@djangocfg/api 2.1.86 → 2.1.88

package/dist/auth.cjs

@@ -59,6 +59,7 @@ __export(auth_exports, {
   useGithubAuth: () => useGithubAuth,
   useLocalStorage: () => useLocalStorage2,
   useSessionStorage: () => useSessionStorage,
+  useTokenRefresh: () => useTokenRefresh,
   useTwoFactor: () => useTwoFactor,
   useTwoFactorSetup: () => useTwoFactorSetup,
   useTwoFactorStatus: () => useTwoFactorStatus,
@@ -69,7 +70,7 @@ module.exports = __toCommonJS(auth_exports);
 
 // src/auth/context/AuthContext.tsx
 var import_navigation = require("next/navigation");
-var import_react3 = require("react");
+var import_react4 = require("react");
 var import_hooks2 = require("@djangocfg/ui-nextjs/hooks");
 
 // src/generated/cfg_accounts/accounts__auth/client.ts
@@ -3672,7 +3673,7 @@ __name(useBase64, "useBase64");
 // src/auth/hooks/useProfileCache.ts
 var CACHE_KEY = "user_profile_cache";
 var CACHE_VERSION = 1;
-var DEFAULT_TTL = 36e5;
+var DEFAULT_TTL = 144e5;
 function getCachedProfile() {
   try {
     if (typeof window === "undefined") return null;
@@ -3958,6 +3959,106 @@ var useAuthRedirectManager = /* @__PURE__ */ __name((options = {}) => {
   };
 }, "useAuthRedirectManager");
 
+// src/auth/hooks/useTokenRefresh.ts
+var import_react2 = require("react");
+var TOKEN_REFRESH_THRESHOLD_MS = 10 * 60 * 1e3;
+var CHECK_INTERVAL_MS = 5 * 60 * 1e3;
+function getTokenExpiry(token) {
+  try {
+    const payload = JSON.parse(atob(token.split(".")[1]));
+    return payload.exp * 1e3;
+  } catch {
+    return null;
+  }
+}
+__name(getTokenExpiry, "getTokenExpiry");
+function isTokenExpiringSoon(token, thresholdMs) {
+  const expiry = getTokenExpiry(token);
+  if (!expiry) return false;
+  const timeUntilExpiry = expiry - Date.now();
+  return timeUntilExpiry < thresholdMs;
+}
+__name(isTokenExpiringSoon, "isTokenExpiringSoon");
+function useTokenRefresh(options = {}) {
+  const { enabled = true, onRefresh, onRefreshError } = options;
+  const isRefreshingRef = (0, import_react2.useRef)(false);
+  const refreshToken = (0, import_react2.useCallback)(async () => {
+    if (isRefreshingRef.current) {
+      authLogger.debug("Token refresh already in progress");
+      return false;
+    }
+    const refreshTokenValue = api.getRefreshToken();
+    if (!refreshTokenValue) {
+      authLogger.warn("No refresh token available");
+      return false;
+    }
+    isRefreshingRef.current = true;
+    authLogger.info("Refreshing token...");
+    try {
+      const response = await fetch("/api/accounts/token/refresh/", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ refresh: refreshTokenValue })
+      });
+      if (!response.ok) {
+        throw new Error(`Token refresh failed: ${response.status}`);
+      }
+      const data = await response.json();
+      const newAccessToken = data.access;
+      if (!newAccessToken) {
+        throw new Error("No access token in refresh response");
+      }
+      api.setToken(newAccessToken, refreshTokenValue);
+      authLogger.info("Token refreshed successfully");
+      onRefresh?.(newAccessToken);
+      return true;
+    } catch (error) {
+      authLogger.error("Token refresh error:", error);
+      onRefreshError?.(error instanceof Error ? error : new Error(String(error)));
+      return false;
+    } finally {
+      isRefreshingRef.current = false;
+    }
+  }, [onRefresh, onRefreshError]);
+  const checkAndRefresh = (0, import_react2.useCallback)(async () => {
+    const token = api.getToken();
+    if (!token) return;
+    if (isTokenExpiringSoon(token, TOKEN_REFRESH_THRESHOLD_MS)) {
+      authLogger.info("Token expiring soon, refreshing proactively");
+      await refreshToken();
+    }
+  }, [refreshToken]);
+  (0, import_react2.useEffect)(() => {
+    if (!enabled) return;
+    checkAndRefresh();
+    const intervalId = setInterval(checkAndRefresh, CHECK_INTERVAL_MS);
+    return () => clearInterval(intervalId);
+  }, [enabled, checkAndRefresh]);
+  (0, import_react2.useEffect)(() => {
+    if (!enabled) return;
+    const handleFocus = /* @__PURE__ */ __name(() => {
+      authLogger.debug("Window focused, checking token...");
+      checkAndRefresh();
+    }, "handleFocus");
+    window.addEventListener("focus", handleFocus);
+    return () => window.removeEventListener("focus", handleFocus);
+  }, [enabled, checkAndRefresh]);
+  (0, import_react2.useEffect)(() => {
+    if (!enabled) return;
+    const handleOnline = /* @__PURE__ */ __name(() => {
+      authLogger.info("Network reconnected, checking token...");
+      checkAndRefresh();
+    }, "handleOnline");
+    window.addEventListener("online", handleOnline);
+    return () => window.removeEventListener("online", handleOnline);
+  }, [enabled, checkAndRefresh]);
+  return {
+    refreshToken,
+    checkAndRefresh
+  };
+}
+__name(useTokenRefresh, "useTokenRefresh");
+
 // src/auth/utils/analytics.ts
 var AnalyticsEvent = /* @__PURE__ */ ((AnalyticsEvent2) => {
   AnalyticsEvent2["AUTH_OTP_REQUEST"] = "auth_otp_request";
@@ -3995,7 +4096,7 @@ var Analytics = {
 };
 
 // src/auth/context/AccountsContext.tsx
-var import_react2 = require("react");
+var import_react3 = require("react");
 
 // src/generated/cfg_accounts/_utils/hooks/accounts__auth.ts
 var import_swr = require("swr");
@@ -4067,20 +4168,20 @@ __name(useCreateAccountsOtpVerifyCreate, "useCreateAccountsOtpVerifyCreate");
 
 // src/auth/context/AccountsContext.tsx
 var import_jsx_runtime = require("react/jsx-runtime");
-var AccountsContext = (0, import_react2.createContext)(void 0);
+var AccountsContext = (0, import_react3.createContext)(void 0);
 function AccountsProvider({ children }) {
-  const [profile, setProfile] = (0, import_react2.useState)(() => {
+  const [profile, setProfile] = (0, import_react3.useState)(() => {
     const cached = getCachedProfile();
     return cached || void 0;
   });
-  const [isLoadingProfile, setIsLoadingProfile] = (0, import_react2.useState)(false);
-  const [profileError, setProfileError] = (0, import_react2.useState)(null);
-  const profileRef = (0, import_react2.useRef)(profile);
-  const isLoadingRef = (0, import_react2.useRef)(false);
-  (0, import_react2.useEffect)(() => {
+  const [isLoadingProfile, setIsLoadingProfile] = (0, import_react3.useState)(false);
+  const [profileError, setProfileError] = (0, import_react3.useState)(null);
+  const profileRef = (0, import_react3.useRef)(profile);
+  const isLoadingRef = (0, import_react3.useRef)(false);
+  (0, import_react3.useEffect)(() => {
     profileRef.current = profile;
   }, [profile]);
-  (0, import_react2.useEffect)(() => {
+  (0, import_react3.useEffect)(() => {
     isLoadingRef.current = isLoadingProfile;
   }, [isLoadingProfile]);
   const updateMutation = useUpdateAccountsProfileUpdateUpdate();
@@ -4089,7 +4190,7 @@ function AccountsProvider({ children }) {
   const otpRequestMutation = useCreateAccountsOtpRequestCreate();
   const otpVerifyMutation = useCreateAccountsOtpVerifyCreate();
   const tokenRefreshMutation = useCreateAccountsTokenRefreshCreate();
-  const refreshProfile = (0, import_react2.useCallback)(async (callerId) => {
+  const refreshProfile = (0, import_react3.useCallback)(async (callerId) => {
     const currentProfile = profileRef.current;
     const currentLoading = isLoadingRef.current;
     if (currentProfile && !currentLoading) {
@@ -4155,7 +4256,7 @@ function AccountsProvider({ children }) {
     }
     return result;
   }, "refreshToken");
-  const logout = (0, import_react2.useCallback)(() => {
+  const logout = (0, import_react3.useCallback)(() => {
     api.clearTokens();
     setProfile(void 0);
     setProfileError(null);
@@ -4178,7 +4279,7 @@ function AccountsProvider({ children }) {
 }
 __name(AccountsProvider, "AccountsProvider");
 function useAccountsContext() {
-  const context = (0, import_react2.useContext)(AccountsContext);
+  const context = (0, import_react3.useContext)(AccountsContext);
   if (!context) {
     throw new Error("useAccountsContext must be used within AccountsProvider");
   }
@@ -4193,7 +4294,7 @@ var defaultRoutes = {
   defaultCallback: "/dashboard",
   defaultAuthCallback: "/auth"
 };
-var AuthContext = (0, import_react3.createContext)(void 0);
+var AuthContext = (0, import_react4.createContext)(void 0);
 var EMAIL_STORAGE_KEY = "auth_email";
 var PHONE_STORAGE_KEY = "auth_phone";
 var hasValidTokens = /* @__PURE__ */ __name(() => {
@@ -4206,45 +4307,58 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     fallbackUrl: config?.routes?.defaultCallback || defaultRoutes.defaultCallback,
     clearOnUse: true
   });
-  const [isLoading, setIsLoading] = (0, import_react3.useState)(() => {
+  const [isLoading, setIsLoading] = (0, import_react4.useState)(() => {
     if (typeof window !== "undefined") {
       const hasTokens = hasValidTokens();
       return !hasTokens;
     }
     return true;
   });
-  const [initialized, setInitialized] = (0, import_react3.useState)(false);
+  const [initialized, setInitialized] = (0, import_react4.useState)(false);
   const router = (0, import_hooks2.useCfgRouter)();
   const pathname = (0, import_navigation.usePathname)();
   const queryParams = (0, import_hooks2.useQueryParams)();
   const [storedEmail, setStoredEmail, clearStoredEmail] = (0, import_hooks2.useLocalStorage)(EMAIL_STORAGE_KEY, null);
   const [storedPhone, setStoredPhone, clearStoredPhone] = (0, import_hooks2.useLocalStorage)(PHONE_STORAGE_KEY, null);
+  useTokenRefresh({
+    enabled: true,
+    onRefresh: /* @__PURE__ */ __name((newToken) => {
+      authLogger.info("Token auto-refreshed successfully");
+    }, "onRefresh"),
+    onRefreshError: /* @__PURE__ */ __name((error) => {
+      authLogger.warn("Token auto-refresh failed:", error.message);
+    }, "onRefreshError")
+  });
   const user = accounts.profile;
-  const userRef = (0, import_react3.useRef)(user);
-  const configRef = (0, import_react3.useRef)(config);
-  const isLoadingProfileRef = (0, import_react3.useRef)(false);
-  (0, import_react3.useEffect)(() => {
+  const userRef = (0, import_react4.useRef)(user);
+  const configRef = (0, import_react4.useRef)(config);
+  const isLoadingProfileRef = (0, import_react4.useRef)(false);
+  (0, import_react4.useEffect)(() => {
     userRef.current = user;
   }, [user]);
-  (0, import_react3.useEffect)(() => {
+  (0, import_react4.useEffect)(() => {
     configRef.current = config;
   }, [config]);
-  const clearAuthState = (0, import_react3.useCallback)((caller) => {
+  const clearAuthState = (0, import_react4.useCallback)((caller) => {
     authLogger.info("clearAuthState >> caller", caller);
     api.clearTokens();
     clearProfileCache();
     setInitialized(true);
     setIsLoading(false);
   }, []);
-  const handleGlobalAuthError = (0, import_react3.useCallback)((error, context = "API Request") => {
-    if (error?.success === false) {
-      authLogger.warn(`Error detected in ${context}, clearing tokens`);
+  const handleGlobalAuthError = (0, import_react4.useCallback)((error, context = "API Request") => {
+    const isAuthError = error?.status === 401 || error?.statusCode === 401 || error?.code === "token_not_valid" || error?.code === "authentication_failed";
+    if (isAuthError) {
+      authLogger.warn(`Authentication error in ${context}, clearing tokens`);
       clearAuthState(`globalAuthError:${context}`);
       return true;
     }
+    if (error?.success === false) {
+      authLogger.warn(`Non-auth error in ${context} (not clearing session):`, error?.message || error);
+    }
     return false;
   }, [clearAuthState]);
-  const loadCurrentProfile = (0, import_react3.useCallback)(async (callerId) => {
+  const loadCurrentProfile = (0, import_react4.useCallback)(async (callerId) => {
     const finalCallerId = callerId || "AuthContext.loadCurrentProfile";
     if (isLoadingProfileRef.current) {
       authLogger.debug(`Profile loading already in progress, skipping duplicate call from: ${finalCallerId}`);
@@ -4273,14 +4387,19 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       setInitialized(true);
     } catch (error) {
       authLogger.error("Failed to load profile:", error);
-      if (!handleGlobalAuthError(error, "loadCurrentProfile")) {
-        clearAuthState("loadCurrentProfile:error");
+      const isAuthError = error?.status === 401 || error?.statusCode === 401 || error?.code === "token_not_valid" || error?.code === "authentication_failed";
+      if (isAuthError) {
+        authLogger.warn("Authentication error, clearing session");
+        clearAuthState("loadCurrentProfile:authError");
+      } else {
+        authLogger.warn("Profile load failed but keeping session (non-auth error)");
+        setInitialized(true);
       }
     } finally {
       isLoadingProfileRef.current = false;
     }
   }, [clearAuthState, handleGlobalAuthError, accounts]);
-  (0, import_react3.useEffect)(() => {
+  (0, import_react4.useEffect)(() => {
     if (initialized) return;
     const initializeAuth = /* @__PURE__ */ __name(async () => {
       authLogger.info("Initializing auth...");
@@ -4320,7 +4439,13 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
           await loadCurrentProfile("AuthContext.initializeAuth");
         } catch (error) {
           authLogger.error("Failed to load profile during initialization:", error);
-          clearAuthState("initializeAuth:loadProfileFailed");
+          const isAuthError = error?.status === 401 || error?.statusCode === 401 || error?.code === "token_not_valid" || error?.code === "authentication_failed";
+          if (isAuthError) {
+            clearAuthState("initializeAuth:authError");
+          } else {
+            authLogger.warn("Init profile load failed but keeping session");
+            setInitialized(true);
+          }
         }
         setIsLoading(false);
       } else {
@@ -4330,7 +4455,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     }, "initializeAuth");
     initializeAuth();
   }, [initialized]);
-  (0, import_react3.useEffect)(() => {
+  (0, import_react4.useEffect)(() => {
     if (!initialized) return;
     const isAuthenticated = api.isAuthenticated();
     const authRoute = config?.routes?.auth || defaultRoutes.auth;
@@ -4341,15 +4466,15 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       router.push(callbackUrl);
     }
   }, [initialized, pathname, queryParams, config?.routes]);
-  const pushToDefaultCallbackUrl = (0, import_react3.useCallback)(() => {
+  const pushToDefaultCallbackUrl = (0, import_react4.useCallback)(() => {
     const callbackUrl = config?.routes?.defaultCallback || defaultRoutes.defaultCallback;
     router.push(callbackUrl);
   }, [config?.routes, router]);
-  const pushToDefaultAuthCallbackUrl = (0, import_react3.useCallback)(() => {
+  const pushToDefaultAuthCallbackUrl = (0, import_react4.useCallback)(() => {
     const authCallbackUrl = config?.routes?.defaultAuthCallback || defaultRoutes.defaultAuthCallback;
     router.push(authCallbackUrl);
   }, [config?.routes, router]);
-  const checkAuthAndRedirect = (0, import_react3.useCallback)(async () => {
+  const checkAuthAndRedirect = (0, import_react4.useCallback)(async () => {
     try {
       setIsLoading(true);
       const isAuthenticated = api.isAuthenticated();
@@ -4371,7 +4496,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       setIsLoading(false);
     }
   }, [loadCurrentProfile, clearAuthState, pushToDefaultCallbackUrl, pushToDefaultAuthCallbackUrl, handleGlobalAuthError]);
-  const requestOTP = (0, import_react3.useCallback)(
+  const requestOTP = (0, import_react4.useCallback)(
     async (identifier, channel, sourceUrl) => {
       api.clearTokens();
       try {
@@ -4399,7 +4524,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     },
     [accounts]
   );
-  const verifyOTP = (0, import_react3.useCallback)(
+  const verifyOTP = (0, import_react4.useCallback)(
     async (identifier, otpCode, channel, sourceUrl, redirectUrl, skipRedirect) => {
       try {
         const channelValue = channel === "phone" ? enums_exports.OTPVerifyRequestChannel.PHONE : enums_exports.OTPVerifyRequestChannel.EMAIL;
@@ -4466,7 +4591,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     },
     [setStoredEmail, setStoredPhone, clearStoredEmail, clearStoredPhone, config?.routes?.defaultCallback, accounts, router]
   );
-  const refreshToken = (0, import_react3.useCallback)(async () => {
+  const refreshToken = (0, import_react4.useCallback)(async () => {
     try {
       const refreshTokenValue = api.getRefreshToken();
       if (!refreshTokenValue) {
@@ -4499,7 +4624,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       };
     }
   }, [clearAuthState, accounts]);
-  const logout = (0, import_react3.useCallback)(async () => {
+  const logout = (0, import_react4.useCallback)(async () => {
     const performLogout = /* @__PURE__ */ __name(() => {
       Analytics.event("auth_logout" /* AUTH_LOGOUT */, {
         category: "auth" /* AUTH */
@@ -4528,10 +4653,10 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       }
     }
   }, [accounts, config?.routes?.defaultAuthCallback, router]);
-  const isAdminUser = (0, import_react3.useMemo)(() => {
+  const isAdminUser = (0, import_react4.useMemo)(() => {
     return Boolean(user?.is_staff || user?.is_superuser);
   }, [user]);
-  const value = (0, import_react3.useMemo)(
+  const value = (0, import_react4.useMemo)(
     () => ({
       user,
       isLoading,
@@ -4583,7 +4708,7 @@ var AuthProvider = /* @__PURE__ */ __name(({ children, config }) => {
   return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(AccountsProvider, { children: /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(AuthProviderInternal, { config, children }) });
 }, "AuthProvider");
 var useAuth = /* @__PURE__ */ __name(() => {
-  const context = (0, import_react3.useContext)(AuthContext);
+  const context = (0, import_react4.useContext)(AuthContext);
   if (context === void 0) {
     throw new Error("useAuth must be used within an AuthProvider");
   }
@@ -4591,20 +4716,20 @@ var useAuth = /* @__PURE__ */ __name(() => {
 }, "useAuth");
 
 // src/auth/hooks/useAuthFormState.ts
-var import_react4 = require("react");
+var import_react5 = require("react");
 var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "", initialChannel = "email") => {
-  const [identifier, setIdentifier] = (0, import_react4.useState)(initialIdentifier);
-  const [channel, setChannel] = (0, import_react4.useState)(initialChannel);
-  const [otp, setOtp] = (0, import_react4.useState)("");
-  const [isLoading, setIsLoading] = (0, import_react4.useState)(false);
-  const [acceptedTerms, setAcceptedTerms] = (0, import_react4.useState)(false);
-  const [step, setStep] = (0, import_react4.useState)("identifier");
-  const [error, setError] = (0, import_react4.useState)("");
-  const [twoFactorSessionId, setTwoFactorSessionId] = (0, import_react4.useState)(null);
-  const [shouldPrompt2FA, setShouldPrompt2FA] = (0, import_react4.useState)(false);
-  const [twoFactorCode, setTwoFactorCode] = (0, import_react4.useState)("");
-  const [useBackupCode, setUseBackupCode] = (0, import_react4.useState)(false);
-  const clearError = (0, import_react4.useCallback)(() => setError(""), []);
+  const [identifier, setIdentifier] = (0, import_react5.useState)(initialIdentifier);
+  const [channel, setChannel] = (0, import_react5.useState)(initialChannel);
+  const [otp, setOtp] = (0, import_react5.useState)("");
+  const [isLoading, setIsLoading] = (0, import_react5.useState)(false);
+  const [acceptedTerms, setAcceptedTerms] = (0, import_react5.useState)(false);
+  const [step, setStep] = (0, import_react5.useState)("identifier");
+  const [error, setError] = (0, import_react5.useState)("");
+  const [twoFactorSessionId, setTwoFactorSessionId] = (0, import_react5.useState)(null);
+  const [shouldPrompt2FA, setShouldPrompt2FA] = (0, import_react5.useState)(false);
+  const [twoFactorCode, setTwoFactorCode] = (0, import_react5.useState)("");
+  const [useBackupCode, setUseBackupCode] = (0, import_react5.useState)(false);
+  const clearError = (0, import_react5.useCallback)(() => setError(""), []);
   return {
     // State
     identifier,
@@ -4635,11 +4760,11 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "", initialCh
 }, "useAuthFormState");
 
 // src/auth/hooks/useAuthValidation.ts
-var import_react5 = require("react");
+var import_react6 = require("react");
 var EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 var PHONE_REGEX = /^\+[1-9]\d{6,14}$/;
 var useAuthValidation = /* @__PURE__ */ __name(() => {
-  const detectChannelFromIdentifier2 = (0, import_react5.useCallback)((id) => {
+  const detectChannelFromIdentifier2 = (0, import_react6.useCallback)((id) => {
     if (!id) return null;
     if (id.includes("@")) {
       return "email";
@@ -4649,7 +4774,7 @@ var useAuthValidation = /* @__PURE__ */ __name(() => {
     }
     return null;
   }, []);
-  const validateIdentifier2 = (0, import_react5.useCallback)((id, channelType) => {
+  const validateIdentifier2 = (0, import_react6.useCallback)((id, channelType) => {
     if (!id) return false;
     const channel = channelType || detectChannelFromIdentifier2(id);
     if (channel === "email") {
@@ -4680,11 +4805,11 @@ var validateIdentifier = /* @__PURE__ */ __name((id, channelType) => {
 }, "validateIdentifier");
 
 // src/auth/hooks/useAuthForm.ts
-var import_react8 = require("react");
+var import_react9 = require("react");
 
 // src/auth/hooks/useAutoAuth.ts
 var import_navigation2 = require("next/navigation");
-var import_react6 = require("react");
+var import_react7 = require("react");
 var import_hooks3 = require("@djangocfg/ui-nextjs/hooks");
 var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
   const { onOTPDetected, cleanupUrl = true, allowedPaths = ["/auth"] } = options;
@@ -4694,7 +4819,7 @@ var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
   const isAllowedPath = allowedPaths.some((path) => pathname === path || pathname?.startsWith(path + "/"));
   const hasOTP = !!queryParams.get("otp");
   const isReady = !!pathname && hasOTP && isAllowedPath;
-  (0, import_react6.useEffect)(() => {
+  (0, import_react7.useEffect)(() => {
     if (!isReady) return;
     const queryOtp = queryParams.get("otp");
     if (queryOtp && typeof queryOtp === "string" && queryOtp.length === 6) {
@@ -4716,7 +4841,7 @@ var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
 }, "useAutoAuth");
 
 // src/auth/hooks/useTwoFactor.ts
-var import_react7 = require("react");
+var import_react8 = require("react");
 var import_hooks4 = require("@djangocfg/ui-nextjs/hooks");
 
 // src/generated/cfg_totp/totp__backup_codes/client.ts
@@ -5757,14 +5882,14 @@ var apiCentrifugo = new API2(apiUrl2, { storage });
 var useTwoFactor = /* @__PURE__ */ __name((options = {}) => {
   const { onSuccess, onError, redirectUrl, skipRedirect = false } = options;
   const router = (0, import_hooks4.useCfgRouter)();
-  const [isLoading, setIsLoading] = (0, import_react7.useState)(false);
-  const [error, setError] = (0, import_react7.useState)(null);
-  const [warning, setWarning] = (0, import_react7.useState)(null);
-  const [remainingBackupCodes, setRemainingBackupCodes] = (0, import_react7.useState)(null);
-  const clearError = (0, import_react7.useCallback)(() => {
+  const [isLoading, setIsLoading] = (0, import_react8.useState)(false);
+  const [error, setError] = (0, import_react8.useState)(null);
+  const [warning, setWarning] = (0, import_react8.useState)(null);
+  const [remainingBackupCodes, setRemainingBackupCodes] = (0, import_react8.useState)(null);
+  const clearError = (0, import_react8.useCallback)(() => {
     setError(null);
   }, []);
-  const handleSuccess = (0, import_react7.useCallback)((response) => {
+  const handleSuccess = (0, import_react8.useCallback)((response) => {
     apiAccounts.setToken(response.access_token, response.refresh_token);
     if (response.warning) {
       setWarning(response.warning);
@@ -5786,7 +5911,7 @@ var useTwoFactor = /* @__PURE__ */ __name((options = {}) => {
       router.hardPush(finalRedirectUrl);
     }
   }, [onSuccess, redirectUrl, router, skipRedirect]);
-  const verifyTOTP = (0, import_react7.useCallback)(async (sessionId, code) => {
+  const verifyTOTP = (0, import_react8.useCallback)(async (sessionId, code) => {
     if (!sessionId) {
       const msg = "Missing 2FA session ID";
       setError(msg);
@@ -5826,7 +5951,7 @@ var useTwoFactor = /* @__PURE__ */ __name((options = {}) => {
       setIsLoading(false);
     }
   }, [handleSuccess, onError]);
-  const verifyBackupCode = (0, import_react7.useCallback)(async (sessionId, backupCode) => {
+  const verifyBackupCode = (0, import_react8.useCallback)(async (sessionId, backupCode) => {
     if (!sessionId) {
       const msg = "Missing 2FA session ID";
       setError(msg);
@@ -5892,7 +6017,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
   } = options;
   const formState = useAuthFormState();
   const validation = useAuthValidation();
-  const isAutoSubmitFromUrlRef = (0, import_react8.useRef)(false);
+  const isAutoSubmitFromUrlRef = (0, import_react9.useRef)(false);
   const {
     requestOTP,
     verifyOTP,
@@ -5939,7 +6064,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     // We handle navigation via success step
   });
   const { detectChannelFromIdentifier: detectChannelFromIdentifier2, validateIdentifier: validateIdentifier2 } = validation;
-  const saveIdentifierToStorage = (0, import_react8.useCallback)((id, ch) => {
+  const saveIdentifierToStorage = (0, import_react9.useCallback)((id, ch) => {
     if (ch === "email") {
       saveEmail(id);
       clearSavedPhone();
@@ -5948,7 +6073,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       clearSavedEmail();
     }
   }, [saveEmail, savePhone, clearSavedEmail, clearSavedPhone]);
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     const savedPhone = getSavedPhone();
     const savedEmail = getSavedEmail();
     if (savedPhone) {
@@ -5959,7 +6084,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       setChannel("email");
     }
   }, [getSavedEmail, getSavedPhone, setIdentifier, setChannel]);
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     if (identifier) {
       const detected = detectChannelFromIdentifier2(identifier);
       if (detected && detected !== channel) {
@@ -5967,7 +6092,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       }
     }
   }, [identifier, channel, detectChannelFromIdentifier2, setChannel]);
-  const handleIdentifierSubmit = (0, import_react8.useCallback)(async (e) => {
+  const handleIdentifierSubmit = (0, import_react9.useCallback)(async (e) => {
     e.preventDefault();
     if (!identifier) {
       const msg = channel === "phone" ? "Please enter your phone number" : "Please enter your email address";
@@ -6022,7 +6147,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     onError,
     sourceUrl
   ]);
-  const submitOTP = (0, import_react8.useCallback)(async (submitIdentifier, submitOtp, submitChannel) => {
+  const submitOTP = (0, import_react9.useCallback)(async (submitIdentifier, submitOtp, submitChannel) => {
     if (!submitOtp || submitOtp.length < 6) {
       const msg = "Please enter the 6-digit verification code";
       setError(msg);
@@ -6072,11 +6197,11 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       setIsLoading(false);
     }
   }, [verifyOTP, saveIdentifierToStorage, setError, setIsLoading, clearError, onOTPSuccess, onError, sourceUrl, redirectUrl, setTwoFactorSessionId, setShouldPrompt2FA, setStep, enable2FASetup]);
-  const handleOTPSubmit = (0, import_react8.useCallback)(async (e) => {
+  const handleOTPSubmit = (0, import_react9.useCallback)(async (e) => {
     e.preventDefault();
     await submitOTP(identifier, otp, channel);
   }, [identifier, otp, channel, submitOTP]);
-  const handleResendOTP = (0, import_react8.useCallback)(async () => {
+  const handleResendOTP = (0, import_react9.useCallback)(async () => {
     setIsLoading(true);
     clearError();
     try {
@@ -6096,15 +6221,15 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       setIsLoading(false);
     }
   }, [identifier, channel, requestOTP, saveIdentifierToStorage, setOtp, setError, setIsLoading, clearError, onError, sourceUrl]);
-  const handleBackToIdentifier = (0, import_react8.useCallback)(() => {
+  const handleBackToIdentifier = (0, import_react9.useCallback)(() => {
     setStep("identifier");
     clearError();
   }, [setStep, clearError]);
-  const forceOTPStep = (0, import_react8.useCallback)(() => {
+  const forceOTPStep = (0, import_react9.useCallback)(() => {
     setStep("otp");
     clearError();
   }, [setStep, clearError]);
-  const handle2FASubmit = (0, import_react8.useCallback)(async (e) => {
+  const handle2FASubmit = (0, import_react9.useCallback)(async (e) => {
     e.preventDefault();
     if (!twoFactorSessionId) {
       const msg = "Missing 2FA session";
@@ -6118,12 +6243,12 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       await twoFactor.verifyTOTP(twoFactorSessionId, twoFactorCode);
     }
   }, [twoFactorSessionId, twoFactorCode, useBackupCode, twoFactor, setError, onError]);
-  const handleUseBackupCode = (0, import_react8.useCallback)(() => {
+  const handleUseBackupCode = (0, import_react9.useCallback)(() => {
     setUseBackupCode(true);
     setTwoFactorCode("");
     clearError();
   }, [setUseBackupCode, setTwoFactorCode, clearError]);
-  const handleUseTOTP = (0, import_react8.useCallback)(() => {
+  const handleUseTOTP = (0, import_react9.useCallback)(() => {
     setUseBackupCode(false);
     setTwoFactorCode("");
     clearError();
@@ -6188,14 +6313,14 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
 }, "useAuthForm");
 
 // src/auth/hooks/useGithubAuth.ts
-var import_react9 = require("react");
+var import_react10 = require("react");
 var import_hooks5 = require("@djangocfg/ui-nextjs/hooks");
 var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
   const { sourceUrl, onSuccess, onError, onRequires2FA, redirectUrl, skipRedirect = false } = options;
   const router = (0, import_hooks5.useCfgRouter)();
-  const [isLoading, setIsLoading] = (0, import_react9.useState)(false);
-  const [error, setError] = (0, import_react9.useState)(null);
-  const startGithubAuth = (0, import_react9.useCallback)(async () => {
+  const [isLoading, setIsLoading] = (0, import_react10.useState)(false);
+  const [error, setError] = (0, import_react10.useState)(null);
+  const startGithubAuth = (0, import_react10.useCallback)(async () => {
     setIsLoading(true);
     setError(null);
     try {
@@ -6229,7 +6354,7 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
       setIsLoading(false);
     }
   }, [sourceUrl, onError]);
-  const handleGithubCallback = (0, import_react9.useCallback)(async (code, state) => {
+  const handleGithubCallback = (0, import_react10.useCallback)(async (code, state) => {
     setIsLoading(true);
     setError(null);
     try {
@@ -6294,26 +6419,26 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
 }, "useGithubAuth");
 
 // src/auth/hooks/useTwoFactorSetup.ts
-var import_react10 = require("react");
+var import_react11 = require("react");
 var useTwoFactorSetup = /* @__PURE__ */ __name((options = {}) => {
   const { onComplete, onError } = options;
-  const [isLoading, setIsLoading] = (0, import_react10.useState)(false);
-  const [error, setError] = (0, import_react10.useState)(null);
-  const [setupData, setSetupData] = (0, import_react10.useState)(null);
-  const [backupCodes, setBackupCodes] = (0, import_react10.useState)(null);
-  const [backupCodesWarning, setBackupCodesWarning] = (0, import_react10.useState)(null);
-  const [setupStep, setSetupStep] = (0, import_react10.useState)("idle");
-  const clearError = (0, import_react10.useCallback)(() => {
+  const [isLoading, setIsLoading] = (0, import_react11.useState)(false);
+  const [error, setError] = (0, import_react11.useState)(null);
+  const [setupData, setSetupData] = (0, import_react11.useState)(null);
+  const [backupCodes, setBackupCodes] = (0, import_react11.useState)(null);
+  const [backupCodesWarning, setBackupCodesWarning] = (0, import_react11.useState)(null);
+  const [setupStep, setSetupStep] = (0, import_react11.useState)("idle");
+  const clearError = (0, import_react11.useCallback)(() => {
     setError(null);
   }, []);
-  const resetSetup = (0, import_react10.useCallback)(() => {
+  const resetSetup = (0, import_react11.useCallback)(() => {
     setSetupData(null);
     setBackupCodes(null);
     setBackupCodesWarning(null);
     setSetupStep("idle");
     setError(null);
   }, []);
-  const startSetup = (0, import_react10.useCallback)(async (deviceName) => {
+  const startSetup = (0, import_react11.useCallback)(async (deviceName) => {
     setIsLoading(true);
     setError(null);
     setSetupStep("scanning");
@@ -6343,7 +6468,7 @@ var useTwoFactorSetup = /* @__PURE__ */ __name((options = {}) => {
       setIsLoading(false);
     }
   }, [onError]);
-  const confirmSetup = (0, import_react10.useCallback)(async (code) => {
+  const confirmSetup = (0, import_react11.useCallback)(async (code) => {
     if (!setupData) {
       const msg = "Setup not started. Call startSetup() first.";
       setError(msg);
@@ -6398,16 +6523,16 @@ var useTwoFactorSetup = /* @__PURE__ */ __name((options = {}) => {
 }, "useTwoFactorSetup");
 
 // src/auth/hooks/useTwoFactorStatus.ts
-var import_react11 = require("react");
+var import_react12 = require("react");
 var useTwoFactorStatus = /* @__PURE__ */ __name(() => {
-  const [isLoading, setIsLoading] = (0, import_react11.useState)(false);
-  const [error, setError] = (0, import_react11.useState)(null);
-  const [has2FAEnabled, setHas2FAEnabled] = (0, import_react11.useState)(null);
-  const [devices, setDevices] = (0, import_react11.useState)([]);
-  const clearError = (0, import_react11.useCallback)(() => {
+  const [isLoading, setIsLoading] = (0, import_react12.useState)(false);
+  const [error, setError] = (0, import_react12.useState)(null);
+  const [has2FAEnabled, setHas2FAEnabled] = (0, import_react12.useState)(null);
+  const [devices, setDevices] = (0, import_react12.useState)([]);
+  const clearError = (0, import_react12.useCallback)(() => {
     setError(null);
   }, []);
-  const fetchStatus = (0, import_react11.useCallback)(async () => {
+  const fetchStatus = (0, import_react12.useCallback)(async () => {
     setIsLoading(true);
     setError(null);
     try {
@@ -6432,7 +6557,7 @@ var useTwoFactorStatus = /* @__PURE__ */ __name(() => {
       setIsLoading(false);
     }
   }, []);
-  const disable2FA = (0, import_react11.useCallback)(async (code) => {
+  const disable2FA = (0, import_react12.useCallback)(async (code) => {
     if (!code || code.length !== 6) {
       setError("Please enter a 6-digit code");
       return false;
@@ -6467,14 +6592,14 @@ var useTwoFactorStatus = /* @__PURE__ */ __name(() => {
 }, "useTwoFactorStatus");
 
 // src/auth/hooks/useAuthGuard.ts
-var import_react12 = require("react");
+var import_react13 = require("react");
 var import_hooks6 = require("@djangocfg/ui-nextjs/hooks");
 var useAuthGuard = /* @__PURE__ */ __name((options = {}) => {
   const { redirectTo = "/auth", requireAuth = true, saveRedirectUrl: shouldSaveUrl = true } = options;
   const { isAuthenticated, isLoading, saveRedirectUrl } = useAuth();
   const router = (0, import_hooks6.useCfgRouter)();
-  const [isRedirecting, setIsRedirecting] = (0, import_react12.useState)(false);
-  (0, import_react12.useEffect)(() => {
+  const [isRedirecting, setIsRedirecting] = (0, import_react13.useState)(false);
+  (0, import_react13.useEffect)(() => {
     if (!isLoading && requireAuth && !isAuthenticated && !isRedirecting) {
       if (shouldSaveUrl && typeof window !== "undefined") {
         const currentUrl = window.location.pathname + window.location.search;
@@ -6488,9 +6613,9 @@ var useAuthGuard = /* @__PURE__ */ __name((options = {}) => {
 }, "useAuthGuard");
 
 // src/auth/hooks/useLocalStorage.ts
-var import_react13 = require("react");
+var import_react14 = require("react");
 function useLocalStorage2(key, initialValue) {
-  const [storedValue, setStoredValue] = (0, import_react13.useState)(() => {
+  const [storedValue, setStoredValue] = (0, import_react14.useState)(() => {
     if (typeof window === "undefined") {
       return initialValue;
     }