fix(LiveChat): Remove scope assumption with LiveChat login (#432)

Co-authored-by: Sébastien Chopin <seb@nuxt.com>
Co-authored-by: Sébastien Chopin <atinux@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

Author: 3 people

playground/app/pages/index.vue

@@ -33,12 +33,15 @@ const providers = computed(() =>
       onClick() {
         const handle = prompt('Enter your Bluesky handle')
         if (handle) {
-          navigateTo({
-            path: '/auth/bluesky',
-            query: { handle },
-          }, {
-            external: true,
-          })
+          navigateTo(
+            {
+              path: '/auth/bluesky',
+              query: { handle },
+            },
+            {
+              external: true,
+            },
+          )
         }
       },
       disabled: Boolean(user.value?.bluesky),
@@ -248,6 +251,12 @@ const providers = computed(() =>
       disabled: Boolean(user.value?.heroku),
       icon: 'i-simple-icons-heroku',
     },
+    {
+      title: user.value?.livechat || 'Livechat',
+      to: '/auth/livechat',
+      disabled: Boolean(user.value?.livechat),
+      icon: 'i-simple-icons-livechat',
+    },
     {
       title: user.value?.roblox || 'Roblox',
       to: '/auth/roblox',
@@ -283,7 +292,9 @@ const providers = computed(() =>
       <AuthState>
         <template #default="{ session }">
           <strong>User session:</strong>
-          <pre class="border border-default p-2 bg-muted rounded-md">{{ session || 'null' }}</pre>
+          <pre class="border border-default p-2 bg-muted rounded-md">{{
+            session || "null"
+          }}</pre>
         </template>
         <template #placeholder>
           ...

playground/server/routes/auth/livechat.ts renamed to playground/server/routes/auth/livechat.get.ts

@@ -1,14 +1,12 @@
 export default defineOAuthLiveChatEventHandler({
-  config: {},
   async onSuccess(event, { user }) {
     await setUserSession(event, {
       user: {
-        livechat: user,
+        livechat: user.name,
       },
       loggedInAt: Date.now(),
     })
 
     return sendRedirect(event, '/')
   },
-  async onError() {},
 })

playground/shared/types/auth.d.ts

@@ -43,6 +43,7 @@ declare module '#auth-utils' {
     salesforce?: string
     slack?: string
     heroku?: string
+    livechat?: string
     roblox?: string
     okta?: string
     ory?: string

src/runtime/server/lib/oauth/livechat.ts

@@ -81,8 +81,7 @@ export interface LiveChatConfig {
   userURL?: string
 
   /**
-   * LiveChat OAuth Scope. accounts--my:ro is always applied to get user profile.
-   * @default ['accounts--my:ro']
+   * LiveChat OAuth Scope. If not provided, the default scope from LiveChat will be used.
    * @example ['accounts--my:ro', 'chats--my:ro']
    */
   scope?: string[]
@@ -104,7 +103,6 @@ export function defineOAuthLiveChatEventHandler({
       authorizationURL: 'https://accounts.livechat.com',
       tokenURL: 'https://accounts.livechat.com/v2/token',
       userURL: 'https://accounts.livechat.com/v2/accounts/me',
-      scope: [],
       authorizationParams: {
         state: randomUUID(),
       },
@@ -122,17 +120,14 @@ export function defineOAuthLiveChatEventHandler({
     const query = getQuery<{ code?: string }>(event)
     const redirectURL = config.redirectURL || getOAuthRedirectURL(event)
 
-    // Ensure accounts--my:ro is always applied.
-    const scope = [...new Set([...config.scope!, 'accounts--my:ro'])].join(' ')
-
     if (!query.code) {
       return sendRedirect(
         event,
         withQuery(config.authorizationURL!, {
           client_id: config.clientId,
           redirect_uri: redirectURL,
           response_type: 'code',
-          scope,
+          scope: config.scope?.length ? config.scope.join(' ') : undefined,
           ...config.authorizationParams,
         }),
       )