OAuth 2.1

import { ChatATPClient, OAuthClient } from "@chatatp/studio";

const oauth = new OAuthClient();
const { verifier, challenge } = await OAuthClient.createPkce();
const state = crypto.randomUUID();

const authorizationUrl = oauth.authorizationUrl({
  clientId: process.env.CHATATP_CLIENT_ID!,
  redirectUri: "https://your-app.example.com/oauth/callback",
  scopes: ["agents:read", "conversations:read", "messages:send"],
  state,
  codeChallenge: challenge,
  codeChallengeMethod: "S256",
});

// Store state and verifier in the user's server-side session.
// Redirect the user's browser to authorizationUrl.

const tokens = await oauth.exchangeCode({
  clientId: process.env.CHATATP_CLIENT_ID!,
  code: callbackUrl.searchParams.get("code")!,
  redirectUri: "https://your-app.example.com/oauth/callback",
  codeVerifier: verifier,
});

const studio = new ChatATPClient({ apiKey: tokens!.access_token });
const agents = await studio.agents.list();
const identity = await oauth.userinfo(tokens!.access_token);
console.log(identity.sub, identity.email, identity.name);

const nextTokens = await client.oauth.refresh({
  clientId: process.env.CHATATP_CLIENT_ID!,
  refreshToken: tokens!.refresh_token,
});

await client.oauth.revoke(nextTokens!.refresh_token, process.env.CHATATP_CLIENT_ID);