Something went wrong. Try again.
Monorepo for Tangled tangled.org
Something went wrong. Try again.
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182import type { OAuthUserAgent } from "@atcute/oauth-browser-client";import { mintServiceAuth, serviceDidForHost } from "#lib/auth/agent.ts";import { buildUrl, toResponseError } from "#lib/api/_request.ts";import type { QueryValue, XrpcRequestInit } from "#lib/api/client.ts";import type { Did, Nsid } from "#lib/api/syntax.ts";
// Authenticated client for the go appview's org.tangled.temp.* xrpc methods.// Unlike bobbin (public reads) and the pds (record writes), these are authed// with an atproto service-auth jwt: the browser mints a per-call token via the// user's pds (getServiceAuth), scoped to the method (lxm) and the appview's did// (aud). The appview verifies the issuer's signature and the aud/lxm claims.export interface AppviewContext { readonly serviceUrl: string; readonly aud: Did; readonly agent: OAuthUserAgent; readonly fetch: typeof globalThis.fetch;}
export interface CreateAppviewOptions { apiUrl: string; agent: OAuthUserAgent; fetch?: typeof globalThis.fetch;}
export const createAppviewClient = ({ apiUrl, agent, fetch}: CreateAppviewOptions): AppviewContext => { const serviceUrl = apiUrl.replace(/\/+$/, ""); // aud host must match the appview's TANGLED_APPVIEW_HOST, which is the host // it's reached at; derive both from the same url so they can't drift. const aud = serviceDidForHost(new URL(serviceUrl).host); return { serviceUrl, aud, agent, fetch: fetch ?? globalThis.fetch };};
const authHeader = async (ctx: AppviewContext, nsid: Nsid): Promise<string> => { const token = await mintServiceAuth(ctx.agent, { aud: ctx.aud, lxm: nsid }); return `Bearer ${token}`;};
export const authedGet = async <T>( ctx: AppviewContext, nsid: Nsid, params?: Record<string, QueryValue>, init?: XrpcRequestInit): Promise<T> => { const response = await ctx.fetch(buildUrl(ctx.serviceUrl, nsid, params), { headers: { accept: "application/json", authorization: await authHeader(ctx, nsid), ...init?.headers }, signal: init?.signal }); if (!response.ok) throw await toResponseError(response); return (await response.json()) as T;};
export const authedPost = async <T>( ctx: AppviewContext, nsid: Nsid, body: unknown, init?: XrpcRequestInit): Promise<T | null> => { const response = await ctx.fetch(buildUrl(ctx.serviceUrl, nsid), { method: "POST", headers: { "content-type": "application/json", accept: "application/json", authorization: await authHeader(ctx, nsid), ...init?.headers }, body: JSON.stringify(body ?? {}), signal: init?.signal }); if (!response.ok) throw await toResponseError(response); // most temp procedures return no body (200 with empty payload) const text = await response.text(); return text ? (JSON.parse(text) as T) : null;};