feat(source-hubspot): add oauth_connector_input_specification with granular scopes (#75574)

Author: lazebnyi

airbyte-integrations/connectors/source-hubspot/manifest.yaml

@@ -2323,6 +2323,44 @@ spec:
       - credentials_title
     predicate_value: OAuth Credentials
     oauth_config_specification:
+      oauth_connector_input_specification:
+        consent_url: "https://app.hubspot.com/oauth/authorize?{{client_id_param}}&{{redirect_uri_param}}&{{state_param}}&{{scopes_param}}&{{optional_scopes_param}}"
+        access_token_url: "https://api.hubapi.com/oauth/v1/token"
+        access_token_headers:
+          Content-Type: "application/x-www-form-urlencoded"
+        access_token_params:
+          client_id: "{{ client_id_value }}"
+          client_secret: "{{ client_secret_value }}"
+          code: "{{ auth_code_value }}"
+          redirect_uri: "{{ redirect_uri_value }}"
+          grant_type: "authorization_code"
+        scopes:
+          - scope: "crm.schemas.contacts.read"
+          - scope: "crm.objects.contacts.read"
+          - scope: "oauth"
+        optional_scopes:
+          - scope: "content"
+          - scope: "automation"
+          - scope: "e-commerce"
+          - scope: "files"
+          - scope: "files.ui_hidden.read"
+          - scope: "forms"
+          - scope: "forms-uploaded-files"
+          - scope: "sales-email-read"
+          - scope: "tickets"
+          - scope: "crm.lists.read"
+          - scope: "crm.objects.companies.read"
+          - scope: "crm.objects.custom.read"
+          - scope: "crm.objects.deals.read"
+          - scope: "crm.objects.feedback_submissions.read"
+          - scope: "crm.objects.goals.read"
+          - scope: "crm.objects.owners.read"
+          - scope: "crm.schemas.companies.read"
+          - scope: "crm.schemas.custom.read"
+          - scope: "crm.schemas.deals.read"
+          - scope: "crm.objects.leads.read"
+        extract_output:
+          - refresh_token
       complete_oauth_output_specification:
         type: object
         additionalProperties: false

airbyte-integrations/connectors/source-hubspot/metadata.yaml

@@ -6,11 +6,11 @@ data:
     hosts:
       - api.hubapi.com
   connectorBuildOptions:
-    baseImage: docker.io/airbyte/source-declarative-manifest:7.14.0@sha256:5b95dd9e71defeece4a1efb27688b15e482f18c82c745498611846466b72403e
+    baseImage: docker.io/airbyte/source-declarative-manifest:7.15.0@sha256:eecde84a1c8efced5b35f04900ed983eb306028d262cdb0673f26526aaabd7fc
   connectorSubtype: api
   connectorType: source
   definitionId: 36c891d9-4bd9-43ac-bad2-10e12756272c
-  dockerImageTag: 6.4.0
+  dockerImageTag: 6.4.1
   dockerRepository: airbyte/source-hubspot
   documentationUrl: https://docs.airbyte.com/integrations/sources/hubspot
   resourceRequirements:

airbyte-integrations/connectors/source-hubspot/unit_tests/test_source.py

@@ -85,7 +85,7 @@ def test_streams(requests_mock, config):
     requests_mock.get("https://api.hubapi.com/crm/v3/schemas", json={}, status_code=200)
     streams = get_source(config).streams(config)
 
-    assert len(streams) == 34
+    assert len(streams) == 35
 
 
 def test_streams_forbidden_returns_default_streams(requests_mock, config):
@@ -96,7 +96,7 @@ def test_streams_forbidden_returns_default_streams(requests_mock, config):
         status_code=403,
     )
     streams = get_source(config).streams(config)
-    assert len(streams) == 34
+    assert len(streams) == 35
 
 
 def test_check_credential_title_exception(config):
@@ -115,7 +115,7 @@ def test_streams_ok_with_one_custom_stream(requests_mock, config, mock_dynamic_s
     )
     streams = discover(get_source(config), config).catalog.catalog.streams
     assert adapter.called
-    assert len(streams) == 35
+    assert len(streams) == 36
 
 
 def test_check_connection_backoff_on_limit_reached(requests_mock, config):

docs/integrations/sources/hubspot.md

@@ -344,6 +344,7 @@ If you use [custom properties](https://knowledge.hubspot.com/properties/create-a
 
 | Version     | Date       | Pull Request                                             | Subject                                                                                                                                                                                                                      |
 |:------------|:-----------|:---------------------------------------------------------|:-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| 6.4.1 | 2026-04-03 | [75574](https://github.com/airbytehq/airbyte/pull/75574) | Add `oauth_connector_input_specification` with granular scopes and optional_scopes |
 | 6.4.0 | 2026-04-01 | [70920](https://github.com/airbytehq/airbyte/pull/70920) | Add new stream Users |
 | 6.3.5 | 2026-03-31 | [75665](https://github.com/airbytehq/airbyte/pull/75665) | Update dependencies |
 | 6.3.4 | 2026-03-30 | [75595](https://github.com/airbytehq/airbyte/pull/75595) | Fixed HTTP 429 responses mapped to RETRY instead of RATE_LIMITED, enabling correct rate-limit handling |