feat: Add OAuth1 connection strategy support in ConnectionManager
#640
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add support for OAuth1 connection strategy in the management package. - Add ConnectionStrategyOAuth1 constant - Implement ConnectionOptionsOAuth1 structure with OAuth1-specific fields: - ConsumerKey and ConsumerSecret for authentication - RequestTokenURL, AccessTokenURL, UserAuthorizationURL for OAuth1 flow - SessionKey for storing request tokens - SignatureMethod for request signing (default: HMAC-SHA1) - CustomHeaders for custom HTTP headers - Scripts for custom user profile fetching - Add comprehensive JSON marshaling/unmarshaling tests - Add OAuth1 to connection CRUD test suite - Skip Update test for OAuth1 (requires options at creation time) - Add HTTP test recordings for Create, Read, and ReadByName operations - Generate getter methods for all OAuth1 option fields OAuth1 differs from OAuth2 in that it does not support scopes and uses a two-step token exchange flow with request tokens and access tokens.
developerkunal
changed the title
OAuth1 connection strategy support in ConnectionManager
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## v1 #640 +/- ##
==========================================
+ Coverage 96.67% 96.68% +0.01%
==========================================
Files 62 62
Lines 10614 10654 +40
==========================================
+ Hits 10261 10301 +40
Misses 235 235
Partials 118 118 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
duedares-rvj
approved these changes
Oct 31, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
🔧 Changes
This PR adds support for OAuth1 connection strategy in the management package, enabling developers to configure and manage OAuth1-based connections (such as Twitter, Tumblr, etc.) through the Auth0 Management API.
Types and Methods Added:
ConsumerKeyandConsumerSecret- OAuth1 client credentialsRequestTokenURL- URL for obtaining unauthorized request tokensAccessTokenURL- URL for exchanging request tokens for access tokensUserAuthorizationURL- URL for user authorizationSessionKey- Session key for storing request tokensSignatureMethod- Signature method for request signing (default: HMAC-SHA1)CustomHeaders- Custom HTTP headersScripts- Custom scripts for user profile fetchingImplementation Details:
omitemptyJSON tags for flexible configuration📚 References
🔬 Testing
Test Coverage:
Manual Testing:
Tested against Auth0 tenant with OAuth1 connection creation, retrieval, and deletion. All HTTP interactions recorded for reproducible tests.
📝 Checklist