Weaver

Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.

Workos Php Laravel Package

workos/workos-php

The official WorkOS PHP library gives PHP applications convenient access to the WorkOS API. Install via Composer, configure WORKOS_API_KEY and WORKOS_CLIENT_ID, and integrate SSO, Directory Sync, Admin Portal, Magic Link, and more.

View on GitHub

Deep Wiki

Context7

v9.5.0

Miscellaneous Chores

deps: update github-actions versions (#453) (35c9dd2)
use American spelling and add agent spelling rule (#455) (68cd9ea)
#447 feat(generated): regenerate from spec

Features
- user_management:
  - Added model UserRoleAssignmentSourceGroup
  - Added group to UserRoleAssignmentSource
#452 feat(generated)!: regenerate from spec (9 changes)

⚠️ Breaking
- pipes:
  - Removed model AddDataIntegrationsUpsertApiKeyRequest
  - Removed model AddDataIntegrationsUpsertClientCredentialsRequest
  - Removed enum AddDataIntegrationsUpsertApiKeyRequestConnectionOwner
  - Removed enum AddDataIntegrationsUpsertClientCredentialsRequestConnectionOwner
Features
- admin_portal:
  - Added model RevokeLink
  - Added external_user_id to GenerateLink
  - Added endpoint POST /portal/revoke_link
  - Changed errors for endpoint POST /portal/generate_link
- agents:
  - Added model AgentBlueprintInvocableAs
  - Added model AgentBlueprintsCreateRequestInvocableAs
  - Added model AgentBlueprintsUpdateRequestInvocableAs
  - Added invocable_as to AgentBlueprint
  - Added invocable_as to AgentBlueprintsCreateRequest
  - Added invocable_as to AgentBlueprintsUpdateRequest
  - Added enum AgentBlueprintInvocableAsInstanceTypes
  - Added enum AgentBlueprintsCreateRequestInvocableAsInstanceTypes
  - Added enum AgentBlueprintsUpdateRequestInvocableAsInstanceTypes
- audit_logs:
  - Changed errors for endpoint GET /audit_logs/actions
  - Changed errors for endpoint GET /audit_logs/actions/{actionName}/schemas
  - Changed errors for endpoint POST /audit_logs/actions/{actionName}/schemas
  - Changed errors for endpoint POST /audit_logs/events
  - Changed errors for endpoint POST /audit_logs/exports
  - Changed errors for endpoint GET /audit_logs/exports/{auditLogExportId}
- authorization:
  - Changed errors for endpoint GET /authorization/organization_memberships/{organization_membership_id}/role_assignments
  - Changed errors for endpoint POST /authorization/groups/{group_id}/role_assignments
  - Changed errors for endpoint PUT /authorization/groups/{group_id}/role_assignments
  - Changed errors for endpoint GET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}
  - Changed errors for endpoint POST /authorization/organization_memberships/{organization_membership_id}/check
  - Changed errors for endpoint GET /authorization/organization_memberships/{organization_membership_id}/resources
  - Changed errors for endpoint GET /authorization/organization_memberships/{organization_membership_id}/resources/{resource_id}/permissions
  - Changed errors for endpoint GET /authorization/organization_memberships/{organization_membership_id}/resources/{resource_type_slug}/{external_id}/permissions
  - Changed errors for endpoint POST /authorization/organization_memberships/{organization_membership_id}/role_assignments
  - Changed errors for endpoint GET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}
  - Changed errors for endpoint PATCH /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}
  - Changed errors for endpoint GET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/organization_memberships
  - Changed errors for endpoint GET /authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/role_assignments
  - Changed errors for endpoint GET /authorization/resources
  - Changed errors for endpoint POST /authorization/resources
  - Changed errors for endpoint GET /authorization/resources/{resource_id}
  - Changed errors for endpoint PATCH /authorization/resources/{resource_id}
  - Changed errors for endpoint GET /authorization/resources/{resource_id}/organization_memberships
  - Changed errors for endpoint GET /authorization/resources/{resource_id}/role_assignments
- directory_sync:
  - Added model DirectorySyncResponse
  - Added model DirectorySyncRateLimitError
  - Added endpoint POST /directories/{id}/sync
- feature_flags:
  - Changed errors for endpoint PUT /feature-flags/{slug}/disable
  - Changed errors for endpoint PUT /feature-flags/{slug}/enable
- organization_membership:
  - Changed errors for endpoint DELETE /user_management/organization_memberships/{id}
- organizations:
  - Changed errors for endpoint GET /organizations/{id}/audit_logs_retention
  - Changed errors for endpoint PUT /organizations/{id}/audit_logs_retention
  - Changed errors for endpoint POST /organizations/{organization_id}/it_contacts/{contact_id}/invite
- pipes:
  - Added established_by_user_id to ConnectedAccountWriteResponse
  - Added state_reason to ConnectedAccountWriteResponse
  - Added established_by_user_id to ConnectedAccount
  - Added state_reason to ConnectedAccount
  - Added established_by_user_id to DataIntegrationsListResponseDataConnectedAccount
  - Added state_reason to DataIntegrationsListResponseDataConnectedAccount
  - Changed idempotency-key contract for endpoint POST /data-integrations/{slug}/api-key
  - Changed idempotency-key contract for endpoint POST /data-integrations/{slug}/client-credentials
  - Changed idempotency-key contract for endpoint POST /organizations/{organization_id}/connected_accounts/{slug}
  - Changed idempotency-key contract for endpoint POST /user_management/users/{user_id}/connected_accounts/{slug}
  - Added model ConnectedAccountWriteResponse
  - Added model ConnectedAccountWriteResponseWarning
  - Added account_display_name to CreateOrganizationConnectedAccount
  - Added account_identifier to CreateOrganizationConnectedAccount
  - Added account_display_name to OrganizationConnectedAccount
  - Added account_identifier to OrganizationConnectedAccount
  - Added account_display_name to CreateConnectedAccount
  - Added account_identifier to CreateConnectedAccount
  - Added account_display_name to ConnectedAccountInput
  - Added account_identifier to ConnectedAccountInput
  - Added account_display_name to DataIntegrationsCreateApiKeyConnectionRequest
  - Added account_identifier to DataIntegrationsCreateApiKeyConnectionRequest
  - Added account_display_name to DataIntegrationsUpsertApiKeyRequest
  - Added account_identifier to DataIntegrationsUpsertApiKeyRequest
  - Added account_display_name to ReauthorizeDataIntegrationsUpsertApiKeyRequest
  - Added account_identifier to ReauthorizeDataIntegrationsUpsertApiKeyRequest
  - Added account_display_name to DataIntegrationsUpsertApiKeyRequest2
  - Added account_identifier to DataIntegrationsUpsertApiKeyRequest2
  - Added account_display_name to DataIntegrationsGetDataIntegrationAuthorizeUrlRequest
  - Added account_display_name to AddDataIntegrationsGetDataIntegrationAuthorizeUrlRequest
  - Added account_display_name to ReauthorizeDataIntegrationsGetDataIntegrationAuthorizeUrlRequest
  - Added account_display_name to DataIntegrationsCreateClientCredentialsConnectionRequest
  - Added account_identifier to DataIntegrationsCreateClientCredentialsConnectionRequest
  - Added account_display_name to DataIntegrationsUpsertClientCredentialsRequest
  - Added account_identifier to DataIntegrationsUpsertClientCredentialsRequest
  - Added account_display_name to ReauthorizeDataIntegrationsUpsertClientCredentialsRequest
  - Added account_identifier to ReauthorizeDataIntegrationsUpsertClientCredentialsRequest
  - Added account_display_name to DataIntegrationsUpsertClientCredentialsRequest2
  - Added account_identifier to DataIntegrationsUpsertClientCredentialsRequest2
  - Added enum ConnectedAccountWriteResponseConnectionRole
  - Added enum ConnectedAccountWriteResponseAuthMethod
  - Added enum ConnectedAccountWriteResponseState
  - Changed errors for endpoint POST /data-integrations/{slug}/api-key
  - Changed errors for endpoint POST /data-integrations/{slug}/authorize
  - Changed errors for endpoint POST /data-integrations/{slug}/client-credentials
  - Added model AddDataIntegrationsGetDataIntegrationAuthorizeUrlRequest
  - Added model ReauthorizeDataIntegrationsGetDataIntegrationAuthorizeUrlRequest
  - Added enum AddDataIntegrationsGetDataIntegrationAuthorizeUrlRequestConnectionOwner
  - Added enum ReauthorizeDataIntegrationsGetDataIntegrationAuthorizeUrlRequestConnectionOwner
  - Added model DataIntegrationsCreateApiKeyConnectionRequest
  - Added model DataIntegrationsCreateClientCredentialsConnectionRequest
  - Added enum DataIntegrationsCreateApiKeyConnectionRequestConnectionOwner
  - Added enum DataIntegrationsCreateClientCredentialsConnectionRequestConnectionOwner
  - Added endpoint POST /data-integrations/{slug}/api-key
  - Added endpoint POST /data-integrations/{slug}/client-credentials
  - Added config to DataIntegrationVendedCredential
  - Added model DataIntegrationVendedCredential
  - Added model CreateOrganizationConnectedAccount
  - Added model CreateConnectedAccount
  - Added model AddDataIntegrationsUpsertApiKeyRequest
  - Added model ReauthorizeDataIntegrationsUpsertApiKeyRequest
  - Added model DataIntegrationsUpsertApiKeyRequest2
  - Added model AddDataIntegrationsUpsertClientCredentialsRequest
  - Added model ReauthorizeDataIntegrationsUpsertClientCredentialsRequest
  - Added model DataIntegrationsUpsertClientCredentialsRequest2
  - Added enum CreateOrganizationConnectedAccountState
  - Added enum CreateConnectedAccountState
  - Added enum AddDataIntegrationsUpsertApiKeyRequestConnectionOwner
  - Added enum ReauthorizeDataIntegrationsUpsertApiKeyRequestConnectionOwner
  - Added enum DataIntegrationsUpsertApiKeyRequest2ConnectionOwner
  - Added enum AddDataIntegrationsUpsertClientCredentialsRequestConnectionOwner
  - Added enum ReauthorizeDataIntegrationsUpsertClientCredentialsRequestConnectionOwner
  - Added enum DataIntegrationsUpsertClientCredentialsRequest2ConnectionOwner
  - Added parameter OrganizationsDataProviders.updateOrganizationDataInstallation.connection_intent
  - Added parameter UserManagementDataProviders.updateUserDataInstallation.connection_intent
  - Added model OrganizationConnectedAccount
  - Added enum OrganizationConnectedAccountState
- radar:
  - Changed errors for endpoint POST /radar/attempts
  - Changed errors for endpoint PUT /radar/attempts/{id}
  - Changed errors for endpoint POST /radar/lists/{type}/{action}
- sso:
  - Added code_verifier to TokenQuery
- user_management:
  - Changed errors for endpoint POST /user_management/invitations
  - Changed errors for endpoint POST /user_management/invitations/{id}/resend
  - Changed errors for endpoint POST /user_management/waitlist_entries/{id}/approve
  - Changed errors for endpoint PUT /user_management/users/{id}
Fixes
- agents:
  - Changed errors for endpoint POST /agents/blueprints/{agent_blueprint_id}/tokens
- pipes:
  - Changed response of Pipes.createApiKeyConnection from ConnectedAccount to ConnectedAccountWriteResponse
  - Changed response of Pipes.upsertApiKey from ConnectedAccount to ConnectedAccountWriteResponse
  - Changed response of Pipes.createClientCredentialsConnection from ConnectedAccount to ConnectedAccountWriteResponse
  - Changed response of Pipes.upsertClientCredentials from ConnectedAccount to ConnectedAccountWriteResponse
  - Changed response of OrganizationsDataProviders.createOrganizationDataInstallation from ConnectedAccount to ConnectedAccountWriteResponse
  - Changed response of OrganizationsDataProviders.updateOrganizationDataInstallation from ConnectedAccount to ConnectedAccountWriteResponse
  - Changed response of UserManagementDataProviders.createUserDataInstallation from ConnectedAccount to ConnectedAccountWriteResponse
  - Changed response of UserManagementDataProviders.updateUserDataInstallation from ConnectedAccount to ConnectedAccountWriteResponse
  - Changed errors for endpoint POST /organizations/{organization_id}/connected_accounts/{slug}
  - Changed errors for endpoint POST /user_management/users/{user_id}/connected_accounts/{slug}
  - Changed errors for endpoint PUT /data-integrations/{slug}/api-key
  - Changed request body for Pipes.getDataIntegrationAuthorizeUrl
  - Changed errors for endpoint POST /data-integrations/{slug}/authorize
  - Changed errors for endpoint PUT /data-integrations/{slug}/client-credentials
  - Changed request body for Pipes.upsertApiKey
  - Changed request body for Pipes.upsertClientCredentials
  - Changed the type of DataIntegrationCredentialsResponse.credential
  - Removed connected_account_id from DataIntegrationsUpsertApiKeyRequest
  - Removed connected_account_id from DataIntegrationsUpsertClientCredentialsRequest
  - Changed request body of OrganizationsDataProviders.createOrganizationDataInstallation from OrganizationConnectedAccount to CreateOrganizationConnectedAccount
  - Changed request body of UserManagementDataProviders.createUserDataInstallation from ConnectedAccountInput to CreateConnectedAccount
  - Changed request body of OrganizationsDataProviders.createOrganizationDataInstallation from ConnectedAccountInput to OrganizationConnectedAccount
  - Changed request body of OrganizationsDataProviders.updateOrganizationDataInstallation from ConnectedAccountInput to OrganizationConnectedAccount
  - Changed errors for endpoint PUT /organizations/{organization_id}/connected_accounts/{slug}
- sso:
  - Changed errors for endpoint POST /connections
  - Changed errors for endpoint POST /connections/{connectionId}/saml_sp_signing_cert
#454 feat(generated)!: regenerate from spec (3 changes)

Features
- user_management:
  - Changed errors for endpoint POST /user_management/users
  - Changed errors for endpoint POST /user_management/magic_auth
Fixes
- user_management:
  - Changed errors for endpoint POST /user_management/authenticate
#456 fix(generated): regenerate from spec

Features
- agents:
  - Added revoked_at to AgentRegistration
  - Added endpoint POST /agents/registrations/{id}/revoke

v9.4.0

Features

Add optional issuer check to SessionManager authenticate (#440) (47e8606)

Bug Fixes

passwordless: encode session IDs in send URLs (#441) (6b83721)
session: require valid JWT expiration (#442) (717b3cf)

Miscellaneous Chores

deps: update actions/deploy-pages action to v5.0.1 (#444) (7282b2c)
#438 fix(generated): regenerate from spec

Features
- pipes:
  - Added connected_account_id to DataIntegrationsVendCredentialsRequest
  - Added connected_account_id to DataIntegrationsGetUserTokenRequest
  - Added parameter UserManagementDataProviders.getUserDataInstallation.connected_account_id
  - Changed errors for endpoint GET /user_management/users/{user_id}/connected_accounts/{slug}
  - Added parameter UserManagementDataProviders.updateUserDataInstallation.connected_account_id
  - Changed errors for endpoint PUT /user_management/users/{user_id}/connected_accounts/{slug}
  - Added parameter UserManagementDataProviders.deleteUserDataInstallation.connected_account_id
  - Changed errors for endpoint DELETE /user_management/users/{user_id}/connected_accounts/{slug}
  - Added connected_accounts to DataIntegrationsListResponseData
  - Changed errors for endpoint PUT /data-integrations/{slug}
  - Changed errors for endpoint PUT /data-integrations/{slug}/api-key
  - Changed errors for endpoint PUT /data-integrations/{slug}/client-credentials
  - Changed errors for endpoint POST /data-integrations/{slug}/credentials
  - Changed errors for endpoint POST /data-integrations/{provider}/token
#443 feat(generated): regenerate from spec (4 changes)

Features
- admin_portal:
  - Changed the format of PortalLinkResponse.link
- agents:
  - Added parameter AgentsSessions.list.organization_id
  - Changed the format of ClaimViewResponse.user_code
  - Changed the format of AgentAdminValidateCredentialRequest.credential
- api_keys:
  - Changed the format of ValidateApiKey.value
  - Changed the format of OrganizationApiKeyWithValue.value
  - Changed the format of UserApiKeyWithValue.value
- multi_factor_auth:
  - Changed the format of AuthenticationChallenge.code
  - Changed the format of AuthenticationFactorEnrolledTotp.secret
  - Changed the format of AuthenticationFactorEnrolledTotp.qr_code
  - Changed the format of AuthenticationFactorEnrolledTotp.uri
  - Changed the format of AuthenticationChallengesVerifyRequest.code
- pipes:
  - Added supports_multiple_connections to DataIntegrationsVendCredentialsRequest
  - Added supports_multiple_connections to DataIntegrationsGetUserTokenRequest
  - Added parameter UserManagementDataProviders.getUserDataInstallation.supports_multiple_connections
  - Added parameter UserManagementDataProviders.updateUserDataInstallation.supports_multiple_connections
  - Added parameter UserManagementDataProviders.deleteUserDataInstallation.supports_multiple_connections
  - Added parameter UserManagementDataProviders.getUserDataIntegrations.supports_multiple_connections
  - Added enum PipesOwnership
  - Added user to CreateDataIntegrationOwnership
  - Added user to DataIntegrationOwnership
  - Added endpoint GET /data-integrations/{slug}/organization
  - Added endpoint PUT /data-integrations/{slug}/organization
  - Added endpoint DELETE /data-integrations/{slug}/organization
  - Added parameter Pipes.listDataIntegrations.ownership
  - Changed errors for endpoint GET /data-integrations
  - Changed errors for endpoint PUT /user_management/users/{user_id}/connected_accounts/{slug}
  - Changed errors for endpoint DELETE /user_management/users/{user_id}/connected_accounts/{slug}
  - Changed the format of DataIntegrationCredentialsResponseCredential.value
  - Added connection_owner to DataIntegrationsUpsertApiKeyRequest
  - Added connection_owner to DataIntegrationsUpsertClientCredentialsRequest
  - Added enum DataIntegrationsUpsertApiKeyRequestConnectionOwner
  - Added enum DataIntegrationsUpsertClientCredentialsRequestConnectionOwner
  - Added model AccountSelectionRequiredError
  - Added connected_account_id to DataIntegrationsUpsertApiKeyRequest
  - Added connected_account_id to DataIntegrationsUpsertClientCredentialsRequest
  - Added ownership to CreateDataIntegration
  - Added ownership to DataIntegration
  - Added connection_owner to DataIntegrationsVendCredentialsRequest
  - Added connection_owner to DataIntegrationsGetUserTokenRequest
  - Added enum CreateDataIntegrationOwnership
  - Added enum DataIntegrationOwnership
  - Added enum DataIntegrationsVendCredentialsRequestConnectionOwner
  - Added enum DataIntegrationsGetUserTokenRequestConnectionOwner
  - Changed errors for endpoint POST /data-integrations/{slug}/credentials
  - Changed errors for endpoint POST /data-integrations/{provider}/token
- sso:
  - Changed the format of CreateConnectionKeyPair.key
  - Changed the format of TokenQuery.code
  - Changed the format of SSOLogoutAuthorizeResponse.logout_url
- user_management:
  - Added model CreateAuthkitOAuthResource
  - Added model AuthkitOAuthResource
  - Added service UserManagementAuthkitOAuthResources
  - Changed the format of DeviceAuthorizationResponse.verification_uri_complete
  - Changed the format of VerifyEmailAddress.code
  - Changed the format of ConfirmEmailChange.code
  - Changed the format of MagicAuth.code
  - Changed the format of UserInvite.accept_invitation_url
  - Changed the format of EmailVerification.code
  - Changed the format of PasswordReset.password_reset_url
  - Changed the format of AuthenticateResponse.authkit_authorization_code
  - Changed the format of DeviceAuthorizationResponse.device_code
  - Changed the format of DeviceAuthorizationResponse.user_code
  - Changed the format of AuthorizationCodeSessionAuthenticateRequest.code
  - Changed the format of AuthorizationCodeSessionAuthenticateRequest.code_verifier
  - Changed the format of MagicAuthCodeSessionAuthenticateRequest.code
  - Changed the format of EmailVerificationCodeSessionAuthenticateRequest.code
  - Changed the format of MfaTotpSessionAuthenticateRequest.code
  - Changed the format of RadarEmailChallengeCodeSessionAuthenticateRequest.code
  - Changed the format of RadarSmsChallengeCodeSessionAuthenticateRequest.code
  - Changed the format of DeviceCodeSessionAuthenticateRequest.device_code
  - Changed the format of Invitation.accept_invitation_url
  - Changed the format of MagicAuthSendMagicAuthCodeAndReturnResponse.code
- radar:
  - Changed the format of RadarChallenge.code
- vault:
  - Changed the format of CreateObjectRequest.value
  - Changed the format of VaultObject.value
  - Changed the format of UpdateObjectRequest.value
Fixes
- pipes:
  - Removed userland_user from CreateDataIntegrationOwnership
  - Removed userland_user from DataIntegrationOwnership
  - Changed errors for endpoint POST /user_management/users/{user_id}/connected_accounts/{slug}
  - Changed errors for endpoint PUT /data-integrations/{slug}/api-key
  - Changed errors for endpoint PUT /data-integrations/{slug}/client-credentials
  - Changed errors for endpoint POST /data-integrations/{slug}/credentials
  - Changed errors for endpoint POST /data-integrations/{provider}/token
  - Changed errors for endpoint GET /user_management/users/{user_id}/connected_accounts/{slug}
  - Changed errors for endpoint PUT /user_management/users/{user_id}/connected_accounts/{slug}
  - Changed errors for endpoint DELETE /user_management/users/{user_id}/connected_accounts/{slug}
  - Changed the type of DataIntegrationInstallation.user_id
#445 fix(generated): regenerate from spec (1 change)

Features
- multi_factor_auth:
  - Changed errors for endpoint POST /auth/factors/{id}/challenge
- pipes:
  - Added connection_owner to DataIntegrationsListResponseData
  - Added enum DataIntegrationsListResponseDataConnectionOwner
  - Added connection_role to DataIntegrationsListResponseDataConnectedAccount
  - Added account_identifier to DataIntegrationsListResponseDataConnectedAccount
  - Added account_display_name to DataIntegrationsListResponseDataConnectedAccount
  - Added enum DataIntegrationsListResponseDataConnectedAccountConnectionRole
  - Added connection_role to DataIntegrationInstallation
  - Added account_identifier to DataIntegrationInstallation
  - Added account_display_name to DataIntegrationInstallation
  - Added enum DataIntegrationInstallationConnectionRole
  - Added connection_owner to DataIntegrationsGetDataIntegrationAuthorizeUrlRequest
  - Added enum DataIntegrationsGetDataIntegrationAuthorizeUrlRequestConnectionOwner
  - Added the organization connected-account operations on Pipes: $workos->pipes().getOrganizationConnectedAccount, createOrganizationConnectedAccount, updateOrganizationConnectedAccount, deleteOrganizationConnectedAccount, listOrganizationDataProviders
- connect:
  - Added connection_role to ConnectedAccount
  - Added account_identifier to ConnectedAccount
  - Added account_display_name to ConnectedAccount
  - Added enum ConnectedAccountConnectionRole
- webhooks:
  - Added pipes.account_connection.add_failed to CreateWebhookEndpointEvents
  - Added pipes.account_connection.connected to CreateWebhookEndpointEvents
  - Added pipes.account_connection.connection_failed to CreateWebhookEndpointEvents
  - Added pipes.account_connection.disconnected to CreateWebhookEndpointEvents
  - Added pipes.account_connection.reauthorization_needed to CreateWebhookEndpointEvents
  - Added pipes.account_connection.add_failed to UpdateWebhookEndpointEvents
  - Added pipes.account_connection.connected to UpdateWebhookEndpointEvents
  - Added pipes.account_connection.connection_failed to UpdateWebhookEndpointEvents
  - Added pipes.account_connection.disconnected to UpdateWebhookEndpointEvents
  - Added pipes.account_connection.reauthorization_needed to UpdateWebhookEndpointEvents
Fixes
- multi_factor_auth:
  - Changed errors for endpoint POST /auth/factors/{id}/challenge
#446 fix(generated): regenerate from spec (2 changes)

Fixes
- pipes:
  - Removed unused types left behind by earlier renames: CreateDataIntegrationAuthMethods
- multi_factor_auth:
  - Changed errors for endpoint POST /auth/factors/{id}/challenge

v9.2.0

#428 feat(generated)!: regenerate from spec (2 changes)

⚠️ Breaking
- events:
  - Changed required status for parameter Events.list.events
Features
- groups:
  - Added parameter Groups.list.search
- connect:
  - Added client_id to ConnectedAccount
  - Added client_secret_last_4 to ConnectedAccount
  - Added config to ConnectedAccount
- pipes:
  - Added client_id to DataIntegrationsListResponseDataConnectedAccount
  - Added client_secret_last_4 to DataIntegrationsListResponseDataConnectedAccount
  - Added config to DataIntegrationsListResponseDataConnectedAccount
  - Changed errors for endpoint POST /data-integrations/{slug}/credentials
  - Made CustomProviderDefinition.authorization_url optional
  - Made CustomProviderDefinition.token_url optional
  - Added model DataIntegrationsUpsertClientCredentialsRequest
  - Added client_credentials to CreateDataIntegrationAuthMethods
  - Added endpoint PUT /data-integrations/{slug}/client-credentials
- sso:
  - Added XOAuth to ConnectionType
  - Added XOAuth to ProfileConnectionType
  - Added XOAuth to ConnectionsConnectionType
  - Added GrokOAuth to ConnectionType
  - Added GrokOAuth to ProfileConnectionType
  - Added GrokOAuth to ConnectionsConnectionType
- user_management:
  - Changed errors for endpoint DELETE /user_management/users/{id}
  - Added password_salt_position to CreateUser
  - Added password_salt_position to UpdateUser
  - Made RadarSmsChallengeCodeSessionAuthenticateRequest.verification_id optional
  - Made RadarSmsChallengeCodeSessionAuthenticateRequest.phone_number optional
  - Added enum CreateUserPasswordSaltPosition
  - Added enum UpdateUserPasswordSaltPosition
  - Added XOAuth to AuthenticateResponseAuthenticationMethod
  - Added XOAuth to UserIdentitiesGetItemProvider
  - Added GrokOAuth to AuthenticateResponseAuthenticationMethod
  - Added GrokOAuth to UserIdentitiesGetItemProvider
- webhooks:
  - Added agent.registration.refreshed to CreateWebhookEndpointEvents
  - Added agent.registration.refreshed to UpdateWebhookEndpointEvents
Fixes
- pipes:
  - Changed the type of DataIntegration.credentials
- user_management:
  - Changed errors for endpoint POST /user_management/authenticate
  - Changed errors for endpoint POST /user_management/users
  - Changed errors for endpoint PUT /user_management/users/{id}

v9.1.0

Features

pkce: Default clientId to the client's configured client ID (#423) (f65713b)
support for guzzle 8 (#427) (81c2384)
#425 fix(generated): regenerate from spec

Features
- pipes:
  - Added config to DataIntegrationsGetDataIntegrationAuthorizeUrlRequest
  - Added client_credentials to DataIntegrationAuthMethods
  - Added client_credentials to DataIntegrationsListResponseDataAuthMethods
  - Added client_credentials to DataIntegrationsListResponseDataConnectedAccountAuthMethod
  - Added config to Pipes models
- connect:
  - Added client_credentials to ConnectedAccountAuthMethod
Fixes
- user_management:
  - Changed errors for endpoint POST /user_management/invitations
  - Changed errors for endpoint POST /user_management/invitations/{id}/resend
  - Changed errors for endpoint POST /user_management/magic_auth
  - Changed errors for endpoint POST /user_management/authenticate
#426 fix(generated): regenerate from spec

Fixes
- sso:
  - Removed callback_endpoint from Connection

v9.0.0

Miscellaneous Chores

deps: update actions/cache action to v5.1.0 (#419) (d963179)
prevent oagen generated files from being PR'ed (26d03a0)
scope SDK bot App token permissions (293b5ef)
#420 fix(generated): regenerate from spec

Features
- audit_logs:
  - Added expired to AuditLogExportState
#421 feat(generated)!: regenerate from spec (3 changes)

Features
- agents:
  - Added model ClaimViewResponse
  - Added model ClaimViewResponseOrganization
  - Added model AgentAdminLinkClaimAttemptToExternalUserRequest
  - Added model AgentAdminLinkClaimAttemptToExternalUserRequestUser
  - Added enum ClaimViewResponseStatus
  - Added endpoint PATCH /agents/claims/attempts
  - Added model AgentRegistration
  - Added model AgentCredentialValidation
  - Added model AgentRegistrationAgentIdentity
  - Added model AgentRegistrationClaim
  - Added model AgentAdminValidateCredentialRequest
  - Added model AgentRegistrationClaimClaimCompletion
  - Added enum AgentRegistrationStatus
  - Added enum AgentRegistrationKind
  - Added enum AgentAdminValidateCredentialRequestType
  - Added service Agents
- api_keys:
  - Added agent_registration_id to ApiKeyValidationResponse
- connect:
  - Added enum ApplicationsRegistrationTypes
  - Added parameter Applications.list.registration_types
- directory_sync:
  - Added parameter DirectoryUsers.list.idp_id
  - Added parameter DirectoryUsers.list.email
- organizations:
  - Added model OrganizationAuthorizedConnectApplicationList
  - Added model OrganizationAuthorizedConnectApplicationListData
  - Added model OrganizationAuthorizedConnectApplicationListListMetadata
  - Added service OrganizationsAuthorizedApplications
- pipes:
  - Added model DataIntegrationInstallation
  - Added auth_methods to CreateDataIntegration
  - Added api_key to CreateDataIntegration
  - Added api_key to UpdateDataIntegration
  - Added auth_methods to DataIntegration
  - Added installation to DataIntegration
  - Added enum CreateDataIntegrationAuthMethods
  - Added enum DataIntegrationAuthMethods
  - Added model DataIntegrationCredentialsResponse
  - Added model DataIntegrationCredentialsResponseCredential
  - Added model DataIntegrationsUpsertApiKeyRequest
  - Added model DataIntegrationsVendCredentialsRequest
  - Added enum DataIntegrationCredentialsResponseError
  - Added endpoint PUT /data-integrations/{slug}/api-key
  - Added endpoint POST /data-integrations/{slug}/credentials
- sso:
  - Added parameter SSO.authorize.prompt
- user_management:
  - Added ssha256 to CreateUserPasswordHashType
  - Added ssha256 to UpdateUserPasswordHashType
  - Added endpoint GET /user_management/radar_challenges/{id}
- webhooks:
  - Added agent.registration.revoked to CreateWebhookEndpointEvents
  - Added agent.registration.revoked to UpdateWebhookEndpointEvents
  - Added agent.registration.deleted to CreateWebhookEndpointEvents
  - Added agent.registration.deleted to UpdateWebhookEndpointEvents
  - Added radar.challenge_created to CreateWebhookEndpointEvents
  - Added radar.challenge_created to UpdateWebhookEndpointEvents
  - Added agent.registration.expired to CreateWebhookEndpointEvents
  - Added agent.registration.expired to UpdateWebhookEndpointEvents
- widgets:
  - Made WidgetSessionToken.organization_id optional
#422 feat(generated)!: regenerate from spec (5 changes)

⚠️ Breaking
- admin_portal:
  - SDK surface change: Symbol "IntentOptions" was removed
- connect:
  - SDK surface change: Symbol "ConnectedAccountDto" was removed
- organization_domains:
  - SDK surface change: Symbol "DomainVerificationIntentOptions" was removed
- pipes:
  - SDK surface change: Symbol "DataIntegrationCredentialsDto" was removed
- sso:
  - SDK surface change: Symbol "SSOIntentOptions" was removed

v8.1.0

#416 fix(generated): regenerate from spec

Features
- user_management:
  - Added model UserRoleAssignmentSource
  - Added source to UserRoleAssignment
  - Added enum UserRoleAssignmentSourceType
  - Added parameter UserManagementAuthentication.authorize.max_age
  - Added endpoint GET /user_management/cors_origins
  - Added endpoint GET /user_management/redirect_uris
Fixes
- Restore mistakenly removed CreateMagicAuth logic from previous release

v8.0.0

#409 fix(generated): regenerate from spec

Features
- pipes:
  - Added model DataIntegrationCredentialsResponse
  - Added model DataIntegrationCredentialsResponseCredential
  - Added model DataIntegrationsUpsertApiKeyRequest
  - Added model DataIntegrationsVendCredentialsRequest
  - Added enum DataIntegrationCredentialsResponseError
  - Added endpoint PUT /data-integrations/{slug}/api-key
  - Added endpoint POST /data-integrations/{slug}/credentials
#411 feat(generated)!: regenerate from spec (1 change)

⚠️ Breaking
- user_management:
  - Removed model SessionReauthenticated
  - Removed model SessionReauthenticatedData
  - Removed model SessionReauthenticatedDataImpersonator
  - Removed enum SessionReauthenticatedDataAuthMethod
  - Removed enum SessionReauthenticatedDataStatus
Features
- webhooks:
  - Added agent.registration.created to CreateWebhookEndpointEvents
  - Added agent.registration.claim.attempt.created to CreateWebhookEndpointEvents
  - Added agent.registration.claim.completed to CreateWebhookEndpointEvents
  - Added agent.registration.credential.issued to CreateWebhookEndpointEvents
  - Added agent.registration.organization.switched to CreateWebhookEndpointEvents
  - Added authentication.reauthentication_succeeded to CreateWebhookEndpointEvents
  - Added agent.registration.created to UpdateWebhookEndpointEvents
  - Added agent.registration.claim.attempt.created to UpdateWebhookEndpointEvents
  - Added agent.registration.claim.completed to UpdateWebhookEndpointEvents
  - Added agent.registration.credential.issued to UpdateWebhookEndpointEvents
  - Added agent.registration.organization.switched to UpdateWebhookEndpointEvents
  - Added authentication.reauthentication_succeeded to UpdateWebhookEndpointEvents
- webhooks:
  - Added session.reauthenticated to CreateWebhookEndpointEvents
  - Added session.reauthenticated to UpdateWebhookEndpointEvents
- webhooks:
  - Added pipes.connected_account.connection_failed to CreateWebhookEndpointEvents
  - Added pipes.connected_account.connection_failed to UpdateWebhookEndpointEvents
- user_management:
  - Added model UserRoleAssignmentSource
  - Added source to UserRoleAssignment
  - Added enum UserRoleAssignmentSourceType
  - Added parameter UserManagementAuthentication.authorize.max_age
  - Added endpoint GET /user_management/cors_origins
  - Added endpoint GET /user_management/redirect_uris
- audit_logs:
  - Changed the format of AuditLogExportCreation.range_start
  - Changed the format of AuditLogExportCreation.range_end
- audit_logs:
  - Added expired to AuditLogExportState
Fixes
- admin_portal:
  - Removed intent_options from GenerateLink
- webhooks:
  - Removed session.reauthenticated from CreateWebhookEndpointEvents
  - Removed session.reauthenticated from UpdateWebhookEndpointEvents
#413 feat(generated): regenerate from spec (1 change)

Features
- pipes:
  - Added model DataIntegrationCredentialsDto
  - Added model CustomProviderDefinition
  - Added model CreateDataIntegration
  - Added model UpdateCustomProviderDefinition
  - Added model UpdateDataIntegration
  - Added model DataIntegration
  - Added model DataIntegrationList
  - Added model DataIntegrationListListMetadata
  - Added model DataIntegrationCredential
  - Added model DataIntegrationCustomProvider
  - Added enum DataIntegrationCredentialsType
  - Added enum CustomProviderDefinitionAuthenticateVia
  - Added enum UpdateCustomProviderDefinitionAuthenticateVia
  - Added enum DataIntegrationState
  - Added enum DataIntegrationCredentialType
  - Added enum DataIntegrationCustomProviderAuthenticateVia
  - Added endpoint GET /data-integrations
  - Added endpoint POST /data-integrations
  - Added endpoint GET /data-integrations/{slug}
  - Added endpoint PUT /data-integrations/{slug}
  - Added endpoint DELETE /data-integrations/{slug}
  - Added endpoint POST /user_management/users/{user_id}/connected_accounts/{slug}
  - Added endpoint PUT /user_management/users/{user_id}/connected_accounts/{slug}
#414 feat(generated): regenerate from spec (2 changes)

Features
- user_management:
  - Added model SendRadarSmsChallenge
  - Added model SendRadarSmsChallengeResponse
  - Added model UrnWorkosOAuthGrantTypeRadarEmailChallengeCodeSessionAuthenticateRequest
  - Added model UrnWorkosOAuthGrantTypeRadarSmsChallengeCodeSessionAuthenticateRequest
  - Added model MagicAuthSendMagicAuthCodeAndReturnResponse
  - Added model UserCreateResponse
  - Added ip_address to CreateMagicCodeAndReturn
  - Added user_agent to CreateMagicCodeAndReturn
  - Added radar_auth_attempt_id to CreateMagicCodeAndReturn
  - Added signals_id to CreateMagicCodeAndReturn
  - Added ip_address to CreateUser
  - Added user_agent to CreateUser
  - Added signals_id to CreateUser
  - Added signals_id to AuthorizationCodeSessionAuthenticateRequest
  - Added signals_id to PasswordSessionAuthenticateRequest
  - Added radar_auth_attempt_id to PasswordSessionAuthenticateRequest
  - Added radar_auth_attempt_id to UrnWorkosOAuthGrantTypeMagicAuthCodeSessionAuthenticateRequest
  - Added endpoint POST /user_management/radar_challenges
- radar:
  - Added signals_id to RadarStandaloneAssessRequest
Fixes
- user_management:
  - Changed request body for UserManagementAuthentication.authenticate
  - Changed response of UserManagementUsers.create from User to UserCreateResponse
  - Changed response of UserManagementMagicAuth.sendMagicAuthCodeAndReturn from MagicAuth to MagicAuthSendMagicAuthCodeAndReturnResponse

v7.3.0

#405 fix(generated): regenerate from spec

Fixes
- organization_membership:
  - Added roles to organization membership models

v7.2.0

Bug Fixes

Fix empty body serializing as JSON array instead of object (#403) (29d0099)

Miscellaneous Chores

commit publishing fixes (c7ba478)

#401 feat(generated)!: regenerate from spec (11 changes)

⚠️ Breaking
- pipes:
  - SDK surface change: Pipes.createDataIntegrationToken was renamed to Pipes.getAccessToken
Features
- authorization:
  - Added model ReplaceGroupRoleAssignmentEntry
  - Added model ReplaceGroupRoleAssignments
  - Added model DeleteGroupRoleAssignmentsByCriteria
  - Added endpoint POST /authorization/groups/{group_id}/role_assignments
  - Added endpoint PUT /authorization/groups/{group_id}/role_assignments
  - Added endpoint DELETE /authorization/groups/{group_id}/role_assignments
  - Added endpoint GET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}
  - Added endpoint DELETE /authorization/groups/{group_id}/role_assignments/{role_assignment_id}
- client:
  - Added model ClientApiToken
  - Added model ClientApiTokenResponse
  - Added service Client
- connect:
  - Added auth_method to ConnectedAccount
  - Added api_key_last_4 to ConnectedAccount
  - Added enum ConnectedAccountAuthMethod
- groups:
  - Added model CreateGroupRoleAssignment
  - Added model GroupRoleAssignment
  - Added model GroupRoleAssignmentList
  - Added model GroupRoleAssignmentResource
- organization_membership:
  - Added model UserOrganizationMembershipList
  - Added model UserOrganizationMembershipListListMetadata
- pipes:
  - Added model DataIntegrationCredentials
  - Added model DataIntegrationConfigurationResponse
  - Added model DataIntegrationConfigurationListResponse
  - Added model ConfigureDataIntegrationBody
  - Added auth_methods to DataIntegrationsListResponseData
  - Added auth_method to DataIntegrationsListResponseDataConnectedAccount
  - Added api_key_last_4 to DataIntegrationsListResponseDataConnectedAccount
  - Added enum DataIntegrationCredentialsCredentialsType
  - Added enum DataIntegrationsListResponseDataAuthMethods
  - Added enum DataIntegrationsListResponseDataConnectedAccountAuthMethod
  - Added service PipesProvider
- user_management:
  - Added model UserInviteList
  - Added model UserInviteListListMetadata
  - Made AuthorizationCodeSessionAuthenticateRequest.client_secret optional
  - Made RefreshTokenSessionAuthenticateRequest.client_secret optional
- widgets:
  - Added widgets:pipes:manage to WidgetSessionTokenScopes
Fixes
- organization_membership:
  - Changed response of UserManagementOrganizationMembership.list from UserOrganizationMembership to UserOrganizationMembershipList
- user_management:
  - Changed response of UserManagementInvitations.list from UserInvite to UserInviteList

v7.1.0

Miscellaneous Chores

deps: update github actions non-major (#398) (79fc78c)

#397 feat(generated)!: regenerate from spec (5 changes)

⚠️ Breaking
- api_keys:
  - Made expires_at required in API key models
- directory_sync:
  - Removed model DsyncDeactivated
  - Removed model DsyncDeactivatedData
  - Removed model DsyncDeactivatedDataDomain
  - Removed enum DsyncDeactivatedDataType
  - Removed enum DsyncDeactivatedDataState
- radar:
  - Removed domain_sign_up_rate_limit from RadarStandaloneResponseControl
- user_management:
  - Removed return_to from RevokeSession
Features
- api_keys:
  - Added model ExpireApiKey
  - Added model ApiKeyUpdated
  - Added model ApiKeyUpdatedData
  - Added model ApiKeyUpdatedDataOwner
  - Added model UserApiKeyUpdatedDataOwner
  - Added model ApiKeyUpdatedDataPreviousAttribute
  - Added endpoint POST /api_keys/{id}/expire
- audit_logs:
  - Added Snowflake to AuditLogConfigurationLogStreamType
- connect:
  - Added name to UserObject
- directory_sync:
  - Added model DsyncTokenCreated
  - Added model DsyncTokenCreatedData
  - Added model DsyncTokenRevoked
  - Added model DsyncTokenRevokedData
- user_management:
  - Added name to user management models
- webhooks:
  - Added api_key.updated to CreateWebhookEndpointEvents
  - Added api_key.updated to UpdateWebhookEndpointEvents

v7.0.1

Bug Fixes

renamed misleading Object to VaultObject (c7cef60)
renovate: explicitly enable minor and patch updates (#393) (e1705f1)
sdk: omit defaulted screen_hint from auth URLs (#396) (d583c7c)

v7.0.0

Miscellaneous Chores

deps: update googleapis/release-please-action action to v5 (#389) (f973f21)
deps: update shivammathur/setup-php action to v2.37.0 (#388) (f9e113f)
use shared workos/renovate-config preset (99aad6c)
#392 feat(generated)!: regenerate from spec (10 changes)

⚠️ Breaking
- user_management: Remove organization membership methods from UserManagement service
  - Removed listOrganizationMemberships, createOrganizationMembership, getOrganizationMembership, updateOrganizationMembership, deleteOrganizationMembership, deactivateOrganizationMembership, and reactivateOrganizationMembership methods
  - These methods have been moved to the new OrganizationMembershipService
  - Change to getAuthorizationUrl() parameter screenHint from UserManagementAuthenticationScreenHint to RadarStandaloneAssessRequestAction type
  - Removed UserManagementAuthenticationScreenHint enum
- user_management: Remove UserManagementOrganizationMembershipGroups service
  - Removed $workos->userManagementOrganizationMembershipGroups() accessor
  - listOrganizationMembershipGroups() has been moved to the new OrganizationMembershipService
- radar: Remove device fingerprint and bot score from RadarStandaloneAssessRequest
  - Removed deviceFingerprint parameter from Radar.createAttempt() method
  - Removed botScore parameter from Radar.createAttempt() method
  - Removed deviceFingerprint and botScore fields from RadarStandaloneAssessRequest model
  - Removed deprecated enum values from RadarStandaloneAssessRequestAction: Login, Signup, SignUp2, SignUp3, SignIn2, SignIn3
  - Changed enum values in RadarStandaloneAssessRequestAction: SignUp from 'sign up' to 'sign-up', SignIn from 'sign in' to 'sign-in'
  - Removed enum values from RadarStandaloneResponseControl: CredentialStuffing, IpSignUpRateLimit
- radar: Rename Radar list enums
  - Renamed RadarAction to RadarListAction
  - Renamed RadarType to RadarListType
- audit_logs: Rename audit log models for consistency
  - Renamed AuditLogActionJson to AuditLogAction
  - Renamed AuditLogExportJson to AuditLogExport
  - Renamed AuditLogExportJsonState to AuditLogExportState
  - Renamed AuditLogSchemaJson to AuditLogSchema
  - Renamed AuditLogSchemaJsonActor to AuditLogSchemaActorInput
  - Renamed AuditLogSchemaJsonTarget to AuditLogSchemaTargetInput
  - Renamed AuditLogsRetentionJson to AuditLogsRetention
  - createSchema() method parameter types changed: AuditLogSchemaActor → AuditLogSchemaActorInput, AuditLogSchemaTarget → AuditLogSchemaTargetInput
- webhooks: Rename webhook endpoint models and update status field type
  - Renamed WebhookEndpointJson to WebhookEndpoint
  - Renamed WebhookEndpointJsonStatus to WebhookEndpointStatus
  - Changed UpdateWebhookEndpoint.status field type from WebhookEndpointJsonStatus to WebhookEndpointStatus
  - Updated webhook event enums: added PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED events
- authorization: Update Authorization API with new filters and remove search parameter
  - Added resourceId, resourceExternalId, resourceTypeSlug filter parameters to listRoleAssignments()
  - Added roleSlug filter parameter to listRoleAssignmentsForResourceByExternalId() and listRoleAssignmentsForResource()
  - Removed search parameter from listResources() method
- vault: Replace hand-maintained WorkOS\Vault class with generated WorkOS\Service\Vault
  - The old WorkOS\Vault class (lib/Vault.php) with client-side encrypt/decrypt helpers has been removed
  - $workos->vault() now returns WorkOS\Service\Vault with a different API surface
  - New generated methods: createDataKey(), createDecrypt(), createRekey(), listKv(), createKv(), getName(), getKv(), updateKv(), deleteKv(), listKvMetadata(), listKvVersions()
Features
- organization_membership: Introduce OrganizationMembershipService with membership and group operations
  - New service OrganizationMembershipService with methods: listOrganizationMemberships(), createOrganizationMembership(), getOrganizationMembership(), updateOrganizationMembership(), deleteOrganizationMembership(), deactivateOrganizationMembership(), reactivateOrganizationMembership(), and listOrganizationMembershipGroups()
  - Accessible via $workos->organizationMembership()
  - Replaces functionality previously in UserManagement and UserManagementOrganizationMembershipGroups services
- vault: Add new Vault service for encrypted key-value storage
  - New Vault service with methods: createDataKey(), createDecrypt(), createRekey(), listKv(), createKv(), getName(), getKv(), updateKv(), deleteKv(), listKvMetadata(), and listKvVersions()
  - Support for encrypted object storage and management with key rotation
  - New models: CreateDataKeyResponse, DecryptResponse, ObjectMetadata, ObjectModel, ObjectSummary, ObjectWithoutValue, ObjectVersion, VersionListResponse
  - New enum: VaultOrder for sort direction
  - Accessible via $workos->vault()
- api_keys: Add expires_at field to API key models and creation methods
  - Added expires_at field to ApiKey, OrganizationApiKey, OrganizationApiKeyWithValue, UserApiKey, UserApiKeyWithValue models
  - Added expires_at field to ApiKeyCreatedData and ApiKeyRevokedData event data models
  - Added optional expiresAt parameter to createOrganizationApiKey() and createUserApiKey() methods
  - Support for setting API key expiration timestamps
- applications: Update ApplicationCredentialsListItem and NewConnectApplicationSecret field types
  - Changed ApplicationCredentialsListItem.lastUsedAt field type from ?string to ?\DateTimeImmutable
  - Changed NewConnectApplicationSecret.lastUsedAt field type from ?string to ?\DateTimeImmutable
- pipes: Add connected account event models and related types
  - New models for pipe events: PipeConnectedAccount, PipesConnectedAccountConnected, PipesConnectedAccountDisconnected, PipesConnectedAccountReauthorizationNeeded
  - New enum: PipeConnectedAccountState with values connected and needs_reauthorization
  - Support for monitoring data integration connection status changes

v6.0.2

6.0.2 (2026-05-11)

Bug Fixes

harden JWT signature verification and URL path encoding (#386) (aa64119)

v6.0.1

6.0.1 (2026-05-07)

Bug Fixes

Preserve full error response body on ApiException (#385) (57052ab)

Miscellaneous Chores

release: include v prefix in tags (5517b8b)

6.0.0

6.0.0 (2026-05-06)

⚠ BREAKING CHANGES

user_management: Add user API keys and update ordering enum
api_keys: Restructure API key models and rename ordering enum
vault: Rename BYOK key provider enum and add vault key deleted event
authorization: Rename RoleAssignment to UserRoleAssignment

Features

Add API docs generation and llms.txt index (#382) (ae03f03)
api_keys: Restructure API key models and rename ordering enum (1bb2fe4)
authorization: Rename EventsOrder to PaginationOrder (1bb2fe4)
authorization: Rename RoleAssignment to UserRoleAssignment (1bb2fe4)
directory_sync: Add name field to directory users (1bb2fe4)
sso: Add full name support to user profiles (1bb2fe4)
user_management: Add user API keys and update ordering enum (1bb2fe4)
user_management: Add user context to organization memberships (1bb2fe4)
vault: Rename BYOK key provider enum and add vault key deleted event (1bb2fe4)

Bug Fixes

ci: install composer deps before building docs (8f439e3)
events: Add admin_portal to actor source enum (1bb2fe4)

5.2.1

5.2.1 (2026-04-28)

Bug Fixes

generated: Add default values to optional object fields (#376) (1597af6)

5.2.0

5.2.0 (2026-04-27)

Features

Add script/setup for pre-generation dependency installation (edc2543)
surface error metadata from API responses (#369) (ece118b)

Bug Fixes

generated: update generated SDK from spec changes (#372) (0ee912a)

5.1.0

5.1.0 (2026-04-20)

Features

add group, pipes, and authorization additive API support (#367) (c90a5d6)

Bug Fixes

redesign authorization resource targeting and default order handling (b435ced)
Remove extractVersion from matchUpdateTypes rules (#365) (f4ad142)
type tweaks (780ee85)

Miscellaneous Chores

deps: update minor and patch updates (#361) (7e439f7)

5.0.3

5.0.3 (2026-04-14)

Bug Fixes

build redirect endpoint URLs locally instead of making HTTP requests (#358) (eae3949)
docs: add [[@throws](https://github.com/throws)](https://github.com/throws) to PHPDoc when appropriate (#360) (ed68872)

5.0.2

5.0.2 (2026-04-14)

Bug Fixes

slight rename (496f75b)

Miscellaneous Chores

mark non-spec service accessors with [@oagen-ignore-start](https://github.com/oagen-ignore-start)/end (#354) (084d0d1)

5.0.1

5.0.1 (2026-04-13)

Bug Fixes

add default User-Agent header and optional override (#352) (8e202db)
one more regen (44906fd)

5.0.0

5.0.0 (2026-04-13)

Top-Level Notices

v5 is a major SDK redesign centered on an instantiated WorkOS client with service accessors like $workos->sso(), $workos->userManagement(), and $workos->authorization(). Direct use of many legacy top-level service classes and transport internals has been removed or renamed.
The minimum runtime is now PHP 8.2. The SDK now depends on guzzlehttp/guzzle:^7, paragonie/halite:^5.1, and ext-curl:^8.2.
Responses and resources are now typed, generated models, pagination now uses PaginatedResponse, and named arguments are strongly recommended because many method signatures changed in v5.
The v5 release also expands and reorganizes the SDK surface across areas like Authorization, Audit Logs, Feature Flags, Organization Domains, Connect, Events, Pipes, Radar, API Keys, Session Manager, PKCE, Webhooks, and Vault helpers.

Migration Guide

For upgrade steps, renamed APIs, and side-by-side examples for moving from v4 to v5, see V5_MIGRATION_GUIDE.

Miscellaneous Chores

deps: update actions/create-github-app-token action to v3 (#345) (0259ffb)
deps: update amannn/action-semantic-pull-request action to v6 (#346) (4cf01c0)

4.32.0

4.32.0 (2026-03-09)

Features

Add accept invitation endpoint (#343) (36e9322)

Bug Fixes

listEnvironmentRoles should not use PaginatedResource (#341) (52f0602)

workos/workos-php-v4.31.0

4.31.0 (2026-03-06)

Features

Add directoryManaged to OrganizationMembership (#334) (1451af1)
Add RBAC environment roles API support (#338) (31fb41d)
Add RBAC permissions API support (#337) (dd7dca2)
api: Return state field for directory users (#27) (250887e)
Introduce a dedicated PaginatedResource object (#316) (a3ccfde)
workos-php: Add connection to getAuthorizationUrl (#29) (ade7019)

Bug Fixes

correct return types (#340) (0e9fb95)
update renovate rules (#330) (b6f9006)

Miscellaneous Chores

Add DX as Codeowners (#335) (5317c50)
deps: update actions/cache action to v5 (#321) (533ffa6)
Pin GitHub Actions (#332) (8a1cc20)

4.30.1

What's Changed

Add custom_attributes field to OrganizationMembership by @ajworkos in https://github.com/workos/workos-php/pull/318
Configure Renovate by @renovate[bot] in https://github.com/workos/workos-php/pull/319
Update peter-evans/create-pull-request action to v8 by @renovate[bot] in https://github.com/workos/workos-php/pull/327
fix revokeSession api call format by @kkoch986 in https://github.com/workos/workos-php/pull/328
Bump version to 4.30.1 by @workos-sdk-automation[bot] in https://github.com/workos/workos-php/pull/329

New Contributors

@ajworkos made their first contribution in https://github.com/workos/workos-php/pull/318
@renovate[bot] made their first contribution in https://github.com/workos/workos-php/pull/319
@kkoch986 made their first contribution in https://github.com/workos/workos-php/pull/328

Full Changelog: https://github.com/workos/workos-php/compare/4.30.0...4.30.1

4.30.0

What's Changed

Add context7.json to repo by @nicknisi in https://github.com/workos/workos-php/pull/314
Implement Authkit Sessions by @birdcar in https://github.com/workos/workos-php/pull/315
Bump version to 4.30.0 by @workos-sdk-automation[bot] in https://github.com/workos/workos-php/pull/317

New Contributors

@birdcar made their first contribution in https://github.com/workos/workos-php/pull/315
@workos-sdk-automation[bot] made their first contribution in https://github.com/workos/workos-php/pull/317

Full Changelog: https://github.com/workos/workos-php/compare/v4.29.0...4.30.0

v4.29.0

What's Changed

Add Organization Feature Flags & Vault Support by @blobaugh in https://github.com/workos/workos-php/pull/299
Fixed deprecation notices in tests by @blobaugh in https://github.com/workos/workos-php/pull/300
Fix PHP 8.4 deprecation: Add explicit nullable type hints by @blobaugh in https://github.com/workos/workos-php/pull/309
Fix incomplete Portal intent documentation and add validation by @blobaugh in https://github.com/workos/workos-php/pull/310
Add roles to directory user and SSO profile by @kendallstrautman in https://github.com/workos/workos-php/pull/311
Fix test assertion by @kendallstrautman in https://github.com/workos/workos-php/pull/313
Bump version v4.29.0 by @kendallstrautman in https://github.com/workos/workos-php/pull/312

Full Changelog: https://github.com/workos/workos-php/compare/v4.28.0...v4.29.0

v4.28.0

What's Changed

Added support for schema creation and existance checking by @blobaugh in https://github.com/workos/workos-php/pull/301
Add ability to resend invitation by @antn in https://github.com/workos/workos-php/pull/307

New Contributors

@blobaugh made their first contribution in https://github.com/workos/workos-php/pull/301
@antn made their first contribution in https://github.com/workos/workos-php/pull/307

Full Changelog: https://github.com/workos/workos-php/compare/v4.27.0...v4.28.0

v4.27.0

What's Changed

Fix small bug in DirectorySync by @gcarvelli in https://github.com/workos/workos-php/pull/291
Add getEnvVariable utility method to fix Laravel config caching issue by @nicknisi in https://github.com/workos/workos-php/pull/293
Adds multiple roles support to OrganizationMembership Create and Update by @csrbarber in https://github.com/workos/workos-php/pull/302
Version bump to 4.27.0 by @csrbarber in https://github.com/workos/workos-php/pull/304

New Contributors

@csrbarber made their first contribution in https://github.com/workos/workos-php/pull/302

Full Changelog: https://github.com/workos/workos-php/compare/v4.26.0...v4.27.0

v4.26.0

What's Changed

Added support for custom scopes (https://github.com/workos/workos-php/pull/289)

Full Changelog: https://github.com/workos/workos-php/compare/v4.25.0...v4.26.0

v4.25.0

What's Changed

Add permissions attribute to Role by @MrCrayfish in https://github.com/workos/workos-php/pull/287

New Contributors

@MrCrayfish made their first contribution in https://github.com/workos/workos-php/pull/287

Full Changelog: https://github.com/workos/workos-php/compare/v4.24.0...v4.25.0

v4.24.0

What's Changed

Fixes $roleSlug behavior on updateOrganizationMembership (no longer required) (#278)
Adds $roleSlug to createOrganizationMembership (#278)
Adds $email to updateUser (#285)

v4.23.0

What's Changed

Structured responses to webhook events by @bradenkeith in #265
IDE & Typehint improvements by @bradenkeith in #264
Pin third-party actions to currently used SHA by @nickcollisson-workos in #275
Add customAttributes field to SSO Profile by @mattgd in #276

New Contributors

@bradenkeith made their first contribution in https://github.com/workos/workos-php/pull/265
@nickcollisson-workos made their first contribution in https://github.com/workos/workos-php/pull/275

Full Changelog: https://github.com/workos/workos-php/compare/v4.22.0...v4.23.0

v4.22.0

What's Changed

Add metadata support (#268)
Add external_id support for organizations (#270)
Add external_id support for users (#267)
Add email standard attribute to DirectoryUser (#261)
Mark emails, job_title, and username standard attributes as deprecated. Enable the equivalent auto-mapped custom attributes instead (#261)

New Contributors

@ericroberts made their first contribution in https://github.com/workos/workos-php/pull/268
@pepeloper made their first contribution in https://github.com/workos/workos-php/pull/267

Full Changelog: https://github.com/workos/workos-php/compare/v4.21.0...v4.22.0

v4.21.0

What's Changed

Improve PHPdoc types by @GromNaN in https://github.com/workos/workos-php/pull/260
Make workos-php compatible with PHP 7.3 by @yottalogical in https://github.com/workos/workos-php/pull/263
v4.21.0 by @nicknisi in https://github.com/workos/workos-php/pull/266

New Contributors

@GromNaN made their first contribution in https://github.com/workos/workos-php/pull/260
@yottalogical made their first contribution in https://github.com/workos/workos-php/pull/263

Full Changelog: https://github.com/workos/workos-php/compare/v4.20.0...v4.21.0

v4.20.0

What's Changed

add update organization membership by @jameslcarpino in https://github.com/workos/workos-php/pull/256

New Contributors

@jameslcarpino made their first contribution in https://github.com/workos/workos-php/pull/256
@nicknisi made their first contribution in https://github.com/workos/workos-php/pull/259

Full Changelog: https://github.com/workos/workos-php/compare/v4.19.0...v4.20.0

v4.19.0

What's Changed

added lastSignInAt to user (https://github.com/workos/workos-php/pull/257)

Full Changelog: https://github.com/workos/workos-php/compare/v4.18.0...v4.19.0

v4.18.0

Added

Add return_to option to getLogoutUrl (#254)

Full Changelog: https://github.com/workos/workos-php/compare/v4.17.0...v4.18.0

v4.17.0

Added

Add GET /organization/:orgId/roles support (#252)

Full Changelog: https://github.com/workos/workos-php/compare/v4.16.0...v4.17.0

v4.16.0

What's Changed

Add stripeCustomerId Parameter to Organization Methods by @Hannes-Kruger in https://github.com/workos/workos-php/pull/250

New Contributors

@Hannes-Kruger made their first contribution in https://github.com/workos/workos-php/pull/250

Full Changelog: https://github.com/workos/workos-php/compare/v4.15.0...v4.16.0

v4.15.0

What's Changed

Add widgets get token API support (#248)

Full Changelog: https://github.com/workos/workos-php/compare/v4.14.0...v4.15.0

v4.14.0

What's Changed

Add role to profile by @kendallstrautman in https://github.com/workos/workos-php/pull/246

Full Changelog: https://github.com/workos/workos-php/compare/v4.13.0...v4.14.0

Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.

Add packages to context

No packages found.

oxygen/auth

relicsoftware/barakah-payment-gateway

tobya/work-with-composer

equipc/laravel-email-validator

equipc/laravel-email-database-log

adedsec/nova-translated-labels

wazza/laravel-db-encryption

hokny/laravel-generator

vonsogt/backup

jengo/queues

jeremykenedy/laravel-observability

coleus/frame

thtg88/journalism

filagora/filagora-ai-forums

rlacerda83/query-parser

socialdept/atp-orm

cboxdk/laravel-assistant-client

socialdept/atp-resolver

socialdept/tenant-domains

tautvydasr/blade-class-names