OpenApi

.github/workflows/functional_all_db.yml

@@ -241,3 +241,4 @@ jobs:
           src/OrchardCore.Cms.Web/App_Data_Tests_*/logs
           test/OrchardCore.Tests.Functional/traces
         retention-days: 3
+

.scripts/bloom/helpers/globals.ts

@@ -30,4 +30,40 @@ const isNumber = (str: string) => {
     return str.length === 1 && str.match(/[0-9]/i);
 };
 
-export { getTenantName, getTechnicalName, isLetter, isNumber };
+const getAntiForgeryToken = (): string | null => {
+    const input = document.querySelector<HTMLInputElement>(
+        'input[name="__RequestVerificationToken"]'
+    );
+    return input?.value ?? null;
+};
+
+/**
+ * Returns the tenant path base (e.g. "/authserver", "/tenant") from the current page.
+ * Reads from a `<script type="application/json">` element whose id ends with `-data`
+ * and contains a `pathBase` property, or falls back to an empty string (root tenant).
+ */
+const getTenantPathBase = (dataElementId?: string): string => {
+    if (dataElementId) {
+        const el = document.getElementById(dataElementId);
+        if (el) {
+            try { return JSON.parse(el.textContent || "{}").pathBase || ""; }
+            catch { return ""; }
+        }
+    }
+
+    // Fallback: scan for any script[type="application/json"][id$="-data"] with a pathBase.
+    const scripts = document.querySelectorAll<HTMLScriptElement>('script[type="application/json"][id$="-data"]');
+    for (const script of scripts) {
+        try {
+            const data = JSON.parse(script.textContent || "{}");
+            if (typeof data.pathBase === "string") {
+                return data.pathBase;
+            }
+        }
+        catch { /* skip malformed JSON */ }
+    }
+
+    return "";
+};
+
+export { getAntiForgeryToken, getTenantName, getTenantPathBase, getTechnicalName, isLetter, isNumber };