@tangle-network/agent-integrations 0.53.49 → 0.53.50

package/dist/{chunk-5UCHLQ3D.js → chunk-EP6EDAPV.js}

@@ -1,7 +1,7 @@
 import {
   CONNECTOR_ADAPTER_FACTORIES,
   adapters_exports
-} from "./chunk-H5UCSRF4.js";
+} from "./chunk-2JRYKWYX.js";
 
 // src/connectors/bundled-manifests.ts
 var MANIFEST_PROBE_PREFIX = "tangle-adapter-metadata-";
@@ -131,4 +131,4 @@ export {
   bundledApiKeyHint,
   bundledOAuth2Auth
 };
-//# sourceMappingURL=chunk-5UCHLQ3D.js.map
+//# sourceMappingURL=chunk-EP6EDAPV.js.map

package/dist/{chunk-ZSXRS7D7.js → chunk-QE4WFYSK.js}

@@ -7,7 +7,7 @@ import {
   bundledAuthMode,
   bundledOAuth2Auth,
   getBundledAdapterManifest
-} from "./chunk-5UCHLQ3D.js";
+} from "./chunk-EP6EDAPV.js";
 
 // src/specs/types.ts
 function specAuthToConnectorAuth(auth) {
@@ -1584,4 +1584,4 @@ export {
   validateCredentialFormat,
   validateCredentialSet
 };
-//# sourceMappingURL=chunk-ZSXRS7D7.js.map
+//# sourceMappingURL=chunk-QE4WFYSK.js.map

package/dist/{chunk-GUZA3U6T.js → chunk-T3WH6MMA.js}

@@ -7,14 +7,17 @@ import {
   canonicalIntegrationKind,
   integrationSpecToConnector,
   listIntegrationSpecs
-} from "./chunk-ZSXRS7D7.js";
+} from "./chunk-QE4WFYSK.js";
 import {
   listBundledConnectorAdapters
-} from "./chunk-5UCHLQ3D.js";
+} from "./chunk-EP6EDAPV.js";
 import {
   CONNECTOR_ADAPTER_FACTORIES,
-  createOAuthTokenRequestHeaders
-} from "./chunk-H5UCSRF4.js";
+  createOAuthBasicAuthorizationHeader,
+  createOAuthTokenRequestHeaders,
+  oauthClientCredentialRedactionValues,
+  redactOAuthSensitiveText
+} from "./chunk-2JRYKWYX.js";
 
 // src/activepieces-catalog.ts
 import { readFileSync } from "fs";
@@ -370,12 +373,6 @@ function createConnectorAdapterProvider(options) {
       const codeVerifier = pkce === "unsupported" ? void 0 : requirePkceVerifier(request.codeVerifier, request.connectorId);
       if (codeVerifier) body.set("code_verifier", codeVerifier);
       const headers = createOAuthTokenRequestHeaders(auth.tokenRequestHeaders);
-      const redactionValues = [
-        request.code,
-        client.clientId,
-        ...client.clientSecret ? [client.clientSecret] : [],
-        ...codeVerifier ? [codeVerifier] : []
-      ];
       if (tokenClientAuthMethod === "none") {
         body.set(
           resolveOAuthParameterName(
@@ -403,10 +400,22 @@ function createConnectorAdapterProvider(options) {
           client.clientSecret
         );
       } else {
-        const authorization = `Basic ${base64Encode(`${client.clientId}:${client.clientSecret}`)}`;
+        const authorization = createOAuthBasicAuthorizationHeader(
+          client.clientId,
+          client.clientSecret,
+          base64Encode
+        );
         headers.authorization = authorization;
-        redactionValues.push(authorization);
       }
+      const redactionValues = [
+        request.code,
+        ...codeVerifier ? [codeVerifier] : [],
+        ...oauthClientCredentialRedactionValues(
+          client.clientId,
+          client.clientSecret,
+          headers.authorization
+        )
+      ];
       const tokenUrl = resolveOAuthUrlTemplate(
         auth.tokenUrl,
         request.metadata,
@@ -420,7 +429,7 @@ function createConnectorAdapterProvider(options) {
           body
         });
       } catch (cause) {
-        const detail = redactSensitiveText(
+        const detail = redactOAuthSensitiveText(
           cause?.message ?? "unknown",
           redactionValues
         );
@@ -431,10 +440,9 @@ function createConnectorAdapterProvider(options) {
       }
       if (!res.ok) {
         const text = await res.text().catch(() => "");
-        const detail = redactSensitiveText(
-          `${res.status} ${res.statusText} \u2014 ${text.slice(0, 200)}`,
-          redactionValues
-        );
+        const statusText = redactOAuthSensitiveText(res.statusText, redactionValues);
+        const redactedText = redactOAuthSensitiveText(text, redactionValues);
+        const detail = `${res.status} ${statusText} \u2014 ${redactedText.slice(0, 200)}`;
         throw new IntegrationError(
           `OAuth token exchange failed for ${request.connectorId}: ${detail}`,
           "provider_failure"
@@ -687,12 +695,6 @@ function base64Encode(value) {
   for (const byte of bytes) binary += String.fromCharCode(byte);
   return btoa2(binary);
 }
-function redactSensitiveText(text, secrets) {
-  return secrets.filter((secret) => secret.length > 0).reduce(
-    (redacted, secret) => redacted.split(secret).join("[REDACTED]"),
-    text
-  );
-}
 function resolveOAuthUrlTemplate(template, metadata, connectorId) {
   const placeholders = [...template.matchAll(/\{([A-Za-z][A-Za-z0-9_]*)\}/g)];
   let resolved = template;
@@ -4741,4 +4743,4 @@ export {
   signCapability,
   verifyCapabilityToken
 };
-//# sourceMappingURL=chunk-GUZA3U6T.js.map
+//# sourceMappingURL=chunk-T3WH6MMA.js.map