@djangocfg/api 2.1.482 → 2.1.483

package/dist/hooks.cjs

@@ -920,6 +920,24 @@ var localStorageBackend = {
     }
   }
 };
+var sessionStorageBackend = {
+  get(key) {
+    if (!isBrowser) return null;
+    try {
+      return window.sessionStorage.getItem(key);
+    } catch {
+      return null;
+    }
+  },
+  set(key, value) {
+    if (!isBrowser) return;
+    try {
+      if (value === null) window.sessionStorage.removeItem(key);
+      else window.sessionStorage.setItem(key, value);
+    } catch {
+    }
+  }
+};
 var COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
 var cookieBackend = {
   get(key) {
@@ -927,7 +945,8 @@ var cookieBackend = {
     try {
       const re = new RegExp(`(?:^|;\\s*)${encodeURIComponent(key)}=([^;]*)`);
       const m = document.cookie.match(re);
-      return m ? decodeURIComponent(m[1]) : null;
+      const value = m?.[1];
+      return value === void 0 ? null : decodeURIComponent(value);
     } catch {
       return null;
     }
@@ -953,7 +972,8 @@ function detectLocale() {
   try {
     if (typeof document !== "undefined") {
       const m = document.cookie.match(/(?:^|;\s*)NEXT_LOCALE=([^;]*)/);
-      if (m) return decodeURIComponent(m[1]);
+      const locale = m?.[1];
+      if (locale !== void 0) return decodeURIComponent(locale);
     }
     if (typeof navigator !== "undefined" && navigator.language) {
       return navigator.language;
@@ -1103,7 +1123,7 @@ var auth = {
   },
   setStorageMode(mode) {
     _storageMode = mode;
-    _storage = mode === "cookie" ? cookieBackend : localStorageBackend;
+    _storage = mode === "cookie" ? cookieBackend : mode === "sessionStorage" ? sessionStorageBackend : localStorageBackend;
     notifySessionChanged();
   },
   // ── Bearer token ──────────────────────────────────────────────────
@@ -1367,7 +1387,7 @@ __name(_getDpopKeyPair, "_getDpopKeyPair");
 function _b64urlFromBytes(bytes) {
   const arr = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);
   let s = "";
-  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i]);
+  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i] ?? 0);
   return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 __name(_b64urlFromBytes, "_b64urlFromBytes");
@@ -1385,7 +1405,8 @@ async function _makeDpopProof(method, url) {
     const pair = await _getDpopKeyPair();
     const jwk = await _publicJwk(pair.publicKey);
     const header = { typ: "dpop+jwt", alg: "ES256", jwk };
-    const htu = url.split("#")[0].split("?")[0];
+    const withoutFragment = url.split("#")[0] ?? url;
+    const htu = withoutFragment.split("?")[0] ?? withoutFragment;
     const jti = crypto.randomUUID && crypto.randomUUID() || _b64urlFromBytes(crypto.getRandomValues(new Uint8Array(16)));
     const payload = { htm: method.toUpperCase(), htu, iat: Math.floor(Date.now() / 1e3), jti };
     const signingInput = `${_b64urlFromString(JSON.stringify(header))}.${_b64urlFromString(JSON.stringify(payload))}`;
@@ -1586,9 +1607,9 @@ var CfgAccountsApiKey = class {
     });
   }
 };
-var CfgAccounts = class {
+var CfgAccountsOtp = class {
   static {
-    __name(this, "CfgAccounts");
+    __name(this, "CfgAccountsOtp");
   }
   /**
    * Marketing-consent checkbox policy for the caller's jurisdiction.
@@ -1959,7 +1980,7 @@ function useCfgAccountsOtpConsentPolicyRetrieve(args, config) {
   return (0, import_swr2.default)(
     key,
     async () => {
-      const res = await CfgAccounts.cfgAccountsOtpConsentPolicyRetrieve({ ...args ?? {}, throwOnError: true });
+      const res = await CfgAccountsOtp.cfgAccountsOtpConsentPolicyRetrieve({ ...args ?? {}, throwOnError: true });
       const data = res.data;
       const parsed = ConsentPolicySchema.safeParse(data);
       if (!parsed.success) {