feat(secret-sync): add Gitlab PR comments suggestions

backend/src/services/app-connection/gitlab/gitlab-connection-enums.ts

@@ -2,3 +2,8 @@ export enum GitLabConnectionMethod {
   OAuth = "oauth",
   AccessToken = "access-token"
 }
+
+export enum GitLabAccessTokenType {
+  Project = "project",
+  Personal = "personal"
+}

backend/src/services/app-connection/gitlab/gitlab-connection-fns.ts

@@ -79,10 +79,13 @@ export const refreshGitLabToken = async (
       }
     });
 
-    const expiresAt = new Date(Date.now() + data.expires_in * 1000 - 60000);
+    const expiresAt = new Date(Date.now() + data.expires_in * 1000 - 600000);
 
     const encryptedCredentials = await encryptAppConnectionCredentials({
       credentials: {
+        instanceUrl,
+        tokenType: data.token_type,
+        createdAt: new Date(data.created_at * 1000).toISOString(),
         refreshToken: data.refresh_token,
         accessToken: data.access_token,
         expiresAt
@@ -174,7 +177,7 @@ export const validateGitLabConnectionCredentials = async (config: TGitLabConnect
 
   try {
     const url = await getGitLabInstanceUrl(inputCredentials.instanceUrl);
-    response = await request.get<TGitLabProject[]>(`${url}/api/v4/groups`, {
+    response = await request.get<TGitLabProject[]>(`${url}/api/v4/user`, {
       headers: {
         Authorization: `Bearer ${accessToken}`,
         Accept: "application/json"
@@ -200,6 +203,7 @@ export const validateGitLabConnectionCredentials = async (config: TGitLabConnect
   if (method === GitLabConnectionMethod.OAuth && oauthData) {
     return {
       accessToken,
+      instanceUrl: inputCredentials.instanceUrl,
       refreshToken: oauthData.refresh_token,
       expiresAt: new Date(Date.now() + oauthData.expires_in * 1000 - 60000),
       tokenType: oauthData.token_type,

backend/src/services/app-connection/gitlab/gitlab-connection-schemas.ts

@@ -8,9 +8,8 @@ import {
   GenericUpdateAppConnectionFieldsSchema
 } from "@app/services/app-connection/app-connection-schemas";
 
-import { GitLabConnectionMethod } from "./gitlab-connection-enums";
+import { GitLabAccessTokenType, GitLabConnectionMethod } from "./gitlab-connection-enums";
 
-// Fixed: Use consistent accessToken naming throughout
 export const GitLabConnectionAccessTokenCredentialsSchema = z.object({
   accessToken: z
     .string()
@@ -22,7 +21,8 @@ export const GitLabConnectionAccessTokenCredentialsSchema = z.object({
     .trim()
     .url("Invalid Instance URL")
     .optional()
-    .describe(AppConnections.CREDENTIALS.GITLAB.instanceUrl)
+    .describe(AppConnections.CREDENTIALS.GITLAB.instanceUrl),
+  accessTokenType: z.nativeEnum(GitLabAccessTokenType).describe(AppConnections.CREDENTIALS.GITLAB.accessTokenType)
 });
 
 export const GitLabConnectionOAuthCredentialsSchema = z.object({
@@ -35,7 +35,6 @@ export const GitLabConnectionOAuthCredentialsSchema = z.object({
     .describe(AppConnections.CREDENTIALS.GITLAB.instanceUrl)
 });
 
-// Fixed: Updated schema to match GitLab's actual OAuth response structure
 export const GitLabConnectionOAuthOutputCredentialsSchema = z.object({
   accessToken: z.string().trim(),
   refreshToken: z.string().trim(),
@@ -50,7 +49,6 @@ export const GitLabConnectionOAuthOutputCredentialsSchema = z.object({
     .describe(AppConnections.CREDENTIALS.GITLAB.instanceUrl)
 });
 
-// Schema for refresh token input during initial setup
 export const GitLabConnectionRefreshTokenCredentialsSchema = z.object({
   refreshToken: z.string().trim().min(1, "Refresh token required"),
   instanceUrl: z
@@ -83,8 +81,9 @@ export const SanitizedGitLabConnectionSchema = z.discriminatedUnion("method", [
   BaseGitLabConnectionSchema.extend({
     method: z.literal(GitLabConnectionMethod.AccessToken),
     credentials: GitLabConnectionAccessTokenCredentialsSchema.pick({
-      instanceUrl: true
-    }) // Don't expose sensitive data
+      instanceUrl: true,
+      accessTokenType: true
+    })
   }),
   BaseGitLabConnectionSchema.extend({
     method: z.literal(GitLabConnectionMethod.OAuth),