@scalar/api-client 2.38.4 → 2.39.1

package/dist/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue.script.js

@@ -0,0 +1,296 @@
+import DataTableCell_default from "../../../components/data-table/DataTableCell.vue.js";
+import DataTableRow_default from "../../../components/data-table/DataTableRow.vue.js";
+import RequestAuthDataTableInput_default from "./RequestAuthDataTableInput.vue.js";
+import OAuth2_default from "./OAuth2.vue.js";
+import OpenIDConnect_default from "./OpenIDConnect.vue.js";
+import { Fragment, capitalize, computed, createBlock, createCommentVNode, createElementBlock, createElementVNode, createTextVNode, createVNode, defineComponent, normalizeClass, openBlock, ref, renderList, toDisplayString, unref, withCtx } from "vue";
+import { ScalarMarkdownSummary } from "@scalar/components";
+import { getResolvedRef } from "@scalar/workspace-store/helpers/get-resolved-ref";
+//#region src/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue?vue&type=script&setup=true&lang.ts
+var _hoisted_1 = { class: "bg-b-1 min-w-0 flex-1 px-3 py-1.25" };
+var _hoisted_2 = { class: "text-c-1 leading-5.5 font-medium" };
+var _hoisted_3 = { class: "flex min-h-8 border-t text-base" };
+var _hoisted_4 = { class: "flex h-8 max-w-full gap-2.5 overflow-x-auto px-3" };
+var _hoisted_5 = ["onClick"];
+var _hoisted_6 = { class: "relative z-10" };
+var _hoisted_7 = {
+	key: 5,
+	class: "text-c-3 flex items-center justify-center border-t p-4 px-4 text-center text-xs text-balance"
+};
+var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */ defineComponent({
+	__name: "RequestAuthTab",
+	props: {
+		environment: {},
+		isStatic: { type: Boolean },
+		proxyUrl: {},
+		selectedSecuritySchemas: {},
+		securitySchemes: {},
+		server: {},
+		eventBus: {}
+	},
+	emits: ["update:selectedScopes"],
+	setup(__props, { emit: __emit }) {
+		const emits = __emit;
+		/**
+		* Resolves security schemes from the OpenAPI document and combines them with their selected scopes.
+		* Each item includes the scheme definition, name, and associated scopes.
+		*/
+		const security = computed(() => Object.entries(__props.selectedSecuritySchemas).map(([name, scopes = []]) => ({
+			scheme: getResolvedRef(__props.securitySchemes[name]),
+			name,
+			scopes
+		})));
+		/** Tracks which OAuth2 flow is currently active when multiple flows are available. */
+		const activeFlow = ref("");
+		/** Keeps the selected flow in sync with currently available flow keys. */
+		const selectedFlow = computed(() => {
+			return security.value.flatMap(({ scheme }) => {
+				if (scheme?.type !== "oauth2" && scheme?.type !== "openIdConnect") return [];
+				return Object.keys(scheme.flows ?? {});
+			}).includes(activeFlow.value) ? activeFlow.value : "";
+		});
+		const setActiveFlow = (flow) => {
+			activeFlow.value = flow;
+		};
+		/** Determines if multiple auth schemes are configured, which affects the UI layout. */
+		const hasMultipleSchemes = computed(() => security.value.length > 1);
+		/**
+		* Generates a human-readable label for the security scheme.
+		* Intentionally omits the description here — it is rendered separately as
+		* rich text via ScalarMarkdownSummary so markdown formatting is preserved.
+		*/
+		const generateLabel = (name, scheme) => {
+			const capitalizedName = capitalize(name);
+			switch (scheme.type) {
+				case "apiKey": return `${capitalizedName}: ${scheme.in}`;
+				case "openIdConnect":
+				case "oauth2": {
+					const firstFlow = Object.keys(scheme.flows ?? {})[0];
+					const currentFlow = selectedFlow.value || firstFlow;
+					if (!currentFlow) return capitalizedName;
+					return `${capitalizedName}: ${currentFlow}`;
+				}
+				case "http": return `${capitalizedName}: ${scheme.scheme}`;
+				default: return capitalizedName;
+			}
+		};
+		/**
+		* Determines if an OAuth2 flow tab should be active.
+		* The first flow is active by default if no flow is explicitly selected.
+		*/
+		const isFlowActive = (flowKey, index) => selectedFlow.value === flowKey || index === 0 && !selectedFlow.value;
+		/** Computes the container class for static display mode. */
+		const getStaticBorderClass = () => __props.isStatic && "border-t";
+		const handleHttpSecretsUpdate = (payload, name) => __props.eventBus.emit("auth:update:security-scheme-secrets", {
+			payload: {
+				type: "http",
+				...payload
+			},
+			name
+		});
+		const handleApiKeySecretsUpdate = (payload, name) => __props.eventBus.emit("auth:update:security-scheme-secrets", {
+			payload: {
+				type: "apiKey",
+				...payload
+			},
+			name
+		});
+		const handleApiKeySecuritySchemeUpdate = (payload, name) => __props.eventBus.emit("auth:update:security-scheme", {
+			payload: {
+				type: "apiKey",
+				...payload
+			},
+			name
+		});
+		/** Handles scope selection updates for OAuth2 */
+		const handleScopesUpdate = (name, event) => {
+			emits("update:selectedScopes", {
+				id: Object.keys(__props.selectedSecuritySchemas),
+				name,
+				...event
+			});
+		};
+		/**
+		* Computes dynamic classes for OAuth2 flow tabs based on active state.
+		*/
+		const getFlowTabClasses = (flowKey, index) => {
+			const baseClasses = "floating-bg text-c-3 relative cursor-pointer border-b border-transparent py-1 text-base font-medium";
+			return isFlowActive(flowKey, index) ? `${baseClasses} !text-c-1 !rounded-none border-b !border-current ${__props.isStatic ? "opacity-100" : ""}` : baseClasses;
+		};
+		return (_ctx, _cache) => {
+			return openBlock(true), createElementBlock(Fragment, null, renderList(security.value, ({ scheme, name, scopes }) => {
+				return openBlock(), createElementBlock(Fragment, { key: name }, [
+					hasMultipleSchemes.value && scheme ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 0 }, {
+						default: withCtx(() => [createVNode(unref(DataTableCell_default), {
+							"aria-label": generateLabel(name, scheme),
+							class: "max-h-[auto]"
+						}, {
+							default: withCtx(() => [createElementVNode("div", _hoisted_1, [createElementVNode("p", _hoisted_2, toDisplayString(generateLabel(name, scheme)), 1), scheme.description ? (openBlock(), createBlock(unref(ScalarMarkdownSummary), {
+								key: 0,
+								class: "auth-description text-c-2 w-full",
+								value: scheme.description
+							}, null, 8, ["value"])) : createCommentVNode("", true)])]),
+							_: 2
+						}, 1032, ["aria-label"])]),
+						_: 2
+					}, 1024)) : createCommentVNode("", true),
+					scheme?.description && !hasMultipleSchemes.value ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 1 }, {
+						default: withCtx(() => [createVNode(unref(DataTableCell_default), {
+							"aria-label": scheme.description,
+							class: "max-h-[auto]"
+						}, {
+							default: withCtx(() => [createVNode(unref(ScalarMarkdownSummary), {
+								class: "auth-description bg-b-1 text-c-2 min-w-0 flex-1 px-3 py-1.25",
+								value: scheme.description
+							}, null, 8, ["value"])]),
+							_: 2
+						}, 1032, ["aria-label"])]),
+						_: 2
+					}, 1024)) : createCommentVNode("", true),
+					scheme?.type === "http" ? (openBlock(), createElementBlock(Fragment, { key: 2 }, [scheme.scheme === "bearer" ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 0 }, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							containerClass: getStaticBorderClass(),
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-token"],
+							placeholder: "Token",
+							type: "password",
+							"onUpdate:modelValue": (v) => handleHttpSecretsUpdate({ "x-scalar-secret-token": v }, name)
+						}, {
+							default: withCtx(() => [..._cache[0] || (_cache[0] = [createTextVNode(" Bearer Token ", -1)])]),
+							_: 1
+						}, 8, [
+							"containerClass",
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024)) : scheme?.scheme === "basic" ? (openBlock(), createElementBlock(Fragment, { key: 1 }, [createVNode(unref(DataTableRow_default), null, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							class: "text-c-2",
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-username"],
+							placeholder: "janedoe",
+							required: "",
+							"onUpdate:modelValue": (v) => handleHttpSecretsUpdate({ "x-scalar-secret-username": v }, name)
+						}, {
+							default: withCtx(() => [..._cache[1] || (_cache[1] = [createTextVNode(" Username ", -1)])]),
+							_: 1
+						}, 8, [
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024), createVNode(unref(DataTableRow_default), null, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-password"],
+							placeholder: "********",
+							type: "password",
+							"onUpdate:modelValue": (v) => handleHttpSecretsUpdate({ "x-scalar-secret-password": v }, name)
+						}, {
+							default: withCtx(() => [..._cache[2] || (_cache[2] = [createTextVNode(" Password ", -1)])]),
+							_: 1
+						}, 8, [
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024)], 64)) : createCommentVNode("", true)], 64)) : scheme?.type === "apiKey" ? (openBlock(), createElementBlock(Fragment, { key: 3 }, [createVNode(unref(DataTableRow_default), null, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							containerClass: getStaticBorderClass(),
+							environment: __props.environment,
+							modelValue: scheme.name,
+							placeholder: "api-key",
+							"onUpdate:modelValue": (v) => handleApiKeySecuritySchemeUpdate({ name: v }, name)
+						}, {
+							default: withCtx(() => [..._cache[3] || (_cache[3] = [createTextVNode(" Name ", -1)])]),
+							_: 1
+						}, 8, [
+							"containerClass",
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024), createVNode(unref(DataTableRow_default), null, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-token"],
+							placeholder: "QUxMIFlPVVIgQkFTRSBBUkUgQkVMT05HIFRPIFVT",
+							type: "password",
+							"onUpdate:modelValue": (v) => handleApiKeySecretsUpdate({ "x-scalar-secret-token": v }, name)
+						}, {
+							default: withCtx(() => [..._cache[4] || (_cache[4] = [createTextVNode(" Value ", -1)])]),
+							_: 1
+						}, 8, [
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024)], 64)) : scheme?.type === "oauth2" || scheme?.type === "openIdConnect" ? (openBlock(), createElementBlock(Fragment, { key: 4 }, [
+						scheme?.type === "openIdConnect" && !Object.keys(scheme.flows ?? {}).length ? (openBlock(), createBlock(OpenIDConnect_default, {
+							key: 0,
+							environment: __props.environment,
+							eventBus: __props.eventBus,
+							getStaticBorderClass,
+							name,
+							proxyUrl: __props.proxyUrl,
+							scheme
+						}, null, 8, [
+							"environment",
+							"eventBus",
+							"name",
+							"proxyUrl",
+							"scheme"
+						])) : createCommentVNode("", true),
+						Object.keys(scheme.flows ?? {}).length > 1 ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 1 }, {
+							default: withCtx(() => [createElementVNode("div", _hoisted_3, [createElementVNode("div", _hoisted_4, [(openBlock(true), createElementBlock(Fragment, null, renderList(scheme.flows, (_, key, ind) => {
+								return openBlock(), createElementBlock("button", {
+									key,
+									class: normalizeClass(getFlowTabClasses(key, ind)),
+									type: "button",
+									onClick: ($event) => setActiveFlow(key)
+								}, [createElementVNode("span", _hoisted_6, toDisplayString(key), 1)], 10, _hoisted_5);
+							}), 128))])])]),
+							_: 2
+						}, 1024)) : createCommentVNode("", true),
+						(openBlock(true), createElementBlock(Fragment, null, renderList(scheme.flows, (_flow, key, ind) => {
+							return openBlock(), createElementBlock(Fragment, { key }, [scheme.flows && isFlowActive(key, ind) ? (openBlock(), createBlock(OAuth2_default, {
+								key: 0,
+								environment: __props.environment,
+								eventBus: __props.eventBus,
+								flows: scheme.flows,
+								name,
+								proxyUrl: __props.proxyUrl,
+								scheme,
+								selectedScopes: scopes,
+								server: __props.server,
+								type: key,
+								"onUpdate:selectedScopes": (event) => handleScopesUpdate(name, event)
+							}, null, 8, [
+								"environment",
+								"eventBus",
+								"flows",
+								"name",
+								"proxyUrl",
+								"scheme",
+								"selectedScopes",
+								"server",
+								"type",
+								"onUpdate:selectedScopes"
+							])) : createCommentVNode("", true)], 64);
+						}), 128))
+					], 64)) : (openBlock(), createElementBlock("div", _hoisted_7, " The security scheme is missing a type, please double check your OpenAPI document or Authentication Configuration "))
+				], 64);
+			}), 128);
+		};
+	}
+});
+//#endregion
+export { RequestAuthTab_vue_vue_type_script_setup_true_lang_default as default };
+
+//# sourceMappingURL=RequestAuthTab.vue.script.js.map

package/dist/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue.script.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestAuthTab.vue.script.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\nimport { ScalarMarkdownSummary } from '@scalar/components'\nimport type {\n  SecretsApiKey,\n  SecretsHttp,\n} from '@scalar/workspace-store/entities/auth'\nimport type {\n  ApiReferenceEvents,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport { getResolvedRef } from '@scalar/workspace-store/helpers/get-resolved-ref'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport type {\n  ApiKeyObject,\n  SecurityRequirementObject,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { capitalize, computed, ref } from 'vue'\n\nimport type { MergedSecuritySchemes } from '@/v2/blocks/scalar-auth-selector-block'\nimport type { SecuritySchemeObjectSecret } from '@/v2/blocks/scalar-auth-selector-block/helpers/secret-types'\nimport { DataTableCell, DataTableRow } from '@/v2/components/data-table'\n\nimport OAuth2 from './OAuth2.vue'\nimport OpenIDConnect from './OpenIDConnect.vue'\nimport RequestAuthDataTableInput from './RequestAuthDataTableInput.vue'\n\ntype SecurityItem = {\n  scheme: SecuritySchemeObjectSecret | undefined\n  name: string\n  scopes: string[]\n}\n\nconst {\n  environment,\n  isStatic,\n  proxyUrl,\n  selectedSecuritySchemas,\n  securitySchemes,\n  server,\n  eventBus,\n} = defineProps<{\n  /** Current environment configuration */\n  environment: XScalarEnvironment\n  /** Controls the display of certain borders which are used when we are non-collapsible */\n  isStatic: boolean\n  /** Proxy URL */\n  proxyUrl: string\n  /** Selected security schemes*/\n  selectedSecuritySchemas: SecurityRequirementObject\n  /** Merged security schemes from the document and the config together with the auth store secrets */\n  securitySchemes: MergedSecuritySchemes\n  /** Current server configuration */\n  server: ServerObject | null\n  /** Event bus for authentication updates */\n  eventBus: WorkspaceEventBus\n}>()\n\nconst emits = defineEmits<{\n  (\n    e: 'update:selectedScopes',\n    payload: Omit<ApiReferenceEvents['auth:update:selected-scopes'], 'meta'>,\n  ): void\n}>()\n\n/**\n * Resolves security schemes from the OpenAPI document and combines them with their selected scopes.\n * Each item includes the scheme definition, name, and associated scopes.\n */\nconst security = computed<SecurityItem[]>(() =>\n  Object.entries(selectedSecuritySchemas).map(([name, scopes = []]) => ({\n    scheme: getResolvedRef(securitySchemes[name]),\n    name,\n    scopes,\n  })),\n)\n\n/** Tracks which OAuth2 flow is currently active when multiple flows are available. */\nconst activeFlow = ref<string>('')\n\n/** Keeps the selected flow in sync with currently available flow keys. */\nconst selectedFlow = computed<string>(() => {\n  const authFlowKeys = security.value.flatMap(({ scheme }) => {\n    if (scheme?.type !== 'oauth2' && scheme?.type !== 'openIdConnect') {\n      return []\n    }\n\n    return Object.keys(scheme.flows ?? {})\n  })\n\n  return authFlowKeys.includes(activeFlow.value) ? activeFlow.value : ''\n})\n\nconst setActiveFlow = (flow: string): void => {\n  activeFlow.value = flow\n}\n\n/** Determines if multiple auth schemes are configured, which affects the UI layout. */\nconst hasMultipleSchemes = computed<boolean>(() => security.value.length > 1)\n\n/**\n * Generates a human-readable label for the security scheme.\n * Intentionally omits the description here — it is rendered separately as\n * rich text via ScalarMarkdownSummary so markdown formatting is preserved.\n */\nconst generateLabel = (\n  name: string,\n  scheme: SecuritySchemeObjectSecret,\n): string => {\n  const capitalizedName = capitalize(name)\n\n  switch (scheme.type) {\n    case 'apiKey':\n      return `${capitalizedName}: ${scheme.in}`\n\n    case 'openIdConnect':\n    case 'oauth2': {\n      const firstFlow = Object.keys(scheme.flows ?? {})[0]\n      const currentFlow = selectedFlow.value || firstFlow\n      if (!currentFlow) {\n        return capitalizedName\n      }\n      return `${capitalizedName}: ${currentFlow}`\n    }\n\n    case 'http':\n      return `${capitalizedName}: ${scheme.scheme}`\n\n    default:\n      return capitalizedName\n  }\n}\n\n/**\n * Determines if an OAuth2 flow tab should be active.\n * The first flow is active by default if no flow is explicitly selected.\n */\nconst isFlowActive = (flowKey: string, index: number): boolean =>\n  selectedFlow.value === flowKey || (index === 0 && !selectedFlow.value)\n\n/** Computes the container class for static display mode. */\nconst getStaticBorderClass = (): string | false => isStatic && 'border-t'\n\nconst handleHttpSecretsUpdate = (\n  payload: Omit<Partial<SecretsHttp>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: { type: 'http', ...payload },\n    name,\n  })\n\nconst handleApiKeySecretsUpdate = (\n  payload: Omit<Partial<SecretsApiKey>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: { type: 'apiKey', ...payload },\n    name,\n  })\n\nconst handleApiKeySecuritySchemeUpdate = (\n  payload: Omit<Partial<ApiKeyObject>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme', {\n    payload: { type: 'apiKey', ...payload },\n    name,\n  })\n\n/** Handles scope selection updates for OAuth2 */\nconst handleScopesUpdate = (\n  name: string,\n  event: { scopes: string[] },\n): void => {\n  emits('update:selectedScopes', {\n    id: Object.keys(selectedSecuritySchemas),\n    name,\n    ...event,\n  })\n}\n\n/**\n * Computes dynamic classes for OAuth2 flow tabs based on active state.\n */\nconst getFlowTabClasses = (flowKey: string, index: number): string => {\n  const baseClasses =\n    'floating-bg text-c-3 relative cursor-pointer border-b border-transparent py-1 text-base font-medium'\n  const activeClasses = '!text-c-1 !rounded-none border-b !border-current'\n\n  return isFlowActive(flowKey, index)\n    ? `${baseClasses} ${activeClasses} ${isStatic ? 'opacity-100' : ''}`\n    : baseClasses\n}\n</script>\n<template>\n  <template\n    v-for=\"{ scheme, name, scopes } in security\"\n    :key=\"name\">\n    <!--\n      Header row for AND'ed schemes: label (bold) and description (rich text) are\n      combined.\n    -->\n    <DataTableRow v-if=\"hasMultipleSchemes && scheme\">\n      <DataTableCell\n        :aria-label=\"generateLabel(name, scheme)\"\n        class=\"max-h-[auto]\">\n        <div class=\"bg-b-1 min-w-0 flex-1 px-3 py-1.25\">\n          <p class=\"text-c-1 leading-5.5 font-medium\">\n            {{ generateLabel(name, scheme) }}\n          </p>\n          <ScalarMarkdownSummary\n            v-if=\"scheme.description\"\n            class=\"auth-description text-c-2 w-full\"\n            :value=\"scheme.description\" />\n        </div>\n      </DataTableCell>\n    </DataTableRow>\n\n    <!-- Description: shown for single auth schemes with descriptions -->\n    <DataTableRow v-if=\"scheme?.description && !hasMultipleSchemes\">\n      <DataTableCell\n        :aria-label=\"scheme.description\"\n        class=\"max-h-[auto]\">\n        <ScalarMarkdownSummary\n          class=\"auth-description bg-b-1 text-c-2 min-w-0 flex-1 px-3 py-1.25\"\n          :value=\"scheme.description\" />\n      </DataTableCell>\n    </DataTableRow>\n\n    <!-- HTTP Authentication -->\n    <template v-if=\"scheme?.type === 'http'\">\n      <!-- Bearer Token -->\n      <DataTableRow v-if=\"scheme.scheme === 'bearer'\">\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-token']\"\n          placeholder=\"Token\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) => handleHttpSecretsUpdate({ 'x-scalar-secret-token': v }, name)\n          \">\n          Bearer Token\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n\n      <!-- HTTP Basic Authentication -->\n      <template v-else-if=\"scheme?.scheme === 'basic'\">\n        <DataTableRow>\n          <RequestAuthDataTableInput\n            class=\"text-c-2\"\n            :environment\n            :modelValue=\"scheme['x-scalar-secret-username']\"\n            placeholder=\"janedoe\"\n            required\n            @update:modelValue=\"\n              (v) =>\n                handleHttpSecretsUpdate({ 'x-scalar-secret-username': v }, name)\n            \">\n            Username\n          </RequestAuthDataTableInput>\n        </DataTableRow>\n        <DataTableRow>\n          <RequestAuthDataTableInput\n            :environment\n            :modelValue=\"scheme['x-scalar-secret-password']\"\n            placeholder=\"********\"\n            type=\"password\"\n            @update:modelValue=\"\n              (v) =>\n                handleHttpSecretsUpdate({ 'x-scalar-secret-password': v }, name)\n            \">\n            Password\n          </RequestAuthDataTableInput>\n        </DataTableRow>\n      </template>\n    </template>\n\n    <!-- API Key Authentication -->\n    <template v-else-if=\"scheme?.type === 'apiKey'\">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme.name\"\n          placeholder=\"api-key\"\n          @update:modelValue=\"\n            (v) => handleApiKeySecuritySchemeUpdate({ name: v }, name)\n          \">\n          Name\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-token']\"\n          placeholder=\"QUxMIFlPVVIgQkFTRSBBUkUgQkVMT05HIFRPIFVT\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) =>\n              handleApiKeySecretsUpdate({ 'x-scalar-secret-token': v }, name)\n          \">\n          Value\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <!-- OAuth 2.0  / OpenID Connect Authentication -->\n    <template\n      v-else-if=\"scheme?.type === 'oauth2' || scheme?.type === 'openIdConnect'\">\n      <!-- OpenID Connect -->\n      <OpenIDConnect\n        v-if=\"\n          scheme?.type === 'openIdConnect' &&\n          !Object.keys(scheme.flows ?? {}).length\n        \"\n        :environment\n        :eventBus\n        :getStaticBorderClass\n        :name\n        :proxyUrl\n        :scheme />\n\n      <!-- Flow selector tabs: shown when multiple flows are available -->\n      <DataTableRow v-if=\"Object.keys(scheme.flows ?? {}).length > 1\">\n        <div class=\"flex min-h-8 border-t text-base\">\n          <div class=\"flex h-8 max-w-full gap-2.5 overflow-x-auto px-3\">\n            <button\n              v-for=\"(_, key, ind) in scheme.flows\"\n              :key=\"key\"\n              :class=\"getFlowTabClasses(key, ind)\"\n              type=\"button\"\n              @click=\"setActiveFlow(key)\">\n              <span class=\"relative z-10\">{{ key }}</span>\n            </button>\n          </div>\n        </div>\n      </DataTableRow>\n\n      <!-- OAuth2 flow configuration -->\n      <template\n        v-for=\"(_flow, key, ind) in scheme.flows\"\n        :key=\"key\">\n        <OAuth2\n          v-if=\"scheme.flows && isFlowActive(key, ind)\"\n          :environment\n          :eventBus\n          :flows=\"scheme.flows\"\n          :name=\"name\"\n          :proxyUrl\n          :scheme\n          :selectedScopes=\"scopes\"\n          :server=\"server\"\n          :type=\"key\"\n          @update:selectedScopes=\"(event) => handleScopesUpdate(name, event)\" />\n      </template>\n    </template>\n\n    <!-- Scheme is missing type -->\n    <div\n      v-else\n      class=\"text-c-3 flex items-center justify-center border-t p-4 px-4 text-center text-xs text-balance\">\n      The security scheme is missing a type, please double check your OpenAPI\n      document or Authentication Configuration\n    </div>\n  </template>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0DA,MAAM,QAAQ;;;;;EAWd,MAAM,WAAW,eACf,OAAO,QAAQ,QAAA,wBAAwB,CAAC,KAAK,CAAC,MAAM,SAAS,EAAE,OAAO;GACpE,QAAQ,eAAe,QAAA,gBAAgB,MAAM;GAC7C;GACA;GACD,EAAE,CACL;;EAGA,MAAM,aAAa,IAAY,GAAE;;EAGjC,MAAM,eAAe,eAAuB;AAS1C,UARqB,SAAS,MAAM,SAAS,EAAE,aAAa;AAC1D,QAAI,QAAQ,SAAS,YAAY,QAAQ,SAAS,gBAChD,QAAO,EAAC;AAGV,WAAO,OAAO,KAAK,OAAO,SAAS,EAAE,CAAA;KACtC,CAEmB,SAAS,WAAW,MAAM,GAAG,WAAW,QAAQ;IACrE;EAED,MAAM,iBAAiB,SAAuB;AAC5C,cAAW,QAAQ;;;EAIrB,MAAM,qBAAqB,eAAwB,SAAS,MAAM,SAAS,EAAC;;;;;;EAO5E,MAAM,iBACJ,MACA,WACW;GACX,MAAM,kBAAkB,WAAW,KAAI;AAEvC,WAAQ,OAAO,MAAf;IACE,KAAK,SACH,QAAO,GAAG,gBAAgB,IAAI,OAAO;IAEvC,KAAK;IACL,KAAK,UAAU;KACb,MAAM,YAAY,OAAO,KAAK,OAAO,SAAS,EAAE,CAAC,CAAC;KAClD,MAAM,cAAc,aAAa,SAAS;AAC1C,SAAI,CAAC,YACH,QAAO;AAET,YAAO,GAAG,gBAAgB,IAAI;;IAGhC,KAAK,OACH,QAAO,GAAG,gBAAgB,IAAI,OAAO;IAEvC,QACE,QAAO;;;;;;;EAQb,MAAM,gBAAgB,SAAiB,UACrC,aAAa,UAAU,WAAY,UAAU,KAAK,CAAC,aAAa;;EAGlE,MAAM,6BAA6C,QAAA,YAAY;EAE/D,MAAM,2BACJ,SACA,SAEA,QAAA,SAAS,KAAK,uCAAuC;GACnD,SAAS;IAAE,MAAM;IAAQ,GAAG;IAAS;GACrC;GACD,CAAA;EAEH,MAAM,6BACJ,SACA,SAEA,QAAA,SAAS,KAAK,uCAAuC;GACnD,SAAS;IAAE,MAAM;IAAU,GAAG;IAAS;GACvC;GACD,CAAA;EAEH,MAAM,oCACJ,SACA,SAEA,QAAA,SAAS,KAAK,+BAA+B;GAC3C,SAAS;IAAE,MAAM;IAAU,GAAG;IAAS;GACvC;GACD,CAAA;;EAGH,MAAM,sBACJ,MACA,UACS;AACT,SAAM,yBAAyB;IAC7B,IAAI,OAAO,KAAK,QAAA,wBAAwB;IACxC;IACA,GAAG;IACJ,CAAA;;;;;EAMH,MAAM,qBAAqB,SAAiB,UAA0B;GACpE,MAAM,cACJ;AAGF,UAAO,aAAa,SAAS,MAAK,GAC9B,GAAG,YAAY,oDAAoB,QAAA,WAAW,gBAAgB,OAC9D;;;2BAIJ,mBA0KW,UAAA,MAAA,WAzK0B,SAAA,QAAQ,EAAlC,QAAQ,MAAM,aAAM;4DACvB,MAAI,EAAA;KAKU,mBAAA,SAAsB,UAAA,WAAA,EAA1C,YAce,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;6BADG,CAZhB,YAYgB,MAAA,sBAAA,EAAA;OAXb,cAAY,cAAc,MAAM,OAAM;OACvC,OAAM;;8BASA,CARN,mBAQM,OARN,YAQM,CAPJ,mBAEI,KAFJ,YAEI,gBADC,cAAc,MAAM,OAAM,CAAA,EAAA,EAAA,EAGvB,OAAO,eAAA,WAAA,EADf,YAGgC,MAAA,sBAAA,EAAA;;QAD9B,OAAM;QACL,OAAO,OAAO;;;;;;KAMH,QAAQ,eAAW,CAAK,mBAAA,SAAA,WAAA,EAA5C,YAQe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;6BADG,CANhB,YAMgB,MAAA,sBAAA,EAAA;OALb,cAAY,OAAO;OACpB,OAAM;;8BAG0B,CAFhC,YAEgC,MAAA,sBAAA,EAAA;QAD9B,OAAM;QACL,OAAO,OAAO;;;;;;KAKL,QAAQ,SAAI,UAAA,WAAA,EAA5B,mBA8CW,UAAA,EAAA,KAAA,GAAA,EAAA,CA5CW,OAAO,WAAM,YAAA,WAAA,EAAjC,YAYe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;6BADe,CAV5B,YAU4B,mCAAA;OATzB,gBAAgB,sBAAoB;OACpC,aAAA,QAAA;OACA,YAAY,OAAM;OACnB,aAAY;OACZ,MAAK;OACJ,wBAAiC,MAAM,wBAAuB,EAAA,yBAA4B,GAAC,EAAI,KAAI;;8BAItG,CAAA,GAAA,OAAA,OAAA,OAAA,KAAA,CAAA,gBAFI,kBAEJ,GAAA,CAAA,EAAA,CAAA;;;;;;;;;iBAImB,QAAQ,WAAM,WAAA,WAAA,EAAnC,mBA4BW,UAAA,EAAA,KAAA,GAAA,EAAA,CA3BT,YAae,MAAA,qBAAA,EAAA,MAAA;6BADe,CAX5B,YAW4B,mCAAA;OAV1B,OAAM;OACL,aAAA,QAAA;OACA,YAAY,OAAM;OACnB,aAAY;OACZ,UAAA;OACC,wBAAmC,MAAsB,wBAAuB,EAAA,4BAA+B,GAAC,EAAI,KAAI;;8BAK3H,CAAA,GAAA,OAAA,OAAA,OAAA,KAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;;;;;;;eAEF,YAYe,MAAA,qBAAA,EAAA,MAAA;6BADe,CAV5B,YAU4B,mCAAA;OATzB,aAAA,QAAA;OACA,YAAY,OAAM;OACnB,aAAY;OACZ,MAAK;OACJ,wBAAmC,MAAsB,wBAAuB,EAAA,4BAA+B,GAAC,EAAI,KAAI;;8BAK3H,CAAA,GAAA,OAAA,OAAA,OAAA,KAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;;;;;;;6DAMe,QAAQ,SAAI,YAAA,WAAA,EAAjC,mBA0BW,UAAA,EAAA,KAAA,GAAA,EAAA,CAzBT,YAWe,MAAA,qBAAA,EAAA,MAAA;6BADe,CAT5B,YAS4B,mCAAA;OARzB,gBAAgB,sBAAoB;OACpC,aAAA,QAAA;OACA,YAAY,OAAO;OACpB,aAAY;OACX,wBAAiC,MAAM,iCAAgC,EAAA,MAAS,GAAC,EAAI,KAAI;;8BAI5F,CAAA,GAAA,OAAA,OAAA,OAAA,KAAA,CAAA,gBAFI,UAEJ,GAAA,CAAA,EAAA,CAAA;;;;;;;;;eAEF,YAYe,MAAA,qBAAA,EAAA,MAAA;6BADe,CAV5B,YAU4B,mCAAA;OATzB,aAAA,QAAA;OACA,YAAY,OAAM;OACnB,aAAY;OACZ,MAAK;OACJ,wBAAiC,MAAoB,0BAAyB,EAAA,yBAA4B,GAAC,EAAI,KAAI;;8BAKtH,CAAA,GAAA,OAAA,OAAA,OAAA,KAAA,CAAA,gBAFI,WAEJ,GAAA,CAAA,EAAA,CAAA;;;;;;;;uBAMS,QAAQ,SAAI,YAAiB,QAAQ,SAAI,mBAAA,WAAA,EADtD,mBAgDW,UAAA,EAAA,KAAA,GAAA,EAAA;MA5CU,QAAQ,SAAI,mBAAA,CAAmC,OAAO,KAAK,OAAO,SAAK,EAAA,CAAA,CAAQ,UAAA,WAAA,EADlG,YAUY,uBAAA;;OALT,aAAA,QAAA;OACA,UAAA,QAAA;OACA;OACA;OACA,UAAA,QAAA;OACA;;;;;;;;MAGiB,OAAO,KAAK,OAAO,SAAK,EAAA,CAAA,CAAQ,SAAM,KAAA,WAAA,EAA1D,YAae,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;8BADP,CAXN,mBAWM,OAXN,YAWM,CAVJ,mBASM,OATN,YASM,EAAA,UAAA,KAAA,EARJ,mBAOS,UAAA,MAAA,WANiB,OAAO,QAAvB,GAAG,KAAK,QAAG;4BADrB,mBAOS,UAAA;SALD;SACL,OAAK,eAAE,kBAAkB,KAAK,IAAG,CAAA;SAClC,MAAK;SACJ,UAAK,WAAE,cAAc,IAAG;YACzB,mBAA4C,QAA5C,YAA4C,gBAAb,IAAG,EAAA,EAAA,CAAA,EAAA,IAAA,WAAA;;;;wBAO1C,mBAeW,UAAA,MAAA,WAdmB,OAAO,QAA3B,OAAO,KAAK,QAAG;0DACjB,KAAG,EAAA,CAED,OAAO,SAAS,aAAa,KAAK,IAAG,IAAA,WAAA,EAD7C,YAWwE,gBAAA;;QATrE,aAAA,QAAA;QACA,UAAA,QAAA;QACA,OAAO,OAAO;QACR;QACN,UAAA,QAAA;QACA;QACA,gBAAgB;QAChB,QAAQ,QAAA;QACR,MAAM;QACN,4BAAwB,UAAU,mBAAmB,MAAM,MAAK;;;;;;;;;;;;;;6BAKvE,mBAKM,OALN,YAEuG,qHAGvG"}

package/dist/v2/blocks/scalar-auth-selector-block/helpers/auth-options.js

@@ -0,0 +1,92 @@
+//#region src/v2/blocks/scalar-auth-selector-block/helpers/auth-options.ts
+/** Predefined authentication options */
+var authOptions = {
+	apiKeyCookie: {
+		label: "API Key in Cookies",
+		payload: {
+			type: "apiKey",
+			in: "cookie",
+			name: "apiKeyCookie"
+		}
+	},
+	apiKeyHeader: {
+		label: "API Key in Headers",
+		payload: {
+			type: "apiKey",
+			in: "header",
+			name: "apiKeyHeader"
+		}
+	},
+	apiKeyQuery: {
+		label: "API Key in Query Params",
+		payload: {
+			type: "apiKey",
+			in: "query",
+			name: "apiKeyQuery"
+		}
+	},
+	httpBasic: {
+		label: "HTTP Basic",
+		payload: {
+			type: "http",
+			scheme: "basic"
+		}
+	},
+	httpBearer: {
+		label: "HTTP Bearer",
+		payload: {
+			type: "http",
+			scheme: "bearer"
+		}
+	},
+	oauth2Implicit: {
+		label: "Oauth2 Implicit Flow",
+		payload: {
+			type: "oauth2",
+			flows: { implicit: {
+				authorizationUrl: "",
+				refreshUrl: "",
+				scopes: {}
+			} }
+		}
+	},
+	oauth2Password: {
+		label: "Oauth2 Password Flow",
+		payload: {
+			type: "oauth2",
+			flows: { password: {
+				tokenUrl: "",
+				refreshUrl: "",
+				scopes: {}
+			} }
+		}
+	},
+	oauth2ClientCredentials: {
+		label: "Oauth2 Client Credentials",
+		payload: {
+			type: "oauth2",
+			flows: { clientCredentials: {
+				tokenUrl: "",
+				refreshUrl: "",
+				scopes: {}
+			} }
+		}
+	},
+	oauth2AuthorizationFlow: {
+		label: "Oauth2 Authorization Code",
+		payload: {
+			type: "oauth2",
+			flows: { authorizationCode: {
+				authorizationUrl: "",
+				tokenUrl: "",
+				refreshUrl: "",
+				"x-usePkce": "no",
+				scopes: {}
+			} }
+		}
+	}
+};
+//#endregion
+export { authOptions };
+
+//# sourceMappingURL=auth-options.js.map

package/dist/v2/blocks/scalar-auth-selector-block/helpers/auth-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-options.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/helpers/auth-options.ts"],"sourcesContent":["import type { SecuritySchemeObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\n\ntype AuthOption = { label: string; payload: SecuritySchemeObject }\n\n/** Predefined authentication options */\nexport const authOptions: Record<string, AuthOption> = {\n  apiKeyCookie: {\n    label: 'API Key in Cookies',\n    payload: {\n      type: 'apiKey',\n      in: 'cookie',\n      name: 'apiKeyCookie',\n    },\n  },\n  apiKeyHeader: {\n    label: 'API Key in Headers',\n    payload: {\n      type: 'apiKey',\n      in: 'header',\n      name: 'apiKeyHeader',\n    },\n  },\n  apiKeyQuery: {\n    label: 'API Key in Query Params',\n    payload: {\n      type: 'apiKey',\n      in: 'query',\n      name: 'apiKeyQuery',\n    },\n  },\n  httpBasic: {\n    label: 'HTTP Basic',\n    payload: {\n      type: 'http',\n      scheme: 'basic',\n    },\n  },\n  httpBearer: {\n    label: 'HTTP Bearer',\n    payload: {\n      type: 'http',\n      scheme: 'bearer',\n    },\n  },\n  oauth2Implicit: {\n    label: 'Oauth2 Implicit Flow',\n    payload: {\n      type: 'oauth2',\n      flows: {\n        implicit: {\n          authorizationUrl: '',\n          refreshUrl: '',\n          scopes: {},\n        },\n      },\n    },\n  },\n  oauth2Password: {\n    label: 'Oauth2 Password Flow',\n    payload: {\n      type: 'oauth2',\n      flows: {\n        password: {\n          tokenUrl: '',\n          refreshUrl: '',\n          scopes: {},\n        },\n      },\n    },\n  },\n  oauth2ClientCredentials: {\n    label: 'Oauth2 Client Credentials',\n    payload: {\n      type: 'oauth2',\n      flows: {\n        clientCredentials: {\n          tokenUrl: '',\n          refreshUrl: '',\n          scopes: {},\n        },\n      },\n    },\n  },\n  oauth2AuthorizationFlow: {\n    label: 'Oauth2 Authorization Code',\n    payload: {\n      type: 'oauth2',\n      flows: {\n        authorizationCode: {\n          authorizationUrl: '',\n          tokenUrl: '',\n          refreshUrl: '',\n          'x-usePkce': 'no',\n          scopes: {},\n        },\n      },\n    },\n  },\n}\n"],"mappings":";;AAKA,IAAa,cAA0C;CACrD,cAAc;EACZ,OAAO;EACP,SAAS;GACP,MAAM;GACN,IAAI;GACJ,MAAM;GACP;EACF;CACD,cAAc;EACZ,OAAO;EACP,SAAS;GACP,MAAM;GACN,IAAI;GACJ,MAAM;GACP;EACF;CACD,aAAa;EACX,OAAO;EACP,SAAS;GACP,MAAM;GACN,IAAI;GACJ,MAAM;GACP;EACF;CACD,WAAW;EACT,OAAO;EACP,SAAS;GACP,MAAM;GACN,QAAQ;GACT;EACF;CACD,YAAY;EACV,OAAO;EACP,SAAS;GACP,MAAM;GACN,QAAQ;GACT;EACF;CACD,gBAAgB;EACd,OAAO;EACP,SAAS;GACP,MAAM;GACN,OAAO,EACL,UAAU;IACR,kBAAkB;IAClB,YAAY;IACZ,QAAQ,EAAE;IACX,EACF;GACF;EACF;CACD,gBAAgB;EACd,OAAO;EACP,SAAS;GACP,MAAM;GACN,OAAO,EACL,UAAU;IACR,UAAU;IACV,YAAY;IACZ,QAAQ,EAAE;IACX,EACF;GACF;EACF;CACD,yBAAyB;EACvB,OAAO;EACP,SAAS;GACP,MAAM;GACN,OAAO,EACL,mBAAmB;IACjB,UAAU;IACV,YAAY;IACZ,QAAQ,EAAE;IACX,EACF;GACF;EACF;CACD,yBAAyB;EACvB,OAAO;EACP,SAAS;GACP,MAAM;GACN,OAAO,EACL,mBAAmB;IACjB,kBAAkB;IAClB,UAAU;IACV,YAAY;IACZ,aAAa;IACb,QAAQ,EAAE;IACX,EACF;GACF;EACF;CACF"}

package/dist/v2/blocks/scalar-auth-selector-block/helpers/extract-security-scheme-secrets.js

@@ -0,0 +1,141 @@
+import { isObject } from "@scalar/helpers/object/is-object";
+import { objectEntries } from "@scalar/helpers/object/object-entries";
+//#region src/v2/blocks/scalar-auth-selector-block/helpers/extract-security-scheme-secrets.ts
+/**
+* Maps x-scalar-secret fields to their corresponding input field names.
+* This allows us to fall back to config values when auth store secrets are not available.
+*/
+var SECRET_TO_INPUT_FIELD_MAP = {
+	"x-scalar-secret-client-id": "x-scalar-client-id",
+	"x-scalar-secret-client-secret": "clientSecret",
+	"x-scalar-secret-password": "password",
+	"x-scalar-secret-redirect-uri": "x-scalar-redirect-uri",
+	"x-scalar-secret-token": "token",
+	"x-scalar-secret-username": "username",
+	"x-scalar-secret-auth-url": "authorizationUrl",
+	"x-scalar-secret-token-url": "tokenUrl"
+};
+var mergeFlowSecrets = (properties, configSecrets, authStoreSecrets = {}) => Object.fromEntries(properties.map((property) => {
+	return [property, authStoreSecrets[property] || configSecrets[property] || configSecrets[SECRET_TO_INPUT_FIELD_MAP[property]] || ""];
+}));
+var extractRefreshTokenSecret = (authStoreSecrets = {}) => {
+	const refreshToken = authStoreSecrets["x-scalar-secret-refresh-token"];
+	if (typeof refreshToken === "string") return { "x-scalar-secret-refresh-token": refreshToken };
+	return {};
+};
+var extractCredentialsLocation = (configSecrets, authStoreSecrets = {}) => {
+	const credentialsLocation = authStoreSecrets["x-scalar-credentials-location"] ?? configSecrets["x-scalar-credentials-location"];
+	return credentialsLocation ? { "x-scalar-credentials-location": credentialsLocation } : {};
+};
+/**
+* Extract flow secrets and selected scopes for OAuth-like flows.
+* Reused by both oauth2 and openIdConnect security schemes.
+*/
+var extractOAuthFlowSecrets = (flows, storeSecrets) => {
+	const selectedScopes = /* @__PURE__ */ new Set();
+	return {
+		flows: objectEntries(flows ?? {}).reduce((acc, [key, flow]) => {
+			if (!isObject(flow)) return acc;
+			const flowSelectedScopes = flow["selectedScopes"];
+			if (Array.isArray(flowSelectedScopes)) flowSelectedScopes.forEach((scope) => typeof scope === "string" && selectedScopes.add(scope));
+			if (key === "implicit") acc.implicit = {
+				...flow,
+				...mergeFlowSecrets([
+					"x-scalar-secret-client-id",
+					"x-scalar-secret-redirect-uri",
+					"x-scalar-secret-token",
+					"x-scalar-secret-auth-url"
+				], flow, storeSecrets?.implicit),
+				...extractRefreshTokenSecret(storeSecrets?.implicit)
+			};
+			if (key === "password") acc[key] = {
+				...flow,
+				...mergeFlowSecrets([
+					"x-scalar-secret-client-id",
+					"x-scalar-secret-client-secret",
+					"x-scalar-secret-username",
+					"x-scalar-secret-password",
+					"x-scalar-secret-token",
+					"x-scalar-secret-token-url"
+				], flow, storeSecrets?.password),
+				...extractCredentialsLocation(flow, storeSecrets?.password),
+				...extractRefreshTokenSecret(storeSecrets?.password)
+			};
+			if (key === "clientCredentials") acc[key] = {
+				...flow,
+				...mergeFlowSecrets([
+					"x-scalar-secret-client-id",
+					"x-scalar-secret-client-secret",
+					"x-scalar-secret-token",
+					"x-scalar-secret-token-url"
+				], flow, storeSecrets?.clientCredentials),
+				...extractCredentialsLocation(flow, storeSecrets?.clientCredentials),
+				...extractRefreshTokenSecret(storeSecrets?.clientCredentials)
+			};
+			if (key === "authorizationCode") acc[key] = {
+				...flow,
+				...mergeFlowSecrets([
+					"x-scalar-secret-client-id",
+					"x-scalar-secret-client-secret",
+					"x-scalar-secret-redirect-uri",
+					"x-scalar-secret-token",
+					"x-scalar-secret-auth-url",
+					"x-scalar-secret-token-url"
+				], flow, storeSecrets?.authorizationCode),
+				...extractCredentialsLocation(flow, storeSecrets?.authorizationCode),
+				...extractRefreshTokenSecret(storeSecrets?.authorizationCode)
+			};
+			return acc;
+		}, {}),
+		selectedScopes: Array.from(selectedScopes)
+	};
+};
+/** Extract the secrets from the config and the auth store */
+var extractSecuritySchemeSecrets = (scheme, authStore, name, documentSlug) => {
+	const secrets = authStore.getAuthSecrets(documentSlug, name);
+	if (scheme.type === "apiKey") {
+		const storeSecrets = secrets?.type === "apiKey" ? secrets : void 0;
+		return {
+			...scheme,
+			"x-scalar-secret-token": storeSecrets?.["x-scalar-secret-token"] || scheme.value || ""
+		};
+	}
+	if (scheme.type === "http") {
+		const storeSecrets = secrets?.type === "http" ? secrets : void 0;
+		return {
+			...scheme,
+			"x-scalar-secret-token": storeSecrets?.["x-scalar-secret-token"] || scheme.token || "",
+			"x-scalar-secret-username": storeSecrets?.["x-scalar-secret-username"] || scheme.username || "",
+			"x-scalar-secret-password": storeSecrets?.["x-scalar-secret-password"] || scheme.password || ""
+		};
+	}
+	if (scheme.type === "oauth2") {
+		const storeSecrets = secrets?.type === "oauth2" ? secrets : void 0;
+		const extracted = extractOAuthFlowSecrets(scheme.flows, storeSecrets);
+		const configuredDefaultScopes = Array.isArray(scheme["x-default-scopes"]) ? scheme["x-default-scopes"].filter((scope) => typeof scope === "string") : [];
+		const mergedDefaultScopes = Array.from(new Set([...configuredDefaultScopes, ...extracted.selectedScopes]));
+		return {
+			...scheme,
+			flows: extracted.flows,
+			"x-default-scopes": mergedDefaultScopes
+		};
+	}
+	if (scheme.type === "openIdConnect") {
+		const storeSecrets = secrets?.type === "openIdConnect" ? secrets : void 0;
+		const extracted = extractOAuthFlowSecrets({
+			implicit: storeSecrets?.implicit,
+			password: storeSecrets?.password,
+			clientCredentials: storeSecrets?.clientCredentials,
+			authorizationCode: storeSecrets?.authorizationCode
+		}, storeSecrets);
+		return {
+			...scheme,
+			...objectEntries(extracted.flows).length ? { flows: extracted.flows } : {}
+		};
+	}
+	return scheme;
+};
+//#endregion
+export { extractSecuritySchemeSecrets };
+
+//# sourceMappingURL=extract-security-scheme-secrets.js.map

package/dist/v2/blocks/scalar-auth-selector-block/helpers/extract-security-scheme-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-security-scheme-secrets.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/helpers/extract-security-scheme-secrets.ts"],"sourcesContent":["import { isObject } from '@scalar/helpers/object/is-object'\nimport { objectEntries } from '@scalar/helpers/object/object-entries'\nimport type { SecurityScheme } from '@scalar/types/entities'\nimport type { AuthStore, SecretsOAuthFlows, SecretsOpenIdConnect } from '@scalar/workspace-store/entities/auth'\nimport type { DeepPartial } from '@scalar/workspace-store/helpers/overrides-proxy'\nimport type { XScalarCredentialsLocation } from '@scalar/workspace-store/schemas/extensions/security/x-scalar-credentials-location'\nimport type {\n  OAuthFlowAuthorizationCode,\n  OAuthFlowClientCredentials,\n  OAuthFlowImplicit,\n  OAuthFlowPassword,\n} from '@scalar/workspace-store/schemas/v3.1/strict/oauth-flow'\nimport type { SecuritySchemeObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\n\nimport type {\n  ApiKeyObjectSecret,\n  HttpObjectSecret,\n  OAuth2ObjectSecret,\n  OAuthFlowAuthorizationCodeSecret,\n  OAuthFlowClientCredentialsSecret,\n  OAuthFlowImplicitSecret,\n  OAuthFlowPasswordSecret,\n  OAuthFlowsObjectSecret,\n  OpenIdConnectObjectSecret,\n  SecuritySchemeObjectSecret,\n} from './secret-types'\n\n/** A combined scheme that includes both the auth store secrets and a deep partial of the config auth */\nexport type ConfigAuthScheme = SecuritySchemeObject & DeepPartial<SecurityScheme>\n\n/**\n * Maps x-scalar-secret fields to their corresponding input field names.\n * This allows us to fall back to config values when auth store secrets are not available.\n */\nconst SECRET_TO_INPUT_FIELD_MAP = {\n  'x-scalar-secret-client-id': 'x-scalar-client-id',\n  'x-scalar-secret-client-secret': 'clientSecret',\n  'x-scalar-secret-password': 'password',\n  'x-scalar-secret-redirect-uri': 'x-scalar-redirect-uri',\n  'x-scalar-secret-token': 'token',\n  'x-scalar-secret-username': 'username',\n  'x-scalar-secret-auth-url': 'authorizationUrl',\n  'x-scalar-secret-token-url': 'tokenUrl',\n} as const\n\nconst mergeFlowSecrets = <const T extends readonly (keyof typeof SECRET_TO_INPUT_FIELD_MAP)[]>(\n  properties: T,\n  configSecrets: Record<string, unknown>,\n  authStoreSecrets: Record<string, unknown> = {},\n): Record<T[number], string> =>\n  Object.fromEntries(\n    properties.map((property) => {\n      // Super merge in order of priority: auth store > config > config input field > empty string\n      const value =\n        authStoreSecrets[property] ||\n        configSecrets[property] ||\n        configSecrets[SECRET_TO_INPUT_FIELD_MAP[property]] ||\n        ''\n\n      return [property, value]\n    }),\n  ) as Record<T[number], string>\n\nconst extractRefreshTokenSecret = (\n  authStoreSecrets: { 'x-scalar-secret-refresh-token'?: string } = {},\n): { 'x-scalar-secret-refresh-token'?: string } => {\n  const refreshToken = authStoreSecrets['x-scalar-secret-refresh-token']\n\n  if (typeof refreshToken === 'string') {\n    return { 'x-scalar-secret-refresh-token': refreshToken }\n  }\n\n  return {}\n}\n\nconst extractCredentialsLocation = (\n  configSecrets: Record<string, unknown>,\n  authStoreSecrets: {\n    'x-scalar-credentials-location'?: XScalarCredentialsLocation['x-scalar-credentials-location']\n  } = {},\n): XScalarCredentialsLocation => {\n  const credentialsLocation =\n    authStoreSecrets['x-scalar-credentials-location'] ??\n    (configSecrets['x-scalar-credentials-location'] as XScalarCredentialsLocation['x-scalar-credentials-location'])\n\n  return credentialsLocation ? { 'x-scalar-credentials-location': credentialsLocation } : {}\n}\n\n/**\n * Extract flow secrets and selected scopes for OAuth-like flows.\n * Reused by both oauth2 and openIdConnect security schemes.\n */\nconst extractOAuthFlowSecrets = (\n  flows: Record<string, unknown> | undefined,\n  storeSecrets?: Partial<SecretsOAuthFlows> | Partial<SecretsOpenIdConnect>,\n): {\n  flows: OAuthFlowsObjectSecret\n  selectedScopes: string[]\n} => {\n  const selectedScopes = new Set<string>()\n\n  const extractedFlows = objectEntries(flows ?? {}).reduce((acc, [key, flow]) => {\n    if (!isObject(flow)) {\n      return acc\n    }\n\n    // Store any selected scopes from the config\n    const flowSelectedScopes = flow['selectedScopes']\n    if (Array.isArray(flowSelectedScopes)) {\n      flowSelectedScopes.forEach((scope) => typeof scope === 'string' && selectedScopes.add(scope))\n    }\n\n    // Implicit flow\n    if (key === 'implicit') {\n      acc.implicit = {\n        ...(flow as OAuthFlowImplicit),\n        ...mergeFlowSecrets(\n          [\n            'x-scalar-secret-client-id',\n            'x-scalar-secret-redirect-uri',\n            'x-scalar-secret-token',\n            'x-scalar-secret-auth-url',\n          ],\n          flow,\n          storeSecrets?.implicit,\n        ),\n        ...extractRefreshTokenSecret(storeSecrets?.implicit),\n      } satisfies OAuthFlowImplicitSecret\n    }\n\n    // Password flow\n    if (key === 'password') {\n      acc[key] = {\n        ...(flow as OAuthFlowPassword),\n        ...mergeFlowSecrets(\n          [\n            'x-scalar-secret-client-id',\n            'x-scalar-secret-client-secret',\n            'x-scalar-secret-username',\n            'x-scalar-secret-password',\n            'x-scalar-secret-token',\n            'x-scalar-secret-token-url',\n          ],\n          flow,\n          storeSecrets?.password,\n        ),\n        ...extractCredentialsLocation(flow, storeSecrets?.password),\n        ...extractRefreshTokenSecret(storeSecrets?.password),\n      } satisfies OAuthFlowPasswordSecret\n    }\n\n    // Client credentials flow\n    if (key === 'clientCredentials') {\n      acc[key] = {\n        ...(flow as OAuthFlowClientCredentials),\n        ...mergeFlowSecrets(\n          [\n            'x-scalar-secret-client-id',\n            'x-scalar-secret-client-secret',\n            'x-scalar-secret-token',\n            'x-scalar-secret-token-url',\n          ],\n          flow,\n          storeSecrets?.clientCredentials,\n        ),\n        ...extractCredentialsLocation(flow, storeSecrets?.clientCredentials),\n        ...extractRefreshTokenSecret(storeSecrets?.clientCredentials),\n      } satisfies OAuthFlowClientCredentialsSecret\n    }\n\n    // Authorization code flow\n    if (key === 'authorizationCode') {\n      acc[key] = {\n        ...(flow as OAuthFlowAuthorizationCode),\n        ...mergeFlowSecrets(\n          [\n            'x-scalar-secret-client-id',\n            'x-scalar-secret-client-secret',\n            'x-scalar-secret-redirect-uri',\n            'x-scalar-secret-token',\n            'x-scalar-secret-auth-url',\n            'x-scalar-secret-token-url',\n          ],\n          flow,\n          storeSecrets?.authorizationCode,\n        ),\n        ...extractCredentialsLocation(flow, storeSecrets?.authorizationCode),\n        ...extractRefreshTokenSecret(storeSecrets?.authorizationCode),\n      } satisfies OAuthFlowAuthorizationCodeSecret\n    }\n\n    return acc\n  }, {} as OAuthFlowsObjectSecret)\n\n  return { flows: extractedFlows, selectedScopes: Array.from(selectedScopes) }\n}\n\n/** Extract the secrets from the config and the auth store */\nexport const extractSecuritySchemeSecrets = (\n  // Include the config fields\n  scheme: SecuritySchemeObject & DeepPartial<SecurityScheme>,\n  authStore: AuthStore,\n  name: string,\n  documentSlug: string,\n): SecuritySchemeObjectSecret => {\n  const secrets = authStore.getAuthSecrets(documentSlug, name)\n\n  // Handle API Key security schemes\n  if (scheme.type === 'apiKey') {\n    const storeSecrets = secrets?.type === 'apiKey' ? secrets : undefined\n    return {\n      ...scheme,\n      'x-scalar-secret-token': storeSecrets?.['x-scalar-secret-token'] || scheme.value || '',\n    } satisfies ApiKeyObjectSecret\n  }\n\n  // Handle HTTP Auth security schemes (e.g., Basic, Bearer)\n  if (scheme.type === 'http') {\n    const storeSecrets = secrets?.type === 'http' ? secrets : undefined\n    return {\n      ...scheme,\n      'x-scalar-secret-token': storeSecrets?.['x-scalar-secret-token'] || scheme.token || '',\n      'x-scalar-secret-username': storeSecrets?.['x-scalar-secret-username'] || scheme.username || '',\n      'x-scalar-secret-password': storeSecrets?.['x-scalar-secret-password'] || scheme.password || '',\n    } satisfies HttpObjectSecret\n  }\n\n  // Handle OAuth2 security schemes and all supported flows\n  if (scheme.type === 'oauth2') {\n    const storeSecrets = secrets?.type === 'oauth2' ? secrets : undefined\n    const extracted = extractOAuthFlowSecrets(scheme.flows, storeSecrets)\n    const configuredDefaultScopes = Array.isArray(scheme['x-default-scopes'])\n      ? scheme['x-default-scopes'].filter((scope): scope is string => typeof scope === 'string')\n      : []\n    const mergedDefaultScopes = Array.from(new Set([...configuredDefaultScopes, ...extracted.selectedScopes]))\n\n    return {\n      ...scheme,\n      flows: extracted.flows,\n      'x-default-scopes': mergedDefaultScopes,\n    } satisfies OAuth2ObjectSecret\n  }\n\n  // OpenID Connect uses auth-store-only discovered flows, but we expose them in OAuth-like flow format.\n  if (scheme.type === 'openIdConnect') {\n    const storeSecrets = secrets?.type === 'openIdConnect' ? secrets : undefined\n    const extracted = extractOAuthFlowSecrets(\n      {\n        implicit: storeSecrets?.implicit,\n        password: storeSecrets?.password,\n        clientCredentials: storeSecrets?.clientCredentials,\n        authorizationCode: storeSecrets?.authorizationCode,\n      },\n      storeSecrets,\n    )\n\n    return {\n      ...scheme,\n      ...(objectEntries(extracted.flows).length ? { flows: extracted.flows } : {}),\n    } as OpenIdConnectObjectSecret\n  }\n\n  return scheme as SecuritySchemeObjectSecret\n}\n"],"mappings":";;;;;;;AAkCA,IAAM,4BAA4B;CAChC,6BAA6B;CAC7B,iCAAiC;CACjC,4BAA4B;CAC5B,gCAAgC;CAChC,yBAAyB;CACzB,4BAA4B;CAC5B,4BAA4B;CAC5B,6BAA6B;CAC9B;AAED,IAAM,oBACJ,YACA,eACA,mBAA4C,EAAE,KAE9C,OAAO,YACL,WAAW,KAAK,aAAa;AAQ3B,QAAO,CAAC,UALN,iBAAiB,aACjB,cAAc,aACd,cAAc,0BAA0B,cACxC,GAEsB;EACxB,CACH;AAEH,IAAM,6BACJ,mBAAiE,EAAE,KAClB;CACjD,MAAM,eAAe,iBAAiB;AAEtC,KAAI,OAAO,iBAAiB,SAC1B,QAAO,EAAE,iCAAiC,cAAc;AAG1D,QAAO,EAAE;;AAGX,IAAM,8BACJ,eACA,mBAEI,EAAE,KACyB;CAC/B,MAAM,sBACJ,iBAAiB,oCAChB,cAAc;AAEjB,QAAO,sBAAsB,EAAE,iCAAiC,qBAAqB,GAAG,EAAE;;;;;;AAO5F,IAAM,2BACJ,OACA,iBAIG;CACH,MAAM,iCAAiB,IAAI,KAAa;AA+FxC,QAAO;EAAE,OA7Fc,cAAc,SAAS,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,KAAK,UAAU;AAC7E,OAAI,CAAC,SAAS,KAAK,CACjB,QAAO;GAIT,MAAM,qBAAqB,KAAK;AAChC,OAAI,MAAM,QAAQ,mBAAmB,CACnC,oBAAmB,SAAS,UAAU,OAAO,UAAU,YAAY,eAAe,IAAI,MAAM,CAAC;AAI/F,OAAI,QAAQ,WACV,KAAI,WAAW;IACb,GAAI;IACJ,GAAG,iBACD;KACE;KACA;KACA;KACA;KACD,EACD,MACA,cAAc,SACf;IACD,GAAG,0BAA0B,cAAc,SAAS;IACrD;AAIH,OAAI,QAAQ,WACV,KAAI,OAAO;IACT,GAAI;IACJ,GAAG,iBACD;KACE;KACA;KACA;KACA;KACA;KACA;KACD,EACD,MACA,cAAc,SACf;IACD,GAAG,2BAA2B,MAAM,cAAc,SAAS;IAC3D,GAAG,0BAA0B,cAAc,SAAS;IACrD;AAIH,OAAI,QAAQ,oBACV,KAAI,OAAO;IACT,GAAI;IACJ,GAAG,iBACD;KACE;KACA;KACA;KACA;KACD,EACD,MACA,cAAc,kBACf;IACD,GAAG,2BAA2B,MAAM,cAAc,kBAAkB;IACpE,GAAG,0BAA0B,cAAc,kBAAkB;IAC9D;AAIH,OAAI,QAAQ,oBACV,KAAI,OAAO;IACT,GAAI;IACJ,GAAG,iBACD;KACE;KACA;KACA;KACA;KACA;KACA;KACD,EACD,MACA,cAAc,kBACf;IACD,GAAG,2BAA2B,MAAM,cAAc,kBAAkB;IACpE,GAAG,0BAA0B,cAAc,kBAAkB;IAC9D;AAGH,UAAO;KACN,EAAE,CAA2B;EAEA,gBAAgB,MAAM,KAAK,eAAe;EAAE;;;AAI9E,IAAa,gCAEX,QACA,WACA,MACA,iBAC+B;CAC/B,MAAM,UAAU,UAAU,eAAe,cAAc,KAAK;AAG5D,KAAI,OAAO,SAAS,UAAU;EAC5B,MAAM,eAAe,SAAS,SAAS,WAAW,UAAU,KAAA;AAC5D,SAAO;GACL,GAAG;GACH,yBAAyB,eAAe,4BAA4B,OAAO,SAAS;GACrF;;AAIH,KAAI,OAAO,SAAS,QAAQ;EAC1B,MAAM,eAAe,SAAS,SAAS,SAAS,UAAU,KAAA;AAC1D,SAAO;GACL,GAAG;GACH,yBAAyB,eAAe,4BAA4B,OAAO,SAAS;GACpF,4BAA4B,eAAe,+BAA+B,OAAO,YAAY;GAC7F,4BAA4B,eAAe,+BAA+B,OAAO,YAAY;GAC9F;;AAIH,KAAI,OAAO,SAAS,UAAU;EAC5B,MAAM,eAAe,SAAS,SAAS,WAAW,UAAU,KAAA;EAC5D,MAAM,YAAY,wBAAwB,OAAO,OAAO,aAAa;EACrE,MAAM,0BAA0B,MAAM,QAAQ,OAAO,oBAAoB,GACrE,OAAO,oBAAoB,QAAQ,UAA2B,OAAO,UAAU,SAAS,GACxF,EAAE;EACN,MAAM,sBAAsB,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,yBAAyB,GAAG,UAAU,eAAe,CAAC,CAAC;AAE1G,SAAO;GACL,GAAG;GACH,OAAO,UAAU;GACjB,oBAAoB;GACrB;;AAIH,KAAI,OAAO,SAAS,iBAAiB;EACnC,MAAM,eAAe,SAAS,SAAS,kBAAkB,UAAU,KAAA;EACnE,MAAM,YAAY,wBAChB;GACE,UAAU,cAAc;GACxB,UAAU,cAAc;GACxB,mBAAmB,cAAc;GACjC,mBAAmB,cAAc;GAClC,EACD,aACD;AAED,SAAO;GACL,GAAG;GACH,GAAI,cAAc,UAAU,MAAM,CAAC,SAAS,EAAE,OAAO,UAAU,OAAO,GAAG,EAAE;GAC5E;;AAGH,QAAO"}

package/dist/v2/blocks/scalar-auth-selector-block/helpers/fetch-openid-connect-discovery.d.ts

@@ -1,5 +1,5 @@
 import { type Static } from '@scalar/typebox';
-import type { ErrorResponse } from '../../../../libs/errors';
+import type { ErrorResponse } from '../../../../libs/errors.js';
 /**
  * OpenID Connect Discovery Document (subset)
  * Represents the metadata fields consumed by the auth selector flow conversion.