How to Integrate Lovable with Withings

1// supabase/functions/withings-oauth/index.ts
2import { serve } from "https://deno.land/std@0.168.0/http/server.ts";
3import { createClient } from "https://esm.sh/@supabase/supabase-js@2";
4
5const CLIENT_ID = Deno.env.get("WITHINGS_CLIENT_ID") ?? "";
6const CONSUMER_SECRET = Deno.env.get("WITHINGS_CONSUMER_SECRET") ?? "";
7const REDIRECT_URI = Deno.env.get("WITHINGS_REDIRECT_URI") ?? "";
8const API_BASE = Deno.env.get("WITHINGS_API_BASE") ?? "https://wbsapi.withings.net";
9const corsHeaders = { "Access-Control-Allow-Origin": "*", "Access-Control-Allow-Methods": "POST, OPTIONS", "Access-Control-Allow-Headers": "Content-Type, Authorization" };
10
11serve(async (req) => {
12  if (req.method === "OPTIONS") return new Response(null, { headers: corsHeaders });
13  const supabase = createClient(Deno.env.get("SUPABASE_URL") ?? "", Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "");
14  const body = await req.json();
15
16  try {
17    if (body.action === "exchange") {
18      const { code, user_id } = body;
19      const res = await fetch(`${API_BASE}/v2/oauth2`, {
20        method: "POST",
21        headers: { "Content-Type": "application/x-www-form-urlencoded" },
22        body: new URLSearchParams({ action: "requesttoken", grant_type: "authorization_code", client_id: CLIENT_ID, consumer_secret: CONSUMER_SECRET, code, redirect_uri: REDIRECT_URI }),
23      });
24      const data = await res.json();
25      if (data.status !== 0) throw new Error(`Withings error ${data.status}: ${data.error}`);
26      const { access_token, refresh_token, expires_in, userid } = data.body;
27      const expiresAt = new Date(Date.now() + expires_in * 1000).toISOString();
28      await supabase.from("withings_tokens").upsert({ user_id, access_token, refresh_token, expires_at: expiresAt, withings_user_id: userid }, { onConflict: "user_id" });
29      return new Response(JSON.stringify({ success: true }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
30    }
31
32    if (body.action === "get-token") {
33      const { user_id } = body;
34      const { data: token } = await supabase.from("withings_tokens").select("*").eq("user_id", user_id).single();
35      if (!token) throw new Error("No Withings connection found.");
36      if (new Date(token.expires_at) < new Date(Date.now() + 900_000)) {
37        const res = await fetch(`${API_BASE}/v2/oauth2`, {
38          method: "POST",
39          headers: { "Content-Type": "application/x-www-form-urlencoded" },
40          body: new URLSearchParams({ action: "refreshtoken", client_id: CLIENT_ID, consumer_secret: CONSUMER_SECRET, refresh_token: token.refresh_token }),
41        });
42        const data = await res.json();
43        if (data.status !== 0) throw new Error(`Token refresh failed: ${data.error}`);
44        const expiresAt = new Date(Date.now() + data.body.expires_in * 1000).toISOString();
45        await supabase.from("withings_tokens").update({ access_token: data.body.access_token, refresh_token: data.body.refresh_token, expires_at: expiresAt }).eq("user_id", user_id);
46        return new Response(JSON.stringify({ access_token: data.body.access_token }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
47      }
48      return new Response(JSON.stringify({ access_token: token.access_token }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
49    }
50
51    return new Response(JSON.stringify({ error: "Unknown action" }), { status: 400, headers: corsHeaders });
52  } catch (err) {
53    return new Response(JSON.stringify({ error: err.message }), { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } });
54  }
55});