aligned oauth.ts, auth.ts, and block definitions for all 29 providers

Author: waleed

apps/sim/app/workspace/[workspaceId]/w/[workflowId]/components/panel-new/components/editor/components/sub-block/components/credential-selector/components/oauth-required-modal.tsx

@@ -51,6 +51,7 @@ const SCOPE_DESCRIPTIONS: Record<string, string> = {
   'write:confluence-content': 'Create and edit Confluence pages',
   'write:confluence-space': 'Manage Confluence spaces',
   'write:confluence-file': 'Upload files to Confluence',
+  'read:content:confluence': 'Read Confluence content',
   'read:page:confluence': 'View Confluence pages',
   'write:page:confluence': 'Create and update Confluence pages',
   'read:comment:confluence': 'View comments on Confluence pages',

apps/sim/blocks/blocks/airtable.ts

@@ -34,7 +34,12 @@ export const AirtableBlock: BlockConfig<AirtableResponse> = {
       type: 'oauth-input',
       provider: 'airtable',
       serviceId: 'airtable',
-      requiredScopes: ['data.records:read', 'data.records:write'], // Keep both scopes
+      requiredScopes: [
+        'data.records:read',
+        'data.records:write',
+        'user.email:read',
+        'webhook:manage',
+      ],
       placeholder: 'Select Airtable account',
       required: true,
     },

apps/sim/blocks/blocks/google_form.ts

@@ -20,7 +20,11 @@ export const GoogleFormsBlock: BlockConfig = {
       required: true,
       provider: 'google-forms',
       serviceId: 'google-forms',
-      requiredScopes: [],
+      requiredScopes: [
+        'https://www.googleapis.com/auth/userinfo.email',
+        'https://www.googleapis.com/auth/userinfo.profile',
+        'https://www.googleapis.com/auth/forms.responses.readonly',
+      ],
       placeholder: 'Select Google account',
     },
     {

apps/sim/blocks/blocks/google_sheets.ts

@@ -36,7 +36,10 @@ export const GoogleSheetsBlock: BlockConfig<GoogleSheetsResponse> = {
       required: true,
       provider: 'google-sheets',
       serviceId: 'google-sheets',
-      requiredScopes: [],
+      requiredScopes: [
+        'https://www.googleapis.com/auth/drive.readonly',
+        'https://www.googleapis.com/auth/drive.file',
+      ],
       placeholder: 'Select Google account',
     },
     // Spreadsheet Selector
@@ -47,7 +50,10 @@ export const GoogleSheetsBlock: BlockConfig<GoogleSheetsResponse> = {
       canonicalParamId: 'spreadsheetId',
       provider: 'google-drive',
       serviceId: 'google-drive',
-      requiredScopes: [],
+      requiredScopes: [
+        'https://www.googleapis.com/auth/drive.readonly',
+        'https://www.googleapis.com/auth/drive.file',
+      ],
       mimeType: 'application/vnd.google-apps.spreadsheet',
       placeholder: 'Select a spreadsheet',
       dependsOn: ['credential'],

apps/sim/blocks/blocks/microsoft_excel.ts

@@ -32,7 +32,14 @@ export const MicrosoftExcelBlock: BlockConfig<MicrosoftExcelResponse> = {
       type: 'oauth-input',
       provider: 'microsoft-excel',
       serviceId: 'microsoft-excel',
-      requiredScopes: [],
+      requiredScopes: [
+        'openid',
+        'profile',
+        'email',
+        'Files.Read',
+        'Files.ReadWrite',
+        'offline_access',
+      ],
       placeholder: 'Select Microsoft account',
       required: true,
     },

apps/sim/blocks/blocks/sharepoint.ts

@@ -43,10 +43,9 @@ export const SharepointBlock: BlockConfig<SharepointResponse> = {
         'openid',
         'profile',
         'email',
-        'Files.Read',
-        'Files.ReadWrite',
         'Sites.Read.All',
         'Sites.ReadWrite.All',
+        'Sites.Manage.All',
         'offline_access',
       ],
       placeholder: 'Select Microsoft account',

apps/sim/blocks/blocks/slack.ts

@@ -59,7 +59,9 @@ export const SlackBlock: BlockConfig<SlackResponse> = {
         'chat:write.public',
         'users:read',
         'files:write',
+        'files:read',
         'canvases:write',
+        'reactions:write',
       ],
       placeholder: 'Select Slack workspace',
       condition: {

apps/sim/blocks/blocks/x.ts

@@ -33,7 +33,7 @@ export const XBlock: BlockConfig<XResponse> = {
       type: 'oauth-input',
       provider: 'x',
       serviceId: 'x',
-      requiredScopes: ['tweet.read', 'tweet.write', 'users.read'],
+      requiredScopes: ['tweet.read', 'tweet.write', 'users.read', 'offline.access'],
       placeholder: 'Select X account',
     },
     {

apps/sim/lib/oauth/oauth.ts

@@ -258,17 +258,19 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
           'Chat.Read',
           'Chat.ReadWrite',
           'Chat.ReadBasic',
+          'ChatMessage.Send',
           'Channel.ReadBasic.All',
           'ChannelMessage.Send',
           'ChannelMessage.Read.All',
+          'ChannelMessage.ReadWrite',
           'ChannelMember.Read.All',
           'Group.Read.All',
           'Group.ReadWrite.All',
           'Team.ReadBasic.All',
+          'TeamMember.Read.All',
           'offline_access',
           'Files.Read',
           'Sites.Read.All',
-          'TeamMember.Read.All',
         ],
       },
       outlook: {
@@ -397,12 +399,10 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
           'delete:attachment:confluence',
           'read:content:confluence',
           'delete:page:confluence',
-          'write:label:confluence',
           'read:label:confluence',
+          'write:label:confluence',
           'read:attachment:confluence',
           'write:attachment:confluence',
-          'read:label:confluence',
-          'write:label:confluence',
           'search:confluence',
           'read:me',
           'offline_access',
@@ -479,7 +479,7 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
         providerId: 'airtable',
         icon: (props) => AirtableIcon(props),
         baseProviderIcon: (props) => AirtableIcon(props),
-        scopes: ['data.records:read', 'data.records:write'],
+        scopes: ['data.records:read', 'data.records:write', 'user.email:read', 'webhook:manage'],
       },
     },
     defaultService: 'airtable',