@djangocfg/api 2.1.227 → 2.1.228

package/dist/auth.cjs

@@ -40,7 +40,6 @@ __export(auth_exports, {
   authLogger: () => authLogger,
   clearProfileCache: () => clearProfileCache,
   decodeBase64: () => decodeBase64,
-  detectChannelFromIdentifier: () => detectChannelFromIdentifier,
   encodeBase64: () => encodeBase64,
   formatAuthError: () => formatAuthError,
   getCacheMetadata: () => getCacheMetadata,
@@ -182,9 +181,13 @@ __name(useQueryParams, "useQueryParams");
 
 // src/auth/hooks/useAuthFormState.ts
 var import_react3 = require("react");
-var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "", initialChannel = "email") => {
+var formatCountdown = /* @__PURE__ */ __name((s) => {
+  if (s <= 0) return "";
+  const m = Math.floor(s / 60);
+  return m > 0 ? `${m}:${String(s % 60).padStart(2, "0")}` : `${s}s`;
+}, "formatCountdown");
+var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
   const [identifier, setIdentifier] = (0, import_react3.useState)(initialIdentifier);
-  const [channel, setChannel] = (0, import_react3.useState)(initialChannel);
   const [otp, setOtp] = (0, import_react3.useState)("");
   const [isLoading, setIsLoading] = (0, import_react3.useState)(false);
   const [acceptedTerms, setAcceptedTerms] = (0, import_react3.useState)(true);
@@ -194,11 +197,29 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "", initialCh
   const [shouldPrompt2FA, setShouldPrompt2FA] = (0, import_react3.useState)(false);
   const [twoFactorCode, setTwoFactorCode] = (0, import_react3.useState)("");
   const [useBackupCode, setUseBackupCode] = (0, import_react3.useState)(false);
+  const [rateLimitSeconds, setRateLimitSeconds] = (0, import_react3.useState)(0);
+  const rateLimitTimerRef = (0, import_react3.useRef)(null);
+  const startRateLimitCountdown = (0, import_react3.useCallback)((seconds) => {
+    if (rateLimitTimerRef.current) clearInterval(rateLimitTimerRef.current);
+    setRateLimitSeconds(seconds);
+    rateLimitTimerRef.current = setInterval(() => {
+      setRateLimitSeconds((prev) => {
+        if (prev <= 1) {
+          clearInterval(rateLimitTimerRef.current);
+          rateLimitTimerRef.current = null;
+          return 0;
+        }
+        return prev - 1;
+      });
+    }, 1e3);
+  }, []);
+  (0, import_react3.useEffect)(() => () => {
+    if (rateLimitTimerRef.current) clearInterval(rateLimitTimerRef.current);
+  }, []);
   const clearError = (0, import_react3.useCallback)(() => setError(""), []);
   return {
     // State
     identifier,
-    channel,
     otp,
     isLoading,
     acceptedTerms,
@@ -208,9 +229,11 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "", initialCh
     shouldPrompt2FA,
     twoFactorCode,
     useBackupCode,
+    rateLimitSeconds,
+    isRateLimited: rateLimitSeconds > 0,
+    rateLimitLabel: formatCountdown(rateLimitSeconds),
     // Handlers
     setIdentifier,
-    setChannel,
     setOtp,
     setAcceptedTerms,
     setError,
@@ -220,54 +243,21 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "", initialCh
     setTwoFactorSessionId,
     setShouldPrompt2FA,
     setTwoFactorCode,
-    setUseBackupCode
+    setUseBackupCode,
+    startRateLimitCountdown
   };
 }, "useAuthFormState");
 
 // src/auth/hooks/useAuthValidation.ts
 var import_react4 = require("react");
 var EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-var PHONE_REGEX = /^\+[1-9]\d{6,14}$/;
 var useAuthValidation = /* @__PURE__ */ __name(() => {
-  const detectChannelFromIdentifier2 = (0, import_react4.useCallback)((id) => {
-    if (!id) return null;
-    if (id.includes("@")) {
-      return "email";
-    }
-    if (id.startsWith("+") && PHONE_REGEX.test(id)) {
-      return "phone";
-    }
-    return null;
+  const validateIdentifier2 = (0, import_react4.useCallback)((id) => {
+    return EMAIL_REGEX.test(id);
   }, []);
-  const validateIdentifier2 = (0, import_react4.useCallback)((id, channelType) => {
-    if (!id) return false;
-    const channel = channelType || detectChannelFromIdentifier2(id);
-    if (channel === "email") {
-      return EMAIL_REGEX.test(id);
-    }
-    if (channel === "phone") {
-      return PHONE_REGEX.test(id);
-    }
-    return false;
-  }, [detectChannelFromIdentifier2]);
-  return {
-    detectChannelFromIdentifier: detectChannelFromIdentifier2,
-    validateIdentifier: validateIdentifier2
-  };
+  return { validateIdentifier: validateIdentifier2 };
 }, "useAuthValidation");
-var detectChannelFromIdentifier = /* @__PURE__ */ __name((id) => {
-  if (!id) return null;
-  if (id.includes("@")) return "email";
-  if (id.startsWith("+") && PHONE_REGEX.test(id)) return "phone";
-  return null;
-}, "detectChannelFromIdentifier");
-var validateIdentifier = /* @__PURE__ */ __name((id, channelType) => {
-  if (!id) return false;
-  const channel = channelType || detectChannelFromIdentifier(id);
-  if (channel === "email") return EMAIL_REGEX.test(id);
-  if (channel === "phone") return PHONE_REGEX.test(id);
-  return false;
-}, "validateIdentifier");
+var validateIdentifier = /* @__PURE__ */ __name((id) => EMAIL_REGEX.test(id), "validateIdentifier");
 
 // src/auth/hooks/useAuthForm.ts
 var import_react7 = require("react");
@@ -483,7 +473,7 @@ var Accounts = class {
     this.client = client;
   }
   /**
-   * Request OTP code to email or phone.
+   * Request OTP code to email.
    */
   async otpRequestCreate(data) {
     const response = await this.client.request("POST", "/cfg/accounts/otp/request/", { body: data });
@@ -1124,20 +1114,10 @@ var LocalStorageAdapter = class {
 };
 
 // src/_api/generated/cfg_accounts/enums.ts
-var enums_exports = {};
-__export(enums_exports, {
-  OAuthConnectionProvider: () => OAuthConnectionProvider,
-  OTPRequestRequestChannel: () => OTPRequestRequestChannel
-});
 var OAuthConnectionProvider = /* @__PURE__ */ ((OAuthConnectionProvider2) => {
   OAuthConnectionProvider2["GITHUB"] = "github";
   return OAuthConnectionProvider2;
 })(OAuthConnectionProvider || {});
-var OTPRequestRequestChannel = /* @__PURE__ */ ((OTPRequestRequestChannel2) => {
-  OTPRequestRequestChannel2["EMAIL"] = "email";
-  OTPRequestRequestChannel2["PHONE"] = "phone";
-  return OTPRequestRequestChannel2;
-})(OTPRequestRequestChannel || {});
 
 // src/_api/generated/cfg_accounts/_utils/schemas/AccountDeleteResponse.schema.ts
 var import_zod = require("zod");
@@ -1231,14 +1211,15 @@ var OAuthTokenResponseSchema = import_zod11.z.object({
 // src/_api/generated/cfg_accounts/_utils/schemas/OTPErrorResponse.schema.ts
 var import_zod12 = require("zod");
 var OTPErrorResponseSchema = import_zod12.z.object({
-  error: import_zod12.z.string()
+  error: import_zod12.z.string(),
+  error_code: import_zod12.z.string().nullable().optional(),
+  retry_after: import_zod12.z.number().int().nullable().optional()
 });
 
 // src/_api/generated/cfg_accounts/_utils/schemas/OTPRequestRequest.schema.ts
 var import_zod13 = require("zod");
 var OTPRequestRequestSchema = import_zod13.z.object({
   identifier: import_zod13.z.string().min(1),
-  channel: import_zod13.z.nativeEnum(OTPRequestRequestChannel).optional(),
   source_url: import_zod13.z.string().optional()
 });
 
@@ -1253,7 +1234,6 @@ var import_zod15 = require("zod");
 var OTPVerifyRequestSchema = import_zod15.z.object({
   identifier: import_zod15.z.string().min(1),
   otp: import_zod15.z.string().min(6).max(6),
-  channel: import_zod15.z.nativeEnum(OTPRequestRequestChannel).optional(),
   source_url: import_zod15.z.string().optional()
 });
 
@@ -4373,6 +4353,7 @@ var useTwoFactor = /* @__PURE__ */ __name((options = {}) => {
   const [error, setError] = (0, import_react6.useState)(null);
   const [warning, setWarning] = (0, import_react6.useState)(null);
   const [remainingBackupCodes, setRemainingBackupCodes] = (0, import_react6.useState)(null);
+  const [attemptsRemaining, setAttemptsRemaining] = (0, import_react6.useState)(null);
   const clearError = (0, import_react6.useCallback)(() => {
     setError(null);
   }, []);
@@ -4425,8 +4406,11 @@ var useTwoFactor = /* @__PURE__ */ __name((options = {}) => {
       handleSuccess(response);
       return true;
     } catch (err) {
-      const errorMessage = err instanceof Error ? err.message : "Invalid verification code";
       authLogger.error("2FA TOTP verification error:", err);
+      const errorMessage = err instanceof APIError3 ? err.response?.error || err.response?.detail || err.response?.message || err.errorMessage : err instanceof Error ? err.message : "Invalid verification code";
+      if (err instanceof APIError3 && typeof err.response?.attempts_remaining === "number") {
+        setAttemptsRemaining(err.response.attempts_remaining);
+      }
       setError(errorMessage);
       onError?.(errorMessage);
       Analytics.event("auth_otp_verify_fail" /* AUTH_OTP_VERIFY_FAIL */, {
@@ -4466,8 +4450,11 @@ var useTwoFactor = /* @__PURE__ */ __name((options = {}) => {
       handleSuccess(response);
       return true;
     } catch (err) {
-      const errorMessage = err instanceof Error ? err.message : "Invalid backup code";
       authLogger.error("2FA backup code verification error:", err);
+      const errorMessage = err instanceof APIError3 ? err.response?.error || err.response?.detail || err.response?.message || err.errorMessage : err instanceof Error ? err.message : "Invalid backup code";
+      if (err instanceof APIError3 && typeof err.response?.attempts_remaining === "number") {
+        setAttemptsRemaining(err.response.attempts_remaining);
+      }
       setError(errorMessage);
       onError?.(errorMessage);
       Analytics.event("auth_otp_verify_fail" /* AUTH_OTP_VERIFY_FAIL */, {
@@ -4484,6 +4471,7 @@ var useTwoFactor = /* @__PURE__ */ __name((options = {}) => {
     error,
     warning,
     remainingBackupCodes,
+    attemptsRemaining,
     verifyTOTP,
     verifyBackupCode,
     clearError
@@ -4509,15 +4497,10 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     requestOTP,
     verifyOTP,
     getSavedEmail,
-    saveEmail,
-    clearSavedEmail,
-    getSavedPhone,
-    savePhone,
-    clearSavedPhone
+    saveEmail
   } = useAuth();
   const {
     identifier,
-    channel,
     otp,
     isLoading,
     acceptedTerms,
@@ -4525,7 +4508,6 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     twoFactorCode,
     useBackupCode,
     setIdentifier,
-    setChannel,
     setOtp,
     setStep,
     setError,
@@ -4534,7 +4516,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setTwoFactorSessionId,
     setShouldPrompt2FA,
     setTwoFactorCode,
-    setUseBackupCode
+    setUseBackupCode,
+    startRateLimitCountdown
   } = formState;
   const twoFactor = useTwoFactor({
     onSuccess: /* @__PURE__ */ __name(() => {
@@ -4550,45 +4533,26 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     skipRedirect: true
     // We handle navigation via success step
   });
-  const { detectChannelFromIdentifier: detectChannelFromIdentifier2, validateIdentifier: validateIdentifier2 } = validation;
-  const saveIdentifierToStorage = (0, import_react7.useCallback)((id, ch) => {
-    if (ch === "email") {
-      saveEmail(id);
-      clearSavedPhone();
-    } else {
-      savePhone(id);
-      clearSavedEmail();
-    }
-  }, [saveEmail, savePhone, clearSavedEmail, clearSavedPhone]);
+  const { validateIdentifier: validateIdentifier2 } = validation;
+  const saveIdentifierToStorage = (0, import_react7.useCallback)((id) => {
+    saveEmail(id);
+  }, [saveEmail]);
   (0, import_react7.useEffect)(() => {
-    const savedPhone = getSavedPhone();
     const savedEmail = getSavedEmail();
-    if (savedPhone) {
-      setIdentifier(savedPhone);
-      setChannel("phone");
-    } else if (savedEmail) {
+    if (savedEmail) {
       setIdentifier(savedEmail);
-      setChannel("email");
     }
-  }, [getSavedEmail, getSavedPhone, setIdentifier, setChannel]);
-  (0, import_react7.useEffect)(() => {
-    if (identifier) {
-      const detected = detectChannelFromIdentifier2(identifier);
-      if (detected && detected !== channel) {
-        setChannel(detected);
-      }
-    }
-  }, [identifier, channel, detectChannelFromIdentifier2, setChannel]);
+  }, []);
   const handleIdentifierSubmit = (0, import_react7.useCallback)(async (e) => {
     e.preventDefault();
     if (!identifier) {
-      const msg = channel === "phone" ? "Please enter your phone number" : "Please enter your email address";
+      const msg = "Please enter your email address";
       setError(msg);
       onError?.(msg);
       return;
     }
-    if (!validateIdentifier2(identifier, channel)) {
-      const msg = channel === "phone" ? "Please enter a valid phone number (e.g., +1234567890)" : "Please enter a valid email address";
+    if (!validateIdentifier2(identifier)) {
+      const msg = "Please enter a valid email address";
       setError(msg);
       onError?.(msg);
       return;
@@ -4602,14 +4566,19 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setIsLoading(true);
     clearError();
     try {
-      const result = await requestOTP(identifier, channel, sourceUrl);
+      const result = await requestOTP(identifier, sourceUrl);
       if (result.success) {
-        saveIdentifierToStorage(identifier, channel);
+        saveIdentifierToStorage(identifier);
         setStep("otp");
-        onIdentifierSuccess?.(identifier, channel);
+        onIdentifierSuccess?.(identifier);
       } else {
-        setError(result.message);
-        onError?.(result.message);
+        if (result.retryAfter) {
+          startRateLimitCountdown(result.retryAfter);
+          clearError();
+        } else {
+          setError(result.message);
+          onError?.(result.message);
+        }
       }
     } catch {
       const msg = "An unexpected error occurred";
@@ -4620,7 +4589,6 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     }
   }, [
     identifier,
-    channel,
     acceptedTerms,
     requireTermsAcceptance,
     validateIdentifier2,
@@ -4630,11 +4598,12 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setIsLoading,
     setStep,
     clearError,
+    startRateLimitCountdown,
     onIdentifierSuccess,
     onError,
     sourceUrl
   ]);
-  const submitOTP = (0, import_react7.useCallback)(async (submitIdentifier, submitOtp, submitChannel) => {
+  const submitOTP = (0, import_react7.useCallback)(async (submitIdentifier, submitOtp) => {
     if (!submitOtp || submitOtp.length < 6) {
       const msg = "Please enter the 6-digit verification code";
       setError(msg);
@@ -4644,17 +4613,17 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setIsLoading(true);
     clearError();
     try {
-      const result = await verifyOTP(submitIdentifier, submitOtp, submitChannel, sourceUrl, redirectUrl, true);
+      const result = await verifyOTP(submitIdentifier, submitOtp, sourceUrl, redirectUrl, true);
       if (result.requires_2fa && result.session_id) {
         authLogger.info("2FA required after OTP verification");
         setTwoFactorSessionId(result.session_id);
         setShouldPrompt2FA(result.should_prompt_2fa || false);
         setStep("2fa");
-        saveIdentifierToStorage(submitIdentifier, submitChannel);
+        saveIdentifierToStorage(submitIdentifier);
         return true;
       }
       if (result.success) {
-        saveIdentifierToStorage(submitIdentifier, submitChannel);
+        saveIdentifierToStorage(submitIdentifier);
         if (result.should_prompt_2fa && enable2FASetup) {
           authLogger.info("OTP verification successful, prompting 2FA setup");
           setShouldPrompt2FA(true);
@@ -4686,19 +4655,24 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
   }, [verifyOTP, saveIdentifierToStorage, setError, setIsLoading, clearError, onOTPSuccess, onError, sourceUrl, redirectUrl, setTwoFactorSessionId, setShouldPrompt2FA, setStep, enable2FASetup]);
   const handleOTPSubmit = (0, import_react7.useCallback)(async (e) => {
     e.preventDefault();
-    await submitOTP(identifier, otp, channel);
-  }, [identifier, otp, channel, submitOTP]);
+    await submitOTP(identifier, otp);
+  }, [identifier, otp, submitOTP]);
   const handleResendOTP = (0, import_react7.useCallback)(async () => {
     setIsLoading(true);
     clearError();
     try {
-      const result = await requestOTP(identifier, channel, sourceUrl);
+      const result = await requestOTP(identifier, sourceUrl);
       if (result.success) {
-        saveIdentifierToStorage(identifier, channel);
+        saveIdentifierToStorage(identifier);
         setOtp("");
       } else {
-        setError(result.message);
-        onError?.(result.message);
+        if (result.retryAfter) {
+          startRateLimitCountdown(result.retryAfter);
+          clearError();
+        } else {
+          setError(result.message);
+          onError?.(result.message);
+        }
       }
     } catch {
       const msg = "Failed to resend verification code";
@@ -4707,7 +4681,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     } finally {
       setIsLoading(false);
     }
-  }, [identifier, channel, requestOTP, saveIdentifierToStorage, setOtp, setError, setIsLoading, clearError, onError, sourceUrl]);
+  }, [identifier, requestOTP, saveIdentifierToStorage, setOtp, setError, setIsLoading, clearError, startRateLimitCountdown, onError, sourceUrl]);
   const handleBackToIdentifier = (0, import_react7.useCallback)(() => {
     setStep("identifier");
     clearError();
@@ -4746,29 +4720,19 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       if (isAutoSubmitFromUrlRef.current || isLoading) return;
       isAutoSubmitFromUrlRef.current = true;
       authLogger.info("OTP detected from URL, auto-submitting");
-      const savedPhone = getSavedPhone();
       const savedEmail = getSavedEmail();
-      let autoIdentifier = "";
-      let autoChannel = "email";
-      if (savedPhone) {
-        autoIdentifier = savedPhone;
-        autoChannel = "phone";
-      } else if (savedEmail) {
-        autoIdentifier = savedEmail;
-        autoChannel = "email";
-      }
+      const autoIdentifier = savedEmail || "";
       if (!autoIdentifier) {
         authLogger.warn("No saved identifier found for auto-submit");
         isAutoSubmitFromUrlRef.current = false;
         return;
       }
       setIdentifier(autoIdentifier);
-      setChannel(autoChannel);
       setOtp(detectedOtp);
       setStep("otp");
       setTimeout(async () => {
         try {
-          await submitOTP(autoIdentifier, detectedOtp, autoChannel);
+          await submitOTP(autoIdentifier, detectedOtp);
         } finally {
           isAutoSubmitFromUrlRef.current = false;
         }
@@ -4795,7 +4759,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     isAutoSubmittingFromUrl: isAutoSubmitFromUrlRef,
     // 2FA state from hook (for loading indicator)
     is2FALoading: twoFactor.isLoading,
-    twoFactorWarning: twoFactor.warning
+    twoFactorWarning: twoFactor.warning,
+    twoFactorAttemptsRemaining: twoFactor.attemptsRemaining
   };
 }, "useAuthForm");
 
@@ -5826,7 +5791,11 @@ function AccountsProvider({ children }) {
     }
     if (result.access && result.refresh) {
       api.setToken(result.access, result.refresh);
-      await refreshProfile({ callerId: "verifyOTP", force: true });
+      try {
+        await refreshProfile({ callerId: "verifyOTP", force: true });
+      } catch (profileError2) {
+        authLogger.warn("Profile refresh failed after OTP verify (tokens are saved):", profileError2);
+      }
     }
     return result;
   }, "verifyOTP");
@@ -5877,7 +5846,6 @@ var defaultRoutes = {
 };
 var AuthContext = (0, import_react17.createContext)(void 0);
 var EMAIL_STORAGE_KEY = "auth_email";
-var PHONE_STORAGE_KEY = "auth_phone";
 var hasValidTokens = /* @__PURE__ */ __name(() => {
   if (typeof window === "undefined") return false;
   return api.isAuthenticated();
@@ -5900,7 +5868,6 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   const pathname = (0, import_navigation4.usePathname)();
   const queryParams = useQueryParams();
   const [storedEmail, setStoredEmail, clearStoredEmail] = useLocalStorage(EMAIL_STORAGE_KEY, null);
-  const [storedPhone, setStoredPhone, clearStoredPhone] = useLocalStorage(PHONE_STORAGE_KEY, null);
   useTokenRefresh({
     enabled: true,
     onRefresh: /* @__PURE__ */ __name((newToken) => {
@@ -6090,25 +6057,33 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     }
   }, [loadCurrentProfile, clearAuthState, pushToDefaultCallbackUrl, pushToDefaultAuthCallbackUrl, handleGlobalAuthError]);
   const requestOTP = (0, import_react17.useCallback)(
-    async (identifier, channel, sourceUrl) => {
+    async (identifier, sourceUrl) => {
       api.clearTokens();
       try {
-        const channelValue = channel === "phone" ? enums_exports.OTPRequestRequestChannel.PHONE : enums_exports.OTPRequestRequestChannel.EMAIL;
         const result = await accounts.requestOTP({
           identifier,
-          channel: channelValue
+          source_url: sourceUrl
         });
-        const channelName = channel === "phone" ? "phone number" : "email address";
         Analytics.event("auth_otp_request" /* AUTH_OTP_REQUEST */, {
           category: "auth" /* AUTH */,
-          label: channel || "email"
+          label: "email"
         });
         return {
           success: true,
-          message: result.message || `OTP code sent to your ${channelName}`
+          message: result.message || `OTP code sent to your email address`
         };
       } catch (error) {
         authLogger.error("Request OTP error:", error);
+        if (error instanceof APIError) {
+          const retryAfter = error.response?.retry_after ?? error.response?.retryAfter;
+          const message = error.response?.error || error.response?.detail || error.response?.message || error.errorMessage;
+          return {
+            success: false,
+            statusCode: error.statusCode,
+            message,
+            retryAfter: typeof retryAfter === "number" ? retryAfter : void 0
+          };
+        }
         return {
           success: false,
           message: "Failed to send OTP"
@@ -6118,13 +6093,12 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     [accounts]
   );
   const verifyOTP = (0, import_react17.useCallback)(
-    async (identifier, otpCode, channel, sourceUrl, redirectUrl, skipRedirect) => {
+    async (identifier, otpCode, sourceUrl, redirectUrl, skipRedirect) => {
       try {
-        const channelValue = channel === "phone" ? enums_exports.OTPRequestRequestChannel.PHONE : enums_exports.OTPRequestRequestChannel.EMAIL;
         const result = await accounts.verifyOTP({
           identifier,
           otp: otpCode,
-          channel: channelValue
+          source_url: sourceUrl
         });
         if (result.requires_2fa && result.session_id) {
           authLogger.info("2FA required, session:", result.session_id);
@@ -6143,17 +6117,13 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
             message: "Invalid OTP verification response"
           };
         }
-        if (channel === "phone") {
-          setStoredPhone(identifier);
-          clearStoredEmail();
-        } else if (identifier.includes("@")) {
+        if (identifier.includes("@")) {
           setStoredEmail(identifier);
-          clearStoredPhone();
         }
         await new Promise((resolve) => setTimeout(resolve, 200));
         Analytics.event("auth_login_success" /* AUTH_LOGIN_SUCCESS */, {
           category: "auth" /* AUTH */,
-          label: channel || "email"
+          label: "email"
         });
         if (result.user?.id) {
           Analytics.setUser(String(result.user.id));
@@ -6174,15 +6144,19 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
         authLogger.error("Verify OTP error:", error);
         Analytics.event("auth_otp_verify_fail" /* AUTH_OTP_VERIFY_FAIL */, {
           category: "auth" /* AUTH */,
-          label: channel || "email"
+          label: "email"
         });
+        if (error instanceof APIError) {
+          const message = error.response?.error || error.response?.detail || error.response?.message || error.errorMessage;
+          return { success: false, message };
+        }
         return {
           success: false,
           message: "Failed to verify OTP"
         };
       }
     },
-    [setStoredEmail, setStoredPhone, clearStoredEmail, clearStoredPhone, config?.routes?.defaultCallback, accounts, router]
+    [setStoredEmail, config?.routes?.defaultCallback, accounts, router]
   );
   const refreshToken = (0, import_react17.useCallback)(async () => {
     try {
@@ -6258,9 +6232,6 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       getSavedEmail: /* @__PURE__ */ __name(() => storedEmail, "getSavedEmail"),
       saveEmail: setStoredEmail,
       clearSavedEmail: clearStoredEmail,
-      getSavedPhone: /* @__PURE__ */ __name(() => storedPhone, "getSavedPhone"),
-      savePhone: setStoredPhone,
-      clearSavedPhone: clearStoredPhone,
       requestOTP,
       verifyOTP,
       refreshToken,
@@ -6283,9 +6254,6 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       storedEmail,
       setStoredEmail,
       clearStoredEmail,
-      storedPhone,
-      setStoredPhone,
-      clearStoredPhone,
       requestOTP,
       verifyOTP,
       refreshToken,
@@ -6319,12 +6287,6 @@ var defaultAuthState = {
   }, "saveEmail"),
   clearSavedEmail: /* @__PURE__ */ __name(() => {
   }, "clearSavedEmail"),
-  getSavedPhone: /* @__PURE__ */ __name(() => null, "getSavedPhone"),
-  savePhone: /* @__PURE__ */ __name(() => {
-    authLogger.warn("useAuth: savePhone called outside AuthProvider");
-  }, "savePhone"),
-  clearSavedPhone: /* @__PURE__ */ __name(() => {
-  }, "clearSavedPhone"),
   requestOTP: /* @__PURE__ */ __name(async () => {
     authLogger.warn("useAuth: requestOTP called outside AuthProvider");
     return { success: false, message: "AuthProvider not available" };