@danhachuel/thunderbolt 0.5.5 → 0.5.7

package/app/main.py

@@ -7105,14 +7105,17 @@ def _render_media_provider_card(settings: dict[str, Any], cards: list[dict[str,
     if card.get("provider") == "canva":
         callback_code = str(st.query_params.get("code") or "").strip()
         callback_state = str(st.query_params.get("state") or "").strip()
-        pending_state = str(st.session_state.get(f"canva_state_{card_id}") or "")
+        oauth_pending = card.get("oauth_pending") if isinstance(card.get("oauth_pending"), dict) else {}
+        pending_state = str(st.session_state.get(f"canva_state_{card_id}") or oauth_pending.get("state") or "")
+        pending_verifier = str(st.session_state.get(f"canva_verifier_{card_id}") or oauth_pending.get("code_verifier") or "")
         if callback_code:
-            if callback_state != pending_state:
+            if not pending_state or callback_state != pending_state:
                 st.error("Canva OAuth rejeitado: state inválido. Inicie a autorização novamente.")
             else:
                 try:
-                    token = exchange_code(str(card.get("client_id") or ""), str(card.get("client_secret") or ""), callback_code, str(card.get("redirect_uri") or ""), str(st.session_state.get(f"canva_verifier_{card_id}") or ""))
+                    token = exchange_code(str(card.get("client_id") or ""), str(card.get("client_secret") or ""), callback_code, str(card.get("redirect_uri") or ""), pending_verifier)
                     card["oauth_token"] = token
+                    card.pop("oauth_pending", None)
                     cards[index] = card
                     _persist_media_cards(settings, cards, str(settings.get(MEDIA_IMAGE_ACTIVE_CARD_KEY) or ""), str(settings.get(MEDIA_VIDEO_ACTIVE_CARD_KEY) or ""))
                     st.session_state.pop(f"canva_state_{card_id}", None)
@@ -7201,6 +7204,7 @@ def _render_media_provider_card(settings: dict[str, Any], cards: list[dict[str,
                         st.session_state[f"canva_verifier_{card_id}"] = verifier
                         st.session_state[f"canva_state_{card_id}"] = state
                         st.session_state[f"canva_authorization_url_{card_id}"] = authorization_url(client_id, redirect_uri, state=state, code_challenge=challenge)
+                        extra_values["oauth_pending"] = {"state": state, "code_verifier": verifier}
                     authorization_link = str(st.session_state.get(f"canva_authorization_url_{card_id}") or "")
                     if authorization_link:
                         st.markdown(f"[Abrir autorização Canva]({authorization_link})")

package/hermes_ui/canva_auth.py

@@ -61,7 +61,10 @@ def authorization_url(client_id: str, redirect_uri: str, scope: str | list[str]
     scope_string = " ".join(scope_value) if isinstance(scope_value, (list, tuple)) else " ".join(str(scope_value or "").split())
     params = {
         "code_challenge": code_challenge,
-        "code_challenge_method": "s256",
+        # A Canva e a RFC 7636 definem o identificador do método com esta
+        # capitalização exacta: S256. O valor minúsculo pode abrir o
+        # consentimento, mas impedir a conclusão do fluxo OAuth.
+        "code_challenge_method": "S256",
         "scope": scope_string,
         "response_type": "code",
         "client_id": str(client_id).strip(),

package/hermes_ui/media_providers.py

@@ -232,6 +232,12 @@ def normalize_media_card(card: Any, index: int = 0) -> dict[str, Any]:
         result["thumbnail_width"] = raw_width if raw_width in {"1280", "1792"} else "1280"
         result["thumbnail_height"] = raw_height if raw_height in {"720", "1024"} else ("1024" if result["thumbnail_width"] == "1792" else "720")
         result["oauth_token"] = dict(source.get("oauth_token") or {}) if isinstance(source.get("oauth_token"), Mapping) else {}
+        pending = source.get("oauth_pending")
+        if isinstance(pending, Mapping) and pending.get("state") and pending.get("code_verifier"):
+            result["oauth_pending"] = {
+                "state": str(pending.get("state")),
+                "code_verifier": str(pending.get("code_verifier")),
+            }
     if provider == "nano_banana":
         result["aspect_ratio"] = str(source.get("aspect_ratio") or INTERNAL_IMAGE_ASPECT_RATIO).strip()
         result["image_size"] = str(source.get("image_size") or INTERNAL_IMAGE_SIZE).strip()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danhachuel/thunderbolt",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "description": "Thunderbolt — interface local para operação de canais faceless e motor MoneyPrinterTurbo",
   "license": "MIT",
   "main": "scripts/cli.mjs",