Function resolveOAuthCredential

apps/sim/lib/webhooks/polling/utils.ts:191–253

(
  webhookData: WebhookRecord,
  oauthProvider: string,
  requestId: string,
  logger: Logger
)

 * Returns the access token or throws on failure.
 */
export async function resolveOAuthCredential(
  webhookData: WebhookRecord,
  oauthProvider: string,
  requestId: string,
  logger: Logger
): Promise<string> {
  const metadata = webhookData.providerConfig as Record<string, unknown> | null
  const credentialId = metadata?.credentialId as string | undefined
  const userId = metadata?.userId as string | undefined
  const credentialSetId = (webhookData.credentialSetId as string | undefined) ?? undefined

  if (!credentialId && !userId) {
    throw new Error(`Missing credential info for webhook ${webhookData.id}`)
  }

  if (credentialSetId) {
    const [cs] = await db
      .select({ organizationId: credentialSet.organizationId })
      .from(credentialSet)
      .where(eq(credentialSet.id, credentialSetId))
      .limit(1)

    if (cs?.organizationId) {
      const hasAccess = await isOrganizationOnTeamOrEnterprisePlan(cs.organizationId)
      if (!hasAccess) {
        logger.error(
          `[${requestId}] Polling Group plan restriction: Your current plan does not support Polling Groups. Upgrade to Team or Enterprise to use this feature.`,
          {
            webhookId: webhookData.id,
            credentialSetId,
            organizationId: cs.organizationId,
          }
        )
        throw new Error('Polling Group plan restriction')
      }
    }
  }

  let accessToken: string | null = null

  if (credentialId) {
    const resolved = await resolveOAuthAccountId(credentialId)
    if (!resolved) {
      throw new Error(
        `Failed to resolve OAuth account for credential ${credentialId}, webhook ${webhookData.id}`
      )
    }
    const rows = await db.select().from(account).where(eq(account.id, resolved.accountId)).limit(1)
    if (!rows.length) {
      throw new Error(`Credential ${credentialId} not found for webhook ${webhookData.id}`)
    }
    const ownerUserId = rows[0].userId
    accessToken = await refreshAccessTokenIfNeeded(resolved.accountId, ownerUserId, requestId)
  } else if (userId) {
    accessToken = await getOAuthToken(userId, oauthProvider)
  }

  if (!accessToken) {