@djangocfg/api 2.1.483 → 2.1.486

package/dist/auth.cjs

@@ -228,8 +228,23 @@ var cookieBackend = {
     }
   }
 };
-var _storage = localStorageBackend;
-var _storageMode = "localStorage";
+function backendFor(mode) {
+  return mode === "cookie" ? cookieBackend : mode === "sessionStorage" ? sessionStorageBackend : localStorageBackend;
+}
+__name(backendFor, "backendFor");
+var STORAGE_MODE_KEY = "cfg.access_token.storage_mode";
+function readPersistedMode() {
+  if (!isBrowser) return "localStorage";
+  try {
+    const raw = window.localStorage.getItem(STORAGE_MODE_KEY);
+    return raw === "sessionStorage" || raw === "cookie" || raw === "localStorage" ? raw : "localStorage";
+  } catch {
+    return "localStorage";
+  }
+}
+__name(readPersistedMode, "readPersistedMode");
+var _storageMode = readPersistedMode();
+var _storage = backendFor(_storageMode);
 function detectLocale() {
   try {
     if (typeof document !== "undefined") {
@@ -385,7 +400,13 @@ var auth = {
   },
   setStorageMode(mode) {
     _storageMode = mode;
-    _storage = mode === "cookie" ? cookieBackend : mode === "sessionStorage" ? sessionStorageBackend : localStorageBackend;
+    _storage = backendFor(mode);
+    if (isBrowser) {
+      try {
+        window.localStorage.setItem(STORAGE_MODE_KEY, mode);
+      } catch {
+      }
+    }
     notifySessionChanged();
   },
   // ── Bearer token ──────────────────────────────────────────────────
@@ -404,8 +425,18 @@ var auth = {
     notifySessionChanged();
   },
   clearTokens() {
-    _storage.set(ACCESS_KEY, null);
-    _storage.set(REFRESH_KEY, null);
+    for (const backend of [localStorageBackend, sessionStorageBackend, cookieBackend]) {
+      backend.set(ACCESS_KEY, null);
+      backend.set(REFRESH_KEY, null);
+    }
+    _storageMode = "localStorage";
+    _storage = localStorageBackend;
+    if (isBrowser) {
+      try {
+        window.localStorage.removeItem(STORAGE_MODE_KEY);
+      } catch {
+      }
+    }
     notifySessionChanged();
   },
   /** Session-aware: token PRESENT and not past its `exp` (or a live refresh
@@ -4416,6 +4447,17 @@ var TokenRefreshRequestSchema = import_zod34.z.object({
 
 // src/auth/context/AccountsContext.tsx
 var import_jsx_runtime = require("react/jsx-runtime");
+function hasApiOrigin() {
+  try {
+    if (typeof process === "undefined" || !process.env) return false;
+    if (process.env.NEXT_PUBLIC_STATIC_BUILD === "true") return true;
+    if (process.env.NEXT_PUBLIC_API_PROXY_URL !== void 0) return true;
+    return Boolean(process.env.NEXT_PUBLIC_API_URL);
+  } catch {
+    return false;
+  }
+}
+__name(hasApiOrigin, "hasApiOrigin");
 var AccountsContext = (0, import_react15.createContext)(void 0);
 function AccountsProvider({ children }) {
   const [profile, setProfile] = (0, import_react15.useState)(() => {
@@ -4439,6 +4481,10 @@ function AccountsProvider({ children }) {
   const { trigger: triggerOtpVerify } = useCfgAccountsOtpVerifyCreate();
   const refreshProfile = (0, import_react15.useCallback)(async (options) => {
     const { callerId, force } = options || {};
+    if (!hasApiOrigin()) {
+      authLogger.debug(`No API origin configured, skipping profile fetch (caller: ${callerId})`);
+      return void 0;
+    }
     if (isLoadingRef.current) {
       authLogger.debug(`Profile loading in progress, skipping (caller: ${callerId})`);
       return profileRef.current;