@kontent-ai/delivery-sdk 16.4.4 → 16.4.6

package/dist/bundles/kontent-delivery.umd.js

@@ -360,7 +360,7 @@ var __awaiter = (undefined && undefined.__awaiter) || function (thisArg, _argume
 
 
 function getWithRetryAsync(instance, call, functionsConfig, options) {
-    var _a;
+    var _a, _b;
     return __awaiter(this, void 0, void 0, function* () {
         const retryStrategyOptions = (_a = options === null || options === void 0 ? void 0 : options.retryStrategy) !== null && _a !== void 0 ? _a : _helpers_retry_helper__WEBPACK_IMPORTED_MODULE_3__.retryHelper.defaultRetryStrategy;
         return yield runWithRetryAsync({
@@ -368,13 +368,14 @@ function getWithRetryAsync(instance, call, functionsConfig, options) {
             url: call.url,
             retryStrategy: retryStrategyOptions,
             functionsConfig: functionsConfig,
+            headers: (_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [],
             call: (retryAttempt) => __awaiter(this, void 0, void 0, function* () {
-                var _b, _c;
+                var _c, _d;
                 _http_debugger__WEBPACK_IMPORTED_MODULE_2__.httpDebugger.debugStartHttpRequest();
                 const axiosResponse = yield instance.get(call.url, {
-                    headers: getHeadersJson((_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [], false),
+                    headers: getHeadersJson((_c = options === null || options === void 0 ? void 0 : options.headers) !== null && _c !== void 0 ? _c : [], false),
                     responseType: options === null || options === void 0 ? void 0 : options.responseType,
-                    cancelToken: (_c = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _c === void 0 ? void 0 : _c.token
+                    cancelToken: (_d = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _d === void 0 ? void 0 : _d.token
                 });
                 const response = {
                     data: axiosResponse.data,
@@ -393,7 +394,7 @@ function getWithRetryAsync(instance, call, functionsConfig, options) {
     });
 }
 function postWithRetryAsync(instance, call, functionsConfig, options) {
-    var _a;
+    var _a, _b;
     return __awaiter(this, void 0, void 0, function* () {
         const retryStrategyOptions = (_a = options === null || options === void 0 ? void 0 : options.retryStrategy) !== null && _a !== void 0 ? _a : _helpers_retry_helper__WEBPACK_IMPORTED_MODULE_3__.retryHelper.defaultRetryStrategy;
         return yield runWithRetryAsync({
@@ -401,17 +402,18 @@ function postWithRetryAsync(instance, call, functionsConfig, options) {
             url: call.url,
             retryStrategy: retryStrategyOptions,
             functionsConfig: functionsConfig,
+            headers: (_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [],
             call: (retryAttempt) => __awaiter(this, void 0, void 0, function* () {
-                var _b, _c;
+                var _c, _d;
                 _http_debugger__WEBPACK_IMPORTED_MODULE_2__.httpDebugger.debugStartHttpRequest();
                 const axiosResponse = yield instance.post(call.url, call.body, {
-                    headers: getHeadersJson((_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [], false),
+                    headers: getHeadersJson((_c = options === null || options === void 0 ? void 0 : options.headers) !== null && _c !== void 0 ? _c : [], false),
                     responseType: options === null || options === void 0 ? void 0 : options.responseType,
                     // required for uploading large files
                     // https://github.com/axios/axios/issues/1362
                     maxContentLength: 'Infinity',
                     maxBodyLength: 'Infinity',
-                    cancelToken: (_c = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _c === void 0 ? void 0 : _c.token
+                    cancelToken: (_d = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _d === void 0 ? void 0 : _d.token
                 });
                 const response = {
                     data: axiosResponse.data,
@@ -430,7 +432,7 @@ function postWithRetryAsync(instance, call, functionsConfig, options) {
     });
 }
 function putWithRetryAsync(instance, call, functionsConfig, options) {
-    var _a;
+    var _a, _b;
     return __awaiter(this, void 0, void 0, function* () {
         const retryStrategyOptions = (_a = options === null || options === void 0 ? void 0 : options.retryStrategy) !== null && _a !== void 0 ? _a : _helpers_retry_helper__WEBPACK_IMPORTED_MODULE_3__.retryHelper.defaultRetryStrategy;
         return yield runWithRetryAsync({
@@ -438,17 +440,18 @@ function putWithRetryAsync(instance, call, functionsConfig, options) {
             url: call.url,
             retryStrategy: retryStrategyOptions,
             functionsConfig: functionsConfig,
+            headers: (_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [],
             call: (retryAttempt) => __awaiter(this, void 0, void 0, function* () {
-                var _b, _c;
+                var _c, _d;
                 _http_debugger__WEBPACK_IMPORTED_MODULE_2__.httpDebugger.debugStartHttpRequest();
                 const axiosResponse = yield instance.put(call.url, call.body, {
-                    headers: getHeadersJson((_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [], false),
+                    headers: getHeadersJson((_c = options === null || options === void 0 ? void 0 : options.headers) !== null && _c !== void 0 ? _c : [], false),
                     responseType: options === null || options === void 0 ? void 0 : options.responseType,
                     // required for uploading large files
                     // https://github.com/axios/axios/issues/1362
                     maxContentLength: 'Infinity',
                     maxBodyLength: 'Infinity',
-                    cancelToken: (_c = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _c === void 0 ? void 0 : _c.token
+                    cancelToken: (_d = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _d === void 0 ? void 0 : _d.token
                 });
                 const response = {
                     data: axiosResponse.data,
@@ -467,7 +470,7 @@ function putWithRetryAsync(instance, call, functionsConfig, options) {
     });
 }
 function patchWithRetryAsync(instance, call, functionsConfig, options) {
-    var _a;
+    var _a, _b;
     return __awaiter(this, void 0, void 0, function* () {
         const retryStrategyOptions = (_a = options === null || options === void 0 ? void 0 : options.retryStrategy) !== null && _a !== void 0 ? _a : _helpers_retry_helper__WEBPACK_IMPORTED_MODULE_3__.retryHelper.defaultRetryStrategy;
         return yield runWithRetryAsync({
@@ -475,17 +478,18 @@ function patchWithRetryAsync(instance, call, functionsConfig, options) {
             url: call.url,
             retryStrategy: retryStrategyOptions,
             functionsConfig: functionsConfig,
+            headers: (_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [],
             call: (retryAttempt) => __awaiter(this, void 0, void 0, function* () {
-                var _b, _c;
+                var _c, _d;
                 _http_debugger__WEBPACK_IMPORTED_MODULE_2__.httpDebugger.debugStartHttpRequest();
                 const axiosResponse = yield instance.patch(call.url, call.body, {
-                    headers: getHeadersJson((_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [], false),
+                    headers: getHeadersJson((_c = options === null || options === void 0 ? void 0 : options.headers) !== null && _c !== void 0 ? _c : [], false),
                     responseType: options === null || options === void 0 ? void 0 : options.responseType,
                     // required for uploading large files
                     // https://github.com/axios/axios/issues/1362
                     maxContentLength: 'Infinity',
                     maxBodyLength: 'Infinity',
-                    cancelToken: (_c = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _c === void 0 ? void 0 : _c.token
+                    cancelToken: (_d = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _d === void 0 ? void 0 : _d.token
                 });
                 const response = {
                     data: axiosResponse.data,
@@ -504,7 +508,7 @@ function patchWithRetryAsync(instance, call, functionsConfig, options) {
     });
 }
 function deleteWithRetryAsync(instance, call, functionsConfig, options) {
-    var _a;
+    var _a, _b;
     return __awaiter(this, void 0, void 0, function* () {
         const retryStrategyOptions = (_a = options === null || options === void 0 ? void 0 : options.retryStrategy) !== null && _a !== void 0 ? _a : _helpers_retry_helper__WEBPACK_IMPORTED_MODULE_3__.retryHelper.defaultRetryStrategy;
         return yield runWithRetryAsync({
@@ -512,17 +516,18 @@ function deleteWithRetryAsync(instance, call, functionsConfig, options) {
             url: call.url,
             retryStrategy: retryStrategyOptions,
             functionsConfig: functionsConfig,
+            headers: (_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [],
             call: (retryAttempt) => __awaiter(this, void 0, void 0, function* () {
-                var _b, _c;
+                var _c, _d;
                 _http_debugger__WEBPACK_IMPORTED_MODULE_2__.httpDebugger.debugStartHttpRequest();
                 const axiosResponse = yield instance.delete(call.url, {
-                    headers: getHeadersJson((_b = options === null || options === void 0 ? void 0 : options.headers) !== null && _b !== void 0 ? _b : [], false),
+                    headers: getHeadersJson((_c = options === null || options === void 0 ? void 0 : options.headers) !== null && _c !== void 0 ? _c : [], false),
                     responseType: options === null || options === void 0 ? void 0 : options.responseType,
                     // required for uploading large files
                     // https://github.com/axios/axios/issues/1362
                     maxContentLength: 'Infinity',
                     maxBodyLength: 'Infinity',
-                    cancelToken: (_c = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _c === void 0 ? void 0 : _c.token
+                    cancelToken: (_d = options === null || options === void 0 ? void 0 : options.cancelToken) === null || _d === void 0 ? void 0 : _d.token
                 });
                 const response = {
                     data: axiosResponse.data,
@@ -575,16 +580,97 @@ function runWithRetryAsync(data) {
                     retryStrategy: data.retryStrategy,
                     retryAttempt: data.retryAttempt + 1,
                     url: data.url,
-                    functionsConfig: data.functionsConfig
+                    functionsConfig: data.functionsConfig,
+                    headers: data.headers
                 });
             }
+            // sanitize the error before logging / re-throwing so the authorization token is not leaked
+            const sanitizedError = sanitizeError(error, data.headers);
             if (data.functionsConfig.logErrorsToConsole) {
-                console.error(`Executing '${data.url}' failed. Request was retried '${data.retryAttempt}' times. `, error);
+                console.error(`Executing '${data.url}' failed. Request was retried '${data.retryAttempt}' times.`, sanitizedError);
             }
-            throw error;
+            throw sanitizedError;
         }
     });
 }
+const redactedValue = 'redacted';
+const maxRedactionDepth = 10;
+/**
+ * Returns the caller-supplied 'authorization' header value(s), which are the secret token(s) to
+ * scrub from errors. Note: if a consumer sets the authorization token on the axios instance defaults
+ * instead of passing it via 'options.headers', it is not known here and cannot be redacted.
+ */
+function getSecretHeaderValues(headers) {
+    return headers
+        .filter((header) => header.header.toLowerCase() === 'authorization')
+        .map((header) => header.value)
+        // skip empty values - splitting on an empty string would corrupt every string
+        .filter((value) => typeof value === 'string' && value.length > 0);
+}
+function redactStringValue(value, secrets) {
+    let result = value;
+    for (const secret of secrets) {
+        if (result.includes(secret)) {
+            result = result.split(secret).join(redactedValue);
+        }
+    }
+    return result;
+}
+/**
+ * Walks the object graph (cycle- and depth-guarded) replacing every occurrence of a secret with the
+ * redacted placeholder in place.
+ */
+function redactSecretsInPlace(target, secrets, seen, depth) {
+    if (depth > maxRedactionDepth || target === null || typeof target !== 'object') {
+        return;
+    }
+    if (seen.has(target)) {
+        // break cycles (config.headers, request.socket, response.request, ...)
+        return;
+    }
+    seen.add(target);
+    for (const key of Object.keys(target)) {
+        let value;
+        try {
+            value = target[key];
+        }
+        catch (_a) {
+            // accessing the property threw (e.g. a getter) - skip it
+            continue;
+        }
+        if (typeof value === 'string') {
+            const redacted = redactStringValue(value, secrets);
+            if (redacted !== value) {
+                try {
+                    target[key] = redacted;
+                }
+                catch (_b) {
+                    // property is read-only - skip it
+                }
+            }
+        }
+        else if (value && typeof value === 'object') {
+            redactSecretsInPlace(value, secrets, seen, depth + 1);
+        }
+    }
+}
+/**
+ * If 'error' is an axios error, redacts every occurrence of the caller's authorization token (taken
+ * from 'headers') throughout the error, replacing it with a redacted placeholder. Non-axios errors
+ * and errors with no known token are returned unchanged. This prevents the authorization token from
+ * leaking via console logs or the re-thrown error. All other axios properties are preserved.
+ */
+function sanitizeError(error, headers) {
+    if (!axios__WEBPACK_IMPORTED_MODULE_0__["default"].isAxiosError(error)) {
+        return error;
+    }
+    const secrets = getSecretHeaderValues(headers);
+    if (secrets.length === 0) {
+        return error;
+    }
+    redactSecretsInPlace(error, secrets, new WeakSet(), 0);
+    return error;
+}
 function getHeadersJson(headers, addContentTypeHeader) {
     const headerJson = {};
     headers.forEach((header) => {
@@ -3473,7 +3559,7 @@ class ElementQuery extends base_query_class_1.BaseQuery {
         return this.queryService.getElementAsync(this.getUrl(), (_a = this._queryConfig) !== null && _a !== void 0 ? _a : {});
     }
     getUrl() {
-        return super.resolveUrlInternal(`/types/${this.typeCodename}/elements/${this.elementCodename}`);
+        return super.resolveUrlInternal(`/types/${encodeURIComponent(this.typeCodename)}/elements/${encodeURIComponent(this.elementCodename)}`);
     }
     map(json) {
         return this.queryService.mappingService.viewContentTypeElementResponse(json);
@@ -3729,7 +3815,7 @@ class SingleItemQuery extends base_query_class_1.BaseQuery {
         return this.queryService.getSingleItemAsync(this.getUrl(), (_a = this._queryConfig) !== null && _a !== void 0 ? _a : {});
     }
     getUrl() {
-        const action = '/items/' + this.codename;
+        const action = '/items/' + encodeURIComponent(this.codename);
         // add default language is necessry
         this.processDefaultLanguageParameter();
         //process client level archived item exclusion
@@ -4164,7 +4250,7 @@ class TaxonomyQuery extends base_query_class_1.BaseQuery {
         return this.queryService.getTaxonomy(this.getUrl(), (_a = this._queryConfig) !== null && _a !== void 0 ? _a : {});
     }
     getUrl() {
-        const action = '/' + this.taxonomiesEndpoint + '/' + this.taxonomyCodename;
+        const action = '/' + this.taxonomiesEndpoint + '/' + encodeURIComponent(this.taxonomyCodename);
         return super.resolveUrlInternal(action);
     }
     map(json) {
@@ -4275,7 +4361,7 @@ class SingleTypeQuery extends base_query_class_1.BaseQuery {
         return this.queryService.getSingleType(this.getUrl(), (_a = this._queryConfig) !== null && _a !== void 0 ? _a : {});
     }
     getUrl() {
-        const action = '/types/' + this.typeCodename;
+        const action = '/types/' + encodeURIComponent(this.typeCodename);
         return super.resolveUrlInternal(action);
     }
     map(json) {
@@ -4353,7 +4439,7 @@ class UsedInQuery extends base_listing_query_class_1.BaseListingQuery {
         return this.queryService.getUsedIn(this.getUrl(), (_a = this._queryConfig) !== null && _a !== void 0 ? _a : {});
     }
     getUrl() {
-        const action = `/${this.setup.entity === 'asset' ? 'assets' : 'items'}/${this.setup.codename}/used-in`;
+        const action = `/${this.setup.entity === 'asset' ? 'assets' : 'items'}/${encodeURIComponent(this.setup.codename)}/used-in`;
         // add default language is necessary
         this.processDefaultLanguageParameter();
         //process client level archived item exclusion
@@ -4394,7 +4480,7 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.sdkInfo = void 0;
 exports.sdkInfo = {
     host: 'npmjs.com',
-    version: '16.4.4',
+    version: '16.4.6',
     name: '@kontent-ai/delivery-sdk'
 };