@djangocfg/api 2.1.482 → 2.1.484

package/dist/clients.cjs

@@ -117,6 +117,24 @@ var localStorageBackend = {
     }
   }
 };
+var sessionStorageBackend = {
+  get(key) {
+    if (!isBrowser) return null;
+    try {
+      return window.sessionStorage.getItem(key);
+    } catch {
+      return null;
+    }
+  },
+  set(key, value) {
+    if (!isBrowser) return;
+    try {
+      if (value === null) window.sessionStorage.removeItem(key);
+      else window.sessionStorage.setItem(key, value);
+    } catch {
+    }
+  }
+};
 var COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
 var cookieBackend = {
   get(key) {
@@ -124,7 +142,8 @@ var cookieBackend = {
     try {
       const re = new RegExp(`(?:^|;\\s*)${encodeURIComponent(key)}=([^;]*)`);
       const m = document.cookie.match(re);
-      return m ? decodeURIComponent(m[1]) : null;
+      const value = m?.[1];
+      return value === void 0 ? null : decodeURIComponent(value);
     } catch {
       return null;
     }
@@ -150,7 +169,8 @@ function detectLocale() {
   try {
     if (typeof document !== "undefined") {
       const m = document.cookie.match(/(?:^|;\s*)NEXT_LOCALE=([^;]*)/);
-      if (m) return decodeURIComponent(m[1]);
+      const locale = m?.[1];
+      if (locale !== void 0) return decodeURIComponent(locale);
     }
     if (typeof navigator !== "undefined" && navigator.language) {
       return navigator.language;
@@ -300,7 +320,7 @@ var auth = {
   },
   setStorageMode(mode) {
     _storageMode = mode;
-    _storage = mode === "cookie" ? cookieBackend : localStorageBackend;
+    _storage = mode === "cookie" ? cookieBackend : mode === "sessionStorage" ? sessionStorageBackend : localStorageBackend;
     notifySessionChanged();
   },
   // ── Bearer token ──────────────────────────────────────────────────
@@ -564,7 +584,7 @@ __name(_getDpopKeyPair, "_getDpopKeyPair");
 function _b64urlFromBytes(bytes) {
   const arr = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);
   let s = "";
-  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i]);
+  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i] ?? 0);
   return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 __name(_b64urlFromBytes, "_b64urlFromBytes");
@@ -582,7 +602,8 @@ async function _makeDpopProof(method, url) {
     const pair = await _getDpopKeyPair();
     const jwk = await _publicJwk(pair.publicKey);
     const header = { typ: "dpop+jwt", alg: "ES256", jwk };
-    const htu = url.split("#")[0].split("?")[0];
+    const withoutFragment = url.split("#")[0] ?? url;
+    const htu = withoutFragment.split("?")[0] ?? withoutFragment;
     const jti = crypto.randomUUID && crypto.randomUUID() || _b64urlFromBytes(crypto.getRandomValues(new Uint8Array(16)));
     const payload = { htm: method.toUpperCase(), htu, iat: Math.floor(Date.now() / 1e3), jti };
     const signingInput = `${_b64urlFromString(JSON.stringify(header))}.${_b64urlFromString(JSON.stringify(payload))}`;
@@ -1772,9 +1793,9 @@ var CfgAccountsOauth = class {
     return (options?.client ?? client).get({ url: "/cfg/accounts/oauth/providers/", ...options });
   }
 };
-var CfgAccounts = class {
+var CfgAccountsOtp = class {
   static {
-    __name(this, "CfgAccounts");
+    __name(this, "CfgAccountsOtp");
   }
   /**
    * Marketing-consent checkbox policy for the caller's jurisdiction.
@@ -2242,7 +2263,7 @@ var API = class {
   logger;
   cfgAccountsApiKey = CfgAccountsApiKey;
   cfgAccountsOauth = CfgAccountsOauth;
-  cfgAccounts = CfgAccounts;
+  cfgAccountsOtp = CfgAccountsOtp;
   cfgAccountsProfile = CfgAccountsProfile;
   cfgAccountsAuth = CfgAccountsAuth;
   constructor(_baseUrl, opts = {}) {