0360757ae8
Garmin Connect as the third connected-services provider (spec: garmin-import). The interesting parts: - Push-first ingestion: Garmin has no list endpoint. The webhook normalizes ping (callbackURL) and push (inline) notification batches into events; the slow work (authorized FIT download, FIT→GPX via the shared converter, activity creation) runs in a garmin-import-activity pg-boss job so the webhook answers fast. Callback URLs are validated against Garmin's API host before any fetch (SSRF guard). - History via backfill requests: /sync/import/garmin is a date-range requester with honest async progress (no pick list — the concept doesn't exist in a push model). Ranges chunk to Garmin's 90-day cap; overlaps are free via sync_imports dedupe. Requests persist in import_batches via two new nullable columns (range_start/range_end). - OAuth2 + PKCE on the existing oauth credential kind. Design correction from apply: the verifier rides a short-lived httpOnly cookie scoped to the callback path — the state param is visible in redirect URLs and must never carry it. Manifests opt in via pkce:true. - Deregistration notifications flip the connection to 'revoked' (row kept for audit, imports retained, re-connect prompt shown). - Framework evolutions, all additive: parseWebhook returns WebhookEvent[] (Garmin batches; Wahoo adapted), manifest gains configured()/importUrl/pkce, importActivity accepts summary stats for FIT-less imports, manager gains markRevoked. - Env-gated: no GARMIN_CLIENT_ID → provider hidden on /settings/connections. Privacy manifest entry (DE+EN). i18n en+de. Rollout (§6) stays gated on the Garmin Developer Program application (submitted 2026-06-07). Fixtures are doc-shaped; the staging soak swaps in recorded payloads if shapes differ. Gate: typecheck ✓ lint ✓ unit+integration ✓ e2e 70/72 + both known flakes green isolated ✓ openspec validate ✓ Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
69 lines
2.5 KiB
TypeScript
69 lines
2.5 KiB
TypeScript
// Wahoo WebhookReceiver capability adapter.
|
|
//
|
|
// Wahoo posts `workout_summary` events to /api/sync/webhook/wahoo when a
|
|
// workout completes. We route the event to the right local user via
|
|
// provider_user_id, deduplicate via sync_imports, then download + convert
|
|
// the FIT file (if present) and create an activity.
|
|
|
|
import { fitToGpx } from "../../fit.ts";
|
|
import { fetchWithTimeout } from "../../../http.server.ts";
|
|
import { isAlreadyImported, importActivity } from "../../../sync/imports.server.ts";
|
|
import { getServiceByProviderUser, withFreshCredentials } from "../../manager.ts";
|
|
import type { WebhookEvent, WebhookReceiver } from "../../registry.ts";
|
|
|
|
interface WahooWebhookBody {
|
|
event_type?: string;
|
|
user?: { id?: number };
|
|
workout_summary?: {
|
|
id?: number;
|
|
workout?: { id?: number };
|
|
file?: { url?: string };
|
|
};
|
|
}
|
|
|
|
|
|
export const wahooWebhook: WebhookReceiver = {
|
|
parseWebhook(body: unknown): WebhookEvent[] {
|
|
const payload = body as WahooWebhookBody;
|
|
if (payload.event_type !== "workout_summary" || !payload.user?.id) return [];
|
|
|
|
return [
|
|
{
|
|
eventType: payload.event_type,
|
|
providerUserId: String(payload.user.id),
|
|
workoutId: String(
|
|
payload.workout_summary?.workout?.id ?? payload.workout_summary?.id ?? "",
|
|
),
|
|
fileUrl: payload.workout_summary?.file?.url,
|
|
},
|
|
];
|
|
},
|
|
|
|
async handle(event: WebhookEvent): Promise<void> {
|
|
// Match incoming webhooks to local users via provider_user_id.
|
|
// Unknown users return silently — no leak.
|
|
const service = await getServiceByProviderUser("wahoo", event.providerUserId);
|
|
if (!service) return;
|
|
|
|
if (await isAlreadyImported(service.userId, "wahoo", event.workoutId)) return;
|
|
|
|
let gpx: string | null = null;
|
|
if (event.fileUrl) {
|
|
// Wahoo CDN URLs are pre-signed; no auth header needed. We still go
|
|
// through withFreshCredentials so the manager has a chance to refresh
|
|
// a near-expired credential before any subsequent Wahoo call this
|
|
// handler might make.
|
|
const buffer = await withFreshCredentials(service.id, async () => {
|
|
const resp = await fetchWithTimeout(event.fileUrl!);
|
|
if (!resp.ok) throw new Error(`Wahoo file download failed: ${resp.status}`);
|
|
return Buffer.from(await resp.arrayBuffer());
|
|
});
|
|
gpx = await fitToGpx(buffer, "Wahoo workout");
|
|
}
|
|
|
|
await importActivity(service.userId, "wahoo", event.workoutId, {
|
|
name: "Wahoo workout",
|
|
gpx: gpx ?? undefined,
|
|
});
|
|
},
|
|
};
|