v6.2.0 Latest December 3, 2025
What's Changed
Add roles property to directory user & sso profile by @kendallstrautman in #481 Bump version v6.2.0 by @kendallstrautman in #482 Full Changelog : v6.1.0...v6.2.0
What's Changed
Default to adding idempotecy-key to audit-logs/events if not present, added in retryability logic to endpoints#492 by @swaroopAkkineniWorkos in #475 Add support for resending invites by @antn in #476 New Contributors
@swaroopAkkineniWorkos made their first contribution in #475 @antn made their first contribution in #476 Full Changelog : v6.0.0...v6.1.0
What's Changed
Add permissions to the ListOrganizationRoles response by @jyecusch in #468 Fix UpdateOrganization JSON serialization by @nicknisi in #472 Change organization metadata to map[string]*string by @nicknisi in #471 Remove "domain" param from directories query by @ameesha in #301 Fix CreateOrganizationOpts.Metadata to use map[string]string by @nicknisi in #474 New Contributors
@jyecusch made their first contribution in #468 Full Changelog : v5.2.0...v6.0.0
What's Changed
Add organization name field to OrganizationMembership struct by @kaylagordon in #463 updated the UpdateOrganizationOpts fields to optional by @rarevalo13 in #460 V5.2.0 by @rarevalo13 in #465 New Contributors
@kaylagordon made their first contribution in #463 Full Changelog : v5.1.0...v5.2.0
What's Changed
Add roles to user management API request/responses by @atainter in #459 v5.1.0 by @atainter in #462 Full Changelog : v5.0.0...v5.1.0
What's Changed
Re-introduce metadata removal support (breaking change) by @nicknisi in #457 Breaking Changes Summary
The v5 release includes the following breaking change:
UpdateUserOpts.Metadata field type changed from map[string]string to map[string]*string (introduced in PR #457)
This allows setting metadata values to nil to remove them server-side Migration Guide for Users
// v4 (old)
import "github.com/workos/workos-go/v4/pkg/usermanagement"
opts := usermanagement.UpdateUserOpts{
User: "user_123",
Metadata: map[string]string{
"department": "Engineering",
},
}
// v5 (new)
import "github.com/workos/workos-go/v5/pkg/usermanagement"
dept := "Engineering"
opts := usermanagement.UpdateUserOpts{
User: "user_123",
Metadata: map[string]*string{
"department": &dept,
"old_field": nil, // Removes this field
},
}
Full Changelog : v4.46.1...v5.0.0
What's Changed
Fix: Revert breaking change in v4.46.0 to maintain backward compatibility by @nicknisi in #455 Full Changelog : v4.46.0...v4.46.1
Adds ability to pass in nil values to metadata keys when updating a user. This allows for clearing of existing metadata fields on a user.
Correctly unmarshal list_metadata pagination cursors across User Management, Organizations, SSO, and Directory Sync
Added structured authentication error handling for AuthKit User Management API
New error types for authentication scenarios:
EmailVerificationRequiredError
MFAEnrollmentError
MFAChallengeError
OrganizationSelectionRequiredError
SSORequiredError
OrganizationAuthenticationMethodsRequiredError
Enhanced error parsing with user data, pending tokens, and organization info
Backwards compatible - existing error handling unchanged
Type-safe using standard Go errors.As() pattern
What's Changed
added StripeCustomerID to org struct by @rarevalo13 in #442 Full Changelog : v4.43.0...v4.44.0
What's Changed
add organization_domain created/updated/deleted events by @ajworkos in #435 fix: use standard 12-byte nonce for AES-GCM encryption in vault package by @hexedpackets in #438 Full Changelog : v4.41.0...v4.42.0
What's Changed
Added support for custom oauth scopes (#431 Correctly deserialize ListIdentitiesResult as array (#433 Full Changelog : v4.40.0...v4.41.0
What's Changed
Add Email to UpdateUserOpts by @cmatheson in #429 added omitempty to ExternalID field by @rarevalo13 in #428 Bump to v4.40.0 by @rarevalo13 in #430 Full Changelog : v4.39.0...v4.40.0
What's Changed
Add "warnings" field to FGA query and check response by @atainter in #426 Bump to v4.39.0 by @atainter in #427 Full Changelog : v4.38.0...v4.39.0
What's Changed
Support optional authenticated data in local encrypt/decrypt by @hexedpackets in #424 Full Changelog : v4.37.0...v4.38.0
What's Changed
Add OrganizationDomains package by @ajworkos in #412 Alias organization domain types by @ajworkos in #415 Add endpoints to interact with WorkOS Vault by @hexedpackets in #418 Full Changelog : v4.33.0...v4.35.0
What's Changed
Add 'policies' to FGA convert schema response by @atainter in #411 Full Changelog : v4.32.0...v4.33.0
What's Changed
ron: adding support for email verification by @rarevalo13 in #402 Add UpdateSchema and GetSchema to FGA package by @atainter in #409 Bump to version v4.32.0 by @atainter in #410 Full Changelog : v4.31.0...v4.32.0
What's Changed
Add email standard attribute to DirectoryUser and mark deprecated standard attributes (#401 Mark emails, job_title, and username standard attributes as deprecated. Enable the equivalent auto-mapped custom attributes instead (#401 Adds ExternalID and Metadata to users and organizations (#407 Full Changelog : v4.30.0...v4.31.0
What's Changed
Fix typo: deactived -> deactivated by @nicknisi in #394 Add domain_prefix to organization domains by @amygdalama in #395 ron: adding optional query params for PKCE flow by @rarevalo13 in #392 v4.29.0 by @nicknisi in #396 New Contributors
@nicknisi made their first contribution in #394 Full Changelog : v4.28.0...v4.29.0
What's Changed
fix: added organization events by @panbanda in #382 Add AuthenticationMethod to AuthenticateResponse. by @dezlitz in #366 New Contributors
@panbanda made their first contribution in #382 @dezlitz made their first contribution in #366 Full Changelog : v4.25.0...v4.26.0
Added
Added OrganizationID, State, VerificationToken, and VerificationStrategy fields to OrganizationDomain struct (#376