Head of Product & Engineering ad2682c55d fix: guard against empty locationId in OAuth callback and log token fields ...

GHL returns an empty locationId when the user authorizes at agency level
instead of selecting a specific sub-account location. Without this guard
the token was silently stored under an empty key, making every subsequent
webhook fail with "no token for location".

Also logs location_id/company_id/user_type from the token response to
make future OAuth install debugging easier.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-06 01:15:27 +02:00

..

api.go

fix: resolve all golangci-lint v2 failures

2026-04-05 21:52:36 +02:00

oauth_test.go

fix: suppress remaining errcheck failures in test and oauth code

2026-04-05 22:37:52 +02:00

oauth.go

fix: guard against empty locationId in OAuth callback and log token fields

2026-04-06 01:15:27 +02:00

types.go

fix: add uninstall handler, idempotency guard, and OAuth error handling

2026-04-04 17:52:09 +02:00

webhook_test.go

fix: switch webhook signature verification from ECDSA to RSA-PKCS1v15+SHA-256

2026-04-05 01:15:56 +02:00

webhook.go

fix: tolerate literal \n in GHL_WEBHOOK_PUBLIC_KEY env var

2026-04-05 18:50:56 +02:00