@workos-inc/node 8.5.0 → 8.6.0

package/lib/profile.serializer-DM0Zpbrc.cjs

@@ -0,0 +1,26 @@
+
+//#region src/sso/serializers/profile.serializer.ts
+const deserializeProfile = (profile) => ({
+	id: profile.id,
+	idpId: profile.idp_id,
+	...profile.organization_id !== void 0 && { organizationId: profile.organization_id },
+	connectionId: profile.connection_id,
+	connectionType: profile.connection_type,
+	email: profile.email,
+	...profile.first_name !== void 0 && { firstName: profile.first_name },
+	...profile.last_name !== void 0 && { lastName: profile.last_name },
+	...profile.role !== void 0 && { role: profile.role },
+	...profile.roles !== void 0 && { roles: profile.roles },
+	...profile.groups !== void 0 && { groups: profile.groups },
+	...profile.custom_attributes !== void 0 && { customAttributes: profile.custom_attributes },
+	...profile.raw_attributes !== void 0 && { rawAttributes: profile.raw_attributes }
+});
+
+//#endregion
+Object.defineProperty(exports, 'deserializeProfile', {
+  enumerable: true,
+  get: function () {
+    return deserializeProfile;
+  }
+});
+//# sourceMappingURL=profile.serializer-DM0Zpbrc.cjs.map

package/lib/profile.serializer-DM0Zpbrc.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.serializer-DM0Zpbrc.cjs","names":[],"sources":["../src/sso/serializers/profile.serializer.ts"],"sourcesContent":["import { UnknownRecord } from '../../common/interfaces/unknown-record.interface';\nimport { Profile, ProfileResponse } from '../interfaces';\n\nexport const deserializeProfile = <CustomAttributesType extends UnknownRecord>(\n  profile: ProfileResponse<CustomAttributesType>,\n): Profile<CustomAttributesType> => ({\n  id: profile.id,\n  idpId: profile.idp_id,\n  ...(profile.organization_id !== undefined && {\n    organizationId: profile.organization_id,\n  }),\n  connectionId: profile.connection_id,\n  connectionType: profile.connection_type,\n  email: profile.email,\n  ...(profile.first_name !== undefined && { firstName: profile.first_name }),\n  ...(profile.last_name !== undefined && { lastName: profile.last_name }),\n  ...(profile.role !== undefined && { role: profile.role }),\n  ...(profile.roles !== undefined && { roles: profile.roles }),\n  ...(profile.groups !== undefined && { groups: profile.groups }),\n  ...(profile.custom_attributes !== undefined && {\n    customAttributes: profile.custom_attributes,\n  }),\n  ...(profile.raw_attributes !== undefined && {\n    rawAttributes: profile.raw_attributes,\n  }),\n});\n"],"mappings":";;AAGA,MAAa,sBACX,aACmC;CACnC,IAAI,QAAQ;CACZ,OAAO,QAAQ;CACf,GAAI,QAAQ,oBAAoB,UAAa,EAC3C,gBAAgB,QAAQ,iBACzB;CACD,cAAc,QAAQ;CACtB,gBAAgB,QAAQ;CACxB,OAAO,QAAQ;CACf,GAAI,QAAQ,eAAe,UAAa,EAAE,WAAW,QAAQ,YAAY;CACzE,GAAI,QAAQ,cAAc,UAAa,EAAE,UAAU,QAAQ,WAAW;CACtE,GAAI,QAAQ,SAAS,UAAa,EAAE,MAAM,QAAQ,MAAM;CACxD,GAAI,QAAQ,UAAU,UAAa,EAAE,OAAO,QAAQ,OAAO;CAC3D,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,QAAQ;CAC9D,GAAI,QAAQ,sBAAsB,UAAa,EAC7C,kBAAkB,QAAQ,mBAC3B;CACD,GAAI,QAAQ,mBAAmB,UAAa,EAC1C,eAAe,QAAQ,gBACxB;CACF"}

package/lib/{profile.serializer-CMW0xbca.d.cts → profile.serializer-EDpJlY-r.d.cts}

@@ -1,8 +1,8 @@
-import { Hn as Profile, Un as ProfileResponse } from "./index-BIw0X_SV.cjs";
+import { Hn as Profile, Un as ProfileResponse } from "./index-DYVTG9fR.cjs";
 import { t as UnknownRecord } from "./unknown-record.interface-KDwjwNHM.cjs";
 
 //#region src/sso/serializers/profile.serializer.d.ts
 declare const deserializeProfile: <CustomAttributesType extends UnknownRecord>(profile: ProfileResponse<CustomAttributesType>) => Profile<CustomAttributesType>;
 //#endregion
 export { deserializeProfile as t };
-//# sourceMappingURL=profile.serializer-CMW0xbca.d.cts.map
+//# sourceMappingURL=profile.serializer-EDpJlY-r.d.cts.map

package/lib/{query-options.serializer-Cjv6DV1k.d.cts → query-options.serializer-DrRDm7He.d.cts}

@@ -1,7 +1,7 @@
-import { a as SerializedQueryOptions, t as QueryOptions } from "./query.interface-BSHlqTYK.cjs";
+import { a as SerializedQueryOptions, t as QueryOptions } from "./query.interface-DvI8OOX6.cjs";
 
 //#region src/fga/serializers/query-options.serializer.d.ts
 declare const serializeQueryOptions: (options: QueryOptions) => SerializedQueryOptions;
 //#endregion
 export { serializeQueryOptions as t };
-//# sourceMappingURL=query-options.serializer-Cjv6DV1k.d.cts.map
+//# sourceMappingURL=query-options.serializer-DrRDm7He.d.cts.map

package/lib/{query-result.serializer-Dy0eBy0g.d.cts → query-result.serializer-CJnHUV8v.d.cts}

@@ -1,6 +1,6 @@
-import { n as ListResponse } from "./list.interface-BMsjwGOu.cjs";
+import { n as ListResponse } from "./list.interface-D2Q6nKBO.cjs";
 import { r as Warning } from "./warning.interface-D8U1ON2d.cjs";
-import { i as QueryResultResponse, r as QueryResult } from "./query.interface-BSHlqTYK.cjs";
+import { i as QueryResultResponse, r as QueryResult } from "./query.interface-DvI8OOX6.cjs";
 
 //#region src/fga/serializers/query-result.serializer.d.ts
 interface QueryResultListResponse extends ListResponse<QueryResultResponse> {
@@ -9,4 +9,4 @@ interface QueryResultListResponse extends ListResponse<QueryResultResponse> {
 declare const deserializeQueryResult: (queryResult: QueryResultResponse) => QueryResult;
 //#endregion
 export { deserializeQueryResult as n, QueryResultListResponse as t };
-//# sourceMappingURL=query-result.serializer-Dy0eBy0g.d.cts.map
+//# sourceMappingURL=query-result.serializer-CJnHUV8v.d.cts.map

package/lib/{query.interface-BSHlqTYK.d.cts → query.interface-DvI8OOX6.d.cts}

@@ -1,6 +1,6 @@
-import { t as PaginationOptions } from "./pagination-options.interface--3MwpP52.cjs";
+import { t as PaginationOptions } from "./pagination-options.interface-BzIEA3yY.cjs";
 import { t as GetOptions } from "./get-options.interface-DoL0T9e1.cjs";
-import { c as Warrant, l as WarrantResponse, r as PolicyContext } from "./warrant.interface-DPnDplf7.cjs";
+import { c as Warrant, l as WarrantResponse, r as PolicyContext } from "./warrant.interface-DgQN4yxm.cjs";
 
 //#region src/fga/interfaces/query.interface.d.ts
 interface QueryOptions extends PaginationOptions {
@@ -32,4 +32,4 @@ interface QueryResultResponse {
 type QueryRequestOptions = Pick<GetOptions, 'warrantToken'>;
 //#endregion
 export { SerializedQueryOptions as a, QueryResultResponse as i, QueryRequestOptions as n, QueryResult as r, QueryOptions as t };
-//# sourceMappingURL=query.interface-BSHlqTYK.d.cts.map
+//# sourceMappingURL=query.interface-DvI8OOX6.d.cts.map

package/lib/{read-object.interface-BwzjcSVm.d.cts → read-object.interface-bYptR15L.d.cts}

@@ -18,8 +18,8 @@ interface ReadObjectResponse {
   id: string;
   metadata: ReadObjectMetadataResponse;
   name: string;
-  value: string;
+  value?: string;
 }
 //#endregion
 export { ReadObjectOptions as n, ReadObjectResponse as r, ReadObjectMetadataResponse as t };
-//# sourceMappingURL=read-object.interface-BwzjcSVm.d.cts.map
+//# sourceMappingURL=read-object.interface-bYptR15L.d.cts.map

package/lib/{resource.interface-D-MMSzFn.d.cts → resource.interface-DSxkG9Jg.d.cts}

@@ -1,4 +1,4 @@
-import { t as PaginationOptions } from "./pagination-options.interface--3MwpP52.cjs";
+import { t as PaginationOptions } from "./pagination-options.interface-BzIEA3yY.cjs";
 import { t as ResourceOp } from "./resource-op.enum-CNibFpd3.cjs";
 
 //#region src/fga/interfaces/resource.interface.d.ts
@@ -74,4 +74,4 @@ interface BatchWriteResourcesResponse {
 }
 //#endregion
 export { GetResourceOptions as a, ResourceInterface as c, SerializedBatchWriteResourcesOptions as d, SerializedCreateResourceOptions as f, UpdateResourceOptions as g, SerializedResourceOptions as h, DeleteResourceOptions as i, ResourceOptions as l, SerializedListResourcesOptions as m, BatchWriteResourcesResponse as n, ListResourcesOptions as o, SerializedDeleteResourceOptions as p, CreateResourceOptions as r, Resource as s, BatchWriteResourcesOptions as t, ResourceResponse as u };
-//# sourceMappingURL=resource.interface-D-MMSzFn.d.cts.map
+//# sourceMappingURL=resource.interface-DSxkG9Jg.d.cts.map

package/lib/{resource.serializer-CNYCg5zr.d.cts → resource.serializer-DbjYmqjL.d.cts}

@@ -1,8 +1,8 @@
-import { n as BatchWriteResourcesResponse, s as Resource, u as ResourceResponse } from "./resource.interface-D-MMSzFn.cjs";
+import { n as BatchWriteResourcesResponse, s as Resource, u as ResourceResponse } from "./resource.interface-DSxkG9Jg.cjs";
 
 //#region src/fga/serializers/resource.serializer.d.ts
 declare const deserializeResource: (response: ResourceResponse) => Resource;
 declare const deserializeBatchWriteResourcesResponse: (response: BatchWriteResourcesResponse) => Resource[];
 //#endregion
 export { deserializeResource as n, deserializeBatchWriteResourcesResponse as t };
-//# sourceMappingURL=resource.serializer-CNYCg5zr.d.cts.map
+//# sourceMappingURL=resource.serializer-DbjYmqjL.d.cts.map

package/lib/roles/interfaces/index.d.cts

@@ -1,2 +1,2 @@
-import { $n as Role, Qn as OrganizationRoleResponse, Xn as OrganizationRoleEvent, Yn as ListOrganizationRolesResponse, Zn as OrganizationRoleEventResponse, er as RoleEvent, nr as RoleList, rr as RoleResponse, tr as RoleEventResponse } from "../../index-BIw0X_SV.cjs";
+import { $n as Role, Qn as OrganizationRoleResponse, Xn as OrganizationRoleEvent, Yn as ListOrganizationRolesResponse, Zn as OrganizationRoleEventResponse, er as RoleEvent, nr as RoleList, rr as RoleResponse, tr as RoleEventResponse } from "../../index-DYVTG9fR.cjs";
 export { ListOrganizationRolesResponse, OrganizationRoleEvent, OrganizationRoleEventResponse, OrganizationRoleResponse, Role, RoleEvent, RoleEventResponse, RoleList, RoleResponse };

package/lib/roles/interfaces/role.interface.d.cts

@@ -1,2 +1,2 @@
-import { $n as Role, Qn as OrganizationRoleResponse, Xn as OrganizationRoleEvent, Yn as ListOrganizationRolesResponse, Zn as OrganizationRoleEventResponse, er as RoleEvent, nr as RoleList, rr as RoleResponse, tr as RoleEventResponse } from "../../index-BIw0X_SV.cjs";
+import { $n as Role, Qn as OrganizationRoleResponse, Xn as OrganizationRoleEvent, Yn as ListOrganizationRolesResponse, Zn as OrganizationRoleEventResponse, er as RoleEvent, nr as RoleList, rr as RoleResponse, tr as RoleEventResponse } from "../../index-DYVTG9fR.cjs";
 export { ListOrganizationRolesResponse, OrganizationRoleEvent, OrganizationRoleEventResponse, OrganizationRoleResponse, Role, RoleEvent, RoleEventResponse, RoleList, RoleResponse };

package/lib/roles/serializers/role.serializer.d.cts

@@ -1,4 +1,4 @@
-import { $n as Role, Qn as OrganizationRoleResponse } from "../../index-BIw0X_SV.cjs";
+import { $n as Role, Qn as OrganizationRoleResponse } from "../../index-DYVTG9fR.cjs";
 
 //#region src/roles/serializers/role.serializer.d.ts
 declare const deserializeRole: (role: OrganizationRoleResponse) => Role;

package/lib/{session.serializer-Dmj9Hm3q.cjs → session.serializer-B63NxvRH.cjs}

@@ -6,8 +6,8 @@ const deserializeSession = (session) => ({
 	userId: session.user_id,
 	ipAddress: session.ip_address,
 	userAgent: session.user_agent,
-	organizationId: session.organization_id,
-	impersonator: session.impersonator,
+	...session.organization_id !== void 0 && { organizationId: session.organization_id },
+	...session.impersonator !== void 0 && { impersonator: session.impersonator },
 	authMethod: session.auth_method,
 	status: session.status,
 	expiresAt: session.expires_at,
@@ -23,4 +23,4 @@ Object.defineProperty(exports, 'deserializeSession', {
     return deserializeSession;
   }
 });
-//# sourceMappingURL=session.serializer-Dmj9Hm3q.cjs.map
+//# sourceMappingURL=session.serializer-B63NxvRH.cjs.map

package/lib/session.serializer-B63NxvRH.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.serializer-B63NxvRH.cjs","names":[],"sources":["../src/user-management/serializers/session.serializer.ts"],"sourcesContent":["import { Session, SessionResponse } from '../interfaces';\n\nexport const deserializeSession = (session: SessionResponse): Session => ({\n  object: 'session',\n  id: session.id,\n  userId: session.user_id,\n  ipAddress: session.ip_address,\n  userAgent: session.user_agent,\n  ...(session.organization_id !== undefined && {\n    organizationId: session.organization_id,\n  }),\n  ...(session.impersonator !== undefined && {\n    impersonator: session.impersonator,\n  }),\n  authMethod: session.auth_method,\n  status: session.status,\n  expiresAt: session.expires_at,\n  endedAt: session.ended_at,\n  createdAt: session.created_at,\n  updatedAt: session.updated_at,\n});\n"],"mappings":";;AAEA,MAAa,sBAAsB,aAAuC;CACxE,QAAQ;CACR,IAAI,QAAQ;CACZ,QAAQ,QAAQ;CAChB,WAAW,QAAQ;CACnB,WAAW,QAAQ;CACnB,GAAI,QAAQ,oBAAoB,UAAa,EAC3C,gBAAgB,QAAQ,iBACzB;CACD,GAAI,QAAQ,iBAAiB,UAAa,EACxC,cAAc,QAAQ,cACvB;CACD,YAAY,QAAQ;CACpB,QAAQ,QAAQ;CAChB,WAAW,QAAQ;CACnB,SAAS,QAAQ;CACjB,WAAW,QAAQ;CACnB,WAAW,QAAQ;CACpB"}

package/lib/sso/interfaces/index.d.cts

@@ -1,8 +1,8 @@
-import { Bn as ProfileAndToken, Hn as Profile, Un as ProfileResponse, Vn as ProfileAndTokenResponse } from "../../index-BIw0X_SV.cjs";
+import { Bn as ProfileAndToken, Hn as Profile, Un as ProfileResponse, Vn as ProfileAndTokenResponse } from "../../index-DYVTG9fR.cjs";
 import { n as SSOPKCEAuthorizationURLResult, t as SSOAuthorizationURLOptions } from "../../authorization-url-options.interface-jpmqnJeg.cjs";
 import { t as ConnectionType } from "../../connection-type.enum-5NICh5Uu.cjs";
 import { n as ConnectionDomain, r as ConnectionResponse, t as Connection } from "../../connection.interface-CYEbF9mD.cjs";
 import { t as GetProfileOptions } from "../../get-profile-options.interface-BJLekz2p.cjs";
 import { t as GetProfileAndTokenOptions } from "../../get-profile-and-token-options.interface-BTmM6245.cjs";
-import { n as SerializedListConnectionsOptions, t as ListConnectionsOptions } from "../../list-connections-options.interface-DVXp4re1.cjs";
+import { n as SerializedListConnectionsOptions, t as ListConnectionsOptions } from "../../list-connections-options.interface-DMjyCQNt.cjs";
 export { Connection, ConnectionDomain, ConnectionResponse, ConnectionType, GetProfileAndTokenOptions, GetProfileOptions, ListConnectionsOptions, Profile, ProfileAndToken, ProfileAndTokenResponse, ProfileResponse, SSOAuthorizationURLOptions, SSOPKCEAuthorizationURLResult, SerializedListConnectionsOptions };

package/lib/sso/interfaces/list-connections-options.interface.d.cts

@@ -1,2 +1,2 @@
-import { n as SerializedListConnectionsOptions, t as ListConnectionsOptions } from "../../list-connections-options.interface-DVXp4re1.cjs";
+import { n as SerializedListConnectionsOptions, t as ListConnectionsOptions } from "../../list-connections-options.interface-DMjyCQNt.cjs";
 export { ListConnectionsOptions, SerializedListConnectionsOptions };

package/lib/sso/interfaces/profile-and-token.interface.d.cts

@@ -1,2 +1,2 @@
-import { Bn as ProfileAndToken, Vn as ProfileAndTokenResponse } from "../../index-BIw0X_SV.cjs";
+import { Bn as ProfileAndToken, Vn as ProfileAndTokenResponse } from "../../index-DYVTG9fR.cjs";
 export { ProfileAndToken, ProfileAndTokenResponse };

package/lib/sso/interfaces/profile.interface.d.cts

@@ -1,2 +1,2 @@
-import { Hn as Profile, Un as ProfileResponse } from "../../index-BIw0X_SV.cjs";
+import { Hn as Profile, Un as ProfileResponse } from "../../index-DYVTG9fR.cjs";
 export { Profile, ProfileResponse };

package/lib/sso/serializers/connection.serializer.cjs

@@ -1,3 +1,3 @@
-const require_connection_serializer = require('../../connection.serializer-phS0D1t9.cjs');
+const require_connection_serializer = require('../../connection.serializer-sFgaPd28.cjs');
 
 exports.deserializeConnection = require_connection_serializer.deserializeConnection;

package/lib/sso/serializers/connection.serializer.js

@@ -2,7 +2,7 @@
 const deserializeConnection = (connection) => ({
 	object: connection.object,
 	id: connection.id,
-	organizationId: connection.organization_id,
+	...connection.organization_id !== void 0 && { organizationId: connection.organization_id },
 	name: connection.name,
 	type: connection.connection_type,
 	state: connection.state,

package/lib/sso/serializers/connection.serializer.js.map

@@ -1 +1 @@
-{"version":3,"file":"connection.serializer.js","names":[],"sources":["../../../src/sso/serializers/connection.serializer.ts"],"sourcesContent":["import { Connection, ConnectionResponse } from '../interfaces';\n\nexport const deserializeConnection = (\n  connection: ConnectionResponse,\n): Connection => ({\n  object: connection.object,\n  id: connection.id,\n  organizationId: connection.organization_id,\n  name: connection.name,\n  type: connection.connection_type,\n  state: connection.state,\n  domains: connection.domains,\n  createdAt: connection.created_at,\n  updatedAt: connection.updated_at,\n});\n"],"mappings":";AAEA,MAAa,yBACX,gBACgB;CAChB,QAAQ,WAAW;CACnB,IAAI,WAAW;CACf,gBAAgB,WAAW;CAC3B,MAAM,WAAW;CACjB,MAAM,WAAW;CACjB,OAAO,WAAW;CAClB,SAAS,WAAW;CACpB,WAAW,WAAW;CACtB,WAAW,WAAW;CACvB"}
+{"version":3,"file":"connection.serializer.js","names":[],"sources":["../../../src/sso/serializers/connection.serializer.ts"],"sourcesContent":["import { Connection, ConnectionResponse } from '../interfaces';\n\nexport const deserializeConnection = (\n  connection: ConnectionResponse,\n): Connection => ({\n  object: connection.object,\n  id: connection.id,\n  ...(connection.organization_id !== undefined && {\n    organizationId: connection.organization_id,\n  }),\n  name: connection.name,\n  type: connection.connection_type,\n  state: connection.state,\n  domains: connection.domains,\n  createdAt: connection.created_at,\n  updatedAt: connection.updated_at,\n});\n"],"mappings":";AAEA,MAAa,yBACX,gBACgB;CAChB,QAAQ,WAAW;CACnB,IAAI,WAAW;CACf,GAAI,WAAW,oBAAoB,UAAa,EAC9C,gBAAgB,WAAW,iBAC5B;CACD,MAAM,WAAW;CACjB,MAAM,WAAW;CACjB,OAAO,WAAW;CAClB,SAAS,WAAW;CACpB,WAAW,WAAW;CACtB,WAAW,WAAW;CACvB"}

package/lib/sso/serializers/index.cjs

@@ -1,7 +1,7 @@
-const require_connection_serializer = require('../../connection.serializer-phS0D1t9.cjs');
+const require_connection_serializer = require('../../connection.serializer-sFgaPd28.cjs');
 const require_list_connections_options_serializer = require('../../list-connections-options.serializer-B9jyhBCh.cjs');
-const require_profile_serializer = require('../../profile.serializer-BDlm0TRU.cjs');
-const require_profile_and_token_serializer = require('../../profile-and-token.serializer-CUFdGpX3.cjs');
+const require_profile_serializer = require('../../profile.serializer-DM0Zpbrc.cjs');
+const require_profile_and_token_serializer = require('../../profile-and-token.serializer-DfWI_L92.cjs');
 
 exports.deserializeConnection = require_connection_serializer.deserializeConnection;
 exports.deserializeProfile = require_profile_serializer.deserializeProfile;

package/lib/sso/serializers/index.d.cts

@@ -1,5 +1,5 @@
 import { t as deserializeConnection } from "../../connection.serializer-CrL-OTu7.cjs";
-import { t as serializeListConnectionsOptions } from "../../list-connections-options.serializer-oZKaQIbM.cjs";
-import { t as deserializeProfileAndToken } from "../../profile-and-token.serializer-OV839v64.cjs";
-import { t as deserializeProfile } from "../../profile.serializer-CMW0xbca.cjs";
+import { t as serializeListConnectionsOptions } from "../../list-connections-options.serializer-CrF1Ymfh.cjs";
+import { t as deserializeProfileAndToken } from "../../profile-and-token.serializer-BrOalmOt.cjs";
+import { t as deserializeProfile } from "../../profile.serializer-EDpJlY-r.cjs";
 export { deserializeConnection, deserializeProfile, deserializeProfileAndToken, serializeListConnectionsOptions };

package/lib/sso/serializers/list-connections-options.serializer.d.cts

@@ -1,2 +1,2 @@
-import { t as serializeListConnectionsOptions } from "../../list-connections-options.serializer-oZKaQIbM.cjs";
+import { t as serializeListConnectionsOptions } from "../../list-connections-options.serializer-CrF1Ymfh.cjs";
 export { serializeListConnectionsOptions };

package/lib/sso/serializers/profile-and-token.serializer.cjs

@@ -1,3 +1,3 @@
-const require_profile_and_token_serializer = require('../../profile-and-token.serializer-CUFdGpX3.cjs');
+const require_profile_and_token_serializer = require('../../profile-and-token.serializer-DfWI_L92.cjs');
 
 exports.deserializeProfileAndToken = require_profile_and_token_serializer.deserializeProfileAndToken;

package/lib/sso/serializers/profile-and-token.serializer.d.cts

@@ -1,2 +1,2 @@
-import { t as deserializeProfileAndToken } from "../../profile-and-token.serializer-OV839v64.cjs";
+import { t as deserializeProfileAndToken } from "../../profile-and-token.serializer-BrOalmOt.cjs";
 export { deserializeProfileAndToken };

package/lib/sso/serializers/profile.serializer.cjs

@@ -1,3 +1,3 @@
-const require_profile_serializer = require('../../profile.serializer-BDlm0TRU.cjs');
+const require_profile_serializer = require('../../profile.serializer-DM0Zpbrc.cjs');
 
 exports.deserializeProfile = require_profile_serializer.deserializeProfile;

package/lib/sso/serializers/profile.serializer.d.cts

@@ -1,2 +1,2 @@
-import { t as deserializeProfile } from "../../profile.serializer-CMW0xbca.cjs";
+import { t as deserializeProfile } from "../../profile.serializer-EDpJlY-r.cjs";
 export { deserializeProfile };

package/lib/sso/serializers/profile.serializer.js

@@ -2,17 +2,17 @@
 const deserializeProfile = (profile) => ({
 	id: profile.id,
 	idpId: profile.idp_id,
-	organizationId: profile.organization_id,
+	...profile.organization_id !== void 0 && { organizationId: profile.organization_id },
 	connectionId: profile.connection_id,
 	connectionType: profile.connection_type,
 	email: profile.email,
-	firstName: profile.first_name,
-	lastName: profile.last_name,
-	role: profile.role,
-	roles: profile.roles,
-	groups: profile.groups,
-	customAttributes: profile.custom_attributes,
-	rawAttributes: profile.raw_attributes
+	...profile.first_name !== void 0 && { firstName: profile.first_name },
+	...profile.last_name !== void 0 && { lastName: profile.last_name },
+	...profile.role !== void 0 && { role: profile.role },
+	...profile.roles !== void 0 && { roles: profile.roles },
+	...profile.groups !== void 0 && { groups: profile.groups },
+	...profile.custom_attributes !== void 0 && { customAttributes: profile.custom_attributes },
+	...profile.raw_attributes !== void 0 && { rawAttributes: profile.raw_attributes }
 });
 
 //#endregion

package/lib/sso/serializers/profile.serializer.js.map

@@ -1 +1 @@
-{"version":3,"file":"profile.serializer.js","names":[],"sources":["../../../src/sso/serializers/profile.serializer.ts"],"sourcesContent":["import { UnknownRecord } from '../../common/interfaces/unknown-record.interface';\nimport { Profile, ProfileResponse } from '../interfaces';\n\nexport const deserializeProfile = <CustomAttributesType extends UnknownRecord>(\n  profile: ProfileResponse<CustomAttributesType>,\n): Profile<CustomAttributesType> => ({\n  id: profile.id,\n  idpId: profile.idp_id,\n  organizationId: profile.organization_id,\n  connectionId: profile.connection_id,\n  connectionType: profile.connection_type,\n  email: profile.email,\n  firstName: profile.first_name,\n  lastName: profile.last_name,\n  role: profile.role,\n  roles: profile.roles,\n  groups: profile.groups,\n  customAttributes: profile.custom_attributes,\n  rawAttributes: profile.raw_attributes,\n});\n"],"mappings":";AAGA,MAAa,sBACX,aACmC;CACnC,IAAI,QAAQ;CACZ,OAAO,QAAQ;CACf,gBAAgB,QAAQ;CACxB,cAAc,QAAQ;CACtB,gBAAgB,QAAQ;CACxB,OAAO,QAAQ;CACf,WAAW,QAAQ;CACnB,UAAU,QAAQ;CAClB,MAAM,QAAQ;CACd,OAAO,QAAQ;CACf,QAAQ,QAAQ;CAChB,kBAAkB,QAAQ;CAC1B,eAAe,QAAQ;CACxB"}
+{"version":3,"file":"profile.serializer.js","names":[],"sources":["../../../src/sso/serializers/profile.serializer.ts"],"sourcesContent":["import { UnknownRecord } from '../../common/interfaces/unknown-record.interface';\nimport { Profile, ProfileResponse } from '../interfaces';\n\nexport const deserializeProfile = <CustomAttributesType extends UnknownRecord>(\n  profile: ProfileResponse<CustomAttributesType>,\n): Profile<CustomAttributesType> => ({\n  id: profile.id,\n  idpId: profile.idp_id,\n  ...(profile.organization_id !== undefined && {\n    organizationId: profile.organization_id,\n  }),\n  connectionId: profile.connection_id,\n  connectionType: profile.connection_type,\n  email: profile.email,\n  ...(profile.first_name !== undefined && { firstName: profile.first_name }),\n  ...(profile.last_name !== undefined && { lastName: profile.last_name }),\n  ...(profile.role !== undefined && { role: profile.role }),\n  ...(profile.roles !== undefined && { roles: profile.roles }),\n  ...(profile.groups !== undefined && { groups: profile.groups }),\n  ...(profile.custom_attributes !== undefined && {\n    customAttributes: profile.custom_attributes,\n  }),\n  ...(profile.raw_attributes !== undefined && {\n    rawAttributes: profile.raw_attributes,\n  }),\n});\n"],"mappings":";AAGA,MAAa,sBACX,aACmC;CACnC,IAAI,QAAQ;CACZ,OAAO,QAAQ;CACf,GAAI,QAAQ,oBAAoB,UAAa,EAC3C,gBAAgB,QAAQ,iBACzB;CACD,cAAc,QAAQ;CACtB,gBAAgB,QAAQ;CACxB,OAAO,QAAQ;CACf,GAAI,QAAQ,eAAe,UAAa,EAAE,WAAW,QAAQ,YAAY;CACzE,GAAI,QAAQ,cAAc,UAAa,EAAE,UAAU,QAAQ,WAAW;CACtE,GAAI,QAAQ,SAAS,UAAa,EAAE,MAAM,QAAQ,MAAM;CACxD,GAAI,QAAQ,UAAU,UAAa,EAAE,OAAO,QAAQ,OAAO;CAC3D,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,QAAQ;CAC9D,GAAI,QAAQ,sBAAsB,UAAa,EAC7C,kBAAkB,QAAQ,mBAC3B;CACD,GAAI,QAAQ,mBAAmB,UAAa,EAC1C,eAAe,QAAQ,gBACxB;CACF"}

package/lib/sso/sso.cjs

@@ -1,3 +1,3 @@
-const require_sso = require('../sso-FWyObHDp.cjs');
+const require_sso = require('../sso-CagxPT-U.cjs');
 
 exports.SSO = require_sso.SSO;

package/lib/sso/sso.d.cts

@@ -1,2 +1,2 @@
-import { y as SSO } from "../api-keys-OJfN1xfX.cjs";
+import { y as SSO } from "../api-keys-CSDwj0TW.cjs";
 export { SSO };

package/lib/{sso-FWyObHDp.cjs → sso-CagxPT-U.cjs}

@@ -1,8 +1,8 @@
 const require_pagination = require('./pagination-BG1uBuL4.cjs');
-const require_connection_serializer = require('./connection.serializer-phS0D1t9.cjs');
+const require_connection_serializer = require('./connection.serializer-sFgaPd28.cjs');
 const require_list_connections_options_serializer = require('./list-connections-options.serializer-B9jyhBCh.cjs');
-const require_profile_serializer = require('./profile.serializer-BDlm0TRU.cjs');
-const require_profile_and_token_serializer = require('./profile-and-token.serializer-CUFdGpX3.cjs');
+const require_profile_serializer = require('./profile.serializer-DM0Zpbrc.cjs');
+const require_profile_and_token_serializer = require('./profile-and-token.serializer-DfWI_L92.cjs');
 const require_fetch_and_deserialize = require('./fetch-and-deserialize-Ba2wR4ur.cjs');
 const require_query_string = require('./query-string-DJDFy7sp.cjs');
 
@@ -132,4 +132,4 @@ Object.defineProperty(exports, 'SSO', {
     return SSO;
   }
 });
-//# sourceMappingURL=sso-FWyObHDp.cjs.map
+//# sourceMappingURL=sso-CagxPT-U.cjs.map

package/lib/{sso-FWyObHDp.cjs.map → sso-CagxPT-U.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"sso-FWyObHDp.cjs","names":["workos: WorkOS","AutoPaginatable","fetchAndDeserialize","deserializeConnection","serializeListConnectionsOptions","toQueryString","deserializeProfileAndToken","deserializeProfile"],"sources":["../src/sso/sso.ts"],"sourcesContent":["import { UnknownRecord } from '../common/interfaces/unknown-record.interface';\nimport { fetchAndDeserialize } from '../common/utils/fetch-and-deserialize';\nimport { AutoPaginatable } from '../common/utils/pagination';\nimport { toQueryString } from '../common/utils/query-string';\nimport { WorkOS } from '../workos';\nimport {\n  Connection,\n  ConnectionResponse,\n  GetProfileAndTokenOptions,\n  GetProfileOptions,\n  ListConnectionsOptions,\n  Profile,\n  ProfileAndToken,\n  ProfileAndTokenResponse,\n  ProfileResponse,\n  SSOAuthorizationURLOptions,\n  SSOPKCEAuthorizationURLResult,\n  SerializedListConnectionsOptions,\n} from './interfaces';\nimport {\n  deserializeConnection,\n  deserializeProfile,\n  deserializeProfileAndToken,\n  serializeListConnectionsOptions,\n} from './serializers';\n\nexport class SSO {\n  constructor(private readonly workos: WorkOS) {}\n\n  async listConnections(\n    options?: ListConnectionsOptions,\n  ): Promise<AutoPaginatable<Connection, SerializedListConnectionsOptions>> {\n    return new AutoPaginatable(\n      await fetchAndDeserialize<ConnectionResponse, Connection>(\n        this.workos,\n        '/connections',\n        deserializeConnection,\n        options ? serializeListConnectionsOptions(options) : undefined,\n      ),\n      (params) =>\n        fetchAndDeserialize<ConnectionResponse, Connection>(\n          this.workos,\n          '/connections',\n          deserializeConnection,\n          params,\n        ),\n      options ? serializeListConnectionsOptions(options) : undefined,\n    );\n  }\n  async deleteConnection(id: string) {\n    await this.workos.delete(`/connections/${id}`);\n  }\n\n  getAuthorizationUrl(options: SSOAuthorizationURLOptions): string {\n    const {\n      codeChallenge,\n      codeChallengeMethod,\n      connection,\n      clientId,\n      domainHint,\n      loginHint,\n      organization,\n      provider,\n      providerQueryParams,\n      providerScopes,\n      redirectUri,\n      state,\n    } = options;\n\n    if (!provider && !connection && !organization) {\n      throw new TypeError(\n        `Incomplete arguments. Need to specify either a 'connection', 'organization', or 'provider'.`,\n      );\n    }\n\n    const query = toQueryString({\n      code_challenge: codeChallenge,\n      code_challenge_method: codeChallengeMethod,\n      connection,\n      organization,\n      domain_hint: domainHint,\n      login_hint: loginHint,\n      provider,\n      provider_query_params: providerQueryParams,\n      provider_scopes: providerScopes,\n      client_id: clientId,\n      redirect_uri: redirectUri,\n      response_type: 'code',\n      state,\n    });\n\n    return `${this.workos.baseURL}/sso/authorize?${query}`;\n  }\n\n  /**\n   * Generates an authorization URL with PKCE parameters automatically generated.\n   * Use this for public clients (CLI apps, Electron, mobile) that cannot\n   * securely store a client secret.\n   *\n   * @returns Object containing url, state, and codeVerifier\n   *\n   * @example\n   * ```typescript\n   * const { url, state, codeVerifier } = await workos.sso.getAuthorizationUrlWithPKCE({\n   *   connection: 'conn_123',\n   *   clientId: 'client_123',\n   *   redirectUri: 'myapp://callback',\n   * });\n   *\n   * // Store state and codeVerifier securely, then redirect user to url\n   * // After callback, exchange the code:\n   * const { profile, accessToken } = await workos.sso.getProfileAndToken({\n   *   code: authorizationCode,\n   *   codeVerifier,\n   *   clientId: 'client_123',\n   * });\n   * ```\n   */\n  async getAuthorizationUrlWithPKCE(\n    options: Omit<\n      SSOAuthorizationURLOptions,\n      'codeChallenge' | 'codeChallengeMethod' | 'state'\n    >,\n  ): Promise<SSOPKCEAuthorizationURLResult> {\n    const {\n      connection,\n      clientId,\n      domainHint,\n      loginHint,\n      organization,\n      provider,\n      providerQueryParams,\n      providerScopes,\n      redirectUri,\n    } = options;\n\n    if (!provider && !connection && !organization) {\n      throw new TypeError(\n        `Incomplete arguments. Need to specify either a 'connection', 'organization', or 'provider'.`,\n      );\n    }\n\n    // Generate PKCE parameters\n    const pkce = await this.workos.pkce.generate();\n\n    // Generate secure random state\n    const state = this.workos.pkce.generateCodeVerifier(43);\n\n    const query = toQueryString({\n      code_challenge: pkce.codeChallenge,\n      code_challenge_method: 'S256',\n      connection,\n      organization,\n      domain_hint: domainHint,\n      login_hint: loginHint,\n      provider,\n      provider_query_params: providerQueryParams,\n      provider_scopes: providerScopes,\n      client_id: clientId,\n      redirect_uri: redirectUri,\n      response_type: 'code',\n      state,\n    });\n\n    const url = `${this.workos.baseURL}/sso/authorize?${query}`;\n\n    return { url, state, codeVerifier: pkce.codeVerifier };\n  }\n\n  async getConnection(id: string): Promise<Connection> {\n    const { data } = await this.workos.get<ConnectionResponse>(\n      `/connections/${id}`,\n    );\n\n    return deserializeConnection(data);\n  }\n\n  /**\n   * Exchange an authorization code for a profile and access token.\n   *\n   * Auto-detects public vs confidential client mode:\n   * - If codeVerifier is provided: Uses PKCE flow (public client)\n   * - If no codeVerifier: Uses client_secret from API key (confidential client)\n   * - If both: Uses both client_secret AND codeVerifier (confidential client with PKCE)\n   *\n   * Using PKCE with confidential clients is recommended by OAuth 2.1 for defense\n   * in depth and provides additional CSRF protection on the authorization flow.\n   *\n   * @throws Error if neither codeVerifier nor API key is available\n   */\n  async getProfileAndToken<\n    CustomAttributesType extends UnknownRecord = UnknownRecord,\n  >({\n    code,\n    clientId,\n    codeVerifier,\n  }: GetProfileAndTokenOptions): Promise<\n    ProfileAndToken<CustomAttributesType>\n  > {\n    // Validate codeVerifier is not an empty string (common mistake)\n    if (codeVerifier !== undefined && codeVerifier.trim() === '') {\n      throw new TypeError(\n        'codeVerifier cannot be an empty string. ' +\n          'Generate a valid PKCE pair using workos.pkce.generate().',\n      );\n    }\n\n    const hasApiKey = !!this.workos.key;\n    const hasPKCE = !!codeVerifier;\n\n    if (!hasPKCE && !hasApiKey) {\n      throw new TypeError(\n        'getProfileAndToken requires either a codeVerifier (for public clients) ' +\n          'or an API key configured on the WorkOS instance (for confidential clients).',\n      );\n    }\n\n    const form = new URLSearchParams({\n      client_id: clientId,\n      grant_type: 'authorization_code',\n      code,\n    });\n\n    // Support PKCE with confidential clients (OAuth 2.1 best practice)\n    // Both can be sent together for defense in depth\n    if (hasPKCE) {\n      form.set('code_verifier', codeVerifier);\n    }\n    if (hasApiKey) {\n      form.set('client_secret', this.workos.key as string);\n    }\n\n    const { data } = await this.workos.post<\n      ProfileAndTokenResponse<CustomAttributesType>\n    >('/sso/token', form, { skipApiKeyCheck: !hasApiKey });\n\n    return deserializeProfileAndToken(data);\n  }\n\n  async getProfile<CustomAttributesType extends UnknownRecord = UnknownRecord>({\n    accessToken,\n  }: GetProfileOptions): Promise<Profile<CustomAttributesType>> {\n    const { data } = await this.workos.get<\n      ProfileResponse<CustomAttributesType>\n    >('/sso/profile', {\n      accessToken,\n    });\n\n    return deserializeProfile(data);\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAa,MAAb,MAAiB;CACf,YAAY,AAAiBA,QAAgB;EAAhB;;CAE7B,MAAM,gBACJ,SACwE;AACxE,SAAO,IAAIC,mCACT,MAAMC,kDACJ,KAAK,QACL,gBACAC,qDACA,UAAUC,4EAAgC,QAAQ,GAAG,OACtD,GACA,WACCF,kDACE,KAAK,QACL,gBACAC,qDACA,OACD,EACH,UAAUC,4EAAgC,QAAQ,GAAG,OACtD;;CAEH,MAAM,iBAAiB,IAAY;AACjC,QAAM,KAAK,OAAO,OAAO,gBAAgB,KAAK;;CAGhD,oBAAoB,SAA6C;EAC/D,MAAM,EACJ,eACA,qBACA,YACA,UACA,YACA,WACA,cACA,UACA,qBACA,gBACA,aACA,UACE;AAEJ,MAAI,CAAC,YAAY,CAAC,cAAc,CAAC,aAC/B,OAAM,IAAI,UACR,8FACD;EAGH,MAAM,QAAQC,mCAAc;GAC1B,gBAAgB;GAChB,uBAAuB;GACvB;GACA;GACA,aAAa;GACb,YAAY;GACZ;GACA,uBAAuB;GACvB,iBAAiB;GACjB,WAAW;GACX,cAAc;GACd,eAAe;GACf;GACD,CAAC;AAEF,SAAO,GAAG,KAAK,OAAO,QAAQ,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BjD,MAAM,4BACJ,SAIwC;EACxC,MAAM,EACJ,YACA,UACA,YACA,WACA,cACA,UACA,qBACA,gBACA,gBACE;AAEJ,MAAI,CAAC,YAAY,CAAC,cAAc,CAAC,aAC/B,OAAM,IAAI,UACR,8FACD;EAIH,MAAM,OAAO,MAAM,KAAK,OAAO,KAAK,UAAU;EAG9C,MAAM,QAAQ,KAAK,OAAO,KAAK,qBAAqB,GAAG;EAEvD,MAAM,QAAQA,mCAAc;GAC1B,gBAAgB,KAAK;GACrB,uBAAuB;GACvB;GACA;GACA,aAAa;GACb,YAAY;GACZ;GACA,uBAAuB;GACvB,iBAAiB;GACjB,WAAW;GACX,cAAc;GACd,eAAe;GACf;GACD,CAAC;AAIF,SAAO;GAAE,KAFG,GAAG,KAAK,OAAO,QAAQ,iBAAiB;GAEtC;GAAO,cAAc,KAAK;GAAc;;CAGxD,MAAM,cAAc,IAAiC;EACnD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,KACjB;AAED,SAAOF,oDAAsB,KAAK;;;;;;;;;;;;;;;CAgBpC,MAAM,mBAEJ,EACA,MACA,UACA,gBAGA;AAEA,MAAI,iBAAiB,UAAa,aAAa,MAAM,KAAK,GACxD,OAAM,IAAI,UACR,mGAED;EAGH,MAAM,YAAY,CAAC,CAAC,KAAK,OAAO;EAChC,MAAM,UAAU,CAAC,CAAC;AAElB,MAAI,CAAC,WAAW,CAAC,UACf,OAAM,IAAI,UACR,qJAED;EAGH,MAAM,OAAO,IAAI,gBAAgB;GAC/B,WAAW;GACX,YAAY;GACZ;GACD,CAAC;AAIF,MAAI,QACF,MAAK,IAAI,iBAAiB,aAAa;AAEzC,MAAI,UACF,MAAK,IAAI,iBAAiB,KAAK,OAAO,IAAc;EAGtD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KAEjC,cAAc,MAAM,EAAE,iBAAiB,CAAC,WAAW,CAAC;AAEtD,SAAOG,gEAA2B,KAAK;;CAGzC,MAAM,WAAuE,EAC3E,eAC4D;EAC5D,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IAEjC,gBAAgB,EAChB,aACD,CAAC;AAEF,SAAOC,8CAAmB,KAAK"}
+{"version":3,"file":"sso-CagxPT-U.cjs","names":["workos: WorkOS","AutoPaginatable","fetchAndDeserialize","deserializeConnection","serializeListConnectionsOptions","toQueryString","deserializeProfileAndToken","deserializeProfile"],"sources":["../src/sso/sso.ts"],"sourcesContent":["import { UnknownRecord } from '../common/interfaces/unknown-record.interface';\nimport { fetchAndDeserialize } from '../common/utils/fetch-and-deserialize';\nimport { AutoPaginatable } from '../common/utils/pagination';\nimport { toQueryString } from '../common/utils/query-string';\nimport { WorkOS } from '../workos';\nimport {\n  Connection,\n  ConnectionResponse,\n  GetProfileAndTokenOptions,\n  GetProfileOptions,\n  ListConnectionsOptions,\n  Profile,\n  ProfileAndToken,\n  ProfileAndTokenResponse,\n  ProfileResponse,\n  SSOAuthorizationURLOptions,\n  SSOPKCEAuthorizationURLResult,\n  SerializedListConnectionsOptions,\n} from './interfaces';\nimport {\n  deserializeConnection,\n  deserializeProfile,\n  deserializeProfileAndToken,\n  serializeListConnectionsOptions,\n} from './serializers';\n\nexport class SSO {\n  constructor(private readonly workos: WorkOS) {}\n\n  async listConnections(\n    options?: ListConnectionsOptions,\n  ): Promise<AutoPaginatable<Connection, SerializedListConnectionsOptions>> {\n    return new AutoPaginatable(\n      await fetchAndDeserialize<ConnectionResponse, Connection>(\n        this.workos,\n        '/connections',\n        deserializeConnection,\n        options ? serializeListConnectionsOptions(options) : undefined,\n      ),\n      (params) =>\n        fetchAndDeserialize<ConnectionResponse, Connection>(\n          this.workos,\n          '/connections',\n          deserializeConnection,\n          params,\n        ),\n      options ? serializeListConnectionsOptions(options) : undefined,\n    );\n  }\n  async deleteConnection(id: string) {\n    await this.workos.delete(`/connections/${id}`);\n  }\n\n  getAuthorizationUrl(options: SSOAuthorizationURLOptions): string {\n    const {\n      codeChallenge,\n      codeChallengeMethod,\n      connection,\n      clientId,\n      domainHint,\n      loginHint,\n      organization,\n      provider,\n      providerQueryParams,\n      providerScopes,\n      redirectUri,\n      state,\n    } = options;\n\n    if (!provider && !connection && !organization) {\n      throw new TypeError(\n        `Incomplete arguments. Need to specify either a 'connection', 'organization', or 'provider'.`,\n      );\n    }\n\n    const query = toQueryString({\n      code_challenge: codeChallenge,\n      code_challenge_method: codeChallengeMethod,\n      connection,\n      organization,\n      domain_hint: domainHint,\n      login_hint: loginHint,\n      provider,\n      provider_query_params: providerQueryParams,\n      provider_scopes: providerScopes,\n      client_id: clientId,\n      redirect_uri: redirectUri,\n      response_type: 'code',\n      state,\n    });\n\n    return `${this.workos.baseURL}/sso/authorize?${query}`;\n  }\n\n  /**\n   * Generates an authorization URL with PKCE parameters automatically generated.\n   * Use this for public clients (CLI apps, Electron, mobile) that cannot\n   * securely store a client secret.\n   *\n   * @returns Object containing url, state, and codeVerifier\n   *\n   * @example\n   * ```typescript\n   * const { url, state, codeVerifier } = await workos.sso.getAuthorizationUrlWithPKCE({\n   *   connection: 'conn_123',\n   *   clientId: 'client_123',\n   *   redirectUri: 'myapp://callback',\n   * });\n   *\n   * // Store state and codeVerifier securely, then redirect user to url\n   * // After callback, exchange the code:\n   * const { profile, accessToken } = await workos.sso.getProfileAndToken({\n   *   code: authorizationCode,\n   *   codeVerifier,\n   *   clientId: 'client_123',\n   * });\n   * ```\n   */\n  async getAuthorizationUrlWithPKCE(\n    options: Omit<\n      SSOAuthorizationURLOptions,\n      'codeChallenge' | 'codeChallengeMethod' | 'state'\n    >,\n  ): Promise<SSOPKCEAuthorizationURLResult> {\n    const {\n      connection,\n      clientId,\n      domainHint,\n      loginHint,\n      organization,\n      provider,\n      providerQueryParams,\n      providerScopes,\n      redirectUri,\n    } = options;\n\n    if (!provider && !connection && !organization) {\n      throw new TypeError(\n        `Incomplete arguments. Need to specify either a 'connection', 'organization', or 'provider'.`,\n      );\n    }\n\n    // Generate PKCE parameters\n    const pkce = await this.workos.pkce.generate();\n\n    // Generate secure random state\n    const state = this.workos.pkce.generateCodeVerifier(43);\n\n    const query = toQueryString({\n      code_challenge: pkce.codeChallenge,\n      code_challenge_method: 'S256',\n      connection,\n      organization,\n      domain_hint: domainHint,\n      login_hint: loginHint,\n      provider,\n      provider_query_params: providerQueryParams,\n      provider_scopes: providerScopes,\n      client_id: clientId,\n      redirect_uri: redirectUri,\n      response_type: 'code',\n      state,\n    });\n\n    const url = `${this.workos.baseURL}/sso/authorize?${query}`;\n\n    return { url, state, codeVerifier: pkce.codeVerifier };\n  }\n\n  async getConnection(id: string): Promise<Connection> {\n    const { data } = await this.workos.get<ConnectionResponse>(\n      `/connections/${id}`,\n    );\n\n    return deserializeConnection(data);\n  }\n\n  /**\n   * Exchange an authorization code for a profile and access token.\n   *\n   * Auto-detects public vs confidential client mode:\n   * - If codeVerifier is provided: Uses PKCE flow (public client)\n   * - If no codeVerifier: Uses client_secret from API key (confidential client)\n   * - If both: Uses both client_secret AND codeVerifier (confidential client with PKCE)\n   *\n   * Using PKCE with confidential clients is recommended by OAuth 2.1 for defense\n   * in depth and provides additional CSRF protection on the authorization flow.\n   *\n   * @throws Error if neither codeVerifier nor API key is available\n   */\n  async getProfileAndToken<\n    CustomAttributesType extends UnknownRecord = UnknownRecord,\n  >({\n    code,\n    clientId,\n    codeVerifier,\n  }: GetProfileAndTokenOptions): Promise<\n    ProfileAndToken<CustomAttributesType>\n  > {\n    // Validate codeVerifier is not an empty string (common mistake)\n    if (codeVerifier !== undefined && codeVerifier.trim() === '') {\n      throw new TypeError(\n        'codeVerifier cannot be an empty string. ' +\n          'Generate a valid PKCE pair using workos.pkce.generate().',\n      );\n    }\n\n    const hasApiKey = !!this.workos.key;\n    const hasPKCE = !!codeVerifier;\n\n    if (!hasPKCE && !hasApiKey) {\n      throw new TypeError(\n        'getProfileAndToken requires either a codeVerifier (for public clients) ' +\n          'or an API key configured on the WorkOS instance (for confidential clients).',\n      );\n    }\n\n    const form = new URLSearchParams({\n      client_id: clientId,\n      grant_type: 'authorization_code',\n      code,\n    });\n\n    // Support PKCE with confidential clients (OAuth 2.1 best practice)\n    // Both can be sent together for defense in depth\n    if (hasPKCE) {\n      form.set('code_verifier', codeVerifier);\n    }\n    if (hasApiKey) {\n      form.set('client_secret', this.workos.key as string);\n    }\n\n    const { data } = await this.workos.post<\n      ProfileAndTokenResponse<CustomAttributesType>\n    >('/sso/token', form, { skipApiKeyCheck: !hasApiKey });\n\n    return deserializeProfileAndToken(data);\n  }\n\n  async getProfile<CustomAttributesType extends UnknownRecord = UnknownRecord>({\n    accessToken,\n  }: GetProfileOptions): Promise<Profile<CustomAttributesType>> {\n    const { data } = await this.workos.get<\n      ProfileResponse<CustomAttributesType>\n    >('/sso/profile', {\n      accessToken,\n    });\n\n    return deserializeProfile(data);\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAa,MAAb,MAAiB;CACf,YAAY,AAAiBA,QAAgB;EAAhB;;CAE7B,MAAM,gBACJ,SACwE;AACxE,SAAO,IAAIC,mCACT,MAAMC,kDACJ,KAAK,QACL,gBACAC,qDACA,UAAUC,4EAAgC,QAAQ,GAAG,OACtD,GACA,WACCF,kDACE,KAAK,QACL,gBACAC,qDACA,OACD,EACH,UAAUC,4EAAgC,QAAQ,GAAG,OACtD;;CAEH,MAAM,iBAAiB,IAAY;AACjC,QAAM,KAAK,OAAO,OAAO,gBAAgB,KAAK;;CAGhD,oBAAoB,SAA6C;EAC/D,MAAM,EACJ,eACA,qBACA,YACA,UACA,YACA,WACA,cACA,UACA,qBACA,gBACA,aACA,UACE;AAEJ,MAAI,CAAC,YAAY,CAAC,cAAc,CAAC,aAC/B,OAAM,IAAI,UACR,8FACD;EAGH,MAAM,QAAQC,mCAAc;GAC1B,gBAAgB;GAChB,uBAAuB;GACvB;GACA;GACA,aAAa;GACb,YAAY;GACZ;GACA,uBAAuB;GACvB,iBAAiB;GACjB,WAAW;GACX,cAAc;GACd,eAAe;GACf;GACD,CAAC;AAEF,SAAO,GAAG,KAAK,OAAO,QAAQ,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BjD,MAAM,4BACJ,SAIwC;EACxC,MAAM,EACJ,YACA,UACA,YACA,WACA,cACA,UACA,qBACA,gBACA,gBACE;AAEJ,MAAI,CAAC,YAAY,CAAC,cAAc,CAAC,aAC/B,OAAM,IAAI,UACR,8FACD;EAIH,MAAM,OAAO,MAAM,KAAK,OAAO,KAAK,UAAU;EAG9C,MAAM,QAAQ,KAAK,OAAO,KAAK,qBAAqB,GAAG;EAEvD,MAAM,QAAQA,mCAAc;GAC1B,gBAAgB,KAAK;GACrB,uBAAuB;GACvB;GACA;GACA,aAAa;GACb,YAAY;GACZ;GACA,uBAAuB;GACvB,iBAAiB;GACjB,WAAW;GACX,cAAc;GACd,eAAe;GACf;GACD,CAAC;AAIF,SAAO;GAAE,KAFG,GAAG,KAAK,OAAO,QAAQ,iBAAiB;GAEtC;GAAO,cAAc,KAAK;GAAc;;CAGxD,MAAM,cAAc,IAAiC;EACnD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,KACjB;AAED,SAAOF,oDAAsB,KAAK;;;;;;;;;;;;;;;CAgBpC,MAAM,mBAEJ,EACA,MACA,UACA,gBAGA;AAEA,MAAI,iBAAiB,UAAa,aAAa,MAAM,KAAK,GACxD,OAAM,IAAI,UACR,mGAED;EAGH,MAAM,YAAY,CAAC,CAAC,KAAK,OAAO;EAChC,MAAM,UAAU,CAAC,CAAC;AAElB,MAAI,CAAC,WAAW,CAAC,UACf,OAAM,IAAI,UACR,qJAED;EAGH,MAAM,OAAO,IAAI,gBAAgB;GAC/B,WAAW;GACX,YAAY;GACZ;GACD,CAAC;AAIF,MAAI,QACF,MAAK,IAAI,iBAAiB,aAAa;AAEzC,MAAI,UACF,MAAK,IAAI,iBAAiB,KAAK,OAAO,IAAc;EAGtD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KAEjC,cAAc,MAAM,EAAE,iBAAiB,CAAC,WAAW,CAAC;AAEtD,SAAOG,gEAA2B,KAAK;;CAGzC,MAAM,WAAuE,EAC3E,eAC4D;EAC5D,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IAEjC,gBAAgB,EAChB,aACD,CAAC;AAEF,SAAOC,8CAAmB,KAAK"}

package/lib/user-management/interfaces/index.d.cts

@@ -1,4 +1,4 @@
-import { An as AuthorizationOrganizationMembershipListResponse, Dn as SerializedListOrganizationMembershipsOptions, En as ListOrganizationMembershipsOptions, Fn as OrganizationMembershipResponse, In as OrganizationMembershipStatus, Ln as ListInvitationsOptions, Mn as BaseOrganizationMembership, Nn as BaseOrganizationMembershipResponse, On as AuthorizationOrganizationMembership, Pn as OrganizationMembership, Rn as SerializedListInvitationsOptions, Tn as ListUserFeatureFlagsOptions, jn as AuthorizationOrganizationMembershipResponse, kn as AuthorizationOrganizationMembershipList, zn as ListAuthFactorsOptions } from "../../index-BIw0X_SV.cjs";
+import { An as AuthorizationOrganizationMembershipListResponse, Dn as SerializedListOrganizationMembershipsOptions, En as ListOrganizationMembershipsOptions, Fn as OrganizationMembershipResponse, In as OrganizationMembershipStatus, Ln as ListInvitationsOptions, Mn as BaseOrganizationMembership, Nn as BaseOrganizationMembershipResponse, On as AuthorizationOrganizationMembership, Pn as OrganizationMembership, Rn as SerializedListInvitationsOptions, Tn as ListUserFeatureFlagsOptions, jn as AuthorizationOrganizationMembershipResponse, kn as AuthorizationOrganizationMembershipList, zn as ListAuthFactorsOptions } from "../../index-DYVTG9fR.cjs";
 import { n as OauthTokensResponse, t as OauthTokens } from "../../oauth-tokens.interface--rFwkKXb.cjs";
 import { a as WithResolvedClientId, i as SerializedAuthenticateWithOptionsBase, n as AuthenticateWithSessionOptions, r as SerializedAuthenticatePublicClientBase, t as AuthenticateWithOptionsBase } from "../../authenticate-with-options-base.interface-C3xH9pmi.cjs";
 import { n as AuthenticateWithCodeOptions, r as SerializedAuthenticateWithCodeOptions, t as AuthenticateUserWithCodeCredentials } from "../../authenticate-with-code-options.interface-H0yfsHxj.cjs";
@@ -26,8 +26,8 @@ import { n as SerializedEnrollUserInMfaFactorOptions, t as EnrollAuthFactorOptio
 import { i as FactorWithSecretsResponse, n as FactorResponse, r as FactorWithSecrets, t as Factor } from "../../factor.interface-TCY5UjaZ.cjs";
 import { n as IdentityResponse, t as Identity } from "../../identity.interface-BwHBiRFv.cjs";
 import { i as InvitationResponse, n as InvitationEvent, r as InvitationEventResponse, t as Invitation } from "../../invitation.interface-BwZhU4Nq.cjs";
-import { n as SerializedListSessionsOptions, t as ListSessionsOptions } from "../../list-sessions-options.interface-rRvxj4no.cjs";
-import { n as SerializedListUsersOptions, t as ListUsersOptions } from "../../list-users-options.interface-BrZWq49H.cjs";
+import { n as SerializedListSessionsOptions, t as ListSessionsOptions } from "../../list-sessions-options.interface-CZdBtY49.cjs";
+import { n as SerializedListUsersOptions, t as ListUsersOptions } from "../../list-users-options.interface-Bmgojx_R.cjs";
 import { t as Locale } from "../../locale.interface-BDuI7VXX.cjs";
 import { t as LogoutURLOptions } from "../../logout-url-options.interface-BOLd7ZRi.cjs";
 import { i as MagicAuthResponse, n as MagicAuthEvent, r as MagicAuthEventResponse, t as MagicAuth } from "../../magic-auth.interface-DGn4_Ctk.cjs";

package/lib/user-management/interfaces/list-auth-factors-options.interface.d.cts

@@ -1,2 +1,2 @@
-import { zn as ListAuthFactorsOptions } from "../../index-BIw0X_SV.cjs";
+import { zn as ListAuthFactorsOptions } from "../../index-DYVTG9fR.cjs";
 export { ListAuthFactorsOptions };

package/lib/user-management/interfaces/list-invitations-options.interface.d.cts

@@ -1,2 +1,2 @@
-import { Ln as ListInvitationsOptions, Rn as SerializedListInvitationsOptions } from "../../index-BIw0X_SV.cjs";
+import { Ln as ListInvitationsOptions, Rn as SerializedListInvitationsOptions } from "../../index-DYVTG9fR.cjs";
 export { ListInvitationsOptions, SerializedListInvitationsOptions };

package/lib/user-management/interfaces/list-organization-memberships-options.interface.d.cts

@@ -1,2 +1,2 @@
-import { Dn as SerializedListOrganizationMembershipsOptions, En as ListOrganizationMembershipsOptions } from "../../index-BIw0X_SV.cjs";
+import { Dn as SerializedListOrganizationMembershipsOptions, En as ListOrganizationMembershipsOptions } from "../../index-DYVTG9fR.cjs";
 export { ListOrganizationMembershipsOptions, SerializedListOrganizationMembershipsOptions };

package/lib/user-management/interfaces/list-sessions-options.interface.d.cts

@@ -1,2 +1,2 @@
-import { n as SerializedListSessionsOptions, t as ListSessionsOptions } from "../../list-sessions-options.interface-rRvxj4no.cjs";
+import { n as SerializedListSessionsOptions, t as ListSessionsOptions } from "../../list-sessions-options.interface-CZdBtY49.cjs";
 export { ListSessionsOptions, SerializedListSessionsOptions };

package/lib/user-management/interfaces/list-user-feature-flags-options.interface.d.cts

@@ -1,2 +1,2 @@
-import { Tn as ListUserFeatureFlagsOptions } from "../../index-BIw0X_SV.cjs";
+import { Tn as ListUserFeatureFlagsOptions } from "../../index-DYVTG9fR.cjs";
 export { ListUserFeatureFlagsOptions };

package/lib/user-management/interfaces/list-users-options.interface.d.cts

@@ -1,2 +1,2 @@
-import { n as SerializedListUsersOptions, t as ListUsersOptions } from "../../list-users-options.interface-BrZWq49H.cjs";
+import { n as SerializedListUsersOptions, t as ListUsersOptions } from "../../list-users-options.interface-Bmgojx_R.cjs";
 export { ListUsersOptions, SerializedListUsersOptions };

package/lib/user-management/interfaces/organization-membership.interface.d.cts

@@ -1,2 +1,2 @@
-import { An as AuthorizationOrganizationMembershipListResponse, Fn as OrganizationMembershipResponse, In as OrganizationMembershipStatus, Mn as BaseOrganizationMembership, Nn as BaseOrganizationMembershipResponse, On as AuthorizationOrganizationMembership, Pn as OrganizationMembership, jn as AuthorizationOrganizationMembershipResponse, kn as AuthorizationOrganizationMembershipList } from "../../index-BIw0X_SV.cjs";
+import { An as AuthorizationOrganizationMembershipListResponse, Fn as OrganizationMembershipResponse, In as OrganizationMembershipStatus, Mn as BaseOrganizationMembership, Nn as BaseOrganizationMembershipResponse, On as AuthorizationOrganizationMembership, Pn as OrganizationMembership, jn as AuthorizationOrganizationMembershipResponse, kn as AuthorizationOrganizationMembershipList } from "../../index-DYVTG9fR.cjs";
 export { AuthorizationOrganizationMembership, AuthorizationOrganizationMembershipList, AuthorizationOrganizationMembershipListResponse, AuthorizationOrganizationMembershipResponse, BaseOrganizationMembership, BaseOrganizationMembershipResponse, OrganizationMembership, OrganizationMembershipResponse, OrganizationMembershipStatus };

package/lib/user-management/serializers/authentication-event.serializer.cjs

@@ -1,3 +1,3 @@
-const require_authentication_event_serializer = require('../../authentication-event.serializer-mddvaOjb.cjs');
+const require_authentication_event_serializer = require('../../authentication-event.serializer-CqD91u8L.cjs');
 
 exports.deserializeAuthenticationEvent = require_authentication_event_serializer.deserializeAuthenticationEvent;

package/lib/user-management/serializers/authentication-event.serializer.js

@@ -1,7 +1,7 @@
 //#region src/user-management/serializers/authentication-event.serializer.ts
 const deserializeAuthenticationEvent = (authenticationEvent) => ({
 	email: authenticationEvent.email,
-	error: authenticationEvent.error,
+	...authenticationEvent.error !== void 0 && { error: authenticationEvent.error },
 	ipAddress: authenticationEvent.ip_address,
 	status: authenticationEvent.status,
 	type: authenticationEvent.type,

package/lib/user-management/serializers/authentication-event.serializer.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication-event.serializer.js","names":[],"sources":["../../../src/user-management/serializers/authentication-event.serializer.ts"],"sourcesContent":["import {\n  AuthenticationEvent,\n  AuthenticationEventResponse,\n} from '../interfaces';\n\nexport const deserializeAuthenticationEvent = (\n  authenticationEvent: AuthenticationEventResponse,\n): AuthenticationEvent => ({\n  email: authenticationEvent.email,\n  error: authenticationEvent.error,\n  ipAddress: authenticationEvent.ip_address,\n  status: authenticationEvent.status,\n  type: authenticationEvent.type,\n  userAgent: authenticationEvent.user_agent,\n  userId: authenticationEvent.user_id,\n});\n"],"mappings":";AAKA,MAAa,kCACX,yBACyB;CACzB,OAAO,oBAAoB;CAC3B,OAAO,oBAAoB;CAC3B,WAAW,oBAAoB;CAC/B,QAAQ,oBAAoB;CAC5B,MAAM,oBAAoB;CAC1B,WAAW,oBAAoB;CAC/B,QAAQ,oBAAoB;CAC7B"}
+{"version":3,"file":"authentication-event.serializer.js","names":[],"sources":["../../../src/user-management/serializers/authentication-event.serializer.ts"],"sourcesContent":["import {\n  AuthenticationEvent,\n  AuthenticationEventResponse,\n} from '../interfaces';\n\nexport const deserializeAuthenticationEvent = (\n  authenticationEvent: AuthenticationEventResponse,\n): AuthenticationEvent => ({\n  email: authenticationEvent.email,\n  ...(authenticationEvent.error !== undefined && {\n    error: authenticationEvent.error,\n  }),\n  ipAddress: authenticationEvent.ip_address,\n  status: authenticationEvent.status,\n  type: authenticationEvent.type,\n  userAgent: authenticationEvent.user_agent,\n  userId: authenticationEvent.user_id,\n});\n"],"mappings":";AAKA,MAAa,kCACX,yBACyB;CACzB,OAAO,oBAAoB;CAC3B,GAAI,oBAAoB,UAAU,UAAa,EAC7C,OAAO,oBAAoB,OAC5B;CACD,WAAW,oBAAoB;CAC/B,QAAQ,oBAAoB;CAC5B,MAAM,oBAAoB;CAC1B,WAAW,oBAAoB;CAC/B,QAAQ,oBAAoB;CAC7B"}

package/lib/user-management/serializers/index.cjs

@@ -5,7 +5,7 @@ const require_authenticate_with_password_options_serializer = require('../../aut
 const require_authenticate_with_refresh_token_options_serializer = require('../../authenticate-with-refresh-token.options.serializer-Ba3QVuMY.cjs');
 const require_authenticate_with_refresh_token_public_client_options_serializer = require('../../authenticate-with-refresh-token-public-client-options.serializer-BUO_bMxj.cjs');
 const require_authenticate_with_totp_options_serializer = require('../../authenticate-with-totp-options.serializer-Dv5iQHm4.cjs');
-const require_authentication_event_serializer = require('../../authentication-event.serializer-mddvaOjb.cjs');
+const require_authentication_event_serializer = require('../../authentication-event.serializer-CqD91u8L.cjs');
 const require_user_serializer = require('../../user.serializer-Y5EM8MeK.cjs');
 const require_authentication_response_serializer = require('../../authentication-response.serializer-DCSj_OPJ.cjs');
 const require_create_magic_auth_options_serializer = require('../../create-magic-auth-options.serializer-DN24SZEy.cjs');
@@ -18,7 +18,7 @@ const require_list_sessions_options_serializer = require('../../list-sessions-op
 const require_magic_auth_serializer = require('../../magic-auth.serializer-By4HyvgZ.cjs');
 const require_password_reset_serializer = require('../../password-reset.serializer-D8Kbnirv.cjs');
 const require_reset_password_options_serializer = require('../../reset-password-options.serializer-6VTahIzL.cjs');
-const require_session_serializer = require('../../session.serializer-Dmj9Hm3q.cjs');
+const require_session_serializer = require('../../session.serializer-B63NxvRH.cjs');
 const require_create_user_options_serializer = require('../../create-user-options.serializer-CphvVoaV.cjs');
 const require_update_user_options_serializer = require('../../update-user-options.serializer-H11lRdjH.cjs');
 const require_update_user_password_options_serializer = require('../../update-user-password-options.serializer-CY9Ckmqw.cjs');

package/lib/user-management/serializers/index.d.cts

@@ -14,7 +14,7 @@ import { n as deserializeEmailVerificationEvent, t as deserializeEmailVerificati
 import { t as serializeEnrollAuthFactorOptions } from "../../enroll-auth-factor-options.serializer-D4C-tOTm.cjs";
 import { n as deserializeFactorWithSecrets, t as deserializeFactor } from "../../factor.serializer-DozaVLbI.cjs";
 import { n as deserializeInvitationEvent, t as deserializeInvitation } from "../../invitation.serializer-EDopn96N.cjs";
-import { t as serializeListSessionsOptions } from "../../list-sessions-options.serializer-Bt-16Y8Y.cjs";
+import { t as serializeListSessionsOptions } from "../../list-sessions-options.serializer-BVgXGaUW.cjs";
 import { n as deserializeMagicAuthEvent, t as deserializeMagicAuth } from "../../magic-auth.serializer-DAydIP4V.cjs";
 import { n as deserializePasswordResetEvent, t as deserializePasswordReset } from "../../password-reset.serializer-grZ1VGba.cjs";
 import { t as serializeResetPasswordOptions } from "../../reset-password-options.serializer-B9Dv28B5.cjs";

package/lib/user-management/serializers/list-invitations-options.serializer.d.cts

@@ -1,4 +1,4 @@
-import { Ln as ListInvitationsOptions, Rn as SerializedListInvitationsOptions } from "../../index-BIw0X_SV.cjs";
+import { Ln as ListInvitationsOptions, Rn as SerializedListInvitationsOptions } from "../../index-DYVTG9fR.cjs";
 
 //#region src/user-management/serializers/list-invitations-options.serializer.d.ts
 declare const serializeListInvitationsOptions: (options: ListInvitationsOptions) => SerializedListInvitationsOptions;

package/lib/user-management/serializers/list-organization-memberships-options.serializer.d.cts

@@ -1,4 +1,4 @@
-import { Dn as SerializedListOrganizationMembershipsOptions, En as ListOrganizationMembershipsOptions } from "../../index-BIw0X_SV.cjs";
+import { Dn as SerializedListOrganizationMembershipsOptions, En as ListOrganizationMembershipsOptions } from "../../index-DYVTG9fR.cjs";
 
 //#region src/user-management/serializers/list-organization-memberships-options.serializer.d.ts
 declare const serializeListOrganizationMembershipsOptions: (options: ListOrganizationMembershipsOptions) => SerializedListOrganizationMembershipsOptions;

package/lib/user-management/serializers/list-sessions-options.serializer.d.cts

@@ -1,2 +1,2 @@
-import { t as serializeListSessionsOptions } from "../../list-sessions-options.serializer-Bt-16Y8Y.cjs";
+import { t as serializeListSessionsOptions } from "../../list-sessions-options.serializer-BVgXGaUW.cjs";
 export { serializeListSessionsOptions };

package/lib/user-management/serializers/list-users-options.serializer.d.cts

@@ -1,4 +1,4 @@
-import { n as SerializedListUsersOptions, t as ListUsersOptions } from "../../list-users-options.interface-BrZWq49H.cjs";
+import { n as SerializedListUsersOptions, t as ListUsersOptions } from "../../list-users-options.interface-Bmgojx_R.cjs";
 
 //#region src/user-management/serializers/list-users-options.serializer.d.ts
 declare const serializeListUsersOptions: (options: ListUsersOptions) => SerializedListUsersOptions;

package/lib/user-management/serializers/organization-membership.serializer.d.cts

@@ -1,4 +1,4 @@
-import { Fn as OrganizationMembershipResponse, On as AuthorizationOrganizationMembership, Pn as OrganizationMembership, jn as AuthorizationOrganizationMembershipResponse } from "../../index-BIw0X_SV.cjs";
+import { Fn as OrganizationMembershipResponse, On as AuthorizationOrganizationMembership, Pn as OrganizationMembership, jn as AuthorizationOrganizationMembershipResponse } from "../../index-DYVTG9fR.cjs";
 
 //#region src/user-management/serializers/organization-membership.serializer.d.ts
 declare const deserializeOrganizationMembership: (organizationMembership: OrganizationMembershipResponse) => OrganizationMembership;

package/lib/user-management/serializers/role.serializer.d.cts

@@ -1,4 +1,4 @@
-import { er as RoleEvent, tr as RoleEventResponse } from "../../index-BIw0X_SV.cjs";
+import { er as RoleEvent, tr as RoleEventResponse } from "../../index-DYVTG9fR.cjs";
 
 //#region src/user-management/serializers/role.serializer.d.ts
 declare const deserializeRoleEvent: (role: RoleEventResponse) => RoleEvent;

package/lib/user-management/serializers/session.serializer.cjs

@@ -1,3 +1,3 @@
-const require_session_serializer = require('../../session.serializer-Dmj9Hm3q.cjs');
+const require_session_serializer = require('../../session.serializer-B63NxvRH.cjs');
 
 exports.deserializeSession = require_session_serializer.deserializeSession;

package/lib/user-management/serializers/session.serializer.js

@@ -5,8 +5,8 @@ const deserializeSession = (session) => ({
 	userId: session.user_id,
 	ipAddress: session.ip_address,
 	userAgent: session.user_agent,
-	organizationId: session.organization_id,
-	impersonator: session.impersonator,
+	...session.organization_id !== void 0 && { organizationId: session.organization_id },
+	...session.impersonator !== void 0 && { impersonator: session.impersonator },
 	authMethod: session.auth_method,
 	status: session.status,
 	expiresAt: session.expires_at,