Authentication

const API = 'https://api.rhino.fi'
const TOKEN_TTL_MS = 55 * 60 * 1000 // refresh 5 minutes before the 1-hour expiry

export class RhinoApiError extends Error {
  constructor(status, body) {
    super(body?._tag ?? body?.message ?? `HTTP ${status}`)
    this.status = status
    this.code = body?._tag
    this.body = body
  }
}

let token = null // { jwt, expiresAt }

export async function getJwt() {
  if (token && Date.now() < token.expiresAt) return token.jwt

  const res = await fetch(`${API}/authentication/auth/apiKey`, {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ apiKey: process.env.RHINO_API_KEY }),
  })
  const body = await res.json()
  if (!res.ok) throw new RhinoApiError(res.status, body)

  token = { jwt: body.jwt, expiresAt: Date.now() + TOKEN_TTL_MS }
  return token.jwt
}

/**
 * Calls the Rhino.fi API and returns the parsed JSON body.
 * Throws RhinoApiError for any non-2xx response.
 */
export async function rhinoFetch(path, { method = 'GET', body, auth = true } = {}) {
  const headers = { 'Content-Type': 'application/json' }
  if (auth) headers.Authorization = await getJwt()

  const res = await fetch(`${API}${path}`, {
    method,
    headers,
    body: body === undefined ? undefined : JSON.stringify(body),
  })
  const data = await res.json().catch(() => null)
  if (!res.ok) throw new RhinoApiError(res.status, data)
  return data
}