Function getCsrfToken

webui/js/api.js:155–245

()

 * @returns {Promise<string>} The CSRF token
 */
export async function getCsrfToken() {
  if (csrfToken) return csrfToken;
  if (csrfTokenPromise) return await csrfTokenPromise;

  csrfTokenPromise = (async () => {
    const startedAt = Date.now();
    const controller =
      typeof AbortController !== "undefined" ? new AbortController() : null;
    let timeoutId = null;
    let timeoutPromise = null;
    let response;

    try {
      if (controller) {
        timeoutId = setTimeout(() => controller.abort(), CSRF_TIMEOUT_MS);
      } else {
        timeoutPromise = new Promise((_, reject) => {
          timeoutId = setTimeout(() => {
            reject(new Error("CSRF token request timed out"));
          }, CSRF_TIMEOUT_MS);
        });
      }

      /** @type {RequestInit} */
      const fetchOptions = { credentials: "same-origin" };
      if (controller) {
        fetchOptions.signal = controller.signal;
      }

      const fetchPromise = fetch("/api/csrf_token", fetchOptions);
      response = timeoutPromise
        ? await Promise.race([fetchPromise, timeoutPromise])
        : await fetchPromise;
    } catch (error) {
      if (error && error["name"] === "AbortError") {
        throw new Error("CSRF token request timed out");
      }
      throw error;
    } finally {
      if (timeoutId) {
        clearTimeout(timeoutId);
      }
    }

    if (redirect(response)) return;

    const json = await response.json();
    if (json.ok) {
      const runtimeId =
        typeof json.runtime_id === "string" && json.runtime_id.length > 0
          ? json.runtime_id
          : null;

      csrfToken = json.token;
      if (runtimeId) {
        runtimeIdCache = runtimeId;
      }
      const injectedRuntimeId =