PR Custody

PRPR Custody

[SUP-357][codex] configure HubSpot optional scope field

@samvitjatiadraftchecks n/achecks…codex/hubspot-remove-optional-scopes-template → master1 files · +6 −17updated 5d ago

GitHub

▸Description · 1 noise

What changed

Removed the hidden HubSpot optional_scopes auth config field and old URL templating.
Changed HubSpot OAuth authorization_url to include the invariant required scope: scope=oauth.
Declared HubSpot selected/default scopes as an OAuth URL scope field via scope_config.scope_fields -> optional_scope.
Removed oauth from HubSpot default_scopes, since it is now always supplied by the authorization URL.

Why

HubSpot's provider-specific required/optional scope behavior should live in toolkit config. Apollo should only render the configured scope fields generically.

Validation

git diff --check passed locally for Mercury.
Full Mercury tests were not run in this session.

Follow-ups

Configure the Composio-managed HubSpot app with oauth as Required and all other supported permissions as Optional.
Add Dashboard/API messaging for HubSpot custom credentials explaining the required HubSpot scope categories.

Linear: SUP-357 https://linear.app/composio/issue/SUP-357/3-hubspot-own-app-cred-expiry-opaque-callback

▸ 1 bot/status comment hidden

@linear-code[bot]5d ago

▸ Ship to close: code-fix + docs · P1 · 2 customers · 1 still open of 3 resolved ≠ resolved — open until the fix ships, not when tickets are answered.

Root cause — Custom-app credential expiry; provider-error-surfacing fix sits unmerged.

❓ Why it's a ticket — BUG (custom-app cred). Ticket because the provider error isn't surfaced and own-app setup isn't documented.

📈 Blast radius — 69.6% of 215,488 hubspot connected accounts are EXPIRED/FAILED (148,782 expired) — auth blast-radius. · 72% of 205K accounts bad auth · funnel 32%

🎫 Tickets (3 tickets) — ✅ = resolved on Plain (≠ root-cause fixed) · ⚠ = open:

🕒 Updated 2026-06-08T06:35:01Z (UTC) · auto-refreshed every 6h · theme tk-hubspot-auth

loading diff…