@wix/app-extensions 1.0.84 → 1.0.85

package/build/trusted/cjs/index.d.ts

@@ -25508,7 +25508,25 @@ interface OAuthConfig {
     refreshUrl?: string;
     /**
      * Optional token revocation endpoint used by the disconnect flow (RFC 7009). Empty if unsupported.
-     * @format WEB_URL
+     *
+     * Supports `{field_name}` placeholders, substituted at call time from values the server already
+     * holds. Some providers require one in the path, for example GitHub:
+     * "https://api.github.com/applications/{client_id}/token". Recognized names are client_id,
+     * app_id, component_id and connector_slug — all non-secret and non-PII. Values are
+     * percent-encoded and may appear only in the path or query; a placeholder in the scheme or host
+     * is rejected.
+     *
+     * Secrets and tokens are never substitutable: client_secret, access_token and refresh_token are
+     * not recognized names, and any unknown or leftover placeholder fails the call rather than
+     * producing a partially templated URL. Templating is per field — the other URL fields in this
+     * message are taken literally and keep their WEB_URL format.
+     *
+     * This field carries a URI Template (RFC 6570), not a URI, so it deliberately has no
+     * (wix.api.format): a templated value such as the GitHub one above is not a syntactically valid
+     * URL, and WEB_URL would reject it (as it would reject the empty value documented above). The
+     * resolver enforces the equivalent guarantees at call time instead — HTTPS only, a parseable
+     * endpoint, and an authority identical to the configured one.
+     * @maxLength 2000
      */
     revokeUrl?: string;
     /**