PR Custody

[codex] Use account-specific NetSuite OAuth authorize URL

@sjd9021draftchecks n/achecks…codex/netsuite-account-authorize-url → master1 files · +2 −2updated 1mo ago

▸Description

What changed

Updates the NetSuite OAuth authorization URL to use the account-specific domain collected during connection setup:

https://<accountID>.app.netsuite.com/app/login/oauth2/authorize.nl

The token URL already uses the same account field, so this makes the authorize and token exchange endpoints account-scoped consistently.

Why

INT-1924 reports that NetSuite OAuth fails before consent with:

The request could not be understood by the server due to malformed syntax.

The current config sends users to the generic system.netsuite.com OAuth authorize endpoint. NetSuite expects the account-specific authorize host for this OAuth flow.

Validation

Ran bun run auth-config/src/configToJson.ts apps/netsuite/config.ts successfully.
Verified generated auth config renders:
- authorization_url: https://{{subdomain}}.app.netsuite.com/app/login/oauth2/authorize.nl
- token_url: https://{{subdomain}}.suitetalk.api.netsuite.com/services/rest/auth/oauth2/v1/token
Baseline staging test reproduced the malformed-syntax page with the generic authorize URL.
Patched staging test generated an account-specific authorize host and did not hit the malformed-syntax page. Full ACTIVE validation still needs a valid NetSuite sandbox account/domain; the stored test Account ID did not resolve as a NetSuite app host.

Linear

INT-1924

loading diff…