@lepsto/sdk-app 87.0.1 → 87.1.0

package/dist/index.cjs

@@ -35,11 +35,15 @@ function isAccessDenied(err) {
 }
 
 // src/runtime/csrf.ts
-var CSRF_COOKIE = "lessly_csrf";
+var CSRF_COOKIES = ["lepsto_csrf", "lessly_csrf"];
 function readCsrfCookie() {
   if (typeof document === "undefined" || !document) return null;
-  const match = document.cookie.match(new RegExp(`(?:^|; )${CSRF_COOKIE}=([^;]*)`));
-  return match ? decodeURIComponent(match[1]) : null;
+  for (const name of CSRF_COOKIES) {
+    const match = document.cookie.match(new RegExp(`(?:^|; )${name}=([^;]*)`));
+    const value = match ? decodeURIComponent(match[1]) : "";
+    if (value) return value;
+  }
+  return null;
 }
 
 // src/runtime/request.ts
@@ -125,7 +129,7 @@ async function executeRequest(opts, binding, input) {
       throw new LesslyApiError(
         0,
         "csrf_cookie_missing",
-        `CSRF cookie "lessly_csrf" is missing; the session must be re-established before mutating requests (${binding.method} ${binding.path}).`,
+        `CSRF cookie "lepsto_csrf" (or the legacy "lessly_csrf") is missing; the session must be re-established before mutating requests (${binding.method} ${binding.path}).`,
         null
       );
     }