Function oauthCredsChanged

apps/sim/lib/mcp/oauth/creds-diff.ts:17–39

(params: OauthCredsDiffParams)

 * admins can overwrite an unusable stored secret instead of getting a 500.
 */
export async function oauthCredsChanged(params: OauthCredsDiffParams): Promise<boolean> {
  const clientIdChanged =
    params.incomingClientIdProvided &&
    (params.incomingClientId || null) !== (params.currentClientId ?? null)

  let clientSecretChanged = false
  if (params.incomingClientSecretProvided) {
    if (!params.incomingClientSecret) {
      clientSecretChanged = params.currentEncryptedClientSecret != null
    } else if (!params.currentEncryptedClientSecret) {
      clientSecretChanged = true
    } else {
      try {
        const { decrypted } = await decryptSecret(params.currentEncryptedClientSecret)
        clientSecretChanged = decrypted !== params.incomingClientSecret
      } catch {
        clientSecretChanged = true
      }
    }
  }

  return clientIdChanged || clientSecretChanged
}