@strapi/admin 5.52.2 → 5.53.0

package/dist/admin/admin/src/utils/getFetchClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"getFetchClient.js","sources":["../../../../../admin/src/utils/getFetchClient.ts"],"sourcesContent":["import pipe from 'lodash/fp/pipe';\n// eslint-disable-next-line import/default\nimport qs from 'qs';\n\nimport { AUTH_COOKIE_NAME, getCookieValue, setCookie } from './cookies';\n\nimport type { errors } from '@strapi/utils';\n\nexport type ApiError =\n  | errors.ApplicationError\n  | errors.ForbiddenError\n  | errors.NotFoundError\n  | errors.NotImplementedError\n  | errors.PaginationError\n  | errors.PayloadTooLargeError\n  | errors.PolicyError\n  | errors.RateLimitError\n  | errors.UnauthorizedError\n  | errors.ValidationError\n  | errors.YupValidationError;\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  USER: 'userInfo',\n};\n\n/**\n * Module-level promise to ensure only one token refresh happens at a time\n */\nlet refreshPromise: Promise<string | null> | null = null;\n\n/**\n * Callback to notify the app when the token is updated (e.g., to update Redux state)\n */\nlet onTokenUpdate: ((token: string) => void) | null = null;\n\n/**\n * Callback to notify the app when the session has been terminated and the user\n * should be redirected to the login page (e.g., refresh token rejected, idle\n * session expired). The React layer registers a handler that clears local\n * auth state and navigates to /auth/login.\n */\nlet onSessionExpired: (() => void) | null = null;\n\n/**\n * Set the callback that will be called when the token is refreshed.\n * This allows the React layer to update Redux state when a token refresh occurs.\n *\n * @param callback - Function to call with the new token, or null to clear\n * @example\n * // In a React component\n * useEffect(() => {\n *   setOnTokenUpdate((token) => dispatch(setToken(token)));\n *   return () => setOnTokenUpdate(null);\n * }, [dispatch]);\n */\nconst setOnTokenUpdate = (callback: ((token: string) => void) | null): void => {\n  onTokenUpdate = callback;\n};\n\n/**\n * Set the callback that will be called when the active session is no longer\n * valid (refresh token rejected by the server, or detected idle on the\n * client). This lets the active tab redirect to /auth/login without waiting\n * for the next user-initiated request to fail.\n *\n * @param callback - Function to call when the session ends, or null to clear\n */\nconst setOnSessionExpired = (callback: (() => void) | null): void => {\n  onSessionExpired = callback;\n};\n\n/**\n * Trigger the registered session-expired callback, if any. Safe to call from\n * non-React code (e.g., the RTK Query baseQuery 401 handler).\n */\nconst triggerSessionExpired = (): void => {\n  onSessionExpired?.();\n};\n\n/**\n * Check if the URL is an auth path that should not trigger token refresh.\n * Note: No ^ anchor since the URL may include the baseURL prefix (e.g., \"http://localhost:1337/admin/login\").\n * This differs from baseQuery.ts which uses ^/admin since it receives normalized paths.\n */\nconst isAuthPath = (url: string) => /\\/admin\\/(login|logout|access-token)\\b/.test(url);\n\n/**\n * Store the new token in the appropriate storage (localStorage or cookie)\n * and notify the app to update its state.\n *\n * Uses localStorage if the user selected \"remember me\" during login,\n * otherwise uses cookies for session-based storage.\n *\n * @param token - The JWT token to store\n * @internal Exported for testing purposes\n */\nconst storeToken = (token: string): void => {\n  // Check if the original token was stored in localStorage (persist mode)\n  const wasPersistedToLocalStorage = Boolean(localStorage.getItem(STORAGE_KEYS.TOKEN));\n\n  if (wasPersistedToLocalStorage) {\n    localStorage.setItem(STORAGE_KEYS.TOKEN, JSON.stringify(token));\n  } else {\n    setCookie(AUTH_COOKIE_NAME, token);\n  }\n\n  // Notify the app to update its state (e.g., Redux)\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n};\n\n/**\n * Refresh the access token by calling the /admin/access-token endpoint.\n * This uses a low-level fetch to avoid recursion through the interceptor.\n * Returns the new token on success, or null on failure.\n */\nconst refreshAccessToken = async (): Promise<string | null> => {\n  const backendURL = window.strapi.backendURL;\n\n  try {\n    const response = await fetch(`${backendURL}/admin/access-token`, {\n      method: 'POST',\n      credentials: 'include', // Include cookies for the refresh token\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n    });\n\n    if (!response.ok) {\n      console.warn('[Auth] Token refresh failed with status:', response.status);\n      return null;\n    }\n\n    const result = await response.json();\n    const token = result?.data?.token as string | undefined;\n\n    if (!token) {\n      console.warn('[Auth] Token refresh response missing token');\n      return null;\n    }\n\n    storeToken(token);\n    return token;\n  } catch (error) {\n    console.error('[Auth] Token refresh error:', error);\n    return null;\n  }\n};\n\n/**\n * Attempt to refresh the token if not already refreshing.\n * Uses a module-level promise to prevent concurrent refresh requests.\n *\n * @returns The new authentication token\n * @throws {Error} If the token refresh fails (e.g., refresh token expired)\n * @internal Exported for testing purposes\n */\nconst attemptTokenRefresh = async (): Promise<string> => {\n  if (!refreshPromise) {\n    refreshPromise = refreshAccessToken().finally(() => {\n      refreshPromise = null;\n    });\n  }\n\n  const newToken = await refreshPromise;\n  if (!newToken) {\n    const error = new Error('Session expired. Please log in again.');\n    error.name = 'TokenRefreshError';\n    throw error;\n  }\n\n  return newToken;\n};\n\ntype FetchResponse<TData = unknown> = {\n  data: TData;\n  status?: number;\n  headers?: Headers;\n};\n\ntype FetchOptions = {\n  params?: unknown;\n  signal?: AbortSignal;\n  headers?: Record<string, string>;\n  validateStatus?: ((status: number) => boolean) | null;\n  responseType?: 'json' | 'blob' | 'text' | 'arrayBuffer';\n};\n\ntype FetchConfig = {\n  signal?: AbortSignal;\n};\n\ninterface ErrorResponse {\n  data: {\n    data?: unknown;\n    error: ApiError & { status?: number };\n  };\n}\n\nclass FetchError extends Error {\n  public name: string;\n  public message: string;\n  public response?: ErrorResponse;\n  public code?: number;\n  public status?: number;\n\n  constructor(message: string, response?: ErrorResponse) {\n    super(message);\n    this.name = 'FetchError';\n    this.message = message;\n    this.response = response;\n    this.code = response?.data?.error?.status;\n    this.status = response?.data?.error?.status;\n\n    // Ensure correct stack trace in error object\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, FetchError);\n    }\n  }\n}\n\nconst isFetchError = (error: unknown): error is FetchError => {\n  return error instanceof FetchError;\n};\n\nconst getToken = (): string | null => {\n  const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);\n  if (fromLocalStorage) {\n    return JSON.parse(fromLocalStorage);\n  }\n\n  const fromCookie = getCookieValue(AUTH_COOKIE_NAME);\n  return fromCookie ?? null;\n};\n\ntype FetchClient = {\n  get: {\n    (url: string, config: FetchOptions & { responseType: 'blob' }): Promise<FetchResponse<Blob>>;\n    (url: string, config: FetchOptions & { responseType: 'text' }): Promise<FetchResponse<string>>;\n    (\n      url: string,\n      config: FetchOptions & { responseType: 'arrayBuffer' }\n    ): Promise<FetchResponse<ArrayBuffer>>;\n    <TData = unknown>(url: string, config?: FetchOptions): Promise<FetchResponse<TData>>;\n  };\n  put: <TData = unknown, TSend = unknown>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  post: <TData = unknown, TSend = unknown>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  del: <TData = unknown>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n};\n\n/**\n * @public\n * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.\n * @returns {FetchClient} A fetch client object with methods for making HTTP requests.\n * @description This is an abstraction around the native fetch exposed by a function. It provides a simple interface to handle API calls\n * to the Strapi backend.\n * @example\n * ```tsx\n * import { getFetchClient } from '@strapi/admin/admin';\n *\n * const myFunct = () => {\n *   const { get } = getFetchClient();\n *   const requestURL = \"/some-endpoint\";\n *\n *   const { data } = await get(requestURL);\n *\n *   return data;\n * };\n * ```\n */\nconst getFetchClient = (defaultOptions: FetchConfig = {}): FetchClient => {\n  const backendURL = window.strapi.backendURL;\n\n  /**\n   * Create default headers with the current token.\n   * This is a function so we can get a fresh token after refresh.\n   */\n  const getDefaultHeaders = () => ({\n    Accept: 'application/json',\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${getToken()}`,\n  });\n\n  const isFormDataRequest = (body: unknown) => body instanceof FormData;\n  const addPrependingSlash = (url: string) => (url.charAt(0) !== '/' ? `/${url}` : url);\n\n  // This regular expression matches a string that starts with either \"http://\" or \"https://\" or any other protocol name in lower case letters, followed by \"://\" and ends with anything else\n  const hasProtocol = (url: string) => new RegExp('^(?:[a-z+]+:)?//', 'i').test(url);\n\n  // Check if the url has a prepending slash, if not add a slash\n  const normalizeUrl = (url: string) => (hasProtocol(url) ? url : addPrependingSlash(url));\n\n  // Add a response interceptor to return the response\n  const responseInterceptor = async <TData = unknown>(\n    response: Response,\n    validateStatus?: FetchOptions['validateStatus'],\n    responseType: NonNullable<FetchOptions['responseType']> = 'json'\n  ): Promise<FetchResponse<TData>> => {\n    if (responseType !== 'json') {\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      let result: Blob | string | ArrayBuffer;\n      if (responseType === 'blob') {\n        result = await response.blob();\n      } else if (responseType === 'text') {\n        result = await response.text();\n      } else {\n        result = await response.arrayBuffer();\n      }\n\n      return { data: result as TData, status: response.status, headers: response.headers };\n    }\n\n    if (response.status === 204) {\n      return { data: {} as TData, status: response.status };\n    }\n\n    try {\n      const result = await response.json();\n\n      if (!response.ok && result.error && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError(result.error.message, { data: result });\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Unknown Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      return { data: result };\n    } catch (error) {\n      // An empty 200 body causes `response.json()` to throw a `SyntaxError`. We treat\n      // it as success and return an empty payload. We match on `error.name` rather\n      // than `instanceof SyntaxError` because constructor identity differs across JS\n      // realms — a Response from a different realm (e.g. undici under jsdom in tests,\n      // a service worker or iframe in browsers) throws a `SyntaxError` whose\n      // constructor is not the same identity as the one this module closes over. Name\n      // comparison is realm-agnostic.\n      if ((error as Error | null)?.name === 'SyntaxError' && response.ok) {\n        return { data: {}, status: response.status } as FetchResponse<TData>;\n      } else {\n        throw error;\n      }\n    }\n  };\n\n  /**\n   * Execute a fetch request with automatic token refresh on 401 errors.\n   * @param url - The request URL (used to check if it's an auth path)\n   * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)\n   */\n  const withTokenRefresh = async <TData>(\n    url: string,\n    executeRequest: () => Promise<FetchResponse<TData>>\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      return await executeRequest();\n    } catch (error) {\n      // Only attempt refresh for 401 errors on non-auth paths\n      if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {\n        try {\n          await attemptTokenRefresh();\n          // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token\n          return await executeRequest();\n        } catch {\n          // If refresh fails, throw the original error\n          throw error;\n        }\n      }\n      throw error;\n    }\n  };\n\n  const paramsSerializer =\n    <Param = unknown>(params?: Param) =>\n    (url: string) => {\n      if (params) {\n        if (typeof params === 'string') {\n          return `${url}?${params}`;\n        }\n\n        /**\n         * TODO V6: Encoding should be enabled in this step\n         * So the rest of the app doesn't have to worry about it,\n         * It's considered a breaking change because it impacts any API request, including the user's custom code\n         */\n        const serializedParams = qs.stringify(params, { encode: false });\n        if (serializedParams) {\n          return `${url}?${serializedParams}`;\n        }\n        return url;\n      }\n      return url;\n    };\n\n  const addBaseUrl = (url: Parameters<typeof fetch>[0]) => {\n    return `${backendURL}${url}`;\n  };\n\n  /**\n   * We use the factory method because the options\n   * are unique to the individual request\n   */\n  const makeCreateRequestUrl = (options?: FetchOptions) =>\n    pipe(normalizeUrl, addBaseUrl, paramsSerializer(options?.params));\n\n  const fetchClient: FetchClient = {\n    get: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      const responseType = options?.responseType ?? 'json';\n\n      const executeRequest = async () => {\n        const { Authorization } = getDefaultHeaders();\n\n        // For non-JSON response types, omit content negotiation headers that imply JSON\n        const defaultHeaders = responseType === 'json' ? getDefaultHeaders() : { Authorization };\n\n        const headers = new Headers({\n          ...defaultHeaders,\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'GET',\n          credentials: 'include',\n          headers,\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus, responseType);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    post: async <TData, TSend = unknown>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'POST',\n          credentials: 'include',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    put: async <TData, TSend = unknown>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'PUT',\n          credentials: 'include',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    del: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'DELETE',\n          credentials: 'include',\n          headers,\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n  };\n\n  return fetchClient;\n};\n\nexport {\n  getFetchClient,\n  isFetchError,\n  FetchError,\n  attemptTokenRefresh,\n  storeToken,\n  setOnTokenUpdate,\n  setOnSessionExpired,\n  triggerSessionExpired,\n};\nexport type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };\n"],"names":["STORAGE_KEYS","TOKEN","refreshPromise","onTokenUpdate","onSessionExpired","setOnTokenUpdate","callback","setOnSessionExpired","triggerSessionExpired","isAuthPath","url","test","storeToken","token","wasPersistedToLocalStorage","Boolean","localStorage","getItem","setItem","JSON","stringify","setCookie","AUTH_COOKIE_NAME","refreshAccessToken","backendURL","window","strapi","response","fetch","method","credentials","headers","Accept","ok","console","warn","status","result","json","data","error","attemptTokenRefresh","finally","newToken","Error","name","FetchError","message","code","captureStackTrace","isFetchError","getToken","fromLocalStorage","parse","fromCookie","getCookieValue","getFetchClient","defaultOptions","getDefaultHeaders","Authorization","isFormDataRequest","body","FormData","addPrependingSlash","charAt","hasProtocol","RegExp","normalizeUrl","responseInterceptor","validateStatus","responseType","fetchError","blob","text","arrayBuffer","withTokenRefresh","executeRequest","paramsSerializer","params","serializedParams","qs","encode","addBaseUrl","makeCreateRequestUrl","options","pipe","fetchClient","get","createRequestUrl","defaultHeaders","Headers","signal","post","delete","put","del"],"mappings":";;;;;;;;;;;AAqBA,MAAMA,YAAAA,GAAe;IACnBC,KAAAA,EAAO,UAET,CAAA;AAEA;;AAEC,IACD,IAAIC,cAAAA,GAAgD,IAAA;AAEpD;;AAEC,IACD,IAAIC,aAAAA,GAAkD,IAAA;AAEtD;;;;;AAKC,IACD,IAAIC,gBAAAA,GAAwC,IAAA;AAE5C;;;;;;;;;;;IAYA,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxBH,aAAAA,GAAgBG,QAAAA;AAClB;AAEA;;;;;;;IAQA,MAAMC,sBAAsB,CAACD,QAAAA,GAAAA;IAC3BF,gBAAAA,GAAmBE,QAAAA;AACrB;AAEA;;;AAGC,UACKE,qBAAAA,GAAwB,IAAA;AAC5BJ,IAAAA,gBAAAA,IAAAA;AACF;AAEA;;;;AAIC,IACD,MAAMK,UAAAA,GAAa,CAACC,GAAAA,GAAgB,wCAAA,CAAyCC,IAAI,CAACD,GAAAA,CAAAA;AAElF;;;;;;;;;IAUA,MAAME,aAAa,CAACC,KAAAA,GAAAA;;AAElB,IAAA,MAAMC,6BAA6BC,OAAAA,CAAQC,YAAAA,CAAaC,OAAO,CAACjB,aAAaC,KAAK,CAAA,CAAA;AAElF,IAAA,IAAIa,0BAAAA,EAA4B;AAC9BE,QAAAA,YAAAA,CAAaE,OAAO,CAAClB,YAAAA,CAAaC,KAAK,EAAEkB,IAAAA,CAAKC,SAAS,CAACP,KAAAA,CAAAA,CAAAA;IAC1D,CAAA,MAAO;AACLQ,QAAAA,iBAAAA,CAAUC,wBAAAA,EAAkBT,KAAAA,CAAAA;AAC9B,IAAA;;AAGA,IAAA,IAAIV,aAAAA,EAAe;QACjBA,aAAAA,CAAcU,KAAAA,CAAAA;AAChB,IAAA;AACF;AAEA;;;;AAIC,IACD,MAAMU,kBAAAA,GAAqB,UAAA;AACzB,IAAA,MAAMC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;IAE3C,IAAI;AACF,QAAA,MAAMG,WAAW,MAAMC,KAAAA,CAAM,GAAGJ,UAAAA,CAAW,mBAAmB,CAAC,EAAE;YAC/DK,MAAAA,EAAQ,MAAA;YACRC,WAAAA,EAAa,SAAA;YACbC,OAAAA,EAAS;gBACPC,MAAAA,EAAQ,kBAAA;gBACR,cAAA,EAAgB;AAClB;AACF,SAAA,CAAA;QAEA,IAAI,CAACL,QAAAA,CAASM,EAAE,EAAE;AAChBC,YAAAA,OAAAA,CAAQC,IAAI,CAAC,0CAAA,EAA4CR,QAAAA,CAASS,MAAM,CAAA;YACxE,OAAO,IAAA;AACT,QAAA;QAEA,MAAMC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;QAClC,MAAMzB,KAAAA,GAAQwB,QAAQE,IAAAA,EAAM1B,KAAAA;AAE5B,QAAA,IAAI,CAACA,KAAAA,EAAO;AACVqB,YAAAA,OAAAA,CAAQC,IAAI,CAAC,6CAAA,CAAA;YACb,OAAO,IAAA;AACT,QAAA;QAEAvB,UAAAA,CAAWC,KAAAA,CAAAA;QACX,OAAOA,KAAAA;AACT,IAAA,CAAA,CAAE,OAAO2B,KAAAA,EAAO;QACdN,OAAAA,CAAQM,KAAK,CAAC,6BAAA,EAA+BA,KAAAA,CAAAA;QAC7C,OAAO,IAAA;AACT,IAAA;AACF,CAAA;AAEA;;;;;;;AAOC,UACKC,mBAAAA,GAAsB,UAAA;AAC1B,IAAA,IAAI,CAACvC,cAAAA,EAAgB;QACnBA,cAAAA,GAAiBqB,kBAAAA,EAAAA,CAAqBmB,OAAO,CAAC,IAAA;YAC5CxC,cAAAA,GAAiB,IAAA;AACnB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAMyC,WAAW,MAAMzC,cAAAA;AACvB,IAAA,IAAI,CAACyC,QAAAA,EAAU;QACb,MAAMH,KAAAA,GAAQ,IAAII,KAAAA,CAAM,uCAAA,CAAA;AACxBJ,QAAAA,KAAAA,CAAMK,IAAI,GAAG,mBAAA;QACb,MAAML,KAAAA;AACR,IAAA;IAEA,OAAOG,QAAAA;AACT;AA2BA,MAAMG,UAAAA,SAAmBF,KAAAA,CAAAA;IAOvB,WAAA,CAAYG,OAAe,EAAEpB,QAAwB,CAAE;AACrD,QAAA,KAAK,CAACoB,OAAAA,CAAAA;QACN,IAAI,CAACF,IAAI,GAAG,YAAA;QACZ,IAAI,CAACE,OAAO,GAAGA,OAAAA;QACf,IAAI,CAACpB,QAAQ,GAAGA,QAAAA;AAChB,QAAA,IAAI,CAACqB,IAAI,GAAGrB,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;AACnC,QAAA,IAAI,CAACA,MAAM,GAAGT,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;;QAGrC,IAAIQ,KAAAA,CAAMK,iBAAiB,EAAE;YAC3BL,KAAAA,CAAMK,iBAAiB,CAAC,IAAI,EAAEH,UAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;AACF;AAEA,MAAMI,eAAe,CAACV,KAAAA,GAAAA;AACpB,IAAA,OAAOA,KAAAA,YAAiBM,UAAAA;AAC1B;AAEA,MAAMK,QAAAA,GAAW,IAAA;AACf,IAAA,MAAMC,gBAAAA,GAAmBpC,YAAAA,CAAaC,OAAO,CAACjB,aAAaC,KAAK,CAAA;AAChE,IAAA,IAAImD,gBAAAA,EAAkB;QACpB,OAAOjC,IAAAA,CAAKkC,KAAK,CAACD,gBAAAA,CAAAA;AACpB,IAAA;AAEA,IAAA,MAAME,aAAaC,sBAAAA,CAAejC,wBAAAA,CAAAA;AAClC,IAAA,OAAOgC,UAAAA,IAAc,IAAA;AACvB,CAAA;AAyBA;;;;;;;;;;;;;;;;;;;AAmBC,IACD,MAAME,cAAAA,GAAiB,CAACC,cAAAA,GAA8B,EAAE,GAAA;AACtD,IAAA,MAAMjC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;AAE3C;;;MAIA,MAAMkC,iBAAAA,GAAoB,KAAO;YAC/B1B,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB,kBAAA;YAChB2B,aAAAA,EAAe,CAAC,OAAO,EAAER,QAAAA,EAAAA,CAAAA;SAC3B,CAAA;IAEA,MAAMS,iBAAAA,GAAoB,CAACC,IAAAA,GAAkBA,IAAAA,YAAgBC,QAAAA;AAC7D,IAAA,MAAMC,kBAAAA,GAAqB,CAACrD,GAAAA,GAAiBA,GAAAA,CAAIsD,MAAM,CAAC,CAAA,CAAA,KAAO,GAAA,GAAM,CAAC,CAAC,EAAEtD,GAAAA,CAAAA,CAAK,GAAGA,GAAAA;;IAGjF,MAAMuD,WAAAA,GAAc,CAACvD,GAAAA,GAAgB,IAAIwD,OAAO,kBAAA,EAAoB,GAAA,CAAA,CAAKvD,IAAI,CAACD,GAAAA,CAAAA;;AAG9E,IAAA,MAAMyD,eAAe,CAACzD,GAAAA,GAAiBuD,WAAAA,CAAYvD,GAAAA,CAAAA,GAAOA,MAAMqD,kBAAAA,CAAmBrD,GAAAA,CAAAA;;AAGnF,IAAA,MAAM0D,mBAAAA,GAAsB,OAC1BzC,QAAAA,EACA0C,cAAAA,EACAC,eAA0D,MAAM,GAAA;AAEhE,QAAA,IAAIA,iBAAiB,MAAA,EAAQ;YAC3B,IAAI,CAAC3C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMmC,UAAAA,GAAa,IAAIzB,UAAAA,CAAW,cAAA,CAAA;gBAClCyB,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,IAAIlC,MAAAA;AACJ,YAAA,IAAIiC,iBAAiB,MAAA,EAAQ;gBAC3BjC,MAAAA,GAAS,MAAMV,SAAS6C,IAAI,EAAA;YAC9B,CAAA,MAAO,IAAIF,iBAAiB,MAAA,EAAQ;gBAClCjC,MAAAA,GAAS,MAAMV,SAAS8C,IAAI,EAAA;YAC9B,CAAA,MAAO;gBACLpC,MAAAA,GAAS,MAAMV,SAAS+C,WAAW,EAAA;AACrC,YAAA;YAEA,OAAO;gBAAEnC,IAAAA,EAAMF,MAAAA;AAAiBD,gBAAAA,MAAAA,EAAQT,SAASS,MAAM;AAAEL,gBAAAA,OAAAA,EAASJ,SAASI;AAAQ,aAAA;AACrF,QAAA;QAEA,IAAIJ,QAAAA,CAASS,MAAM,KAAK,GAAA,EAAK;YAC3B,OAAO;AAAEG,gBAAAA,IAAAA,EAAM,EAAC;AAAYH,gBAAAA,MAAAA,EAAQT,SAASS;AAAO,aAAA;AACtD,QAAA;QAEA,IAAI;YACF,MAAMC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;YAElC,IAAI,CAACX,QAAAA,CAASM,EAAE,IAAII,MAAAA,CAAOG,KAAK,IAAI,CAAC6B,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;AACtE,gBAAA,MAAMmC,aAAa,IAAIzB,UAAAA,CAAWT,OAAOG,KAAK,CAACO,OAAO,EAAE;oBAAER,IAAAA,EAAMF;AAAO,iBAAA,CAAA;gBACvEkC,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,IAAI,CAAC5C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMmC,UAAAA,GAAa,IAAIzB,UAAAA,CAAW,sBAAA,CAAA;gBAClCyB,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,OAAO;gBAAEhC,IAAAA,EAAMF;AAAO,aAAA;AACxB,QAAA,CAAA,CAAE,OAAOG,KAAAA,EAAO;;;;;;;;AAQd,YAAA,IAAI,KAACA,EAAwBK,IAAAA,KAAS,aAAA,IAAiBlB,QAAAA,CAASM,EAAE,EAAE;gBAClE,OAAO;AAAEM,oBAAAA,IAAAA,EAAM,EAAC;AAAGH,oBAAAA,MAAAA,EAAQT,SAASS;AAAO,iBAAA;YAC7C,CAAA,MAAO;gBACL,MAAMI,KAAAA;AACR,YAAA;AACF,QAAA;AACF,IAAA,CAAA;AAEA;;;;MAKA,MAAMmC,gBAAAA,GAAmB,OACvBjE,GAAAA,EACAkE,cAAAA,GAAAA;QAEA,IAAI;AACF,YAAA,OAAO,MAAMA,cAAAA,EAAAA;AACf,QAAA,CAAA,CAAE,OAAOpC,KAAAA,EAAO;;YAEd,IAAIU,YAAAA,CAAaV,UAAUA,KAAAA,CAAMJ,MAAM,KAAK,GAAA,IAAO,CAAC3B,WAAWC,GAAAA,CAAAA,EAAM;gBACnE,IAAI;oBACF,MAAM+B,mBAAAA,EAAAA;;AAEN,oBAAA,OAAO,MAAMmC,cAAAA,EAAAA;AACf,gBAAA,CAAA,CAAE,OAAM;;oBAEN,MAAMpC,KAAAA;AACR,gBAAA;AACF,YAAA;YACA,MAAMA,KAAAA;AACR,QAAA;AACF,IAAA,CAAA;IAEA,MAAMqC,gBAAAA,GACJ,CAAkBC,MAAAA,GAClB,CAACpE,GAAAA,GAAAA;AACC,YAAA,IAAIoE,MAAAA,EAAQ;gBACV,IAAI,OAAOA,WAAW,QAAA,EAAU;AAC9B,oBAAA,OAAO,CAAA,EAAGpE,GAAAA,CAAI,CAAC,EAAEoE,MAAAA,CAAAA,CAAQ;AAC3B,gBAAA;AAEA;;;;AAIC,YACD,MAAMC,gBAAAA,GAAmBC,mBAAAA,CAAG5D,SAAS,CAAC0D,MAAAA,EAAQ;oBAAEG,MAAAA,EAAQ;AAAM,iBAAA,CAAA;AAC9D,gBAAA,IAAIF,gBAAAA,EAAkB;AACpB,oBAAA,OAAO,CAAA,EAAGrE,GAAAA,CAAI,CAAC,EAAEqE,gBAAAA,CAAAA,CAAkB;AACrC,gBAAA;gBACA,OAAOrE,GAAAA;AACT,YAAA;YACA,OAAOA,GAAAA;AACT,QAAA,CAAA;AAEF,IAAA,MAAMwE,aAAa,CAACxE,GAAAA,GAAAA;QAClB,OAAO,CAAA,EAAGc,aAAad,GAAAA,CAAAA,CAAK;AAC9B,IAAA,CAAA;AAEA;;;MAIA,MAAMyE,uBAAuB,CAACC,OAAAA,GAC5BC,sBAAKlB,YAAAA,EAAce,UAAAA,EAAYL,iBAAiBO,OAAAA,EAASN,MAAAA,CAAAA,CAAAA;AAE3D,IAAA,MAAMQ,WAAAA,GAA2B;AAC/BC,QAAAA,GAAAA,EAAK,OAAc7E,GAAAA,EAAa0E,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;YAC9C,MAAMd,YAAAA,GAAec,SAASd,YAAAA,IAAgB,MAAA;AAE9C,YAAA,MAAMM,cAAAA,GAAiB,UAAA;gBACrB,MAAM,EAAEjB,aAAa,EAAE,GAAGD,iBAAAA,EAAAA;;gBAG1B,MAAM+B,cAAAA,GAAiBnB,YAAAA,KAAiB,MAAA,GAASZ,iBAAAA,EAAAA,GAAsB;AAAEC,oBAAAA;AAAc,iBAAA;gBAEvF,MAAM5B,OAAAA,GAAU,IAAI2D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGD,cAAc;AACjB,oBAAA,GAAGL,SAASrD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAM4D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUlC,cAAAA,CAAekC,MAAM;oBAChD9D,MAAAA,EAAQ,KAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA;AACF,iBAAA,CAAA;gBAEA,OAAOqC,mBAAAA,CAA2BzC,QAAAA,EAAUyD,OAAAA,EAASf,cAAAA,EAAgBC,YAAAA,CAAAA;AACvE,YAAA,CAAA;AAEA,YAAA,OAAOK,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAgB,IAAAA,EAAM,OACJlF,KACA6B,IAAAA,EACA6C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM7C,OAAAA,GAAU,IAAI2D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGhC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG0B,SAASrD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ8D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMlE,QAAAA,GAAW,MAAMC,KAAAA,CAAM4D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUlC,cAAAA,CAAekC,MAAM;oBAChD9D,MAAAA,EAAQ,MAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBpB,IAAAA,CAAKC,SAAS,CAACmB,IAAAA;AACtE,iBAAA,CAAA;gBACA,OAAO6B,mBAAAA,CAA2BzC,UAAUyD,OAAAA,EAASf,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOM,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAkB,GAAAA,EAAK,OACHpF,KACA6B,IAAAA,EACA6C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM7C,OAAAA,GAAU,IAAI2D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGhC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG0B,SAASrD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ8D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMlE,QAAAA,GAAW,MAAMC,KAAAA,CAAM4D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUlC,cAAAA,CAAekC,MAAM;oBAChD9D,MAAAA,EAAQ,KAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBpB,IAAAA,CAAKC,SAAS,CAACmB,IAAAA;AACtE,iBAAA,CAAA;gBAEA,OAAO6B,mBAAAA,CAA2BzC,UAAUyD,OAAAA,EAASf,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOM,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;AACAmB,QAAAA,GAAAA,EAAK,OAAcrF,GAAAA,EAAa0E,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM7C,OAAAA,GAAU,IAAI2D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGhC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG0B,SAASrD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAM4D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUlC,cAAAA,CAAekC,MAAM;oBAChD9D,MAAAA,EAAQ,QAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA;AACF,iBAAA,CAAA;gBACA,OAAOqC,mBAAAA,CAA2BzC,UAAUyD,OAAAA,EAASf,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOM,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA;AACF,KAAA;IAEA,OAAOU,WAAAA;AACT;;;;;;;;;;;"}
+{"version":3,"file":"getFetchClient.js","sources":["../../../../../admin/src/utils/getFetchClient.ts"],"sourcesContent":["import pipe from 'lodash/fp/pipe';\n// eslint-disable-next-line import/default\nimport qs from 'qs';\n\nimport { AUTH_COOKIE_NAME, getCookieValue, setCookie } from './cookies';\nimport { decodeAccessTokenExpiry } from './jwt';\n\nimport type { errors } from '@strapi/utils';\n\nexport type ApiError =\n  | errors.ApplicationError\n  | errors.ForbiddenError\n  | errors.NotFoundError\n  | errors.NotImplementedError\n  | errors.PaginationError\n  | errors.PayloadTooLargeError\n  | errors.PolicyError\n  | errors.RateLimitError\n  | errors.UnauthorizedError\n  | errors.ValidationError\n  | errors.YupValidationError;\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  USER: 'userInfo',\n};\n\n/**\n * Module-level promise to ensure only one token refresh happens at a time\n */\nlet refreshPromise: Promise<string | null> | null = null;\n\n/**\n * Callback to notify the app when the token is updated (e.g., to update Redux state)\n */\nlet onTokenUpdate: ((token: string) => void) | null = null;\n\n/**\n * Callback to notify the app when the session has been terminated and the user\n * should be redirected to the login page (e.g., refresh token rejected, idle\n * session expired). The React layer registers a handler that clears local\n * auth state and navigates to /auth/login.\n */\nlet onSessionExpired: (() => void) | null = null;\n\n/**\n * Set the callback that will be called when the token is refreshed.\n * This allows the React layer to update Redux state when a token refresh occurs.\n *\n * @param callback - Function to call with the new token, or null to clear\n * @example\n * // In a React component\n * useEffect(() => {\n *   setOnTokenUpdate((token) => dispatch(setToken(token)));\n *   return () => setOnTokenUpdate(null);\n * }, [dispatch]);\n */\nconst setOnTokenUpdate = (callback: ((token: string) => void) | null): void => {\n  onTokenUpdate = callback;\n};\n\n/**\n * Set the callback that will be called when the active session is no longer\n * valid (refresh token rejected by the server, or detected idle on the\n * client). This lets the active tab redirect to /auth/login without waiting\n * for the next user-initiated request to fail.\n *\n * @param callback - Function to call when the session ends, or null to clear\n */\nconst setOnSessionExpired = (callback: (() => void) | null): void => {\n  onSessionExpired = callback;\n};\n\n/**\n * Trigger the registered session-expired callback, if any. Safe to call from\n * non-React code (e.g., the RTK Query baseQuery 401 handler).\n */\nconst triggerSessionExpired = (): void => {\n  onSessionExpired?.();\n};\n\n/**\n * Check if the URL is an auth path that should not trigger token refresh.\n * Note: No ^ anchor since the URL may include the baseURL prefix (e.g., \"http://localhost:1337/admin/login\").\n * This differs from baseQuery.ts which uses ^/admin since it receives normalized paths.\n */\nconst isAuthPath = (url: string) => /\\/admin\\/(login|logout|access-token)\\b/.test(url);\n\n/**\n * Store the new token in the appropriate storage (localStorage or cookie)\n * and notify the app to update its state.\n *\n * Uses localStorage if the user selected \"remember me\" during login,\n * otherwise uses cookies for session-based storage.\n *\n * @param token - The JWT token to store\n * @internal Exported for testing purposes\n */\nconst storeToken = (token: string): void => {\n  // Check if the original token was stored in localStorage (persist mode)\n  const wasPersistedToLocalStorage = Boolean(localStorage.getItem(STORAGE_KEYS.TOKEN));\n\n  if (wasPersistedToLocalStorage) {\n    localStorage.setItem(STORAGE_KEYS.TOKEN, JSON.stringify(token));\n  } else {\n    setCookie(AUTH_COOKIE_NAME, token);\n  }\n\n  // Notify the app to update its state (e.g., Redux)\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n};\n\nconst getToken = (): string | null => {\n  const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);\n  if (fromLocalStorage) {\n    return JSON.parse(fromLocalStorage);\n  }\n\n  const fromCookie = getCookieValue(AUTH_COOKIE_NAME);\n  return fromCookie ?? null;\n};\n\nconst ADMIN_REFRESH_LOCK = 'strapi-admin-access-token';\nconst FALLBACK_ADOPT_TIMEOUT_MS = 250;\nconst FALLBACK_ADOPT_POLL_MS = 25;\n\nconst postAccessToken = (backendURL: string) =>\n  fetch(`${backendURL}/admin/access-token`, {\n    method: 'POST',\n    credentials: 'include', // Include cookies for the refresh token\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n  });\n\nconst adoptSharedAccessToken = (token: string): string => {\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n  return token;\n};\n\n/**\n * Another tab may have refreshed already and written a newer access token to the\n * shared localStorage/cookie. Per-tab Redux is not visible here — only shared\n * storage counts.\n */\nconst readValidAccessTokenFromSharedStorage = (staleToken: string | null): string | null => {\n  const stored = getToken();\n  if (!stored || stored === staleToken) {\n    return null;\n  }\n\n  const expiry = decodeAccessTokenExpiry(stored);\n  if (expiry === null || expiry <= Date.now()) {\n    return null;\n  }\n\n  return stored;\n};\n\nconst waitForSharedAccessToken = async (staleToken: string | null): Promise<string | null> => {\n  const timeoutAt = Date.now() + FALLBACK_ADOPT_TIMEOUT_MS;\n\n  while (Date.now() < timeoutAt) {\n    await new Promise((resolve) => {\n      setTimeout(resolve, FALLBACK_ADOPT_POLL_MS);\n    });\n\n    const adopted = readValidAccessTokenFromSharedStorage(staleToken);\n    if (adopted) {\n      return adoptSharedAccessToken(adopted);\n    }\n  }\n\n  return null;\n};\n\nconst executeRefreshAccessToken = async (\n  backendURL: string,\n  tokenBeforeRefresh: string | null,\n  { allowHttpRetry }: { allowHttpRetry: boolean }\n): Promise<string | null> => {\n  const adopted = readValidAccessTokenFromSharedStorage(tokenBeforeRefresh);\n  if (adopted) {\n    return adoptSharedAccessToken(adopted);\n  }\n\n  let response = await postAccessToken(backendURL);\n\n  if (response.status === 401 && allowHttpRetry) {\n    const adoptedAfterFail = readValidAccessTokenFromSharedStorage(tokenBeforeRefresh);\n    if (adoptedAfterFail) {\n      return adoptSharedAccessToken(adoptedAfterFail);\n    }\n\n    const adoptedAfterWait = await waitForSharedAccessToken(tokenBeforeRefresh);\n    if (adoptedAfterWait) {\n      return adoptedAfterWait;\n    }\n\n    response = await postAccessToken(backendURL);\n  }\n\n  if (!response.ok) {\n    console.warn('[Auth] Token refresh failed with status:', response.status);\n    return null;\n  }\n\n  const result = await response.json();\n  const token = result?.data?.token as string | undefined;\n\n  if (!token) {\n    console.warn('[Auth] Token refresh response missing token');\n    return null;\n  }\n\n  storeToken(token);\n  return token;\n};\n\n/**\n * Refresh the access token by calling the /admin/access-token endpoint.\n * This uses a low-level fetch to avoid recursion through the interceptor.\n * Returns the new token on success, or null on failure.\n */\nconst refreshAccessToken = async (\n  tokenUsedByFailedRequest?: string | null\n): Promise<string | null> => {\n  const backendURL = window.strapi.backendURL;\n  const tokenBeforeRefresh = tokenUsedByFailedRequest ?? getToken();\n\n  try {\n    if (typeof navigator !== 'undefined' && navigator.locks?.request) {\n      return await navigator.locks.request(ADMIN_REFRESH_LOCK, () =>\n        executeRefreshAccessToken(backendURL, tokenBeforeRefresh, { allowHttpRetry: false })\n      );\n    }\n\n    return await executeRefreshAccessToken(backendURL, tokenBeforeRefresh, {\n      allowHttpRetry: true,\n    });\n  } catch (error) {\n    console.error('[Auth] Token refresh error:', error);\n    return null;\n  }\n};\n\n/**\n * Attempt to refresh the token if not already refreshing.\n * Uses a module-level promise to prevent concurrent refresh requests.\n *\n * @returns The new authentication token\n * @throws {Error} If the token refresh fails (e.g., refresh token expired)\n * @internal Exported for testing purposes\n */\nconst attemptTokenRefresh = async (tokenUsedByFailedRequest?: string | null): Promise<string> => {\n  if (!refreshPromise) {\n    refreshPromise = refreshAccessToken(tokenUsedByFailedRequest).finally(() => {\n      refreshPromise = null;\n    });\n  }\n\n  const newToken = await refreshPromise;\n  if (!newToken) {\n    const error = new Error('Session expired. Please log in again.');\n    error.name = 'TokenRefreshError';\n    throw error;\n  }\n\n  return newToken;\n};\n\ntype FetchResponse<TData = unknown> = {\n  data: TData;\n  status?: number;\n  headers?: Headers;\n};\n\ntype FetchOptions = {\n  params?: unknown;\n  signal?: AbortSignal;\n  headers?: Record<string, string>;\n  validateStatus?: ((status: number) => boolean) | null;\n  responseType?: 'json' | 'blob' | 'text' | 'arrayBuffer';\n};\n\ntype FetchConfig = {\n  signal?: AbortSignal;\n};\n\ninterface ErrorResponse {\n  data: {\n    data?: unknown;\n    error: ApiError & { status?: number };\n  };\n}\n\nclass FetchError extends Error {\n  public name: string;\n  public message: string;\n  public response?: ErrorResponse;\n  public code?: number;\n  public status?: number;\n\n  constructor(message: string, response?: ErrorResponse) {\n    super(message);\n    this.name = 'FetchError';\n    this.message = message;\n    this.response = response;\n    this.code = response?.data?.error?.status;\n    this.status = response?.data?.error?.status;\n\n    // Ensure correct stack trace in error object\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, FetchError);\n    }\n  }\n}\n\nconst isFetchError = (error: unknown): error is FetchError => {\n  return error instanceof FetchError;\n};\n\ntype FetchClient = {\n  get: {\n    (url: string, config: FetchOptions & { responseType: 'blob' }): Promise<FetchResponse<Blob>>;\n    (url: string, config: FetchOptions & { responseType: 'text' }): Promise<FetchResponse<string>>;\n    (\n      url: string,\n      config: FetchOptions & { responseType: 'arrayBuffer' }\n    ): Promise<FetchResponse<ArrayBuffer>>;\n    <TData = unknown>(url: string, config?: FetchOptions): Promise<FetchResponse<TData>>;\n  };\n  put: <TData = unknown, TSend = unknown>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  post: <TData = unknown, TSend = unknown>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  del: <TData = unknown>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n};\n\n/**\n * @public\n * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.\n * @returns {FetchClient} A fetch client object with methods for making HTTP requests.\n * @description This is an abstraction around the native fetch exposed by a function. It provides a simple interface to handle API calls\n * to the Strapi backend.\n * @example\n * ```tsx\n * import { getFetchClient } from '@strapi/admin/admin';\n *\n * const myFunct = () => {\n *   const { get } = getFetchClient();\n *   const requestURL = \"/some-endpoint\";\n *\n *   const { data } = await get(requestURL);\n *\n *   return data;\n * };\n * ```\n */\nconst getFetchClient = (defaultOptions: FetchConfig = {}): FetchClient => {\n  const backendURL = window.strapi.backendURL;\n\n  /**\n   * Create default headers with the current token.\n   * This is a function so we can get a fresh token after refresh.\n   */\n  const getDefaultHeaders = (token = getToken()) => ({\n    Accept: 'application/json',\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${token}`,\n  });\n\n  const isFormDataRequest = (body: unknown) => body instanceof FormData;\n  const addPrependingSlash = (url: string) => (url.charAt(0) !== '/' ? `/${url}` : url);\n\n  // This regular expression matches a string that starts with either \"http://\" or \"https://\" or any other protocol name in lower case letters, followed by \"://\" and ends with anything else\n  const hasProtocol = (url: string) => new RegExp('^(?:[a-z+]+:)?//', 'i').test(url);\n\n  // Check if the url has a prepending slash, if not add a slash\n  const normalizeUrl = (url: string) => (hasProtocol(url) ? url : addPrependingSlash(url));\n\n  // Add a response interceptor to return the response\n  const responseInterceptor = async <TData = unknown>(\n    response: Response,\n    validateStatus?: FetchOptions['validateStatus'],\n    responseType: NonNullable<FetchOptions['responseType']> = 'json'\n  ): Promise<FetchResponse<TData>> => {\n    if (responseType !== 'json') {\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      let result: Blob | string | ArrayBuffer;\n      if (responseType === 'blob') {\n        result = await response.blob();\n      } else if (responseType === 'text') {\n        result = await response.text();\n      } else {\n        result = await response.arrayBuffer();\n      }\n\n      return { data: result as TData, status: response.status, headers: response.headers };\n    }\n\n    if (response.status === 204) {\n      return { data: {} as TData, status: response.status };\n    }\n\n    try {\n      const result = await response.json();\n\n      if (!response.ok && result.error && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError(result.error.message, { data: result });\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Unknown Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      return { data: result };\n    } catch (error) {\n      // An empty 200 body causes `response.json()` to throw a `SyntaxError`. We treat\n      // it as success and return an empty payload. We match on `error.name` rather\n      // than `instanceof SyntaxError` because constructor identity differs across JS\n      // realms — a Response from a different realm (e.g. undici under jsdom in tests,\n      // a service worker or iframe in browsers) throws a `SyntaxError` whose\n      // constructor is not the same identity as the one this module closes over. Name\n      // comparison is realm-agnostic.\n      if ((error as Error | null)?.name === 'SyntaxError' && response.ok) {\n        return { data: {}, status: response.status } as FetchResponse<TData>;\n      } else {\n        throw error;\n      }\n    }\n  };\n\n  /**\n   * Execute a fetch request with automatic token refresh on 401 errors.\n   * @param url - The request URL (used to check if it's an auth path)\n   * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)\n   */\n  const withTokenRefresh = async <TData>(\n    url: string,\n    executeRequest: () => Promise<FetchResponse<TData>>,\n    getRequestToken: () => string | null\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      return await executeRequest();\n    } catch (error) {\n      // Only attempt refresh for 401 errors on non-auth paths\n      if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {\n        try {\n          await attemptTokenRefresh(getRequestToken());\n          // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token\n          return await executeRequest();\n        } catch {\n          // If refresh fails, throw the original error\n          throw error;\n        }\n      }\n      throw error;\n    }\n  };\n\n  const paramsSerializer =\n    <Param = unknown>(params?: Param) =>\n    (url: string) => {\n      if (params) {\n        if (typeof params === 'string') {\n          return `${url}?${params}`;\n        }\n\n        /**\n         * TODO V6: Encoding should be enabled in this step\n         * So the rest of the app doesn't have to worry about it,\n         * It's considered a breaking change because it impacts any API request, including the user's custom code\n         */\n        const serializedParams = qs.stringify(params, { encode: false });\n        if (serializedParams) {\n          return `${url}?${serializedParams}`;\n        }\n        return url;\n      }\n      return url;\n    };\n\n  const addBaseUrl = (url: Parameters<typeof fetch>[0]) => {\n    return `${backendURL}${url}`;\n  };\n\n  /**\n   * We use the factory method because the options\n   * are unique to the individual request\n   */\n  const makeCreateRequestUrl = (options?: FetchOptions) =>\n    pipe(normalizeUrl, addBaseUrl, paramsSerializer(options?.params));\n\n  const fetchClient: FetchClient = {\n    get: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      const responseType = options?.responseType ?? 'json';\n      let requestToken: string | null = null;\n\n      const executeRequest = async () => {\n        requestToken = getToken();\n        const { Authorization } = getDefaultHeaders(requestToken);\n\n        // For non-JSON response types, omit content negotiation headers that imply JSON\n        const defaultHeaders =\n          responseType === 'json' ? getDefaultHeaders(requestToken) : { Authorization };\n\n        const headers = new Headers({\n          ...defaultHeaders,\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'GET',\n          credentials: 'include',\n          headers,\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus, responseType);\n      };\n\n      return withTokenRefresh(url, executeRequest, () => requestToken);\n    },\n    post: async <TData, TSend = unknown>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      let requestToken: string | null = null;\n\n      const executeRequest = async () => {\n        requestToken = getToken();\n        const headers = new Headers({\n          ...getDefaultHeaders(requestToken),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'POST',\n          credentials: 'include',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest, () => requestToken);\n    },\n    put: async <TData, TSend = unknown>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      let requestToken: string | null = null;\n\n      const executeRequest = async () => {\n        requestToken = getToken();\n        const headers = new Headers({\n          ...getDefaultHeaders(requestToken),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'PUT',\n          credentials: 'include',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest, () => requestToken);\n    },\n    del: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      let requestToken: string | null = null;\n\n      const executeRequest = async () => {\n        requestToken = getToken();\n        const headers = new Headers({\n          ...getDefaultHeaders(requestToken),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'DELETE',\n          credentials: 'include',\n          headers,\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest, () => requestToken);\n    },\n  };\n\n  return fetchClient;\n};\n\nexport {\n  getFetchClient,\n  isFetchError,\n  FetchError,\n  attemptTokenRefresh,\n  refreshAccessToken,\n  storeToken,\n  setOnTokenUpdate,\n  setOnSessionExpired,\n  triggerSessionExpired,\n  ADMIN_REFRESH_LOCK,\n};\nexport type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };\n"],"names":["STORAGE_KEYS","TOKEN","refreshPromise","onTokenUpdate","onSessionExpired","setOnTokenUpdate","callback","setOnSessionExpired","triggerSessionExpired","isAuthPath","url","test","storeToken","token","wasPersistedToLocalStorage","Boolean","localStorage","getItem","setItem","JSON","stringify","setCookie","AUTH_COOKIE_NAME","getToken","fromLocalStorage","parse","fromCookie","getCookieValue","ADMIN_REFRESH_LOCK","FALLBACK_ADOPT_TIMEOUT_MS","FALLBACK_ADOPT_POLL_MS","postAccessToken","backendURL","fetch","method","credentials","headers","Accept","adoptSharedAccessToken","readValidAccessTokenFromSharedStorage","staleToken","stored","expiry","decodeAccessTokenExpiry","Date","now","waitForSharedAccessToken","timeoutAt","Promise","resolve","setTimeout","adopted","executeRefreshAccessToken","tokenBeforeRefresh","allowHttpRetry","response","status","adoptedAfterFail","adoptedAfterWait","ok","console","warn","result","json","data","refreshAccessToken","tokenUsedByFailedRequest","window","strapi","navigator","locks","request","error","attemptTokenRefresh","finally","newToken","Error","name","FetchError","message","code","captureStackTrace","isFetchError","getFetchClient","defaultOptions","getDefaultHeaders","Authorization","isFormDataRequest","body","FormData","addPrependingSlash","charAt","hasProtocol","RegExp","normalizeUrl","responseInterceptor","validateStatus","responseType","fetchError","blob","text","arrayBuffer","withTokenRefresh","executeRequest","getRequestToken","paramsSerializer","params","serializedParams","qs","encode","addBaseUrl","makeCreateRequestUrl","options","pipe","fetchClient","get","createRequestUrl","requestToken","defaultHeaders","Headers","signal","post","delete","put","del"],"mappings":";;;;;;;;;;;;AAsBA,MAAMA,YAAAA,GAAe;IACnBC,KAAAA,EAAO,UAET,CAAA;AAEA;;AAEC,IACD,IAAIC,cAAAA,GAAgD,IAAA;AAEpD;;AAEC,IACD,IAAIC,aAAAA,GAAkD,IAAA;AAEtD;;;;;AAKC,IACD,IAAIC,gBAAAA,GAAwC,IAAA;AAE5C;;;;;;;;;;;IAYA,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxBH,aAAAA,GAAgBG,QAAAA;AAClB;AAEA;;;;;;;IAQA,MAAMC,sBAAsB,CAACD,QAAAA,GAAAA;IAC3BF,gBAAAA,GAAmBE,QAAAA;AACrB;AAEA;;;AAGC,UACKE,qBAAAA,GAAwB,IAAA;AAC5BJ,IAAAA,gBAAAA,IAAAA;AACF;AAEA;;;;AAIC,IACD,MAAMK,UAAAA,GAAa,CAACC,GAAAA,GAAgB,wCAAA,CAAyCC,IAAI,CAACD,GAAAA,CAAAA;AAElF;;;;;;;;;IAUA,MAAME,aAAa,CAACC,KAAAA,GAAAA;;AAElB,IAAA,MAAMC,6BAA6BC,OAAAA,CAAQC,YAAAA,CAAaC,OAAO,CAACjB,aAAaC,KAAK,CAAA,CAAA;AAElF,IAAA,IAAIa,0BAAAA,EAA4B;AAC9BE,QAAAA,YAAAA,CAAaE,OAAO,CAAClB,YAAAA,CAAaC,KAAK,EAAEkB,IAAAA,CAAKC,SAAS,CAACP,KAAAA,CAAAA,CAAAA;IAC1D,CAAA,MAAO;AACLQ,QAAAA,iBAAAA,CAAUC,wBAAAA,EAAkBT,KAAAA,CAAAA;AAC9B,IAAA;;AAGA,IAAA,IAAIV,aAAAA,EAAe;QACjBA,aAAAA,CAAcU,KAAAA,CAAAA;AAChB,IAAA;AACF;AAEA,MAAMU,QAAAA,GAAW,IAAA;AACf,IAAA,MAAMC,gBAAAA,GAAmBR,YAAAA,CAAaC,OAAO,CAACjB,aAAaC,KAAK,CAAA;AAChE,IAAA,IAAIuB,gBAAAA,EAAkB;QACpB,OAAOL,IAAAA,CAAKM,KAAK,CAACD,gBAAAA,CAAAA;AACpB,IAAA;AAEA,IAAA,MAAME,aAAaC,sBAAAA,CAAeL,wBAAAA,CAAAA;AAClC,IAAA,OAAOI,UAAAA,IAAc,IAAA;AACvB,CAAA;AAEA,MAAME,kBAAAA,GAAqB;AAC3B,MAAMC,yBAAAA,GAA4B,GAAA;AAClC,MAAMC,sBAAAA,GAAyB,EAAA;AAE/B,MAAMC,eAAAA,GAAkB,CAACC,UAAAA,GACvBC,KAAAA,CAAM,GAAGD,UAAAA,CAAW,mBAAmB,CAAC,EAAE;QACxCE,MAAAA,EAAQ,MAAA;QACRC,WAAAA,EAAa,SAAA;QACbC,OAAAA,EAAS;YACPC,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB;AAClB;AACF,KAAA,CAAA;AAEF,MAAMC,yBAAyB,CAACzB,KAAAA,GAAAA;AAC9B,IAAA,IAAIV,aAAAA,EAAe;QACjBA,aAAAA,CAAcU,KAAAA,CAAAA;AAChB,IAAA;IACA,OAAOA,KAAAA;AACT,CAAA;AAEA;;;;IAKA,MAAM0B,wCAAwC,CAACC,UAAAA,GAAAA;AAC7C,IAAA,MAAMC,MAAAA,GAASlB,QAAAA,EAAAA;IACf,IAAI,CAACkB,MAAAA,IAAUA,MAAAA,KAAWD,UAAAA,EAAY;QACpC,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,MAAME,SAASC,2BAAAA,CAAwBF,MAAAA,CAAAA;AACvC,IAAA,IAAIC,MAAAA,KAAW,IAAA,IAAQA,MAAAA,IAAUE,IAAAA,CAAKC,GAAG,EAAA,EAAI;QAC3C,OAAO,IAAA;AACT,IAAA;IAEA,OAAOJ,MAAAA;AACT,CAAA;AAEA,MAAMK,2BAA2B,OAAON,UAAAA,GAAAA;IACtC,MAAMO,SAAAA,GAAYH,IAAAA,CAAKC,GAAG,EAAA,GAAKhB,yBAAAA;IAE/B,MAAOe,IAAAA,CAAKC,GAAG,EAAA,GAAKE,SAAAA,CAAW;QAC7B,MAAM,IAAIC,QAAQ,CAACC,OAAAA,GAAAA;AACjBC,YAAAA,UAAAA,CAAWD,OAAAA,EAASnB,sBAAAA,CAAAA;AACtB,QAAA,CAAA,CAAA;AAEA,QAAA,MAAMqB,UAAUZ,qCAAAA,CAAsCC,UAAAA,CAAAA;AACtD,QAAA,IAAIW,OAAAA,EAAS;AACX,YAAA,OAAOb,sBAAAA,CAAuBa,OAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;IAEA,OAAO,IAAA;AACT,CAAA;AAEA,MAAMC,4BAA4B,OAChCpB,UAAAA,EACAqB,kBAAAA,EACA,EAAEC,cAAc,EAA+B,GAAA;AAE/C,IAAA,MAAMH,UAAUZ,qCAAAA,CAAsCc,kBAAAA,CAAAA;AACtD,IAAA,IAAIF,OAAAA,EAAS;AACX,QAAA,OAAOb,sBAAAA,CAAuBa,OAAAA,CAAAA;AAChC,IAAA;IAEA,IAAII,QAAAA,GAAW,MAAMxB,eAAAA,CAAgBC,UAAAA,CAAAA;AAErC,IAAA,IAAIuB,QAAAA,CAASC,MAAM,KAAK,GAAA,IAAOF,cAAAA,EAAgB;AAC7C,QAAA,MAAMG,mBAAmBlB,qCAAAA,CAAsCc,kBAAAA,CAAAA;AAC/D,QAAA,IAAII,gBAAAA,EAAkB;AACpB,YAAA,OAAOnB,sBAAAA,CAAuBmB,gBAAAA,CAAAA;AAChC,QAAA;QAEA,MAAMC,gBAAAA,GAAmB,MAAMZ,wBAAAA,CAAyBO,kBAAAA,CAAAA;AACxD,QAAA,IAAIK,gBAAAA,EAAkB;YACpB,OAAOA,gBAAAA;AACT,QAAA;AAEAH,QAAAA,QAAAA,GAAW,MAAMxB,eAAAA,CAAgBC,UAAAA,CAAAA;AACnC,IAAA;IAEA,IAAI,CAACuB,QAAAA,CAASI,EAAE,EAAE;AAChBC,QAAAA,OAAAA,CAAQC,IAAI,CAAC,0CAAA,EAA4CN,QAAAA,CAASC,MAAM,CAAA;QACxE,OAAO,IAAA;AACT,IAAA;IAEA,MAAMM,MAAAA,GAAS,MAAMP,QAAAA,CAASQ,IAAI,EAAA;IAClC,MAAMlD,KAAAA,GAAQiD,QAAQE,IAAAA,EAAMnD,KAAAA;AAE5B,IAAA,IAAI,CAACA,KAAAA,EAAO;AACV+C,QAAAA,OAAAA,CAAQC,IAAI,CAAC,6CAAA,CAAA;QACb,OAAO,IAAA;AACT,IAAA;IAEAjD,UAAAA,CAAWC,KAAAA,CAAAA;IACX,OAAOA,KAAAA;AACT,CAAA;AAEA;;;;IAKA,MAAMoD,qBAAqB,OACzBC,wBAAAA,GAAAA;AAEA,IAAA,MAAMlC,UAAAA,GAAamC,MAAAA,CAAOC,MAAM,CAACpC,UAAU;AAC3C,IAAA,MAAMqB,qBAAqBa,wBAAAA,IAA4B3C,QAAAA,EAAAA;IAEvD,IAAI;AACF,QAAA,IAAI,OAAO8C,SAAAA,KAAc,WAAA,IAAeA,SAAAA,CAAUC,KAAK,EAAEC,OAAAA,EAAS;YAChE,OAAO,MAAMF,SAAAA,CAAUC,KAAK,CAACC,OAAO,CAAC3C,kBAAAA,EAAoB,IACvDwB,yBAAAA,CAA0BpB,UAAAA,EAAYqB,kBAAAA,EAAoB;oBAAEC,cAAAA,EAAgB;AAAM,iBAAA,CAAA,CAAA;AAEtF,QAAA;QAEA,OAAO,MAAMF,yBAAAA,CAA0BpB,UAAAA,EAAYqB,kBAAAA,EAAoB;YACrEC,cAAAA,EAAgB;AAClB,SAAA,CAAA;AACF,IAAA,CAAA,CAAE,OAAOkB,KAAAA,EAAO;QACdZ,OAAAA,CAAQY,KAAK,CAAC,6BAAA,EAA+BA,KAAAA,CAAAA;QAC7C,OAAO,IAAA;AACT,IAAA;AACF;AAEA;;;;;;;IAQA,MAAMC,sBAAsB,OAAOP,wBAAAA,GAAAA;AACjC,IAAA,IAAI,CAAChE,cAAAA,EAAgB;QACnBA,cAAAA,GAAiB+D,kBAAAA,CAAmBC,wBAAAA,CAAAA,CAA0BQ,OAAO,CAAC,IAAA;YACpExE,cAAAA,GAAiB,IAAA;AACnB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAMyE,WAAW,MAAMzE,cAAAA;AACvB,IAAA,IAAI,CAACyE,QAAAA,EAAU;QACb,MAAMH,KAAAA,GAAQ,IAAII,KAAAA,CAAM,uCAAA,CAAA;AACxBJ,QAAAA,KAAAA,CAAMK,IAAI,GAAG,mBAAA;QACb,MAAML,KAAAA;AACR,IAAA;IAEA,OAAOG,QAAAA;AACT;AA2BA,MAAMG,UAAAA,SAAmBF,KAAAA,CAAAA;IAOvB,WAAA,CAAYG,OAAe,EAAExB,QAAwB,CAAE;AACrD,QAAA,KAAK,CAACwB,OAAAA,CAAAA;QACN,IAAI,CAACF,IAAI,GAAG,YAAA;QACZ,IAAI,CAACE,OAAO,GAAGA,OAAAA;QACf,IAAI,CAACxB,QAAQ,GAAGA,QAAAA;AAChB,QAAA,IAAI,CAACyB,IAAI,GAAGzB,QAAAA,EAAUS,MAAMQ,KAAAA,EAAOhB,MAAAA;AACnC,QAAA,IAAI,CAACA,MAAM,GAAGD,QAAAA,EAAUS,MAAMQ,KAAAA,EAAOhB,MAAAA;;QAGrC,IAAIoB,KAAAA,CAAMK,iBAAiB,EAAE;YAC3BL,KAAAA,CAAMK,iBAAiB,CAAC,IAAI,EAAEH,UAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;AACF;AAEA,MAAMI,eAAe,CAACV,KAAAA,GAAAA;AACpB,IAAA,OAAOA,KAAAA,YAAiBM,UAAAA;AAC1B;AAyBA;;;;;;;;;;;;;;;;;;;AAmBC,IACD,MAAMK,cAAAA,GAAiB,CAACC,cAAAA,GAA8B,EAAE,GAAA;AACtD,IAAA,MAAMpD,UAAAA,GAAamC,MAAAA,CAAOC,MAAM,CAACpC,UAAU;AAE3C;;;AAGC,MACD,MAAMqD,iBAAAA,GAAoB,CAACxE,KAAAA,GAAQU,QAAAA,EAAU,IAAM;YACjDc,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB,kBAAA;YAChBiD,aAAAA,EAAe,CAAC,OAAO,EAAEzE,KAAAA,CAAAA;SAC3B,CAAA;IAEA,MAAM0E,iBAAAA,GAAoB,CAACC,IAAAA,GAAkBA,IAAAA,YAAgBC,QAAAA;AAC7D,IAAA,MAAMC,kBAAAA,GAAqB,CAAChF,GAAAA,GAAiBA,GAAAA,CAAIiF,MAAM,CAAC,CAAA,CAAA,KAAO,GAAA,GAAM,CAAC,CAAC,EAAEjF,GAAAA,CAAAA,CAAK,GAAGA,GAAAA;;IAGjF,MAAMkF,WAAAA,GAAc,CAAClF,GAAAA,GAAgB,IAAImF,OAAO,kBAAA,EAAoB,GAAA,CAAA,CAAKlF,IAAI,CAACD,GAAAA,CAAAA;;AAG9E,IAAA,MAAMoF,eAAe,CAACpF,GAAAA,GAAiBkF,WAAAA,CAAYlF,GAAAA,CAAAA,GAAOA,MAAMgF,kBAAAA,CAAmBhF,GAAAA,CAAAA;;AAGnF,IAAA,MAAMqF,mBAAAA,GAAsB,OAC1BxC,QAAAA,EACAyC,cAAAA,EACAC,eAA0D,MAAM,GAAA;AAEhE,QAAA,IAAIA,iBAAiB,MAAA,EAAQ;YAC3B,IAAI,CAAC1C,SAASI,EAAE,IAAI,CAACqC,cAAAA,GAAiBzC,QAAAA,CAASC,MAAM,CAAA,EAAG;gBACtD,MAAM0C,UAAAA,GAAa,IAAIpB,UAAAA,CAAW,cAAA,CAAA;gBAClCoB,UAAAA,CAAW1C,MAAM,GAAGD,QAAAA,CAASC,MAAM;gBACnC,MAAM0C,UAAAA;AACR,YAAA;YAEA,IAAIpC,MAAAA;AACJ,YAAA,IAAImC,iBAAiB,MAAA,EAAQ;gBAC3BnC,MAAAA,GAAS,MAAMP,SAAS4C,IAAI,EAAA;YAC9B,CAAA,MAAO,IAAIF,iBAAiB,MAAA,EAAQ;gBAClCnC,MAAAA,GAAS,MAAMP,SAAS6C,IAAI,EAAA;YAC9B,CAAA,MAAO;gBACLtC,MAAAA,GAAS,MAAMP,SAAS8C,WAAW,EAAA;AACrC,YAAA;YAEA,OAAO;gBAAErC,IAAAA,EAAMF,MAAAA;AAAiBN,gBAAAA,MAAAA,EAAQD,SAASC,MAAM;AAAEpB,gBAAAA,OAAAA,EAASmB,SAASnB;AAAQ,aAAA;AACrF,QAAA;QAEA,IAAImB,QAAAA,CAASC,MAAM,KAAK,GAAA,EAAK;YAC3B,OAAO;AAAEQ,gBAAAA,IAAAA,EAAM,EAAC;AAAYR,gBAAAA,MAAAA,EAAQD,SAASC;AAAO,aAAA;AACtD,QAAA;QAEA,IAAI;YACF,MAAMM,MAAAA,GAAS,MAAMP,QAAAA,CAASQ,IAAI,EAAA;YAElC,IAAI,CAACR,QAAAA,CAASI,EAAE,IAAIG,MAAAA,CAAOU,KAAK,IAAI,CAACwB,cAAAA,GAAiBzC,QAAAA,CAASC,MAAM,CAAA,EAAG;AACtE,gBAAA,MAAM0C,aAAa,IAAIpB,UAAAA,CAAWhB,OAAOU,KAAK,CAACO,OAAO,EAAE;oBAAEf,IAAAA,EAAMF;AAAO,iBAAA,CAAA;gBACvEoC,UAAAA,CAAW1C,MAAM,GAAGD,QAAAA,CAASC,MAAM;gBACnC,MAAM0C,UAAAA;AACR,YAAA;YAEA,IAAI,CAAC3C,SAASI,EAAE,IAAI,CAACqC,cAAAA,GAAiBzC,QAAAA,CAASC,MAAM,CAAA,EAAG;gBACtD,MAAM0C,UAAAA,GAAa,IAAIpB,UAAAA,CAAW,sBAAA,CAAA;gBAClCoB,UAAAA,CAAW1C,MAAM,GAAGD,QAAAA,CAASC,MAAM;gBACnC,MAAM0C,UAAAA;AACR,YAAA;YAEA,OAAO;gBAAElC,IAAAA,EAAMF;AAAO,aAAA;AACxB,QAAA,CAAA,CAAE,OAAOU,KAAAA,EAAO;;;;;;;;AAQd,YAAA,IAAI,KAACA,EAAwBK,IAAAA,KAAS,aAAA,IAAiBtB,QAAAA,CAASI,EAAE,EAAE;gBAClE,OAAO;AAAEK,oBAAAA,IAAAA,EAAM,EAAC;AAAGR,oBAAAA,MAAAA,EAAQD,SAASC;AAAO,iBAAA;YAC7C,CAAA,MAAO;gBACL,MAAMgB,KAAAA;AACR,YAAA;AACF,QAAA;AACF,IAAA,CAAA;AAEA;;;;AAIC,MACD,MAAM8B,gBAAAA,GAAmB,OACvB5F,GAAAA,EACA6F,cAAAA,EACAC,eAAAA,GAAAA;QAEA,IAAI;AACF,YAAA,OAAO,MAAMD,cAAAA,EAAAA;AACf,QAAA,CAAA,CAAE,OAAO/B,KAAAA,EAAO;;YAEd,IAAIU,YAAAA,CAAaV,UAAUA,KAAAA,CAAMhB,MAAM,KAAK,GAAA,IAAO,CAAC/C,WAAWC,GAAAA,CAAAA,EAAM;gBACnE,IAAI;AACF,oBAAA,MAAM+D,mBAAAA,CAAoB+B,eAAAA,EAAAA,CAAAA;;AAE1B,oBAAA,OAAO,MAAMD,cAAAA,EAAAA;AACf,gBAAA,CAAA,CAAE,OAAM;;oBAEN,MAAM/B,KAAAA;AACR,gBAAA;AACF,YAAA;YACA,MAAMA,KAAAA;AACR,QAAA;AACF,IAAA,CAAA;IAEA,MAAMiC,gBAAAA,GACJ,CAAkBC,MAAAA,GAClB,CAAChG,GAAAA,GAAAA;AACC,YAAA,IAAIgG,MAAAA,EAAQ;gBACV,IAAI,OAAOA,WAAW,QAAA,EAAU;AAC9B,oBAAA,OAAO,CAAA,EAAGhG,GAAAA,CAAI,CAAC,EAAEgG,MAAAA,CAAAA,CAAQ;AAC3B,gBAAA;AAEA;;;;AAIC,YACD,MAAMC,gBAAAA,GAAmBC,mBAAAA,CAAGxF,SAAS,CAACsF,MAAAA,EAAQ;oBAAEG,MAAAA,EAAQ;AAAM,iBAAA,CAAA;AAC9D,gBAAA,IAAIF,gBAAAA,EAAkB;AACpB,oBAAA,OAAO,CAAA,EAAGjG,GAAAA,CAAI,CAAC,EAAEiG,gBAAAA,CAAAA,CAAkB;AACrC,gBAAA;gBACA,OAAOjG,GAAAA;AACT,YAAA;YACA,OAAOA,GAAAA;AACT,QAAA,CAAA;AAEF,IAAA,MAAMoG,aAAa,CAACpG,GAAAA,GAAAA;QAClB,OAAO,CAAA,EAAGsB,aAAatB,GAAAA,CAAAA,CAAK;AAC9B,IAAA,CAAA;AAEA;;;MAIA,MAAMqG,uBAAuB,CAACC,OAAAA,GAC5BC,sBAAKnB,YAAAA,EAAcgB,UAAAA,EAAYL,iBAAiBO,OAAAA,EAASN,MAAAA,CAAAA,CAAAA;AAE3D,IAAA,MAAMQ,WAAAA,GAA2B;AAC/BC,QAAAA,GAAAA,EAAK,OAAczG,GAAAA,EAAasG,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;YAC9C,MAAMf,YAAAA,GAAee,SAASf,YAAAA,IAAgB,MAAA;AAC9C,YAAA,IAAIoB,YAAAA,GAA8B,IAAA;AAElC,YAAA,MAAMd,cAAAA,GAAiB,UAAA;gBACrBc,YAAAA,GAAe9F,QAAAA,EAAAA;AACf,gBAAA,MAAM,EAAE+D,aAAa,EAAE,GAAGD,iBAAAA,CAAkBgC,YAAAA,CAAAA;;AAG5C,gBAAA,MAAMC,cAAAA,GACJrB,YAAAA,KAAiB,MAAA,GAASZ,iBAAAA,CAAkBgC,YAAAA,CAAAA,GAAgB;AAAE/B,oBAAAA;AAAc,iBAAA;gBAE9E,MAAMlD,OAAAA,GAAU,IAAImF,OAAAA,CAAQ;AAC1B,oBAAA,GAAGD,cAAc;AACjB,oBAAA,GAAGN,SAAS5E;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMmB,QAAAA,GAAW,MAAMtB,KAAAA,CAAMmF,gBAAAA,CAAiB1G,GAAAA,CAAAA,EAAM;oBAClD8G,MAAAA,EAAQR,OAAAA,EAASQ,MAAAA,IAAUpC,cAAAA,CAAeoC,MAAM;oBAChDtF,MAAAA,EAAQ,KAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA;AACF,iBAAA,CAAA;gBAEA,OAAO2D,mBAAAA,CAA2BxC,QAAAA,EAAUyD,OAAAA,EAAShB,cAAAA,EAAgBC,YAAAA,CAAAA;AACvE,YAAA,CAAA;YAEA,OAAOK,gBAAAA,CAAiB5F,GAAAA,EAAK6F,cAAAA,EAAgB,IAAMc,YAAAA,CAAAA;AACrD,QAAA,CAAA;QACAI,IAAAA,EAAM,OACJ/G,KACAsD,IAAAA,EACAgD,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAC9C,YAAA,IAAIK,YAAAA,GAA8B,IAAA;AAElC,YAAA,MAAMd,cAAAA,GAAiB,UAAA;gBACrBc,YAAAA,GAAe9F,QAAAA,EAAAA;gBACf,MAAMa,OAAAA,GAAU,IAAImF,OAAAA,CAAQ;AAC1B,oBAAA,GAAGlC,kBAAkBgC,YAAAA,CAAa;AAClC,oBAAA,GAAGL,SAAS5E;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAImD,kBAAkBvB,IAAAA,CAAAA,EAAO;AAC3B5B,oBAAAA,OAAAA,CAAQsF,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMnE,QAAAA,GAAW,MAAMtB,KAAAA,CAAMmF,gBAAAA,CAAiB1G,GAAAA,CAAAA,EAAM;oBAClD8G,MAAAA,EAAQR,OAAAA,EAASQ,MAAAA,IAAUpC,cAAAA,CAAeoC,MAAM;oBAChDtF,MAAAA,EAAQ,MAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA,OAAAA;AACAoD,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBvB,IAAAA,CAAAA,GAASA,IAAAA,GAAoB7C,IAAAA,CAAKC,SAAS,CAAC4C,IAAAA;AACtE,iBAAA,CAAA;gBACA,OAAO+B,mBAAAA,CAA2BxC,UAAUyD,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;YAEA,OAAOM,gBAAAA,CAAiB5F,GAAAA,EAAK6F,cAAAA,EAAgB,IAAMc,YAAAA,CAAAA;AACrD,QAAA,CAAA;QACAM,GAAAA,EAAK,OACHjH,KACAsD,IAAAA,EACAgD,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAC9C,YAAA,IAAIK,YAAAA,GAA8B,IAAA;AAElC,YAAA,MAAMd,cAAAA,GAAiB,UAAA;gBACrBc,YAAAA,GAAe9F,QAAAA,EAAAA;gBACf,MAAMa,OAAAA,GAAU,IAAImF,OAAAA,CAAQ;AAC1B,oBAAA,GAAGlC,kBAAkBgC,YAAAA,CAAa;AAClC,oBAAA,GAAGL,SAAS5E;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAImD,kBAAkBvB,IAAAA,CAAAA,EAAO;AAC3B5B,oBAAAA,OAAAA,CAAQsF,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMnE,QAAAA,GAAW,MAAMtB,KAAAA,CAAMmF,gBAAAA,CAAiB1G,GAAAA,CAAAA,EAAM;oBAClD8G,MAAAA,EAAQR,OAAAA,EAASQ,MAAAA,IAAUpC,cAAAA,CAAeoC,MAAM;oBAChDtF,MAAAA,EAAQ,KAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA,OAAAA;AACAoD,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBvB,IAAAA,CAAAA,GAASA,IAAAA,GAAoB7C,IAAAA,CAAKC,SAAS,CAAC4C,IAAAA;AACtE,iBAAA,CAAA;gBAEA,OAAO+B,mBAAAA,CAA2BxC,UAAUyD,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;YAEA,OAAOM,gBAAAA,CAAiB5F,GAAAA,EAAK6F,cAAAA,EAAgB,IAAMc,YAAAA,CAAAA;AACrD,QAAA,CAAA;AACAO,QAAAA,GAAAA,EAAK,OAAclH,GAAAA,EAAasG,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAC9C,YAAA,IAAIK,YAAAA,GAA8B,IAAA;AAElC,YAAA,MAAMd,cAAAA,GAAiB,UAAA;gBACrBc,YAAAA,GAAe9F,QAAAA,EAAAA;gBACf,MAAMa,OAAAA,GAAU,IAAImF,OAAAA,CAAQ;AAC1B,oBAAA,GAAGlC,kBAAkBgC,YAAAA,CAAa;AAClC,oBAAA,GAAGL,SAAS5E;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMmB,QAAAA,GAAW,MAAMtB,KAAAA,CAAMmF,gBAAAA,CAAiB1G,GAAAA,CAAAA,EAAM;oBAClD8G,MAAAA,EAAQR,OAAAA,EAASQ,MAAAA,IAAUpC,cAAAA,CAAeoC,MAAM;oBAChDtF,MAAAA,EAAQ,QAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA;AACF,iBAAA,CAAA;gBACA,OAAO2D,mBAAAA,CAA2BxC,UAAUyD,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;YAEA,OAAOM,gBAAAA,CAAiB5F,GAAAA,EAAK6F,cAAAA,EAAgB,IAAMc,YAAAA,CAAAA;AACrD,QAAA;AACF,KAAA;IAEA,OAAOH,WAAAA;AACT;;;;;;;;;;;;;"}

package/dist/admin/admin/src/utils/getFetchClient.mjs

@@ -1,6 +1,7 @@
 import pipe from 'lodash/fp/pipe';
 import qs__default from 'qs';
-import { setCookie, AUTH_COOKIE_NAME, getCookieValue } from './cookies.mjs';
+import { getCookieValue, setCookie, AUTH_COOKIE_NAME } from './cookies.mjs';
+import { decodeAccessTokenExpiry } from './jwt.mjs';
 
 const STORAGE_KEYS = {
     TOKEN: 'jwtToken'};
@@ -73,33 +74,105 @@ const STORAGE_KEYS = {
         onTokenUpdate(token);
     }
 };
+const getToken = ()=>{
+    const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);
+    if (fromLocalStorage) {
+        return JSON.parse(fromLocalStorage);
+    }
+    const fromCookie = getCookieValue(AUTH_COOKIE_NAME);
+    return fromCookie ?? null;
+};
+const ADMIN_REFRESH_LOCK = 'strapi-admin-access-token';
+const FALLBACK_ADOPT_TIMEOUT_MS = 250;
+const FALLBACK_ADOPT_POLL_MS = 25;
+const postAccessToken = (backendURL)=>fetch(`${backendURL}/admin/access-token`, {
+        method: 'POST',
+        credentials: 'include',
+        headers: {
+            Accept: 'application/json',
+            'Content-Type': 'application/json'
+        }
+    });
+const adoptSharedAccessToken = (token)=>{
+    if (onTokenUpdate) {
+        onTokenUpdate(token);
+    }
+    return token;
+};
+/**
+ * Another tab may have refreshed already and written a newer access token to the
+ * shared localStorage/cookie. Per-tab Redux is not visible here — only shared
+ * storage counts.
+ */ const readValidAccessTokenFromSharedStorage = (staleToken)=>{
+    const stored = getToken();
+    if (!stored || stored === staleToken) {
+        return null;
+    }
+    const expiry = decodeAccessTokenExpiry(stored);
+    if (expiry === null || expiry <= Date.now()) {
+        return null;
+    }
+    return stored;
+};
+const waitForSharedAccessToken = async (staleToken)=>{
+    const timeoutAt = Date.now() + FALLBACK_ADOPT_TIMEOUT_MS;
+    while(Date.now() < timeoutAt){
+        await new Promise((resolve)=>{
+            setTimeout(resolve, FALLBACK_ADOPT_POLL_MS);
+        });
+        const adopted = readValidAccessTokenFromSharedStorage(staleToken);
+        if (adopted) {
+            return adoptSharedAccessToken(adopted);
+        }
+    }
+    return null;
+};
+const executeRefreshAccessToken = async (backendURL, tokenBeforeRefresh, { allowHttpRetry })=>{
+    const adopted = readValidAccessTokenFromSharedStorage(tokenBeforeRefresh);
+    if (adopted) {
+        return adoptSharedAccessToken(adopted);
+    }
+    let response = await postAccessToken(backendURL);
+    if (response.status === 401 && allowHttpRetry) {
+        const adoptedAfterFail = readValidAccessTokenFromSharedStorage(tokenBeforeRefresh);
+        if (adoptedAfterFail) {
+            return adoptSharedAccessToken(adoptedAfterFail);
+        }
+        const adoptedAfterWait = await waitForSharedAccessToken(tokenBeforeRefresh);
+        if (adoptedAfterWait) {
+            return adoptedAfterWait;
+        }
+        response = await postAccessToken(backendURL);
+    }
+    if (!response.ok) {
+        console.warn('[Auth] Token refresh failed with status:', response.status);
+        return null;
+    }
+    const result = await response.json();
+    const token = result?.data?.token;
+    if (!token) {
+        console.warn('[Auth] Token refresh response missing token');
+        return null;
+    }
+    storeToken(token);
+    return token;
+};
 /**
  * Refresh the access token by calling the /admin/access-token endpoint.
  * This uses a low-level fetch to avoid recursion through the interceptor.
  * Returns the new token on success, or null on failure.
- */ const refreshAccessToken = async ()=>{
+ */ const refreshAccessToken = async (tokenUsedByFailedRequest)=>{
     const backendURL = window.strapi.backendURL;
+    const tokenBeforeRefresh = tokenUsedByFailedRequest ?? getToken();
     try {
-        const response = await fetch(`${backendURL}/admin/access-token`, {
-            method: 'POST',
-            credentials: 'include',
-            headers: {
-                Accept: 'application/json',
-                'Content-Type': 'application/json'
-            }
-        });
-        if (!response.ok) {
-            console.warn('[Auth] Token refresh failed with status:', response.status);
-            return null;
-        }
-        const result = await response.json();
-        const token = result?.data?.token;
-        if (!token) {
-            console.warn('[Auth] Token refresh response missing token');
-            return null;
+        if (typeof navigator !== 'undefined' && navigator.locks?.request) {
+            return await navigator.locks.request(ADMIN_REFRESH_LOCK, ()=>executeRefreshAccessToken(backendURL, tokenBeforeRefresh, {
+                    allowHttpRetry: false
+                }));
         }
-        storeToken(token);
-        return token;
+        return await executeRefreshAccessToken(backendURL, tokenBeforeRefresh, {
+            allowHttpRetry: true
+        });
     } catch (error) {
         console.error('[Auth] Token refresh error:', error);
         return null;
@@ -112,9 +185,9 @@ const STORAGE_KEYS = {
  * @returns The new authentication token
  * @throws {Error} If the token refresh fails (e.g., refresh token expired)
  * @internal Exported for testing purposes
- */ const attemptTokenRefresh = async ()=>{
+ */ const attemptTokenRefresh = async (tokenUsedByFailedRequest)=>{
     if (!refreshPromise) {
-        refreshPromise = refreshAccessToken().finally(()=>{
+        refreshPromise = refreshAccessToken(tokenUsedByFailedRequest).finally(()=>{
             refreshPromise = null;
         });
     }
@@ -143,14 +216,6 @@ class FetchError extends Error {
 const isFetchError = (error)=>{
     return error instanceof FetchError;
 };
-const getToken = ()=>{
-    const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);
-    if (fromLocalStorage) {
-        return JSON.parse(fromLocalStorage);
-    }
-    const fromCookie = getCookieValue(AUTH_COOKIE_NAME);
-    return fromCookie ?? null;
-};
 /**
  * @public
  * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.
@@ -175,10 +240,10 @@ const getToken = ()=>{
     /**
    * Create default headers with the current token.
    * This is a function so we can get a fresh token after refresh.
-   */ const getDefaultHeaders = ()=>({
+   */ const getDefaultHeaders = (token = getToken())=>({
             Accept: 'application/json',
             'Content-Type': 'application/json',
-            Authorization: `Bearer ${getToken()}`
+            Authorization: `Bearer ${token}`
         });
     const isFormDataRequest = (body)=>body instanceof FormData;
     const addPrependingSlash = (url)=>url.charAt(0) !== '/' ? `/${url}` : url;
@@ -253,14 +318,14 @@ const getToken = ()=>{
    * Execute a fetch request with automatic token refresh on 401 errors.
    * @param url - The request URL (used to check if it's an auth path)
    * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)
-   */ const withTokenRefresh = async (url, executeRequest)=>{
+   */ const withTokenRefresh = async (url, executeRequest, getRequestToken)=>{
         try {
             return await executeRequest();
         } catch (error) {
             // Only attempt refresh for 401 errors on non-auth paths
             if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {
                 try {
-                    await attemptTokenRefresh();
+                    await attemptTokenRefresh(getRequestToken());
                     // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token
                     return await executeRequest();
                 } catch  {
@@ -301,10 +366,12 @@ const getToken = ()=>{
         get: async (url, options)=>{
             const createRequestUrl = makeCreateRequestUrl(options);
             const responseType = options?.responseType ?? 'json';
+            let requestToken = null;
             const executeRequest = async ()=>{
-                const { Authorization } = getDefaultHeaders();
+                requestToken = getToken();
+                const { Authorization } = getDefaultHeaders(requestToken);
                 // For non-JSON response types, omit content negotiation headers that imply JSON
-                const defaultHeaders = responseType === 'json' ? getDefaultHeaders() : {
+                const defaultHeaders = responseType === 'json' ? getDefaultHeaders(requestToken) : {
                     Authorization
                 };
                 const headers = new Headers({
@@ -319,13 +386,15 @@ const getToken = ()=>{
                 });
                 return responseInterceptor(response, options?.validateStatus, responseType);
             };
-            return withTokenRefresh(url, executeRequest);
+            return withTokenRefresh(url, executeRequest, ()=>requestToken);
         },
         post: async (url, data, options)=>{
             const createRequestUrl = makeCreateRequestUrl(options);
+            let requestToken = null;
             const executeRequest = async ()=>{
+                requestToken = getToken();
                 const headers = new Headers({
-                    ...getDefaultHeaders(),
+                    ...getDefaultHeaders(requestToken),
                     ...options?.headers
                 });
                 /**
@@ -343,13 +412,15 @@ const getToken = ()=>{
                 });
                 return responseInterceptor(response, options?.validateStatus);
             };
-            return withTokenRefresh(url, executeRequest);
+            return withTokenRefresh(url, executeRequest, ()=>requestToken);
         },
         put: async (url, data, options)=>{
             const createRequestUrl = makeCreateRequestUrl(options);
+            let requestToken = null;
             const executeRequest = async ()=>{
+                requestToken = getToken();
                 const headers = new Headers({
-                    ...getDefaultHeaders(),
+                    ...getDefaultHeaders(requestToken),
                     ...options?.headers
                 });
                 /**
@@ -367,13 +438,15 @@ const getToken = ()=>{
                 });
                 return responseInterceptor(response, options?.validateStatus);
             };
-            return withTokenRefresh(url, executeRequest);
+            return withTokenRefresh(url, executeRequest, ()=>requestToken);
         },
         del: async (url, options)=>{
             const createRequestUrl = makeCreateRequestUrl(options);
+            let requestToken = null;
             const executeRequest = async ()=>{
+                requestToken = getToken();
                 const headers = new Headers({
-                    ...getDefaultHeaders(),
+                    ...getDefaultHeaders(requestToken),
                     ...options?.headers
                 });
                 const response = await fetch(createRequestUrl(url), {
@@ -384,11 +457,11 @@ const getToken = ()=>{
                 });
                 return responseInterceptor(response, options?.validateStatus);
             };
-            return withTokenRefresh(url, executeRequest);
+            return withTokenRefresh(url, executeRequest, ()=>requestToken);
         }
     };
     return fetchClient;
 };
 
-export { FetchError, attemptTokenRefresh, getFetchClient, isFetchError, setOnSessionExpired, setOnTokenUpdate, storeToken, triggerSessionExpired };
+export { ADMIN_REFRESH_LOCK, FetchError, attemptTokenRefresh, getFetchClient, isFetchError, refreshAccessToken, setOnSessionExpired, setOnTokenUpdate, storeToken, triggerSessionExpired };
 //# sourceMappingURL=getFetchClient.mjs.map

package/dist/admin/admin/src/utils/getFetchClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"getFetchClient.mjs","sources":["../../../../../admin/src/utils/getFetchClient.ts"],"sourcesContent":["import pipe from 'lodash/fp/pipe';\n// eslint-disable-next-line import/default\nimport qs from 'qs';\n\nimport { AUTH_COOKIE_NAME, getCookieValue, setCookie } from './cookies';\n\nimport type { errors } from '@strapi/utils';\n\nexport type ApiError =\n  | errors.ApplicationError\n  | errors.ForbiddenError\n  | errors.NotFoundError\n  | errors.NotImplementedError\n  | errors.PaginationError\n  | errors.PayloadTooLargeError\n  | errors.PolicyError\n  | errors.RateLimitError\n  | errors.UnauthorizedError\n  | errors.ValidationError\n  | errors.YupValidationError;\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  USER: 'userInfo',\n};\n\n/**\n * Module-level promise to ensure only one token refresh happens at a time\n */\nlet refreshPromise: Promise<string | null> | null = null;\n\n/**\n * Callback to notify the app when the token is updated (e.g., to update Redux state)\n */\nlet onTokenUpdate: ((token: string) => void) | null = null;\n\n/**\n * Callback to notify the app when the session has been terminated and the user\n * should be redirected to the login page (e.g., refresh token rejected, idle\n * session expired). The React layer registers a handler that clears local\n * auth state and navigates to /auth/login.\n */\nlet onSessionExpired: (() => void) | null = null;\n\n/**\n * Set the callback that will be called when the token is refreshed.\n * This allows the React layer to update Redux state when a token refresh occurs.\n *\n * @param callback - Function to call with the new token, or null to clear\n * @example\n * // In a React component\n * useEffect(() => {\n *   setOnTokenUpdate((token) => dispatch(setToken(token)));\n *   return () => setOnTokenUpdate(null);\n * }, [dispatch]);\n */\nconst setOnTokenUpdate = (callback: ((token: string) => void) | null): void => {\n  onTokenUpdate = callback;\n};\n\n/**\n * Set the callback that will be called when the active session is no longer\n * valid (refresh token rejected by the server, or detected idle on the\n * client). This lets the active tab redirect to /auth/login without waiting\n * for the next user-initiated request to fail.\n *\n * @param callback - Function to call when the session ends, or null to clear\n */\nconst setOnSessionExpired = (callback: (() => void) | null): void => {\n  onSessionExpired = callback;\n};\n\n/**\n * Trigger the registered session-expired callback, if any. Safe to call from\n * non-React code (e.g., the RTK Query baseQuery 401 handler).\n */\nconst triggerSessionExpired = (): void => {\n  onSessionExpired?.();\n};\n\n/**\n * Check if the URL is an auth path that should not trigger token refresh.\n * Note: No ^ anchor since the URL may include the baseURL prefix (e.g., \"http://localhost:1337/admin/login\").\n * This differs from baseQuery.ts which uses ^/admin since it receives normalized paths.\n */\nconst isAuthPath = (url: string) => /\\/admin\\/(login|logout|access-token)\\b/.test(url);\n\n/**\n * Store the new token in the appropriate storage (localStorage or cookie)\n * and notify the app to update its state.\n *\n * Uses localStorage if the user selected \"remember me\" during login,\n * otherwise uses cookies for session-based storage.\n *\n * @param token - The JWT token to store\n * @internal Exported for testing purposes\n */\nconst storeToken = (token: string): void => {\n  // Check if the original token was stored in localStorage (persist mode)\n  const wasPersistedToLocalStorage = Boolean(localStorage.getItem(STORAGE_KEYS.TOKEN));\n\n  if (wasPersistedToLocalStorage) {\n    localStorage.setItem(STORAGE_KEYS.TOKEN, JSON.stringify(token));\n  } else {\n    setCookie(AUTH_COOKIE_NAME, token);\n  }\n\n  // Notify the app to update its state (e.g., Redux)\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n};\n\n/**\n * Refresh the access token by calling the /admin/access-token endpoint.\n * This uses a low-level fetch to avoid recursion through the interceptor.\n * Returns the new token on success, or null on failure.\n */\nconst refreshAccessToken = async (): Promise<string | null> => {\n  const backendURL = window.strapi.backendURL;\n\n  try {\n    const response = await fetch(`${backendURL}/admin/access-token`, {\n      method: 'POST',\n      credentials: 'include', // Include cookies for the refresh token\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n    });\n\n    if (!response.ok) {\n      console.warn('[Auth] Token refresh failed with status:', response.status);\n      return null;\n    }\n\n    const result = await response.json();\n    const token = result?.data?.token as string | undefined;\n\n    if (!token) {\n      console.warn('[Auth] Token refresh response missing token');\n      return null;\n    }\n\n    storeToken(token);\n    return token;\n  } catch (error) {\n    console.error('[Auth] Token refresh error:', error);\n    return null;\n  }\n};\n\n/**\n * Attempt to refresh the token if not already refreshing.\n * Uses a module-level promise to prevent concurrent refresh requests.\n *\n * @returns The new authentication token\n * @throws {Error} If the token refresh fails (e.g., refresh token expired)\n * @internal Exported for testing purposes\n */\nconst attemptTokenRefresh = async (): Promise<string> => {\n  if (!refreshPromise) {\n    refreshPromise = refreshAccessToken().finally(() => {\n      refreshPromise = null;\n    });\n  }\n\n  const newToken = await refreshPromise;\n  if (!newToken) {\n    const error = new Error('Session expired. Please log in again.');\n    error.name = 'TokenRefreshError';\n    throw error;\n  }\n\n  return newToken;\n};\n\ntype FetchResponse<TData = unknown> = {\n  data: TData;\n  status?: number;\n  headers?: Headers;\n};\n\ntype FetchOptions = {\n  params?: unknown;\n  signal?: AbortSignal;\n  headers?: Record<string, string>;\n  validateStatus?: ((status: number) => boolean) | null;\n  responseType?: 'json' | 'blob' | 'text' | 'arrayBuffer';\n};\n\ntype FetchConfig = {\n  signal?: AbortSignal;\n};\n\ninterface ErrorResponse {\n  data: {\n    data?: unknown;\n    error: ApiError & { status?: number };\n  };\n}\n\nclass FetchError extends Error {\n  public name: string;\n  public message: string;\n  public response?: ErrorResponse;\n  public code?: number;\n  public status?: number;\n\n  constructor(message: string, response?: ErrorResponse) {\n    super(message);\n    this.name = 'FetchError';\n    this.message = message;\n    this.response = response;\n    this.code = response?.data?.error?.status;\n    this.status = response?.data?.error?.status;\n\n    // Ensure correct stack trace in error object\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, FetchError);\n    }\n  }\n}\n\nconst isFetchError = (error: unknown): error is FetchError => {\n  return error instanceof FetchError;\n};\n\nconst getToken = (): string | null => {\n  const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);\n  if (fromLocalStorage) {\n    return JSON.parse(fromLocalStorage);\n  }\n\n  const fromCookie = getCookieValue(AUTH_COOKIE_NAME);\n  return fromCookie ?? null;\n};\n\ntype FetchClient = {\n  get: {\n    (url: string, config: FetchOptions & { responseType: 'blob' }): Promise<FetchResponse<Blob>>;\n    (url: string, config: FetchOptions & { responseType: 'text' }): Promise<FetchResponse<string>>;\n    (\n      url: string,\n      config: FetchOptions & { responseType: 'arrayBuffer' }\n    ): Promise<FetchResponse<ArrayBuffer>>;\n    <TData = unknown>(url: string, config?: FetchOptions): Promise<FetchResponse<TData>>;\n  };\n  put: <TData = unknown, TSend = unknown>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  post: <TData = unknown, TSend = unknown>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  del: <TData = unknown>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n};\n\n/**\n * @public\n * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.\n * @returns {FetchClient} A fetch client object with methods for making HTTP requests.\n * @description This is an abstraction around the native fetch exposed by a function. It provides a simple interface to handle API calls\n * to the Strapi backend.\n * @example\n * ```tsx\n * import { getFetchClient } from '@strapi/admin/admin';\n *\n * const myFunct = () => {\n *   const { get } = getFetchClient();\n *   const requestURL = \"/some-endpoint\";\n *\n *   const { data } = await get(requestURL);\n *\n *   return data;\n * };\n * ```\n */\nconst getFetchClient = (defaultOptions: FetchConfig = {}): FetchClient => {\n  const backendURL = window.strapi.backendURL;\n\n  /**\n   * Create default headers with the current token.\n   * This is a function so we can get a fresh token after refresh.\n   */\n  const getDefaultHeaders = () => ({\n    Accept: 'application/json',\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${getToken()}`,\n  });\n\n  const isFormDataRequest = (body: unknown) => body instanceof FormData;\n  const addPrependingSlash = (url: string) => (url.charAt(0) !== '/' ? `/${url}` : url);\n\n  // This regular expression matches a string that starts with either \"http://\" or \"https://\" or any other protocol name in lower case letters, followed by \"://\" and ends with anything else\n  const hasProtocol = (url: string) => new RegExp('^(?:[a-z+]+:)?//', 'i').test(url);\n\n  // Check if the url has a prepending slash, if not add a slash\n  const normalizeUrl = (url: string) => (hasProtocol(url) ? url : addPrependingSlash(url));\n\n  // Add a response interceptor to return the response\n  const responseInterceptor = async <TData = unknown>(\n    response: Response,\n    validateStatus?: FetchOptions['validateStatus'],\n    responseType: NonNullable<FetchOptions['responseType']> = 'json'\n  ): Promise<FetchResponse<TData>> => {\n    if (responseType !== 'json') {\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      let result: Blob | string | ArrayBuffer;\n      if (responseType === 'blob') {\n        result = await response.blob();\n      } else if (responseType === 'text') {\n        result = await response.text();\n      } else {\n        result = await response.arrayBuffer();\n      }\n\n      return { data: result as TData, status: response.status, headers: response.headers };\n    }\n\n    if (response.status === 204) {\n      return { data: {} as TData, status: response.status };\n    }\n\n    try {\n      const result = await response.json();\n\n      if (!response.ok && result.error && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError(result.error.message, { data: result });\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Unknown Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      return { data: result };\n    } catch (error) {\n      // An empty 200 body causes `response.json()` to throw a `SyntaxError`. We treat\n      // it as success and return an empty payload. We match on `error.name` rather\n      // than `instanceof SyntaxError` because constructor identity differs across JS\n      // realms — a Response from a different realm (e.g. undici under jsdom in tests,\n      // a service worker or iframe in browsers) throws a `SyntaxError` whose\n      // constructor is not the same identity as the one this module closes over. Name\n      // comparison is realm-agnostic.\n      if ((error as Error | null)?.name === 'SyntaxError' && response.ok) {\n        return { data: {}, status: response.status } as FetchResponse<TData>;\n      } else {\n        throw error;\n      }\n    }\n  };\n\n  /**\n   * Execute a fetch request with automatic token refresh on 401 errors.\n   * @param url - The request URL (used to check if it's an auth path)\n   * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)\n   */\n  const withTokenRefresh = async <TData>(\n    url: string,\n    executeRequest: () => Promise<FetchResponse<TData>>\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      return await executeRequest();\n    } catch (error) {\n      // Only attempt refresh for 401 errors on non-auth paths\n      if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {\n        try {\n          await attemptTokenRefresh();\n          // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token\n          return await executeRequest();\n        } catch {\n          // If refresh fails, throw the original error\n          throw error;\n        }\n      }\n      throw error;\n    }\n  };\n\n  const paramsSerializer =\n    <Param = unknown>(params?: Param) =>\n    (url: string) => {\n      if (params) {\n        if (typeof params === 'string') {\n          return `${url}?${params}`;\n        }\n\n        /**\n         * TODO V6: Encoding should be enabled in this step\n         * So the rest of the app doesn't have to worry about it,\n         * It's considered a breaking change because it impacts any API request, including the user's custom code\n         */\n        const serializedParams = qs.stringify(params, { encode: false });\n        if (serializedParams) {\n          return `${url}?${serializedParams}`;\n        }\n        return url;\n      }\n      return url;\n    };\n\n  const addBaseUrl = (url: Parameters<typeof fetch>[0]) => {\n    return `${backendURL}${url}`;\n  };\n\n  /**\n   * We use the factory method because the options\n   * are unique to the individual request\n   */\n  const makeCreateRequestUrl = (options?: FetchOptions) =>\n    pipe(normalizeUrl, addBaseUrl, paramsSerializer(options?.params));\n\n  const fetchClient: FetchClient = {\n    get: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      const responseType = options?.responseType ?? 'json';\n\n      const executeRequest = async () => {\n        const { Authorization } = getDefaultHeaders();\n\n        // For non-JSON response types, omit content negotiation headers that imply JSON\n        const defaultHeaders = responseType === 'json' ? getDefaultHeaders() : { Authorization };\n\n        const headers = new Headers({\n          ...defaultHeaders,\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'GET',\n          credentials: 'include',\n          headers,\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus, responseType);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    post: async <TData, TSend = unknown>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'POST',\n          credentials: 'include',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    put: async <TData, TSend = unknown>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'PUT',\n          credentials: 'include',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n    del: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n\n      const executeRequest = async () => {\n        const headers = new Headers({\n          ...getDefaultHeaders(),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'DELETE',\n          credentials: 'include',\n          headers,\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest);\n    },\n  };\n\n  return fetchClient;\n};\n\nexport {\n  getFetchClient,\n  isFetchError,\n  FetchError,\n  attemptTokenRefresh,\n  storeToken,\n  setOnTokenUpdate,\n  setOnSessionExpired,\n  triggerSessionExpired,\n};\nexport type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };\n"],"names":["STORAGE_KEYS","TOKEN","refreshPromise","onTokenUpdate","onSessionExpired","setOnTokenUpdate","callback","setOnSessionExpired","triggerSessionExpired","isAuthPath","url","test","storeToken","token","wasPersistedToLocalStorage","Boolean","localStorage","getItem","setItem","JSON","stringify","setCookie","AUTH_COOKIE_NAME","refreshAccessToken","backendURL","window","strapi","response","fetch","method","credentials","headers","Accept","ok","console","warn","status","result","json","data","error","attemptTokenRefresh","finally","newToken","Error","name","FetchError","message","code","captureStackTrace","isFetchError","getToken","fromLocalStorage","parse","fromCookie","getCookieValue","getFetchClient","defaultOptions","getDefaultHeaders","Authorization","isFormDataRequest","body","FormData","addPrependingSlash","charAt","hasProtocol","RegExp","normalizeUrl","responseInterceptor","validateStatus","responseType","fetchError","blob","text","arrayBuffer","withTokenRefresh","executeRequest","paramsSerializer","params","serializedParams","qs","encode","addBaseUrl","makeCreateRequestUrl","options","pipe","fetchClient","get","createRequestUrl","defaultHeaders","Headers","signal","post","delete","put","del"],"mappings":";;;;AAqBA,MAAMA,YAAAA,GAAe;IACnBC,KAAAA,EAAO,UAET,CAAA;AAEA;;AAEC,IACD,IAAIC,cAAAA,GAAgD,IAAA;AAEpD;;AAEC,IACD,IAAIC,aAAAA,GAAkD,IAAA;AAEtD;;;;;AAKC,IACD,IAAIC,gBAAAA,GAAwC,IAAA;AAE5C;;;;;;;;;;;IAYA,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxBH,aAAAA,GAAgBG,QAAAA;AAClB;AAEA;;;;;;;IAQA,MAAMC,sBAAsB,CAACD,QAAAA,GAAAA;IAC3BF,gBAAAA,GAAmBE,QAAAA;AACrB;AAEA;;;AAGC,UACKE,qBAAAA,GAAwB,IAAA;AAC5BJ,IAAAA,gBAAAA,IAAAA;AACF;AAEA;;;;AAIC,IACD,MAAMK,UAAAA,GAAa,CAACC,GAAAA,GAAgB,wCAAA,CAAyCC,IAAI,CAACD,GAAAA,CAAAA;AAElF;;;;;;;;;IAUA,MAAME,aAAa,CAACC,KAAAA,GAAAA;;AAElB,IAAA,MAAMC,6BAA6BC,OAAAA,CAAQC,YAAAA,CAAaC,OAAO,CAACjB,aAAaC,KAAK,CAAA,CAAA;AAElF,IAAA,IAAIa,0BAAAA,EAA4B;AAC9BE,QAAAA,YAAAA,CAAaE,OAAO,CAAClB,YAAAA,CAAaC,KAAK,EAAEkB,IAAAA,CAAKC,SAAS,CAACP,KAAAA,CAAAA,CAAAA;IAC1D,CAAA,MAAO;AACLQ,QAAAA,SAAAA,CAAUC,gBAAAA,EAAkBT,KAAAA,CAAAA;AAC9B,IAAA;;AAGA,IAAA,IAAIV,aAAAA,EAAe;QACjBA,aAAAA,CAAcU,KAAAA,CAAAA;AAChB,IAAA;AACF;AAEA;;;;AAIC,IACD,MAAMU,kBAAAA,GAAqB,UAAA;AACzB,IAAA,MAAMC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;IAE3C,IAAI;AACF,QAAA,MAAMG,WAAW,MAAMC,KAAAA,CAAM,GAAGJ,UAAAA,CAAW,mBAAmB,CAAC,EAAE;YAC/DK,MAAAA,EAAQ,MAAA;YACRC,WAAAA,EAAa,SAAA;YACbC,OAAAA,EAAS;gBACPC,MAAAA,EAAQ,kBAAA;gBACR,cAAA,EAAgB;AAClB;AACF,SAAA,CAAA;QAEA,IAAI,CAACL,QAAAA,CAASM,EAAE,EAAE;AAChBC,YAAAA,OAAAA,CAAQC,IAAI,CAAC,0CAAA,EAA4CR,QAAAA,CAASS,MAAM,CAAA;YACxE,OAAO,IAAA;AACT,QAAA;QAEA,MAAMC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;QAClC,MAAMzB,KAAAA,GAAQwB,QAAQE,IAAAA,EAAM1B,KAAAA;AAE5B,QAAA,IAAI,CAACA,KAAAA,EAAO;AACVqB,YAAAA,OAAAA,CAAQC,IAAI,CAAC,6CAAA,CAAA;YACb,OAAO,IAAA;AACT,QAAA;QAEAvB,UAAAA,CAAWC,KAAAA,CAAAA;QACX,OAAOA,KAAAA;AACT,IAAA,CAAA,CAAE,OAAO2B,KAAAA,EAAO;QACdN,OAAAA,CAAQM,KAAK,CAAC,6BAAA,EAA+BA,KAAAA,CAAAA;QAC7C,OAAO,IAAA;AACT,IAAA;AACF,CAAA;AAEA;;;;;;;AAOC,UACKC,mBAAAA,GAAsB,UAAA;AAC1B,IAAA,IAAI,CAACvC,cAAAA,EAAgB;QACnBA,cAAAA,GAAiBqB,kBAAAA,EAAAA,CAAqBmB,OAAO,CAAC,IAAA;YAC5CxC,cAAAA,GAAiB,IAAA;AACnB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAMyC,WAAW,MAAMzC,cAAAA;AACvB,IAAA,IAAI,CAACyC,QAAAA,EAAU;QACb,MAAMH,KAAAA,GAAQ,IAAII,KAAAA,CAAM,uCAAA,CAAA;AACxBJ,QAAAA,KAAAA,CAAMK,IAAI,GAAG,mBAAA;QACb,MAAML,KAAAA;AACR,IAAA;IAEA,OAAOG,QAAAA;AACT;AA2BA,MAAMG,UAAAA,SAAmBF,KAAAA,CAAAA;IAOvB,WAAA,CAAYG,OAAe,EAAEpB,QAAwB,CAAE;AACrD,QAAA,KAAK,CAACoB,OAAAA,CAAAA;QACN,IAAI,CAACF,IAAI,GAAG,YAAA;QACZ,IAAI,CAACE,OAAO,GAAGA,OAAAA;QACf,IAAI,CAACpB,QAAQ,GAAGA,QAAAA;AAChB,QAAA,IAAI,CAACqB,IAAI,GAAGrB,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;AACnC,QAAA,IAAI,CAACA,MAAM,GAAGT,QAAAA,EAAUY,MAAMC,KAAAA,EAAOJ,MAAAA;;QAGrC,IAAIQ,KAAAA,CAAMK,iBAAiB,EAAE;YAC3BL,KAAAA,CAAMK,iBAAiB,CAAC,IAAI,EAAEH,UAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;AACF;AAEA,MAAMI,eAAe,CAACV,KAAAA,GAAAA;AACpB,IAAA,OAAOA,KAAAA,YAAiBM,UAAAA;AAC1B;AAEA,MAAMK,QAAAA,GAAW,IAAA;AACf,IAAA,MAAMC,gBAAAA,GAAmBpC,YAAAA,CAAaC,OAAO,CAACjB,aAAaC,KAAK,CAAA;AAChE,IAAA,IAAImD,gBAAAA,EAAkB;QACpB,OAAOjC,IAAAA,CAAKkC,KAAK,CAACD,gBAAAA,CAAAA;AACpB,IAAA;AAEA,IAAA,MAAME,aAAaC,cAAAA,CAAejC,gBAAAA,CAAAA;AAClC,IAAA,OAAOgC,UAAAA,IAAc,IAAA;AACvB,CAAA;AAyBA;;;;;;;;;;;;;;;;;;;AAmBC,IACD,MAAME,cAAAA,GAAiB,CAACC,cAAAA,GAA8B,EAAE,GAAA;AACtD,IAAA,MAAMjC,UAAAA,GAAaC,MAAAA,CAAOC,MAAM,CAACF,UAAU;AAE3C;;;MAIA,MAAMkC,iBAAAA,GAAoB,KAAO;YAC/B1B,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB,kBAAA;YAChB2B,aAAAA,EAAe,CAAC,OAAO,EAAER,QAAAA,EAAAA,CAAAA;SAC3B,CAAA;IAEA,MAAMS,iBAAAA,GAAoB,CAACC,IAAAA,GAAkBA,IAAAA,YAAgBC,QAAAA;AAC7D,IAAA,MAAMC,kBAAAA,GAAqB,CAACrD,GAAAA,GAAiBA,GAAAA,CAAIsD,MAAM,CAAC,CAAA,CAAA,KAAO,GAAA,GAAM,CAAC,CAAC,EAAEtD,GAAAA,CAAAA,CAAK,GAAGA,GAAAA;;IAGjF,MAAMuD,WAAAA,GAAc,CAACvD,GAAAA,GAAgB,IAAIwD,OAAO,kBAAA,EAAoB,GAAA,CAAA,CAAKvD,IAAI,CAACD,GAAAA,CAAAA;;AAG9E,IAAA,MAAMyD,eAAe,CAACzD,GAAAA,GAAiBuD,WAAAA,CAAYvD,GAAAA,CAAAA,GAAOA,MAAMqD,kBAAAA,CAAmBrD,GAAAA,CAAAA;;AAGnF,IAAA,MAAM0D,mBAAAA,GAAsB,OAC1BzC,QAAAA,EACA0C,cAAAA,EACAC,eAA0D,MAAM,GAAA;AAEhE,QAAA,IAAIA,iBAAiB,MAAA,EAAQ;YAC3B,IAAI,CAAC3C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMmC,UAAAA,GAAa,IAAIzB,UAAAA,CAAW,cAAA,CAAA;gBAClCyB,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,IAAIlC,MAAAA;AACJ,YAAA,IAAIiC,iBAAiB,MAAA,EAAQ;gBAC3BjC,MAAAA,GAAS,MAAMV,SAAS6C,IAAI,EAAA;YAC9B,CAAA,MAAO,IAAIF,iBAAiB,MAAA,EAAQ;gBAClCjC,MAAAA,GAAS,MAAMV,SAAS8C,IAAI,EAAA;YAC9B,CAAA,MAAO;gBACLpC,MAAAA,GAAS,MAAMV,SAAS+C,WAAW,EAAA;AACrC,YAAA;YAEA,OAAO;gBAAEnC,IAAAA,EAAMF,MAAAA;AAAiBD,gBAAAA,MAAAA,EAAQT,SAASS,MAAM;AAAEL,gBAAAA,OAAAA,EAASJ,SAASI;AAAQ,aAAA;AACrF,QAAA;QAEA,IAAIJ,QAAAA,CAASS,MAAM,KAAK,GAAA,EAAK;YAC3B,OAAO;AAAEG,gBAAAA,IAAAA,EAAM,EAAC;AAAYH,gBAAAA,MAAAA,EAAQT,SAASS;AAAO,aAAA;AACtD,QAAA;QAEA,IAAI;YACF,MAAMC,MAAAA,GAAS,MAAMV,QAAAA,CAASW,IAAI,EAAA;YAElC,IAAI,CAACX,QAAAA,CAASM,EAAE,IAAII,MAAAA,CAAOG,KAAK,IAAI,CAAC6B,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;AACtE,gBAAA,MAAMmC,aAAa,IAAIzB,UAAAA,CAAWT,OAAOG,KAAK,CAACO,OAAO,EAAE;oBAAER,IAAAA,EAAMF;AAAO,iBAAA,CAAA;gBACvEkC,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,IAAI,CAAC5C,SAASM,EAAE,IAAI,CAACoC,cAAAA,GAAiB1C,QAAAA,CAASS,MAAM,CAAA,EAAG;gBACtD,MAAMmC,UAAAA,GAAa,IAAIzB,UAAAA,CAAW,sBAAA,CAAA;gBAClCyB,UAAAA,CAAWnC,MAAM,GAAGT,QAAAA,CAASS,MAAM;gBACnC,MAAMmC,UAAAA;AACR,YAAA;YAEA,OAAO;gBAAEhC,IAAAA,EAAMF;AAAO,aAAA;AACxB,QAAA,CAAA,CAAE,OAAOG,KAAAA,EAAO;;;;;;;;AAQd,YAAA,IAAI,KAACA,EAAwBK,IAAAA,KAAS,aAAA,IAAiBlB,QAAAA,CAASM,EAAE,EAAE;gBAClE,OAAO;AAAEM,oBAAAA,IAAAA,EAAM,EAAC;AAAGH,oBAAAA,MAAAA,EAAQT,SAASS;AAAO,iBAAA;YAC7C,CAAA,MAAO;gBACL,MAAMI,KAAAA;AACR,YAAA;AACF,QAAA;AACF,IAAA,CAAA;AAEA;;;;MAKA,MAAMmC,gBAAAA,GAAmB,OACvBjE,GAAAA,EACAkE,cAAAA,GAAAA;QAEA,IAAI;AACF,YAAA,OAAO,MAAMA,cAAAA,EAAAA;AACf,QAAA,CAAA,CAAE,OAAOpC,KAAAA,EAAO;;YAEd,IAAIU,YAAAA,CAAaV,UAAUA,KAAAA,CAAMJ,MAAM,KAAK,GAAA,IAAO,CAAC3B,WAAWC,GAAAA,CAAAA,EAAM;gBACnE,IAAI;oBACF,MAAM+B,mBAAAA,EAAAA;;AAEN,oBAAA,OAAO,MAAMmC,cAAAA,EAAAA;AACf,gBAAA,CAAA,CAAE,OAAM;;oBAEN,MAAMpC,KAAAA;AACR,gBAAA;AACF,YAAA;YACA,MAAMA,KAAAA;AACR,QAAA;AACF,IAAA,CAAA;IAEA,MAAMqC,gBAAAA,GACJ,CAAkBC,MAAAA,GAClB,CAACpE,GAAAA,GAAAA;AACC,YAAA,IAAIoE,MAAAA,EAAQ;gBACV,IAAI,OAAOA,WAAW,QAAA,EAAU;AAC9B,oBAAA,OAAO,CAAA,EAAGpE,GAAAA,CAAI,CAAC,EAAEoE,MAAAA,CAAAA,CAAQ;AAC3B,gBAAA;AAEA;;;;AAIC,YACD,MAAMC,gBAAAA,GAAmBC,WAAAA,CAAG5D,SAAS,CAAC0D,MAAAA,EAAQ;oBAAEG,MAAAA,EAAQ;AAAM,iBAAA,CAAA;AAC9D,gBAAA,IAAIF,gBAAAA,EAAkB;AACpB,oBAAA,OAAO,CAAA,EAAGrE,GAAAA,CAAI,CAAC,EAAEqE,gBAAAA,CAAAA,CAAkB;AACrC,gBAAA;gBACA,OAAOrE,GAAAA;AACT,YAAA;YACA,OAAOA,GAAAA;AACT,QAAA,CAAA;AAEF,IAAA,MAAMwE,aAAa,CAACxE,GAAAA,GAAAA;QAClB,OAAO,CAAA,EAAGc,aAAad,GAAAA,CAAAA,CAAK;AAC9B,IAAA,CAAA;AAEA;;;MAIA,MAAMyE,uBAAuB,CAACC,OAAAA,GAC5BC,KAAKlB,YAAAA,EAAce,UAAAA,EAAYL,iBAAiBO,OAAAA,EAASN,MAAAA,CAAAA,CAAAA;AAE3D,IAAA,MAAMQ,WAAAA,GAA2B;AAC/BC,QAAAA,GAAAA,EAAK,OAAc7E,GAAAA,EAAa0E,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;YAC9C,MAAMd,YAAAA,GAAec,SAASd,YAAAA,IAAgB,MAAA;AAE9C,YAAA,MAAMM,cAAAA,GAAiB,UAAA;gBACrB,MAAM,EAAEjB,aAAa,EAAE,GAAGD,iBAAAA,EAAAA;;gBAG1B,MAAM+B,cAAAA,GAAiBnB,YAAAA,KAAiB,MAAA,GAASZ,iBAAAA,EAAAA,GAAsB;AAAEC,oBAAAA;AAAc,iBAAA;gBAEvF,MAAM5B,OAAAA,GAAU,IAAI2D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGD,cAAc;AACjB,oBAAA,GAAGL,SAASrD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAM4D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUlC,cAAAA,CAAekC,MAAM;oBAChD9D,MAAAA,EAAQ,KAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA;AACF,iBAAA,CAAA;gBAEA,OAAOqC,mBAAAA,CAA2BzC,QAAAA,EAAUyD,OAAAA,EAASf,cAAAA,EAAgBC,YAAAA,CAAAA;AACvE,YAAA,CAAA;AAEA,YAAA,OAAOK,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAgB,IAAAA,EAAM,OACJlF,KACA6B,IAAAA,EACA6C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM7C,OAAAA,GAAU,IAAI2D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGhC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG0B,SAASrD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ8D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMlE,QAAAA,GAAW,MAAMC,KAAAA,CAAM4D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUlC,cAAAA,CAAekC,MAAM;oBAChD9D,MAAAA,EAAQ,MAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBpB,IAAAA,CAAKC,SAAS,CAACmB,IAAAA;AACtE,iBAAA,CAAA;gBACA,OAAO6B,mBAAAA,CAA2BzC,UAAUyD,OAAAA,EAASf,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOM,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;QACAkB,GAAAA,EAAK,OACHpF,KACA6B,IAAAA,EACA6C,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM7C,OAAAA,GAAU,IAAI2D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGhC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG0B,SAASrD;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAI6B,kBAAkBrB,IAAAA,CAAAA,EAAO;AAC3BR,oBAAAA,OAAAA,CAAQ8D,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMlE,QAAAA,GAAW,MAAMC,KAAAA,CAAM4D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUlC,cAAAA,CAAekC,MAAM;oBAChD9D,MAAAA,EAAQ,KAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA,OAAAA;AACA8B,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBrB,IAAAA,CAAAA,GAASA,IAAAA,GAAoBpB,IAAAA,CAAKC,SAAS,CAACmB,IAAAA;AACtE,iBAAA,CAAA;gBAEA,OAAO6B,mBAAAA,CAA2BzC,UAAUyD,OAAAA,EAASf,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOM,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA,CAAA;AACAmB,QAAAA,GAAAA,EAAK,OAAcrF,GAAAA,EAAa0E,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAE9C,YAAA,MAAMR,cAAAA,GAAiB,UAAA;gBACrB,MAAM7C,OAAAA,GAAU,IAAI2D,OAAAA,CAAQ;AAC1B,oBAAA,GAAGhC,iBAAAA,EAAmB;AACtB,oBAAA,GAAG0B,SAASrD;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMJ,QAAAA,GAAW,MAAMC,KAAAA,CAAM4D,gBAAAA,CAAiB9E,GAAAA,CAAAA,EAAM;oBAClDiF,MAAAA,EAAQP,OAAAA,EAASO,MAAAA,IAAUlC,cAAAA,CAAekC,MAAM;oBAChD9D,MAAAA,EAAQ,QAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA;AACF,iBAAA,CAAA;gBACA,OAAOqC,mBAAAA,CAA2BzC,UAAUyD,OAAAA,EAASf,cAAAA,CAAAA;AACvD,YAAA,CAAA;AAEA,YAAA,OAAOM,iBAAiBjE,GAAAA,EAAKkE,cAAAA,CAAAA;AAC/B,QAAA;AACF,KAAA;IAEA,OAAOU,WAAAA;AACT;;;;"}
+{"version":3,"file":"getFetchClient.mjs","sources":["../../../../../admin/src/utils/getFetchClient.ts"],"sourcesContent":["import pipe from 'lodash/fp/pipe';\n// eslint-disable-next-line import/default\nimport qs from 'qs';\n\nimport { AUTH_COOKIE_NAME, getCookieValue, setCookie } from './cookies';\nimport { decodeAccessTokenExpiry } from './jwt';\n\nimport type { errors } from '@strapi/utils';\n\nexport type ApiError =\n  | errors.ApplicationError\n  | errors.ForbiddenError\n  | errors.NotFoundError\n  | errors.NotImplementedError\n  | errors.PaginationError\n  | errors.PayloadTooLargeError\n  | errors.PolicyError\n  | errors.RateLimitError\n  | errors.UnauthorizedError\n  | errors.ValidationError\n  | errors.YupValidationError;\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  USER: 'userInfo',\n};\n\n/**\n * Module-level promise to ensure only one token refresh happens at a time\n */\nlet refreshPromise: Promise<string | null> | null = null;\n\n/**\n * Callback to notify the app when the token is updated (e.g., to update Redux state)\n */\nlet onTokenUpdate: ((token: string) => void) | null = null;\n\n/**\n * Callback to notify the app when the session has been terminated and the user\n * should be redirected to the login page (e.g., refresh token rejected, idle\n * session expired). The React layer registers a handler that clears local\n * auth state and navigates to /auth/login.\n */\nlet onSessionExpired: (() => void) | null = null;\n\n/**\n * Set the callback that will be called when the token is refreshed.\n * This allows the React layer to update Redux state when a token refresh occurs.\n *\n * @param callback - Function to call with the new token, or null to clear\n * @example\n * // In a React component\n * useEffect(() => {\n *   setOnTokenUpdate((token) => dispatch(setToken(token)));\n *   return () => setOnTokenUpdate(null);\n * }, [dispatch]);\n */\nconst setOnTokenUpdate = (callback: ((token: string) => void) | null): void => {\n  onTokenUpdate = callback;\n};\n\n/**\n * Set the callback that will be called when the active session is no longer\n * valid (refresh token rejected by the server, or detected idle on the\n * client). This lets the active tab redirect to /auth/login without waiting\n * for the next user-initiated request to fail.\n *\n * @param callback - Function to call when the session ends, or null to clear\n */\nconst setOnSessionExpired = (callback: (() => void) | null): void => {\n  onSessionExpired = callback;\n};\n\n/**\n * Trigger the registered session-expired callback, if any. Safe to call from\n * non-React code (e.g., the RTK Query baseQuery 401 handler).\n */\nconst triggerSessionExpired = (): void => {\n  onSessionExpired?.();\n};\n\n/**\n * Check if the URL is an auth path that should not trigger token refresh.\n * Note: No ^ anchor since the URL may include the baseURL prefix (e.g., \"http://localhost:1337/admin/login\").\n * This differs from baseQuery.ts which uses ^/admin since it receives normalized paths.\n */\nconst isAuthPath = (url: string) => /\\/admin\\/(login|logout|access-token)\\b/.test(url);\n\n/**\n * Store the new token in the appropriate storage (localStorage or cookie)\n * and notify the app to update its state.\n *\n * Uses localStorage if the user selected \"remember me\" during login,\n * otherwise uses cookies for session-based storage.\n *\n * @param token - The JWT token to store\n * @internal Exported for testing purposes\n */\nconst storeToken = (token: string): void => {\n  // Check if the original token was stored in localStorage (persist mode)\n  const wasPersistedToLocalStorage = Boolean(localStorage.getItem(STORAGE_KEYS.TOKEN));\n\n  if (wasPersistedToLocalStorage) {\n    localStorage.setItem(STORAGE_KEYS.TOKEN, JSON.stringify(token));\n  } else {\n    setCookie(AUTH_COOKIE_NAME, token);\n  }\n\n  // Notify the app to update its state (e.g., Redux)\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n};\n\nconst getToken = (): string | null => {\n  const fromLocalStorage = localStorage.getItem(STORAGE_KEYS.TOKEN);\n  if (fromLocalStorage) {\n    return JSON.parse(fromLocalStorage);\n  }\n\n  const fromCookie = getCookieValue(AUTH_COOKIE_NAME);\n  return fromCookie ?? null;\n};\n\nconst ADMIN_REFRESH_LOCK = 'strapi-admin-access-token';\nconst FALLBACK_ADOPT_TIMEOUT_MS = 250;\nconst FALLBACK_ADOPT_POLL_MS = 25;\n\nconst postAccessToken = (backendURL: string) =>\n  fetch(`${backendURL}/admin/access-token`, {\n    method: 'POST',\n    credentials: 'include', // Include cookies for the refresh token\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n  });\n\nconst adoptSharedAccessToken = (token: string): string => {\n  if (onTokenUpdate) {\n    onTokenUpdate(token);\n  }\n  return token;\n};\n\n/**\n * Another tab may have refreshed already and written a newer access token to the\n * shared localStorage/cookie. Per-tab Redux is not visible here — only shared\n * storage counts.\n */\nconst readValidAccessTokenFromSharedStorage = (staleToken: string | null): string | null => {\n  const stored = getToken();\n  if (!stored || stored === staleToken) {\n    return null;\n  }\n\n  const expiry = decodeAccessTokenExpiry(stored);\n  if (expiry === null || expiry <= Date.now()) {\n    return null;\n  }\n\n  return stored;\n};\n\nconst waitForSharedAccessToken = async (staleToken: string | null): Promise<string | null> => {\n  const timeoutAt = Date.now() + FALLBACK_ADOPT_TIMEOUT_MS;\n\n  while (Date.now() < timeoutAt) {\n    await new Promise((resolve) => {\n      setTimeout(resolve, FALLBACK_ADOPT_POLL_MS);\n    });\n\n    const adopted = readValidAccessTokenFromSharedStorage(staleToken);\n    if (adopted) {\n      return adoptSharedAccessToken(adopted);\n    }\n  }\n\n  return null;\n};\n\nconst executeRefreshAccessToken = async (\n  backendURL: string,\n  tokenBeforeRefresh: string | null,\n  { allowHttpRetry }: { allowHttpRetry: boolean }\n): Promise<string | null> => {\n  const adopted = readValidAccessTokenFromSharedStorage(tokenBeforeRefresh);\n  if (adopted) {\n    return adoptSharedAccessToken(adopted);\n  }\n\n  let response = await postAccessToken(backendURL);\n\n  if (response.status === 401 && allowHttpRetry) {\n    const adoptedAfterFail = readValidAccessTokenFromSharedStorage(tokenBeforeRefresh);\n    if (adoptedAfterFail) {\n      return adoptSharedAccessToken(adoptedAfterFail);\n    }\n\n    const adoptedAfterWait = await waitForSharedAccessToken(tokenBeforeRefresh);\n    if (adoptedAfterWait) {\n      return adoptedAfterWait;\n    }\n\n    response = await postAccessToken(backendURL);\n  }\n\n  if (!response.ok) {\n    console.warn('[Auth] Token refresh failed with status:', response.status);\n    return null;\n  }\n\n  const result = await response.json();\n  const token = result?.data?.token as string | undefined;\n\n  if (!token) {\n    console.warn('[Auth] Token refresh response missing token');\n    return null;\n  }\n\n  storeToken(token);\n  return token;\n};\n\n/**\n * Refresh the access token by calling the /admin/access-token endpoint.\n * This uses a low-level fetch to avoid recursion through the interceptor.\n * Returns the new token on success, or null on failure.\n */\nconst refreshAccessToken = async (\n  tokenUsedByFailedRequest?: string | null\n): Promise<string | null> => {\n  const backendURL = window.strapi.backendURL;\n  const tokenBeforeRefresh = tokenUsedByFailedRequest ?? getToken();\n\n  try {\n    if (typeof navigator !== 'undefined' && navigator.locks?.request) {\n      return await navigator.locks.request(ADMIN_REFRESH_LOCK, () =>\n        executeRefreshAccessToken(backendURL, tokenBeforeRefresh, { allowHttpRetry: false })\n      );\n    }\n\n    return await executeRefreshAccessToken(backendURL, tokenBeforeRefresh, {\n      allowHttpRetry: true,\n    });\n  } catch (error) {\n    console.error('[Auth] Token refresh error:', error);\n    return null;\n  }\n};\n\n/**\n * Attempt to refresh the token if not already refreshing.\n * Uses a module-level promise to prevent concurrent refresh requests.\n *\n * @returns The new authentication token\n * @throws {Error} If the token refresh fails (e.g., refresh token expired)\n * @internal Exported for testing purposes\n */\nconst attemptTokenRefresh = async (tokenUsedByFailedRequest?: string | null): Promise<string> => {\n  if (!refreshPromise) {\n    refreshPromise = refreshAccessToken(tokenUsedByFailedRequest).finally(() => {\n      refreshPromise = null;\n    });\n  }\n\n  const newToken = await refreshPromise;\n  if (!newToken) {\n    const error = new Error('Session expired. Please log in again.');\n    error.name = 'TokenRefreshError';\n    throw error;\n  }\n\n  return newToken;\n};\n\ntype FetchResponse<TData = unknown> = {\n  data: TData;\n  status?: number;\n  headers?: Headers;\n};\n\ntype FetchOptions = {\n  params?: unknown;\n  signal?: AbortSignal;\n  headers?: Record<string, string>;\n  validateStatus?: ((status: number) => boolean) | null;\n  responseType?: 'json' | 'blob' | 'text' | 'arrayBuffer';\n};\n\ntype FetchConfig = {\n  signal?: AbortSignal;\n};\n\ninterface ErrorResponse {\n  data: {\n    data?: unknown;\n    error: ApiError & { status?: number };\n  };\n}\n\nclass FetchError extends Error {\n  public name: string;\n  public message: string;\n  public response?: ErrorResponse;\n  public code?: number;\n  public status?: number;\n\n  constructor(message: string, response?: ErrorResponse) {\n    super(message);\n    this.name = 'FetchError';\n    this.message = message;\n    this.response = response;\n    this.code = response?.data?.error?.status;\n    this.status = response?.data?.error?.status;\n\n    // Ensure correct stack trace in error object\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, FetchError);\n    }\n  }\n}\n\nconst isFetchError = (error: unknown): error is FetchError => {\n  return error instanceof FetchError;\n};\n\ntype FetchClient = {\n  get: {\n    (url: string, config: FetchOptions & { responseType: 'blob' }): Promise<FetchResponse<Blob>>;\n    (url: string, config: FetchOptions & { responseType: 'text' }): Promise<FetchResponse<string>>;\n    (\n      url: string,\n      config: FetchOptions & { responseType: 'arrayBuffer' }\n    ): Promise<FetchResponse<ArrayBuffer>>;\n    <TData = unknown>(url: string, config?: FetchOptions): Promise<FetchResponse<TData>>;\n  };\n  put: <TData = unknown, TSend = unknown>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  post: <TData = unknown, TSend = unknown>(\n    url: string,\n    data?: TSend,\n    config?: FetchOptions\n  ) => Promise<FetchResponse<TData>>;\n  del: <TData = unknown>(url: string, config?: FetchOptions) => Promise<FetchResponse<TData>>;\n};\n\n/**\n * @public\n * @param {FetchConfig} [defaultOptions={}] - Fetch Configs.\n * @returns {FetchClient} A fetch client object with methods for making HTTP requests.\n * @description This is an abstraction around the native fetch exposed by a function. It provides a simple interface to handle API calls\n * to the Strapi backend.\n * @example\n * ```tsx\n * import { getFetchClient } from '@strapi/admin/admin';\n *\n * const myFunct = () => {\n *   const { get } = getFetchClient();\n *   const requestURL = \"/some-endpoint\";\n *\n *   const { data } = await get(requestURL);\n *\n *   return data;\n * };\n * ```\n */\nconst getFetchClient = (defaultOptions: FetchConfig = {}): FetchClient => {\n  const backendURL = window.strapi.backendURL;\n\n  /**\n   * Create default headers with the current token.\n   * This is a function so we can get a fresh token after refresh.\n   */\n  const getDefaultHeaders = (token = getToken()) => ({\n    Accept: 'application/json',\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${token}`,\n  });\n\n  const isFormDataRequest = (body: unknown) => body instanceof FormData;\n  const addPrependingSlash = (url: string) => (url.charAt(0) !== '/' ? `/${url}` : url);\n\n  // This regular expression matches a string that starts with either \"http://\" or \"https://\" or any other protocol name in lower case letters, followed by \"://\" and ends with anything else\n  const hasProtocol = (url: string) => new RegExp('^(?:[a-z+]+:)?//', 'i').test(url);\n\n  // Check if the url has a prepending slash, if not add a slash\n  const normalizeUrl = (url: string) => (hasProtocol(url) ? url : addPrependingSlash(url));\n\n  // Add a response interceptor to return the response\n  const responseInterceptor = async <TData = unknown>(\n    response: Response,\n    validateStatus?: FetchOptions['validateStatus'],\n    responseType: NonNullable<FetchOptions['responseType']> = 'json'\n  ): Promise<FetchResponse<TData>> => {\n    if (responseType !== 'json') {\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      let result: Blob | string | ArrayBuffer;\n      if (responseType === 'blob') {\n        result = await response.blob();\n      } else if (responseType === 'text') {\n        result = await response.text();\n      } else {\n        result = await response.arrayBuffer();\n      }\n\n      return { data: result as TData, status: response.status, headers: response.headers };\n    }\n\n    if (response.status === 204) {\n      return { data: {} as TData, status: response.status };\n    }\n\n    try {\n      const result = await response.json();\n\n      if (!response.ok && result.error && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError(result.error.message, { data: result });\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      if (!response.ok && !validateStatus?.(response.status)) {\n        const fetchError = new FetchError('Unknown Server Error');\n        fetchError.status = response.status;\n        throw fetchError;\n      }\n\n      return { data: result };\n    } catch (error) {\n      // An empty 200 body causes `response.json()` to throw a `SyntaxError`. We treat\n      // it as success and return an empty payload. We match on `error.name` rather\n      // than `instanceof SyntaxError` because constructor identity differs across JS\n      // realms — a Response from a different realm (e.g. undici under jsdom in tests,\n      // a service worker or iframe in browsers) throws a `SyntaxError` whose\n      // constructor is not the same identity as the one this module closes over. Name\n      // comparison is realm-agnostic.\n      if ((error as Error | null)?.name === 'SyntaxError' && response.ok) {\n        return { data: {}, status: response.status } as FetchResponse<TData>;\n      } else {\n        throw error;\n      }\n    }\n  };\n\n  /**\n   * Execute a fetch request with automatic token refresh on 401 errors.\n   * @param url - The request URL (used to check if it's an auth path)\n   * @param executeRequest - Function that performs the fetch (called again on retry with fresh headers)\n   */\n  const withTokenRefresh = async <TData>(\n    url: string,\n    executeRequest: () => Promise<FetchResponse<TData>>,\n    getRequestToken: () => string | null\n  ): Promise<FetchResponse<TData>> => {\n    try {\n      return await executeRequest();\n    } catch (error) {\n      // Only attempt refresh for 401 errors on non-auth paths\n      if (isFetchError(error) && error.status === 401 && !isAuthPath(url)) {\n        try {\n          await attemptTokenRefresh(getRequestToken());\n          // Retry - executeRequest will call getDefaultHeaders() again, picking up the new token\n          return await executeRequest();\n        } catch {\n          // If refresh fails, throw the original error\n          throw error;\n        }\n      }\n      throw error;\n    }\n  };\n\n  const paramsSerializer =\n    <Param = unknown>(params?: Param) =>\n    (url: string) => {\n      if (params) {\n        if (typeof params === 'string') {\n          return `${url}?${params}`;\n        }\n\n        /**\n         * TODO V6: Encoding should be enabled in this step\n         * So the rest of the app doesn't have to worry about it,\n         * It's considered a breaking change because it impacts any API request, including the user's custom code\n         */\n        const serializedParams = qs.stringify(params, { encode: false });\n        if (serializedParams) {\n          return `${url}?${serializedParams}`;\n        }\n        return url;\n      }\n      return url;\n    };\n\n  const addBaseUrl = (url: Parameters<typeof fetch>[0]) => {\n    return `${backendURL}${url}`;\n  };\n\n  /**\n   * We use the factory method because the options\n   * are unique to the individual request\n   */\n  const makeCreateRequestUrl = (options?: FetchOptions) =>\n    pipe(normalizeUrl, addBaseUrl, paramsSerializer(options?.params));\n\n  const fetchClient: FetchClient = {\n    get: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      const responseType = options?.responseType ?? 'json';\n      let requestToken: string | null = null;\n\n      const executeRequest = async () => {\n        requestToken = getToken();\n        const { Authorization } = getDefaultHeaders(requestToken);\n\n        // For non-JSON response types, omit content negotiation headers that imply JSON\n        const defaultHeaders =\n          responseType === 'json' ? getDefaultHeaders(requestToken) : { Authorization };\n\n        const headers = new Headers({\n          ...defaultHeaders,\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'GET',\n          credentials: 'include',\n          headers,\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus, responseType);\n      };\n\n      return withTokenRefresh(url, executeRequest, () => requestToken);\n    },\n    post: async <TData, TSend = unknown>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      let requestToken: string | null = null;\n\n      const executeRequest = async () => {\n        requestToken = getToken();\n        const headers = new Headers({\n          ...getDefaultHeaders(requestToken),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'POST',\n          credentials: 'include',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest, () => requestToken);\n    },\n    put: async <TData, TSend = unknown>(\n      url: string,\n      data?: TSend,\n      options?: FetchOptions\n    ): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      let requestToken: string | null = null;\n\n      const executeRequest = async () => {\n        requestToken = getToken();\n        const headers = new Headers({\n          ...getDefaultHeaders(requestToken),\n          ...options?.headers,\n        });\n\n        /**\n         * we have to remove the Content-Type value if it was a formData request\n         * the browser will automatically set the header value\n         */\n        if (isFormDataRequest(data)) {\n          headers.delete('Content-Type');\n        }\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'PUT',\n          credentials: 'include',\n          headers,\n          body: isFormDataRequest(data) ? (data as FormData) : JSON.stringify(data),\n        });\n\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest, () => requestToken);\n    },\n    del: async <TData>(url: string, options?: FetchOptions): Promise<FetchResponse<TData>> => {\n      const createRequestUrl = makeCreateRequestUrl(options);\n      let requestToken: string | null = null;\n\n      const executeRequest = async () => {\n        requestToken = getToken();\n        const headers = new Headers({\n          ...getDefaultHeaders(requestToken),\n          ...options?.headers,\n        });\n\n        const response = await fetch(createRequestUrl(url), {\n          signal: options?.signal ?? defaultOptions.signal,\n          method: 'DELETE',\n          credentials: 'include',\n          headers,\n        });\n        return responseInterceptor<TData>(response, options?.validateStatus);\n      };\n\n      return withTokenRefresh(url, executeRequest, () => requestToken);\n    },\n  };\n\n  return fetchClient;\n};\n\nexport {\n  getFetchClient,\n  isFetchError,\n  FetchError,\n  attemptTokenRefresh,\n  refreshAccessToken,\n  storeToken,\n  setOnTokenUpdate,\n  setOnSessionExpired,\n  triggerSessionExpired,\n  ADMIN_REFRESH_LOCK,\n};\nexport type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };\n"],"names":["STORAGE_KEYS","TOKEN","refreshPromise","onTokenUpdate","onSessionExpired","setOnTokenUpdate","callback","setOnSessionExpired","triggerSessionExpired","isAuthPath","url","test","storeToken","token","wasPersistedToLocalStorage","Boolean","localStorage","getItem","setItem","JSON","stringify","setCookie","AUTH_COOKIE_NAME","getToken","fromLocalStorage","parse","fromCookie","getCookieValue","ADMIN_REFRESH_LOCK","FALLBACK_ADOPT_TIMEOUT_MS","FALLBACK_ADOPT_POLL_MS","postAccessToken","backendURL","fetch","method","credentials","headers","Accept","adoptSharedAccessToken","readValidAccessTokenFromSharedStorage","staleToken","stored","expiry","decodeAccessTokenExpiry","Date","now","waitForSharedAccessToken","timeoutAt","Promise","resolve","setTimeout","adopted","executeRefreshAccessToken","tokenBeforeRefresh","allowHttpRetry","response","status","adoptedAfterFail","adoptedAfterWait","ok","console","warn","result","json","data","refreshAccessToken","tokenUsedByFailedRequest","window","strapi","navigator","locks","request","error","attemptTokenRefresh","finally","newToken","Error","name","FetchError","message","code","captureStackTrace","isFetchError","getFetchClient","defaultOptions","getDefaultHeaders","Authorization","isFormDataRequest","body","FormData","addPrependingSlash","charAt","hasProtocol","RegExp","normalizeUrl","responseInterceptor","validateStatus","responseType","fetchError","blob","text","arrayBuffer","withTokenRefresh","executeRequest","getRequestToken","paramsSerializer","params","serializedParams","qs","encode","addBaseUrl","makeCreateRequestUrl","options","pipe","fetchClient","get","createRequestUrl","requestToken","defaultHeaders","Headers","signal","post","delete","put","del"],"mappings":";;;;;AAsBA,MAAMA,YAAAA,GAAe;IACnBC,KAAAA,EAAO,UAET,CAAA;AAEA;;AAEC,IACD,IAAIC,cAAAA,GAAgD,IAAA;AAEpD;;AAEC,IACD,IAAIC,aAAAA,GAAkD,IAAA;AAEtD;;;;;AAKC,IACD,IAAIC,gBAAAA,GAAwC,IAAA;AAE5C;;;;;;;;;;;IAYA,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxBH,aAAAA,GAAgBG,QAAAA;AAClB;AAEA;;;;;;;IAQA,MAAMC,sBAAsB,CAACD,QAAAA,GAAAA;IAC3BF,gBAAAA,GAAmBE,QAAAA;AACrB;AAEA;;;AAGC,UACKE,qBAAAA,GAAwB,IAAA;AAC5BJ,IAAAA,gBAAAA,IAAAA;AACF;AAEA;;;;AAIC,IACD,MAAMK,UAAAA,GAAa,CAACC,GAAAA,GAAgB,wCAAA,CAAyCC,IAAI,CAACD,GAAAA,CAAAA;AAElF;;;;;;;;;IAUA,MAAME,aAAa,CAACC,KAAAA,GAAAA;;AAElB,IAAA,MAAMC,6BAA6BC,OAAAA,CAAQC,YAAAA,CAAaC,OAAO,CAACjB,aAAaC,KAAK,CAAA,CAAA;AAElF,IAAA,IAAIa,0BAAAA,EAA4B;AAC9BE,QAAAA,YAAAA,CAAaE,OAAO,CAAClB,YAAAA,CAAaC,KAAK,EAAEkB,IAAAA,CAAKC,SAAS,CAACP,KAAAA,CAAAA,CAAAA;IAC1D,CAAA,MAAO;AACLQ,QAAAA,SAAAA,CAAUC,gBAAAA,EAAkBT,KAAAA,CAAAA;AAC9B,IAAA;;AAGA,IAAA,IAAIV,aAAAA,EAAe;QACjBA,aAAAA,CAAcU,KAAAA,CAAAA;AAChB,IAAA;AACF;AAEA,MAAMU,QAAAA,GAAW,IAAA;AACf,IAAA,MAAMC,gBAAAA,GAAmBR,YAAAA,CAAaC,OAAO,CAACjB,aAAaC,KAAK,CAAA;AAChE,IAAA,IAAIuB,gBAAAA,EAAkB;QACpB,OAAOL,IAAAA,CAAKM,KAAK,CAACD,gBAAAA,CAAAA;AACpB,IAAA;AAEA,IAAA,MAAME,aAAaC,cAAAA,CAAeL,gBAAAA,CAAAA;AAClC,IAAA,OAAOI,UAAAA,IAAc,IAAA;AACvB,CAAA;AAEA,MAAME,kBAAAA,GAAqB;AAC3B,MAAMC,yBAAAA,GAA4B,GAAA;AAClC,MAAMC,sBAAAA,GAAyB,EAAA;AAE/B,MAAMC,eAAAA,GAAkB,CAACC,UAAAA,GACvBC,KAAAA,CAAM,GAAGD,UAAAA,CAAW,mBAAmB,CAAC,EAAE;QACxCE,MAAAA,EAAQ,MAAA;QACRC,WAAAA,EAAa,SAAA;QACbC,OAAAA,EAAS;YACPC,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB;AAClB;AACF,KAAA,CAAA;AAEF,MAAMC,yBAAyB,CAACzB,KAAAA,GAAAA;AAC9B,IAAA,IAAIV,aAAAA,EAAe;QACjBA,aAAAA,CAAcU,KAAAA,CAAAA;AAChB,IAAA;IACA,OAAOA,KAAAA;AACT,CAAA;AAEA;;;;IAKA,MAAM0B,wCAAwC,CAACC,UAAAA,GAAAA;AAC7C,IAAA,MAAMC,MAAAA,GAASlB,QAAAA,EAAAA;IACf,IAAI,CAACkB,MAAAA,IAAUA,MAAAA,KAAWD,UAAAA,EAAY;QACpC,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,MAAME,SAASC,uBAAAA,CAAwBF,MAAAA,CAAAA;AACvC,IAAA,IAAIC,MAAAA,KAAW,IAAA,IAAQA,MAAAA,IAAUE,IAAAA,CAAKC,GAAG,EAAA,EAAI;QAC3C,OAAO,IAAA;AACT,IAAA;IAEA,OAAOJ,MAAAA;AACT,CAAA;AAEA,MAAMK,2BAA2B,OAAON,UAAAA,GAAAA;IACtC,MAAMO,SAAAA,GAAYH,IAAAA,CAAKC,GAAG,EAAA,GAAKhB,yBAAAA;IAE/B,MAAOe,IAAAA,CAAKC,GAAG,EAAA,GAAKE,SAAAA,CAAW;QAC7B,MAAM,IAAIC,QAAQ,CAACC,OAAAA,GAAAA;AACjBC,YAAAA,UAAAA,CAAWD,OAAAA,EAASnB,sBAAAA,CAAAA;AACtB,QAAA,CAAA,CAAA;AAEA,QAAA,MAAMqB,UAAUZ,qCAAAA,CAAsCC,UAAAA,CAAAA;AACtD,QAAA,IAAIW,OAAAA,EAAS;AACX,YAAA,OAAOb,sBAAAA,CAAuBa,OAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;IAEA,OAAO,IAAA;AACT,CAAA;AAEA,MAAMC,4BAA4B,OAChCpB,UAAAA,EACAqB,kBAAAA,EACA,EAAEC,cAAc,EAA+B,GAAA;AAE/C,IAAA,MAAMH,UAAUZ,qCAAAA,CAAsCc,kBAAAA,CAAAA;AACtD,IAAA,IAAIF,OAAAA,EAAS;AACX,QAAA,OAAOb,sBAAAA,CAAuBa,OAAAA,CAAAA;AAChC,IAAA;IAEA,IAAII,QAAAA,GAAW,MAAMxB,eAAAA,CAAgBC,UAAAA,CAAAA;AAErC,IAAA,IAAIuB,QAAAA,CAASC,MAAM,KAAK,GAAA,IAAOF,cAAAA,EAAgB;AAC7C,QAAA,MAAMG,mBAAmBlB,qCAAAA,CAAsCc,kBAAAA,CAAAA;AAC/D,QAAA,IAAII,gBAAAA,EAAkB;AACpB,YAAA,OAAOnB,sBAAAA,CAAuBmB,gBAAAA,CAAAA;AAChC,QAAA;QAEA,MAAMC,gBAAAA,GAAmB,MAAMZ,wBAAAA,CAAyBO,kBAAAA,CAAAA;AACxD,QAAA,IAAIK,gBAAAA,EAAkB;YACpB,OAAOA,gBAAAA;AACT,QAAA;AAEAH,QAAAA,QAAAA,GAAW,MAAMxB,eAAAA,CAAgBC,UAAAA,CAAAA;AACnC,IAAA;IAEA,IAAI,CAACuB,QAAAA,CAASI,EAAE,EAAE;AAChBC,QAAAA,OAAAA,CAAQC,IAAI,CAAC,0CAAA,EAA4CN,QAAAA,CAASC,MAAM,CAAA;QACxE,OAAO,IAAA;AACT,IAAA;IAEA,MAAMM,MAAAA,GAAS,MAAMP,QAAAA,CAASQ,IAAI,EAAA;IAClC,MAAMlD,KAAAA,GAAQiD,QAAQE,IAAAA,EAAMnD,KAAAA;AAE5B,IAAA,IAAI,CAACA,KAAAA,EAAO;AACV+C,QAAAA,OAAAA,CAAQC,IAAI,CAAC,6CAAA,CAAA;QACb,OAAO,IAAA;AACT,IAAA;IAEAjD,UAAAA,CAAWC,KAAAA,CAAAA;IACX,OAAOA,KAAAA;AACT,CAAA;AAEA;;;;IAKA,MAAMoD,qBAAqB,OACzBC,wBAAAA,GAAAA;AAEA,IAAA,MAAMlC,UAAAA,GAAamC,MAAAA,CAAOC,MAAM,CAACpC,UAAU;AAC3C,IAAA,MAAMqB,qBAAqBa,wBAAAA,IAA4B3C,QAAAA,EAAAA;IAEvD,IAAI;AACF,QAAA,IAAI,OAAO8C,SAAAA,KAAc,WAAA,IAAeA,SAAAA,CAAUC,KAAK,EAAEC,OAAAA,EAAS;YAChE,OAAO,MAAMF,SAAAA,CAAUC,KAAK,CAACC,OAAO,CAAC3C,kBAAAA,EAAoB,IACvDwB,yBAAAA,CAA0BpB,UAAAA,EAAYqB,kBAAAA,EAAoB;oBAAEC,cAAAA,EAAgB;AAAM,iBAAA,CAAA,CAAA;AAEtF,QAAA;QAEA,OAAO,MAAMF,yBAAAA,CAA0BpB,UAAAA,EAAYqB,kBAAAA,EAAoB;YACrEC,cAAAA,EAAgB;AAClB,SAAA,CAAA;AACF,IAAA,CAAA,CAAE,OAAOkB,KAAAA,EAAO;QACdZ,OAAAA,CAAQY,KAAK,CAAC,6BAAA,EAA+BA,KAAAA,CAAAA;QAC7C,OAAO,IAAA;AACT,IAAA;AACF;AAEA;;;;;;;IAQA,MAAMC,sBAAsB,OAAOP,wBAAAA,GAAAA;AACjC,IAAA,IAAI,CAAChE,cAAAA,EAAgB;QACnBA,cAAAA,GAAiB+D,kBAAAA,CAAmBC,wBAAAA,CAAAA,CAA0BQ,OAAO,CAAC,IAAA;YACpExE,cAAAA,GAAiB,IAAA;AACnB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,MAAMyE,WAAW,MAAMzE,cAAAA;AACvB,IAAA,IAAI,CAACyE,QAAAA,EAAU;QACb,MAAMH,KAAAA,GAAQ,IAAII,KAAAA,CAAM,uCAAA,CAAA;AACxBJ,QAAAA,KAAAA,CAAMK,IAAI,GAAG,mBAAA;QACb,MAAML,KAAAA;AACR,IAAA;IAEA,OAAOG,QAAAA;AACT;AA2BA,MAAMG,UAAAA,SAAmBF,KAAAA,CAAAA;IAOvB,WAAA,CAAYG,OAAe,EAAExB,QAAwB,CAAE;AACrD,QAAA,KAAK,CAACwB,OAAAA,CAAAA;QACN,IAAI,CAACF,IAAI,GAAG,YAAA;QACZ,IAAI,CAACE,OAAO,GAAGA,OAAAA;QACf,IAAI,CAACxB,QAAQ,GAAGA,QAAAA;AAChB,QAAA,IAAI,CAACyB,IAAI,GAAGzB,QAAAA,EAAUS,MAAMQ,KAAAA,EAAOhB,MAAAA;AACnC,QAAA,IAAI,CAACA,MAAM,GAAGD,QAAAA,EAAUS,MAAMQ,KAAAA,EAAOhB,MAAAA;;QAGrC,IAAIoB,KAAAA,CAAMK,iBAAiB,EAAE;YAC3BL,KAAAA,CAAMK,iBAAiB,CAAC,IAAI,EAAEH,UAAAA,CAAAA;AAChC,QAAA;AACF,IAAA;AACF;AAEA,MAAMI,eAAe,CAACV,KAAAA,GAAAA;AACpB,IAAA,OAAOA,KAAAA,YAAiBM,UAAAA;AAC1B;AAyBA;;;;;;;;;;;;;;;;;;;AAmBC,IACD,MAAMK,cAAAA,GAAiB,CAACC,cAAAA,GAA8B,EAAE,GAAA;AACtD,IAAA,MAAMpD,UAAAA,GAAamC,MAAAA,CAAOC,MAAM,CAACpC,UAAU;AAE3C;;;AAGC,MACD,MAAMqD,iBAAAA,GAAoB,CAACxE,KAAAA,GAAQU,QAAAA,EAAU,IAAM;YACjDc,MAAAA,EAAQ,kBAAA;YACR,cAAA,EAAgB,kBAAA;YAChBiD,aAAAA,EAAe,CAAC,OAAO,EAAEzE,KAAAA,CAAAA;SAC3B,CAAA;IAEA,MAAM0E,iBAAAA,GAAoB,CAACC,IAAAA,GAAkBA,IAAAA,YAAgBC,QAAAA;AAC7D,IAAA,MAAMC,kBAAAA,GAAqB,CAAChF,GAAAA,GAAiBA,GAAAA,CAAIiF,MAAM,CAAC,CAAA,CAAA,KAAO,GAAA,GAAM,CAAC,CAAC,EAAEjF,GAAAA,CAAAA,CAAK,GAAGA,GAAAA;;IAGjF,MAAMkF,WAAAA,GAAc,CAAClF,GAAAA,GAAgB,IAAImF,OAAO,kBAAA,EAAoB,GAAA,CAAA,CAAKlF,IAAI,CAACD,GAAAA,CAAAA;;AAG9E,IAAA,MAAMoF,eAAe,CAACpF,GAAAA,GAAiBkF,WAAAA,CAAYlF,GAAAA,CAAAA,GAAOA,MAAMgF,kBAAAA,CAAmBhF,GAAAA,CAAAA;;AAGnF,IAAA,MAAMqF,mBAAAA,GAAsB,OAC1BxC,QAAAA,EACAyC,cAAAA,EACAC,eAA0D,MAAM,GAAA;AAEhE,QAAA,IAAIA,iBAAiB,MAAA,EAAQ;YAC3B,IAAI,CAAC1C,SAASI,EAAE,IAAI,CAACqC,cAAAA,GAAiBzC,QAAAA,CAASC,MAAM,CAAA,EAAG;gBACtD,MAAM0C,UAAAA,GAAa,IAAIpB,UAAAA,CAAW,cAAA,CAAA;gBAClCoB,UAAAA,CAAW1C,MAAM,GAAGD,QAAAA,CAASC,MAAM;gBACnC,MAAM0C,UAAAA;AACR,YAAA;YAEA,IAAIpC,MAAAA;AACJ,YAAA,IAAImC,iBAAiB,MAAA,EAAQ;gBAC3BnC,MAAAA,GAAS,MAAMP,SAAS4C,IAAI,EAAA;YAC9B,CAAA,MAAO,IAAIF,iBAAiB,MAAA,EAAQ;gBAClCnC,MAAAA,GAAS,MAAMP,SAAS6C,IAAI,EAAA;YAC9B,CAAA,MAAO;gBACLtC,MAAAA,GAAS,MAAMP,SAAS8C,WAAW,EAAA;AACrC,YAAA;YAEA,OAAO;gBAAErC,IAAAA,EAAMF,MAAAA;AAAiBN,gBAAAA,MAAAA,EAAQD,SAASC,MAAM;AAAEpB,gBAAAA,OAAAA,EAASmB,SAASnB;AAAQ,aAAA;AACrF,QAAA;QAEA,IAAImB,QAAAA,CAASC,MAAM,KAAK,GAAA,EAAK;YAC3B,OAAO;AAAEQ,gBAAAA,IAAAA,EAAM,EAAC;AAAYR,gBAAAA,MAAAA,EAAQD,SAASC;AAAO,aAAA;AACtD,QAAA;QAEA,IAAI;YACF,MAAMM,MAAAA,GAAS,MAAMP,QAAAA,CAASQ,IAAI,EAAA;YAElC,IAAI,CAACR,QAAAA,CAASI,EAAE,IAAIG,MAAAA,CAAOU,KAAK,IAAI,CAACwB,cAAAA,GAAiBzC,QAAAA,CAASC,MAAM,CAAA,EAAG;AACtE,gBAAA,MAAM0C,aAAa,IAAIpB,UAAAA,CAAWhB,OAAOU,KAAK,CAACO,OAAO,EAAE;oBAAEf,IAAAA,EAAMF;AAAO,iBAAA,CAAA;gBACvEoC,UAAAA,CAAW1C,MAAM,GAAGD,QAAAA,CAASC,MAAM;gBACnC,MAAM0C,UAAAA;AACR,YAAA;YAEA,IAAI,CAAC3C,SAASI,EAAE,IAAI,CAACqC,cAAAA,GAAiBzC,QAAAA,CAASC,MAAM,CAAA,EAAG;gBACtD,MAAM0C,UAAAA,GAAa,IAAIpB,UAAAA,CAAW,sBAAA,CAAA;gBAClCoB,UAAAA,CAAW1C,MAAM,GAAGD,QAAAA,CAASC,MAAM;gBACnC,MAAM0C,UAAAA;AACR,YAAA;YAEA,OAAO;gBAAElC,IAAAA,EAAMF;AAAO,aAAA;AACxB,QAAA,CAAA,CAAE,OAAOU,KAAAA,EAAO;;;;;;;;AAQd,YAAA,IAAI,KAACA,EAAwBK,IAAAA,KAAS,aAAA,IAAiBtB,QAAAA,CAASI,EAAE,EAAE;gBAClE,OAAO;AAAEK,oBAAAA,IAAAA,EAAM,EAAC;AAAGR,oBAAAA,MAAAA,EAAQD,SAASC;AAAO,iBAAA;YAC7C,CAAA,MAAO;gBACL,MAAMgB,KAAAA;AACR,YAAA;AACF,QAAA;AACF,IAAA,CAAA;AAEA;;;;AAIC,MACD,MAAM8B,gBAAAA,GAAmB,OACvB5F,GAAAA,EACA6F,cAAAA,EACAC,eAAAA,GAAAA;QAEA,IAAI;AACF,YAAA,OAAO,MAAMD,cAAAA,EAAAA;AACf,QAAA,CAAA,CAAE,OAAO/B,KAAAA,EAAO;;YAEd,IAAIU,YAAAA,CAAaV,UAAUA,KAAAA,CAAMhB,MAAM,KAAK,GAAA,IAAO,CAAC/C,WAAWC,GAAAA,CAAAA,EAAM;gBACnE,IAAI;AACF,oBAAA,MAAM+D,mBAAAA,CAAoB+B,eAAAA,EAAAA,CAAAA;;AAE1B,oBAAA,OAAO,MAAMD,cAAAA,EAAAA;AACf,gBAAA,CAAA,CAAE,OAAM;;oBAEN,MAAM/B,KAAAA;AACR,gBAAA;AACF,YAAA;YACA,MAAMA,KAAAA;AACR,QAAA;AACF,IAAA,CAAA;IAEA,MAAMiC,gBAAAA,GACJ,CAAkBC,MAAAA,GAClB,CAAChG,GAAAA,GAAAA;AACC,YAAA,IAAIgG,MAAAA,EAAQ;gBACV,IAAI,OAAOA,WAAW,QAAA,EAAU;AAC9B,oBAAA,OAAO,CAAA,EAAGhG,GAAAA,CAAI,CAAC,EAAEgG,MAAAA,CAAAA,CAAQ;AAC3B,gBAAA;AAEA;;;;AAIC,YACD,MAAMC,gBAAAA,GAAmBC,WAAAA,CAAGxF,SAAS,CAACsF,MAAAA,EAAQ;oBAAEG,MAAAA,EAAQ;AAAM,iBAAA,CAAA;AAC9D,gBAAA,IAAIF,gBAAAA,EAAkB;AACpB,oBAAA,OAAO,CAAA,EAAGjG,GAAAA,CAAI,CAAC,EAAEiG,gBAAAA,CAAAA,CAAkB;AACrC,gBAAA;gBACA,OAAOjG,GAAAA;AACT,YAAA;YACA,OAAOA,GAAAA;AACT,QAAA,CAAA;AAEF,IAAA,MAAMoG,aAAa,CAACpG,GAAAA,GAAAA;QAClB,OAAO,CAAA,EAAGsB,aAAatB,GAAAA,CAAAA,CAAK;AAC9B,IAAA,CAAA;AAEA;;;MAIA,MAAMqG,uBAAuB,CAACC,OAAAA,GAC5BC,KAAKnB,YAAAA,EAAcgB,UAAAA,EAAYL,iBAAiBO,OAAAA,EAASN,MAAAA,CAAAA,CAAAA;AAE3D,IAAA,MAAMQ,WAAAA,GAA2B;AAC/BC,QAAAA,GAAAA,EAAK,OAAczG,GAAAA,EAAasG,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;YAC9C,MAAMf,YAAAA,GAAee,SAASf,YAAAA,IAAgB,MAAA;AAC9C,YAAA,IAAIoB,YAAAA,GAA8B,IAAA;AAElC,YAAA,MAAMd,cAAAA,GAAiB,UAAA;gBACrBc,YAAAA,GAAe9F,QAAAA,EAAAA;AACf,gBAAA,MAAM,EAAE+D,aAAa,EAAE,GAAGD,iBAAAA,CAAkBgC,YAAAA,CAAAA;;AAG5C,gBAAA,MAAMC,cAAAA,GACJrB,YAAAA,KAAiB,MAAA,GAASZ,iBAAAA,CAAkBgC,YAAAA,CAAAA,GAAgB;AAAE/B,oBAAAA;AAAc,iBAAA;gBAE9E,MAAMlD,OAAAA,GAAU,IAAImF,OAAAA,CAAQ;AAC1B,oBAAA,GAAGD,cAAc;AACjB,oBAAA,GAAGN,SAAS5E;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMmB,QAAAA,GAAW,MAAMtB,KAAAA,CAAMmF,gBAAAA,CAAiB1G,GAAAA,CAAAA,EAAM;oBAClD8G,MAAAA,EAAQR,OAAAA,EAASQ,MAAAA,IAAUpC,cAAAA,CAAeoC,MAAM;oBAChDtF,MAAAA,EAAQ,KAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA;AACF,iBAAA,CAAA;gBAEA,OAAO2D,mBAAAA,CAA2BxC,QAAAA,EAAUyD,OAAAA,EAAShB,cAAAA,EAAgBC,YAAAA,CAAAA;AACvE,YAAA,CAAA;YAEA,OAAOK,gBAAAA,CAAiB5F,GAAAA,EAAK6F,cAAAA,EAAgB,IAAMc,YAAAA,CAAAA;AACrD,QAAA,CAAA;QACAI,IAAAA,EAAM,OACJ/G,KACAsD,IAAAA,EACAgD,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAC9C,YAAA,IAAIK,YAAAA,GAA8B,IAAA;AAElC,YAAA,MAAMd,cAAAA,GAAiB,UAAA;gBACrBc,YAAAA,GAAe9F,QAAAA,EAAAA;gBACf,MAAMa,OAAAA,GAAU,IAAImF,OAAAA,CAAQ;AAC1B,oBAAA,GAAGlC,kBAAkBgC,YAAAA,CAAa;AAClC,oBAAA,GAAGL,SAAS5E;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAImD,kBAAkBvB,IAAAA,CAAAA,EAAO;AAC3B5B,oBAAAA,OAAAA,CAAQsF,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMnE,QAAAA,GAAW,MAAMtB,KAAAA,CAAMmF,gBAAAA,CAAiB1G,GAAAA,CAAAA,EAAM;oBAClD8G,MAAAA,EAAQR,OAAAA,EAASQ,MAAAA,IAAUpC,cAAAA,CAAeoC,MAAM;oBAChDtF,MAAAA,EAAQ,MAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA,OAAAA;AACAoD,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBvB,IAAAA,CAAAA,GAASA,IAAAA,GAAoB7C,IAAAA,CAAKC,SAAS,CAAC4C,IAAAA;AACtE,iBAAA,CAAA;gBACA,OAAO+B,mBAAAA,CAA2BxC,UAAUyD,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;YAEA,OAAOM,gBAAAA,CAAiB5F,GAAAA,EAAK6F,cAAAA,EAAgB,IAAMc,YAAAA,CAAAA;AACrD,QAAA,CAAA;QACAM,GAAAA,EAAK,OACHjH,KACAsD,IAAAA,EACAgD,OAAAA,GAAAA;AAEA,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAC9C,YAAA,IAAIK,YAAAA,GAA8B,IAAA;AAElC,YAAA,MAAMd,cAAAA,GAAiB,UAAA;gBACrBc,YAAAA,GAAe9F,QAAAA,EAAAA;gBACf,MAAMa,OAAAA,GAAU,IAAImF,OAAAA,CAAQ;AAC1B,oBAAA,GAAGlC,kBAAkBgC,YAAAA,CAAa;AAClC,oBAAA,GAAGL,SAAS5E;AACd,iBAAA,CAAA;AAEA;;;YAIA,IAAImD,kBAAkBvB,IAAAA,CAAAA,EAAO;AAC3B5B,oBAAAA,OAAAA,CAAQsF,MAAM,CAAC,cAAA,CAAA;AACjB,gBAAA;AAEA,gBAAA,MAAMnE,QAAAA,GAAW,MAAMtB,KAAAA,CAAMmF,gBAAAA,CAAiB1G,GAAAA,CAAAA,EAAM;oBAClD8G,MAAAA,EAAQR,OAAAA,EAASQ,MAAAA,IAAUpC,cAAAA,CAAeoC,MAAM;oBAChDtF,MAAAA,EAAQ,KAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA,OAAAA;AACAoD,oBAAAA,IAAAA,EAAMD,iBAAAA,CAAkBvB,IAAAA,CAAAA,GAASA,IAAAA,GAAoB7C,IAAAA,CAAKC,SAAS,CAAC4C,IAAAA;AACtE,iBAAA,CAAA;gBAEA,OAAO+B,mBAAAA,CAA2BxC,UAAUyD,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;YAEA,OAAOM,gBAAAA,CAAiB5F,GAAAA,EAAK6F,cAAAA,EAAgB,IAAMc,YAAAA,CAAAA;AACrD,QAAA,CAAA;AACAO,QAAAA,GAAAA,EAAK,OAAclH,GAAAA,EAAasG,OAAAA,GAAAA;AAC9B,YAAA,MAAMI,mBAAmBL,oBAAAA,CAAqBC,OAAAA,CAAAA;AAC9C,YAAA,IAAIK,YAAAA,GAA8B,IAAA;AAElC,YAAA,MAAMd,cAAAA,GAAiB,UAAA;gBACrBc,YAAAA,GAAe9F,QAAAA,EAAAA;gBACf,MAAMa,OAAAA,GAAU,IAAImF,OAAAA,CAAQ;AAC1B,oBAAA,GAAGlC,kBAAkBgC,YAAAA,CAAa;AAClC,oBAAA,GAAGL,SAAS5E;AACd,iBAAA,CAAA;AAEA,gBAAA,MAAMmB,QAAAA,GAAW,MAAMtB,KAAAA,CAAMmF,gBAAAA,CAAiB1G,GAAAA,CAAAA,EAAM;oBAClD8G,MAAAA,EAAQR,OAAAA,EAASQ,MAAAA,IAAUpC,cAAAA,CAAeoC,MAAM;oBAChDtF,MAAAA,EAAQ,QAAA;oBACRC,WAAAA,EAAa,SAAA;AACbC,oBAAAA;AACF,iBAAA,CAAA;gBACA,OAAO2D,mBAAAA,CAA2BxC,UAAUyD,OAAAA,EAAShB,cAAAA,CAAAA;AACvD,YAAA,CAAA;YAEA,OAAOM,gBAAAA,CAAiB5F,GAAAA,EAAK6F,cAAAA,EAAgB,IAAMc,YAAAA,CAAAA;AACrD,QAAA;AACF,KAAA;IAEA,OAAOH,WAAAA;AACT;;;;"}

package/dist/admin/ee/admin/src/constants.js

@@ -20,6 +20,12 @@ const ADMIN_PERMISSIONS_EE = {
                     action: 'admin::audit-logs.update',
                     subject: null
                 }
+            ],
+            export: [
+                {
+                    action: 'admin::audit-logs.export',
+                    subject: null
+                }
             ]
         },
         'review-workflows': {