@workos-inc/node 8.0.0-beta.1 → 8.0.0-beta.3

package/lib/directory-sync/serializers/directory-group.serializer.js

@@ -1,28 +1,26 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-const deserializeDirectoryGroup = /* @__PURE__ */ __name((directoryGroup) => ({
-  id: directoryGroup.id,
-  idpId: directoryGroup.idp_id,
-  directoryId: directoryGroup.directory_id,
-  organizationId: directoryGroup.organization_id,
-  name: directoryGroup.name,
-  createdAt: directoryGroup.created_at,
-  updatedAt: directoryGroup.updated_at,
-  rawAttributes: directoryGroup.raw_attributes
-}), "deserializeDirectoryGroup");
-const deserializeUpdatedEventDirectoryGroup = /* @__PURE__ */ __name((directoryGroup) => ({
-  id: directoryGroup.id,
-  idpId: directoryGroup.idp_id,
-  directoryId: directoryGroup.directory_id,
-  organizationId: directoryGroup.organization_id,
-  name: directoryGroup.name,
-  createdAt: directoryGroup.created_at,
-  updatedAt: directoryGroup.updated_at,
-  rawAttributes: directoryGroup.raw_attributes,
-  previousAttributes: directoryGroup.previous_attributes
-}), "deserializeUpdatedEventDirectoryGroup");
-export {
-  deserializeDirectoryGroup,
-  deserializeUpdatedEventDirectoryGroup
-};
-//# sourceMappingURL=directory-group.serializer.js.map
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deserializeUpdatedEventDirectoryGroup = exports.deserializeDirectoryGroup = void 0;
+const deserializeDirectoryGroup = (directoryGroup) => ({
+    id: directoryGroup.id,
+    idpId: directoryGroup.idp_id,
+    directoryId: directoryGroup.directory_id,
+    organizationId: directoryGroup.organization_id,
+    name: directoryGroup.name,
+    createdAt: directoryGroup.created_at,
+    updatedAt: directoryGroup.updated_at,
+    rawAttributes: directoryGroup.raw_attributes,
+});
+exports.deserializeDirectoryGroup = deserializeDirectoryGroup;
+const deserializeUpdatedEventDirectoryGroup = (directoryGroup) => ({
+    id: directoryGroup.id,
+    idpId: directoryGroup.idp_id,
+    directoryId: directoryGroup.directory_id,
+    organizationId: directoryGroup.organization_id,
+    name: directoryGroup.name,
+    createdAt: directoryGroup.created_at,
+    updatedAt: directoryGroup.updated_at,
+    rawAttributes: directoryGroup.raw_attributes,
+    previousAttributes: directoryGroup.previous_attributes,
+});
+exports.deserializeUpdatedEventDirectoryGroup = deserializeUpdatedEventDirectoryGroup;

package/lib/directory-sync/serializers/directory-user.serializer.d.ts

@@ -1,9 +1,4 @@
-import { DefaultCustomAttributes, DirectoryUserResponse, DirectoryUserWithGroupsResponse, DirectoryUser, DirectoryUserWithGroups } from '../interfaces/directory-user.interface.js';
-import '../../roles/interfaces/role.interface.js';
-import '../interfaces/directory-group.interface.js';
-
-declare const deserializeDirectoryUser: <TCustomAttributes extends object = DefaultCustomAttributes>(directoryUser: DirectoryUserResponse<TCustomAttributes> | DirectoryUserWithGroupsResponse<TCustomAttributes>) => DirectoryUser<TCustomAttributes>;
-declare const deserializeDirectoryUserWithGroups: <TCustomAttributes extends object = DefaultCustomAttributes>(directoryUserWithGroups: DirectoryUserWithGroupsResponse<TCustomAttributes>) => DirectoryUserWithGroups<TCustomAttributes>;
-declare const deserializeUpdatedEventDirectoryUser: (directoryUser: DirectoryUserResponse & Record<"previous_attributes", any>) => DirectoryUser & Record<"previousAttributes", any>;
-
-export { deserializeDirectoryUser, deserializeDirectoryUserWithGroups, deserializeUpdatedEventDirectoryUser };
+import { DefaultCustomAttributes, DirectoryUser, DirectoryUserResponse, DirectoryUserWithGroups, DirectoryUserWithGroupsResponse } from '../interfaces';
+export declare const deserializeDirectoryUser: <TCustomAttributes extends object = DefaultCustomAttributes>(directoryUser: DirectoryUserResponse<TCustomAttributes, any> | DirectoryUserWithGroupsResponse<TCustomAttributes>) => DirectoryUser<TCustomAttributes, any>;
+export declare const deserializeDirectoryUserWithGroups: <TCustomAttributes extends object = DefaultCustomAttributes>(directoryUserWithGroups: DirectoryUserWithGroupsResponse<TCustomAttributes>) => DirectoryUserWithGroups<TCustomAttributes>;
+export declare const deserializeUpdatedEventDirectoryUser: (directoryUser: DirectoryUserResponse & Record<'previous_attributes', any>) => DirectoryUser & Record<'previousAttributes', any>;

package/lib/directory-sync/serializers/directory-user.serializer.js

@@ -1,52 +1,47 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-import { deserializeDirectoryGroup } from "./directory-group.serializer";
-const deserializeDirectoryUser = /* @__PURE__ */ __name((directoryUser) => ({
-  object: directoryUser.object,
-  id: directoryUser.id,
-  directoryId: directoryUser.directory_id,
-  organizationId: directoryUser.organization_id,
-  rawAttributes: directoryUser.raw_attributes,
-  customAttributes: directoryUser.custom_attributes,
-  idpId: directoryUser.idp_id,
-  firstName: directoryUser.first_name,
-  email: directoryUser.email,
-  emails: directoryUser.emails,
-  username: directoryUser.username,
-  lastName: directoryUser.last_name,
-  jobTitle: directoryUser.job_title,
-  state: directoryUser.state,
-  role: directoryUser.role,
-  createdAt: directoryUser.created_at,
-  updatedAt: directoryUser.updated_at
-}), "deserializeDirectoryUser");
-const deserializeDirectoryUserWithGroups = /* @__PURE__ */ __name((directoryUserWithGroups) => ({
-  ...deserializeDirectoryUser(directoryUserWithGroups),
-  groups: directoryUserWithGroups.groups.map(deserializeDirectoryGroup)
-}), "deserializeDirectoryUserWithGroups");
-const deserializeUpdatedEventDirectoryUser = /* @__PURE__ */ __name((directoryUser) => ({
-  object: "directory_user",
-  id: directoryUser.id,
-  directoryId: directoryUser.directory_id,
-  organizationId: directoryUser.organization_id,
-  rawAttributes: directoryUser.raw_attributes,
-  customAttributes: directoryUser.custom_attributes,
-  idpId: directoryUser.idp_id,
-  firstName: directoryUser.first_name,
-  email: directoryUser.email,
-  emails: directoryUser.emails,
-  username: directoryUser.username,
-  lastName: directoryUser.last_name,
-  jobTitle: directoryUser.job_title,
-  state: directoryUser.state,
-  role: directoryUser.role,
-  createdAt: directoryUser.created_at,
-  updatedAt: directoryUser.updated_at,
-  previousAttributes: directoryUser.previous_attributes
-}), "deserializeUpdatedEventDirectoryUser");
-export {
-  deserializeDirectoryUser,
-  deserializeDirectoryUserWithGroups,
-  deserializeUpdatedEventDirectoryUser
-};
-//# sourceMappingURL=directory-user.serializer.js.map
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deserializeUpdatedEventDirectoryUser = exports.deserializeDirectoryUserWithGroups = exports.deserializeDirectoryUser = void 0;
+const directory_group_serializer_1 = require("./directory-group.serializer");
+const deserializeDirectoryUser = (directoryUser) => ({
+    object: directoryUser.object,
+    id: directoryUser.id,
+    directoryId: directoryUser.directory_id,
+    organizationId: directoryUser.organization_id,
+    rawAttributes: directoryUser.raw_attributes,
+    customAttributes: directoryUser.custom_attributes,
+    idpId: directoryUser.idp_id,
+    firstName: directoryUser.first_name,
+    email: directoryUser.email,
+    emails: directoryUser.emails,
+    username: directoryUser.username,
+    lastName: directoryUser.last_name,
+    jobTitle: directoryUser.job_title,
+    state: directoryUser.state,
+    role: directoryUser.role,
+    createdAt: directoryUser.created_at,
+    updatedAt: directoryUser.updated_at,
+});
+exports.deserializeDirectoryUser = deserializeDirectoryUser;
+const deserializeDirectoryUserWithGroups = (directoryUserWithGroups) => (Object.assign(Object.assign({}, (0, exports.deserializeDirectoryUser)(directoryUserWithGroups)), { groups: directoryUserWithGroups.groups.map(directory_group_serializer_1.deserializeDirectoryGroup) }));
+exports.deserializeDirectoryUserWithGroups = deserializeDirectoryUserWithGroups;
+const deserializeUpdatedEventDirectoryUser = (directoryUser) => ({
+    object: 'directory_user',
+    id: directoryUser.id,
+    directoryId: directoryUser.directory_id,
+    organizationId: directoryUser.organization_id,
+    rawAttributes: directoryUser.raw_attributes,
+    customAttributes: directoryUser.custom_attributes,
+    idpId: directoryUser.idp_id,
+    firstName: directoryUser.first_name,
+    email: directoryUser.email,
+    emails: directoryUser.emails,
+    username: directoryUser.username,
+    lastName: directoryUser.last_name,
+    jobTitle: directoryUser.job_title,
+    state: directoryUser.state,
+    role: directoryUser.role,
+    createdAt: directoryUser.created_at,
+    updatedAt: directoryUser.updated_at,
+    previousAttributes: directoryUser.previous_attributes,
+});
+exports.deserializeUpdatedEventDirectoryUser = deserializeUpdatedEventDirectoryUser;

package/lib/directory-sync/serializers/directory.serializer.d.ts

@@ -1,8 +1,5 @@
-import { DirectoryResponse, Directory, DirectoryStateResponse, DirectoryState, EventDirectoryResponse, EventDirectory } from '../interfaces/directory.interface.js';
-
-declare const deserializeDirectory: (directory: DirectoryResponse) => Directory;
-declare const deserializeDirectoryState: (state: DirectoryStateResponse) => DirectoryState;
-declare const deserializeEventDirectory: (directory: EventDirectoryResponse) => EventDirectory;
-declare const deserializeDeletedEventDirectory: (directory: Omit<EventDirectoryResponse, "domains" | "external_key">) => Omit<EventDirectory, "domains" | "externalKey">;
-
-export { deserializeDeletedEventDirectory, deserializeDirectory, deserializeDirectoryState, deserializeEventDirectory };
+import { Directory, DirectoryResponse, DirectoryState, DirectoryStateResponse, EventDirectory, EventDirectoryResponse } from '../interfaces';
+export declare const deserializeDirectory: (directory: DirectoryResponse) => Directory;
+export declare const deserializeDirectoryState: (state: DirectoryStateResponse) => DirectoryState;
+export declare const deserializeEventDirectory: (directory: EventDirectoryResponse) => EventDirectory;
+export declare const deserializeDeletedEventDirectory: (directory: Omit<EventDirectoryResponse, 'domains' | 'external_key'>) => Omit<EventDirectory, 'domains' | 'externalKey'>;

package/lib/directory-sync/serializers/directory.serializer.js

@@ -1,52 +1,50 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-const deserializeDirectory = /* @__PURE__ */ __name((directory) => ({
-  object: directory.object,
-  id: directory.id,
-  domain: directory.domain,
-  externalKey: directory.external_key,
-  name: directory.name,
-  organizationId: directory.organization_id,
-  state: deserializeDirectoryState(directory.state),
-  type: directory.type,
-  createdAt: directory.created_at,
-  updatedAt: directory.updated_at
-}), "deserializeDirectory");
-const deserializeDirectoryState = /* @__PURE__ */ __name((state) => {
-  if (state === "linked") {
-    return "active";
-  }
-  if (state === "unlinked") {
-    return "inactive";
-  }
-  return state;
-}, "deserializeDirectoryState");
-const deserializeEventDirectory = /* @__PURE__ */ __name((directory) => ({
-  object: directory.object,
-  id: directory.id,
-  externalKey: directory.external_key,
-  type: directory.type,
-  state: directory.state,
-  name: directory.name,
-  organizationId: directory.organization_id,
-  domains: directory.domains,
-  createdAt: directory.created_at,
-  updatedAt: directory.updated_at
-}), "deserializeEventDirectory");
-const deserializeDeletedEventDirectory = /* @__PURE__ */ __name((directory) => ({
-  object: directory.object,
-  id: directory.id,
-  type: directory.type,
-  state: directory.state,
-  name: directory.name,
-  organizationId: directory.organization_id,
-  createdAt: directory.created_at,
-  updatedAt: directory.updated_at
-}), "deserializeDeletedEventDirectory");
-export {
-  deserializeDeletedEventDirectory,
-  deserializeDirectory,
-  deserializeDirectoryState,
-  deserializeEventDirectory
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deserializeDeletedEventDirectory = exports.deserializeEventDirectory = exports.deserializeDirectoryState = exports.deserializeDirectory = void 0;
+const deserializeDirectory = (directory) => ({
+    object: directory.object,
+    id: directory.id,
+    domain: directory.domain,
+    externalKey: directory.external_key,
+    name: directory.name,
+    organizationId: directory.organization_id,
+    state: (0, exports.deserializeDirectoryState)(directory.state),
+    type: directory.type,
+    createdAt: directory.created_at,
+    updatedAt: directory.updated_at,
+});
+exports.deserializeDirectory = deserializeDirectory;
+const deserializeDirectoryState = (state) => {
+    if (state === 'linked') {
+        return 'active';
+    }
+    if (state === 'unlinked') {
+        return 'inactive';
+    }
+    return state;
 };
-//# sourceMappingURL=directory.serializer.js.map
+exports.deserializeDirectoryState = deserializeDirectoryState;
+const deserializeEventDirectory = (directory) => ({
+    object: directory.object,
+    id: directory.id,
+    externalKey: directory.external_key,
+    type: directory.type,
+    state: directory.state,
+    name: directory.name,
+    organizationId: directory.organization_id,
+    domains: directory.domains,
+    createdAt: directory.created_at,
+    updatedAt: directory.updated_at,
+});
+exports.deserializeEventDirectory = deserializeEventDirectory;
+const deserializeDeletedEventDirectory = (directory) => ({
+    object: directory.object,
+    id: directory.id,
+    type: directory.type,
+    state: directory.state,
+    name: directory.name,
+    organizationId: directory.organization_id,
+    createdAt: directory.created_at,
+    updatedAt: directory.updated_at,
+});
+exports.deserializeDeletedEventDirectory = deserializeDeletedEventDirectory;

package/lib/directory-sync/serializers/index.d.ts

@@ -1,10 +1,4 @@
-export { deserializeDirectoryGroup, deserializeUpdatedEventDirectoryGroup } from './directory-group.serializer.js';
-export { deserializeDirectoryUser, deserializeDirectoryUserWithGroups, deserializeUpdatedEventDirectoryUser } from './directory-user.serializer.js';
-export { deserializeDeletedEventDirectory, deserializeDirectory, deserializeDirectoryState, deserializeEventDirectory } from './directory.serializer.js';
-export { serializeListDirectoriesOptions } from './list-directories-options.serializer.js';
-import '../interfaces/directory-group.interface.js';
-import '../interfaces/directory-user.interface.js';
-import '../../roles/interfaces/role.interface.js';
-import '../interfaces/directory.interface.js';
-import '../interfaces/list-directories-options.interface.js';
-import '../../common/interfaces/pagination-options.interface.js';
+export * from './directory-group.serializer';
+export * from './directory-user.serializer';
+export * from './directory.serializer';
+export * from './list-directories-options.serializer';

package/lib/directory-sync/serializers/index.js

@@ -1,5 +1,20 @@
-export * from "./directory-group.serializer";
-export * from "./directory-user.serializer";
-export * from "./directory.serializer";
-export * from "./list-directories-options.serializer";
-//# sourceMappingURL=index.js.map
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./directory-group.serializer"), exports);
+__exportStar(require("./directory-user.serializer"), exports);
+__exportStar(require("./directory.serializer"), exports);
+__exportStar(require("./list-directories-options.serializer"), exports);

package/lib/directory-sync/serializers/list-directories-options.serializer.d.ts

@@ -1,6 +1,2 @@
-import { ListDirectoriesOptions, SerializedListDirectoriesOptions } from '../interfaces/list-directories-options.interface.js';
-import '../../common/interfaces/pagination-options.interface.js';
-
-declare const serializeListDirectoriesOptions: (options: ListDirectoriesOptions) => SerializedListDirectoriesOptions;
-
-export { serializeListDirectoriesOptions };
+import { ListDirectoriesOptions, SerializedListDirectoriesOptions } from '../interfaces';
+export declare const serializeListDirectoriesOptions: (options: ListDirectoriesOptions) => SerializedListDirectoriesOptions;

package/lib/directory-sync/serializers/list-directories-options.serializer.js

@@ -1,14 +1,12 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-const serializeListDirectoriesOptions = /* @__PURE__ */ __name((options) => ({
-  organization_id: options.organizationId,
-  search: options.search,
-  limit: options.limit,
-  before: options.before,
-  after: options.after,
-  order: options.order
-}), "serializeListDirectoriesOptions");
-export {
-  serializeListDirectoriesOptions
-};
-//# sourceMappingURL=list-directories-options.serializer.js.map
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeListDirectoriesOptions = void 0;
+const serializeListDirectoriesOptions = (options) => ({
+    organization_id: options.organizationId,
+    search: options.search,
+    limit: options.limit,
+    before: options.before,
+    after: options.after,
+    order: options.order,
+});
+exports.serializeListDirectoriesOptions = serializeListDirectoriesOptions;

package/lib/directory-sync/utils/get-primary-email.d.ts

@@ -1,7 +1,2 @@
-import { DirectoryUser } from '../interfaces/directory-user.interface.js';
-import '../../roles/interfaces/role.interface.js';
-import '../interfaces/directory-group.interface.js';
-
-declare function getPrimaryEmail(user: DirectoryUser): string | undefined;
-
-export { getPrimaryEmail };
+import { DirectoryUser } from '../interfaces/directory-user.interface';
+export declare function getPrimaryEmail(user: DirectoryUser): string | undefined;

package/lib/directory-sync/utils/get-primary-email.js

@@ -1,11 +1,9 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPrimaryEmail = void 0;
 function getPrimaryEmail(user) {
-  const primaryEmail = user.emails?.find((email) => email.primary);
-  return primaryEmail?.value;
+    var _a;
+    const primaryEmail = (_a = user.emails) === null || _a === void 0 ? void 0 : _a.find((email) => email.primary);
+    return primaryEmail === null || primaryEmail === void 0 ? void 0 : primaryEmail.value;
 }
-__name(getPrimaryEmail, "getPrimaryEmail");
-export {
-  getPrimaryEmail
-};
-//# sourceMappingURL=get-primary-email.js.map
+exports.getPrimaryEmail = getPrimaryEmail;

package/lib/directory-sync/utils/get-primary-email.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/directory-sync/utils/get-primary-email.spec.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const get_primary_email_1 = require("./get-primary-email");
+describe('getPrimaryEmail', () => {
+    const user = {
+        object: 'directory_user',
+        id: 'user_123',
+        customAttributes: {
+            custom: true,
+        },
+        directoryId: 'dir_123',
+        organizationId: 'org_123',
+        email: 'jonsnow@workos.com',
+        emails: [
+            {
+                primary: true,
+                type: 'type',
+                value: 'jonsnow@workos.com',
+            },
+        ],
+        firstName: 'Jon',
+        idpId: 'idp_foo',
+        lastName: 'Snow',
+        rawAttributes: {},
+        state: 'active',
+        username: 'jonsnow',
+        jobTitle: 'Knight of the Watch',
+        createdAt: '2021-10-27 15:21:50.640958',
+        updatedAt: '2021-12-13 12:15:45.531847',
+    };
+    it(`returns primary email value`, () => {
+        const primaryEmail = (0, get_primary_email_1.getPrimaryEmail)(user);
+        expect(primaryEmail).toEqual('jonsnow@workos.com');
+    });
+});

package/lib/esm/actions/actions.d.ts

@@ -0,0 +1,35 @@
+import { CryptoProvider } from '../common/crypto/crypto-provider.js';
+import { ActionContext } from './interfaces/action.interface.js';
+import { AuthenticationActionResponseData, UserRegistrationActionResponseData, ResponsePayload } from './interfaces/response-payload.interface.js';
+import '../user-management/interfaces/user.interface.js';
+import '../user-management/interfaces/invitation.interface.js';
+import '../user-management/interfaces/organization-membership.interface.js';
+import '../roles/interfaces/role.interface.js';
+import '../organizations/interfaces/organization.interface.js';
+import '../organization-domains/interfaces/organization-domain.interface.js';
+
+declare class Actions {
+    private signatureProvider;
+    constructor(cryptoProvider: CryptoProvider);
+    private get computeSignature();
+    get verifyHeader(): ({ payload, sigHeader, secret, tolerance, }: {
+        payload: any;
+        sigHeader: string;
+        secret: string;
+        tolerance?: number;
+    }) => Promise<boolean>;
+    serializeType(type: AuthenticationActionResponseData['type'] | UserRegistrationActionResponseData['type']): "authentication_action_response" | "user_registration_action_response";
+    signResponse(data: AuthenticationActionResponseData | UserRegistrationActionResponseData, secret: string): Promise<{
+        object: string;
+        payload: ResponsePayload;
+        signature: string;
+    }>;
+    constructAction({ payload, sigHeader, secret, tolerance, }: {
+        payload: unknown;
+        sigHeader: string;
+        secret: string;
+        tolerance?: number;
+    }): Promise<ActionContext>;
+}
+
+export { Actions };

package/lib/esm/actions/actions.js

@@ -0,0 +1,66 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+import { SignatureProvider } from "../common/crypto/signature-provider.js";
+import { unreachable } from "../common/utils/unreachable.js";
+import { deserializeAction } from "./serializers/action.serializer.js";
+class Actions {
+  static {
+    __name(this, "Actions");
+  }
+  signatureProvider;
+  constructor(cryptoProvider) {
+    this.signatureProvider = new SignatureProvider(cryptoProvider);
+  }
+  get computeSignature() {
+    return this.signatureProvider.computeSignature.bind(this.signatureProvider);
+  }
+  get verifyHeader() {
+    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);
+  }
+  serializeType(type) {
+    switch (type) {
+      case "authentication":
+        return "authentication_action_response";
+      case "user_registration":
+        return "user_registration_action_response";
+      default:
+        return unreachable(type);
+    }
+  }
+  async signResponse(data, secret) {
+    let errorMessage;
+    const { verdict, type } = data;
+    if (verdict === "Deny" && data.errorMessage) {
+      errorMessage = data.errorMessage;
+    }
+    const responsePayload = {
+      timestamp: Date.now(),
+      verdict,
+      ...verdict === "Deny" && data.errorMessage && { error_message: errorMessage }
+    };
+    const response = {
+      object: this.serializeType(type),
+      payload: responsePayload,
+      signature: await this.computeSignature(
+        responsePayload.timestamp,
+        responsePayload,
+        secret
+      )
+    };
+    return response;
+  }
+  async constructAction({
+    payload,
+    sigHeader,
+    secret,
+    tolerance = 3e4
+  }) {
+    const options = { payload, sigHeader, secret, tolerance };
+    await this.verifyHeader(options);
+    return deserializeAction(payload);
+  }
+}
+export {
+  Actions
+};
+//# sourceMappingURL=actions.js.map

package/lib/esm/actions/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/actions/actions.ts"],"sourcesContent":["import { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { unreachable } from '../common/utils/unreachable';\nimport { ActionContext, ActionPayload } from './interfaces/action.interface';\nimport {\n  AuthenticationActionResponseData,\n  ResponsePayload,\n  UserRegistrationActionResponseData,\n} from './interfaces/response-payload.interface';\nimport { deserializeAction } from './serializers/action.serializer';\n\nexport class Actions {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  private get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  serializeType(\n    type:\n      | AuthenticationActionResponseData['type']\n      | UserRegistrationActionResponseData['type'],\n  ) {\n    switch (type) {\n      case 'authentication':\n        return 'authentication_action_response';\n      case 'user_registration':\n        return 'user_registration_action_response';\n      default:\n        return unreachable(type);\n    }\n  }\n\n  async signResponse(\n    data: AuthenticationActionResponseData | UserRegistrationActionResponseData,\n    secret: string,\n  ) {\n    let errorMessage: string | undefined;\n    const { verdict, type } = data;\n\n    if (verdict === 'Deny' && data.errorMessage) {\n      errorMessage = data.errorMessage;\n    }\n\n    const responsePayload: ResponsePayload = {\n      timestamp: Date.now(),\n      verdict,\n      ...(verdict === 'Deny' &&\n        data.errorMessage && { error_message: errorMessage }),\n    };\n\n    const response = {\n      object: this.serializeType(type),\n      payload: responsePayload,\n      signature: await this.computeSignature(\n        responsePayload.timestamp,\n        responsePayload,\n        secret,\n      ),\n    };\n\n    return response;\n  }\n\n  async constructAction({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 30000,\n  }: {\n    payload: unknown;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<ActionContext> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    return deserializeAction(payload as ActionPayload);\n  }\n}\n"],"mappings":";;AACA,SAAS,yBAAyB;AAClC,SAAS,mBAAmB;AAO5B,SAAS,yBAAyB;AAE3B,MAAM,QAAQ;AAAA,EAXrB,OAWqB;AAAA;AAAA;AAAA,EACX;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,kBAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAY,mBAAmB;AAC7B,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,cACE,MAGA;AACA,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO,YAAY,IAAI;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,aACJ,MACA,QACA;AACA,QAAI;AACJ,UAAM,EAAE,SAAS,KAAK,IAAI;AAE1B,QAAI,YAAY,UAAU,KAAK,cAAc;AAC3C,qBAAe,KAAK;AAAA,IACtB;AAEA,UAAM,kBAAmC;AAAA,MACvC,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,MACA,GAAI,YAAY,UACd,KAAK,gBAAgB,EAAE,eAAe,aAAa;AAAA,IACvD;AAEA,UAAM,WAAW;AAAA,MACf,QAAQ,KAAK,cAAc,IAAI;AAAA,MAC/B,SAAS;AAAA,MACT,WAAW,MAAM,KAAK;AAAA,QACpB,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAK2B;AACzB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,WAAO,kBAAkB,OAAwB;AAAA,EACnD;AACF;","names":[]}

package/lib/esm/actions/interfaces/action.interface.d.ts

@@ -0,0 +1,63 @@
+import { User, UserResponse } from '../../user-management/interfaces/user.interface.js';
+import { Invitation, InvitationResponse } from '../../user-management/interfaces/invitation.interface.js';
+import { OrganizationMembership, OrganizationMembershipResponse } from '../../user-management/interfaces/organization-membership.interface.js';
+import { Organization, OrganizationResponse } from '../../organizations/interfaces/organization.interface.js';
+import '../../roles/interfaces/role.interface.js';
+import '../../organization-domains/interfaces/organization-domain.interface.js';
+
+interface AuthenticationActionContext {
+    id: string;
+    object: 'authentication_action_context';
+    user: User;
+    organization?: Organization;
+    organizationMembership?: OrganizationMembership;
+    ipAddress?: string;
+    userAgent?: string;
+    deviceFingerprint?: string;
+    issuer?: string;
+}
+interface UserData {
+    object: 'user_data';
+    email: string;
+    firstName: string;
+    lastName: string;
+}
+interface UserRegistrationActionContext {
+    id: string;
+    object: 'user_registration_action_context';
+    userData: UserData;
+    invitation?: Invitation;
+    ipAddress?: string;
+    userAgent?: string;
+    deviceFingerprint?: string;
+}
+type ActionContext = AuthenticationActionContext | UserRegistrationActionContext;
+interface AuthenticationActionPayload {
+    id: string;
+    object: 'authentication_action_context';
+    user: UserResponse;
+    organization?: OrganizationResponse;
+    organization_membership?: OrganizationMembershipResponse;
+    ip_address?: string;
+    user_agent?: string;
+    device_fingerprint?: string;
+    issuer?: string;
+}
+interface UserDataPayload {
+    object: 'user_data';
+    email: string;
+    first_name: string;
+    last_name: string;
+}
+interface UserRegistrationActionPayload {
+    id: string;
+    object: 'user_registration_action_context';
+    user_data: UserDataPayload;
+    invitation?: InvitationResponse;
+    ip_address?: string;
+    user_agent?: string;
+    device_fingerprint?: string;
+}
+type ActionPayload = AuthenticationActionPayload | UserRegistrationActionPayload;
+
+export type { ActionContext, ActionPayload, UserData, UserDataPayload, UserRegistrationActionPayload };

package/lib/esm/actions/interfaces/action.interface.js

@@ -0,0 +1 @@
+//# sourceMappingURL=action.interface.js.map

package/lib/esm/actions/interfaces/action.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/lib/esm/actions/interfaces/index.d.ts

@@ -0,0 +1,8 @@
+export { ActionContext, ActionPayload, UserData, UserDataPayload, UserRegistrationActionPayload } from './action.interface.js';
+export { AuthenticationActionResponseData, ResponsePayload, UserRegistrationActionResponseData } from './response-payload.interface.js';
+import '../../user-management/interfaces/user.interface.js';
+import '../../user-management/interfaces/invitation.interface.js';
+import '../../user-management/interfaces/organization-membership.interface.js';
+import '../../roles/interfaces/role.interface.js';
+import '../../organizations/interfaces/organization.interface.js';
+import '../../organization-domains/interfaces/organization-domain.interface.js';