Function fetchJson

apps/api/src/lib/oauth/oauth.utils.ts:124–147

(
  url: string,
  init: RequestInit
)

/** Wraps `fetch` for OAuth-shaped JSON; throws on non-2xx. */
export const fetchJson = async (
  url: string,
  init: RequestInit
): Promise<unknown> => {
  /*
   * Bounded budget — these calls sit on the OAuth callback request
   * path; a hung IdP token endpoint must not pin the handler. Callers
   * may override via init.signal.
   */
  const res = await fetch(url, {
    signal: AbortSignal.timeout(OAUTH_FETCH_TIMEOUT_MS),
    ...init,
  });

  if (!res.ok) {
    const body = await res.text();

    throw ApiErrors.externalService(
      `HTTP ${String(res.status)} from ${url}: ${body}`
    );
  }

  return res.json();
};

/*
 * ---------------------------------------------------------------------------