@suveren/gateway 0.3.12 → 0.3.14

package/content/integrations/linkedin.json

@@ -27,7 +27,11 @@
     "scopes": ["w_member_social"],
     "credentialKeys": { "clientId": "clientId", "clientSecret": "clientSecret" },
     "tokenStorage": "accessToken",
-    "extraParams": {}
+    "extraParams": {},
+    "healthCheck": {
+      "url": "https://api.linkedin.com/v2/me",
+      "accountFields": ["localizedFirstName", "localizedLastName"]
+    }
   },
   "toolGating": {
     "default": {

package/dist/control-plane/index.mjs

@@ -1724,6 +1724,12 @@ function resolveOrigin(req) {
 }
 var oauthRedirectUris = /* @__PURE__ */ new Map();
 var manifestCache = null;
+function resolvePath(obj, path) {
+  const v = path.split(".").reduce((acc, key) => {
+    return acc && typeof acc === "object" ? acc[key] : void 0;
+  }, obj);
+  return v == null ? void 0 : String(v);
+}
 function decodeJwtEmail(idToken) {
   if (!idToken) return void 0;
   try {
@@ -1864,7 +1870,27 @@ app.get("/auth/oauth/:integrationId/health", authGuard, async (req, res) => {
     return;
   }
   if (!/refresh/i.test(oauth.tokenStorage)) {
-    res.json({ status: "unverified", account });
+    const hc = oauth.healthCheck;
+    if (!hc?.url) {
+      res.json({ status: "unverified", account });
+      return;
+    }
+    try {
+      const r = await fetch(hc.url, { headers: { Authorization: `Bearer ${token}` } });
+      if (r.ok) {
+        const data = await r.json().catch(() => ({}));
+        const probed = (hc.accountFields ?? []).map((f) => resolvePath(data, f)).filter((v) => !!v).join(" ").trim();
+        res.json({ status: "ok", account: probed || account });
+        return;
+      }
+      if (r.status === 401 || r.status === 403) {
+        res.json({ status: "failed", account, error: `token rejected (HTTP ${r.status})` });
+        return;
+      }
+      res.json({ status: "unverified", account });
+    } catch (err) {
+      res.json({ status: "unverified", account, error: err instanceof Error ? err.message : "probe failed" });
+    }
     return;
   }
   try {