Spaces:
Paused
Paused
File size: 2,777 Bytes
8d1819a | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 | /**
* Call a JSON-in JSON-out API endpoint
* Data is automatically serialized
* @param {string} endpoint - The API endpoint to call
* @param {any} data - The data to send to the API
* @returns {Promise<any>} The JSON response from the API
*/
export async function callJsonApi(endpoint, data) {
const response = await fetchApi(endpoint, {
method: "POST",
headers: {
"Content-Type": "application/json",
},
credentials: "same-origin",
body: JSON.stringify(data),
});
if (!response.ok) {
const error = await response.text();
throw new Error(error);
}
const jsonResponse = await response.json();
return jsonResponse;
}
/**
* Fetch wrapper for A0 APIs that ensures token exchange
* Automatically adds CSRF token to request headers
* @param {string} url - The URL to fetch
* @param {Object} [request] - The fetch request options
* @returns {Promise<Response>} The fetch response
*/
export async function fetchApi(url, request) {
async function _wrap(retry) {
// get the CSRF token
const token = await getCsrfToken();
// create a new request object if none was provided
const finalRequest = request || {};
// ensure headers object exists
finalRequest.headers = finalRequest.headers || {};
// add the CSRF token to the headers
finalRequest.headers["X-CSRF-Token"] = token;
// perform the fetch with the updated request
const response = await fetch(url, finalRequest);
// check if there was an CSRF error
if (response.status === 403 && retry) {
// retry the request with new token
csrfToken = null;
return await _wrap(false);
} else if (response.redirected && response.url.endsWith("/login")) {
// redirect to login
window.location.href = response.url;
return;
}
// return the response
return response;
}
// perform the request
const response = await _wrap(true);
// return the response
return response;
}
// csrf token stored locally
let csrfToken = null;
/**
* Get the CSRF token for API requests
* Caches the token after first request
* @returns {Promise<string>} The CSRF token
*/
async function getCsrfToken() {
if (csrfToken) return csrfToken;
const response = await fetch("/csrf_token", {
credentials: "same-origin",
});
if (response.redirected && response.url.endsWith("/login")) {
// redirect to login
window.location.href = response.url;
return;
}
const json = await response.json();
if (json.ok) {
csrfToken = json.token;
document.cookie = `csrf_token_${json.runtime_id}=${csrfToken}; SameSite=Strict; Path=/`;
return csrfToken;
} else {
if (json.error) alert(json.error);
throw new Error(json.error || "Failed to get CSRF token");
}
}
|