fix(client): fix csrf token when user refreshes, WIP hitting apps

[kunal0137]

Description

(#483)

Changes Made

How to Test

1. Steps to reproduce/test the behavior
2. Expected outcomes

Notes

[github-actions]

@CodiumAI-Agent /describe

[CodiumAI-Agent]

Title

fix(client): fix csrf token when user refreshes, WIP hitting apps

---

User description

Description

(#483)

Changes Made

How to Test

1. Steps to reproduce/test the behavior
2. Expected outcomes

Notes

---

PR Type

Bug fix

---

Description

Enhanced CSRF enablement condition
Added configStore flag detection for CSRF
Fetched CSRF token for POST requests

---

Changes walkthrough 📝

	Relevant files
Bug fix	App.tsx Refine CSRF enablement check                                                          packages/client/src/App.tsx Broadened CSRF condition check Integrated configStore.csrf flag Ensured async CSRF token fetching +2/-2

---

Need help?

Type /help how to ... in the comments thread for any questions about PR-Agent usage.

Check out the documentation for more information.

[github-actions]

@CodiumAI-Agent /review

[github-actions]

@CodiumAI-Agent /improve

[CodiumAI-Agent]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🎫 Ticket compliance analysis ✅ 483 - PR Code Verified Compliant requirements: Detection of CSRF via dynamic configStore.config.csrf. Fetching token when CSRF.token is absent before POST. Requires further human verification: Verify in integration/UI tests that X-Csrf-Token is correctly added to real POST requests.

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Undefined Store Access Accessing _store.configStore.store.config.csrf without ensuring configStore and its properties are initialized can cause runtime errors. Consider using optional chaining or delaying interceptor setup until after config is loaded. // Check the CSRF before login or after the configStore is set, then add the token if (CSRF.isEnabled || _store.configStore.store.config.csrf) { if (config.method === 'post') {

[CodiumAI-Agent]

PR Code Suggestions ✨

Category	Suggestion	Impact
Possible issue	Use safe property access Guard against potential undefined nested properties by using optional chaining when accessing the store config. This prevents runtime errors if configStore, store, or config is not yet initialized. packages/client/src/App.tsx [72] -if (CSRF.isEnabled || _store.configStore.store.config.csrf) { +if (CSRF.isEnabled || _store.configStore?.store?.config?.csrf) { Suggestion importance[1-10]: 8 __ Why: The optional chaining prevents runtime errors if configStore or its nested properties are undefined when evaluating the CSRF condition.	Medium
General	Abstract CSRF check logic Encapsulate the CSRF enablement check into a helper method (e.g., CSRF.shouldAttachToken) to centralize logic and improve readability. packages/client/src/App.tsx [72] -if (CSRF.isEnabled || _store.configStore.store.config.csrf) { +if (CSRF.shouldAttachToken(_store.configStore?.store?.config?.csrf)) { Suggestion importance[1-10]: 5 __ Why: Encapsulating the check into CSRF.shouldAttachToken improves readability but is a minor refactor requiring a new helper implementation.	Low

[github-actions]

@CodiumAI-Agent /update_changelog