@djangocfg/api 2.1.346 → 2.1.348

package/dist/auth.cjs

@@ -31,6 +31,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/auth/index.ts
 var auth_exports = {};
 __export(auth_exports, {
+  AUTH_CONSTANTS: () => AUTH_CONSTANTS,
   AccountsProvider: () => AccountsProvider,
   Analytics: () => Analytics,
   AnalyticsCategory: () => AnalyticsCategory,
@@ -71,6 +72,16 @@ __export(auth_exports, {
 });
 module.exports = __toCommonJS(auth_exports);
 
+// src/auth/constants.ts
+var AUTH_CONSTANTS = {
+  /** Email OTP code length (numeric). */
+  EMAIL_OTP_LENGTH: 4,
+  /** TOTP code length (RFC 6238 — authenticator apps). */
+  TOTP_LENGTH: 6,
+  /** Backup code max length. */
+  BACKUP_CODE_MAX_LENGTH: 12
+};
+
 // src/auth/utils/env.ts
 var isDev = process.env.NODE_ENV === "development";
 var isBrowser = typeof window !== "undefined";
@@ -290,7 +301,7 @@ var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
   (0, import_react5.useEffect)(() => {
     if (!isReady) return;
     const queryOtp = queryParams.get("otp");
-    if (queryOtp && typeof queryOtp === "string" && queryOtp.length === 6) {
+    if (queryOtp && typeof queryOtp === "string" && queryOtp.length === AUTH_CONSTANTS.EMAIL_OTP_LENGTH) {
       authLogger.info("OTP detected in URL on auth page:", queryOtp);
       onOTPDetected?.(queryOtp);
     }
@@ -546,6 +557,12 @@ function installAuthOnClient(client2) {
     if (locale) request.headers.set("Accept-Language", locale);
     const apiKey = auth.getApiKey();
     if (apiKey) request.headers.set("X-API-Key", apiKey);
+    try {
+      const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+      if (tz) request.headers.set("X-Timezone", tz);
+    } catch {
+    }
+    request.headers.set("X-Client-Time", (/* @__PURE__ */ new Date()).toISOString());
     return request;
   });
   client2.interceptors.response.use(async (response, request) => {
@@ -2806,8 +2823,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     sourceUrl
   ]);
   const submitOTP = (0, import_react7.useCallback)(async (submitIdentifier, submitOtp) => {
-    if (!submitOtp || submitOtp.length < 6) {
-      const msg = "Please enter the 6-digit verification code";
+    if (!submitOtp || submitOtp.length < AUTH_CONSTANTS.EMAIL_OTP_LENGTH) {
+      const msg = `Please enter the ${AUTH_CONSTANTS.EMAIL_OTP_LENGTH}-digit verification code`;
       setError(msg);
       onError?.(msg);
       return false;