Function renewToken

libs/@local/hash-backend-utils/src/vault.ts:130–160

(
  vaultAddr: string,
  token: string,
  logger: Logger,
)

};

const renewToken = async (
  vaultAddr: string,
  token: string,
  logger: Logger,
): Promise<Omit<VaultLoginResult, "client_token">> => {
  try {
    const { data } = await axios.post<{
      auth: Omit<VaultLoginResult, "client_token">;
    }>(
      `${vaultAddr}/v1/auth/token/renew-self`,
      {},
      {
        headers: { "X-Vault-Token": token },
        timeout: 5000,
      },
    );

    return data.auth;
  } catch (error) {
    let errorMessage = "Failed to renew Vault token: ";
    if (error instanceof AxiosError) {
      errorMessage += `(AxiosError): ${JSON.stringify(error)}`;
    } else {
      errorMessage += `(Non-AxiosError): ${stringifyError(error)}`;
    }

    logger.error(errorMessage);

    throw new Error("Failed to renew Vault token");
  }
};

type VaultSecret<D = unknown> = {
  data: D;