sync: feat(oauth): retrieve shared credential before create (#678)

Synced from monorepo directory: wan

Author: acedatacloud-dev

core/oauth.py

@@ -376,6 +376,26 @@ async def _get_user_credential(self, jwt_token: str) -> str | None:
                 if not application_id:
                     return None
 
+                # Query for existing shared "OAuth MCP" credential first
+                cred_list_resp = await client.get(
+                    f"{settings.platform_base_url}/api/v1/credentials/",
+                    params={"application_id": application_id, "name": "OAuth MCP"},
+                    headers=headers,
+                )
+                existing_creds = []
+                if cred_list_resp.status_code == 200:
+                    cred_data = cred_list_resp.json()
+                    existing_creds = cred_data.get("items", cred_data.get("results", []))
+
+                # Reuse existing credential if found
+                if existing_creds and isinstance(existing_creds, list):
+                    data = existing_creds[0]
+                    token = data.get("token") if isinstance(data, dict) else None
+                    if isinstance(token, str) and token:
+                        logger.info(f"Reusing existing OAuth MCP Credential (id={data.get('id')})")
+                        return token
+
+                # Create new credential only if not found
                 cred_resp = await client.post(
                     f"{settings.platform_base_url}/api/v1/credentials/",
                     headers={**headers, "Content-Type": "application/json"},
@@ -386,16 +406,16 @@ async def _get_user_credential(self, jwt_token: str) -> str | None:
                 )
                 if cred_resp.status_code not in (200, 201):
                     logger.error(
-                        "Failed to get managed MCP Credential: "
+                        "Failed to create OAuth MCP Credential: "
                         f"{cred_resp.status_code} {cred_resp.text[:500]}"
                     )
                     return None
                 data = cred_resp.json()
                 token = data.get("token") if isinstance(data, dict) else None
                 if isinstance(token, str) and token:
-                    logger.info(f"Using shared OAuth MCP Credential (id={data.get('id')})")
+                    logger.info(f"Created new OAuth MCP Credential (id={data.get('id')})")
                     return token
-                logger.error("Managed MCP Credential response did not contain a token")
+                logger.error("OAuth MCP Credential response did not contain a token")
         except Exception:
             logger.exception("Managed MCP Credential provisioning failed")
         return None