@workos-inc/node 6.0.3 → 6.2.0

package/lib/common/interfaces/event.interface.d.ts

@@ -170,6 +170,14 @@ export interface OrganizationMembershipAddedResponse extends EventResponseBase {
     event: 'organization_membership.added';
     data: OrganizationMembershipResponse;
 }
+export interface OrganizationMembershipUpdated extends EventBase {
+    event: 'organization_membership.updated';
+    data: OrganizationMembership;
+}
+export interface OrganizationMembershipUpdatedResponse extends EventResponseBase {
+    event: 'organization_membership.updated';
+    data: OrganizationMembershipResponse;
+}
 export interface OrganizationMembershipRemoved extends EventBase {
     event: 'organization_membership.removed';
     data: OrganizationMembership;
@@ -178,7 +186,7 @@ export interface OrganizationMembershipRemovedResponse extends EventResponseBase
     event: 'organization_membership.removed';
     data: OrganizationMembershipResponse;
 }
-export type Event = ConnectionActivatedEvent | ConnectionDeactivatedEvent | ConnectionDeletedEvent | DsyncActivatedEvent | DsyncDeactivatedEvent | DsyncDeletedEvent | DsyncGroupCreatedEvent | DsyncGroupUpdatedEvent | DsyncGroupDeletedEvent | DsyncGroupUserAddedEvent | DsyncGroupUserRemovedEvent | DsyncUserCreatedEvent | DsyncUserUpdatedEvent | DsyncUserDeletedEvent | UserCreatedEvent | UserUpdatedEvent | UserDeletedEvent | OrganizationMembershipAdded | OrganizationMembershipRemoved;
-export type EventResponse = ConnectionActivatedEventResponse | ConnectionDeactivatedEventResponse | ConnectionDeletedEventResponse | DsyncActivatedEventResponse | DsyncDeactivatedEventResponse | DsyncDeletedEventResponse | DsyncGroupCreatedEventResponse | DsyncGroupUpdatedEventResponse | DsyncGroupDeletedEventResponse | DsyncGroupUserAddedEventResponse | DsyncGroupUserRemovedEventResponse | DsyncUserCreatedEventResponse | DsyncUserUpdatedEventResponse | DsyncUserDeletedEventResponse | UserCreatedEventResponse | UserUpdatedEventResponse | UserDeletedEventResponse | OrganizationMembershipAddedResponse | OrganizationMembershipRemovedResponse;
-export type EventName = 'connection.activated' | 'connection.deactivated' | 'connection.deleted' | 'dsync.activated' | 'dsync.deactivated' | 'dsync.deleted' | 'dsync.group.created' | 'dsync.group.deleted' | 'dsync.group.updated' | 'dsync.group.user_added' | 'dsync.group.user_removed' | 'dsync.user.created' | 'dsync.user.deleted' | 'dsync.user.updated' | 'user.created' | 'user.updated' | 'user.deleted' | 'organization_membership.added' | 'organization_membership.removed';
+export type Event = ConnectionActivatedEvent | ConnectionDeactivatedEvent | ConnectionDeletedEvent | DsyncActivatedEvent | DsyncDeactivatedEvent | DsyncDeletedEvent | DsyncGroupCreatedEvent | DsyncGroupUpdatedEvent | DsyncGroupDeletedEvent | DsyncGroupUserAddedEvent | DsyncGroupUserRemovedEvent | DsyncUserCreatedEvent | DsyncUserUpdatedEvent | DsyncUserDeletedEvent | UserCreatedEvent | UserUpdatedEvent | UserDeletedEvent | OrganizationMembershipAdded | OrganizationMembershipUpdated | OrganizationMembershipRemoved;
+export type EventResponse = ConnectionActivatedEventResponse | ConnectionDeactivatedEventResponse | ConnectionDeletedEventResponse | DsyncActivatedEventResponse | DsyncDeactivatedEventResponse | DsyncDeletedEventResponse | DsyncGroupCreatedEventResponse | DsyncGroupUpdatedEventResponse | DsyncGroupDeletedEventResponse | DsyncGroupUserAddedEventResponse | DsyncGroupUserRemovedEventResponse | DsyncUserCreatedEventResponse | DsyncUserUpdatedEventResponse | DsyncUserDeletedEventResponse | UserCreatedEventResponse | UserUpdatedEventResponse | UserDeletedEventResponse | OrganizationMembershipAddedResponse | OrganizationMembershipUpdatedResponse | OrganizationMembershipRemovedResponse;
+export type EventName = 'connection.activated' | 'connection.deactivated' | 'connection.deleted' | 'dsync.activated' | 'dsync.deactivated' | 'dsync.deleted' | 'dsync.group.created' | 'dsync.group.deleted' | 'dsync.group.updated' | 'dsync.group.user_added' | 'dsync.group.user_removed' | 'dsync.user.created' | 'dsync.user.deleted' | 'dsync.user.updated' | 'user.created' | 'user.updated' | 'user.deleted' | 'organization_membership.added' | 'organization_membership.updated' | 'organization_membership.removed';
 export {};

package/lib/common/serializers/event.serializer.js

@@ -42,6 +42,7 @@ const deserializeEvent = (event) => {
         case 'user.deleted':
             return Object.assign(Object.assign({}, eventBase), { event: event.event, data: (0, serializers_3.deserializeUser)(event.data) });
         case 'organization_membership.added':
+        case 'organization_membership.updated':
         case 'organization_membership.removed':
             return Object.assign(Object.assign({}, eventBase), { event: event.event, data: (0, organization_membership_serializer_1.deserializeOrganizationMembership)(event.data) });
     }

package/lib/events/events.spec.js

@@ -58,9 +58,37 @@ describe('Event', () => {
             data: [eventResponse],
             list_metadata: {},
         };
+        describe('with options', () => {
+            it('requests Events with query parameters', () => __awaiter(void 0, void 0, void 0, function* () {
+                const eventsResponse = {
+                    object: 'list',
+                    data: [eventResponse],
+                    list_metadata: {},
+                };
+                (0, test_utils_1.fetchOnce)(eventsResponse);
+                const list = yield workos.events.listEvents({
+                    events: ['connection.activated'],
+                    rangeStart: '2020-05-04',
+                    rangeEnd: '2020-05-07',
+                });
+                expect((0, test_utils_1.fetchSearchParams)()).toMatchObject({
+                    events: 'connection.activated',
+                    range_start: '2020-05-04',
+                    range_end: '2020-05-07',
+                });
+                expect(list).toEqual({
+                    object: 'list',
+                    data: [event],
+                    listMetadata: {},
+                });
+            }));
+        });
         it(`requests Events`, () => __awaiter(void 0, void 0, void 0, function* () {
             (0, test_utils_1.fetchOnce)(eventsListResponse);
-            const subject = yield workos.events.listEvents({});
+            const subject = yield workos.events.listEvents({
+                rangeStart: '2020-05-05',
+                rangeEnd: '2020-05-07',
+            });
             expect(subject).toEqual({
                 object: 'list',
                 data: [event],

package/lib/sso/sso.spec.js

@@ -30,6 +30,25 @@ describe('SSO', () => {
         updated_at: '2023-07-17T20:07:20.055Z',
     };
     describe('SSO', () => {
+        describe('with options', () => {
+            it('requests Connections with query parameters', () => __awaiter(void 0, void 0, void 0, function* () {
+                const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+                const listConnectionsResponse = {
+                    object: 'list',
+                    data: [connectionResponse],
+                    list_metadata: {},
+                };
+                (0, test_utils_1.fetchOnce)(listConnectionsResponse);
+                yield workos.sso.listConnections({
+                    connectionType: interfaces_1.ConnectionType.OktaSAML,
+                    organizationId: 'org_123',
+                });
+                expect((0, test_utils_1.fetchSearchParams)()).toMatchObject({
+                    connection_type: interfaces_1.ConnectionType.OktaSAML,
+                    organization_id: 'org_123',
+                });
+            }));
+        });
         describe('getAuthorizationUrl', () => {
             describe('with no custom api hostname', () => {
                 it('generates an authorize url with the default api hostname', () => {

package/lib/user-management/fixtures/list-organization-memberships.json

@@ -6,6 +6,7 @@
             "id": "om_01H5JQDV7R7ATEYZDEG0W5PRYS",
             "user_id": "user_01H5JQDV7R7ATEYZDEG0W5PRYS",
             "organization_id": "organization_01H5JQDV7R7ATEYZDEG0W5PRYS",
+            "status": "active",
             "created_at": "2023-07-18T02:07:19.911Z",
             "updated_at": "2023-07-18T02:07:19.911Z"
         }

package/lib/user-management/fixtures/organization-membership.json

@@ -3,6 +3,7 @@
     "id": "om_01H5JQDV7R7ATEYZDEG0W5PRYS",
     "user_id": "user_01H5JQDV7R7ATEYZDEG0W5PRYS",
     "organization_id": "organization_01H5JQDV7R7ATEYZDEG0W5PRYS",
+    "status": "active",
     "created_at": "2023-07-18T02:07:19.911Z",
     "updated_at": "2023-07-18T02:07:19.911Z"
 }

package/lib/user-management/interfaces/authenticate-with-refresh-token-options.interface.d.ts

@@ -0,0 +1,11 @@
+import { AuthenticateWithOptionsBase, SerializedAuthenticateWithOptionsBase } from './authenticate-with-options-base.interface';
+export interface AuthenticateWithRefreshTokenOptions extends AuthenticateWithOptionsBase {
+    refreshToken: string;
+}
+export interface AuthenticateUserWithRefreshTokenCredentials {
+    clientSecret: string | undefined;
+}
+export interface SerializedAuthenticateWithRefreshTokenOptions extends SerializedAuthenticateWithOptionsBase {
+    grant_type: 'refresh_token';
+    refresh_token: string;
+}

package/lib/user-management/interfaces/authenticate-with-refresh-token-options.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/user-management/interfaces/authentication-response.interface.d.ts

@@ -2,8 +2,20 @@ import { User, UserResponse } from './user.interface';
 export interface AuthenticationResponse {
     user: User;
     organizationId?: string;
+    accessToken?: string;
+    refreshToken?: string;
 }
 export interface AuthenticationResponseResponse {
     user: UserResponse;
     organization_id?: string;
+    access_token?: string;
+    refresh_token?: string;
+}
+export interface RefreshAuthenticationResponse {
+    accessToken: string;
+    refreshToken: string;
+}
+export interface RefreshAuthenticationResponseResponse {
+    access_token: string;
+    refresh_token: string;
 }

package/lib/user-management/interfaces/index.d.ts

@@ -1,6 +1,7 @@
 export * from './authenticate-with-magic-auth-options.interface';
 export * from './authenticate-with-password-options.interface';
 export * from './authenticate-with-code-options.interface';
+export * from './authenticate-with-refresh-token-options.interface';
 export * from './authenticate-with-totp-options.interface';
 export * from './authentication-response.interface';
 export * from './reset-password-options.interface';

package/lib/user-management/interfaces/index.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./authenticate-with-magic-auth-options.interface"), exports);
 __exportStar(require("./authenticate-with-password-options.interface"), exports);
 __exportStar(require("./authenticate-with-code-options.interface"), exports);
+__exportStar(require("./authenticate-with-refresh-token-options.interface"), exports);
 __exportStar(require("./authenticate-with-totp-options.interface"), exports);
 __exportStar(require("./authentication-response.interface"), exports);
 __exportStar(require("./reset-password-options.interface"), exports);

package/lib/user-management/interfaces/organization-membership.interface.d.ts

@@ -2,6 +2,7 @@ export interface OrganizationMembership {
     object: 'organization_membership';
     id: string;
     organizationId: string;
+    status: 'active' | 'pending';
     userId: string;
     createdAt: string;
     updatedAt: string;
@@ -10,6 +11,7 @@ export interface OrganizationMembershipResponse {
     object: 'organization_membership';
     id: string;
     organization_id: string;
+    status: 'active' | 'pending';
     user_id: string;
     created_at: string;
     updated_at: string;

package/lib/user-management/interfaces/revoke-session-options.interface.d.ts

@@ -0,0 +1,7 @@
+export interface RevokeSessionOptions {
+    sessionId: string;
+}
+export interface SerializedRevokeSessionOptions {
+    session_id: string;
+}
+export declare const serializeRevokeSessionOptions: (options: RevokeSessionOptions) => SerializedRevokeSessionOptions;

package/lib/user-management/interfaces/revoke-session-options.interface.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeRevokeSessionOptions = void 0;
+const serializeRevokeSessionOptions = (options) => ({
+    session_id: options.sessionId,
+});
+exports.serializeRevokeSessionOptions = serializeRevokeSessionOptions;

package/lib/user-management/interfaces/update-user-options.interface.d.ts

@@ -5,7 +5,7 @@ export interface UpdateUserOptions {
     emailVerified?: boolean;
     password?: string;
     passwordHash?: string;
-    passwordHashType?: 'bcrypt' | 'firebase-scrypt';
+    passwordHashType?: 'bcrypt' | 'firebase-scrypt' | 'ssha';
 }
 export interface SerializedUpdateUserOptions {
     first_name?: string;
@@ -13,5 +13,5 @@ export interface SerializedUpdateUserOptions {
     email_verified?: boolean;
     password?: string;
     password_hash?: string;
-    password_hash_type?: 'bcrypt' | 'firebase-scrypt';
+    password_hash_type?: 'bcrypt' | 'firebase-scrypt' | 'ssha';
 }

package/lib/user-management/serializers/authenticate-with-refresh-token.options.serializer.d.ts

@@ -0,0 +1,2 @@
+import { AuthenticateUserWithCodeCredentials, AuthenticateWithRefreshTokenOptions, SerializedAuthenticateWithRefreshTokenOptions } from '../interfaces';
+export declare const serializeAuthenticateWithRefreshTokenOptions: (options: AuthenticateWithRefreshTokenOptions & AuthenticateUserWithCodeCredentials) => SerializedAuthenticateWithRefreshTokenOptions;

package/lib/user-management/serializers/authenticate-with-refresh-token.options.serializer.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeAuthenticateWithRefreshTokenOptions = void 0;
+const serializeAuthenticateWithRefreshTokenOptions = (options) => ({
+    grant_type: 'refresh_token',
+    client_id: options.clientId,
+    client_secret: options.clientSecret,
+    refresh_token: options.refreshToken,
+    ip_address: options.ipAddress,
+    user_agent: options.userAgent,
+});
+exports.serializeAuthenticateWithRefreshTokenOptions = serializeAuthenticateWithRefreshTokenOptions;

package/lib/user-management/serializers/authentication-response.serializer.d.ts

@@ -1,2 +1,3 @@
-import { AuthenticationResponse, AuthenticationResponseResponse } from '../interfaces';
+import { AuthenticationResponse, AuthenticationResponseResponse, RefreshAuthenticationResponse, RefreshAuthenticationResponseResponse } from '../interfaces';
 export declare const deserializeAuthenticationResponse: (authenticationResponse: AuthenticationResponseResponse) => AuthenticationResponse;
+export declare const deserializeRefreshAuthenticationResponse: (refreshAuthenticationResponse: RefreshAuthenticationResponseResponse) => RefreshAuthenticationResponse;

package/lib/user-management/serializers/authentication-response.serializer.js

@@ -11,10 +11,15 @@ var __rest = (this && this.__rest) || function (s, e) {
     return t;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deserializeAuthenticationResponse = void 0;
+exports.deserializeRefreshAuthenticationResponse = exports.deserializeAuthenticationResponse = void 0;
 const user_serializer_1 = require("./user.serializer");
 const deserializeAuthenticationResponse = (authenticationResponse) => {
-    const { user, organization_id } = authenticationResponse, rest = __rest(authenticationResponse, ["user", "organization_id"]);
-    return Object.assign({ user: (0, user_serializer_1.deserializeUser)(user), organizationId: organization_id }, rest);
+    const { user, organization_id, access_token, refresh_token } = authenticationResponse, rest = __rest(authenticationResponse, ["user", "organization_id", "access_token", "refresh_token"]);
+    return Object.assign({ user: (0, user_serializer_1.deserializeUser)(user), organizationId: organization_id, accessToken: access_token, refreshToken: refresh_token }, rest);
 };
 exports.deserializeAuthenticationResponse = deserializeAuthenticationResponse;
+const deserializeRefreshAuthenticationResponse = (refreshAuthenticationResponse) => {
+    const { access_token, refresh_token } = refreshAuthenticationResponse, rest = __rest(refreshAuthenticationResponse, ["access_token", "refresh_token"]);
+    return Object.assign({ accessToken: access_token, refreshToken: refresh_token }, rest);
+};
+exports.deserializeRefreshAuthenticationResponse = deserializeRefreshAuthenticationResponse;

package/lib/user-management/serializers/index.d.ts

@@ -1,6 +1,7 @@
 export * from './authenticate-with-code-options.serializer';
 export * from './authenticate-with-magic-auth-options.serializer';
 export * from './authenticate-with-password-options.serializer';
+export * from './authenticate-with-refresh-token.options.serializer';
 export * from './authenticate-with-totp-options.serializer';
 export * from './authentication-response.serializer';
 export * from './enroll-auth-factor-options.serializer';

package/lib/user-management/serializers/index.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./authenticate-with-code-options.serializer"), exports);
 __exportStar(require("./authenticate-with-magic-auth-options.serializer"), exports);
 __exportStar(require("./authenticate-with-password-options.serializer"), exports);
+__exportStar(require("./authenticate-with-refresh-token.options.serializer"), exports);
 __exportStar(require("./authenticate-with-totp-options.serializer"), exports);
 __exportStar(require("./authentication-response.serializer"), exports);
 __exportStar(require("./enroll-auth-factor-options.serializer"), exports);

package/lib/user-management/serializers/organization-membership.serializer.js

@@ -6,6 +6,7 @@ const deserializeOrganizationMembership = (organizationMembership) => ({
     id: organizationMembership.id,
     userId: organizationMembership.user_id,
     organizationId: organizationMembership.organization_id,
+    status: organizationMembership.status,
     createdAt: organizationMembership.created_at,
     updatedAt: organizationMembership.updated_at,
 });

package/lib/user-management/user-management.d.ts

@@ -1,6 +1,6 @@
 import { WorkOS } from '../workos';
 import { AutoPaginatable } from '../common/utils/pagination';
-import { AuthenticateWithCodeOptions, AuthenticateWithMagicAuthOptions, AuthenticateWithPasswordOptions, AuthenticateWithTotpOptions, AuthenticationResponse, ResetPasswordOptions, SendPasswordResetEmailOptions, CreateUserOptions, EnrollAuthFactorOptions, ListAuthFactorsOptions, ListUsersOptions, SendMagicAuthCodeOptions, SendVerificationEmailOptions, UpdateUserOptions, User, VerifyEmailOptions } from './interfaces';
+import { AuthenticateWithCodeOptions, AuthenticateWithMagicAuthOptions, AuthenticateWithPasswordOptions, AuthenticateWithTotpOptions, AuthenticationResponse, ResetPasswordOptions, SendPasswordResetEmailOptions, CreateUserOptions, EnrollAuthFactorOptions, ListAuthFactorsOptions, ListUsersOptions, SendMagicAuthCodeOptions, SendVerificationEmailOptions, UpdateUserOptions, User, VerifyEmailOptions, AuthenticateWithRefreshTokenOptions, RefreshAuthenticationResponse } from './interfaces';
 import { Challenge } from '../mfa/interfaces';
 import { OrganizationMembership } from './interfaces/organization-membership.interface';
 import { ListOrganizationMembershipsOptions } from './interfaces/list-organization-memberships-options.interface';
@@ -12,6 +12,7 @@ import { AuthorizationURLOptions } from './interfaces/authorization-url-options.
 import { AuthenticateWithEmailVerificationOptions } from './interfaces/authenticate-with-email-verification-options.interface';
 import { AuthenticateWithOrganizationSelectionOptions } from './interfaces/authenticate-with-organization-selection.interface';
 import { Factor, FactorWithSecrets } from './interfaces/factor.interface';
+import { RevokeSessionOptions } from './interfaces/revoke-session-options.interface';
 export declare class UserManagement {
     private readonly workos;
     constructor(workos: WorkOS);
@@ -21,6 +22,7 @@ export declare class UserManagement {
     authenticateWithMagicAuth(payload: AuthenticateWithMagicAuthOptions): Promise<AuthenticationResponse>;
     authenticateWithPassword(payload: AuthenticateWithPasswordOptions): Promise<AuthenticationResponse>;
     authenticateWithCode(payload: AuthenticateWithCodeOptions): Promise<AuthenticationResponse>;
+    authenticateWithRefreshToken(payload: AuthenticateWithRefreshTokenOptions): Promise<RefreshAuthenticationResponse>;
     authenticateWithTotp(payload: AuthenticateWithTotpOptions): Promise<AuthenticationResponse>;
     authenticateWithEmailVerification(payload: AuthenticateWithEmailVerificationOptions): Promise<AuthenticationResponse>;
     authenticateWithOrganizationSelection(payload: AuthenticateWithOrganizationSelectionOptions): Promise<AuthenticationResponse>;
@@ -50,5 +52,10 @@ export declare class UserManagement {
     listInvitations(options: ListInvitationsOptions): Promise<AutoPaginatable<Invitation>>;
     sendInvitation(payload: SendInvitationOptions): Promise<Invitation>;
     revokeInvitation(invitationId: string): Promise<Invitation>;
+    revokeSession(payload: RevokeSessionOptions): Promise<void>;
     getAuthorizationUrl({ connectionId, clientId, domainHint, loginHint, organizationId, provider, redirectUri, state, }: AuthorizationURLOptions): string;
+    getLogoutUrl({ sessionId }: {
+        sessionId: string;
+    }): string;
+    getJwksUrl(clientId: string): string;
 }

package/lib/user-management/user-management.js

@@ -24,6 +24,7 @@ const list_users_options_serializer_1 = require("./serializers/list-users-option
 const authenticate_with_email_verification_serializer_1 = require("./serializers/authenticate-with-email-verification.serializer");
 const authenticate_with_organization_selection_options_serializer_1 = require("./serializers/authenticate-with-organization-selection-options.serializer");
 const factor_serializer_1 = require("./serializers/factor.serializer");
+const revoke_session_options_interface_1 = require("./interfaces/revoke-session-options.interface");
 const toQueryString = (options) => {
     const searchParams = new URLSearchParams();
     const keys = Object.keys(options).sort();
@@ -74,6 +75,12 @@ class UserManagement {
             return (0, serializers_1.deserializeAuthenticationResponse)(data);
         });
     }
+    authenticateWithRefreshToken(payload) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data } = yield this.workos.post('/user_management/authenticate', (0, serializers_1.serializeAuthenticateWithRefreshTokenOptions)(Object.assign(Object.assign({}, payload), { clientSecret: this.workos.key })));
+            return (0, serializers_1.deserializeRefreshAuthenticationResponse)(data);
+        });
+    }
     authenticateWithTotp(payload) {
         return __awaiter(this, void 0, void 0, function* () {
             const { data } = yield this.workos.post('/user_management/authenticate', (0, serializers_1.serializeAuthenticateWithTotpOptions)(Object.assign(Object.assign({}, payload), { clientSecret: this.workos.key })));
@@ -196,9 +203,14 @@ class UserManagement {
             return (0, invitation_serializer_1.deserializeInvitation)(data);
         });
     }
+    revokeSession(payload) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.workos.post('/user_management/sessions/revoke', (0, revoke_session_options_interface_1.serializeRevokeSessionOptions)(payload));
+        });
+    }
     getAuthorizationUrl({ connectionId, clientId, domainHint, loginHint, organizationId, provider, redirectUri, state, }) {
         if (!provider && !connectionId && !organizationId) {
-            throw new Error(`Incomplete arguments. Need to specify either a 'connectionId', 'organizationId', or 'provider'.`);
+            throw new TypeError(`Incomplete arguments. Need to specify either a 'connectionId', 'organizationId', or 'provider'.`);
         }
         const query = toQueryString({
             connection_id: connectionId,
@@ -213,5 +225,17 @@ class UserManagement {
         });
         return `${this.workos.baseURL}/user_management/authorize?${query}`;
     }
+    getLogoutUrl({ sessionId }) {
+        if (!sessionId) {
+            throw new TypeError(`Incomplete arguments. Need to specify 'sessionId'.`);
+        }
+        return `${this.workos.baseURL}/user_management/sessions/logout?session_id=${sessionId}`;
+    }
+    getJwksUrl(clientId) {
+        if (!clientId) {
+            throw TypeError('clientId must be a valid clientId');
+        }
+        return `${this.workos.baseURL}/sso/jwks/${clientId}`;
+    }
 }
 exports.UserManagement = UserManagement;

package/lib/user-management/user-management.spec.js

@@ -156,6 +156,29 @@ describe('UserManagement', () => {
             });
         }));
     });
+    describe('authenticateWithRefreshToken', () => {
+        it('sends a refresh_token authentication request', () => __awaiter(void 0, void 0, void 0, function* () {
+            (0, test_utils_1.fetchOnce)({
+                access_token: 'access_token',
+                refresh_token: 'refreshToken2',
+            });
+            const resp = yield workos.userManagement.authenticateWithRefreshToken({
+                clientId: 'proj_whatever',
+                refreshToken: 'refresh_token1',
+            });
+            expect((0, test_utils_1.fetchURL)()).toContain('/user_management/authenticate');
+            expect((0, test_utils_1.fetchBody)()).toEqual({
+                client_id: 'proj_whatever',
+                client_secret: 'sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU',
+                refresh_token: 'refresh_token1',
+                grant_type: 'refresh_token',
+            });
+            expect(resp).toMatchObject({
+                accessToken: 'access_token',
+                refreshToken: 'refreshToken2',
+            });
+        }));
+    });
     describe('authenticateUserWithTotp', () => {
         it('sends a token authentication request', () => __awaiter(void 0, void 0, void 0, function* () {
             (0, test_utils_1.fetchOnce)({ user: user_json_1.default });
@@ -444,6 +467,7 @@ describe('UserManagement', () => {
                 id: 'om_01H5JQDV7R7ATEYZDEG0W5PRYS',
                 userId: 'user_01H5JQDV7R7ATEYZDEG0W5PRYS',
                 organizationId: 'organization_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                status: 'active',
             });
         }));
     });
@@ -464,6 +488,7 @@ describe('UserManagement', () => {
                         object: 'organization_membership',
                         organizationId: 'organization_01H5JQDV7R7ATEYZDEG0W5PRYS',
                         userId: 'user_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                        status: 'active',
                     },
                 ],
                 listMetadata: {
@@ -505,6 +530,7 @@ describe('UserManagement', () => {
                 object: 'organization_membership',
                 organizationId: 'organization_01H5JQDV7R7ATEYZDEG0W5PRYS',
                 userId: 'user_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                status: 'active',
             });
         }));
     });
@@ -606,6 +632,19 @@ describe('UserManagement', () => {
             });
         }));
     });
+    describe('revokeSession', () => {
+        it('sends a Revoke Session request', () => __awaiter(void 0, void 0, void 0, function* () {
+            const sessionId = 'session_12345';
+            (0, test_utils_1.fetchOnce)({});
+            yield workos.userManagement.revokeSession({
+                sessionId,
+            });
+            expect((0, test_utils_1.fetchURL)()).toContain('/user_management/sessions/revoke');
+            expect((0, test_utils_1.fetchBody)()).toEqual({
+                session_id: 'session_12345',
+            });
+        }));
+    });
     describe('getAuthorizationUrl', () => {
         describe('with no custom api hostname', () => {
             it('generates an authorize url with the default api hostname', () => {
@@ -713,4 +752,26 @@ describe('UserManagement', () => {
             });
         });
     });
+    describe('getLogoutUrl', () => {
+        it('returns a logout url', () => {
+            const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+            const url = workos.userManagement.getLogoutUrl({
+                sessionId: '123456',
+            });
+            expect(url).toBe('https://api.workos.com/user_management/sessions/logout?session_id=123456');
+        });
+    });
+    describe('getJwksUrl', () => {
+        it('returns the jwks url', () => {
+            const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+            const url = workos.userManagement.getJwksUrl('client_whatever');
+            expect(url).toBe('https://api.workos.com/sso/jwks/client_whatever');
+        });
+        it('throws an error if the clientId is blank', () => {
+            const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+            expect(() => {
+                workos.userManagement.getJwksUrl('');
+            }).toThrowError(TypeError);
+        });
+    });
 });

package/lib/workos.js

@@ -24,7 +24,7 @@ const audit_logs_1 = require("./audit-logs/audit-logs");
 const user_management_1 = require("./user-management/user-management");
 const bad_request_exception_1 = require("./common/exceptions/bad-request.exception");
 const fetch_client_1 = require("./common/utils/fetch-client");
-const VERSION = '6.0.3';
+const VERSION = '6.2.0';
 const DEFAULT_HOSTNAME = 'api.workos.com';
 class WorkOS {
     constructor(key, options = {}) {

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "6.0.3",
+  "version": "6.2.0",
   "name": "@workos-inc/node",
   "author": "WorkOS",
   "description": "A Node wrapper for the WorkOS API",