@djangocfg/api 2.1.47 → 2.1.49

package/dist/auth.d.cts

@@ -377,12 +377,16 @@ interface UseAuthFormOptions {
     redirectUrl?: string;
     /** If true, user must accept terms before submitting. Default: false */
     requireTermsAcceptance?: boolean;
+    /** Path to auth page for auto-OTP detection. Default: '/auth' */
+    authPath?: string;
 }
 declare const useAuthForm: (options: UseAuthFormOptions) => AuthFormState & AuthFormHandlers;
 
 interface UseAutoAuthOptions {
     onOTPDetected?: (otp: string) => void;
     cleanupUrl?: boolean;
+    /** Paths where auto-auth should be active. Default: ['/auth'] */
+    allowedPaths?: string[];
 }
 /**
  * Hook for automatic authentication from URL query parameters
@@ -391,6 +395,7 @@ interface UseAutoAuthOptions {
 declare const useAutoAuth: (options?: UseAutoAuthOptions) => {
     isReady: boolean;
     hasOTP: boolean;
+    isAllowedPath: boolean;
 };
 
 interface UseGithubAuthOptions {

package/dist/auth.d.ts

@@ -377,12 +377,16 @@ interface UseAuthFormOptions {
     redirectUrl?: string;
     /** If true, user must accept terms before submitting. Default: false */
     requireTermsAcceptance?: boolean;
+    /** Path to auth page for auto-OTP detection. Default: '/auth' */
+    authPath?: string;
 }
 declare const useAuthForm: (options: UseAuthFormOptions) => AuthFormState & AuthFormHandlers;
 
 interface UseAutoAuthOptions {
     onOTPDetected?: (otp: string) => void;
     cleanupUrl?: boolean;
+    /** Paths where auto-auth should be active. Default: ['/auth'] */
+    allowedPaths?: string[];
 }
 /**
  * Hook for automatic authentication from URL query parameters
@@ -391,6 +395,7 @@ interface UseAutoAuthOptions {
 declare const useAutoAuth: (options?: UseAutoAuthOptions) => {
     isReady: boolean;
     hasOTP: boolean;
+    isAllowedPath: boolean;
 };
 
 interface UseGithubAuthOptions {

package/dist/auth.mjs

@@ -4660,34 +4660,37 @@ import { usePathname as usePathname2 } from "next/navigation";
 import { useEffect as useEffect5 } from "react";
 import { useCfgRouter as useCfgRouter3, useQueryParams as useQueryParams2 } from "@djangocfg/ui-nextjs/hooks";
 var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
-  const { onOTPDetected, cleanupUrl = true } = options;
+  const { onOTPDetected, cleanupUrl = true, allowedPaths = ["/auth"] } = options;
   const queryParams = useQueryParams2();
   const pathname = usePathname2();
   const router = useCfgRouter3();
-  const isReady = !!pathname && !!queryParams.get("otp");
+  const isAllowedPath = allowedPaths.some((path) => pathname === path || pathname?.startsWith(path + "/"));
   const hasOTP = !!queryParams.get("otp");
+  const isReady = !!pathname && hasOTP && isAllowedPath;
   useEffect5(() => {
     if (!isReady) return;
     const queryOtp = queryParams.get("otp");
     if (queryOtp && typeof queryOtp === "string" && queryOtp.length === 6) {
-      authLogger.info("OTP detected in URL:", queryOtp);
+      authLogger.info("OTP detected in URL on auth page:", queryOtp);
       onOTPDetected?.(queryOtp);
     }
     if (cleanupUrl && queryOtp) {
       const cleanQuery = Object.fromEntries(queryParams.entries());
       delete cleanQuery.otp;
-      router.push(`${pathname}?${new URLSearchParams(cleanQuery).toString()}`);
+      const queryString = new URLSearchParams(cleanQuery).toString();
+      router.push(queryString ? `${pathname}?${queryString}` : pathname);
     }
-  }, [pathname, queryParams, onOTPDetected, cleanupUrl, router]);
+  }, [pathname, queryParams, onOTPDetected, cleanupUrl, router, isReady]);
   return {
     isReady,
-    hasOTP
+    hasOTP,
+    isAllowedPath
   };
 }, "useAutoAuth");
 
 // src/auth/hooks/useAuthForm.ts
 var useAuthForm = /* @__PURE__ */ __name((options) => {
-  const { onIdentifierSuccess, onOTPSuccess, onError, sourceUrl, redirectUrl, requireTermsAcceptance = false } = options;
+  const { onIdentifierSuccess, onOTPSuccess, onError, sourceUrl, redirectUrl, requireTermsAcceptance = false, authPath = "/auth" } = options;
   const [identifier, setIdentifier] = useState6("");
   const [channel, setChannel] = useState6("email");
   const [otp, setOtp] = useState6("");
@@ -4861,6 +4864,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setSavedTermsAccepted(checked);
   }, [setSavedTermsAccepted]);
   useAutoAuth({
+    allowedPaths: [authPath],
     onOTPDetected: /* @__PURE__ */ __name((otp2) => {
       authLogger.info("OTP detected, auto-submitting");
       const savedEmail2 = getSavedEmail();