open-chat-studio-widget 0.4.4 → 0.4.5

package/dist/cjs/open-chat-studio-widget.cjs.entry.js

@@ -4271,6 +4271,180 @@ function renderMarkdownSync(content) {
     }
 }
 
+var js_cookie = {exports: {}};
+
+/*! js-cookie v3.0.5 | MIT */
+
+(function (module, exports) {
+(function (global, factory) {
+  module.exports = factory() ;
+})(commonjsGlobal, (function () {
+  /* eslint-disable no-var */
+  function assign (target) {
+    for (var i = 1; i < arguments.length; i++) {
+      var source = arguments[i];
+      for (var key in source) {
+        target[key] = source[key];
+      }
+    }
+    return target
+  }
+  /* eslint-enable no-var */
+
+  /* eslint-disable no-var */
+  var defaultConverter = {
+    read: function (value) {
+      if (value[0] === '"') {
+        value = value.slice(1, -1);
+      }
+      return value.replace(/(%[\dA-F]{2})+/gi, decodeURIComponent)
+    },
+    write: function (value) {
+      return encodeURIComponent(value).replace(
+        /%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,
+        decodeURIComponent
+      )
+    }
+  };
+  /* eslint-enable no-var */
+
+  /* eslint-disable no-var */
+
+  function init (converter, defaultAttributes) {
+    function set (name, value, attributes) {
+      if (typeof document === 'undefined') {
+        return
+      }
+
+      attributes = assign({}, defaultAttributes, attributes);
+
+      if (typeof attributes.expires === 'number') {
+        attributes.expires = new Date(Date.now() + attributes.expires * 864e5);
+      }
+      if (attributes.expires) {
+        attributes.expires = attributes.expires.toUTCString();
+      }
+
+      name = encodeURIComponent(name)
+        .replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent)
+        .replace(/[()]/g, escape);
+
+      var stringifiedAttributes = '';
+      for (var attributeName in attributes) {
+        if (!attributes[attributeName]) {
+          continue
+        }
+
+        stringifiedAttributes += '; ' + attributeName;
+
+        if (attributes[attributeName] === true) {
+          continue
+        }
+
+        // Considers RFC 6265 section 5.2:
+        // ...
+        // 3.  If the remaining unparsed-attributes contains a %x3B (";")
+        //     character:
+        // Consume the characters of the unparsed-attributes up to,
+        // not including, the first %x3B (";") character.
+        // ...
+        stringifiedAttributes += '=' + attributes[attributeName].split(';')[0];
+      }
+
+      return (document.cookie =
+        name + '=' + converter.write(value, name) + stringifiedAttributes)
+    }
+
+    function get (name) {
+      if (typeof document === 'undefined' || (arguments.length && !name)) {
+        return
+      }
+
+      // To prevent the for loop in the first place assign an empty array
+      // in case there are no cookies at all.
+      var cookies = document.cookie ? document.cookie.split('; ') : [];
+      var jar = {};
+      for (var i = 0; i < cookies.length; i++) {
+        var parts = cookies[i].split('=');
+        var value = parts.slice(1).join('=');
+
+        try {
+          var found = decodeURIComponent(parts[0]);
+          jar[found] = converter.read(value, found);
+
+          if (name === found) {
+            break
+          }
+        } catch (e) {}
+      }
+
+      return name ? jar[name] : jar
+    }
+
+    return Object.create(
+      {
+        set,
+        get,
+        remove: function (name, attributes) {
+          set(
+            name,
+            '',
+            assign({}, attributes, {
+              expires: -1
+            })
+          );
+        },
+        withAttributes: function (attributes) {
+          return init(this.converter, assign({}, this.attributes, attributes))
+        },
+        withConverter: function (converter) {
+          return init(assign({}, this.converter, converter), this.attributes)
+        }
+      },
+      {
+        attributes: { value: Object.freeze(defaultAttributes) },
+        converter: { value: Object.freeze(converter) }
+      }
+    )
+  }
+
+  var api = init(defaultConverter, { path: '/' });
+  /* eslint-enable no-var */
+
+  return api;
+
+}));
+}(js_cookie));
+
+const Cookies = js_cookie.exports;
+
+/**
+ * Get CSRF token from cookies if the current domain matches the API base URL
+ */
+function getCSRFToken(apiBaseUrl) {
+    if (!currentDomainMatchesApiBaseUrl(apiBaseUrl)) {
+        return undefined;
+    }
+    return Cookies.get('csrftoken');
+}
+function currentDomainMatchesApiBaseUrl(apiBaseUrl) {
+    const currentDomain = window.location.hostname;
+    const apiDomain = getDomainFromUrl(apiBaseUrl);
+    if (!apiDomain) {
+        return false;
+    }
+    return currentDomain === apiDomain;
+}
+function getDomainFromUrl(url) {
+    try {
+        const urlObj = new URL(url);
+        return urlObj.hostname;
+    }
+    catch (error) {
+        return null;
+    }
+}
+
 /**
  * Convert a CSS percentage (60%) or pixel (10px) value to pixels.
  * @param value The CSS string value
@@ -4476,6 +4650,16 @@ const OcsChat = class {
     getApiBaseUrl() {
         return this.apiBaseUrl || window.location.origin;
     }
+    getApiHeaders() {
+        const headers = {
+            'Content-Type': 'application/json',
+        };
+        const csrfToken = getCSRFToken(this.getApiBaseUrl());
+        if (csrfToken) {
+            headers['X-CSRFToken'] = csrfToken;
+        }
+        return headers;
+    }
     async startSession() {
         try {
             this.isLoading = true;
@@ -4494,9 +4678,7 @@ const OcsChat = class {
             }
             const response = await fetch(`${this.getApiBaseUrl()}/api/chat/start/`, {
                 method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                },
+                headers: this.getApiHeaders(),
                 body: JSON.stringify(requestBody)
             });
             if (!response.ok) {
@@ -4553,9 +4735,7 @@ const OcsChat = class {
             this.isTyping = true;
             const response = await fetch(`${this.getApiBaseUrl()}/api/chat/${this.sessionId}/message/`, {
                 method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                },
+                headers: this.getApiHeaders(),
                 body: JSON.stringify({ message: message.trim() })
             });
             if (!response.ok) {