Function postForm

packages/oauth/src/oauth.ts:59–97

(
  url: string,
  params: Record<string, string>,
  deviceHeaders?: DeviceHeaders | undefined,
  options?: { timeoutMs?: number; signal?: AbortSignal },
)

const DEFAULT_HTTP_TIMEOUT_MS = 30_000;

async function postForm(
  url: string,
  params: Record<string, string>,
  deviceHeaders?: DeviceHeaders | undefined,
  options?: { timeoutMs?: number; signal?: AbortSignal },
): Promise<{ status: number; data: Record<string, unknown> }> {
  const timeoutMs = options?.timeoutMs ?? DEFAULT_HTTP_TIMEOUT_MS;
  const body = new URLSearchParams(params).toString();
  // Compose a timeout signal with the optional caller signal.
  const signals: AbortSignal[] = [AbortSignal.timeout(timeoutMs)];
  if (options?.signal !== undefined) signals.push(options.signal);
  const signal = AbortSignal.any(signals);
  let response: Response;
  try {
    response = await fetch(url, {
      method: 'POST',
      headers: {
        ...deviceHeaders,
        'Content-Type': 'application/x-www-form-urlencoded',
        Accept: 'application/json',
      },
      body,
      signal,
    });
  } catch (error) {
    throw new OAuthConnectionError(
      `OAuth request to ${url} failed: ${error instanceof Error ? error.message : String(error)}`,
    );
  }
  const status = response.status;
  let data: Record<string, unknown> = {};
  try {
    const parsed: unknown = await response.json();
    if (isRecord(parsed)) data = parsed;
  } catch {
    // Non-JSON response — leave data empty; caller interprets by status.
  }
  return { status, data };
}

// ── requestDeviceAuthorization ────────────────────────────────────────