Function callConcur

apps/sim/app/api/tools/sap_concur/proxy/route.ts:48–87

(
  req: ProxyRequest,
  accessToken: string,
  geolocation: string
)

}

async function callConcur(
  req: ProxyRequest,
  accessToken: string,
  geolocation: string
): Promise<Invocation> {
  const url = assertSafeExternalUrl(buildApiUrl(geolocation, req), 'apiUrl').toString()
  const hasBody = req.body !== undefined && req.body !== null
  const headers: Record<string, string> = {
    Authorization: `Bearer ${accessToken}`,
    Accept: 'application/json',
  }
  if (hasBody) headers['Content-Type'] = req.contentType ?? 'application/json'
  if (req.companyUuid) headers['concur-correlationid'] = req.companyUuid

  const response = await secureFetchWithValidation(
    url,
    {
      method: req.method,
      headers,
      body: hasBody
        ? typeof req.body === 'string'
          ? req.body
          : JSON.stringify(req.body)
        : undefined,
      timeout: SAP_CONCUR_OUTBOUND_FETCH_TIMEOUT_MS,
    },
    'apiUrl'
  )

  const raw = await response.text()
  let parsed: unknown = null
  if (raw.length > 0) {
    try {
      parsed = JSON.parse(raw)
    } catch {
      parsed = raw
    }
  }
  return { status: response.status, body: parsed, raw }
}

export const POST = withRouteHandler(async (request: NextRequest) => {
  const requestId = generateRequestId()