@workos-inc/node 7.69.2 → 7.71.0

package/lib/organizations/interfaces/index.d.ts

@@ -1,6 +1,5 @@
 export * from './create-organization-options.interface';
 export * from './domain-data.interface';
-export * from './feature-flag.interface';
 export * from './list-organization-feature-flags-options.interface';
 export * from './list-organizations-options.interface';
 export * from './organization.interface';

package/lib/organizations/interfaces/index.js

@@ -16,7 +16,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./create-organization-options.interface"), exports);
 __exportStar(require("./domain-data.interface"), exports);
-__exportStar(require("./feature-flag.interface"), exports);
 __exportStar(require("./list-organization-feature-flags-options.interface"), exports);
 __exportStar(require("./list-organizations-options.interface"), exports);
 __exportStar(require("./organization.interface"), exports);

package/lib/organizations/organizations.d.ts

@@ -1,7 +1,7 @@
 import { AutoPaginatable } from '../common/utils/pagination';
 import { WorkOS } from '../workos';
 import { CreateOrganizationOptions, CreateOrganizationRequestOptions, ListOrganizationsOptions, Organization, UpdateOrganizationOptions } from './interfaces';
-import { FeatureFlag } from './interfaces/feature-flag.interface';
+import { FeatureFlag } from '../feature-flags/interfaces/feature-flag.interface';
 import { RoleList } from '../roles/interfaces';
 import { ListOrganizationRolesOptions } from './interfaces/list-organization-roles-options.interface';
 import { ListOrganizationFeatureFlagsOptions } from './interfaces/list-organization-feature-flags-options.interface';

package/lib/organizations/organizations.js

@@ -25,7 +25,7 @@ const pagination_1 = require("../common/utils/pagination");
 const serializers_1 = require("./serializers");
 const fetch_and_deserialize_1 = require("../common/utils/fetch-and-deserialize");
 const role_serializer_1 = require("../roles/serializers/role.serializer");
-const feature_flag_serializer_1 = require("./serializers/feature-flag.serializer");
+const feature_flag_serializer_1 = require("../feature-flags/serializers/feature-flag.serializer");
 class Organizations {
     constructor(workos) {
         this.workos = workos;

package/lib/sso/interfaces/connection-type.enum.d.ts

@@ -28,6 +28,7 @@ export declare enum ConnectionType {
     PingFederateSAML = "PingFederateSAML",
     PingOneSAML = "PingOneSAML",
     RipplingSAML = "RipplingSAML",
+    SalesforceOAuth = "SalesforceOAuth",
     SalesforceSAML = "SalesforceSAML",
     ShibbolethGenericSAML = "ShibbolethGenericSAML",
     ShibbolethSAML = "ShibbolethSAML",

package/lib/sso/interfaces/connection-type.enum.js

@@ -32,6 +32,7 @@ var ConnectionType;
     ConnectionType["PingFederateSAML"] = "PingFederateSAML";
     ConnectionType["PingOneSAML"] = "PingOneSAML";
     ConnectionType["RipplingSAML"] = "RipplingSAML";
+    ConnectionType["SalesforceOAuth"] = "SalesforceOAuth";
     ConnectionType["SalesforceSAML"] = "SalesforceSAML";
     ConnectionType["ShibbolethGenericSAML"] = "ShibbolethGenericSAML";
     ConnectionType["ShibbolethSAML"] = "ShibbolethSAML";

package/lib/user-management/fixtures/list-user-feature-flags.json

@@ -0,0 +1,33 @@
+{
+    "object": "list",
+    "data": [
+        {
+            "object": "feature_flag",
+            "id": "flag_01EHQMYV6MBK39QC5PZXHY59C5",
+            "name": "Advanced Dashboard",
+            "slug": "advanced-dashboard",
+            "description": "Enable advanced dashboard features",
+            "created_at": "2024-01-01T00:00:00.000Z",
+            "updated_at": "2024-01-01T00:00:00.000Z"
+        },
+        {
+            "object": "feature_flag",
+            "id": "flag_01EHQMYV6MBK39QC5PZXHY59C6",
+            "name": "Beta Features",
+            "slug": "beta-features",
+            "description": null,
+            "created_at": "2024-01-01T00:00:00.000Z",
+            "updated_at": "2024-01-01T00:00:00.000Z"
+        },
+        {
+            "object": "feature_flag",
+            "id": "flag_01EHQMYV6MBK39QC5PZXHY59C7",
+            "name": "Premium Support",
+            "slug": "premium-support",
+            "description": "Access to premium support features",
+            "created_at": "2024-01-01T00:00:00.000Z",
+            "updated_at": "2024-01-01T00:00:00.000Z"
+        }
+    ],
+    "list_metadata": {}
+}

package/lib/user-management/fixtures/list-users.json

@@ -11,7 +11,8 @@
             "updated_at": "2023-07-18T02:07:19.911Z",
             "email_verified": true,
             "profile_picture_url": "https://example.com/profile_picture.jpg",
-            "last_sign_in_at": "2023-07-18T02:07:19.911Z"
+            "last_sign_in_at": "2023-07-18T02:07:19.911Z",
+            "locale": "en-US"
         }
     ],
     "list_metadata": {

package/lib/user-management/fixtures/user.json

@@ -9,5 +9,6 @@
     "email_verified": true,
     "profile_picture_url": "https://example.com/profile_picture.jpg",
     "last_sign_in_at": "2023-07-18T02:07:19.911Z",
+    "locale": "en-US",
     "metadata": { "key": "value" }
 }

package/lib/user-management/interfaces/authenticate-with-session-cookie.interface.d.ts

@@ -9,6 +9,7 @@ export interface AccessToken {
     sid: string;
     org_id?: string;
     role?: string;
+    roles?: string[];
     permissions?: string[];
     entitlements?: string[];
     feature_flags?: string[];
@@ -28,6 +29,7 @@ export type AuthenticateWithSessionCookieSuccessResponse = {
     sessionId: string;
     organizationId?: string;
     role?: string;
+    roles?: string[];
     permissions?: string[];
     entitlements?: string[];
     featureFlags?: string[];

package/lib/user-management/interfaces/authentication-response.interface.d.ts

@@ -1,7 +1,7 @@
 import { Impersonator, ImpersonatorResponse } from './impersonator.interface';
 import { OauthTokens, OauthTokensResponse } from './oauth-tokens.interface';
 import { User, UserResponse } from './user.interface';
-type AuthenticationMethod = 'SSO' | 'Password' | 'Passkey' | 'AppleOAuth' | 'GitHubOAuth' | 'GoogleOAuth' | 'MicrosoftOAuth' | 'MagicAuth' | 'Impersonation';
+type AuthenticationMethod = 'SSO' | 'Password' | 'Passkey' | 'AppleOAuth' | 'GitHubOAuth' | 'GoogleOAuth' | 'MicrosoftOAuth' | 'SalesforceOAuth' | 'MagicAuth' | 'Impersonation';
 export interface AuthenticationResponse {
     user: User;
     organizationId?: string;

package/lib/user-management/interfaces/create-organization-membership-options.interface.d.ts

@@ -2,9 +2,11 @@ export interface CreateOrganizationMembershipOptions {
     organizationId: string;
     userId: string;
     roleSlug?: string;
+    roleSlugs?: string[];
 }
 export interface SerializedCreateOrganizationMembershipOptions {
     organization_id: string;
     user_id: string;
     role_slug?: string;
+    role_slugs?: string[];
 }

package/lib/user-management/interfaces/identity.interface.d.ts

@@ -1,10 +1,10 @@
 export interface Identity {
     idpId: string;
     type: 'OAuth';
-    provider: 'AppleOAuth' | 'GoogleOAuth' | 'GitHubOAuth' | 'MicrosoftOAuth';
+    provider: 'AppleOAuth' | 'GoogleOAuth' | 'GitHubOAuth' | 'MicrosoftOAuth' | 'SalesforceOAuth';
 }
 export interface IdentityResponse {
     idp_id: string;
     type: 'OAuth';
-    provider: 'AppleOAuth' | 'GoogleOAuth' | 'GitHubOAuth' | 'MicrosoftOAuth';
+    provider: 'AppleOAuth' | 'GoogleOAuth' | 'GitHubOAuth' | 'MicrosoftOAuth' | 'SalesforceOAuth';
 }

package/lib/user-management/interfaces/index.d.ts

@@ -26,6 +26,7 @@ export * from './list-auth-factors-options.interface';
 export * from './list-invitations-options.interface';
 export * from './list-organization-memberships-options.interface';
 export * from './list-sessions-options.interface';
+export * from './list-user-feature-flags-options.interface';
 export * from './list-users-options.interface';
 export * from './magic-auth.interface';
 export * from './oauth-tokens.interface';

package/lib/user-management/interfaces/index.js

@@ -42,6 +42,7 @@ __exportStar(require("./list-auth-factors-options.interface"), exports);
 __exportStar(require("./list-invitations-options.interface"), exports);
 __exportStar(require("./list-organization-memberships-options.interface"), exports);
 __exportStar(require("./list-sessions-options.interface"), exports);
+__exportStar(require("./list-user-feature-flags-options.interface"), exports);
 __exportStar(require("./list-users-options.interface"), exports);
 __exportStar(require("./magic-auth.interface"), exports);
 __exportStar(require("./oauth-tokens.interface"), exports);

package/lib/user-management/interfaces/list-user-feature-flags-options.interface.d.ts

@@ -0,0 +1,4 @@
+import { PaginationOptions } from '../../common/interfaces';
+export interface ListUserFeatureFlagsOptions extends PaginationOptions {
+    userId: string;
+}

package/lib/user-management/interfaces/list-user-feature-flags-options.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/user-management/interfaces/organization-membership.interface.d.ts

@@ -10,6 +10,7 @@ export interface OrganizationMembership {
     createdAt: string;
     updatedAt: string;
     role: RoleResponse;
+    roles?: RoleResponse[];
 }
 export interface OrganizationMembershipResponse {
     object: 'organization_membership';
@@ -21,4 +22,5 @@ export interface OrganizationMembershipResponse {
     created_at: string;
     updated_at: string;
     role: RoleResponse;
+    roles?: RoleResponse[];
 }

package/lib/user-management/interfaces/update-organization-membership-options.interface.d.ts

@@ -1,6 +1,8 @@
 export interface UpdateOrganizationMembershipOptions {
     roleSlug?: string;
+    roleSlugs?: string[];
 }
 export interface SerializedUpdateOrganizationMembershipOptions {
     role_slug?: string;
+    role_slugs?: string[];
 }

package/lib/user-management/interfaces/update-user-options.interface.d.ts

@@ -9,6 +9,7 @@ export interface UpdateUserOptions {
     passwordHash?: string;
     passwordHashType?: PasswordHashType;
     externalId?: string;
+    locale?: string;
     metadata?: Record<string, string | null>;
 }
 export interface SerializedUpdateUserOptions {
@@ -20,5 +21,6 @@ export interface SerializedUpdateUserOptions {
     password_hash?: string;
     password_hash_type?: PasswordHashType;
     external_id?: string;
+    locale?: string;
     metadata?: Record<string, string | null>;
 }

package/lib/user-management/interfaces/user.interface.d.ts

@@ -7,6 +7,7 @@ export interface User {
     firstName: string | null;
     lastName: string | null;
     lastSignInAt: string | null;
+    locale: string | null;
     createdAt: string;
     updatedAt: string;
     externalId: string | null;
@@ -21,6 +22,7 @@ export interface UserResponse {
     first_name: string | null;
     last_name: string | null;
     last_sign_in_at: string | null;
+    locale: string | null;
     created_at: string;
     updated_at: string;
     external_id?: string;

package/lib/user-management/serializers/create-organization-membership-options.serializer.js

@@ -5,5 +5,6 @@ const serializeCreateOrganizationMembershipOptions = (options) => ({
     organization_id: options.organizationId,
     user_id: options.userId,
     role_slug: options.roleSlug,
+    role_slugs: options.roleSlugs,
 });
 exports.serializeCreateOrganizationMembershipOptions = serializeCreateOrganizationMembershipOptions;

package/lib/user-management/serializers/organization-membership.serializer.js

@@ -1,15 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deserializeOrganizationMembership = void 0;
-const deserializeOrganizationMembership = (organizationMembership) => ({
-    object: organizationMembership.object,
-    id: organizationMembership.id,
-    userId: organizationMembership.user_id,
-    organizationId: organizationMembership.organization_id,
-    organizationName: organizationMembership.organization_name,
-    status: organizationMembership.status,
-    createdAt: organizationMembership.created_at,
-    updatedAt: organizationMembership.updated_at,
-    role: organizationMembership.role,
-});
+const deserializeOrganizationMembership = (organizationMembership) => (Object.assign({ object: organizationMembership.object, id: organizationMembership.id, userId: organizationMembership.user_id, organizationId: organizationMembership.organization_id, organizationName: organizationMembership.organization_name, status: organizationMembership.status, createdAt: organizationMembership.created_at, updatedAt: organizationMembership.updated_at, role: organizationMembership.role }, (organizationMembership.roles && { roles: organizationMembership.roles })));
 exports.deserializeOrganizationMembership = deserializeOrganizationMembership;

package/lib/user-management/serializers/update-organization-membership-options.serializer.js

@@ -3,5 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.serializeUpdateOrganizationMembershipOptions = void 0;
 const serializeUpdateOrganizationMembershipOptions = (options) => ({
     role_slug: options.roleSlug,
+    role_slugs: options.roleSlugs,
 });
 exports.serializeUpdateOrganizationMembershipOptions = serializeUpdateOrganizationMembershipOptions;

package/lib/user-management/serializers/update-user-options.serializer.js

@@ -10,6 +10,7 @@ const serializeUpdateUserOptions = (options) => ({
     password_hash: options.passwordHash,
     password_hash_type: options.passwordHashType,
     external_id: options.externalId,
+    locale: options.locale,
     metadata: options.metadata,
 });
 exports.serializeUpdateUserOptions = serializeUpdateUserOptions;

package/lib/user-management/serializers/user.serializer.js

@@ -12,6 +12,7 @@ const deserializeUser = (user) => {
         profilePictureUrl: user.profile_picture_url,
         lastName: user.last_name,
         lastSignInAt: user.last_sign_in_at,
+        locale: user.locale,
         createdAt: user.created_at,
         updatedAt: user.updated_at,
         externalId: (_a = user.external_id) !== null && _a !== void 0 ? _a : null,

package/lib/user-management/session.js

@@ -61,12 +61,13 @@ class CookieSession {
                     reason: interfaces_1.AuthenticateWithSessionCookieFailureReason.INVALID_JWT,
                 };
             }
-            const { sid: sessionId, org_id: organizationId, role, permissions, entitlements, feature_flags: featureFlags, } = (0, jose_1.decodeJwt)(session.accessToken);
+            const { sid: sessionId, org_id: organizationId, role, roles, permissions, entitlements, feature_flags: featureFlags, } = (0, jose_1.decodeJwt)(session.accessToken);
             return {
                 authenticated: true,
                 sessionId,
                 organizationId,
                 role,
+                roles,
                 permissions,
                 entitlements,
                 featureFlags,
@@ -114,7 +115,7 @@ class CookieSession {
                     this.cookiePassword = options.cookiePassword;
                 }
                 this.sessionData = authenticationResponse.sealedSession;
-                const { sid: sessionId, org_id: organizationId, role, permissions, entitlements, feature_flags: featureFlags, } = (0, jose_1.decodeJwt)(authenticationResponse.accessToken);
+                const { sid: sessionId, org_id: organizationId, role, roles, permissions, entitlements, feature_flags: featureFlags, } = (0, jose_1.decodeJwt)(authenticationResponse.accessToken);
                 // TODO: Returning `session` here means there's some duplicated data.
                 // Slim down the return type in a future major version.
                 return {
@@ -124,6 +125,7 @@ class CookieSession {
                     sessionId,
                     organizationId,
                     role,
+                    roles,
                     permissions,
                     entitlements,
                     featureFlags,

package/lib/user-management/session.spec.js

@@ -119,7 +119,7 @@ describe('Session', () => {
                 .spyOn(jose, 'jwtVerify')
                 .mockResolvedValue({});
             const cookiePassword = 'alongcookiesecretmadefortestingsessions';
-            const accessToken = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdXRoZW50aWNhdGVkIjp0cnVlLCJpbXBlcnNvbmF0b3IiOnsiZW1haWwiOiJhZG1pbkBleGFtcGxlLmNvbSIsInJlYXNvbiI6InRlc3QifSwic2lkIjoic2Vzc2lvbl8xMjMiLCJvcmdfaWQiOiJvcmdfMTIzIiwicm9sZSI6Im1lbWJlciIsInBlcm1pc3Npb25zIjpbInBvc3RzOmNyZWF0ZSIsInBvc3RzOmRlbGV0ZSJdLCJlbnRpdGxlbWVudHMiOlsiYXVkaXQtbG9ncyJdLCJmZWF0dXJlX2ZsYWdzIjpbImRhcmstbW9kZSIsImJldGEtZmVhdHVyZXMiXSwidXNlciI6eyJvYmplY3QiOiJ1c2VyIiwiaWQiOiJ1c2VyXzAxSDVKUURWN1I3QVRFWVpERUcwVzVQUllTIiwiZW1haWwiOiJ0ZXN0QGV4YW1wbGUuY29tIn19.YVNjR8S2xGn2jAoLuEcBQNJ1_xY3OzjRE1-BK0zjfQE';
+            const accessToken = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.TNUzJYn6lzLWFFsiWiKEgIshyUs-bKJQf1VxwNr1cGI';
             const sessionData = yield (0, iron_session_1.sealData)({
                 accessToken,
                 refreshToken: 'def456',
@@ -146,6 +146,7 @@ describe('Session', () => {
                 sessionId: 'session_123',
                 organizationId: 'org_123',
                 role: 'member',
+                roles: ['member', 'admin'],
                 permissions: ['posts:create', 'posts:delete'],
                 entitlements: ['audit-logs'],
                 featureFlags: ['dark-mode', 'beta-features'],
@@ -173,7 +174,7 @@ describe('Session', () => {
         }));
         describe('when the session data is valid', () => {
             it('returns a successful response with a sealed and unsealed session', () => __awaiter(void 0, void 0, void 0, function* () {
-                const accessToken = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.ewogICJzdWIiOiAiMTIzNDU2Nzg5MCIsCiAgIm5hbWUiOiAiSm9obiBEb2UiLAogICJpYXQiOiAxNTE2MjM5MDIyLAogICJzaWQiOiAic2Vzc2lvbl8xMjMiLAogICJvcmdfaWQiOiAib3JnXzEyMyIsCiAgInJvbGUiOiAibWVtYmVyIiwKICAicGVybWlzc2lvbnMiOiBbInBvc3RzOmNyZWF0ZSIsICJwb3N0czpkZWxldGUiXQp9.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';
+                const accessToken = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJzaWQiOiJzZXNzaW9uXzEyMyIsIm9yZ19pZCI6Im9yZ18xMjMiLCJyb2xlIjoibWVtYmVyIiwicm9sZXMiOlsibWVtYmVyIiwiYWRtaW4iXSwicGVybWlzc2lvbnMiOlsicG9zdHM6Y3JlYXRlIiwicG9zdHM6ZGVsZXRlIl19.N5zveP149QhRR5zNvzGJPiCX098uXaN8VM1_lwsMg4A';
                 const refreshToken = 'def456';
                 (0, test_utils_1.fetchOnce)({
                     user: user_json_1.default,
@@ -216,6 +217,7 @@ describe('Session', () => {
                     entitlements: undefined,
                     permissions: ['posts:create', 'posts:delete'],
                     role: 'member',
+                    roles: ['member', 'admin'],
                     sessionId: 'session_123',
                     user: expect.objectContaining({
                         email: 'test01@example.com',

package/lib/user-management/user-management.d.ts

@@ -2,8 +2,9 @@ import { createRemoteJWKSet } from 'jose';
 import { IronSessionProvider } from '../common/iron-session/iron-session-provider';
 import { AutoPaginatable } from '../common/utils/pagination';
 import { Challenge } from '../mfa/interfaces';
+import { FeatureFlag } from '../feature-flags/interfaces/feature-flag.interface';
 import { WorkOS } from '../workos';
-import { AuthenticateWithCodeOptions, AuthenticateWithCodeAndVerifierOptions, AuthenticateWithMagicAuthOptions, AuthenticateWithPasswordOptions, AuthenticateWithRefreshTokenOptions, AuthenticateWithTotpOptions, AuthenticationResponse, CreateMagicAuthOptions, CreatePasswordResetOptions, CreateUserOptions, EmailVerification, EnrollAuthFactorOptions, ListAuthFactorsOptions, ListSessionsOptions, ListUsersOptions, MagicAuth, PasswordReset, ResetPasswordOptions, SendMagicAuthCodeOptions, SendPasswordResetEmailOptions, SendVerificationEmailOptions, Session, UpdateUserOptions, User, VerifyEmailOptions } from './interfaces';
+import { AuthenticateWithCodeOptions, AuthenticateWithCodeAndVerifierOptions, AuthenticateWithMagicAuthOptions, AuthenticateWithPasswordOptions, AuthenticateWithRefreshTokenOptions, AuthenticateWithTotpOptions, AuthenticationResponse, CreateMagicAuthOptions, CreatePasswordResetOptions, CreateUserOptions, EmailVerification, EnrollAuthFactorOptions, ListAuthFactorsOptions, ListSessionsOptions, ListUsersOptions, ListUserFeatureFlagsOptions, MagicAuth, PasswordReset, ResetPasswordOptions, SendMagicAuthCodeOptions, SendPasswordResetEmailOptions, SendVerificationEmailOptions, Session, UpdateUserOptions, User, VerifyEmailOptions } from './interfaces';
 import { AuthenticateWithEmailVerificationOptions } from './interfaces/authenticate-with-email-verification-options.interface';
 import { AuthenticateWithOrganizationSelectionOptions } from './interfaces/authenticate-with-organization-selection.interface';
 import { AuthenticateWithSessionCookieFailedResponse, AuthenticateWithSessionCookieOptions, AuthenticateWithSessionCookieSuccessResponse, SessionCookieData } from './interfaces/authenticate-with-session-cookie.interface';
@@ -91,6 +92,7 @@ export declare class UserManagement {
         authenticationChallenge: Challenge;
     }>;
     listAuthFactors(options: ListAuthFactorsOptions): Promise<AutoPaginatable<Factor>>;
+    listUserFeatureFlags(options: ListUserFeatureFlagsOptions): Promise<AutoPaginatable<FeatureFlag>>;
     listSessions(userId: string, options?: ListSessionsOptions): Promise<AutoPaginatable<Session>>;
     deleteUser(userId: string): Promise<void>;
     getUserIdentities(userId: string): Promise<Identity[]>;

package/lib/user-management/user-management.js

@@ -30,6 +30,7 @@ const oauth_exception_1 = require("../common/exceptions/oauth.exception");
 const fetch_and_deserialize_1 = require("../common/utils/fetch-and-deserialize");
 const pagination_1 = require("../common/utils/pagination");
 const serializers_1 = require("../mfa/serializers");
+const feature_flag_serializer_1 = require("../feature-flags/serializers/feature-flag.serializer");
 const authenticate_with_session_cookie_interface_1 = require("./interfaces/authenticate-with-session-cookie.interface");
 const refresh_and_seal_session_data_interface_1 = require("./interfaces/refresh-and-seal-session-data.interface");
 const revoke_session_options_interface_1 = require("./interfaces/revoke-session-options.interface");
@@ -217,12 +218,13 @@ class UserManagement {
                     reason: authenticate_with_session_cookie_interface_1.AuthenticateWithSessionCookieFailureReason.INVALID_JWT,
                 };
             }
-            const { sid: sessionId, org_id: organizationId, role, permissions, entitlements, feature_flags: featureFlags, } = (0, jose_1.decodeJwt)(session.accessToken);
+            const { sid: sessionId, org_id: organizationId, role, roles, permissions, entitlements, feature_flags: featureFlags, } = (0, jose_1.decodeJwt)(session.accessToken);
             return {
                 authenticated: true,
                 sessionId,
                 organizationId,
                 role,
+                roles,
                 user: session.user,
                 permissions,
                 entitlements,
@@ -434,6 +436,12 @@ class UserManagement {
             return new pagination_1.AutoPaginatable(yield (0, fetch_and_deserialize_1.fetchAndDeserialize)(this.workos, `/user_management/users/${userId}/auth_factors`, factor_serializer_1.deserializeFactor, restOfOptions), (params) => (0, fetch_and_deserialize_1.fetchAndDeserialize)(this.workos, `/user_management/users/${userId}/auth_factors`, factor_serializer_1.deserializeFactor, params), restOfOptions);
         });
     }
+    listUserFeatureFlags(options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { userId } = options, paginationOptions = __rest(options, ["userId"]);
+            return new pagination_1.AutoPaginatable(yield (0, fetch_and_deserialize_1.fetchAndDeserialize)(this.workos, `/user_management/users/${userId}/feature-flags`, feature_flag_serializer_1.deserializeFeatureFlag, paginationOptions), (params) => (0, fetch_and_deserialize_1.fetchAndDeserialize)(this.workos, `/user_management/users/${userId}/feature-flags`, feature_flag_serializer_1.deserializeFeatureFlag, params), paginationOptions);
+        });
+    }
     listSessions(userId, options) {
         return __awaiter(this, void 0, void 0, function* () {
             return new pagination_1.AutoPaginatable(yield (0, fetch_and_deserialize_1.fetchAndDeserialize)(this.workos, `/user_management/users/${userId}/sessions`, serializers_2.deserializeSession, options ? (0, serializers_2.serializeListSessionsOptions)(options) : undefined), (params) => (0, fetch_and_deserialize_1.fetchAndDeserialize)(this.workos, `/user_management/users/${userId}/sessions`, serializers_2.deserializeSession, params), options ? (0, serializers_2.serializeListSessionsOptions)(options) : undefined);

package/lib/user-management/user-management.spec.js

@@ -45,6 +45,7 @@ const list_factors_json_1 = __importDefault(require("./fixtures/list-factors.jso
 const list_invitations_json_1 = __importDefault(require("./fixtures/list-invitations.json"));
 const list_organization_memberships_json_1 = __importDefault(require("./fixtures/list-organization-memberships.json"));
 const list_sessions_json_1 = __importDefault(require("./fixtures/list-sessions.json"));
+const list_user_feature_flags_json_1 = __importDefault(require("./fixtures/list-user-feature-flags.json"));
 const list_users_json_1 = __importDefault(require("./fixtures/list-users.json"));
 const magic_auth_json_1 = __importDefault(require("./fixtures/magic_auth.json"));
 const organization_membership_json_1 = __importDefault(require("./fixtures/organization-membership.json"));
@@ -83,6 +84,7 @@ describe('UserManagement', () => {
                 lastName: 'User',
                 emailVerified: true,
                 lastSignInAt: '2023-07-18T02:07:19.911Z',
+                locale: 'en-US',
             });
         }));
     });
@@ -101,6 +103,7 @@ describe('UserManagement', () => {
                 lastName: 'User',
                 emailVerified: true,
                 lastSignInAt: '2023-07-18T02:07:19.911Z',
+                locale: 'en-US',
                 externalId,
             });
         }));
@@ -889,6 +892,39 @@ describe('UserManagement', () => {
                 accessToken,
             });
         }));
+        it('returns the JWT claims when provided a valid JWT with multiple roles', () => __awaiter(void 0, void 0, void 0, function* () {
+            jest
+                .spyOn(jose, 'jwtVerify')
+                .mockResolvedValue({});
+            const cookiePassword = 'alongcookiesecretmadefortestingsessions';
+            const accessToken = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdXRoZW50aWNhdGVkIjp0cnVlLCJpbXBlcnNvbmF0b3IiOnsiZW1haWwiOiJhZG1pbkBleGFtcGxlLmNvbSIsInJlYXNvbiI6InRlc3QifSwic2lkIjoic2Vzc2lvbl8xMjMiLCJvcmdfaWQiOiJvcmdfMTIzIiwicm9sZSI6ImFkbWluIiwicm9sZXMiOlsiYWRtaW4iLCJtZW1iZXIiXSwicGVybWlzc2lvbnMiOlsicG9zdHM6Y3JlYXRlIiwicG9zdHM6ZGVsZXRlIl0sImVudGl0bGVtZW50cyI6WyJhdWRpdC1sb2dzIl0sImZlYXR1cmVfZmxhZ3MiOlsiZGFyay1tb2RlIiwiYmV0YS1mZWF0dXJlcyJdLCJ1c2VyIjp7Im9iamVjdCI6InVzZXIiLCJpZCI6InVzZXJfMDFINUpRRFY3UjdBVEVZWkRFRzBXNVBSWVMiLCJlbWFpbCI6InRlc3RAZXhhbXBsZS5jb20ifX0.hsMptIB7PmbF5pxxtgTtCdUyOAhA11ZIAP-JY5zU5fE';
+            const sessionData = yield (0, iron_session_1.sealData)({
+                accessToken,
+                refreshToken: 'def456',
+                user: {
+                    object: 'user',
+                    id: 'user_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                    email: 'test@example.com',
+                },
+            }, { password: cookiePassword });
+            yield expect(workos.userManagement.authenticateWithSessionCookie({
+                sessionData,
+                cookiePassword,
+            })).resolves.toEqual({
+                authenticated: true,
+                sessionId: 'session_123',
+                organizationId: 'org_123',
+                role: 'admin',
+                roles: ['admin', 'member'],
+                permissions: ['posts:create', 'posts:delete'],
+                entitlements: ['audit-logs'],
+                featureFlags: ['dark-mode', 'beta-features'],
+                user: expect.objectContaining({
+                    email: 'test@example.com',
+                }),
+                accessToken,
+            });
+        }));
     });
     describe('refreshAndSealSessionData', () => {
         it('throws an error when the cookie password is undefined', () => __awaiter(void 0, void 0, void 0, function* () {
@@ -1208,6 +1244,21 @@ describe('UserManagement', () => {
                 metadata: {},
             });
         }));
+        it('updates user locale', () => __awaiter(void 0, void 0, void 0, function* () {
+            (0, test_utils_1.fetchOnce)(user_json_1.default);
+            const resp = yield workos.userManagement.updateUser({
+                userId,
+                locale: 'en-US',
+            });
+            expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/users/${userId}`);
+            expect((0, test_utils_1.fetchBody)()).toEqual({
+                locale: 'en-US',
+            });
+            expect(resp).toMatchObject({
+                id: userId,
+                locale: 'en-US',
+            });
+        }));
     });
     describe('enrollAuthFactor', () => {
         it('sends an enrollAuthFactor request', () => __awaiter(void 0, void 0, void 0, function* () {
@@ -1298,6 +1349,90 @@ describe('UserManagement', () => {
             });
         }));
     });
+    describe('listUserFeatureFlags', () => {
+        it('returns feature flags for the user', () => __awaiter(void 0, void 0, void 0, function* () {
+            (0, test_utils_1.fetchOnce)(list_user_feature_flags_json_1.default);
+            const { data, object, listMetadata } = yield workos.userManagement.listUserFeatureFlags({ userId });
+            expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/users/${userId}/feature-flags`);
+            expect(object).toEqual('list');
+            expect(listMetadata).toEqual({});
+            expect(data).toHaveLength(3);
+            expect(data).toEqual([
+                {
+                    object: 'feature_flag',
+                    id: 'flag_01EHQMYV6MBK39QC5PZXHY59C5',
+                    name: 'Advanced Dashboard',
+                    slug: 'advanced-dashboard',
+                    description: 'Enable advanced dashboard features',
+                    createdAt: '2024-01-01T00:00:00.000Z',
+                    updatedAt: '2024-01-01T00:00:00.000Z',
+                },
+                {
+                    object: 'feature_flag',
+                    id: 'flag_01EHQMYV6MBK39QC5PZXHY59C6',
+                    name: 'Beta Features',
+                    slug: 'beta-features',
+                    description: null,
+                    createdAt: '2024-01-01T00:00:00.000Z',
+                    updatedAt: '2024-01-01T00:00:00.000Z',
+                },
+                {
+                    object: 'feature_flag',
+                    id: 'flag_01EHQMYV6MBK39QC5PZXHY59C7',
+                    name: 'Premium Support',
+                    slug: 'premium-support',
+                    description: 'Access to premium support features',
+                    createdAt: '2024-01-01T00:00:00.000Z',
+                    updatedAt: '2024-01-01T00:00:00.000Z',
+                },
+            ]);
+        }));
+        describe('with the before option', () => {
+            it('forms the proper request to the API', () => __awaiter(void 0, void 0, void 0, function* () {
+                (0, test_utils_1.fetchOnce)(list_user_feature_flags_json_1.default);
+                const { data } = yield workos.userManagement.listUserFeatureFlags({
+                    userId,
+                    before: 'flag_before_id',
+                });
+                expect((0, test_utils_1.fetchSearchParams)()).toEqual({
+                    before: 'flag_before_id',
+                    order: 'desc',
+                });
+                expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/users/${userId}/feature-flags`);
+                expect(data).toHaveLength(3);
+            }));
+        });
+        describe('with the after option', () => {
+            it('forms the proper request to the API', () => __awaiter(void 0, void 0, void 0, function* () {
+                (0, test_utils_1.fetchOnce)(list_user_feature_flags_json_1.default);
+                const { data } = yield workos.userManagement.listUserFeatureFlags({
+                    userId,
+                    after: 'flag_after_id',
+                });
+                expect((0, test_utils_1.fetchSearchParams)()).toEqual({
+                    after: 'flag_after_id',
+                    order: 'desc',
+                });
+                expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/users/${userId}/feature-flags`);
+                expect(data).toHaveLength(3);
+            }));
+        });
+        describe('with the limit option', () => {
+            it('forms the proper request to the API', () => __awaiter(void 0, void 0, void 0, function* () {
+                (0, test_utils_1.fetchOnce)(list_user_feature_flags_json_1.default);
+                const { data } = yield workos.userManagement.listUserFeatureFlags({
+                    userId,
+                    limit: 3,
+                });
+                expect((0, test_utils_1.fetchSearchParams)()).toEqual({
+                    limit: '3',
+                    order: 'desc',
+                });
+                expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/users/${userId}/feature-flags`);
+                expect(data).toHaveLength(3);
+            }));
+        });
+    });
     describe('listSessions', () => {
         it('sends a listSessions request', () => __awaiter(void 0, void 0, void 0, function* () {
             (0, test_utils_1.fetchOnce)(list_sessions_json_1.default);

package/lib/workos.js

@@ -32,7 +32,7 @@ const actions_1 = require("./actions/actions");
 const vault_1 = require("./vault/vault");
 const conflict_exception_1 = require("./common/exceptions/conflict.exception");
 const parse_error_1 = require("./common/exceptions/parse-error");
-const VERSION = '7.69.2';
+const VERSION = '7.71.0';
 const DEFAULT_HOSTNAME = 'api.workos.com';
 const HEADER_AUTHORIZATION = 'Authorization';
 const HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "7.69.2",
+  "version": "7.71.0",
   "name": "@workos-inc/node",
   "author": "WorkOS",
   "description": "A Node wrapper for the WorkOS API",