Marc-André Bombeck 31abd307fd feat(integrations): add Polar AccessLink OAuth sync ...

Connect a Polar account over AccessLink v3: an authorization-code OAuth
flow (shared app from POLAR_CLIENT_ID / POLAR_CLIENT_SECRET) backed by a
stateless HMAC-signed state token doubling as an httpOnly cookie for CSRF.
The callback verifies the signature, expiry, provider binding, and the
byte-exact cookie match, then encrypts the access token plus member id onto
the user row.

An hourly poll-cohort job maps Nightly Recharge recovery, sleep stages,
and daily activity to canonical measurements tagged source POLAR, idempotent
on (userId, type, source, externalId). The recovery band feeds RECOVERY_SCORE
through the canonical ladder, which now ranks native readiness above the
computed proxy. Settings gains a connect / disconnect card. Tokens are never
logged or returned; every egress goes through safeFetch.

2026-06-14 20:08:50 +02:00

..

__tests__

feat(integrations): add Polar AccessLink OAuth sync

2026-06-14 20:08:50 +02:00

signed-state.ts

feat(integrations): add Polar AccessLink OAuth sync

2026-06-14 20:08:50 +02:00