@workos-inc/node 8.0.0-beta.1 → 8.0.0-beta.3

package/lib/actions/actions.cjs

@@ -29,6 +29,7 @@ class Actions {
   static {
     __name(this, "Actions");
   }
+  signatureProvider;
   constructor(cryptoProvider) {
     this.signatureProvider = new import_signature_provider.SignatureProvider(cryptoProvider);
   }

package/lib/actions/actions.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/actions/actions.ts"],"sourcesContent":["import { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { unreachable } from '../common/utils/unreachable';\nimport { ActionContext, ActionPayload } from './interfaces/action.interface';\nimport {\n  AuthenticationActionResponseData,\n  ResponsePayload,\n  UserRegistrationActionResponseData,\n} from './interfaces/response-payload.interface';\nimport { deserializeAction } from './serializers/action.serializer';\n\nexport class Actions {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  private get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  serializeType(\n    type:\n      | AuthenticationActionResponseData['type']\n      | UserRegistrationActionResponseData['type'],\n  ) {\n    switch (type) {\n      case 'authentication':\n        return 'authentication_action_response';\n      case 'user_registration':\n        return 'user_registration_action_response';\n      default:\n        return unreachable(type);\n    }\n  }\n\n  async signResponse(\n    data: AuthenticationActionResponseData | UserRegistrationActionResponseData,\n    secret: string,\n  ) {\n    let errorMessage: string | undefined;\n    const { verdict, type } = data;\n\n    if (verdict === 'Deny' && data.errorMessage) {\n      errorMessage = data.errorMessage;\n    }\n\n    const responsePayload: ResponsePayload = {\n      timestamp: Date.now(),\n      verdict,\n      ...(verdict === 'Deny' &&\n        data.errorMessage && { error_message: errorMessage }),\n    };\n\n    const response = {\n      object: this.serializeType(type),\n      payload: responsePayload,\n      signature: await this.computeSignature(\n        responsePayload.timestamp,\n        responsePayload,\n        secret,\n      ),\n    };\n\n    return response;\n  }\n\n  async constructAction({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 30000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<ActionContext> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    return deserializeAction(payload as ActionPayload);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,gCAAkC;AAClC,yBAA4B;AAO5B,IAAAA,iBAAkC;AAE3B,MAAM,QAAQ;AAAA,EAXrB,OAWqB;AAAA;AAAA;AAAA,EAGnB,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,4CAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAY,mBAAmB;AAC7B,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,cACE,MAGA;AACA,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,mBAAO,gCAAY,IAAI;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,MACA,QACA;AACA,QAAI;AACJ,UAAM,EAAE,SAAS,KAAK,IAAI;AAE1B,QAAI,YAAY,UAAU,KAAK,cAAc;AAC3C,qBAAe,KAAK;AAAA,IACtB;AAEA,UAAM,kBAAmC;AAAA,MACvC,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,MACA,GAAI,YAAY,UACd,KAAK,gBAAgB,EAAE,eAAe,aAAa;AAAA,IACvD;AAEA,UAAM,WAAW;AAAA,MACf,QAAQ,KAAK,cAAc,IAAI;AAAA,MAC/B,SAAS;AAAA,MACT,WAAW,MAAM,KAAK;AAAA,QACpB,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAK2B;AACzB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,eAAO,kCAAkB,OAAwB;AAAA,EACnD;AACF;","names":["import_action"]}
+{"version":3,"sources":["../../src/actions/actions.ts"],"sourcesContent":["import { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { unreachable } from '../common/utils/unreachable';\nimport { ActionContext, ActionPayload } from './interfaces/action.interface';\nimport {\n  AuthenticationActionResponseData,\n  ResponsePayload,\n  UserRegistrationActionResponseData,\n} from './interfaces/response-payload.interface';\nimport { deserializeAction } from './serializers/action.serializer';\n\nexport class Actions {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  private get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  serializeType(\n    type:\n      | AuthenticationActionResponseData['type']\n      | UserRegistrationActionResponseData['type'],\n  ) {\n    switch (type) {\n      case 'authentication':\n        return 'authentication_action_response';\n      case 'user_registration':\n        return 'user_registration_action_response';\n      default:\n        return unreachable(type);\n    }\n  }\n\n  async signResponse(\n    data: AuthenticationActionResponseData | UserRegistrationActionResponseData,\n    secret: string,\n  ) {\n    let errorMessage: string | undefined;\n    const { verdict, type } = data;\n\n    if (verdict === 'Deny' && data.errorMessage) {\n      errorMessage = data.errorMessage;\n    }\n\n    const responsePayload: ResponsePayload = {\n      timestamp: Date.now(),\n      verdict,\n      ...(verdict === 'Deny' &&\n        data.errorMessage && { error_message: errorMessage }),\n    };\n\n    const response = {\n      object: this.serializeType(type),\n      payload: responsePayload,\n      signature: await this.computeSignature(\n        responsePayload.timestamp,\n        responsePayload,\n        secret,\n      ),\n    };\n\n    return response;\n  }\n\n  async constructAction({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 30000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<ActionContext> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    return deserializeAction(payload as ActionPayload);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,gCAAkC;AAClC,yBAA4B;AAO5B,IAAAA,iBAAkC;AAE3B,MAAM,QAAQ;AAAA,EAXrB,OAWqB;AAAA;AAAA;AAAA,EACX;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,4CAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAY,mBAAmB;AAC7B,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,cACE,MAGA;AACA,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,mBAAO,gCAAY,IAAI;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,MACA,QACA;AACA,QAAI;AACJ,UAAM,EAAE,SAAS,KAAK,IAAI;AAE1B,QAAI,YAAY,UAAU,KAAK,cAAc;AAC3C,qBAAe,KAAK;AAAA,IACtB;AAEA,UAAM,kBAAmC;AAAA,MACvC,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,MACA,GAAI,YAAY,UACd,KAAK,gBAAgB,EAAE,eAAe,aAAa;AAAA,IACvD;AAEA,UAAM,WAAW;AAAA,MACf,QAAQ,KAAK,cAAc,IAAI;AAAA,MAC/B,SAAS;AAAA,MACT,WAAW,MAAM,KAAK;AAAA,QACpB,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAK2B;AACzB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,eAAO,kCAAkB,OAAwB;AAAA,EACnD;AACF;","names":["import_action"]}

package/lib/actions/actions.d.ts

@@ -1,14 +1,7 @@
-import { CryptoProvider } from '../common/crypto/crypto-provider.js';
-import { ActionContext } from './interfaces/action.interface.js';
-import { AuthenticationActionResponseData, UserRegistrationActionResponseData, ResponsePayload } from './interfaces/response-payload.interface.js';
-import '../user-management/interfaces/user.interface.js';
-import '../user-management/interfaces/invitation.interface.js';
-import '../user-management/interfaces/organization-membership.interface.js';
-import '../roles/interfaces/role.interface.js';
-import '../organizations/interfaces/organization.interface.js';
-import '../organization-domains/interfaces/organization-domain.interface.js';
-
-declare class Actions {
+import { CryptoProvider } from '../common/crypto/crypto-provider';
+import { ActionContext } from './interfaces/action.interface';
+import { AuthenticationActionResponseData, ResponsePayload, UserRegistrationActionResponseData } from './interfaces/response-payload.interface';
+export declare class Actions {
     private signatureProvider;
     constructor(cryptoProvider: CryptoProvider);
     private get computeSignature();
@@ -16,7 +9,7 @@ declare class Actions {
         payload: any;
         sigHeader: string;
         secret: string;
-        tolerance?: number;
+        tolerance?: number | undefined;
     }) => Promise<boolean>;
     serializeType(type: AuthenticationActionResponseData['type'] | UserRegistrationActionResponseData['type']): "authentication_action_response" | "user_registration_action_response";
     signResponse(data: AuthenticationActionResponseData | UserRegistrationActionResponseData, secret: string): Promise<{
@@ -31,5 +24,3 @@ declare class Actions {
         tolerance?: number;
     }): Promise<ActionContext>;
 }
-
-export { Actions };

package/lib/actions/actions.js

@@ -1,65 +1,61 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-import { SignatureProvider } from "../common/crypto/signature-provider";
-import { unreachable } from "../common/utils/unreachable";
-import { deserializeAction } from "./serializers/action.serializer";
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Actions = void 0;
+const signature_provider_1 = require("../common/crypto/signature-provider");
+const unreachable_1 = require("../common/utils/unreachable");
+const action_serializer_1 = require("./serializers/action.serializer");
 class Actions {
-  static {
-    __name(this, "Actions");
-  }
-  constructor(cryptoProvider) {
-    this.signatureProvider = new SignatureProvider(cryptoProvider);
-  }
-  get computeSignature() {
-    return this.signatureProvider.computeSignature.bind(this.signatureProvider);
-  }
-  get verifyHeader() {
-    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);
-  }
-  serializeType(type) {
-    switch (type) {
-      case "authentication":
-        return "authentication_action_response";
-      case "user_registration":
-        return "user_registration_action_response";
-      default:
-        return unreachable(type);
+    constructor(cryptoProvider) {
+        this.signatureProvider = new signature_provider_1.SignatureProvider(cryptoProvider);
+    }
+    get computeSignature() {
+        return this.signatureProvider.computeSignature.bind(this.signatureProvider);
+    }
+    get verifyHeader() {
+        return this.signatureProvider.verifyHeader.bind(this.signatureProvider);
     }
-  }
-  async signResponse(data, secret) {
-    let errorMessage;
-    const { verdict, type } = data;
-    if (verdict === "Deny" && data.errorMessage) {
-      errorMessage = data.errorMessage;
+    serializeType(type) {
+        switch (type) {
+            case 'authentication':
+                return 'authentication_action_response';
+            case 'user_registration':
+                return 'user_registration_action_response';
+            default:
+                return (0, unreachable_1.unreachable)(type);
+        }
+    }
+    signResponse(data, secret) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let errorMessage;
+            const { verdict, type } = data;
+            if (verdict === 'Deny' && data.errorMessage) {
+                errorMessage = data.errorMessage;
+            }
+            const responsePayload = Object.assign({ timestamp: Date.now(), verdict }, (verdict === 'Deny' &&
+                data.errorMessage && { error_message: errorMessage }));
+            const response = {
+                object: this.serializeType(type),
+                payload: responsePayload,
+                signature: yield this.computeSignature(responsePayload.timestamp, responsePayload, secret),
+            };
+            return response;
+        });
+    }
+    constructAction({ payload, sigHeader, secret, tolerance = 30000, }) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const options = { payload, sigHeader, secret, tolerance };
+            yield this.verifyHeader(options);
+            return (0, action_serializer_1.deserializeAction)(payload);
+        });
     }
-    const responsePayload = {
-      timestamp: Date.now(),
-      verdict,
-      ...verdict === "Deny" && data.errorMessage && { error_message: errorMessage }
-    };
-    const response = {
-      object: this.serializeType(type),
-      payload: responsePayload,
-      signature: await this.computeSignature(
-        responsePayload.timestamp,
-        responsePayload,
-        secret
-      )
-    };
-    return response;
-  }
-  async constructAction({
-    payload,
-    sigHeader,
-    secret,
-    tolerance = 3e4
-  }) {
-    const options = { payload, sigHeader, secret, tolerance };
-    await this.verifyHeader(options);
-    return deserializeAction(payload);
-  }
 }
-export {
-  Actions
-};
-//# sourceMappingURL=actions.js.map
+exports.Actions = Actions;

package/lib/actions/actions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/actions/actions.ts"],"sourcesContent":["import { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { unreachable } from '../common/utils/unreachable';\nimport { ActionContext, ActionPayload } from './interfaces/action.interface';\nimport {\n  AuthenticationActionResponseData,\n  ResponsePayload,\n  UserRegistrationActionResponseData,\n} from './interfaces/response-payload.interface';\nimport { deserializeAction } from './serializers/action.serializer';\n\nexport class Actions {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  private get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  serializeType(\n    type:\n      | AuthenticationActionResponseData['type']\n      | UserRegistrationActionResponseData['type'],\n  ) {\n    switch (type) {\n      case 'authentication':\n        return 'authentication_action_response';\n      case 'user_registration':\n        return 'user_registration_action_response';\n      default:\n        return unreachable(type);\n    }\n  }\n\n  async signResponse(\n    data: AuthenticationActionResponseData | UserRegistrationActionResponseData,\n    secret: string,\n  ) {\n    let errorMessage: string | undefined;\n    const { verdict, type } = data;\n\n    if (verdict === 'Deny' && data.errorMessage) {\n      errorMessage = data.errorMessage;\n    }\n\n    const responsePayload: ResponsePayload = {\n      timestamp: Date.now(),\n      verdict,\n      ...(verdict === 'Deny' &&\n        data.errorMessage && { error_message: errorMessage }),\n    };\n\n    const response = {\n      object: this.serializeType(type),\n      payload: responsePayload,\n      signature: await this.computeSignature(\n        responsePayload.timestamp,\n        responsePayload,\n        secret,\n      ),\n    };\n\n    return response;\n  }\n\n  async constructAction({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 30000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<ActionContext> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    return deserializeAction(payload as ActionPayload);\n  }\n}\n"],"mappings":";;AACA,SAAS,yBAAyB;AAClC,SAAS,mBAAmB;AAO5B,SAAS,yBAAyB;AAE3B,MAAM,QAAQ;AAAA,EAXrB,OAWqB;AAAA;AAAA;AAAA,EAGnB,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,kBAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAY,mBAAmB;AAC7B,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,cACE,MAGA;AACA,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO,YAAY,IAAI;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,MACA,QACA;AACA,QAAI;AACJ,UAAM,EAAE,SAAS,KAAK,IAAI;AAE1B,QAAI,YAAY,UAAU,KAAK,cAAc;AAC3C,qBAAe,KAAK;AAAA,IACtB;AAEA,UAAM,kBAAmC;AAAA,MACvC,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,MACA,GAAI,YAAY,UACd,KAAK,gBAAgB,EAAE,eAAe,aAAa;AAAA,IACvD;AAEA,UAAM,WAAW;AAAA,MACf,QAAQ,KAAK,cAAc,IAAI;AAAA,MAC/B,SAAS;AAAA,MACT,WAAW,MAAM,KAAK;AAAA,QACpB,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAK2B;AACzB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,WAAO,kBAAkB,OAAwB;AAAA,EACnD;AACF;","names":[]}
+{"version":3,"sources":["../../src/actions/actions.ts"],"sourcesContent":["import { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { unreachable } from '../common/utils/unreachable';\nimport { ActionContext, ActionPayload } from './interfaces/action.interface';\nimport {\n  AuthenticationActionResponseData,\n  ResponsePayload,\n  UserRegistrationActionResponseData,\n} from './interfaces/response-payload.interface';\nimport { deserializeAction } from './serializers/action.serializer';\n\nexport class Actions {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  private get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  serializeType(\n    type:\n      | AuthenticationActionResponseData['type']\n      | UserRegistrationActionResponseData['type'],\n  ) {\n    switch (type) {\n      case 'authentication':\n        return 'authentication_action_response';\n      case 'user_registration':\n        return 'user_registration_action_response';\n      default:\n        return unreachable(type);\n    }\n  }\n\n  async signResponse(\n    data: AuthenticationActionResponseData | UserRegistrationActionResponseData,\n    secret: string,\n  ) {\n    let errorMessage: string | undefined;\n    const { verdict, type } = data;\n\n    if (verdict === 'Deny' && data.errorMessage) {\n      errorMessage = data.errorMessage;\n    }\n\n    const responsePayload: ResponsePayload = {\n      timestamp: Date.now(),\n      verdict,\n      ...(verdict === 'Deny' &&\n        data.errorMessage && { error_message: errorMessage }),\n    };\n\n    const response = {\n      object: this.serializeType(type),\n      payload: responsePayload,\n      signature: await this.computeSignature(\n        responsePayload.timestamp,\n        responsePayload,\n        secret,\n      ),\n    };\n\n    return response;\n  }\n\n  async constructAction({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 30000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<ActionContext> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    return deserializeAction(payload as ActionPayload);\n  }\n}\n"],"mappings":";;AACA,SAAS,yBAAyB;AAClC,SAAS,mBAAmB;AAO5B,SAAS,yBAAyB;AAE3B,MAAM,QAAQ;AAAA,EAXrB,OAWqB;AAAA;AAAA;AAAA,EACX;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,kBAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAY,mBAAmB;AAC7B,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,cACE,MAGA;AACA,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO,YAAY,IAAI;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,MACA,QACA;AACA,QAAI;AACJ,UAAM,EAAE,SAAS,KAAK,IAAI;AAE1B,QAAI,YAAY,UAAU,KAAK,cAAc;AAC3C,qBAAe,KAAK;AAAA,IACtB;AAEA,UAAM,kBAAmC;AAAA,MACvC,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,MACA,GAAI,YAAY,UACd,KAAK,gBAAgB,EAAE,eAAe,aAAa;AAAA,IACvD;AAEA,UAAM,WAAW;AAAA,MACf,QAAQ,KAAK,cAAc,IAAI;AAAA,MAC/B,SAAS;AAAA,MACT,WAAW,MAAM,KAAK;AAAA,QACpB,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAK2B;AACzB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,WAAO,kBAAkB,OAAwB;AAAA,EACnD;AACF;","names":[]}

package/lib/actions/actions.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/actions/actions.spec.js

@@ -0,0 +1,171 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const crypto_1 = __importDefault(require("crypto"));
+const workos_1 = require("../workos");
+const authentication_action_context_json_1 = __importDefault(require("./fixtures/authentication-action-context.json"));
+const user_registration_action_context_json_1 = __importDefault(require("./fixtures/user-registration-action-context.json"));
+const node_crypto_provider_1 = require("../common/crypto/node-crypto-provider");
+const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+describe('Actions', () => {
+    let secret;
+    beforeEach(() => {
+        secret = 'secret';
+    });
+    const makeSigHeader = (payload, secret) => {
+        const timestamp = Date.now() * 1000;
+        const unhashedString = `${timestamp}.${JSON.stringify(payload)}`;
+        const signatureHash = crypto_1.default
+            .createHmac('sha256', secret)
+            .update(unhashedString)
+            .digest()
+            .toString('hex');
+        return `t=${timestamp}, v1=${signatureHash}`;
+    };
+    describe('signResponse', () => {
+        describe('type: authentication', () => {
+            it('returns a signed response', () => __awaiter(void 0, void 0, void 0, function* () {
+                const nodeCryptoProvider = new node_crypto_provider_1.NodeCryptoProvider();
+                const response = yield workos.actions.signResponse({
+                    type: 'authentication',
+                    verdict: 'Allow',
+                }, secret);
+                const signedPayload = `${response.payload.timestamp}.${JSON.stringify(response.payload)}`;
+                const expectedSig = yield nodeCryptoProvider.computeHMACSignatureAsync(signedPayload, secret);
+                expect(response.object).toEqual('authentication_action_response');
+                expect(response.payload.verdict).toEqual('Allow');
+                expect(response.payload.timestamp).toBeGreaterThan(0);
+                expect(response.signature).toEqual(expectedSig);
+            }));
+        });
+        describe('type: user_registration', () => {
+            it('returns a signed response', () => __awaiter(void 0, void 0, void 0, function* () {
+                const nodeCryptoProvider = new node_crypto_provider_1.NodeCryptoProvider();
+                const response = yield workos.actions.signResponse({
+                    type: 'user_registration',
+                    verdict: 'Deny',
+                    errorMessage: 'User already exists',
+                }, secret);
+                const signedPayload = `${response.payload.timestamp}.${JSON.stringify(response.payload)}`;
+                const expectedSig = yield nodeCryptoProvider.computeHMACSignatureAsync(signedPayload, secret);
+                expect(response.object).toEqual('user_registration_action_response');
+                expect(response.payload.verdict).toEqual('Deny');
+                expect(response.payload.timestamp).toBeGreaterThan(0);
+                expect(response.signature).toEqual(expectedSig);
+            }));
+        });
+    });
+    describe('verifyHeader', () => {
+        it('verifies the header', () => __awaiter(void 0, void 0, void 0, function* () {
+            yield expect(workos.actions.verifyHeader({
+                payload: authentication_action_context_json_1.default,
+                sigHeader: makeSigHeader(authentication_action_context_json_1.default, secret),
+                secret,
+            })).resolves.not.toThrow();
+        }));
+        it('throws when the header is invalid', () => __awaiter(void 0, void 0, void 0, function* () {
+            yield expect(workos.actions.verifyHeader({
+                payload: authentication_action_context_json_1.default,
+                sigHeader: 't=123, v1=123',
+                secret,
+            })).rejects.toThrow();
+        }));
+    });
+    describe('constructAction', () => {
+        it('returns an authentication action', () => __awaiter(void 0, void 0, void 0, function* () {
+            const payload = authentication_action_context_json_1.default;
+            const sigHeader = makeSigHeader(payload, secret);
+            const action = yield workos.actions.constructAction({
+                payload,
+                sigHeader,
+                secret,
+            });
+            expect(action).toEqual({
+                id: '01JATCMZJY26PQ59XT9BNT0FNN',
+                user: {
+                    object: 'user',
+                    id: '01JATCHZVEC5EPANDPEZVM68Y9',
+                    email: 'jane@foocorp.com',
+                    firstName: 'Jane',
+                    lastName: 'Doe',
+                    emailVerified: true,
+                    profilePictureUrl: 'https://example.com/jane.jpg',
+                    createdAt: '2024-10-22T17:12:50.746Z',
+                    updatedAt: '2024-10-22T17:12:50.746Z',
+                    externalId: null,
+                    metadata: {},
+                },
+                ipAddress: '50.141.123.10',
+                userAgent: 'Mozilla/5.0',
+                deviceFingerprint: 'notafingerprint',
+                issuer: 'test',
+                object: 'authentication_action_context',
+                organization: {
+                    object: 'organization',
+                    id: '01JATCMZJY26PQ59XT9BNT0FNN',
+                    name: 'Foo Corp',
+                    allowProfilesOutsideOrganization: false,
+                    domains: [],
+                    createdAt: '2024-10-22T17:12:50.746Z',
+                    updatedAt: '2024-10-22T17:12:50.746Z',
+                    externalId: null,
+                    metadata: {},
+                },
+                organizationMembership: {
+                    object: 'organization_membership',
+                    id: '01JATCNVYCHT1SZGENR4QTXKRK',
+                    userId: '01JATCHZVEC5EPANDPEZVM68Y9',
+                    organizationId: '01JATCMZJY26PQ59XT9BNT0FNN',
+                    role: {
+                        slug: 'member',
+                    },
+                    status: 'active',
+                    createdAt: '2024-10-22T17:12:50.746Z',
+                    updatedAt: '2024-10-22T17:12:50.746Z',
+                },
+            });
+        }));
+        it('returns a user registration action', () => __awaiter(void 0, void 0, void 0, function* () {
+            const payload = user_registration_action_context_json_1.default;
+            const sigHeader = makeSigHeader(payload, secret);
+            const action = yield workos.actions.constructAction({
+                payload,
+                sigHeader,
+                secret,
+            });
+            expect(action).toEqual({
+                id: '01JATCMZJY26PQ59XT9BNT0FNN',
+                object: 'user_registration_action_context',
+                userData: {
+                    object: 'user_data',
+                    email: 'jane@foocorp.com',
+                    firstName: 'Jane',
+                    lastName: 'Doe',
+                },
+                ipAddress: '50.141.123.10',
+                userAgent: 'Mozilla/5.0',
+                deviceFingerprint: 'notafingerprint',
+                invitation: expect.objectContaining({
+                    object: 'invitation',
+                    id: '01JBVZWH8HJ855YZ5BWHG1WNZN',
+                    email: 'jane@foocorp.com',
+                    expiresAt: '2024-10-22T17:12:50.746Z',
+                    createdAt: '2024-10-21T17:12:50.746Z',
+                    updatedAt: '2024-10-21T17:12:50.746Z',
+                    acceptedAt: '2024-10-22T17:13:50.746Z',
+                }),
+            });
+        }));
+    });
+});

package/lib/actions/fixtures/authentication-action-context.json

@@ -0,0 +1,41 @@
+{
+    "id": "01JATCMZJY26PQ59XT9BNT0FNN",
+    "user": {
+        "object": "user",
+        "id": "01JATCHZVEC5EPANDPEZVM68Y9",
+        "email": "jane@foocorp.com",
+        "first_name": "Jane",
+        "last_name": "Doe",
+        "email_verified": true,
+        "profile_picture_url": "https://example.com/jane.jpg",
+        "created_at": "2024-10-22T17:12:50.746Z",
+        "updated_at": "2024-10-22T17:12:50.746Z"
+    },
+    "ip_address": "50.141.123.10",
+    "user_agent": "Mozilla/5.0",
+    "device_fingerprint": "notafingerprint",
+    "issuer": "test",
+    "object": "authentication_action_context",
+    "organization": {
+        "object": "organization",
+        "id": "01JATCMZJY26PQ59XT9BNT0FNN",
+        "name": "Foo Corp",
+        "allow_profiles_outside_organization": false,
+        "domains": [],
+        "lookup_key": "my-key",
+        "created_at": "2024-10-22T17:12:50.746Z",
+        "updated_at": "2024-10-22T17:12:50.746Z"
+    },
+    "organization_membership": {
+        "object": "organization_membership",
+        "id": "01JATCNVYCHT1SZGENR4QTXKRK",
+        "user_id": "01JATCHZVEC5EPANDPEZVM68Y9",
+        "organization_id": "01JATCMZJY26PQ59XT9BNT0FNN",
+        "role": {
+            "slug": "member"
+        },
+        "status": "active",
+        "created_at": "2024-10-22T17:12:50.746Z",
+        "updated_at": "2024-10-22T17:12:50.746Z"
+    }
+}

package/lib/actions/fixtures/user-registration-action-context.json

@@ -0,0 +1,25 @@
+{
+    "id": "01JATCMZJY26PQ59XT9BNT0FNN",
+    "user_data": {
+        "object": "user_data",
+        "email": "jane@foocorp.com",
+        "first_name": "Jane",
+        "last_name": "Doe"
+    },
+    "ip_address": "50.141.123.10",
+    "user_agent": "Mozilla/5.0",
+    "device_fingerprint": "notafingerprint",
+    "object": "user_registration_action_context",
+    "invitation": {
+        "object": "invitation",
+        "id": "01JBVZWH8HJ855YZ5BWHG1WNZN",
+        "email": "jane@foocorp.com",
+        "expires_at": "2024-10-22T17:12:50.746Z",
+        "created_at": "2024-10-21T17:12:50.746Z",
+        "updated_at": "2024-10-21T17:12:50.746Z",
+        "accepted_at": "2024-10-22T17:13:50.746Z",
+        "revoked_at": null,
+        "organization_id": "01JBW46BTKAA98WZN8826XQ2YP",
+        "inviter_user_id": "01JBVZWAEPWAE3YYKBVT0AF81F"
+    }
+}

package/lib/actions/interfaces/action.interface.d.ts

@@ -1,10 +1,5 @@
-import { User, UserResponse } from '../../user-management/interfaces/user.interface.js';
-import { Invitation, InvitationResponse } from '../../user-management/interfaces/invitation.interface.js';
-import { OrganizationMembership, OrganizationMembershipResponse } from '../../user-management/interfaces/organization-membership.interface.js';
-import { Organization, OrganizationResponse } from '../../organizations/interfaces/organization.interface.js';
-import '../../roles/interfaces/role.interface.js';
-import '../../organization-domains/interfaces/organization-domain.interface.js';
-
+import { Organization, OrganizationResponse } from '../../organizations/interfaces';
+import { Invitation, InvitationResponse, OrganizationMembership, OrganizationMembershipResponse, User, UserResponse } from '../../user-management/interfaces';
 interface AuthenticationActionContext {
     id: string;
     object: 'authentication_action_context';
@@ -16,7 +11,7 @@ interface AuthenticationActionContext {
     deviceFingerprint?: string;
     issuer?: string;
 }
-interface UserData {
+export interface UserData {
     object: 'user_data';
     email: string;
     firstName: string;
@@ -31,7 +26,7 @@ interface UserRegistrationActionContext {
     userAgent?: string;
     deviceFingerprint?: string;
 }
-type ActionContext = AuthenticationActionContext | UserRegistrationActionContext;
+export type ActionContext = AuthenticationActionContext | UserRegistrationActionContext;
 interface AuthenticationActionPayload {
     id: string;
     object: 'authentication_action_context';
@@ -43,13 +38,13 @@ interface AuthenticationActionPayload {
     device_fingerprint?: string;
     issuer?: string;
 }
-interface UserDataPayload {
+export interface UserDataPayload {
     object: 'user_data';
     email: string;
     first_name: string;
     last_name: string;
 }
-interface UserRegistrationActionPayload {
+export interface UserRegistrationActionPayload {
     id: string;
     object: 'user_registration_action_context';
     user_data: UserDataPayload;
@@ -58,6 +53,5 @@ interface UserRegistrationActionPayload {
     user_agent?: string;
     device_fingerprint?: string;
 }
-type ActionPayload = AuthenticationActionPayload | UserRegistrationActionPayload;
-
-export type { ActionContext, ActionPayload, UserData, UserDataPayload, UserRegistrationActionPayload };
+export type ActionPayload = AuthenticationActionPayload | UserRegistrationActionPayload;
+export {};

package/lib/actions/interfaces/action.interface.js

@@ -1 +1,2 @@
-//# sourceMappingURL=action.interface.js.map
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/actions/interfaces/index.d.ts

@@ -1,8 +1,2 @@
-export { ActionContext, ActionPayload, UserData, UserDataPayload, UserRegistrationActionPayload } from './action.interface.js';
-export { AuthenticationActionResponseData, ResponsePayload, UserRegistrationActionResponseData } from './response-payload.interface.js';
-import '../../user-management/interfaces/user.interface.js';
-import '../../user-management/interfaces/invitation.interface.js';
-import '../../user-management/interfaces/organization-membership.interface.js';
-import '../../roles/interfaces/role.interface.js';
-import '../../organizations/interfaces/organization.interface.js';
-import '../../organization-domains/interfaces/organization-domain.interface.js';
+export * from './action.interface';
+export * from './response-payload.interface';

package/lib/actions/interfaces/index.js

@@ -1,3 +1,18 @@
-export * from "./action.interface";
-export * from "./response-payload.interface";
-//# sourceMappingURL=index.js.map
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./action.interface"), exports);
+__exportStar(require("./response-payload.interface"), exports);

package/lib/actions/interfaces/response-payload.interface.d.ts

@@ -1,4 +1,4 @@
-interface ResponsePayload {
+export interface ResponsePayload {
     timestamp: number;
     verdict?: 'Allow' | 'Deny';
     errorMessage?: string;
@@ -10,15 +10,14 @@ interface DenyResponseData {
     verdict: 'Deny';
     errorMessage?: string;
 }
-type AuthenticationActionResponseData = (AllowResponseData & {
+export type AuthenticationActionResponseData = (AllowResponseData & {
     type: 'authentication';
 }) | (DenyResponseData & {
     type: 'authentication';
 });
-type UserRegistrationActionResponseData = (AllowResponseData & {
+export type UserRegistrationActionResponseData = (AllowResponseData & {
     type: 'user_registration';
 }) | (DenyResponseData & {
     type: 'user_registration';
 });
-
-export type { AuthenticationActionResponseData, ResponsePayload, UserRegistrationActionResponseData };
+export {};

package/lib/actions/interfaces/response-payload.interface.js

@@ -1 +1,2 @@
-//# sourceMappingURL=response-payload.interface.js.map
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/actions/serializers/action.serializer.d.ts

@@ -1,11 +1,2 @@
-import { ActionPayload, ActionContext } from '../interfaces/action.interface.js';
-import '../../user-management/interfaces/user.interface.js';
-import '../../user-management/interfaces/invitation.interface.js';
-import '../../user-management/interfaces/organization-membership.interface.js';
-import '../../roles/interfaces/role.interface.js';
-import '../../organizations/interfaces/organization.interface.js';
-import '../../organization-domains/interfaces/organization-domain.interface.js';
-
-declare const deserializeAction: (actionPayload: ActionPayload) => ActionContext;
-
-export { deserializeAction };
+import { ActionContext, ActionPayload } from '../interfaces/action.interface';
+export declare const deserializeAction: (actionPayload: ActionPayload) => ActionContext;