Improve OAuth application administration - #2581
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 08eafc8546
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| href={resolve('/(app)/organization/[organizationId]/manage', { | ||
| organizationId: organization.id | ||
| })} |
There was a problem hiding this comment.
Avoid linking removed organizations
When an OAuth application's retained authorization history references an organization that has since been deleted, ViewOAuthApplication.FromApplication still returns that association and falls back to using its ID as the name. This change turns every such historical association into a link to /organization/{id}/manage, but the organization no longer exists, so the new badge leads to a broken management page. Render missing organizations as non-link badges, or expose enough existence information in the response to link only organizations that were resolved.
Useful? React with 👍 / 👎.
Summary
OAuth application administration now opens with authorized apps sorted by most recent update. Add Authorized, Not authorized, and All applications filters; link available organizations to their settings; and move client ID, redirect URLs, scopes, and other configuration into expandable details without a copy button.
Clean up automatic registrations after 24 hours without authorization, on the existing four-hour cleanup schedule. Preserve administrator-managed and disabled apps, authorization history, and legacy records with tokens. Existing API callers retain their default ordering and unfiltered results.
Also compact the Exie usage header by removing the visible month label while preserving its accessible name.
Validation
npm run validate.No breaking API changes. Preview sample data and screenshots are local only.