This Val provides an HTTP endpoint for creating organizations and organization memberships in WorkOS with JWT authentication.

• JWT Authentication: Validates WorkOS JWTs using JWKS
• Organization Creation: Creates new organizations in WorkOS
• Membership Management: Automatically creates admin membership for the authenticated user
• Error Handling: Comprehensive error handling for WorkOS API and JWT validation

Creates a new organization and organization membership for the authenticated user.

Authentication: Bearer token (WorkOS JWT)

Request Body:

{
  "name": "Organization Name",
  "domains": ["example.com"] // optional
}

Response:

{
  "organization": {
    "id": "org_123",
    "name": "Organization Name",
    "domains": ["example.com"],
    "createdAt": "2023-01-01T00:00:00.000Z",
    "updatedAt": "2023-01-01T00:00:00.000Z"
  },
  "membership": {
    "id": "om_456",
    "userId": "user_789",
    "organizationId": "org_123",
    "role": "admin",
    "status": "active"
  }
}

Health check endpoint.

Response:

{
  "status": "ok",
  "timestamp": "2023-01-01T00:00:00.000Z"
}

The following environment variables must be configured in Val Town:

• WORKOS_API_KEY: Your WorkOS API key (starts with sk_)
• JWKS_URL: The JWKS URL for JWT verification (e.g., https://api.workos.com/sso/jwks/{connection_id})

// Client-side usage
const response = await fetch('https://your-val-url.web.val.run/create-organization', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${workosJWT}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'My New Organization',
    domains: ['mycompany.com']
  })
});

const result = await response.json();
console.log('Created organization:', result.organization);

The API returns appropriate HTTP status codes and error messages:

• 400: Bad request (missing organization name, WorkOS API errors)
• 401: Unauthorized (missing/invalid JWT token)
• 500: Internal server error (configuration issues, unexpected errors)

• JWT tokens are verified using JWKS from WorkOS
• Only authenticated users can create organizations
• Users are automatically assigned admin role in organizations they create
• All WorkOS API calls are made server-side to protect API keys

To test the endpoint locally, ensure you have:

1. Valid WorkOS API key set in environment variables
2. Proper JWKS URL configured
3. Valid WorkOS JWT token for testing

The health endpoint can be used to verify the service is running without authentication.