fix: alias /x/authkit/users/authenticate for SDK refresh token flow

nicknisi · nicknisi · commit 2b472660c843 · 2026-03-25T17:03:57.000-05:00
The AuthKit SDK sends refresh_token grants to /x/authkit/users/authenticate
rather than /user_management/authenticate. Register the same handler on
both paths so the SDK's refreshTokens() and switchToOrganization() work
against the emulator.
diff --git a/src/emulate/core/server.ts b/src/emulate/core/server.ts
@@ -48,6 +48,7 @@ export function createServer(plugin: ServicePlugin, options: ServerOptions = {})
     }
     return authMiddleware(apiKeys)(c, next);
   });
+  app.use('/x/authkit/*', authMiddleware(apiKeys));
   app.use('/organizations', authMiddleware(apiKeys));
   app.use('/organizations/*', authMiddleware(apiKeys));
   app.use('/organization_memberships', authMiddleware(apiKeys));
diff --git a/src/emulate/workos/routes/auth.ts b/src/emulate/workos/routes/auth.ts
@@ -96,7 +96,8 @@ export function authRoutes(ctx: RouteContext): void {
     return c.json(formatDeviceAuthorization(deviceAuth));
   });
 
-  app.post('/user_management/authenticate', async (c) => {
+  // AuthKit SDK uses /x/authkit/users/authenticate for the same flow
+  const authenticateHandler = async (c: any) => {
     const body = await parseJsonBody(c);
     const grantType = body.grant_type as string | undefined;
     const clientId = body.client_id as string | undefined;
@@ -414,5 +415,8 @@ export function authRoutes(ctx: RouteContext): void {
       sealed_session: sealedSession,
       impersonator: updatedUser.impersonator ?? undefined,
     });
-  });
+  };
+
+  app.post('/user_management/authenticate', authenticateHandler);
+  app.post('/x/authkit/users/authenticate', authenticateHandler);
 }

Original file line number	Diff line number	Diff line change
`@@ -48,6 +48,7 @@ export function createServer(plugin: ServicePlugin, options: ServerOptions = {})`
`48`	`48`	`}`
`49`	`49`	`return authMiddleware(apiKeys)(c, next);`
`50`	`50`	`});`
	`51`	`+ app.use('/x/authkit/*', authMiddleware(apiKeys));`
`51`	`52`	`app.use('/organizations', authMiddleware(apiKeys));`
`52`	`53`	`app.use('/organizations/*', authMiddleware(apiKeys));`
`53`	`54`	`app.use('/organization_memberships', authMiddleware(apiKeys));`