Function listGitLabRepositories

apps/web/src/lib/integrations/gitlab-service.ts:154–204

(
  owner: Owner,
  integrationId: string,
  forceRefresh: boolean = false
)

  return integration || null;
}

/**
 * Resolve a GitLab credential through the private-key holding token service.
 */
function requireAvailableGitLabCredential(
  result: GitLabCredentialBrokerResult,
  expectedInstanceUrl: string
): string {
  if (result.status === 'available') {
    if (result.instanceUrl !== expectedInstanceUrl) {
      throw new TRPCError({
        code: 'UNAUTHORIZED',
        message: 'GitLab integration changed while resolving credentials',
      });
    }
    return result.token;
  }

  switch (result.status) {
    case 'invalid_request':
      throw new TRPCError({ code: 'BAD_REQUEST', message: 'Invalid GitLab credential request' });
    case 'not_connected':
      throw new TRPCError({ code: 'NOT_FOUND', message: 'GitLab integration not found' });
    case 'reconnect_required':
      throw new TRPCError({
        code: 'UNAUTHORIZED',
        message: 'GitLab integration must be reconnected',
      });
    case 'temporarily_unavailable':
      throw new TRPCError({
        code: 'SERVICE_UNAVAILABLE',
        message: 'GitLab credentials are temporarily unavailable',
      });
  }
}

export async function getValidGitLabToken(
  integration: PlatformIntegration,
  actor: GitLabCredentialActor
): Promise<string> {
  const metadata = requireMetadataRecord(integration.metadata);
  const expectedInstanceUrl = normalizeInstanceUrl(
    readOptionalMetadataString(metadata, 'gitlab_instance_url')
  );
  return requireAvailableGitLabCredential(
    await fetchGitLabCredential(actor, {
      credential: 'integration',
      integrationId: integration.id,
    }),
    expectedInstanceUrl
  );
}