27 lines
1.1 KiB
JavaScript
27 lines
1.1 KiB
JavaScript
|
import { inject } from '@angular/core';
|
||
|
|
import { AdminAuthService } from './admin-auth.service';
|
||
|
|
/** Backend paths that require an active AdminWebSessionID. Adjust to match your API surface if consuming this outside marketplaces. */
|
||
|
|
const ADMIN_GATED_PATH_SEGMENTS = ['/admin/', '/backoffice/', '/builder/', '/media/'];
|
||
|
|
/**
|
||
|
|
* Attaches admin session/token headers only to admin API requests. Scoped to
|
||
|
|
* admin-gated paths so it never touches customer requests and never reads
|
||
|
|
* the customer AuthService's session.
|
||
|
|
*/
|
||
|
|
export const adminAuthHeadersInterceptor = (req, next) => {
|
||
|
|
const isAdminRequest = ADMIN_GATED_PATH_SEGMENTS.some(segment => req.url.includes(segment));
|
||
|
|
if (!isAdminRequest) {
|
||
|
|
return next(req);
|
||
|
|
}
|
||
|
|
const adminAuth = inject(AdminAuthService);
|
||
|
|
const session = adminAuth.session();
|
||
|
|
const token = adminAuth.getAdminToken();
|
||
|
|
let headers = req.headers;
|
||
|
|
if (session?.sessionId) {
|
||
|
|
headers = headers.set('AdminWebSessionID', session.sessionId);
|
||
|
|
}
|
||
|
|
if (token) {
|
||
|
|
headers = headers.set('Authorization', `Bearer ${token}`);
|
||
|
|
}
|
||
|
|
return next(req.clone({ headers }));
|
||
|
|
};
|