feat: add SetShouldRefreshGate to gate OAuth token sweep ticks

[Pratham-Mishra04]

Summary

Adds a configurable gate to OAuthTokenRefreshWorker that controls whether a sweep tick proceeds. This allows deployments running multiple workers against a shared token store to prevent concurrent token refreshes of the same token.

Changes

• Added a shouldRefresh atomic pointer field to OAuthTokenRefreshWorker that holds an optional predicate function
• Added SetShouldRefreshGate method to install or clear the gate at any time, including while the worker is running
• At the start of each refreshExpiredTokens call, the gate (if set) is evaluated and the sweep is skipped if it returns false
• When no gate is set, behavior is unchanged (sweeps always run)

Type of change

• Bug fix
• Feature
• Refactor
• Documentation
• Chore/CI

Affected areas

• Core (Go)
• Transports (HTTP)
• Providers/Integrations
• Plugins
• UI (React)
• Docs

How to test

go test ./framework/oauth2/...

Verify that:

• When no gate is set, token refresh sweeps proceed as normal
• When a gate returning false is installed, refreshExpiredTokens returns early without querying or refreshing tokens
• When a gate returning true is installed, sweeps proceed normally
• Calling SetShouldRefreshGate(nil) restores default behavior

Screenshots/Recordings

N/A

Breaking changes

• Yes
• No

Related issues

Security considerations

The gate function receives a context.Context, which may carry request-scoped values. Care should be taken that any gate implementation does not inadvertently expose or leak sensitive context values.

Checklist

• I read docs/contributing/README.md and followed the guidelines
• I added/updated tests where appropriate
• I updated documentation where needed
• I verified builds succeed (Go and UI)
• I verified the CI pipeline passes locally if applicable

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[coderabbitai]

Note

GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer.

[Pratham-Mishra04]

Merge activity

• Aug 8, 10:33 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Aug 8, 10:47 AM UTC: Graphite rebased this pull request as part of a merge.
• Aug 8, 10:48 AM UTC: @Pratham-Mishra04 merged this pull request with Graphite.

The base branch was changed.