UserManagement API

const user = await workos.userManagement.getUser('user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5');
console.log(user.email);

const user = await workos.userManagement.getUserByExternalId('ext_12345');

const users = await workos.userManagement.listUsers({
  organizationId: 'org_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  limit: 20
});

for await (const user of users) {
  console.log(user.email);
}

const user = await workos.userManagement.createUser({
  email: '[email protected]',
  password: 'securePassword123',
  firstName: 'Jane',
  lastName: 'Doe',
  emailVerified: false,
  metadata: { department: 'engineering' }
});

const user = await workos.userManagement.updateUser({
  userId: 'user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  firstName: 'Jane',
  metadata: { department: 'product' }
});

await workos.userManagement.deleteUser('user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5');

const authResponse = await workos.userManagement.authenticateWithPassword({
  email: '[email protected]',
  password: 'securePassword123',
  clientId: 'client_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

console.log(authResponse.accessToken);

// Public client (PKCE flow)
const authResponse = await workos.userManagement.authenticateWithCode({
  code: 'auth_code_123',
  codeVerifier: 'code_verifier_from_pkce',
  clientId: 'client_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

// Confidential client (uses API key)
const authResponse = await workos.userManagement.authenticateWithCode({
  code: 'auth_code_123',
  clientId: 'client_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

const authResponse = await workos.userManagement.authenticateWithRefreshToken({
  refreshToken: 'refresh_token_123',
  clientId: 'client_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

const authResponse = await workos.userManagement.authenticateWithMagicAuth({
  code: 'magic_code_123',
  email: '[email protected]',
  clientId: 'client_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

const authResponse = await workos.userManagement.authenticateWithTotp({
  code: '123456',
  authenticationChallengeId: 'auth_challenge_123',
  pendingAuthenticationToken: 'pending_token_123',
  clientId: 'client_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

const url = workos.userManagement.getAuthorizationUrl({
  provider: 'authkit',
  redirectUri: 'https://myapp.com/callback',
  state: 'random_state_123',
  screenHint: 'sign-up'
});

// Redirect user to this URL
window.location.href = url;

const { url, state, codeVerifier } = await workos.userManagement.getAuthorizationUrlWithPKCE({
  provider: 'authkit',
  clientId: 'client_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  redirectUri: 'myapp://callback'
});

// Store state and codeVerifier securely
localStorage.setItem('pkce_state', state);
localStorage.setItem('pkce_verifier', codeVerifier);

// Redirect user
window.location.href = url;

const session = workos.userManagement.loadSealedSession({
  sessionData: req.cookies.session,
  cookiePassword: process.env.WORKOS_COOKIE_PASSWORD
});

await session.refresh();

const result = await workos.userManagement.authenticateWithSessionCookie({
  sessionData: req.cookies.session,
  cookiePassword: process.env.WORKOS_COOKIE_PASSWORD
});

if (result.authenticated) {
  console.log('User:', result.user.email);
} else {
  console.log('Auth failed:', result.reason);
}

const sessions = await workos.userManagement.listSessions('user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5');

for await (const session of sessions) {
  console.log(session.id);
}

await workos.userManagement.revokeSession({
  sessionId: 'session_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

const logoutUrl = workos.userManagement.getLogoutUrl({
  sessionId: 'session_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  returnTo: 'https://myapp.com'
});

const membership = await workos.userManagement.getOrganizationMembership(
  'om_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const memberships = await workos.userManagement.listOrganizationMemberships({
  userId: 'user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  statuses: ['active']
});

const membership = await workos.userManagement.createOrganizationMembership({
  userId: 'user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  organizationId: 'org_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  roleSlug: 'member'
});

const membership = await workos.userManagement.updateOrganizationMembership(
  'om_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  { roleSlug: 'admin' }
);

await workos.userManagement.deleteOrganizationMembership(
  'om_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const membership = await workos.userManagement.deactivateOrganizationMembership(
  'om_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const membership = await workos.userManagement.reactivateOrganizationMembership(
  'om_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const { user } = await workos.userManagement.sendVerificationEmail({
  userId: 'user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

const { user } = await workos.userManagement.verifyEmail({
  userId: 'user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
  code: 'verification_code_123'
});

const verification = await workos.userManagement.getEmailVerification(
  'email_verification_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const passwordReset = await workos.userManagement.createPasswordReset({
  email: '[email protected]'
});

const { user } = await workos.userManagement.resetPassword({
  token: 'reset_token_123',
  newPassword: 'newSecurePassword456'
});

const passwordReset = await workos.userManagement.getPasswordReset(
  'password_reset_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const magicAuth = await workos.userManagement.createMagicAuth({
  email: '[email protected]'
});

console.log(magicAuth.link);

const magicAuth = await workos.userManagement.getMagicAuth(
  'magic_auth_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const { authenticationFactor, authenticationChallenge } = 
  await workos.userManagement.enrollAuthFactor({
    userId: 'user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5',
    type: 'totp',
    issuer: 'MyApp',
    user: '[email protected]'
  });

console.log(authenticationFactor.totp?.qrCode);

const factors = await workos.userManagement.listAuthFactors({
  userId: 'user_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

for await (const factor of factors) {
  console.log(factor.type);
}

const invitation = await workos.userManagement.sendInvitation({
  email: '[email protected]',
  organizationId: 'org_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

const invitations = await workos.userManagement.listInvitations({
  organizationId: 'org_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
});

const invitation = await workos.userManagement.getInvitation(
  'invitation_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const invitation = await workos.userManagement.revokeInvitation(
  'invitation_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const invitation = await workos.userManagement.resendInvitation(
  'invitation_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5'
);

const jwksUrl = workos.userManagement.getJwksUrl('client_01HZXK8F9P3QZJQ2Z1Z2Z3Z4Z5');
console.log(jwksUrl);