Release 4.4.15

[mpgxvii]

• Add project ID to account already registered error message (Add project ID to account already registered error message #322)
• Fix missing Oura user_id during token refresh (Fix missing user_id during token refresh #321)
• Add Garmin Oauth2 Authorization (Garmin OAuth migration from OAuth 1.0 to OAuth 2.0 #317)

[this-Aditya]

@copilot apply changes based on the comments in this thread

[Copilot]

@copilot apply changes based on the comments in this thread

Applied all changes from the review thread in commit 0bc09fc:

• oauthVersion default changed from "oauth2" to "oauth1" in RestSourceClient.kt to avoid breaking existing Garmin OAuth1 configs
• Removed sensitive one-time token values from both exception messages in GarminOAuth2AuthorizationService.kt (both now use "code verifier not found for provided state token")
• Used checkNotNull for client_id and client_secret in refreshToken (consistent with the existing pattern in requestAccessToken)

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• o1.ingest.sentry.io
  • Triggering command: /usr/lib/jvm/temurin-17-jdk-amd64/bin/java /usr/lib/jvm/temurin-17-jdk-amd64/bin/java --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.prefs/java.util.prefs=ALL-UNNAMED --add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports=jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.prefs/java.util.prefs=ALL-UNNAMED --add-opens=java.base/java.nio.charset=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.util.concurrent.atomic=ALL-UNNAMED --add-opens=java.xml/javax.xml.namespace=ALL-UNNAMED -XX:MaxMetaspaceSize=384m -XX:+HeapDumpOnOutOfMemoryError -Xms256m -Xmx512m -Dfile.encoding=UTF-8 -Duser.country -Duser.language=en (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[yatharthranjan]

do we need to deregister on Garmin too (call the deleteRegistration function) ?

[this-Aditya]

I think we don't need to do this as it is called by reportDeregistration which is triggered by garmin push service when the user has already revoked permissions on Garmin's side.
We just need to clean up our own DB, not send the deregistration again.

[yatharthranjan]

Thanks guys, nice work!. It looks already quite good, just some comments to improve robustness.