Function connectRejecting

packages/core/sdk/src/oauth-flow.test.ts:1503–1550

(options?: { readonly tokenExpiresInSeconds?: number })

/** Mint a connection against `server` and return the harness + call log. */
const connectRejecting = (options?: { readonly tokenExpiresInSeconds?: number }) =>
  Effect.gen(function* () {
    const server = yield* serveOAuthTestServer({
      scopes: ["read"],
      ...(options?.tokenExpiresInSeconds !== undefined
        ? { tokenExpiresInSeconds: options.tokenExpiresInSeconds }
        : {}),
    });
    const state = {
      revoked: new Set<string>(),
      rejectEverything: false,
      calls: [] as string[],
    };
    const issuedLatest = Effect.gen(function* () {
      const issued = yield* server.issuedAccessTokens;
      return issued.length > 0 ? issued[issued.length - 1]! : null;
    });
    const harness = yield* makeTestWorkspaceHarness({
      plugins: [memoryCredentialsPlugin(), makeRejectingPlugin(state)] as const,
    });
    const { executor, config } = harness;
    yield* executor.acme.seed();
    yield* executor.oauth.createClient({
      owner: "org",
      slug: CLIENT,
      authorizationUrl: server.authorizationEndpoint,
      tokenUrl: server.tokenEndpoint,
      grant: "authorization_code",
      clientId: "test-client",
      clientSecret: "test-secret",
    });
    const started = yield* executor.oauth.start({
      owner: "org",
      client: CLIENT,
      clientOwner: "org",
      name: ConnectionName.make("mine"),
      integration: INTEG,
      template: TEMPLATE,
    });
    if (started.status !== "redirect") {
      return yield* Effect.die("expected a redirect-status OAuth start");
    }
    const callback = yield* server.completeAuthorizationCodeFlow({
      authorizationUrl: started.authorizationUrl,
    });
    yield* executor.oauth.complete({ state: started.state, code: callback.code });
    return { server, state, executor, config, issuedLatest };
  });

const ADDRESS = ToolAddress.make("tools.acme.org.mine.whoami");