@startsimpli/integrations 0.2.24 → 0.2.26

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@startsimpli/integrations",
-  "version": "0.2.24",
+  "version": "0.2.26",
   "description": "Provider-agnostic types, API clients, hooks, and UI primitives for email + calendar integrations across StartSimpli apps.",
   "main": "./src/index.ts",
   "types": "./src/index.ts",

package/src/__tests__/connections.test.tsx

@@ -1107,3 +1107,134 @@ describe('MemberConnectionRoster — Disconnect is not offered twice', () => {
       expect(api.disconnectMemberConnection).toHaveBeenCalledWith('acme', 'm-live'));
   });
 });
+
+// --------------------------------------------------------------------------
+//  auth_mode: the OAuth branch (bd startsim-768w.22.25.14 / .23)
+// --------------------------------------------------------------------------
+
+/**
+ * `schema.auth_mode_for`'s own docstring calls `auth_mode` "the ONLY thing the
+ * connect card branches on", and until this suite existed the card never
+ * branched: `fields = [...credential_schema, ...config_schema]` and one
+ * unconditional `CredentialSchemaForm`. On the admin catalog that rendered
+ * Dropbox's `access_token` / `refresh_token` / `expires_at` as text inputs —
+ * the product asking a human to go and mint a refresh token by hand.
+ */
+const OAUTH_ENTRY = {
+  key: 'dropbox',
+  name: 'Dropbox',
+  description: 'Poll file metadata',
+  logo_url: '',
+  docs_url: '',
+  capabilities: ['poll'],
+  auth_mode: 'oauth',
+  credential_schema: {
+    version: 1,
+    fields: [
+      { key: 'access_token', label: 'Access token', type: 'secret', required: true },
+      { key: 'refresh_token', label: 'Refresh token', type: 'secret', required: false },
+    ],
+  },
+  config_schema: {
+    version: 1,
+    fields: [{ key: 'path', label: 'Folder', type: 'string', required: false }],
+  },
+  record_types: [],
+  supports_webhooks: true,
+  availability: { available: true, reason: '' },
+};
+
+const START = {
+  authorization_url:
+    'https://www.dropbox.com/oauth2/authorize?client_id=abc&response_type=code'
+    + '&token_access_type=offline&redirect_uri=https%3A%2F%2Fapi.example%2Fcb%2F&state=signed',
+  state: 'signed',
+  redirect_uri: 'https://api.example/cb/',
+};
+
+function oauthApi(overrides: Partial<ConnectionsApi> = {}): ConnectionsApi {
+  return stubApi({
+    connectorCatalog: vi.fn().mockResolvedValue({ results: [OAUTH_ENTRY] }),
+    startOAuth: vi.fn().mockResolvedValue(START),
+    ...overrides,
+  });
+}
+
+async function openOAuthCard(api: ConnectionsApi) {
+  render(<ConnectionsPage api={api} foundrySlug="acme" />);
+  await screen.findByText('Dropbox');
+  await userEvent.click(screen.getByRole('button', { name: /^connect$/i }));
+}
+
+describe('an OAuth connector is never a form asking for token material', () => {
+  it('renders NO credential inputs for an oauth connector', async () => {
+    await openOAuthCard(oauthApi());
+    expect(screen.queryByLabelText(/access token/i)).not.toBeInTheDocument();
+    expect(screen.queryByLabelText(/refresh token/i)).not.toBeInTheDocument();
+  });
+
+  it('still asks for config, which is not a secret', async () => {
+    await openOAuthCard(oauthApi());
+    expect(screen.getByLabelText(/folder/i)).toBeInTheDocument();
+  });
+
+  it('offers a hand-off to the vendor instead of Test and save', async () => {
+    await openOAuthCard(oauthApi());
+    expect(screen.getByRole('button', { name: /continue to dropbox/i })).toBeInTheDocument();
+    expect(screen.queryByRole('button', { name: /test and save/i })).not.toBeInTheDocument();
+  });
+
+  it('an api_key connector is untouched by the branch', async () => {
+    render(<ConnectionsPage api={stubApi()} foundrySlug="acme" />);
+    await screen.findByText('n8n');
+    await userEvent.click(screen.getAllByRole('button', { name: /^connect$/i })[0]);
+    expect(screen.getByRole('button', { name: /test and save/i })).toBeInTheDocument();
+  });
+});
+
+describe('the hand-off sends the browser to the consent URL', () => {
+  it('starts the round trip with the connector key and the gathered config', async () => {
+    const api = oauthApi();
+    await openOAuthCard(api);
+    await userEvent.type(screen.getByLabelText(/folder/i), '/Reports');
+    await userEvent.click(screen.getByRole('button', { name: /continue to dropbox/i }));
+    await waitFor(() => expect(api.startOAuth).toHaveBeenCalled());
+    const [slug, input] = (api.startOAuth as ReturnType<typeof vi.fn>).mock.calls[0];
+    expect(slug).toBe('acme');
+    expect(input.connector_key).toBe('dropbox');
+    expect(input.config).toEqual({ path: '/Reports' });
+  });
+
+  it('opens the URL VERBATIM — the client adds no parameters of its own', async () => {
+    const assign = vi.fn();
+    const original = window.location;
+    Object.defineProperty(window, 'location', {
+      configurable: true, value: { ...original, href: 'https://app.example/c', assign },
+    });
+    try {
+      const api = oauthApi();
+      await openOAuthCard(api);
+      await userEvent.click(screen.getByRole('button', { name: /continue to dropbox/i }));
+      await waitFor(() => expect(assign).toHaveBeenCalledWith(START.authorization_url));
+    } finally {
+      Object.defineProperty(window, 'location', { configurable: true, value: original });
+    }
+  });
+
+  it('surfaces a refusal instead of navigating', async () => {
+    const api = oauthApi({
+      startOAuth: vi.fn().mockRejectedValue(new Error('no app registration')),
+    });
+    await openOAuthCard(api);
+    await userEvent.click(screen.getByRole('button', { name: /continue to dropbox/i }));
+    expect(await screen.findByRole('alert')).toHaveTextContent(/no app registration/i);
+  });
+
+  it('a client without the verb says so rather than offering a dead button', async () => {
+    const api = oauthApi();
+    delete (api as { startOAuth?: unknown }).startOAuth;
+    await openOAuthCard(api);
+    expect(screen.getByText(/cannot start a dropbox sign-in yet/i)).toBeInTheDocument();
+    expect(screen.getByRole('button', { name: /continue to dropbox/i })).toBeDisabled();
+  });
+});