@panoptic-it-solutions/zoho-projects-client 0.1.4 → 0.2.1

package/dist/types/widgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"widgets.d.ts","sourceRoot":"","sources":["../../src/types/widgets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;gCAKf,CAAC;AAEjB,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAoCT,CAAC;AAEjB,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAMlD,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;GAEG;AACH,eAAO,MAAM,uBAAuB;IAClC,6BAA6B;;IAE7B,yBAAyB;;IAEzB,kBAAkB;;IAElB,sBAAsB;;;;;;;;;;;;;;;;;IAOtB,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;EAE3B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAoC,CAAC;AAEzE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/types/widgets.js

@@ -0,0 +1,87 @@
+import { z } from "zod";
+import { ZohoPageInfoSchema } from "./common.js";
+// ─────────────────────────────────────────────────────────────────────────────
+// WIDGET SCHEMA
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Widget configuration
+ */
+export const WidgetConfigSchema = z.object({
+    chart_type: z.string().optional(),
+    data_source: z.string().optional(),
+    filters: z.record(z.unknown()).optional(),
+    display_options: z.record(z.unknown()).optional(),
+}).passthrough();
+/**
+ * Widget from Zoho Projects API
+ * Widgets are nested under dashboards
+ */
+export const WidgetSchema = z.object({
+    // Identification
+    id: z.number(),
+    id_string: z.string(),
+    name: z.string(),
+    description: z.string().nullable().optional(),
+    // Type
+    type: z.string().optional(), // "chart", "list", "summary", etc.
+    widget_type: z.string().optional(),
+    // Position and size
+    position: z.object({
+        row: z.number().optional(),
+        col: z.number().optional(),
+        width: z.number().optional(),
+        height: z.number().optional(),
+    }).optional(),
+    // Configuration
+    config: WidgetConfigSchema.optional(),
+    settings: z.record(z.unknown()).optional(),
+    // Dashboard reference
+    dashboard_id: z.string().optional(),
+    // Links
+    link: z.object({
+        self: z.object({ url: z.string() }).optional(),
+    }).passthrough().optional(),
+    // Timestamps
+    created_time: z.string().optional(),
+    created_time_long: z.number().optional(),
+    last_modified_time: z.string().optional(),
+    last_modified_time_long: z.number().optional(),
+}).passthrough();
+// ─────────────────────────────────────────────────────────────────────────────
+// RESPONSE SCHEMAS
+// ─────────────────────────────────────────────────────────────────────────────
+export const WidgetListResponseSchema = z.object({
+    widgets: z.array(WidgetSchema),
+    page_info: ZohoPageInfoSchema.optional(),
+});
+export const WidgetResponseSchema = z.object({
+    widgets: z.array(WidgetSchema),
+});
+// ─────────────────────────────────────────────────────────────────────────────
+// INPUT SCHEMAS (CREATE/UPDATE)
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Input schema for creating a widget
+ */
+export const CreateWidgetInputSchema = z.object({
+    /** Widget name (required) */
+    name: z.string().min(1),
+    /** Widget description */
+    description: z.string().optional(),
+    /** Widget type */
+    type: z.string().optional(),
+    /** Widget position */
+    position: z.object({
+        row: z.number().optional(),
+        col: z.number().optional(),
+        width: z.number().optional(),
+        height: z.number().optional(),
+    }).optional(),
+    /** Widget configuration */
+    config: z.record(z.unknown()).optional(),
+});
+/**
+ * Input schema for updating a widget
+ */
+export const UpdateWidgetInputSchema = CreateWidgetInputSchema.partial();
+//# sourceMappingURL=widgets.js.map

package/dist/types/widgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"widgets.js","sourceRoot":"","sources":["../../src/types/widgets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,WAAW,EAAE,CAAC;AAIjB;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,iBAAiB;IACjB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE7C,OAAO;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,mCAAmC;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC,oBAAoB;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC,CAAC,QAAQ,EAAE;IAEb,gBAAgB;IAChB,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAE1C,sBAAsB;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEnC,QAAQ;IACR,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC/C,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAE3B,aAAa;IACb,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC,WAAW,EAAE,CAAC;AAIjB,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IAC9B,SAAS,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;CAC/B,CAAC,CAAC;AAIH,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,6BAA6B;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,yBAAyB;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,kBAAkB;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,sBAAsB;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC,CAAC,QAAQ,EAAE;IACb,2BAA2B;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC,OAAO,EAAE,CAAC"}

package/package.json

@@ -1,10 +1,13 @@
 {
   "name": "@panoptic-it-solutions/zoho-projects-client",
-  "version": "0.1.4",
+  "version": "0.2.1",
   "description": "TypeScript client for Zoho Projects V3 API with OAuth 2.0 and rate limiting",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "bin": {
+    "zoho-projects": "./dist/cli/init.js"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -12,11 +15,16 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "templates"
   ],
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
     "prepublishOnly": "npm run clean && npm run build"
   },
   "keywords": [
@@ -44,8 +52,12 @@
     "zod": "^3.23.0"
   },
   "devDependencies": {
+    "@faker-js/faker": "^9.3.0",
     "@types/node": "^22.0.0",
-    "typescript": "^5.6.0"
+    "@vitest/coverage-v8": "^2.1.0",
+    "msw": "^2.7.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0"
   },
   "engines": {
     "node": ">=18.0.0"

package/templates/CLAUDE.md

@@ -0,0 +1,66 @@
+# Zoho Projects Client
+
+This project uses the `@panoptic-it-solutions/zoho-projects-client` package for interacting with the Zoho Projects V3 API.
+
+## Quick Reference
+
+Use these slash commands for detailed information:
+- `/zoho-projects` - Full API reference with all namespaces and methods
+- `/zoho-auth` - OAuth 2.0 setup guide
+- `/zoho-examples` - Common usage patterns and examples
+
+## Client Setup
+
+```typescript
+import { createZohoProjectsClient } from '@panoptic-it-solutions/zoho-projects-client';
+
+const client = createZohoProjectsClient({
+  clientId: process.env.ZOHO_CLIENT_ID!,
+  clientSecret: process.env.ZOHO_CLIENT_SECRET!,
+  refreshToken: process.env.ZOHO_REFRESH_TOKEN!,
+  portalId: process.env.ZOHO_PORTAL_ID!,
+});
+```
+
+## Environment Variables
+
+```bash
+ZOHO_CLIENT_ID=     # OAuth client ID from Zoho API Console
+ZOHO_CLIENT_SECRET= # OAuth client secret
+ZOHO_REFRESH_TOKEN= # Refresh token from OAuth flow
+ZOHO_PORTAL_ID=     # Your Zoho Projects portal ID
+```
+
+## Available Namespaces
+
+### Portal-Level (no projectId needed)
+`projects`, `users`, `tags`, `roles`, `profiles`, `clients`, `contacts`, `groups`, `leaves`, `teams`, `dashboards`, `reports`, `search`, `trash`
+
+### Project-Scoped (require projectId)
+`tasks`, `tasklists`, `phases`, `issues`, `forums`, `events`, `timelogs`, `attachments`, `documents`
+
+### Polymorphic
+- `comments.forTask(projectId, taskId)` / `comments.forIssue(projectId, issueId)`
+- `followers.forTask(projectId, taskId)`
+
+## Common Patterns
+
+```typescript
+// List all (auto-paginate)
+const allProjects = await client.projects.listAll();
+
+// Iterate (memory-efficient)
+for await (const project of client.projects.iterate()) {
+  console.log(project.name);
+}
+
+// CRUD operations
+await client.tasks.create(projectId, { name: 'New task', tasklist_id: tasklistId });
+await client.tasks.update(projectId, taskId, { status: 'completed' });
+await client.tasks.delete(projectId, taskId);
+```
+
+## Package Documentation
+
+- [GitHub Repository](https://github.com/Panoptic-IT-Solutions/zoho-projects-client)
+- [npm Package](https://www.npmjs.com/package/@panoptic-it-solutions/zoho-projects-client)

package/templates/commands/zoho-auth.md

@@ -0,0 +1,195 @@
+# Zoho Projects OAuth 2.0 Setup Guide
+
+This guide explains how to set up OAuth 2.0 authentication for the Zoho Projects API.
+
+## Prerequisites
+
+1. A Zoho account
+2. Access to Zoho Projects
+3. Access to Zoho API Console
+
+## Step 1: Create a Zoho API Client
+
+1. Go to [Zoho API Console](https://api-console.zoho.com/)
+2. Click "Add Client"
+3. Choose "Server-based Applications"
+4. Fill in the details:
+   - **Client Name**: Your application name
+   - **Homepage URL**: Your application URL
+   - **Authorized Redirect URIs**: `http://localhost:3000/callback` (for local development)
+5. Click "Create"
+6. Note down the **Client ID** and **Client Secret**
+
+## Step 2: Get Authorization Code
+
+Open this URL in your browser (replace placeholders):
+
+```
+https://accounts.zoho.com/oauth/v2/auth?
+  client_id=YOUR_CLIENT_ID&
+  response_type=code&
+  scope=ZohoProjects.projects.ALL,ZohoProjects.tasks.ALL,ZohoProjects.users.ALL,ZohoProjects.timesheets.ALL,ZohoProjects.bugs.ALL,ZohoProjects.forums.ALL,ZohoProjects.events.ALL,ZohoProjects.documents.ALL&
+  redirect_uri=http://localhost:3000/callback&
+  access_type=offline&
+  prompt=consent
+```
+
+### Available Scopes
+
+| Scope | Description |
+|-------|-------------|
+| `ZohoProjects.projects.ALL` | Projects CRUD |
+| `ZohoProjects.tasks.ALL` | Tasks and task lists |
+| `ZohoProjects.users.ALL` | Users and roles |
+| `ZohoProjects.timesheets.ALL` | Time logs |
+| `ZohoProjects.bugs.ALL` | Issues/bugs |
+| `ZohoProjects.forums.ALL` | Forums |
+| `ZohoProjects.events.ALL` | Events/calendar |
+| `ZohoProjects.documents.ALL` | Documents |
+| `ZohoProjects.portals.ALL` | Portal settings |
+
+Use `ZohoProjects.ALL` for full access to all Zoho Projects resources.
+
+## Step 3: Exchange Code for Tokens
+
+After authorization, you'll be redirected to your callback URL with a `code` parameter.
+
+Exchange it for tokens:
+
+```bash
+curl -X POST "https://accounts.zoho.com/oauth/v2/token" \
+  -d "grant_type=authorization_code" \
+  -d "client_id=YOUR_CLIENT_ID" \
+  -d "client_secret=YOUR_CLIENT_SECRET" \
+  -d "redirect_uri=http://localhost:3000/callback" \
+  -d "code=YOUR_AUTHORIZATION_CODE"
+```
+
+Response:
+
+```json
+{
+  "access_token": "...",
+  "refresh_token": "...",
+  "api_domain": "https://www.zohoapis.com",
+  "token_type": "Bearer",
+  "expires_in": 3600
+}
+```
+
+**Important**: Save the `refresh_token` - you'll need it for the client configuration.
+
+## Step 4: Get Your Portal ID
+
+Use your access token to get the portal ID:
+
+```bash
+curl "https://projectsapi.zoho.com/restapi/portals/" \
+  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
+```
+
+Response:
+
+```json
+{
+  "portals": [
+    {
+      "id": 123456789,
+      "name": "Your Portal Name",
+      ...
+    }
+  ]
+}
+```
+
+Note the `id` value - this is your Portal ID.
+
+## Step 5: Configure Environment Variables
+
+Create a `.env` file:
+
+```bash
+ZOHO_CLIENT_ID=your_client_id
+ZOHO_CLIENT_SECRET=your_client_secret
+ZOHO_REFRESH_TOKEN=your_refresh_token
+ZOHO_PORTAL_ID=your_portal_id
+```
+
+## Step 6: Initialize the Client
+
+```typescript
+import { createZohoProjectsClient } from '@panoptic-it-solutions/zoho-projects-client';
+import 'dotenv/config';
+
+const client = createZohoProjectsClient({
+  clientId: process.env.ZOHO_CLIENT_ID!,
+  clientSecret: process.env.ZOHO_CLIENT_SECRET!,
+  refreshToken: process.env.ZOHO_REFRESH_TOKEN!,
+  portalId: process.env.ZOHO_PORTAL_ID!,
+});
+
+// Test the connection
+const projects = await client.projects.list();
+console.log('Connected! Projects:', projects.projects.length);
+```
+
+## Data Centers
+
+Zoho operates in multiple data centers. Use the correct one for your account:
+
+| Extension | Region |
+|-----------|--------|
+| `com` | United States (default) |
+| `eu` | Europe |
+| `in` | India |
+| `com.au` | Australia |
+| `jp` | Japan |
+
+Configure in client:
+
+```typescript
+const client = createZohoProjectsClient({
+  // ... other options
+  dataCenterExtension: 'eu', // For EU accounts
+});
+```
+
+## Token Refresh
+
+The client automatically handles token refresh. When the access token expires, it will use the refresh token to get a new one.
+
+## Troubleshooting
+
+### "Invalid refresh token"
+
+- Refresh tokens can expire if not used for 90+ days
+- Re-authorize your application to get a new refresh token
+
+### "Unauthorized" errors
+
+- Check that your scopes include the required permissions
+- Verify the Portal ID is correct
+- Ensure you're using the correct data center
+
+### Rate Limiting
+
+The client includes automatic rate limiting. If you hit rate limits:
+
+```typescript
+import { ZohoRateLimitError } from '@panoptic-it-solutions/zoho-projects-client';
+
+try {
+  await client.projects.list();
+} catch (error) {
+  if (error instanceof ZohoRateLimitError) {
+    console.log(`Retry after ${error.retryAfter}ms`);
+  }
+}
+```
+
+## Security Best Practices
+
+1. **Never commit credentials** - Use environment variables
+2. **Use minimal scopes** - Only request scopes you need
+3. **Rotate secrets** - Periodically regenerate your client secret
+4. **Secure storage** - Use a secrets manager in production