mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
Fixes #33732 Base64-encodes the `install_script` and `uninstall_script` payloads for add and edit software to prevent being blocked by WAF rules and allow FMAs for Windows to be added/edited in Fleet instances running on Render. 
232 lines
5.3 KiB
TypeScript
232 lines
5.3 KiB
TypeScript
import axios, {
|
|
isAxiosError,
|
|
ResponseType as AxiosResponseType,
|
|
AxiosProgressEvent,
|
|
} from "axios";
|
|
import URL_PREFIX from "router/url_prefix";
|
|
import { authToken } from "utilities/local";
|
|
|
|
export const sendRequestWithProgress = async ({
|
|
method,
|
|
path,
|
|
data,
|
|
responseType = "json",
|
|
timeout,
|
|
skipParseError,
|
|
returnRaw,
|
|
onDownloadProgress,
|
|
onUploadProgress,
|
|
signal,
|
|
}: {
|
|
method: "GET" | "POST" | "PATCH" | "DELETE" | "HEAD";
|
|
path: string;
|
|
data?: unknown;
|
|
responseType?: AxiosResponseType;
|
|
timeout?: number;
|
|
skipParseError?: boolean;
|
|
returnRaw?: boolean;
|
|
onDownloadProgress?: (progressEvent: AxiosProgressEvent) => void;
|
|
onUploadProgress?: (progressEvent: AxiosProgressEvent) => void;
|
|
signal?: AbortSignal;
|
|
}) => {
|
|
const { origin } = global.window.location;
|
|
|
|
const url = `${origin}${URL_PREFIX}/api${path}`;
|
|
const token = authToken();
|
|
|
|
try {
|
|
const response = await axios({
|
|
method,
|
|
url,
|
|
data,
|
|
responseType,
|
|
timeout,
|
|
headers: {
|
|
Authorization: `Bearer ${token}`,
|
|
},
|
|
onDownloadProgress,
|
|
onUploadProgress,
|
|
signal,
|
|
});
|
|
|
|
if (returnRaw) {
|
|
return response;
|
|
}
|
|
return response.data;
|
|
} catch (error) {
|
|
if (skipParseError) {
|
|
return Promise.reject(error);
|
|
}
|
|
let reason: unknown | undefined;
|
|
if (isAxiosError(error)) {
|
|
reason = error.response || error.message || error.code;
|
|
}
|
|
return Promise.reject(
|
|
reason || `send request: parse server error: ${error}`
|
|
);
|
|
}
|
|
};
|
|
|
|
export const sendRequest = async (
|
|
method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD",
|
|
path: string,
|
|
data?: unknown,
|
|
responseType: AxiosResponseType = "json",
|
|
timeout?: number,
|
|
skipParseError?: boolean,
|
|
returnRaw?: boolean
|
|
) => {
|
|
const { origin } = global.window.location;
|
|
|
|
const url = `${origin}${URL_PREFIX}/api${path}`;
|
|
const token = authToken();
|
|
|
|
try {
|
|
const response = await axios({
|
|
method,
|
|
url,
|
|
data,
|
|
responseType,
|
|
timeout,
|
|
headers: {
|
|
Authorization: `Bearer ${token}`,
|
|
},
|
|
});
|
|
|
|
if (returnRaw) {
|
|
return response;
|
|
}
|
|
return response.data;
|
|
} catch (error) {
|
|
if (skipParseError) {
|
|
return Promise.reject(error);
|
|
}
|
|
let reason: unknown | undefined;
|
|
if (isAxiosError(error)) {
|
|
reason = error.response || error.message || error.code;
|
|
}
|
|
return Promise.reject(
|
|
reason || `send request: parse server error: ${error}`
|
|
);
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Send a request with custom headers. Used for requests that need to signal
|
|
* special handling (e.g., base64-encoded scripts to bypass WAF rules).
|
|
*/
|
|
export const sendRequestWithHeaders = async (
|
|
method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD",
|
|
path: string,
|
|
data?: unknown,
|
|
customHeaders?: Record<string, string>,
|
|
responseType: AxiosResponseType = "json",
|
|
timeout?: number,
|
|
skipParseError?: boolean,
|
|
returnRaw?: boolean
|
|
) => {
|
|
const { origin } = global.window.location;
|
|
|
|
const url = `${origin}${URL_PREFIX}/api${path}`;
|
|
const token = authToken();
|
|
|
|
try {
|
|
const response = await axios({
|
|
method,
|
|
url,
|
|
data,
|
|
responseType,
|
|
timeout,
|
|
headers: {
|
|
Authorization: `Bearer ${token}`,
|
|
...customHeaders,
|
|
},
|
|
});
|
|
|
|
if (returnRaw) {
|
|
return response;
|
|
}
|
|
return response.data;
|
|
} catch (error) {
|
|
if (skipParseError) {
|
|
return Promise.reject(error);
|
|
}
|
|
let reason: unknown | undefined;
|
|
if (isAxiosError(error)) {
|
|
reason = error.response || error.message || error.code;
|
|
}
|
|
return Promise.reject(
|
|
reason || `send request: parse server error: ${error}`
|
|
);
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Send a request with progress tracking and custom headers. Used for file uploads
|
|
* that need to signal special handling (e.g., base64-encoded scripts to bypass WAF rules).
|
|
*/
|
|
export const sendRequestWithProgressAndHeaders = async ({
|
|
method,
|
|
path,
|
|
data,
|
|
customHeaders,
|
|
responseType = "json",
|
|
timeout,
|
|
skipParseError,
|
|
returnRaw,
|
|
onDownloadProgress,
|
|
onUploadProgress,
|
|
signal,
|
|
}: {
|
|
method: "GET" | "POST" | "PATCH" | "DELETE" | "HEAD";
|
|
path: string;
|
|
data?: unknown;
|
|
customHeaders?: Record<string, string>;
|
|
responseType?: AxiosResponseType;
|
|
timeout?: number;
|
|
skipParseError?: boolean;
|
|
returnRaw?: boolean;
|
|
onDownloadProgress?: (progressEvent: AxiosProgressEvent) => void;
|
|
onUploadProgress?: (progressEvent: AxiosProgressEvent) => void;
|
|
signal?: AbortSignal;
|
|
}) => {
|
|
const { origin } = global.window.location;
|
|
|
|
const url = `${origin}${URL_PREFIX}/api${path}`;
|
|
const token = authToken();
|
|
|
|
try {
|
|
const response = await axios({
|
|
method,
|
|
url,
|
|
data,
|
|
responseType,
|
|
timeout,
|
|
headers: {
|
|
Authorization: `Bearer ${token}`,
|
|
...customHeaders,
|
|
},
|
|
onDownloadProgress,
|
|
onUploadProgress,
|
|
signal,
|
|
});
|
|
|
|
if (returnRaw) {
|
|
return response;
|
|
}
|
|
return response.data;
|
|
} catch (error) {
|
|
if (skipParseError) {
|
|
return Promise.reject(error);
|
|
}
|
|
let reason: unknown | undefined;
|
|
if (isAxiosError(error)) {
|
|
reason = error.response || error.message || error.code;
|
|
}
|
|
return Promise.reject(
|
|
reason || `send request: parse server error: ${error}`
|
|
);
|
|
}
|
|
};
|
|
|
|
export default sendRequest;
|