@workos-inc/node 7.14.0 → 7.16.0

package/lib/common/interfaces/event.interface.d.ts

@@ -1,7 +1,7 @@
 import { DirectoryUser, DirectoryUserResponse, DirectoryGroup, DirectoryGroupResponse, EventDirectory, EventDirectoryResponse } from '../../directory-sync/interfaces';
 import { Organization, OrganizationResponse } from '../../organizations/interfaces';
 import { Connection, ConnectionResponse } from '../../sso/interfaces';
-import { EmailVerificationEvent, EmailVerificationEventResponse, InvitationEvent, InvitationEventResponse, MagicAuthEvent, MagicAuthEventResponse, PasswordResetEvent, PasswordResetEventResponse, Session, SessionResponse, User, UserResponse } from '../../user-management/interfaces';
+import { AuthenticationEvent, AuthenticationEventResponse, EmailVerificationEvent, EmailVerificationEventResponse, InvitationEvent, InvitationEventResponse, MagicAuthEvent, MagicAuthEventResponse, PasswordResetEvent, PasswordResetEventResponse, Session, SessionResponse, User, UserResponse } from '../../user-management/interfaces';
 import { OrganizationMembership, OrganizationMembershipResponse } from '../../user-management/interfaces/organization-membership.interface';
 import { RoleEvent, RoleEventResponse } from '../../roles/interfaces/role.interface';
 export interface EventBase {
@@ -12,6 +12,70 @@ interface EventResponseBase {
     id: string;
     created_at: string;
 }
+export interface AuthenticationEmailVerificationSucceededEvent extends EventBase {
+    event: 'authentication.email_verification_succeeded';
+    data: AuthenticationEvent;
+}
+export interface AuthenticationEmailVerificationSucceededEventResponse extends EventResponseBase {
+    event: 'authentication.email_verification_succeeded';
+    data: AuthenticationEventResponse;
+}
+export interface AuthenticationMagicAuthFailedEvent extends EventBase {
+    event: 'authentication.magic_auth_failed';
+    data: AuthenticationEvent;
+}
+export interface AuthenticationMagicAuthFailedEventResponse extends EventResponseBase {
+    event: 'authentication.magic_auth_failed';
+    data: AuthenticationEventResponse;
+}
+export interface AuthenticationMagicAuthSucceededEvent extends EventBase {
+    event: 'authentication.magic_auth_succeeded';
+    data: AuthenticationEvent;
+}
+export interface AuthenticationMagicAuthSucceededEventResponse extends EventResponseBase {
+    event: 'authentication.magic_auth_succeeded';
+    data: AuthenticationEventResponse;
+}
+export interface AuthenticationMfaSucceededEvent extends EventBase {
+    event: 'authentication.mfa_succeeded';
+    data: AuthenticationEvent;
+}
+export interface AuthenticationMfaSucceededEventResponse extends EventResponseBase {
+    event: 'authentication.mfa_succeeded';
+    data: AuthenticationEventResponse;
+}
+export interface AuthenticationOAuthSucceededEvent extends EventBase {
+    event: 'authentication.oauth_succeeded';
+    data: AuthenticationEvent;
+}
+export interface AuthenticationOAuthSucceededEventResponse extends EventResponseBase {
+    event: 'authentication.oauth_succeeded';
+    data: AuthenticationEventResponse;
+}
+export interface AuthenticationPasswordFailedEvent extends EventBase {
+    event: 'authentication.password_failed';
+    data: AuthenticationEvent;
+}
+export interface AuthenticationPasswordFailedEventResponse extends EventResponseBase {
+    event: 'authentication.password_failed';
+    data: AuthenticationEventResponse;
+}
+export interface AuthenticationPasswordSucceededEvent extends EventBase {
+    event: 'authentication.password_succeeded';
+    data: AuthenticationEvent;
+}
+export interface AuthenticationPasswordSucceededEventResponse extends EventResponseBase {
+    event: 'authentication.password_succeeded';
+    data: AuthenticationEventResponse;
+}
+export interface AuthenticationSSOSucceededEvent extends EventBase {
+    event: 'authentication.sso_succeeded';
+    data: AuthenticationEvent;
+}
+export interface AuthenticationSSOSucceededEventResponse extends EventResponseBase {
+    event: 'authentication.sso_succeeded';
+    data: AuthenticationEventResponse;
+}
 export interface ConnectionActivatedEvent extends EventBase {
     event: 'connection.activated';
     data: Connection;
@@ -296,7 +360,7 @@ export interface SessionCreatedEventResponse extends EventResponseBase {
     event: 'session.created';
     data: SessionResponse;
 }
-export type Event = ConnectionActivatedEvent | ConnectionDeactivatedEvent | ConnectionDeletedEvent | DsyncActivatedEvent | DsyncDeactivatedEvent | DsyncDeletedEvent | DsyncGroupCreatedEvent | DsyncGroupUpdatedEvent | DsyncGroupDeletedEvent | DsyncGroupUserAddedEvent | DsyncGroupUserRemovedEvent | DsyncUserCreatedEvent | DsyncUserUpdatedEvent | DsyncUserDeletedEvent | EmailVerificationCreatedEvent | InvitationCreatedEvent | MagicAuthCreatedEvent | PasswordResetCreatedEvent | UserCreatedEvent | UserUpdatedEvent | UserDeletedEvent | OrganizationMembershipAdded | OrganizationMembershipCreated | OrganizationMembershipDeleted | OrganizationMembershipUpdated | OrganizationMembershipRemoved | RoleCreatedEvent | RoleDeletedEvent | SessionCreatedEvent | OrganizationCreatedEvent | OrganizationUpdatedEvent | OrganizationDeletedEvent;
-export type EventResponse = ConnectionActivatedEventResponse | ConnectionDeactivatedEventResponse | ConnectionDeletedEventResponse | DsyncActivatedEventResponse | DsyncDeactivatedEventResponse | DsyncDeletedEventResponse | DsyncGroupCreatedEventResponse | DsyncGroupUpdatedEventResponse | DsyncGroupDeletedEventResponse | DsyncGroupUserAddedEventResponse | DsyncGroupUserRemovedEventResponse | DsyncUserCreatedEventResponse | DsyncUserUpdatedEventResponse | DsyncUserDeletedEventResponse | EmailVerificationCreatedEventResponse | InvitationCreatedEventResponse | MagicAuthCreatedEventResponse | PasswordResetCreatedEventResponse | UserCreatedEventResponse | UserUpdatedEventResponse | UserDeletedEventResponse | OrganizationMembershipAddedResponse | OrganizationMembershipCreatedResponse | OrganizationMembershipDeletedResponse | OrganizationMembershipUpdatedResponse | OrganizationMembershipRemovedResponse | RoleCreatedEventResponse | RoleDeletedEventResponse | SessionCreatedEventResponse | OrganizationCreatedResponse | OrganizationUpdatedResponse | OrganizationDeletedResponse;
+export type Event = AuthenticationEmailVerificationSucceededEvent | AuthenticationMfaSucceededEvent | AuthenticationOAuthSucceededEvent | AuthenticationSSOSucceededEvent | AuthenticationPasswordFailedEvent | AuthenticationPasswordSucceededEvent | AuthenticationMagicAuthFailedEvent | AuthenticationMagicAuthSucceededEvent | ConnectionActivatedEvent | ConnectionDeactivatedEvent | ConnectionDeletedEvent | DsyncActivatedEvent | DsyncDeactivatedEvent | DsyncDeletedEvent | DsyncGroupCreatedEvent | DsyncGroupUpdatedEvent | DsyncGroupDeletedEvent | DsyncGroupUserAddedEvent | DsyncGroupUserRemovedEvent | DsyncUserCreatedEvent | DsyncUserUpdatedEvent | DsyncUserDeletedEvent | EmailVerificationCreatedEvent | InvitationCreatedEvent | MagicAuthCreatedEvent | PasswordResetCreatedEvent | UserCreatedEvent | UserUpdatedEvent | UserDeletedEvent | OrganizationMembershipAdded | OrganizationMembershipCreated | OrganizationMembershipDeleted | OrganizationMembershipUpdated | OrganizationMembershipRemoved | RoleCreatedEvent | RoleDeletedEvent | SessionCreatedEvent | OrganizationCreatedEvent | OrganizationUpdatedEvent | OrganizationDeletedEvent;
+export type EventResponse = AuthenticationEmailVerificationSucceededEventResponse | AuthenticationMagicAuthFailedEventResponse | AuthenticationMagicAuthSucceededEventResponse | AuthenticationMfaSucceededEventResponse | AuthenticationOAuthSucceededEventResponse | AuthenticationPasswordFailedEventResponse | AuthenticationPasswordSucceededEventResponse | AuthenticationSSOSucceededEventResponse | ConnectionActivatedEventResponse | ConnectionDeactivatedEventResponse | ConnectionDeletedEventResponse | DsyncActivatedEventResponse | DsyncDeactivatedEventResponse | DsyncDeletedEventResponse | DsyncGroupCreatedEventResponse | DsyncGroupUpdatedEventResponse | DsyncGroupDeletedEventResponse | DsyncGroupUserAddedEventResponse | DsyncGroupUserRemovedEventResponse | DsyncUserCreatedEventResponse | DsyncUserUpdatedEventResponse | DsyncUserDeletedEventResponse | EmailVerificationCreatedEventResponse | InvitationCreatedEventResponse | MagicAuthCreatedEventResponse | PasswordResetCreatedEventResponse | UserCreatedEventResponse | UserUpdatedEventResponse | UserDeletedEventResponse | OrganizationMembershipAddedResponse | OrganizationMembershipCreatedResponse | OrganizationMembershipDeletedResponse | OrganizationMembershipUpdatedResponse | OrganizationMembershipRemovedResponse | RoleCreatedEventResponse | RoleDeletedEventResponse | SessionCreatedEventResponse | OrganizationCreatedResponse | OrganizationUpdatedResponse | OrganizationDeletedResponse;
 export type EventName = Event['event'];
 export {};

package/lib/common/interfaces/workos-options.interface.d.ts

@@ -6,4 +6,5 @@ export interface WorkOSOptions {
     config?: RequestInit;
     appInfo?: AppInfo;
     fetchFn?: typeof fetch;
+    clientId?: string;
 }

package/lib/common/net/node-client.d.ts

@@ -1,4 +1,3 @@
-/// <reference types="node" />
 import { HttpClient, HttpClientResponse } from './http-client';
 import { HttpClientInterface, HttpClientResponseInterface, RequestOptions } from '../interfaces/http-client.interface';
 import * as http_ from 'node:http';

package/lib/common/serializers/event.serializer.js

@@ -14,6 +14,15 @@ const deserializeEvent = (event) => {
         createdAt: event.created_at,
     };
     switch (event.event) {
+        case 'authentication.email_verification_succeeded':
+        case 'authentication.magic_auth_failed':
+        case 'authentication.magic_auth_succeeded':
+        case 'authentication.mfa_succeeded':
+        case 'authentication.oauth_succeeded':
+        case 'authentication.password_failed':
+        case 'authentication.password_succeeded':
+        case 'authentication.sso_succeeded':
+            return Object.assign(Object.assign({}, eventBase), { event: event.event, data: (0, serializers_4.deserializeAuthenticationEvent)(event.data) });
         case 'connection.activated':
         case 'connection.deactivated':
         case 'connection.deleted':

package/lib/user-management/interfaces/authenticate-with-options-base.interface.d.ts

@@ -1,7 +1,12 @@
+export interface AuthenticateWithSessionOptions {
+    cookiePassword?: string;
+    sealSession: boolean;
+}
 export interface AuthenticateWithOptionsBase {
     clientId: string;
     ipAddress?: string;
     userAgent?: string;
+    session?: AuthenticateWithSessionOptions;
 }
 export interface SerializedAuthenticateWithOptionsBase {
     client_id: string;

package/lib/user-management/interfaces/authenticate-with-session-cookie.interface.d.ts

@@ -0,0 +1,24 @@
+import { AuthenticationResponse } from './authentication-response.interface';
+export interface AccessToken {
+    sid: string;
+    org_id?: string;
+    role?: string;
+    permissions?: string[];
+}
+export type SessionCookieData = Pick<AuthenticationResponse, 'accessToken' | 'impersonator' | 'organizationId' | 'refreshToken' | 'user'>;
+export declare enum AuthenticateWithSessionCookieFailureReason {
+    INVALID_JWT = "invalid_jwt",
+    INVALID_SESSION_COOKIE = "invalid_session_cookie",
+    NO_SESSION_COOKIE_PROVIDED = "no_session_cookie_provided"
+}
+export type AuthenticateWithSessionCookieFailedResponse = {
+    authenticated: false;
+    reason: AuthenticateWithSessionCookieFailureReason;
+};
+export type AuthenticateWithSessionCookieSuccessResponse = {
+    authenticated: true;
+    sessionId: string;
+    organizationId?: string;
+    role?: string;
+    permissions?: string[];
+};

package/lib/user-management/interfaces/authenticate-with-session-cookie.interface.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticateWithSessionCookieFailureReason = void 0;
+var AuthenticateWithSessionCookieFailureReason;
+(function (AuthenticateWithSessionCookieFailureReason) {
+    AuthenticateWithSessionCookieFailureReason["INVALID_JWT"] = "invalid_jwt";
+    AuthenticateWithSessionCookieFailureReason["INVALID_SESSION_COOKIE"] = "invalid_session_cookie";
+    AuthenticateWithSessionCookieFailureReason["NO_SESSION_COOKIE_PROVIDED"] = "no_session_cookie_provided";
+})(AuthenticateWithSessionCookieFailureReason || (exports.AuthenticateWithSessionCookieFailureReason = AuthenticateWithSessionCookieFailureReason = {}));

package/lib/user-management/interfaces/authentication-event.interface.d.ts

@@ -0,0 +1,25 @@
+interface AuthenticationEventError {
+    code: string;
+    message: string;
+}
+type AuthenticationEventType = 'sso' | 'password' | 'oauth' | 'mfa' | 'magic_auth' | 'email_verification';
+type AuthenticationEventStatus = 'failed' | 'succeeded';
+export type AuthenticationEvent = {
+    email: string | null;
+    error?: AuthenticationEventError;
+    ipAddress: string | null;
+    status: AuthenticationEventStatus;
+    type: AuthenticationEventType;
+    userAgent: string | null;
+    userId: string | null;
+};
+export interface AuthenticationEventResponse {
+    email: string | null;
+    error?: AuthenticationEventError;
+    ip_address: string | null;
+    status: AuthenticationEventStatus;
+    type: AuthenticationEventType;
+    user_agent: string | null;
+    user_id: string | null;
+}
+export {};

package/lib/user-management/interfaces/authentication-event.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/user-management/interfaces/authentication-response.interface.d.ts

@@ -8,6 +8,7 @@ export interface AuthenticationResponse {
     refreshToken: string;
     impersonator?: Impersonator;
     authenticationMethod?: AuthenticationMethod;
+    sealedSession?: string;
 }
 export interface AuthenticationResponseResponse {
     user: UserResponse;

package/lib/user-management/interfaces/index.d.ts

@@ -1,3 +1,4 @@
+export * from './authentication-event.interface';
 export * from './authenticate-with-magic-auth-options.interface';
 export * from './authenticate-with-password-options.interface';
 export * from './authenticate-with-code-options.interface';
@@ -7,6 +8,7 @@ export * from './authenticate-with-options-base.interface';
 export * from './authenticate-with-organization-selection.interface';
 export * from './authenticate-with-password-options.interface';
 export * from './authenticate-with-refresh-token-options.interface';
+export * from './authenticate-with-session-cookie.interface';
 export * from './authenticate-with-totp-options.interface';
 export * from './authentication-response.interface';
 export * from './create-magic-auth-options.interface';
@@ -25,6 +27,7 @@ export * from './list-users-options.interface';
 export * from './magic-auth.interface';
 export * from './organization-membership.interface';
 export * from './password-reset.interface';
+export * from './refresh-and-seal-session-data.interface';
 export * from './reset-password-options.interface';
 export * from './revoke-session-options.interface';
 export * from './send-invitation-options.interface';

package/lib/user-management/interfaces/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authentication-event.interface"), exports);
 __exportStar(require("./authenticate-with-magic-auth-options.interface"), exports);
 __exportStar(require("./authenticate-with-password-options.interface"), exports);
 __exportStar(require("./authenticate-with-code-options.interface"), exports);
@@ -23,6 +24,7 @@ __exportStar(require("./authenticate-with-options-base.interface"), exports);
 __exportStar(require("./authenticate-with-organization-selection.interface"), exports);
 __exportStar(require("./authenticate-with-password-options.interface"), exports);
 __exportStar(require("./authenticate-with-refresh-token-options.interface"), exports);
+__exportStar(require("./authenticate-with-session-cookie.interface"), exports);
 __exportStar(require("./authenticate-with-totp-options.interface"), exports);
 __exportStar(require("./authentication-response.interface"), exports);
 __exportStar(require("./create-magic-auth-options.interface"), exports);
@@ -41,6 +43,7 @@ __exportStar(require("./list-users-options.interface"), exports);
 __exportStar(require("./magic-auth.interface"), exports);
 __exportStar(require("./organization-membership.interface"), exports);
 __exportStar(require("./password-reset.interface"), exports);
+__exportStar(require("./refresh-and-seal-session-data.interface"), exports);
 __exportStar(require("./reset-password-options.interface"), exports);
 __exportStar(require("./revoke-session-options.interface"), exports);
 __exportStar(require("./send-invitation-options.interface"), exports);

package/lib/user-management/interfaces/refresh-and-seal-session-data.interface.d.ts

@@ -0,0 +1,16 @@
+export declare enum RefreshAndSealSessionDataFailureReason {
+    INVALID_SESSION_COOKE = "invalid_session_cookie",
+    NO_SESSION_COOKIE_PROVIDED = "no_session_cookie_provided",
+    INVALID_GRANT = "invalid_grant",
+    ORGANIZATION_NOT_AUTHORIZED = "organization_not_authorized"
+}
+type RefreshAndSealSessionDataFailedResponse = {
+    authenticated: false;
+    reason: RefreshAndSealSessionDataFailureReason;
+};
+type RefreshAndSealSessionDataSuccessResponse = {
+    authenticated: true;
+    sealedSession: string;
+};
+export type RefreshAndSealSessionDataResponse = RefreshAndSealSessionDataFailedResponse | RefreshAndSealSessionDataSuccessResponse;
+export {};

package/lib/user-management/interfaces/refresh-and-seal-session-data.interface.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RefreshAndSealSessionDataFailureReason = void 0;
+var RefreshAndSealSessionDataFailureReason;
+(function (RefreshAndSealSessionDataFailureReason) {
+    RefreshAndSealSessionDataFailureReason["INVALID_SESSION_COOKE"] = "invalid_session_cookie";
+    RefreshAndSealSessionDataFailureReason["NO_SESSION_COOKIE_PROVIDED"] = "no_session_cookie_provided";
+    // API OauthErrors for refresh tokens
+    RefreshAndSealSessionDataFailureReason["INVALID_GRANT"] = "invalid_grant";
+    RefreshAndSealSessionDataFailureReason["ORGANIZATION_NOT_AUTHORIZED"] = "organization_not_authorized";
+})(RefreshAndSealSessionDataFailureReason || (exports.RefreshAndSealSessionDataFailureReason = RefreshAndSealSessionDataFailureReason = {}));

package/lib/user-management/interfaces/session-handler-options.interface.d.ts

@@ -0,0 +1,4 @@
+export interface SessionHandlerOptions {
+    sessionData: string;
+    cookiePassword?: string;
+}

package/lib/user-management/interfaces/session-handler-options.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/user-management/serializers/authentication-event.serializer.d.ts

@@ -0,0 +1,2 @@
+import { AuthenticationEvent, AuthenticationEventResponse } from '../interfaces';
+export declare const deserializeAuthenticationEvent: (authenticationEvent: AuthenticationEventResponse) => AuthenticationEvent;

package/lib/user-management/serializers/authentication-event.serializer.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deserializeAuthenticationEvent = void 0;
+const deserializeAuthenticationEvent = (authenticationEvent) => ({
+    email: authenticationEvent.email,
+    error: authenticationEvent.error,
+    ipAddress: authenticationEvent.ip_address,
+    status: authenticationEvent.status,
+    type: authenticationEvent.type,
+    userAgent: authenticationEvent.user_agent,
+    userId: authenticationEvent.user_id,
+});
+exports.deserializeAuthenticationEvent = deserializeAuthenticationEvent;

package/lib/user-management/serializers/index.d.ts

@@ -3,6 +3,7 @@ export * from './authenticate-with-magic-auth-options.serializer';
 export * from './authenticate-with-password-options.serializer';
 export * from './authenticate-with-refresh-token.options.serializer';
 export * from './authenticate-with-totp-options.serializer';
+export * from './authentication-event.serializer';
 export * from './authentication-response.serializer';
 export * from './create-magic-auth-options.serializer';
 export * from './create-password-reset-options.serializer';

package/lib/user-management/serializers/index.js

@@ -19,6 +19,7 @@ __exportStar(require("./authenticate-with-magic-auth-options.serializer"), expor
 __exportStar(require("./authenticate-with-password-options.serializer"), exports);
 __exportStar(require("./authenticate-with-refresh-token.options.serializer"), exports);
 __exportStar(require("./authenticate-with-totp-options.serializer"), exports);
+__exportStar(require("./authentication-event.serializer"), exports);
 __exportStar(require("./authentication-response.serializer"), exports);
 __exportStar(require("./create-magic-auth-options.serializer"), exports);
 __exportStar(require("./create-password-reset-options.serializer"), exports);

package/lib/user-management/user-management.d.ts

@@ -1,22 +1,26 @@
-import { WorkOS } from '../workos';
 import { AutoPaginatable } from '../common/utils/pagination';
-import { AuthenticateWithCodeOptions, AuthenticateWithMagicAuthOptions, AuthenticateWithPasswordOptions, AuthenticateWithTotpOptions, AuthenticationResponse, ResetPasswordOptions, SendPasswordResetEmailOptions, CreateUserOptions, EnrollAuthFactorOptions, ListAuthFactorsOptions, ListUsersOptions, SendMagicAuthCodeOptions, SendVerificationEmailOptions, UpdateUserOptions, User, VerifyEmailOptions, AuthenticateWithRefreshTokenOptions, MagicAuth, CreateMagicAuthOptions, EmailVerification, PasswordReset, CreatePasswordResetOptions } from './interfaces';
 import { Challenge } from '../mfa/interfaces';
-import { OrganizationMembership } from './interfaces/organization-membership.interface';
-import { ListOrganizationMembershipsOptions } from './interfaces/list-organization-memberships-options.interface';
-import { CreateOrganizationMembershipOptions } from './interfaces/create-organization-membership-options.interface';
-import { Invitation } from './interfaces/invitation.interface';
-import { ListInvitationsOptions } from './interfaces/list-invitations-options.interface';
-import { SendInvitationOptions } from './interfaces/send-invitation-options.interface';
-import { AuthorizationURLOptions } from './interfaces/authorization-url-options.interface';
+import { WorkOS } from '../workos';
+import { AuthenticateWithCodeOptions, AuthenticateWithMagicAuthOptions, AuthenticateWithPasswordOptions, AuthenticateWithRefreshTokenOptions, AuthenticateWithTotpOptions, AuthenticationResponse, CreateMagicAuthOptions, CreatePasswordResetOptions, CreateUserOptions, EmailVerification, EnrollAuthFactorOptions, ListAuthFactorsOptions, ListUsersOptions, MagicAuth, PasswordReset, ResetPasswordOptions, SendMagicAuthCodeOptions, SendPasswordResetEmailOptions, SendVerificationEmailOptions, UpdateUserOptions, User, VerifyEmailOptions } from './interfaces';
 import { AuthenticateWithEmailVerificationOptions } from './interfaces/authenticate-with-email-verification-options.interface';
 import { AuthenticateWithOrganizationSelectionOptions } from './interfaces/authenticate-with-organization-selection.interface';
+import { AuthenticateWithSessionCookieFailedResponse, AuthenticateWithSessionCookieSuccessResponse, SessionCookieData } from './interfaces/authenticate-with-session-cookie.interface';
+import { AuthorizationURLOptions } from './interfaces/authorization-url-options.interface';
+import { CreateOrganizationMembershipOptions } from './interfaces/create-organization-membership-options.interface';
 import { Factor, FactorWithSecrets } from './interfaces/factor.interface';
+import { Identity } from './interfaces/identity.interface';
+import { Invitation } from './interfaces/invitation.interface';
+import { ListInvitationsOptions } from './interfaces/list-invitations-options.interface';
+import { ListOrganizationMembershipsOptions } from './interfaces/list-organization-memberships-options.interface';
+import { OrganizationMembership } from './interfaces/organization-membership.interface';
+import { RefreshAndSealSessionDataResponse } from './interfaces/refresh-and-seal-session-data.interface';
 import { RevokeSessionOptions } from './interfaces/revoke-session-options.interface';
+import { SendInvitationOptions } from './interfaces/send-invitation-options.interface';
+import { SessionHandlerOptions } from './interfaces/session-handler-options.interface';
 import { UpdateOrganizationMembershipOptions } from './interfaces/update-organization-membership-options.interface';
-import { Identity } from './interfaces/identity.interface';
 export declare class UserManagement {
     private readonly workos;
+    private jwks;
     constructor(workos: WorkOS);
     getUser(userId: string): Promise<User>;
     listUsers(options?: ListUsersOptions): Promise<AutoPaginatable<User>>;
@@ -28,6 +32,12 @@ export declare class UserManagement {
     authenticateWithTotp(payload: AuthenticateWithTotpOptions): Promise<AuthenticationResponse>;
     authenticateWithEmailVerification(payload: AuthenticateWithEmailVerificationOptions): Promise<AuthenticationResponse>;
     authenticateWithOrganizationSelection(payload: AuthenticateWithOrganizationSelectionOptions): Promise<AuthenticationResponse>;
+    authenticateWithSessionCookie({ sessionData, cookiePassword, }: SessionHandlerOptions): Promise<AuthenticateWithSessionCookieSuccessResponse | AuthenticateWithSessionCookieFailedResponse>;
+    private isValidJwt;
+    refreshAndSealSessionData({ sessionData, cookiePassword, }: SessionHandlerOptions): Promise<RefreshAndSealSessionDataResponse>;
+    private prepareAuthenticationResponse;
+    private sealSessionDataFromAuthenticationResponse;
+    getSessionFromCookie({ sessionData, cookiePassword, }: SessionHandlerOptions): Promise<SessionCookieData | undefined>;
     getEmailVerification(emailVerificationId: string): Promise<EmailVerification>;
     sendVerificationEmail({ userId, }: SendVerificationEmailOptions): Promise<{
         user: User;