switched to paddle inline checkout, removed paypal and most of stripe. added product sync between app and paddle.

resources/js/admin/auth/tokens.ts

@@ -58,6 +58,7 @@ export interface StoredTokens {
   refreshToken: string;
   expiresAt: number;
   scope?: string;
+  clientId?: string;
 }
 
 export interface TokenResponse {
@@ -83,13 +84,14 @@ export function loadTokens(): StoredTokens | null {
   return stored;
 }
 
-export function saveTokens(response: TokenResponse): StoredTokens {
+export function saveTokens(response: TokenResponse, clientId: string = getClientId()): StoredTokens {
   const expiresAt = Date.now() + Math.max(response.expires_in - 30, 0) * 1000;
   const stored: StoredTokens = {
     accessToken: response.access_token,
     refreshToken: response.refresh_token,
     expiresAt,
     scope: response.scope,
+    clientId,
   };
   localStorage.setItem(TOKEN_STORAGE_KEY, JSON.stringify(stored));
   return stored;
@@ -110,19 +112,21 @@ export async function ensureAccessToken(): Promise<string> {
     return tokens.accessToken;
   }
 
-  return refreshAccessToken(tokens.refreshToken);
+  return refreshAccessToken(tokens);
 }
 
-async function refreshAccessToken(refreshToken: string): Promise<string> {
-  if (!refreshToken) {
+async function refreshAccessToken(tokens: StoredTokens): Promise<string> {
+  const clientId = tokens.clientId ?? getClientId();
+
+  if (!tokens.refreshToken) {
     notifyAuthFailure();
     throw new AuthError('unauthenticated', 'Missing refresh token');
   }
 
   const params = new URLSearchParams({
     grant_type: 'refresh_token',
-    refresh_token: refreshToken,
-    client_id: getClientId(),
+    refresh_token: tokens.refreshToken,
+    client_id: clientId,
   });
 
   const response = await fetch(TOKEN_ENDPOINT, {
@@ -138,7 +142,7 @@ async function refreshAccessToken(refreshToken: string): Promise<string> {
   }
 
   const data = (await response.json()) as TokenResponse;
-  const stored = saveTokens(data);
+  const stored = saveTokens(data, clientId);
   return stored.accessToken;
 }
 
@@ -215,10 +219,12 @@ export async function completeOAuthCallback(params: URLSearchParams): Promise<st
   localStorage.removeItem(CODE_VERIFIER_KEY);
   localStorage.removeItem(STATE_KEY);
 
+  const clientId = getClientId();
+
   const body = new URLSearchParams({
     grant_type: 'authorization_code',
     code,
-    client_id: getClientId(),
+    client_id: clientId,
     redirect_uri: buildRedirectUri(),
     code_verifier: verifier,
   });
@@ -237,7 +243,7 @@ export async function completeOAuthCallback(params: URLSearchParams): Promise<st
   }
 
   const data = (await response.json()) as TokenResponse;
-  saveTokens(data);
+  saveTokens(data, clientId);
 
   const redirectTarget = sessionStorage.getItem(REDIRECT_KEY);
   if (redirectTarget) {