First-Class WorkOS Auth Support Comes to Convex

WorkOS is now an officially supported authentication provider in Convex, thanks to a newly released package that makes it easy to plug in enterprise-grade auth for your B2B app.

‍Why This Matters

‍Convex has quickly earned a reputation as one of the most thoughtful platforms for building full-stack apps. Its backend-as-a-service model eliminates boilerplate and infrastructure decisions without taking power away from developers.

You write backend logic in TypeScript, query it reactively from the client, and ship real-time, production-grade features without spinning up servers or stitching together services.

This new integration with WorkOS is another example of that developer-first design. If you’re building SaaS with enterprise customers in mind, you now get seamless support for:

• WorkOS-issued JWTs validated natively by Convex
• Built-in support for audience claims (aud) and secure token handling
• A no-glue setup experience — just install the package and wire in a callback

Where You Can Try It

• NPM Package: @convex-dev/workos
• Docs: Convex + WorkOS AuthKit
• Community Feedback: Join the Convex Discord to try it and share thoughts

See It in Action

Here’s what it looks like to drop in WorkOS authentication using the new Convex package:

import { ConvexProviderWithAuthKit } from '@convex-dev/workos';
import { httpRouter } from 'convex/server';

const http = httpRouter();

http.route({
  path: '/api/auth/callback',
  method: 'POST',
  handler: ConvexProviderWithAuthKit(),
});

export default http;

You’ll also want to configure logout redirect behavior in the WorkOS dashboard.

‍A Great Fit for B2B Apps

‍WorkOS is built for enterprise-grade authentication, and it’s free for up to 1 million users — a huge unlock for early-stage startups scaling toward SOC2 compliance or enterprise SSO support.

With this official integration, Convex developers now have a clean, fast path to secure auth — no token plumbing or brittle wiring required.