@workos-inc/node 8.0.0-beta.1 → 8.0.0-beta.3

package/lib/webhooks/fixtures/webhook.json

@@ -0,0 +1,67 @@
+{
+    "id": "wh_123",
+    "data": {
+        "id": "directory_user_01FAEAJCR3ZBZ30D8BD1924TVG",
+        "state": "active",
+        "emails": [
+            {
+                "type": "work",
+                "value": "blair@foo-corp.com",
+                "primary": true
+            }
+        ],
+        "idp_id": "00u1e8mutl6wlH3lL4x7",
+        "object": "directory_user",
+        "username": "blair@foo-corp.com",
+        "last_name": "Lunchford",
+        "first_name": "Blair",
+        "job_title": "Software Engineer",
+        "directory_id": "directory_01F9M7F68PZP8QXP8G7X5QRHS7",
+        "created_at": "2021-06-25T19:07:33.155Z",
+        "updated_at": "2021-06-25T19:07:33.155Z",
+        "raw_attributes": {
+            "name": {
+                "givenName": "Blair",
+                "familyName": "Lunchford",
+                "middleName": "Elizabeth",
+                "honorificPrefix": "Ms."
+            },
+            "title": "Software Engineer",
+            "active": true,
+            "emails": [
+                {
+                    "type": "work",
+                    "value": "blair@foo-corp.com",
+                    "primary": true
+                }
+            ],
+            "groups": [],
+            "locale": "en-US",
+            "schemas": [
+                "urn:ietf:params:scim:schemas:core:2.0:User",
+                "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
+            ],
+            "userName": "blair@foo-corp.com",
+            "addresses": [
+                {
+                    "region": "CA",
+                    "primary": true,
+                    "locality": "San Francisco",
+                    "postalCode": "94016"
+                }
+            ],
+            "externalId": "00u1e8mutl6wlH3lL4x7",
+            "displayName": "Blair Lunchford",
+            "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
+                "manager": {
+                    "value": "2",
+                    "displayName": "Kate Chapman"
+                },
+                "division": "Engineering",
+                "department": "Customer Success"
+            }
+        }
+    },
+    "event": "dsync.user.created",
+    "created_at": "2021-06-25T19:07:33.155Z"
+}

package/lib/webhooks/webhooks.cjs

@@ -28,6 +28,7 @@ class Webhooks {
   static {
     __name(this, "Webhooks");
   }
+  signatureProvider;
   constructor(cryptoProvider) {
     this.signatureProvider = new import_signature_provider.SignatureProvider(cryptoProvider);
   }

package/lib/webhooks/webhooks.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/webhooks/webhooks.ts"],"sourcesContent":["import { deserializeEvent } from '../common/serializers';\nimport { Event, EventResponse } from '../common/interfaces';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\n\nexport class Webhooks {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get getTimestampAndSignatureHash() {\n    return this.signatureProvider.getTimestampAndSignatureHash.bind(\n      this.signatureProvider,\n    );\n  }\n\n  async constructEvent({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<Event> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    const webhookPayload = payload as EventResponse;\n\n    return deserializeEvent(webhookPayload);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAiC;AAEjC,gCAAkC;AAG3B,MAAM,SAAS;AAAA,EALtB,OAKsB;AAAA;AAAA;AAAA,EAGpB,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,4CAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,IAAI,mBAAmB;AACrB,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,+BAA+B;AACjC,WAAO,KAAK,kBAAkB,6BAA6B;AAAA,MACzD,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EAEA,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKmB;AACjB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,UAAM,iBAAiB;AAEvB,eAAO,qCAAiB,cAAc;AAAA,EACxC;AACF;","names":[]}
+{"version":3,"sources":["../../src/webhooks/webhooks.ts"],"sourcesContent":["import { deserializeEvent } from '../common/serializers';\nimport { Event, EventResponse } from '../common/interfaces';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\n\nexport class Webhooks {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get getTimestampAndSignatureHash() {\n    return this.signatureProvider.getTimestampAndSignatureHash.bind(\n      this.signatureProvider,\n    );\n  }\n\n  async constructEvent({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<Event> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    const webhookPayload = payload as EventResponse;\n\n    return deserializeEvent(webhookPayload);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAiC;AAEjC,gCAAkC;AAG3B,MAAM,SAAS;AAAA,EALtB,OAKsB;AAAA;AAAA;AAAA,EACZ;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,4CAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,IAAI,mBAAmB;AACrB,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,+BAA+B;AACjC,WAAO,KAAK,kBAAkB,6BAA6B;AAAA,MACzD,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EAEA,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKmB;AACjB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,UAAM,iBAAiB;AAEvB,eAAO,qCAAiB,cAAc;AAAA,EACxC;AACF;","names":[]}

package/lib/webhooks/webhooks.d.ts

@@ -1,32 +1,13 @@
-import { Event } from '../common/interfaces/event.interface.js';
-import { CryptoProvider } from '../common/crypto/crypto-provider.js';
-import '../directory-sync/interfaces/directory.interface.js';
-import '../directory-sync/interfaces/directory-group.interface.js';
-import '../directory-sync/interfaces/directory-user.interface.js';
-import '../roles/interfaces/role.interface.js';
-import '../organizations/interfaces/organization.interface.js';
-import '../organization-domains/interfaces/organization-domain.interface.js';
-import '../sso/interfaces/connection.interface.js';
-import '../sso/interfaces/connection-type.enum.js';
-import '../user-management/interfaces/user.interface.js';
-import '../user-management/interfaces/authentication-event.interface.js';
-import '../user-management/interfaces/authentication-radar-risk-detected-event.interface.js';
-import '../user-management/interfaces/email-verification.interface.js';
-import '../user-management/interfaces/invitation.interface.js';
-import '../user-management/interfaces/organization-membership.interface.js';
-import '../user-management/interfaces/magic-auth.interface.js';
-import '../user-management/interfaces/password-reset.interface.js';
-import '../user-management/interfaces/session.interface.js';
-import '../user-management/interfaces/impersonator.interface.js';
-
-declare class Webhooks {
+import { Event } from '../common/interfaces';
+import { CryptoProvider } from '../common/crypto/crypto-provider';
+export declare class Webhooks {
     private signatureProvider;
     constructor(cryptoProvider: CryptoProvider);
     get verifyHeader(): ({ payload, sigHeader, secret, tolerance, }: {
         payload: any;
         sigHeader: string;
         secret: string;
-        tolerance?: number;
+        tolerance?: number | undefined;
     }) => Promise<boolean>;
     get computeSignature(): (timestamp: any, payload: any, secret: string) => Promise<string>;
     get getTimestampAndSignatureHash(): (sigHeader: string) => [string, string];
@@ -37,5 +18,3 @@ declare class Webhooks {
         tolerance?: number;
     }): Promise<Event>;
 }
-
-export { Webhooks };

package/lib/webhooks/webhooks.js

@@ -1,38 +1,37 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-import { deserializeEvent } from "../common/serializers";
-import { SignatureProvider } from "../common/crypto/signature-provider";
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Webhooks = void 0;
+const serializers_1 = require("../common/serializers");
+const signature_provider_1 = require("../common/crypto/signature-provider");
 class Webhooks {
-  static {
-    __name(this, "Webhooks");
-  }
-  constructor(cryptoProvider) {
-    this.signatureProvider = new SignatureProvider(cryptoProvider);
-  }
-  get verifyHeader() {
-    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);
-  }
-  get computeSignature() {
-    return this.signatureProvider.computeSignature.bind(this.signatureProvider);
-  }
-  get getTimestampAndSignatureHash() {
-    return this.signatureProvider.getTimestampAndSignatureHash.bind(
-      this.signatureProvider
-    );
-  }
-  async constructEvent({
-    payload,
-    sigHeader,
-    secret,
-    tolerance = 18e4
-  }) {
-    const options = { payload, sigHeader, secret, tolerance };
-    await this.verifyHeader(options);
-    const webhookPayload = payload;
-    return deserializeEvent(webhookPayload);
-  }
+    constructor(cryptoProvider) {
+        this.signatureProvider = new signature_provider_1.SignatureProvider(cryptoProvider);
+    }
+    get verifyHeader() {
+        return this.signatureProvider.verifyHeader.bind(this.signatureProvider);
+    }
+    get computeSignature() {
+        return this.signatureProvider.computeSignature.bind(this.signatureProvider);
+    }
+    get getTimestampAndSignatureHash() {
+        return this.signatureProvider.getTimestampAndSignatureHash.bind(this.signatureProvider);
+    }
+    constructEvent({ payload, sigHeader, secret, tolerance = 180000, }) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const options = { payload, sigHeader, secret, tolerance };
+            yield this.verifyHeader(options);
+            const webhookPayload = payload;
+            return (0, serializers_1.deserializeEvent)(webhookPayload);
+        });
+    }
 }
-export {
-  Webhooks
-};
-//# sourceMappingURL=webhooks.js.map
+exports.Webhooks = Webhooks;

package/lib/webhooks/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/webhooks/webhooks.ts"],"sourcesContent":["import { deserializeEvent } from '../common/serializers';\nimport { Event, EventResponse } from '../common/interfaces';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\n\nexport class Webhooks {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get getTimestampAndSignatureHash() {\n    return this.signatureProvider.getTimestampAndSignatureHash.bind(\n      this.signatureProvider,\n    );\n  }\n\n  async constructEvent({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<Event> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    const webhookPayload = payload as EventResponse;\n\n    return deserializeEvent(webhookPayload);\n  }\n}\n"],"mappings":";;AAAA,SAAS,wBAAwB;AAEjC,SAAS,yBAAyB;AAG3B,MAAM,SAAS;AAAA,EALtB,OAKsB;AAAA;AAAA;AAAA,EAGpB,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,kBAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,IAAI,mBAAmB;AACrB,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,+BAA+B;AACjC,WAAO,KAAK,kBAAkB,6BAA6B;AAAA,MACzD,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EAEA,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKmB;AACjB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,UAAM,iBAAiB;AAEvB,WAAO,iBAAiB,cAAc;AAAA,EACxC;AACF;","names":[]}
+{"version":3,"sources":["../../src/webhooks/webhooks.ts"],"sourcesContent":["import { deserializeEvent } from '../common/serializers';\nimport { Event, EventResponse } from '../common/interfaces';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\n\nexport class Webhooks {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get getTimestampAndSignatureHash() {\n    return this.signatureProvider.getTimestampAndSignatureHash.bind(\n      this.signatureProvider,\n    );\n  }\n\n  async constructEvent({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<Event> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    const webhookPayload = payload as EventResponse;\n\n    return deserializeEvent(webhookPayload);\n  }\n}\n"],"mappings":";;AAAA,SAAS,wBAAwB;AAEjC,SAAS,yBAAyB;AAG3B,MAAM,SAAS;AAAA,EALtB,OAKsB;AAAA;AAAA;AAAA,EACZ;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,kBAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,IAAI,mBAAmB;AACrB,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,+BAA+B;AACjC,WAAO,KAAK,kBAAkB,6BAA6B;AAAA,MACzD,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EAEA,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKmB;AACjB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,UAAM,iBAAiB;AAEvB,WAAO,iBAAiB,cAAc;AAAA,EACxC;AACF;","names":[]}

package/lib/webhooks/webhooks.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/webhooks/webhooks.spec.js

@@ -0,0 +1,197 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const crypto_1 = __importDefault(require("crypto"));
+const workos_1 = require("../workos");
+const webhook_json_1 = __importDefault(require("./fixtures/webhook.json"));
+const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
+const exceptions_1 = require("../common/exceptions");
+describe('Webhooks', () => {
+    let payload;
+    let secret;
+    let timestamp;
+    let unhashedString;
+    let signatureHash;
+    let expectation;
+    beforeEach(() => {
+        payload = webhook_json_1.default;
+        secret = 'secret';
+        timestamp = Date.now() * 1000;
+        unhashedString = `${timestamp}.${JSON.stringify(payload)}`;
+        signatureHash = crypto_1.default
+            .createHmac('sha256', secret)
+            .update(unhashedString)
+            .digest()
+            .toString('hex');
+        expectation = {
+            id: 'directory_user_01FAEAJCR3ZBZ30D8BD1924TVG',
+            state: 'active',
+            emails: [
+                {
+                    type: 'work',
+                    value: 'blair@foo-corp.com',
+                    primary: true,
+                },
+            ],
+            idpId: '00u1e8mutl6wlH3lL4x7',
+            object: 'directory_user',
+            username: 'blair@foo-corp.com',
+            lastName: 'Lunchford',
+            firstName: 'Blair',
+            jobTitle: 'Software Engineer',
+            directoryId: 'directory_01F9M7F68PZP8QXP8G7X5QRHS7',
+            createdAt: '2021-06-25T19:07:33.155Z',
+            updatedAt: '2021-06-25T19:07:33.155Z',
+            rawAttributes: {
+                name: {
+                    givenName: 'Blair',
+                    familyName: 'Lunchford',
+                    middleName: 'Elizabeth',
+                    honorificPrefix: 'Ms.',
+                },
+                title: 'Software Engineer',
+                active: true,
+                emails: [
+                    {
+                        type: 'work',
+                        value: 'blair@foo-corp.com',
+                        primary: true,
+                    },
+                ],
+                groups: [],
+                locale: 'en-US',
+                schemas: [
+                    'urn:ietf:params:scim:schemas:core:2.0:User',
+                    'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User',
+                ],
+                userName: 'blair@foo-corp.com',
+                addresses: [
+                    {
+                        region: 'CA',
+                        primary: true,
+                        locality: 'San Francisco',
+                        postalCode: '94016',
+                    },
+                ],
+                externalId: '00u1e8mutl6wlH3lL4x7',
+                displayName: 'Blair Lunchford',
+                'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User': {
+                    manager: {
+                        value: '2',
+                        displayName: 'Kate Chapman',
+                    },
+                    division: 'Engineering',
+                    department: 'Customer Success',
+                },
+            },
+        };
+    });
+    describe('constructEvent', () => {
+        describe('with the correct payload, sig_header, and secret', () => {
+            it('returns a webhook event', () => __awaiter(void 0, void 0, void 0, function* () {
+                const sigHeader = `t=${timestamp}, v1=${signatureHash}`;
+                const options = { payload, sigHeader, secret };
+                const webhook = yield workos.webhooks.constructEvent(options);
+                expect(webhook.data).toEqual(expectation);
+                expect(webhook.event).toEqual('dsync.user.created');
+                expect(webhook.id).toEqual('wh_123');
+            }));
+        });
+        describe('with the correct payload, sig_header, secret, and tolerance', () => {
+            it('returns a webhook event', () => __awaiter(void 0, void 0, void 0, function* () {
+                const sigHeader = `t=${timestamp}, v1=${signatureHash}`;
+                const options = { payload, sigHeader, secret, tolerance: 200 };
+                const webhook = yield workos.webhooks.constructEvent(options);
+                expect(webhook.data).toEqual(expectation);
+                expect(webhook.event).toEqual('dsync.user.created');
+                expect(webhook.id).toEqual('wh_123');
+            }));
+        });
+        describe('with an empty header', () => {
+            it('raises an error', () => __awaiter(void 0, void 0, void 0, function* () {
+                const sigHeader = '';
+                const options = { payload, sigHeader, secret };
+                yield expect(workos.webhooks.constructEvent(options)).rejects.toThrowError(exceptions_1.SignatureVerificationException);
+            }));
+        });
+        describe('with an empty signature hash', () => {
+            it('raises an error', () => __awaiter(void 0, void 0, void 0, function* () {
+                const sigHeader = `t=${timestamp}, v1=`;
+                const options = { payload, sigHeader, secret };
+                yield expect(workos.webhooks.constructEvent(options)).rejects.toThrowError(exceptions_1.SignatureVerificationException);
+            }));
+        });
+        describe('with an incorrect signature hash', () => {
+            it('raises an error', () => __awaiter(void 0, void 0, void 0, function* () {
+                const sigHeader = `t=${timestamp}, v1=99999`;
+                const options = { payload, sigHeader, secret };
+                yield expect(workos.webhooks.constructEvent(options)).rejects.toThrowError(exceptions_1.SignatureVerificationException);
+            }));
+        });
+        describe('with an incorrect payload', () => {
+            it('raises an error', () => __awaiter(void 0, void 0, void 0, function* () {
+                const sigHeader = `t=${timestamp}, v1=${signatureHash}`;
+                payload = 'invalid';
+                const options = { payload, sigHeader, secret };
+                yield expect(workos.webhooks.constructEvent(options)).rejects.toThrowError(exceptions_1.SignatureVerificationException);
+            }));
+        });
+        describe('with an incorrect webhook secret', () => {
+            it('raises an error', () => __awaiter(void 0, void 0, void 0, function* () {
+                const sigHeader = `t=${timestamp}, v1=${signatureHash}`;
+                secret = 'invalid';
+                const options = { payload, sigHeader, secret };
+                yield expect(workos.webhooks.constructEvent(options)).rejects.toThrowError(exceptions_1.SignatureVerificationException);
+            }));
+        });
+        describe('with a timestamp outside tolerance', () => {
+            it('raises an error', () => __awaiter(void 0, void 0, void 0, function* () {
+                const sigHeader = `t=9999, v1=${signatureHash}`;
+                const options = { payload, sigHeader, secret };
+                yield expect(workos.webhooks.constructEvent(options)).rejects.toThrowError(exceptions_1.SignatureVerificationException);
+            }));
+        });
+    });
+    describe('verifyHeader', () => {
+        it('aliases to the signature provider', () => __awaiter(void 0, void 0, void 0, function* () {
+            const spy = jest.spyOn(
+            // tslint:disable-next-line
+            workos.webhooks['signatureProvider'], 'verifyHeader');
+            yield workos.webhooks.verifyHeader({
+                payload,
+                sigHeader: `t=${timestamp}, v1=${signatureHash}`,
+                secret,
+            });
+            expect(spy).toHaveBeenCalled();
+        }));
+    });
+    describe('computeSignature', () => {
+        it('aliases to the signature provider', () => __awaiter(void 0, void 0, void 0, function* () {
+            const spy = jest.spyOn(
+            // tslint:disable-next-line
+            workos.webhooks['signatureProvider'], 'computeSignature');
+            yield workos.webhooks.computeSignature(timestamp, payload, secret);
+            expect(spy).toHaveBeenCalled();
+        }));
+    });
+    describe('getTimestampAndSignatureHash', () => {
+        it('aliases to the signature provider', () => __awaiter(void 0, void 0, void 0, function* () {
+            const spy = jest.spyOn(
+            // tslint:disable-next-line
+            workos.webhooks['signatureProvider'], 'getTimestampAndSignatureHash');
+            workos.webhooks.getTimestampAndSignatureHash(`t=${timestamp}, v1=${signatureHash}`);
+            expect(spy).toHaveBeenCalled();
+        }));
+    });
+});

package/lib/widgets/fixtures/get-token-error.json

@@ -0,0 +1,5 @@
+{
+    "message": "User not found 'user_123'",
+    "code": "entity_not_found",
+    "entity_id": "user_123"
+}

package/lib/widgets/fixtures/token.json

@@ -0,0 +1,3 @@
+{
+    "token": "this.is.a.token"
+}

package/lib/widgets/interfaces/get-token.d.ts

@@ -1,21 +1,19 @@
-type WidgetScope = 'widgets:users-table:manage';
-interface GetTokenOptions {
+export type WidgetScope = 'widgets:users-table:manage';
+export interface GetTokenOptions {
     organizationId: string;
     userId: string;
     scopes?: [WidgetScope];
 }
-interface SerializedGetTokenOptions {
+export interface SerializedGetTokenOptions {
     organization_id: string;
     user_id: string;
     scopes?: [WidgetScope];
 }
-declare const serializeGetTokenOptions: (options: GetTokenOptions) => SerializedGetTokenOptions;
-interface GetTokenResponse {
+export declare const serializeGetTokenOptions: (options: GetTokenOptions) => SerializedGetTokenOptions;
+export interface GetTokenResponse {
     token: string;
 }
-interface GetTokenResponseResponse {
+export interface GetTokenResponseResponse {
     token: string;
 }
-declare const deserializeGetTokenResponse: (data: GetTokenResponseResponse) => GetTokenResponse;
-
-export { type GetTokenOptions, type GetTokenResponse, type GetTokenResponseResponse, type SerializedGetTokenOptions, type WidgetScope, deserializeGetTokenResponse, serializeGetTokenOptions };
+export declare const deserializeGetTokenResponse: (data: GetTokenResponseResponse) => GetTokenResponse;

package/lib/widgets/interfaces/get-token.js

@@ -1,15 +1,13 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-const serializeGetTokenOptions = /* @__PURE__ */ __name((options) => ({
-  organization_id: options.organizationId,
-  user_id: options.userId,
-  scopes: options.scopes
-}), "serializeGetTokenOptions");
-const deserializeGetTokenResponse = /* @__PURE__ */ __name((data) => ({
-  token: data.token
-}), "deserializeGetTokenResponse");
-export {
-  deserializeGetTokenResponse,
-  serializeGetTokenOptions
-};
-//# sourceMappingURL=get-token.js.map
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deserializeGetTokenResponse = exports.serializeGetTokenOptions = void 0;
+const serializeGetTokenOptions = (options) => ({
+    organization_id: options.organizationId,
+    user_id: options.userId,
+    scopes: options.scopes,
+});
+exports.serializeGetTokenOptions = serializeGetTokenOptions;
+const deserializeGetTokenResponse = (data) => ({
+    token: data.token,
+});
+exports.deserializeGetTokenResponse = deserializeGetTokenResponse;

package/lib/widgets/widgets.d.cts

@@ -1,4 +1,4 @@
-export { d as Widgets } from '../workos-DJQdIyfD.cjs';
+export { d as Widgets } from '../workos-DB7I87_B.cjs';
 import './interfaces/get-token.cjs';
 import '../common/interfaces/get-options.interface.cjs';
 import '../common/interfaces/post-options.interface.cjs';
@@ -62,6 +62,7 @@ import '../audit-logs/interfaces/create-audit-log-schema-options.interface.cjs';
 import 'jose';
 import '../user-management/interfaces/authenticate-with-code-options.interface.cjs';
 import '../user-management/interfaces/authenticate-with-options-base.interface.cjs';
+import '../user-management/interfaces/authenticate-with-code-and-verifier-options.interface.cjs';
 import '../user-management/interfaces/authenticate-with-email-verification-options.interface.cjs';
 import '../user-management/interfaces/authenticate-with-magic-auth-options.interface.cjs';
 import '../user-management/interfaces/authenticate-with-organization-selection.interface.cjs';

package/lib/widgets/widgets.d.ts

@@ -1,122 +1,7 @@
-export { d as Widgets } from '../workos-TJfD5S9-.js';
-import './interfaces/get-token.js';
-import '../common/interfaces/get-options.interface.js';
-import '../common/interfaces/post-options.interface.js';
-import '../common/interfaces/put-options.interface.js';
-import '../common/interfaces/workos-options.interface.js';
-import '../common/interfaces/app-info.interface.js';
-import '../events/interfaces/list-events-options.interface.js';
-import '../common/interfaces/event.interface.js';
-import '../directory-sync/interfaces/directory.interface.js';
-import '../directory-sync/interfaces/directory-group.interface.js';
-import '../directory-sync/interfaces/directory-user.interface.js';
-import '../roles/interfaces/role.interface.js';
-import '../organizations/interfaces/organization.interface.js';
-import '../organization-domains/interfaces/organization-domain.interface.js';
-import '../sso/interfaces/connection.interface.js';
-import '../sso/interfaces/connection-type.enum.js';
-import '../user-management/interfaces/user.interface.js';
-import '../user-management/interfaces/authentication-event.interface.js';
-import '../user-management/interfaces/authentication-radar-risk-detected-event.interface.js';
-import '../user-management/interfaces/email-verification.interface.js';
-import '../user-management/interfaces/invitation.interface.js';
-import '../user-management/interfaces/organization-membership.interface.js';
-import '../user-management/interfaces/magic-auth.interface.js';
-import '../user-management/interfaces/password-reset.interface.js';
-import '../user-management/interfaces/session.interface.js';
-import '../user-management/interfaces/impersonator.interface.js';
-import '../common/interfaces/list.interface.js';
-import '../common/utils/pagination.js';
-import '../common/interfaces/pagination-options.interface.js';
-import '../organizations/interfaces/create-organization-options.interface.js';
-import '../organizations/interfaces/domain-data.interface.js';
-import '../organizations/interfaces/list-organizations-options.interface.js';
-import '../organizations/interfaces/update-organization-options.interface.js';
-import '../organizations/interfaces/list-organization-roles-options.interface.js';
-import '../organization-domains/interfaces/create-organization-domain-options.interface.js';
-import '../passwordless/interfaces/passwordless-session.interface.js';
-import '../passwordless/interfaces/create-passwordless-session-options.interface.js';
-import '../passwordless/interfaces/send-session-response.interface.js';
-import '../portal/interfaces/generate-portal-link-intent.interface.js';
-import '../common/interfaces/unknown-record.interface.js';
-import '../sso/interfaces/authorization-url-options.interface.js';
-import '../sso/interfaces/get-profile-options.interface.js';
-import '../sso/interfaces/get-profile-and-token-options.interface.js';
-import '../sso/interfaces/list-connections-options.interface.js';
-import '../sso/interfaces/profile-and-token.interface.js';
-import '../sso/interfaces/profile.interface.js';
-import '../webhooks/webhooks.js';
-import '../common/crypto/crypto-provider.js';
-import '../mfa/interfaces/challenge-factor-options.js';
-import '../mfa/interfaces/challenge.interface.js';
-import '../mfa/interfaces/enroll-factor-options.js';
-import '../mfa/interfaces/factor.interface.js';
-import '../mfa/interfaces/sms.interface.js';
-import '../mfa/interfaces/totp.interface.js';
-import '../mfa/interfaces/verify-challenge-options.js';
-import '../mfa/interfaces/verify-challenge-response.js';
-import '../audit-logs/interfaces/audit-log-export-options.interface.js';
-import '../audit-logs/interfaces/audit-log-export.interface.js';
-import '../audit-logs/interfaces/create-audit-log-event-options.interface.js';
-import '../audit-logs/interfaces/create-audit-log-schema-options.interface.js';
-import 'jose';
-import '../user-management/interfaces/authenticate-with-code-options.interface.js';
-import '../user-management/interfaces/authenticate-with-options-base.interface.js';
-import '../user-management/interfaces/authenticate-with-email-verification-options.interface.js';
-import '../user-management/interfaces/authenticate-with-magic-auth-options.interface.js';
-import '../user-management/interfaces/authenticate-with-organization-selection.interface.js';
-import '../user-management/interfaces/authenticate-with-password-options.interface.js';
-import '../user-management/interfaces/authenticate-with-refresh-token-options.interface.js';
-import '../user-management/interfaces/authenticate-with-session-cookie.interface.js';
-import '../user-management/interfaces/authentication-response.interface.js';
-import '../user-management/interfaces/oauth-tokens.interface.js';
-import '../user-management/interfaces/authenticate-with-totp-options.interface.js';
-import '../user-management/interfaces/authorization-url-options.interface.js';
-import '../user-management/interfaces/create-magic-auth-options.interface.js';
-import '../user-management/interfaces/create-organization-membership-options.interface.js';
-import '../user-management/interfaces/create-password-reset-options.interface.js';
-import '../user-management/interfaces/create-user-options.interface.js';
-import '../user-management/interfaces/password-hash-type.interface.js';
-import '../user-management/interfaces/enroll-auth-factor.interface.js';
-import '../user-management/interfaces/factor.interface.js';
-import '../user-management/interfaces/identity.interface.js';
-import '../user-management/interfaces/list-auth-factors-options.interface.js';
-import '../user-management/interfaces/list-invitations-options.interface.js';
-import '../user-management/interfaces/list-organization-memberships-options.interface.js';
-import '../user-management/interfaces/list-users-options.interface.js';
-import '../user-management/interfaces/reset-password-options.interface.js';
-import '../user-management/interfaces/revoke-session-options.interface.js';
-import '../user-management/interfaces/send-invitation-options.interface.js';
-import '../user-management/interfaces/send-verification-email-options.interface.js';
-import '../user-management/interfaces/update-organization-membership-options.interface.js';
-import '../user-management/interfaces/update-user-options.interface.js';
-import '../user-management/interfaces/verify-email-options.interface.js';
-import '../user-management/interfaces/session-handler-options.interface.js';
-import '../user-management/interfaces/refresh-and-seal-session-data.interface.js';
-import '../fga/interfaces/check.interface.js';
-import '../fga/interfaces/resource.interface.js';
-import '../fga/interfaces/resource-op.enum.js';
-import '../fga/interfaces/warrant.interface.js';
-import '../fga/interfaces/warrant-op.enum.js';
-import '../fga/interfaces/check-op.enum.js';
-import '../fga/interfaces/warning.interface.js';
-import '../fga/interfaces/query.interface.js';
-import '../fga/interfaces/warrant-token.interface.js';
-import '../fga/utils/fga-paginatable.js';
-import '../fga/interfaces/list.interface.js';
-import '../common/net/http-client.js';
-import '../common/interfaces/http-client.interface.js';
-import '../actions/actions.js';
-import '../actions/interfaces/action.interface.js';
-import '../actions/interfaces/response-payload.interface.js';
-import '../vault/interfaces/key/create-data-key.interface.js';
-import '../vault/interfaces/key.interface.js';
-import '../vault/interfaces/key/decrypt-data-key.interface.js';
-import '../vault/interfaces/object/create-object.interface.js';
-import '../vault/interfaces/object/delete-object.interface.js';
-import '../vault/interfaces/object/read-object.interface.js';
-import '../vault/interfaces/object.interface.js';
-import '../vault/interfaces/object/update-object.interface.js';
-import '../directory-sync/interfaces/list-directories-options.interface.js';
-import '../directory-sync/interfaces/list-groups-options.interface.js';
-import '../directory-sync/interfaces/list-directory-users-options.interface.js';
+import { WorkOS } from '../workos';
+import { GetTokenOptions } from './interfaces/get-token';
+export declare class Widgets {
+    private readonly workos;
+    constructor(workos: WorkOS);
+    getToken(payload: GetTokenOptions): Promise<string>;
+}