@depup/firebase__auth 1.12.1-depup.0

package/dist/src/api/authentication/token.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { Auth } from '../../model/public_types';
+export declare const enum TokenType {
+    REFRESH_TOKEN = "REFRESH_TOKEN",
+    ACCESS_TOKEN = "ACCESS_TOKEN"
+}
+export interface RequestStsTokenResponse {
+    accessToken: string;
+    expiresIn: string;
+    refreshToken: string;
+}
+export interface RevokeTokenRequest {
+    providerId: string;
+    tokenType: TokenType;
+    token: string;
+    idToken: string;
+    tenantId?: string;
+}
+export interface RevokeTokenResponse {
+}
+export declare function requestStsToken(auth: Auth, refreshToken: string): Promise<RequestStsTokenResponse>;
+export declare function revokeToken(auth: Auth, request: RevokeTokenRequest): Promise<RevokeTokenResponse>;

package/dist/src/api/errors.d.ts

@@ -0,0 +1,129 @@
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { AuthErrorCode } from '../core/errors';
+/**
+ * Errors that can be returned by the backend
+ */
+export declare const enum ServerError {
+    ADMIN_ONLY_OPERATION = "ADMIN_ONLY_OPERATION",
+    BLOCKING_FUNCTION_ERROR_RESPONSE = "BLOCKING_FUNCTION_ERROR_RESPONSE",
+    CAPTCHA_CHECK_FAILED = "CAPTCHA_CHECK_FAILED",
+    CORS_UNSUPPORTED = "CORS_UNSUPPORTED",
+    CREDENTIAL_MISMATCH = "CREDENTIAL_MISMATCH",
+    CREDENTIAL_TOO_OLD_LOGIN_AGAIN = "CREDENTIAL_TOO_OLD_LOGIN_AGAIN",
+    DYNAMIC_LINK_NOT_ACTIVATED = "DYNAMIC_LINK_NOT_ACTIVATED",
+    EMAIL_CHANGE_NEEDS_VERIFICATION = "EMAIL_CHANGE_NEEDS_VERIFICATION",
+    EMAIL_EXISTS = "EMAIL_EXISTS",
+    EMAIL_NOT_FOUND = "EMAIL_NOT_FOUND",
+    EXPIRED_OOB_CODE = "EXPIRED_OOB_CODE",
+    FEDERATED_USER_ID_ALREADY_LINKED = "FEDERATED_USER_ID_ALREADY_LINKED",
+    INVALID_APP_CREDENTIAL = "INVALID_APP_CREDENTIAL",
+    INVALID_APP_ID = "INVALID_APP_ID",
+    INVALID_CERT_HASH = "INVALID_CERT_HASH",
+    INVALID_CODE = "INVALID_CODE",
+    INVALID_CONTINUE_URI = "INVALID_CONTINUE_URI",
+    INVALID_CUSTOM_TOKEN = "INVALID_CUSTOM_TOKEN",
+    INVALID_DYNAMIC_LINK_DOMAIN = "INVALID_DYNAMIC_LINK_DOMAIN",
+    INVALID_EMAIL = "INVALID_EMAIL",
+    INVALID_ID_TOKEN = "INVALID_ID_TOKEN",
+    INVALID_IDP_RESPONSE = "INVALID_IDP_RESPONSE",
+    INVALID_IDENTIFIER = "INVALID_IDENTIFIER",
+    INVALID_LOGIN_CREDENTIALS = "INVALID_LOGIN_CREDENTIALS",
+    INVALID_MESSAGE_PAYLOAD = "INVALID_MESSAGE_PAYLOAD",
+    INVALID_MFA_PENDING_CREDENTIAL = "INVALID_MFA_PENDING_CREDENTIAL",
+    INVALID_OAUTH_CLIENT_ID = "INVALID_OAUTH_CLIENT_ID",
+    INVALID_OOB_CODE = "INVALID_OOB_CODE",
+    INVALID_PASSWORD = "INVALID_PASSWORD",
+    INVALID_PENDING_TOKEN = "INVALID_PENDING_TOKEN",
+    INVALID_PHONE_NUMBER = "INVALID_PHONE_NUMBER",
+    INVALID_PROVIDER_ID = "INVALID_PROVIDER_ID",
+    INVALID_RECIPIENT_EMAIL = "INVALID_RECIPIENT_EMAIL",
+    INVALID_SENDER = "INVALID_SENDER",
+    INVALID_SESSION_INFO = "INVALID_SESSION_INFO",
+    INVALID_TEMPORARY_PROOF = "INVALID_TEMPORARY_PROOF",
+    INVALID_TENANT_ID = "INVALID_TENANT_ID",
+    MFA_ENROLLMENT_NOT_FOUND = "MFA_ENROLLMENT_NOT_FOUND",
+    MISSING_ANDROID_PACKAGE_NAME = "MISSING_ANDROID_PACKAGE_NAME",
+    MISSING_APP_CREDENTIAL = "MISSING_APP_CREDENTIAL",
+    MISSING_CODE = "MISSING_CODE",
+    MISSING_CONTINUE_URI = "MISSING_CONTINUE_URI",
+    MISSING_CUSTOM_TOKEN = "MISSING_CUSTOM_TOKEN",
+    MISSING_IOS_BUNDLE_ID = "MISSING_IOS_BUNDLE_ID",
+    MISSING_MFA_ENROLLMENT_ID = "MISSING_MFA_ENROLLMENT_ID",
+    MISSING_MFA_PENDING_CREDENTIAL = "MISSING_MFA_PENDING_CREDENTIAL",
+    MISSING_OOB_CODE = "MISSING_OOB_CODE",
+    MISSING_OR_INVALID_NONCE = "MISSING_OR_INVALID_NONCE",
+    MISSING_PASSWORD = "MISSING_PASSWORD",
+    MISSING_REQ_TYPE = "MISSING_REQ_TYPE",
+    MISSING_PHONE_NUMBER = "MISSING_PHONE_NUMBER",
+    MISSING_SESSION_INFO = "MISSING_SESSION_INFO",
+    OPERATION_NOT_ALLOWED = "OPERATION_NOT_ALLOWED",
+    PASSWORD_LOGIN_DISABLED = "PASSWORD_LOGIN_DISABLED",
+    QUOTA_EXCEEDED = "QUOTA_EXCEEDED",
+    RESET_PASSWORD_EXCEED_LIMIT = "RESET_PASSWORD_EXCEED_LIMIT",
+    REJECTED_CREDENTIAL = "REJECTED_CREDENTIAL",
+    SECOND_FACTOR_EXISTS = "SECOND_FACTOR_EXISTS",
+    SECOND_FACTOR_LIMIT_EXCEEDED = "SECOND_FACTOR_LIMIT_EXCEEDED",
+    SESSION_EXPIRED = "SESSION_EXPIRED",
+    TENANT_ID_MISMATCH = "TENANT_ID_MISMATCH",
+    TOKEN_EXPIRED = "TOKEN_EXPIRED",
+    TOO_MANY_ATTEMPTS_TRY_LATER = "TOO_MANY_ATTEMPTS_TRY_LATER",
+    UNSUPPORTED_FIRST_FACTOR = "UNSUPPORTED_FIRST_FACTOR",
+    UNSUPPORTED_TENANT_OPERATION = "UNSUPPORTED_TENANT_OPERATION",
+    UNAUTHORIZED_DOMAIN = "UNAUTHORIZED_DOMAIN",
+    UNVERIFIED_EMAIL = "UNVERIFIED_EMAIL",
+    USER_CANCELLED = "USER_CANCELLED",
+    USER_DISABLED = "USER_DISABLED",
+    USER_NOT_FOUND = "USER_NOT_FOUND",
+    WEAK_PASSWORD = "WEAK_PASSWORD",
+    RECAPTCHA_NOT_ENABLED = "RECAPTCHA_NOT_ENABLED",
+    MISSING_RECAPTCHA_TOKEN = "MISSING_RECAPTCHA_TOKEN",
+    INVALID_RECAPTCHA_TOKEN = "INVALID_RECAPTCHA_TOKEN",
+    INVALID_RECAPTCHA_ACTION = "INVALID_RECAPTCHA_ACTION",
+    MISSING_CLIENT_TYPE = "MISSING_CLIENT_TYPE",
+    MISSING_RECAPTCHA_VERSION = "MISSING_RECAPTCHA_VERSION",
+    INVALID_RECAPTCHA_VERSION = "INVALID_RECAPTCHA_VERSION",
+    INVALID_REQ_TYPE = "INVALID_REQ_TYPE",
+    PASSWORD_DOES_NOT_MEET_REQUIREMENTS = "PASSWORD_DOES_NOT_MEET_REQUIREMENTS",
+    INVALID_HOSTING_LINK_DOMAIN = "INVALID_HOSTING_LINK_DOMAIN"
+}
+/**
+ * API Response in the event of an error
+ */
+export interface JsonError {
+    error: {
+        code: number;
+        message: string;
+        errors?: [
+            {
+                message: ServerError;
+                domain: string;
+                reason: string;
+            }
+        ];
+    };
+}
+/**
+ * Type definition for a map from server errors to developer visible errors
+ */
+export declare type ServerErrorMap<ApiError extends string> = {
+    readonly [K in ApiError]: AuthErrorCode;
+};
+/**
+ * Map from errors returned by the server to errors to developer visible errors
+ */
+export declare const SERVER_ERROR_MAP: Partial<ServerErrorMap<ServerError>>;

package/dist/src/api/index.d.ts

@@ -0,0 +1,101 @@
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { FirebaseError } from '@firebase/util';
+import { AuthErrorCode } from '../core/errors';
+import { Delay } from '../core/util/delay';
+import { Auth } from '../model/public_types';
+import { IdTokenResponse } from '../model/id_token';
+import { ServerError, ServerErrorMap } from './errors';
+export declare const enum HttpMethod {
+    POST = "POST",
+    GET = "GET"
+}
+export declare const enum HttpHeader {
+    CONTENT_TYPE = "Content-Type",
+    X_FIREBASE_LOCALE = "X-Firebase-Locale",
+    X_CLIENT_VERSION = "X-Client-Version",
+    X_FIREBASE_GMPID = "X-Firebase-gmpid",
+    X_FIREBASE_CLIENT = "X-Firebase-Client",
+    X_FIREBASE_APP_CHECK = "X-Firebase-AppCheck"
+}
+export declare const enum Endpoint {
+    CREATE_AUTH_URI = "/v1/accounts:createAuthUri",
+    DELETE_ACCOUNT = "/v1/accounts:delete",
+    RESET_PASSWORD = "/v1/accounts:resetPassword",
+    SIGN_UP = "/v1/accounts:signUp",
+    SIGN_IN_WITH_CUSTOM_TOKEN = "/v1/accounts:signInWithCustomToken",
+    SIGN_IN_WITH_EMAIL_LINK = "/v1/accounts:signInWithEmailLink",
+    SIGN_IN_WITH_IDP = "/v1/accounts:signInWithIdp",
+    SIGN_IN_WITH_PASSWORD = "/v1/accounts:signInWithPassword",
+    SIGN_IN_WITH_PHONE_NUMBER = "/v1/accounts:signInWithPhoneNumber",
+    SEND_VERIFICATION_CODE = "/v1/accounts:sendVerificationCode",
+    SEND_OOB_CODE = "/v1/accounts:sendOobCode",
+    SET_ACCOUNT_INFO = "/v1/accounts:update",
+    GET_ACCOUNT_INFO = "/v1/accounts:lookup",
+    GET_RECAPTCHA_PARAM = "/v1/recaptchaParams",
+    START_MFA_ENROLLMENT = "/v2/accounts/mfaEnrollment:start",
+    FINALIZE_MFA_ENROLLMENT = "/v2/accounts/mfaEnrollment:finalize",
+    START_MFA_SIGN_IN = "/v2/accounts/mfaSignIn:start",
+    FINALIZE_MFA_SIGN_IN = "/v2/accounts/mfaSignIn:finalize",
+    WITHDRAW_MFA = "/v2/accounts/mfaEnrollment:withdraw",
+    GET_PROJECT_CONFIG = "/v1/projects",
+    GET_RECAPTCHA_CONFIG = "/v2/recaptchaConfig",
+    GET_PASSWORD_POLICY = "/v2/passwordPolicy",
+    TOKEN = "/v1/token",
+    REVOKE_TOKEN = "/v2/accounts:revokeToken"
+}
+export declare const enum RecaptchaClientType {
+    WEB = "CLIENT_TYPE_WEB",
+    ANDROID = "CLIENT_TYPE_ANDROID",
+    IOS = "CLIENT_TYPE_IOS"
+}
+export declare const enum RecaptchaVersion {
+    ENTERPRISE = "RECAPTCHA_ENTERPRISE"
+}
+export declare const enum RecaptchaActionName {
+    SIGN_IN_WITH_PASSWORD = "signInWithPassword",
+    GET_OOB_CODE = "getOobCode",
+    SIGN_UP_PASSWORD = "signUpPassword",
+    SEND_VERIFICATION_CODE = "sendVerificationCode",
+    MFA_SMS_ENROLLMENT = "mfaSmsEnrollment",
+    MFA_SMS_SIGNIN = "mfaSmsSignIn"
+}
+export declare const enum EnforcementState {
+    ENFORCE = "ENFORCE",
+    AUDIT = "AUDIT",
+    OFF = "OFF",
+    ENFORCEMENT_STATE_UNSPECIFIED = "ENFORCEMENT_STATE_UNSPECIFIED"
+}
+export declare const enum RecaptchaAuthProvider {
+    EMAIL_PASSWORD_PROVIDER = "EMAIL_PASSWORD_PROVIDER",
+    PHONE_PROVIDER = "PHONE_PROVIDER"
+}
+export declare const DEFAULT_API_TIMEOUT_MS: Delay;
+export declare function _addTidIfNecessary<T extends {
+    tenantId?: string;
+}>(auth: Auth, request: T): T;
+export declare function _performApiRequest<T, V>(auth: Auth, method: HttpMethod, path: Endpoint, request?: T, customErrorMap?: Partial<ServerErrorMap<ServerError>>): Promise<V>;
+export declare function _performFetchWithErrorHandling<V>(auth: Auth, customErrorMap: Partial<ServerErrorMap<ServerError>>, fetchFn: () => Promise<Response>): Promise<V>;
+export declare function _performSignInRequest<T, V extends IdTokenResponse>(auth: Auth, method: HttpMethod, path: Endpoint, request?: T, customErrorMap?: Partial<ServerErrorMap<ServerError>>): Promise<V>;
+export declare function _getFinalTarget(auth: Auth, host: string, path: string, query: string): Promise<string>;
+export declare function _parseEnforcementState(enforcementStateStr: string): EnforcementState;
+interface PotentialResponse extends IdTokenResponse {
+    email?: string;
+    phoneNumber?: string;
+}
+export declare function _makeTaggedError(auth: Auth, code: AuthErrorCode, response: PotentialResponse): FirebaseError;
+export {};

package/dist/src/api/password_policy/get_password_policy.d.ts

@@ -0,0 +1,48 @@
+/**
+ * @license
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { Auth } from '../../model/public_types';
+/**
+ * Request object for fetching the password policy.
+ */
+export interface GetPasswordPolicyRequest {
+    tenantId?: string;
+}
+/**
+ * Response object for fetching the password policy.
+ */
+export interface GetPasswordPolicyResponse {
+    customStrengthOptions: {
+        minPasswordLength?: number;
+        maxPasswordLength?: number;
+        containsLowercaseCharacter?: boolean;
+        containsUppercaseCharacter?: boolean;
+        containsNumericCharacter?: boolean;
+        containsNonAlphanumericCharacter?: boolean;
+    };
+    allowedNonAlphanumericCharacters?: string[];
+    enforcementState: string;
+    forceUpgradeOnSignin?: boolean;
+    schemaVersion: number;
+}
+/**
+ * Fetches the password policy for the currently set tenant or the project if no tenant is set.
+ *
+ * @param auth Auth object.
+ * @param request Password policy request.
+ * @returns Password policy response.
+ */
+export declare function _getPasswordPolicy(auth: Auth, request?: GetPasswordPolicyRequest): Promise<GetPasswordPolicyResponse>;

package/dist/src/api/project_config/get_project_config.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { Auth } from '../../model/public_types';
+export interface GetProjectConfigRequest {
+    androidPackageName?: string;
+    iosBundleId?: string;
+}
+export interface GetProjectConfigResponse {
+    authorizedDomains: string[];
+}
+export declare function _getProjectConfig(auth: Auth, request?: GetProjectConfigRequest): Promise<GetProjectConfigResponse>;

package/dist/src/core/action_code_url.d.ts

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * A utility class to parse email action URLs such as password reset, email verification,
+ * email link sign in, etc.
+ *
+ * @public
+ */
+export declare class ActionCodeURL {
+    /**
+     * The API key of the email action link.
+     */
+    readonly apiKey: string;
+    /**
+     * The action code of the email action link.
+     */
+    readonly code: string;
+    /**
+     * The continue URL of the email action link. Null if not provided.
+     */
+    readonly continueUrl: string | null;
+    /**
+     * The language code of the email action link. Null if not provided.
+     */
+    readonly languageCode: string | null;
+    /**
+     * The action performed by the email action link. It returns from one of the types from
+     * {@link ActionCodeInfo}
+     */
+    readonly operation: string;
+    /**
+     * The tenant ID of the email action link. Null if the email action is from the parent project.
+     */
+    readonly tenantId: string | null;
+    /**
+     * @param actionLink - The link from which to extract the URL.
+     * @returns The {@link ActionCodeURL} object, or null if the link is invalid.
+     *
+     * @internal
+     */
+    constructor(actionLink: string);
+    /**
+     * Parses the email action link string and returns an {@link ActionCodeURL} if the link is valid,
+     * otherwise returns null.
+     *
+     * @param link  - The email action link string.
+     * @returns The {@link ActionCodeURL} object, or null if the link is invalid.
+     *
+     * @public
+     */
+    static parseLink(link: string): ActionCodeURL | null;
+}
+/**
+ * Parses the email action link string and returns an {@link ActionCodeURL} if
+ * the link is valid, otherwise returns null.
+ *
+ * @public
+ */
+export declare function parseActionCodeURL(link: string): ActionCodeURL | null;

package/dist/src/core/auth/auth_event_manager.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { AuthEvent, AuthEventConsumer, EventManager } from '../../model/popup_redirect';
+import { AuthInternal } from '../../model/auth';
+export declare class AuthEventManager implements EventManager {
+    private readonly auth;
+    private readonly cachedEventUids;
+    private readonly consumers;
+    protected queuedRedirectEvent: AuthEvent | null;
+    protected hasHandledPotentialRedirect: boolean;
+    private lastProcessedEventTime;
+    constructor(auth: AuthInternal);
+    registerConsumer(authEventConsumer: AuthEventConsumer): void;
+    unregisterConsumer(authEventConsumer: AuthEventConsumer): void;
+    onEvent(event: AuthEvent): boolean;
+    private sendToConsumer;
+    private isEventForConsumer;
+    private hasEventBeenHandled;
+    private saveEventToCache;
+}

package/dist/src/core/auth/auth_impl.d.ts

@@ -0,0 +1,133 @@
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { _FirebaseService, FirebaseApp } from '@firebase/app';
+import { Provider } from '@firebase/component';
+import { AppCheckInternalComponentName } from '@firebase/app-check-interop-types';
+import { Auth, AuthErrorMap, AuthSettings, EmulatorConfig, NextOrObserver, Persistence, PopupRedirectResolver, User, CompleteFn, ErrorFn, Unsubscribe, PasswordValidationStatus } from '../../model/public_types';
+import { ErrorFactory } from '@firebase/util';
+import { AuthInternal, ConfigInternal } from '../../model/auth';
+import { PopupRedirectResolverInternal } from '../../model/popup_redirect';
+import { UserInternal } from '../../model/user';
+import { AuthErrorCode, AuthErrorParams } from '../errors';
+import { PersistenceInternal } from '../persistence';
+import { RecaptchaConfig } from '../../platform_browser/recaptcha/recaptcha';
+import { PasswordPolicyInternal } from '../../model/password_policy';
+export declare const enum DefaultConfig {
+    TOKEN_API_HOST = "securetoken.googleapis.com",
+    API_HOST = "identitytoolkit.googleapis.com",
+    API_SCHEME = "https"
+}
+export declare class AuthImpl implements AuthInternal, _FirebaseService {
+    readonly app: FirebaseApp;
+    private readonly heartbeatServiceProvider;
+    private readonly appCheckServiceProvider;
+    readonly config: ConfigInternal;
+    currentUser: User | null;
+    emulatorConfig: EmulatorConfig | null;
+    private operations;
+    private persistenceManager?;
+    private redirectPersistenceManager?;
+    private authStateSubscription;
+    private idTokenSubscription;
+    private readonly beforeStateQueue;
+    private redirectUser;
+    private isProactiveRefreshEnabled;
+    private readonly EXPECTED_PASSWORD_POLICY_SCHEMA_VERSION;
+    _canInitEmulator: boolean;
+    _isInitialized: boolean;
+    _deleted: boolean;
+    _initializationPromise: Promise<void> | null;
+    _popupRedirectResolver: PopupRedirectResolverInternal | null;
+    _errorFactory: ErrorFactory<AuthErrorCode, AuthErrorParams>;
+    _agentRecaptchaConfig: RecaptchaConfig | null;
+    _tenantRecaptchaConfigs: Record<string, RecaptchaConfig>;
+    _projectPasswordPolicy: PasswordPolicyInternal | null;
+    _tenantPasswordPolicies: Record<string, PasswordPolicyInternal>;
+    _resolvePersistenceManagerAvailable: ((value: void | PromiseLike<void>) => void) | undefined;
+    _persistenceManagerAvailable: Promise<void>;
+    readonly name: string;
+    private lastNotifiedUid;
+    languageCode: string | null;
+    tenantId: string | null;
+    settings: AuthSettings;
+    constructor(app: FirebaseApp, heartbeatServiceProvider: Provider<'heartbeat'>, appCheckServiceProvider: Provider<AppCheckInternalComponentName>, config: ConfigInternal);
+    _initializeWithPersistence(persistenceHierarchy: PersistenceInternal[], popupRedirectResolver?: PopupRedirectResolver): Promise<void>;
+    /**
+     * If the persistence is changed in another window, the user manager will let us know
+     */
+    _onStorageEvent(): Promise<void>;
+    private initializeCurrentUserFromIdToken;
+    private initializeCurrentUser;
+    private tryRedirectSignIn;
+    private reloadAndSetCurrentUserOrClear;
+    useDeviceLanguage(): void;
+    _delete(): Promise<void>;
+    updateCurrentUser(userExtern: User | null): Promise<void>;
+    _updateCurrentUser(user: User | null, skipBeforeStateCallbacks?: boolean): Promise<void>;
+    signOut(): Promise<void>;
+    setPersistence(persistence: Persistence): Promise<void>;
+    _getRecaptchaConfig(): RecaptchaConfig | null;
+    validatePassword(password: string): Promise<PasswordValidationStatus>;
+    _getPasswordPolicyInternal(): PasswordPolicyInternal | null;
+    _updatePasswordPolicy(): Promise<void>;
+    _getPersistenceType(): string;
+    _getPersistence(): PersistenceInternal;
+    _updateErrorMap(errorMap: AuthErrorMap): void;
+    onAuthStateChanged(nextOrObserver: NextOrObserver<User>, error?: ErrorFn, completed?: CompleteFn): Unsubscribe;
+    beforeAuthStateChanged(callback: (user: User | null) => void | Promise<void>, onAbort?: () => void): Unsubscribe;
+    onIdTokenChanged(nextOrObserver: NextOrObserver<User>, error?: ErrorFn, completed?: CompleteFn): Unsubscribe;
+    authStateReady(): Promise<void>;
+    /**
+     * Revokes the given access token. Currently only supports Apple OAuth access tokens.
+     */
+    revokeAccessToken(token: string): Promise<void>;
+    toJSON(): object;
+    _setRedirectUser(user: UserInternal | null, popupRedirectResolver?: PopupRedirectResolver): Promise<void>;
+    private getOrInitRedirectPersistenceManager;
+    _redirectUserForId(id: string): Promise<UserInternal | null>;
+    _persistUserIfCurrent(user: UserInternal): Promise<void>;
+    /** Notifies listeners only if the user is current */
+    _notifyListenersIfCurrent(user: UserInternal): void;
+    _key(): string;
+    _startProactiveRefresh(): void;
+    _stopProactiveRefresh(): void;
+    /** Returns the current user cast as the internal type */
+    get _currentUser(): UserInternal;
+    private notifyAuthListeners;
+    private registerStateListener;
+    /**
+     * Unprotected (from race conditions) method to set the current user. This
+     * should only be called from within a queued callback. This is necessary
+     * because the queue shouldn't rely on another queued callback.
+     */
+    private directlySetCurrentUser;
+    private queue;
+    private get assertedPersistence();
+    private frameworks;
+    private clientVersion;
+    _logFramework(framework: string): void;
+    _getFrameworks(): readonly string[];
+    _getAdditionalHeaders(): Promise<Record<string, string>>;
+    _getAppCheckToken(): Promise<string | undefined>;
+}
+/**
+ * Method to be used to cast down to our private implementation of Auth.
+ * It will also handle unwrapping from the compat type if necessary
+ *
+ * @param auth Auth object passed in from developer
+ */
+export declare function _castAuth(auth: Auth): AuthInternal;

package/dist/src/core/auth/emulator.d.ts

@@ -0,0 +1,42 @@
+/**
+ * @license
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { Auth } from '../../model/public_types';
+/**
+ * Changes the {@link Auth} instance to communicate with the Firebase Auth Emulator, instead of production
+ * Firebase Auth services.
+ *
+ * @remarks
+ * This must be called synchronously immediately following the first call to
+ * {@link initializeAuth}.  Do not use with production credentials as emulator
+ * traffic is not encrypted.
+ *
+ *
+ * @example
+ * ```javascript
+ * connectAuthEmulator(auth, 'http://127.0.0.1:9099', { disableWarnings: true });
+ * ```
+ *
+ * @param auth - The {@link Auth} instance.
+ * @param url - The URL at which the emulator is running (eg, 'http://localhost:9099').
+ * @param options - Optional. `options.disableWarnings` defaults to `false`. Set it to
+ * `true` to disable the warning banner attached to the DOM.
+ *
+ * @public
+ */
+export declare function connectAuthEmulator(auth: Auth, url: string, options?: {
+    disableWarnings: boolean;
+}): void;

package/dist/src/core/auth/firebase_internal.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { FirebaseAuthInternal } from '@firebase/auth-interop-types';
+import { AuthInternal } from '../../model/auth';
+interface TokenListener {
+    (tok: string | null): unknown;
+}
+export declare class AuthInterop implements FirebaseAuthInternal {
+    private readonly auth;
+    private readonly internalListeners;
+    constructor(auth: AuthInternal);
+    getUid(): string | null;
+    getToken(forceRefresh?: boolean): Promise<{
+        accessToken: string;
+    } | null>;
+    addAuthTokenListener(listener: TokenListener): void;
+    removeAuthTokenListener(listener: TokenListener): void;
+    private assertAuthConfigured;
+    private updateProactiveRefresh;
+}
+export {};