|
@@ -22,12 +22,20 @@ export function apiRequest(method, url, payload = null, {
|
|
return Promise.reject("토큰 없음");
|
|
return Promise.reject("토큰 없음");
|
|
}
|
|
}
|
|
|
|
|
|
|
|
+ const headers = {};
|
|
|
|
+ // 인증이 필요한 경우에만 Authorization 헤더 추가
|
|
|
|
+ if (requireAuth && token) {
|
|
|
|
+ headers["Authorization"] = `Bearer ${token}`;
|
|
|
|
+ }
|
|
|
|
|
|
- const normalizedMethod = method.toUpperCase();
|
|
|
|
- const headers = {
|
|
|
|
- "Authorization": `Bearer ${token}`
|
|
|
|
- };
|
|
|
|
|
|
+ // CSRF 토큰 자동 추가
|
|
|
|
+ const csrfToken = document.querySelector("meta[name='_csrf']")?.content;
|
|
|
|
+ const csrfHeader = document.querySelector("meta[name='_csrf_header']")?.content;
|
|
|
|
+ if (csrfToken && csrfHeader) {
|
|
|
|
+ headers[csrfHeader] = csrfToken;
|
|
|
|
+ }
|
|
|
|
|
|
|
|
+ const normalizedMethod = method.toUpperCase();
|
|
let fullUrl = url;
|
|
let fullUrl = url;
|
|
let body = null;
|
|
let body = null;
|
|
|
|
|