Add List*Organizations helpers in pkg/accessreview/drivers → Ignore .oauth-credentials.txt

- Add List*Organizations helpers in pkg/accessreview/drivers
- Replace AccessSource picker switches with map dispatch
- Drop dead per-provider connector settings wrappers
- Ignore .oauth-credentials.txt

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>

pkg/server/api/console/v1/access_review_campaign_resolvers.go

@@ -398,76 +398,29 @@ func (r *accessSourceResolver) ProviderOrganizations(ctx context.Context, obj *t
 		return nil, fmt.Errorf("cannot get connector HTTP client: %w", err)
 	}
 
-	switch dbConnector.Provider {
-	case coredata.ConnectorProviderGitHub:
-		orgs, err := fetchGitHubOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch github organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderSentry:
-		orgs, err := fetchSentryOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch sentry organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderGitLab:
-		orgs, err := fetchGitLabOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch gitlab organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderBitbucket:
-		orgs, err := fetchBitbucketOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch bitbucket organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderHeroku:
-		orgs, err := fetchHerokuOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch heroku organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderAsana:
-		orgs, err := fetchAsanaOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch asana organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderPagerDuty:
-		// PagerDuty uses Pattern 2-auto: the subdomain is captured during
-		// the OAuth callback, no picker UI is required.
-		return []*types.ProviderOrganization{}, nil
-	case coredata.ConnectorProviderSnyk:
-		orgs, err := fetchSnykOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch snyk organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderNetlify:
-		orgs, err := fetchNetlifyOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch netlify organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderClickUp:
-		orgs, err := fetchClickUpOrganizations(ctx, httpClient)
-		if err != nil {
-			return nil, fmt.Errorf("cannot fetch clickup organizations: %w", err)
-		}
-		return orgs, nil
-	case coredata.ConnectorProviderVercel:
-		// Vercel uses Pattern 2-auto: the team_id is captured during the
-		// OAuth callback (or synthesized from /v2/user for personal
-		// accounts), no picker UI is required.
-		return []*types.ProviderOrganization{}, nil
-	default:
+	cfg, ok := providerOrgConfigs[dbConnector.Provider]
+	if !ok || cfg.ListOrgs == nil {
 		return []*types.ProviderOrganization{}, nil
 	}
+
+	orgs, err := cfg.ListOrgs(ctx, httpClient)
+	if err != nil {
+		return nil, err
+	}
+
+	result := make([]*types.ProviderOrganization, len(orgs))
+	for i, o := range orgs {
+		result[i] = &types.ProviderOrganization{Slug: o.Slug, DisplayName: o.DisplayName}
+	}
+	return result, nil
 }
 
 // NeedsConfiguration is the resolver for the needsConfiguration field.
+//
+// True when the provider has a picker UI (NeedsPicker) AND the user has
+// not yet picked an org. 2-auto providers (PagerDuty, Vercel) always
+// return false: the identifier is captured during the OAuth callback,
+// not via a follow-up configure mutation.
 func (r *accessSourceResolver) NeedsConfiguration(ctx context.Context, obj *types.AccessSource) (bool, error) {
 	if err := r.authorize(ctx, obj.ID, probo.ActionAccessSourceGet); err != nil {
 		return false, err
@@ -487,48 +440,11 @@ func (r *accessSourceResolver) NeedsConfiguration(ctx context.Context, obj *type
 		panic(fmt.Errorf("cannot get connector: %w", err))
 	}
 
-	switch dbConnector.Provider {
-	case coredata.ConnectorProviderGitHub:
-		settings, _ := dbConnector.GitHubSettings()
-		return settings.Organization == "", nil
-	case coredata.ConnectorProviderSentry:
-		settings, _ := dbConnector.SentrySettings()
-		return settings.OrganizationSlug == "", nil
-	case coredata.ConnectorProviderGitLab:
-		settings, _ := dbConnector.GitLabSettings()
-		return settings.GroupID == "", nil
-	case coredata.ConnectorProviderBitbucket:
-		settings, _ := dbConnector.BitbucketSettings()
-		return settings.Workspace == "", nil
-	case coredata.ConnectorProviderHeroku:
-		settings, _ := dbConnector.HerokuSettings()
-		return settings.TeamID == "", nil
-	case coredata.ConnectorProviderAsana:
-		settings, _ := dbConnector.AsanaSettings()
-		return settings.WorkspaceGID == "", nil
-	case coredata.ConnectorProviderPagerDuty:
-		// 2-auto: subdomain is set during the OAuth callback. If for any
-		// reason it is missing, we still return false so the configure
-		// mutation does not surface — there is no manual picker.
-		return false, nil
-	case coredata.ConnectorProviderSnyk:
-		settings, _ := dbConnector.SnykSettings()
-		return settings.OrgID == "", nil
-	case coredata.ConnectorProviderNetlify:
-		settings, _ := dbConnector.NetlifySettings()
-		return settings.AccountSlug == "", nil
-	case coredata.ConnectorProviderClickUp:
-		settings, _ := dbConnector.ClickUpSettings()
-		return settings.TeamID == "", nil
-	case coredata.ConnectorProviderVercel:
-		// 2-auto: team_id is set during the OAuth callback (or synthesized
-		// from /v2/user for personal accounts). If for any reason it is
-		// missing, return false so the configure mutation does not surface
-		// — there is no manual picker.
-		return false, nil
-	default:
+	cfg, ok := providerOrgConfigs[dbConnector.Provider]
+	if !ok || !cfg.NeedsPicker {
 		return false, nil
 	}
+	return cfg.SelectedSlug(dbConnector) == "", nil
 }
 
 // ConnectionStatus is the resolver for the connectionStatus field.
@@ -582,65 +498,15 @@ func (r *accessSourceResolver) SelectedOrganization(ctx context.Context, obj *ty
 		panic(fmt.Errorf("cannot get connector: %w", err))
 	}
 
-	switch dbConnector.Provider {
-	case coredata.ConnectorProviderGitHub:
-		settings, _ := dbConnector.GitHubSettings()
-		if settings.Organization != "" {
-			return &settings.Organization, nil
-		}
-	case coredata.ConnectorProviderSentry:
-		settings, _ := dbConnector.SentrySettings()
-		if settings.OrganizationSlug != "" {
-			return &settings.OrganizationSlug, nil
-		}
-	case coredata.ConnectorProviderGitLab:
-		settings, _ := dbConnector.GitLabSettings()
-		if settings.GroupID != "" {
-			return &settings.GroupID, nil
-		}
-	case coredata.ConnectorProviderBitbucket:
-		settings, _ := dbConnector.BitbucketSettings()
-		if settings.Workspace != "" {
-			return &settings.Workspace, nil
-		}
-	case coredata.ConnectorProviderHeroku:
-		settings, _ := dbConnector.HerokuSettings()
-		if settings.TeamID != "" {
-			return &settings.TeamID, nil
-		}
-	case coredata.ConnectorProviderPagerDuty:
-		settings, _ := dbConnector.PagerDutySettings()
-		if settings.Subdomain != "" {
-			return &settings.Subdomain, nil
-		}
-	case coredata.ConnectorProviderAsana:
-		settings, _ := dbConnector.AsanaSettings()
-		if settings.WorkspaceGID != "" {
-			return &settings.WorkspaceGID, nil
-		}
-	case coredata.ConnectorProviderSnyk:
-		settings, _ := dbConnector.SnykSettings()
-		if settings.OrgID != "" {
-			return &settings.OrgID, nil
-		}
-	case coredata.ConnectorProviderNetlify:
-		settings, _ := dbConnector.NetlifySettings()
-		if settings.AccountSlug != "" {
-			return &settings.AccountSlug, nil
-		}
-	case coredata.ConnectorProviderClickUp:
-		settings, _ := dbConnector.ClickUpSettings()
-		if settings.TeamID != "" {
-			return &settings.TeamID, nil
-		}
-	case coredata.ConnectorProviderVercel:
-		settings, _ := dbConnector.VercelSettings()
-		if settings.TeamID != "" {
-			return &settings.TeamID, nil
-		}
+	cfg, ok := providerOrgConfigs[dbConnector.Provider]
+	if !ok {
+		return nil, nil
 	}
-
-	return nil, nil
+	slug := cfg.SelectedSlug(dbConnector)
+	if slug == "" {
+		return nil, nil
+	}
+	return &slug, nil
 }
 
 // Permission is the resolver for the permission field.

pkg/server/api/console/v1/access_source_provider_config.go

@@ -0,0 +1,134 @@
+// Copyright (c) 2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package console_v1
+
+import (
+	"context"
+	"net/http"
+
+	"go.probo.inc/probo/pkg/accessreview/drivers"
+	"go.probo.inc/probo/pkg/coredata"
+)
+
+// providerOrgConfig binds a connector provider to its picker-UI behavior.
+//
+// ListOrgs returns the orgs/workspaces/teams the authenticated user can
+// scope the connector to (nil for Pattern 2-auto providers like
+// PagerDuty and Vercel where the value is captured during OAuth).
+//
+// SelectedSlug returns the currently-configured org identifier for the
+// connector (empty string if none).
+//
+// NeedsPicker reports whether the picker mutation should surface in the
+// UI; false for 2-auto providers.
+type providerOrgConfig struct {
+	ListOrgs     func(ctx context.Context, httpClient *http.Client) ([]drivers.Organization, error)
+	SelectedSlug func(c *coredata.Connector) string
+	NeedsPicker  bool
+}
+
+// providerOrgConfigs is the single source of truth that the three
+// AccessSource picker resolvers (ProviderOrganizations,
+// SelectedOrganization, NeedsConfiguration) dispatch through. Adding a
+// provider takes one entry here, not three switch arms.
+var providerOrgConfigs = map[coredata.ConnectorProvider]providerOrgConfig{
+	coredata.ConnectorProviderGitHub: {
+		ListOrgs: drivers.ListGitHubOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.GitHubConnectorSettings](c)
+			return s.Organization
+		},
+		NeedsPicker: true,
+	},
+	coredata.ConnectorProviderSentry: {
+		ListOrgs: drivers.ListSentryOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.SentryConnectorSettings](c)
+			return s.OrganizationSlug
+		},
+		NeedsPicker: true,
+	},
+	coredata.ConnectorProviderGitLab: {
+		ListOrgs: drivers.ListGitLabOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.GitLabConnectorSettings](c)
+			return s.GroupID
+		},
+		NeedsPicker: true,
+	},
+	coredata.ConnectorProviderBitbucket: {
+		ListOrgs: drivers.ListBitbucketOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.BitbucketConnectorSettings](c)
+			return s.Workspace
+		},
+		NeedsPicker: true,
+	},
+	coredata.ConnectorProviderHeroku: {
+		ListOrgs: drivers.ListHerokuOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.HerokuConnectorSettings](c)
+			return s.TeamID
+		},
+		NeedsPicker: true,
+	},
+	coredata.ConnectorProviderAsana: {
+		ListOrgs: drivers.ListAsanaOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.AsanaConnectorSettings](c)
+			return s.WorkspaceGID
+		},
+		NeedsPicker: true,
+	},
+	coredata.ConnectorProviderSnyk: {
+		ListOrgs: drivers.ListSnykOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.SnykConnectorSettings](c)
+			return s.OrgID
+		},
+		NeedsPicker: true,
+	},
+	coredata.ConnectorProviderNetlify: {
+		ListOrgs: drivers.ListNetlifyOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.NetlifyConnectorSettings](c)
+			return s.AccountSlug
+		},
+		NeedsPicker: true,
+	},
+	coredata.ConnectorProviderClickUp: {
+		ListOrgs: drivers.ListClickUpOrganizations,
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.ClickUpConnectorSettings](c)
+			return s.TeamID
+		},
+		NeedsPicker: true,
+	},
+	// Pattern 2-auto: identifier is captured during the OAuth callback
+	// (subdomain for PagerDuty, team_id or fallback /v2/user.id for
+	// Vercel). No picker UI; NeedsPicker = false.
+	coredata.ConnectorProviderPagerDuty: {
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.PagerDutyConnectorSettings](c)
+			return s.Subdomain
+		},
+	},
+	coredata.ConnectorProviderVercel: {
+		SelectedSlug: func(c *coredata.Connector) string {
+			s, _ := coredata.ConnectorSettings[coredata.VercelConnectorSettings](c)
+			return s.TeamID
+		},
+	},
+}

pkg/server/api/console/v1/provider_organizations.go

@@ -16,444 +16,14 @@ package console_v1
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io"
 	"net/http"
-	"strconv"
-
-	"go.probo.inc/probo/pkg/server/api/console/v1/types"
 )
 
-// fetchGitHubOrganizations fetches the list of organizations the
-// authenticated GitHub user belongs to.
-func fetchGitHubOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, "https://api.github.com/user/orgs", nil)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create github organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/json")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch github organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch github organizations: status %d", resp.StatusCode)
-	}
-
-	var orgs []struct {
-		Login string `json:"login"`
-		Name  string `json:"name"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&orgs); err != nil {
-		return nil, fmt.Errorf("cannot decode github organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(orgs))
-	for i, org := range orgs {
-		displayName := org.Name
-		if displayName == "" {
-			displayName = org.Login
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        org.Login,
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
-// fetchSentryOrganizations fetches the list of organizations the
-// authenticated Sentry user belongs to.
-func fetchSentryOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, "https://sentry.io/api/0/organizations/?member=true", nil)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create sentry organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/json")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch sentry organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch sentry organizations: status %d", resp.StatusCode)
-	}
-
-	var orgs []struct {
-		Slug string `json:"slug"`
-		Name string `json:"name"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&orgs); err != nil {
-		return nil, fmt.Errorf("cannot decode sentry organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(orgs))
-	for i, org := range orgs {
-		displayName := org.Name
-		if displayName == "" {
-			displayName = org.Slug
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        org.Slug,
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
-// fetchGitLabOrganizations fetches the list of groups the authenticated
-// GitLab user owns. Group IDs are numeric int64 values; we surface them
-// as strings so they fit the ProviderOrganization.Slug shape.
-func fetchGitLabOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(
-		ctx,
-		http.MethodGet,
-		"https://gitlab.com/api/v4/groups?min_access_level=50&per_page=100",
-		nil,
-	)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create gitlab organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/json")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch gitlab organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch gitlab organizations: status %d", resp.StatusCode)
-	}
-
-	var groups []struct {
-		ID       int64  `json:"id"`
-		Name     string `json:"name"`
-		FullPath string `json:"full_path"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&groups); err != nil {
-		return nil, fmt.Errorf("cannot decode gitlab organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(groups))
-	for i, g := range groups {
-		displayName := g.Name
-		if displayName == "" {
-			displayName = g.FullPath
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        strconv.FormatInt(g.ID, 10),
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
-// fetchBitbucketOrganizations fetches the list of workspaces the
-// authenticated Bitbucket user belongs to.
-func fetchBitbucketOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(
-		ctx,
-		http.MethodGet,
-		"https://api.bitbucket.org/2.0/workspaces?role=member&pagelen=100",
-		nil,
-	)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create bitbucket organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/json")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch bitbucket organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch bitbucket organizations: status %d", resp.StatusCode)
-	}
-
-	var body struct {
-		Values []struct {
-			Slug string `json:"slug"`
-			Name string `json:"name"`
-		} `json:"values"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		return nil, fmt.Errorf("cannot decode bitbucket organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(body.Values))
-	for i, w := range body.Values {
-		displayName := w.Name
-		if displayName == "" {
-			displayName = w.Slug
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        w.Slug,
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
-// fetchHerokuOrganizations fetches the list of teams the authenticated
-// Heroku user belongs to.
-func fetchHerokuOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, "https://api.heroku.com/teams", nil)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create heroku organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/vnd.heroku+json; version=3")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch heroku organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch heroku organizations: status %d", resp.StatusCode)
-	}
-
-	var teams []struct {
-		ID   string `json:"id"`
-		Name string `json:"name"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&teams); err != nil {
-		return nil, fmt.Errorf("cannot decode heroku organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(teams))
-	for i, t := range teams {
-		displayName := t.Name
-		if displayName == "" {
-			displayName = t.ID
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        t.ID,
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
-// fetchAsanaOrganizations fetches the list of workspaces the
-// authenticated Asana user belongs to.
-func fetchAsanaOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(
-		ctx,
-		http.MethodGet,
-		"https://app.asana.com/api/1.0/workspaces?limit=100",
-		nil,
-	)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create asana organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/json")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch asana organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch asana organizations: status %d", resp.StatusCode)
-	}
-
-	var body struct {
-		Data []struct {
-			GID  string `json:"gid"`
-			Name string `json:"name"`
-		} `json:"data"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		return nil, fmt.Errorf("cannot decode asana organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(body.Data))
-	for i, w := range body.Data {
-		displayName := w.Name
-		if displayName == "" {
-			displayName = w.GID
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        w.GID,
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
-// fetchSnykOrganizations fetches the list of Snyk organizations the
-// authenticated user belongs to. The Snyk REST API is JSON:API style;
-// the org id is the unique identifier surfaced as the slug.
-func fetchSnykOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(
-		ctx,
-		http.MethodGet,
-		"https://api.snyk.io/rest/orgs?version=2024-10-15&limit=100",
-		nil,
-	)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create snyk organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/vnd.api+json")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch snyk organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch snyk organizations: status %d", resp.StatusCode)
-	}
-
-	var body struct {
-		Data []struct {
-			ID         string `json:"id"`
-			Attributes struct {
-				Slug string `json:"slug"`
-				Name string `json:"name"`
-			} `json:"attributes"`
-		} `json:"data"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		return nil, fmt.Errorf("cannot decode snyk organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(body.Data))
-	for i, org := range body.Data {
-		displayName := org.Attributes.Name
-		if displayName == "" {
-			displayName = org.Attributes.Slug
-		}
-		if displayName == "" {
-			displayName = org.ID
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        org.ID,
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
-// fetchNetlifyOrganizations fetches the list of Netlify accounts the
-// authenticated user belongs to.
-func fetchNetlifyOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(
-		ctx,
-		http.MethodGet,
-		"https://api.netlify.com/api/v1/accounts",
-		nil,
-	)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create netlify organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/json")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch netlify organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch netlify organizations: status %d", resp.StatusCode)
-	}
-
-	var accounts []struct {
-		Slug string `json:"slug"`
-		Name string `json:"name"`
-		Type string `json:"type"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&accounts); err != nil {
-		return nil, fmt.Errorf("cannot decode netlify organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(accounts))
-	for i, a := range accounts {
-		displayName := a.Name
-		if displayName == "" {
-			displayName = a.Slug
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        a.Slug,
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
-// fetchClickUpOrganizations fetches the list of ClickUp teams (workspaces)
-// the authenticated user belongs to.
-func fetchClickUpOrganizations(ctx context.Context, httpClient *http.Client) ([]*types.ProviderOrganization, error) {
-	req, err := http.NewRequestWithContext(
-		ctx,
-		http.MethodGet,
-		"https://api.clickup.com/api/v2/team",
-		nil,
-	)
-	if err != nil {
-		return nil, fmt.Errorf("cannot create clickup organizations request: %w", err)
-	}
-	req.Header.Set("Accept", "application/json")
-
-	resp, err := httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("cannot fetch clickup organizations: %w", err)
-	}
-	defer func() { _ = resp.Body.Close() }()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("cannot fetch clickup organizations: status %d", resp.StatusCode)
-	}
-
-	var body struct {
-		Teams []struct {
-			ID   string `json:"id"`
-			Name string `json:"name"`
-		} `json:"teams"`
-	}
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		return nil, fmt.Errorf("cannot decode clickup organizations response: %w", err)
-	}
-
-	result := make([]*types.ProviderOrganization, len(body.Teams))
-	for i, t := range body.Teams {
-		displayName := t.Name
-		if displayName == "" {
-			displayName = t.ID
-		}
-		result[i] = &types.ProviderOrganization{
-			Slug:        t.ID,
-			DisplayName: displayName,
-		}
-	}
-
-	return result, nil
-}
-
 // probeConnection makes a lightweight API call to the given URL to verify
-// the OAuth token is still valid. The probe URL is configured per connector
-// in the connector registry.
+// the OAuth token is still valid. The probe URL is configured per
+// connector in the connector registry.
 func probeConnection(ctx context.Context, httpClient *http.Client, probeURL string) error {
 	if probeURL == "" {
 		return nil