Method constructor

console/src/api/apiClient.ts:219–268

({ appConfig }: { appConfig: Readonly<SelfManagedAppConfig> })

  };

  constructor({ appConfig }: { appConfig: Readonly<SelfManagedAppConfig> }) {
    this.#appConfig = appConfig;
    this.mzHttpUrlScheme = this.#appConfig.environmentdScheme;
    this.mzWebsocketUrlScheme = this.#appConfig.environmentdWebsocketScheme;
    this.authApiBasePath = `${this.#appConfig.environmentdScheme}://${this.#appConfig.environmentdConfig.environmentdHttpAddress}`;
    this.authMode = this.#appConfig.authMode;

    if (this.authMode === "Oidc") {
      this.oidcManagerInitializationPromise = MzOidcUserManager.create().then(
        (manager) => {
          this.oidcManager = manager;
          return manager;
        },
      );
      // When OIDC is configured, users can authenticate via either OIDC or
      // password. The OIDC middleware adds a Bearer token if one exists;
      // otherwise no auth header is sent and the session cookie is used
      // implicitly. The 401 redirect handles expired/missing sessions.
      this.mzApiFetch = withMiddleware(
        this.#mzApiWithAuthRedirect,
        this.#oidcAuthMiddleware,
      );
    } else if (this.authMode === "None") {
      this.mzApiFetch = withMiddleware(
        globalFetch,
        this.#flexibleDeploymentAuthMiddleware,
      );
    } else {
      this.mzApiFetch = this.#mzApiWithAuthRedirect;
    }

    this.getWsAuthConfig = () => {
      if (this.authMode === "Oidc") {
        const idToken = this.oidcManager?.getIdToken();
        if (idToken) {
          return buildTokenAuthConfig(idToken);
        }
        // No OIDC token — user authenticated via password, session cookie
        // is sent implicitly so no explicit auth config is needed.
        return null;
      }
      // Unintuitively, we return an auth config when authMode is "None". This is because
      // the authenticated websocket API gets the necessary information via the http-only cookie
      // and errors if you try to send a websocket message with the auth config.
      if (this.authMode === "None") {
        return buildPasswordAuthConfig(FLEXIBLE_DEPLOYMENT_USER);
      }
      return null;
    };
  }
}

export class ImpersonationApiClient