Upsert Assessment Packages [Batch]

//native

type Paylocity = {

	clientId: string

	clientSecret: string

}

/**

 * Upsert Assessment Packages [Batch]

 * > 🚧 Partner Restricted

> All assessment API endpoints are restricted to assessment providers that have signed a Paylocity technology partnership agreement.

 */

export async function main(

	auth: Paylocity,

	companyId: string,

	body: {

		id?: string

		status?: {

			startDate?: string

			endDate?: string

			value?: 'Active' | 'Inactive' | 'Deleted' | 'Unknown'

		}

		summary?: string

		name?: string

		assessments?: {

			id?: string

			name?: string

			summary?: string

			tests?: {

				id?: string

				name?: string

				category?: string

				description?: string

			}[]

		}[]

	}[],

	testMode?: string

) {

	const url = new URL(

		`https://dc1prodgwext.paylocity.com/apiHub/performanceManagement/v1/companies/${companyId}/assessmentPackages`

	)

	const response = await fetch(url, {

		method: 'PUT',

		headers: {

			...(testMode ? { testMode: testMode } : {}),

			'Content-Type': 'application/json',

			Authorization:

				'Bearer ' +

				(await getOAuthToken(auth, 'https://dc1prodgwext.paylocity.com/public/security/v1/token'))

		},

		body: JSON.stringify(body)

	})

	if (!response.ok) {

		const text = await response.text()

		throw new Error(`${response.status} ${text}`)

	}

	return await response.json()

}

async function getOAuthToken(auth: Paylocity, tokenUrl: string): Promise<string> {

	const params = new URLSearchParams({

		grant_type: 'client_credentials',

		client_id: auth.clientId,

		client_secret: auth.clientSecret

	})

	const response = await fetch(tokenUrl, {

		method: 'POST',

		headers: {

			Authorization: 'Basic ' + btoa(`${auth.clientId}:${auth.clientSecret}`),

			'Content-Type': 'application/x-www-form-urlencoded'

		},

		body: params.toString()

	})

	if (!response.ok) {

		const text = await response.text()

		throw new Error(`OAuth token request failed: ${response.status} ${text}`)

	}

	const data = await response.json()

	return data.access_token

}