(r: oauth.TokenEndpointResponse)
| 454 | }; |
| 455 | |
| 456 | const tokenResponseFrom = (r: oauth.TokenEndpointResponse): OAuth2TokenResponse => ({ |
| 457 | access_token: r.access_token, |
| 458 | token_type: r.token_type, |
| 459 | refresh_token: r.refresh_token, |
| 460 | expires_in: typeof r.expires_in === "number" ? r.expires_in : undefined, |
| 461 | scope: r.scope, |
| 462 | }); |
| 463 | |
| 464 | // MCP source connections are pure OAuth 2.0 — we never request `openid` and |
| 465 | // never consume `id_token`. Some providers (PostHog, etc.) front an OIDC |
no outgoing calls
no test coverage detected