import type { OAuth2CredentialData } from '@n8n/client-oauth2';

/**
 * Credential fields owned by the dynamic client registration handshake rather
 * than the user, and hidden in the UI.
 */
export const DCR_MANAGED_CREDENTIAL_FIELDS = [
	'authUrl',
	'accessTokenUrl',
	'grantType',
	'authentication',
	'usePkce',
	'clientId',
	'clientSecret',
] as const;

export type DcrManagedCredentialField = (typeof DCR_MANAGED_CREDENTIAL_FIELDS)[number];

/** OAuth endpoint/flow fields the instance owns for a managed credential. */
export const MANAGED_OAUTH_PINNED_FIELDS = [
	'authUrl',
	'accessTokenUrl',
	'grantType',
	'authentication', // OAuth2
	'requestTokenUrl',
	'signatureMethod', // OAuth1
] as const;

/** Values negotiated for {@link DCR_MANAGED_CREDENTIAL_FIELDS}; `undefined` clears the field. */
export type DcrManagedCredentialValues = {
	[Field in DcrManagedCredentialField]: OAuth2CredentialData[Field] | undefined;
};