@djangocfg/api 2.1.477 → 2.1.479

package/dist/auth.cjs

@@ -1018,6 +1018,7 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
   const [otp, setOtp] = (0, import_react4.useState)("");
   const [isLoading, setIsLoading] = (0, import_react4.useState)(false);
   const [acceptedTerms, setAcceptedTerms] = (0, import_react4.useState)(true);
+  const [marketingConsent, setMarketingConsent] = (0, import_react4.useState)(null);
   const [step, setStep] = (0, import_react4.useState)("identifier");
   const [error, setError] = (0, import_react4.useState)("");
   const [webmail, setWebmail] = (0, import_react4.useState)(null);
@@ -1051,6 +1052,7 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
     otp,
     isLoading,
     acceptedTerms,
+    marketingConsent,
     step,
     error,
     twoFactorSessionId,
@@ -1065,6 +1067,7 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
     setIdentifier,
     setOtp,
     setAcceptedTerms,
+    setMarketingConsent,
     setError,
     clearError,
     setStep,
@@ -2062,6 +2065,24 @@ var CfgAccounts = class {
   static {
     __name(this, "CfgAccounts");
   }
+  /**
+   * Marketing-consent checkbox policy for the caller's jurisdiction.
+   *
+   * Derived from the edge-provided CF-IPCountry — the same signal stored
+   * as consent evidence at request time. Unknown country fails safe to
+   * "unchecked".
+   */
+  static cfgAccountsOtpConsentPolicyRetrieve(options) {
+    return (options?.client ?? client).get({
+      security: [
+        { name: "X-API-Key", type: "apiKey" },
+        { scheme: "bearer", type: "http" },
+        { name: "Authorization", type: "apiKey" }
+      ],
+      url: "/cfg/accounts/otp/consent-policy/",
+      ...options
+    });
+  }
   /**
    * Request OTP code to email.
    */
@@ -2863,6 +2884,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     sourceUrl,
     redirectUrl,
     requireTermsAcceptance = false,
+    marketingConsent: marketingConsentOption,
     authPath = "/auth"
   } = options;
   const formState = useAuthFormState();
@@ -2880,6 +2902,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     otp,
     isLoading,
     acceptedTerms,
+    marketingConsent,
     twoFactorSessionId,
     twoFactorCode,
     useBackupCode,
@@ -2943,7 +2966,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setIsLoading(true);
     clearError();
     try {
-      const result = await requestOTP(identifier, sourceUrl);
+      const consent = marketingConsentOption ? { marketingConsent: marketingConsent === true, disclosureVersion: marketingConsentOption.disclosureVersion } : void 0;
+      const result = await requestOTP(identifier, sourceUrl, consent);
       if (result.success) {
         saveIdentifierToStorage(identifier);
         setWebmail(result.webmail ?? null);
@@ -2969,6 +2993,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     identifier,
     acceptedTerms,
     requireTermsAcceptance,
+    marketingConsent,
+    marketingConsentOption,
     validateIdentifier2,
     requestOTP,
     saveIdentifierToStorage,
@@ -3029,7 +3055,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setIsLoading(true);
     clearError();
     try {
-      const result = await requestOTP(identifier, sourceUrl);
+      const consent = marketingConsentOption ? { marketingConsent: marketingConsent === true, disclosureVersion: marketingConsentOption.disclosureVersion } : void 0;
+      const result = await requestOTP(identifier, sourceUrl, consent);
       if (result.success) {
         saveIdentifierToStorage(identifier);
         setWebmail(result.webmail ?? null);
@@ -3050,7 +3077,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     } finally {
       setIsLoading(false);
     }
-  }, [identifier, requestOTP, saveIdentifierToStorage, setOtp, setError, setIsLoading, clearError, startRateLimitCountdown, setWebmail, onError, sourceUrl]);
+  }, [identifier, marketingConsent, marketingConsentOption, requestOTP, saveIdentifierToStorage, setOtp, setError, setIsLoading, clearError, startRateLimitCountdown, setWebmail, onError, sourceUrl]);
   const handleBackToIdentifier = (0, import_react9.useCallback)(() => {
     setStep("identifier");
     clearError();
@@ -3882,30 +3909,46 @@ var OAuthProvidersResponseSchema = import_zod11.z.object({
   providers: import_zod11.z.array(import_zod11.z.object({}).passthrough())
 });
 
+// src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpConsentPolicyRetrieve.ts
+var import_swr4 = __toESM(require("swr"), 1);
+
+// src/_api/generated/_cfg_accounts/schemas/ConsentPolicy.ts
+var import_zod13 = require("zod");
+
+// src/_api/generated/_cfg_accounts/schemas/MarketingConsentDefaultEnum.ts
+var import_zod12 = require("zod");
+var MarketingConsentDefaultEnumSchema = import_zod12.z.enum(["checked", "unchecked"]);
+
+// src/_api/generated/_cfg_accounts/schemas/ConsentPolicy.ts
+var ConsentPolicySchema = import_zod13.z.object({
+  country: import_zod13.z.string(),
+  marketing_consent_default: MarketingConsentDefaultEnumSchema
+});
+
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpRequestCreate.ts
 var import_mutation7 = __toESM(require("swr/mutation"), 1);
 
 // src/_api/generated/_cfg_accounts/schemas/OTPRequestResponse.ts
-var import_zod14 = require("zod");
+var import_zod16 = require("zod");
 
 // src/_api/generated/_cfg_accounts/schemas/WebmailLink.ts
-var import_zod13 = require("zod");
+var import_zod15 = require("zod");
 
 // src/_api/generated/_cfg_accounts/schemas/WebmailLinkProviderEnum.ts
-var import_zod12 = require("zod");
-var WebmailLinkProviderEnumSchema = import_zod12.z.enum(["gmail", "outlook", "yahoo", "icloud", "proton", "zoho", "aol", "fastmail", "gmx", "mailcom", "mail_ru", "yandex", "rambler", "qq", "netease", "sina", "aliyun", "naver", "daum", "web_de", "tonline", "seznam", "wp_pl", "o2_pl", "interia", "libero", "virgilio", "orange", "laposte", "free_fr", "sfr"]);
+var import_zod14 = require("zod");
+var WebmailLinkProviderEnumSchema = import_zod14.z.enum(["gmail", "outlook", "yahoo", "icloud", "proton", "zoho", "aol", "fastmail", "gmx", "mailcom", "mail_ru", "yandex", "rambler", "qq", "netease", "sina", "aliyun", "naver", "daum", "web_de", "tonline", "seznam", "wp_pl", "o2_pl", "interia", "libero", "virgilio", "orange", "laposte", "free_fr", "sfr"]);
 
 // src/_api/generated/_cfg_accounts/schemas/WebmailLink.ts
-var WebmailLinkSchema = import_zod13.z.object({
+var WebmailLinkSchema = import_zod15.z.object({
   provider: WebmailLinkProviderEnumSchema,
-  provider_name: import_zod13.z.string(),
-  url: import_zod13.z.string(),
-  is_search: import_zod13.z.boolean()
+  provider_name: import_zod15.z.string(),
+  url: import_zod15.z.string(),
+  is_search: import_zod15.z.boolean()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPRequestResponse.ts
-var OTPRequestResponseSchema = import_zod14.z.object({
-  message: import_zod14.z.string(),
+var OTPRequestResponseSchema = import_zod16.z.object({
+  message: import_zod16.z.string(),
   webmail: WebmailLinkSchema.nullable().optional()
 });
 
@@ -3960,52 +4003,52 @@ __name(useCfgAccountsOtpRequestCreate, "useCfgAccountsOtpRequestCreate");
 var import_mutation8 = __toESM(require("swr/mutation"), 1);
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts
-var import_zod17 = require("zod");
+var import_zod19 = require("zod");
 
 // src/_api/generated/_cfg_accounts/schemas/User.ts
-var import_zod16 = require("zod");
+var import_zod18 = require("zod");
 
 // src/_api/generated/_cfg_accounts/schemas/CentrifugoToken.ts
-var import_zod15 = require("zod");
-var CentrifugoTokenSchema = import_zod15.z.object({
-  token: import_zod15.z.string(),
-  centrifugo_url: import_zod15.z.string(),
-  expires_at: import_zod15.z.string().datetime({ offset: true }),
-  channels: import_zod15.z.array(import_zod15.z.string())
+var import_zod17 = require("zod");
+var CentrifugoTokenSchema = import_zod17.z.object({
+  token: import_zod17.z.string(),
+  centrifugo_url: import_zod17.z.string(),
+  expires_at: import_zod17.z.string().datetime({ offset: true }),
+  channels: import_zod17.z.array(import_zod17.z.string())
 });
 
 // src/_api/generated/_cfg_accounts/schemas/User.ts
-var UserSchema = import_zod16.z.object({
-  id: import_zod16.z.number().int(),
-  email: import_zod16.z.email(),
-  first_name: import_zod16.z.string().max(50).nullable().optional(),
-  last_name: import_zod16.z.string().max(50).nullable().optional(),
-  full_name: import_zod16.z.string(),
-  initials: import_zod16.z.string(),
-  display_username: import_zod16.z.string(),
-  company: import_zod16.z.string().max(100).nullable().optional(),
-  phone: import_zod16.z.string().max(20).nullable().optional(),
-  position: import_zod16.z.string().max(100).nullable().optional(),
-  language: import_zod16.z.string().max(10).nullable().optional(),
-  timezone: import_zod16.z.string().max(64).nullable().optional(),
-  avatar: import_zod16.z.string().nullable(),
-  is_staff: import_zod16.z.boolean(),
-  is_superuser: import_zod16.z.boolean(),
-  date_joined: import_zod16.z.string().datetime({ offset: true }),
-  last_login: import_zod16.z.string().datetime({ offset: true }).nullable(),
-  unanswered_messages_count: import_zod16.z.number().int().default(0),
+var UserSchema = import_zod18.z.object({
+  id: import_zod18.z.number().int(),
+  email: import_zod18.z.email(),
+  first_name: import_zod18.z.string().max(50).nullable().optional(),
+  last_name: import_zod18.z.string().max(50).nullable().optional(),
+  full_name: import_zod18.z.string(),
+  initials: import_zod18.z.string(),
+  display_username: import_zod18.z.string(),
+  company: import_zod18.z.string().max(100).nullable().optional(),
+  phone: import_zod18.z.string().max(20).nullable().optional(),
+  position: import_zod18.z.string().max(100).nullable().optional(),
+  language: import_zod18.z.string().max(10).nullable().optional(),
+  timezone: import_zod18.z.string().max(64).nullable().optional(),
+  avatar: import_zod18.z.string().nullable(),
+  is_staff: import_zod18.z.boolean(),
+  is_superuser: import_zod18.z.boolean(),
+  date_joined: import_zod18.z.string().datetime({ offset: true }),
+  last_login: import_zod18.z.string().datetime({ offset: true }).nullable(),
+  unanswered_messages_count: import_zod18.z.number().int().default(0),
   centrifugo: CentrifugoTokenSchema.nullable(),
-  api_key: import_zod16.z.string().nullable()
+  api_key: import_zod18.z.string().nullable()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts
-var OTPVerifyResponseSchema = import_zod17.z.object({
-  requires_2fa: import_zod17.z.boolean().default(false).optional(),
-  session_id: import_zod17.z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
-  refresh: import_zod17.z.string().nullable().optional(),
-  access: import_zod17.z.string().nullable().optional(),
+var OTPVerifyResponseSchema = import_zod19.z.object({
+  requires_2fa: import_zod19.z.boolean().default(false).optional(),
+  session_id: import_zod19.z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
+  refresh: import_zod19.z.string().nullable().optional(),
+  access: import_zod19.z.string().nullable().optional(),
   user: UserSchema.nullable().optional(),
-  should_prompt_2fa: import_zod17.z.boolean().optional()
+  should_prompt_2fa: import_zod19.z.boolean().optional()
 });
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpVerifyCreate.ts
@@ -4107,10 +4150,10 @@ __name(useCfgAccountsProfileAvatarCreate, "useCfgAccountsProfileAvatarCreate");
 var import_mutation10 = __toESM(require("swr/mutation"), 1);
 
 // src/_api/generated/_cfg_accounts/schemas/AccountDeleteResponse.ts
-var import_zod18 = require("zod");
-var AccountDeleteResponseSchema = import_zod18.z.object({
-  success: import_zod18.z.boolean(),
-  message: import_zod18.z.string()
+var import_zod20 = require("zod");
+var AccountDeleteResponseSchema = import_zod20.z.object({
+  success: import_zod20.z.boolean(),
+  message: import_zod20.z.string()
 });
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsProfilePartialPartialUpdate.ts
@@ -4165,7 +4208,7 @@ function useCfgAccountsProfilePartialUpdate(config) {
 __name(useCfgAccountsProfilePartialUpdate, "useCfgAccountsProfilePartialUpdate");
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsProfileRetrieve.ts
-var import_swr4 = __toESM(require("swr"), 1);
+var import_swr5 = __toESM(require("swr"), 1);
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsProfileUpdatePartialUpdate.ts
 var import_mutation13 = __toESM(require("swr/mutation"), 1);
@@ -4225,111 +4268,113 @@ var import_mutation15 = __toESM(require("swr/mutation"), 1);
 var import_mutation16 = __toESM(require("swr/mutation"), 1);
 
 // src/_api/generated/_cfg_accounts/schemas/TokenRefresh.ts
-var import_zod19 = require("zod");
-var TokenRefreshSchema = import_zod19.z.object({
-  access: import_zod19.z.string(),
-  refresh: import_zod19.z.string()
+var import_zod21 = require("zod");
+var TokenRefreshSchema = import_zod21.z.object({
+  access: import_zod21.z.string(),
+  refresh: import_zod21.z.string()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/APIKeyRequest.ts
-var import_zod20 = require("zod");
-var APIKeyRequestSchema = import_zod20.z.object({
-  key: import_zod20.z.string().min(1),
-  reissued_at: import_zod20.z.string().datetime({ offset: true }).nullable(),
-  created_at: import_zod20.z.string().datetime({ offset: true })
+var import_zod22 = require("zod");
+var APIKeyRequestSchema = import_zod22.z.object({
+  key: import_zod22.z.string().min(1),
+  reissued_at: import_zod22.z.string().datetime({ offset: true }).nullable(),
+  created_at: import_zod22.z.string().datetime({ offset: true })
 });
 
 // src/_api/generated/_cfg_accounts/schemas/APIKeyTestRequest.ts
-var import_zod21 = require("zod");
-var APIKeyTestRequestSchema = import_zod21.z.object({
-  key: import_zod21.z.string().min(1)
+var import_zod23 = require("zod");
+var APIKeyTestRequestSchema = import_zod23.z.object({
+  key: import_zod23.z.string().min(1)
 });
 
 // src/_api/generated/_cfg_accounts/schemas/CfgUserUpdateRequest.ts
-var import_zod22 = require("zod");
-var CfgUserUpdateRequestSchema = import_zod22.z.object({
-  first_name: import_zod22.z.string().max(50).optional(),
-  last_name: import_zod22.z.string().max(50).optional(),
-  company: import_zod22.z.string().max(100).optional(),
-  phone: import_zod22.z.string().max(20).optional(),
-  position: import_zod22.z.string().max(100).optional(),
-  language: import_zod22.z.string().max(10).optional(),
-  timezone: import_zod22.z.string().max(64).optional()
+var import_zod24 = require("zod");
+var CfgUserUpdateRequestSchema = import_zod24.z.object({
+  first_name: import_zod24.z.string().max(50).optional(),
+  last_name: import_zod24.z.string().max(50).optional(),
+  company: import_zod24.z.string().max(100).optional(),
+  phone: import_zod24.z.string().max(20).optional(),
+  position: import_zod24.z.string().max(100).optional(),
+  language: import_zod24.z.string().max(10).optional(),
+  timezone: import_zod24.z.string().max(64).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthAuthorizeRequestRequest.ts
-var import_zod23 = require("zod");
-var OAuthAuthorizeRequestRequestSchema = import_zod23.z.object({
-  redirect_uri: import_zod23.z.string().optional(),
-  source_url: import_zod23.z.string().optional()
+var import_zod25 = require("zod");
+var OAuthAuthorizeRequestRequestSchema = import_zod25.z.object({
+  redirect_uri: import_zod25.z.string().optional(),
+  source_url: import_zod25.z.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthCallbackRequestRequest.ts
-var import_zod24 = require("zod");
-var OAuthCallbackRequestRequestSchema = import_zod24.z.object({
-  code: import_zod24.z.string().min(10).max(500),
-  state: import_zod24.z.string().min(20).max(100),
-  redirect_uri: import_zod24.z.string().optional()
+var import_zod26 = require("zod");
+var OAuthCallbackRequestRequestSchema = import_zod26.z.object({
+  code: import_zod26.z.string().min(10).max(500),
+  state: import_zod26.z.string().min(20).max(100),
+  redirect_uri: import_zod26.z.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthDisconnectRequestRequest.ts
-var import_zod25 = require("zod");
-var OAuthDisconnectRequestRequestSchema = import_zod25.z.object({
+var import_zod27 = require("zod");
+var OAuthDisconnectRequestRequestSchema = import_zod27.z.object({
   provider: OAuthProviderEnumSchema
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthError.ts
-var import_zod26 = require("zod");
-var OAuthErrorSchema = import_zod26.z.object({
-  error: import_zod26.z.string(),
-  error_description: import_zod26.z.string().optional()
+var import_zod28 = require("zod");
+var OAuthErrorSchema = import_zod28.z.object({
+  error: import_zod28.z.string(),
+  error_description: import_zod28.z.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPErrorResponse.ts
-var import_zod27 = require("zod");
-var OTPErrorResponseSchema = import_zod27.z.object({
-  error: import_zod27.z.string(),
-  error_code: import_zod27.z.string().nullable().optional(),
-  retry_after: import_zod27.z.number().int().nullable().optional()
+var import_zod29 = require("zod");
+var OTPErrorResponseSchema = import_zod29.z.object({
+  error: import_zod29.z.string(),
+  error_code: import_zod29.z.string().nullable().optional(),
+  retry_after: import_zod29.z.number().int().nullable().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPRequestRequest.ts
-var import_zod28 = require("zod");
-var OTPRequestRequestSchema = import_zod28.z.object({
-  identifier: import_zod28.z.string().min(1),
-  source_url: import_zod28.z.string().optional()
+var import_zod30 = require("zod");
+var OTPRequestRequestSchema = import_zod30.z.object({
+  identifier: import_zod30.z.string().min(1),
+  source_url: import_zod30.z.string().optional(),
+  marketing_consent: import_zod30.z.boolean().nullable().optional(),
+  consent_disclosure_version: import_zod30.z.string().max(64).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyRequest.ts
-var import_zod29 = require("zod");
-var OTPVerifyRequestSchema = import_zod29.z.object({
-  identifier: import_zod29.z.string().min(1),
-  otp: import_zod29.z.string().min(4).max(4),
-  source_url: import_zod29.z.string().optional()
+var import_zod31 = require("zod");
+var OTPVerifyRequestSchema = import_zod31.z.object({
+  identifier: import_zod31.z.string().min(1),
+  otp: import_zod31.z.string().min(4).max(4),
+  source_url: import_zod31.z.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/PatchedCfgUserUpdateRequest.ts
-var import_zod30 = require("zod");
-var PatchedCfgUserUpdateRequestSchema = import_zod30.z.object({
-  first_name: import_zod30.z.string().max(50).optional(),
-  last_name: import_zod30.z.string().max(50).optional(),
-  company: import_zod30.z.string().max(100).optional(),
-  phone: import_zod30.z.string().max(20).optional(),
-  position: import_zod30.z.string().max(100).optional(),
-  language: import_zod30.z.string().max(10).optional(),
-  timezone: import_zod30.z.string().max(64).optional()
+var import_zod32 = require("zod");
+var PatchedCfgUserUpdateRequestSchema = import_zod32.z.object({
+  first_name: import_zod32.z.string().max(50).optional(),
+  last_name: import_zod32.z.string().max(50).optional(),
+  company: import_zod32.z.string().max(100).optional(),
+  phone: import_zod32.z.string().max(20).optional(),
+  position: import_zod32.z.string().max(100).optional(),
+  language: import_zod32.z.string().max(10).optional(),
+  timezone: import_zod32.z.string().max(64).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/TokenBlacklistRequest.ts
-var import_zod31 = require("zod");
-var TokenBlacklistRequestSchema = import_zod31.z.object({
-  refresh: import_zod31.z.string().min(1)
+var import_zod33 = require("zod");
+var TokenBlacklistRequestSchema = import_zod33.z.object({
+  refresh: import_zod33.z.string().min(1)
 });
 
 // src/_api/generated/_cfg_accounts/schemas/TokenRefreshRequest.ts
-var import_zod32 = require("zod");
-var TokenRefreshRequestSchema = import_zod32.z.object({
-  refresh: import_zod32.z.string().min(1)
+var import_zod34 = require("zod");
+var TokenRefreshRequestSchema = import_zod34.z.object({
+  refresh: import_zod34.z.string().min(1)
 });
 
 // src/auth/context/AccountsContext.tsx
@@ -4584,13 +4629,20 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     }
   }, [loadCurrentProfile, router]);
   const requestOTP = (0, import_react16.useCallback)(
-    async (identifier, sourceUrl) => {
+    async (identifier, sourceUrl, consent) => {
       auth.clearSession();
       try {
-        const result = await accountsRef.current.requestOTP({
+        const body = {
           identifier,
-          source_url: sourceUrl
-        });
+          source_url: sourceUrl,
+          // Absent when the consuming app didn't enable the opt-in checkbox —
+          // the backend treats absent/null as "not asked".
+          ...consent && {
+            marketing_consent: consent.marketingConsent,
+            consent_disclosure_version: consent.disclosureVersion
+          }
+        };
+        const result = await accountsRef.current.requestOTP(body);
         Analytics.event("auth_otp_request" /* AUTH_OTP_REQUEST */, {
           category: "auth" /* AUTH */,
           label: "email"