@djangocfg/api 2.1.486 → 2.1.487

package/dist/auth.mjs

@@ -162,18 +162,7 @@ function backendFor(mode) {
   return mode === "cookie" ? cookieBackend : mode === "sessionStorage" ? sessionStorageBackend : localStorageBackend;
 }
 __name(backendFor, "backendFor");
-var STORAGE_MODE_KEY = "cfg.access_token.storage_mode";
-function readPersistedMode() {
-  if (!isBrowser) return "localStorage";
-  try {
-    const raw = window.localStorage.getItem(STORAGE_MODE_KEY);
-    return raw === "sessionStorage" || raw === "cookie" || raw === "localStorage" ? raw : "localStorage";
-  } catch {
-    return "localStorage";
-  }
-}
-__name(readPersistedMode, "readPersistedMode");
-var _storageMode = readPersistedMode();
+var _storageMode = "localStorage";
 var _storage = backendFor(_storageMode);
 function detectLocale() {
   try {
@@ -328,15 +317,12 @@ var auth = {
   getStorageMode() {
     return _storageMode;
   },
+  /** Relocate the session backend. Call once at bootstrap, before any sign-in:
+   *  the mode is module state and resets on reload, so a later switch strands
+   *  whatever was written after it. */
   setStorageMode(mode) {
     _storageMode = mode;
     _storage = backendFor(mode);
-    if (isBrowser) {
-      try {
-        window.localStorage.setItem(STORAGE_MODE_KEY, mode);
-      } catch {
-      }
-    }
     notifySessionChanged();
   },
   // ── Bearer token ──────────────────────────────────────────────────
@@ -359,14 +345,6 @@ var auth = {
       backend.set(ACCESS_KEY, null);
       backend.set(REFRESH_KEY, null);
     }
-    _storageMode = "localStorage";
-    _storage = localStorageBackend;
-    if (isBrowser) {
-      try {
-        window.localStorage.removeItem(STORAGE_MODE_KEY);
-      } catch {
-      }
-    }
     notifySessionChanged();
   },
   /** Session-aware: token PRESENT and not past its `exp` (or a live refresh
@@ -2738,7 +2716,6 @@ var useTwoFactorVerify = /* @__PURE__ */ __name((options = {}) => {
     setError(null);
   }, []);
   const handleSuccess = useCallback4((response) => {
-    auth.setStorageMode(response.persistent_session ? "localStorage" : "sessionStorage");
     auth.setSession({ access: response.access_token, refresh: response.refresh_token });
     if (response.warning) {
       setWarning(response.warning);
@@ -3230,7 +3207,6 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
         throw new Error("Invalid response from OAuth callback");
       }
       authLogger.info("GitHub OAuth successful, user:", response.user);
-      auth.setStorageMode(response.persistent_session ? "localStorage" : "sessionStorage");
       auth.setSession({ access: response.access, refresh: response.refresh });
       Analytics.event("auth_login_success" /* AUTH_LOGIN_SUCCESS */, {
         category: "auth" /* AUTH */,
@@ -4473,7 +4449,6 @@ function AccountsProvider({ children }) {
       return result;
     }
     if (result.access && result.refresh) {
-      auth.setStorageMode(result.persistent_session ? "localStorage" : "sessionStorage");
       auth.setSession({ access: result.access, refresh: result.refresh });
       try {
         await refreshProfile({ callerId: "verifyOTP", force: true });