fix code for custom providers

[mifi]

closes #5383

[github-actions]

Diff output files

diff --git a/packages/@uppy/companion/lib/companion.js b/packages/@uppy/companion/lib/companion.js
index 94f7d77..9416e5e 100644
--- a/packages/@uppy/companion/lib/companion.js
+++ b/packages/@uppy/companion/lib/companion.js
@@ -207,7 +207,7 @@ module.exports.app = (optionsArg = {}) => {
       logger.info(`Returning dynamic OAuth2 credentials for ${providerName}`);
       // for simplicity, we just return the normal credentials for the provider, but in a real-world scenario,
       // we would query based on parameters
-      const { key, secret } = options.providerOptions[providerName];
+      const { key, secret } = options.providerOptions[providerName] ?? { __proto__: null };
       function getRedirectUri() {
         const oauthProvider = getOauthProvider(providerName);
         if (!isOAuthProvider(oauthProvider)) {
diff --git a/packages/@uppy/companion/lib/server/controllers/preauth.js b/packages/@uppy/companion/lib/server/controllers/preauth.js
index b912f45..e957ba2 100644
--- a/packages/@uppy/companion/lib/server/controllers/preauth.js
+++ b/packages/@uppy/companion/lib/server/controllers/preauth.js
@@ -8,7 +8,7 @@ function preauth(req, res) {
     return res.sendStatus(400);
   }
   const providerConfig = req.companion.options.providerOptions[req.params.providerName];
-  if (!providerConfig.credentialsURL) {
+  if (!providerConfig?.credentialsURL) {
     return res.sendStatus(501);
   }
   const preAuthToken = tokenService.generateEncryptedToken(req.body.params, req.companion.options.preAuthSecret);
diff --git a/packages/@uppy/companion/lib/server/controllers/refresh-token.js b/packages/@uppy/companion/lib/server/controllers/refresh-token.js
index 34f4fdc..7d05180 100644
--- a/packages/@uppy/companion/lib/server/controllers/refresh-token.js
+++ b/packages/@uppy/companion/lib/server/controllers/refresh-token.js
@@ -8,7 +8,8 @@ const logger = require("../logger");
 // https://github.com/simov/grant/issues/149
 async function refreshToken(req, res, next) {
   const { providerName } = req.params;
-  const { key: clientId, secret: clientSecret } = req.companion.options.providerOptions[providerName];
+  const { key: clientId, secret: clientSecret } = req.companion.options.providerOptions[providerName]
+    ?? { __proto__: null };
   const { redirect_uri: redirectUri } = req.companion.providerGrantConfig;
   const { providerUserSession } = req.companion;
   // not all providers have refresh tokens
diff --git a/packages/@uppy/companion/lib/server/middlewares.js b/packages/@uppy/companion/lib/server/middlewares.js
index 1648c3c..795bb5d 100644
--- a/packages/@uppy/companion/lib/server/middlewares.js
+++ b/packages/@uppy/companion/lib/server/middlewares.js
@@ -79,13 +79,14 @@ exports.verifyToken = (req, res, next) => {
   if (!isOAuthProviderReq(req)) {
     const { providerOptions } = req.companion.options;
     const { providerName } = req.params;
-    if (!providerOptions[providerName] || !providerOptions[providerName].key) {
+    const key = providerOptions[providerName]?.key;
+    if (!key) {
       logger.info(`unconfigured credentials for ${providerName}`, "non.oauth.token.load.unset", req.id);
       res.sendStatus(501);
       return;
     }
     req.companion.providerUserSession = {
-      accessToken: providerOptions[providerName].key,
+      accessToken: key,
     };
     next();
   }
diff --git a/packages/@uppy/companion/lib/server/provider/index.js b/packages/@uppy/companion/lib/server/provider/index.js
index 833dffa..7691d83 100644
--- a/packages/@uppy/companion/lib/server/provider/index.js
+++ b/packages/@uppy/companion/lib/server/provider/index.js
@@ -47,7 +47,7 @@ module.exports.getProviderMiddleware = (providers, grantConfig) => {
         providerGrantConfig = grantConfig[oauthProvider];
         req.companion.providerGrantConfig = providerGrantConfig;
       }
-      const { secret } = providerOptions[providerName];
+      const secret = providerOptions[providerName]?.secret;
       req.companion.provider = new ProviderClass({ secret, providerName, providerGrantConfig, allowLocalUrls });
       req.companion.providerClass = ProviderClass;
     } else {