@workos-inc/node 7.67.0 → 7.69.0

package/README.md

@@ -18,7 +18,7 @@ Node 16 or higher.
 Install the package with:
 
 ```
-yarn add @workos-inc/node
+npm i @workos-inc/node
 ```
 
 ## Configuration

package/lib/common/interfaces/event.interface.d.ts

@@ -238,14 +238,30 @@ export interface EmailVerificationCreatedEventResponse extends EventResponseBase
     event: 'email_verification.created';
     data: EmailVerificationEventResponse;
 }
+export interface InvitationAcceptedEvent extends EventBase {
+    event: 'invitation.accepted';
+    data: InvitationEvent;
+}
 export interface InvitationCreatedEvent extends EventBase {
     event: 'invitation.created';
     data: InvitationEvent;
 }
+export interface InvitationRevokedEvent extends EventBase {
+    event: 'invitation.revoked';
+    data: InvitationEvent;
+}
+export interface InvitationAcceptedEventResponse extends EventResponseBase {
+    event: 'invitation.accepted';
+    data: InvitationEventResponse;
+}
 export interface InvitationCreatedEventResponse extends EventResponseBase {
     event: 'invitation.created';
     data: InvitationEventResponse;
 }
+export interface InvitationRevokedEventResponse extends EventResponseBase {
+    event: 'invitation.revoked';
+    data: InvitationEventResponse;
+}
 export interface MagicAuthCreatedEvent extends EventBase {
     event: 'magic_auth.created';
     data: MagicAuthEvent;
@@ -450,7 +466,7 @@ export interface OrganizationDomainDeletedEventResponse extends EventResponseBas
     event: 'organization_domain.deleted';
     data: OrganizationDomainResponse;
 }
-export type Event = AuthenticationEmailVerificationSucceededEvent | AuthenticationMfaSucceededEvent | AuthenticationOAuthFailedEvent | AuthenticationOAuthSucceededEvent | AuthenticationSSOFailedEvent | AuthenticationSSOSucceededEvent | AuthenticationPasswordFailedEvent | AuthenticationPasswordSucceededEvent | AuthenticationMagicAuthFailedEvent | AuthenticationMagicAuthSucceededEvent | AuthenticationRadarRiskDetectedEvent | ConnectionActivatedEvent | ConnectionDeactivatedEvent | ConnectionDeletedEvent | DsyncActivatedEvent | DsyncDeactivatedEvent | DsyncDeletedEvent | DsyncGroupCreatedEvent | DsyncGroupUpdatedEvent | DsyncGroupDeletedEvent | DsyncGroupUserAddedEvent | DsyncGroupUserRemovedEvent | DsyncUserCreatedEvent | DsyncUserUpdatedEvent | DsyncUserDeletedEvent | EmailVerificationCreatedEvent | InvitationCreatedEvent | MagicAuthCreatedEvent | PasswordResetCreatedEvent | PasswordResetSucceededEvent | UserCreatedEvent | UserUpdatedEvent | UserDeletedEvent | OrganizationMembershipAdded | OrganizationMembershipCreated | OrganizationMembershipDeleted | OrganizationMembershipUpdated | OrganizationMembershipRemoved | RoleCreatedEvent | RoleDeletedEvent | RoleUpdatedEvent | SessionCreatedEvent | SessionRevokedEvent | OrganizationCreatedEvent | OrganizationUpdatedEvent | OrganizationDeletedEvent | OrganizationDomainVerifiedEvent | OrganizationDomainVerificationFailedEvent | OrganizationDomainCreatedEvent | OrganizationDomainUpdatedEvent | OrganizationDomainDeletedEvent;
-export type EventResponse = AuthenticationEmailVerificationSucceededEventResponse | AuthenticationMagicAuthFailedEventResponse | AuthenticationMagicAuthSucceededEventResponse | AuthenticationMfaSucceededEventResponse | AuthenticationOAuthFailedEventResponse | AuthenticationOAuthSucceededEventResponse | AuthenticationPasswordFailedEventResponse | AuthenticationPasswordSucceededEventResponse | AuthenticationSSOFailedEventResponse | AuthenticationSSOSucceededEventResponse | AuthenticationRadarRiskDetectedEventResponse | ConnectionActivatedEventResponse | ConnectionDeactivatedEventResponse | ConnectionDeletedEventResponse | DsyncActivatedEventResponse | DsyncDeactivatedEventResponse | DsyncDeletedEventResponse | DsyncGroupCreatedEventResponse | DsyncGroupUpdatedEventResponse | DsyncGroupDeletedEventResponse | DsyncGroupUserAddedEventResponse | DsyncGroupUserRemovedEventResponse | DsyncUserCreatedEventResponse | DsyncUserUpdatedEventResponse | DsyncUserDeletedEventResponse | EmailVerificationCreatedEventResponse | InvitationCreatedEventResponse | MagicAuthCreatedEventResponse | PasswordResetCreatedEventResponse | PasswordResetSucceededEventResponse | UserCreatedEventResponse | UserUpdatedEventResponse | UserDeletedEventResponse | OrganizationMembershipAddedResponse | OrganizationMembershipCreatedResponse | OrganizationMembershipDeletedResponse | OrganizationMembershipUpdatedResponse | OrganizationMembershipRemovedResponse | RoleCreatedEventResponse | RoleDeletedEventResponse | RoleUpdatedEventResponse | SessionCreatedEventResponse | SessionRevokedEventResponse | OrganizationCreatedResponse | OrganizationUpdatedResponse | OrganizationDeletedResponse | OrganizationDomainVerifiedEventResponse | OrganizationDomainVerificationFailedEventResponse | OrganizationDomainCreatedEventResponse | OrganizationDomainUpdatedEventResponse | OrganizationDomainDeletedEventResponse;
+export type Event = AuthenticationEmailVerificationSucceededEvent | AuthenticationMfaSucceededEvent | AuthenticationOAuthFailedEvent | AuthenticationOAuthSucceededEvent | AuthenticationSSOFailedEvent | AuthenticationSSOSucceededEvent | AuthenticationPasswordFailedEvent | AuthenticationPasswordSucceededEvent | AuthenticationMagicAuthFailedEvent | AuthenticationMagicAuthSucceededEvent | AuthenticationRadarRiskDetectedEvent | ConnectionActivatedEvent | ConnectionDeactivatedEvent | ConnectionDeletedEvent | DsyncActivatedEvent | DsyncDeactivatedEvent | DsyncDeletedEvent | DsyncGroupCreatedEvent | DsyncGroupUpdatedEvent | DsyncGroupDeletedEvent | DsyncGroupUserAddedEvent | DsyncGroupUserRemovedEvent | DsyncUserCreatedEvent | DsyncUserUpdatedEvent | DsyncUserDeletedEvent | EmailVerificationCreatedEvent | InvitationAcceptedEvent | InvitationCreatedEvent | InvitationRevokedEvent | MagicAuthCreatedEvent | PasswordResetCreatedEvent | PasswordResetSucceededEvent | UserCreatedEvent | UserUpdatedEvent | UserDeletedEvent | OrganizationMembershipAdded | OrganizationMembershipCreated | OrganizationMembershipDeleted | OrganizationMembershipUpdated | OrganizationMembershipRemoved | RoleCreatedEvent | RoleDeletedEvent | RoleUpdatedEvent | SessionCreatedEvent | SessionRevokedEvent | OrganizationCreatedEvent | OrganizationUpdatedEvent | OrganizationDeletedEvent | OrganizationDomainVerifiedEvent | OrganizationDomainVerificationFailedEvent | OrganizationDomainCreatedEvent | OrganizationDomainUpdatedEvent | OrganizationDomainDeletedEvent;
+export type EventResponse = AuthenticationEmailVerificationSucceededEventResponse | AuthenticationMagicAuthFailedEventResponse | AuthenticationMagicAuthSucceededEventResponse | AuthenticationMfaSucceededEventResponse | AuthenticationOAuthFailedEventResponse | AuthenticationOAuthSucceededEventResponse | AuthenticationPasswordFailedEventResponse | AuthenticationPasswordSucceededEventResponse | AuthenticationSSOFailedEventResponse | AuthenticationSSOSucceededEventResponse | AuthenticationRadarRiskDetectedEventResponse | ConnectionActivatedEventResponse | ConnectionDeactivatedEventResponse | ConnectionDeletedEventResponse | DsyncActivatedEventResponse | DsyncDeactivatedEventResponse | DsyncDeletedEventResponse | DsyncGroupCreatedEventResponse | DsyncGroupUpdatedEventResponse | DsyncGroupDeletedEventResponse | DsyncGroupUserAddedEventResponse | DsyncGroupUserRemovedEventResponse | DsyncUserCreatedEventResponse | DsyncUserUpdatedEventResponse | DsyncUserDeletedEventResponse | EmailVerificationCreatedEventResponse | InvitationAcceptedEventResponse | InvitationCreatedEventResponse | InvitationRevokedEventResponse | MagicAuthCreatedEventResponse | PasswordResetCreatedEventResponse | PasswordResetSucceededEventResponse | UserCreatedEventResponse | UserUpdatedEventResponse | UserDeletedEventResponse | OrganizationMembershipAddedResponse | OrganizationMembershipCreatedResponse | OrganizationMembershipDeletedResponse | OrganizationMembershipUpdatedResponse | OrganizationMembershipRemovedResponse | RoleCreatedEventResponse | RoleDeletedEventResponse | RoleUpdatedEventResponse | SessionCreatedEventResponse | SessionRevokedEventResponse | OrganizationCreatedResponse | OrganizationUpdatedResponse | OrganizationDeletedResponse | OrganizationDomainVerifiedEventResponse | OrganizationDomainVerificationFailedEventResponse | OrganizationDomainCreatedEventResponse | OrganizationDomainUpdatedEventResponse | OrganizationDomainDeletedEventResponse;
 export type EventName = Event['event'];
 export {};

package/lib/common/serializers/event.serializer.js

@@ -57,7 +57,9 @@ const deserializeEvent = (event) => {
             return Object.assign(Object.assign({}, eventBase), { event: event.event, data: (0, serializers_1.deserializeUpdatedEventDirectoryUser)(event.data) });
         case 'email_verification.created':
             return Object.assign(Object.assign({}, eventBase), { event: event.event, data: (0, serializers_4.deserializeEmailVerificationEvent)(event.data) });
+        case 'invitation.accepted':
         case 'invitation.created':
+        case 'invitation.revoked':
             return Object.assign(Object.assign({}, eventBase), { event: event.event, data: (0, serializers_4.deserializeInvitationEvent)(event.data) });
         case 'magic_auth.created':
             return Object.assign(Object.assign({}, eventBase), { event: event.event, data: (0, serializers_4.deserializeMagicAuthEvent)(event.data) });

package/lib/sso/interfaces/authorization-url-options.interface.d.ts

@@ -9,6 +9,7 @@ export interface SSOAuthorizationURLOptions {
     domainHint?: string;
     loginHint?: string;
     provider?: string;
+    providerScopes?: string[];
     redirectUri: string;
     state?: string;
 }

package/lib/sso/interfaces/profile-and-token.interface.d.ts

@@ -1,10 +1,13 @@
 import { UnknownRecord } from '../../common/interfaces/unknown-record.interface';
+import { OauthTokens, OauthTokensResponse } from '../../user-management/interfaces/oauth-tokens.interface';
 import { Profile, ProfileResponse } from './profile.interface';
 export interface ProfileAndToken<CustomAttributesType extends UnknownRecord> {
     accessToken: string;
     profile: Profile<CustomAttributesType>;
+    oauthTokens?: OauthTokens;
 }
 export interface ProfileAndTokenResponse<CustomAttributesType extends UnknownRecord> {
     access_token: string;
     profile: ProfileResponse<CustomAttributesType>;
+    oauth_tokens?: OauthTokensResponse;
 }

package/lib/sso/serializers/profile-and-token.serializer.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deserializeProfileAndToken = void 0;
+const oauth_tokens_serializer_1 = require("../../user-management/serializers/oauth-tokens.serializer");
 const profile_serializer_1 = require("./profile.serializer");
 const deserializeProfileAndToken = (profileAndToken) => ({
     accessToken: profileAndToken.access_token,
     profile: (0, profile_serializer_1.deserializeProfile)(profileAndToken.profile),
+    oauthTokens: (0, oauth_tokens_serializer_1.deserializeOauthTokens)(profileAndToken.oauth_tokens),
 });
 exports.deserializeProfileAndToken = deserializeProfileAndToken;

package/lib/sso/sso.d.ts

@@ -7,7 +7,7 @@ export declare class SSO {
     constructor(workos: WorkOS);
     listConnections(options?: ListConnectionsOptions): Promise<AutoPaginatable<Connection>>;
     deleteConnection(id: string): Promise<void>;
-    getAuthorizationUrl({ connection, clientId, domain, domainHint, loginHint, organization, provider, redirectUri, state, }: SSOAuthorizationURLOptions): string;
+    getAuthorizationUrl({ connection, clientId, domain, domainHint, loginHint, organization, provider, providerScopes, redirectUri, state, }: SSOAuthorizationURLOptions): string;
     getConnection(id: string): Promise<Connection>;
     getProfileAndToken<CustomAttributesType extends UnknownRecord = UnknownRecord>({ code, clientId, }: GetProfileAndTokenOptions): Promise<ProfileAndToken<CustomAttributesType>>;
     getProfile<CustomAttributesType extends UnknownRecord = UnknownRecord>({ accessToken, }: GetProfileOptions): Promise<Profile<CustomAttributesType>>;

package/lib/sso/sso.js

@@ -38,7 +38,7 @@ class SSO {
             yield this.workos.delete(`/connections/${id}`);
         });
     }
-    getAuthorizationUrl({ connection, clientId, domain, domainHint, loginHint, organization, provider, redirectUri, state, }) {
+    getAuthorizationUrl({ connection, clientId, domain, domainHint, loginHint, organization, provider, providerScopes, redirectUri, state, }) {
         if (!domain && !provider && !connection && !organization) {
             throw new Error(`Incomplete arguments. Need to specify either a 'connection', 'organization', 'domain', or 'provider'.`);
         }
@@ -52,6 +52,7 @@ class SSO {
             domain_hint: domainHint,
             login_hint: loginHint,
             provider,
+            provider_scopes: providerScopes === null || providerScopes === void 0 ? void 0 : providerScopes.join(' '),
             client_id: clientId,
             redirect_uri: redirectUri,
             response_type: 'code',

package/lib/sso/sso.spec.js

@@ -161,6 +161,28 @@ describe('SSO', () => {
                     expect(url).toMatchInlineSnapshot(`"https://api.workos.com/sso/authorize?client_id=proj_123&connection=connection_123&login_hint=foo%40workos.com&redirect_uri=example.com%2Fsso%2Fworkos%2Fcallback&response_type=code&state=custom+state"`);
                 });
             });
+            describe('with providerScopes', () => {
+                it('generates an authorize url with the provided provider scopes', () => {
+                    const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+                    const url = workos.sso.getAuthorizationUrl({
+                        provider: 'Google',
+                        providerScopes: ['profile', 'email', 'calendar'],
+                        clientId: 'proj_123',
+                        redirectUri: 'example.com/sso/workos/callback',
+                    });
+                    expect(url).toMatchInlineSnapshot(`"https://api.workos.com/sso/authorize?client_id=proj_123&provider=Google&provider_scopes=profile+email+calendar&redirect_uri=example.com%2Fsso%2Fworkos%2Fcallback&response_type=code"`);
+                });
+                it('handles empty provider scopes array', () => {
+                    const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+                    const url = workos.sso.getAuthorizationUrl({
+                        provider: 'Google',
+                        providerScopes: [],
+                        clientId: 'proj_123',
+                        redirectUri: 'example.com/sso/workos/callback',
+                    });
+                    expect(url).toMatchInlineSnapshot(`"https://api.workos.com/sso/authorize?client_id=proj_123&provider=Google&redirect_uri=example.com%2Fsso%2Fworkos%2Fcallback&response_type=code"`);
+                });
+            });
         });
         describe('getProfileAndToken', () => {
             describe('with all information provided', () => {
@@ -240,6 +262,89 @@ describe('SSO', () => {
                     expect(profile).toMatchSnapshot();
                 }));
             });
+            describe('with oauth tokens in the response', () => {
+                it('returns the oauth tokens from the profile and token response', () => __awaiter(void 0, void 0, void 0, function* () {
+                    (0, test_utils_1.fetchOnce)({
+                        access_token: '01DMEK0J53CVMC32CK5SE0KZ8Q',
+                        profile: {
+                            id: 'prof_123',
+                            idp_id: '123',
+                            organization_id: 'org_123',
+                            connection_id: 'conn_123',
+                            connection_type: 'OktaSAML',
+                            email: 'foo@test.com',
+                            first_name: 'foo',
+                            last_name: 'bar',
+                            role: {
+                                slug: 'admin',
+                            },
+                            groups: ['Admins', 'Developers'],
+                            raw_attributes: {
+                                email: 'foo@test.com',
+                                first_name: 'foo',
+                                last_name: 'bar',
+                                groups: ['Admins', 'Developers'],
+                            },
+                            custom_attributes: {},
+                        },
+                        oauth_tokens: {
+                            access_token: 'oauth_access_token',
+                            refresh_token: 'oauth_refresh_token',
+                            expires_at: 1640995200,
+                            scopes: ['profile', 'email'],
+                        },
+                    });
+                    const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+                    const { accessToken, profile, oauthTokens } = yield workos.sso.getProfileAndToken({
+                        code: 'authorization_code',
+                        clientId: 'proj_123',
+                    });
+                    expect(jest_fetch_mock_1.default.mock.calls.length).toEqual(1);
+                    expect(accessToken).toBe('01DMEK0J53CVMC32CK5SE0KZ8Q');
+                    expect(profile).toBeDefined();
+                    expect(oauthTokens).toEqual({
+                        accessToken: 'oauth_access_token',
+                        refreshToken: 'oauth_refresh_token',
+                        expiresAt: 1640995200,
+                        scopes: ['profile', 'email'],
+                    });
+                }));
+            });
+            describe('without oauth tokens in the response', () => {
+                it('returns undefined for oauth tokens when not present in response', () => __awaiter(void 0, void 0, void 0, function* () {
+                    (0, test_utils_1.fetchOnce)({
+                        access_token: '01DMEK0J53CVMC32CK5SE0KZ8Q',
+                        profile: {
+                            id: 'prof_123',
+                            idp_id: '123',
+                            organization_id: 'org_123',
+                            connection_id: 'conn_123',
+                            connection_type: 'OktaSAML',
+                            email: 'foo@test.com',
+                            first_name: 'foo',
+                            last_name: 'bar',
+                            role: {
+                                slug: 'admin',
+                            },
+                            raw_attributes: {
+                                email: 'foo@test.com',
+                                first_name: 'foo',
+                                last_name: 'bar',
+                            },
+                            custom_attributes: {},
+                        },
+                    });
+                    const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+                    const { accessToken, profile, oauthTokens } = yield workos.sso.getProfileAndToken({
+                        code: 'authorization_code',
+                        clientId: 'proj_123',
+                    });
+                    expect(jest_fetch_mock_1.default.mock.calls.length).toEqual(1);
+                    expect(accessToken).toBe('01DMEK0J53CVMC32CK5SE0KZ8Q');
+                    expect(profile).toBeDefined();
+                    expect(oauthTokens).toBeUndefined();
+                }));
+            });
         });
         describe('getProfile', () => {
             it('calls the `/sso/profile` endpoint with the provided access token', () => __awaiter(void 0, void 0, void 0, function* () {

package/lib/widgets/interfaces/get-token.d.ts

@@ -1,4 +1,4 @@
-export type WidgetScope = 'widgets:users-table:manage' | 'widgets:sso:manage';
+export type WidgetScope = 'widgets:users-table:manage' | 'widgets:sso:manage' | 'widgets:domain-verification:manage';
 export interface GetTokenOptions {
     organizationId: string;
     userId?: string;

package/lib/workos.js

@@ -32,7 +32,7 @@ const actions_1 = require("./actions/actions");
 const vault_1 = require("./vault/vault");
 const conflict_exception_1 = require("./common/exceptions/conflict.exception");
 const parse_error_1 = require("./common/exceptions/parse-error");
-const VERSION = '7.67.0';
+const VERSION = '7.69.0';
 const DEFAULT_HOSTNAME = 'api.workos.com';
 const HEADER_AUTHORIZATION = 'Authorization';
 const HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "7.67.0",
+  "version": "7.69.0",
   "name": "@workos-inc/node",
   "author": "WorkOS",
   "description": "A Node wrapper for the WorkOS API",
@@ -31,7 +31,7 @@
     "test:worker": "jest src/worker.spec.ts",
     "prettier": "prettier \"src/**/*.{js,ts,tsx}\" --check",
     "format": "prettier \"src/**/*.{js,ts,tsx}\" --write",
-    "prepublishOnly": "yarn run build"
+    "prepublishOnly": "npm run build"
   },
   "dependencies": {
     "iron-session": "~6.3.1",