Milestone 0: import zappier billing, Verae middleware, and Zapier research

Compose-ready workspace: packages/zappier (rate card, portal, Stripe),
packages/verae-zapier-middleware (timestamp + NATS), packages/verae-zapier
(CLI app), vendor/zapier-platform, and research/zapier vendor corpus.

Gate 0 structure checks pass. Product code and research are not yet wired.

vendor/zapier-platform/example-apps/github/authentication.js

@@ -0,0 +1,89 @@
+const getAccessToken = async (z, bundle) => {
+  const response = await z.request({
+    url: 'https://github.com/login/oauth/access_token',
+    method: 'POST',
+    body: {
+      client_id: process.env.CLIENT_ID,
+      client_secret: process.env.CLIENT_SECRET,
+      grant_type: 'authorization_code',
+      code: bundle.inputData.code,
+
+      // Extra data can be pulled from the querystring. For instance:
+      // 'accountDomain': bundle.cleanedRequest.querystring.accountDomain
+    },
+    headers: {
+      'content-type': 'application/x-www-form-urlencoded',
+      Accept: 'application/json',
+    },
+  });
+
+  // If you're using core v9.x or older, you should call response.throwForStatus()
+  // or verify response.status === 200 before you continue.
+
+  // This function should return `access_token`.
+  // If your app does an app refresh, then `refresh_token` should be returned here
+  // as well
+
+  return {
+    access_token: response.data.access_token,
+  };
+};
+
+// This function runs before every outbound request. You can have as many as you
+// need. They'll need to each be registered in your index.js file.
+const includeBearerToken = (request, z, bundle) => {
+  if (bundle.authData.access_token) {
+    request.headers.Authorization = `Bearer ${bundle.authData.access_token}`;
+  }
+
+  return request;
+};
+
+// You want to make a request to an endpoint that is either specifically designed
+// to test auth, or one that every user will have access to. eg: `/me`.
+// By returning the entire request object, you have access to the request and
+// response data for testing purposes. Your connection label can access any data
+// from the returned response using the `json.` prefix. eg: `{{json.username}}`.
+const test = async (z, bundle) => {
+  const response = await z.request({ url: 'https://api.github.com/user' });
+  return response;
+};
+
+module.exports = {
+  config: {
+    // OAuth2 is a web authentication standard. There are a lot of configuration
+    // options that will fit most any situation.
+    type: 'oauth2',
+    oauth2Config: {
+      authorizeUrl: {
+        url: 'https://github.com/login/oauth/authorize',
+        params: {
+          client_id: '{{process.env.CLIENT_ID}}',
+          state: '{{bundle.inputData.state}}',
+          redirect_uri: '{{bundle.inputData.redirect_uri}}',
+          response_type: 'code',
+        },
+      },
+      getAccessToken,
+    },
+
+    // Define any input app's auth requires here. The user will be prompted to enter
+    // this info when they connect their account.
+    fields: [],
+
+    // The test method allows Zapier to verify that the credentials a user provides
+    // are valid. We'll execute this method whenever a user connects their account for
+    // the first time.
+    test,
+
+    // This template string can access all the data returned from the auth test. If
+    // you return the test object, you'll access the returned data with a label like
+    // `{{json.X}}`. If you return `response.data` from your test, then your label can
+    // be `{{X}}`. This can also be a function that returns a label. That function has
+    // the standard args `(z, bundle)` and data returned from the test can be accessed
+    // in `bundle.inputData.X`.
+    connectionLabel: '{{json.login}}',
+  },
+  befores: [includeBearerToken],
+  afters: [],
+};