@nauth-toolkit/client 0.1.84 → 0.1.85

package/dist/index.cjs

@@ -1538,13 +1538,19 @@ var NAuthClient = class {
   }
   /**
    * Build request headers for authentication.
+   *
+   * @param auth - Whether to include authentication headers
+   * @param method - HTTP method (GET, POST, PUT, DELETE, PATCH)
+   * @returns Headers object with auth, CSRF, and device trust headers
    * @private
    */
-  async buildHeaders(auth) {
+  async buildHeaders(auth, method = "GET") {
     const headers = {
-      "Content-Type": "application/json",
       ...this.config.headers
     };
+    if (method !== "GET") {
+      headers["Content-Type"] = "application/json";
+    }
     if (auth && this.config.tokenDelivery === "json") {
       const accessToken = (await this.tokenManager.getTokens()).accessToken;
       if (accessToken) {
@@ -1560,7 +1566,8 @@ var NAuthClient = class {
       } catch {
       }
     }
-    if (this.config.tokenDelivery === "cookies" && hasWindow()) {
+    const mutatingMethods = ["POST", "PUT", "PATCH", "DELETE"];
+    if (this.config.tokenDelivery === "cookies" && hasWindow() && mutatingMethods.includes(method)) {
       const csrfToken = this.getCsrfToken();
       if (csrfToken) {
         headers[this.config.csrf.headerName] = csrfToken;
@@ -1583,7 +1590,7 @@ var NAuthClient = class {
    */
   async get(path, auth = false) {
     const url = this.buildUrl(path);
-    const headers = await this.buildHeaders(auth);
+    const headers = await this.buildHeaders(auth, "GET");
     const credentials = this.config.tokenDelivery === "cookies" ? "include" : "omit";
     const response = await this.config.httpAdapter.request({
       method: "GET",
@@ -1599,7 +1606,7 @@ var NAuthClient = class {
    */
   async post(path, body, auth = false) {
     const url = this.buildUrl(path);
-    const headers = await this.buildHeaders(auth);
+    const headers = await this.buildHeaders(auth, "POST");
     const credentials = this.config.tokenDelivery === "cookies" ? "include" : "omit";
     const response = await this.config.httpAdapter.request({
       method: "POST",
@@ -1616,7 +1623,7 @@ var NAuthClient = class {
    */
   async put(path, body, auth = false) {
     const url = this.buildUrl(path);
-    const headers = await this.buildHeaders(auth);
+    const headers = await this.buildHeaders(auth, "PUT");
     const credentials = this.config.tokenDelivery === "cookies" ? "include" : "omit";
     const response = await this.config.httpAdapter.request({
       method: "PUT",
@@ -1633,7 +1640,7 @@ var NAuthClient = class {
    */
   async delete(path, auth = false) {
     const url = this.buildUrl(path);
-    const headers = await this.buildHeaders(auth);
+    const headers = await this.buildHeaders(auth, "DELETE");
     const credentials = this.config.tokenDelivery === "cookies" ? "include" : "omit";
     const response = await this.config.httpAdapter.request({
       method: "DELETE",