feat: Add checks for keys on getClientSessionToken

Author: razor-x

src/seam-connect/client.ts

@@ -168,22 +168,36 @@ export class Seam extends Routes {
   }): Promise<APIResponse<ClientSessionResponse>> {
     const { apiKey, endpoint, axiosOptions } =
       getSeamClientOptionsWithDefaults(options)
-    let headers: AxiosRequestHeaders = {
-      ...axiosOptions?.headers,
+
+    if (!options.userIdentifierKey) {
+      throw new Error("userIdentifierKey is required")
     }
 
-    if (options.publishableKey?.startsWith("seam_pk")) {
-      // frontend mode
-      headers["seam-publishable-key"] = options.publishableKey
-    } else if (apiKey?.startsWith("seam_")) {
-      // backend mode
-      headers["seam-api-key"] = apiKey
+    const getKeyHeaders = (): AxiosRequestHeaders => {
+      const { publishableKey } = options
+      if (publishableKey) {
+        if (!publishableKey.startsWith("seam_pk")) {
+          throw new Error("Invalid publishableKey")
+        }
+        return { "seam-publishable-key": publishableKey }
+      }
+
+      if (apiKey) {
+        if (!apiKey?.startsWith("seam_")) {
+          throw new Error("Invalid apiKey")
+        }
+        return { "seam-api-key": apiKey }
+      }
+
+      throw new Error("Must provide a publishableKey or apiKey")
     }
-    if (options.userIdentifierKey) {
-      headers["seam-user-identifier-key"] = options.userIdentifierKey
-    } else {
-      throw new Error("userIdentifierKey is required")
+
+    const headers = {
+      "seam-user-identifier-key": options.userIdentifierKey,
+      ...getKeyHeaders(),
+      ...axiosOptions?.headers,
     }
+
     const client = axios.create({
       ...axiosOptions,
       baseURL: endpoint,