GeneralBots/botui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(htmx): register auth header listener on document immediately

Browse source 
The listener was being registered on document.body inside initHTMX(),
but HTMX requests could start before body was ready.

Now register on document at script load time (immediately) to ensure
all HTMX requests get the Authorization header.
This commit is contained in:
Rodrigo Rodriguez (Pragmatismo) 2026-01-10 14:19:22 -03:00
parent b5c75e650b
commit 7bb230b59c
1 changed files with 28 additions and 24 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

52
ui/suite/js/htmx-app.js
View file

@ -2,6 +2,34 @@
(function () {
"use strict";
// =========================================================================
// CRITICAL: Register auth header listener IMMEDIATELY on document
// This MUST run before any HTMX requests are made
// =========================================================================
document.addEventListener("htmx:configRequest", (event) => {
// Add Authorization header with access token
const accessToken =
localStorage.getItem("gb-access-token") ||
sessionStorage.getItem("gb-access-token");
if (accessToken) {
event.detail.headers["Authorization"] = `Bearer ${accessToken}`;
}
// Add CSRF token if available
const csrfToken = localStorage.getItem("csrf_token");
if (csrfToken) {
event.detail.headers["X-CSRF-Token"] = csrfToken;
}
// Add session ID if available
const sessionId =
localStorage.getItem("gb-session-id") ||
sessionStorage.getItem("gb-session-id");
if (sessionId) {
event.detail.headers["X-Session-ID"] = sessionId;
}
});
// Configuration
const config = {
wsUrl: "/ws",
@ -21,30 +49,6 @@
htmx.config.defaultSettleDelay = 100;
htmx.config.timeout = 10000;
// Add CSRF token and Authorization header to all requests
document.body.addEventListener("htmx:configRequest", (event) => {
const csrfToken = localStorage.getItem("csrf_token");
if (csrfToken) {
event.detail.headers["X-CSRF-Token"] = csrfToken;
}
// Add Authorization header with access token
const accessToken =
localStorage.getItem("gb-access-token") ||
sessionStorage.getItem("gb-access-token");
if (accessToken) {
event.detail.headers["Authorization"] = `Bearer ${accessToken}`;
}
// Add session ID if available
const sessionId =
localStorage.getItem("gb-session-id") ||
sessionStorage.getItem("gb-session-id");
if (sessionId) {
event.detail.headers["X-Session-ID"] = sessionId;
}
});
// Handle errors globally
document.body.addEventListener("htmx:responseError", (event) => {
console.error("HTMX Error:", event.detail);