fix: add fetch timeout and encode URI in getNpmxProfile

danielroe · danielroe · commit b2ecd2c5652a · 2026-02-27T12:39:09.000Z
diff --git a/server/api/auth/atproto.get.ts b/server/api/auth/atproto.get.ts
@@ -292,8 +292,8 @@ async function getNpmxProfile(handle: string, authSession: OAuthSession) {
 
   // TODO: update with safe client rpc, see `getMiniProfile` response variable
   const profileResponse = await fetch(
-    `https://${SLINGSHOT_HOST}/xrpc/blue.microcosm.repo.getRecordByUri?at_uri=${profileUri}`,
-    { headers: { 'User-Agent': 'npmx' } },
+    `https://${SLINGSHOT_HOST}/xrpc/blue.microcosm.repo.getRecordByUri?at_uri=${encodeURIComponent(profileUri)}`,
+    { headers: { 'User-Agent': 'npmx' }, signal: AbortSignal.timeout(5_000) },
   )
 
   if (profileResponse.ok) {

Original file line number	Diff line number	Diff line change
`@@ -292,8 +292,8 @@ async function getNpmxProfile(handle: string, authSession: OAuthSession) {`
`292`	`292`
`293`	`293`	// TODO: update with safe client rpc, see `getMiniProfile` response variable
`294`	`294`	`const profileResponse = await fetch(`
`295`		- `https://${SLINGSHOT_HOST}/xrpc/blue.microcosm.repo.getRecordByUri?at_uri=${profileUri}`,
`296`		`- { headers: { 'User-Agent': 'npmx' } },`
	`295`	+ `https://${SLINGSHOT_HOST}/xrpc/blue.microcosm.repo.getRecordByUri?at_uri=${encodeURIComponent(profileUri)}`,
	`296`	`+ { headers: { 'User-Agent': 'npmx' }, signal: AbortSignal.timeout(5_000) },`
`297`	`297`	`)`
`298`	`298`
`299`	`299`	`if (profileResponse.ok) {`