feat: add support for csrf

[Raubzeug]

CI Results

Test Status: ⚠️ FLAKY

📊 Full Report

Total	Passed	Failed	Flaky	Skipped
354	348	0	4	2

Test Changes Summary ⏭️2

⏭️ Skipped Tests (2)

1. Scroll to row, get shareable link, navigate to URL and verify row is scrolled into view (tenant/diagnostics/tabs/queries.test.ts)
2. Copy result button copies to clipboard (tenant/queryEditor/queryEditor.test.ts)

Bundle Size: ✅

Current: 85.21 MB | Main: 85.21 MB
Diff: +1.73 KB (0.00%)

✅ Bundle size unchanged.

ℹ️ CI Information

• Test recordings for failed tests are available in the full report.
• Bundle size is measured for the entire 'dist' directory.
• 📊 indicates links to detailed reports.
• 🔺 indicates increase, 🔽 decrease, and ✅ no change in bundle size.

[astandrik]

bugbot run

[Copilot]

Pull Request Overview

This PR adds CSRF protection support to the YdbEmbeddedAPI by introducing a configurable token getter function. The changes enable CSRF tokens to be set across all API service instances when a token is provided.

• Adds csrfTokenGetter parameter to the YdbEmbeddedAPI constructor
• Implements token distribution logic to set CSRF tokens on all API service instances

Comments suppressed due to low confidence (1)

src/services/api/index.ts:33

• [nitpick] The parameter name 'csrfTokenGetter' could be more descriptive. Consider renaming to 'getCsrfToken' or 'csrfTokenProvider' to better indicate its purpose as a function that provides/retrieves the token.

        csrfTokenGetter = () => undefined,

[Copilot]

The repetitive manual token setting for each API service creates maintainability issues. Consider iterating over the API services or creating a helper method to reduce code duplication.

Suggested change

	this.auth.setCSRFToken(token);
	this.meta?.setCSRFToken(token);
	this.codeAssist?.setCSRFToken(token);
	this.operation.setCSRFToken(token);
	this.pdisk.setCSRFToken(token);
	this.scheme.setCSRFToken(token);
	this.storage.setCSRFToken(token);
	this.streaming.setCSRFToken(token);
	this.tablets.setCSRFToken(token);
	this.vdisk.setCSRFToken(token);
	this.viewer.setCSRFToken(token);
	const services = [
	this.auth,
	this.meta,
	this.codeAssist,
	this.operation,
	this.pdisk,
	this.scheme,
	this.storage,
	this.streaming,
	this.tablets,
	this.vdisk,
	this.viewer,
	];
	services.forEach(service => service?.setCSRFToken(token));

[Raubzeug]

dont like

[cursor]

✅ Bugbot reviewed your changes and found no bugs!

---

Bugbot free trial expires on July 29, 2025
Learn more in the Cursor dashboard.

Was this report helpful? Give feedback by reacting with 👍 or 👎