{{-- Refresh CSRF so idle login pages don't 419 after session expiry --}}
<meta name="csrf-token" content="{{ csrf_token() }}">
<script>
(function () {
    var csrfUrl = @json(url('/csrf-token'));

    function applyToken(token) {
        if (!token) {
            return;
        }
        var meta = document.querySelector('meta[name="csrf-token"]');
        if (meta) {
            meta.setAttribute('content', token);
        }
        document.querySelectorAll('input[name="_token"]').forEach(function (input) {
            input.value = token;
        });
    }

    window.agelessRefreshCsrf = function () {
        return fetch(csrfUrl, {
            method: 'GET',
            credentials: 'same-origin',
            headers: {
                'Accept': 'application/json',
                'X-Requested-With': 'XMLHttpRequest'
            }
        })
            .then(function (res) { return res.json(); })
            .then(function (data) {
                applyToken(data.token);
                return data.token;
            });
    };

    // Keep session/token alive while the login page stays open
    setInterval(function () {
        window.agelessRefreshCsrf().catch(function () {});
    }, 30000);

    // Native form submits: refresh token first
    document.addEventListener('submit', function (event) {
        var form = event.target;
        if (!form || form.tagName !== 'FORM') {
            return;
        }
        if (!form.querySelector('input[name="_token"]')) {
            return;
        }
        if (form.dataset.csrfReady === '1') {
            form.dataset.csrfReady = '0';
            return;
        }
        event.preventDefault();
        event.stopImmediatePropagation();
        window.agelessRefreshCsrf()
            .catch(function () { return null; })
            .then(function () {
                form.dataset.csrfReady = '1';
                if (typeof form.requestSubmit === 'function') {
                    form.requestSubmit();
                } else {
                    HTMLFormElement.prototype.submit.call(form);
                }
            });
    }, true);
})();
</script>