Merge pull request #27 from bento-platform/fix/fetch-resource-permiss…

…ions-header

fix: bad requests with `undefined` bearer token

src/redux/authSlice.ts

@@ -1,7 +1,7 @@
 import { createAsyncThunk, createSlice } from "@reduxjs/toolkit";
 import { JWTPayload, decodeJwt } from "jose";
 
-import { buildUrlEncodedData } from "../utils";
+import { buildUrlEncodedData, makeAuthorizationHeader } from "../utils";
 import { LS_BENTO_WAS_SIGNED_IN, setLSNotSignedIn } from "../performAuth";
 import { Resource, makeResourceKey } from "../resources";
 import { RootState } from "./store";
@@ -116,7 +116,7 @@ export const fetchResourcePermissions = createAsyncThunk<FetchPermissionPayload,
         const { auth } = getState() as RootState;
         const response = await fetch(url, {
             method: "POST",
-            headers: { "Content-Type": "application/json", Authorization: `Bearer ${auth.accessToken}` },
+            headers: { "Content-Type": "application/json", ...makeAuthorizationHeader(auth.accessToken) },
             body: JSON.stringify({resources: [resource]}),
         });
         return await response.json();

src/utils.ts

@@ -14,7 +14,7 @@ export const buildUrlEncodedData = (obj: object) =>
 export const getIsAuthenticated = (idTokenContents: JWTPayload | null | undefined) =>
     !!idTokenContents && idTokenContents.exp && Math.round(new Date().getTime() / 1000) < idTokenContents.exp;
 
-export const makeAuthorizationHeader = (token: string | null | undefined) =>
+export const makeAuthorizationHeader = (token: string | null | undefined): HeadersInit | Record<string, never> =>
     (token ? { Authorization: `Bearer ${token}` } : {});
 
 export const recursiveOrderedObject = (x: Resource): unknown => {