@djangocfg/api 2.1.47 → 2.1.49

package/dist/auth.cjs

@@ -4700,34 +4700,37 @@ var import_navigation2 = require("next/navigation");
 var import_react6 = require("react");
 var import_hooks4 = require("@djangocfg/ui-nextjs/hooks");
 var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
-  const { onOTPDetected, cleanupUrl = true } = options;
+  const { onOTPDetected, cleanupUrl = true, allowedPaths = ["/auth"] } = options;
   const queryParams = (0, import_hooks4.useQueryParams)();
   const pathname = (0, import_navigation2.usePathname)();
   const router = (0, import_hooks4.useCfgRouter)();
-  const isReady = !!pathname && !!queryParams.get("otp");
+  const isAllowedPath = allowedPaths.some((path) => pathname === path || pathname?.startsWith(path + "/"));
   const hasOTP = !!queryParams.get("otp");
+  const isReady = !!pathname && hasOTP && isAllowedPath;
   (0, import_react6.useEffect)(() => {
     if (!isReady) return;
     const queryOtp = queryParams.get("otp");
     if (queryOtp && typeof queryOtp === "string" && queryOtp.length === 6) {
-      authLogger.info("OTP detected in URL:", queryOtp);
+      authLogger.info("OTP detected in URL on auth page:", queryOtp);
       onOTPDetected?.(queryOtp);
     }
     if (cleanupUrl && queryOtp) {
       const cleanQuery = Object.fromEntries(queryParams.entries());
       delete cleanQuery.otp;
-      router.push(`${pathname}?${new URLSearchParams(cleanQuery).toString()}`);
+      const queryString = new URLSearchParams(cleanQuery).toString();
+      router.push(queryString ? `${pathname}?${queryString}` : pathname);
     }
-  }, [pathname, queryParams, onOTPDetected, cleanupUrl, router]);
+  }, [pathname, queryParams, onOTPDetected, cleanupUrl, router, isReady]);
   return {
     isReady,
-    hasOTP
+    hasOTP,
+    isAllowedPath
   };
 }, "useAutoAuth");
 
 // src/auth/hooks/useAuthForm.ts
 var useAuthForm = /* @__PURE__ */ __name((options) => {
-  const { onIdentifierSuccess, onOTPSuccess, onError, sourceUrl, redirectUrl, requireTermsAcceptance = false } = options;
+  const { onIdentifierSuccess, onOTPSuccess, onError, sourceUrl, redirectUrl, requireTermsAcceptance = false, authPath = "/auth" } = options;
   const [identifier, setIdentifier] = (0, import_react7.useState)("");
   const [channel, setChannel] = (0, import_react7.useState)("email");
   const [otp, setOtp] = (0, import_react7.useState)("");
@@ -4901,6 +4904,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setSavedTermsAccepted(checked);
   }, [setSavedTermsAccepted]);
   useAutoAuth({
+    allowedPaths: [authPath],
     onOTPDetected: /* @__PURE__ */ __name((otp2) => {
       authLogger.info("OTP detected, auto-submitting");
       const savedEmail2 = getSavedEmail();