Marc-André Bombeck 87e570abfe fix(polar): lift invalid_grant to reauth and harden the credentials surface ...

classifyPolarError now lifts a 400 carrying invalid_grant on the token
endpoint from persistent to reauth_required, mirroring Oura via the shared
isOAuthInvalidGrant helper. A stale or replayed authorization code at connect
time now surfaces the reconnect prompt instead of silently parking after 24 h.

The BYO-credentials DELETE now audit-logs and parks the integration ledger at
disconnected for parity with the dedicated disconnect route, and the PUT
audit-logs the credential write. Refresh the connect-route comment that still
described Polar as env-only OAuth; it has resolved BYO-first since v1.17.1.

Add the invalid_grant classification test plus the previously-missing
callback (happy path, CSRF mismatch, cross-user, off-spec token), connect, and
credentials route tests.

2026-06-15 00:09:22 +02:00

..

__tests__

fix(polar): lift invalid_grant to reauth and harden the credentials surface

2026-06-15 00:09:22 +02:00

client.ts

feat(polar): complete the AccessLink pull surface

2026-06-15 00:07:42 +02:00

credentials.ts

feat(integrations): per-user Polar and Oura OAuth credentials

2026-06-14 23:19:47 +02:00

response-classifier.ts

fix(polar): lift invalid_grant to reauth and harden the credentials surface

2026-06-15 00:09:22 +02:00

sync.ts

feat(polar): complete the AccessLink pull surface

2026-06-15 00:07:42 +02:00