@tangle-network/agent-integrations 0.53.35 → 0.53.36

package/dist/{chunk-ANWNXGVV.js → chunk-NCOHYY6P.js}

@@ -1,7 +1,7 @@
 import {
   TangleIdentityUnreachableError,
   createTangleIdentityClient
-} from "./chunk-JXFPIZ3O.js";
+} from "./chunk-DUWZMKEF.js";
 
 // src/middleware/index.ts
 async function requireTangleAuth(request, opts = {}) {
@@ -126,4 +126,4 @@ export {
   honoTangleAuthMiddleware,
   expressTangleAuthMiddleware
 };
-//# sourceMappingURL=chunk-ANWNXGVV.js.map
+//# sourceMappingURL=chunk-NCOHYY6P.js.map

package/dist/{chunk-BVHX2E5X.js → chunk-X5H5ARIO.js}

@@ -7,11 +7,11 @@ import {
   canonicalIntegrationKind,
   integrationSpecToConnector,
   listIntegrationSpecs
-} from "./chunk-GGKD2W6H.js";
+} from "./chunk-ZZUBL7KY.js";
 import {
   CONNECTOR_ADAPTER_FACTORIES,
   adapters_exports
-} from "./chunk-N4KK3J7U.js";
+} from "./chunk-GLOAH446.js";
 
 // src/activepieces-catalog.ts
 import { readFileSync } from "fs";
@@ -246,6 +246,7 @@ function createConnectorAdapterProvider(options) {
           "auth_not_supported"
         );
       }
+      resolveTokenClientAuthMethod(auth.tokenClientAuthMethod, request.connectorId);
       if (!options.resolveOAuthClient) {
         throw new IntegrationError(
           `OAuth client resolver missing on adapter provider; cannot start auth for ${request.connectorId}.`,
@@ -307,6 +308,10 @@ function createConnectorAdapterProvider(options) {
           "auth_not_supported"
         );
       }
+      const tokenClientAuthMethod = resolveTokenClientAuthMethod(
+        auth.tokenClientAuthMethod,
+        request.connectorId
+      );
       if (!request.code) {
         throw new IntegrationError(
           `Authorization code missing on completeAuth for ${request.connectorId}.`,
@@ -335,10 +340,21 @@ function createConnectorAdapterProvider(options) {
       const body = new URLSearchParams({
         grant_type: "authorization_code",
         code: request.code,
-        client_id: client.clientId,
-        client_secret: client.clientSecret,
         redirect_uri: request.redirectUri
       });
+      const headers = {
+        "content-type": "application/x-www-form-urlencoded",
+        accept: "application/json"
+      };
+      const redactionValues = [request.code, client.clientId, client.clientSecret];
+      if (tokenClientAuthMethod === "client_secret_post") {
+        body.set("client_id", client.clientId);
+        body.set("client_secret", client.clientSecret);
+      } else {
+        const authorization = `Basic ${base64Encode(`${client.clientId}:${client.clientSecret}`)}`;
+        headers.authorization = authorization;
+        redactionValues.push(authorization);
+      }
       const tokenUrl = resolveOAuthUrlTemplate(
         auth.tokenUrl,
         request.metadata,
@@ -348,16 +364,13 @@ function createConnectorAdapterProvider(options) {
       try {
         res = await fetchImpl(tokenUrl, {
           method: "POST",
-          headers: {
-            "content-type": "application/x-www-form-urlencoded",
-            accept: "application/json"
-          },
+          headers,
           body
         });
       } catch (cause) {
         const detail = redactSensitiveText(
           cause?.message ?? "unknown",
-          [request.code, client.clientId, client.clientSecret]
+          redactionValues
         );
         throw new IntegrationError(
           `OAuth token exchange transport error for ${request.connectorId}: ${detail}`,
@@ -368,7 +381,7 @@ function createConnectorAdapterProvider(options) {
         const text = await res.text().catch(() => "");
         const detail = redactSensitiveText(
           `${res.status} ${res.statusText} \u2014 ${text.slice(0, 200)}`,
-          [request.code, client.clientId, client.clientSecret]
+          redactionValues
         );
         throw new IntegrationError(
           `OAuth token exchange failed for ${request.connectorId}: ${detail}`,
@@ -557,6 +570,29 @@ function oauthManifestAuth(auth) {
   if (auth.kind !== "one_of") return void 0;
   return auth.options.find((option) => option.kind === "oauth2");
 }
+function resolveTokenClientAuthMethod(value, connectorId) {
+  if (value === void 0 || value === "client_secret_post") {
+    return "client_secret_post";
+  }
+  if (value === "client_secret_basic") return value;
+  throw new IntegrationError(
+    `Connector ${connectorId} has an unsupported OAuth token client authentication method.`,
+    "config_missing"
+  );
+}
+function base64Encode(value) {
+  const btoa2 = globalThis.btoa;
+  if (typeof btoa2 !== "function") {
+    throw new IntegrationError(
+      "OAuth client_secret_basic requires a base64 encoder in this runtime.",
+      "config_missing"
+    );
+  }
+  const bytes = new TextEncoder().encode(value);
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa2(binary);
+}
 function redactSensitiveText(text, secrets) {
   return secrets.filter((secret) => secret.length > 0).reduce(
     (redacted, secret) => redacted.split(secret).join("[REDACTED]"),
@@ -4395,4 +4431,4 @@ export {
   signCapability,
   verifyCapabilityToken
 };
-//# sourceMappingURL=chunk-BVHX2E5X.js.map
+//# sourceMappingURL=chunk-X5H5ARIO.js.map