feat(permissions): extend hook to detect missing scopes to return those scopes for upgrade, update credential selector subblock

[waleedlatif1]

Summary

• extend hook to detect missing scopes to return those scopes for upgrade
• update credential selector subblock

Type of Change

• New feature

Testing

Tested manually

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Preview	Comments	Updated (UTC)
docs	Skipped			Nov 10, 2025 7:22pm

[waleedlatif1]

@greptile

[greptile-apps]

Greptile Overview

Greptile Summary

Extended OAuth scope management to detect and prompt users to upgrade credentials when additional permissions are required, with UI improvements to clearly communicate missing scopes.

Key Changes

• Added getMissingRequiredScopes() and needsUpgradeForRequiredScopes() helper functions to detect when a credential lacks required OAuth scopes
• Enhanced credential selector components to display an amber warning banner when additional permissions are needed, with an "Update access" button
• Updated OAuthRequiredModal to highlight newly required scopes with a "New" badge
• Improved scope parsing to handle both space and comma-separated scope strings in API response
• Changed credentialId validation from UUID-only to generic string (matching database schema where account.id is text type)
• Added scopeHints to OAuth provider configs for better service detection from scope lists
• Removed unnecessary gmail.readonly scope from Gmail block configurations (keeping only required scopes per operation)
• Expanded scope lists for Jira, Slack, and Reddit to match their current API requirements

Implementation Quality

The implementation is well-structured with proper separation of concerns. The new utility functions are reusable and the UI feedback is clear and user-friendly.

Confidence Score: 5/5

• This PR is safe to merge with minimal risk
• The changes are well-implemented, follow existing patterns, and improve the OAuth credential management UX. The credentialId validation change correctly aligns with the database schema. Scope detection logic is sound and the UI improvements provide clear user feedback.
• No files require special attention

Important Files Changed

File Analysis

Filename	Score	Overview
apps/sim/hooks/use-oauth-scope-status.ts	5/5	Added utility functions to compute missing required scopes and determine if a credential needs an upgrade
apps/sim/lib/oauth/oauth.ts	4/5	Enhanced scope management with scopeHints for service detection, improved getServiceIdFromScopes logic, and added extensive scopes for Jira, Slack, and Reddit
apps/sim/app/api/auth/oauth/credentials/route.ts	5/5	Changed credentialId validation from UUID to generic string (min 1, max 255) and improved scope parsing to handle comma-separated values
apps/sim/app/workspace/[workspaceId]/w/[workflowId]/components/panel-new/components/editor/components/sub-block/components/credential-selector/credential-selector.tsx	5/5	Integrated missing scope detection to show warning banner when additional permissions required, passes canonical scopes and newScopes to OAuth modal

Sequence Diagram

sequenceDiagram
participant User
participant CredentialSelector
participant Hook as getMissingRequiredScopes
participant CredentialsAPI
participant Modal as OAuthRequiredModal
participant OAuthProvider
User->>CredentialSelector: Select credential
CredentialSelector->>Hook: Check missing scopes
Hook-->>CredentialSelector: Return missing scopes list
alt Missing scopes found
CredentialSelector->>CredentialSelector: Show permissions banner
User->>CredentialSelector: Click Update button
CredentialSelector->>Modal: Open modal
Modal->>Modal: Display scope list
User->>Modal: Click Connect
Modal->>OAuthProvider: Initiate flow
OAuthProvider-->>CredentialsAPI: Send authorization
CredentialsAPI->>CredentialsAPI: Parse and evaluate scopes
CredentialsAPI-->>CredentialSelector: Updated credential data
CredentialSelector->>Hook: Recheck scopes
Hook-->>CredentialSelector: No missing scopes
CredentialSelector->>CredentialSelector: Hide banner
end

Loading

[greptile-apps]

_{8 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}