerify } from 'jose';
+import { createRemoteJWKSet, importJWK, jwtVerify } from 'jose';
 import type { Whop } from '../client';
 
 const USER_TOKEN_HEADER_NAME = 'x-whop-user-token';
-const USER_TOKEN_VERIFICATION_KEY =
-  '{"kty":"EC","x":"rz8a8vxvexHC0TLT91g7llOdDOsNuYiGEfic4Qhni-E","y":"zH0QblKYToexd5PEIMGXPVJS9AB5smKrW4S_TbiXrOs","crv":"P-256"}';
+const DEFAULT_JWKS_URL = 'https://api.whop.com/.well-known/jwks.json';
+
+// Module-level cache: one RemoteJWKSet per URL. jose's remote set handles
+// HTTP caching (respecting the endpoint's Cache-Control), a cooldown to
+// prevent tight-loop refetches on unknown kids, and thread-safe in-flight
+// deduplication. Reusing the same instance across calls is what makes the
+// verify path effectively free after the first lookup.
+const jwksCache = new Map<string, ReturnType<typeof createRemoteJWKSet>>();
+
+function getRemoteJwks(url: string): ReturnType<typeof createRemoteJWKSet> {
+  let existing = jwksCache.get(url);
+  if (existing) return existing;
+  existing = createRemoteJWKSet(new URL(url), {
+    cacheMaxAge: 12 * 60 * 60 * 1000,
+    cooldownDuration: 30_000,
+  });
+  jwksCache.set(url, existing);
+  return existing;
+}
 
 export interface GetUserTokenOptions {
   headerName?: string | null | undefined;
@@ -43,9 +60,17 @@ export interface VerifyUserTokenOptions<DontThrow extends boolean = false> {
   /// This is the app id of your app. You can find it in the app settings dashboard.
   appId: string;
 
-  /// The public key used to verify the user token. You don't need to provide this by default.
+  /// Static JWK (JSON string) used to verify the user token. When set, the
+  /// SDK skips the remote JWKS fetch entirely — useful for self-hosted or
+  /// test setups where you know the signing key. Prefer leaving this unset
+  /// and using `jwksUrl` instead so key rotation is handled automatically.
   publicKey?: string;
 
+  /// URL of a JWKS endpoint to verify the user token against. Defaults to
+  /// Whop's canonical JWKS. Override this when pointing at a local Whop
+  /// backend (for example during local development).
+  jwksUrl?: string;
+
   /// If true, the function will instead return null if the user token is invalid.
   /// Otherwise, it will throw an error. Defaults to `false`, meaning on validation failure, an error will be thrown.
   dontThrow?: DontThrow;
@@ -62,9 +87,9 @@ export function makeUserTokenVerifierFromSdk(client: Whop) {
     if (!client.appID) {
       throw Error('You must set appID in the Whop client constructor if you want to verify user tokens.');
     }
-    const baseOptions: VerifyUserTokenOptions<false> = {
-      appId: client.appID,
-    };
+    const baseOptions: VerifyUserTokenOptions<false> = { appId: client.appID };
+    if (client.userTokenPublicKey) baseOptions.publicKey = client.userTokenPublicKey;
+    if (client.userTokenJwksUrl) baseOptions.jwksUrl = client.userTokenJwksUrl;
     return await internalVerifyUserToken<DT>(tokenOrHeadersOrRequest, {
       ...baseOptions,
       ...options,
@@ -96,15 +121,23 @@ async function internalVerifyUserToken<DontThrow extends boolean = false>(
       );
     }
 
-    const jwkString = options.publicKey ?? USER_TOKEN_VERIFICATION_KEY;
-    const key = await importJWK(JSON.parse(jwkString), 'ES256').catch(() => {
-      throw new Error('Invalid public key provided to verifyUserToken');
-    });
-    const token = await jwtVerify(tokenString, key, {
-      issuer: 'urn:whopcom:exp-proxy',
-    }).catch((_e: any) => {
-      throw new Error('Invalid user token provided to verifyUserToken');
-    });
+    const verifyOptions = { issuer: 'urn:whopcom:exp-proxy', algorithms: ['ES256'] };
+
+    let token;
+    if (options.publicKey) {
+      const key = await importJWK(JSON.parse(options.publicKey), 'ES256').catch(() => {
+        throw new Error('Invalid public key provided to verifyUserToken');
+      });
+      token = await jwtVerify(tokenString, key, verifyOptions).catch(() => {
+        throw new Error('Invalid user token provided to verifyUserToken');
+      });
+    } else {
+      const jwks = getRemoteJwks(options.jwksUrl ?? DEFAULT_JWKS_URL);
+      token = await jwtVerify(tokenString, jwks, verifyOptions).catch(() => {
+        throw new Error('Invalid user token provided to verifyUserToken');
+      });
+    }
+
     if (!(token.payload.sub && token.payload.aud) || Array.isArray(token.payload.aud)) {
       throw new Error('Invalid user token provided to verifyUserToken');
     }

package/src/resources/checkout-configurations.ts

@@ -93,6 +93,12 @@ export interface CheckoutConfigurationListResponse {
    */
   affiliate_code: string | null;
 
+  /**
+   * Whether the checkout configuration allows promo codes. When false, the promo
+   * code input is hidden and promo codes are rejected.
+   */
+  allow_promo_codes: boolean;
+
   /**
    * The ID of the company to use for the checkout configuration
    */
@@ -250,6 +256,12 @@ export declare namespace CheckoutConfigurationCreateParams {
      */
     affiliate_code?: string | null;
 
+    /**
+     * Whether the checkout should show the promo code input field and accept promo
+     * codes. Defaults to true.
+     */
+    allow_promo_codes?: boolean | null;
+
     /**
      * Checkout styling overrides for this session. Overrides plan and company
      * defaults.
@@ -484,7 +496,7 @@ export declare namespace CheckoutConfigurationCreateParams {
          * in this configuration. The full list of default payment methods can be found in
          * the documentation at docs.whop.com/payments.
          */
-        include_platform_defaults: boolean;
+        include_platform_defaults?: boolean | null;
       }
 
       /**
@@ -603,7 +615,7 @@ export declare namespace CheckoutConfigurationCreateParams {
        * in this configuration. The full list of default payment methods can be found in
        * the documentation at docs.whop.com/payments.
        */
-      include_platform_defaults: boolean;
+      include_platform_defaults?: boolean | null;
     }
   }
 
@@ -619,6 +631,12 @@ export declare namespace CheckoutConfigurationCreateParams {
      */
     affiliate_code?: string | null;
 
+    /**
+     * Whether the checkout should show the promo code input field and accept promo
+     * codes. Defaults to true.
+     */
+    allow_promo_codes?: boolean | null;
+
     /**
      * Checkout styling overrides for this session. Overrides plan and company
      * defaults.
@@ -700,7 +718,7 @@ export declare namespace CheckoutConfigurationCreateParams {
        * in this configuration. The full list of default payment methods can be found in
        * the documentation at docs.whop.com/payments.
        */
-      include_platform_defaults: boolean;
+      include_platform_defaults?: boolean | null;
     }
   }
 
@@ -713,6 +731,12 @@ export declare namespace CheckoutConfigurationCreateParams {
 
     mode: 'setup';
 
+    /**
+     * Whether the checkout should show the promo code input field and accept promo
+     * codes. Defaults to true.
+     */
+    allow_promo_codes?: boolean | null;
+
     /**
      * Checkout styling overrides for this session. Overrides plan and company
      * defaults.
@@ -792,7 +816,7 @@ export declare namespace CheckoutConfigurationCreateParams {
        * in this configuration. The full list of default payment methods can be found in
        * the documentation at docs.whop.com/payments.
        */
-      include_platform_defaults: boolean;
+      include_platform_defaults?: boolean | null;
     }
   }
 }

package/src/resources/files.ts

@@ -43,7 +43,7 @@ export class Files extends APIResource {
 /**
  * The upload status of a file
  */
-export type UploadStatus = 'pending' | 'processing' | 'ready' | 'failed';
+export type UploadStatus = 'pending' | 'processing' | 'ready' | 'failed'
 
 /**
  * A file that has been uploaded or is pending upload.

package/src/resources/forums.ts

@@ -109,6 +109,12 @@ export namespace ForumListResponse {
 }
 
 export interface ForumUpdateParams {
+  /**
+   * A list of words that are automatically blocked from posts in this forum. For
+   * example, ['spam', 'scam'].
+   */
+  banned_words?: Array<string> | null;
+
   /**
    * The banner image displayed at the top of the forum page. Pass null to remove the
    * existing banner.

package/src/resources/index.ts

@@ -419,9 +419,10 @@ export {
   type User,
   type UserListResponse,
   type UserCheckAccessResponse,
+  type UserRetrieveParams,
+  type UserUpdateParams,
   type UserListParams,
   type UserCheckAccessParams,
-  type UserUpdateProfileParams,
   type UserListResponsesCursorPage,
 } from './users';
 export {

package/src/resources/invoices.ts

@@ -339,9 +339,9 @@ export declare namespace InvoiceCreateParams {
     product: CreateInvoiceInputWithProduct.Product;
 
     /**
-     * The date and time when the invoice will be automatically finalized and charged.
-     * Only valid when collection_method is charge_automatically. If not provided, the
-     * charge will be processed immediately.
+     * The date and time when the invoice will be automatically finalized. For
+     * charge_automatically, triggers an automatic charge. For send_invoice, sends the
+     * invoice email to the customer at the specified time.
      */
     automatically_finalizes_at?: string | null;
 
@@ -409,6 +409,12 @@ export declare namespace InvoiceCreateParams {
      * customer and due date requirements.
      */
     save_as_draft?: boolean | null;
+
+    /**
+     * The date that defines when the subscription billing cycle should start. When set
+     * on a renewal plan invoice, this anchors all future billing periods to this date.
+     */
+    subscription_billing_anchor_at?: string | null;
   }
 
   export namespace CreateInvoiceInputWithProduct {
@@ -556,7 +562,7 @@ export declare namespace InvoiceCreateParams {
          * in this configuration. The full list of default payment methods can be found in
          * the documentation at docs.whop.com/payments.
          */
-        include_platform_defaults: boolean;
+        include_platform_defaults?: boolean | null;
       }
     }
 
@@ -679,9 +685,9 @@ export declare namespace InvoiceCreateParams {
     product_id: string;
 
     /**
-     * The date and time when the invoice will be automatically finalized and charged.
-     * Only valid when collection_method is charge_automatically. If not provided, the
-     * charge will be processed immediately.
+     * The date and time when the invoice will be automatically finalized. For
+     * charge_automatically, triggers an automatic charge. For send_invoice, sends the
+     * invoice email to the customer at the specified time.
      */
     automatically_finalizes_at?: string | null;
 
@@ -749,6 +755,12 @@ export declare namespace InvoiceCreateParams {
      * customer and due date requirements.
      */
     save_as_draft?: boolean | null;
+
+    /**
+     * The date that defines when the subscription billing cycle should start. When set
+     * on a renewal plan invoice, this anchors all future billing periods to this date.
+     */
+    subscription_billing_anchor_at?: string | null;
   }
 
   export namespace CreateInvoiceInputWithProductID {
@@ -896,7 +908,7 @@ export declare namespace InvoiceCreateParams {
          * in this configuration. The full list of default payment methods can be found in
          * the documentation at docs.whop.com/payments.
          */
-        include_platform_defaults: boolean;
+        include_platform_defaults?: boolean | null;
       }
     }
 
@@ -982,7 +994,9 @@ export declare namespace InvoiceCreateParams {
 
 export interface InvoiceUpdateParams {
   /**
-   * The date and time when the invoice will be automatically finalized and charged.
+   * The date and time when the invoice will be automatically finalized. For
+   * charge_automatically, triggers an automatic charge. For send_invoice, sends the
+   * invoice email at the specified time.
    */
   automatically_finalizes_at?: string | null;
 
@@ -1040,6 +1054,11 @@ export interface InvoiceUpdateParams {
    * Updated plan attributes.
    */
   plan?: InvoiceUpdateParams.Plan | null;
+
+  /**
+   * The date that defines when the subscription billing cycle should start.
+   */
+  subscription_billing_anchor_at?: string | null;
 }
 
 export namespace InvoiceUpdateParams {
@@ -1263,7 +1282,7 @@ export namespace InvoiceUpdateParams {
        * in this configuration. The full list of default payment methods can be found in
        * the documentation at docs.whop.com/payments.
        */
-      include_platform_defaults: boolean;
+      include_platform_defaults?: boolean | null;
     }
   }
 }

package/src/resources/memberships.ts

@@ -246,6 +246,13 @@ export interface MembershipListResponse {
    */
   cancellation_reason: string | null;
 
+  /**
+   * The ID of the checkout session/configuration that produced this membership, if
+   * any. Use this to map memberships back to the checkout configuration that created
+   * them.
+   */
+  checkout_configuration_id: string | null;
+
   /**
    * The company this membership belongs to.
    */

package/src/resources/payments.ts

@@ -290,6 +290,7 @@ export type PaymentMethodTypes =
   | 'amazon_pay'
   | 'apple'
   | 'apple_pay'
+  | 'au_bank_transfer'
   | 'au_becs_debit'
   | 'bacs_debit'
   | 'bancolombia'
@@ -311,6 +312,7 @@ export type PaymentMethodTypes =
   | 'eps'
   | 'eu_bank_transfer'
   | 'fpx'
+  | 'gb_bank_transfer'
   | 'giropay'
   | 'google_pay'
   | 'gopay'
@@ -320,12 +322,14 @@ export type PaymentMethodTypes =
   | 'interac'
   | 'kakao_pay'
   | 'klarna'
+  | 'klarna_pay_now'
   | 'konbini'
   | 'kr_card'
   | 'kr_market'
   | 'kriya'
   | 'link'
   | 'mb_way'
+  | 'm_pesa'
   | 'mercado_pago'
   | 'mobilepay'
   | 'mondu'
@@ -373,6 +377,7 @@ export type PaymentMethodTypes =
   | 'twint'
   | 'upi'
   | 'us_bank_account'
+  | 'us_bank_transfer'
   | 'venmo'
   | 'vipps'
   | 'wechat_pay'
@@ -432,6 +437,12 @@ export interface PaymentListResponse {
    */
   card_last4: string | null;
 
+  /**
+   * The ID of the checkout session/configuration that produced this payment, if any.
+   * Use this to map payments back to the checkout configuration that created them.
+   */
+  checkout_configuration_id: string | null;
+
   /**
    * The company for the payment.
    */
@@ -784,6 +795,11 @@ export namespace PaymentListResponse {
      * The unique identifier for the plan.
      */
     id: string;
+
+    /**
+     * A personal description or notes section for the business.
+     */
+    internal_notes: string | null;
   }
 
   /**

package/src/resources/plans.ts

@@ -170,7 +170,7 @@ export interface PlanListResponse {
   currency: Shared.Currency;
 
   /**
-   * A text description of the plan visible to customers. Maximum 500 characters.
+   * A text description of the plan visible to customers. Maximum 1000 characters.
    * Null if no description is set.
    */
   description: string | null;
@@ -578,7 +578,7 @@ export namespace PlanCreateParams {
      * in this configuration. The full list of default payment methods can be found in
      * the documentation at docs.whop.com/payments.
      */
-    include_platform_defaults: boolean;
+    include_platform_defaults?: boolean | null;
   }
 }
 
@@ -787,7 +787,7 @@ export namespace PlanUpdateParams {
      * in this configuration. The full list of default payment methods can be found in
      * the documentation at docs.whop.com/payments.
      */
-    include_platform_defaults: boolean;
+    include_platform_defaults?: boolean | null;
   }
 }
 

package/src/resources/shared.ts

@@ -461,6 +461,12 @@ export interface CheckoutConfiguration {
    */
   affiliate_code: string | null;
 
+  /**
+   * Whether the checkout configuration allows promo codes. When false, the promo
+   * code input is hidden and promo codes are rejected.
+   */
+  allow_promo_codes: boolean;
+
   /**
    * The ID of the company to use for the checkout configuration
    */
@@ -1866,6 +1872,13 @@ export interface Membership {
    */
   cancellation_reason: string | null;
 
+  /**
+   * The ID of the checkout session/configuration that produced this membership, if
+   * any. Use this to map memberships back to the checkout configuration that created
+   * them.
+   */
+  checkout_configuration_id: string | null;
+
   /**
    * The company this membership belongs to.
    */
@@ -2333,6 +2346,12 @@ export interface Payment {
    */
   card_last4: string | null;
 
+  /**
+   * The ID of the checkout session/configuration that produced this payment, if any.
+   * Use this to map payments back to the checkout configuration that created them.
+   */
+  checkout_configuration_id: string | null;
+
   /**
    * The company for the payment.
    */
@@ -2818,6 +2837,11 @@ export namespace Payment {
      * The unique identifier for the plan.
      */
     id: string;
+
+    /**
+     * A personal description or notes section for the business.
+     */
+    internal_notes: string | null;
   }
 
   /**
@@ -3007,7 +3031,7 @@ export interface Plan {
   custom_fields: Array<Plan.CustomField>;
 
   /**
-   * A text description of the plan visible to customers. Maximum 500 characters.
+   * A text description of the plan visible to customers. Maximum 1000 characters.
    * Null if no description is set.
    */
   description: string | null;

package/src/resources/support-channels.ts

@@ -59,15 +59,13 @@ export class SupportChannels extends APIResource {
    * @example
    * ```ts
    * // Automatically fetches more pages as needed.
-   * for await (const supportChannelListResponse of client.supportChannels.list(
-   *   { company_id: 'biz_xxxxxxxxxxxxxx' },
-   * )) {
+   * for await (const supportChannelListResponse of client.supportChannels.list()) {
    *   // ...
    * }
    * ```
    */
   list(
-    query: SupportChannelListParams,
+    query: SupportChannelListParams | null | undefined = {},
     options?: RequestOptions,
   ): PagePromise<SupportChannelListResponsesCursorPage, SupportChannelListResponse> {
     return this._client.getAPIList('/support_channels', CursorPage<SupportChannelListResponse>, {
@@ -163,14 +161,15 @@ export interface SupportChannelCreateParams {
 
 export interface SupportChannelListParams extends CursorPageParams {
   /**
-   * The unique identifier of the company to list support channels for.
+   * Returns the elements in the list that come before the specified cursor.
    */
-  company_id: string;
+  before?: string | null;
 
   /**
-   * Returns the elements in the list that come before the specified cursor.
+   * The unique identifier of the company to list support channels for. When omitted,
+   * returns support channels across all companies the user has access to.
    */
-  before?: string | null;
+  company_id?: string | null;
 
   /**
    * The direction of the sort.
@@ -197,6 +196,11 @@ export interface SupportChannelListParams extends CursorPageParams {
    * Sort options for message channels
    */
   order?: 'created_at' | 'last_post_sent_at' | null;
+
+  /**
+   * The perspective to filter support channels by.
+   */
+  view?: 'all' | 'admin' | 'customer' | null;
 }
 
 export declare namespace SupportChannels {