@servicetitan/form 34.0.0 → 35.1.0

package/dist/file-uploader/__tests__/uploader.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=uploader.test.d.ts.map

package/dist/file-uploader/__tests__/uploader.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploader.test.d.ts","sourceRoot":"","sources":["../../../src/file-uploader/__tests__/uploader.test.ts"],"names":[],"mappings":""}

package/dist/file-uploader/uploader.d.ts

@@ -1,5 +1,6 @@
 import type { FileUploaderConfig } from './config';
 export declare class Uploader {
+    #private;
     private readonly resumable;
     constructor(config?: FileUploaderConfig, handlers?: {
         progress?(file: File, progress: number): void;

package/dist/file-uploader/uploader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploader.d.ts","sourceRoot":"","sources":["../../src/file-uploader/uploader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAsBnD,qBAAa,QAAQ;IACjB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;gBAGlC,MAAM,GAAE,kBAAuB,EAC/B,QAAQ,GAAE;QACN,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7C,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACzC,EACN,UAAU,SAAY;IA4D1B,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,QAAQ;IAU9B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI;CAYrB"}
+{"version":3,"file":"uploader.d.ts","sourceRoot":"","sources":["../../src/file-uploader/uploader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAsBnD,qBAAa,QAAQ;;IACjB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;gBAGlC,MAAM,GAAE,kBAAuB,EAC/B,QAAQ,GAAE;QACN,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7C,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACzC,EACN,UAAU,SAAY;IA+D1B,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,QAAQ;IAU9B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI;CAwBrB"}

package/dist/file-uploader/uploader.js

@@ -1,3 +1,18 @@
+function _check_private_redeclaration(obj, privateCollection) {
+    if (privateCollection.has(obj)) {
+        throw new TypeError("Cannot initialize the same private elements twice on an object");
+    }
+}
+function _class_private_method_get(receiver, privateSet, fn) {
+    if (!privateSet.has(receiver)) {
+        throw new TypeError("attempted to get private field on non-instance");
+    }
+    return fn;
+}
+function _class_private_method_init(obj, privateSet) {
+    _check_private_redeclaration(obj, privateSet);
+    privateSet.add(obj);
+}
 function _define_property(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -11,8 +26,10 @@ function _define_property(obj, key, value) {
     }
     return obj;
 }
+import Cookies from 'js-cookie';
 import { v4 as uuid } from 'uuid';
 const Resumable = require('resumablejs');
+var _getCsrfTokenHeader = /*#__PURE__*/ new WeakSet();
 export class Uploader {
     upload(source) {
         if (source instanceof File) {
@@ -36,6 +53,7 @@ export class Uploader {
         }
     }
     constructor(config = {}, handlers = {}, folderName = 'default'){
+        _class_private_method_init(this, _getCsrfTokenHeader);
         _define_property(this, "resumable", void 0);
         const { errorParser, ...configuration } = config;
         const resumable = new Resumable({
@@ -43,7 +61,8 @@ export class Uploader {
             testChunks: false,
             simultaneousUploads: 1,
             headers: {
-                'X-Requested-With': 'XMLHttpRequest'
+                'X-Requested-With': 'XMLHttpRequest',
+                ..._class_private_method_get(this, _getCsrfTokenHeader, getCsrfTokenHeader).call(this)
             },
             permanentErrors: [
                 302,
@@ -90,5 +109,15 @@ export class Uploader {
         this.resumable = resumable;
     }
 }
+function getCsrfTokenHeader() {
+    const csrfTokenName = 'X-CSRF-Token';
+    const token = Cookies.get(csrfTokenName);
+    if (token) {
+        return {
+            [csrfTokenName]: token
+        };
+    }
+    return {};
+}
 
 //# sourceMappingURL=uploader.js.map

package/dist/file-uploader/uploader.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/file-uploader/uploader.ts"],"sourcesContent":["import { v4 as uuid } from 'uuid';\n\nimport type { FileUploaderConfig } from './config';\n\nconst Resumable = require('resumablejs');\n\ninterface Resumable {\n    files: ResumableFile[];\n    on(event: 'fileAdded', callback: (file: ResumableFile, event: Event) => void): void;\n    on(event: 'fileProgress', callback: (file: ResumableFile, message?: string) => void): void;\n    on(event: 'fileSuccess', callback: (file: ResumableFile, message?: string) => void): void;\n    on(event: 'fileError', callback: (file: ResumableFile, message?: string) => void): void;\n    addFile(file: File): void;\n    upload(): void;\n    cancel(): void;\n}\n\ninterface ResumableFile {\n    file: File;\n    progress(relative?: boolean): number;\n    isComplete(): boolean;\n    cancel(): void;\n}\n\nexport class Uploader {\n    private readonly resumable: Resumable;\n\n    constructor(\n        config: FileUploaderConfig = {},\n        handlers: {\n            progress?(file: File, progress: number): void;\n            success?(file: File, message?: string): void;\n            error?(file: File, message?: string): void;\n        } = {},\n        folderName = 'default'\n    ) {\n        const { errorParser, ...configuration } = config;\n\n        const resumable: Resumable = new Resumable({\n            target: `/app/api/fileuploader/folders/${folderName}/files`,\n            testChunks: false,\n            simultaneousUploads: 1,\n            headers: { 'X-Requested-With': 'XMLHttpRequest' },\n            permanentErrors: [302, 400, 404, 415, 500, 501],\n            generateUniqueIdentifier: () => uuid(),\n            fileTypeErrorCallback: (file: File) => {\n                handlers.error?.(\n                    file,\n                    `File type not allowed. Please provide file of type ${configuration.fileType\n                        ?.map(ext => `.${ext}`)\n                        ?.join(', ')}.`\n                );\n            },\n            ...configuration,\n        });\n\n        resumable.on('fileAdded', () => {\n            resumable.upload();\n        });\n\n        resumable.on('fileProgress', resumableFile => {\n            if (resumableFile.isComplete()) {\n                return;\n            }\n\n            let progress = Math.floor(resumableFile.progress(false) * 100);\n            if (progress > 99) {\n                progress = 99;\n            }\n\n            if (handlers.progress) {\n                handlers.progress(resumableFile.file, progress);\n            }\n        });\n\n        resumable.on('fileSuccess', (resumableFile, message) => {\n            if (handlers.success) {\n                handlers.success(resumableFile.file, message);\n            }\n\n            resumableFile.cancel();\n        });\n\n        resumable.on('fileError', (resumableFile, message) => {\n            if (handlers.error) {\n                handlers.error(resumableFile.file, errorParser ? errorParser(message) : message);\n            }\n\n            resumableFile.cancel();\n        });\n\n        this.resumable = resumable;\n    }\n\n    upload(source: File | FileList) {\n        if (source instanceof File) {\n            this.resumable.addFile(source);\n        } else {\n            for (const file of Array.from(source)) {\n                this.resumable.addFile(file);\n            }\n        }\n    }\n\n    cancel(file?: File) {\n        if (file) {\n            for (const resumableFile of this.resumable.files) {\n                if (resumableFile.file === file) {\n                    resumableFile.cancel();\n                    break;\n                }\n            }\n        } else {\n            this.resumable.cancel();\n        }\n    }\n}\n"],"names":["v4","uuid","Resumable","require","Uploader","upload","source","File","resumable","addFile","file","Array","from","cancel","resumableFile","files","config","handlers","folderName","errorParser","configuration","target","testChunks","simultaneousUploads","headers","permanentErrors","generateUniqueIdentifier","fileTypeErrorCallback","error","fileType","map","ext","join","on","isComplete","progress","Math","floor","message","success"],"mappings":";;;;;;;;;;;;;AAAA,SAASA,MAAMC,IAAI,QAAQ,OAAO;AAIlC,MAAMC,YAAYC,QAAQ;AAoB1B,OAAO,MAAMC;IAsETC,OAAOC,MAAuB,EAAE;QAC5B,IAAIA,kBAAkBC,MAAM;YACxB,IAAI,CAACC,SAAS,CAACC,OAAO,CAACH;QAC3B,OAAO;YACH,KAAK,MAAMI,QAAQC,MAAMC,IAAI,CAACN,QAAS;gBACnC,IAAI,CAACE,SAAS,CAACC,OAAO,CAACC;YAC3B;QACJ;IACJ;IAEAG,OAAOH,IAAW,EAAE;QAChB,IAAIA,MAAM;YACN,KAAK,MAAMI,iBAAiB,IAAI,CAACN,SAAS,CAACO,KAAK,CAAE;gBAC9C,IAAID,cAAcJ,IAAI,KAAKA,MAAM;oBAC7BI,cAAcD,MAAM;oBACpB;gBACJ;YACJ;QACJ,OAAO;YACH,IAAI,CAACL,SAAS,CAACK,MAAM;QACzB;IACJ;IAxFA,YACIG,SAA6B,CAAC,CAAC,EAC/BC,WAII,CAAC,CAAC,EACNC,aAAa,SAAS,CACxB;QAVF,uBAAiBV,aAAjB,KAAA;QAWI,MAAM,EAAEW,WAAW,EAAE,GAAGC,eAAe,GAAGJ;QAE1C,MAAMR,YAAuB,IAAIN,UAAU;YACvCmB,QAAQ,CAAC,8BAA8B,EAAEH,WAAW,MAAM,CAAC;YAC3DI,YAAY;YACZC,qBAAqB;YACrBC,SAAS;gBAAE,oBAAoB;YAAiB;YAChDC,iBAAiB;gBAAC;gBAAK;gBAAK;gBAAK;gBAAK;gBAAK;aAAI;YAC/CC,0BAA0B,IAAMzB;YAChC0B,uBAAuB,CAACjB;oBAGsCU,6BAAAA,yBAF1DH;iBAAAA,kBAAAA,SAASW,KAAK,cAAdX,sCAAAA,qBAAAA,UACIP,MACA,CAAC,mDAAmD,GAAEU,0BAAAA,cAAcS,QAAQ,cAAtBT,+CAAAA,8BAAAA,wBAChDU,GAAG,CAACC,CAAAA,MAAO,CAAC,CAAC,EAAEA,KAAK,eAD4BX,kDAAAA,4BAEhDY,IAAI,CAAC,MAAM,CAAC,CAAC;YAE3B;YACA,GAAGZ,aAAa;QACpB;QAEAZ,UAAUyB,EAAE,CAAC,aAAa;YACtBzB,UAAUH,MAAM;QACpB;QAEAG,UAAUyB,EAAE,CAAC,gBAAgBnB,CAAAA;YACzB,IAAIA,cAAcoB,UAAU,IAAI;gBAC5B;YACJ;YAEA,IAAIC,WAAWC,KAAKC,KAAK,CAACvB,cAAcqB,QAAQ,CAAC,SAAS;YAC1D,IAAIA,WAAW,IAAI;gBACfA,WAAW;YACf;YAEA,IAAIlB,SAASkB,QAAQ,EAAE;gBACnBlB,SAASkB,QAAQ,CAACrB,cAAcJ,IAAI,EAAEyB;YAC1C;QACJ;QAEA3B,UAAUyB,EAAE,CAAC,eAAe,CAACnB,eAAewB;YACxC,IAAIrB,SAASsB,OAAO,EAAE;gBAClBtB,SAASsB,OAAO,CAACzB,cAAcJ,IAAI,EAAE4B;YACzC;YAEAxB,cAAcD,MAAM;QACxB;QAEAL,UAAUyB,EAAE,CAAC,aAAa,CAACnB,eAAewB;YACtC,IAAIrB,SAASW,KAAK,EAAE;gBAChBX,SAASW,KAAK,CAACd,cAAcJ,IAAI,EAAES,cAAcA,YAAYmB,WAAWA;YAC5E;YAEAxB,cAAcD,MAAM;QACxB;QAEA,IAAI,CAACL,SAAS,GAAGA;IACrB;AAwBJ"}
+{"version":3,"sources":["../../src/file-uploader/uploader.ts"],"sourcesContent":["import Cookies from 'js-cookie';\nimport { v4 as uuid } from 'uuid';\n\nimport type { FileUploaderConfig } from './config';\n\nconst Resumable = require('resumablejs');\n\ninterface Resumable {\n    files: ResumableFile[];\n    on(event: 'fileAdded', callback: (file: ResumableFile, event: Event) => void): void;\n    on(event: 'fileProgress', callback: (file: ResumableFile, message?: string) => void): void;\n    on(event: 'fileSuccess', callback: (file: ResumableFile, message?: string) => void): void;\n    on(event: 'fileError', callback: (file: ResumableFile, message?: string) => void): void;\n    addFile(file: File): void;\n    upload(): void;\n    cancel(): void;\n}\n\ninterface ResumableFile {\n    file: File;\n    progress(relative?: boolean): number;\n    isComplete(): boolean;\n    cancel(): void;\n}\n\nexport class Uploader {\n    private readonly resumable: Resumable;\n\n    constructor(\n        config: FileUploaderConfig = {},\n        handlers: {\n            progress?(file: File, progress: number): void;\n            success?(file: File, message?: string): void;\n            error?(file: File, message?: string): void;\n        } = {},\n        folderName = 'default'\n    ) {\n        const { errorParser, ...configuration } = config;\n\n        const resumable: Resumable = new Resumable({\n            target: `/app/api/fileuploader/folders/${folderName}/files`,\n            testChunks: false,\n            simultaneousUploads: 1,\n            headers: {\n                'X-Requested-With': 'XMLHttpRequest',\n                ...this.#getCsrfTokenHeader(),\n            },\n            permanentErrors: [302, 400, 404, 415, 500, 501],\n            generateUniqueIdentifier: () => uuid(),\n            fileTypeErrorCallback: (file: File) => {\n                handlers.error?.(\n                    file,\n                    `File type not allowed. Please provide file of type ${configuration.fileType\n                        ?.map(ext => `.${ext}`)\n                        ?.join(', ')}.`\n                );\n            },\n            ...configuration,\n        });\n\n        resumable.on('fileAdded', () => {\n            resumable.upload();\n        });\n\n        resumable.on('fileProgress', resumableFile => {\n            if (resumableFile.isComplete()) {\n                return;\n            }\n\n            let progress = Math.floor(resumableFile.progress(false) * 100);\n            if (progress > 99) {\n                progress = 99;\n            }\n\n            if (handlers.progress) {\n                handlers.progress(resumableFile.file, progress);\n            }\n        });\n\n        resumable.on('fileSuccess', (resumableFile, message) => {\n            if (handlers.success) {\n                handlers.success(resumableFile.file, message);\n            }\n\n            resumableFile.cancel();\n        });\n\n        resumable.on('fileError', (resumableFile, message) => {\n            if (handlers.error) {\n                handlers.error(resumableFile.file, errorParser ? errorParser(message) : message);\n            }\n\n            resumableFile.cancel();\n        });\n\n        this.resumable = resumable;\n    }\n\n    upload(source: File | FileList) {\n        if (source instanceof File) {\n            this.resumable.addFile(source);\n        } else {\n            for (const file of Array.from(source)) {\n                this.resumable.addFile(file);\n            }\n        }\n    }\n\n    cancel(file?: File) {\n        if (file) {\n            for (const resumableFile of this.resumable.files) {\n                if (resumableFile.file === file) {\n                    resumableFile.cancel();\n                    break;\n                }\n            }\n        } else {\n            this.resumable.cancel();\n        }\n    }\n\n    #getCsrfTokenHeader() {\n        const csrfTokenName = 'X-CSRF-Token';\n        const token = Cookies.get(csrfTokenName);\n        if (token) {\n            return {\n                [csrfTokenName]: token,\n            };\n        }\n\n        return {};\n    }\n}\n"],"names":["Cookies","v4","uuid","Resumable","require","Uploader","upload","source","File","resumable","addFile","file","Array","from","cancel","resumableFile","files","config","handlers","folderName","errorParser","configuration","target","testChunks","simultaneousUploads","headers","permanentErrors","generateUniqueIdentifier","fileTypeErrorCallback","error","fileType","map","ext","join","on","isComplete","progress","Math","floor","message","success","csrfTokenName","token","get"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAOA,aAAa,YAAY;AAChC,SAASC,MAAMC,IAAI,QAAQ,OAAO;AAIlC,MAAMC,YAAYC,QAAQ;IAoHtB;AAhGJ,OAAO,MAAMC;IAyETC,OAAOC,MAAuB,EAAE;QAC5B,IAAIA,kBAAkBC,MAAM;YACxB,IAAI,CAACC,SAAS,CAACC,OAAO,CAACH;QAC3B,OAAO;YACH,KAAK,MAAMI,QAAQC,MAAMC,IAAI,CAACN,QAAS;gBACnC,IAAI,CAACE,SAAS,CAACC,OAAO,CAACC;YAC3B;QACJ;IACJ;IAEAG,OAAOH,IAAW,EAAE;QAChB,IAAIA,MAAM;YACN,KAAK,MAAMI,iBAAiB,IAAI,CAACN,SAAS,CAACO,KAAK,CAAE;gBAC9C,IAAID,cAAcJ,IAAI,KAAKA,MAAM;oBAC7BI,cAAcD,MAAM;oBACpB;gBACJ;YACJ;QACJ,OAAO;YACH,IAAI,CAACL,SAAS,CAACK,MAAM;QACzB;IACJ;IA3FA,YACIG,SAA6B,CAAC,CAAC,EAC/BC,WAII,CAAC,CAAC,EACNC,aAAa,SAAS,CACxB;QAqFF,iCAAA;QA/FA,uBAAiBV,aAAjB,KAAA;QAWI,MAAM,EAAEW,WAAW,EAAE,GAAGC,eAAe,GAAGJ;QAE1C,MAAMR,YAAuB,IAAIN,UAAU;YACvCmB,QAAQ,CAAC,8BAA8B,EAAEH,WAAW,MAAM,CAAC;YAC3DI,YAAY;YACZC,qBAAqB;YACrBC,SAAS;gBACL,oBAAoB;gBACpB,GAAG,0BAAA,IAAI,EAAC,qBAAA,yBAAL,IAAI,CAAsB;YACjC;YACAC,iBAAiB;gBAAC;gBAAK;gBAAK;gBAAK;gBAAK;gBAAK;aAAI;YAC/CC,0BAA0B,IAAMzB;YAChC0B,uBAAuB,CAACjB;oBAGsCU,6BAAAA,yBAF1DH;iBAAAA,kBAAAA,SAASW,KAAK,cAAdX,sCAAAA,qBAAAA,UACIP,MACA,CAAC,mDAAmD,GAAEU,0BAAAA,cAAcS,QAAQ,cAAtBT,+CAAAA,8BAAAA,wBAChDU,GAAG,CAACC,CAAAA,MAAO,CAAC,CAAC,EAAEA,KAAK,eAD4BX,kDAAAA,4BAEhDY,IAAI,CAAC,MAAM,CAAC,CAAC;YAE3B;YACA,GAAGZ,aAAa;QACpB;QAEAZ,UAAUyB,EAAE,CAAC,aAAa;YACtBzB,UAAUH,MAAM;QACpB;QAEAG,UAAUyB,EAAE,CAAC,gBAAgBnB,CAAAA;YACzB,IAAIA,cAAcoB,UAAU,IAAI;gBAC5B;YACJ;YAEA,IAAIC,WAAWC,KAAKC,KAAK,CAACvB,cAAcqB,QAAQ,CAAC,SAAS;YAC1D,IAAIA,WAAW,IAAI;gBACfA,WAAW;YACf;YAEA,IAAIlB,SAASkB,QAAQ,EAAE;gBACnBlB,SAASkB,QAAQ,CAACrB,cAAcJ,IAAI,EAAEyB;YAC1C;QACJ;QAEA3B,UAAUyB,EAAE,CAAC,eAAe,CAACnB,eAAewB;YACxC,IAAIrB,SAASsB,OAAO,EAAE;gBAClBtB,SAASsB,OAAO,CAACzB,cAAcJ,IAAI,EAAE4B;YACzC;YAEAxB,cAAcD,MAAM;QACxB;QAEAL,UAAUyB,EAAE,CAAC,aAAa,CAACnB,eAAewB;YACtC,IAAIrB,SAASW,KAAK,EAAE;gBAChBX,SAASW,KAAK,CAACd,cAAcJ,IAAI,EAAES,cAAcA,YAAYmB,WAAWA;YAC5E;YAEAxB,cAAcD,MAAM;QACxB;QAEA,IAAI,CAACL,SAAS,GAAGA;IACrB;AAoCJ;AAXI,SAAA;IACI,MAAMgC,gBAAgB;IACtB,MAAMC,QAAQ1C,QAAQ2C,GAAG,CAACF;IAC1B,IAAIC,OAAO;QACP,OAAO;YACH,CAACD,cAAc,EAAEC;QACrB;IACJ;IAEA,OAAO,CAAC;AACZ"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@servicetitan/form",
-    "version": "34.0.0",
+    "version": "35.1.0",
     "description": "",
     "homepage": "https://docs.st.dev/docs/frontend/form",
     "repository": {
@@ -17,14 +17,15 @@
     ],
     "devDependencies": {
         "@progress/kendo-react-dateinputs": "~5.5.0",
-        "@servicetitan/confirm": "^34.0.0",
-        "@servicetitan/culture": "^34.0.0",
+        "@servicetitan/confirm": "^35.1.0",
+        "@servicetitan/culture": "^35.1.0",
         "@servicetitan/design-system": "~14.5.1",
-        "@servicetitan/form-state": "^34.0.0",
+        "@servicetitan/form-state": "^35.1.0",
         "@servicetitan/hash-browser-router": "^32.2.0",
         "@servicetitan/react-ioc": "^32.2.0",
         "@servicetitan/tokens": ">=12.2.1",
         "@servicetitan/web-components": "^32.2.0",
+        "@types/js-cookie": "^3.0.3",
         "@types/react": "~18.2.55",
         "@types/react-input-mask": "~2.0.5",
         "@types/uuid": "~8.3.4",
@@ -38,10 +39,10 @@
     },
     "peerDependencies": {
         "@progress/kendo-react-dateinputs": "~5.5.0",
-        "@servicetitan/confirm": "^34.0.0",
-        "@servicetitan/culture": "^34.0.0",
+        "@servicetitan/confirm": "^35.1.0",
+        "@servicetitan/culture": "^35.1.0",
         "@servicetitan/design-system": ">=13.2.1",
-        "@servicetitan/form-state": "^34.0.0",
+        "@servicetitan/form-state": "^35.1.0",
         "@servicetitan/react-ioc": ">21.0.0",
         "@servicetitan/tokens": ">=12.2.1",
         "accounting": "~0.4.1",
@@ -55,6 +56,7 @@
     "dependencies": {
         "classnames": "^2.3.1",
         "debounce": "^1.2.1",
+        "js-cookie": "^3.0.5",
         "react-input-mask": "~2.0.4",
         "uuid": "~8.3.2"
     },
@@ -65,5 +67,5 @@
         "less": true,
         "webpack": false
     },
-    "gitHead": "39c8bee0e01ce314dbdd07049e1d0851a03225ab"
+    "gitHead": "2309437f0c7867ef198487676c1b02667b30f057"
 }

package/src/file-uploader/__tests__/uploader.test.ts

@@ -0,0 +1,125 @@
+import { FileUploaderConfig } from '../config';
+import { Uploader } from '../uploader';
+
+const mockResumableConstructor = jest.fn();
+jest.mock('resumablejs', () => {
+    return jest.fn().mockImplementation(config => {
+        mockResumableConstructor(config);
+        return {
+            files: [],
+            on: jest.fn(),
+            addFile: jest.fn(),
+            upload: jest.fn(),
+            cancel: jest.fn(),
+        };
+    });
+});
+
+jest.mock('uuid', () => ({
+    v4: jest.fn(() => 'mock-uuid'),
+}));
+
+describe('[form] Uploader', () => {
+    const CSRF_TOKEN = 'test-token-123';
+    let originalDocumentCookie: string;
+    let uploaderParams: FileUploaderConfig;
+
+    function setCookie(value: string) {
+        Object.defineProperty(document, 'cookie', {
+            writable: true,
+            value,
+        });
+    }
+
+    beforeEach(() => {
+        originalDocumentCookie = document.cookie;
+        document.cookie = '';
+        uploaderParams = {};
+        setCookie(`X-CSRF-Token=${CSRF_TOKEN}; other-cookie=value`);
+        jest.clearAllMocks();
+    });
+
+    afterEach(() => {
+        setCookie(originalDocumentCookie);
+    });
+
+    function subject() {
+        return new Uploader(uploaderParams);
+    }
+
+    function expectHeaders(expectedHeaders: Record<string, string>) {
+        expect(mockResumableConstructor).toHaveBeenCalledWith(
+            expect.objectContaining({
+                headers: expect.objectContaining(expectedHeaders),
+            })
+        );
+    }
+
+    function itIncludesCSRFTokenHeader() {
+        test('includes CSRF token header', () => {
+            subject();
+
+            expectHeaders({
+                'X-Requested-With': 'XMLHttpRequest',
+                'X-CSRF-Token': CSRF_TOKEN,
+            });
+        });
+    }
+
+    function itDoesNotIncludeCSRFTokenHeader() {
+        test('does not include CSRF token header', () => {
+            subject();
+
+            expectHeaders({
+                'X-Requested-With': 'XMLHttpRequest',
+            });
+        });
+    }
+
+    itIncludesCSRFTokenHeader();
+
+    describe('when CSRF token cookie does not exist', () => {
+        beforeEach(() => {
+            setCookie('other-cookie=value; another-cookie=another-value');
+        });
+
+        itDoesNotIncludeCSRFTokenHeader();
+    });
+
+    describe('when CSRF token cookie exists but has no value', () => {
+        beforeEach(() => {
+            setCookie('x-csrf-token=; other-cookie=value');
+        });
+
+        itDoesNotIncludeCSRFTokenHeader();
+    });
+
+    describe('when CSRF token is URL encoded', () => {
+        beforeEach(() => {
+            const encodedToken = CSRF_TOKEN.replaceAll('-', '%2D');
+            setCookie(`X-CSRF-Token=${encodedToken}; other-cookie=value`);
+        });
+
+        itIncludesCSRFTokenHeader();
+    });
+
+    describe('when custom headers are provided', () => {
+        beforeEach(() => {
+            uploaderParams = {
+                headers: {
+                    'Custom-Header': 'custom-value',
+                },
+            };
+        });
+
+        test('custom headers only are passed through config', () => {
+            setCookie('x-csrf-token=test-token-123');
+
+            subject();
+
+            expectHeaders({
+                'Custom-Header': 'custom-value',
+            });
+        });
+    });
+});

package/src/file-uploader/uploader.ts

@@ -1,3 +1,4 @@
+import Cookies from 'js-cookie';
 import { v4 as uuid } from 'uuid';
 
 import type { FileUploaderConfig } from './config';
@@ -40,7 +41,10 @@ export class Uploader {
             target: `/app/api/fileuploader/folders/${folderName}/files`,
             testChunks: false,
             simultaneousUploads: 1,
-            headers: { 'X-Requested-With': 'XMLHttpRequest' },
+            headers: {
+                'X-Requested-With': 'XMLHttpRequest',
+                ...this.#getCsrfTokenHeader(),
+            },
             permanentErrors: [302, 400, 404, 415, 500, 501],
             generateUniqueIdentifier: () => uuid(),
             fileTypeErrorCallback: (file: File) => {
@@ -114,4 +118,16 @@ export class Uploader {
             this.resumable.cancel();
         }
     }
+
+    #getCsrfTokenHeader() {
+        const csrfTokenName = 'X-CSRF-Token';
+        const token = Cookies.get(csrfTokenName);
+        if (token) {
+            return {
+                [csrfTokenName]: token,
+            };
+        }
+
+        return {};
+    }
 }