@workos-inc/node 8.0.0-beta.3 → 8.0.0-rc.1

package/lib/user-management/session.cjs

@@ -1,207 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var session_exports = {};
-__export(session_exports, {
-  Session: () => Session
-});
-module.exports = __toCommonJS(session_exports);
-var import_jose = require("jose");
-var import_oauth = require("../common/exceptions/oauth.exception");
-var import_interfaces = require("./interfaces");
-var import_iron_session = require("iron-session");
-class Session {
-  static {
-    __name(this, "Session");
-  }
-  jwks;
-  userManagement;
-  cookiePassword;
-  sessionData;
-  constructor(userManagement, sessionData, cookiePassword) {
-    if (!cookiePassword) {
-      throw new Error("cookiePassword is required");
-    }
-    this.userManagement = userManagement;
-    this.cookiePassword = cookiePassword;
-    this.sessionData = sessionData;
-    this.jwks = this.userManagement.jwks;
-  }
-  /**
-   * Authenticates a user with a session cookie.
-   *
-   * @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.
-   */
-  async authenticate() {
-    if (!this.sessionData) {
-      return {
-        authenticated: false,
-        reason: import_interfaces.AuthenticateWithSessionCookieFailureReason.NO_SESSION_COOKIE_PROVIDED
-      };
-    }
-    let session;
-    try {
-      session = await (0, import_iron_session.unsealData)(this.sessionData, {
-        password: this.cookiePassword
-      });
-    } catch (e) {
-      return {
-        authenticated: false,
-        reason: import_interfaces.AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE
-      };
-    }
-    if (!session.accessToken) {
-      return {
-        authenticated: false,
-        reason: import_interfaces.AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE
-      };
-    }
-    if (!await this.isValidJwt(session.accessToken)) {
-      return {
-        authenticated: false,
-        reason: import_interfaces.AuthenticateWithSessionCookieFailureReason.INVALID_JWT
-      };
-    }
-    const {
-      sid: sessionId,
-      org_id: organizationId,
-      role,
-      permissions,
-      entitlements,
-      feature_flags: featureFlags
-    } = (0, import_jose.decodeJwt)(session.accessToken);
-    return {
-      authenticated: true,
-      sessionId,
-      organizationId,
-      role,
-      permissions,
-      entitlements,
-      featureFlags,
-      user: session.user,
-      impersonator: session.impersonator,
-      accessToken: session.accessToken
-    };
-  }
-  /**
-   * Refreshes the user's session.
-   *
-   * @param options - Optional options for refreshing the session.
-   * @param options.cookiePassword - The password to use for the new session cookie.
-   * @param options.organizationId - The organization ID to use for the new session cookie.
-   * @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.
-   */
-  async refresh(options = {}) {
-    const session = await (0, import_iron_session.unsealData)(this.sessionData, {
-      password: this.cookiePassword
-    });
-    if (!session.refreshToken || !session.user) {
-      return {
-        authenticated: false,
-        reason: import_interfaces.RefreshSessionFailureReason.INVALID_SESSION_COOKIE
-      };
-    }
-    const { org_id: organizationIdFromAccessToken } = (0, import_jose.decodeJwt)(
-      session.accessToken
-    );
-    try {
-      const cookiePassword = options.cookiePassword ?? this.cookiePassword;
-      const authenticationResponse = await this.userManagement.authenticateWithRefreshToken({
-        clientId: this.userManagement.clientId,
-        refreshToken: session.refreshToken,
-        organizationId: options.organizationId ?? organizationIdFromAccessToken,
-        session: {
-          // We want to store the new sealed session in this class instance, so this always needs to be true
-          sealSession: true,
-          cookiePassword
-        }
-      });
-      if (options.cookiePassword) {
-        this.cookiePassword = options.cookiePassword;
-      }
-      this.sessionData = authenticationResponse.sealedSession;
-      const {
-        sid: sessionId,
-        org_id: organizationId,
-        role,
-        permissions,
-        entitlements,
-        feature_flags: featureFlags
-      } = (0, import_jose.decodeJwt)(authenticationResponse.accessToken);
-      return {
-        authenticated: true,
-        sealedSession: authenticationResponse.sealedSession,
-        session: authenticationResponse,
-        sessionId,
-        organizationId,
-        role,
-        permissions,
-        entitlements,
-        featureFlags,
-        user: session.user,
-        impersonator: session.impersonator
-      };
-    } catch (error) {
-      if (error instanceof import_oauth.OauthException && // TODO: Add additional known errors and remove re-throw
-      (error.error === import_interfaces.RefreshSessionFailureReason.INVALID_GRANT || error.error === import_interfaces.RefreshSessionFailureReason.MFA_ENROLLMENT || error.error === import_interfaces.RefreshSessionFailureReason.SSO_REQUIRED)) {
-        return {
-          authenticated: false,
-          reason: error.error
-        };
-      }
-      throw error;
-    }
-  }
-  /**
-   * Gets the URL to redirect the user to for logging out.
-   *
-   * @returns The URL to redirect the user to for logging out.
-   */
-  async getLogoutUrl({
-    returnTo
-  } = {}) {
-    const authenticationResponse = await this.authenticate();
-    if (!authenticationResponse.authenticated) {
-      const { reason } = authenticationResponse;
-      throw new Error(`Failed to extract session ID for logout URL: ${reason}`);
-    }
-    return this.userManagement.getLogoutUrl({
-      sessionId: authenticationResponse.sessionId,
-      returnTo
-    });
-  }
-  async isValidJwt(accessToken) {
-    if (!this.jwks) {
-      throw new Error(
-        "Missing client ID. Did you provide it when initializing WorkOS?"
-      );
-    }
-    try {
-      await (0, import_jose.jwtVerify)(accessToken, this.jwks);
-      return true;
-    } catch (e) {
-      return false;
-    }
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  Session
-});
-//# sourceMappingURL=session.cjs.map

package/lib/user-management/session.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/user-management/session.ts"],"sourcesContent":["import { createRemoteJWKSet, decodeJwt, jwtVerify } from 'jose';\nimport { OauthException } from '../common/exceptions/oauth.exception';\nimport {\n  AccessToken,\n  AuthenticateWithSessionCookieFailedResponse,\n  AuthenticateWithSessionCookieFailureReason,\n  AuthenticateWithSessionCookieSuccessResponse,\n  AuthenticationResponse,\n  RefreshSessionFailureReason,\n  RefreshSessionResponse,\n  SessionCookieData,\n} from './interfaces';\nimport { UserManagement } from './user-management';\nimport { unsealData } from 'iron-session';\n\ntype RefreshOptions = {\n  cookiePassword?: string;\n  organizationId?: string;\n};\n\nexport class Session {\n  private jwks: ReturnType<typeof createRemoteJWKSet> | undefined;\n  private userManagement: UserManagement;\n  private cookiePassword: string;\n  private sessionData: string;\n\n  constructor(\n    userManagement: UserManagement,\n    sessionData: string,\n    cookiePassword: string,\n  ) {\n    if (!cookiePassword) {\n      throw new Error('cookiePassword is required');\n    }\n\n    this.userManagement = userManagement;\n    this.cookiePassword = cookiePassword;\n    this.sessionData = sessionData;\n\n    this.jwks = this.userManagement.jwks;\n  }\n\n  /**\n   * Authenticates a user with a session cookie.\n   *\n   * @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.\n   */\n  async authenticate(): Promise<\n    | AuthenticateWithSessionCookieSuccessResponse\n    | AuthenticateWithSessionCookieFailedResponse\n  > {\n    if (!this.sessionData) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.NO_SESSION_COOKIE_PROVIDED,\n      };\n    }\n\n    let session: SessionCookieData;\n\n    try {\n      session = await unsealData<SessionCookieData>(this.sessionData, {\n        password: this.cookiePassword,\n      });\n    } catch (e) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    if (!session.accessToken) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    if (!(await this.isValidJwt(session.accessToken))) {\n      return {\n        authenticated: false,\n        reason: AuthenticateWithSessionCookieFailureReason.INVALID_JWT,\n      };\n    }\n\n    const {\n      sid: sessionId,\n      org_id: organizationId,\n      role,\n      permissions,\n      entitlements,\n      feature_flags: featureFlags,\n    } = decodeJwt<AccessToken>(session.accessToken);\n\n    return {\n      authenticated: true,\n      sessionId,\n      organizationId,\n      role,\n      permissions,\n      entitlements,\n      featureFlags,\n      user: session.user,\n      impersonator: session.impersonator,\n      accessToken: session.accessToken,\n    };\n  }\n\n  /**\n   * Refreshes the user's session.\n   *\n   * @param options - Optional options for refreshing the session.\n   * @param options.cookiePassword - The password to use for the new session cookie.\n   * @param options.organizationId - The organization ID to use for the new session cookie.\n   * @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.\n   */\n  async refresh(options: RefreshOptions = {}): Promise<RefreshSessionResponse> {\n    const session = await unsealData<SessionCookieData>(this.sessionData, {\n      password: this.cookiePassword,\n    });\n\n    if (!session.refreshToken || !session.user) {\n      return {\n        authenticated: false,\n        reason: RefreshSessionFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    const { org_id: organizationIdFromAccessToken } = decodeJwt<AccessToken>(\n      session.accessToken,\n    );\n\n    try {\n      const cookiePassword = options.cookiePassword ?? this.cookiePassword;\n\n      const authenticationResponse =\n        await this.userManagement.authenticateWithRefreshToken({\n          clientId: this.userManagement.clientId as string,\n          refreshToken: session.refreshToken,\n          organizationId:\n            options.organizationId ?? organizationIdFromAccessToken,\n          session: {\n            // We want to store the new sealed session in this class instance, so this always needs to be true\n            sealSession: true,\n            cookiePassword,\n          },\n        });\n\n      // Update the password if a new one was provided\n      if (options.cookiePassword) {\n        this.cookiePassword = options.cookiePassword;\n      }\n\n      this.sessionData = authenticationResponse.sealedSession as string;\n\n      const {\n        sid: sessionId,\n        org_id: organizationId,\n        role,\n        permissions,\n        entitlements,\n        feature_flags: featureFlags,\n      } = decodeJwt<AccessToken>(authenticationResponse.accessToken);\n\n      // TODO: Returning `session` here means there's some duplicated data.\n      // Slim down the return type in a future major version.\n      return {\n        authenticated: true,\n        sealedSession: authenticationResponse.sealedSession,\n        session: authenticationResponse as AuthenticationResponse,\n        sessionId,\n        organizationId,\n        role,\n        permissions,\n        entitlements,\n        featureFlags,\n        user: session.user,\n        impersonator: session.impersonator,\n      };\n    } catch (error) {\n      if (\n        error instanceof OauthException &&\n        // TODO: Add additional known errors and remove re-throw\n        (error.error === RefreshSessionFailureReason.INVALID_GRANT ||\n          error.error === RefreshSessionFailureReason.MFA_ENROLLMENT ||\n          error.error === RefreshSessionFailureReason.SSO_REQUIRED)\n      ) {\n        return {\n          authenticated: false,\n          reason: error.error,\n        };\n      }\n\n      throw error;\n    }\n  }\n\n  /**\n   * Gets the URL to redirect the user to for logging out.\n   *\n   * @returns The URL to redirect the user to for logging out.\n   */\n  async getLogoutUrl({\n    returnTo,\n  }: { returnTo?: string } = {}): Promise<string> {\n    const authenticationResponse = await this.authenticate();\n\n    if (!authenticationResponse.authenticated) {\n      const { reason } = authenticationResponse;\n      throw new Error(`Failed to extract session ID for logout URL: ${reason}`);\n    }\n\n    return this.userManagement.getLogoutUrl({\n      sessionId: authenticationResponse.sessionId,\n      returnTo,\n    });\n  }\n\n  private async isValidJwt(accessToken: string): Promise<boolean> {\n    if (!this.jwks) {\n      throw new Error(\n        'Missing client ID. Did you provide it when initializing WorkOS?',\n      );\n    }\n\n    try {\n      await jwtVerify(accessToken, this.jwks);\n      return true;\n    } catch (e) {\n      return false;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAyD;AACzD,mBAA+B;AAC/B,wBASO;AAEP,0BAA2B;AAOpB,MAAM,QAAQ;AAAA,EApBrB,OAoBqB;AAAA;AAAA;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAER,YACE,gBACA,aACA,gBACA;AACA,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,SAAK,iBAAiB;AACtB,SAAK,iBAAiB;AACtB,SAAK,cAAc;AAEnB,SAAK,OAAO,KAAK,eAAe;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eAGJ;AACA,QAAI,CAAC,KAAK,aAAa;AACrB,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QACE,6DAA2C;AAAA,MAC/C;AAAA,IACF;AAEA,QAAI;AAEJ,QAAI;AACF,gBAAU,UAAM,gCAA8B,KAAK,aAAa;AAAA,QAC9D,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,GAAG;AACV,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QACE,6DAA2C;AAAA,MAC/C;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ,aAAa;AACxB,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QACE,6DAA2C;AAAA,MAC/C;AAAA,IACF;AAEA,QAAI,CAAE,MAAM,KAAK,WAAW,QAAQ,WAAW,GAAI;AACjD,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QAAQ,6DAA2C;AAAA,MACrD;AAAA,IACF;AAEA,UAAM;AAAA,MACJ,KAAK;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,QAAI,uBAAuB,QAAQ,WAAW;AAE9C,WAAO;AAAA,MACL,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,QAAQ;AAAA,MACd,cAAc,QAAQ;AAAA,MACtB,aAAa,QAAQ;AAAA,IACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,QAAQ,UAA0B,CAAC,GAAoC;AAC3E,UAAM,UAAU,UAAM,gCAA8B,KAAK,aAAa;AAAA,MACpE,UAAU,KAAK;AAAA,IACjB,CAAC;AAED,QAAI,CAAC,QAAQ,gBAAgB,CAAC,QAAQ,MAAM;AAC1C,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QAAQ,8CAA4B;AAAA,MACtC;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,8BAA8B,QAAI;AAAA,MAChD,QAAQ;AAAA,IACV;AAEA,QAAI;AACF,YAAM,iBAAiB,QAAQ,kBAAkB,KAAK;AAEtD,YAAM,yBACJ,MAAM,KAAK,eAAe,6BAA6B;AAAA,QACrD,UAAU,KAAK,eAAe;AAAA,QAC9B,cAAc,QAAQ;AAAA,QACtB,gBACE,QAAQ,kBAAkB;AAAA,QAC5B,SAAS;AAAA;AAAA,UAEP,aAAa;AAAA,UACb;AAAA,QACF;AAAA,MACF,CAAC;AAGH,UAAI,QAAQ,gBAAgB;AAC1B,aAAK,iBAAiB,QAAQ;AAAA,MAChC;AAEA,WAAK,cAAc,uBAAuB;AAE1C,YAAM;AAAA,QACJ,KAAK;AAAA,QACL,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB,QAAI,uBAAuB,uBAAuB,WAAW;AAI7D,aAAO;AAAA,QACL,eAAe;AAAA,QACf,eAAe,uBAAuB;AAAA,QACtC,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,QAAQ;AAAA,QACd,cAAc,QAAQ;AAAA,MACxB;AAAA,IACF,SAAS,OAAO;AACd,UACE,iBAAiB;AAAA,OAEhB,MAAM,UAAU,8CAA4B,iBAC3C,MAAM,UAAU,8CAA4B,kBAC5C,MAAM,UAAU,8CAA4B,eAC9C;AACA,eAAO;AAAA,UACL,eAAe;AAAA,UACf,QAAQ,MAAM;AAAA,QAChB;AAAA,MACF;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa;AAAA,IACjB;AAAA,EACF,IAA2B,CAAC,GAAoB;AAC9C,UAAM,yBAAyB,MAAM,KAAK,aAAa;AAEvD,QAAI,CAAC,uBAAuB,eAAe;AACzC,YAAM,EAAE,OAAO,IAAI;AACnB,YAAM,IAAI,MAAM,gDAAgD,MAAM,EAAE;AAAA,IAC1E;AAEA,WAAO,KAAK,eAAe,aAAa;AAAA,MACtC,WAAW,uBAAuB;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,WAAW,aAAuC;AAC9D,QAAI,CAAC,KAAK,MAAM;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACF,gBAAM,uBAAU,aAAa,KAAK,IAAI;AACtC,aAAO;AAAA,IACT,SAAS,GAAG;AACV,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/lib/user-management/session.d.cts

@@ -1,123 +0,0 @@
-import './interfaces/authenticate-with-session-cookie.interface.cjs';
-import './interfaces/refresh-and-seal-session-data.interface.cjs';
-export { c as Session } from '../workos-DB7I87_B.cjs';
-import './interfaces/authentication-response.interface.cjs';
-import './interfaces/impersonator.interface.cjs';
-import './interfaces/oauth-tokens.interface.cjs';
-import './interfaces/user.interface.cjs';
-import '../common/interfaces/get-options.interface.cjs';
-import '../common/interfaces/post-options.interface.cjs';
-import '../common/interfaces/put-options.interface.cjs';
-import '../common/interfaces/workos-options.interface.cjs';
-import '../common/interfaces/app-info.interface.cjs';
-import '../events/interfaces/list-events-options.interface.cjs';
-import '../common/interfaces/event.interface.cjs';
-import '../directory-sync/interfaces/directory.interface.cjs';
-import '../directory-sync/interfaces/directory-group.interface.cjs';
-import '../directory-sync/interfaces/directory-user.interface.cjs';
-import '../roles/interfaces/role.interface.cjs';
-import '../organizations/interfaces/organization.interface.cjs';
-import '../organization-domains/interfaces/organization-domain.interface.cjs';
-import '../sso/interfaces/connection.interface.cjs';
-import '../sso/interfaces/connection-type.enum.cjs';
-import './interfaces/authentication-event.interface.cjs';
-import './interfaces/authentication-radar-risk-detected-event.interface.cjs';
-import './interfaces/email-verification.interface.cjs';
-import './interfaces/invitation.interface.cjs';
-import './interfaces/organization-membership.interface.cjs';
-import './interfaces/magic-auth.interface.cjs';
-import './interfaces/password-reset.interface.cjs';
-import './interfaces/session.interface.cjs';
-import '../common/interfaces/list.interface.cjs';
-import '../common/utils/pagination.cjs';
-import '../common/interfaces/pagination-options.interface.cjs';
-import '../organizations/interfaces/create-organization-options.interface.cjs';
-import '../organizations/interfaces/domain-data.interface.cjs';
-import '../organizations/interfaces/list-organizations-options.interface.cjs';
-import '../organizations/interfaces/update-organization-options.interface.cjs';
-import '../organizations/interfaces/list-organization-roles-options.interface.cjs';
-import '../organization-domains/interfaces/create-organization-domain-options.interface.cjs';
-import '../passwordless/interfaces/passwordless-session.interface.cjs';
-import '../passwordless/interfaces/create-passwordless-session-options.interface.cjs';
-import '../passwordless/interfaces/send-session-response.interface.cjs';
-import '../portal/interfaces/generate-portal-link-intent.interface.cjs';
-import '../common/interfaces/unknown-record.interface.cjs';
-import '../sso/interfaces/authorization-url-options.interface.cjs';
-import '../sso/interfaces/get-profile-options.interface.cjs';
-import '../sso/interfaces/get-profile-and-token-options.interface.cjs';
-import '../sso/interfaces/list-connections-options.interface.cjs';
-import '../sso/interfaces/profile-and-token.interface.cjs';
-import '../sso/interfaces/profile.interface.cjs';
-import '../webhooks/webhooks.cjs';
-import '../common/crypto/crypto-provider.cjs';
-import '../mfa/interfaces/challenge-factor-options.cjs';
-import '../mfa/interfaces/challenge.interface.cjs';
-import '../mfa/interfaces/enroll-factor-options.cjs';
-import '../mfa/interfaces/factor.interface.cjs';
-import '../mfa/interfaces/sms.interface.cjs';
-import '../mfa/interfaces/totp.interface.cjs';
-import '../mfa/interfaces/verify-challenge-options.cjs';
-import '../mfa/interfaces/verify-challenge-response.cjs';
-import '../audit-logs/interfaces/audit-log-export-options.interface.cjs';
-import '../audit-logs/interfaces/audit-log-export.interface.cjs';
-import '../audit-logs/interfaces/create-audit-log-event-options.interface.cjs';
-import '../audit-logs/interfaces/create-audit-log-schema-options.interface.cjs';
-import 'jose';
-import './interfaces/authenticate-with-code-options.interface.cjs';
-import './interfaces/authenticate-with-options-base.interface.cjs';
-import './interfaces/authenticate-with-code-and-verifier-options.interface.cjs';
-import './interfaces/authenticate-with-email-verification-options.interface.cjs';
-import './interfaces/authenticate-with-magic-auth-options.interface.cjs';
-import './interfaces/authenticate-with-organization-selection.interface.cjs';
-import './interfaces/authenticate-with-password-options.interface.cjs';
-import './interfaces/authenticate-with-refresh-token-options.interface.cjs';
-import './interfaces/authenticate-with-totp-options.interface.cjs';
-import './interfaces/authorization-url-options.interface.cjs';
-import './interfaces/create-magic-auth-options.interface.cjs';
-import './interfaces/create-organization-membership-options.interface.cjs';
-import './interfaces/create-password-reset-options.interface.cjs';
-import './interfaces/create-user-options.interface.cjs';
-import './interfaces/password-hash-type.interface.cjs';
-import './interfaces/enroll-auth-factor.interface.cjs';
-import './interfaces/factor.interface.cjs';
-import './interfaces/identity.interface.cjs';
-import './interfaces/list-auth-factors-options.interface.cjs';
-import './interfaces/list-invitations-options.interface.cjs';
-import './interfaces/list-organization-memberships-options.interface.cjs';
-import './interfaces/list-users-options.interface.cjs';
-import './interfaces/reset-password-options.interface.cjs';
-import './interfaces/revoke-session-options.interface.cjs';
-import './interfaces/send-invitation-options.interface.cjs';
-import './interfaces/send-verification-email-options.interface.cjs';
-import './interfaces/update-organization-membership-options.interface.cjs';
-import './interfaces/update-user-options.interface.cjs';
-import './interfaces/verify-email-options.interface.cjs';
-import './interfaces/session-handler-options.interface.cjs';
-import '../fga/interfaces/check.interface.cjs';
-import '../fga/interfaces/resource.interface.cjs';
-import '../fga/interfaces/resource-op.enum.cjs';
-import '../fga/interfaces/warrant.interface.cjs';
-import '../fga/interfaces/warrant-op.enum.cjs';
-import '../fga/interfaces/check-op.enum.cjs';
-import '../fga/interfaces/warning.interface.cjs';
-import '../fga/interfaces/query.interface.cjs';
-import '../fga/interfaces/warrant-token.interface.cjs';
-import '../fga/utils/fga-paginatable.cjs';
-import '../fga/interfaces/list.interface.cjs';
-import '../common/net/http-client.cjs';
-import '../common/interfaces/http-client.interface.cjs';
-import '../widgets/interfaces/get-token.cjs';
-import '../actions/actions.cjs';
-import '../actions/interfaces/action.interface.cjs';
-import '../actions/interfaces/response-payload.interface.cjs';
-import '../vault/interfaces/key/create-data-key.interface.cjs';
-import '../vault/interfaces/key.interface.cjs';
-import '../vault/interfaces/key/decrypt-data-key.interface.cjs';
-import '../vault/interfaces/object/create-object.interface.cjs';
-import '../vault/interfaces/object/delete-object.interface.cjs';
-import '../vault/interfaces/object/read-object.interface.cjs';
-import '../vault/interfaces/object.interface.cjs';
-import '../vault/interfaces/object/update-object.interface.cjs';
-import '../directory-sync/interfaces/list-directories-options.interface.cjs';
-import '../directory-sync/interfaces/list-groups-options.interface.cjs';
-import '../directory-sync/interfaces/list-directory-users-options.interface.cjs';

package/lib/user-management/session.d.ts

@@ -1,39 +0,0 @@
-import { AuthenticateWithSessionCookieFailedResponse, AuthenticateWithSessionCookieSuccessResponse, RefreshSessionResponse } from './interfaces';
-import { UserManagement } from './user-management';
-type RefreshOptions = {
-    cookiePassword?: string;
-    organizationId?: string;
-};
-export declare class CookieSession {
-    private jwks;
-    private userManagement;
-    private ironSessionProvider;
-    private cookiePassword;
-    private sessionData;
-    constructor(userManagement: UserManagement, sessionData: string, cookiePassword: string);
-    /**
-     * Authenticates a user with a session cookie.
-     *
-     * @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.
-     */
-    authenticate(): Promise<AuthenticateWithSessionCookieSuccessResponse | AuthenticateWithSessionCookieFailedResponse>;
-    /**
-     * Refreshes the user's session.
-     *
-     * @param options - Optional options for refreshing the session.
-     * @param options.cookiePassword - The password to use for the new session cookie.
-     * @param options.organizationId - The organization ID to use for the new session cookie.
-     * @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.
-     */
-    refresh(options?: RefreshOptions): Promise<RefreshSessionResponse>;
-    /**
-     * Gets the URL to redirect the user to for logging out.
-     *
-     * @returns The URL to redirect the user to for logging out.
-     */
-    getLogoutUrl({ returnTo, }?: {
-        returnTo?: string;
-    }): Promise<string>;
-    private isValidJwt;
-}
-export {};

package/lib/user-management/session.js

@@ -1,183 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CookieSession = void 0;
-const jose_1 = require("jose");
-const oauth_exception_1 = require("../common/exceptions/oauth.exception");
-const interfaces_1 = require("./interfaces");
-class CookieSession {
-    constructor(userManagement, sessionData, cookiePassword) {
-        if (!cookiePassword) {
-            throw new Error('cookiePassword is required');
-        }
-        this.userManagement = userManagement;
-        this.ironSessionProvider = userManagement.ironSessionProvider;
-        this.cookiePassword = cookiePassword;
-        this.sessionData = sessionData;
-        this.jwks = this.userManagement.jwks;
-    }
-    /**
-     * Authenticates a user with a session cookie.
-     *
-     * @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.
-     */
-    authenticate() {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!this.sessionData) {
-                return {
-                    authenticated: false,
-                    reason: interfaces_1.AuthenticateWithSessionCookieFailureReason.NO_SESSION_COOKIE_PROVIDED,
-                };
-            }
-            let session;
-            try {
-                session = yield this.ironSessionProvider.unsealData(this.sessionData, {
-                    password: this.cookiePassword,
-                });
-            }
-            catch (e) {
-                return {
-                    authenticated: false,
-                    reason: interfaces_1.AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE,
-                };
-            }
-            if (!session.accessToken) {
-                return {
-                    authenticated: false,
-                    reason: interfaces_1.AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE,
-                };
-            }
-            if (!(yield this.isValidJwt(session.accessToken))) {
-                return {
-                    authenticated: false,
-                    reason: interfaces_1.AuthenticateWithSessionCookieFailureReason.INVALID_JWT,
-                };
-            }
-            const { sid: sessionId, org_id: organizationId, role, permissions, entitlements, feature_flags: featureFlags, } = (0, jose_1.decodeJwt)(session.accessToken);
-            return {
-                authenticated: true,
-                sessionId,
-                organizationId,
-                role,
-                permissions,
-                entitlements,
-                featureFlags,
-                user: session.user,
-                impersonator: session.impersonator,
-                accessToken: session.accessToken,
-            };
-        });
-    }
-    /**
-     * Refreshes the user's session.
-     *
-     * @param options - Optional options for refreshing the session.
-     * @param options.cookiePassword - The password to use for the new session cookie.
-     * @param options.organizationId - The organization ID to use for the new session cookie.
-     * @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.
-     */
-    refresh(options = {}) {
-        var _a, _b;
-        return __awaiter(this, void 0, void 0, function* () {
-            const session = yield this.ironSessionProvider.unsealData(this.sessionData, {
-                password: this.cookiePassword,
-            });
-            if (!session.refreshToken || !session.user) {
-                return {
-                    authenticated: false,
-                    reason: interfaces_1.RefreshAndSealSessionDataFailureReason.INVALID_SESSION_COOKIE,
-                };
-            }
-            const { org_id: organizationIdFromAccessToken } = (0, jose_1.decodeJwt)(session.accessToken);
-            try {
-                const cookiePassword = (_a = options.cookiePassword) !== null && _a !== void 0 ? _a : this.cookiePassword;
-                const authenticationResponse = yield this.userManagement.authenticateWithRefreshToken({
-                    clientId: this.userManagement.clientId,
-                    refreshToken: session.refreshToken,
-                    organizationId: (_b = options.organizationId) !== null && _b !== void 0 ? _b : organizationIdFromAccessToken,
-                    session: {
-                        // We want to store the new sealed session in this class instance, so this always needs to be true
-                        sealSession: true,
-                        cookiePassword,
-                    },
-                });
-                // Update the password if a new one was provided
-                if (options.cookiePassword) {
-                    this.cookiePassword = options.cookiePassword;
-                }
-                this.sessionData = authenticationResponse.sealedSession;
-                const { sid: sessionId, org_id: organizationId, role, permissions, entitlements, feature_flags: featureFlags, } = (0, jose_1.decodeJwt)(authenticationResponse.accessToken);
-                // TODO: Returning `session` here means there's some duplicated data.
-                // Slim down the return type in a future major version.
-                return {
-                    authenticated: true,
-                    sealedSession: authenticationResponse.sealedSession,
-                    session: authenticationResponse,
-                    sessionId,
-                    organizationId,
-                    role,
-                    permissions,
-                    entitlements,
-                    featureFlags,
-                    user: session.user,
-                    impersonator: session.impersonator,
-                };
-            }
-            catch (error) {
-                if (error instanceof oauth_exception_1.OauthException &&
-                    // TODO: Add additional known errors and remove re-throw
-                    (error.error === interfaces_1.RefreshAndSealSessionDataFailureReason.INVALID_GRANT ||
-                        error.error ===
-                            interfaces_1.RefreshAndSealSessionDataFailureReason.MFA_ENROLLMENT ||
-                        error.error === interfaces_1.RefreshAndSealSessionDataFailureReason.SSO_REQUIRED)) {
-                    return {
-                        authenticated: false,
-                        reason: error.error,
-                    };
-                }
-                throw error;
-            }
-        });
-    }
-    /**
-     * Gets the URL to redirect the user to for logging out.
-     *
-     * @returns The URL to redirect the user to for logging out.
-     */
-    getLogoutUrl({ returnTo, } = {}) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const authenticationResponse = yield this.authenticate();
-            if (!authenticationResponse.authenticated) {
-                const { reason } = authenticationResponse;
-                throw new Error(`Failed to extract session ID for logout URL: ${reason}`);
-            }
-            return this.userManagement.getLogoutUrl({
-                sessionId: authenticationResponse.sessionId,
-                returnTo,
-            });
-        });
-    }
-    isValidJwt(accessToken) {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!this.jwks) {
-                throw new Error('Missing client ID. Did you provide it when initializing WorkOS?');
-            }
-            try {
-                yield (0, jose_1.jwtVerify)(accessToken, this.jwks);
-                return true;
-            }
-            catch (e) {
-                return false;
-            }
-        });
-    }
-}
-exports.CookieSession = CookieSession;

package/lib/user-management/session.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/user-management/session.ts"],"sourcesContent":["import { createRemoteJWKSet, decodeJwt, jwtVerify } from 'jose';\nimport { OauthException } from '../common/exceptions/oauth.exception';\nimport {\n  AccessToken,\n  AuthenticateWithSessionCookieFailedResponse,\n  AuthenticateWithSessionCookieFailureReason,\n  AuthenticateWithSessionCookieSuccessResponse,\n  AuthenticationResponse,\n  RefreshSessionFailureReason,\n  RefreshSessionResponse,\n  SessionCookieData,\n} from './interfaces';\nimport { UserManagement } from './user-management';\nimport { unsealData } from 'iron-session';\n\ntype RefreshOptions = {\n  cookiePassword?: string;\n  organizationId?: string;\n};\n\nexport class Session {\n  private jwks: ReturnType<typeof createRemoteJWKSet> | undefined;\n  private userManagement: UserManagement;\n  private cookiePassword: string;\n  private sessionData: string;\n\n  constructor(\n    userManagement: UserManagement,\n    sessionData: string,\n    cookiePassword: string,\n  ) {\n    if (!cookiePassword) {\n      throw new Error('cookiePassword is required');\n    }\n\n    this.userManagement = userManagement;\n    this.cookiePassword = cookiePassword;\n    this.sessionData = sessionData;\n\n    this.jwks = this.userManagement.jwks;\n  }\n\n  /**\n   * Authenticates a user with a session cookie.\n   *\n   * @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.\n   */\n  async authenticate(): Promise<\n    | AuthenticateWithSessionCookieSuccessResponse\n    | AuthenticateWithSessionCookieFailedResponse\n  > {\n    if (!this.sessionData) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.NO_SESSION_COOKIE_PROVIDED,\n      };\n    }\n\n    let session: SessionCookieData;\n\n    try {\n      session = await unsealData<SessionCookieData>(this.sessionData, {\n        password: this.cookiePassword,\n      });\n    } catch (e) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    if (!session.accessToken) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    if (!(await this.isValidJwt(session.accessToken))) {\n      return {\n        authenticated: false,\n        reason: AuthenticateWithSessionCookieFailureReason.INVALID_JWT,\n      };\n    }\n\n    const {\n      sid: sessionId,\n      org_id: organizationId,\n      role,\n      permissions,\n      entitlements,\n      feature_flags: featureFlags,\n    } = decodeJwt<AccessToken>(session.accessToken);\n\n    return {\n      authenticated: true,\n      sessionId,\n      organizationId,\n      role,\n      permissions,\n      entitlements,\n      featureFlags,\n      user: session.user,\n      impersonator: session.impersonator,\n      accessToken: session.accessToken,\n    };\n  }\n\n  /**\n   * Refreshes the user's session.\n   *\n   * @param options - Optional options for refreshing the session.\n   * @param options.cookiePassword - The password to use for the new session cookie.\n   * @param options.organizationId - The organization ID to use for the new session cookie.\n   * @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.\n   */\n  async refresh(options: RefreshOptions = {}): Promise<RefreshSessionResponse> {\n    const session = await unsealData<SessionCookieData>(this.sessionData, {\n      password: this.cookiePassword,\n    });\n\n    if (!session.refreshToken || !session.user) {\n      return {\n        authenticated: false,\n        reason: RefreshSessionFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    const { org_id: organizationIdFromAccessToken } = decodeJwt<AccessToken>(\n      session.accessToken,\n    );\n\n    try {\n      const cookiePassword = options.cookiePassword ?? this.cookiePassword;\n\n      const authenticationResponse =\n        await this.userManagement.authenticateWithRefreshToken({\n          clientId: this.userManagement.clientId as string,\n          refreshToken: session.refreshToken,\n          organizationId:\n            options.organizationId ?? organizationIdFromAccessToken,\n          session: {\n            // We want to store the new sealed session in this class instance, so this always needs to be true\n            sealSession: true,\n            cookiePassword,\n          },\n        });\n\n      // Update the password if a new one was provided\n      if (options.cookiePassword) {\n        this.cookiePassword = options.cookiePassword;\n      }\n\n      this.sessionData = authenticationResponse.sealedSession as string;\n\n      const {\n        sid: sessionId,\n        org_id: organizationId,\n        role,\n        permissions,\n        entitlements,\n        feature_flags: featureFlags,\n      } = decodeJwt<AccessToken>(authenticationResponse.accessToken);\n\n      // TODO: Returning `session` here means there's some duplicated data.\n      // Slim down the return type in a future major version.\n      return {\n        authenticated: true,\n        sealedSession: authenticationResponse.sealedSession,\n        session: authenticationResponse as AuthenticationResponse,\n        sessionId,\n        organizationId,\n        role,\n        permissions,\n        entitlements,\n        featureFlags,\n        user: session.user,\n        impersonator: session.impersonator,\n      };\n    } catch (error) {\n      if (\n        error instanceof OauthException &&\n        // TODO: Add additional known errors and remove re-throw\n        (error.error === RefreshSessionFailureReason.INVALID_GRANT ||\n          error.error === RefreshSessionFailureReason.MFA_ENROLLMENT ||\n          error.error === RefreshSessionFailureReason.SSO_REQUIRED)\n      ) {\n        return {\n          authenticated: false,\n          reason: error.error,\n        };\n      }\n\n      throw error;\n    }\n  }\n\n  /**\n   * Gets the URL to redirect the user to for logging out.\n   *\n   * @returns The URL to redirect the user to for logging out.\n   */\n  async getLogoutUrl({\n    returnTo,\n  }: { returnTo?: string } = {}): Promise<string> {\n    const authenticationResponse = await this.authenticate();\n\n    if (!authenticationResponse.authenticated) {\n      const { reason } = authenticationResponse;\n      throw new Error(`Failed to extract session ID for logout URL: ${reason}`);\n    }\n\n    return this.userManagement.getLogoutUrl({\n      sessionId: authenticationResponse.sessionId,\n      returnTo,\n    });\n  }\n\n  private async isValidJwt(accessToken: string): Promise<boolean> {\n    if (!this.jwks) {\n      throw new Error(\n        'Missing client ID. Did you provide it when initializing WorkOS?',\n      );\n    }\n\n    try {\n      await jwtVerify(accessToken, this.jwks);\n      return true;\n    } catch (e) {\n      return false;\n    }\n  }\n}\n"],"mappings":";;AAAA,SAA6B,WAAW,iBAAiB;AACzD,SAAS,sBAAsB;AAC/B;AAAA,EAGE;AAAA,EAGA;AAAA,OAGK;AAEP,SAAS,kBAAkB;AAOpB,MAAM,QAAQ;AAAA,EApBrB,OAoBqB;AAAA;AAAA;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAER,YACE,gBACA,aACA,gBACA;AACA,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,SAAK,iBAAiB;AACtB,SAAK,iBAAiB;AACtB,SAAK,cAAc;AAEnB,SAAK,OAAO,KAAK,eAAe;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eAGJ;AACA,QAAI,CAAC,KAAK,aAAa;AACrB,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QACE,2CAA2C;AAAA,MAC/C;AAAA,IACF;AAEA,QAAI;AAEJ,QAAI;AACF,gBAAU,MAAM,WAA8B,KAAK,aAAa;AAAA,QAC9D,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,GAAG;AACV,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QACE,2CAA2C;AAAA,MAC/C;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ,aAAa;AACxB,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QACE,2CAA2C;AAAA,MAC/C;AAAA,IACF;AAEA,QAAI,CAAE,MAAM,KAAK,WAAW,QAAQ,WAAW,GAAI;AACjD,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QAAQ,2CAA2C;AAAA,MACrD;AAAA,IACF;AAEA,UAAM;AAAA,MACJ,KAAK;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB,IAAI,UAAuB,QAAQ,WAAW;AAE9C,WAAO;AAAA,MACL,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,QAAQ;AAAA,MACd,cAAc,QAAQ;AAAA,MACtB,aAAa,QAAQ;AAAA,IACvB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,QAAQ,UAA0B,CAAC,GAAoC;AAC3E,UAAM,UAAU,MAAM,WAA8B,KAAK,aAAa;AAAA,MACpE,UAAU,KAAK;AAAA,IACjB,CAAC;AAED,QAAI,CAAC,QAAQ,gBAAgB,CAAC,QAAQ,MAAM;AAC1C,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QAAQ,4BAA4B;AAAA,MACtC;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,8BAA8B,IAAI;AAAA,MAChD,QAAQ;AAAA,IACV;AAEA,QAAI;AACF,YAAM,iBAAiB,QAAQ,kBAAkB,KAAK;AAEtD,YAAM,yBACJ,MAAM,KAAK,eAAe,6BAA6B;AAAA,QACrD,UAAU,KAAK,eAAe;AAAA,QAC9B,cAAc,QAAQ;AAAA,QACtB,gBACE,QAAQ,kBAAkB;AAAA,QAC5B,SAAS;AAAA;AAAA,UAEP,aAAa;AAAA,UACb;AAAA,QACF;AAAA,MACF,CAAC;AAGH,UAAI,QAAQ,gBAAgB;AAC1B,aAAK,iBAAiB,QAAQ;AAAA,MAChC;AAEA,WAAK,cAAc,uBAAuB;AAE1C,YAAM;AAAA,QACJ,KAAK;AAAA,QACL,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB,IAAI,UAAuB,uBAAuB,WAAW;AAI7D,aAAO;AAAA,QACL,eAAe;AAAA,QACf,eAAe,uBAAuB;AAAA,QACtC,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,QAAQ;AAAA,QACd,cAAc,QAAQ;AAAA,MACxB;AAAA,IACF,SAAS,OAAO;AACd,UACE,iBAAiB;AAAA,OAEhB,MAAM,UAAU,4BAA4B,iBAC3C,MAAM,UAAU,4BAA4B,kBAC5C,MAAM,UAAU,4BAA4B,eAC9C;AACA,eAAO;AAAA,UACL,eAAe;AAAA,UACf,QAAQ,MAAM;AAAA,QAChB;AAAA,MACF;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa;AAAA,IACjB;AAAA,EACF,IAA2B,CAAC,GAAoB;AAC9C,UAAM,yBAAyB,MAAM,KAAK,aAAa;AAEvD,QAAI,CAAC,uBAAuB,eAAe;AACzC,YAAM,EAAE,OAAO,IAAI;AACnB,YAAM,IAAI,MAAM,gDAAgD,MAAM,EAAE;AAAA,IAC1E;AAEA,WAAO,KAAK,eAAe,aAAa;AAAA,MACtC,WAAW,uBAAuB;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,WAAW,aAAuC;AAC9D,QAAI,CAAC,KAAK,MAAM;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACF,YAAM,UAAU,aAAa,KAAK,IAAI;AACtC,aAAO;AAAA,IACT,SAAS,GAAG;AACV,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/lib/user-management/session.spec.d.ts

@@ -1 +0,0 @@
-export {};