fix(credential-groups): accept signed enrollment cursors

Author: TheodoreSpeaks

apps/sim/lib/api/contracts/credential-groups.ts

@@ -5,6 +5,7 @@ import {
   CREDENTIAL_GROUP_PROVIDER_IDS,
   CREDENTIAL_GROUP_STANDARD_OAUTH_PROVIDER_IDS,
 } from '@/lib/credential-groups/providers'
+import { CREDENTIAL_GROUP_ENROLLMENT_CURSOR_MAX_LENGTH } from '@/lib/credential-groups/types'
 
 export const credentialGroupProviderSchema = z.enum(CREDENTIAL_GROUP_PROVIDER_IDS)
 export const credentialGroupStatusSchema = z.enum(['active', 'disabled'])
@@ -169,7 +170,11 @@ export const slackCredentialGroupConfigurationCallbackQuerySchema =
   credentialGroupOAuthCallbackQuerySchema
 
 export const credentialGroupEnrollmentListQuerySchema = z.object({
-  cursor: z.string().min(1, 'Enrollment cursor cannot be empty').max(128).optional(),
+  cursor: z
+    .string()
+    .min(1, 'Enrollment cursor cannot be empty')
+    .max(CREDENTIAL_GROUP_ENROLLMENT_CURSOR_MAX_LENGTH)
+    .optional(),
   limit: z.coerce.number().int().min(1).max(100).default(50),
 })
 

apps/sim/lib/credential-groups/enrollments.test.ts

@@ -4,6 +4,7 @@
 import { dbChainMockFns, queueTableRows, resetDbChainMock, schemaMock } from '@sim/testing'
 import { inArray } from 'drizzle-orm'
 import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { credentialGroupEnrollmentListQuerySchema } from '@/lib/api/contracts/credential-groups'
 
 const { adapter } = vi.hoisted(() => ({
   adapter: {
@@ -151,6 +152,9 @@ describe('listCredentialGroupEnrollments', () => {
       statuses: ['invited', 'in_progress', 'completed', 'delivery_failed'],
     })
     if (!firstPage.nextCursor) throw new Error('Expected a next enrollment cursor')
+    expect(
+      credentialGroupEnrollmentListQuerySchema.parse({ cursor: firstPage.nextCursor }).cursor
+    ).toBe(firstPage.nextCursor)
     const result = await listCredentialGroupEnrollments(
       'workspace-1',
       'group-1',

apps/sim/lib/credential-groups/types.ts

@@ -1,5 +1,7 @@
 import type { CredentialGroupProvider } from '@/lib/credential-groups/providers'
 
+export const CREDENTIAL_GROUP_ENROLLMENT_CURSOR_MAX_LENGTH = 256
+
 interface CredentialGroupOptionInputBase {
   label: string
   required: boolean