feat(oauth): add Instagram OAuth provider

[halvaradop]

Description

This pull request adds the Instagram OAuth provider to the list of supported OAuth integrations in @aura-stack/auth.

The provider integrates with the existing OAuth infrastructure and can be configured through the oauth option in createAuth().

Usage

import { createAuth } from "@aura-stack/auth"

export const auth = createAuth({
  oauth: ["instagram"],
})

export const { handlers } = auth

Note

This pull request is currently marked as Draft because the Instagram OAuth integration has not yet been fully validated.

During implementation, it became apparent that the Instagram authentication flow depends heavily on Meta's platform configuration and documentation, which is spread across multiple products and is not always consistent. As a result, the provider implementation cannot be fully verified until a complete application setup and authentication flow can be successfully completed.

The PR will be marked as ready for review once the provider has been validated against a working Instagram application.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
auth	Skipped		Jul 4, 2026 1:26am

[coderabbitai]

📝 Walkthrough

Walkthrough

Adds a new Instagram OAuth provider module exporting an InstagramProfile interface and an instagram factory function that configures OAuth endpoints and maps profile data. Updates the changelog with this addition and makes a minor formatting adjustment at the end of huggingface.ts.

Changes

Instagram OAuth Provider Addition

Layer / File(s)	Summary
Instagram provider contract and factory packages/core/src/oauth/instagram.ts, packages/core/CHANGELOG.md	Adds InstagramProfile interface and exported instagram factory configuring authorize/token/user-info endpoints and a profile mapper producing sub, name, email, image; changelog documents the new provider.
Huggingface provider adjustment packages/core/src/oauth/huggingface.ts	Non-functional end-of-file closing syntax adjustment.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly matches the main change: adding a new Instagram OAuth provider.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/add-instagram-oauth

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

🧹 Nitpick comments (1)

packages/core/src/oauth/instagram.ts (1)

40-40: 🎯 Functional Correctness | 🔵 Trivial | 💤 Low value

Remove email from the Instagram fields list. The /me endpoint doesn’t expose that field, so this query param is dead; profile.email shouldn’t be added here either.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@packages/core/src/oauth/instagram.ts` at line 40, Remove the unsupported
email field from the Instagram /me request in the Instagram OAuth configuration,
and do not map or populate profile.email from this response. Update the userInfo
URL in the relevant Instagram OAuth setup so it only requests fields actually
returned by the endpoint, and verify any parsing logic tied to the Instagram
profile response no longer expects email.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@packages/core/src/oauth/instagram.ts`:
- Line 40: Remove the unsupported email field from the Instagram /me request in
the Instagram OAuth configuration, and do not map or populate profile.email from
this response. Update the userInfo URL in the relevant Instagram OAuth setup so
it only requests fields actually returned by the endpoint, and verify any
parsing logic tied to the Instagram profile response no longer expects email.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 1fe0b746-1c9f-47ed-9a33-5e0f69731815

📥 Commits

Reviewing files that changed from the base of the PR and between dc33675 and 7007587.

📒 Files selected for processing (3)

• packages/core/CHANGELOG.md
• packages/core/src/oauth/huggingface.ts
• packages/core/src/oauth/instagram.ts