@strapi/admin 5.43.0 → 5.45.0

package/dist/admin/admin/src/utils/getFetchClient.js

@@ -167,7 +167,27 @@ const getToken = ()=>{
     // Check if the url has a prepending slash, if not add a slash
     const normalizeUrl = (url)=>hasProtocol(url) ? url : addPrependingSlash(url);
     // Add a response interceptor to return the response
-    const responseInterceptor = async (response, validateStatus)=>{
+    const responseInterceptor = async (response, validateStatus, responseType = 'json')=>{
+        if (responseType !== 'json') {
+            if (!response.ok && !validateStatus?.(response.status)) {
+                const fetchError = new FetchError('Server Error');
+                fetchError.status = response.status;
+                throw fetchError;
+            }
+            let result;
+            if (responseType === 'blob') {
+                result = await response.blob();
+            } else if (responseType === 'text') {
+                result = await response.text();
+            } else {
+                result = await response.arrayBuffer();
+            }
+            return {
+                data: result,
+                status: response.status,
+                headers: response.headers
+            };
+        }
         try {
             const result = await response.json();
             /**
@@ -235,7 +255,10 @@ const getToken = ()=>{
          */ const serializedParams = qs.stringify(params, {
                     encode: false
                 });
-                return `${url}?${serializedParams}`;
+                if (serializedParams) {
+                    return `${url}?${serializedParams}`;
+                }
+                return url;
             }
             return url;
         };
@@ -249,9 +272,15 @@ const getToken = ()=>{
     const fetchClient = {
         get: async (url, options)=>{
             const createRequestUrl = makeCreateRequestUrl(options);
+            const responseType = options?.responseType ?? 'json';
             const executeRequest = async ()=>{
+                const { Authorization } = getDefaultHeaders();
+                // For non-JSON response types, omit content negotiation headers that imply JSON
+                const defaultHeaders = responseType === 'json' ? getDefaultHeaders() : {
+                    Authorization
+                };
                 const headers = new Headers({
-                    ...getDefaultHeaders(),
+                    ...defaultHeaders,
                     ...options?.headers
                 });
                 const response = await fetch(createRequestUrl(url), {
@@ -259,7 +288,7 @@ const getToken = ()=>{
                     method: 'GET',
                     headers
                 });
-                return responseInterceptor(response, options?.validateStatus);
+                return responseInterceptor(response, options?.validateStatus, responseType);
             };
             return withTokenRefresh(url, executeRequest);
         },

package/dist/admin/admin/src/utils/getFetchClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"getFetchClient.js","sources":["../../../../../admin/src/utils/getFetchClient.ts"],"sourcesContent":["import pipe from 'lodash/fp/pipe';\n// eslint-disable-next-line import/default\nimport qs from 'qs';\n\nimport { getCookieValue, setCookie } from './cookies';\n\nimport type { errors } from '@strapi/utils';\n\nexport type ApiError =\n  | errors.ApplicationError\n  | errors.ForbiddenError\n  | errors.NotFoundError\n  | errors.NotImplementedError\n  | errors.PaginationError\n  | errors.PayloadTooLargeError\n  | errors.PolicyError\n  | errors.RateLimitError\n  | errors.UnauthorizedError\n  | errors.ValidationError\n  | errors.YupValidationError;\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  USER: 'userInfo',\n};\n\n/**\n * Module-level promise to ensure only one token refresh happens at a time\n */\nlet refreshPromise: Promise<string | null> | null = null;\n\n/**\n * Callback to notify the app when the token is updated (e.g., to update Redux state)\n */\nlet onTokenUpdate: ((token: string) => void) | null = null;\n\n/**\n * Set the callback that will be called when the token is refreshed.\n * This allows the React layer to update Redux state when a token refresh occurs.\n *\n * @param callback - Function to call with the new token, or null to clear\n * @example\n * // In a React component\n * useEffect(() => {\n *   setOnTokenUpdate((token) => dispatch(setToken(token)));\n *   return () => setOnTokenUpdate(null);\n * }, [dispatch]);\n */\nconst setOnTokenUpdate = (callback: ((token: string) => void) | null): void => {\n  onTokenUpdate = callback;\n};\n\n/**\n * Check if the URL is an auth path that should not trigger token refresh.\n * Note: No ^ anchor since the URL may include the baseURL prefix (e.g., \"http://localhost:1337/admin/login\").\n * This differs from baseQuery.ts which uses ^/admin since it receives normalized paths.\n */\nconst isAuthPath = (url: string) => /\\/admin\\/(login|logout|access-token)\\b/.test(url);\n\n/**\n * Store the new token in the appropriate storage (localStorage or cookie)\n * and notify the app to update its state.\n *\n * Uses localStorage if the user selected \"remember me\" during login,\n * otherwise uses cookies for session-based storage.\n *\n * @param token - The JWT token to store\n * @internal Exported for testing purposes\n */\nconst storeToken = (token: string): void => {\n  // Check if the original token was stored in localStorage (persist mode)\n  const wasPersistedToLocalStorage = Boolean(localStorage.getItem(STORAGE_KEYS.TOKEN));\n\n  if (wasPersistedToLocalStorage) {\n    localStorage.setItem(STORAGE_KEYS.TOKEN, JSON.stringify(token));\n  } else {\n    setCookie(STORAGE_KEYS.TOKEN, token);\n  }\n\n  // Notify the app to update its state (e.g., Redux)\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n};\n\n/**\n * Refresh the access token by calling the /admin/access-token endpoint.\n * This uses a low-level fetch to avoid recursion through the interceptor.\n * Returns the new token on success, or null on failure.\n */\nconst refreshAccessToken = async (): Promise<string | null> => {\n  const backendURL = window.strapi.backendURL;\n\n  try {\n    const response = await fetch(`${backendURL}/admin/access-token`, {\n      method: 'POST',\n      credentials: 'include', // Include cookies for the refresh token\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n    });\n\n    if (!response.ok) {\n      console.warn('[Auth] Token refresh failed with status:', response.status);\n      return null;\n    }\n\n    const result = await response.json();\n    const token = result?.data?.token as string | undefined;\n\n    if (!token) {\n      console.warn('[Auth] Token refresh response missing token');\n      return null;\n    }\n\n    storeToken(token);\n    return token;\n  } catch (error) {\n    console.error('[Auth] Token refresh error:', error);\n    return null;\n  }\n};\n\n/**\n * Attempt to refresh the token if not already refreshing.\n * Uses a module-level promise to prevent concurrent refresh requests.\n *\n * @returns The new authentication token\n * @throws {Error} If the token refresh fails (e.g., refresh token expired)\n * @internal Exported for testing purposes\n */\nconst attemptTokenRefresh = async (): Promise<string> => {\n  if (!refreshPromise) {\n    refreshPromise = refreshAccessToken().finally(() => {\n      refreshPromise = null;\n    });\n  }\n\n  const newToken = await refreshPromise;\n  if (!newToken) {\n    const error = new Error('Session expired. Please log in again.');\n    error.name = 'TokenRefreshError';\n    throw error;\n  }\n\n  return newToken;\n};\n\ntype FetchResponse<TData = any> = {\n  data: TData;\n  status?: number;\n};\n\ntype FetchOptions = {\n  params?: any;\n  signal?: AbortSignal;\n  headers?: Record<string, string>;\n  validateStatus?: ((status: number) => boolean) | null;\n};\n\ntype FetchConfig = {\n  signal?: AbortSignal;\n};\n\ninterface ErrorResponse {\n  data: {\n    data?: any;\n    error: ApiError & { status?: number };\n  };\n}\n\nclass FetchError extends Error {\n  public name: string;\n  public message: string;\n  public response?: ErrorResponse;\n  public code?: number;\n  public status?: number;\n\n  constructor(message: string, response?: ErrorResponse) {\n    super(message);\n    this.name = 'FetchError';\n    this.message = message;\n    this.response = response;\n    this.code = response?.data?.error?.status;\n    this.status = response?.data?.error?.status;\n\n    // Ensure correct stack trace in error object\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, FetchError);\n    }\n  }\n}\n\nconst isFetchError = (error: unknown): error is FetchError => {\n  return error instanceof FetchError;\n};\n\nconst getToken = (): string | null => {\n  const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);\n  if (fromLocalStorage) {\n    return JSON.parse(fromLocalStorage);\n  }\n\n  const fromCookie = getCookieValue(STORAGE_KEYS.TOKEN);\n  return fromCookie ?? null;\n};\n\ntype FetchClient = {\n  get: <TData = any>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n  put: <TData = any, TSend = any>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  post: <TData = any, TSend = any>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  del: <TData = any>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n};\n\n/**\n * @public\n * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.\n * @returns {FetchClient} A fetch client object with methods for making HTTP requests.\n * @description This is an abstraction around the native fetch exposed by a function. It provides a simple interface to handle API calls\n * to the Strapi backend.\n * @example\n * ```tsx\n * import { getFetchClient } from '@strapi/admin/admin';\n *\n * const myFunct = () => {\n *   const { get } = getFetchClient();\n *   const requestURL = \"/some-endpoint\";\n *\n *   const { data } = await get(requestURL);\n *\n *   return data;\n * };\n * ```\n */\nconst getFetchClient = (defaultOptions: FetchConfig = {}): FetchClient => {\n  const backendURL = window.strapi.backendURL;\n\n  /**\n   * Create default headers with the current token.\n   * This is a function so we can get a fresh token after refresh.\n   */\n  const getDefaultHeaders = () => ({\n    Accept: 'application/json',\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${getToken()}`,\n  });\n\n  const isFormDataRequest = (body: unknown) => body instanceof FormData;\n  const addPrependingSlash = (url: string) => (url.charAt(0) !== '/' ? `/${url}` : url);\n\n  // This regular expression matches a string that starts with either \"http://\" or \"https://\" or any other protocol name in lower case letters, followed by \"://\" and ends with anything else\n  const hasProtocol = (url: string) => new RegExp('^(?:[a-z+]+:)?//', 'i').test(url);\n\n  // Check if the url has a prepending slash, if not add a slash\n  const normalizeUrl = (url: string) => (hasProtocol(url) ? url : addPrependingSlash(url));\n\n  // Add a response interceptor to return the response\n  const responseInterceptor = async <TData = any>(\n    response: Response,\n    validateStatus?: FetchOptions['validateStatus']\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      const result = await response.json();\n\n      /**\n       * validateStatus allows us to customize when a response should throw an error\n       * In native Fetch API, a response is considered \"not ok\"\n       * when the status code falls in the 200 to 299 (inclusive) range\n       */\n      if (!response.ok && result.error && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError(result.error.message, { data: result });\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Unknown Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      return { data: result };\n    } catch (error) {\n      if (error instanceof SyntaxError && response.ok) {\n        // Making sure that a SyntaxError doesn't throw if it's successful\n        return { data: [], status: response.status } as FetchResponse<any>;\n      } else {\n        throw error;\n      }\n    }\n  };\n\n  /**\n   * Execute a fetch request with automatic token refresh on 401 errors.\n   * @param url - The request URL (used to check if it's an auth path)\n   * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)\n   */\n  const withTokenRefresh = async <TData>(\n    url: string,\n    executeRequest: () => Promise<FetchResponse<TData>>\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      return await executeRequest();\n    } catch (error) {\n      // Only attempt refresh for 401 errors on non-auth paths\n      if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {\n        try {\n          await attemptTokenRefresh();\n          // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token\n          return await executeRequest();\n        } catch {\n          // If refresh fails, throw the original error\n          throw error;\n        }\n      }\n      throw error;\n    }\n  };\n\n  const paramsSerializer =\n    <Param = unknown>(params?: Param) =>\n    (url: string) => {\n      if (params) {\n        if (typeof params === 'string') {\n          return `${url}?${params}`;\n        }\n\n        /**\n         * TODO V6: Encoding should be enabled in this step\n         * So the rest of the app doesn't have to worry about it,\n         * It's considered a breaking change because it impacts any API request, including the user's custom code\n         */\n        const serializedParams = qs.stringify(params, { encode: false });\n        return `${url}?${serializedParams}`;\n      }\n      return url;\n    };\n\n  const addBaseUrl = (url: Parameters<typeof fetch>[0]) => {\n    return `${backendURL}${url}`;\n  };\n\n  /**\n   * We use the factory method because the options\n   * are unique to the individual request\n   */\n  const makeCreateRequestUrl = (options?: FetchOptions) =>\n    pipe(normalizeUrl, addBaseUrl, paramsSerializer(options?.params));\n\n  const fetchClient: FetchClient = {\n    get: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'GET',\n          headers,\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    post: async <TData, TSend = any>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'POST',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    put: async <TData, TSend = any>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'PUT',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    del: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'DELETE',\n          headers,\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n  };\n\n  return fetchClient;\n};\n\nexport {\n  getFetchClient,\n  isFetchError,\n  FetchError,\n  attemptTokenRefresh,\n  storeToken,\n  setOnTokenUpdate,\n};\nexport type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };\n"],"names":["STORAGE_KEYS","TOKEN","refreshPromise","onTokenUpdate","setOnTokenUpdate","callback","isAuthPath","url","test","storeToken","token","wasPersistedToLocalStorage","Boolean","localStorage","getItem","setItem","JSON","stringify","setCookie","refreshAccessToken","backendURL","window","strapi","response","fetch","method","credentials","headers","Accept","ok","console","warn","status","result","json","data","error","attemptTokenRefresh","finally","newToken","Error","name","FetchError","message","code","captureStackTrace","isFetchError","getToken","fromLocalStorage","parse","fromCookie","getCookieValue","getFetchClient","defaultOptions","getDefaultHeaders","Authorization","isFormDataRequest","body","FormData","addPrependingSlash","charAt","hasProtocol","RegExp","normalizeUrl","responseInterceptor","validateStatus","fetchError","SyntaxError","withTokenRefresh","executeRequest","paramsSerializer","params","serializedParams","qs","encode","addBaseUrl","makeCreateRequestUrl","options","pipe","fetchClient","get","createRequestUrl","Headers","signal","post","delete","put","del"],"mappings":";;;;;;AAqBA,MAAMA,YAAAA,GAAe;IACnBC,KAAAA,EAAO,UAET,CAAA;AAEA;;AAEC,IACD,IAAIC,cAAAA,GAAgD,IAAA;AAEpD;;AAEC,IACD,IAAIC,aAAAA,GAAkD,IAAA;AAEtD;;;;;;;;;;;IAYA,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxBF,aAAAA,GAAgBE,QAAAA;AAClB;AAEA;;;;AAIC,IACD,MAAMC,UAAAA,GAAa,CAACC,GAAAA,GAAgB,wCAAA,CAAyCC,IAAI,CAACD,GAAAA,CAAAA;AAElF;;;;;;;;;IAUA,MAAME,aAAa,CAACC,KAAAA,GAAAA;;AAElB,IAAA,MAAMC,6BAA6BC,OAAAA,CAAQC,YAAAA,CAAaC,OAAO,CAACd,aAAaC,KAAK,CAAA,CAAA;AAElF,IAAA,IAAIU,0BAAAA,EAA4B;AAC9BE,QAAAA,YAAAA,CAAaE,OAAO,CAACf,YAAAA,CAAaC,KAAK,EAAEe,IAAAA,CAAKC,SAAS,CAACP,KAAAA,CAAAA,CAAAA;IAC1D,CAAA,MAAO;QACLQ,iBAAAA,CAAUlB,YAAAA,CAAaC,KAAK,EAAES,KAAAA,CAAAA;AAChC,IAAA;;AAGA,IAAA,IAAIP,aAAAA,EAAe;QACjBA,aAAAA,CAAcO,KAAAA,CAAAA;AAChB,IAAA;AACF;AAEA;;;;AAIC,IACD,MAAMS,kBAAAA,GAAqB,UAAA;AACzB,IAAA,MAAMC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;IAE3C,IAAI;AACF,QAAA,MAAMG,WAAW,MAAMC,KAAAA,CAAM,GAAGJ,UAAAA,CAAW,mBAAmB,CAAC,EAAE;YAC/DK,MAAAA,EAAQ,MAAA;YACRC,WAAAA,EAAa,SAAA;YACbC,OAAAA,EAAS;gBACPC,MAAAA,EAAQ,kBAAA;gBACR,cAAA,EAAgB;AAClB;AACF,SAAA,CAAA;QAEA,IAAI,CAACL,QAAAA,CAASM,EAAE,EAAE;AAChBC,YAAAA,OAAAA,CAAQC,IAAI,CAAC,0CAAA,EAA4CR,QAAAA,CAASS,MAAM,CAAA;YACxE,OAAO,IAAA;AACT,QAAA;QAEA,MAAMC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;QAClC,MAAMxB,KAAAA,GAAQuB,QAAQE,IAAAA,EAAMzB,KAAAA;AAE5B,QAAA,IAAI,CAACA,KAAAA,EAAO;AACVoB,YAAAA,OAAAA,CAAQC,IAAI,CAAC,6CAAA,CAAA;YACb,OAAO,IAAA;AACT,QAAA;QAEAtB,UAAAA,CAAWC,KAAAA,CAAAA;QACX,OAAOA,KAAAA;AACT,IAAA,CAAA,CAAE,OAAO0B,KAAAA,EAAO;QACdN,OAAAA,CAAQM,KAAK,CAAC,6BAAA,EAA+BA,KAAAA,CAAAA;QAC7C,OAAO,IAAA;AACT,IAAA;AACF,CAAA;AAEA;;;;;;;AAOC,UACKC,mBAAAA,GAAsB,UAAA;AAC1B,IAAA,IAAI,CAACnC,cAAAA,EAAgB;QACnBA,cAAAA,GAAiBiB,kBAAAA,EAAAA,CAAqBmB,OAAO,CAAC,IAAA;YAC5CpC,cAAAA,GAAiB,IAAA;AACnB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAMqC,WAAW,MAAMrC,cAAAA;AACvB,IAAA,IAAI,CAACqC,QAAAA,EAAU;QACb,MAAMH,KAAAA,GAAQ,IAAII,KAAAA,CAAM,uCAAA,CAAA;AACxBJ,QAAAA,KAAAA,CAAMK,IAAI,GAAG,mBAAA;QACb,MAAML,KAAAA;AACR,IAAA;IAEA,OAAOG,QAAAA;AACT;AAyBA,MAAMG,UAAAA,SAAmBF,KAAAA,CAAAA;IAOvB,WAAA,CAAYG,OAAe,EAAEpB,QAAwB,CAAE;AACrD,QAAA,KAAK,CAACoB,OAAAA,CAAAA;QACN,IAAI,CAACF,IAAI,GAAG,YAAA;QACZ,IAAI,CAACE,OAAO,GAAGA,OAAAA;QACf,IAAI,CAACpB,QAAQ,GAAGA,QAAAA;AAChB,QAAA,IAAI,CAACqB,IAAI,GAAGrB,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;AACnC,QAAA,IAAI,CAACA,MAAM,GAAGT,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;;QAGrC,IAAIQ,KAAAA,CAAMK,iBAAiB,EAAE;YAC3BL,KAAAA,CAAMK,iBAAiB,CAAC,IAAI,EAAEH,UAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;AACF;AAEA,MAAMI,eAAe,CAACV,KAAAA,GAAAA;AACpB,IAAA,OAAOA,KAAAA,YAAiBM,UAAAA;AAC1B;AAEA,MAAMK,QAAAA,GAAW,IAAA;AACf,IAAA,MAAMC,gBAAAA,GAAmBnC,YAAAA,CAAaC,OAAO,CAACd,aAAaC,KAAK,CAAA;AAChE,IAAA,IAAI+C,gBAAAA,EAAkB;QACpB,OAAOhC,IAAAA,CAAKiC,KAAK,CAACD,gBAAAA,CAAAA;AACpB,IAAA;IAEA,MAAME,UAAAA,GAAaC,sBAAAA,CAAenD,YAAAA,CAAaC,KAAK,CAAA;AACpD,IAAA,OAAOiD,UAAAA,IAAc,IAAA;AACvB,CAAA;AAiBA;;;;;;;;;;;;;;;;;;;AAmBC,IACD,MAAME,cAAAA,GAAiB,CAACC,cAAAA,GAA8B,EAAE,GAAA;AACtD,IAAA,MAAMjC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;AAE3C;;;MAIA,MAAMkC,iBAAAA,GAAoB,KAAO;YAC/B1B,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB,kBAAA;YAChB2B,aAAAA,EAAe,CAAC,OAAO,EAAER,QAAAA,EAAAA,CAAAA;SAC3B,CAAA;IAEA,MAAMS,iBAAAA,GAAoB,CAACC,IAAAA,GAAkBA,IAAAA,YAAgBC,QAAAA;AAC7D,IAAA,MAAMC,kBAAAA,GAAqB,CAACpD,GAAAA,GAAiBA,GAAAA,CAAIqD,MAAM,CAAC,CAAA,CAAA,KAAO,GAAA,GAAM,CAAC,CAAC,EAAErD,GAAAA,CAAAA,CAAK,GAAGA,GAAAA;;IAGjF,MAAMsD,WAAAA,GAAc,CAACtD,GAAAA,GAAgB,IAAIuD,OAAO,kBAAA,EAAoB,GAAA,CAAA,CAAKtD,IAAI,CAACD,GAAAA,CAAAA;;AAG9E,IAAA,MAAMwD,eAAe,CAACxD,GAAAA,GAAiBsD,WAAAA,CAAYtD,GAAAA,CAAAA,GAAOA,MAAMoD,kBAAAA,CAAmBpD,GAAAA,CAAAA;;IAGnF,MAAMyD,mBAAAA,GAAsB,OAC1BzC,QAAAA,EACA0C,cAAAA,GAAAA;QAEA,IAAI;YACF,MAAMhC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;AAElC;;;;AAIC,UACD,IAAI,CAACX,QAAAA,CAASM,EAAE,IAAII,MAAAA,CAAOG,KAAK,IAAI,CAAC6B,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;AACtE,gBAAA,MAAMkC,aAAa,IAAIxB,UAAAA,CAAWT,OAAOG,KAAK,CAACO,OAAO,EAAE;oBAAER,IAAAA,EAAMF;AAAO,iBAAA,CAAA;gBACvEiC,UAAAA,CAAWlC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMkC,UAAAA;AACR,YAAA;YAEA,IAAI,CAAC3C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMkC,UAAAA,GAAa,IAAIxB,UAAAA,CAAW,sBAAA,CAAA;gBAClCwB,UAAAA,CAAWlC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMkC,UAAAA;AACR,YAAA;YAEA,OAAO;gBAAE/B,IAAAA,EAAMF;AAAO,aAAA;AACxB,QAAA,CAAA,CAAE,OAAOG,KAAAA,EAAO;AACd,YAAA,IAAIA,KAAAA,YAAiB+B,WAAAA,IAAe5C,QAAAA,CAASM,EAAE,EAAE;;gBAE/C,OAAO;AAAEM,oBAAAA,IAAAA,EAAM,EAAE;AAAEH,oBAAAA,MAAAA,EAAQT,SAASS;AAAO,iBAAA;YAC7C,CAAA,MAAO;gBACL,MAAMI,KAAAA;AACR,YAAA;AACF,QAAA;AACF,IAAA,CAAA;AAEA;;;;MAKA,MAAMgC,gBAAAA,GAAmB,OACvB7D,GAAAA,EACA8D,cAAAA,GAAAA;QAEA,IAAI;AACF,YAAA,OAAO,MAAMA,cAAAA,EAAAA;AACf,QAAA,CAAA,CAAE,OAAOjC,KAAAA,EAAO;;YAEd,IAAIU,YAAAA,CAAaV,UAAUA,KAAAA,CAAMJ,MAAM,KAAK,GAAA,IAAO,CAAC1B,WAAWC,GAAAA,CAAAA,EAAM;gBACnE,IAAI;oBACF,MAAM8B,mBAAAA,EAAAA;;AAEN,oBAAA,OAAO,MAAMgC,cAAAA,EAAAA;AACf,gBAAA,CAAA,CAAE,OAAM;;oBAEN,MAAMjC,KAAAA;AACR,gBAAA;AACF,YAAA;YACA,MAAMA,KAAAA;AACR,QAAA;AACF,IAAA,CAAA;IAEA,MAAMkC,gBAAAA,GACJ,CAAkBC,MAAAA,GAClB,CAAChE,GAAAA,GAAAA;AACC,YAAA,IAAIgE,MAAAA,EAAQ;gBACV,IAAI,OAAOA,WAAW,QAAA,EAAU;AAC9B,oBAAA,OAAO,CAAA,EAAGhE,GAAAA,CAAI,CAAC,EAAEgE,MAAAA,CAAAA,CAAQ;AAC3B,gBAAA;AAEA;;;;AAIC,YACD,MAAMC,gBAAAA,GAAmBC,EAAAA,CAAGxD,SAAS,CAACsD,MAAAA,EAAQ;oBAAEG,MAAAA,EAAQ;AAAM,iBAAA,CAAA;AAC9D,gBAAA,OAAO,CAAA,EAAGnE,GAAAA,CAAI,CAAC,EAAEiE,gBAAAA,CAAAA,CAAkB;AACrC,YAAA;YACA,OAAOjE,GAAAA;AACT,QAAA,CAAA;AAEF,IAAA,MAAMoE,aAAa,CAACpE,GAAAA,GAAAA;QAClB,OAAO,CAAA,EAAGa,aAAab,GAAAA,CAAAA,CAAK;AAC9B,IAAA,CAAA;AAEA;;;MAIA,MAAMqE,uBAAuB,CAACC,OAAAA,GAC5BC,KAAKf,YAAAA,EAAcY,UAAAA,EAAYL,iBAAiBO,OAAAA,EAASN,MAAAA,CAAAA,CAAAA;AAE3D,IAAA,MAAMQ,WAAAA,GAA2B;AAC/BC,QAAAA,GAAAA,EAAK,OAAczE,GAAAA,EAAasE,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM1C,OAAAA,GAAU,IAAIuD,OAAAA,CAAQ;AAC1B,oBAAA,GAAG5B,iBAAAA,EAAmB;AACtB,oBAAA,GAAGuB,SAASlD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAMyD,gBAAAA,CAAiB1E,GAAAA,CAAAA,EAAM;oBAClD4E,MAAAA,EAAQN,OAAAA,EAASM,MAAAA,IAAU9B,cAAAA,CAAe8B,MAAM;oBAChD1D,MAAAA,EAAQ,KAAA;AACRE,oBAAAA;AACF,iBAAA,CAAA;gBAEA,OAAOqC,mBAAAA,CAA2BzC,UAAUsD,OAAAA,EAASZ,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOG,iBAAiB7D,GAAAA,EAAK8D,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAe,IAAAA,EAAM,OACJ7E,KACA4B,IAAAA,EACA0C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM1C,OAAAA,GAAU,IAAIuD,OAAAA,CAAQ;AAC1B,oBAAA,GAAG5B,iBAAAA,EAAmB;AACtB,oBAAA,GAAGuB,SAASlD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ0D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAM9D,QAAAA,GAAW,MAAMC,KAAAA,CAAMyD,gBAAAA,CAAiB1E,GAAAA,CAAAA,EAAM;oBAClD4E,MAAAA,EAAQN,OAAAA,EAASM,MAAAA,IAAU9B,cAAAA,CAAe8B,MAAM;oBAChD1D,MAAAA,EAAQ,MAAA;AACRE,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBnB,IAAAA,CAAKC,SAAS,CAACkB,IAAAA;AACtE,iBAAA,CAAA;gBACA,OAAO6B,mBAAAA,CAA2BzC,UAAUsD,OAAAA,EAASZ,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOG,iBAAiB7D,GAAAA,EAAK8D,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAiB,GAAAA,EAAK,OACH/E,KACA4B,IAAAA,EACA0C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM1C,OAAAA,GAAU,IAAIuD,OAAAA,CAAQ;AAC1B,oBAAA,GAAG5B,iBAAAA,EAAmB;AACtB,oBAAA,GAAGuB,SAASlD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ0D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAM9D,QAAAA,GAAW,MAAMC,KAAAA,CAAMyD,gBAAAA,CAAiB1E,GAAAA,CAAAA,EAAM;oBAClD4E,MAAAA,EAAQN,OAAAA,EAASM,MAAAA,IAAU9B,cAAAA,CAAe8B,MAAM;oBAChD1D,MAAAA,EAAQ,KAAA;AACRE,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBnB,IAAAA,CAAKC,SAAS,CAACkB,IAAAA;AACtE,iBAAA,CAAA;gBAEA,OAAO6B,mBAAAA,CAA2BzC,UAAUsD,OAAAA,EAASZ,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOG,iBAAiB7D,GAAAA,EAAK8D,cAAAA,CAAAA;AAC/B,QAAA,CAAA;AACAkB,QAAAA,GAAAA,EAAK,OAAchF,GAAAA,EAAasE,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM1C,OAAAA,GAAU,IAAIuD,OAAAA,CAAQ;AAC1B,oBAAA,GAAG5B,iBAAAA,EAAmB;AACtB,oBAAA,GAAGuB,SAASlD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAMyD,gBAAAA,CAAiB1E,GAAAA,CAAAA,EAAM;oBAClD4E,MAAAA,EAAQN,OAAAA,EAASM,MAAAA,IAAU9B,cAAAA,CAAe8B,MAAM;oBAChD1D,MAAAA,EAAQ,QAAA;AACRE,oBAAAA;AACF,iBAAA,CAAA;gBACA,OAAOqC,mBAAAA,CAA2BzC,UAAUsD,OAAAA,EAASZ,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOG,iBAAiB7D,GAAAA,EAAK8D,cAAAA,CAAAA;AAC/B,QAAA;AACF,KAAA;IAEA,OAAOU,WAAAA;AACT;;;;;;;;;"}
+{"version":3,"file":"getFetchClient.js","sources":["../../../../../admin/src/utils/getFetchClient.ts"],"sourcesContent":["import pipe from 'lodash/fp/pipe';\n// eslint-disable-next-line import/default\nimport qs from 'qs';\n\nimport { getCookieValue, setCookie } from './cookies';\n\nimport type { errors } from '@strapi/utils';\n\nexport type ApiError =\n  | errors.ApplicationError\n  | errors.ForbiddenError\n  | errors.NotFoundError\n  | errors.NotImplementedError\n  | errors.PaginationError\n  | errors.PayloadTooLargeError\n  | errors.PolicyError\n  | errors.RateLimitError\n  | errors.UnauthorizedError\n  | errors.ValidationError\n  | errors.YupValidationError;\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  USER: 'userInfo',\n};\n\n/**\n * Module-level promise to ensure only one token refresh happens at a time\n */\nlet refreshPromise: Promise<string | null> | null = null;\n\n/**\n * Callback to notify the app when the token is updated (e.g., to update Redux state)\n */\nlet onTokenUpdate: ((token: string) => void) | null = null;\n\n/**\n * Set the callback that will be called when the token is refreshed.\n * This allows the React layer to update Redux state when a token refresh occurs.\n *\n * @param callback - Function to call with the new token, or null to clear\n * @example\n * // In a React component\n * useEffect(() => {\n *   setOnTokenUpdate((token) => dispatch(setToken(token)));\n *   return () => setOnTokenUpdate(null);\n * }, [dispatch]);\n */\nconst setOnTokenUpdate = (callback: ((token: string) => void) | null): void => {\n  onTokenUpdate = callback;\n};\n\n/**\n * Check if the URL is an auth path that should not trigger token refresh.\n * Note: No ^ anchor since the URL may include the baseURL prefix (e.g., \"http://localhost:1337/admin/login\").\n * This differs from baseQuery.ts which uses ^/admin since it receives normalized paths.\n */\nconst isAuthPath = (url: string) => /\\/admin\\/(login|logout|access-token)\\b/.test(url);\n\n/**\n * Store the new token in the appropriate storage (localStorage or cookie)\n * and notify the app to update its state.\n *\n * Uses localStorage if the user selected \"remember me\" during login,\n * otherwise uses cookies for session-based storage.\n *\n * @param token - The JWT token to store\n * @internal Exported for testing purposes\n */\nconst storeToken = (token: string): void => {\n  // Check if the original token was stored in localStorage (persist mode)\n  const wasPersistedToLocalStorage = Boolean(localStorage.getItem(STORAGE_KEYS.TOKEN));\n\n  if (wasPersistedToLocalStorage) {\n    localStorage.setItem(STORAGE_KEYS.TOKEN, JSON.stringify(token));\n  } else {\n    setCookie(STORAGE_KEYS.TOKEN, token);\n  }\n\n  // Notify the app to update its state (e.g., Redux)\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n};\n\n/**\n * Refresh the access token by calling the /admin/access-token endpoint.\n * This uses a low-level fetch to avoid recursion through the interceptor.\n * Returns the new token on success, or null on failure.\n */\nconst refreshAccessToken = async (): Promise<string | null> => {\n  const backendURL = window.strapi.backendURL;\n\n  try {\n    const response = await fetch(`${backendURL}/admin/access-token`, {\n      method: 'POST',\n      credentials: 'include', // Include cookies for the refresh token\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n    });\n\n    if (!response.ok) {\n      console.warn('[Auth] Token refresh failed with status:', response.status);\n      return null;\n    }\n\n    const result = await response.json();\n    const token = result?.data?.token as string | undefined;\n\n    if (!token) {\n      console.warn('[Auth] Token refresh response missing token');\n      return null;\n    }\n\n    storeToken(token);\n    return token;\n  } catch (error) {\n    console.error('[Auth] Token refresh error:', error);\n    return null;\n  }\n};\n\n/**\n * Attempt to refresh the token if not already refreshing.\n * Uses a module-level promise to prevent concurrent refresh requests.\n *\n * @returns The new authentication token\n * @throws {Error} If the token refresh fails (e.g., refresh token expired)\n * @internal Exported for testing purposes\n */\nconst attemptTokenRefresh = async (): Promise<string> => {\n  if (!refreshPromise) {\n    refreshPromise = refreshAccessToken().finally(() => {\n      refreshPromise = null;\n    });\n  }\n\n  const newToken = await refreshPromise;\n  if (!newToken) {\n    const error = new Error('Session expired. Please log in again.');\n    error.name = 'TokenRefreshError';\n    throw error;\n  }\n\n  return newToken;\n};\n\ntype FetchResponse<TData = any> = {\n  data: TData;\n  status?: number;\n  headers?: Headers;\n};\n\ntype FetchOptions = {\n  params?: any;\n  signal?: AbortSignal;\n  headers?: Record<string, string>;\n  validateStatus?: ((status: number) => boolean) | null;\n  responseType?: 'json' | 'blob' | 'text' | 'arrayBuffer';\n};\n\ntype FetchConfig = {\n  signal?: AbortSignal;\n};\n\ninterface ErrorResponse {\n  data: {\n    data?: any;\n    error: ApiError & { status?: number };\n  };\n}\n\nclass FetchError extends Error {\n  public name: string;\n  public message: string;\n  public response?: ErrorResponse;\n  public code?: number;\n  public status?: number;\n\n  constructor(message: string, response?: ErrorResponse) {\n    super(message);\n    this.name = 'FetchError';\n    this.message = message;\n    this.response = response;\n    this.code = response?.data?.error?.status;\n    this.status = response?.data?.error?.status;\n\n    // Ensure correct stack trace in error object\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, FetchError);\n    }\n  }\n}\n\nconst isFetchError = (error: unknown): error is FetchError => {\n  return error instanceof FetchError;\n};\n\nconst getToken = (): string | null => {\n  const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);\n  if (fromLocalStorage) {\n    return JSON.parse(fromLocalStorage);\n  }\n\n  const fromCookie = getCookieValue(STORAGE_KEYS.TOKEN);\n  return fromCookie ?? null;\n};\n\ntype FetchClient = {\n  get: {\n    (url: string, config: FetchOptions & { responseType: 'blob' }): Promise<FetchResponse<Blob>>;\n    (url: string, config: FetchOptions & { responseType: 'text' }): Promise<FetchResponse<string>>;\n    (\n      url: string,\n      config: FetchOptions & { responseType: 'arrayBuffer' }\n    ): Promise<FetchResponse<ArrayBuffer>>;\n    <TData = any>(url: string, config?: FetchOptions): Promise<FetchResponse<TData>>;\n  };\n  put: <TData = any, TSend = any>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  post: <TData = any, TSend = any>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  del: <TData = any>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n};\n\n/**\n * @public\n * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.\n * @returns {FetchClient} A fetch client object with methods for making HTTP requests.\n * @description This is an abstraction around the native fetch exposed by a function. It provides a simple interface to handle API calls\n * to the Strapi backend.\n * @example\n * ```tsx\n * import { getFetchClient } from '@strapi/admin/admin';\n *\n * const myFunct = () => {\n *   const { get } = getFetchClient();\n *   const requestURL = \"/some-endpoint\";\n *\n *   const { data } = await get(requestURL);\n *\n *   return data;\n * };\n * ```\n */\nconst getFetchClient = (defaultOptions: FetchConfig = {}): FetchClient => {\n  const backendURL = window.strapi.backendURL;\n\n  /**\n   * Create default headers with the current token.\n   * This is a function so we can get a fresh token after refresh.\n   */\n  const getDefaultHeaders = () => ({\n    Accept: 'application/json',\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${getToken()}`,\n  });\n\n  const isFormDataRequest = (body: unknown) => body instanceof FormData;\n  const addPrependingSlash = (url: string) => (url.charAt(0) !== '/' ? `/${url}` : url);\n\n  // This regular expression matches a string that starts with either \"http://\" or \"https://\" or any other protocol name in lower case letters, followed by \"://\" and ends with anything else\n  const hasProtocol = (url: string) => new RegExp('^(?:[a-z+]+:)?//', 'i').test(url);\n\n  // Check if the url has a prepending slash, if not add a slash\n  const normalizeUrl = (url: string) => (hasProtocol(url) ? url : addPrependingSlash(url));\n\n  // Add a response interceptor to return the response\n  const responseInterceptor = async <TData = any>(\n    response: Response,\n    validateStatus?: FetchOptions['validateStatus'],\n    responseType: NonNullable<FetchOptions['responseType']> = 'json'\n  ): Promise<FetchResponse<TData>> => {\n    if (responseType !== 'json') {\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      let result: Blob | string | ArrayBuffer;\n      if (responseType === 'blob') {\n        result = await response.blob();\n      } else if (responseType === 'text') {\n        result = await response.text();\n      } else {\n        result = await response.arrayBuffer();\n      }\n\n      return { data: result as TData, status: response.status, headers: response.headers };\n    }\n\n    try {\n      const result = await response.json();\n\n      /**\n       * validateStatus allows us to customize when a response should throw an error\n       * In native Fetch API, a response is considered \"not ok\"\n       * when the status code falls in the 200 to 299 (inclusive) range\n       */\n      if (!response.ok && result.error && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError(result.error.message, { data: result });\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Unknown Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      return { data: result };\n    } catch (error) {\n      if (error instanceof SyntaxError && response.ok) {\n        // Making sure that a SyntaxError doesn't throw if it's successful\n        return { data: [], status: response.status } as FetchResponse<any>;\n      } else {\n        throw error;\n      }\n    }\n  };\n\n  /**\n   * Execute a fetch request with automatic token refresh on 401 errors.\n   * @param url - The request URL (used to check if it's an auth path)\n   * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)\n   */\n  const withTokenRefresh = async <TData>(\n    url: string,\n    executeRequest: () => Promise<FetchResponse<TData>>\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      return await executeRequest();\n    } catch (error) {\n      // Only attempt refresh for 401 errors on non-auth paths\n      if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {\n        try {\n          await attemptTokenRefresh();\n          // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token\n          return await executeRequest();\n        } catch {\n          // If refresh fails, throw the original error\n          throw error;\n        }\n      }\n      throw error;\n    }\n  };\n\n  const paramsSerializer =\n    <Param = unknown>(params?: Param) =>\n    (url: string) => {\n      if (params) {\n        if (typeof params === 'string') {\n          return `${url}?${params}`;\n        }\n\n        /**\n         * TODO V6: Encoding should be enabled in this step\n         * So the rest of the app doesn't have to worry about it,\n         * It's considered a breaking change because it impacts any API request, including the user's custom code\n         */\n        const serializedParams = qs.stringify(params, { encode: false });\n        if (serializedParams) {\n          return `${url}?${serializedParams}`;\n        }\n        return url;\n      }\n      return url;\n    };\n\n  const addBaseUrl = (url: Parameters<typeof fetch>[0]) => {\n    return `${backendURL}${url}`;\n  };\n\n  /**\n   * We use the factory method because the options\n   * are unique to the individual request\n   */\n  const makeCreateRequestUrl = (options?: FetchOptions) =>\n    pipe(normalizeUrl, addBaseUrl, paramsSerializer(options?.params));\n\n  const fetchClient: FetchClient = {\n    get: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      const responseType = options?.responseType ?? 'json';\n\n      const executeRequest = async () => {\n        const { Authorization } = getDefaultHeaders();\n\n        // For non-JSON response types, omit content negotiation headers that imply JSON\n        const defaultHeaders = responseType === 'json' ? getDefaultHeaders() : { Authorization };\n\n        const headers = new Headers({\n          ...defaultHeaders,\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'GET',\n          headers,\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus, responseType);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    post: async <TData, TSend = any>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'POST',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    put: async <TData, TSend = any>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'PUT',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    del: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'DELETE',\n          headers,\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n  };\n\n  return fetchClient;\n};\n\nexport {\n  getFetchClient,\n  isFetchError,\n  FetchError,\n  attemptTokenRefresh,\n  storeToken,\n  setOnTokenUpdate,\n};\nexport type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };\n"],"names":["STORAGE_KEYS","TOKEN","refreshPromise","onTokenUpdate","setOnTokenUpdate","callback","isAuthPath","url","test","storeToken","token","wasPersistedToLocalStorage","Boolean","localStorage","getItem","setItem","JSON","stringify","setCookie","refreshAccessToken","backendURL","window","strapi","response","fetch","method","credentials","headers","Accept","ok","console","warn","status","result","json","data","error","attemptTokenRefresh","finally","newToken","Error","name","FetchError","message","code","captureStackTrace","isFetchError","getToken","fromLocalStorage","parse","fromCookie","getCookieValue","getFetchClient","defaultOptions","getDefaultHeaders","Authorization","isFormDataRequest","body","FormData","addPrependingSlash","charAt","hasProtocol","RegExp","normalizeUrl","responseInterceptor","validateStatus","responseType","fetchError","blob","text","arrayBuffer","SyntaxError","withTokenRefresh","executeRequest","paramsSerializer","params","serializedParams","qs","encode","addBaseUrl","makeCreateRequestUrl","options","pipe","fetchClient","get","createRequestUrl","defaultHeaders","Headers","signal","post","delete","put","del"],"mappings":";;;;;;AAqBA,MAAMA,YAAAA,GAAe;IACnBC,KAAAA,EAAO,UAET,CAAA;AAEA;;AAEC,IACD,IAAIC,cAAAA,GAAgD,IAAA;AAEpD;;AAEC,IACD,IAAIC,aAAAA,GAAkD,IAAA;AAEtD;;;;;;;;;;;IAYA,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxBF,aAAAA,GAAgBE,QAAAA;AAClB;AAEA;;;;AAIC,IACD,MAAMC,UAAAA,GAAa,CAACC,GAAAA,GAAgB,wCAAA,CAAyCC,IAAI,CAACD,GAAAA,CAAAA;AAElF;;;;;;;;;IAUA,MAAME,aAAa,CAACC,KAAAA,GAAAA;;AAElB,IAAA,MAAMC,6BAA6BC,OAAAA,CAAQC,YAAAA,CAAaC,OAAO,CAACd,aAAaC,KAAK,CAAA,CAAA;AAElF,IAAA,IAAIU,0BAAAA,EAA4B;AAC9BE,QAAAA,YAAAA,CAAaE,OAAO,CAACf,YAAAA,CAAaC,KAAK,EAAEe,IAAAA,CAAKC,SAAS,CAACP,KAAAA,CAAAA,CAAAA;IAC1D,CAAA,MAAO;QACLQ,iBAAAA,CAAUlB,YAAAA,CAAaC,KAAK,EAAES,KAAAA,CAAAA;AAChC,IAAA;;AAGA,IAAA,IAAIP,aAAAA,EAAe;QACjBA,aAAAA,CAAcO,KAAAA,CAAAA;AAChB,IAAA;AACF;AAEA;;;;AAIC,IACD,MAAMS,kBAAAA,GAAqB,UAAA;AACzB,IAAA,MAAMC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;IAE3C,IAAI;AACF,QAAA,MAAMG,WAAW,MAAMC,KAAAA,CAAM,GAAGJ,UAAAA,CAAW,mBAAmB,CAAC,EAAE;YAC/DK,MAAAA,EAAQ,MAAA;YACRC,WAAAA,EAAa,SAAA;YACbC,OAAAA,EAAS;gBACPC,MAAAA,EAAQ,kBAAA;gBACR,cAAA,EAAgB;AAClB;AACF,SAAA,CAAA;QAEA,IAAI,CAACL,QAAAA,CAASM,EAAE,EAAE;AAChBC,YAAAA,OAAAA,CAAQC,IAAI,CAAC,0CAAA,EAA4CR,QAAAA,CAASS,MAAM,CAAA;YACxE,OAAO,IAAA;AACT,QAAA;QAEA,MAAMC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;QAClC,MAAMxB,KAAAA,GAAQuB,QAAQE,IAAAA,EAAMzB,KAAAA;AAE5B,QAAA,IAAI,CAACA,KAAAA,EAAO;AACVoB,YAAAA,OAAAA,CAAQC,IAAI,CAAC,6CAAA,CAAA;YACb,OAAO,IAAA;AACT,QAAA;QAEAtB,UAAAA,CAAWC,KAAAA,CAAAA;QACX,OAAOA,KAAAA;AACT,IAAA,CAAA,CAAE,OAAO0B,KAAAA,EAAO;QACdN,OAAAA,CAAQM,KAAK,CAAC,6BAAA,EAA+BA,KAAAA,CAAAA;QAC7C,OAAO,IAAA;AACT,IAAA;AACF,CAAA;AAEA;;;;;;;AAOC,UACKC,mBAAAA,GAAsB,UAAA;AAC1B,IAAA,IAAI,CAACnC,cAAAA,EAAgB;QACnBA,cAAAA,GAAiBiB,kBAAAA,EAAAA,CAAqBmB,OAAO,CAAC,IAAA;YAC5CpC,cAAAA,GAAiB,IAAA;AACnB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAMqC,WAAW,MAAMrC,cAAAA;AACvB,IAAA,IAAI,CAACqC,QAAAA,EAAU;QACb,MAAMH,KAAAA,GAAQ,IAAII,KAAAA,CAAM,uCAAA,CAAA;AACxBJ,QAAAA,KAAAA,CAAMK,IAAI,GAAG,mBAAA;QACb,MAAML,KAAAA;AACR,IAAA;IAEA,OAAOG,QAAAA;AACT;AA2BA,MAAMG,UAAAA,SAAmBF,KAAAA,CAAAA;IAOvB,WAAA,CAAYG,OAAe,EAAEpB,QAAwB,CAAE;AACrD,QAAA,KAAK,CAACoB,OAAAA,CAAAA;QACN,IAAI,CAACF,IAAI,GAAG,YAAA;QACZ,IAAI,CAACE,OAAO,GAAGA,OAAAA;QACf,IAAI,CAACpB,QAAQ,GAAGA,QAAAA;AAChB,QAAA,IAAI,CAACqB,IAAI,GAAGrB,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;AACnC,QAAA,IAAI,CAACA,MAAM,GAAGT,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;;QAGrC,IAAIQ,KAAAA,CAAMK,iBAAiB,EAAE;YAC3BL,KAAAA,CAAMK,iBAAiB,CAAC,IAAI,EAAEH,UAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;AACF;AAEA,MAAMI,eAAe,CAACV,KAAAA,GAAAA;AACpB,IAAA,OAAOA,KAAAA,YAAiBM,UAAAA;AAC1B;AAEA,MAAMK,QAAAA,GAAW,IAAA;AACf,IAAA,MAAMC,gBAAAA,GAAmBnC,YAAAA,CAAaC,OAAO,CAACd,aAAaC,KAAK,CAAA;AAChE,IAAA,IAAI+C,gBAAAA,EAAkB;QACpB,OAAOhC,IAAAA,CAAKiC,KAAK,CAACD,gBAAAA,CAAAA;AACpB,IAAA;IAEA,MAAME,UAAAA,GAAaC,sBAAAA,CAAenD,YAAAA,CAAaC,KAAK,CAAA;AACpD,IAAA,OAAOiD,UAAAA,IAAc,IAAA;AACvB,CAAA;AAyBA;;;;;;;;;;;;;;;;;;;AAmBC,IACD,MAAME,cAAAA,GAAiB,CAACC,cAAAA,GAA8B,EAAE,GAAA;AACtD,IAAA,MAAMjC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;AAE3C;;;MAIA,MAAMkC,iBAAAA,GAAoB,KAAO;YAC/B1B,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB,kBAAA;YAChB2B,aAAAA,EAAe,CAAC,OAAO,EAAER,QAAAA,EAAAA,CAAAA;SAC3B,CAAA;IAEA,MAAMS,iBAAAA,GAAoB,CAACC,IAAAA,GAAkBA,IAAAA,YAAgBC,QAAAA;AAC7D,IAAA,MAAMC,kBAAAA,GAAqB,CAACpD,GAAAA,GAAiBA,GAAAA,CAAIqD,MAAM,CAAC,CAAA,CAAA,KAAO,GAAA,GAAM,CAAC,CAAC,EAAErD,GAAAA,CAAAA,CAAK,GAAGA,GAAAA;;IAGjF,MAAMsD,WAAAA,GAAc,CAACtD,GAAAA,GAAgB,IAAIuD,OAAO,kBAAA,EAAoB,GAAA,CAAA,CAAKtD,IAAI,CAACD,GAAAA,CAAAA;;AAG9E,IAAA,MAAMwD,eAAe,CAACxD,GAAAA,GAAiBsD,WAAAA,CAAYtD,GAAAA,CAAAA,GAAOA,MAAMoD,kBAAAA,CAAmBpD,GAAAA,CAAAA;;AAGnF,IAAA,MAAMyD,mBAAAA,GAAsB,OAC1BzC,QAAAA,EACA0C,cAAAA,EACAC,eAA0D,MAAM,GAAA;AAEhE,QAAA,IAAIA,iBAAiB,MAAA,EAAQ;YAC3B,IAAI,CAAC3C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMmC,UAAAA,GAAa,IAAIzB,UAAAA,CAAW,cAAA,CAAA;gBAClCyB,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,IAAIlC,MAAAA;AACJ,YAAA,IAAIiC,iBAAiB,MAAA,EAAQ;gBAC3BjC,MAAAA,GAAS,MAAMV,SAAS6C,IAAI,EAAA;YAC9B,CAAA,MAAO,IAAIF,iBAAiB,MAAA,EAAQ;gBAClCjC,MAAAA,GAAS,MAAMV,SAAS8C,IAAI,EAAA;YAC9B,CAAA,MAAO;gBACLpC,MAAAA,GAAS,MAAMV,SAAS+C,WAAW,EAAA;AACrC,YAAA;YAEA,OAAO;gBAAEnC,IAAAA,EAAMF,MAAAA;AAAiBD,gBAAAA,MAAAA,EAAQT,SAASS,MAAM;AAAEL,gBAAAA,OAAAA,EAASJ,SAASI;AAAQ,aAAA;AACrF,QAAA;QAEA,IAAI;YACF,MAAMM,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;AAElC;;;;AAIC,UACD,IAAI,CAACX,QAAAA,CAASM,EAAE,IAAII,MAAAA,CAAOG,KAAK,IAAI,CAAC6B,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;AACtE,gBAAA,MAAMmC,aAAa,IAAIzB,UAAAA,CAAWT,OAAOG,KAAK,CAACO,OAAO,EAAE;oBAAER,IAAAA,EAAMF;AAAO,iBAAA,CAAA;gBACvEkC,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,IAAI,CAAC5C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMmC,UAAAA,GAAa,IAAIzB,UAAAA,CAAW,sBAAA,CAAA;gBAClCyB,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,OAAO;gBAAEhC,IAAAA,EAAMF;AAAO,aAAA;AACxB,QAAA,CAAA,CAAE,OAAOG,KAAAA,EAAO;AACd,YAAA,IAAIA,KAAAA,YAAiBmC,WAAAA,IAAehD,QAAAA,CAASM,EAAE,EAAE;;gBAE/C,OAAO;AAAEM,oBAAAA,IAAAA,EAAM,EAAE;AAAEH,oBAAAA,MAAAA,EAAQT,SAASS;AAAO,iBAAA;YAC7C,CAAA,MAAO;gBACL,MAAMI,KAAAA;AACR,YAAA;AACF,QAAA;AACF,IAAA,CAAA;AAEA;;;;MAKA,MAAMoC,gBAAAA,GAAmB,OACvBjE,GAAAA,EACAkE,cAAAA,GAAAA;QAEA,IAAI;AACF,YAAA,OAAO,MAAMA,cAAAA,EAAAA;AACf,QAAA,CAAA,CAAE,OAAOrC,KAAAA,EAAO;;YAEd,IAAIU,YAAAA,CAAaV,UAAUA,KAAAA,CAAMJ,MAAM,KAAK,GAAA,IAAO,CAAC1B,WAAWC,GAAAA,CAAAA,EAAM;gBACnE,IAAI;oBACF,MAAM8B,mBAAAA,EAAAA;;AAEN,oBAAA,OAAO,MAAMoC,cAAAA,EAAAA;AACf,gBAAA,CAAA,CAAE,OAAM;;oBAEN,MAAMrC,KAAAA;AACR,gBAAA;AACF,YAAA;YACA,MAAMA,KAAAA;AACR,QAAA;AACF,IAAA,CAAA;IAEA,MAAMsC,gBAAAA,GACJ,CAAkBC,MAAAA,GAClB,CAACpE,GAAAA,GAAAA;AACC,YAAA,IAAIoE,MAAAA,EAAQ;gBACV,IAAI,OAAOA,WAAW,QAAA,EAAU;AAC9B,oBAAA,OAAO,CAAA,EAAGpE,GAAAA,CAAI,CAAC,EAAEoE,MAAAA,CAAAA,CAAQ;AAC3B,gBAAA;AAEA;;;;AAIC,YACD,MAAMC,gBAAAA,GAAmBC,EAAAA,CAAG5D,SAAS,CAAC0D,MAAAA,EAAQ;oBAAEG,MAAAA,EAAQ;AAAM,iBAAA,CAAA;AAC9D,gBAAA,IAAIF,gBAAAA,EAAkB;AACpB,oBAAA,OAAO,CAAA,EAAGrE,GAAAA,CAAI,CAAC,EAAEqE,gBAAAA,CAAAA,CAAkB;AACrC,gBAAA;gBACA,OAAOrE,GAAAA;AACT,YAAA;YACA,OAAOA,GAAAA;AACT,QAAA,CAAA;AAEF,IAAA,MAAMwE,aAAa,CAACxE,GAAAA,GAAAA;QAClB,OAAO,CAAA,EAAGa,aAAab,GAAAA,CAAAA,CAAK;AAC9B,IAAA,CAAA;AAEA;;;MAIA,MAAMyE,uBAAuB,CAACC,OAAAA,GAC5BC,KAAKnB,YAAAA,EAAcgB,UAAAA,EAAYL,iBAAiBO,OAAAA,EAASN,MAAAA,CAAAA,CAAAA;AAE3D,IAAA,MAAMQ,WAAAA,GAA2B;AAC/BC,QAAAA,GAAAA,EAAK,OAAc7E,GAAAA,EAAa0E,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;YAC9C,MAAMf,YAAAA,GAAee,SAASf,YAAAA,IAAgB,MAAA;AAE9C,YAAA,MAAMO,cAAAA,GAAiB,UAAA;gBACrB,MAAM,EAAElB,aAAa,EAAE,GAAGD,iBAAAA,EAAAA;;gBAG1B,MAAMgC,cAAAA,GAAiBpB,YAAAA,KAAiB,MAAA,GAASZ,iBAAAA,EAAAA,GAAsB;AAAEC,oBAAAA;AAAc,iBAAA;gBAEvF,MAAM5B,OAAAA,GAAU,IAAI4D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGD,cAAc;AACjB,oBAAA,GAAGL,SAAStD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAM6D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUnC,cAAAA,CAAemC,MAAM;oBAChD/D,MAAAA,EAAQ,KAAA;AACRE,oBAAAA;AACF,iBAAA,CAAA;gBAEA,OAAOqC,mBAAAA,CAA2BzC,QAAAA,EAAU0D,OAAAA,EAAShB,cAAAA,EAAgBC,YAAAA,CAAAA;AACvE,YAAA,CAAA;AAEA,YAAA,OAAOM,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAgB,IAAAA,EAAM,OACJlF,KACA4B,IAAAA,EACA8C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM9C,OAAAA,GAAU,IAAI4D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGjC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG2B,SAAStD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ+D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMnE,QAAAA,GAAW,MAAMC,KAAAA,CAAM6D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUnC,cAAAA,CAAemC,MAAM;oBAChD/D,MAAAA,EAAQ,MAAA;AACRE,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBnB,IAAAA,CAAKC,SAAS,CAACkB,IAAAA;AACtE,iBAAA,CAAA;gBACA,OAAO6B,mBAAAA,CAA2BzC,UAAU0D,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOO,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAkB,GAAAA,EAAK,OACHpF,KACA4B,IAAAA,EACA8C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM9C,OAAAA,GAAU,IAAI4D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGjC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG2B,SAAStD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ+D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMnE,QAAAA,GAAW,MAAMC,KAAAA,CAAM6D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUnC,cAAAA,CAAemC,MAAM;oBAChD/D,MAAAA,EAAQ,KAAA;AACRE,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBnB,IAAAA,CAAKC,SAAS,CAACkB,IAAAA;AACtE,iBAAA,CAAA;gBAEA,OAAO6B,mBAAAA,CAA2BzC,UAAU0D,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOO,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;AACAmB,QAAAA,GAAAA,EAAK,OAAcrF,GAAAA,EAAa0E,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM9C,OAAAA,GAAU,IAAI4D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGjC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG2B,SAAStD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAM6D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUnC,cAAAA,CAAemC,MAAM;oBAChD/D,MAAAA,EAAQ,QAAA;AACRE,oBAAAA;AACF,iBAAA,CAAA;gBACA,OAAOqC,mBAAAA,CAA2BzC,UAAU0D,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOO,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA;AACF,KAAA;IAEA,OAAOU,WAAAA;AACT;;;;;;;;;"}

package/dist/admin/admin/src/utils/getFetchClient.mjs

@@ -165,7 +165,27 @@ const getToken = ()=>{
     // Check if the url has a prepending slash, if not add a slash
     const normalizeUrl = (url)=>hasProtocol(url) ? url : addPrependingSlash(url);
     // Add a response interceptor to return the response
-    const responseInterceptor = async (response, validateStatus)=>{
+    const responseInterceptor = async (response, validateStatus, responseType = 'json')=>{
+        if (responseType !== 'json') {
+            if (!response.ok && !validateStatus?.(response.status)) {
+                const fetchError = new FetchError('Server Error');
+                fetchError.status = response.status;
+                throw fetchError;
+            }
+            let result;
+            if (responseType === 'blob') {
+                result = await response.blob();
+            } else if (responseType === 'text') {
+                result = await response.text();
+            } else {
+                result = await response.arrayBuffer();
+            }
+            return {
+                data: result,
+                status: response.status,
+                headers: response.headers
+            };
+        }
         try {
             const result = await response.json();
             /**
@@ -233,7 +253,10 @@ const getToken = ()=>{
          */ const serializedParams = qs__default.stringify(params, {
                     encode: false
                 });
-                return `${url}?${serializedParams}`;
+                if (serializedParams) {
+                    return `${url}?${serializedParams}`;
+                }
+                return url;
             }
             return url;
         };
@@ -247,9 +270,15 @@ const getToken = ()=>{
     const fetchClient = {
         get: async (url, options)=>{
             const createRequestUrl = makeCreateRequestUrl(options);
+            const responseType = options?.responseType ?? 'json';
             const executeRequest = async ()=>{
+                const { Authorization } = getDefaultHeaders();
+                // For non-JSON response types, omit content negotiation headers that imply JSON
+                const defaultHeaders = responseType === 'json' ? getDefaultHeaders() : {
+                    Authorization
+                };
                 const headers = new Headers({
-                    ...getDefaultHeaders(),
+                    ...defaultHeaders,
                     ...options?.headers
                 });
                 const response = await fetch(createRequestUrl(url), {
@@ -257,7 +286,7 @@ const getToken = ()=>{
                     method: 'GET',
                     headers
                 });
-                return responseInterceptor(response, options?.validateStatus);
+                return responseInterceptor(response, options?.validateStatus, responseType);
             };
             return withTokenRefresh(url, executeRequest);
         },

package/dist/admin/admin/src/utils/getFetchClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"getFetchClient.mjs","sources":["../../../../../admin/src/utils/getFetchClient.ts"],"sourcesContent":["import pipe from 'lodash/fp/pipe';\n// eslint-disable-next-line import/default\nimport qs from 'qs';\n\nimport { getCookieValue, setCookie } from './cookies';\n\nimport type { errors } from '@strapi/utils';\n\nexport type ApiError =\n  | errors.ApplicationError\n  | errors.ForbiddenError\n  | errors.NotFoundError\n  | errors.NotImplementedError\n  | errors.PaginationError\n  | errors.PayloadTooLargeError\n  | errors.PolicyError\n  | errors.RateLimitError\n  | errors.UnauthorizedError\n  | errors.ValidationError\n  | errors.YupValidationError;\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  USER: 'userInfo',\n};\n\n/**\n * Module-level promise to ensure only one token refresh happens at a time\n */\nlet refreshPromise: Promise<string | null> | null = null;\n\n/**\n * Callback to notify the app when the token is updated (e.g., to update Redux state)\n */\nlet onTokenUpdate: ((token: string) => void) | null = null;\n\n/**\n * Set the callback that will be called when the token is refreshed.\n * This allows the React layer to update Redux state when a token refresh occurs.\n *\n * @param callback - Function to call with the new token, or null to clear\n * @example\n * // In a React component\n * useEffect(() => {\n *   setOnTokenUpdate((token) => dispatch(setToken(token)));\n *   return () => setOnTokenUpdate(null);\n * }, [dispatch]);\n */\nconst setOnTokenUpdate = (callback: ((token: string) => void) | null): void => {\n  onTokenUpdate = callback;\n};\n\n/**\n * Check if the URL is an auth path that should not trigger token refresh.\n * Note: No ^ anchor since the URL may include the baseURL prefix (e.g., \"http://localhost:1337/admin/login\").\n * This differs from baseQuery.ts which uses ^/admin since it receives normalized paths.\n */\nconst isAuthPath = (url: string) => /\\/admin\\/(login|logout|access-token)\\b/.test(url);\n\n/**\n * Store the new token in the appropriate storage (localStorage or cookie)\n * and notify the app to update its state.\n *\n * Uses localStorage if the user selected \"remember me\" during login,\n * otherwise uses cookies for session-based storage.\n *\n * @param token - The JWT token to store\n * @internal Exported for testing purposes\n */\nconst storeToken = (token: string): void => {\n  // Check if the original token was stored in localStorage (persist mode)\n  const wasPersistedToLocalStorage = Boolean(localStorage.getItem(STORAGE_KEYS.TOKEN));\n\n  if (wasPersistedToLocalStorage) {\n    localStorage.setItem(STORAGE_KEYS.TOKEN, JSON.stringify(token));\n  } else {\n    setCookie(STORAGE_KEYS.TOKEN, token);\n  }\n\n  // Notify the app to update its state (e.g., Redux)\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n};\n\n/**\n * Refresh the access token by calling the /admin/access-token endpoint.\n * This uses a low-level fetch to avoid recursion through the interceptor.\n * Returns the new token on success, or null on failure.\n */\nconst refreshAccessToken = async (): Promise<string | null> => {\n  const backendURL = window.strapi.backendURL;\n\n  try {\n    const response = await fetch(`${backendURL}/admin/access-token`, {\n      method: 'POST',\n      credentials: 'include', // Include cookies for the refresh token\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n    });\n\n    if (!response.ok) {\n      console.warn('[Auth] Token refresh failed with status:', response.status);\n      return null;\n    }\n\n    const result = await response.json();\n    const token = result?.data?.token as string | undefined;\n\n    if (!token) {\n      console.warn('[Auth] Token refresh response missing token');\n      return null;\n    }\n\n    storeToken(token);\n    return token;\n  } catch (error) {\n    console.error('[Auth] Token refresh error:', error);\n    return null;\n  }\n};\n\n/**\n * Attempt to refresh the token if not already refreshing.\n * Uses a module-level promise to prevent concurrent refresh requests.\n *\n * @returns The new authentication token\n * @throws {Error} If the token refresh fails (e.g., refresh token expired)\n * @internal Exported for testing purposes\n */\nconst attemptTokenRefresh = async (): Promise<string> => {\n  if (!refreshPromise) {\n    refreshPromise = refreshAccessToken().finally(() => {\n      refreshPromise = null;\n    });\n  }\n\n  const newToken = await refreshPromise;\n  if (!newToken) {\n    const error = new Error('Session expired. Please log in again.');\n    error.name = 'TokenRefreshError';\n    throw error;\n  }\n\n  return newToken;\n};\n\ntype FetchResponse<TData = any> = {\n  data: TData;\n  status?: number;\n};\n\ntype FetchOptions = {\n  params?: any;\n  signal?: AbortSignal;\n  headers?: Record<string, string>;\n  validateStatus?: ((status: number) => boolean) | null;\n};\n\ntype FetchConfig = {\n  signal?: AbortSignal;\n};\n\ninterface ErrorResponse {\n  data: {\n    data?: any;\n    error: ApiError & { status?: number };\n  };\n}\n\nclass FetchError extends Error {\n  public name: string;\n  public message: string;\n  public response?: ErrorResponse;\n  public code?: number;\n  public status?: number;\n\n  constructor(message: string, response?: ErrorResponse) {\n    super(message);\n    this.name = 'FetchError';\n    this.message = message;\n    this.response = response;\n    this.code = response?.data?.error?.status;\n    this.status = response?.data?.error?.status;\n\n    // Ensure correct stack trace in error object\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, FetchError);\n    }\n  }\n}\n\nconst isFetchError = (error: unknown): error is FetchError => {\n  return error instanceof FetchError;\n};\n\nconst getToken = (): string | null => {\n  const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);\n  if (fromLocalStorage) {\n    return JSON.parse(fromLocalStorage);\n  }\n\n  const fromCookie = getCookieValue(STORAGE_KEYS.TOKEN);\n  return fromCookie ?? null;\n};\n\ntype FetchClient = {\n  get: <TData = any>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n  put: <TData = any, TSend = any>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  post: <TData = any, TSend = any>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  del: <TData = any>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n};\n\n/**\n * @public\n * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.\n * @returns {FetchClient} A fetch client object with methods for making HTTP requests.\n * @description This is an abstraction around the native fetch exposed by a function. It provides a simple interface to handle API calls\n * to the Strapi backend.\n * @example\n * ```tsx\n * import { getFetchClient } from '@strapi/admin/admin';\n *\n * const myFunct = () => {\n *   const { get } = getFetchClient();\n *   const requestURL = \"/some-endpoint\";\n *\n *   const { data } = await get(requestURL);\n *\n *   return data;\n * };\n * ```\n */\nconst getFetchClient = (defaultOptions: FetchConfig = {}): FetchClient => {\n  const backendURL = window.strapi.backendURL;\n\n  /**\n   * Create default headers with the current token.\n   * This is a function so we can get a fresh token after refresh.\n   */\n  const getDefaultHeaders = () => ({\n    Accept: 'application/json',\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${getToken()}`,\n  });\n\n  const isFormDataRequest = (body: unknown) => body instanceof FormData;\n  const addPrependingSlash = (url: string) => (url.charAt(0) !== '/' ? `/${url}` : url);\n\n  // This regular expression matches a string that starts with either \"http://\" or \"https://\" or any other protocol name in lower case letters, followed by \"://\" and ends with anything else\n  const hasProtocol = (url: string) => new RegExp('^(?:[a-z+]+:)?//', 'i').test(url);\n\n  // Check if the url has a prepending slash, if not add a slash\n  const normalizeUrl = (url: string) => (hasProtocol(url) ? url : addPrependingSlash(url));\n\n  // Add a response interceptor to return the response\n  const responseInterceptor = async <TData = any>(\n    response: Response,\n    validateStatus?: FetchOptions['validateStatus']\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      const result = await response.json();\n\n      /**\n       * validateStatus allows us to customize when a response should throw an error\n       * In native Fetch API, a response is considered \"not ok\"\n       * when the status code falls in the 200 to 299 (inclusive) range\n       */\n      if (!response.ok && result.error && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError(result.error.message, { data: result });\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Unknown Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      return { data: result };\n    } catch (error) {\n      if (error instanceof SyntaxError && response.ok) {\n        // Making sure that a SyntaxError doesn't throw if it's successful\n        return { data: [], status: response.status } as FetchResponse<any>;\n      } else {\n        throw error;\n      }\n    }\n  };\n\n  /**\n   * Execute a fetch request with automatic token refresh on 401 errors.\n   * @param url - The request URL (used to check if it's an auth path)\n   * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)\n   */\n  const withTokenRefresh = async <TData>(\n    url: string,\n    executeRequest: () => Promise<FetchResponse<TData>>\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      return await executeRequest();\n    } catch (error) {\n      // Only attempt refresh for 401 errors on non-auth paths\n      if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {\n        try {\n          await attemptTokenRefresh();\n          // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token\n          return await executeRequest();\n        } catch {\n          // If refresh fails, throw the original error\n          throw error;\n        }\n      }\n      throw error;\n    }\n  };\n\n  const paramsSerializer =\n    <Param = unknown>(params?: Param) =>\n    (url: string) => {\n      if (params) {\n        if (typeof params === 'string') {\n          return `${url}?${params}`;\n        }\n\n        /**\n         * TODO V6: Encoding should be enabled in this step\n         * So the rest of the app doesn't have to worry about it,\n         * It's considered a breaking change because it impacts any API request, including the user's custom code\n         */\n        const serializedParams = qs.stringify(params, { encode: false });\n        return `${url}?${serializedParams}`;\n      }\n      return url;\n    };\n\n  const addBaseUrl = (url: Parameters<typeof fetch>[0]) => {\n    return `${backendURL}${url}`;\n  };\n\n  /**\n   * We use the factory method because the options\n   * are unique to the individual request\n   */\n  const makeCreateRequestUrl = (options?: FetchOptions) =>\n    pipe(normalizeUrl, addBaseUrl, paramsSerializer(options?.params));\n\n  const fetchClient: FetchClient = {\n    get: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'GET',\n          headers,\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    post: async <TData, TSend = any>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'POST',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    put: async <TData, TSend = any>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'PUT',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    del: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'DELETE',\n          headers,\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n  };\n\n  return fetchClient;\n};\n\nexport {\n  getFetchClient,\n  isFetchError,\n  FetchError,\n  attemptTokenRefresh,\n  storeToken,\n  setOnTokenUpdate,\n};\nexport type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };\n"],"names":["STORAGE_KEYS","TOKEN","refreshPromise","onTokenUpdate","setOnTokenUpdate","callback","isAuthPath","url","test","storeToken","token","wasPersistedToLocalStorage","Boolean","localStorage","getItem","setItem","JSON","stringify","setCookie","refreshAccessToken","backendURL","window","strapi","response","fetch","method","credentials","headers","Accept","ok","console","warn","status","result","json","data","error","attemptTokenRefresh","finally","newToken","Error","name","FetchError","message","code","captureStackTrace","isFetchError","getToken","fromLocalStorage","parse","fromCookie","getCookieValue","getFetchClient","defaultOptions","getDefaultHeaders","Authorization","isFormDataRequest","body","FormData","addPrependingSlash","charAt","hasProtocol","RegExp","normalizeUrl","responseInterceptor","validateStatus","fetchError","SyntaxError","withTokenRefresh","executeRequest","paramsSerializer","params","serializedParams","qs","encode","addBaseUrl","makeCreateRequestUrl","options","pipe","fetchClient","get","createRequestUrl","Headers","signal","post","delete","put","del"],"mappings":";;;;AAqBA,MAAMA,YAAAA,GAAe;IACnBC,KAAAA,EAAO,UAET,CAAA;AAEA;;AAEC,IACD,IAAIC,cAAAA,GAAgD,IAAA;AAEpD;;AAEC,IACD,IAAIC,aAAAA,GAAkD,IAAA;AAEtD;;;;;;;;;;;IAYA,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxBF,aAAAA,GAAgBE,QAAAA;AAClB;AAEA;;;;AAIC,IACD,MAAMC,UAAAA,GAAa,CAACC,GAAAA,GAAgB,wCAAA,CAAyCC,IAAI,CAACD,GAAAA,CAAAA;AAElF;;;;;;;;;IAUA,MAAME,aAAa,CAACC,KAAAA,GAAAA;;AAElB,IAAA,MAAMC,6BAA6BC,OAAAA,CAAQC,YAAAA,CAAaC,OAAO,CAACd,aAAaC,KAAK,CAAA,CAAA;AAElF,IAAA,IAAIU,0BAAAA,EAA4B;AAC9BE,QAAAA,YAAAA,CAAaE,OAAO,CAACf,YAAAA,CAAaC,KAAK,EAAEe,IAAAA,CAAKC,SAAS,CAACP,KAAAA,CAAAA,CAAAA;IAC1D,CAAA,MAAO;QACLQ,SAAAA,CAAUlB,YAAAA,CAAaC,KAAK,EAAES,KAAAA,CAAAA;AAChC,IAAA;;AAGA,IAAA,IAAIP,aAAAA,EAAe;QACjBA,aAAAA,CAAcO,KAAAA,CAAAA;AAChB,IAAA;AACF;AAEA;;;;AAIC,IACD,MAAMS,kBAAAA,GAAqB,UAAA;AACzB,IAAA,MAAMC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;IAE3C,IAAI;AACF,QAAA,MAAMG,WAAW,MAAMC,KAAAA,CAAM,GAAGJ,UAAAA,CAAW,mBAAmB,CAAC,EAAE;YAC/DK,MAAAA,EAAQ,MAAA;YACRC,WAAAA,EAAa,SAAA;YACbC,OAAAA,EAAS;gBACPC,MAAAA,EAAQ,kBAAA;gBACR,cAAA,EAAgB;AAClB;AACF,SAAA,CAAA;QAEA,IAAI,CAACL,QAAAA,CAASM,EAAE,EAAE;AAChBC,YAAAA,OAAAA,CAAQC,IAAI,CAAC,0CAAA,EAA4CR,QAAAA,CAASS,MAAM,CAAA;YACxE,OAAO,IAAA;AACT,QAAA;QAEA,MAAMC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;QAClC,MAAMxB,KAAAA,GAAQuB,QAAQE,IAAAA,EAAMzB,KAAAA;AAE5B,QAAA,IAAI,CAACA,KAAAA,EAAO;AACVoB,YAAAA,OAAAA,CAAQC,IAAI,CAAC,6CAAA,CAAA;YACb,OAAO,IAAA;AACT,QAAA;QAEAtB,UAAAA,CAAWC,KAAAA,CAAAA;QACX,OAAOA,KAAAA;AACT,IAAA,CAAA,CAAE,OAAO0B,KAAAA,EAAO;QACdN,OAAAA,CAAQM,KAAK,CAAC,6BAAA,EAA+BA,KAAAA,CAAAA;QAC7C,OAAO,IAAA;AACT,IAAA;AACF,CAAA;AAEA;;;;;;;AAOC,UACKC,mBAAAA,GAAsB,UAAA;AAC1B,IAAA,IAAI,CAACnC,cAAAA,EAAgB;QACnBA,cAAAA,GAAiBiB,kBAAAA,EAAAA,CAAqBmB,OAAO,CAAC,IAAA;YAC5CpC,cAAAA,GAAiB,IAAA;AACnB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAMqC,WAAW,MAAMrC,cAAAA;AACvB,IAAA,IAAI,CAACqC,QAAAA,EAAU;QACb,MAAMH,KAAAA,GAAQ,IAAII,KAAAA,CAAM,uCAAA,CAAA;AACxBJ,QAAAA,KAAAA,CAAMK,IAAI,GAAG,mBAAA;QACb,MAAML,KAAAA;AACR,IAAA;IAEA,OAAOG,QAAAA;AACT;AAyBA,MAAMG,UAAAA,SAAmBF,KAAAA,CAAAA;IAOvB,WAAA,CAAYG,OAAe,EAAEpB,QAAwB,CAAE;AACrD,QAAA,KAAK,CAACoB,OAAAA,CAAAA;QACN,IAAI,CAACF,IAAI,GAAG,YAAA;QACZ,IAAI,CAACE,OAAO,GAAGA,OAAAA;QACf,IAAI,CAACpB,QAAQ,GAAGA,QAAAA;AAChB,QAAA,IAAI,CAACqB,IAAI,GAAGrB,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;AACnC,QAAA,IAAI,CAACA,MAAM,GAAGT,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;;QAGrC,IAAIQ,KAAAA,CAAMK,iBAAiB,EAAE;YAC3BL,KAAAA,CAAMK,iBAAiB,CAAC,IAAI,EAAEH,UAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;AACF;AAEA,MAAMI,eAAe,CAACV,KAAAA,GAAAA;AACpB,IAAA,OAAOA,KAAAA,YAAiBM,UAAAA;AAC1B;AAEA,MAAMK,QAAAA,GAAW,IAAA;AACf,IAAA,MAAMC,gBAAAA,GAAmBnC,YAAAA,CAAaC,OAAO,CAACd,aAAaC,KAAK,CAAA;AAChE,IAAA,IAAI+C,gBAAAA,EAAkB;QACpB,OAAOhC,IAAAA,CAAKiC,KAAK,CAACD,gBAAAA,CAAAA;AACpB,IAAA;IAEA,MAAME,UAAAA,GAAaC,cAAAA,CAAenD,YAAAA,CAAaC,KAAK,CAAA;AACpD,IAAA,OAAOiD,UAAAA,IAAc,IAAA;AACvB,CAAA;AAiBA;;;;;;;;;;;;;;;;;;;AAmBC,IACD,MAAME,cAAAA,GAAiB,CAACC,cAAAA,GAA8B,EAAE,GAAA;AACtD,IAAA,MAAMjC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;AAE3C;;;MAIA,MAAMkC,iBAAAA,GAAoB,KAAO;YAC/B1B,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB,kBAAA;YAChB2B,aAAAA,EAAe,CAAC,OAAO,EAAER,QAAAA,EAAAA,CAAAA;SAC3B,CAAA;IAEA,MAAMS,iBAAAA,GAAoB,CAACC,IAAAA,GAAkBA,IAAAA,YAAgBC,QAAAA;AAC7D,IAAA,MAAMC,kBAAAA,GAAqB,CAACpD,GAAAA,GAAiBA,GAAAA,CAAIqD,MAAM,CAAC,CAAA,CAAA,KAAO,GAAA,GAAM,CAAC,CAAC,EAAErD,GAAAA,CAAAA,CAAK,GAAGA,GAAAA;;IAGjF,MAAMsD,WAAAA,GAAc,CAACtD,GAAAA,GAAgB,IAAIuD,OAAO,kBAAA,EAAoB,GAAA,CAAA,CAAKtD,IAAI,CAACD,GAAAA,CAAAA;;AAG9E,IAAA,MAAMwD,eAAe,CAACxD,GAAAA,GAAiBsD,WAAAA,CAAYtD,GAAAA,CAAAA,GAAOA,MAAMoD,kBAAAA,CAAmBpD,GAAAA,CAAAA;;IAGnF,MAAMyD,mBAAAA,GAAsB,OAC1BzC,QAAAA,EACA0C,cAAAA,GAAAA;QAEA,IAAI;YACF,MAAMhC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;AAElC;;;;AAIC,UACD,IAAI,CAACX,QAAAA,CAASM,EAAE,IAAII,MAAAA,CAAOG,KAAK,IAAI,CAAC6B,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;AACtE,gBAAA,MAAMkC,aAAa,IAAIxB,UAAAA,CAAWT,OAAOG,KAAK,CAACO,OAAO,EAAE;oBAAER,IAAAA,EAAMF;AAAO,iBAAA,CAAA;gBACvEiC,UAAAA,CAAWlC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMkC,UAAAA;AACR,YAAA;YAEA,IAAI,CAAC3C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMkC,UAAAA,GAAa,IAAIxB,UAAAA,CAAW,sBAAA,CAAA;gBAClCwB,UAAAA,CAAWlC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMkC,UAAAA;AACR,YAAA;YAEA,OAAO;gBAAE/B,IAAAA,EAAMF;AAAO,aAAA;AACxB,QAAA,CAAA,CAAE,OAAOG,KAAAA,EAAO;AACd,YAAA,IAAIA,KAAAA,YAAiB+B,WAAAA,IAAe5C,QAAAA,CAASM,EAAE,EAAE;;gBAE/C,OAAO;AAAEM,oBAAAA,IAAAA,EAAM,EAAE;AAAEH,oBAAAA,MAAAA,EAAQT,SAASS;AAAO,iBAAA;YAC7C,CAAA,MAAO;gBACL,MAAMI,KAAAA;AACR,YAAA;AACF,QAAA;AACF,IAAA,CAAA;AAEA;;;;MAKA,MAAMgC,gBAAAA,GAAmB,OACvB7D,GAAAA,EACA8D,cAAAA,GAAAA;QAEA,IAAI;AACF,YAAA,OAAO,MAAMA,cAAAA,EAAAA;AACf,QAAA,CAAA,CAAE,OAAOjC,KAAAA,EAAO;;YAEd,IAAIU,YAAAA,CAAaV,UAAUA,KAAAA,CAAMJ,MAAM,KAAK,GAAA,IAAO,CAAC1B,WAAWC,GAAAA,CAAAA,EAAM;gBACnE,IAAI;oBACF,MAAM8B,mBAAAA,EAAAA;;AAEN,oBAAA,OAAO,MAAMgC,cAAAA,EAAAA;AACf,gBAAA,CAAA,CAAE,OAAM;;oBAEN,MAAMjC,KAAAA;AACR,gBAAA;AACF,YAAA;YACA,MAAMA,KAAAA;AACR,QAAA;AACF,IAAA,CAAA;IAEA,MAAMkC,gBAAAA,GACJ,CAAkBC,MAAAA,GAClB,CAAChE,GAAAA,GAAAA;AACC,YAAA,IAAIgE,MAAAA,EAAQ;gBACV,IAAI,OAAOA,WAAW,QAAA,EAAU;AAC9B,oBAAA,OAAO,CAAA,EAAGhE,GAAAA,CAAI,CAAC,EAAEgE,MAAAA,CAAAA,CAAQ;AAC3B,gBAAA;AAEA;;;;AAIC,YACD,MAAMC,gBAAAA,GAAmBC,WAAAA,CAAGxD,SAAS,CAACsD,MAAAA,EAAQ;oBAAEG,MAAAA,EAAQ;AAAM,iBAAA,CAAA;AAC9D,gBAAA,OAAO,CAAA,EAAGnE,GAAAA,CAAI,CAAC,EAAEiE,gBAAAA,CAAAA,CAAkB;AACrC,YAAA;YACA,OAAOjE,GAAAA;AACT,QAAA,CAAA;AAEF,IAAA,MAAMoE,aAAa,CAACpE,GAAAA,GAAAA;QAClB,OAAO,CAAA,EAAGa,aAAab,GAAAA,CAAAA,CAAK;AAC9B,IAAA,CAAA;AAEA;;;MAIA,MAAMqE,uBAAuB,CAACC,OAAAA,GAC5BC,KAAKf,YAAAA,EAAcY,UAAAA,EAAYL,iBAAiBO,OAAAA,EAASN,MAAAA,CAAAA,CAAAA;AAE3D,IAAA,MAAMQ,WAAAA,GAA2B;AAC/BC,QAAAA,GAAAA,EAAK,OAAczE,GAAAA,EAAasE,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM1C,OAAAA,GAAU,IAAIuD,OAAAA,CAAQ;AAC1B,oBAAA,GAAG5B,iBAAAA,EAAmB;AACtB,oBAAA,GAAGuB,SAASlD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAMyD,gBAAAA,CAAiB1E,GAAAA,CAAAA,EAAM;oBAClD4E,MAAAA,EAAQN,OAAAA,EAASM,MAAAA,IAAU9B,cAAAA,CAAe8B,MAAM;oBAChD1D,MAAAA,EAAQ,KAAA;AACRE,oBAAAA;AACF,iBAAA,CAAA;gBAEA,OAAOqC,mBAAAA,CAA2BzC,UAAUsD,OAAAA,EAASZ,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOG,iBAAiB7D,GAAAA,EAAK8D,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAe,IAAAA,EAAM,OACJ7E,KACA4B,IAAAA,EACA0C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM1C,OAAAA,GAAU,IAAIuD,OAAAA,CAAQ;AAC1B,oBAAA,GAAG5B,iBAAAA,EAAmB;AACtB,oBAAA,GAAGuB,SAASlD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ0D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAM9D,QAAAA,GAAW,MAAMC,KAAAA,CAAMyD,gBAAAA,CAAiB1E,GAAAA,CAAAA,EAAM;oBAClD4E,MAAAA,EAAQN,OAAAA,EAASM,MAAAA,IAAU9B,cAAAA,CAAe8B,MAAM;oBAChD1D,MAAAA,EAAQ,MAAA;AACRE,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBnB,IAAAA,CAAKC,SAAS,CAACkB,IAAAA;AACtE,iBAAA,CAAA;gBACA,OAAO6B,mBAAAA,CAA2BzC,UAAUsD,OAAAA,EAASZ,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOG,iBAAiB7D,GAAAA,EAAK8D,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAiB,GAAAA,EAAK,OACH/E,KACA4B,IAAAA,EACA0C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM1C,OAAAA,GAAU,IAAIuD,OAAAA,CAAQ;AAC1B,oBAAA,GAAG5B,iBAAAA,EAAmB;AACtB,oBAAA,GAAGuB,SAASlD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ0D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAM9D,QAAAA,GAAW,MAAMC,KAAAA,CAAMyD,gBAAAA,CAAiB1E,GAAAA,CAAAA,EAAM;oBAClD4E,MAAAA,EAAQN,OAAAA,EAASM,MAAAA,IAAU9B,cAAAA,CAAe8B,MAAM;oBAChD1D,MAAAA,EAAQ,KAAA;AACRE,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBnB,IAAAA,CAAKC,SAAS,CAACkB,IAAAA;AACtE,iBAAA,CAAA;gBAEA,OAAO6B,mBAAAA,CAA2BzC,UAAUsD,OAAAA,EAASZ,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOG,iBAAiB7D,GAAAA,EAAK8D,cAAAA,CAAAA;AAC/B,QAAA,CAAA;AACAkB,QAAAA,GAAAA,EAAK,OAAchF,GAAAA,EAAasE,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM1C,OAAAA,GAAU,IAAIuD,OAAAA,CAAQ;AAC1B,oBAAA,GAAG5B,iBAAAA,EAAmB;AACtB,oBAAA,GAAGuB,SAASlD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAMyD,gBAAAA,CAAiB1E,GAAAA,CAAAA,EAAM;oBAClD4E,MAAAA,EAAQN,OAAAA,EAASM,MAAAA,IAAU9B,cAAAA,CAAe8B,MAAM;oBAChD1D,MAAAA,EAAQ,QAAA;AACRE,oBAAAA;AACF,iBAAA,CAAA;gBACA,OAAOqC,mBAAAA,CAA2BzC,UAAUsD,OAAAA,EAASZ,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOG,iBAAiB7D,GAAAA,EAAK8D,cAAAA,CAAAA;AAC/B,QAAA;AACF,KAAA;IAEA,OAAOU,WAAAA;AACT;;;;"}
+{"version":3,"file":"getFetchClient.mjs","sources":["../../../../../admin/src/utils/getFetchClient.ts"],"sourcesContent":["import pipe from 'lodash/fp/pipe';\n// eslint-disable-next-line import/default\nimport qs from 'qs';\n\nimport { getCookieValue, setCookie } from './cookies';\n\nimport type { errors } from '@strapi/utils';\n\nexport type ApiError =\n  | errors.ApplicationError\n  | errors.ForbiddenError\n  | errors.NotFoundError\n  | errors.NotImplementedError\n  | errors.PaginationError\n  | errors.PayloadTooLargeError\n  | errors.PolicyError\n  | errors.RateLimitError\n  | errors.UnauthorizedError\n  | errors.ValidationError\n  | errors.YupValidationError;\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  USER: 'userInfo',\n};\n\n/**\n * Module-level promise to ensure only one token refresh happens at a time\n */\nlet refreshPromise: Promise<string | null> | null = null;\n\n/**\n * Callback to notify the app when the token is updated (e.g., to update Redux state)\n */\nlet onTokenUpdate: ((token: string) => void) | null = null;\n\n/**\n * Set the callback that will be called when the token is refreshed.\n * This allows the React layer to update Redux state when a token refresh occurs.\n *\n * @param callback - Function to call with the new token, or null to clear\n * @example\n * // In a React component\n * useEffect(() => {\n *   setOnTokenUpdate((token) => dispatch(setToken(token)));\n *   return () => setOnTokenUpdate(null);\n * }, [dispatch]);\n */\nconst setOnTokenUpdate = (callback: ((token: string) => void) | null): void => {\n  onTokenUpdate = callback;\n};\n\n/**\n * Check if the URL is an auth path that should not trigger token refresh.\n * Note: No ^ anchor since the URL may include the baseURL prefix (e.g., \"http://localhost:1337/admin/login\").\n * This differs from baseQuery.ts which uses ^/admin since it receives normalized paths.\n */\nconst isAuthPath = (url: string) => /\\/admin\\/(login|logout|access-token)\\b/.test(url);\n\n/**\n * Store the new token in the appropriate storage (localStorage or cookie)\n * and notify the app to update its state.\n *\n * Uses localStorage if the user selected \"remember me\" during login,\n * otherwise uses cookies for session-based storage.\n *\n * @param token - The JWT token to store\n * @internal Exported for testing purposes\n */\nconst storeToken = (token: string): void => {\n  // Check if the original token was stored in localStorage (persist mode)\n  const wasPersistedToLocalStorage = Boolean(localStorage.getItem(STORAGE_KEYS.TOKEN));\n\n  if (wasPersistedToLocalStorage) {\n    localStorage.setItem(STORAGE_KEYS.TOKEN, JSON.stringify(token));\n  } else {\n    setCookie(STORAGE_KEYS.TOKEN, token);\n  }\n\n  // Notify the app to update its state (e.g., Redux)\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n};\n\n/**\n * Refresh the access token by calling the /admin/access-token endpoint.\n * This uses a low-level fetch to avoid recursion through the interceptor.\n * Returns the new token on success, or null on failure.\n */\nconst refreshAccessToken = async (): Promise<string | null> => {\n  const backendURL = window.strapi.backendURL;\n\n  try {\n    const response = await fetch(`${backendURL}/admin/access-token`, {\n      method: 'POST',\n      credentials: 'include', // Include cookies for the refresh token\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n    });\n\n    if (!response.ok) {\n      console.warn('[Auth] Token refresh failed with status:', response.status);\n      return null;\n    }\n\n    const result = await response.json();\n    const token = result?.data?.token as string | undefined;\n\n    if (!token) {\n      console.warn('[Auth] Token refresh response missing token');\n      return null;\n    }\n\n    storeToken(token);\n    return token;\n  } catch (error) {\n    console.error('[Auth] Token refresh error:', error);\n    return null;\n  }\n};\n\n/**\n * Attempt to refresh the token if not already refreshing.\n * Uses a module-level promise to prevent concurrent refresh requests.\n *\n * @returns The new authentication token\n * @throws {Error} If the token refresh fails (e.g., refresh token expired)\n * @internal Exported for testing purposes\n */\nconst attemptTokenRefresh = async (): Promise<string> => {\n  if (!refreshPromise) {\n    refreshPromise = refreshAccessToken().finally(() => {\n      refreshPromise = null;\n    });\n  }\n\n  const newToken = await refreshPromise;\n  if (!newToken) {\n    const error = new Error('Session expired. Please log in again.');\n    error.name = 'TokenRefreshError';\n    throw error;\n  }\n\n  return newToken;\n};\n\ntype FetchResponse<TData = any> = {\n  data: TData;\n  status?: number;\n  headers?: Headers;\n};\n\ntype FetchOptions = {\n  params?: any;\n  signal?: AbortSignal;\n  headers?: Record<string, string>;\n  validateStatus?: ((status: number) => boolean) | null;\n  responseType?: 'json' | 'blob' | 'text' | 'arrayBuffer';\n};\n\ntype FetchConfig = {\n  signal?: AbortSignal;\n};\n\ninterface ErrorResponse {\n  data: {\n    data?: any;\n    error: ApiError & { status?: number };\n  };\n}\n\nclass FetchError extends Error {\n  public name: string;\n  public message: string;\n  public response?: ErrorResponse;\n  public code?: number;\n  public status?: number;\n\n  constructor(message: string, response?: ErrorResponse) {\n    super(message);\n    this.name = 'FetchError';\n    this.message = message;\n    this.response = response;\n    this.code = response?.data?.error?.status;\n    this.status = response?.data?.error?.status;\n\n    // Ensure correct stack trace in error object\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, FetchError);\n    }\n  }\n}\n\nconst isFetchError = (error: unknown): error is FetchError => {\n  return error instanceof FetchError;\n};\n\nconst getToken = (): string | null => {\n  const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);\n  if (fromLocalStorage) {\n    return JSON.parse(fromLocalStorage);\n  }\n\n  const fromCookie = getCookieValue(STORAGE_KEYS.TOKEN);\n  return fromCookie ?? null;\n};\n\ntype FetchClient = {\n  get: {\n    (url: string, config: FetchOptions & { responseType: 'blob' }): Promise<FetchResponse<Blob>>;\n    (url: string, config: FetchOptions & { responseType: 'text' }): Promise<FetchResponse<string>>;\n    (\n      url: string,\n      config: FetchOptions & { responseType: 'arrayBuffer' }\n    ): Promise<FetchResponse<ArrayBuffer>>;\n    <TData = any>(url: string, config?: FetchOptions): Promise<FetchResponse<TData>>;\n  };\n  put: <TData = any, TSend = any>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  post: <TData = any, TSend = any>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  del: <TData = any>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n};\n\n/**\n * @public\n * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.\n * @returns {FetchClient} A fetch client object with methods for making HTTP requests.\n * @description This is an abstraction around the native fetch exposed by a function. It provides a simple interface to handle API calls\n * to the Strapi backend.\n * @example\n * ```tsx\n * import { getFetchClient } from '@strapi/admin/admin';\n *\n * const myFunct = () => {\n *   const { get } = getFetchClient();\n *   const requestURL = \"/some-endpoint\";\n *\n *   const { data } = await get(requestURL);\n *\n *   return data;\n * };\n * ```\n */\nconst getFetchClient = (defaultOptions: FetchConfig = {}): FetchClient => {\n  const backendURL = window.strapi.backendURL;\n\n  /**\n   * Create default headers with the current token.\n   * This is a function so we can get a fresh token after refresh.\n   */\n  const getDefaultHeaders = () => ({\n    Accept: 'application/json',\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${getToken()}`,\n  });\n\n  const isFormDataRequest = (body: unknown) => body instanceof FormData;\n  const addPrependingSlash = (url: string) => (url.charAt(0) !== '/' ? `/${url}` : url);\n\n  // This regular expression matches a string that starts with either \"http://\" or \"https://\" or any other protocol name in lower case letters, followed by \"://\" and ends with anything else\n  const hasProtocol = (url: string) => new RegExp('^(?:[a-z+]+:)?//', 'i').test(url);\n\n  // Check if the url has a prepending slash, if not add a slash\n  const normalizeUrl = (url: string) => (hasProtocol(url) ? url : addPrependingSlash(url));\n\n  // Add a response interceptor to return the response\n  const responseInterceptor = async <TData = any>(\n    response: Response,\n    validateStatus?: FetchOptions['validateStatus'],\n    responseType: NonNullable<FetchOptions['responseType']> = 'json'\n  ): Promise<FetchResponse<TData>> => {\n    if (responseType !== 'json') {\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      let result: Blob | string | ArrayBuffer;\n      if (responseType === 'blob') {\n        result = await response.blob();\n      } else if (responseType === 'text') {\n        result = await response.text();\n      } else {\n        result = await response.arrayBuffer();\n      }\n\n      return { data: result as TData, status: response.status, headers: response.headers };\n    }\n\n    try {\n      const result = await response.json();\n\n      /**\n       * validateStatus allows us to customize when a response should throw an error\n       * In native Fetch API, a response is considered \"not ok\"\n       * when the status code falls in the 200 to 299 (inclusive) range\n       */\n      if (!response.ok && result.error && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError(result.error.message, { data: result });\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Unknown Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      return { data: result };\n    } catch (error) {\n      if (error instanceof SyntaxError && response.ok) {\n        // Making sure that a SyntaxError doesn't throw if it's successful\n        return { data: [], status: response.status } as FetchResponse<any>;\n      } else {\n        throw error;\n      }\n    }\n  };\n\n  /**\n   * Execute a fetch request with automatic token refresh on 401 errors.\n   * @param url - The request URL (used to check if it's an auth path)\n   * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)\n   */\n  const withTokenRefresh = async <TData>(\n    url: string,\n    executeRequest: () => Promise<FetchResponse<TData>>\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      return await executeRequest();\n    } catch (error) {\n      // Only attempt refresh for 401 errors on non-auth paths\n      if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {\n        try {\n          await attemptTokenRefresh();\n          // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token\n          return await executeRequest();\n        } catch {\n          // If refresh fails, throw the original error\n          throw error;\n        }\n      }\n      throw error;\n    }\n  };\n\n  const paramsSerializer =\n    <Param = unknown>(params?: Param) =>\n    (url: string) => {\n      if (params) {\n        if (typeof params === 'string') {\n          return `${url}?${params}`;\n        }\n\n        /**\n         * TODO V6: Encoding should be enabled in this step\n         * So the rest of the app doesn't have to worry about it,\n         * It's considered a breaking change because it impacts any API request, including the user's custom code\n         */\n        const serializedParams = qs.stringify(params, { encode: false });\n        if (serializedParams) {\n          return `${url}?${serializedParams}`;\n        }\n        return url;\n      }\n      return url;\n    };\n\n  const addBaseUrl = (url: Parameters<typeof fetch>[0]) => {\n    return `${backendURL}${url}`;\n  };\n\n  /**\n   * We use the factory method because the options\n   * are unique to the individual request\n   */\n  const makeCreateRequestUrl = (options?: FetchOptions) =>\n    pipe(normalizeUrl, addBaseUrl, paramsSerializer(options?.params));\n\n  const fetchClient: FetchClient = {\n    get: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      const responseType = options?.responseType ?? 'json';\n\n      const executeRequest = async () => {\n        const { Authorization } = getDefaultHeaders();\n\n        // For non-JSON response types, omit content negotiation headers that imply JSON\n        const defaultHeaders = responseType === 'json' ? getDefaultHeaders() : { Authorization };\n\n        const headers = new Headers({\n          ...defaultHeaders,\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'GET',\n          headers,\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus, responseType);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    post: async <TData, TSend = any>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'POST',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    put: async <TData, TSend = any>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'PUT',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    del: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'DELETE',\n          headers,\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n  };\n\n  return fetchClient;\n};\n\nexport {\n  getFetchClient,\n  isFetchError,\n  FetchError,\n  attemptTokenRefresh,\n  storeToken,\n  setOnTokenUpdate,\n};\nexport type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };\n"],"names":["STORAGE_KEYS","TOKEN","refreshPromise","onTokenUpdate","setOnTokenUpdate","callback","isAuthPath","url","test","storeToken","token","wasPersistedToLocalStorage","Boolean","localStorage","getItem","setItem","JSON","stringify","setCookie","refreshAccessToken","backendURL","window","strapi","response","fetch","method","credentials","headers","Accept","ok","console","warn","status","result","json","data","error","attemptTokenRefresh","finally","newToken","Error","name","FetchError","message","code","captureStackTrace","isFetchError","getToken","fromLocalStorage","parse","fromCookie","getCookieValue","getFetchClient","defaultOptions","getDefaultHeaders","Authorization","isFormDataRequest","body","FormData","addPrependingSlash","charAt","hasProtocol","RegExp","normalizeUrl","responseInterceptor","validateStatus","responseType","fetchError","blob","text","arrayBuffer","SyntaxError","withTokenRefresh","executeRequest","paramsSerializer","params","serializedParams","qs","encode","addBaseUrl","makeCreateRequestUrl","options","pipe","fetchClient","get","createRequestUrl","defaultHeaders","Headers","signal","post","delete","put","del"],"mappings":";;;;AAqBA,MAAMA,YAAAA,GAAe;IACnBC,KAAAA,EAAO,UAET,CAAA;AAEA;;AAEC,IACD,IAAIC,cAAAA,GAAgD,IAAA;AAEpD;;AAEC,IACD,IAAIC,aAAAA,GAAkD,IAAA;AAEtD;;;;;;;;;;;IAYA,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxBF,aAAAA,GAAgBE,QAAAA;AAClB;AAEA;;;;AAIC,IACD,MAAMC,UAAAA,GAAa,CAACC,GAAAA,GAAgB,wCAAA,CAAyCC,IAAI,CAACD,GAAAA,CAAAA;AAElF;;;;;;;;;IAUA,MAAME,aAAa,CAACC,KAAAA,GAAAA;;AAElB,IAAA,MAAMC,6BAA6BC,OAAAA,CAAQC,YAAAA,CAAaC,OAAO,CAACd,aAAaC,KAAK,CAAA,CAAA;AAElF,IAAA,IAAIU,0BAAAA,EAA4B;AAC9BE,QAAAA,YAAAA,CAAaE,OAAO,CAACf,YAAAA,CAAaC,KAAK,EAAEe,IAAAA,CAAKC,SAAS,CAACP,KAAAA,CAAAA,CAAAA;IAC1D,CAAA,MAAO;QACLQ,SAAAA,CAAUlB,YAAAA,CAAaC,KAAK,EAAES,KAAAA,CAAAA;AAChC,IAAA;;AAGA,IAAA,IAAIP,aAAAA,EAAe;QACjBA,aAAAA,CAAcO,KAAAA,CAAAA;AAChB,IAAA;AACF;AAEA;;;;AAIC,IACD,MAAMS,kBAAAA,GAAqB,UAAA;AACzB,IAAA,MAAMC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;IAE3C,IAAI;AACF,QAAA,MAAMG,WAAW,MAAMC,KAAAA,CAAM,GAAGJ,UAAAA,CAAW,mBAAmB,CAAC,EAAE;YAC/DK,MAAAA,EAAQ,MAAA;YACRC,WAAAA,EAAa,SAAA;YACbC,OAAAA,EAAS;gBACPC,MAAAA,EAAQ,kBAAA;gBACR,cAAA,EAAgB;AAClB;AACF,SAAA,CAAA;QAEA,IAAI,CAACL,QAAAA,CAASM,EAAE,EAAE;AAChBC,YAAAA,OAAAA,CAAQC,IAAI,CAAC,0CAAA,EAA4CR,QAAAA,CAASS,MAAM,CAAA;YACxE,OAAO,IAAA;AACT,QAAA;QAEA,MAAMC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;QAClC,MAAMxB,KAAAA,GAAQuB,QAAQE,IAAAA,EAAMzB,KAAAA;AAE5B,QAAA,IAAI,CAACA,KAAAA,EAAO;AACVoB,YAAAA,OAAAA,CAAQC,IAAI,CAAC,6CAAA,CAAA;YACb,OAAO,IAAA;AACT,QAAA;QAEAtB,UAAAA,CAAWC,KAAAA,CAAAA;QACX,OAAOA,KAAAA;AACT,IAAA,CAAA,CAAE,OAAO0B,KAAAA,EAAO;QACdN,OAAAA,CAAQM,KAAK,CAAC,6BAAA,EAA+BA,KAAAA,CAAAA;QAC7C,OAAO,IAAA;AACT,IAAA;AACF,CAAA;AAEA;;;;;;;AAOC,UACKC,mBAAAA,GAAsB,UAAA;AAC1B,IAAA,IAAI,CAACnC,cAAAA,EAAgB;QACnBA,cAAAA,GAAiBiB,kBAAAA,EAAAA,CAAqBmB,OAAO,CAAC,IAAA;YAC5CpC,cAAAA,GAAiB,IAAA;AACnB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAMqC,WAAW,MAAMrC,cAAAA;AACvB,IAAA,IAAI,CAACqC,QAAAA,EAAU;QACb,MAAMH,KAAAA,GAAQ,IAAII,KAAAA,CAAM,uCAAA,CAAA;AACxBJ,QAAAA,KAAAA,CAAMK,IAAI,GAAG,mBAAA;QACb,MAAML,KAAAA;AACR,IAAA;IAEA,OAAOG,QAAAA;AACT;AA2BA,MAAMG,UAAAA,SAAmBF,KAAAA,CAAAA;IAOvB,WAAA,CAAYG,OAAe,EAAEpB,QAAwB,CAAE;AACrD,QAAA,KAAK,CAACoB,OAAAA,CAAAA;QACN,IAAI,CAACF,IAAI,GAAG,YAAA;QACZ,IAAI,CAACE,OAAO,GAAGA,OAAAA;QACf,IAAI,CAACpB,QAAQ,GAAGA,QAAAA;AAChB,QAAA,IAAI,CAACqB,IAAI,GAAGrB,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;AACnC,QAAA,IAAI,CAACA,MAAM,GAAGT,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;;QAGrC,IAAIQ,KAAAA,CAAMK,iBAAiB,EAAE;YAC3BL,KAAAA,CAAMK,iBAAiB,CAAC,IAAI,EAAEH,UAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;AACF;AAEA,MAAMI,eAAe,CAACV,KAAAA,GAAAA;AACpB,IAAA,OAAOA,KAAAA,YAAiBM,UAAAA;AAC1B;AAEA,MAAMK,QAAAA,GAAW,IAAA;AACf,IAAA,MAAMC,gBAAAA,GAAmBnC,YAAAA,CAAaC,OAAO,CAACd,aAAaC,KAAK,CAAA;AAChE,IAAA,IAAI+C,gBAAAA,EAAkB;QACpB,OAAOhC,IAAAA,CAAKiC,KAAK,CAACD,gBAAAA,CAAAA;AACpB,IAAA;IAEA,MAAME,UAAAA,GAAaC,cAAAA,CAAenD,YAAAA,CAAaC,KAAK,CAAA;AACpD,IAAA,OAAOiD,UAAAA,IAAc,IAAA;AACvB,CAAA;AAyBA;;;;;;;;;;;;;;;;;;;AAmBC,IACD,MAAME,cAAAA,GAAiB,CAACC,cAAAA,GAA8B,EAAE,GAAA;AACtD,IAAA,MAAMjC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;AAE3C;;;MAIA,MAAMkC,iBAAAA,GAAoB,KAAO;YAC/B1B,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB,kBAAA;YAChB2B,aAAAA,EAAe,CAAC,OAAO,EAAER,QAAAA,EAAAA,CAAAA;SAC3B,CAAA;IAEA,MAAMS,iBAAAA,GAAoB,CAACC,IAAAA,GAAkBA,IAAAA,YAAgBC,QAAAA;AAC7D,IAAA,MAAMC,kBAAAA,GAAqB,CAACpD,GAAAA,GAAiBA,GAAAA,CAAIqD,MAAM,CAAC,CAAA,CAAA,KAAO,GAAA,GAAM,CAAC,CAAC,EAAErD,GAAAA,CAAAA,CAAK,GAAGA,GAAAA;;IAGjF,MAAMsD,WAAAA,GAAc,CAACtD,GAAAA,GAAgB,IAAIuD,OAAO,kBAAA,EAAoB,GAAA,CAAA,CAAKtD,IAAI,CAACD,GAAAA,CAAAA;;AAG9E,IAAA,MAAMwD,eAAe,CAACxD,GAAAA,GAAiBsD,WAAAA,CAAYtD,GAAAA,CAAAA,GAAOA,MAAMoD,kBAAAA,CAAmBpD,GAAAA,CAAAA;;AAGnF,IAAA,MAAMyD,mBAAAA,GAAsB,OAC1BzC,QAAAA,EACA0C,cAAAA,EACAC,eAA0D,MAAM,GAAA;AAEhE,QAAA,IAAIA,iBAAiB,MAAA,EAAQ;YAC3B,IAAI,CAAC3C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMmC,UAAAA,GAAa,IAAIzB,UAAAA,CAAW,cAAA,CAAA;gBAClCyB,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,IAAIlC,MAAAA;AACJ,YAAA,IAAIiC,iBAAiB,MAAA,EAAQ;gBAC3BjC,MAAAA,GAAS,MAAMV,SAAS6C,IAAI,EAAA;YAC9B,CAAA,MAAO,IAAIF,iBAAiB,MAAA,EAAQ;gBAClCjC,MAAAA,GAAS,MAAMV,SAAS8C,IAAI,EAAA;YAC9B,CAAA,MAAO;gBACLpC,MAAAA,GAAS,MAAMV,SAAS+C,WAAW,EAAA;AACrC,YAAA;YAEA,OAAO;gBAAEnC,IAAAA,EAAMF,MAAAA;AAAiBD,gBAAAA,MAAAA,EAAQT,SAASS,MAAM;AAAEL,gBAAAA,OAAAA,EAASJ,SAASI;AAAQ,aAAA;AACrF,QAAA;QAEA,IAAI;YACF,MAAMM,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;AAElC;;;;AAIC,UACD,IAAI,CAACX,QAAAA,CAASM,EAAE,IAAII,MAAAA,CAAOG,KAAK,IAAI,CAAC6B,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;AACtE,gBAAA,MAAMmC,aAAa,IAAIzB,UAAAA,CAAWT,OAAOG,KAAK,CAACO,OAAO,EAAE;oBAAER,IAAAA,EAAMF;AAAO,iBAAA,CAAA;gBACvEkC,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,IAAI,CAAC5C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMmC,UAAAA,GAAa,IAAIzB,UAAAA,CAAW,sBAAA,CAAA;gBAClCyB,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,OAAO;gBAAEhC,IAAAA,EAAMF;AAAO,aAAA;AACxB,QAAA,CAAA,CAAE,OAAOG,KAAAA,EAAO;AACd,YAAA,IAAIA,KAAAA,YAAiBmC,WAAAA,IAAehD,QAAAA,CAASM,EAAE,EAAE;;gBAE/C,OAAO;AAAEM,oBAAAA,IAAAA,EAAM,EAAE;AAAEH,oBAAAA,MAAAA,EAAQT,SAASS;AAAO,iBAAA;YAC7C,CAAA,MAAO;gBACL,MAAMI,KAAAA;AACR,YAAA;AACF,QAAA;AACF,IAAA,CAAA;AAEA;;;;MAKA,MAAMoC,gBAAAA,GAAmB,OACvBjE,GAAAA,EACAkE,cAAAA,GAAAA;QAEA,IAAI;AACF,YAAA,OAAO,MAAMA,cAAAA,EAAAA;AACf,QAAA,CAAA,CAAE,OAAOrC,KAAAA,EAAO;;YAEd,IAAIU,YAAAA,CAAaV,UAAUA,KAAAA,CAAMJ,MAAM,KAAK,GAAA,IAAO,CAAC1B,WAAWC,GAAAA,CAAAA,EAAM;gBACnE,IAAI;oBACF,MAAM8B,mBAAAA,EAAAA;;AAEN,oBAAA,OAAO,MAAMoC,cAAAA,EAAAA;AACf,gBAAA,CAAA,CAAE,OAAM;;oBAEN,MAAMrC,KAAAA;AACR,gBAAA;AACF,YAAA;YACA,MAAMA,KAAAA;AACR,QAAA;AACF,IAAA,CAAA;IAEA,MAAMsC,gBAAAA,GACJ,CAAkBC,MAAAA,GAClB,CAACpE,GAAAA,GAAAA;AACC,YAAA,IAAIoE,MAAAA,EAAQ;gBACV,IAAI,OAAOA,WAAW,QAAA,EAAU;AAC9B,oBAAA,OAAO,CAAA,EAAGpE,GAAAA,CAAI,CAAC,EAAEoE,MAAAA,CAAAA,CAAQ;AAC3B,gBAAA;AAEA;;;;AAIC,YACD,MAAMC,gBAAAA,GAAmBC,WAAAA,CAAG5D,SAAS,CAAC0D,MAAAA,EAAQ;oBAAEG,MAAAA,EAAQ;AAAM,iBAAA,CAAA;AAC9D,gBAAA,IAAIF,gBAAAA,EAAkB;AACpB,oBAAA,OAAO,CAAA,EAAGrE,GAAAA,CAAI,CAAC,EAAEqE,gBAAAA,CAAAA,CAAkB;AACrC,gBAAA;gBACA,OAAOrE,GAAAA;AACT,YAAA;YACA,OAAOA,GAAAA;AACT,QAAA,CAAA;AAEF,IAAA,MAAMwE,aAAa,CAACxE,GAAAA,GAAAA;QAClB,OAAO,CAAA,EAAGa,aAAab,GAAAA,CAAAA,CAAK;AAC9B,IAAA,CAAA;AAEA;;;MAIA,MAAMyE,uBAAuB,CAACC,OAAAA,GAC5BC,KAAKnB,YAAAA,EAAcgB,UAAAA,EAAYL,iBAAiBO,OAAAA,EAASN,MAAAA,CAAAA,CAAAA;AAE3D,IAAA,MAAMQ,WAAAA,GAA2B;AAC/BC,QAAAA,GAAAA,EAAK,OAAc7E,GAAAA,EAAa0E,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;YAC9C,MAAMf,YAAAA,GAAee,SAASf,YAAAA,IAAgB,MAAA;AAE9C,YAAA,MAAMO,cAAAA,GAAiB,UAAA;gBACrB,MAAM,EAAElB,aAAa,EAAE,GAAGD,iBAAAA,EAAAA;;gBAG1B,MAAMgC,cAAAA,GAAiBpB,YAAAA,KAAiB,MAAA,GAASZ,iBAAAA,EAAAA,GAAsB;AAAEC,oBAAAA;AAAc,iBAAA;gBAEvF,MAAM5B,OAAAA,GAAU,IAAI4D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGD,cAAc;AACjB,oBAAA,GAAGL,SAAStD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAM6D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUnC,cAAAA,CAAemC,MAAM;oBAChD/D,MAAAA,EAAQ,KAAA;AACRE,oBAAAA;AACF,iBAAA,CAAA;gBAEA,OAAOqC,mBAAAA,CAA2BzC,QAAAA,EAAU0D,OAAAA,EAAShB,cAAAA,EAAgBC,YAAAA,CAAAA;AACvE,YAAA,CAAA;AAEA,YAAA,OAAOM,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAgB,IAAAA,EAAM,OACJlF,KACA4B,IAAAA,EACA8C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM9C,OAAAA,GAAU,IAAI4D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGjC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG2B,SAAStD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ+D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMnE,QAAAA,GAAW,MAAMC,KAAAA,CAAM6D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUnC,cAAAA,CAAemC,MAAM;oBAChD/D,MAAAA,EAAQ,MAAA;AACRE,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBnB,IAAAA,CAAKC,SAAS,CAACkB,IAAAA;AACtE,iBAAA,CAAA;gBACA,OAAO6B,mBAAAA,CAA2BzC,UAAU0D,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOO,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAkB,GAAAA,EAAK,OACHpF,KACA4B,IAAAA,EACA8C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM9C,OAAAA,GAAU,IAAI4D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGjC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG2B,SAAStD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ+D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMnE,QAAAA,GAAW,MAAMC,KAAAA,CAAM6D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUnC,cAAAA,CAAemC,MAAM;oBAChD/D,MAAAA,EAAQ,KAAA;AACRE,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBnB,IAAAA,CAAKC,SAAS,CAACkB,IAAAA;AACtE,iBAAA,CAAA;gBAEA,OAAO6B,mBAAAA,CAA2BzC,UAAU0D,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOO,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;AACAmB,QAAAA,GAAAA,EAAK,OAAcrF,GAAAA,EAAa0E,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM9C,OAAAA,GAAU,IAAI4D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGjC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG2B,SAAStD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAM6D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUnC,cAAAA,CAAemC,MAAM;oBAChD/D,MAAAA,EAAQ,QAAA;AACRE,oBAAAA;AACF,iBAAA,CAAA;gBACA,OAAOqC,mBAAAA,CAA2BzC,UAAU0D,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOO,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA;AACF,KAAA;IAEA,OAAOU,WAAAA;AACT;;;;"}

package/dist/admin/admin/tests/server.js

@@ -111,6 +111,7 @@ const server = node.setupServer(...[
     msw.rest.get('/admin/users/me', (req, res, ctx)=>{
         return res(ctx.json({
             data: {
+                id: 1,
                 email: 'michka@michka.fr',
                 firstname: 'michoko',
                 lastname: 'ronronscelestes',
@@ -165,30 +166,41 @@ const server = node.setupServer(...[
      *
      */ msw.rest.get('/admin/permissions', (req, res, ctx)=>{
         const role = req.url.searchParams.get('role');
-        if (role !== '1') {
-            return res(ctx.status(404));
-        }
-        return res(ctx.json({
-            data: {
-                conditions: [
+        const permissionsData = {
+            conditions: [
+                {
+                    id: 'admin::is-creator',
+                    displayName: 'Is creator',
+                    category: 'default'
+                }
+            ],
+            sections: {
+                collectionTypes: {
+                    actions: [],
+                    subjects: []
+                },
+                singleTypes: {
+                    actions: [],
+                    subjects: []
+                },
+                plugins: [],
+                settings: [
                     {
-                        id: 'admin::is-creator',
-                        displayName: 'Is creator',
-                        category: 'default'
+                        displayName: 'Access the Email Settings page',
+                        category: 'email',
+                        subCategory: 'general',
+                        action: 'plugin::email.settings.read'
                     }
-                ],
-                sections: {
-                    settings: [
-                        {
-                            displayName: 'Access the Email Settings page',
-                            category: 'email',
-                            subCategory: 'general',
-                            action: 'plugin::email.settings.read'
-                        }
-                    ]
-                }
+                ]
             }
-        }));
+        };
+        // role === '' is used by AdminPermissions (token permission layout, no role scoping)
+        if (role === '1' || role === '') {
+            return res(ctx.json({
+                data: permissionsData
+            }));
+        }
+        return res(ctx.status(404));
     }),
     /**
      *
@@ -495,6 +507,7 @@ const server = node.setupServer(...[
                     id: '1',
                     name: 'My super token',
                     description: 'This describe my super token',
+                    kind: 'content-api',
                     type: 'read-only',
                     createdAt: '2021-11-15T00:00:00.000Z',
                     permissions: []
@@ -503,17 +516,82 @@ const server = node.setupServer(...[
         }));
     }),
     msw.rest.get('/admin/api-tokens/:id', (req, res, ctx)=>{
+        const { id } = req.params;
+        if (id === '2') {
+            return res(ctx.json({
+                data: {
+                    id: '2',
+                    name: 'My admin token',
+                    description: 'This is an admin token',
+                    kind: 'admin',
+                    adminPermissions: [],
+                    adminUserOwner: {
+                        id: 1,
+                        firstname: 'John',
+                        lastname: 'Doe',
+                        email: 'john@example.com'
+                    },
+                    createdAt: '2021-11-15T00:00:00.000Z'
+                }
+            }));
+        }
         return res(ctx.json({
             data: {
                 id: '1',
                 name: 'My super token',
                 description: 'This describe my super token',
+                kind: 'content-api',
                 type: 'read-only',
                 createdAt: '2021-11-15T00:00:00.000Z',
                 permissions: []
             }
         }));
     }),
+    /**
+     * ADMIN TOKENS
+     */ msw.rest.get('/admin/admin-tokens', (req, res, ctx)=>{
+        return res(ctx.json({
+            data: [
+                {
+                    id: '1',
+                    name: 'My admin token',
+                    description: 'This is an admin token',
+                    kind: 'admin',
+                    adminPermissions: [],
+                    adminUserOwner: {
+                        id: 1,
+                        firstname: 'John',
+                        lastname: 'Doe',
+                        email: 'john@example.com'
+                    },
+                    createdAt: '2021-11-15T00:00:00.000Z'
+                }
+            ]
+        }));
+    }),
+    msw.rest.get('/admin/admin-tokens/:id', (req, res, ctx)=>{
+        return res(ctx.json({
+            data: {
+                id: '1',
+                name: 'My admin token',
+                description: 'This is an admin token',
+                kind: 'admin',
+                adminPermissions: [],
+                adminUserOwner: {
+                    id: 1,
+                    firstname: 'John',
+                    lastname: 'Doe',
+                    email: 'john@example.com'
+                },
+                createdAt: '2021-11-15T00:00:00.000Z'
+            }
+        }));
+    }),
+    msw.rest.get('/admin/admin-tokens/:id/owner-permissions', (req, res, ctx)=>{
+        return res(ctx.json({
+            data: []
+        }));
+    }),
     /**
      * Audit Logs
      */ msw.rest.get('/admin/audit-logs', (req, res, ctx)=>{