Get Employee Profile Picture

//native

type Personio = {

	clientId: string

	clientSecret: string

}

/**

 * Get Employee Profile Picture

 * Show employee's profile picture. If profile picture is missing, the 404 error will be thrown. The `Profile Picture` attribute has to be whitelisted.

 */

export async function main(

	auth: Personio,

	employee_id: string,

	width: string,

	X_Personio_Partner_ID?: string,

	X_Personio_App_ID?: string

) {

	const url = new URL(

		`https://api.personio.de/v1/company/employees/${employee_id}/profile-picture/${width}`

	)

	const response = await fetch(url, {

		method: 'GET',

		headers: {

			...(X_Personio_Partner_ID ? { 'X-Personio-Partner-ID': X_Personio_Partner_ID } : {}),

			...(X_Personio_App_ID ? { 'X-Personio-App-ID': X_Personio_App_ID } : {}),

			Authorization: 'Bearer ' + (await getOAuthToken(auth, 'https://api.personio.de/oauth2/token'))

		},

		body: undefined

	})

	if (!response.ok) {

		const text = await response.text()

		throw new Error(`${response.status} ${text}`)

	}

	return await response.text()

}

async function getOAuthToken(auth: Personio, tokenUrl: string): Promise<string> {

	const params = new URLSearchParams({

		grant_type: 'client_credentials',

		client_id: auth.clientId,

		client_secret: auth.clientSecret

	})

	const response = await fetch(tokenUrl, {

		method: 'POST',

		headers: {

			Authorization: 'Basic ' + btoa(`${auth.clientId}:${auth.clientSecret}`),

			'Content-Type': 'application/x-www-form-urlencoded'

		},

		body: params.toString()

	})

	if (!response.ok) {

		const text = await response.text()

		throw new Error(`OAuth token request failed: ${response.status} ${text}`)

	}

	const data = await response.json()

	return data.access_token

}

}