Marc-André Bombeck fca1260b20 fix(oura): exchange and refresh tokens at Oura's current token endpoint ...

Apps from Oura's current developer portal receive codes from
moi.ouraring.com, and the documented api.ouraring.com/oauth/token answers
those codes with 400 invalid_request, so connecting failed and every
collection read came back 401. Token requests now go to
moi.ouraring.com/oauth/v2/ext/oauth-token first. A code works once, so the
documented endpoint is never asked first: a code whose callback names the
current server goes nowhere else, and only an older app's code or refresh
token gets one retry there after a 400, 401 or 404. The callback checks the
RFC 9207 iss parameter when present and refuses a foreign issuer.

2026-10-11 12:34:33 +02:00

..

callback

fix(oura): exchange and refresh tokens at Oura's current token endpoint

2026-10-11 12:34:33 +02:00

connect

fix(onboarding): stop the Withings connect dead-end and disclose BYO setup

2026-07-17 23:12:12 +02:00

credentials

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

disconnect

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

status

test(integrations): pin the escalation ladder, leg-scoped clearing, and what the card says

2026-07-26 14:19:13 +02:00

sync

fix(sync): answer with what a run wrote, not that it completed

2026-07-27 22:53:43 +02:00

test

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00