@djangocfg/api 2.1.604 → 2.1.606

package/dist/auth.mjs

@@ -4380,6 +4380,30 @@ var useDeleteAccount = /* @__PURE__ */ __name(() => {
   };
 }, "useDeleteAccount");
 
+// src/auth/hooks/legacyStorage.ts
+var LEGACY_TOKEN_KEYS = [
+  "cfg.auth.access_token",
+  "cfg.auth.refresh_token",
+  "auth_token",
+  "refresh_token",
+  "access_token"
+];
+function purgeLegacyTokenStorage() {
+  const removed = [];
+  try {
+    if (typeof window === "undefined") return removed;
+    for (const key of LEGACY_TOKEN_KEYS) {
+      if (window.localStorage.getItem(key) !== null) {
+        window.localStorage.removeItem(key);
+        removed.push(key);
+      }
+    }
+  } catch {
+  }
+  return removed;
+}
+__name(purgeLegacyTokenStorage, "purgeLegacyTokenStorage");
+
 // src/auth/context/AccountsContext.tsx
 import {
   createContext,
@@ -4752,6 +4776,10 @@ __name(hasApiOrigin, "hasApiOrigin");
 var AccountsContext = createContext(void 0);
 function AccountsProvider({ children }) {
   const [profile, setProfile] = useState10(() => {
+    if (!auth.isAuthenticated()) {
+      clearProfileCache();
+      return void 0;
+    }
     const cached = getCachedProfile();
     return cached || void 0;
   });
@@ -4952,6 +4980,10 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
         authLogger.warn("Dead session in storage \u2014 clearing");
         auth.clearSession();
         clearProfileCache();
+      } else if (!hasTokens && !auth.isAuthenticated()) {
+        clearProfileCache();
+        purgeLegacyTokenStorage();
+        if (accountsRef.current.profile) accountsRef.current.logout();
       }
       setProfileSettled(true);
       return;