bd25cba89c
* refactor: combine exchange and refresh into token endpoint * refactor: controller error handling * refactor: use snake_case * refactor: use snake_case * refactor: use snake case * refactor: token endpoint accepts application/x-www-form-urlencoded * refactor: token endpoint accepts application/x-www-form-urlencoded * refactor: flat token response data * refactor: error structure * refactor: client_id in the body * fix: address Cubic AI review feedback on OAuth2 endpoints - Fix getClient endpoint to use proper REST API error format instead of OAuth token error format (confidence 9/10) - Add missing space after comma in error format string in token.input.pipe.ts (confidence 9/10) - Support both camelCase and snake_case inputs in authorize endpoint for backward compatibility (confidence 10/10) - Restore legacy /exchange and /refresh endpoints alongside new /token endpoint for backward compatibility (confidence 10/10) - Add OAuth2TokensResponseDto for legacy endpoint wrapped responses - Add OAuth2LegacyExchangeInput and OAuth2LegacyRefreshInput for legacy endpoints Co-Authored-By: unknown <> * fix: address additional Cubic AI feedback on OAuth2 endpoints - Log errors when status code >= 500 in handleClientError (confidence 9/10) - Add Cache-Control: no-store and Pragma: no-cache headers to legacy /exchange and /refresh endpoints (confidence 9/10) Co-Authored-By: unknown <> * docs * Revert "fix: address additional Cubic AI feedback on OAuth2 endpoints" This reverts commit 39cc4aa3ebb9e59a171541d7010398425995ed89. * Revert "fix: address Cubic AI review feedback on OAuth2 endpoints" This reverts commit 97bf593186db04c0859f9ca30950c9e3e524019d. * docs * fix: address Cubic AI review feedback on OAuth2 endpoints - Fix getClient to use handleClientError instead of handleTokenError (confidence 10) - Restore legacy /exchange and /refresh endpoints for backward compatibility (confidence 9) - Fix RFC 6749 error format: use human-readable messages in error_description (confidence 9) - Fix errorDescription in OAuthService to use OAUTH_ERROR_REASONS mapping (confidence 9) Co-Authored-By: unknown <> * fix: address additional Cubic AI feedback on OAuth2 endpoints - Fix security issue: Replace 'CALENDSO_ENCRYPTION_KEY is not set' with generic 'Internal server configuration error' message (confidence 10/10) - Fix backward compatibility: Create OAuth2LegacyTokensDto with camelCase properties for legacy /exchange and /refresh endpoints (confidence 9/10) - Skipped: RFC 6749 error field issue (confidence 8/10, below threshold) Co-Authored-By: unknown <> * e2e * Revert "fix: address additional Cubic AI feedback on OAuth2 endpoints" This reverts commit a080e93f07aaf5a7dcf81fe605012cb7ebcdc192. * Revert "fix: address Cubic AI review feedback on OAuth2 endpoints" This reverts commit 04986a16c981521ca97069152457bf521a9ee45f. * fix: re-apply Cubic AI review feedback on OAuth2 endpoints - Restore OAuth2LegacyExchangeInput and OAuth2LegacyRefreshInput classes - Restore legacy /exchange and /refresh endpoints in OAuth2Controller - Restore OAuth2LegacyTokensDto and OAuth2TokensResponseDto classes - Restore OAUTH_ERROR_DESCRIPTIONS mapping in oauth2-error.service.ts - Restore OAUTH_ERROR_REASONS lookup in OAuthService.ts mapErrorToOAuthError - Fix encryption_key_missing error to not expose internal env var name Addresses Cubic AI feedback with confidence >= 9/10: - Comment 32 (9/10): Legacy endpoints and input classes - Comment 34 (9/10): Error description mapping in OAuthService - Comment 35 (10/10): OAUTH_ERROR_DESCRIPTIONS in error service Skipped (confidence < 9/10): - Comment 33 (8/10): getClient handleTokenError vs handleClientError Co-Authored-By: unknown <> * Revert "fix: re-apply Cubic AI review feedback on OAuth2 endpoints" This reverts commit 416bef9c931d9a7ed78c65a70a3425550d61b151. * delete unused file * fix: e2e tests * address cubic review * fix: address Cubic AI review feedback on OAuth2 exception filter - Fix header case sensitivity: use lowercase 'x-request-id' instead of 'X-Request-Id' since Express lowercases all request headers - Redact request body in error logs to prevent exposing sensitive OAuth2 credentials like client_secret, password, and refresh_token Co-Authored-By: unknown <> * docs: api v2 oauth controller docs * chore: remove authorize endpoint * refactor: remove scope from docs --------- Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
134 lines
6.8 KiB
TypeScript
134 lines
6.8 KiB
TypeScript
import { getBookingForReschedule } from "@calcom/features/bookings/lib/get-booking";
|
|
import getAllUserBookings from "@calcom/features/bookings/lib/getAllUserBookings";
|
|
import { getBookingFieldsWithSystemFields } from "@calcom/features/bookings/lib/getBookingFields";
|
|
import getBookingInfo from "@calcom/features/bookings/lib/getBookingInfo";
|
|
import handleCancelBooking from "@calcom/features/bookings/lib/handleCancelBooking";
|
|
import { getClientSecretFromPayment } from "@calcom/features/ee/payments/pages/getClientSecretFromPayment";
|
|
import { getTeamMemberEmailForResponseOrContactUsingUrlQuery } from "@calcom/features/ee/teams/lib/getTeamMemberEmailFromCrm";
|
|
import {
|
|
sendVerificationCode,
|
|
verifyPhoneNumber,
|
|
} from "@calcom/features/ee/workflows/lib/reminders/verifyPhoneNumber";
|
|
import { handleCreatePhoneCall } from "@calcom/features/handleCreatePhoneCall";
|
|
import handleMarkNoShow from "@calcom/features/handleMarkNoShow";
|
|
import { getRoutedUrl } from "@calcom/features/routing-forms/lib/getRoutedUrl";
|
|
import { symmetricDecrypt, symmetricEncrypt } from "@calcom/lib/crypto";
|
|
import { getTranslation } from "@calcom/lib/server/i18n";
|
|
import type { Prisma } from "@calcom/prisma/client";
|
|
import { credentialForCalendarServiceSelect } from "@calcom/prisma/selects/credential";
|
|
import { paymentDataSelect } from "@calcom/prisma/selects/payment";
|
|
import { createNewUsersConnectToOrgIfExists } from "@calcom/trpc/server/routers/viewer/teams/inviteMember/utils";
|
|
|
|
export { slugify } from "@calcom/lib/slugify";
|
|
export { slugifyLenient } from "@calcom/lib/slugify-lenient";
|
|
export { getBookingForReschedule };
|
|
|
|
export { getUsernameList } from "@calcom/features/eventtypes/lib/defaultEvents";
|
|
export {
|
|
DEFAULT_WEBHOOK_VERSION,
|
|
WebhookVersion,
|
|
} from "@calcom/features/webhooks/lib/interface/IWebhookRepository";
|
|
export {
|
|
AttributeType,
|
|
CreationSource,
|
|
MembershipRole,
|
|
PeriodType,
|
|
SchedulingType,
|
|
TimeUnit,
|
|
WebhookTriggerEvents,
|
|
WorkflowActions,
|
|
WorkflowTemplates,
|
|
WorkflowTriggerEvents,
|
|
} from "@calcom/prisma/enums";
|
|
export type { EventBusyDate } from "@calcom/types/Calendar";
|
|
|
|
export { handleMarkNoShow };
|
|
export { handleCreatePhoneCall };
|
|
|
|
export type {
|
|
BookingCreateBody,
|
|
BookingResponse,
|
|
} from "@calcom/features/bookings/types";
|
|
export type { ConnectedCalendar } from "@calcom/features/calendars/lib/CalendarManager";
|
|
export { getBusyCalendarTimes } from "@calcom/features/calendars/lib/CalendarManager";
|
|
export type { ConnectedDestinationCalendars } from "@calcom/features/calendars/lib/getConnectedDestinationCalendars";
|
|
export { getConnectedDestinationCalendarsAndEnsureDefaultsInDb } from "@calcom/features/calendars/lib/getConnectedDestinationCalendars";
|
|
export type { CityTimezones } from "@calcom/features/cityTimezones/cityTimezonesHandler";
|
|
export { cityTimezonesHandler } from "@calcom/features/cityTimezones/cityTimezonesHandler";
|
|
export { ENABLE_ASYNC_TASKER, MINUTES_TO_BOOK } from "@calcom/lib/constants";
|
|
export { TRPCError } from "@trpc/server";
|
|
export { createNewUsersConnectToOrgIfExists };
|
|
|
|
export { getAllUserBookings };
|
|
export { getBookingInfo };
|
|
export { handleCancelBooking };
|
|
|
|
export { dynamicEvent } from "@calcom/features/eventtypes/lib/defaultEvents";
|
|
export { parseBookingLimit } from "@calcom/lib/intervalLimits/isBookingLimits";
|
|
export { parseRecurringEvent } from "@calcom/lib/isRecurringEvent";
|
|
export { bookingMetadataSchema, teamMetadataSchema, userMetadata } from "@calcom/prisma/zod-utils";
|
|
|
|
export { symmetricEncrypt, symmetricDecrypt };
|
|
|
|
export { getTranslation };
|
|
|
|
export { roundRobinManualReassignment } from "@calcom/features/ee/round-robin/roundRobinManualReassignment";
|
|
export { roundRobinReassignment } from "@calcom/features/ee/round-robin/roundRobinReassignment";
|
|
export { validateCustomEventName } from "@calcom/features/eventtypes/lib/eventNaming";
|
|
|
|
export type TeamQuery = Prisma.TeamGetPayload<{
|
|
select: {
|
|
id: true;
|
|
credentials: {
|
|
select: typeof import("@calcom/prisma/selects/credential").credentialForCalendarServiceSelect;
|
|
};
|
|
name: true;
|
|
logoUrl: true;
|
|
members: {
|
|
select: {
|
|
role: true;
|
|
};
|
|
};
|
|
};
|
|
}>;
|
|
|
|
export { credentialForCalendarServiceSelect };
|
|
export { paymentDataSelect };
|
|
export { getClientSecretFromPayment };
|
|
|
|
export type { GroupedAttribute } from "@calcom/trpc/server/routers/viewer/attributes/getByUserId.handler";
|
|
export { groupMembershipAttributes } from "@calcom/trpc/server/routers/viewer/attributes/getByUserId.handler";
|
|
export { confirmHandler as confirmBookingHandler } from "@calcom/trpc/server/routers/viewer/bookings/confirm.handler";
|
|
export { getBookingFieldsWithSystemFields };
|
|
|
|
export { getRoutedUrl };
|
|
|
|
export { getTeamMemberEmailForResponseOrContactUsingUrlQuery };
|
|
|
|
export { checkAdminOrOwner } from "@calcom/features/auth/lib/checkAdminOrOwner";
|
|
export { getCalendarLinks } from "@calcom/features/bookings/lib/getCalendarLinks";
|
|
export { findTeamMembersMatchingAttributeLogic } from "@calcom/features/routing-forms/lib/findTeamMembersMatchingAttributeLogic";
|
|
export { SelectedCalendarRepository } from "@calcom/lib/server/repository/selectedCalendar";
|
|
export { encryptServiceAccountKey } from "@calcom/lib/server/serviceAccountKey";
|
|
export { createHandler as createApiKeyHandler } from "@calcom/trpc/server/routers/viewer/apiKeys/create.handler";
|
|
export type { TFindTeamMembersMatchingAttributeLogicInputSchema } from "@calcom/trpc/server/routers/viewer/attributes/findTeamMembersMatchingAttributeLogic.schema";
|
|
|
|
export { verifyPhoneNumber, sendVerificationCode };
|
|
|
|
export { verifyCodeUnAuthenticated } from "@calcom/features/auth/lib/verifyCodeUnAuthenticated";
|
|
export { sendEmailVerificationByCode } from "@calcom/features/auth/lib/verifyEmail";
|
|
export { BookingAccessService } from "@calcom/features/bookings/services/BookingAccessService";
|
|
export { StripeBillingService } from "@calcom/features/ee/billing/service/billingProvider/StripeBillingService";
|
|
export { TeamService } from "@calcom/features/ee/teams/services/teamService";
|
|
export type { OAuth2Tokens } from "@calcom/features/oauth/services/OAuthService";
|
|
export { OAuthService } from "@calcom/features/oauth/services/OAuthService";
|
|
export { generateSecret } from "@calcom/features/oauth/utils/generateSecret";
|
|
export { ProfileRepository } from "@calcom/features/profile/repositories/ProfileRepository";
|
|
export type { Tasker } from "@calcom/features/tasker/tasker";
|
|
export { getTasker } from "@calcom/features/tasker/tasker-factory";
|
|
export { verifyCodeChallenge } from "@calcom/lib/pkce";
|
|
export { validateUrlForSSRFSync } from "@calcom/lib/ssrfProtection";
|
|
export { checkEmailVerificationRequired } from "@calcom/trpc/server/routers/publicViewer/checkIfUserEmailVerificationRequired.handler";
|
|
export { verifyCode as verifyCodeAuthenticated } from "@calcom/trpc/server/routers/viewer/organizations/verifyCode.handler";
|
|
export type { OrgMembershipLookup } from "@calcom/trpc/server/routers/viewer/slots/util";
|