How to Integrate Lovable with Google Fit

1// supabase/functions/google-fit-oauth/index.ts
2import { serve } from "https://deno.land/std@0.168.0/http/server.ts";
3import { createClient } from "https://esm.sh/@supabase/supabase-js@2";
4
5const CLIENT_ID = Deno.env.get("GOOGLE_CLIENT_ID") ?? "";
6const CLIENT_SECRET = Deno.env.get("GOOGLE_CLIENT_SECRET") ?? "";
7const REDIRECT_URI = Deno.env.get("GOOGLE_REDIRECT_URI") ?? "";
8const corsHeaders = { "Access-Control-Allow-Origin": "*", "Access-Control-Allow-Methods": "POST, OPTIONS", "Access-Control-Allow-Headers": "Content-Type, Authorization" };
9
10serve(async (req) => {
11  if (req.method === "OPTIONS") return new Response(null, { headers: corsHeaders });
12  const supabase = createClient(Deno.env.get("SUPABASE_URL") ?? "", Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "");
13  const body = await req.json();
14
15  try {
16    if (body.action === "get-auth-url") {
17      const { user_id } = body;
18      const state = crypto.randomUUID();
19      await supabase.from("oauth_states").insert({ user_id, state, provider: "google_fit", created_at: new Date().toISOString() });
20      const params = new URLSearchParams({
21        client_id: CLIENT_ID, redirect_uri: REDIRECT_URI, response_type: "code",
22        scope: "https://www.googleapis.com/auth/fitness.activity.read https://www.googleapis.com/auth/fitness.body.read https://www.googleapis.com/auth/fitness.heart_rate.read",
23        access_type: "offline", prompt: "consent", state,
24      });
25      return new Response(JSON.stringify({ url: `https://accounts.google.com/o/oauth2/v2/auth?${params}` }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
26    }
27
28    if (body.action === "exchange") {
29      const { code, user_id } = body;
30      const res = await fetch("https://oauth2.googleapis.com/token", {
31        method: "POST",
32        headers: { "Content-Type": "application/json" },
33        body: JSON.stringify({ code, client_id: CLIENT_ID, client_secret: CLIENT_SECRET, redirect_uri: REDIRECT_URI, grant_type: "authorization_code" }),
34      });
35      const data = await res.json();
36      if (!data.access_token) throw new Error(data.error_description ?? "Token exchange failed");
37      const expiresAt = new Date(Date.now() + data.expires_in * 1000).toISOString();
38      await supabase.from("google_fit_tokens").upsert({ user_id, access_token: data.access_token, refresh_token: data.refresh_token, expires_at: expiresAt }, { onConflict: "user_id" });
39      return new Response(JSON.stringify({ success: true }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
40    }
41
42    if (body.action === "get-token") {
43      const { user_id } = body;
44      const { data: token } = await supabase.from("google_fit_tokens").select("*").eq("user_id", user_id).single();
45      if (!token) throw new Error("No Google Fit connection found.");
46      if (new Date(token.expires_at) < new Date(Date.now() + 300_000)) {
47        const res = await fetch("https://oauth2.googleapis.com/token", {
48          method: "POST",
49          headers: { "Content-Type": "application/json" },
50          body: JSON.stringify({ client_id: CLIENT_ID, client_secret: CLIENT_SECRET, refresh_token: token.refresh_token, grant_type: "refresh_token" }),
51        });
52        const data = await res.json();
53        const expiresAt = new Date(Date.now() + data.expires_in * 1000).toISOString();
54        await supabase.from("google_fit_tokens").update({ access_token: data.access_token, expires_at: expiresAt }).eq("user_id", user_id);
55        return new Response(JSON.stringify({ access_token: data.access_token }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
56      }
57      return new Response(JSON.stringify({ access_token: token.access_token }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
58    }
59
60    return new Response(JSON.stringify({ error: "Unknown action" }), { status: 400, headers: corsHeaders });
61  } catch (err) {
62    return new Response(JSON.stringify({ error: err.message }), { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } });
63  }
64});