@djangocfg/api 2.1.346 → 2.1.348

package/dist/auth.d.cts

@@ -3,6 +3,19 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as consola from 'consola';
 import { z } from 'zod';
 
+/**
+ * Auth-related constants shared across the frontend.
+ * Single source of truth — do not redefine these elsewhere.
+ */
+declare const AUTH_CONSTANTS: {
+    /** Email OTP code length (numeric). */
+    readonly EMAIL_OTP_LENGTH: 4;
+    /** TOTP code length (RFC 6238 — authenticator apps). */
+    readonly TOTP_LENGTH: 6;
+    /** Backup code max length. */
+    readonly BACKUP_CODE_MAX_LENGTH: 12;
+};
+
 /**
  * Nested serializer for Centrifugo WebSocket connection token.
  */
@@ -890,4 +903,4 @@ declare const Analytics: {
     setUser(userId: string): void;
 };
 
-export { type AccountsContextValue, AccountsProvider, Analytics, AnalyticsCategory, type AnalyticsCategoryType, AnalyticsEvent, type AnalyticsEventType, type AuthConfig, type AuthContextType, type AuthFormAutoSubmit, type AuthFormReturn, type AuthFormState, type AuthFormStateHandlers, type AuthFormSubmitHandlers, type AuthFormValidation, AuthProvider, type AuthProviderProps, type AuthStep, type DeleteAccountResult, type OTPRequestResult, type PatchedCfgUserUpdateRequest, PatchedCfgUserUpdateRequestSchema, type ProfileCacheOptions, type TwoFactorDevice, type TwoFactorSetupData, type UseAuthFormOptions, type UseAuthFormStateReturn, type UseAutoAuthOptions, type UseDeleteAccountReturn, type UseGithubAuthOptions, type UseGithubAuthReturn, type UseTwoFactorOptions, type UseTwoFactorReturn, type UseTwoFactorSetupOptions, type UseTwoFactorSetupReturn, type UseTwoFactorStatusReturn, type UserProfile, authLogger, clearProfileCache, decodeBase64, encodeBase64, formatAuthError, getCacheMetadata, getCachedProfile, hasValidCache, logger, setCachedProfile, useAccountsContext, useAuth, useAuthForm, useAuthFormState, useAuthGuard, useAuthRedirectManager, useAuthValidation, useAutoAuth, useBase64, useCfgRouter, useDeleteAccount, useGithubAuth, useLocalStorage, useQueryParams, useSessionStorage, useTokenRefresh, useTwoFactor, useTwoFactorSetup, useTwoFactorStatus, validateEmail, validateIdentifier };
+export { AUTH_CONSTANTS, type AccountsContextValue, AccountsProvider, Analytics, AnalyticsCategory, type AnalyticsCategoryType, AnalyticsEvent, type AnalyticsEventType, type AuthConfig, type AuthContextType, type AuthFormAutoSubmit, type AuthFormReturn, type AuthFormState, type AuthFormStateHandlers, type AuthFormSubmitHandlers, type AuthFormValidation, AuthProvider, type AuthProviderProps, type AuthStep, type DeleteAccountResult, type OTPRequestResult, type PatchedCfgUserUpdateRequest, PatchedCfgUserUpdateRequestSchema, type ProfileCacheOptions, type TwoFactorDevice, type TwoFactorSetupData, type UseAuthFormOptions, type UseAuthFormStateReturn, type UseAutoAuthOptions, type UseDeleteAccountReturn, type UseGithubAuthOptions, type UseGithubAuthReturn, type UseTwoFactorOptions, type UseTwoFactorReturn, type UseTwoFactorSetupOptions, type UseTwoFactorSetupReturn, type UseTwoFactorStatusReturn, type UserProfile, authLogger, clearProfileCache, decodeBase64, encodeBase64, formatAuthError, getCacheMetadata, getCachedProfile, hasValidCache, logger, setCachedProfile, useAccountsContext, useAuth, useAuthForm, useAuthFormState, useAuthGuard, useAuthRedirectManager, useAuthValidation, useAutoAuth, useBase64, useCfgRouter, useDeleteAccount, useGithubAuth, useLocalStorage, useQueryParams, useSessionStorage, useTokenRefresh, useTwoFactor, useTwoFactorSetup, useTwoFactorStatus, validateEmail, validateIdentifier };

package/dist/auth.d.ts

@@ -3,6 +3,19 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as consola from 'consola';
 import { z } from 'zod';
 
+/**
+ * Auth-related constants shared across the frontend.
+ * Single source of truth — do not redefine these elsewhere.
+ */
+declare const AUTH_CONSTANTS: {
+    /** Email OTP code length (numeric). */
+    readonly EMAIL_OTP_LENGTH: 4;
+    /** TOTP code length (RFC 6238 — authenticator apps). */
+    readonly TOTP_LENGTH: 6;
+    /** Backup code max length. */
+    readonly BACKUP_CODE_MAX_LENGTH: 12;
+};
+
 /**
  * Nested serializer for Centrifugo WebSocket connection token.
  */
@@ -890,4 +903,4 @@ declare const Analytics: {
     setUser(userId: string): void;
 };
 
-export { type AccountsContextValue, AccountsProvider, Analytics, AnalyticsCategory, type AnalyticsCategoryType, AnalyticsEvent, type AnalyticsEventType, type AuthConfig, type AuthContextType, type AuthFormAutoSubmit, type AuthFormReturn, type AuthFormState, type AuthFormStateHandlers, type AuthFormSubmitHandlers, type AuthFormValidation, AuthProvider, type AuthProviderProps, type AuthStep, type DeleteAccountResult, type OTPRequestResult, type PatchedCfgUserUpdateRequest, PatchedCfgUserUpdateRequestSchema, type ProfileCacheOptions, type TwoFactorDevice, type TwoFactorSetupData, type UseAuthFormOptions, type UseAuthFormStateReturn, type UseAutoAuthOptions, type UseDeleteAccountReturn, type UseGithubAuthOptions, type UseGithubAuthReturn, type UseTwoFactorOptions, type UseTwoFactorReturn, type UseTwoFactorSetupOptions, type UseTwoFactorSetupReturn, type UseTwoFactorStatusReturn, type UserProfile, authLogger, clearProfileCache, decodeBase64, encodeBase64, formatAuthError, getCacheMetadata, getCachedProfile, hasValidCache, logger, setCachedProfile, useAccountsContext, useAuth, useAuthForm, useAuthFormState, useAuthGuard, useAuthRedirectManager, useAuthValidation, useAutoAuth, useBase64, useCfgRouter, useDeleteAccount, useGithubAuth, useLocalStorage, useQueryParams, useSessionStorage, useTokenRefresh, useTwoFactor, useTwoFactorSetup, useTwoFactorStatus, validateEmail, validateIdentifier };
+export { AUTH_CONSTANTS, type AccountsContextValue, AccountsProvider, Analytics, AnalyticsCategory, type AnalyticsCategoryType, AnalyticsEvent, type AnalyticsEventType, type AuthConfig, type AuthContextType, type AuthFormAutoSubmit, type AuthFormReturn, type AuthFormState, type AuthFormStateHandlers, type AuthFormSubmitHandlers, type AuthFormValidation, AuthProvider, type AuthProviderProps, type AuthStep, type DeleteAccountResult, type OTPRequestResult, type PatchedCfgUserUpdateRequest, PatchedCfgUserUpdateRequestSchema, type ProfileCacheOptions, type TwoFactorDevice, type TwoFactorSetupData, type UseAuthFormOptions, type UseAuthFormStateReturn, type UseAutoAuthOptions, type UseDeleteAccountReturn, type UseGithubAuthOptions, type UseGithubAuthReturn, type UseTwoFactorOptions, type UseTwoFactorReturn, type UseTwoFactorSetupOptions, type UseTwoFactorSetupReturn, type UseTwoFactorStatusReturn, type UserProfile, authLogger, clearProfileCache, decodeBase64, encodeBase64, formatAuthError, getCacheMetadata, getCachedProfile, hasValidCache, logger, setCachedProfile, useAccountsContext, useAuth, useAuthForm, useAuthFormState, useAuthGuard, useAuthRedirectManager, useAuthValidation, useAutoAuth, useBase64, useCfgRouter, useDeleteAccount, useGithubAuth, useLocalStorage, useQueryParams, useSessionStorage, useTokenRefresh, useTwoFactor, useTwoFactorSetup, useTwoFactorStatus, validateEmail, validateIdentifier };

package/dist/auth.mjs

@@ -2,6 +2,16 @@
 var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
+// src/auth/constants.ts
+var AUTH_CONSTANTS = {
+  /** Email OTP code length (numeric). */
+  EMAIL_OTP_LENGTH: 4,
+  /** TOTP code length (RFC 6238 — authenticator apps). */
+  TOTP_LENGTH: 6,
+  /** Backup code max length. */
+  BACKUP_CODE_MAX_LENGTH: 12
+};
+
 // src/auth/utils/env.ts
 var isDev = process.env.NODE_ENV === "development";
 var isBrowser = typeof window !== "undefined";
@@ -229,7 +239,7 @@ var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
   useEffect3(() => {
     if (!isReady) return;
     const queryOtp = queryParams.get("otp");
-    if (queryOtp && typeof queryOtp === "string" && queryOtp.length === 6) {
+    if (queryOtp && typeof queryOtp === "string" && queryOtp.length === AUTH_CONSTANTS.EMAIL_OTP_LENGTH) {
       authLogger.info("OTP detected in URL on auth page:", queryOtp);
       onOTPDetected?.(queryOtp);
     }
@@ -485,6 +495,12 @@ function installAuthOnClient(client2) {
     if (locale) request.headers.set("Accept-Language", locale);
     const apiKey = auth.getApiKey();
     if (apiKey) request.headers.set("X-API-Key", apiKey);
+    try {
+      const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+      if (tz) request.headers.set("X-Timezone", tz);
+    } catch {
+    }
+    request.headers.set("X-Client-Time", (/* @__PURE__ */ new Date()).toISOString());
     return request;
   });
   client2.interceptors.response.use(async (response, request) => {
@@ -2745,8 +2761,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     sourceUrl
   ]);
   const submitOTP = useCallback5(async (submitIdentifier, submitOtp) => {
-    if (!submitOtp || submitOtp.length < 6) {
-      const msg = "Please enter the 6-digit verification code";
+    if (!submitOtp || submitOtp.length < AUTH_CONSTANTS.EMAIL_OTP_LENGTH) {
+      const msg = `Please enter the ${AUTH_CONSTANTS.EMAIL_OTP_LENGTH}-digit verification code`;
       setError(msg);
       onError?.(msg);
       return false;
@@ -4805,6 +4821,7 @@ var formatAuthError = /* @__PURE__ */ __name((error) => {
   return "An unexpected error occurred";
 }, "formatAuthError");
 export {
+  AUTH_CONSTANTS,
   AccountsProvider,
   Analytics,
   AnalyticsCategory,