@workos-inc/node 7.75.0 → 7.76.0

package/lib/audit-logs/audit-logs.js

@@ -10,7 +10,6 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuditLogs = void 0;
-const crypto_1 = require("crypto");
 const serializers_1 = require("./serializers");
 class AuditLogs {
     constructor(workos) {
@@ -19,7 +18,8 @@ class AuditLogs {
     createEvent(organization, event, options = {}) {
         return __awaiter(this, void 0, void 0, function* () {
             // Auto-generate idempotency key if not provided
-            const optionsWithIdempotency = Object.assign(Object.assign({}, options), { idempotencyKey: options.idempotencyKey || `workos-node-${(0, crypto_1.randomUUID)()}` });
+            const optionsWithIdempotency = Object.assign(Object.assign({}, options), { idempotencyKey: options.idempotencyKey ||
+                    `workos-node-${this.workos.getCryptoProvider().randomUUID()}` });
             yield this.workos.post('/audit_logs/events', {
                 event: (0, serializers_1.serializeCreateAuditLogEventOptions)(event),
                 organization_id: organization,

package/lib/common/crypto/crypto-provider.d.ts

@@ -62,4 +62,10 @@ export declare abstract class CryptoProvider {
      * @returns A Uint8Array containing the random bytes
      */
     abstract randomBytes(length: number): Uint8Array;
+    /**
+     * Generates a random UUID v4 string.
+     *
+     * @returns A UUID v4 string in the format xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx
+     */
+    abstract randomUUID(): string;
 }

package/lib/common/crypto/crypto-provider.spec.js

@@ -54,4 +54,41 @@ describe('CryptoProvider', () => {
             expect(nodeCryptoProvider.secureCompare(signature, 'foo')).toEqual(subtleCryptoProvider.secureCompare(signature, 'foo'));
         }));
     });
+    describe('when generating UUIDs', () => {
+        const UUID_V4_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+        it('generates valid UUID v4 format for NodeCryptoProvider', () => {
+            const nodeCryptoProvider = new node_crypto_provider_1.NodeCryptoProvider();
+            const uuid = nodeCryptoProvider.randomUUID();
+            expect(uuid).toMatch(UUID_V4_REGEX);
+        });
+        it('generates valid UUID v4 format for SubtleCryptoProvider', () => {
+            const subtleCryptoProvider = new subtle_crypto_provider_1.SubtleCryptoProvider();
+            const uuid = subtleCryptoProvider.randomUUID();
+            expect(uuid).toMatch(UUID_V4_REGEX);
+        });
+        it('generates unique UUIDs', () => {
+            const nodeCryptoProvider = new node_crypto_provider_1.NodeCryptoProvider();
+            const subtleCryptoProvider = new subtle_crypto_provider_1.SubtleCryptoProvider();
+            const uuids = new Set([
+                nodeCryptoProvider.randomUUID(),
+                nodeCryptoProvider.randomUUID(),
+                subtleCryptoProvider.randomUUID(),
+                subtleCryptoProvider.randomUUID(),
+            ]);
+            expect(uuids.size).toBe(4);
+        });
+        it('SubtleCryptoProvider falls back when crypto.randomUUID is unavailable', () => {
+            const originalRandomUUID = globalThis.crypto.randomUUID;
+            // @ts-ignore - intentionally removing for test
+            delete globalThis.crypto.randomUUID;
+            try {
+                const subtleCryptoProvider = new subtle_crypto_provider_1.SubtleCryptoProvider();
+                const uuid = subtleCryptoProvider.randomUUID();
+                expect(uuid).toMatch(UUID_V4_REGEX);
+            }
+            finally {
+                globalThis.crypto.randomUUID = originalRandomUUID;
+            }
+        });
+    });
 });

package/lib/common/crypto/node-crypto-provider.d.ts

@@ -16,4 +16,5 @@ export declare class NodeCryptoProvider extends CryptoProvider {
     }>;
     decrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, tag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
     randomBytes(length: number): Uint8Array;
+    randomUUID(): string;
 }

package/lib/common/crypto/node-crypto-provider.js

@@ -105,5 +105,8 @@ class NodeCryptoProvider extends crypto_provider_1.CryptoProvider {
     randomBytes(length) {
         return new Uint8Array(crypto.randomBytes(length));
     }
+    randomUUID() {
+        return crypto.randomUUID();
+    }
 }
 exports.NodeCryptoProvider = NodeCryptoProvider;

package/lib/common/crypto/subtle-crypto-provider.d.ts

@@ -19,4 +19,5 @@ export declare class SubtleCryptoProvider extends CryptoProvider {
     }>;
     decrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, tag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
     randomBytes(length: number): Uint8Array;
+    randomUUID(): string;
 }

package/lib/common/crypto/subtle-crypto-provider.js

@@ -113,6 +113,20 @@ class SubtleCryptoProvider extends crypto_provider_1.CryptoProvider {
         crypto.getRandomValues(bytes);
         return bytes;
     }
+    randomUUID() {
+        if (typeof crypto !== 'undefined' &&
+            typeof crypto.randomUUID === 'function') {
+            return crypto.randomUUID();
+        }
+        // Fallback for environments without crypto.randomUUID
+        const bytes = this.randomBytes(16);
+        // tslint:disable-next-line:no-bitwise
+        bytes[6] = (bytes[6] & 0x0f) | 0x40; // version 4
+        // tslint:disable-next-line:no-bitwise
+        bytes[8] = (bytes[8] & 0x3f) | 0x80; // variant
+        const hex = Array.from(bytes, (b) => byteHexMapping[b]).join('');
+        return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+    }
 }
 exports.SubtleCryptoProvider = SubtleCryptoProvider;
 // Cached mapping of byte to hex representation. We do this once to avoid re-

package/lib/directory-sync/directory-sync.spec.js

@@ -120,7 +120,7 @@ describe('DirectorySync', () => {
         created_at: '2021-10-27 15:21:50.640959',
         updated_at: '2021-12-13 12:15:45.531847',
     };
-    const userWithRole = {
+    const userWithRoles = {
         object: 'directory_user',
         id: 'directory_user_456',
         customAttributes: {
@@ -145,6 +145,7 @@ describe('DirectorySync', () => {
         state: 'active',
         username: 'jonsnow',
         role: { slug: 'super_admin' },
+        roles: [{ slug: 'super_admin' }],
         createdAt: '2021-10-27 15:21:50.640959',
         updatedAt: '2021-12-13 12:15:45.531847',
     };
@@ -173,6 +174,7 @@ describe('DirectorySync', () => {
         state: 'active',
         username: 'jonsnow',
         role: { slug: 'super_admin' },
+        roles: [{ slug: 'super_admin' }],
         created_at: '2021-10-27 15:21:50.640959',
         updated_at: '2021-12-13 12:15:45.531847',
     };
@@ -409,11 +411,11 @@ describe('DirectorySync', () => {
             const subject = yield workos.directorySync.getUser('dir_usr_123');
             expect(subject).toEqual(userWithGroup);
         }));
-        describe('with a Role', () => {
+        describe('with roles', () => {
             it(`requests a Directory User`, () => __awaiter(void 0, void 0, void 0, function* () {
                 (0, test_utils_1.fetchOnce)(userWithRoleResponse);
                 const subject = yield workos.directorySync.getUser('directory_user_456');
-                expect(subject).toEqual(userWithRole);
+                expect(subject).toEqual(userWithRoles);
             }));
         });
     });

package/lib/directory-sync/interfaces/directory-user.interface.d.ts

@@ -33,6 +33,7 @@ export interface DirectoryUser<TCustomAttributes extends object = DefaultCustomA
     jobTitle: string | null;
     state: 'active' | 'inactive';
     role?: RoleResponse;
+    roles?: RoleResponse[];
     createdAt: string;
     updatedAt: string;
 }
@@ -68,6 +69,7 @@ export interface DirectoryUserResponse<TCustomAttributes extends object = Defaul
     job_title: string | null;
     state: 'active' | 'inactive';
     role?: RoleResponse;
+    roles?: RoleResponse[];
     created_at: string;
     updated_at: string;
 }

package/lib/directory-sync/serializers/directory-user.serializer.js

@@ -18,6 +18,7 @@ const deserializeDirectoryUser = (directoryUser) => ({
     jobTitle: directoryUser.job_title,
     state: directoryUser.state,
     role: directoryUser.role,
+    roles: directoryUser.roles,
     createdAt: directoryUser.created_at,
     updatedAt: directoryUser.updated_at,
 });
@@ -40,6 +41,7 @@ const deserializeUpdatedEventDirectoryUser = (directoryUser) => ({
     jobTitle: directoryUser.job_title,
     state: directoryUser.state,
     role: directoryUser.role,
+    roles: directoryUser.roles,
     createdAt: directoryUser.created_at,
     updatedAt: directoryUser.updated_at,
     previousAttributes: directoryUser.previous_attributes,

package/lib/sso/interfaces/profile.interface.d.ts

@@ -11,6 +11,7 @@ export interface Profile<CustomAttributesType extends UnknownRecord> {
     firstName?: string;
     lastName?: string;
     role?: RoleResponse;
+    roles?: RoleResponse[];
     groups?: string[];
     customAttributes?: CustomAttributesType;
     rawAttributes?: {
@@ -27,6 +28,7 @@ export interface ProfileResponse<CustomAttributesType extends UnknownRecord> {
     first_name?: string;
     last_name?: string;
     role?: RoleResponse;
+    roles?: RoleResponse[];
     groups?: string[];
     custom_attributes?: CustomAttributesType;
     raw_attributes?: {

package/lib/sso/serializers/profile.serializer.js

@@ -11,6 +11,7 @@ const deserializeProfile = (profile) => ({
     firstName: profile.first_name,
     lastName: profile.last_name,
     role: profile.role,
+    roles: profile.roles,
     groups: profile.groups,
     customAttributes: profile.custom_attributes,
     rawAttributes: profile.raw_attributes,

package/lib/sso/sso.spec.js

@@ -227,6 +227,7 @@ describe('SSO', () => {
                             role: {
                                 slug: 'admin',
                             },
+                            roles: [{ slug: 'admin' }],
                             groups: ['Admins', 'Developers'],
                             raw_attributes: {
                                 email: 'foo@test.com',
@@ -268,6 +269,7 @@ describe('SSO', () => {
                             role: {
                                 slug: 'admin',
                             },
+                            roles: [{ slug: 'admin' }],
                             raw_attributes: {
                                 email: 'foo@test.com',
                                 first_name: 'foo',
@@ -304,6 +306,7 @@ describe('SSO', () => {
                             role: {
                                 slug: 'admin',
                             },
+                            roles: [{ slug: 'admin' }],
                             groups: ['Admins', 'Developers'],
                             raw_attributes: {
                                 email: 'foo@test.com',
@@ -352,6 +355,7 @@ describe('SSO', () => {
                             role: {
                                 slug: 'admin',
                             },
+                            roles: [{ slug: 'admin' }],
                             raw_attributes: {
                                 email: 'foo@test.com',
                                 first_name: 'foo',
@@ -386,6 +390,7 @@ describe('SSO', () => {
                     role: {
                         slug: 'admin',
                     },
+                    roles: [{ slug: 'admin' }],
                     groups: ['Admins', 'Developers'],
                     raw_attributes: {
                         email: 'foo@test.com',

package/lib/workos.js

@@ -33,7 +33,7 @@ const actions_1 = require("./actions/actions");
 const vault_1 = require("./vault/vault");
 const conflict_exception_1 = require("./common/exceptions/conflict.exception");
 const parse_error_1 = require("./common/exceptions/parse-error");
-const VERSION = '7.75.0';
+const VERSION = '7.76.0';
 const DEFAULT_HOSTNAME = 'api.workos.com';
 const HEADER_AUTHORIZATION = 'Authorization';
 const HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "7.75.0",
+  "version": "7.76.0",
   "name": "@workos-inc/node",
   "author": "WorkOS",
   "description": "A Node wrapper for the WorkOS API",