@digital-ai/dot-illustrations 2.0.35 → 2.0.36

package/demo/github-upload.js

@@ -17,17 +17,14 @@ const GITHUB_UPLOAD_CONFIG = {
   SCOPES: 'public_repo',
 };
 
-const STORAGE_TOKEN_KEY = 'gh_illus_token';
-const STORAGE_USER_KEY  = 'gh_illus_user';
+// ─── In-memory token (never persisted — cleared when page closes) ────────────
 
-// ─── Token helpers ──────────────────────────────────────────────────────────
+let _ghToken = null;
+let _ghUser  = null;
 
-function ghGetToken()  { return localStorage.getItem(STORAGE_TOKEN_KEY); }
-function ghSetToken(t) { localStorage.setItem(STORAGE_TOKEN_KEY, t); }
-function ghClearToken() {
-  localStorage.removeItem(STORAGE_TOKEN_KEY);
-  localStorage.removeItem(STORAGE_USER_KEY);
-}
+function ghGetToken()  { return _ghToken; }
+function ghSetToken(t) { _ghToken = t; }
+function ghClearToken() { _ghToken = null; _ghUser = null; }
 
 // ─── GitHub API helpers ──────────────────────────────────────────────────────
 

package/demo/script.js

@@ -516,7 +516,6 @@ document.addEventListener('DOMContentLoaded', () => {
       badge.classList.remove('hidden');
       badge.style.display = 'flex';
       name.textContent = `@${user.login}`;
-      localStorage.setItem('gh_illus_user', JSON.stringify(user));
     } else {
       btn.classList.remove('hidden');
       badge.style.display = 'none';
@@ -591,11 +590,7 @@ document.addEventListener('DOMContentLoaded', () => {
     }
   });
 
-  // Restore session
-  const savedUser = localStorage.getItem('gh_illus_user');
-  if (window.GitHubUpload?.getToken?.() && savedUser) {
-    try { updateAuthBadge(JSON.parse(savedUser)); } catch {}
-  }
+  // No session restore — token is in-memory only for security
 
   // ── Upload panel ─────────────────────────────────────────────────────────
   const uploadBufs = { illusLight: null, illusDark: null, integSvg: null };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@digital-ai/dot-illustrations",
-  "version": "2.0.35",
+  "version": "2.0.36",
   "description": "A central place for the design team to keep illustrations and for dev teams to find them.",
   "main": "./index.css",
   "scripts": {