mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-13 06:32:03 +00:00
Marc-André Bombeck
b6f45c0d88
`oauth-kit/client.ts` builds a provider's consent URL, code exchange, refresh and deauthorization from a declaration of what differs: endpoints and scope, client authentication (form or HTTP Basic, with or without the client id beside it), the fields a grant adds, how an answer is classified and the refusal named, the error type, and where the token sits in the body. The seven hand-written copies of the redirect URI, authorization URL, token post, Basic header and PKCE pair are gone; each provider keeps an `oauth.ts` with its declaration. Shared behaviour is now uniform: a 2xx without a token object (an empty or non-JSON body) is a transient `empty_token_body` failure for every provider. WHOOP, Strava and Google Health used to return null, and Withings threw an unclassified SyntaxError; the OAuth wire golden records exactly these lines changing and nothing else. Oura's live/legacy endpoint fallback, Google's invalid_grant lift, Strava's Fault summary and Fitbit's errorType are declared per provider.
35 lines
883 B
TypeScript
35 lines
883 B
TypeScript
/**
|
|
* Helper to retrieve per-user Withings OAuth credentials from the database.
|
|
*/
|
|
import { prisma } from "@/lib/db";
|
|
import { decrypt } from "@/lib/crypto";
|
|
import type { WithingsCredentials } from "./oauth";
|
|
|
|
/**
|
|
* Fetch and decrypt the user's Withings API credentials.
|
|
* Returns null if the user has not configured credentials.
|
|
*/
|
|
export async function getUserWithingsCredentials(
|
|
userId: string,
|
|
): Promise<WithingsCredentials | null> {
|
|
const user = await prisma.user.findUnique({
|
|
where: { id: userId },
|
|
select: {
|
|
withingsClientIdEncrypted: true,
|
|
withingsClientSecretEncrypted: true,
|
|
},
|
|
});
|
|
|
|
if (
|
|
!user?.withingsClientIdEncrypted ||
|
|
!user?.withingsClientSecretEncrypted
|
|
) {
|
|
return null;
|
|
}
|
|
|
|
return {
|
|
clientId: decrypt(user.withingsClientIdEncrypted),
|
|
clientSecret: decrypt(user.withingsClientSecretEncrypted),
|
|
};
|
|
}
|