Function getAuthHeaders

frontend/src/services/api.ts:93–133

()

// Helper function to get auth headers (reused by middleware and file operations)
async function getAuthHeaders(): Promise<Record<string, string>> {
  const storeState = useAuthStore.getState();
  let token = storeState.token;
  // For local auth, always use 'local-dev' org ID
  const organizationId = storeState.provider === 'local' ? 'local-dev' : storeState.organizationId;

  // For Clerk auth, always fetch a fresh token on-demand to prevent expiration issues
  // This ensures we never use a stale/expired token
  if (storeState.provider === 'clerk') {
    try {
      const freshToken = await getFreshClerkToken();
      if (freshToken) {
        token = freshToken;
        // Update store with fresh token so it's available for next time
        storeState.setToken(freshToken);
      } else {
        // If we can't get a fresh token, fall back to store token
      }
    } catch (_error) {
      // Fall back to store token if fresh token fetch fails
    }
  }

  const headers: Record<string, string> = {};

  // For local auth with admin credentials, use Basic Auth
  if (storeState.provider === 'local' && storeState.adminUsername && storeState.adminPassword) {
    const credentials = btoa(`${storeState.adminUsername}:${storeState.adminPassword}`);
    headers['Authorization'] = `Basic ${credentials}`;
  } else if (token && token.trim().length > 0) {
    // Use Bearer token (for Clerk)
    const headerValue = token.startsWith('Bearer ') ? token : `Bearer ${token}`;
    headers['Authorization'] = headerValue;
  }

  if (organizationId && organizationId.trim().length > 0) {
    headers['X-Organization-Id'] = organizationId;
  }

  return headers;
}

// Create type-safe API client
const apiClient = createShipSecClient({