Function prepareAuthRequestBody

frontend/server.js:184–204

* For the refresh_token endpoint, inject the refresh_token from cookie * into the request body so the backend can process it normally. * If no refresh_token cookie exists, return 401 immediately.

(pathname, body, cookies, res)

 * If no refresh_token cookie exists, return 401 immediately.
 */
function prepareAuthRequestBody(pathname, body, cookies, res) {
  if (
    pathname === "/api/user/refresh_token" ) {
    const refreshToken =
    cookies[COOKIE_NAMES.REFRESH_TOKEN]
  ;
    if (!refreshToken) {
      res.writeHead(401, { "Content-Type": "application/json" });
      res.end(JSON.stringify({ detail: "No refresh token cookie found" }));
      return null;
    }
    try {
      const parsed = body.length > 0 ? JSON.parse(body.toString()) : {};
      parsed.refresh_token = refreshToken;
      return Buffer.from(JSON.stringify(parsed));
    } catch {
      return body;
    }
  }
  return body;
}

function forwardAuthRequest(req, res, targetUrl) {
  const parsedTarget = new URL(targetUrl);