S4Kit

// The traditional way: 50+ lines of boilerplate
import axios from 'axios';

// Step 1: Get CSRF token
const tokenResponse = await axios.get(
  'https://sap-server.company.com/sap/opu/odata/sap/API_BUSINESS_PARTNER/A_BusinessPartner',
  {
    headers: {
      'Authorization': `Basic ${Buffer.from(`${user}:${pass}`).toString('base64')}`,
      'x-csrf-token': 'Fetch',
      'sap-client': '100',
    }
  }
);
const csrfToken = tokenResponse.headers['x-csrf-token'];
const cookies = tokenResponse.headers['set-cookie'];

// Step 2: Make the actual request
const response = await axios.get(
  'https://sap-server.company.com/sap/opu/odata/sap/API_BUSINESS_PARTNER/A_BusinessPartner',
  {
    params: {
      '$select': 'BusinessPartner,BusinessPartnerName',
      '$filter': "BusinessPartnerCategory eq '1'",
      '$top': 10
    },
    headers: {
      'Authorization': `Basic ${Buffer.from(`${user}:${pass}`).toString('base64')}`,
      'x-csrf-token': csrfToken,
      'Cookie': cookies.join('; '),
      'sap-client': '100',
      'Accept': 'application/json',
    }
  }
);

// Step 3: Parse the weird OData response format
const partners = response.data.d.results;