@djangocfg/api 2.1.484 → 2.1.486

package/dist/auth.cjs

@@ -228,8 +228,23 @@ var cookieBackend = {
     }
   }
 };
-var _storage = localStorageBackend;
-var _storageMode = "localStorage";
+function backendFor(mode) {
+  return mode === "cookie" ? cookieBackend : mode === "sessionStorage" ? sessionStorageBackend : localStorageBackend;
+}
+__name(backendFor, "backendFor");
+var STORAGE_MODE_KEY = "cfg.access_token.storage_mode";
+function readPersistedMode() {
+  if (!isBrowser) return "localStorage";
+  try {
+    const raw = window.localStorage.getItem(STORAGE_MODE_KEY);
+    return raw === "sessionStorage" || raw === "cookie" || raw === "localStorage" ? raw : "localStorage";
+  } catch {
+    return "localStorage";
+  }
+}
+__name(readPersistedMode, "readPersistedMode");
+var _storageMode = readPersistedMode();
+var _storage = backendFor(_storageMode);
 function detectLocale() {
   try {
     if (typeof document !== "undefined") {
@@ -385,7 +400,13 @@ var auth = {
   },
   setStorageMode(mode) {
     _storageMode = mode;
-    _storage = mode === "cookie" ? cookieBackend : mode === "sessionStorage" ? sessionStorageBackend : localStorageBackend;
+    _storage = backendFor(mode);
+    if (isBrowser) {
+      try {
+        window.localStorage.setItem(STORAGE_MODE_KEY, mode);
+      } catch {
+      }
+    }
     notifySessionChanged();
   },
   // ── Bearer token ──────────────────────────────────────────────────
@@ -404,8 +425,18 @@ var auth = {
     notifySessionChanged();
   },
   clearTokens() {
-    _storage.set(ACCESS_KEY, null);
-    _storage.set(REFRESH_KEY, null);
+    for (const backend of [localStorageBackend, sessionStorageBackend, cookieBackend]) {
+      backend.set(ACCESS_KEY, null);
+      backend.set(REFRESH_KEY, null);
+    }
+    _storageMode = "localStorage";
+    _storage = localStorageBackend;
+    if (isBrowser) {
+      try {
+        window.localStorage.removeItem(STORAGE_MODE_KEY);
+      } catch {
+      }
+    }
     notifySessionChanged();
   },
   /** Session-aware: token PRESENT and not past its `exp` (or a live refresh