feat(webhooks)!: Add webhook endpoint CRUD

.oagen-manifest.json

@@ -0,0 +1,27 @@
+{
+  "version": 2,
+  "language": "node",
+  "generatedAt": "2026-05-19T16:22:01.987Z",
+  "files": [
+    "src/webhooks/fixtures/create-webhook-endpoint.json",
+    "src/webhooks/fixtures/list-webhook-endpoint.json",
+    "src/webhooks/fixtures/update-webhook-endpoint.json",
+    "src/webhooks/fixtures/webhook-endpoint.json",
+    "src/webhooks/interfaces/create-webhook-endpoint-events.interface.ts",
+    "src/webhooks/interfaces/create-webhook-endpoint.interface.ts",
+    "src/webhooks/interfaces/index.ts",
+    "src/webhooks/interfaces/update-webhook-endpoint-events.interface.ts",
+    "src/webhooks/interfaces/update-webhook-endpoint-status.interface.ts",
+    "src/webhooks/interfaces/update-webhook-endpoint.interface.ts",
+    "src/webhooks/interfaces/webhook-endpoint-status.interface.ts",
+    "src/webhooks/interfaces/webhook-endpoint.interface.ts",
+    "src/webhooks/serializers.spec.ts",
+    "src/webhooks/serializers/create-webhook-endpoint.serializer.ts",
+    "src/webhooks/serializers/index.ts",
+    "src/webhooks/serializers/update-webhook-endpoint.serializer.ts",
+    "src/webhooks/serializers/webhook-endpoint.serializer.ts",
+    "src/webhooks/webhooks.spec.ts",
+    "src/webhooks/webhooks.ts"
+  ],
+  "operations": {}
+}

src/index.ts

@@ -74,7 +74,7 @@ class WorkOSNode extends WorkOS {
 
   /** @override */
   createWebhookClient(): Webhooks {
-    return new Webhooks(this.getCryptoProvider());
+    return new Webhooks(this);
   }
 
   override getCryptoProvider(): CryptoProvider {

src/index.worker.ts

@@ -62,9 +62,7 @@ class WorkOSWorker extends WorkOS {
 
   /** @override */
   createWebhookClient(): Webhooks {
-    const cryptoProvider = new SubtleCryptoProvider();
-
-    return new Webhooks(cryptoProvider);
+    return new Webhooks(this);
   }
 
   override getCryptoProvider(): CryptoProvider {

src/webhooks/fixtures/create-webhook-endpoint.json

@@ -0,0 +1,4 @@
+{
+  "endpoint_url": "https://example.com/webhooks",
+  "events": ["user.created", "dsync.user.created"]
+}

src/webhooks/fixtures/list-webhook-endpoint.json

@@ -0,0 +1,18 @@
+{
+  "data": [
+    {
+      "object": "webhook_endpoint",
+      "id": "we_0123456789",
+      "endpoint_url": "https://example.com/webhooks",
+      "secret": "whsec_0FWAiVGkEfGBqqsJH4aNAGBJ4",
+      "status": "enabled",
+      "events": ["user.created", "dsync.user.created"],
+      "created_at": "2026-01-15T12:00:00.000Z",
+      "updated_at": "2026-01-15T12:00:00.000Z"
+    }
+  ],
+  "list_metadata": {
+    "before": null,
+    "after": null
+  }
+}

src/webhooks/fixtures/update-webhook-endpoint.json

@@ -0,0 +1,5 @@
+{
+  "endpoint_url": "https://example.com/webhooks",
+  "status": "enabled",
+  "events": ["user.created", "dsync.user.created"]
+}

src/webhooks/fixtures/webhook-endpoint.json

@@ -0,0 +1,10 @@
+{
+  "object": "webhook_endpoint",
+  "id": "we_0123456789",
+  "endpoint_url": "https://example.com/webhooks",
+  "secret": "whsec_0FWAiVGkEfGBqqsJH4aNAGBJ4",
+  "status": "enabled",
+  "events": ["user.created", "dsync.user.created"],
+  "created_at": "2026-01-15T12:00:00.000Z",
+  "updated_at": "2026-01-15T12:00:00.000Z"
+}

src/webhooks/interfaces/create-webhook-endpoint-events.interface.ts

@@ -0,0 +1,87 @@
+// This file is auto-generated by oagen. Do not edit.
+
+export const CreateWebhookEndpointEvents = {
+  AuthenticationEmailVerificationSucceeded:
+    'authentication.email_verification_succeeded',
+  AuthenticationMagicAuthFailed: 'authentication.magic_auth_failed',
+  AuthenticationMagicAuthSucceeded: 'authentication.magic_auth_succeeded',
+  AuthenticationMfaSucceeded: 'authentication.mfa_succeeded',
+  AuthenticationOAuthFailed: 'authentication.oauth_failed',
+  AuthenticationOAuthSucceeded: 'authentication.oauth_succeeded',
+  AuthenticationPasswordFailed: 'authentication.password_failed',
+  AuthenticationPasswordSucceeded: 'authentication.password_succeeded',
+  AuthenticationPasskeyFailed: 'authentication.passkey_failed',
+  AuthenticationPasskeySucceeded: 'authentication.passkey_succeeded',
+  AuthenticationSSOFailed: 'authentication.sso_failed',
+  AuthenticationSSOStarted: 'authentication.sso_started',
+  AuthenticationSSOSucceeded: 'authentication.sso_succeeded',
+  AuthenticationSSOTimedOut: 'authentication.sso_timed_out',
+  AuthenticationRadarRiskDetected: 'authentication.radar_risk_detected',
+  ApiKeyCreated: 'api_key.created',
+  ApiKeyRevoked: 'api_key.revoked',
+  ConnectionActivated: 'connection.activated',
+  ConnectionDeactivated: 'connection.deactivated',
+  ConnectionSAMLCertificateRenewalRequired:
+    'connection.saml_certificate_renewal_required',
+  ConnectionSAMLCertificateRenewed: 'connection.saml_certificate_renewed',
+  ConnectionDeleted: 'connection.deleted',
+  DsyncActivated: 'dsync.activated',
+  DsyncDeleted: 'dsync.deleted',
+  DsyncGroupCreated: 'dsync.group.created',
+  DsyncGroupDeleted: 'dsync.group.deleted',
+  DsyncGroupUpdated: 'dsync.group.updated',
+  DsyncGroupUserAdded: 'dsync.group.user_added',
+  DsyncGroupUserRemoved: 'dsync.group.user_removed',
+  DsyncUserCreated: 'dsync.user.created',
+  DsyncUserDeleted: 'dsync.user.deleted',
+  DsyncUserUpdated: 'dsync.user.updated',
+  EmailVerificationCreated: 'email_verification.created',
+  GroupCreated: 'group.created',
+  GroupDeleted: 'group.deleted',
+  GroupMemberAdded: 'group.member_added',
+  GroupMemberRemoved: 'group.member_removed',
+  GroupUpdated: 'group.updated',
+  FlagCreated: 'flag.created',
+  FlagDeleted: 'flag.deleted',
+  FlagUpdated: 'flag.updated',
+  FlagRuleUpdated: 'flag.rule_updated',
+  InvitationAccepted: 'invitation.accepted',
+  InvitationCreated: 'invitation.created',
+  InvitationResent: 'invitation.resent',
+  InvitationRevoked: 'invitation.revoked',
+  MagicAuthCreated: 'magic_auth.created',
+  OrganizationCreated: 'organization.created',
+  OrganizationDeleted: 'organization.deleted',
+  OrganizationUpdated: 'organization.updated',
+  OrganizationDomainCreated: 'organization_domain.created',
+  OrganizationDomainDeleted: 'organization_domain.deleted',
+  OrganizationDomainUpdated: 'organization_domain.updated',
+  OrganizationDomainVerified: 'organization_domain.verified',
+  OrganizationDomainVerificationFailed:
+    'organization_domain.verification_failed',
+  PasswordResetCreated: 'password_reset.created',
+  PasswordResetSucceeded: 'password_reset.succeeded',
+  UserCreated: 'user.created',
+  UserUpdated: 'user.updated',
+  UserDeleted: 'user.deleted',
+  OrganizationMembershipCreated: 'organization_membership.created',
+  OrganizationMembershipDeleted: 'organization_membership.deleted',
+  OrganizationMembershipUpdated: 'organization_membership.updated',
+  RoleCreated: 'role.created',
+  RoleDeleted: 'role.deleted',
+  RoleUpdated: 'role.updated',
+  OrganizationRoleCreated: 'organization_role.created',
+  OrganizationRoleDeleted: 'organization_role.deleted',
+  OrganizationRoleUpdated: 'organization_role.updated',
+  PermissionCreated: 'permission.created',
+  PermissionDeleted: 'permission.deleted',
+  PermissionUpdated: 'permission.updated',
+  SessionCreated: 'session.created',
+  SessionRevoked: 'session.revoked',
+  WaitlistUserApproved: 'waitlist_user.approved',
+  WaitlistUserCreated: 'waitlist_user.created',
+  WaitlistUserDenied: 'waitlist_user.denied',
+} as const;
+
+export type CreateWebhookEndpointEvents =
+  (typeof CreateWebhookEndpointEvents)[keyof typeof CreateWebhookEndpointEvents];

src/webhooks/interfaces/create-webhook-endpoint.interface.ts

@@ -0,0 +1,15 @@
+// This file is auto-generated by oagen. Do not edit.
+
+import type { CreateWebhookEndpointEvents } from './create-webhook-endpoint-events.interface';
+
+export interface CreateWebhookEndpoint {
+  /** The HTTPS URL where webhooks will be sent. */
+  endpointUrl: string;
+  /** The events that the Webhook Endpoint is subscribed to. */
+  events: CreateWebhookEndpointEvents[];
+}
+
+export interface CreateWebhookEndpointResponse {
+  endpoint_url: string;
+  events: CreateWebhookEndpointEvents[];
+}

src/webhooks/interfaces/index.ts

@@ -0,0 +1,9 @@
+// This file is auto-generated by oagen. Do not edit.
+
+export * from './create-webhook-endpoint-events.interface';
+export * from './create-webhook-endpoint.interface';
+export * from './update-webhook-endpoint-events.interface';
+export * from './update-webhook-endpoint-status.interface';
+export * from './update-webhook-endpoint.interface';
+export * from './webhook-endpoint-status.interface';
+export * from './webhook-endpoint.interface';

src/webhooks/interfaces/update-webhook-endpoint-events.interface.ts

@@ -0,0 +1,87 @@
+// This file is auto-generated by oagen. Do not edit.
+
+export const UpdateWebhookEndpointEvents = {
+  AuthenticationEmailVerificationSucceeded:
+    'authentication.email_verification_succeeded',
+  AuthenticationMagicAuthFailed: 'authentication.magic_auth_failed',
+  AuthenticationMagicAuthSucceeded: 'authentication.magic_auth_succeeded',
+  AuthenticationMfaSucceeded: 'authentication.mfa_succeeded',
+  AuthenticationOAuthFailed: 'authentication.oauth_failed',
+  AuthenticationOAuthSucceeded: 'authentication.oauth_succeeded',
+  AuthenticationPasswordFailed: 'authentication.password_failed',
+  AuthenticationPasswordSucceeded: 'authentication.password_succeeded',
+  AuthenticationPasskeyFailed: 'authentication.passkey_failed',
+  AuthenticationPasskeySucceeded: 'authentication.passkey_succeeded',
+  AuthenticationSSOFailed: 'authentication.sso_failed',
+  AuthenticationSSOStarted: 'authentication.sso_started',
+  AuthenticationSSOSucceeded: 'authentication.sso_succeeded',
+  AuthenticationSSOTimedOut: 'authentication.sso_timed_out',
+  AuthenticationRadarRiskDetected: 'authentication.radar_risk_detected',
+  ApiKeyCreated: 'api_key.created',
+  ApiKeyRevoked: 'api_key.revoked',
+  ConnectionActivated: 'connection.activated',
+  ConnectionDeactivated: 'connection.deactivated',
+  ConnectionSAMLCertificateRenewalRequired:
+    'connection.saml_certificate_renewal_required',
+  ConnectionSAMLCertificateRenewed: 'connection.saml_certificate_renewed',
+  ConnectionDeleted: 'connection.deleted',
+  DsyncActivated: 'dsync.activated',
+  DsyncDeleted: 'dsync.deleted',
+  DsyncGroupCreated: 'dsync.group.created',
+  DsyncGroupDeleted: 'dsync.group.deleted',
+  DsyncGroupUpdated: 'dsync.group.updated',
+  DsyncGroupUserAdded: 'dsync.group.user_added',
+  DsyncGroupUserRemoved: 'dsync.group.user_removed',
+  DsyncUserCreated: 'dsync.user.created',
+  DsyncUserDeleted: 'dsync.user.deleted',
+  DsyncUserUpdated: 'dsync.user.updated',
+  EmailVerificationCreated: 'email_verification.created',
+  GroupCreated: 'group.created',
+  GroupDeleted: 'group.deleted',
+  GroupMemberAdded: 'group.member_added',
+  GroupMemberRemoved: 'group.member_removed',
+  GroupUpdated: 'group.updated',
+  FlagCreated: 'flag.created',
+  FlagDeleted: 'flag.deleted',
+  FlagUpdated: 'flag.updated',
+  FlagRuleUpdated: 'flag.rule_updated',
+  InvitationAccepted: 'invitation.accepted',
+  InvitationCreated: 'invitation.created',
+  InvitationResent: 'invitation.resent',
+  InvitationRevoked: 'invitation.revoked',
+  MagicAuthCreated: 'magic_auth.created',
+  OrganizationCreated: 'organization.created',
+  OrganizationDeleted: 'organization.deleted',
+  OrganizationUpdated: 'organization.updated',
+  OrganizationDomainCreated: 'organization_domain.created',
+  OrganizationDomainDeleted: 'organization_domain.deleted',
+  OrganizationDomainUpdated: 'organization_domain.updated',
+  OrganizationDomainVerified: 'organization_domain.verified',
+  OrganizationDomainVerificationFailed:
+    'organization_domain.verification_failed',
+  PasswordResetCreated: 'password_reset.created',
+  PasswordResetSucceeded: 'password_reset.succeeded',
+  UserCreated: 'user.created',
+  UserUpdated: 'user.updated',
+  UserDeleted: 'user.deleted',
+  OrganizationMembershipCreated: 'organization_membership.created',
+  OrganizationMembershipDeleted: 'organization_membership.deleted',
+  OrganizationMembershipUpdated: 'organization_membership.updated',
+  RoleCreated: 'role.created',
+  RoleDeleted: 'role.deleted',
+  RoleUpdated: 'role.updated',
+  OrganizationRoleCreated: 'organization_role.created',
+  OrganizationRoleDeleted: 'organization_role.deleted',
+  OrganizationRoleUpdated: 'organization_role.updated',
+  PermissionCreated: 'permission.created',
+  PermissionDeleted: 'permission.deleted',
+  PermissionUpdated: 'permission.updated',
+  SessionCreated: 'session.created',
+  SessionRevoked: 'session.revoked',
+  WaitlistUserApproved: 'waitlist_user.approved',
+  WaitlistUserCreated: 'waitlist_user.created',
+  WaitlistUserDenied: 'waitlist_user.denied',
+} as const;
+
+export type UpdateWebhookEndpointEvents =
+  (typeof UpdateWebhookEndpointEvents)[keyof typeof UpdateWebhookEndpointEvents];

src/webhooks/interfaces/update-webhook-endpoint-status.interface.ts

@@ -0,0 +1,9 @@
+// This file is auto-generated by oagen. Do not edit.
+
+export const UpdateWebhookEndpointStatus = {
+  Enabled: 'enabled',
+  Disabled: 'disabled',
+} as const;
+
+export type UpdateWebhookEndpointStatus =
+  (typeof UpdateWebhookEndpointStatus)[keyof typeof UpdateWebhookEndpointStatus];

src/webhooks/interfaces/update-webhook-endpoint.interface.ts

@@ -0,0 +1,19 @@
+// This file is auto-generated by oagen. Do not edit.
+
+import type { UpdateWebhookEndpointStatus } from './update-webhook-endpoint-status.interface';
+import type { UpdateWebhookEndpointEvents } from './update-webhook-endpoint-events.interface';
+
+export interface UpdateWebhookEndpoint {
+  /** The HTTPS URL where webhooks will be sent. */
+  endpointUrl?: string;
+  /** Whether the Webhook Endpoint is enabled or disabled. */
+  status?: UpdateWebhookEndpointStatus;
+  /** The events that the Webhook Endpoint is subscribed to. */
+  events?: UpdateWebhookEndpointEvents[];
+}
+
+export interface UpdateWebhookEndpointResponse {
+  endpoint_url?: string;
+  status?: UpdateWebhookEndpointStatus;
+  events?: UpdateWebhookEndpointEvents[];
+}

src/webhooks/interfaces/webhook-endpoint-status.interface.ts

@@ -0,0 +1,9 @@
+// This file is auto-generated by oagen. Do not edit.
+
+export const WebhookEndpointStatus = {
+  Enabled: 'enabled',
+  Disabled: 'disabled',
+} as const;
+
+export type WebhookEndpointStatus =
+  (typeof WebhookEndpointStatus)[keyof typeof WebhookEndpointStatus];

src/webhooks/interfaces/webhook-endpoint.interface.ts

@@ -0,0 +1,33 @@
+// This file is auto-generated by oagen. Do not edit.
+
+import type { WebhookEndpointStatus } from './webhook-endpoint-status.interface';
+
+export interface WebhookEndpoint {
+  /** Distinguishes the Webhook Endpoint object. */
+  object: 'webhook_endpoint';
+  /** Unique identifier of the Webhook Endpoint. */
+  id: string;
+  /** The URL to which webhooks are sent. */
+  endpointUrl: string;
+  /** The secret used to sign webhook payloads. */
+  secret: string;
+  /** Whether the Webhook Endpoint is enabled or disabled. */
+  status: WebhookEndpointStatus;
+  /** The events that the Webhook Endpoint is subscribed to. */
+  events: string[];
+  /** An ISO 8601 timestamp. */
+  createdAt: Date;
+  /** An ISO 8601 timestamp. */
+  updatedAt: Date;
+}
+
+export interface WebhookEndpointResponse {
+  object: 'webhook_endpoint';
+  id: string;
+  endpoint_url: string;
+  secret: string;
+  status: WebhookEndpointStatus;
+  events: string[];
+  created_at: string;
+  updated_at: string;
+}