@djangocfg/api 2.1.583 → 2.1.585

package/dist/auth.d.cts

@@ -88,10 +88,6 @@ type OAuthTokenResponse = {
      * True if user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
-    /**
-     * Whether this login should persist across browser restarts
-     */
-    persistent_session?: boolean;
 };
 /**
  * Serializer for OTP request.
@@ -148,10 +144,6 @@ type OtpVerifyRequest = {
      * Source URL for tracking login (e.g., https://my.djangocfg.com)
      */
     source_url?: string;
-    /**
-     * Keep this browser signed in for 30 days
-     */
-    remember_me?: boolean;
 };
 /**
  * OTP verification response.
@@ -191,10 +183,18 @@ type OtpVerifyResponse = {
      * Whether user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
-    /**
-     * Whether this login should persist across browser restarts
-     */
-    persistent_session?: boolean;
+};
+/**
+ * Validate email+password against live accounts only.
+ *
+ * Subclasses SimpleJWT so the field/validation contract stays theirs, but
+ * replaces ``validate()`` — the token pair itself is minted by the view via
+ * ``mint_tokens_for_request`` so the DPoP binding and token
+ * lifetime match OTP, OAuth and TOTP exactly.
+ */
+type PasswordLoginRequest = {
+    email: string;
+    password: string;
 };
 /**
  * Password-login response.
@@ -227,10 +227,6 @@ type PasswordLoginResponse = {
      * Whether user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
-    /**
-     * Whether this login should persist across browser restarts
-     */
-    persistent_session?: boolean;
 };
 /**
  * Serializer for updating user profile.
@@ -456,22 +452,6 @@ declare enum WebmailLinkProviderEnum {
     FREE_FR = "free_fr",
     SFR = "sfr"
 }
-/**
- * Validate email+password against live accounts only.
- *
- * Subclasses SimpleJWT so the field/validation contract stays theirs, but
- * replaces ``validate()`` — the token pair itself is minted by the view via
- * ``mint_tokens_for_request`` so the DPoP binding and remembered-session
- * lifetime match OTP, OAuth and TOTP exactly.
- */
-type PasswordLoginRequestWritable = {
-    /**
-     * Keep this browser signed in for 30 days
-     */
-    remember_me?: boolean;
-    email: string;
-    password: string;
-};
 
 /**
  * Auth Form Types
@@ -506,8 +486,6 @@ interface PasswordLoginOptions {
     redirectUrl?: string;
     /** Caller owns ALL navigation for this login, including the 2FA continuation. */
     skipRedirect?: boolean;
-    /** Ask the server for a 30-day session instead of the default lifetime. */
-    rememberMe?: boolean;
 }
 /**
  * Result of a password login.
@@ -547,8 +525,6 @@ interface AuthFormState {
      * jurisdiction-aware default on mount.
      */
     marketingConsent: boolean | null;
-    /** Keep this browser signed in for 30 days after successful verification. */
-    rememberMe: boolean;
     /** Current form step */
     step: AuthStep;
     /** Error message */
@@ -572,7 +548,6 @@ interface AuthFormStateHandlers {
     setPassword: (password: string) => void;
     setAcceptedTerms: (accepted: boolean) => void;
     setMarketingConsent: (consent: boolean | null) => void;
-    setRememberMe: (rememberMe: boolean) => void;
     setError: (error: string) => void;
     clearError: () => void;
     setStep: (step: AuthStep) => void;
@@ -664,7 +639,7 @@ interface AuthContextType {
     saveEmail: (email: string) => void;
     clearSavedEmail: () => void;
     requestOTP: (identifier: string, sourceUrl?: string, consent?: OTPRequestConsent) => Promise<OTPRequestResult>;
-    verifyOTP: (identifier: string, otpCode: string, sourceUrl?: string, redirectUrl?: string, skipRedirect?: boolean, rememberMe?: boolean) => Promise<{
+    verifyOTP: (identifier: string, otpCode: string, sourceUrl?: string, redirectUrl?: string, skipRedirect?: boolean) => Promise<{
         success: boolean;
         message: string;
         user?: UserProfile;
@@ -725,7 +700,7 @@ interface AccountsContextValue {
     }) => Promise<User | undefined>;
     requestOTP: (data: OtpRequestRequest) => Promise<OtpRequestResponse>;
     verifyOTP: (data: OtpVerifyRequest) => Promise<OtpVerifyResponse>;
-    loginWithPassword: (data: PasswordLoginRequestWritable) => Promise<PasswordLoginResponse>;
+    loginWithPassword: (data: PasswordLoginRequest) => Promise<PasswordLoginResponse>;
     logout: () => void;
 }
 interface AccountsProviderProps {
@@ -859,8 +834,6 @@ declare const useAutoAuth: (options?: UseAutoAuthOptions) => {
 type OAuthUser = NonNullable<OAuthTokenResponse['user']>;
 interface UseGithubAuthOptions {
     sourceUrl?: string;
-    /** Keep the completed browser session for 30 days. */
-    rememberMe?: boolean;
     /**
      * The OAuth endpoint's OpenAPI schema types `user` as a free-form object, so
      * this is what the server actually promises — not a `User`. Narrow it at the

package/dist/auth.d.ts

@@ -88,10 +88,6 @@ type OAuthTokenResponse = {
      * True if user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
-    /**
-     * Whether this login should persist across browser restarts
-     */
-    persistent_session?: boolean;
 };
 /**
  * Serializer for OTP request.
@@ -148,10 +144,6 @@ type OtpVerifyRequest = {
      * Source URL for tracking login (e.g., https://my.djangocfg.com)
      */
     source_url?: string;
-    /**
-     * Keep this browser signed in for 30 days
-     */
-    remember_me?: boolean;
 };
 /**
  * OTP verification response.
@@ -191,10 +183,18 @@ type OtpVerifyResponse = {
      * Whether user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
-    /**
-     * Whether this login should persist across browser restarts
-     */
-    persistent_session?: boolean;
+};
+/**
+ * Validate email+password against live accounts only.
+ *
+ * Subclasses SimpleJWT so the field/validation contract stays theirs, but
+ * replaces ``validate()`` — the token pair itself is minted by the view via
+ * ``mint_tokens_for_request`` so the DPoP binding and token
+ * lifetime match OTP, OAuth and TOTP exactly.
+ */
+type PasswordLoginRequest = {
+    email: string;
+    password: string;
 };
 /**
  * Password-login response.
@@ -227,10 +227,6 @@ type PasswordLoginResponse = {
      * Whether user should be prompted to enable 2FA
      */
     should_prompt_2fa?: boolean;
-    /**
-     * Whether this login should persist across browser restarts
-     */
-    persistent_session?: boolean;
 };
 /**
  * Serializer for updating user profile.
@@ -456,22 +452,6 @@ declare enum WebmailLinkProviderEnum {
     FREE_FR = "free_fr",
     SFR = "sfr"
 }
-/**
- * Validate email+password against live accounts only.
- *
- * Subclasses SimpleJWT so the field/validation contract stays theirs, but
- * replaces ``validate()`` — the token pair itself is minted by the view via
- * ``mint_tokens_for_request`` so the DPoP binding and remembered-session
- * lifetime match OTP, OAuth and TOTP exactly.
- */
-type PasswordLoginRequestWritable = {
-    /**
-     * Keep this browser signed in for 30 days
-     */
-    remember_me?: boolean;
-    email: string;
-    password: string;
-};
 
 /**
  * Auth Form Types
@@ -506,8 +486,6 @@ interface PasswordLoginOptions {
     redirectUrl?: string;
     /** Caller owns ALL navigation for this login, including the 2FA continuation. */
     skipRedirect?: boolean;
-    /** Ask the server for a 30-day session instead of the default lifetime. */
-    rememberMe?: boolean;
 }
 /**
  * Result of a password login.
@@ -547,8 +525,6 @@ interface AuthFormState {
      * jurisdiction-aware default on mount.
      */
     marketingConsent: boolean | null;
-    /** Keep this browser signed in for 30 days after successful verification. */
-    rememberMe: boolean;
     /** Current form step */
     step: AuthStep;
     /** Error message */
@@ -572,7 +548,6 @@ interface AuthFormStateHandlers {
     setPassword: (password: string) => void;
     setAcceptedTerms: (accepted: boolean) => void;
     setMarketingConsent: (consent: boolean | null) => void;
-    setRememberMe: (rememberMe: boolean) => void;
     setError: (error: string) => void;
     clearError: () => void;
     setStep: (step: AuthStep) => void;
@@ -664,7 +639,7 @@ interface AuthContextType {
     saveEmail: (email: string) => void;
     clearSavedEmail: () => void;
     requestOTP: (identifier: string, sourceUrl?: string, consent?: OTPRequestConsent) => Promise<OTPRequestResult>;
-    verifyOTP: (identifier: string, otpCode: string, sourceUrl?: string, redirectUrl?: string, skipRedirect?: boolean, rememberMe?: boolean) => Promise<{
+    verifyOTP: (identifier: string, otpCode: string, sourceUrl?: string, redirectUrl?: string, skipRedirect?: boolean) => Promise<{
         success: boolean;
         message: string;
         user?: UserProfile;
@@ -725,7 +700,7 @@ interface AccountsContextValue {
     }) => Promise<User | undefined>;
     requestOTP: (data: OtpRequestRequest) => Promise<OtpRequestResponse>;
     verifyOTP: (data: OtpVerifyRequest) => Promise<OtpVerifyResponse>;
-    loginWithPassword: (data: PasswordLoginRequestWritable) => Promise<PasswordLoginResponse>;
+    loginWithPassword: (data: PasswordLoginRequest) => Promise<PasswordLoginResponse>;
     logout: () => void;
 }
 interface AccountsProviderProps {
@@ -859,8 +834,6 @@ declare const useAutoAuth: (options?: UseAutoAuthOptions) => {
 type OAuthUser = NonNullable<OAuthTokenResponse['user']>;
 interface UseGithubAuthOptions {
     sourceUrl?: string;
-    /** Keep the completed browser session for 30 days. */
-    rememberMe?: boolean;
     /**
      * The OAuth endpoint's OpenAPI schema types `user` as a free-form object, so
      * this is what the server actually promises — not a `User`. Narrow it at the

package/dist/auth.mjs

@@ -105,7 +105,6 @@ var CFG_KEYS = {
   redirectUrlTs: k("cfg.auth.redirect_url_ts", "session", true),
   oauthState: k("cfg.auth.oauth_state", "session", true),
   oauthProvider: k("cfg.auth.oauth_provider", "session", true),
-  oauthRememberMe: k("cfg.auth.oauth_remember_me", "session", true),
   profileCache: k("cfg.profile.cache", "local", true),
   monitorSessionId: k("cfg.monitor.session_id", "local", false),
   monitorSessionCookie: k("cfg.monitor.session_id", "cookie", false),
@@ -1198,7 +1197,6 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
   const [isLoading, setIsLoading] = useState2(false);
   const [acceptedTerms, setAcceptedTerms] = useState2(true);
   const [marketingConsent, setMarketingConsent] = useState2(null);
-  const [rememberMe, setRememberMe] = useState2(true);
   const [step, setStep] = useState2("identifier");
   const [error, setError] = useState2("");
   const [webmail, setWebmail] = useState2(null);
@@ -1213,7 +1211,6 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
     isLoading,
     acceptedTerms,
     marketingConsent,
-    rememberMe,
     step,
     error,
     rateLimitSeconds: rateLimit.seconds,
@@ -1228,7 +1225,6 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
     setPassword,
     setAcceptedTerms,
     setMarketingConsent,
-    setRememberMe,
     setError,
     clearError,
     setStep,
@@ -1363,7 +1359,6 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     password,
     acceptedTerms,
     marketingConsent,
-    rememberMe,
     setIdentifier,
     setOtp,
     setStep,
@@ -1460,7 +1455,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setIsLoading(true);
     clearError();
     try {
-      const result = await verifyOTP(submitIdentifier, submitOtp, sourceUrl, redirectUrl, true, rememberMe);
+      const result = await verifyOTP(submitIdentifier, submitOtp, sourceUrl, redirectUrl, true);
       if (result.requires_2fa && result.session_id) {
         authLogger.info("2FA required after OTP verification");
         beginTwoFactorChallenge({ sessionId: result.session_id });
@@ -1486,7 +1481,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     } finally {
       setIsLoading(false);
     }
-  }, [verifyOTP, saveIdentifierToStorage, setError, setIsLoading, clearError, onOTPSuccess, onError, sourceUrl, redirectUrl, rememberMe, setStep]);
+  }, [verifyOTP, saveIdentifierToStorage, setError, setIsLoading, clearError, onOTPSuccess, onError, sourceUrl, redirectUrl, setStep]);
   const handleOTPSubmit = useCallback4(async (e) => {
     e.preventDefault();
     await submitOTP(identifier, otp);
@@ -1509,8 +1504,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     try {
       const result = await login(submitIdentifier, submitPassword_, {
         redirectUrl,
-        skipRedirect: true,
-        rememberMe
+        skipRedirect: true
       });
       if (result.requires_2fa && result.session_id) {
         authLogger.info("2FA required after password login");
@@ -1552,7 +1546,6 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     onOTPSuccess,
     onError,
     redirectUrl,
-    rememberMe,
     setStep
   ]);
   const handlePasswordSubmit = useCallback4(async (e) => {
@@ -3072,9 +3065,8 @@ var logAuthFailure = /* @__PURE__ */ __name((log, message, error) => {
 // src/auth/hooks/useGithubAuth.ts
 var OAUTH_STATE_KEY = CFG_KEYS.oauthState.key;
 var OAUTH_PROVIDER_KEY = CFG_KEYS.oauthProvider.key;
-var OAUTH_REMEMBER_KEY = CFG_KEYS.oauthRememberMe.key;
 var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
-  const { sourceUrl, rememberMe = false, onSuccess, onError, onRequires2FA, redirectUrl, skipRedirect = false } = options;
+  const { sourceUrl, onSuccess, onError, onRequires2FA, redirectUrl, skipRedirect = false } = options;
   const router = useCfgRouter();
   const [isLoading, setIsLoading] = useState3(false);
   const [error, setError] = useState3(null);
@@ -3102,7 +3094,6 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
       if (typeof window !== "undefined") {
         sessionStorage.setItem(OAUTH_STATE_KEY, response.state);
         sessionStorage.setItem(OAUTH_PROVIDER_KEY, "github");
-        sessionStorage.setItem(OAUTH_REMEMBER_KEY, String(rememberMe));
       }
       window.location.href = response.authorization_url;
     } catch (err) {
@@ -3117,25 +3108,22 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
     } finally {
       setIsLoading(false);
     }
-  }, [sourceUrl, rememberMe, onError]);
+  }, [sourceUrl, onError]);
   const handleGithubCallback = useCallback5(async (code, state) => {
     setIsLoading(true);
     setError(null);
     try {
       authLogger.info("Processing GitHub OAuth callback...");
-      let rememberMeForSession = false;
       if (typeof window !== "undefined") {
         const storedState = sessionStorage.getItem(OAUTH_STATE_KEY);
         if (storedState && storedState !== state) {
           throw new Error("Invalid OAuth state - possible CSRF attack");
         }
-        rememberMeForSession = sessionStorage.getItem(OAUTH_REMEMBER_KEY) === "true";
         sessionStorage.removeItem(OAUTH_STATE_KEY);
         sessionStorage.removeItem(OAUTH_PROVIDER_KEY);
-        sessionStorage.removeItem(OAUTH_REMEMBER_KEY);
       }
       const result = await CfgAccountsOauth.cfgAccountsOauthGithubCallbackCreate({
-        body: { code, state, remember_me: rememberMeForSession },
+        body: { code, state },
         throwOnError: true
       });
       const response = result.data;
@@ -4163,7 +4151,7 @@ function useCfgAccountsOtpVerifyCreate(config) {
     async (_key, { arg }) => {
       const res = await CfgAccountsOtp.cfgAccountsOtpVerifyCreate({ ...arg, throwOnError: true });
       const data = res.data;
-      void import("./OTPVerifyResponse-LJVUP5JS.mjs").then(({ OTPVerifyResponseSchema }) => {
+      void import("./OTPVerifyResponse-P5LDNM7H.mjs").then(({ OTPVerifyResponseSchema }) => {
         const parsed = OTPVerifyResponseSchema.safeParse(data);
         if (parsed.success) return;
         console.warn(
@@ -4374,7 +4362,7 @@ function useCfgAccountsTokenCreate(config) {
     async (_key, { arg }) => {
       const res = await CfgAccountsAuth.cfgAccountsTokenCreate({ ...arg, throwOnError: true });
       const data = res.data;
-      void import("./PasswordLoginResponse-A7QRJTAQ.mjs").then(({ PasswordLoginResponseSchema }) => {
+      void import("./PasswordLoginResponse-33B576NG.mjs").then(({ PasswordLoginResponseSchema }) => {
         const parsed = PasswordLoginResponseSchema.safeParse(data);
         if (parsed.success) return;
         console.warn(
@@ -4739,14 +4727,13 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     []
   );
   const verifyOTP = useCallback11(
-    async (identifier, otpCode, sourceUrl, redirectUrl, skipRedirect, rememberMe = false) => {
+    async (identifier, otpCode, sourceUrl, redirectUrl, skipRedirect) => {
       try {
         pendingManualNavRef.current = Boolean(skipRedirect);
         const result = await accountsRef.current.verifyOTP({
           identifier,
           otp: otpCode,
-          source_url: sourceUrl,
-          remember_me: rememberMe
+          source_url: sourceUrl
         });
         if (result.requires_2fa && result.session_id) {
           authLogger.info("2FA required, session:", result.session_id);
@@ -4801,13 +4788,12 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   );
   const login = useCallback11(
     async (email, password, options) => {
-      const { redirectUrl, skipRedirect, rememberMe = false } = options || {};
+      const { redirectUrl, skipRedirect } = options || {};
       try {
         pendingManualNavRef.current = Boolean(skipRedirect);
         const result = await accountsRef.current.loginWithPassword({
           email,
-          password,
-          remember_me: rememberMe
+          password
         });
         if (result.requires_2fa && result.session_id) {
           authLogger.info("2FA required, session:", result.session_id);