Function fetchCsrf

apps/sim/app/api/tools/sap_s4hana/proxy/route.ts:131–161

(
  req: ProxyRequest,
  accessToken: string | null,
  requestId: string
)

}

async function fetchCsrf(
  req: ProxyRequest,
  accessToken: string | null,
  requestId: string
): Promise<CsrfBundle | null> {
  const url = buildOdataUrl(req, '/$metadata')
  const response = await secureFetchWithValidation(
    url,
    {
      method: 'GET',
      headers: {
        Authorization: buildAuthHeader(req, accessToken),
        Accept: 'application/xml',
        'X-CSRF-Token': 'Fetch',
      },
      timeout: OUTBOUND_FETCH_TIMEOUT_MS,
    },
    'baseUrl'
  )

  if (!response.ok) {
    const text = await response.text().catch(() => '')
    logger.warn(`[${requestId}] CSRF fetch failed (${response.status}): ${text}`)
    return null
  }

  const token = response.headers.get('x-csrf-token')
  const cookie = joinSetCookies(response)
  if (!token) return null
  return { token, cookie }
}

function resolveHost(req: ProxyRequest): string {
  if (req.deploymentType === 'cloud_public') {