@arizeai/phoenix-client
Version:
A client for the Phoenix API
52 lines • 2.41 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.createAuthFetch = createAuthFetch;
/**
* Create a fetch implementation that supplies a bearer token and refreshes it
* after a 401 response.
*
* Refresh calls are coalesced so concurrent unauthorized requests rotate a
* refresh token only once. Each request is retried at most once.
*
* @param options - Authentication behavior for the fetch implementation.
* @param options.getAccessToken - Returns the current token or refreshes it.
* @param options.fetch - Fetch implementation used to send requests.
* @param options.onUnauthorized - Handles a second unauthorized response.
*/
function createAuthFetch({ getAccessToken, fetch: fetchImpl = fetch, onUnauthorized, }) {
let refreshPromise;
const refreshAccessToken = () => {
if (!refreshPromise) {
refreshPromise = Promise.resolve(getAccessToken({ forceRefresh: true })).finally(() => {
refreshPromise = undefined;
});
}
return refreshPromise;
};
return async function authFetch(input, init) {
const request = new Request(input, init);
const retryRequest = request.clone();
const accessToken = await getAccessToken({ forceRefresh: false });
const response = await fetchImpl(addBearerToken({ request, accessToken }));
if (response.status !== 401) {
return response;
}
// Another request may already have refreshed and persisted the token while
// this request was in flight. Reuse it instead of rotating again.
const currentAccessToken = await getAccessToken({ forceRefresh: false });
const retryAccessToken = currentAccessToken === accessToken
? await refreshAccessToken()
: currentAccessToken;
const retryResponse = await fetchImpl(addBearerToken({ request: retryRequest, accessToken: retryAccessToken }));
if (retryResponse.status === 401) {
await (onUnauthorized === null || onUnauthorized === void 0 ? void 0 : onUnauthorized(retryResponse));
}
return retryResponse;
};
}
function addBearerToken({ request, accessToken, }) {
const headers = new Headers(request.headers);
headers.set("Authorization", `Bearer ${accessToken}`);
return new Request(request, { headers });
}
//# sourceMappingURL=authFetch.js.map