userausfall/src/api.ts

import Cookies from "js-cookie";

type HTTPMethod = "GET" | "POST" | "PUT" | "PATCH";

export class APIError extends Error {
  constructor(message: string, public readonly errors: unknown) {
    super(message);
  }
}

async function request(
  method: HTTPMethod,
  endpoint: string,
  successStatus: number,
  data: any,
  authToken?: string
) {
  const init = {
    headers: new Headers(),
    method: method,
    body: JSON.stringify(data),
  };
  const csrfToken = Cookies.get("csrftoken");
  if (csrfToken != undefined) {
    init.headers.set("X-CSRFToken", csrfToken);
  }
  if (authToken != undefined) {
    init.headers.set("Authorization", `Token ${authToken}`);
  }
  init.headers.set("Accept", "application/json");
  init.headers.set("Content-Type", "application/json");
  const response = await fetch(`/${endpoint}/`, init);
  if (response.status !== 204) {
    if (response.status === successStatus) {
      return await response.json();
    } else {
      throw new APIError(response.statusText, await response.json());
    }
  }
}

async function api_request(
  method: HTTPMethod,
  endpoint: string,
  successStatus: number,
  data: any,
  authToken?: string
) {
  return request(method, `api/${endpoint}`, successStatus, data, authToken);
}

export class User {
  email: string | undefined;
  password: string | undefined;
  username: string | null = null;
  confidantEmail: string | null = null;
  isAuthenticated = false;
  private token = "";

  static async confirm(uid: string, token: string): Promise<void> {
    await api_request("POST", "users/activation", 204, { uid, token });
  }

  async login(): Promise<void> {
    if (!this.email || !this.password) throw new APIError("", "");

    // logout any existing sessions
    //await logout()
    // fetch the login endpoint we use for authentication
    const loginEndpoint = "/api-auth/login/";
    // fetch the login page, so it sets csrf cookies
    await window.fetch(loginEndpoint);

    // authenticate us
    const body = new window.FormData();
    body.append("username", this.email);
    body.append("password", this.password);
    const csrf_token = Cookies.get("csrftoken");
    if (csrf_token) body.append("csrfmiddlewaretoken", csrf_token);
    const res = await window.fetch(loginEndpoint, { method: "post", body });

    // successful logins are followed by a redirect
    if (res.redirected && res.status === 200) {
      this.isAuthenticated = true;
    } else {
      throw new APIError("", "");
    }
  }

  async save(): Promise<void> {
    await api_request(
      "PATCH",
      "users/me",
      200,
      {
        username: this.username,
        confidant_email: this.confidantEmail,
      },
      this.token
    );
  }

  async signup(): Promise<void> {
    await api_request("POST", "users", 201, {
      email: this.email,
      password: this.password,
    });
  }
}