@workos-inc/node 7.7.0 → 7.9.0

package/lib/user-management/interfaces/authenticate-with-code-options.interface.d.ts

@@ -1,5 +1,6 @@
 import { AuthenticateWithOptionsBase, SerializedAuthenticateWithOptionsBase } from './authenticate-with-options-base.interface';
 export interface AuthenticateWithCodeOptions extends AuthenticateWithOptionsBase {
+    codeVerifier?: string;
     code: string;
     invitationToken?: string;
 }
@@ -8,6 +9,7 @@ export interface AuthenticateUserWithCodeCredentials {
 }
 export interface SerializedAuthenticateWithCodeOptions extends SerializedAuthenticateWithOptionsBase {
     grant_type: 'authorization_code';
+    code_verifier?: string;
     code: string;
     invitation_token?: string;
 }

package/lib/user-management/interfaces/authorization-url-options.interface.d.ts

@@ -1,5 +1,7 @@
 export interface AuthorizationURLOptions {
     clientId: string;
+    codeChallenge?: string;
+    codeChallengeMethod?: 'S256';
     connectionId?: string;
     organizationId?: string;
     domainHint?: string;

package/lib/user-management/serializers/authenticate-with-code-options.serializer.js

@@ -6,6 +6,7 @@ const serializeAuthenticateWithCodeOptions = (options) => ({
     client_id: options.clientId,
     client_secret: options.clientSecret,
     code: options.code,
+    code_verifier: options.codeVerifier,
     invitation_token: options.invitationToken,
     ip_address: options.ipAddress,
     user_agent: options.userAgent,

package/lib/user-management/user-management.d.ts

@@ -64,11 +64,12 @@ export declare class UserManagement {
     deactivateOrganizationMembership(organizationMembershipId: string): Promise<OrganizationMembership>;
     reactivateOrganizationMembership(organizationMembershipId: string): Promise<OrganizationMembership>;
     getInvitation(invitationId: string): Promise<Invitation>;
+    findInvitationByToken(invitationToken: string): Promise<Invitation>;
     listInvitations(options: ListInvitationsOptions): Promise<AutoPaginatable<Invitation>>;
     sendInvitation(payload: SendInvitationOptions): Promise<Invitation>;
     revokeInvitation(invitationId: string): Promise<Invitation>;
     revokeSession(payload: RevokeSessionOptions): Promise<void>;
-    getAuthorizationUrl({ connectionId, clientId, domainHint, loginHint, organizationId, provider, redirectUri, state, screenHint, }: AuthorizationURLOptions): string;
+    getAuthorizationUrl({ connectionId, codeChallenge, codeChallengeMethod, clientId, domainHint, loginHint, organizationId, provider, redirectUri, state, screenHint, }: AuthorizationURLOptions): string;
     getLogoutUrl({ sessionId }: {
         sessionId: string;
     }): string;

package/lib/user-management/user-management.js

@@ -241,6 +241,12 @@ class UserManagement {
             return (0, invitation_serializer_1.deserializeInvitation)(data);
         });
     }
+    findInvitationByToken(invitationToken) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data } = yield this.workos.get(`/user_management/invitations/by_token/${invitationToken}`);
+            return (0, invitation_serializer_1.deserializeInvitation)(data);
+        });
+    }
     listInvitations(options) {
         return __awaiter(this, void 0, void 0, function* () {
             return new pagination_1.AutoPaginatable(yield (0, fetch_and_deserialize_1.fetchAndDeserialize)(this.workos, '/user_management/invitations', invitation_serializer_1.deserializeInvitation, options ? (0, list_invitations_options_serializer_1.serializeListInvitationsOptions)(options) : undefined), (params) => (0, fetch_and_deserialize_1.fetchAndDeserialize)(this.workos, '/user_management/invitations', invitation_serializer_1.deserializeInvitation, params), options ? (0, list_invitations_options_serializer_1.serializeListInvitationsOptions)(options) : undefined);
@@ -263,7 +269,7 @@ class UserManagement {
             yield this.workos.post('/user_management/sessions/revoke', (0, revoke_session_options_interface_1.serializeRevokeSessionOptions)(payload));
         });
     }
-    getAuthorizationUrl({ connectionId, clientId, domainHint, loginHint, organizationId, provider, redirectUri, state, screenHint, }) {
+    getAuthorizationUrl({ connectionId, codeChallenge, codeChallengeMethod, clientId, domainHint, loginHint, organizationId, provider, redirectUri, state, screenHint, }) {
         if (!provider && !connectionId && !organizationId) {
             throw new TypeError(`Incomplete arguments. Need to specify either a 'connectionId', 'organizationId', or 'provider'.`);
         }
@@ -272,6 +278,8 @@ class UserManagement {
         }
         const query = toQueryString({
             connection_id: connectionId,
+            code_challenge: codeChallenge,
+            code_challenge_method: codeChallengeMethod,
             organization_id: organizationId,
             domain_hint: domainHint,
             login_hint: loginHint,

package/lib/user-management/user-management.spec.js

@@ -31,6 +31,7 @@ const userId = 'user_01H5JQDV7R7ATEYZDEG0W5PRYS';
 const organizationMembershipId = 'om_01H5JQDV7R7ATEYZDEG0W5PRYS';
 const emailVerificationId = 'email_verification_01H5JQDV7R7ATEYZDEG0W5PRYS';
 const invitationId = 'invitation_01H5JQDV7R7ATEYZDEG0W5PRYS';
+const invitationToken = 'Z1uX3RbwcIl5fIGJJJCXXisdI';
 const magicAuthId = 'magic_auth_01H5JQDV7R7ATEYZDEG0W5PRYS';
 const passwordResetId = 'password_reset_01H5JQDV7R7ATEYZDEG0W5PRYS';
 describe('UserManagement', () => {
@@ -162,6 +163,27 @@ describe('UserManagement', () => {
                 },
             });
         }));
+        it('sends a token authentication request when including the code_verifier', () => __awaiter(void 0, void 0, void 0, function* () {
+            (0, test_utils_1.fetchOnce)({ user: user_json_1.default });
+            const resp = yield workos.userManagement.authenticateWithCode({
+                clientId: 'proj_whatever',
+                code: 'or this',
+                codeVerifier: 'code_verifier_value',
+            });
+            expect((0, test_utils_1.fetchURL)()).toContain('/user_management/authenticate');
+            expect((0, test_utils_1.fetchBody)()).toEqual({
+                client_id: 'proj_whatever',
+                client_secret: 'sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU',
+                code: 'or this',
+                code_verifier: 'code_verifier_value',
+                grant_type: 'authorization_code',
+            });
+            expect(resp).toMatchObject({
+                user: {
+                    email: 'test01@example.com',
+                },
+            });
+        }));
         it('deserializes authentication_method', () => __awaiter(void 0, void 0, void 0, function* () {
             (0, test_utils_1.fetchOnce)({
                 user: user_json_1.default,
@@ -742,7 +764,21 @@ describe('UserManagement', () => {
             (0, test_utils_1.fetchOnce)(invitation_json_1.default);
             const invitation = yield workos.userManagement.getInvitation(invitationId);
             expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/invitations/${invitationId}`);
-            expect(invitation).toMatchObject({});
+            expect(invitation).toMatchObject({
+                object: 'invitation',
+                id: invitationId,
+            });
+        }));
+    });
+    describe('findInvitationByToken', () => {
+        it('sends a find invitation by token request', () => __awaiter(void 0, void 0, void 0, function* () {
+            (0, test_utils_1.fetchOnce)(invitation_json_1.default);
+            const invitation = yield workos.userManagement.findInvitationByToken(invitationToken);
+            expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/invitations/by_token/${invitationToken}`);
+            expect(invitation).toMatchObject({
+                object: 'invitation',
+                token: invitationToken,
+            });
         }));
     });
     describe('listInvitations', () => {
@@ -853,6 +889,19 @@ describe('UserManagement', () => {
                 expect(url).toMatchSnapshot();
             });
         });
+        describe('with a code_challenge and code_challenge_method', () => {
+            it('generates an authorize url', () => {
+                const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+                const url = workos.userManagement.getAuthorizationUrl({
+                    provider: 'authkit',
+                    clientId: 'proj_123',
+                    redirectUri: 'example.com/auth/workos/callback',
+                    codeChallenge: 'code_challenge_value',
+                    codeChallengeMethod: 'S256',
+                });
+                expect(url).toMatchSnapshot();
+            });
+        });
         describe('with no custom api hostname', () => {
             it('generates an authorize url with the default api hostname', () => {
                 const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');

package/lib/workos.js

@@ -24,7 +24,7 @@ const audit_logs_1 = require("./audit-logs/audit-logs");
 const user_management_1 = require("./user-management/user-management");
 const bad_request_exception_1 = require("./common/exceptions/bad-request.exception");
 const fetch_client_1 = require("./common/utils/fetch-client");
-const VERSION = '7.7.0';
+const VERSION = '7.9.0';
 const DEFAULT_HOSTNAME = 'api.workos.com';
 class WorkOS {
     constructor(key, options = {}) {

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "7.7.0",
+  "version": "7.9.0",
   "name": "@workos-inc/node",
   "author": "WorkOS",
   "description": "A Node wrapper for the WorkOS API",