@sap/cds/libx/_runtime/messaging/common-utils/authorizedRequest.js

SAP Cloud Application Programming Model - CDS for Node.js

const https = require('https')
const requestToken = require('../http-utils/token')
const cds = require('../../cds')
const LOG = cds.log('http-messaging') // not public

const authorizedRequest = ({ method, uri, path, oa2, tenant, dataObj, headers, tokenStore }) => {
  return new Promise((resolve, reject) => {
    if (LOG._debug) LOG.debug({ method, uri, path, oa2, tenant, dataObj, headers, tokenStore })
    ;((tokenStore.token && Promise.resolve(tokenStore.token)) || requestToken(oa2, tenant, tokenStore))
      .catch(err => reject(err))
      .then(token => {
        const httpOptions = {
          host: uri.replace('https://', ''),
          path,
          headers: {
            Authorization: 'Bearer ' + token
          },
          method
        }

        let data
        if (dataObj) {
          data = JSON.stringify(dataObj)
          httpOptions.headers['Content-Type'] = 'application/json'
          httpOptions.headers['Content-Length'] = Buffer.byteLength(data)
        }

        if (headers) {
          for (const key of Object.keys(headers)) httpOptions.headers[key] = headers[key]
        }

        const req = https.request(httpOptions, res => {
          res.setEncoding('utf8')
          let chunks = ''
          res.on('data', chunk => {
            chunks += chunk
          })
          res.on('end', () => {
            let body
            try {
              body = res.headers && res.headers['content-type'] === 'application/json' ? JSON.parse(chunks) : chunks
            } catch {
              // There are some cases (e.g. ReadinessCheck) where the content type is 'application/json'
              // but the chunks are not valid JSON.
              body = chunks
            }
            const result = { body, headers: res.headers, statusCode: res.statusCode }
            if (res.statusCode < 200 || (res.statusCode >= 300 && !(res.statusCode === 404 && method === 'DELETE'))) {
              reject(result)
            } else {
              resolve(result)
            }
          })
        })

        if (data) req.write(data)
        req.end()
      })
  })
}

module.exports = authorizedRequest