Class SelfManagedApiClient

console/src/api/apiClient.ts:163–269

}

export class SelfManagedApiClient
  implements IApiClientBase, ISelfManagedApiClient
{
  #appConfig: Readonly<SelfManagedAppConfig>;
  /** Resolved manager; read synchronously by the auth middleware and WebSocket config. */
  oidcManager?: MzOidcUserManager;
  /** In-flight init promise; awaited by OidcProviderWrapper to gate rendering. */
  oidcManagerInitializationPromise?: Promise<MzOidcUserManager>;
  authMode: SelfManagedAuthMode;
  authApiBasePath: string;
  mzHttpUrlScheme: HttpScheme;
  mzWebsocketUrlScheme: WebsocketScheme;
  mzApiFetch: Fetch;
  getWsAuthConfig: () => MaterializeAuthConfig | null;
  type = "self-managed" as const;

  #mzApiWithAuthRedirect = async (...req: Parameters<Fetch>) => {
    const response = await globalFetch(...req);
    if (response.status === 401) {
      // Surface only what the server shares — results in a redirect when
      // there is a 401 error.
      const error = await readAuthErrorDetail(response);
      await logoutAndRedirect({ apiClient: this, error });
    }
    return response;
  };

  #oidcAuthMiddleware: Middleware = (next) => {
    return async (...fetchArgs) => {
      const [input, options = {}] = fetchArgs;
      const idToken = this.oidcManager?.getIdToken();

      const headers = copyHeaders(fetchArgs);
      if (idToken) {
        headers.set("Authorization", `Bearer ${idToken}`);
      }

      const request = new Request(input, { ...options, headers });
      return next(request);
    };
  };

  // Mirrors getWsAuthConfig() so HTTP and websocket auth as the same role;
  // otherwise HTTP falls back to anonymous_http_user and role-membership
  // checks (e.g. pg_cancel_backend) reject it.
  #flexibleDeploymentAuthMiddleware: Middleware = (next) => {
    return async (...fetchArgs) => {
      const [input, options = {}] = fetchArgs;
      const headers = copyHeaders(fetchArgs);
      const { user, password } = FLEXIBLE_DEPLOYMENT_USER;
      headers.set("Authorization", `Basic ${btoa(`${user}:${password}`)}`);
      const request = new Request(input, { ...options, headers });
      return next(request);
    };
  };

  constructor({ appConfig }: { appConfig: Readonly<SelfManagedAppConfig> }) {
    this.#appConfig = appConfig;