mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-04-26 01:01:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

fix(dashboard): avoid auth header collision with reverse proxies

Browse source
This commit is contained in:
helix4u 2026-04-23 11:59:02 -06:00 • committed by Teknium
parent 07046096d9
commit 1cc0bdd5f3
3 changed files with 83 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

21
web/src/lib/api.ts
View file

@ -10,13 +10,20 @@ declare global {
}
}
let _sessionToken: string | null = null;
const SESSION_HEADER = "X-Hermes-Session-Token";
function setSessionHeader(headers: Headers, token: string): void {
if (!headers.has(SESSION_HEADER)) {
headers.set(SESSION_HEADER, token);
}
}
export async function fetchJSON<T>(url: string, init?: RequestInit): Promise<T> {
// Inject the session token into all /api/ requests.
const headers = new Headers(init?.headers);
const token = window.__HERMES_SESSION_TOKEN__;
if (token && !headers.has("Authorization")) {
headers.set("Authorization", `Bearer ${token}`);
if (token) {
setSessionHeader(headers, token);
}
const res = await fetch(`${BASE}${url}`, { ...init, headers });
if (!res.ok) {
@ -92,7 +99,7 @@ export const api = {
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: `Bearer ${token}`,
[SESSION_HEADER]: token,
},
body: JSON.stringify({ key }),
});
@ -138,7 +145,7 @@ export const api = {
`/api/providers/oauth/${encodeURIComponent(providerId)}`,
{
method: "DELETE",
headers: { Authorization: `Bearer ${token}` },
headers: { [SESSION_HEADER]: token },
},
);
},
@ -150,7 +157,7 @@ export const api = {
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: `Bearer ${token}`,
[SESSION_HEADER]: token,
},
body: "{}",
},
@ -164,7 +171,7 @@ export const api = {
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: `Bearer ${token}`,
[SESSION_HEADER]: token,
},
body: JSON.stringify({ session_id: sessionId, code }),
},
@ -180,7 +187,7 @@ export const api = {
`/api/providers/oauth/sessions/${encodeURIComponent(sessionId)}`,
{
method: "DELETE",
headers: { Authorization: `Bearer ${token}` },
headers: { [SESSION_HEADER]: token },
},
);
},