@channel.io/app-sdk-core 0.8.0 → 0.9.0

package/dist/extensions/oauth.js

@@ -8,14 +8,23 @@ import { z } from "zod";
  *   Required by some tenant-aware providers such as Imweb. Applies to both authorize URL and token endpoint.
  */
 export const ParameterCaseSchema = z.enum(["snake", "camel"]);
+export const TokenRequestContentTypeSchema = z.enum(["form", "json"]);
+export const OAuthAuthScopeSchema = z.enum(["channel", "manager"]);
 /**
- * OAuth 2.0 configuration schema
+ * OAuth 2.0 provider metadata returned from metadata.getAuthConfig.
+ *
+ * Client credentials are intentionally excluded. AppStore stores and manages
+ * provider client ID/secret separately through Desk APIs/UI.
  */
-export const OAuthConfigSchema = z.object({
+export const OAuthProviderSchema = z.object({
+    provider: z.string().min(1),
     authorizationUrl: z.string().url(),
     tokenUrl: z.string().url(),
-    scopes: z.array(z.string()),
-    clientId: z.string(),
+    refreshTokenUrl: z.string().url().optional(),
+    scopes: z.array(z.string()).min(1),
+    providerName: z.string().min(1),
+    providerDescription: z.string().optional(),
+    providerIconUrl: z.string().url().optional(),
     pkceRequired: z.boolean().optional(),
     additionalParams: z.record(z.string()).optional(),
     /**
@@ -24,7 +33,32 @@ export const OAuthConfigSchema = z.object({
      * on the authorize URL and token endpoint.
      */
     parameterCase: ParameterCaseSchema.optional(),
+    /**
+     * Token endpoint request body format. Defaults to `"form"` for RFC 6749
+     * providers, but some providers expect JSON bodies.
+     */
+    tokenRequestContentType: TokenRequestContentTypeSchema.optional(),
 });
+/**
+ * Output schema for extension.oauth.metadata.getAuthConfig.
+ */
+export const OAuthConfigSchema = z.object({
+    authType: z.literal("oauth"),
+    authScope: OAuthAuthScopeSchema,
+    oauthProvider: OAuthProviderSchema,
+});
+/**
+ * Input schema for extension.oauth.validation.validateCredentials.
+ *
+ * AppStore calls this with an empty params object after token exchange and
+ * injects the decrypted access token into context.authToken. accessToken is
+ * kept optional for local test harnesses and older examples.
+ */
+export const CredentialValidationInputSchema = z
+    .object({
+    accessToken: z.string().optional(),
+})
+    .passthrough();
 /**
  * Credential validation result schema
  */

package/dist/extensions/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/extensions/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAG9D;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD;;;;OAIG;IACH,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC"}
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/extensions/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAG9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAGtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAGnE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD;;;;OAIG;IACH,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C;;;OAGG;IACH,uBAAuB,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CAClE,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5B,SAAS,EAAE,oBAAoB;IAC/B,aAAa,EAAE,mBAAmB;CACnC,CAAC,CAAC;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,WAAW,EAAE,CAAC;AAIjB;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@channel.io/app-sdk-core",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Core types and utilities for Channel.io App SDK",
   "type": "module",
   "main": "./dist/index.js",