Fix OAuth authorize response type defaulting 🪿✨

[jar-stripe]

Why?

Reported in #1952. OAuthService#authorize_url omits response_type=code when callers provide no value and overwrites explicit values with code. This aligns OAuthService with the legacy OAuth helper so the default is applied only when needed.

What?

• Default response_type to code when absent or falsey.
• Preserve an explicit response_type and add regression coverage for both behaviors.

See Also

Changelog

• Fixes OAuthService#authorize_url to default response_type to code without overwriting an explicit value.

[Copilot]

🟢 Approval recommended

The fix directly addresses the reported bug and includes targeted regression tests covering both the defaulting and non-overwrite behaviors.

Pull request overview

Fixes Stripe::OAuthService#authorize_url so response_type defaults to "code" only when absent/falsey, matching the legacy OAuth helper behavior and preventing accidental overwrites of explicitly provided values.

Changes:

• Default response_type via params[:response_type] ||= "code" in OAuthService#authorize_url.
• Add regression coverage to ensure response_type=code is present when omitted.
• Add regression coverage to ensure an explicit response_type (e.g., "token") is preserved.

File summaries

File	Description
lib/stripe/services/oauth_service.rb	Fixes defaulting logic for response_type without overwriting explicit caller-provided values.
test/stripe/oauth_service_test.rb	Adds assertions for default response_type and preservation of explicit response_type.

Review details

• Files reviewed: 2/2 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.