@djangocfg/api 2.1.604 → 2.1.606

package/dist/auth.cjs

@@ -4632,6 +4632,30 @@ var useDeleteAccount = /* @__PURE__ */ __name(() => {
   };
 }, "useDeleteAccount");
 
+// src/auth/hooks/legacyStorage.ts
+var LEGACY_TOKEN_KEYS = [
+  "cfg.auth.access_token",
+  "cfg.auth.refresh_token",
+  "auth_token",
+  "refresh_token",
+  "access_token"
+];
+function purgeLegacyTokenStorage() {
+  const removed = [];
+  try {
+    if (typeof window === "undefined") return removed;
+    for (const key of LEGACY_TOKEN_KEYS) {
+      if (window.localStorage.getItem(key) !== null) {
+        window.localStorage.removeItem(key);
+        removed.push(key);
+      }
+    }
+  } catch {
+  }
+  return removed;
+}
+__name(purgeLegacyTokenStorage, "purgeLegacyTokenStorage");
+
 // src/auth/context/AccountsContext.tsx
 var import_react19 = require("react");
 
@@ -4996,6 +5020,10 @@ __name(hasApiOrigin, "hasApiOrigin");
 var AccountsContext = (0, import_react19.createContext)(void 0);
 function AccountsProvider({ children }) {
   const [profile, setProfile] = (0, import_react19.useState)(() => {
+    if (!auth.isAuthenticated()) {
+      clearProfileCache();
+      return void 0;
+    }
     const cached = getCachedProfile();
     return cached || void 0;
   });
@@ -5196,6 +5224,10 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
         authLogger.warn("Dead session in storage \u2014 clearing");
         auth.clearSession();
         clearProfileCache();
+      } else if (!hasTokens && !auth.isAuthenticated()) {
+        clearProfileCache();
+        purgeLegacyTokenStorage();
+        if (accountsRef.current.profile) accountsRef.current.logout();
       }
       setProfileSettled(true);
       return;