@djangocfg/api 2.1.482 → 2.1.483

package/dist/clients.d.cts

@@ -723,6 +723,10 @@ type OAuthCallbackRequestRequest = {
      * Same redirect_uri used in authorize request. If not provided, uses config's site_url + callback_path
      */
     redirect_uri?: string;
+    /**
+     * Keep this browser signed in for 30 days
+     */
+    remember_me?: boolean;
 };
 /**
  * Serializer for OAuth connection info (user-facing).
@@ -846,6 +850,10 @@ type OAuthTokenResponse = {
      * True if user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
+    /**
+     * Whether this login should persist across browser restarts
+     */
+    persistent_session?: boolean;
 };
 /**
  * Typed error response for OTP operations.
@@ -921,6 +929,10 @@ type OtpVerifyRequest = {
      * Source URL for tracking login (e.g., https://my.djangocfg.com)
      */
     source_url?: string;
+    /**
+     * Keep this browser signed in for 30 days
+     */
+    remember_me?: boolean;
 };
 /**
  * OTP verification response.
@@ -960,6 +972,10 @@ type OtpVerifyResponse = {
      * Whether user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
+    /**
+     * Whether this login should persist across browser restarts
+     */
+    persistent_session?: boolean;
 };
 /**
  * Serializer for updating user profile.
@@ -1150,6 +1166,10 @@ type VerifyResponse = {
      * User profile data
      */
     user: TotpVerifyUser;
+    /**
+     * Whether this login should persist across browser restarts
+     */
+    persistent_session: boolean;
     /**
      * Number of remaining backup codes (if backup code was used)
      */
@@ -1807,7 +1827,7 @@ declare class CfgAccountsOauth {
      */
     static cfgAccountsOauthProvidersRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthProvidersRetrieveData, ThrowOnError>): RequestResult<CfgAccountsOauthProvidersRetrieveResponses, unknown, ThrowOnError>;
 }
-declare class CfgAccounts {
+declare class CfgAccountsOtp {
     /**
      * Marketing-consent checkbox policy for the caller's jurisdiction.
      *
@@ -1998,7 +2018,7 @@ declare class API$2 {
     readonly logger: APILogger;
     readonly cfgAccountsApiKey: typeof CfgAccountsApiKey;
     readonly cfgAccountsOauth: typeof CfgAccountsOauth;
-    readonly cfgAccounts: typeof CfgAccounts;
+    readonly cfgAccountsOtp: typeof CfgAccountsOtp;
     readonly cfgAccountsProfile: typeof CfgAccountsProfile;
     readonly cfgAccountsAuth: typeof CfgAccountsAuth;
     constructor(_baseUrl?: string, opts?: APIOptions$2);

package/dist/clients.d.ts

@@ -723,6 +723,10 @@ type OAuthCallbackRequestRequest = {
      * Same redirect_uri used in authorize request. If not provided, uses config's site_url + callback_path
      */
     redirect_uri?: string;
+    /**
+     * Keep this browser signed in for 30 days
+     */
+    remember_me?: boolean;
 };
 /**
  * Serializer for OAuth connection info (user-facing).
@@ -846,6 +850,10 @@ type OAuthTokenResponse = {
      * True if user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
+    /**
+     * Whether this login should persist across browser restarts
+     */
+    persistent_session?: boolean;
 };
 /**
  * Typed error response for OTP operations.
@@ -921,6 +929,10 @@ type OtpVerifyRequest = {
      * Source URL for tracking login (e.g., https://my.djangocfg.com)
      */
     source_url?: string;
+    /**
+     * Keep this browser signed in for 30 days
+     */
+    remember_me?: boolean;
 };
 /**
  * OTP verification response.
@@ -960,6 +972,10 @@ type OtpVerifyResponse = {
      * Whether user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
+    /**
+     * Whether this login should persist across browser restarts
+     */
+    persistent_session?: boolean;
 };
 /**
  * Serializer for updating user profile.
@@ -1150,6 +1166,10 @@ type VerifyResponse = {
      * User profile data
      */
     user: TotpVerifyUser;
+    /**
+     * Whether this login should persist across browser restarts
+     */
+    persistent_session: boolean;
     /**
      * Number of remaining backup codes (if backup code was used)
      */
@@ -1807,7 +1827,7 @@ declare class CfgAccountsOauth {
      */
     static cfgAccountsOauthProvidersRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOauthProvidersRetrieveData, ThrowOnError>): RequestResult<CfgAccountsOauthProvidersRetrieveResponses, unknown, ThrowOnError>;
 }
-declare class CfgAccounts {
+declare class CfgAccountsOtp {
     /**
      * Marketing-consent checkbox policy for the caller's jurisdiction.
      *
@@ -1998,7 +2018,7 @@ declare class API$2 {
     readonly logger: APILogger;
     readonly cfgAccountsApiKey: typeof CfgAccountsApiKey;
     readonly cfgAccountsOauth: typeof CfgAccountsOauth;
-    readonly cfgAccounts: typeof CfgAccounts;
+    readonly cfgAccountsOtp: typeof CfgAccountsOtp;
     readonly cfgAccountsProfile: typeof CfgAccountsProfile;
     readonly cfgAccountsAuth: typeof CfgAccountsAuth;
     constructor(_baseUrl?: string, opts?: APIOptions$2);

package/dist/clients.mjs

@@ -89,6 +89,24 @@ var localStorageBackend = {
     }
   }
 };
+var sessionStorageBackend = {
+  get(key) {
+    if (!isBrowser) return null;
+    try {
+      return window.sessionStorage.getItem(key);
+    } catch {
+      return null;
+    }
+  },
+  set(key, value) {
+    if (!isBrowser) return;
+    try {
+      if (value === null) window.sessionStorage.removeItem(key);
+      else window.sessionStorage.setItem(key, value);
+    } catch {
+    }
+  }
+};
 var COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
 var cookieBackend = {
   get(key) {
@@ -96,7 +114,8 @@ var cookieBackend = {
     try {
       const re = new RegExp(`(?:^|;\\s*)${encodeURIComponent(key)}=([^;]*)`);
       const m = document.cookie.match(re);
-      return m ? decodeURIComponent(m[1]) : null;
+      const value = m?.[1];
+      return value === void 0 ? null : decodeURIComponent(value);
     } catch {
       return null;
     }
@@ -122,7 +141,8 @@ function detectLocale() {
   try {
     if (typeof document !== "undefined") {
       const m = document.cookie.match(/(?:^|;\s*)NEXT_LOCALE=([^;]*)/);
-      if (m) return decodeURIComponent(m[1]);
+      const locale = m?.[1];
+      if (locale !== void 0) return decodeURIComponent(locale);
     }
     if (typeof navigator !== "undefined" && navigator.language) {
       return navigator.language;
@@ -272,7 +292,7 @@ var auth = {
   },
   setStorageMode(mode) {
     _storageMode = mode;
-    _storage = mode === "cookie" ? cookieBackend : localStorageBackend;
+    _storage = mode === "cookie" ? cookieBackend : mode === "sessionStorage" ? sessionStorageBackend : localStorageBackend;
     notifySessionChanged();
   },
   // ── Bearer token ──────────────────────────────────────────────────
@@ -536,7 +556,7 @@ __name(_getDpopKeyPair, "_getDpopKeyPair");
 function _b64urlFromBytes(bytes) {
   const arr = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);
   let s = "";
-  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i]);
+  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i] ?? 0);
   return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 __name(_b64urlFromBytes, "_b64urlFromBytes");
@@ -554,7 +574,8 @@ async function _makeDpopProof(method, url) {
     const pair = await _getDpopKeyPair();
     const jwk = await _publicJwk(pair.publicKey);
     const header = { typ: "dpop+jwt", alg: "ES256", jwk };
-    const htu = url.split("#")[0].split("?")[0];
+    const withoutFragment = url.split("#")[0] ?? url;
+    const htu = withoutFragment.split("?")[0] ?? withoutFragment;
     const jti = crypto.randomUUID && crypto.randomUUID() || _b64urlFromBytes(crypto.getRandomValues(new Uint8Array(16)));
     const payload = { htm: method.toUpperCase(), htu, iat: Math.floor(Date.now() / 1e3), jti };
     const signingInput = `${_b64urlFromString(JSON.stringify(header))}.${_b64urlFromString(JSON.stringify(payload))}`;
@@ -1744,9 +1765,9 @@ var CfgAccountsOauth = class {
     return (options?.client ?? client).get({ url: "/cfg/accounts/oauth/providers/", ...options });
   }
 };
-var CfgAccounts = class {
+var CfgAccountsOtp = class {
   static {
-    __name(this, "CfgAccounts");
+    __name(this, "CfgAccountsOtp");
   }
   /**
    * Marketing-consent checkbox policy for the caller's jurisdiction.
@@ -2214,7 +2235,7 @@ var API = class {
   logger;
   cfgAccountsApiKey = CfgAccountsApiKey;
   cfgAccountsOauth = CfgAccountsOauth;
-  cfgAccounts = CfgAccounts;
+  cfgAccountsOtp = CfgAccountsOtp;
   cfgAccountsProfile = CfgAccountsProfile;
   cfgAccountsAuth = CfgAccountsAuth;
   constructor(_baseUrl, opts = {}) {