Function makeHttpRequest

supabase/functions/execute-code-2/requests.ts:237–379

(
  url: string,
  requestOptions: RequestInit,
  localHostname: string,
)

}

export async function makeHttpRequest(
  url: string,
  requestOptions: RequestInit,
  localHostname: string,
): Promise<{ output: Json; isError: boolean }> {
  // TODO: Don't handle redirects manually
  // Why handle 3XX's manually? Because Companies House likes 302 redirects,
  //  but it throws an error if you have the headers from the first request set
  //  (specifically the Authorization header)
  let response = await exponentialRetryWrapper(
    fetch,
    [url, { ...requestOptions, redirect: "manual" }],
    3,
  );
  if (response.status >= 300 && response.status < 400) {
    // Try requesting from here without auth headers
    console.info("Attempting manual redirect");

    if (!response.headers.has("location")) {
      return {
        output: {
          status: "Redirect failed as original request did not return location",
        },
        isError: true,
      };
    }
    const requestOptionsCopy = {
      ...requestOptions,
      headers: { ...requestOptions.headers },
    };
    const headers = requestOptionsCopy.headers;
    if (headers) {
      if ("Authorization" in headers) delete headers["Authorization"];
      if ("authorization" in headers) delete headers["authorization"];
    }
    requestOptions.headers = headers;
    const { origin } = new URL(url);

    const redirectUrl = response.headers.get("location")!.includes(origin)
      ? response.headers.get("location")!
      : new URL(response.headers.get("location")!, origin).href;

    console.info("Attempting fetch with redirected url: " + redirectUrl);
    requestOptionsCopy.headers = headers;
    response = await fetch(redirectUrl, { ...requestOptionsCopy });
  }

  // Deal with response with potentially empty body (stackoverflow.com/a/51320025)
  const responseStatus = response.status ?? 0;
  console.info("Response status:" + responseStatus);
  const responseText = await response.text();
  // If there's no response body, return a status message
  if (!responseText) {
    return responseStatus >= 200 && responseStatus < 300
      ? {
          output: {
            status: responseStatus,
            message: "Action completed successfully",