@scalar/api-client 3.11.0 → 3.13.0

package/dist/v2/blocks/request-block/helpers/create-parameter-rows.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-parameter-rows.js","names":[],"sources":["../../../../../src/v2/blocks/request-block/helpers/create-parameter-rows.ts"],"sourcesContent":["import { getValueAtPath } from '@scalar/helpers/object/get-value-at-path'\nimport { isObject } from '@scalar/helpers/object/is-object'\nimport { getResolvedRef } from '@scalar/workspace-store/helpers/get-resolved-ref'\nimport { deSerializeParameter, getExample } from '@scalar/workspace-store/request-example'\nimport type {\n  ParameterObject,\n  ParameterWithSchemaObject,\n  ReferenceType,\n  SchemaObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { isObjectSchema } from '@scalar/workspace-store/schemas/v3.1/strict/type-guards'\n\nimport type { TableRow } from '../components/RequestTableRow.vue'\nimport { getParameterSchema } from './get-parameter-schema'\nimport { isParamDisabled } from './is-param-disabled'\n\ntype ParameterWithRequiredSchema = ParameterWithSchemaObject & {\n  schema: ReferenceType<SchemaObject>\n}\n\n/** Serialization mode for object-typed query parameters that we expand into multiple rows. */\ntype ExpansionMode = 'form' | 'deepObject'\n\nconst isParameterWithSchema = (parameter: ParameterObject): parameter is ParameterWithRequiredSchema =>\n  'schema' in parameter && parameter.schema !== undefined\n\nconst resolveSchema = (schema: unknown): SchemaObject | undefined => {\n  const resolvedSchema = getResolvedRef(schema as SchemaObject | { '$ref': string; '$ref-value': SchemaObject })\n\n  return resolvedSchema as SchemaObject | undefined\n}\n\n/**\n * Resolves the OpenAPI serialization style and explode flag for a parameter, falling back to the\n * spec defaults (style: 'form', explode: true when style is 'form').\n */\nconst getParameterStyleAndExplode = (parameter: ParameterObject): { style: string; explode: boolean } => {\n  const style = 'style' in parameter && parameter.style ? parameter.style : 'form'\n  const explode = 'explode' in parameter && parameter.explode !== undefined ? parameter.explode : style === 'form'\n\n  return { style, explode }\n}\n\n/**\n * Decides whether an object-typed query parameter should be expanded into one row per property,\n * and which expansion mode to use. Returns null when the parameter should stay as a single row\n * (non-query, non-object schema, or a serialization style we do not expand).\n */\nconst getExpansionMode = (parameter: ParameterObject, schema: SchemaObject | undefined): ExpansionMode | null => {\n  if (parameter.in !== 'query' || !isParameterWithSchema(parameter) || !schema || !isObjectSchema(schema)) {\n    return null\n  }\n\n  const { style, explode } = getParameterStyleAndExplode(parameter)\n  if (!explode) {\n    return null\n  }\n\n  if (style === 'form') {\n    return 'form'\n  }\n  if (style === 'deepObject') {\n    return 'deepObject'\n  }\n\n  return null\n}\n\nconst toTableValue = (value: unknown): string => {\n  if (value === undefined || value === null) {\n    return ''\n  }\n\n  if (Array.isArray(value)) {\n    return value.join(',')\n  }\n\n  if (typeof value === 'object') {\n    return JSON.stringify(value)\n  }\n\n  return String(value)\n}\n\nconst toPathKey = (path: readonly string[]): string => path.join('\\u0000')\n\nconst toTableRow = ({\n  parameter,\n  name,\n  value,\n  description,\n  schema,\n  isRequired,\n  isDisabled,\n  sourceParameterValuePath,\n}: {\n  parameter: ParameterObject\n  name: string\n  value: unknown\n  description: string | undefined\n  schema: SchemaObject | undefined\n  isRequired: boolean | undefined\n  isDisabled: boolean\n  sourceParameterValuePath?: string[]\n}): TableRow => ({\n  name,\n  value: toTableValue(value),\n  description,\n  schema,\n  isRequired,\n  isDisabled,\n  originalParameter: parameter,\n  sourceParameterValuePath,\n})\n\n/**\n * Builds the row name for an expanded property at a given value path. deepObject rows mirror the\n * wire format (`parent[a][b]`); form-style explode uses the bare top-level key.\n */\nconst getExpandedRowName = (parameter: ParameterObject, path: string[], mode: ExpansionMode): string =>\n  mode === 'deepObject' ? `${parameter.name}${path.map((segment) => `[${segment}]`).join('')}` : (path[0] ?? '')\n\n/** Build the single-row representation used when a parameter is not expanded. */\nconst toSingleParameterRow = (\n  parameter: ParameterObject,\n  schema: SchemaObject | undefined,\n  value: unknown,\n  isDisabled: boolean,\n): TableRow =>\n  toTableRow({\n    parameter,\n    name: parameter.name,\n    value,\n    description: parameter.description,\n    schema,\n    isRequired: parameter.required,\n    isDisabled,\n  })\n\n/**\n * Walks an object schema and produces one row per property.\n *\n * - In `form` mode (the OpenAPI default for query parameters) only the top-level properties are\n *   flattened, and each row is named after the property itself (`status`).\n * - In `deepObject` mode we recurse into nested objects and emit bracketed names that mirror the\n *   serialization on the wire (`filter[user][id]`).\n *\n * `pathPrefix` tracks the path inside the parent parameter value so the handler can later\n * reassemble all sibling rows back into a single object payload.\n */\nconst getExpandedPropertyRows = ({\n  parameter,\n  schema,\n  value,\n  pathPrefix,\n  namePrefix,\n  mode,\n  isDisabled,\n  hiddenValuePaths,\n  renamedValuePaths,\n  renameTargetPaths,\n}: {\n  parameter: ParameterObject\n  schema: Extract<SchemaObject, { type: 'object' }>\n  value: unknown\n  pathPrefix: string[]\n  namePrefix: string\n  mode: ExpansionMode\n  isDisabled: boolean\n  hiddenValuePaths: ReadonlySet<string>\n  renamedValuePaths: ReadonlyMap<string, string[]>\n  renameTargetPaths: ReadonlySet<string>\n}): TableRow[] => {\n  if (!schema.properties) {\n    return []\n  }\n\n  const requiredProperties = new Set(schema.required ?? [])\n\n  return Object.entries(schema.properties).flatMap(([propertyName, propertySchema]) => {\n    const resolvedPropertySchema = resolveSchema(propertySchema)\n    if (!resolvedPropertySchema) {\n      return []\n    }\n\n    const path = [...pathPrefix, propertyName]\n    const name = namePrefix ? `${namePrefix}[${propertyName}]` : propertyName\n\n    // When this property was renamed, the value lives at the typed key instead of the schema path.\n    // Keep the row in its original slot so it does not jump to the end of the table.\n    const renamedTo = renamedValuePaths.get(toPathKey(path))\n    const effectivePath = renamedTo ?? path\n\n    if (hiddenValuePaths.has(toPathKey(effectivePath))) {\n      return []\n    }\n\n    if (renamedTo) {\n      // The value move is debounced, so until it lands the value still sits at the old schema path.\n      // Fall back to it so the renamed row shows its value immediately instead of flickering empty.\n      const renamedValue = getValueAtPath(value, renamedTo)\n\n      return [\n        toTableRow({\n          parameter,\n          name: getExpandedRowName(parameter, renamedTo, mode),\n          value: renamedValue === undefined ? getValueAtPath(value, path) : renamedValue,\n          description: parameter.description,\n          // The renamed key no longer maps to the schema property, so it carries no schema.\n          schema: undefined,\n          isRequired: false,\n          isDisabled,\n          sourceParameterValuePath: renamedTo,\n        }),\n      ]\n    }\n\n    // Another property was renamed onto this path (for example \"a\" renamed to an existing \"b\").\n    // The renamed row already occupies this slot, so skip the schema-derived row to avoid rendering\n    // two rows for the same value path.\n    if (renameTargetPaths.has(toPathKey(path))) {\n      return []\n    }\n\n    // Only deepObject style recurses into nested objects. The OpenAPI 3.1 spec says form-style\n    // explode flattens only the top-level properties.\n    const shouldRecurse =\n      mode === 'deepObject' && isObjectSchema(resolvedPropertySchema) && Boolean(resolvedPropertySchema.properties)\n\n    if (shouldRecurse) {\n      return getExpandedPropertyRows({\n        parameter,\n        schema: resolvedPropertySchema,\n        value,\n        pathPrefix: path,\n        namePrefix: name,\n        mode,\n        isDisabled,\n        hiddenValuePaths,\n        renamedValuePaths,\n        renameTargetPaths,\n      })\n    }\n\n    return [\n      toTableRow({\n        parameter,\n        name,\n        value: getValueAtPath(value, path),\n        description: resolvedPropertySchema.description ?? parameter.description,\n        schema: resolvedPropertySchema,\n        isRequired: requiredProperties.has(propertyName),\n        isDisabled,\n        sourceParameterValuePath: path,\n      }),\n    ]\n  })\n}\n\n/**\n * Collects the leaf paths of an object value. In `form` mode only the top-level keys are leaves\n * (form-style explode does not flatten nested objects); in `deepObject` mode we recurse into nested\n * objects, mirroring how the rows and serialization are built.\n */\nconst collectValueLeafPaths = (value: unknown, mode: ExpansionMode): string[][] => {\n  if (!isObject(value)) {\n    return []\n  }\n\n  const paths: string[][] = []\n\n  const walk = (node: Record<string, unknown>, prefix: string[]): void => {\n    for (const [key, val] of Object.entries(node)) {\n      const path = [...prefix, key]\n\n      if (mode === 'deepObject' && isObject(val)) {\n        walk(val, path)\n      } else {\n        paths.push(path)\n      }\n    }\n  }\n\n  walk(value, [])\n\n  return paths\n}\n\n/**\n * Builds rows for value paths that the schema does not describe. This keeps user-edited keys (for\n * example a property that was renamed in the table) visible instead of snapping back to the\n * schema-derived rows on the next render.\n */\nconst getUnmappedValueRows = ({\n  parameter,\n  value,\n  schemaRows,\n  mode,\n  isDisabled,\n  renamedValuePaths,\n}: {\n  parameter: ParameterObject\n  value: unknown\n  schemaRows: TableRow[]\n  mode: ExpansionMode\n  isDisabled: boolean\n  renamedValuePaths: ReadonlyMap<string, string[]>\n}): TableRow[] => {\n  // Skip the renamed-away source paths too: the value move is debounced, so the old key lingers in\n  // the value for a moment and would otherwise flash as a duplicate row next to the renamed one.\n  const seen = new Set([\n    ...schemaRows.map((row) => toPathKey(row.sourceParameterValuePath ?? [])),\n    ...renamedValuePaths.keys(),\n  ])\n\n  // These rows always render: a key that carries a value should stay visible. The hidden-path set\n  // only suppresses empty schema suggestions, so it is intentionally not applied here.\n  return collectValueLeafPaths(value, mode)\n    .filter((path) => !seen.has(toPathKey(path)))\n    .map((path) =>\n      toTableRow({\n        parameter,\n        name: getExpandedRowName(parameter, path, mode),\n        value: getValueAtPath(value, path),\n        description: parameter.description,\n        schema: undefined,\n        isRequired: false,\n        isDisabled,\n        sourceParameterValuePath: path,\n      }),\n    )\n}\n\n/**\n * Turns a single OpenAPI parameter into one or more table rows.\n *\n * For object-typed query parameters with `form`/`explode: true` (the default) or `deepObject`\n * serialization, each property becomes its own row so the user can edit them individually,\n * matching how tools like Postman present the same parameter. Every other parameter passes\n * through as a single row.\n */\nexport const createParameterRows = (\n  parameter: ParameterObject,\n  exampleKey: string,\n  options: {\n    hiddenValuePaths?: readonly string[][]\n    renamedValuePaths?: readonly { from: string[]; to: string[] }[]\n  } = {},\n): TableRow[] => {\n  const example = getExample(parameter, exampleKey, undefined)\n  const isDisabled = isParamDisabled(parameter, example)\n  const schema = getParameterSchema(parameter)\n  const mode = getExpansionMode(parameter, schema)\n\n  // Non-expandable parameters: render as a single row.\n  if (mode === null || !schema || !isObjectSchema(schema)) {\n    return [toSingleParameterRow(parameter, schema, example?.value, isDisabled)]\n  }\n\n  // Expand into per-property rows. The deserialized value is used so existing per-property values\n  // can be displayed in the table even when the example arrives as a serialized string.\n  const value = example?.value === undefined ? undefined : deSerializeParameter(example.value, parameter)\n\n  // Fall back to a single row only when the schema has no properties to expand.\n  if (!schema.properties) {\n    return [toSingleParameterRow(parameter, schema, example?.value, isDisabled)]\n  }\n\n  const hiddenValuePaths = new Set(options.hiddenValuePaths?.map(toPathKey) ?? [])\n  const renamedValuePaths = new Map((options.renamedValuePaths ?? []).map(({ from, to }) => [toPathKey(from), to]))\n  // Paths a property was renamed onto, used to suppress the colliding schema-derived row.\n  const renameTargetPaths = new Set((options.renamedValuePaths ?? []).map(({ to }) => toPathKey(to)))\n\n  const rows = getExpandedPropertyRows({\n    parameter,\n    schema,\n    value,\n    pathPrefix: [],\n    // deepObject names every row with a `parent[child]` prefix; form-style names use bare property names.\n    namePrefix: mode === 'deepObject' ? parameter.name : '',\n    mode,\n    isDisabled,\n    hiddenValuePaths,\n    renamedValuePaths,\n    renameTargetPaths,\n  })\n\n  // Surface keys present in the value but not in the schema (for example a renamed property) so the\n  // edited key keeps showing up instead of snapping back to the schema-derived rows.\n  const unmappedRows = getUnmappedValueRows({\n    parameter,\n    value,\n    schemaRows: rows,\n    mode,\n    isDisabled,\n    renamedValuePaths,\n  })\n\n  return [...rows, ...unmappedRows]\n}\n"],"mappings":";;;;;;;;AAuBA,IAAM,yBAAyB,cAC7B,YAAY,aAAa,UAAU,WAAW,KAAA;AAEhD,IAAM,iBAAiB,WAA8C;AAGnE,QAFuB,eAAe,OAAwE;;;;;;AAShH,IAAM,+BAA+B,cAAoE;CACvG,MAAM,QAAQ,WAAW,aAAa,UAAU,QAAQ,UAAU,QAAQ;AAG1E,QAAO;EAAE;EAAO,SAFA,aAAa,aAAa,UAAU,YAAY,KAAA,IAAY,UAAU,UAAU,UAAU;EAEjF;;;;;;;AAQ3B,IAAM,oBAAoB,WAA4B,WAA2D;AAC/G,KAAI,UAAU,OAAO,WAAW,CAAC,sBAAsB,UAAU,IAAI,CAAC,UAAU,CAAC,eAAe,OAAO,CACrG,QAAO;CAGT,MAAM,EAAE,OAAO,YAAY,4BAA4B,UAAU;AACjE,KAAI,CAAC,QACH,QAAO;AAGT,KAAI,UAAU,OACZ,QAAO;AAET,KAAI,UAAU,aACZ,QAAO;AAGT,QAAO;;AAGT,IAAM,gBAAgB,UAA2B;AAC/C,KAAI,UAAU,KAAA,KAAa,UAAU,KACnC,QAAO;AAGT,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,IAAI;AAGxB,KAAI,OAAO,UAAU,SACnB,QAAO,KAAK,UAAU,MAAM;AAG9B,QAAO,OAAO,MAAM;;AAGtB,IAAM,aAAa,SAAoC,KAAK,KAAK,KAAS;AAE1E,IAAM,cAAc,EAClB,WACA,MACA,OACA,aACA,QACA,YACA,YACA,gCAUe;CACf;CACA,OAAO,aAAa,MAAM;CAC1B;CACA;CACA;CACA;CACA,mBAAmB;CACnB;CACD;;;;;AAMD,IAAM,sBAAsB,WAA4B,MAAgB,SACtE,SAAS,eAAe,GAAG,UAAU,OAAO,KAAK,KAAK,YAAY,IAAI,QAAQ,GAAG,CAAC,KAAK,GAAG,KAAM,KAAK,MAAM;;AAG7G,IAAM,wBACJ,WACA,QACA,OACA,eAEA,WAAW;CACT;CACA,MAAM,UAAU;CAChB;CACA,aAAa,UAAU;CACvB;CACA,YAAY,UAAU;CACtB;CACD,CAAC;;;;;;;;;;;;AAaJ,IAAM,2BAA2B,EAC/B,WACA,QACA,OACA,YACA,YACA,MACA,YACA,kBACA,mBACA,wBAYgB;AAChB,KAAI,CAAC,OAAO,WACV,QAAO,EAAE;CAGX,MAAM,qBAAqB,IAAI,IAAI,OAAO,YAAY,EAAE,CAAC;AAEzD,QAAO,OAAO,QAAQ,OAAO,WAAW,CAAC,SAAS,CAAC,cAAc,oBAAoB;EACnF,MAAM,yBAAyB,cAAc,eAAe;AAC5D,MAAI,CAAC,uBACH,QAAO,EAAE;EAGX,MAAM,OAAO,CAAC,GAAG,YAAY,aAAa;EAC1C,MAAM,OAAO,aAAa,GAAG,WAAW,GAAG,aAAa,KAAK;EAI7D,MAAM,YAAY,kBAAkB,IAAI,UAAU,KAAK,CAAC;EACxD,MAAM,gBAAgB,aAAa;AAEnC,MAAI,iBAAiB,IAAI,UAAU,cAAc,CAAC,CAChD,QAAO,EAAE;AAGX,MAAI,WAAW;GAGb,MAAM,eAAe,eAAe,OAAO,UAAU;AAErD,UAAO,CACL,WAAW;IACT;IACA,MAAM,mBAAmB,WAAW,WAAW,KAAK;IACpD,OAAO,iBAAiB,KAAA,IAAY,eAAe,OAAO,KAAK,GAAG;IAClE,aAAa,UAAU;IAEvB,QAAQ,KAAA;IACR,YAAY;IACZ;IACA,0BAA0B;IAC3B,CAAC,CACH;;AAMH,MAAI,kBAAkB,IAAI,UAAU,KAAK,CAAC,CACxC,QAAO,EAAE;AAQX,MAFE,SAAS,gBAAgB,eAAe,uBAAuB,IAAI,QAAQ,uBAAuB,WAAW,CAG7G,QAAO,wBAAwB;GAC7B;GACA,QAAQ;GACR;GACA,YAAY;GACZ,YAAY;GACZ;GACA;GACA;GACA;GACA;GACD,CAAC;AAGJ,SAAO,CACL,WAAW;GACT;GACA;GACA,OAAO,eAAe,OAAO,KAAK;GAClC,aAAa,uBAAuB,eAAe,UAAU;GAC7D,QAAQ;GACR,YAAY,mBAAmB,IAAI,aAAa;GAChD;GACA,0BAA0B;GAC3B,CAAC,CACH;GACD;;;;;;;AAQJ,IAAM,yBAAyB,OAAgB,SAAoC;AACjF,KAAI,CAAC,SAAS,MAAM,CAClB,QAAO,EAAE;CAGX,MAAM,QAAoB,EAAE;CAE5B,MAAM,QAAQ,MAA+B,WAA2B;AACtE,OAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,KAAK,EAAE;GAC7C,MAAM,OAAO,CAAC,GAAG,QAAQ,IAAI;AAE7B,OAAI,SAAS,gBAAgB,SAAS,IAAI,CACxC,MAAK,KAAK,KAAK;OAEf,OAAM,KAAK,KAAK;;;AAKtB,MAAK,OAAO,EAAE,CAAC;AAEf,QAAO;;;;;;;AAQT,IAAM,wBAAwB,EAC5B,WACA,OACA,YACA,MACA,YACA,wBAQgB;CAGhB,MAAM,OAAO,IAAI,IAAI,CACnB,GAAG,WAAW,KAAK,QAAQ,UAAU,IAAI,4BAA4B,EAAE,CAAC,CAAC,EACzE,GAAG,kBAAkB,MAAM,CAC5B,CAAC;AAIF,QAAO,sBAAsB,OAAO,KAAK,CACtC,QAAQ,SAAS,CAAC,KAAK,IAAI,UAAU,KAAK,CAAC,CAAC,CAC5C,KAAK,SACJ,WAAW;EACT;EACA,MAAM,mBAAmB,WAAW,MAAM,KAAK;EAC/C,OAAO,eAAe,OAAO,KAAK;EAClC,aAAa,UAAU;EACvB,QAAQ,KAAA;EACR,YAAY;EACZ;EACA,0BAA0B;EAC3B,CAAC,CACH;;;;;;;;;;AAWL,IAAa,uBACX,WACA,YACA,UAGI,EAAE,KACS;CACf,MAAM,UAAU,WAAW,WAAW,YAAY,KAAA,EAAU;CAC5D,MAAM,aAAa,gBAAgB,WAAW,QAAQ;CACtD,MAAM,SAAS,mBAAmB,UAAU;CAC5C,MAAM,OAAO,iBAAiB,WAAW,OAAO;AAGhD,KAAI,SAAS,QAAQ,CAAC,UAAU,CAAC,eAAe,OAAO,CACrD,QAAO,CAAC,qBAAqB,WAAW,QAAQ,SAAS,OAAO,WAAW,CAAC;CAK9E,MAAM,QAAQ,SAAS,UAAU,KAAA,IAAY,KAAA,IAAY,qBAAqB,QAAQ,OAAO,UAAU;AAGvG,KAAI,CAAC,OAAO,WACV,QAAO,CAAC,qBAAqB,WAAW,QAAQ,SAAS,OAAO,WAAW,CAAC;CAG9E,MAAM,mBAAmB,IAAI,IAAI,QAAQ,kBAAkB,IAAI,UAAU,IAAI,EAAE,CAAC;CAChF,MAAM,oBAAoB,IAAI,KAAK,QAAQ,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,UAAU,KAAK,EAAE,GAAG,CAAC,CAAC;CAEjH,MAAM,oBAAoB,IAAI,KAAK,QAAQ,qBAAqB,EAAE,EAAE,KAAK,EAAE,SAAS,UAAU,GAAG,CAAC,CAAC;CAEnG,MAAM,OAAO,wBAAwB;EACnC;EACA;EACA;EACA,YAAY,EAAE;EAEd,YAAY,SAAS,eAAe,UAAU,OAAO;EACrD;EACA;EACA;EACA;EACA;EACD,CAAC;CAIF,MAAM,eAAe,qBAAqB;EACxC;EACA;EACA,YAAY;EACZ;EACA;EACA;EACD,CAAC;AAEF,QAAO,CAAC,GAAG,MAAM,GAAG,aAAa"}
+{"version":3,"file":"create-parameter-rows.js","names":[],"sources":["../../../../../src/v2/blocks/request-block/helpers/create-parameter-rows.ts"],"sourcesContent":["import { getValueAtPath } from '@scalar/helpers/object/get-value-at-path'\nimport { isObject } from '@scalar/helpers/object/is-object'\nimport { getResolvedRef } from '@scalar/workspace-store/helpers/get-resolved-ref'\nimport { deSerializeParameter, getExample, isParamDisabled } from '@scalar/workspace-store/request-example'\nimport type {\n  ParameterObject,\n  ParameterWithSchemaObject,\n  ReferenceType,\n  SchemaObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { isArraySchema, isObjectSchema } from '@scalar/workspace-store/schemas/v3.1/strict/type-guards'\n\nimport type { TableRow } from '../components/RequestTableRow.vue'\nimport { getParameterSchema } from './get-parameter-schema'\n\ntype ParameterWithRequiredSchema = ParameterWithSchemaObject & {\n  schema: ReferenceType<SchemaObject>\n}\n\n/** Serialization mode for object-typed query parameters that we expand into multiple rows. */\ntype ExpansionMode = 'form' | 'deepObject'\n\nconst isParameterWithSchema = (parameter: ParameterObject): parameter is ParameterWithRequiredSchema =>\n  'schema' in parameter && parameter.schema !== undefined\n\nconst resolveSchema = (schema: unknown): SchemaObject | undefined => {\n  const resolvedSchema = getResolvedRef(schema as SchemaObject | { '$ref': string; '$ref-value': SchemaObject })\n\n  return resolvedSchema as SchemaObject | undefined\n}\n\n/**\n * Resolves the OpenAPI serialization style and explode flag for a parameter, falling back to the\n * spec defaults (style: 'form', explode: true when style is 'form').\n */\nconst getParameterStyleAndExplode = (parameter: ParameterObject): { style: string; explode: boolean } => {\n  const style = 'style' in parameter && parameter.style ? parameter.style : 'form'\n  const explode = 'explode' in parameter && parameter.explode !== undefined ? parameter.explode : style === 'form'\n\n  return { style, explode }\n}\n\n/**\n * Decides whether an object-typed query parameter should be expanded into one row per property,\n * and which expansion mode to use. Returns null when the parameter should stay as a single row\n * (non-query, non-object schema, or a serialization style we do not expand).\n */\nconst getExpansionMode = (parameter: ParameterObject, schema: SchemaObject | undefined): ExpansionMode | null => {\n  if (parameter.in !== 'query' || !isParameterWithSchema(parameter) || !schema || !isObjectSchema(schema)) {\n    return null\n  }\n\n  const { style, explode } = getParameterStyleAndExplode(parameter)\n  if (!explode) {\n    return null\n  }\n\n  if (style === 'form') {\n    return 'form'\n  }\n  if (style === 'deepObject') {\n    return 'deepObject'\n  }\n\n  return null\n}\n\nconst toTableValue = (value: unknown): string => {\n  if (value === undefined || value === null) {\n    return ''\n  }\n\n  if (Array.isArray(value)) {\n    return value.join(',')\n  }\n\n  if (typeof value === 'object') {\n    return JSON.stringify(value)\n  }\n\n  return String(value)\n}\n\nconst toPathKey = (path: readonly string[]): string => path.join('\\u0000')\n\nconst toTableRow = ({\n  parameter,\n  name,\n  value,\n  description,\n  schema,\n  isRequired,\n  isDisabled,\n  sourceParameterValuePath,\n}: {\n  parameter: ParameterObject\n  name: string\n  value: unknown\n  description: string | undefined\n  schema: SchemaObject | undefined\n  isRequired: boolean | undefined\n  isDisabled: boolean\n  sourceParameterValuePath?: string[]\n}): TableRow => ({\n  name,\n  value: toTableValue(value),\n  description,\n  schema,\n  isRequired,\n  isDisabled,\n  originalParameter: parameter,\n  sourceParameterValuePath,\n})\n\n/**\n * Builds the row name for an expanded property at a given value path. deepObject rows mirror the\n * wire format (`parent[a][b]`); form-style explode uses the bare top-level key.\n */\nconst getExpandedRowName = (parameter: ParameterObject, path: string[], mode: ExpansionMode): string =>\n  mode === 'deepObject' ? `${parameter.name}${path.map((segment) => `[${segment}]`).join('')}` : (path[0] ?? '')\n\n/**\n * Appends the display-only trailing `[]` to deepObject array leaves so the name matches the\n * serialized `parent[ids][]=1&parent[ids][]=2` form. The bracket is display-only — the row's\n * `sourceParameterValuePath` stays bracket-free. It also lets write-back recognize the leaf as an\n * array even on renamed and unmapped rows, which carry no schema.\n */\nconst withArrayBracket = (name: string, mode: ExpansionMode, isArray: boolean): string =>\n  mode === 'deepObject' && isArray ? `${name}[]` : name\n\n/** Build the single-row representation used when a parameter is not expanded. */\nconst toSingleParameterRow = (\n  parameter: ParameterObject,\n  schema: SchemaObject | undefined,\n  value: unknown,\n  isDisabled: boolean,\n): TableRow =>\n  toTableRow({\n    parameter,\n    name: parameter.name,\n    value,\n    description: parameter.description,\n    schema,\n    isRequired: parameter.required,\n    isDisabled,\n  })\n\n/**\n * Walks an object schema and produces one row per property.\n *\n * - In `form` mode (the OpenAPI default for query parameters) only the top-level properties are\n *   flattened, and each row is named after the property itself (`status`).\n * - In `deepObject` mode we recurse into nested objects and emit bracketed names that mirror the\n *   serialization on the wire (`filter[user][id]`).\n *\n * `pathPrefix` tracks the path inside the parent parameter value so the handler can later\n * reassemble all sibling rows back into a single object payload.\n */\nconst getExpandedPropertyRows = ({\n  parameter,\n  schema,\n  value,\n  pathPrefix,\n  namePrefix,\n  mode,\n  isDisabled,\n  hiddenValuePaths,\n  renamedValuePaths,\n  renameTargetPaths,\n}: {\n  parameter: ParameterObject\n  schema: Extract<SchemaObject, { type: 'object' }>\n  value: unknown\n  pathPrefix: string[]\n  namePrefix: string\n  mode: ExpansionMode\n  isDisabled: boolean\n  hiddenValuePaths: ReadonlySet<string>\n  renamedValuePaths: ReadonlyMap<string, string[]>\n  renameTargetPaths: ReadonlySet<string>\n}): TableRow[] => {\n  if (!schema.properties) {\n    return []\n  }\n\n  const requiredProperties = new Set(schema.required ?? [])\n\n  return Object.entries(schema.properties).flatMap(([propertyName, propertySchema]) => {\n    const resolvedPropertySchema = resolveSchema(propertySchema)\n    if (!resolvedPropertySchema) {\n      return []\n    }\n\n    const path = [...pathPrefix, propertyName]\n    const name = namePrefix ? `${namePrefix}[${propertyName}]` : propertyName\n\n    // When this property was renamed, the value lives at the typed key instead of the schema path.\n    // Keep the row in its original slot so it does not jump to the end of the table.\n    const renamedTo = renamedValuePaths.get(toPathKey(path))\n    const effectivePath = renamedTo ?? path\n\n    if (hiddenValuePaths.has(toPathKey(effectivePath))) {\n      return []\n    }\n\n    if (renamedTo) {\n      // The value move is debounced, so until it lands the value still sits at the old schema path.\n      // Fall back to it so the renamed row shows its value immediately instead of flickering empty.\n      const renamedValue = getValueAtPath(value, renamedTo)\n      const effectiveValue = renamedValue === undefined ? getValueAtPath(value, path) : renamedValue\n\n      return [\n        toTableRow({\n          parameter,\n          // The renamed key carries no schema, so the value's array-ness drives the `[]` marker.\n          name: withArrayBracket(getExpandedRowName(parameter, renamedTo, mode), mode, Array.isArray(effectiveValue)),\n          value: effectiveValue,\n          description: parameter.description,\n          // The renamed key no longer maps to the schema property, so it carries no schema.\n          schema: undefined,\n          isRequired: false,\n          isDisabled,\n          sourceParameterValuePath: renamedTo,\n        }),\n      ]\n    }\n\n    // Another property was renamed onto this path (for example \"a\" renamed to an existing \"b\").\n    // The renamed row already occupies this slot, so skip the schema-derived row to avoid rendering\n    // two rows for the same value path.\n    if (renameTargetPaths.has(toPathKey(path))) {\n      return []\n    }\n\n    // Only deepObject style recurses into nested objects. The OpenAPI 3.1 spec says form-style\n    // explode flattens only the top-level properties.\n    const shouldRecurse =\n      mode === 'deepObject' && isObjectSchema(resolvedPropertySchema) && Boolean(resolvedPropertySchema.properties)\n\n    if (shouldRecurse) {\n      return getExpandedPropertyRows({\n        parameter,\n        schema: resolvedPropertySchema,\n        value,\n        pathPrefix: path,\n        namePrefix: name,\n        mode,\n        isDisabled,\n        hiddenValuePaths,\n        renamedValuePaths,\n        renameTargetPaths,\n      })\n    }\n\n    const leafValue = getValueAtPath(value, path)\n\n    // deepObject array values serialize with the trailing-bracket convention\n    // (filter[ids][]=1&filter[ids][]=2), so mirror that in the displayed name. We base this on the\n    // resolved value too, since the schema can be a composition (anyOf) that hides the array type.\n    const displayName = withArrayBracket(name, mode, isArraySchema(resolvedPropertySchema) || Array.isArray(leafValue))\n\n    return [\n      toTableRow({\n        parameter,\n        name: displayName,\n        value: leafValue,\n        description: resolvedPropertySchema.description ?? parameter.description,\n        schema: resolvedPropertySchema,\n        isRequired: requiredProperties.has(propertyName),\n        isDisabled,\n        sourceParameterValuePath: path,\n      }),\n    ]\n  })\n}\n\n/**\n * Collects the leaf paths of an object value. In `form` mode only the top-level keys are leaves\n * (form-style explode does not flatten nested objects); in `deepObject` mode we recurse into nested\n * objects, mirroring how the rows and serialization are built.\n */\nconst collectValueLeafPaths = (value: unknown, mode: ExpansionMode): string[][] => {\n  if (!isObject(value)) {\n    return []\n  }\n\n  const paths: string[][] = []\n\n  const walk = (node: Record<string, unknown>, prefix: string[]): void => {\n    for (const [key, val] of Object.entries(node)) {\n      const path = [...prefix, key]\n\n      if (mode === 'deepObject' && isObject(val)) {\n        walk(val, path)\n      } else {\n        paths.push(path)\n      }\n    }\n  }\n\n  walk(value, [])\n\n  return paths\n}\n\n/**\n * Builds rows for value paths that the schema does not describe. This keeps user-edited keys (for\n * example a property that was renamed in the table) visible instead of snapping back to the\n * schema-derived rows on the next render.\n */\nconst getUnmappedValueRows = ({\n  parameter,\n  value,\n  schemaRows,\n  mode,\n  isDisabled,\n  renamedValuePaths,\n}: {\n  parameter: ParameterObject\n  value: unknown\n  schemaRows: TableRow[]\n  mode: ExpansionMode\n  isDisabled: boolean\n  renamedValuePaths: ReadonlyMap<string, string[]>\n}): TableRow[] => {\n  // Skip the renamed-away source paths too: the value move is debounced, so the old key lingers in\n  // the value for a moment and would otherwise flash as a duplicate row next to the renamed one.\n  const seen = new Set([\n    ...schemaRows.map((row) => toPathKey(row.sourceParameterValuePath ?? [])),\n    ...renamedValuePaths.keys(),\n  ])\n\n  // These rows always render: a key that carries a value should stay visible. The hidden-path set\n  // only suppresses empty schema suggestions, so it is intentionally not applied here.\n  return collectValueLeafPaths(value, mode)\n    .filter((path) => !seen.has(toPathKey(path)))\n    .map((path) => {\n      const leafValue = getValueAtPath(value, path)\n\n      return toTableRow({\n        parameter,\n        // No schema describes these rows, so the value's array-ness drives the `[]` marker.\n        name: withArrayBracket(getExpandedRowName(parameter, path, mode), mode, Array.isArray(leafValue)),\n        value: leafValue,\n        description: parameter.description,\n        schema: undefined,\n        isRequired: false,\n        isDisabled,\n        sourceParameterValuePath: path,\n      })\n    })\n}\n\n/**\n * Turns a single OpenAPI parameter into one or more table rows.\n *\n * For object-typed query parameters with `form`/`explode: true` (the default) or `deepObject`\n * serialization, each property becomes its own row so the user can edit them individually,\n * matching how tools like Postman present the same parameter. Every other parameter passes\n * through as a single row.\n */\nexport const createParameterRows = (\n  parameter: ParameterObject,\n  exampleKey: string,\n  options: {\n    hiddenValuePaths?: readonly string[][]\n    renamedValuePaths?: readonly { from: string[]; to: string[] }[]\n  } = {},\n): TableRow[] => {\n  const example = getExample(parameter, exampleKey, undefined)\n  const isDisabled = isParamDisabled(parameter, example)\n  const schema = getParameterSchema(parameter)\n  const mode = getExpansionMode(parameter, schema)\n\n  // Non-expandable parameters: render as a single row.\n  if (mode === null || !schema || !isObjectSchema(schema)) {\n    return [toSingleParameterRow(parameter, schema, example?.value, isDisabled)]\n  }\n\n  // Expand into per-property rows. The deserialized value is used so existing per-property values\n  // can be displayed in the table even when the example arrives as a serialized string.\n  const value = example?.value === undefined ? undefined : deSerializeParameter(example.value, parameter)\n\n  // Fall back to a single row only when the schema has no properties to expand.\n  if (!schema.properties) {\n    return [toSingleParameterRow(parameter, schema, example?.value, isDisabled)]\n  }\n\n  const hiddenValuePaths = new Set(options.hiddenValuePaths?.map(toPathKey) ?? [])\n  const renamedValuePaths = new Map((options.renamedValuePaths ?? []).map(({ from, to }) => [toPathKey(from), to]))\n  // Paths a property was renamed onto, used to suppress the colliding schema-derived row.\n  const renameTargetPaths = new Set((options.renamedValuePaths ?? []).map(({ to }) => toPathKey(to)))\n\n  const rows = getExpandedPropertyRows({\n    parameter,\n    schema,\n    value,\n    pathPrefix: [],\n    // deepObject names every row with a `parent[child]` prefix; form-style names use bare property names.\n    namePrefix: mode === 'deepObject' ? parameter.name : '',\n    mode,\n    isDisabled,\n    hiddenValuePaths,\n    renamedValuePaths,\n    renameTargetPaths,\n  })\n\n  // Surface keys present in the value but not in the schema (for example a renamed property) so the\n  // edited key keeps showing up instead of snapping back to the schema-derived rows.\n  const unmappedRows = getUnmappedValueRows({\n    parameter,\n    value,\n    schemaRows: rows,\n    mode,\n    isDisabled,\n    renamedValuePaths,\n  })\n\n  return [...rows, ...unmappedRows]\n}\n"],"mappings":";;;;;;;AAsBA,IAAM,yBAAyB,cAC7B,YAAY,aAAa,UAAU,WAAW,KAAA;AAEhD,IAAM,iBAAiB,WAA8C;AAGnE,QAFuB,eAAe,OAAwE;;;;;;AAShH,IAAM,+BAA+B,cAAoE;CACvG,MAAM,QAAQ,WAAW,aAAa,UAAU,QAAQ,UAAU,QAAQ;AAG1E,QAAO;EAAE;EAAO,SAFA,aAAa,aAAa,UAAU,YAAY,KAAA,IAAY,UAAU,UAAU,UAAU;EAEjF;;;;;;;AAQ3B,IAAM,oBAAoB,WAA4B,WAA2D;AAC/G,KAAI,UAAU,OAAO,WAAW,CAAC,sBAAsB,UAAU,IAAI,CAAC,UAAU,CAAC,eAAe,OAAO,CACrG,QAAO;CAGT,MAAM,EAAE,OAAO,YAAY,4BAA4B,UAAU;AACjE,KAAI,CAAC,QACH,QAAO;AAGT,KAAI,UAAU,OACZ,QAAO;AAET,KAAI,UAAU,aACZ,QAAO;AAGT,QAAO;;AAGT,IAAM,gBAAgB,UAA2B;AAC/C,KAAI,UAAU,KAAA,KAAa,UAAU,KACnC,QAAO;AAGT,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,IAAI;AAGxB,KAAI,OAAO,UAAU,SACnB,QAAO,KAAK,UAAU,MAAM;AAG9B,QAAO,OAAO,MAAM;;AAGtB,IAAM,aAAa,SAAoC,KAAK,KAAK,KAAS;AAE1E,IAAM,cAAc,EAClB,WACA,MACA,OACA,aACA,QACA,YACA,YACA,gCAUe;CACf;CACA,OAAO,aAAa,MAAM;CAC1B;CACA;CACA;CACA;CACA,mBAAmB;CACnB;CACD;;;;;AAMD,IAAM,sBAAsB,WAA4B,MAAgB,SACtE,SAAS,eAAe,GAAG,UAAU,OAAO,KAAK,KAAK,YAAY,IAAI,QAAQ,GAAG,CAAC,KAAK,GAAG,KAAM,KAAK,MAAM;;;;;;;AAQ7G,IAAM,oBAAoB,MAAc,MAAqB,YAC3D,SAAS,gBAAgB,UAAU,GAAG,KAAK,MAAM;;AAGnD,IAAM,wBACJ,WACA,QACA,OACA,eAEA,WAAW;CACT;CACA,MAAM,UAAU;CAChB;CACA,aAAa,UAAU;CACvB;CACA,YAAY,UAAU;CACtB;CACD,CAAC;;;;;;;;;;;;AAaJ,IAAM,2BAA2B,EAC/B,WACA,QACA,OACA,YACA,YACA,MACA,YACA,kBACA,mBACA,wBAYgB;AAChB,KAAI,CAAC,OAAO,WACV,QAAO,EAAE;CAGX,MAAM,qBAAqB,IAAI,IAAI,OAAO,YAAY,EAAE,CAAC;AAEzD,QAAO,OAAO,QAAQ,OAAO,WAAW,CAAC,SAAS,CAAC,cAAc,oBAAoB;EACnF,MAAM,yBAAyB,cAAc,eAAe;AAC5D,MAAI,CAAC,uBACH,QAAO,EAAE;EAGX,MAAM,OAAO,CAAC,GAAG,YAAY,aAAa;EAC1C,MAAM,OAAO,aAAa,GAAG,WAAW,GAAG,aAAa,KAAK;EAI7D,MAAM,YAAY,kBAAkB,IAAI,UAAU,KAAK,CAAC;EACxD,MAAM,gBAAgB,aAAa;AAEnC,MAAI,iBAAiB,IAAI,UAAU,cAAc,CAAC,CAChD,QAAO,EAAE;AAGX,MAAI,WAAW;GAGb,MAAM,eAAe,eAAe,OAAO,UAAU;GACrD,MAAM,iBAAiB,iBAAiB,KAAA,IAAY,eAAe,OAAO,KAAK,GAAG;AAElF,UAAO,CACL,WAAW;IACT;IAEA,MAAM,iBAAiB,mBAAmB,WAAW,WAAW,KAAK,EAAE,MAAM,MAAM,QAAQ,eAAe,CAAC;IAC3G,OAAO;IACP,aAAa,UAAU;IAEvB,QAAQ,KAAA;IACR,YAAY;IACZ;IACA,0BAA0B;IAC3B,CAAC,CACH;;AAMH,MAAI,kBAAkB,IAAI,UAAU,KAAK,CAAC,CACxC,QAAO,EAAE;AAQX,MAFE,SAAS,gBAAgB,eAAe,uBAAuB,IAAI,QAAQ,uBAAuB,WAAW,CAG7G,QAAO,wBAAwB;GAC7B;GACA,QAAQ;GACR;GACA,YAAY;GACZ,YAAY;GACZ;GACA;GACA;GACA;GACA;GACD,CAAC;EAGJ,MAAM,YAAY,eAAe,OAAO,KAAK;AAO7C,SAAO,CACL,WAAW;GACT;GACA,MALgB,iBAAiB,MAAM,MAAM,cAAc,uBAAuB,IAAI,MAAM,QAAQ,UAAU,CAAC;GAM/G,OAAO;GACP,aAAa,uBAAuB,eAAe,UAAU;GAC7D,QAAQ;GACR,YAAY,mBAAmB,IAAI,aAAa;GAChD;GACA,0BAA0B;GAC3B,CAAC,CACH;GACD;;;;;;;AAQJ,IAAM,yBAAyB,OAAgB,SAAoC;AACjF,KAAI,CAAC,SAAS,MAAM,CAClB,QAAO,EAAE;CAGX,MAAM,QAAoB,EAAE;CAE5B,MAAM,QAAQ,MAA+B,WAA2B;AACtE,OAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,KAAK,EAAE;GAC7C,MAAM,OAAO,CAAC,GAAG,QAAQ,IAAI;AAE7B,OAAI,SAAS,gBAAgB,SAAS,IAAI,CACxC,MAAK,KAAK,KAAK;OAEf,OAAM,KAAK,KAAK;;;AAKtB,MAAK,OAAO,EAAE,CAAC;AAEf,QAAO;;;;;;;AAQT,IAAM,wBAAwB,EAC5B,WACA,OACA,YACA,MACA,YACA,wBAQgB;CAGhB,MAAM,OAAO,IAAI,IAAI,CACnB,GAAG,WAAW,KAAK,QAAQ,UAAU,IAAI,4BAA4B,EAAE,CAAC,CAAC,EACzE,GAAG,kBAAkB,MAAM,CAC5B,CAAC;AAIF,QAAO,sBAAsB,OAAO,KAAK,CACtC,QAAQ,SAAS,CAAC,KAAK,IAAI,UAAU,KAAK,CAAC,CAAC,CAC5C,KAAK,SAAS;EACb,MAAM,YAAY,eAAe,OAAO,KAAK;AAE7C,SAAO,WAAW;GAChB;GAEA,MAAM,iBAAiB,mBAAmB,WAAW,MAAM,KAAK,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC;GACjG,OAAO;GACP,aAAa,UAAU;GACvB,QAAQ,KAAA;GACR,YAAY;GACZ;GACA,0BAA0B;GAC3B,CAAC;GACF;;;;;;;;;;AAWN,IAAa,uBACX,WACA,YACA,UAGI,EAAE,KACS;CACf,MAAM,UAAU,WAAW,WAAW,YAAY,KAAA,EAAU;CAC5D,MAAM,aAAa,gBAAgB,WAAW,QAAQ;CACtD,MAAM,SAAS,mBAAmB,UAAU;CAC5C,MAAM,OAAO,iBAAiB,WAAW,OAAO;AAGhD,KAAI,SAAS,QAAQ,CAAC,UAAU,CAAC,eAAe,OAAO,CACrD,QAAO,CAAC,qBAAqB,WAAW,QAAQ,SAAS,OAAO,WAAW,CAAC;CAK9E,MAAM,QAAQ,SAAS,UAAU,KAAA,IAAY,KAAA,IAAY,qBAAqB,QAAQ,OAAO,UAAU;AAGvG,KAAI,CAAC,OAAO,WACV,QAAO,CAAC,qBAAqB,WAAW,QAAQ,SAAS,OAAO,WAAW,CAAC;CAG9E,MAAM,mBAAmB,IAAI,IAAI,QAAQ,kBAAkB,IAAI,UAAU,IAAI,EAAE,CAAC;CAChF,MAAM,oBAAoB,IAAI,KAAK,QAAQ,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,UAAU,KAAK,EAAE,GAAG,CAAC,CAAC;CAEjH,MAAM,oBAAoB,IAAI,KAAK,QAAQ,qBAAqB,EAAE,EAAE,KAAK,EAAE,SAAS,UAAU,GAAG,CAAC,CAAC;CAEnG,MAAM,OAAO,wBAAwB;EACnC;EACA;EACA;EACA,YAAY,EAAE;EAEd,YAAY,SAAS,eAAe,UAAU,OAAO;EACrD;EACA;EACA;EACA;EACA;EACD,CAAC;CAIF,MAAM,eAAe,qBAAqB;EACxC;EACA;EACA,YAAY;EACZ;EACA;EACA;EACD,CAAC;AAEF,QAAO,CAAC,GAAG,MAAM,GAAG,aAAa"}

package/dist/v2/blocks/request-block/helpers/get-form-body-rows.js

@@ -1,6 +1,6 @@
 import { objectEntries } from "@scalar/helpers/object/object-entries";
-import { isObject } from "@scalar/helpers/object/is-object";
 import { resolve } from "@scalar/workspace-store/resolve";
+import { isObject } from "@scalar/helpers/object/is-object";
 import { isObjectSchema } from "@scalar/workspace-store/schemas/v3.1/strict/type-guards";
 //#region src/v2/blocks/request-block/helpers/get-form-body-rows.ts
 var stringifyValue = (value) => {

package/dist/v2/blocks/scalar-auth-selector-block/components/AuthSelector.vue.script.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthSelector.vue.script.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/AuthSelector.vue"],"sourcesContent":["<script setup lang=\"ts\">\nimport {\n  ScalarButton,\n  type ScalarButton as ScalarButtonType,\n} from '@scalar/components/button'\nimport { ScalarComboboxMultiselect } from '@scalar/components/combobox'\nimport type { Icon } from '@scalar/components/icon'\nimport { ScalarIconButton } from '@scalar/components/icon-button'\nimport { ScalarListboxCheckbox } from '@scalar/components/listbox'\nimport { useModal } from '@scalar/components/modal'\nimport { ScalarIconCaretDown, ScalarIconTrash } from '@scalar/icons'\nimport type { SelectedSecurity } from '@scalar/workspace-store/entities/auth'\nimport type {\n  AuthMeta,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport { getResolvedRef } from '@scalar/workspace-store/helpers/get-resolved-ref'\nimport { unpackProxyObject } from '@scalar/workspace-store/helpers/unpack-proxy'\nimport {\n  isAuthOptional,\n  type MergedSecuritySchemes,\n} from '@scalar/workspace-store/request-example'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport type {\n  OpenApiDocument,\n  SecurityRequirementObject,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { computed, ref, useId } from 'vue'\n\nimport DeleteRequestAuthModal from '@/v2/blocks/scalar-auth-selector-block/components/DeleteRequestAuthModal.vue'\nimport type { OAuth2Options } from '@/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue'\nimport {\n  formatComplexScheme,\n  formatScheme,\n  getSecuritySchemeOptions,\n  type SecuritySchemeOption,\n} from '@/v2/blocks/scalar-auth-selector-block/helpers/security-scheme'\nimport { CollapsibleSection } from '@/v2/components/layout'\n\nimport RequestAuthDataTable from './RequestAuthDataTable.vue'\n\nconst {\n  environment,\n  eventBus,\n  createAnySecurityScheme = false,\n  defaultOpen = true,\n  isStatic = false,\n  meta,\n  proxyUrl,\n  securityRequirements,\n  securitySchemes,\n  selectedSecurity,\n  server,\n  title,\n  options,\n} = defineProps<{\n  environment: XScalarEnvironment\n  eventBus: WorkspaceEventBus\n  /** Allows adding authentication which is not in the document */\n  createAnySecurityScheme?: boolean\n  /** Whether the authentication disclosure should start expanded */\n  defaultOpen?: boolean\n  /** Creates a static disclosure that cannot be collapsed */\n  isStatic?: boolean\n  meta: AuthMeta\n  proxyUrl: string\n  securityRequirements: OpenApiDocument['security']\n  securitySchemes: MergedSecuritySchemes\n  selectedSecurity: SelectedSecurity | undefined\n  server: ServerObject | null\n  title: string\n  /**  Any config options required for the OAuth2 flow */\n  options?: OAuth2Options\n}>()\n\nconst titleId = useId()\nconst comboboxButtonRef = ref<typeof ScalarButtonType | null>(null)\nconst isDisclosureOpen = ref(false)\n\nconst deleteModal = useModal()\nconst schemeToDelete = ref<{\n  label: string\n  payload: SecurityRequirementObject\n} | null>(null)\n\n/**\n * Determines if authentication is required or optional\n *\n * Auth is optional when there is an empty security requirement and no complex requirements.\n * Complex requirements have multiple auth schemes combined (e.g., API key + OAuth).\n */\nconst authIndicator = computed<{ icon: Icon; text: string } | null>(() => {\n  if (!securityRequirements?.length) {\n    return null\n  }\n\n  const isOptional = isAuthOptional(securityRequirements)\n\n  return {\n    icon: isOptional ? 'Unlock' : 'Lock',\n    text: isOptional ? 'Optional' : 'Required',\n  }\n})\n\n/** All available auth scheme options for the dropdown */\nconst availableSchemeOptions = computed(() =>\n  getSecuritySchemeOptions(\n    securityRequirements ?? [],\n    securitySchemes ?? {},\n    selectedSecurity?.selectedSchemes ?? [],\n    createAnySecurityScheme,\n  ),\n)\n\n/** Currently active auth schemes selected for this operation or collection */\nconst activeSchemeOptions = computed<SecuritySchemeOption[]>(() => {\n  const schemes = selectedSecurity?.selectedSchemes\n  if (!schemes?.length) {\n    return []\n  }\n\n  return schemes.flatMap((requirement) => {\n    const schemeNames = Object.keys(requirement)\n\n    if (schemeNames.length === 0) {\n      return []\n    }\n\n    // Complex auth requirement with multiple schemes\n    if (schemeNames.length > 1) {\n      return formatComplexScheme(requirement)\n    }\n\n    // Simple auth requirement with single scheme\n    const schemeName = schemeNames[0]\n    if (!schemeName) {\n      return []\n    }\n\n    const scheme = getResolvedRef(securitySchemes?.[schemeName])\n    if (!scheme) {\n      return []\n    }\n\n    return formatScheme({\n      name: schemeName,\n      value: requirement,\n    })\n  })\n})\n\n/**\n * Opens the combobox dropdown when clicking the auth indicator badge.\n * Prevents the disclosure from toggling if it is already open.\n */\nconst handleAuthIndicatorClick = (event: Event): void => {\n  if (isDisclosureOpen.value) {\n    event.stopPropagation()\n  }\n  comboboxButtonRef.value?.$el.click()\n}\n\n/**\n * Updates the selected auth schemes.\n * Separates existing schemes from newly created ones for the event payload.\n */\nconst handleSchemeSelection = (selected: SecuritySchemeOption[]): void => {\n  const existingSchemes = selected\n    .filter((option) => option.payload === undefined)\n    .map((option) => unpackProxyObject(option.value, { depth: 2 }))\n\n  const newSchemes = selected\n    .filter((option) => option.payload !== undefined)\n    .map((option) => ({\n      name: option.label,\n      scheme: option.payload!,\n    }))\n\n  eventBus.emit('auth:update:selected-security-schemes', {\n    selectedRequirements: existingSchemes,\n    newSchemes,\n    meta,\n  })\n}\n\n/** Shows the delete confirmation modal for the selected scheme */\nconst handleDeleteRequest = (option: {\n  label: string\n  value: SecurityRequirementObject\n}): void => {\n  schemeToDelete.value = { label: option.label, payload: option.value }\n  deleteModal.show()\n}\n\n/** Deletes the selected auth scheme after confirmation */\nconst handleDeleteConfirm = (): void => {\n  if (!schemeToDelete.value) {\n    return\n  }\n\n  eventBus.emit('auth:delete:security-scheme', {\n    names: Object.keys(schemeToDelete.value.payload),\n  })\n\n  schemeToDelete.value = null\n  deleteModal.hide()\n}\n\ndefineExpose({\n  authIndicator,\n  selectedSchemeOptions: activeSchemeOptions,\n  schemeOptions: availableSchemeOptions,\n})\n</script>\n<template>\n  <CollapsibleSection\n    class=\"group/params relative\"\n    :defaultOpen\n    :isStatic=\"isStatic\"\n    :itemCount=\"activeSchemeOptions.length\"\n    @update:modelValue=\"(open) => (isDisclosureOpen = open)\">\n    <template #title>\n      <div\n        :id=\"titleId\"\n        class=\"inline-flex items-center gap-0.5 leading-[20px]\">\n        <span>{{ title }}</span>\n\n        <span\n          v-if=\"authIndicator\"\n          class=\"text-c-3 hover:bg-b-3 hover:text-c-1 -my-0.5 -mr-1 cursor-pointer rounded px-1 py-0.5 leading-[normal] font-normal\"\n          :class=\"{ 'text-c-1': authIndicator.text === 'Required' }\"\n          data-testid=\"auth-indicator\"\n          @click=\"handleAuthIndicatorClick\">\n          {{ authIndicator.text }}\n        </span>\n      </div>\n    </template>\n\n    <!-- Auth Dropdown (hidden when only one scheme is available) -->\n    <template #actions>\n      <ScalarComboboxMultiselect\n        class=\"w-72 text-xs\"\n        :modelValue=\"activeSchemeOptions\"\n        multiple\n        :options=\"availableSchemeOptions\"\n        placement=\"bottom-end\"\n        teleport\n        @delete=\"handleDeleteRequest\"\n        @update:modelValue=\"handleSchemeSelection\">\n        <ScalarButton\n          ref=\"comboboxButtonRef\"\n          :aria-describedby=\"titleId\"\n          class=\"group/combobox-button hover:text-c-1 text-c-2 flex h-fit w-full items-center gap-1 px-0.75 py-0.25 text-base font-normal\"\n          variant=\"ghost\">\n          <!-- Single auth scheme selected -->\n          <template v-if=\"activeSchemeOptions.length === 1\">\n            <span class=\"sr-only\">Selected Auth Type:</span>\n            {{ activeSchemeOptions[0]?.label }}\n          </template>\n\n          <!-- Multiple auth schemes selected -->\n          <template v-else-if=\"activeSchemeOptions.length > 1\">\n            Multiple\n            <span class=\"sr-only\">Auth Types Selected</span>\n          </template>\n\n          <!-- No auth schemes selected -->\n          <template v-else>\n            <span class=\"sr-only\">Select</span>\n            Auth Type\n          </template>\n\n          <ScalarIconCaretDown\n            class=\"size-3 shrink-0 transition-transform duration-100 group-aria-expanded/combobox-button:rotate-180\"\n            weight=\"bold\" />\n        </ScalarButton>\n\n        <template #option=\"{ option, selected }\">\n          <ScalarListboxCheckbox\n            multiselect\n            :selected=\"selected\" />\n          <div class=\"min-w-0 flex-1 truncate\">\n            {{ option.label }}\n          </div>\n          <ScalarIconButton\n            v-if=\"option.isDeletable\"\n            class=\"-m-0.5 shrink-0 p-0.5 opacity-0 group-hover/item:opacity-100\"\n            :icon=\"ScalarIconTrash\"\n            :label=\"`Delete ${option.label}`\"\n            size=\"xs\"\n            @click.stop=\"handleDeleteRequest(option)\" />\n        </template>\n      </ScalarComboboxMultiselect>\n    </template>\n\n    <!-- Auth Table -->\n    <RequestAuthDataTable\n      :activeAuthIndex=\"selectedSecurity?.selectedIndex ?? 0\"\n      :environment\n      :eventBus\n      :isStatic\n      :meta\n      :options\n      :proxyUrl\n      :securitySchemes\n      :selectedSchemeOptions=\"activeSchemeOptions\"\n      :server />\n\n    <!-- Delete Auth Modal -->\n    <DeleteRequestAuthModal\n      v-if=\"schemeToDelete\"\n      :label=\"schemeToDelete.label\"\n      :scheme=\"schemeToDelete\"\n      :state=\"deleteModal\"\n      @close=\"deleteModal.hide()\"\n      @delete=\"handleDeleteConfirm\" />\n  </CollapsibleSection>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4EA,MAAM,UAAU,OAAM;EACtB,MAAM,oBAAoB,IAAoC,KAAI;EAClE,MAAM,mBAAmB,IAAI,MAAK;EAElC,MAAM,cAAc,UAAS;EAC7B,MAAM,iBAAiB,IAGb,KAAI;;;;;;;EAQd,MAAM,gBAAgB,eAAoD;AACxE,OAAI,CAAC,QAAA,sBAAsB,OACzB,QAAO;GAGT,MAAM,aAAa,eAAe,QAAA,qBAAoB;AAEtD,UAAO;IACL,MAAM,aAAa,WAAW;IAC9B,MAAM,aAAa,aAAa;IAClC;IACD;;EAGD,MAAM,yBAAyB,eAC7B,yBACE,QAAA,wBAAwB,EAAE,EAC1B,QAAA,mBAAmB,EAAE,EACrB,QAAA,kBAAkB,mBAAmB,EAAE,EACvC,QAAA,wBACD,CACH;;EAGA,MAAM,sBAAsB,eAAuC;GACjE,MAAM,UAAU,QAAA,kBAAkB;AAClC,OAAI,CAAC,SAAS,OACZ,QAAO,EAAC;AAGV,UAAO,QAAQ,SAAS,gBAAgB;IACtC,MAAM,cAAc,OAAO,KAAK,YAAW;AAE3C,QAAI,YAAY,WAAW,EACzB,QAAO,EAAC;AAIV,QAAI,YAAY,SAAS,EACvB,QAAO,oBAAoB,YAAW;IAIxC,MAAM,aAAa,YAAY;AAC/B,QAAI,CAAC,WACH,QAAO,EAAC;AAIV,QAAI,CADW,eAAe,QAAA,kBAAkB,YAAW,CAEzD,QAAO,EAAC;AAGV,WAAO,aAAa;KAClB,MAAM;KACN,OAAO;KACR,CAAA;KACF;IACF;;;;;EAMD,MAAM,4BAA4B,UAAuB;AACvD,OAAI,iBAAiB,MACnB,OAAM,iBAAgB;AAExB,qBAAkB,OAAO,IAAI,OAAM;;;;;;EAOrC,MAAM,yBAAyB,aAA2C;GACxE,MAAM,kBAAkB,SACrB,QAAQ,WAAW,OAAO,YAAY,KAAA,EAAS,CAC/C,KAAK,WAAW,kBAAkB,OAAO,OAAO,EAAE,OAAO,GAAG,CAAC,CAAA;GAEhE,MAAM,aAAa,SAChB,QAAQ,WAAW,OAAO,YAAY,KAAA,EAAS,CAC/C,KAAK,YAAY;IAChB,MAAM,OAAO;IACb,QAAQ,OAAO;IAChB,EAAC;AAEJ,WAAA,SAAS,KAAK,yCAAyC;IACrD,sBAAsB;IACtB;IACA,MAAG,QAAA;IACJ,CAAA;;;EAIH,MAAM,uBAAuB,WAGjB;AACV,kBAAe,QAAQ;IAAE,OAAO,OAAO;IAAO,SAAS,OAAO;IAAM;AACpE,eAAY,MAAK;;;EAInB,MAAM,4BAAkC;AACtC,OAAI,CAAC,eAAe,MAClB;AAGF,WAAA,SAAS,KAAK,+BAA+B,EAC3C,OAAO,OAAO,KAAK,eAAe,MAAM,QAAQ,EACjD,CAAA;AAED,kBAAe,QAAQ;AACvB,eAAY,MAAK;;AAGnB,WAAa;GACX;GACA,uBAAuB;GACvB,eAAe;GAChB,CAAA;;uBAGC,YAqGqB,MAAA,2BAAA,EAAA;IApGnB,OAAM;IACL,aAAA,QAAA;IACA,UAAU,QAAA;IACV,WAAW,oBAAA,MAAoB;IAC/B,uBAAiB,OAAA,OAAA,OAAA,MAAG,SAAU,iBAAA,QAAmB;;IACvC,OAAK,cAcR,CAbN,mBAaM,OAAA;KAZH,IAAI,MAAA,QAAO;KACZ,OAAM;QACN,mBAAwB,QAAA,MAAA,gBAAf,QAAA,MAAK,EAAA,EAAA,EAGN,cAAA,SAAA,WAAA,EADR,mBAOO,QAAA;;KALL,OAAK,eAAA,CAAC,sHAAoH,EAAA,YACpG,cAAA,MAAc,SAAI,YAAA,CAAA,CAAA;KACxC,eAAY;KACX,SAAO;uBACL,cAAA,MAAc,KAAI,EAAA,EAAA,IAAA,mBAAA,IAAA,KAAA,CAAA,EAAA,GAAA,WAAA,CAAA,CAAA;IAMhB,SAAO,cAqDY,CApD5B,YAoD4B,MAAA,0BAAA,EAAA;KAnD1B,OAAM;KACL,YAAY,oBAAA;KACb,UAAA;KACC,SAAS,uBAAA;KACV,WAAU;KACV,UAAA;KACC,UAAQ;KACR,uBAAmB;;KA6BT,QAAM,SAGU,EAHN,QAAQ,eAAQ;MACnC,YAEyB,MAAA,sBAAA,EAAA;OADvB,aAAA;OACW;;MACb,mBAEM,OAFN,YAEM,gBADD,OAAO,MAAK,EAAA,EAAA;MAGT,OAAO,eAAA,WAAA,EADf,YAM8C,MAAA,iBAAA,EAAA;;OAJ5C,OAAM;OACL,MAAM,MAAA,gBAAe;OACrB,OAAK,UAAY,OAAO;OACzB,MAAK;OACJ,SAAK,eAAA,WAAO,oBAAoB,OAAM,EAAA,CAAA,OAAA,CAAA;;;;;;;4BAf5B,CA1Bf,YA0Be,MAAA,aAAA,EAAA;eAzBT;MAAJ,KAAI;MACH,oBAAkB,MAAA,QAAO;MAC1B,OAAM;MACN,SAAQ;;6BAKG,CAHK,oBAAA,MAAoB,WAAM,KAAA,WAAA,EAA1C,mBAGW,UAAA,EAAA,KAAA,GAAA,EAAA,CAAA,OAAA,OAAA,OAAA,KAFT,mBAAgD,QAAA,EAA1C,OAAM,WAAS,EAAC,uBAAmB,GAAA,GAAA,gBAAO,MAChD,gBAAG,oBAAA,MAAmB,IAAK,MAAK,EAAA,EAAA,CAAA,EAAA,GAAA,IAIb,oBAAA,MAAoB,SAAM,KAAA,WAAA,EAA/C,mBAGW,UAAA,EAAA,KAAA,GAAA,EAAA,CAAA,OAAA,OAAA,OAAA,KAAA,gBAH0C,cAEnD,GAAA,GAAA,OAAA,OAAA,OAAA,KAAA,mBAAgD,QAAA,EAA1C,OAAM,WAAS,EAAC,uBAAmB,GAAA,EAAA,EAAA,GAAA,KAAA,WAAA,EAI3C,mBAGW,UAAA,EAAA,KAAA,GAAA,EAAA,CAAA,OAAA,OAAA,OAAA,KAFT,mBAAmC,QAAA,EAA7B,OAAM,WAAS,EAAC,UAAM,GAAA,GAAA,OAAA,OAAA,OAAA,KAAA,gBAAO,eAErC,GAAA,EAAA,EAAA,GAAA,GAEA,YAEkB,MAAA,oBAAA,EAAA;OADhB,OAAM;OACN,QAAO;;;;;;2BAgCH,CAVZ,YAUY,8BAAA;KATT,iBAAiB,QAAA,kBAAkB,iBAAa;KAChD,aAAA,QAAA;KACA,UAAA,QAAA;KACA,UAAA,QAAA;KACA,MAAA,QAAA;KACA,SAAA,QAAA;KACA,UAAA,QAAA;KACA,iBAAA,QAAA;KACA,uBAAuB,oBAAA;KACvB,QAAA,QAAA;;;;;;;;;;;;QAIK,eAAA,SAAA,WAAA,EADR,YAMkC,gCAAA;;KAJ/B,OAAO,eAAA,MAAe;KACtB,QAAQ,eAAA;KACR,OAAO,MAAA,YAAW;KAClB,SAAK,OAAA,OAAA,OAAA,MAAA,WAAE,MAAA,YAAW,CAAC,MAAI;KACvB,UAAQ"}
+{"version":3,"file":"AuthSelector.vue.script.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/AuthSelector.vue"],"sourcesContent":["<script setup lang=\"ts\">\nimport {\n  ScalarButton,\n  type ScalarButton as ScalarButtonType,\n} from '@scalar/components/button'\nimport { ScalarComboboxMultiselect } from '@scalar/components/combobox'\nimport type { Icon } from '@scalar/components/icon'\nimport { ScalarIconButton } from '@scalar/components/icon-button'\nimport { ScalarListboxCheckbox } from '@scalar/components/listbox'\nimport { useModal } from '@scalar/components/modal'\nimport { ScalarIconCaretDown, ScalarIconTrash } from '@scalar/icons'\nimport type { SelectedSecurity } from '@scalar/workspace-store/entities/auth'\nimport type {\n  AuthMeta,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport { getResolvedRef } from '@scalar/workspace-store/helpers/get-resolved-ref'\nimport { unpackProxyObject } from '@scalar/workspace-store/helpers/unpack-proxy'\nimport {\n  isAuthOptional,\n  type MergedSecuritySchemes,\n} from '@scalar/workspace-store/request-example'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport type {\n  OpenApiDocument,\n  SecurityRequirementObject,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { computed, ref, useId } from 'vue'\n\nimport DeleteRequestAuthModal from '@/v2/blocks/scalar-auth-selector-block/components/DeleteRequestAuthModal.vue'\nimport type { OAuth2Options } from '@/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue'\nimport {\n  formatComplexScheme,\n  formatScheme,\n  getSecuritySchemeOptions,\n  type SecuritySchemeOption,\n} from '@/v2/blocks/scalar-auth-selector-block/helpers/security-scheme'\nimport { CollapsibleSection } from '@/v2/components/layout'\n\nimport RequestAuthDataTable from './RequestAuthDataTable.vue'\n\nconst {\n  environment,\n  eventBus,\n  createAnySecurityScheme = false,\n  defaultOpen = true,\n  isStatic = false,\n  meta,\n  proxyUrl,\n  securityRequirements,\n  securitySchemes,\n  selectedSecurity,\n  server,\n  title,\n  options,\n} = defineProps<{\n  environment: XScalarEnvironment\n  eventBus: WorkspaceEventBus\n  /** Allows adding authentication which is not in the document */\n  createAnySecurityScheme?: boolean\n  /** Whether the authentication disclosure should start expanded */\n  defaultOpen?: boolean\n  /** Creates a static disclosure that cannot be collapsed */\n  isStatic?: boolean\n  meta: AuthMeta\n  proxyUrl: string\n  securityRequirements: OpenApiDocument['security']\n  securitySchemes: MergedSecuritySchemes\n  selectedSecurity: SelectedSecurity | undefined\n  server: ServerObject | null\n  title: string\n  /**  Any config options required for the OAuth2 flow */\n  options?: OAuth2Options\n}>()\n\nconst titleId = useId()\nconst comboboxButtonRef = ref<typeof ScalarButtonType | null>(null)\nconst isDisclosureOpen = ref(false)\n\nconst deleteModal = useModal()\nconst schemeToDelete = ref<{\n  label: string\n  payload: SecurityRequirementObject\n} | null>(null)\n\n/**\n * Determines if authentication is required or optional\n *\n * Auth is optional when there is an empty security requirement and no complex requirements.\n * Complex requirements have multiple auth schemes combined (e.g., API key + OAuth).\n */\nconst authIndicator = computed<{ icon: Icon; text: string } | null>(() => {\n  if (!securityRequirements?.length) {\n    return null\n  }\n\n  const isOptional = isAuthOptional(securityRequirements)\n\n  return {\n    icon: isOptional ? 'Unlock' : 'Lock',\n    text: isOptional ? 'Optional' : 'Required',\n  }\n})\n\n/** All available auth scheme options for the dropdown */\nconst availableSchemeOptions = computed(() =>\n  getSecuritySchemeOptions(\n    securityRequirements ?? [],\n    securitySchemes ?? {},\n    selectedSecurity?.selectedSchemes ?? [],\n    createAnySecurityScheme,\n  ),\n)\n\n/** Currently active auth schemes selected for this operation or collection */\nconst activeSchemeOptions = computed<SecuritySchemeOption[]>(() => {\n  const schemes = selectedSecurity?.selectedSchemes\n  if (!schemes?.length) {\n    return []\n  }\n\n  return schemes.flatMap((requirement) => {\n    const schemeNames = Object.keys(requirement)\n\n    if (schemeNames.length === 0) {\n      return []\n    }\n\n    // Complex auth requirement with multiple schemes\n    if (schemeNames.length > 1) {\n      return formatComplexScheme(requirement)\n    }\n\n    // Simple auth requirement with single scheme\n    const schemeName = schemeNames[0]\n    if (!schemeName) {\n      return []\n    }\n\n    const scheme = getResolvedRef(securitySchemes?.[schemeName])\n    if (!scheme) {\n      return []\n    }\n\n    return formatScheme({\n      name: schemeName,\n      value: requirement,\n    })\n  })\n})\n\n/**\n * Opens the combobox dropdown when clicking the auth indicator badge.\n * Prevents the disclosure from toggling if it is already open.\n */\nconst handleAuthIndicatorClick = (event: Event): void => {\n  if (isDisclosureOpen.value) {\n    event.stopPropagation()\n  }\n  comboboxButtonRef.value?.$el.click()\n}\n\n/**\n * Updates the selected auth schemes.\n * Separates existing schemes from newly created ones for the event payload.\n */\nconst handleSchemeSelection = (selected: SecuritySchemeOption[]): void => {\n  const existingSchemes = selected\n    .filter((option) => option.payload === undefined)\n    .map((option) => unpackProxyObject(option.value, { depth: 2 }))\n\n  const newSchemes = selected\n    .filter((option) => option.payload !== undefined)\n    .map((option) => ({\n      name: option.label,\n      scheme: option.payload!,\n    }))\n\n  eventBus.emit('auth:update:selected-security-schemes', {\n    selectedRequirements: existingSchemes,\n    newSchemes,\n    meta,\n  })\n}\n\n/** Shows the delete confirmation modal for the selected scheme */\nconst handleDeleteRequest = (option: {\n  label: string\n  value: SecurityRequirementObject\n}): void => {\n  schemeToDelete.value = { label: option.label, payload: option.value }\n  deleteModal.show()\n}\n\n/** Deletes the selected auth scheme after confirmation */\nconst handleDeleteConfirm = (): void => {\n  if (!schemeToDelete.value) {\n    return\n  }\n\n  eventBus.emit('auth:delete:security-scheme', {\n    names: Object.keys(schemeToDelete.value.payload),\n  })\n\n  schemeToDelete.value = null\n  deleteModal.hide()\n}\n\ndefineExpose({\n  authIndicator,\n  selectedSchemeOptions: activeSchemeOptions,\n  schemeOptions: availableSchemeOptions,\n})\n</script>\n<template>\n  <CollapsibleSection\n    class=\"group/params relative\"\n    :defaultOpen\n    :isStatic=\"isStatic\"\n    :itemCount=\"activeSchemeOptions.length\"\n    @update:modelValue=\"(open) => (isDisclosureOpen = open)\">\n    <template #title>\n      <div\n        :id=\"titleId\"\n        class=\"inline-flex items-center gap-0.5 leading-[20px]\">\n        <span>{{ title }}</span>\n\n        <span\n          v-if=\"authIndicator\"\n          class=\"text-c-3 hover:bg-b-3 hover:text-c-1 -my-0.5 -mr-1 cursor-pointer rounded px-1 py-0.5 leading-[normal] font-normal\"\n          :class=\"{ 'text-c-1': authIndicator.text === 'Required' }\"\n          data-testid=\"auth-indicator\"\n          @click=\"handleAuthIndicatorClick\">\n          {{ authIndicator.text }}\n        </span>\n      </div>\n    </template>\n\n    <!-- Auth Dropdown (hidden when only one scheme is available) -->\n    <template #actions>\n      <ScalarComboboxMultiselect\n        class=\"w-72 text-xs\"\n        :modelValue=\"activeSchemeOptions\"\n        multiple\n        :options=\"availableSchemeOptions\"\n        placement=\"bottom-end\"\n        teleport\n        @delete=\"handleDeleteRequest\"\n        @update:modelValue=\"handleSchemeSelection\">\n        <ScalarButton\n          ref=\"comboboxButtonRef\"\n          :aria-describedby=\"titleId\"\n          class=\"group/combobox-button hover:text-c-1 text-c-2 flex h-fit w-full items-center gap-1 px-0.75 py-0.25 text-base font-normal\"\n          variant=\"ghost\">\n          <!-- Single auth scheme selected -->\n          <template v-if=\"activeSchemeOptions.length === 1\">\n            <span class=\"sr-only\">Selected Auth Type:</span>\n            {{ activeSchemeOptions[0]?.label }}\n          </template>\n\n          <!-- Multiple auth schemes selected -->\n          <template v-else-if=\"activeSchemeOptions.length > 1\">\n            Multiple\n            <span class=\"sr-only\">Auth Types Selected</span>\n          </template>\n\n          <!-- No auth schemes selected -->\n          <template v-else>\n            <span class=\"sr-only\">Select</span>\n            Auth Type\n          </template>\n\n          <ScalarIconCaretDown\n            class=\"size-3 shrink-0 transition-transform duration-100 group-aria-expanded/combobox-button:rotate-180\"\n            weight=\"bold\" />\n        </ScalarButton>\n\n        <template #option=\"{ option, selected }\">\n          <ScalarListboxCheckbox\n            multiselect\n            :selected=\"selected\" />\n          <div class=\"min-w-0 flex-1 truncate\">\n            {{ option.label }}\n          </div>\n          <ScalarIconButton\n            v-if=\"option.isDeletable\"\n            class=\"-m-0.5 shrink-0 p-0.5 opacity-0 group-hover/item:opacity-100\"\n            :icon=\"ScalarIconTrash\"\n            :label=\"`Delete ${option.label}`\"\n            size=\"xs\"\n            @click.stop=\"handleDeleteRequest(option)\" />\n        </template>\n      </ScalarComboboxMultiselect>\n    </template>\n\n    <!-- Auth Table -->\n    <RequestAuthDataTable\n      :activeAuthIndex=\"selectedSecurity?.selectedIndex ?? 0\"\n      :environment\n      :eventBus\n      :isStatic\n      :meta\n      :options\n      :proxyUrl\n      :securitySchemes\n      :selectedSchemeOptions=\"activeSchemeOptions\"\n      :server />\n\n    <!-- Delete Auth Modal -->\n    <DeleteRequestAuthModal\n      v-if=\"schemeToDelete\"\n      :label=\"schemeToDelete.label\"\n      :scheme=\"schemeToDelete\"\n      :state=\"deleteModal\"\n      @close=\"deleteModal.hide()\"\n      @delete=\"handleDeleteConfirm\" />\n  </CollapsibleSection>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4EA,MAAM,UAAU,OAAM;EACtB,MAAM,oBAAoB,IAAoC,KAAI;EAClE,MAAM,mBAAmB,IAAI,MAAK;EAElC,MAAM,cAAc,UAAS;EAC7B,MAAM,iBAAiB,IAGb,KAAI;;;;;;;EAQd,MAAM,gBAAgB,eAAoD;AACxE,OAAI,CAAC,QAAA,sBAAsB,OACzB,QAAO;GAGT,MAAM,aAAa,eAAe,QAAA,qBAAoB;AAEtD,UAAO;IACL,MAAM,aAAa,WAAW;IAC9B,MAAM,aAAa,aAAa;IAClC;IACD;;EAGD,MAAM,yBAAyB,eAC7B,yBACE,QAAA,wBAAwB,EAAE,EAC1B,QAAA,mBAAmB,EAAE,EACrB,QAAA,kBAAkB,mBAAmB,EAAE,EACvC,QAAA,wBACD,CACH;;EAGA,MAAM,sBAAsB,eAAuC;GACjE,MAAM,UAAU,QAAA,kBAAkB;AAClC,OAAI,CAAC,SAAS,OACZ,QAAO,EAAC;AAGV,UAAO,QAAQ,SAAS,gBAAgB;IACtC,MAAM,cAAc,OAAO,KAAK,YAAW;AAE3C,QAAI,YAAY,WAAW,EACzB,QAAO,EAAC;AAIV,QAAI,YAAY,SAAS,EACvB,QAAO,oBAAoB,YAAW;IAIxC,MAAM,aAAa,YAAY;AAC/B,QAAI,CAAC,WACH,QAAO,EAAC;AAIV,QAAI,CADW,eAAe,QAAA,kBAAkB,YAAW,CAEzD,QAAO,EAAC;AAGV,WAAO,aAAa;KAClB,MAAM;KACN,OAAO;KACR,CAAA;KACF;IACF;;;;;EAMD,MAAM,4BAA4B,UAAuB;AACvD,OAAI,iBAAiB,MACnB,OAAM,iBAAgB;AAExB,qBAAkB,OAAO,IAAI,OAAM;;;;;;EAOrC,MAAM,yBAAyB,aAA2C;GACxE,MAAM,kBAAkB,SACrB,QAAQ,WAAW,OAAO,YAAY,KAAA,EAAS,CAC/C,KAAK,WAAW,kBAAkB,OAAO,OAAO,EAAE,OAAO,GAAG,CAAC,CAAA;GAEhE,MAAM,aAAa,SAChB,QAAQ,WAAW,OAAO,YAAY,KAAA,EAAS,CAC/C,KAAK,YAAY;IAChB,MAAM,OAAO;IACb,QAAQ,OAAO;IAChB,EAAC;AAEJ,WAAA,SAAS,KAAK,yCAAyC;IACrD,sBAAsB;IACtB;IACA,MAAG,QAAA;IACJ,CAAA;;;EAIH,MAAM,uBAAuB,WAGjB;AACV,kBAAe,QAAQ;IAAE,OAAO,OAAO;IAAO,SAAS,OAAO;IAAM;AACpE,eAAY,MAAK;;;EAInB,MAAM,4BAAkC;AACtC,OAAI,CAAC,eAAe,MAClB;AAGF,WAAA,SAAS,KAAK,+BAA+B,EAC3C,OAAO,OAAO,KAAK,eAAe,MAAM,QAAQ,EACjD,CAAA;AAED,kBAAe,QAAQ;AACvB,eAAY,MAAK;;AAGnB,WAAa;GACX;GACA,uBAAuB;GACvB,eAAe;GAChB,CAAA;;uBAGC,YAqGqB,MAAA,2BAAA,EAAA;IApGnB,OAAM;IACL,aAAA,QAAA;IACA,UAAU,QAAA;IACV,WAAW,oBAAA,MAAoB;IAC/B,uBAAiB,OAAA,OAAA,OAAA,MAAG,SAAU,iBAAA,QAAmB;;IACvC,OAAK,cAcR,CAbN,mBAaM,OAAA;KAZH,IAAI,MAAA,QAAO;KACZ,OAAM;QACN,mBAAwB,QAAA,MAAA,gBAAf,QAAA,MAAK,EAAA,EAAA,EAGN,cAAA,SAAA,WAAA,EADR,mBAOO,QAAA;;KALL,OAAK,eAAA,CAAC,sHAAoH,EAAA,YACpG,cAAA,MAAc,SAAI,YAAA,CAAA,CAAA;KACxC,eAAY;KACX,SAAO;uBACL,cAAA,MAAc,KAAI,EAAA,EAAA,IAAA,mBAAA,IAAA,KAAA,CAAA,EAAA,GAAA,WAAA,CAAA,CAAA;IAMhB,SAAO,cAqDY,CApD5B,YAoD4B,MAAA,0BAAA,EAAA;KAnD1B,OAAM;KACL,YAAY,oBAAA;KACb,UAAA;KACC,SAAS,uBAAA;KACV,WAAU;KACV,UAAA;KACC,UAAQ;KACR,uBAAmB;;KA6BT,QAAM,SAGU,EAHN,QAAQ,eAAQ;MACnC,YAEyB,MAAA,sBAAA,EAAA;OADvB,aAAA;OACW;;MACb,mBAEM,OAFN,YAEM,gBADD,OAAO,MAAK,EAAA,EAAA;MAGT,OAAO,eAAA,WAAA,EADf,YAM8C,MAAA,iBAAA,EAAA;;OAJ5C,OAAM;OACL,MAAM,MAAA,gBAAe;OACrB,OAAK,UAAY,OAAO;OACzB,MAAK;OACJ,SAAK,eAAA,WAAO,oBAAoB,OAAM,EAAA,CAAA,OAAA,CAAA;;;;;;;4BAf5B,CA1Bf,YA0Be,MAAA,aAAA,EAAA;eAzBT;MAAJ,KAAI;MACH,oBAAkB,MAAA,QAAO;MAC1B,OAAM;MACN,SAAQ;;6BAWZ,CAToB,oBAAA,MAAoB,WAAM,KAAA,WAAA,EAA1C,mBAGW,UAAA,EAAA,KAAA,GAAA,EAAA,CAAA,OAAA,OAAA,OAAA,KAFT,mBAAgD,QAAA,EAA1C,OAAM,WAAS,EAAC,uBAAmB,GAAA,GAAA,gBAAO,MAChD,gBAAG,oBAAA,MAAmB,IAAK,MAAK,EAAA,EAAA,CAAA,EAAA,GAAA,IAIb,oBAAA,MAAoB,SAAM,KAAA,WAAA,EAA/C,mBAGW,UAAA,EAAA,KAAA,GAAA,EAAA,CAAA,OAAA,OAAA,OAAA,KAAA,gBAH0C,cAEnD,GAAA,GAAA,OAAA,OAAA,OAAA,KAAA,mBAAgD,QAAA,EAA1C,OAAM,WAAS,EAAC,uBAAmB,GAAA,EAAA,EAAA,GAAA,KAAA,WAAA,EAI3C,mBAGW,UAAA,EAAA,KAAA,GAAA,EAAA,CAAA,OAAA,OAAA,OAAA,KAFT,mBAAmC,QAAA,EAA7B,OAAM,WAAS,EAAC,UAAM,GAAA,GAAA,OAAA,OAAA,OAAA,KAAA,gBAAO,eAErC,GAAA,EAAA,EAAA,GAAA,GAEA,YAEkB,MAAA,oBAAA,EAAA;OADhB,OAAM;OACN,QAAO;;;;;;2BAgCH,CAVZ,YAUY,8BAAA;KATT,iBAAiB,QAAA,kBAAkB,iBAAa;KAChD,aAAA,QAAA;KACA,UAAA,QAAA;KACA,UAAA,QAAA;KACA,MAAA,QAAA;KACA,SAAA,QAAA;KACA,UAAA,QAAA;KACA,iBAAA,QAAA;KACA,uBAAuB,oBAAA;KACvB,QAAA,QAAA;;;;;;;;;;;;QAIK,eAAA,SAAA,WAAA,EADR,YAMkC,gCAAA;;KAJ/B,OAAO,eAAA,MAAe;KACtB,QAAQ,eAAA;KACR,OAAO,MAAA,YAAW;KAClB,SAAK,OAAA,OAAA,OAAA,MAAA,WAAE,MAAA,YAAW,CAAC,MAAI;KACvB,UAAQ"}

package/dist/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue.d.ts

@@ -3,10 +3,13 @@ import type { WorkspaceEventBus } from '@scalar/workspace-store/events';
 import { type OAuthFlowsObjectSecret, type SecuritySchemeObjectSecret } from '@scalar/workspace-store/request-example';
 import type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments';
 import type { ServerObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
+import { type CaptureOAuth2Callback } from '../../../../v2/blocks/scalar-auth-selector-block/helpers/oauth.js';
 /**  Any config options required for the OAuth2 flow */
 export type OAuth2Options = Pick<ApiClientConfiguration, 'oauth2RedirectUri'> & {
     /** Optional fetch override (IPC-backed on desktop) used for token exchange, refresh, and OIDC discovery */
     customFetch?: typeof fetch;
+    /** Optional redirect capture (loopback-backed on desktop) for interactive OAuth2 flows */
+    captureOAuth2Callback?: CaptureOAuth2Callback;
 };
 declare const _default: typeof __VLS_export;
 export default _default;

package/dist/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OAuth2.vue.d.ts","sourceRoot":"","sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue"],"names":[],"mappings":"AA2jBA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAIzE,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAChC,MAAM,yCAAyC,CAAA;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2EAA2E,CAAA;AAGnH,OAAO,KAAK,EAEV,YAAY,EACb,MAAM,8DAA8D,CAAA;AAcrE,uDAAuD;AACvD,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,sBAAsB,EACtB,mBAAmB,CACpB,GAAG;IACF,2GAA2G;IAC3G,WAAW,CAAC,EAAE,OAAO,KAAK,CAAA;CAC3B,CAAA;wBACoB,OAAO,YAAY;AAAxC,wBAAyC;AACzC,QAAA,MAAM,YAAY;IAEhB,wCAAwC;iBAC3B,kBAAkB;IAC/B,kBAAkB;WACX,sBAAsB;IAC7B,6BAA6B;UACvB,MAAM,sBAAsB;IAClC,sBAAsB;oBACN,MAAM,EAAE;IACxB,sBAAsB;YACd,0BAA0B;IAClC,mCAAmC;YAC3B,YAAY,GAAG,IAAI;IAC3B,gBAAgB;cACN,MAAM;IAChB,kCAAkC;UAC5B,MAAM;IACZ,2CAA2C;cACjC,iBAAiB;IAC3B,uDAAuD;cAC7C,aAAa;;;gBAiByB,MAAM,EAAE;;;;;;;;;;;;;;;;IApCxD,wCAAwC;iBAC3B,kBAAkB;IAC/B,kBAAkB;WACX,sBAAsB;IAC7B,6BAA6B;UACvB,MAAM,sBAAsB;IAClC,sBAAsB;oBACN,MAAM,EAAE;IACxB,sBAAsB;YACd,0BAA0B;IAClC,mCAAmC;YAC3B,YAAY,GAAG,IAAI;IAC3B,gBAAgB;cACN,MAAM;IAChB,kCAAkC;UAC5B,MAAM;IACZ,2CAA2C;cACjC,iBAAiB;IAC3B,uDAAuD;cAC7C,aAAa;;;gBAiByB,MAAM,EAAE;;;;;;;;;;;;;;;kFA48BtD,CAAC"}
+{"version":3,"file":"OAuth2.vue.d.ts","sourceRoot":"","sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue"],"names":[],"mappings":"AA0kBA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAIzE,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAChC,MAAM,yCAAyC,CAAA;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2EAA2E,CAAA;AAGnH,OAAO,KAAK,EAEV,YAAY,EACb,MAAM,8DAA8D,CAAA;AAIrE,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,sDAAsD,CAAA;AAO7D,uDAAuD;AACvD,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,sBAAsB,EACtB,mBAAmB,CACpB,GAAG;IACF,2GAA2G;IAC3G,WAAW,CAAC,EAAE,OAAO,KAAK,CAAA;IAC1B,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;CAC9C,CAAA;wBACoB,OAAO,YAAY;AAAxC,wBAAyC;AACzC,QAAA,MAAM,YAAY;IAEhB,wCAAwC;iBAC3B,kBAAkB;IAC/B,kBAAkB;WACX,sBAAsB;IAC7B,6BAA6B;UACvB,MAAM,sBAAsB;IAClC,sBAAsB;oBACN,MAAM,EAAE;IACxB,sBAAsB;YACd,0BAA0B;IAClC,mCAAmC;YAC3B,YAAY,GAAG,IAAI;IAC3B,gBAAgB;cACN,MAAM;IAChB,kCAAkC;UAC5B,MAAM;IACZ,2CAA2C;cACjC,iBAAiB;IAC3B,uDAAuD;cAC7C,aAAa;;;gBAiByB,MAAM,EAAE;;;;;;;;;;;;;;;;IApCxD,wCAAwC;iBAC3B,kBAAkB;IAC/B,kBAAkB;WACX,sBAAsB;IAC7B,6BAA6B;UACvB,MAAM,sBAAsB;IAClC,sBAAsB;oBACN,MAAM,EAAE;IACxB,sBAAsB;YACd,0BAA0B;IAClC,mCAAmC;YAC3B,YAAY,GAAG,IAAI;IAC3B,gBAAgB;cACN,MAAM;IAChB,kCAAkC;UAC5B,MAAM;IACZ,2CAA2C;cACjC,iBAAiB;IAC3B,uDAAuD;cAC7C,aAAa;;;gBAiByB,MAAM,EAAE;;;;;;;;;;;;;;;kFA69BtD,CAAC"}

package/dist/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue.js.map

@@ -1 +1 @@
-{"version":3,"file":"OAuth2.vue.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue"],"sourcesContent":["<script lang=\"ts\">\n/**  Any config options required for the OAuth2 flow */\nexport type OAuth2Options = Pick<\n  ApiClientConfiguration,\n  'oauth2RedirectUri'\n> & {\n  /** Optional fetch override (IPC-backed on desktop) used for token exchange, refresh, and OIDC discovery */\n  customFetch?: typeof fetch\n}\n</script>\n\n<script setup lang=\"ts\">\nimport { ScalarButton } from '@scalar/components/button'\nimport { useLoadingState } from '@scalar/components/loading'\nimport type { ApiClientConfiguration } from '@scalar/types/api-reference'\nimport { pkceOptions } from '@scalar/types/entities'\nimport { useToasts } from '@scalar/use-toasts'\nimport type { SecretsOAuthFlows } from '@scalar/workspace-store/entities/auth'\nimport type {\n  ApiReferenceEvents,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport {\n  getEnvironmentVariables,\n  type OAuthFlowAuthorizationCodeSecret,\n  type OAuthFlowClientCredentialsSecret,\n  type OAuthFlowPasswordSecret,\n  type OAuthFlowsObjectSecret,\n  type SecuritySchemeObjectSecret,\n} from '@scalar/workspace-store/request-example'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport type { XScalarCredentialsLocation } from '@scalar/workspace-store/schemas/extensions/security/x-scalar-credentials-location'\nimport { type XusePkce } from '@scalar/workspace-store/schemas/extensions/security/x-use-pkce'\nimport type {\n  OAuthFlow,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { computed, ref, watch } from 'vue'\n\nimport OAuthScopesInput from '@/v2/blocks/scalar-auth-selector-block/components/OAuthScopesInput.vue'\nimport {\n  authorizeOauth2,\n  refreshOauth2Token,\n} from '@/v2/blocks/scalar-auth-selector-block/helpers/oauth'\nimport { resolveDefaultOAuth2RedirectUri } from '@/v2/blocks/scalar-auth-selector-block/helpers/resolve-default-oauth2-redirect-url'\nimport { DataTableRow } from '@/v2/components/data-table'\n\nimport RequestAuthDataTableInput from './RequestAuthDataTableInput.vue'\n\nconst {\n  environment,\n  flows,\n  type,\n  scheme,\n  selectedScopes: selectedScopesProp,\n  server,\n  proxyUrl,\n  eventBus,\n  name,\n  options = {},\n} = defineProps<{\n  /** Current environment configuration */\n  environment: XScalarEnvironment\n  /** OAuth flows */\n  flows: OAuthFlowsObjectSecret\n  /** Type of the OAuth flow */\n  type: keyof OAuthFlowsObjectSecret\n  /** Selected scopes */\n  selectedScopes: string[]\n  /** Security scheme */\n  scheme: SecuritySchemeObjectSecret\n  /** Current server configuration */\n  server: ServerObject | null\n  /** Proxy URL */\n  proxyUrl: string\n  /** Name of the security scheme */\n  name: string\n  /** Event bus for authentication updates */\n  eventBus: WorkspaceEventBus\n  /**  Any config options required for the OAuth2 flow */\n  options?: OAuth2Options\n}>()\n\nconst emits = defineEmits<{\n  (e: 'update:selectedScopes', payload: { scopes: string[] }): void\n  (\n    e: 'upsert:scope',\n    payload: Omit<ApiReferenceEvents['auth:upsert:scopes'], 'name'>,\n  ): void\n  (\n    e: 'delete:scope',\n    payload: Omit<ApiReferenceEvents['auth:delete:scopes'], 'name'>,\n  ): void\n}>()\n\nconst loader = useLoadingState()\nconst { toast } = useToasts()\n\n/** The current OAuth flow based on the selected type */\nconst flow = computed(() => flows[type]!)\ntype NonImplicitFlow =\n  | OAuthFlowPasswordSecret\n  | OAuthFlowClientCredentialsSecret\n  | OAuthFlowAuthorizationCodeSecret\n\n/** We filter selected scopes to only include scopes that are defined on this flow (own keys only). */\nconst selectedScopes = computed(() => {\n  const definedScopes = flow.value.scopes\n  if (!definedScopes) {\n    return []\n  }\n  return selectedScopesProp.filter((scope) =>\n    Object.hasOwn(definedScopes, scope),\n  )\n})\n\n/**\n * PKCE public clients do not use a client_secret. Hide the field when the\n * document enables PKCE so readers are not prompted for an unused secret.\n */\nconst showClientSecret = computed(() => {\n  if (!('x-scalar-secret-client-secret' in flow.value)) {\n    return false\n  }\n  const pkceMode =\n    'x-usePkce' in flow.value ? flow.value['x-usePkce'] : undefined\n  return pkceMode !== 'SHA-256' && pkceMode !== 'plain'\n})\n\nconst clientSecretValue = computed((): string => {\n  const f = flow.value as { 'x-scalar-secret-client-secret'?: string }\n  return f['x-scalar-secret-client-secret'] ?? ''\n})\n\n/** Updates the security scheme base */\nconst handleOauth2Update = (\n  payload: Partial<OAuthFlow & XScalarCredentialsLocation>,\n): void => {\n  // OpenIdConnect uses the secrets update for all\n  if (scheme.type === 'openIdConnect') {\n    return handleOauth2SecretsUpdate(payload)\n  }\n\n  eventBus.emit('auth:update:security-scheme', {\n    payload: {\n      type: scheme.type,\n      flows: {\n        [type]: payload,\n      },\n    },\n    name,\n  })\n}\n\n/** Updates the flow secrets */\nconst handleOauth2SecretsUpdate = (\n  payload: Omit<Partial<SecretsOAuthFlows[keyof SecretsOAuthFlows]>, 'type'>,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: {\n      type: scheme.type,\n      [type]: payload,\n    },\n    name,\n  })\n\n/** Clears the flow secrets */\nconst clearOauth2Secrets = (): void => {\n  if (loader.isLoading) {\n    return\n  }\n  eventBus.emit('auth:clear:security-scheme-secrets', {\n    name,\n  })\n}\n\n/** Clears stored access and refresh tokens (authorized state) */\nconst handleClearAccessTokens = (): void => {\n  if (loader.isLoading) {\n    return\n  }\n  handleOauth2SecretsUpdate({\n    'x-scalar-secret-token': '',\n    'x-scalar-secret-refresh-token': '',\n  })\n}\n\n/** Track redirect URI prefill per flow instance to support document switching */\nconst prefilledFlowIdentity = ref<string | null>(null)\nconst hasHandledRedirectPrefill = ref(false)\n\nconst resolveFlowIdentity = (\n  currentFlow: OAuthFlowsObjectSecret[keyof OAuthFlowsObjectSecret] | undefined,\n): string =>\n  JSON.stringify({\n    type,\n    authorizationUrl:\n      currentFlow && 'authorizationUrl' in currentFlow\n        ? currentFlow.authorizationUrl\n        : '',\n    tokenUrl:\n      currentFlow && 'tokenUrl' in currentFlow ? currentFlow.tokenUrl : '',\n    refreshUrl: currentFlow?.refreshUrl ?? '',\n    scopes: Object.keys(currentFlow?.scopes ?? {}),\n  })\n\n/** Default the redirect-uri to the current origin if we have access to window */\nwatch(\n  () => flow.value,\n  (currentFlow) => {\n    if (!currentFlow || !('x-scalar-secret-redirect-uri' in currentFlow)) {\n      return\n    }\n\n    const flowIdentity = resolveFlowIdentity(currentFlow)\n    if (prefilledFlowIdentity.value !== flowIdentity) {\n      prefilledFlowIdentity.value = flowIdentity\n      hasHandledRedirectPrefill.value = false\n    }\n\n    if (hasHandledRedirectPrefill.value) {\n      return\n    }\n\n    const newRedirectUri = (currentFlow as OAuthFlowAuthorizationCodeSecret)[\n      'x-scalar-secret-redirect-uri'\n    ]\n    const defaultRedirectUri = resolveDefaultOAuth2RedirectUri(options)\n\n    hasHandledRedirectPrefill.value = true\n\n    if (newRedirectUri || !defaultRedirectUri) {\n      return\n    }\n\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-redirect-uri': defaultRedirectUri,\n    })\n  },\n  { immediate: true },\n)\n\n/**\n * Authorizes the user using the specified OAuth flow.\n * Opens the appropriate OAuth dialog and/or performs the token exchange.\n */\nconst handleAuthorize = async (): Promise<void> => {\n  if (loader.isLoading) {\n    return\n  }\n\n  loader.start()\n\n  const [error, tokens] = await authorizeOauth2(\n    flows,\n    type,\n    selectedScopes.value,\n    server,\n    proxyUrl,\n    getEnvironmentVariables(environment),\n    options.customFetch,\n  )\n\n  await loader.clear()\n\n  if (tokens?.accessToken) {\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-token': tokens.accessToken,\n      ...(tokens.refreshToken\n        ? { 'x-scalar-secret-refresh-token': tokens.refreshToken }\n        : {}),\n    })\n  } else {\n    console.error(error)\n    toast(error?.message ?? 'Failed to authorize', 'error')\n  }\n}\n\n/** Whether the current flow supports refreshing the access token */\nconst supportsRefreshToken = computed(() => type !== 'implicit')\n\n/**\n * Refresh URL placeholder, shows tokenUrl as hint if refreshUrl is not specified.\n * This helps users understand that tokenUrl will be used as fallback.\n */\nconst refreshUrlPlaceholder = computed(() => {\n  if ('tokenUrl' in flow.value && flow.value.tokenUrl) {\n    return flow.value.tokenUrl\n  }\n  return 'https://galaxy.scalar.com/oauth/refresh'\n})\n\n/**\n * Uses the stored refresh token to obtain a new access token\n * via grant_type=refresh_token.\n */\nconst handleRefresh = async (): Promise<void> => {\n  if (loader.isLoading || type === 'implicit') {\n    return\n  }\n\n  loader.start()\n\n  const [error, tokens] = await refreshOauth2Token(\n    flows,\n    type,\n    proxyUrl,\n    server,\n    getEnvironmentVariables(environment),\n    options.customFetch,\n  )\n\n  await loader.clear()\n\n  if (tokens?.accessToken) {\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-token': tokens.accessToken,\n      ...(tokens.refreshToken\n        ? { 'x-scalar-secret-refresh-token': tokens.refreshToken }\n        : {}),\n    })\n  } else {\n    console.error(error)\n    toast(error?.message ?? 'Failed to refresh token', 'error')\n  }\n}\n\n/** Updates the secret location */\nconst handleSecretLocationUpdate = (value: string): void => {\n  const credentialsLocation = value === 'body' ? 'body' : 'header'\n\n  if (scheme.type !== 'openIdConnect') {\n    handleOauth2Update({\n      'x-scalar-credentials-location': credentialsLocation,\n    })\n  }\n\n  handleOauth2SecretsUpdate({\n    'x-scalar-credentials-location': credentialsLocation,\n  })\n}\n</script>\n\n<template>\n  <!-- Access Token Display: Shows when user is already authorized -->\n  <template v-if=\"Boolean(flow['x-scalar-secret-token'])\">\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        class=\"border-r-transparent\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-token']\"\n        placeholder=\"QUxMIFlPVVIgQkFTRSBBUkUgQkVMT05HIFRPIFVT\"\n        type=\"password\"\n        @update:modelValue=\"\n          (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-token': v })\n        \">\n        Access Token\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"supportsRefreshToken\">\n      <RequestAuthDataTableInput\n        class=\"border-r-transparent\"\n        :environment\n        :modelValue=\"flow.refreshUrl ?? ''\"\n        :placeholder=\"refreshUrlPlaceholder\"\n        @update:modelValue=\"(v) => handleOauth2Update({ refreshUrl: v })\">\n        Refresh URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow class=\"min-w-full\">\n      <div class=\"flex h-8 items-center justify-end gap-2 border-t\">\n        <ScalarButton\n          v-if=\"supportsRefreshToken\"\n          class=\"p-0 px-2 py-0.5\"\n          :loader\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleRefresh\">\n          Refresh\n        </ScalarButton>\n        <ScalarButton\n          class=\"mr-1 p-0 px-2 py-0.5\"\n          :disabled=\"loader.isLoading\"\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleClearAccessTokens\">\n          Clear\n        </ScalarButton>\n      </div>\n    </DataTableRow>\n  </template>\n\n  <!-- Authorization Form: Shows when user needs to authorize -->\n  <template v-else>\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        v-if=\"'authorizationUrl' in flow\"\n        containerClass=\"border-r-0\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-auth-url'] ?? ''\"\n        placeholder=\"https://galaxy.scalar.com/authorize\"\n        @update:modelValue=\"\n          (v) => {\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-auth-url': v })\n            handleOauth2Update({ authorizationUrl: v })\n          }\n        \">\n        Auth URL\n      </RequestAuthDataTableInput>\n\n      <RequestAuthDataTableInput\n        v-if=\"'tokenUrl' in flow\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-token-url'] ?? ''\"\n        placeholder=\"https://galaxy.scalar.com/token\"\n        @update:modelValue=\"\n          (v) => {\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-token-url': v })\n            handleOauth2Update({ tokenUrl: v })\n          }\n        \">\n        Token URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"'x-scalar-secret-redirect-uri' in flow\">\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"flow['x-scalar-secret-redirect-uri']\"\n        placeholder=\"Optional redirect URL\"\n        @update:modelValue=\"\n          (v) => {\n            hasHandledRedirectPrefill = true\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-redirect-uri': v })\n          }\n        \">\n        Redirect URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <template\n      v-if=\"\n        'x-scalar-secret-username' in flow && 'x-scalar-secret-password' in flow\n      \">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          class=\"text-c-2\"\n          :environment\n          :modelValue=\"flow['x-scalar-secret-username']\"\n          placeholder=\"janedoe\"\n          @update:modelValue=\"\n            (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-username': v })\n          \">\n          Username\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :environment\n          :modelValue=\"flow['x-scalar-secret-password']\"\n          placeholder=\"********\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-password': v })\n          \">\n          Password\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"flow['x-scalar-secret-client-id']\"\n        placeholder=\"12345\"\n        @update:modelValue=\"\n          (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-client-id': v })\n        \">\n        Client ID\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"showClientSecret\">\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"clientSecretValue\"\n        placeholder=\"XYZ123\"\n        type=\"password\"\n        @update:modelValue=\"\n          (v) =>\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-client-secret': v })\n        \">\n        Client Secret\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"'x-usePkce' in flow\">\n      <RequestAuthDataTableInput\n        :enum=\"pkceOptions\"\n        :environment\n        :modelValue=\"flow['x-usePkce']\"\n        readOnly\n        @update:modelValue=\"\n          (v) =>\n            handleOauth2Update({\n              'x-usePkce': v as XusePkce['x-usePkce'],\n            })\n        \">\n        Use PKCE\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <!-- Credentials Location -->\n    <DataTableRow v-if=\"type !== 'implicit'\">\n      <RequestAuthDataTableInput\n        :enum=\"['header', 'body']\"\n        :environment\n        :modelValue=\"\n          (flow as NonImplicitFlow)['x-scalar-credentials-location'] || 'header'\n        \"\n        placeholder=\"header\"\n        readOnly\n        @update:modelValue=\"(v) => handleSecretLocationUpdate(v)\">\n        Credentials Location\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <!-- Scopes -->\n    <DataTableRow>\n      <OAuthScopesInput\n        :flow\n        :flowType=\"type\"\n        :selectedScopes\n        @update:selectedScopes=\"(v) => emits('update:selectedScopes', v)\"\n        @upsert:scope=\"(v) => emits('upsert:scope', v)\"\n        @delete:scope=\"(v) => emits('delete:scope', v)\" />\n    </DataTableRow>\n\n    <DataTableRow class=\"min-w-full\">\n      <div class=\"flex h-8 w-full items-center justify-end border-t\">\n        <!-- Allow clearing the oauth section and going back to discovery -->\n        <ScalarButton\n          v-if=\"scheme.type === 'openIdConnect'\"\n          class=\"mr-1 p-0 px-2 py-0.5\"\n          :disabled=\"loader.isLoading\"\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"clearOauth2Secrets\">\n          Clear\n        </ScalarButton>\n\n        <ScalarButton\n          class=\"mr-0.75 p-0 px-2 py-0.5\"\n          :loader\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleAuthorize\">\n          Authorize\n        </ScalarButton>\n      </div>\n    </DataTableRow>\n  </template>\n</template>\n"],"mappings":""}
+{"version":3,"file":"OAuth2.vue.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue"],"sourcesContent":["<script lang=\"ts\">\n/**  Any config options required for the OAuth2 flow */\nexport type OAuth2Options = Pick<\n  ApiClientConfiguration,\n  'oauth2RedirectUri'\n> & {\n  /** Optional fetch override (IPC-backed on desktop) used for token exchange, refresh, and OIDC discovery */\n  customFetch?: typeof fetch\n  /** Optional redirect capture (loopback-backed on desktop) for interactive OAuth2 flows */\n  captureOAuth2Callback?: CaptureOAuth2Callback\n}\n</script>\n\n<script setup lang=\"ts\">\nimport { ScalarButton } from '@scalar/components/button'\nimport { useLoadingState } from '@scalar/components/loading'\nimport type { ApiClientConfiguration } from '@scalar/types/api-reference'\nimport { pkceOptions } from '@scalar/types/entities'\nimport { useToasts } from '@scalar/use-toasts'\nimport type { SecretsOAuthFlows } from '@scalar/workspace-store/entities/auth'\nimport type {\n  ApiReferenceEvents,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport {\n  getEnvironmentVariables,\n  type OAuthFlowAuthorizationCodeSecret,\n  type OAuthFlowClientCredentialsSecret,\n  type OAuthFlowPasswordSecret,\n  type OAuthFlowsObjectSecret,\n  type SecuritySchemeObjectSecret,\n} from '@scalar/workspace-store/request-example'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport type { XScalarCredentialsLocation } from '@scalar/workspace-store/schemas/extensions/security/x-scalar-credentials-location'\nimport { type XusePkce } from '@scalar/workspace-store/schemas/extensions/security/x-use-pkce'\nimport type {\n  OAuthFlow,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { computed, ref, watch } from 'vue'\n\nimport OAuthScopesInput from '@/v2/blocks/scalar-auth-selector-block/components/OAuthScopesInput.vue'\nimport {\n  authorizeOauth2,\n  refreshOauth2Token,\n  type CaptureOAuth2Callback,\n} from '@/v2/blocks/scalar-auth-selector-block/helpers/oauth'\nimport { resolveDefaultOAuth2RedirectUri } from '@/v2/blocks/scalar-auth-selector-block/helpers/resolve-default-oauth2-redirect-url'\nimport { DataTableRow } from '@/v2/components/data-table'\n\nimport RequestAuthDataTableInput from './RequestAuthDataTableInput.vue'\n\nconst {\n  environment,\n  flows,\n  type,\n  scheme,\n  selectedScopes: selectedScopesProp,\n  server,\n  proxyUrl,\n  eventBus,\n  name,\n  options = {},\n} = defineProps<{\n  /** Current environment configuration */\n  environment: XScalarEnvironment\n  /** OAuth flows */\n  flows: OAuthFlowsObjectSecret\n  /** Type of the OAuth flow */\n  type: keyof OAuthFlowsObjectSecret\n  /** Selected scopes */\n  selectedScopes: string[]\n  /** Security scheme */\n  scheme: SecuritySchemeObjectSecret\n  /** Current server configuration */\n  server: ServerObject | null\n  /** Proxy URL */\n  proxyUrl: string\n  /** Name of the security scheme */\n  name: string\n  /** Event bus for authentication updates */\n  eventBus: WorkspaceEventBus\n  /**  Any config options required for the OAuth2 flow */\n  options?: OAuth2Options\n}>()\n\nconst emits = defineEmits<{\n  (e: 'update:selectedScopes', payload: { scopes: string[] }): void\n  (\n    e: 'upsert:scope',\n    payload: Omit<ApiReferenceEvents['auth:upsert:scopes'], 'name'>,\n  ): void\n  (\n    e: 'delete:scope',\n    payload: Omit<ApiReferenceEvents['auth:delete:scopes'], 'name'>,\n  ): void\n}>()\n\nconst loader = useLoadingState()\nconst { toast } = useToasts()\n\n/** The current OAuth flow based on the selected type */\nconst flow = computed(() => flows[type]!)\ntype NonImplicitFlow =\n  | OAuthFlowPasswordSecret\n  | OAuthFlowClientCredentialsSecret\n  | OAuthFlowAuthorizationCodeSecret\n\n/** We filter selected scopes to only include scopes that are defined on this flow (own keys only). */\nconst selectedScopes = computed(() => {\n  const definedScopes = flow.value.scopes\n  if (!definedScopes) {\n    return []\n  }\n  return selectedScopesProp.filter((scope) =>\n    Object.hasOwn(definedScopes, scope),\n  )\n})\n\n/**\n * PKCE public clients do not use a client_secret. Hide the field when the\n * document enables PKCE so readers are not prompted for an unused secret.\n */\nconst showClientSecret = computed(() => {\n  if (!('x-scalar-secret-client-secret' in flow.value)) {\n    return false\n  }\n  const pkceMode =\n    'x-usePkce' in flow.value ? flow.value['x-usePkce'] : undefined\n  return pkceMode !== 'SHA-256' && pkceMode !== 'plain'\n})\n\nconst clientSecretValue = computed((): string => {\n  const f = flow.value as { 'x-scalar-secret-client-secret'?: string }\n  return f['x-scalar-secret-client-secret'] ?? ''\n})\n\n/** Updates the security scheme base */\nconst handleOauth2Update = (\n  payload: Partial<OAuthFlow & XScalarCredentialsLocation>,\n): void => {\n  // OpenIdConnect uses the secrets update for all\n  if (scheme.type === 'openIdConnect') {\n    return handleOauth2SecretsUpdate(payload)\n  }\n\n  eventBus.emit('auth:update:security-scheme', {\n    payload: {\n      type: scheme.type,\n      flows: {\n        [type]: payload,\n      },\n    },\n    name,\n  })\n}\n\n/** Updates the flow secrets */\nconst handleOauth2SecretsUpdate = (\n  payload: Omit<Partial<SecretsOAuthFlows[keyof SecretsOAuthFlows]>, 'type'>,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: {\n      type: scheme.type,\n      [type]: payload,\n    },\n    name,\n  })\n\n/** Clears the flow secrets */\nconst clearOauth2Secrets = (): void => {\n  if (loader.isLoading) {\n    return\n  }\n  eventBus.emit('auth:clear:security-scheme-secrets', {\n    name,\n  })\n}\n\n/** Clears stored access and refresh tokens (authorized state) */\nconst handleClearAccessTokens = (): void => {\n  if (loader.isLoading) {\n    return\n  }\n  handleOauth2SecretsUpdate({\n    'x-scalar-secret-token': '',\n    'x-scalar-secret-refresh-token': '',\n  })\n}\n\n/** Track redirect URI prefill per flow instance to support document switching */\nconst prefilledFlowIdentity = ref<string | null>(null)\nconst hasHandledRedirectPrefill = ref(false)\n\nconst resolveFlowIdentity = (\n  currentFlow: OAuthFlowsObjectSecret[keyof OAuthFlowsObjectSecret] | undefined,\n): string =>\n  JSON.stringify({\n    type,\n    authorizationUrl:\n      currentFlow && 'authorizationUrl' in currentFlow\n        ? currentFlow.authorizationUrl\n        : '',\n    tokenUrl:\n      currentFlow && 'tokenUrl' in currentFlow ? currentFlow.tokenUrl : '',\n    refreshUrl: currentFlow?.refreshUrl ?? '',\n    scopes: Object.keys(currentFlow?.scopes ?? {}),\n  })\n\n/** Default the redirect-uri to the current origin if we have access to window */\nwatch(\n  () => flow.value,\n  (currentFlow) => {\n    if (!currentFlow || !('x-scalar-secret-redirect-uri' in currentFlow)) {\n      return\n    }\n\n    const flowIdentity = resolveFlowIdentity(currentFlow)\n    if (prefilledFlowIdentity.value !== flowIdentity) {\n      prefilledFlowIdentity.value = flowIdentity\n      hasHandledRedirectPrefill.value = false\n    }\n\n    if (hasHandledRedirectPrefill.value) {\n      return\n    }\n\n    const newRedirectUri = (currentFlow as OAuthFlowAuthorizationCodeSecret)[\n      'x-scalar-secret-redirect-uri'\n    ]\n    const defaultRedirectUri = resolveDefaultOAuth2RedirectUri(options)\n\n    hasHandledRedirectPrefill.value = true\n\n    // The desktop loopback path computes the redirect URI at authorize time (an\n    // ephemeral 127.0.0.1 port), so persisting a default into the document would\n    // only bake in a stale, unused value. Leave it empty and show a hint instead.\n    if (\n      newRedirectUri ||\n      !defaultRedirectUri ||\n      options.captureOAuth2Callback\n    ) {\n      return\n    }\n\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-redirect-uri': defaultRedirectUri,\n    })\n  },\n  { immediate: true },\n)\n\n/**\n * Authorizes the user using the specified OAuth flow.\n * Opens the appropriate OAuth dialog and/or performs the token exchange.\n */\nconst handleAuthorize = async (): Promise<void> => {\n  if (loader.isLoading) {\n    return\n  }\n\n  loader.start()\n\n  const [error, tokens] = await authorizeOauth2(\n    flows,\n    type,\n    selectedScopes.value,\n    server,\n    proxyUrl,\n    getEnvironmentVariables(environment),\n    options.customFetch,\n    options.captureOAuth2Callback,\n  )\n\n  await loader.clear()\n\n  if (tokens?.accessToken) {\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-token': tokens.accessToken,\n      ...(tokens.refreshToken\n        ? { 'x-scalar-secret-refresh-token': tokens.refreshToken }\n        : {}),\n    })\n  } else {\n    console.error(error)\n    toast(error?.message ?? 'Failed to authorize', 'error')\n  }\n}\n\n/** Whether the current flow supports refreshing the access token */\nconst supportsRefreshToken = computed(() => type !== 'implicit')\n\n/**\n * Refresh URL placeholder, shows tokenUrl as hint if refreshUrl is not specified.\n * This helps users understand that tokenUrl will be used as fallback.\n */\nconst refreshUrlPlaceholder = computed(() => {\n  if ('tokenUrl' in flow.value && flow.value.tokenUrl) {\n    return flow.value.tokenUrl\n  }\n  return 'https://galaxy.scalar.com/oauth/refresh'\n})\n\n/**\n * Uses the stored refresh token to obtain a new access token\n * via grant_type=refresh_token.\n */\nconst handleRefresh = async (): Promise<void> => {\n  if (loader.isLoading || type === 'implicit') {\n    return\n  }\n\n  loader.start()\n\n  const [error, tokens] = await refreshOauth2Token(\n    flows,\n    type,\n    proxyUrl,\n    server,\n    getEnvironmentVariables(environment),\n    options.customFetch,\n  )\n\n  await loader.clear()\n\n  if (tokens?.accessToken) {\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-token': tokens.accessToken,\n      ...(tokens.refreshToken\n        ? { 'x-scalar-secret-refresh-token': tokens.refreshToken }\n        : {}),\n    })\n  } else {\n    console.error(error)\n    toast(error?.message ?? 'Failed to refresh token', 'error')\n  }\n}\n\n/** Updates the secret location */\nconst handleSecretLocationUpdate = (value: string): void => {\n  const credentialsLocation = value === 'body' ? 'body' : 'header'\n\n  if (scheme.type !== 'openIdConnect') {\n    handleOauth2Update({\n      'x-scalar-credentials-location': credentialsLocation,\n    })\n  }\n\n  handleOauth2SecretsUpdate({\n    'x-scalar-credentials-location': credentialsLocation,\n  })\n}\n</script>\n\n<template>\n  <!-- Access Token Display: Shows when user is already authorized -->\n  <template v-if=\"Boolean(flow['x-scalar-secret-token'])\">\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        class=\"border-r-transparent\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-token']\"\n        placeholder=\"QUxMIFlPVVIgQkFTRSBBUkUgQkVMT05HIFRPIFVT\"\n        type=\"password\"\n        @update:modelValue=\"\n          (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-token': v })\n        \">\n        Access Token\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"supportsRefreshToken\">\n      <RequestAuthDataTableInput\n        class=\"border-r-transparent\"\n        :environment\n        :modelValue=\"flow.refreshUrl ?? ''\"\n        :placeholder=\"refreshUrlPlaceholder\"\n        @update:modelValue=\"(v) => handleOauth2Update({ refreshUrl: v })\">\n        Refresh URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow class=\"min-w-full\">\n      <div class=\"flex h-8 items-center justify-end gap-2 border-t\">\n        <ScalarButton\n          v-if=\"supportsRefreshToken\"\n          class=\"p-0 px-2 py-0.5\"\n          :loader\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleRefresh\">\n          Refresh\n        </ScalarButton>\n        <ScalarButton\n          class=\"mr-1 p-0 px-2 py-0.5\"\n          :disabled=\"loader.isLoading\"\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleClearAccessTokens\">\n          Clear\n        </ScalarButton>\n      </div>\n    </DataTableRow>\n  </template>\n\n  <!-- Authorization Form: Shows when user needs to authorize -->\n  <template v-else>\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        v-if=\"'authorizationUrl' in flow\"\n        containerClass=\"border-r-0\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-auth-url'] ?? ''\"\n        placeholder=\"https://galaxy.scalar.com/authorize\"\n        @update:modelValue=\"\n          (v) => {\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-auth-url': v })\n            handleOauth2Update({ authorizationUrl: v })\n          }\n        \">\n        Auth URL\n      </RequestAuthDataTableInput>\n\n      <RequestAuthDataTableInput\n        v-if=\"'tokenUrl' in flow\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-token-url'] ?? ''\"\n        placeholder=\"https://galaxy.scalar.com/token\"\n        @update:modelValue=\"\n          (v) => {\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-token-url': v })\n            handleOauth2Update({ tokenUrl: v })\n          }\n        \">\n        Token URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"'x-scalar-secret-redirect-uri' in flow\">\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"flow['x-scalar-secret-redirect-uri']\"\n        :placeholder=\"\n          options.captureOAuth2Callback\n            ? `${resolveDefaultOAuth2RedirectUri(options) || 'http://127.0.0.1'} (handled automatically)`\n            : 'Optional redirect URL'\n        \"\n        @update:modelValue=\"\n          (v) => {\n            hasHandledRedirectPrefill = true\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-redirect-uri': v })\n          }\n        \">\n        Redirect URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <template\n      v-if=\"\n        'x-scalar-secret-username' in flow && 'x-scalar-secret-password' in flow\n      \">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          class=\"text-c-2\"\n          :environment\n          :modelValue=\"flow['x-scalar-secret-username']\"\n          placeholder=\"janedoe\"\n          @update:modelValue=\"\n            (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-username': v })\n          \">\n          Username\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :environment\n          :modelValue=\"flow['x-scalar-secret-password']\"\n          placeholder=\"********\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-password': v })\n          \">\n          Password\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"flow['x-scalar-secret-client-id']\"\n        placeholder=\"12345\"\n        @update:modelValue=\"\n          (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-client-id': v })\n        \">\n        Client ID\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"showClientSecret\">\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"clientSecretValue\"\n        placeholder=\"XYZ123\"\n        type=\"password\"\n        @update:modelValue=\"\n          (v) =>\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-client-secret': v })\n        \">\n        Client Secret\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"'x-usePkce' in flow\">\n      <RequestAuthDataTableInput\n        :enum=\"pkceOptions\"\n        :environment\n        :modelValue=\"flow['x-usePkce']\"\n        readOnly\n        @update:modelValue=\"\n          (v) =>\n            handleOauth2Update({\n              'x-usePkce': v as XusePkce['x-usePkce'],\n            })\n        \">\n        Use PKCE\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <!-- Credentials Location -->\n    <DataTableRow v-if=\"type !== 'implicit'\">\n      <RequestAuthDataTableInput\n        :enum=\"['header', 'body']\"\n        :environment\n        :modelValue=\"\n          (flow as NonImplicitFlow)['x-scalar-credentials-location'] || 'header'\n        \"\n        placeholder=\"header\"\n        readOnly\n        @update:modelValue=\"(v) => handleSecretLocationUpdate(v)\">\n        Credentials Location\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <!-- Scopes -->\n    <DataTableRow>\n      <OAuthScopesInput\n        :flow\n        :flowType=\"type\"\n        :selectedScopes\n        @update:selectedScopes=\"(v) => emits('update:selectedScopes', v)\"\n        @upsert:scope=\"(v) => emits('upsert:scope', v)\"\n        @delete:scope=\"(v) => emits('delete:scope', v)\" />\n    </DataTableRow>\n\n    <DataTableRow class=\"min-w-full\">\n      <div class=\"flex h-8 w-full items-center justify-end border-t\">\n        <!-- Allow clearing the oauth section and going back to discovery -->\n        <ScalarButton\n          v-if=\"scheme.type === 'openIdConnect'\"\n          class=\"mr-1 p-0 px-2 py-0.5\"\n          :disabled=\"loader.isLoading\"\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"clearOauth2Secrets\">\n          Clear\n        </ScalarButton>\n\n        <ScalarButton\n          class=\"mr-0.75 p-0 px-2 py-0.5\"\n          :loader\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleAuthorize\">\n          Authorize\n        </ScalarButton>\n      </div>\n    </DataTableRow>\n  </template>\n</template>\n"],"mappings":""}

package/dist/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue.script.js

@@ -108,7 +108,7 @@ var OAuth2_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */ defineC
 			const newRedirectUri = currentFlow["x-scalar-secret-redirect-uri"];
 			const defaultRedirectUri = resolveDefaultOAuth2RedirectUri(__props.options);
 			hasHandledRedirectPrefill.value = true;
-			if (newRedirectUri || !defaultRedirectUri) return;
+			if (newRedirectUri || !defaultRedirectUri || __props.options.captureOAuth2Callback) return;
 			handleOauth2SecretsUpdate({ "x-scalar-secret-redirect-uri": defaultRedirectUri });
 		}, { immediate: true });
 		/**
@@ -118,7 +118,7 @@ var OAuth2_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */ defineC
 		const handleAuthorize = async () => {
 			if (loader.isLoading) return;
 			loader.start();
-			const [error, tokens] = await authorizeOauth2(__props.flows, __props.type, selectedScopes.value, __props.server, __props.proxyUrl, getEnvironmentVariables(__props.environment), __props.options.customFetch);
+			const [error, tokens] = await authorizeOauth2(__props.flows, __props.type, selectedScopes.value, __props.server, __props.proxyUrl, getEnvironmentVariables(__props.environment), __props.options.customFetch, __props.options.captureOAuth2Callback);
 			await loader.clear();
 			if (tokens?.accessToken) handleOauth2SecretsUpdate({
 				"x-scalar-secret-token": tokens.accessToken,
@@ -253,7 +253,7 @@ var OAuth2_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */ defineC
 					default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
 						environment: __props.environment,
 						modelValue: flow.value["x-scalar-secret-redirect-uri"],
-						placeholder: "Optional redirect URL",
+						placeholder: __props.options.captureOAuth2Callback ? `${unref(resolveDefaultOAuth2RedirectUri)(__props.options) || "http://127.0.0.1"} (handled automatically)` : "Optional redirect URL",
 						"onUpdate:modelValue": _cache[4] || (_cache[4] = (v) => {
 							hasHandledRedirectPrefill.value = true;
 							handleOauth2SecretsUpdate({ "x-scalar-secret-redirect-uri": v });
@@ -261,7 +261,11 @@ var OAuth2_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */ defineC
 					}, {
 						default: withCtx(() => [..._cache[20] || (_cache[20] = [createTextVNode(" Redirect URL ", -1)])]),
 						_: 1
-					}, 8, ["environment", "modelValue"])]),
+					}, 8, [
+						"environment",
+						"modelValue",
+						"placeholder"
+					])]),
 					_: 1
 				})) : createCommentVNode("", true),
 				"x-scalar-secret-username" in flow.value && "x-scalar-secret-password" in flow.value ? (openBlock(), createElementBlock(Fragment, { key: 1 }, [createVNode(unref(DataTableRow_default), null, {

package/dist/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue.script.js.map

@@ -1 +1 @@
-{"version":3,"file":"OAuth2.vue.script.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue"],"sourcesContent":["<script lang=\"ts\">\n/**  Any config options required for the OAuth2 flow */\nexport type OAuth2Options = Pick<\n  ApiClientConfiguration,\n  'oauth2RedirectUri'\n> & {\n  /** Optional fetch override (IPC-backed on desktop) used for token exchange, refresh, and OIDC discovery */\n  customFetch?: typeof fetch\n}\n</script>\n\n<script setup lang=\"ts\">\nimport { ScalarButton } from '@scalar/components/button'\nimport { useLoadingState } from '@scalar/components/loading'\nimport type { ApiClientConfiguration } from '@scalar/types/api-reference'\nimport { pkceOptions } from '@scalar/types/entities'\nimport { useToasts } from '@scalar/use-toasts'\nimport type { SecretsOAuthFlows } from '@scalar/workspace-store/entities/auth'\nimport type {\n  ApiReferenceEvents,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport {\n  getEnvironmentVariables,\n  type OAuthFlowAuthorizationCodeSecret,\n  type OAuthFlowClientCredentialsSecret,\n  type OAuthFlowPasswordSecret,\n  type OAuthFlowsObjectSecret,\n  type SecuritySchemeObjectSecret,\n} from '@scalar/workspace-store/request-example'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport type { XScalarCredentialsLocation } from '@scalar/workspace-store/schemas/extensions/security/x-scalar-credentials-location'\nimport { type XusePkce } from '@scalar/workspace-store/schemas/extensions/security/x-use-pkce'\nimport type {\n  OAuthFlow,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { computed, ref, watch } from 'vue'\n\nimport OAuthScopesInput from '@/v2/blocks/scalar-auth-selector-block/components/OAuthScopesInput.vue'\nimport {\n  authorizeOauth2,\n  refreshOauth2Token,\n} from '@/v2/blocks/scalar-auth-selector-block/helpers/oauth'\nimport { resolveDefaultOAuth2RedirectUri } from '@/v2/blocks/scalar-auth-selector-block/helpers/resolve-default-oauth2-redirect-url'\nimport { DataTableRow } from '@/v2/components/data-table'\n\nimport RequestAuthDataTableInput from './RequestAuthDataTableInput.vue'\n\nconst {\n  environment,\n  flows,\n  type,\n  scheme,\n  selectedScopes: selectedScopesProp,\n  server,\n  proxyUrl,\n  eventBus,\n  name,\n  options = {},\n} = defineProps<{\n  /** Current environment configuration */\n  environment: XScalarEnvironment\n  /** OAuth flows */\n  flows: OAuthFlowsObjectSecret\n  /** Type of the OAuth flow */\n  type: keyof OAuthFlowsObjectSecret\n  /** Selected scopes */\n  selectedScopes: string[]\n  /** Security scheme */\n  scheme: SecuritySchemeObjectSecret\n  /** Current server configuration */\n  server: ServerObject | null\n  /** Proxy URL */\n  proxyUrl: string\n  /** Name of the security scheme */\n  name: string\n  /** Event bus for authentication updates */\n  eventBus: WorkspaceEventBus\n  /**  Any config options required for the OAuth2 flow */\n  options?: OAuth2Options\n}>()\n\nconst emits = defineEmits<{\n  (e: 'update:selectedScopes', payload: { scopes: string[] }): void\n  (\n    e: 'upsert:scope',\n    payload: Omit<ApiReferenceEvents['auth:upsert:scopes'], 'name'>,\n  ): void\n  (\n    e: 'delete:scope',\n    payload: Omit<ApiReferenceEvents['auth:delete:scopes'], 'name'>,\n  ): void\n}>()\n\nconst loader = useLoadingState()\nconst { toast } = useToasts()\n\n/** The current OAuth flow based on the selected type */\nconst flow = computed(() => flows[type]!)\ntype NonImplicitFlow =\n  | OAuthFlowPasswordSecret\n  | OAuthFlowClientCredentialsSecret\n  | OAuthFlowAuthorizationCodeSecret\n\n/** We filter selected scopes to only include scopes that are defined on this flow (own keys only). */\nconst selectedScopes = computed(() => {\n  const definedScopes = flow.value.scopes\n  if (!definedScopes) {\n    return []\n  }\n  return selectedScopesProp.filter((scope) =>\n    Object.hasOwn(definedScopes, scope),\n  )\n})\n\n/**\n * PKCE public clients do not use a client_secret. Hide the field when the\n * document enables PKCE so readers are not prompted for an unused secret.\n */\nconst showClientSecret = computed(() => {\n  if (!('x-scalar-secret-client-secret' in flow.value)) {\n    return false\n  }\n  const pkceMode =\n    'x-usePkce' in flow.value ? flow.value['x-usePkce'] : undefined\n  return pkceMode !== 'SHA-256' && pkceMode !== 'plain'\n})\n\nconst clientSecretValue = computed((): string => {\n  const f = flow.value as { 'x-scalar-secret-client-secret'?: string }\n  return f['x-scalar-secret-client-secret'] ?? ''\n})\n\n/** Updates the security scheme base */\nconst handleOauth2Update = (\n  payload: Partial<OAuthFlow & XScalarCredentialsLocation>,\n): void => {\n  // OpenIdConnect uses the secrets update for all\n  if (scheme.type === 'openIdConnect') {\n    return handleOauth2SecretsUpdate(payload)\n  }\n\n  eventBus.emit('auth:update:security-scheme', {\n    payload: {\n      type: scheme.type,\n      flows: {\n        [type]: payload,\n      },\n    },\n    name,\n  })\n}\n\n/** Updates the flow secrets */\nconst handleOauth2SecretsUpdate = (\n  payload: Omit<Partial<SecretsOAuthFlows[keyof SecretsOAuthFlows]>, 'type'>,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: {\n      type: scheme.type,\n      [type]: payload,\n    },\n    name,\n  })\n\n/** Clears the flow secrets */\nconst clearOauth2Secrets = (): void => {\n  if (loader.isLoading) {\n    return\n  }\n  eventBus.emit('auth:clear:security-scheme-secrets', {\n    name,\n  })\n}\n\n/** Clears stored access and refresh tokens (authorized state) */\nconst handleClearAccessTokens = (): void => {\n  if (loader.isLoading) {\n    return\n  }\n  handleOauth2SecretsUpdate({\n    'x-scalar-secret-token': '',\n    'x-scalar-secret-refresh-token': '',\n  })\n}\n\n/** Track redirect URI prefill per flow instance to support document switching */\nconst prefilledFlowIdentity = ref<string | null>(null)\nconst hasHandledRedirectPrefill = ref(false)\n\nconst resolveFlowIdentity = (\n  currentFlow: OAuthFlowsObjectSecret[keyof OAuthFlowsObjectSecret] | undefined,\n): string =>\n  JSON.stringify({\n    type,\n    authorizationUrl:\n      currentFlow && 'authorizationUrl' in currentFlow\n        ? currentFlow.authorizationUrl\n        : '',\n    tokenUrl:\n      currentFlow && 'tokenUrl' in currentFlow ? currentFlow.tokenUrl : '',\n    refreshUrl: currentFlow?.refreshUrl ?? '',\n    scopes: Object.keys(currentFlow?.scopes ?? {}),\n  })\n\n/** Default the redirect-uri to the current origin if we have access to window */\nwatch(\n  () => flow.value,\n  (currentFlow) => {\n    if (!currentFlow || !('x-scalar-secret-redirect-uri' in currentFlow)) {\n      return\n    }\n\n    const flowIdentity = resolveFlowIdentity(currentFlow)\n    if (prefilledFlowIdentity.value !== flowIdentity) {\n      prefilledFlowIdentity.value = flowIdentity\n      hasHandledRedirectPrefill.value = false\n    }\n\n    if (hasHandledRedirectPrefill.value) {\n      return\n    }\n\n    const newRedirectUri = (currentFlow as OAuthFlowAuthorizationCodeSecret)[\n      'x-scalar-secret-redirect-uri'\n    ]\n    const defaultRedirectUri = resolveDefaultOAuth2RedirectUri(options)\n\n    hasHandledRedirectPrefill.value = true\n\n    if (newRedirectUri || !defaultRedirectUri) {\n      return\n    }\n\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-redirect-uri': defaultRedirectUri,\n    })\n  },\n  { immediate: true },\n)\n\n/**\n * Authorizes the user using the specified OAuth flow.\n * Opens the appropriate OAuth dialog and/or performs the token exchange.\n */\nconst handleAuthorize = async (): Promise<void> => {\n  if (loader.isLoading) {\n    return\n  }\n\n  loader.start()\n\n  const [error, tokens] = await authorizeOauth2(\n    flows,\n    type,\n    selectedScopes.value,\n    server,\n    proxyUrl,\n    getEnvironmentVariables(environment),\n    options.customFetch,\n  )\n\n  await loader.clear()\n\n  if (tokens?.accessToken) {\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-token': tokens.accessToken,\n      ...(tokens.refreshToken\n        ? { 'x-scalar-secret-refresh-token': tokens.refreshToken }\n        : {}),\n    })\n  } else {\n    console.error(error)\n    toast(error?.message ?? 'Failed to authorize', 'error')\n  }\n}\n\n/** Whether the current flow supports refreshing the access token */\nconst supportsRefreshToken = computed(() => type !== 'implicit')\n\n/**\n * Refresh URL placeholder, shows tokenUrl as hint if refreshUrl is not specified.\n * This helps users understand that tokenUrl will be used as fallback.\n */\nconst refreshUrlPlaceholder = computed(() => {\n  if ('tokenUrl' in flow.value && flow.value.tokenUrl) {\n    return flow.value.tokenUrl\n  }\n  return 'https://galaxy.scalar.com/oauth/refresh'\n})\n\n/**\n * Uses the stored refresh token to obtain a new access token\n * via grant_type=refresh_token.\n */\nconst handleRefresh = async (): Promise<void> => {\n  if (loader.isLoading || type === 'implicit') {\n    return\n  }\n\n  loader.start()\n\n  const [error, tokens] = await refreshOauth2Token(\n    flows,\n    type,\n    proxyUrl,\n    server,\n    getEnvironmentVariables(environment),\n    options.customFetch,\n  )\n\n  await loader.clear()\n\n  if (tokens?.accessToken) {\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-token': tokens.accessToken,\n      ...(tokens.refreshToken\n        ? { 'x-scalar-secret-refresh-token': tokens.refreshToken }\n        : {}),\n    })\n  } else {\n    console.error(error)\n    toast(error?.message ?? 'Failed to refresh token', 'error')\n  }\n}\n\n/** Updates the secret location */\nconst handleSecretLocationUpdate = (value: string): void => {\n  const credentialsLocation = value === 'body' ? 'body' : 'header'\n\n  if (scheme.type !== 'openIdConnect') {\n    handleOauth2Update({\n      'x-scalar-credentials-location': credentialsLocation,\n    })\n  }\n\n  handleOauth2SecretsUpdate({\n    'x-scalar-credentials-location': credentialsLocation,\n  })\n}\n</script>\n\n<template>\n  <!-- Access Token Display: Shows when user is already authorized -->\n  <template v-if=\"Boolean(flow['x-scalar-secret-token'])\">\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        class=\"border-r-transparent\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-token']\"\n        placeholder=\"QUxMIFlPVVIgQkFTRSBBUkUgQkVMT05HIFRPIFVT\"\n        type=\"password\"\n        @update:modelValue=\"\n          (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-token': v })\n        \">\n        Access Token\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"supportsRefreshToken\">\n      <RequestAuthDataTableInput\n        class=\"border-r-transparent\"\n        :environment\n        :modelValue=\"flow.refreshUrl ?? ''\"\n        :placeholder=\"refreshUrlPlaceholder\"\n        @update:modelValue=\"(v) => handleOauth2Update({ refreshUrl: v })\">\n        Refresh URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow class=\"min-w-full\">\n      <div class=\"flex h-8 items-center justify-end gap-2 border-t\">\n        <ScalarButton\n          v-if=\"supportsRefreshToken\"\n          class=\"p-0 px-2 py-0.5\"\n          :loader\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleRefresh\">\n          Refresh\n        </ScalarButton>\n        <ScalarButton\n          class=\"mr-1 p-0 px-2 py-0.5\"\n          :disabled=\"loader.isLoading\"\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleClearAccessTokens\">\n          Clear\n        </ScalarButton>\n      </div>\n    </DataTableRow>\n  </template>\n\n  <!-- Authorization Form: Shows when user needs to authorize -->\n  <template v-else>\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        v-if=\"'authorizationUrl' in flow\"\n        containerClass=\"border-r-0\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-auth-url'] ?? ''\"\n        placeholder=\"https://galaxy.scalar.com/authorize\"\n        @update:modelValue=\"\n          (v) => {\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-auth-url': v })\n            handleOauth2Update({ authorizationUrl: v })\n          }\n        \">\n        Auth URL\n      </RequestAuthDataTableInput>\n\n      <RequestAuthDataTableInput\n        v-if=\"'tokenUrl' in flow\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-token-url'] ?? ''\"\n        placeholder=\"https://galaxy.scalar.com/token\"\n        @update:modelValue=\"\n          (v) => {\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-token-url': v })\n            handleOauth2Update({ tokenUrl: v })\n          }\n        \">\n        Token URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"'x-scalar-secret-redirect-uri' in flow\">\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"flow['x-scalar-secret-redirect-uri']\"\n        placeholder=\"Optional redirect URL\"\n        @update:modelValue=\"\n          (v) => {\n            hasHandledRedirectPrefill = true\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-redirect-uri': v })\n          }\n        \">\n        Redirect URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <template\n      v-if=\"\n        'x-scalar-secret-username' in flow && 'x-scalar-secret-password' in flow\n      \">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          class=\"text-c-2\"\n          :environment\n          :modelValue=\"flow['x-scalar-secret-username']\"\n          placeholder=\"janedoe\"\n          @update:modelValue=\"\n            (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-username': v })\n          \">\n          Username\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :environment\n          :modelValue=\"flow['x-scalar-secret-password']\"\n          placeholder=\"********\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-password': v })\n          \">\n          Password\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"flow['x-scalar-secret-client-id']\"\n        placeholder=\"12345\"\n        @update:modelValue=\"\n          (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-client-id': v })\n        \">\n        Client ID\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"showClientSecret\">\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"clientSecretValue\"\n        placeholder=\"XYZ123\"\n        type=\"password\"\n        @update:modelValue=\"\n          (v) =>\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-client-secret': v })\n        \">\n        Client Secret\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"'x-usePkce' in flow\">\n      <RequestAuthDataTableInput\n        :enum=\"pkceOptions\"\n        :environment\n        :modelValue=\"flow['x-usePkce']\"\n        readOnly\n        @update:modelValue=\"\n          (v) =>\n            handleOauth2Update({\n              'x-usePkce': v as XusePkce['x-usePkce'],\n            })\n        \">\n        Use PKCE\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <!-- Credentials Location -->\n    <DataTableRow v-if=\"type !== 'implicit'\">\n      <RequestAuthDataTableInput\n        :enum=\"['header', 'body']\"\n        :environment\n        :modelValue=\"\n          (flow as NonImplicitFlow)['x-scalar-credentials-location'] || 'header'\n        \"\n        placeholder=\"header\"\n        readOnly\n        @update:modelValue=\"(v) => handleSecretLocationUpdate(v)\">\n        Credentials Location\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <!-- Scopes -->\n    <DataTableRow>\n      <OAuthScopesInput\n        :flow\n        :flowType=\"type\"\n        :selectedScopes\n        @update:selectedScopes=\"(v) => emits('update:selectedScopes', v)\"\n        @upsert:scope=\"(v) => emits('upsert:scope', v)\"\n        @delete:scope=\"(v) => emits('delete:scope', v)\" />\n    </DataTableRow>\n\n    <DataTableRow class=\"min-w-full\">\n      <div class=\"flex h-8 w-full items-center justify-end border-t\">\n        <!-- Allow clearing the oauth section and going back to discovery -->\n        <ScalarButton\n          v-if=\"scheme.type === 'openIdConnect'\"\n          class=\"mr-1 p-0 px-2 py-0.5\"\n          :disabled=\"loader.isLoading\"\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"clearOauth2Secrets\">\n          Clear\n        </ScalarButton>\n\n        <ScalarButton\n          class=\"mr-0.75 p-0 px-2 py-0.5\"\n          :loader\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleAuthorize\">\n          Authorize\n        </ScalarButton>\n      </div>\n    </DataTableRow>\n  </template>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmFA,MAAM,QAAQ;EAYd,MAAM,SAAS,iBAAgB;EAC/B,MAAM,EAAE,UAAU,WAAU;;EAG5B,MAAM,OAAO,eAAe,QAAA,MAAM,QAAA,MAAM;EAOxC,MAAM,iBAAiB,eAAe;GACpC,MAAM,gBAAgB,KAAK,MAAM;AACjC,OAAI,CAAC,cACH,QAAO,EAAC;AAEV,UAAO,QAAA,eAAmB,QAAQ,UAChC,OAAO,OAAO,eAAe,MAAM,CACrC;IACD;;;;;EAMD,MAAM,mBAAmB,eAAe;AACtC,OAAI,EAAE,mCAAmC,KAAK,OAC5C,QAAO;GAET,MAAM,WACJ,eAAe,KAAK,QAAQ,KAAK,MAAM,eAAe,KAAA;AACxD,UAAO,aAAa,aAAa,aAAa;IAC/C;EAED,MAAM,oBAAoB,eAAuB;AAE/C,UADU,KAAK,MACN,oCAAoC;IAC9C;;EAGD,MAAM,sBACJ,YACS;AAET,OAAI,QAAA,OAAO,SAAS,gBAClB,QAAO,0BAA0B,QAAO;AAG1C,WAAA,SAAS,KAAK,+BAA+B;IAC3C,SAAS;KACP,MAAM,QAAA,OAAO;KACb,OAAO,GACJ,QAAA,OAAO,SACT;KACF;IACD,MAAG,QAAA;IACJ,CAAA;;;EAIH,MAAM,6BACJ,YAEA,QAAA,SAAS,KAAK,uCAAuC;GACnD,SAAS;IACP,MAAM,QAAA,OAAO;KACZ,QAAA,OAAO;IACT;GACD,MAAG,QAAA;GACJ,CAAA;;EAGH,MAAM,2BAAiC;AACrC,OAAI,OAAO,UACT;AAEF,WAAA,SAAS,KAAK,sCAAsC,EAClD,MAAG,QAAA,MACJ,CAAA;;;EAIH,MAAM,gCAAsC;AAC1C,OAAI,OAAO,UACT;AAEF,6BAA0B;IACxB,yBAAyB;IACzB,iCAAiC;IAClC,CAAA;;;EAIH,MAAM,wBAAwB,IAAmB,KAAI;EACrD,MAAM,4BAA4B,IAAI,MAAK;EAE3C,MAAM,uBACJ,gBAEA,KAAK,UAAU;GACb,MAAG,QAAA;GACH,kBACE,eAAe,sBAAsB,cACjC,YAAY,mBACZ;GACN,UACE,eAAe,cAAc,cAAc,YAAY,WAAW;GACpE,YAAY,aAAa,cAAc;GACvC,QAAQ,OAAO,KAAK,aAAa,UAAU,EAAE,CAAC;GAC/C,CAAA;;AAGH,cACQ,KAAK,QACV,gBAAgB;AACf,OAAI,CAAC,eAAe,EAAE,kCAAkC,aACtD;GAGF,MAAM,eAAe,oBAAoB,YAAW;AACpD,OAAI,sBAAsB,UAAU,cAAc;AAChD,0BAAsB,QAAQ;AAC9B,8BAA0B,QAAQ;;AAGpC,OAAI,0BAA0B,MAC5B;GAGF,MAAM,iBAAkB,YACtB;GAEF,MAAM,qBAAqB,gCAAgC,QAAA,QAAO;AAElE,6BAA0B,QAAQ;AAElC,OAAI,kBAAkB,CAAC,mBACrB;AAGF,6BAA0B,EACxB,gCAAgC,oBACjC,CAAA;KAEH,EAAE,WAAW,MAAM,CACrB;;;;;EAMA,MAAM,kBAAkB,YAA2B;AACjD,OAAI,OAAO,UACT;AAGF,UAAO,OAAM;GAEb,MAAM,CAAC,OAAO,UAAU,MAAM,gBAC5B,QAAA,OACA,QAAA,MACA,eAAe,OACf,QAAA,QACA,QAAA,UACA,wBAAwB,QAAA,YAAY,EACpC,QAAA,QAAQ,YACV;AAEA,SAAM,OAAO,OAAM;AAEnB,OAAI,QAAQ,YACV,2BAA0B;IACxB,yBAAyB,OAAO;IAChC,GAAI,OAAO,eACP,EAAE,iCAAiC,OAAO,cAAa,GACvD,EAAE;IACP,CAAA;QACI;AACL,YAAQ,MAAM,MAAK;AACnB,UAAM,OAAO,WAAW,uBAAuB,QAAO;;;;EAK1D,MAAM,uBAAuB,eAAe,QAAA,SAAS,WAAU;;;;;EAM/D,MAAM,wBAAwB,eAAe;AAC3C,OAAI,cAAc,KAAK,SAAS,KAAK,MAAM,SACzC,QAAO,KAAK,MAAM;AAEpB,UAAO;IACR;;;;;EAMD,MAAM,gBAAgB,YAA2B;AAC/C,OAAI,OAAO,aAAa,QAAA,SAAS,WAC/B;AAGF,UAAO,OAAM;GAEb,MAAM,CAAC,OAAO,UAAU,MAAM,mBAC5B,QAAA,OACA,QAAA,MACA,QAAA,UACA,QAAA,QACA,wBAAwB,QAAA,YAAY,EACpC,QAAA,QAAQ,YACV;AAEA,SAAM,OAAO,OAAM;AAEnB,OAAI,QAAQ,YACV,2BAA0B;IACxB,yBAAyB,OAAO;IAChC,GAAI,OAAO,eACP,EAAE,iCAAiC,OAAO,cAAa,GACvD,EAAE;IACP,CAAA;QACI;AACL,YAAQ,MAAM,MAAK;AACnB,UAAM,OAAO,WAAW,2BAA2B,QAAO;;;;EAK9D,MAAM,8BAA8B,UAAwB;GAC1D,MAAM,sBAAsB,UAAU,SAAS,SAAS;AAExD,OAAI,QAAA,OAAO,SAAS,gBAClB,oBAAmB,EACjB,iCAAiC,qBAClC,CAAA;AAGH,6BAA0B,EACxB,iCAAiC,qBAClC,CAAA;;;UAMe,QAAQ,KAAA,MAAI,yBAAA,IAAA,WAAA,EAA5B,mBA+CW,UAAA,EAAA,KAAA,GAAA,EAAA;IA9CT,YAYe,MAAA,qBAAA,EAAA,MAAA;4BADe,CAV5B,YAU4B,mCAAA;MAT1B,OAAM;MACL,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACZ,MAAK;MACJ,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAM,0BAAyB,EAAA,yBAA4B,GAAC,CAAA;;6BAI9F,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,kBAEJ,GAAA,CAAA,EAAA,CAAA;;;;;IAGkB,qBAAA,SAAA,WAAA,EAApB,YASe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAP5B,YAO4B,mCAAA;MAN1B,OAAM;MACL,aAAA,QAAA;MACA,YAAY,KAAA,MAAK,cAAU;MAC3B,aAAa,sBAAA;MACb,uBAAiB,OAAA,OAAA,OAAA,MAAG,MAAM,mBAAkB,EAAA,YAAe,GAAC,CAAA;;6BAE/D,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFoE,iBAEpE,GAAA,CAAA,EAAA,CAAA;;;;;;;;;IAGF,YAoBe,MAAA,qBAAA,EAAA,EApBD,OAAM,cAAY,EAAA;4BAmBxB,CAlBN,mBAkBM,OAlBN,YAkBM,CAhBI,qBAAA,SAAA,WAAA,EADR,YAQe,MAAA,aAAA,EAAA;;MANb,OAAM;MACL,QAAA,MAAA,OAAM;MACP,MAAK;MACL,SAAQ;MACP,SAAO;;6BAEV,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFyB,aAEzB,GAAA,CAAA,EAAA,CAAA;;wDACA,YAOe,MAAA,aAAA,EAAA;MANb,OAAM;MACL,UAAU,MAAA,OAAM,CAAC;MAClB,MAAK;MACL,SAAQ;MACP,SAAO;;6BAEV,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFmC,WAEnC,GAAA,CAAA,EAAA,CAAA;;;;;2BAMN,mBAyKW,UAAA,EAAA,KAAA,GAAA,EAAA;IAxKT,YA6Be,MAAA,qBAAA,EAAA,MAAA;4BAfe,CAAA,sBAZE,KAAA,SAAA,WAAA,EAD9B,YAa4B,mCAAA;;MAX1B,gBAAe;MACd,aAAA,QAAA;MACA,YAAY,KAAA,MAAI,+BAAA;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAC;AAAmB,iCAAyB,EAAA,4BAA+B,GAAC,CAAA;AAAgB,0BAAkB,EAAA,kBAAqB,GAAC,CAAA;;;6BAOvK,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;yFAGsB,KAAA,SAAA,WAAA,EADtB,YAY4B,mCAAA;;MAVzB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI,gCAAA;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAC;AAAmB,iCAAyB,EAAA,6BAAgC,GAAC,CAAA;AAAgB,0BAAkB,EAAA,UAAa,GAAC,CAAA;;;6BAOhK,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,eAEJ,GAAA,CAAA,EAAA,CAAA;;;;;sCAGoD,KAAA,SAAA,WAAA,EAAtD,YAae,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAX5B,YAW4B,mCAAA;MAVzB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAC;AAAmB,iCAAA,QAAyB;AAAoB,iCAAyB,EAAA,gCAAmC,GAAC,CAAA;;;6BAOhK,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,kBAEJ,GAAA,CAAA,EAAA,CAAA;;;;;kCAI6C,KAAA,SAAI,8BAAkC,KAAA,SAAA,WAAA,EADrF,mBA6BW,UAAA,EAAA,KAAA,GAAA,EAAA,CAzBT,YAWe,MAAA,qBAAA,EAAA,MAAA;4BADe,CAT5B,YAS4B,mCAAA;MAR1B,OAAM;MACL,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAgB,MAAM,0BAAyB,EAAA,4BAA+B,GAAC,CAAA;;6BAInG,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;;;QAGF,YAWe,MAAA,qBAAA,EAAA,MAAA;4BADe,CAT5B,YAS4B,mCAAA;MARzB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACZ,MAAK;MACJ,uBAAiB,OAAA,OAAA,OAAA,MAAgB,MAAM,0BAAyB,EAAA,4BAA+B,GAAC,CAAA;;6BAInG,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;;;;IAIJ,YAUe,MAAA,qBAAA,EAAA,MAAA;4BADe,CAR5B,YAQ4B,mCAAA;MAPzB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAM,0BAAyB,EAAA,6BAAgC,GAAC,CAAA;;6BAIlG,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,eAEJ,GAAA,CAAA,EAAA,CAAA;;;;;IAGkB,iBAAA,SAAA,WAAA,EAApB,YAYe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAV5B,YAU4B,mCAAA;MATzB,aAAA,QAAA;MACA,YAAY,kBAAA;MACb,aAAY;MACZ,MAAK;MACJ,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAkB,0BAAyB,EAAA,iCAAoC,GAAC,CAAA;;6BAKlH,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,mBAEJ,GAAA,CAAA,EAAA,CAAA;;;;;mBAGiC,KAAA,SAAA,WAAA,EAAnC,YAce,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAZ5B,YAY4B,mCAAA;MAXzB,MAAM,MAAA,YAAW;MACjB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,UAAA;MACC,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAkB,mBAAkB,EAAA,aAA8B,GAAA,CAAA;;6BAOpG,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;;;;;;;;IAIkB,QAAA,SAAI,cAAA,WAAA,EAAxB,YAYe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAV5B,YAU4B,mCAAA;MATzB,MAAM,CAAA,UAAA,OAAkB;MACxB,aAAA,QAAA;MACA,YAAwB,KAAA,MAAI,oCAAA;MAG7B,aAAY;MACZ,UAAA;MACC,uBAAiB,OAAA,QAAA,OAAA,OAAG,MAAM,2BAA2B,EAAC;;6BAEzD,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAF4D,0BAE5D,GAAA,CAAA,EAAA,CAAA;;;;;IAIF,YAQe,MAAA,qBAAA,EAAA,MAAA;4BADuC,CANpD,YAMoD,0BAAA;MALjD,MAAA,KAAA;MACA,UAAU,QAAA;MACV,gBAAA,eAAA;MACA,2BAAqB,OAAA,QAAA,OAAA,OAAG,MAAM,MAAK,yBAA0B,EAAC;MAC9D,kBAAY,OAAA,QAAA,OAAA,OAAG,MAAM,MAAK,gBAAiB,EAAC;MAC5C,kBAAY,OAAA,QAAA,OAAA,OAAG,MAAM,MAAK,gBAAiB,EAAC;;;;;;;;IAGjD,YAsBe,MAAA,qBAAA,EAAA,EAtBD,OAAM,cAAY,EAAA;4BAqBxB,CApBN,mBAoBM,OApBN,YAoBM,CAjBI,QAAA,OAAO,SAAI,mBAAA,WAAA,EADnB,YAQe,MAAA,aAAA,EAAA;;MANb,OAAM;MACL,UAAU,MAAA,OAAM,CAAC;MAClB,MAAK;MACL,SAAQ;MACP,SAAO;;6BAEV,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAF8B,WAE9B,GAAA,CAAA,EAAA,CAAA;;0DAEA,YAOe,MAAA,aAAA,EAAA;MANb,OAAM;MACL,QAAA,MAAA,OAAM;MACP,MAAK;MACL,SAAQ;MACP,SAAO;;6BAEV,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAF2B,eAE3B,GAAA,CAAA,EAAA,CAAA"}
+{"version":3,"file":"OAuth2.vue.script.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/OAuth2.vue"],"sourcesContent":["<script lang=\"ts\">\n/**  Any config options required for the OAuth2 flow */\nexport type OAuth2Options = Pick<\n  ApiClientConfiguration,\n  'oauth2RedirectUri'\n> & {\n  /** Optional fetch override (IPC-backed on desktop) used for token exchange, refresh, and OIDC discovery */\n  customFetch?: typeof fetch\n  /** Optional redirect capture (loopback-backed on desktop) for interactive OAuth2 flows */\n  captureOAuth2Callback?: CaptureOAuth2Callback\n}\n</script>\n\n<script setup lang=\"ts\">\nimport { ScalarButton } from '@scalar/components/button'\nimport { useLoadingState } from '@scalar/components/loading'\nimport type { ApiClientConfiguration } from '@scalar/types/api-reference'\nimport { pkceOptions } from '@scalar/types/entities'\nimport { useToasts } from '@scalar/use-toasts'\nimport type { SecretsOAuthFlows } from '@scalar/workspace-store/entities/auth'\nimport type {\n  ApiReferenceEvents,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport {\n  getEnvironmentVariables,\n  type OAuthFlowAuthorizationCodeSecret,\n  type OAuthFlowClientCredentialsSecret,\n  type OAuthFlowPasswordSecret,\n  type OAuthFlowsObjectSecret,\n  type SecuritySchemeObjectSecret,\n} from '@scalar/workspace-store/request-example'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport type { XScalarCredentialsLocation } from '@scalar/workspace-store/schemas/extensions/security/x-scalar-credentials-location'\nimport { type XusePkce } from '@scalar/workspace-store/schemas/extensions/security/x-use-pkce'\nimport type {\n  OAuthFlow,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { computed, ref, watch } from 'vue'\n\nimport OAuthScopesInput from '@/v2/blocks/scalar-auth-selector-block/components/OAuthScopesInput.vue'\nimport {\n  authorizeOauth2,\n  refreshOauth2Token,\n  type CaptureOAuth2Callback,\n} from '@/v2/blocks/scalar-auth-selector-block/helpers/oauth'\nimport { resolveDefaultOAuth2RedirectUri } from '@/v2/blocks/scalar-auth-selector-block/helpers/resolve-default-oauth2-redirect-url'\nimport { DataTableRow } from '@/v2/components/data-table'\n\nimport RequestAuthDataTableInput from './RequestAuthDataTableInput.vue'\n\nconst {\n  environment,\n  flows,\n  type,\n  scheme,\n  selectedScopes: selectedScopesProp,\n  server,\n  proxyUrl,\n  eventBus,\n  name,\n  options = {},\n} = defineProps<{\n  /** Current environment configuration */\n  environment: XScalarEnvironment\n  /** OAuth flows */\n  flows: OAuthFlowsObjectSecret\n  /** Type of the OAuth flow */\n  type: keyof OAuthFlowsObjectSecret\n  /** Selected scopes */\n  selectedScopes: string[]\n  /** Security scheme */\n  scheme: SecuritySchemeObjectSecret\n  /** Current server configuration */\n  server: ServerObject | null\n  /** Proxy URL */\n  proxyUrl: string\n  /** Name of the security scheme */\n  name: string\n  /** Event bus for authentication updates */\n  eventBus: WorkspaceEventBus\n  /**  Any config options required for the OAuth2 flow */\n  options?: OAuth2Options\n}>()\n\nconst emits = defineEmits<{\n  (e: 'update:selectedScopes', payload: { scopes: string[] }): void\n  (\n    e: 'upsert:scope',\n    payload: Omit<ApiReferenceEvents['auth:upsert:scopes'], 'name'>,\n  ): void\n  (\n    e: 'delete:scope',\n    payload: Omit<ApiReferenceEvents['auth:delete:scopes'], 'name'>,\n  ): void\n}>()\n\nconst loader = useLoadingState()\nconst { toast } = useToasts()\n\n/** The current OAuth flow based on the selected type */\nconst flow = computed(() => flows[type]!)\ntype NonImplicitFlow =\n  | OAuthFlowPasswordSecret\n  | OAuthFlowClientCredentialsSecret\n  | OAuthFlowAuthorizationCodeSecret\n\n/** We filter selected scopes to only include scopes that are defined on this flow (own keys only). */\nconst selectedScopes = computed(() => {\n  const definedScopes = flow.value.scopes\n  if (!definedScopes) {\n    return []\n  }\n  return selectedScopesProp.filter((scope) =>\n    Object.hasOwn(definedScopes, scope),\n  )\n})\n\n/**\n * PKCE public clients do not use a client_secret. Hide the field when the\n * document enables PKCE so readers are not prompted for an unused secret.\n */\nconst showClientSecret = computed(() => {\n  if (!('x-scalar-secret-client-secret' in flow.value)) {\n    return false\n  }\n  const pkceMode =\n    'x-usePkce' in flow.value ? flow.value['x-usePkce'] : undefined\n  return pkceMode !== 'SHA-256' && pkceMode !== 'plain'\n})\n\nconst clientSecretValue = computed((): string => {\n  const f = flow.value as { 'x-scalar-secret-client-secret'?: string }\n  return f['x-scalar-secret-client-secret'] ?? ''\n})\n\n/** Updates the security scheme base */\nconst handleOauth2Update = (\n  payload: Partial<OAuthFlow & XScalarCredentialsLocation>,\n): void => {\n  // OpenIdConnect uses the secrets update for all\n  if (scheme.type === 'openIdConnect') {\n    return handleOauth2SecretsUpdate(payload)\n  }\n\n  eventBus.emit('auth:update:security-scheme', {\n    payload: {\n      type: scheme.type,\n      flows: {\n        [type]: payload,\n      },\n    },\n    name,\n  })\n}\n\n/** Updates the flow secrets */\nconst handleOauth2SecretsUpdate = (\n  payload: Omit<Partial<SecretsOAuthFlows[keyof SecretsOAuthFlows]>, 'type'>,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: {\n      type: scheme.type,\n      [type]: payload,\n    },\n    name,\n  })\n\n/** Clears the flow secrets */\nconst clearOauth2Secrets = (): void => {\n  if (loader.isLoading) {\n    return\n  }\n  eventBus.emit('auth:clear:security-scheme-secrets', {\n    name,\n  })\n}\n\n/** Clears stored access and refresh tokens (authorized state) */\nconst handleClearAccessTokens = (): void => {\n  if (loader.isLoading) {\n    return\n  }\n  handleOauth2SecretsUpdate({\n    'x-scalar-secret-token': '',\n    'x-scalar-secret-refresh-token': '',\n  })\n}\n\n/** Track redirect URI prefill per flow instance to support document switching */\nconst prefilledFlowIdentity = ref<string | null>(null)\nconst hasHandledRedirectPrefill = ref(false)\n\nconst resolveFlowIdentity = (\n  currentFlow: OAuthFlowsObjectSecret[keyof OAuthFlowsObjectSecret] | undefined,\n): string =>\n  JSON.stringify({\n    type,\n    authorizationUrl:\n      currentFlow && 'authorizationUrl' in currentFlow\n        ? currentFlow.authorizationUrl\n        : '',\n    tokenUrl:\n      currentFlow && 'tokenUrl' in currentFlow ? currentFlow.tokenUrl : '',\n    refreshUrl: currentFlow?.refreshUrl ?? '',\n    scopes: Object.keys(currentFlow?.scopes ?? {}),\n  })\n\n/** Default the redirect-uri to the current origin if we have access to window */\nwatch(\n  () => flow.value,\n  (currentFlow) => {\n    if (!currentFlow || !('x-scalar-secret-redirect-uri' in currentFlow)) {\n      return\n    }\n\n    const flowIdentity = resolveFlowIdentity(currentFlow)\n    if (prefilledFlowIdentity.value !== flowIdentity) {\n      prefilledFlowIdentity.value = flowIdentity\n      hasHandledRedirectPrefill.value = false\n    }\n\n    if (hasHandledRedirectPrefill.value) {\n      return\n    }\n\n    const newRedirectUri = (currentFlow as OAuthFlowAuthorizationCodeSecret)[\n      'x-scalar-secret-redirect-uri'\n    ]\n    const defaultRedirectUri = resolveDefaultOAuth2RedirectUri(options)\n\n    hasHandledRedirectPrefill.value = true\n\n    // The desktop loopback path computes the redirect URI at authorize time (an\n    // ephemeral 127.0.0.1 port), so persisting a default into the document would\n    // only bake in a stale, unused value. Leave it empty and show a hint instead.\n    if (\n      newRedirectUri ||\n      !defaultRedirectUri ||\n      options.captureOAuth2Callback\n    ) {\n      return\n    }\n\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-redirect-uri': defaultRedirectUri,\n    })\n  },\n  { immediate: true },\n)\n\n/**\n * Authorizes the user using the specified OAuth flow.\n * Opens the appropriate OAuth dialog and/or performs the token exchange.\n */\nconst handleAuthorize = async (): Promise<void> => {\n  if (loader.isLoading) {\n    return\n  }\n\n  loader.start()\n\n  const [error, tokens] = await authorizeOauth2(\n    flows,\n    type,\n    selectedScopes.value,\n    server,\n    proxyUrl,\n    getEnvironmentVariables(environment),\n    options.customFetch,\n    options.captureOAuth2Callback,\n  )\n\n  await loader.clear()\n\n  if (tokens?.accessToken) {\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-token': tokens.accessToken,\n      ...(tokens.refreshToken\n        ? { 'x-scalar-secret-refresh-token': tokens.refreshToken }\n        : {}),\n    })\n  } else {\n    console.error(error)\n    toast(error?.message ?? 'Failed to authorize', 'error')\n  }\n}\n\n/** Whether the current flow supports refreshing the access token */\nconst supportsRefreshToken = computed(() => type !== 'implicit')\n\n/**\n * Refresh URL placeholder, shows tokenUrl as hint if refreshUrl is not specified.\n * This helps users understand that tokenUrl will be used as fallback.\n */\nconst refreshUrlPlaceholder = computed(() => {\n  if ('tokenUrl' in flow.value && flow.value.tokenUrl) {\n    return flow.value.tokenUrl\n  }\n  return 'https://galaxy.scalar.com/oauth/refresh'\n})\n\n/**\n * Uses the stored refresh token to obtain a new access token\n * via grant_type=refresh_token.\n */\nconst handleRefresh = async (): Promise<void> => {\n  if (loader.isLoading || type === 'implicit') {\n    return\n  }\n\n  loader.start()\n\n  const [error, tokens] = await refreshOauth2Token(\n    flows,\n    type,\n    proxyUrl,\n    server,\n    getEnvironmentVariables(environment),\n    options.customFetch,\n  )\n\n  await loader.clear()\n\n  if (tokens?.accessToken) {\n    handleOauth2SecretsUpdate({\n      'x-scalar-secret-token': tokens.accessToken,\n      ...(tokens.refreshToken\n        ? { 'x-scalar-secret-refresh-token': tokens.refreshToken }\n        : {}),\n    })\n  } else {\n    console.error(error)\n    toast(error?.message ?? 'Failed to refresh token', 'error')\n  }\n}\n\n/** Updates the secret location */\nconst handleSecretLocationUpdate = (value: string): void => {\n  const credentialsLocation = value === 'body' ? 'body' : 'header'\n\n  if (scheme.type !== 'openIdConnect') {\n    handleOauth2Update({\n      'x-scalar-credentials-location': credentialsLocation,\n    })\n  }\n\n  handleOauth2SecretsUpdate({\n    'x-scalar-credentials-location': credentialsLocation,\n  })\n}\n</script>\n\n<template>\n  <!-- Access Token Display: Shows when user is already authorized -->\n  <template v-if=\"Boolean(flow['x-scalar-secret-token'])\">\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        class=\"border-r-transparent\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-token']\"\n        placeholder=\"QUxMIFlPVVIgQkFTRSBBUkUgQkVMT05HIFRPIFVT\"\n        type=\"password\"\n        @update:modelValue=\"\n          (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-token': v })\n        \">\n        Access Token\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"supportsRefreshToken\">\n      <RequestAuthDataTableInput\n        class=\"border-r-transparent\"\n        :environment\n        :modelValue=\"flow.refreshUrl ?? ''\"\n        :placeholder=\"refreshUrlPlaceholder\"\n        @update:modelValue=\"(v) => handleOauth2Update({ refreshUrl: v })\">\n        Refresh URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow class=\"min-w-full\">\n      <div class=\"flex h-8 items-center justify-end gap-2 border-t\">\n        <ScalarButton\n          v-if=\"supportsRefreshToken\"\n          class=\"p-0 px-2 py-0.5\"\n          :loader\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleRefresh\">\n          Refresh\n        </ScalarButton>\n        <ScalarButton\n          class=\"mr-1 p-0 px-2 py-0.5\"\n          :disabled=\"loader.isLoading\"\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleClearAccessTokens\">\n          Clear\n        </ScalarButton>\n      </div>\n    </DataTableRow>\n  </template>\n\n  <!-- Authorization Form: Shows when user needs to authorize -->\n  <template v-else>\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        v-if=\"'authorizationUrl' in flow\"\n        containerClass=\"border-r-0\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-auth-url'] ?? ''\"\n        placeholder=\"https://galaxy.scalar.com/authorize\"\n        @update:modelValue=\"\n          (v) => {\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-auth-url': v })\n            handleOauth2Update({ authorizationUrl: v })\n          }\n        \">\n        Auth URL\n      </RequestAuthDataTableInput>\n\n      <RequestAuthDataTableInput\n        v-if=\"'tokenUrl' in flow\"\n        :environment\n        :modelValue=\"flow['x-scalar-secret-token-url'] ?? ''\"\n        placeholder=\"https://galaxy.scalar.com/token\"\n        @update:modelValue=\"\n          (v) => {\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-token-url': v })\n            handleOauth2Update({ tokenUrl: v })\n          }\n        \">\n        Token URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"'x-scalar-secret-redirect-uri' in flow\">\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"flow['x-scalar-secret-redirect-uri']\"\n        :placeholder=\"\n          options.captureOAuth2Callback\n            ? `${resolveDefaultOAuth2RedirectUri(options) || 'http://127.0.0.1'} (handled automatically)`\n            : 'Optional redirect URL'\n        \"\n        @update:modelValue=\"\n          (v) => {\n            hasHandledRedirectPrefill = true\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-redirect-uri': v })\n          }\n        \">\n        Redirect URL\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <template\n      v-if=\"\n        'x-scalar-secret-username' in flow && 'x-scalar-secret-password' in flow\n      \">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          class=\"text-c-2\"\n          :environment\n          :modelValue=\"flow['x-scalar-secret-username']\"\n          placeholder=\"janedoe\"\n          @update:modelValue=\"\n            (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-username': v })\n          \">\n          Username\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :environment\n          :modelValue=\"flow['x-scalar-secret-password']\"\n          placeholder=\"********\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-password': v })\n          \">\n          Password\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <DataTableRow>\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"flow['x-scalar-secret-client-id']\"\n        placeholder=\"12345\"\n        @update:modelValue=\"\n          (v) => handleOauth2SecretsUpdate({ 'x-scalar-secret-client-id': v })\n        \">\n        Client ID\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"showClientSecret\">\n      <RequestAuthDataTableInput\n        :environment\n        :modelValue=\"clientSecretValue\"\n        placeholder=\"XYZ123\"\n        type=\"password\"\n        @update:modelValue=\"\n          (v) =>\n            handleOauth2SecretsUpdate({ 'x-scalar-secret-client-secret': v })\n        \">\n        Client Secret\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <DataTableRow v-if=\"'x-usePkce' in flow\">\n      <RequestAuthDataTableInput\n        :enum=\"pkceOptions\"\n        :environment\n        :modelValue=\"flow['x-usePkce']\"\n        readOnly\n        @update:modelValue=\"\n          (v) =>\n            handleOauth2Update({\n              'x-usePkce': v as XusePkce['x-usePkce'],\n            })\n        \">\n        Use PKCE\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <!-- Credentials Location -->\n    <DataTableRow v-if=\"type !== 'implicit'\">\n      <RequestAuthDataTableInput\n        :enum=\"['header', 'body']\"\n        :environment\n        :modelValue=\"\n          (flow as NonImplicitFlow)['x-scalar-credentials-location'] || 'header'\n        \"\n        placeholder=\"header\"\n        readOnly\n        @update:modelValue=\"(v) => handleSecretLocationUpdate(v)\">\n        Credentials Location\n      </RequestAuthDataTableInput>\n    </DataTableRow>\n\n    <!-- Scopes -->\n    <DataTableRow>\n      <OAuthScopesInput\n        :flow\n        :flowType=\"type\"\n        :selectedScopes\n        @update:selectedScopes=\"(v) => emits('update:selectedScopes', v)\"\n        @upsert:scope=\"(v) => emits('upsert:scope', v)\"\n        @delete:scope=\"(v) => emits('delete:scope', v)\" />\n    </DataTableRow>\n\n    <DataTableRow class=\"min-w-full\">\n      <div class=\"flex h-8 w-full items-center justify-end border-t\">\n        <!-- Allow clearing the oauth section and going back to discovery -->\n        <ScalarButton\n          v-if=\"scheme.type === 'openIdConnect'\"\n          class=\"mr-1 p-0 px-2 py-0.5\"\n          :disabled=\"loader.isLoading\"\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"clearOauth2Secrets\">\n          Clear\n        </ScalarButton>\n\n        <ScalarButton\n          class=\"mr-0.75 p-0 px-2 py-0.5\"\n          :loader\n          size=\"sm\"\n          variant=\"outlined\"\n          @click=\"handleAuthorize\">\n          Authorize\n        </ScalarButton>\n      </div>\n    </DataTableRow>\n  </template>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsFA,MAAM,QAAQ;EAYd,MAAM,SAAS,iBAAgB;EAC/B,MAAM,EAAE,UAAU,WAAU;;EAG5B,MAAM,OAAO,eAAe,QAAA,MAAM,QAAA,MAAM;EAOxC,MAAM,iBAAiB,eAAe;GACpC,MAAM,gBAAgB,KAAK,MAAM;AACjC,OAAI,CAAC,cACH,QAAO,EAAC;AAEV,UAAO,QAAA,eAAmB,QAAQ,UAChC,OAAO,OAAO,eAAe,MAAM,CACrC;IACD;;;;;EAMD,MAAM,mBAAmB,eAAe;AACtC,OAAI,EAAE,mCAAmC,KAAK,OAC5C,QAAO;GAET,MAAM,WACJ,eAAe,KAAK,QAAQ,KAAK,MAAM,eAAe,KAAA;AACxD,UAAO,aAAa,aAAa,aAAa;IAC/C;EAED,MAAM,oBAAoB,eAAuB;AAE/C,UADU,KAAK,MACN,oCAAoC;IAC9C;;EAGD,MAAM,sBACJ,YACS;AAET,OAAI,QAAA,OAAO,SAAS,gBAClB,QAAO,0BAA0B,QAAO;AAG1C,WAAA,SAAS,KAAK,+BAA+B;IAC3C,SAAS;KACP,MAAM,QAAA,OAAO;KACb,OAAO,GACJ,QAAA,OAAO,SACT;KACF;IACD,MAAG,QAAA;IACJ,CAAA;;;EAIH,MAAM,6BACJ,YAEA,QAAA,SAAS,KAAK,uCAAuC;GACnD,SAAS;IACP,MAAM,QAAA,OAAO;KACZ,QAAA,OAAO;IACT;GACD,MAAG,QAAA;GACJ,CAAA;;EAGH,MAAM,2BAAiC;AACrC,OAAI,OAAO,UACT;AAEF,WAAA,SAAS,KAAK,sCAAsC,EAClD,MAAG,QAAA,MACJ,CAAA;;;EAIH,MAAM,gCAAsC;AAC1C,OAAI,OAAO,UACT;AAEF,6BAA0B;IACxB,yBAAyB;IACzB,iCAAiC;IAClC,CAAA;;;EAIH,MAAM,wBAAwB,IAAmB,KAAI;EACrD,MAAM,4BAA4B,IAAI,MAAK;EAE3C,MAAM,uBACJ,gBAEA,KAAK,UAAU;GACb,MAAG,QAAA;GACH,kBACE,eAAe,sBAAsB,cACjC,YAAY,mBACZ;GACN,UACE,eAAe,cAAc,cAAc,YAAY,WAAW;GACpE,YAAY,aAAa,cAAc;GACvC,QAAQ,OAAO,KAAK,aAAa,UAAU,EAAE,CAAC;GAC/C,CAAA;;AAGH,cACQ,KAAK,QACV,gBAAgB;AACf,OAAI,CAAC,eAAe,EAAE,kCAAkC,aACtD;GAGF,MAAM,eAAe,oBAAoB,YAAW;AACpD,OAAI,sBAAsB,UAAU,cAAc;AAChD,0BAAsB,QAAQ;AAC9B,8BAA0B,QAAQ;;AAGpC,OAAI,0BAA0B,MAC5B;GAGF,MAAM,iBAAkB,YACtB;GAEF,MAAM,qBAAqB,gCAAgC,QAAA,QAAO;AAElE,6BAA0B,QAAQ;AAKlC,OACE,kBACA,CAAC,sBACD,QAAA,QAAQ,sBAER;AAGF,6BAA0B,EACxB,gCAAgC,oBACjC,CAAA;KAEH,EAAE,WAAW,MAAM,CACrB;;;;;EAMA,MAAM,kBAAkB,YAA2B;AACjD,OAAI,OAAO,UACT;AAGF,UAAO,OAAM;GAEb,MAAM,CAAC,OAAO,UAAU,MAAM,gBAC5B,QAAA,OACA,QAAA,MACA,eAAe,OACf,QAAA,QACA,QAAA,UACA,wBAAwB,QAAA,YAAY,EACpC,QAAA,QAAQ,aACR,QAAA,QAAQ,sBACV;AAEA,SAAM,OAAO,OAAM;AAEnB,OAAI,QAAQ,YACV,2BAA0B;IACxB,yBAAyB,OAAO;IAChC,GAAI,OAAO,eACP,EAAE,iCAAiC,OAAO,cAAa,GACvD,EAAE;IACP,CAAA;QACI;AACL,YAAQ,MAAM,MAAK;AACnB,UAAM,OAAO,WAAW,uBAAuB,QAAO;;;;EAK1D,MAAM,uBAAuB,eAAe,QAAA,SAAS,WAAU;;;;;EAM/D,MAAM,wBAAwB,eAAe;AAC3C,OAAI,cAAc,KAAK,SAAS,KAAK,MAAM,SACzC,QAAO,KAAK,MAAM;AAEpB,UAAO;IACR;;;;;EAMD,MAAM,gBAAgB,YAA2B;AAC/C,OAAI,OAAO,aAAa,QAAA,SAAS,WAC/B;AAGF,UAAO,OAAM;GAEb,MAAM,CAAC,OAAO,UAAU,MAAM,mBAC5B,QAAA,OACA,QAAA,MACA,QAAA,UACA,QAAA,QACA,wBAAwB,QAAA,YAAY,EACpC,QAAA,QAAQ,YACV;AAEA,SAAM,OAAO,OAAM;AAEnB,OAAI,QAAQ,YACV,2BAA0B;IACxB,yBAAyB,OAAO;IAChC,GAAI,OAAO,eACP,EAAE,iCAAiC,OAAO,cAAa,GACvD,EAAE;IACP,CAAA;QACI;AACL,YAAQ,MAAM,MAAK;AACnB,UAAM,OAAO,WAAW,2BAA2B,QAAO;;;;EAK9D,MAAM,8BAA8B,UAAwB;GAC1D,MAAM,sBAAsB,UAAU,SAAS,SAAS;AAExD,OAAI,QAAA,OAAO,SAAS,gBAClB,oBAAmB,EACjB,iCAAiC,qBAClC,CAAA;AAGH,6BAA0B,EACxB,iCAAiC,qBAClC,CAAA;;;UAMe,QAAQ,KAAA,MAAI,yBAAA,IAAA,WAAA,EAA5B,mBA+CW,UAAA,EAAA,KAAA,GAAA,EAAA;IA9CT,YAYe,MAAA,qBAAA,EAAA,MAAA;4BADe,CAV5B,YAU4B,mCAAA;MAT1B,OAAM;MACL,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACZ,MAAK;MACJ,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAM,0BAAyB,EAAA,yBAA4B,GAAC,CAAA;;6BAI9F,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,kBAEJ,GAAA,CAAA,EAAA,CAAA;;;;;IAGkB,qBAAA,SAAA,WAAA,EAApB,YASe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAP5B,YAO4B,mCAAA;MAN1B,OAAM;MACL,aAAA,QAAA;MACA,YAAY,KAAA,MAAK,cAAU;MAC3B,aAAa,sBAAA;MACb,uBAAiB,OAAA,OAAA,OAAA,MAAG,MAAM,mBAAkB,EAAA,YAAe,GAAC,CAAA;;6BAE/D,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFoE,iBAEpE,GAAA,CAAA,EAAA,CAAA;;;;;;;;;IAGF,YAoBe,MAAA,qBAAA,EAAA,EApBD,OAAM,cAAY,EAAA;4BAmBxB,CAlBN,mBAkBM,OAlBN,YAkBM,CAhBI,qBAAA,SAAA,WAAA,EADR,YAQe,MAAA,aAAA,EAAA;;MANb,OAAM;MACL,QAAA,MAAA,OAAM;MACP,MAAK;MACL,SAAQ;MACP,SAAO;;6BAEV,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFyB,aAEzB,GAAA,CAAA,EAAA,CAAA;;wDACA,YAOe,MAAA,aAAA,EAAA;MANb,OAAM;MACL,UAAU,MAAA,OAAM,CAAC;MAClB,MAAK;MACL,SAAQ;MACP,SAAO;;6BAEV,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFmC,WAEnC,GAAA,CAAA,EAAA,CAAA;;;;;2BAMN,mBA6KW,UAAA,EAAA,KAAA,GAAA,EAAA;IA5KT,YA6Be,MAAA,qBAAA,EAAA,MAAA;4BAfe,CAAA,sBAZE,KAAA,SAAA,WAAA,EAD9B,YAa4B,mCAAA;;MAX1B,gBAAe;MACd,aAAA,QAAA;MACA,YAAY,KAAA,MAAI,+BAAA;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAC;AAAmB,iCAAyB,EAAA,4BAA+B,GAAC,CAAA;AAAgB,0BAAkB,EAAA,kBAAqB,GAAC,CAAA;;;6BAOvK,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;yFAGsB,KAAA,SAAA,WAAA,EADtB,YAY4B,mCAAA;;MAVzB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI,gCAAA;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAC;AAAmB,iCAAyB,EAAA,6BAAgC,GAAC,CAAA;AAAgB,0BAAkB,EAAA,UAAa,GAAC,CAAA;;;6BAOhK,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,eAEJ,GAAA,CAAA,EAAA,CAAA;;;;;sCAGoD,KAAA,SAAA,WAAA,EAAtD,YAiBe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAf5B,YAe4B,mCAAA;MAdzB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MAChB,aAAwB,QAAA,QAAQ,wBAAA,GAAuC,MAAA,gCAA+B,CAAC,QAAA,QAAO,IAAA,mBAAA,4BAAA;MAK9G,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAC;AAAmB,iCAAA,QAAyB;AAAoB,iCAAyB,EAAA,gCAAmC,GAAC,CAAA;;;6BAOhK,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,kBAEJ,GAAA,CAAA,EAAA,CAAA;;;;;;;;;kCAI6C,KAAA,SAAI,8BAAkC,KAAA,SAAA,WAAA,EADrF,mBA6BW,UAAA,EAAA,KAAA,GAAA,EAAA,CAzBT,YAWe,MAAA,qBAAA,EAAA,MAAA;4BADe,CAT5B,YAS4B,mCAAA;MAR1B,OAAM;MACL,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAgB,MAAM,0BAAyB,EAAA,4BAA+B,GAAC,CAAA;;6BAInG,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;;;QAGF,YAWe,MAAA,qBAAA,EAAA,MAAA;4BADe,CAT5B,YAS4B,mCAAA;MARzB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACZ,MAAK;MACJ,uBAAiB,OAAA,OAAA,OAAA,MAAgB,MAAM,0BAAyB,EAAA,4BAA+B,GAAC,CAAA;;6BAInG,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;;;;IAIJ,YAUe,MAAA,qBAAA,EAAA,MAAA;4BADe,CAR5B,YAQ4B,mCAAA;MAPzB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,aAAY;MACX,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAM,0BAAyB,EAAA,6BAAgC,GAAC,CAAA;;6BAIlG,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,eAEJ,GAAA,CAAA,EAAA,CAAA;;;;;IAGkB,iBAAA,SAAA,WAAA,EAApB,YAYe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAV5B,YAU4B,mCAAA;MATzB,aAAA,QAAA;MACA,YAAY,kBAAA;MACb,aAAY;MACZ,MAAK;MACJ,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAkB,0BAAyB,EAAA,iCAAoC,GAAC,CAAA;;6BAKlH,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,mBAEJ,GAAA,CAAA,EAAA,CAAA;;;;;mBAGiC,KAAA,SAAA,WAAA,EAAnC,YAce,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAZ5B,YAY4B,mCAAA;MAXzB,MAAM,MAAA,YAAW;MACjB,aAAA,QAAA;MACA,YAAY,KAAA,MAAI;MACjB,UAAA;MACC,uBAAiB,OAAA,OAAA,OAAA,MAAc,MAAkB,mBAAkB,EAAA,aAA8B,GAAA,CAAA;;6BAOpG,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAFI,cAEJ,GAAA,CAAA,EAAA,CAAA;;;;;;;;;IAIkB,QAAA,SAAI,cAAA,WAAA,EAAxB,YAYe,MAAA,qBAAA,EAAA,EAAA,KAAA,GAAA,EAAA;4BADe,CAV5B,YAU4B,mCAAA;MATzB,MAAM,CAAA,UAAA,OAAkB;MACxB,aAAA,QAAA;MACA,YAAwB,KAAA,MAAI,oCAAA;MAG7B,aAAY;MACZ,UAAA;MACC,uBAAiB,OAAA,QAAA,OAAA,OAAG,MAAM,2BAA2B,EAAC;;6BAEzD,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAF4D,0BAE5D,GAAA,CAAA,EAAA,CAAA;;;;;IAIF,YAQe,MAAA,qBAAA,EAAA,MAAA;4BADuC,CANpD,YAMoD,0BAAA;MALjD,MAAA,KAAA;MACA,UAAU,QAAA;MACV,gBAAA,eAAA;MACA,2BAAqB,OAAA,QAAA,OAAA,OAAG,MAAM,MAAK,yBAA0B,EAAC;MAC9D,kBAAY,OAAA,QAAA,OAAA,OAAG,MAAM,MAAK,gBAAiB,EAAC;MAC5C,kBAAY,OAAA,QAAA,OAAA,OAAG,MAAM,MAAK,gBAAiB,EAAC;;;;;;;;IAGjD,YAsBe,MAAA,qBAAA,EAAA,EAtBD,OAAM,cAAY,EAAA;4BAqBxB,CApBN,mBAoBM,OApBN,YAoBM,CAjBI,QAAA,OAAO,SAAI,mBAAA,WAAA,EADnB,YAQe,MAAA,aAAA,EAAA;;MANb,OAAM;MACL,UAAU,MAAA,OAAM,CAAC;MAClB,MAAK;MACL,SAAQ;MACP,SAAO;;6BAEV,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAF8B,WAE9B,GAAA,CAAA,EAAA,CAAA;;0DAEA,YAOe,MAAA,aAAA,EAAA;MANb,OAAM;MACL,QAAA,MAAA,OAAM;MACP,MAAK;MACL,SAAQ;MACP,SAAO;;6BAEV,CAAA,GAAA,OAAA,QAAA,OAAA,MAAA,CAAA,gBAF2B,eAE3B,GAAA,CAAA,EAAA,CAAA"}

package/dist/v2/blocks/scalar-auth-selector-block/helpers/oauth.d.ts

@@ -11,6 +11,26 @@ export type OAuth2Tokens = {
     accessToken: string;
     refreshToken?: string;
 };
+/**
+ * Captures the OAuth2 redirect for environments where the browser-popup polling
+ * approach cannot work (notably the Electron desktop app, where the renderer
+ * runs on `file://` and providers reject `file://` redirect URIs).
+ *
+ * The implementation opens the authorization URL in the system browser and
+ * resolves once the provider redirects back. Because the redirect target (for
+ * example an ephemeral loopback port) is only known to the host environment, the
+ * implementation appends the `redirect_uri` itself and reports back the exact
+ * value it used so the token exchange can send the matching `redirect_uri`.
+ */
+export type CaptureOAuth2Callback = (params: {
+    /** The fully built authorization URL, without a `redirect_uri` parameter. */
+    authorizationUrl: string;
+}) => Promise<ErrorResponse<{
+    /** The full callback URL the provider redirected to, including query and/or hash params. */
+    callbackUrl: string;
+    /** The `redirect_uri` the host environment used, so the token exchange can match it. */
+    redirectUri: string;
+}>>;
 /** Flow types that support token refresh (all except implicit) */
 type RefreshableFlows = Exclude<keyof OAuthFlowsObjectSecret, 'implicit'>;
 /**
@@ -38,7 +58,13 @@ proxyUrl: string,
 /** Flattened environment variables used to resolve server URL templates like `{protocol}` */
 environmentVariables?: Record<string, string>, 
 /** Fetch used for the token request; the desktop app passes an IPC-backed fetch (see {@link authorizeServers}). */
-customFetch?: CustomFetch) => Promise<ErrorResponse<OAuth2Tokens>>;
+customFetch?: CustomFetch, 
+/**
+ * Optional redirect capture for interactive flows (authorization code and implicit).
+ * When provided, the system browser plus a host-owned redirect target replaces the
+ * default popup-polling approach. Required for the Electron desktop app.
+ */
+captureCallback?: CaptureOAuth2Callback) => Promise<ErrorResponse<OAuth2Tokens>>;
 /**
  * Exchange a refresh token for a new access token using the `grant_type=refresh_token` flow.
  *

package/dist/v2/blocks/scalar-auth-selector-block/helpers/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/helpers/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAA;AAK3E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAErF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8DAA8D,CAAA;AAGhG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kDAAkD,CAAA;AA4BnF,KAAK,gBAAgB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAE1F,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,kEAAkE;AAClE,KAAK,gBAAgB,GAAG,OAAO,CAAC,MAAM,sBAAsB,EAAE,UAAU,CAAC,CAAA;AAEzE;;;GAGG;AACH,eAAO,MAAM,YAAY,GACvB,cAAc,YAAY,GAAG,IAAI,EACjC,uBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KAChD,MAIA,CAAA;AAEH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC9B,cAAc,YAAY,GAAG,IAAI,EACjC,uBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KAChD,gBAWF,CAAA;AAuCD;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAC1B,OAAO,sBAAsB,EAC7B,MAAM,MAAM,sBAAsB,EAClC,gBAAgB,MAAM,EAAE;AACxB,wEAAwE;AACxE,cAAc,YAAY,GAAG,IAAI;AACjC,kCAAkC;AAClC,UAAU,MAAM;AAChB,6FAA6F;AAC7F,uBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;AACjD,mHAAmH;AACnH,cAAc,WAAW,KACxB,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAwKrC,CAAA;AAuID;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAC7B,OAAO,sBAAsB,EAC7B,MAAM,gBAAgB;AACtB,kCAAkC;AAClC,UAAU,MAAM;AAChB,+DAA+D;AAC/D,cAAc,YAAY,GAAG,IAAI;AACjC,2EAA2E;AAC3E,uBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;AACjD,gIAAgI;AAChI,cAAa,WAAmB,KAC/B,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAqFrC,CAAA"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/helpers/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAA;AAK3E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAErF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8DAA8D,CAAA;AAGhG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kDAAkD,CAAA;AA4BnF,KAAK,gBAAgB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAE1F,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE;IAC3C,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAA;CACzB,KAAK,OAAO,CACX,aAAa,CAAC;IACZ,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAA;IACnB,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAA;CACpB,CAAC,CACH,CAAA;AAED,kEAAkE;AAClE,KAAK,gBAAgB,GAAG,OAAO,CAAC,MAAM,sBAAsB,EAAE,UAAU,CAAC,CAAA;AAEzE;;;GAGG;AACH,eAAO,MAAM,YAAY,GACvB,cAAc,YAAY,GAAG,IAAI,EACjC,uBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KAChD,MAIA,CAAA;AAEH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC9B,cAAc,YAAY,GAAG,IAAI,EACjC,uBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KAChD,gBAWF,CAAA;AAuCD;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAC1B,OAAO,sBAAsB,EAC7B,MAAM,MAAM,sBAAsB,EAClC,gBAAgB,MAAM,EAAE;AACxB,wEAAwE;AACxE,cAAc,YAAY,GAAG,IAAI;AACjC,kCAAkC;AAClC,UAAU,MAAM;AAChB,6FAA6F;AAC7F,uBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;AACjD,mHAAmH;AACnH,cAAc,WAAW;AACzB;;;;GAIG;AACH,kBAAkB,qBAAqB,KACtC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CA6NrC,CAAA;AA4ID;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAC7B,OAAO,sBAAsB,EAC7B,MAAM,gBAAgB;AACtB,kCAAkC;AAClC,UAAU,MAAM;AAChB,+DAA+D;AAC/D,cAAc,YAAY,GAAG,IAAI;AACjC,2EAA2E;AAC3E,uBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;AACjD,gIAAgI;AAChI,cAAa,WAAmB,KAC/B,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAqFrC,CAAA"}