gitlab-org--gitlab-foss/app/views/layouts/_startup_js.html.haml

- return unless page_startup_api_calls.present? || page_startup_graphql_calls.present?

= javascript_tag do
  :plain
    var gl = window.gl || {};
    gl.startup_calls = #{page_startup_api_calls.to_json};
    gl.startup_graphql_calls = #{page_startup_graphql_calls.to_json};

    if (gl.startup_calls && window.fetch) {
      Object.keys(gl.startup_calls).forEach(apiCall => {
        // fetch won’t send cookies in older browsers, unless you set the credentials init option.
        // We set to `same-origin` which is default value in modern browsers.
        // See https://github.com/whatwg/fetch/pull/585 for more information.
        gl.startup_calls[apiCall] = {
          fetchCall: fetch(apiCall, { credentials: 'same-origin' })
        };
      });
    }
    if (gl.startup_graphql_calls && window.fetch) {
      const url = `#{api_graphql_url}`

      const opts = {
        method: "POST",
        headers: { "Content-Type": "application/json", 'X-CSRF-Token': "#{form_authenticity_token}" },
      };

      gl.startup_graphql_calls = gl.startup_graphql_calls.map(call => ({
        ...call,
        fetchCall: fetch(url, {
          ...opts,
          credentials: 'same-origin',
          body: JSON.stringify(call)
        })
      }))
    }