@workos-inc/node 8.0.0-rc.2 → 8.0.0-rc.4

package/lib/user-management/serializers/send-invitation-options.serializer.d.cts

@@ -0,0 +1,7 @@
+import { SendInvitationOptions, SerializedSendInvitationOptions } from "../interfaces/send-invitation-options.interface.cjs";
+
+//#region src/user-management/serializers/send-invitation-options.serializer.d.ts
+declare const serializeSendInvitationOptions: (options: SendInvitationOptions) => SerializedSendInvitationOptions;
+//#endregion
+export { serializeSendInvitationOptions };
+//# sourceMappingURL=send-invitation-options.serializer.d.cts.map

package/lib/user-management/serializers/send-invitation-options.serializer.d.ts

@@ -0,0 +1,7 @@
+import { SendInvitationOptions, SerializedSendInvitationOptions } from "../interfaces/send-invitation-options.interface.js";
+
+//#region src/user-management/serializers/send-invitation-options.serializer.d.ts
+declare const serializeSendInvitationOptions: (options: SendInvitationOptions) => SerializedSendInvitationOptions;
+//#endregion
+export { serializeSendInvitationOptions };
+//# sourceMappingURL=send-invitation-options.serializer.d.ts.map

package/lib/user-management/serializers/send-invitation-options.serializer.js

@@ -0,0 +1,12 @@
+//#region src/user-management/serializers/send-invitation-options.serializer.ts
+const serializeSendInvitationOptions = (options) => ({
+	email: options.email,
+	organization_id: options.organizationId,
+	expires_in_days: options.expiresInDays,
+	inviter_user_id: options.inviterUserId,
+	role_slug: options.roleSlug
+});
+
+//#endregion
+export { serializeSendInvitationOptions };
+//# sourceMappingURL=send-invitation-options.serializer.js.map

package/lib/user-management/serializers/send-invitation-options.serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-invitation-options.serializer.js","names":[],"sources":["../../../src/user-management/serializers/send-invitation-options.serializer.ts"],"sourcesContent":["import {} from '../interfaces';\nimport {\n  SendInvitationOptions,\n  SerializedSendInvitationOptions,\n} from '../interfaces/send-invitation-options.interface';\n\nexport const serializeSendInvitationOptions = (\n  options: SendInvitationOptions,\n): SerializedSendInvitationOptions => ({\n  email: options.email,\n  organization_id: options.organizationId,\n  expires_in_days: options.expiresInDays,\n  inviter_user_id: options.inviterUserId,\n  role_slug: options.roleSlug,\n});\n"],"mappings":";AAMA,MAAa,kCACX,aACqC;CACrC,OAAO,QAAQ;CACf,iBAAiB,QAAQ;CACzB,iBAAiB,QAAQ;CACzB,iBAAiB,QAAQ;CACzB,WAAW,QAAQ;CACpB"}

package/lib/user-management/serializers/session.serializer.cjs

@@ -0,0 +1,21 @@
+
+//#region src/user-management/serializers/session.serializer.ts
+const deserializeSession = (session) => ({
+	object: "session",
+	id: session.id,
+	userId: session.user_id,
+	ipAddress: session.ip_address,
+	userAgent: session.user_agent,
+	organizationId: session.organization_id,
+	impersonator: session.impersonator,
+	authMethod: session.auth_method,
+	status: session.status,
+	expiresAt: session.expires_at,
+	endedAt: session.ended_at,
+	createdAt: session.created_at,
+	updatedAt: session.updated_at
+});
+
+//#endregion
+exports.deserializeSession = deserializeSession;
+//# sourceMappingURL=session.serializer.cjs.map

package/lib/user-management/serializers/session.serializer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.serializer.cjs","names":[],"sources":["../../../src/user-management/serializers/session.serializer.ts"],"sourcesContent":["import { Session, SessionResponse } from '../interfaces';\n\nexport const deserializeSession = (session: SessionResponse): Session => ({\n  object: 'session',\n  id: session.id,\n  userId: session.user_id,\n  ipAddress: session.ip_address,\n  userAgent: session.user_agent,\n  organizationId: session.organization_id,\n  impersonator: session.impersonator,\n  authMethod: session.auth_method,\n  status: session.status,\n  expiresAt: session.expires_at,\n  endedAt: session.ended_at,\n  createdAt: session.created_at,\n  updatedAt: session.updated_at,\n});\n"],"mappings":";;AAEA,MAAa,sBAAsB,aAAuC;CACxE,QAAQ;CACR,IAAI,QAAQ;CACZ,QAAQ,QAAQ;CAChB,WAAW,QAAQ;CACnB,WAAW,QAAQ;CACnB,gBAAgB,QAAQ;CACxB,cAAc,QAAQ;CACtB,YAAY,QAAQ;CACpB,QAAQ,QAAQ;CAChB,WAAW,QAAQ;CACnB,SAAS,QAAQ;CACjB,WAAW,QAAQ;CACnB,WAAW,QAAQ;CACpB"}

package/lib/user-management/serializers/session.serializer.d.cts

@@ -0,0 +1,7 @@
+import { Session, SessionResponse } from "../interfaces/session.interface.cjs";
+
+//#region src/user-management/serializers/session.serializer.d.ts
+declare const deserializeSession: (session: SessionResponse) => Session;
+//#endregion
+export { deserializeSession };
+//# sourceMappingURL=session.serializer.d.cts.map

package/lib/user-management/serializers/session.serializer.d.ts

@@ -0,0 +1,7 @@
+import { Session, SessionResponse } from "../interfaces/session.interface.js";
+
+//#region src/user-management/serializers/session.serializer.d.ts
+declare const deserializeSession: (session: SessionResponse) => Session;
+//#endregion
+export { deserializeSession };
+//# sourceMappingURL=session.serializer.d.ts.map

package/lib/user-management/serializers/session.serializer.js

@@ -0,0 +1,20 @@
+//#region src/user-management/serializers/session.serializer.ts
+const deserializeSession = (session) => ({
+	object: "session",
+	id: session.id,
+	userId: session.user_id,
+	ipAddress: session.ip_address,
+	userAgent: session.user_agent,
+	organizationId: session.organization_id,
+	impersonator: session.impersonator,
+	authMethod: session.auth_method,
+	status: session.status,
+	expiresAt: session.expires_at,
+	endedAt: session.ended_at,
+	createdAt: session.created_at,
+	updatedAt: session.updated_at
+});
+
+//#endregion
+export { deserializeSession };
+//# sourceMappingURL=session.serializer.js.map

package/lib/user-management/serializers/session.serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.serializer.js","names":[],"sources":["../../../src/user-management/serializers/session.serializer.ts"],"sourcesContent":["import { Session, SessionResponse } from '../interfaces';\n\nexport const deserializeSession = (session: SessionResponse): Session => ({\n  object: 'session',\n  id: session.id,\n  userId: session.user_id,\n  ipAddress: session.ip_address,\n  userAgent: session.user_agent,\n  organizationId: session.organization_id,\n  impersonator: session.impersonator,\n  authMethod: session.auth_method,\n  status: session.status,\n  expiresAt: session.expires_at,\n  endedAt: session.ended_at,\n  createdAt: session.created_at,\n  updatedAt: session.updated_at,\n});\n"],"mappings":";AAEA,MAAa,sBAAsB,aAAuC;CACxE,QAAQ;CACR,IAAI,QAAQ;CACZ,QAAQ,QAAQ;CAChB,WAAW,QAAQ;CACnB,WAAW,QAAQ;CACnB,gBAAgB,QAAQ;CACxB,cAAc,QAAQ;CACtB,YAAY,QAAQ;CACpB,QAAQ,QAAQ;CAChB,WAAW,QAAQ;CACnB,SAAS,QAAQ;CACjB,WAAW,QAAQ;CACnB,WAAW,QAAQ;CACpB"}

package/lib/user-management/serializers/update-organization-membership-options.serializer.cjs

@@ -0,0 +1,10 @@
+
+//#region src/user-management/serializers/update-organization-membership-options.serializer.ts
+const serializeUpdateOrganizationMembershipOptions = (options) => ({
+	role_slug: options.roleSlug,
+	role_slugs: options.roleSlugs
+});
+
+//#endregion
+exports.serializeUpdateOrganizationMembershipOptions = serializeUpdateOrganizationMembershipOptions;
+//# sourceMappingURL=update-organization-membership-options.serializer.cjs.map

package/lib/user-management/serializers/update-organization-membership-options.serializer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-organization-membership-options.serializer.cjs","names":[],"sources":["../../../src/user-management/serializers/update-organization-membership-options.serializer.ts"],"sourcesContent":["import {\n  UpdateOrganizationMembershipOptions,\n  SerializedUpdateOrganizationMembershipOptions,\n} from '../interfaces/update-organization-membership-options.interface';\n\nexport const serializeUpdateOrganizationMembershipOptions = (\n  options: UpdateOrganizationMembershipOptions,\n): SerializedUpdateOrganizationMembershipOptions => ({\n  role_slug: options.roleSlug,\n  role_slugs: options.roleSlugs,\n});\n"],"mappings":";;AAKA,MAAa,gDACX,aACmD;CACnD,WAAW,QAAQ;CACnB,YAAY,QAAQ;CACrB"}

package/lib/user-management/serializers/update-organization-membership-options.serializer.d.cts

@@ -0,0 +1,7 @@
+import { SerializedUpdateOrganizationMembershipOptions, UpdateOrganizationMembershipOptions } from "../interfaces/update-organization-membership-options.interface.cjs";
+
+//#region src/user-management/serializers/update-organization-membership-options.serializer.d.ts
+declare const serializeUpdateOrganizationMembershipOptions: (options: UpdateOrganizationMembershipOptions) => SerializedUpdateOrganizationMembershipOptions;
+//#endregion
+export { serializeUpdateOrganizationMembershipOptions };
+//# sourceMappingURL=update-organization-membership-options.serializer.d.cts.map

package/lib/user-management/serializers/update-organization-membership-options.serializer.d.ts

@@ -0,0 +1,7 @@
+import { SerializedUpdateOrganizationMembershipOptions, UpdateOrganizationMembershipOptions } from "../interfaces/update-organization-membership-options.interface.js";
+
+//#region src/user-management/serializers/update-organization-membership-options.serializer.d.ts
+declare const serializeUpdateOrganizationMembershipOptions: (options: UpdateOrganizationMembershipOptions) => SerializedUpdateOrganizationMembershipOptions;
+//#endregion
+export { serializeUpdateOrganizationMembershipOptions };
+//# sourceMappingURL=update-organization-membership-options.serializer.d.ts.map

package/lib/user-management/serializers/update-organization-membership-options.serializer.js

@@ -0,0 +1,9 @@
+//#region src/user-management/serializers/update-organization-membership-options.serializer.ts
+const serializeUpdateOrganizationMembershipOptions = (options) => ({
+	role_slug: options.roleSlug,
+	role_slugs: options.roleSlugs
+});
+
+//#endregion
+export { serializeUpdateOrganizationMembershipOptions };
+//# sourceMappingURL=update-organization-membership-options.serializer.js.map

package/lib/user-management/serializers/update-organization-membership-options.serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-organization-membership-options.serializer.js","names":[],"sources":["../../../src/user-management/serializers/update-organization-membership-options.serializer.ts"],"sourcesContent":["import {\n  UpdateOrganizationMembershipOptions,\n  SerializedUpdateOrganizationMembershipOptions,\n} from '../interfaces/update-organization-membership-options.interface';\n\nexport const serializeUpdateOrganizationMembershipOptions = (\n  options: UpdateOrganizationMembershipOptions,\n): SerializedUpdateOrganizationMembershipOptions => ({\n  role_slug: options.roleSlug,\n  role_slugs: options.roleSlugs,\n});\n"],"mappings":";AAKA,MAAa,gDACX,aACmD;CACnD,WAAW,QAAQ;CACnB,YAAY,QAAQ;CACrB"}

package/lib/user-management/serializers/update-user-options.serializer.cjs

@@ -0,0 +1,18 @@
+
+//#region src/user-management/serializers/update-user-options.serializer.ts
+const serializeUpdateUserOptions = (options) => ({
+	email: options.email,
+	email_verified: options.emailVerified,
+	first_name: options.firstName,
+	last_name: options.lastName,
+	password: options.password,
+	password_hash: options.passwordHash,
+	password_hash_type: options.passwordHashType,
+	external_id: options.externalId,
+	locale: options.locale,
+	metadata: options.metadata
+});
+
+//#endregion
+exports.serializeUpdateUserOptions = serializeUpdateUserOptions;
+//# sourceMappingURL=update-user-options.serializer.cjs.map

package/lib/user-management/serializers/update-user-options.serializer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-user-options.serializer.cjs","names":[],"sources":["../../../src/user-management/serializers/update-user-options.serializer.ts"],"sourcesContent":["import { SerializedUpdateUserOptions, UpdateUserOptions } from '../interfaces';\n\nexport const serializeUpdateUserOptions = (\n  options: UpdateUserOptions,\n): SerializedUpdateUserOptions => ({\n  email: options.email,\n  email_verified: options.emailVerified,\n  first_name: options.firstName,\n  last_name: options.lastName,\n  password: options.password,\n  password_hash: options.passwordHash,\n  password_hash_type: options.passwordHashType,\n  external_id: options.externalId,\n  locale: options.locale,\n  metadata: options.metadata,\n});\n"],"mappings":";;AAEA,MAAa,8BACX,aACiC;CACjC,OAAO,QAAQ;CACf,gBAAgB,QAAQ;CACxB,YAAY,QAAQ;CACpB,WAAW,QAAQ;CACnB,UAAU,QAAQ;CAClB,eAAe,QAAQ;CACvB,oBAAoB,QAAQ;CAC5B,aAAa,QAAQ;CACrB,QAAQ,QAAQ;CAChB,UAAU,QAAQ;CACnB"}

package/lib/user-management/serializers/update-user-options.serializer.d.cts

@@ -0,0 +1,7 @@
+import { SerializedUpdateUserOptions, UpdateUserOptions } from "../interfaces/update-user-options.interface.cjs";
+
+//#region src/user-management/serializers/update-user-options.serializer.d.ts
+declare const serializeUpdateUserOptions: (options: UpdateUserOptions) => SerializedUpdateUserOptions;
+//#endregion
+export { serializeUpdateUserOptions };
+//# sourceMappingURL=update-user-options.serializer.d.cts.map

package/lib/user-management/serializers/update-user-options.serializer.d.ts

@@ -0,0 +1,7 @@
+import { SerializedUpdateUserOptions, UpdateUserOptions } from "../interfaces/update-user-options.interface.js";
+
+//#region src/user-management/serializers/update-user-options.serializer.d.ts
+declare const serializeUpdateUserOptions: (options: UpdateUserOptions) => SerializedUpdateUserOptions;
+//#endregion
+export { serializeUpdateUserOptions };
+//# sourceMappingURL=update-user-options.serializer.d.ts.map

package/lib/user-management/serializers/update-user-options.serializer.js

@@ -0,0 +1,17 @@
+//#region src/user-management/serializers/update-user-options.serializer.ts
+const serializeUpdateUserOptions = (options) => ({
+	email: options.email,
+	email_verified: options.emailVerified,
+	first_name: options.firstName,
+	last_name: options.lastName,
+	password: options.password,
+	password_hash: options.passwordHash,
+	password_hash_type: options.passwordHashType,
+	external_id: options.externalId,
+	locale: options.locale,
+	metadata: options.metadata
+});
+
+//#endregion
+export { serializeUpdateUserOptions };
+//# sourceMappingURL=update-user-options.serializer.js.map

package/lib/user-management/serializers/update-user-options.serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-user-options.serializer.js","names":[],"sources":["../../../src/user-management/serializers/update-user-options.serializer.ts"],"sourcesContent":["import { SerializedUpdateUserOptions, UpdateUserOptions } from '../interfaces';\n\nexport const serializeUpdateUserOptions = (\n  options: UpdateUserOptions,\n): SerializedUpdateUserOptions => ({\n  email: options.email,\n  email_verified: options.emailVerified,\n  first_name: options.firstName,\n  last_name: options.lastName,\n  password: options.password,\n  password_hash: options.passwordHash,\n  password_hash_type: options.passwordHashType,\n  external_id: options.externalId,\n  locale: options.locale,\n  metadata: options.metadata,\n});\n"],"mappings":";AAEA,MAAa,8BACX,aACiC;CACjC,OAAO,QAAQ;CACf,gBAAgB,QAAQ;CACxB,YAAY,QAAQ;CACpB,WAAW,QAAQ;CACnB,UAAU,QAAQ;CAClB,eAAe,QAAQ;CACvB,oBAAoB,QAAQ;CAC5B,aAAa,QAAQ;CACrB,QAAQ,QAAQ;CAChB,UAAU,QAAQ;CACnB"}

package/lib/user-management/serializers/update-user-password-options.serializer.cjs

@@ -0,0 +1,7 @@
+
+//#region src/user-management/serializers/update-user-password-options.serializer.ts
+const serializeUpdateUserPasswordOptions = (options) => ({ password: options.password });
+
+//#endregion
+exports.serializeUpdateUserPasswordOptions = serializeUpdateUserPasswordOptions;
+//# sourceMappingURL=update-user-password-options.serializer.cjs.map

package/lib/user-management/serializers/update-user-password-options.serializer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-user-password-options.serializer.cjs","names":[],"sources":["../../../src/user-management/serializers/update-user-password-options.serializer.ts"],"sourcesContent":["import {\n  SerializedUpdateUserPasswordOptions,\n  UpdateUserPasswordOptions,\n} from '../interfaces';\n\nexport const serializeUpdateUserPasswordOptions = (\n  options: UpdateUserPasswordOptions,\n): SerializedUpdateUserPasswordOptions => ({\n  password: options.password,\n});\n"],"mappings":";;AAKA,MAAa,sCACX,aACyC,EACzC,UAAU,QAAQ,UACnB"}

package/lib/user-management/serializers/update-user-password-options.serializer.d.cts

@@ -0,0 +1,7 @@
+import { SerializedUpdateUserPasswordOptions, UpdateUserPasswordOptions } from "../interfaces/update-user-password-options.interface.cjs";
+
+//#region src/user-management/serializers/update-user-password-options.serializer.d.ts
+declare const serializeUpdateUserPasswordOptions: (options: UpdateUserPasswordOptions) => SerializedUpdateUserPasswordOptions;
+//#endregion
+export { serializeUpdateUserPasswordOptions };
+//# sourceMappingURL=update-user-password-options.serializer.d.cts.map

package/lib/user-management/serializers/update-user-password-options.serializer.d.ts

@@ -0,0 +1,7 @@
+import { SerializedUpdateUserPasswordOptions, UpdateUserPasswordOptions } from "../interfaces/update-user-password-options.interface.js";
+
+//#region src/user-management/serializers/update-user-password-options.serializer.d.ts
+declare const serializeUpdateUserPasswordOptions: (options: UpdateUserPasswordOptions) => SerializedUpdateUserPasswordOptions;
+//#endregion
+export { serializeUpdateUserPasswordOptions };
+//# sourceMappingURL=update-user-password-options.serializer.d.ts.map

package/lib/user-management/serializers/update-user-password-options.serializer.js

@@ -0,0 +1,6 @@
+//#region src/user-management/serializers/update-user-password-options.serializer.ts
+const serializeUpdateUserPasswordOptions = (options) => ({ password: options.password });
+
+//#endregion
+export { serializeUpdateUserPasswordOptions };
+//# sourceMappingURL=update-user-password-options.serializer.js.map

package/lib/user-management/serializers/update-user-password-options.serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-user-password-options.serializer.js","names":[],"sources":["../../../src/user-management/serializers/update-user-password-options.serializer.ts"],"sourcesContent":["import {\n  SerializedUpdateUserPasswordOptions,\n  UpdateUserPasswordOptions,\n} from '../interfaces';\n\nexport const serializeUpdateUserPasswordOptions = (\n  options: UpdateUserPasswordOptions,\n): SerializedUpdateUserPasswordOptions => ({\n  password: options.password,\n});\n"],"mappings":";AAKA,MAAa,sCACX,aACyC,EACzC,UAAU,QAAQ,UACnB"}

package/lib/user-management/serializers/user.serializer.cjs

@@ -0,0 +1,21 @@
+
+//#region src/user-management/serializers/user.serializer.ts
+const deserializeUser = (user) => ({
+	object: user.object,
+	id: user.id,
+	email: user.email,
+	emailVerified: user.email_verified,
+	firstName: user.first_name,
+	profilePictureUrl: user.profile_picture_url,
+	lastName: user.last_name,
+	lastSignInAt: user.last_sign_in_at,
+	locale: user.locale,
+	createdAt: user.created_at,
+	updatedAt: user.updated_at,
+	externalId: user.external_id ?? null,
+	metadata: user.metadata ?? {}
+});
+
+//#endregion
+exports.deserializeUser = deserializeUser;
+//# sourceMappingURL=user.serializer.cjs.map

package/lib/user-management/serializers/user.serializer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.serializer.cjs","names":[],"sources":["../../../src/user-management/serializers/user.serializer.ts"],"sourcesContent":["import { User, UserResponse } from '../interfaces';\n\nexport const deserializeUser = (user: UserResponse): User => ({\n  object: user.object,\n  id: user.id,\n  email: user.email,\n  emailVerified: user.email_verified,\n  firstName: user.first_name,\n  profilePictureUrl: user.profile_picture_url,\n  lastName: user.last_name,\n  lastSignInAt: user.last_sign_in_at,\n  locale: user.locale,\n  createdAt: user.created_at,\n  updatedAt: user.updated_at,\n  externalId: user.external_id ?? null,\n  metadata: user.metadata ?? {},\n});\n"],"mappings":";;AAEA,MAAa,mBAAmB,UAA8B;CAC5D,QAAQ,KAAK;CACb,IAAI,KAAK;CACT,OAAO,KAAK;CACZ,eAAe,KAAK;CACpB,WAAW,KAAK;CAChB,mBAAmB,KAAK;CACxB,UAAU,KAAK;CACf,cAAc,KAAK;CACnB,QAAQ,KAAK;CACb,WAAW,KAAK;CAChB,WAAW,KAAK;CAChB,YAAY,KAAK,eAAe;CAChC,UAAU,KAAK,YAAY,EAAE;CAC9B"}

package/lib/user-management/serializers/user.serializer.d.cts

@@ -0,0 +1,7 @@
+import { User, UserResponse } from "../interfaces/user.interface.cjs";
+
+//#region src/user-management/serializers/user.serializer.d.ts
+declare const deserializeUser: (user: UserResponse) => User;
+//#endregion
+export { deserializeUser };
+//# sourceMappingURL=user.serializer.d.cts.map

package/lib/user-management/serializers/user.serializer.d.ts

@@ -0,0 +1,7 @@
+import { User, UserResponse } from "../interfaces/user.interface.js";
+
+//#region src/user-management/serializers/user.serializer.d.ts
+declare const deserializeUser: (user: UserResponse) => User;
+//#endregion
+export { deserializeUser };
+//# sourceMappingURL=user.serializer.d.ts.map

package/lib/user-management/serializers/user.serializer.js

@@ -0,0 +1,20 @@
+//#region src/user-management/serializers/user.serializer.ts
+const deserializeUser = (user) => ({
+	object: user.object,
+	id: user.id,
+	email: user.email,
+	emailVerified: user.email_verified,
+	firstName: user.first_name,
+	profilePictureUrl: user.profile_picture_url,
+	lastName: user.last_name,
+	lastSignInAt: user.last_sign_in_at,
+	locale: user.locale,
+	createdAt: user.created_at,
+	updatedAt: user.updated_at,
+	externalId: user.external_id ?? null,
+	metadata: user.metadata ?? {}
+});
+
+//#endregion
+export { deserializeUser };
+//# sourceMappingURL=user.serializer.js.map

package/lib/user-management/serializers/user.serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.serializer.js","names":[],"sources":["../../../src/user-management/serializers/user.serializer.ts"],"sourcesContent":["import { User, UserResponse } from '../interfaces';\n\nexport const deserializeUser = (user: UserResponse): User => ({\n  object: user.object,\n  id: user.id,\n  email: user.email,\n  emailVerified: user.email_verified,\n  firstName: user.first_name,\n  profilePictureUrl: user.profile_picture_url,\n  lastName: user.last_name,\n  lastSignInAt: user.last_sign_in_at,\n  locale: user.locale,\n  createdAt: user.created_at,\n  updatedAt: user.updated_at,\n  externalId: user.external_id ?? null,\n  metadata: user.metadata ?? {},\n});\n"],"mappings":";AAEA,MAAa,mBAAmB,UAA8B;CAC5D,QAAQ,KAAK;CACb,IAAI,KAAK;CACT,OAAO,KAAK;CACZ,eAAe,KAAK;CACpB,WAAW,KAAK;CAChB,mBAAmB,KAAK;CACxB,UAAU,KAAK;CACf,cAAc,KAAK;CACnB,QAAQ,KAAK;CACb,WAAW,KAAK;CAChB,WAAW,KAAK;CAChB,YAAY,KAAK,eAAe;CAChC,UAAU,KAAK,YAAY,EAAE;CAC9B"}

package/lib/user-management/session.cjs

@@ -0,0 +1,144 @@
+const require_common_exceptions_oauth_exception = require('../common/exceptions/oauth.exception.cjs');
+const require_user_management_interfaces_authenticate_with_session_cookie_interface = require('./interfaces/authenticate-with-session-cookie.interface.cjs');
+const require_user_management_interfaces_refresh_and_seal_session_data_interface = require('./interfaces/refresh-and-seal-session-data.interface.cjs');
+const require_utils_jose = require('../utils/jose.cjs');
+let iron_session = require("iron-session");
+
+//#region src/user-management/session.ts
+var CookieSession = class {
+	userManagement;
+	cookiePassword;
+	sessionData;
+	constructor(userManagement, sessionData, cookiePassword) {
+		if (!cookiePassword) throw new Error("cookiePassword is required");
+		this.userManagement = userManagement;
+		this.cookiePassword = cookiePassword;
+		this.sessionData = sessionData;
+	}
+	/**
+	* Authenticates a user with a session cookie.
+	*
+	* @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.
+	*/
+	async authenticate() {
+		if (!this.sessionData) return {
+			authenticated: false,
+			reason: require_user_management_interfaces_authenticate_with_session_cookie_interface.AuthenticateWithSessionCookieFailureReason.NO_SESSION_COOKIE_PROVIDED
+		};
+		let session;
+		try {
+			session = await (0, iron_session.unsealData)(this.sessionData, { password: this.cookiePassword });
+		} catch (e) {
+			return {
+				authenticated: false,
+				reason: require_user_management_interfaces_authenticate_with_session_cookie_interface.AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE
+			};
+		}
+		if (!session.accessToken) return {
+			authenticated: false,
+			reason: require_user_management_interfaces_authenticate_with_session_cookie_interface.AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE
+		};
+		if (!await this.isValidJwt(session.accessToken)) return {
+			authenticated: false,
+			reason: require_user_management_interfaces_authenticate_with_session_cookie_interface.AuthenticateWithSessionCookieFailureReason.INVALID_JWT
+		};
+		const { decodeJwt } = await require_utils_jose.getJose();
+		const { sid: sessionId, org_id: organizationId, role, roles, permissions, entitlements, feature_flags: featureFlags } = decodeJwt(session.accessToken);
+		return {
+			authenticated: true,
+			sessionId,
+			organizationId,
+			role,
+			roles,
+			permissions,
+			entitlements,
+			featureFlags,
+			user: session.user,
+			impersonator: session.impersonator,
+			accessToken: session.accessToken
+		};
+	}
+	/**
+	* Refreshes the user's session.
+	*
+	* @param options - Optional options for refreshing the session.
+	* @param options.cookiePassword - The password to use for the new session cookie.
+	* @param options.organizationId - The organization ID to use for the new session cookie.
+	* @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.
+	*/
+	async refresh(options = {}) {
+		const { decodeJwt } = await require_utils_jose.getJose();
+		const session = await (0, iron_session.unsealData)(this.sessionData, { password: this.cookiePassword });
+		if (!session.refreshToken || !session.user) return {
+			authenticated: false,
+			reason: require_user_management_interfaces_refresh_and_seal_session_data_interface.RefreshSessionFailureReason.INVALID_SESSION_COOKIE
+		};
+		const { org_id: organizationIdFromAccessToken } = decodeJwt(session.accessToken);
+		try {
+			const cookiePassword = options.cookiePassword ?? this.cookiePassword;
+			const authenticationResponse = await this.userManagement.authenticateWithRefreshToken({
+				clientId: this.userManagement.clientId,
+				refreshToken: session.refreshToken,
+				organizationId: options.organizationId ?? organizationIdFromAccessToken,
+				session: {
+					sealSession: true,
+					cookiePassword
+				}
+			});
+			if (options.cookiePassword) this.cookiePassword = options.cookiePassword;
+			this.sessionData = authenticationResponse.sealedSession;
+			const { sid: sessionId, org_id: organizationId, role, roles, permissions, entitlements, feature_flags: featureFlags } = decodeJwt(authenticationResponse.accessToken);
+			return {
+				authenticated: true,
+				sealedSession: authenticationResponse.sealedSession,
+				session: authenticationResponse,
+				sessionId,
+				organizationId,
+				role,
+				roles,
+				permissions,
+				entitlements,
+				featureFlags,
+				user: session.user,
+				impersonator: session.impersonator
+			};
+		} catch (error) {
+			if (error instanceof require_common_exceptions_oauth_exception.OauthException && (error.error === require_user_management_interfaces_refresh_and_seal_session_data_interface.RefreshSessionFailureReason.INVALID_GRANT || error.error === require_user_management_interfaces_refresh_and_seal_session_data_interface.RefreshSessionFailureReason.MFA_ENROLLMENT || error.error === require_user_management_interfaces_refresh_and_seal_session_data_interface.RefreshSessionFailureReason.SSO_REQUIRED)) return {
+				authenticated: false,
+				reason: error.error
+			};
+			throw error;
+		}
+	}
+	/**
+	* Gets the URL to redirect the user to for logging out.
+	*
+	* @returns The URL to redirect the user to for logging out.
+	*/
+	async getLogoutUrl({ returnTo } = {}) {
+		const authenticationResponse = await this.authenticate();
+		if (!authenticationResponse.authenticated) {
+			const { reason } = authenticationResponse;
+			throw new Error(`Failed to extract session ID for logout URL: ${reason}`);
+		}
+		return this.userManagement.getLogoutUrl({
+			sessionId: authenticationResponse.sessionId,
+			returnTo
+		});
+	}
+	async isValidJwt(accessToken) {
+		const { jwtVerify } = await require_utils_jose.getJose();
+		const jwks = await this.userManagement.getJWKS();
+		if (!jwks) throw new Error("Missing client ID. Did you provide it when initializing WorkOS?");
+		try {
+			await jwtVerify(accessToken, jwks);
+			return true;
+		} catch (e) {
+			return false;
+		}
+	}
+};
+
+//#endregion
+exports.CookieSession = CookieSession;
+//# sourceMappingURL=session.cjs.map

package/lib/user-management/session.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.cjs","names":["AuthenticateWithSessionCookieFailureReason","session: SessionCookieData","getJose","RefreshSessionFailureReason","OauthException"],"sources":["../../src/user-management/session.ts"],"sourcesContent":["import { OauthException } from '../common/exceptions/oauth.exception';\nimport {\n  AccessToken,\n  AuthenticateWithSessionCookieFailedResponse,\n  AuthenticateWithSessionCookieFailureReason,\n  AuthenticateWithSessionCookieSuccessResponse,\n  AuthenticationResponse,\n  RefreshSessionFailureReason,\n  RefreshSessionResponse,\n  SessionCookieData,\n} from './interfaces';\nimport { UserManagement } from './user-management';\nimport { unsealData } from 'iron-session';\nimport { getJose } from '../utils/jose';\n\ntype RefreshOptions = {\n  cookiePassword?: string;\n  organizationId?: string;\n};\n\nexport class CookieSession {\n  private userManagement: UserManagement;\n  private cookiePassword: string;\n  private sessionData: string;\n\n  constructor(\n    userManagement: UserManagement,\n    sessionData: string,\n    cookiePassword: string,\n  ) {\n    if (!cookiePassword) {\n      throw new Error('cookiePassword is required');\n    }\n\n    this.userManagement = userManagement;\n    this.cookiePassword = cookiePassword;\n    this.sessionData = sessionData;\n  }\n\n  /**\n   * Authenticates a user with a session cookie.\n   *\n   * @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.\n   */\n  async authenticate(): Promise<\n    | AuthenticateWithSessionCookieSuccessResponse\n    | AuthenticateWithSessionCookieFailedResponse\n  > {\n    if (!this.sessionData) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.NO_SESSION_COOKIE_PROVIDED,\n      };\n    }\n\n    let session: SessionCookieData;\n\n    try {\n      session = await unsealData<SessionCookieData>(this.sessionData, {\n        password: this.cookiePassword,\n      });\n    } catch (e) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    if (!session.accessToken) {\n      return {\n        authenticated: false,\n        reason:\n          AuthenticateWithSessionCookieFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    if (!(await this.isValidJwt(session.accessToken))) {\n      return {\n        authenticated: false,\n        reason: AuthenticateWithSessionCookieFailureReason.INVALID_JWT,\n      };\n    }\n\n    const { decodeJwt } = await getJose();\n\n    const {\n      sid: sessionId,\n      org_id: organizationId,\n      role,\n      roles,\n      permissions,\n      entitlements,\n      feature_flags: featureFlags,\n    } = decodeJwt<AccessToken>(session.accessToken);\n\n    return {\n      authenticated: true,\n      sessionId,\n      organizationId,\n      role,\n      roles,\n      permissions,\n      entitlements,\n      featureFlags,\n      user: session.user,\n      impersonator: session.impersonator,\n      accessToken: session.accessToken,\n    };\n  }\n\n  /**\n   * Refreshes the user's session.\n   *\n   * @param options - Optional options for refreshing the session.\n   * @param options.cookiePassword - The password to use for the new session cookie.\n   * @param options.organizationId - The organization ID to use for the new session cookie.\n   * @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.\n   */\n  async refresh(options: RefreshOptions = {}): Promise<RefreshSessionResponse> {\n    const { decodeJwt } = await getJose();\n    const session = await unsealData<SessionCookieData>(this.sessionData, {\n      password: this.cookiePassword,\n    });\n\n    if (!session.refreshToken || !session.user) {\n      return {\n        authenticated: false,\n        reason: RefreshSessionFailureReason.INVALID_SESSION_COOKIE,\n      };\n    }\n\n    const { org_id: organizationIdFromAccessToken } = decodeJwt<AccessToken>(\n      session.accessToken,\n    );\n\n    try {\n      const cookiePassword = options.cookiePassword ?? this.cookiePassword;\n\n      const authenticationResponse =\n        await this.userManagement.authenticateWithRefreshToken({\n          clientId: this.userManagement.clientId as string,\n          refreshToken: session.refreshToken,\n          organizationId:\n            options.organizationId ?? organizationIdFromAccessToken,\n          session: {\n            // We want to store the new sealed session in this class instance, so this always needs to be true\n            sealSession: true,\n            cookiePassword,\n          },\n        });\n\n      // Update the password if a new one was provided\n      if (options.cookiePassword) {\n        this.cookiePassword = options.cookiePassword;\n      }\n\n      this.sessionData = authenticationResponse.sealedSession as string;\n\n      const {\n        sid: sessionId,\n        org_id: organizationId,\n        role,\n        roles,\n        permissions,\n        entitlements,\n        feature_flags: featureFlags,\n      } = decodeJwt<AccessToken>(authenticationResponse.accessToken);\n\n      // TODO: Returning `session` here means there's some duplicated data.\n      // Slim down the return type in a future major version.\n      return {\n        authenticated: true,\n        sealedSession: authenticationResponse.sealedSession,\n        session: authenticationResponse as AuthenticationResponse,\n        sessionId,\n        organizationId,\n        role,\n        roles,\n        permissions,\n        entitlements,\n        featureFlags,\n        user: session.user,\n        impersonator: session.impersonator,\n      };\n    } catch (error) {\n      if (\n        error instanceof OauthException &&\n        // TODO: Add additional known errors and remove re-throw\n        (error.error === RefreshSessionFailureReason.INVALID_GRANT ||\n          error.error === RefreshSessionFailureReason.MFA_ENROLLMENT ||\n          error.error === RefreshSessionFailureReason.SSO_REQUIRED)\n      ) {\n        return {\n          authenticated: false,\n          reason: error.error,\n        };\n      }\n\n      throw error;\n    }\n  }\n\n  /**\n   * Gets the URL to redirect the user to for logging out.\n   *\n   * @returns The URL to redirect the user to for logging out.\n   */\n  async getLogoutUrl({\n    returnTo,\n  }: { returnTo?: string } = {}): Promise<string> {\n    const authenticationResponse = await this.authenticate();\n\n    if (!authenticationResponse.authenticated) {\n      const { reason } = authenticationResponse;\n      throw new Error(`Failed to extract session ID for logout URL: ${reason}`);\n    }\n\n    return this.userManagement.getLogoutUrl({\n      sessionId: authenticationResponse.sessionId,\n      returnTo,\n    });\n  }\n\n  private async isValidJwt(accessToken: string): Promise<boolean> {\n    const { jwtVerify } = await getJose();\n    const jwks = await this.userManagement.getJWKS();\n    if (!jwks) {\n      throw new Error(\n        'Missing client ID. Did you provide it when initializing WorkOS?',\n      );\n    }\n\n    try {\n      await jwtVerify(accessToken, jwks);\n      return true;\n    } catch (e) {\n      return false;\n    }\n  }\n}\n"],"mappings":";;;;;;;AAoBA,IAAa,gBAAb,MAA2B;CACzB,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YACE,gBACA,aACA,gBACA;AACA,MAAI,CAAC,eACH,OAAM,IAAI,MAAM,6BAA6B;AAG/C,OAAK,iBAAiB;AACtB,OAAK,iBAAiB;AACtB,OAAK,cAAc;;;;;;;CAQrB,MAAM,eAGJ;AACA,MAAI,CAAC,KAAK,YACR,QAAO;GACL,eAAe;GACf,QACEA,yHAA2C;GAC9C;EAGH,IAAIC;AAEJ,MAAI;AACF,aAAU,mCAAoC,KAAK,aAAa,EAC9D,UAAU,KAAK,gBAChB,CAAC;WACK,GAAG;AACV,UAAO;IACL,eAAe;IACf,QACED,yHAA2C;IAC9C;;AAGH,MAAI,CAAC,QAAQ,YACX,QAAO;GACL,eAAe;GACf,QACEA,yHAA2C;GAC9C;AAGH,MAAI,CAAE,MAAM,KAAK,WAAW,QAAQ,YAAY,CAC9C,QAAO;GACL,eAAe;GACf,QAAQA,yHAA2C;GACpD;EAGH,MAAM,EAAE,cAAc,MAAME,4BAAS;EAErC,MAAM,EACJ,KAAK,WACL,QAAQ,gBACR,MACA,OACA,aACA,cACA,eAAe,iBACb,UAAuB,QAAQ,YAAY;AAE/C,SAAO;GACL,eAAe;GACf;GACA;GACA;GACA;GACA;GACA;GACA;GACA,MAAM,QAAQ;GACd,cAAc,QAAQ;GACtB,aAAa,QAAQ;GACtB;;;;;;;;;;CAWH,MAAM,QAAQ,UAA0B,EAAE,EAAmC;EAC3E,MAAM,EAAE,cAAc,MAAMA,4BAAS;EACrC,MAAM,UAAU,mCAAoC,KAAK,aAAa,EACpE,UAAU,KAAK,gBAChB,CAAC;AAEF,MAAI,CAAC,QAAQ,gBAAgB,CAAC,QAAQ,KACpC,QAAO;GACL,eAAe;GACf,QAAQC,uGAA4B;GACrC;EAGH,MAAM,EAAE,QAAQ,kCAAkC,UAChD,QAAQ,YACT;AAED,MAAI;GACF,MAAM,iBAAiB,QAAQ,kBAAkB,KAAK;GAEtD,MAAM,yBACJ,MAAM,KAAK,eAAe,6BAA6B;IACrD,UAAU,KAAK,eAAe;IAC9B,cAAc,QAAQ;IACtB,gBACE,QAAQ,kBAAkB;IAC5B,SAAS;KAEP,aAAa;KACb;KACD;IACF,CAAC;AAGJ,OAAI,QAAQ,eACV,MAAK,iBAAiB,QAAQ;AAGhC,QAAK,cAAc,uBAAuB;GAE1C,MAAM,EACJ,KAAK,WACL,QAAQ,gBACR,MACA,OACA,aACA,cACA,eAAe,iBACb,UAAuB,uBAAuB,YAAY;AAI9D,UAAO;IACL,eAAe;IACf,eAAe,uBAAuB;IACtC,SAAS;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA,MAAM,QAAQ;IACd,cAAc,QAAQ;IACvB;WACM,OAAO;AACd,OACE,iBAAiBC,6DAEhB,MAAM,UAAUD,uGAA4B,iBAC3C,MAAM,UAAUA,uGAA4B,kBAC5C,MAAM,UAAUA,uGAA4B,cAE9C,QAAO;IACL,eAAe;IACf,QAAQ,MAAM;IACf;AAGH,SAAM;;;;;;;;CASV,MAAM,aAAa,EACjB,aACyB,EAAE,EAAmB;EAC9C,MAAM,yBAAyB,MAAM,KAAK,cAAc;AAExD,MAAI,CAAC,uBAAuB,eAAe;GACzC,MAAM,EAAE,WAAW;AACnB,SAAM,IAAI,MAAM,gDAAgD,SAAS;;AAG3E,SAAO,KAAK,eAAe,aAAa;GACtC,WAAW,uBAAuB;GAClC;GACD,CAAC;;CAGJ,MAAc,WAAW,aAAuC;EAC9D,MAAM,EAAE,cAAc,MAAMD,4BAAS;EACrC,MAAM,OAAO,MAAM,KAAK,eAAe,SAAS;AAChD,MAAI,CAAC,KACH,OAAM,IAAI,MACR,kEACD;AAGH,MAAI;AACF,SAAM,UAAU,aAAa,KAAK;AAClC,UAAO;WACA,GAAG;AACV,UAAO"}

package/lib/user-management/session.d.cts

@@ -0,0 +1,44 @@
+import { AuthenticateWithSessionCookieFailedResponse, AuthenticateWithSessionCookieSuccessResponse } from "./interfaces/authenticate-with-session-cookie.interface.cjs";
+import { RefreshSessionResponse } from "./interfaces/refresh-and-seal-session-data.interface.cjs";
+import { UserManagement } from "./user-management.cjs";
+
+//#region src/user-management/session.d.ts
+type RefreshOptions = {
+  cookiePassword?: string;
+  organizationId?: string;
+};
+declare class CookieSession {
+  private userManagement;
+  private cookiePassword;
+  private sessionData;
+  constructor(userManagement: UserManagement, sessionData: string, cookiePassword: string);
+  /**
+   * Authenticates a user with a session cookie.
+   *
+   * @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.
+   */
+  authenticate(): Promise<AuthenticateWithSessionCookieSuccessResponse | AuthenticateWithSessionCookieFailedResponse>;
+  /**
+   * Refreshes the user's session.
+   *
+   * @param options - Optional options for refreshing the session.
+   * @param options.cookiePassword - The password to use for the new session cookie.
+   * @param options.organizationId - The organization ID to use for the new session cookie.
+   * @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.
+   */
+  refresh(options?: RefreshOptions): Promise<RefreshSessionResponse>;
+  /**
+   * Gets the URL to redirect the user to for logging out.
+   *
+   * @returns The URL to redirect the user to for logging out.
+   */
+  getLogoutUrl({
+    returnTo
+  }?: {
+    returnTo?: string;
+  }): Promise<string>;
+  private isValidJwt;
+}
+//#endregion
+export { CookieSession };
+//# sourceMappingURL=session.d.cts.map

package/lib/user-management/session.d.ts

@@ -0,0 +1,44 @@
+import { AuthenticateWithSessionCookieFailedResponse, AuthenticateWithSessionCookieSuccessResponse } from "./interfaces/authenticate-with-session-cookie.interface.js";
+import { RefreshSessionResponse } from "./interfaces/refresh-and-seal-session-data.interface.js";
+import { UserManagement } from "./user-management.js";
+
+//#region src/user-management/session.d.ts
+type RefreshOptions = {
+  cookiePassword?: string;
+  organizationId?: string;
+};
+declare class CookieSession {
+  private userManagement;
+  private cookiePassword;
+  private sessionData;
+  constructor(userManagement: UserManagement, sessionData: string, cookiePassword: string);
+  /**
+   * Authenticates a user with a session cookie.
+   *
+   * @returns An object indicating whether the authentication was successful or not. If successful, it will include the user's session data.
+   */
+  authenticate(): Promise<AuthenticateWithSessionCookieSuccessResponse | AuthenticateWithSessionCookieFailedResponse>;
+  /**
+   * Refreshes the user's session.
+   *
+   * @param options - Optional options for refreshing the session.
+   * @param options.cookiePassword - The password to use for the new session cookie.
+   * @param options.organizationId - The organization ID to use for the new session cookie.
+   * @returns An object indicating whether the refresh was successful or not. If successful, it will include the new sealed session data.
+   */
+  refresh(options?: RefreshOptions): Promise<RefreshSessionResponse>;
+  /**
+   * Gets the URL to redirect the user to for logging out.
+   *
+   * @returns The URL to redirect the user to for logging out.
+   */
+  getLogoutUrl({
+    returnTo
+  }?: {
+    returnTo?: string;
+  }): Promise<string>;
+  private isValidJwt;
+}
+//#endregion
+export { CookieSession };
+//# sourceMappingURL=session.d.ts.map