@dereekb/firebase-server 13.12.9 → 13.13.0

package/test/index.cjs.js

@@ -4922,20 +4922,28 @@ function _ts_generator$1(thisArg, body) {
 }
 /**
  * Resolves the scopes string from config, or falls back to all registered scopes
- * from `OidcAccountService.allRegisteredScopes`.
+ * from the provider config — excluding any `adminOnlyScopes`.
+ *
+ * Admin-only scopes (e.g. `token.service`) are dropped from the default "all scopes" request because
+ * the provider hard-rejects them for non-admin users, and this default flow logs in an arbitrary
+ * (often non-admin) user. Tests that need an admin-only scope pass it explicitly via `config.scopes`.
  *
  * @param nestApp - Initialized NestJS application used to resolve {@link OidcAccountService} when no scopes override is given.
  * @param config - Optional flow config; when `config.scopes` is set, it is returned verbatim.
  * @returns The space-separated scope string to pass to the `/oidc/auth` endpoint.
  */ function resolveScopes(nestApp, config) {
     return _async_to_generator$1(function() {
-        var result, accountService;
+        var result, _providerConfig_adminOnlyScopes, accountService, providerConfig, adminOnlyScopes;
         return _ts_generator$1(this, function(_state) {
             if (config === null || config === void 0 ? void 0 : config.scopes) {
                 result = config.scopes;
             } else {
                 accountService = nestApp.get(oidc.OidcAccountService);
-                result = Object.keys(accountService.providerConfig.claims).join(' ');
+                providerConfig = accountService.providerConfig;
+                adminOnlyScopes = new Set((_providerConfig_adminOnlyScopes = providerConfig.adminOnlyScopes) !== null && _providerConfig_adminOnlyScopes !== void 0 ? _providerConfig_adminOnlyScopes : []);
+                result = Object.keys(providerConfig.claims).filter(function(scope) {
+                    return !adminOnlyScopes.has(scope);
+                }).join(' ');
             }
             return [
                 2,

package/test/index.esm.js

@@ -4921,20 +4921,28 @@ function _ts_generator$1(thisArg, body) {
 }
 /**
  * Resolves the scopes string from config, or falls back to all registered scopes
- * from `OidcAccountService.allRegisteredScopes`.
+ * from the provider config — excluding any `adminOnlyScopes`.
+ *
+ * Admin-only scopes (e.g. `token.service`) are dropped from the default "all scopes" request because
+ * the provider hard-rejects them for non-admin users, and this default flow logs in an arbitrary
+ * (often non-admin) user. Tests that need an admin-only scope pass it explicitly via `config.scopes`.
  *
  * @param nestApp - Initialized NestJS application used to resolve {@link OidcAccountService} when no scopes override is given.
  * @param config - Optional flow config; when `config.scopes` is set, it is returned verbatim.
  * @returns The space-separated scope string to pass to the `/oidc/auth` endpoint.
  */ function resolveScopes(nestApp, config) {
     return _async_to_generator$1(function() {
-        var result, accountService;
+        var result, _providerConfig_adminOnlyScopes, accountService, providerConfig, adminOnlyScopes;
         return _ts_generator$1(this, function(_state) {
             if (config === null || config === void 0 ? void 0 : config.scopes) {
                 result = config.scopes;
             } else {
                 accountService = nestApp.get(OidcAccountService);
-                result = Object.keys(accountService.providerConfig.claims).join(' ');
+                providerConfig = accountService.providerConfig;
+                adminOnlyScopes = new Set((_providerConfig_adminOnlyScopes = providerConfig.adminOnlyScopes) !== null && _providerConfig_adminOnlyScopes !== void 0 ? _providerConfig_adminOnlyScopes : []);
+                result = Object.keys(providerConfig.claims).filter(function(scope) {
+                    return !adminOnlyScopes.has(scope);
+                }).join(' ');
             }
             return [
                 2,

package/test/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@dereekb/firebase-server/test",
-  "version": "13.12.9",
+  "version": "13.13.0",
   "peerDependencies": {
-    "@dereekb/analytics": "13.12.9",
-    "@dereekb/date": "13.12.9",
-    "@dereekb/firebase": "13.12.9",
-    "@dereekb/firebase-server": "13.12.9",
-    "@dereekb/firebase-server/oidc": "13.12.9",
-    "@dereekb/model": "13.12.9",
-    "@dereekb/nestjs": "13.12.9",
-    "@dereekb/rxjs": "13.12.9",
-    "@dereekb/util": "13.12.9",
+    "@dereekb/analytics": "13.13.0",
+    "@dereekb/date": "13.13.0",
+    "@dereekb/firebase": "13.13.0",
+    "@dereekb/firebase-server": "13.13.0",
+    "@dereekb/firebase-server/oidc": "13.13.0",
+    "@dereekb/model": "13.13.0",
+    "@dereekb/nestjs": "13.13.0",
+    "@dereekb/rxjs": "13.13.0",
+    "@dereekb/util": "13.13.0",
     "@google-cloud/firestore": "^7.11.6",
     "@google-cloud/storage": "^7.19.0",
     "@nestjs/common": "^11.1.19",
@@ -23,7 +23,7 @@
     "supertest": "^7.2.2"
   },
   "devDependencies": {
-    "@dereekb/nestjs": "13.12.9"
+    "@dereekb/nestjs": "13.13.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/twilio/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@dereekb/firebase-server/twilio",
-  "version": "13.12.9",
+  "version": "13.13.0",
   "peerDependencies": {
-    "@dereekb/date": "13.12.9",
-    "@dereekb/firebase": "13.12.9",
-    "@dereekb/firebase-server": "13.12.9",
-    "@dereekb/model": "13.12.9",
-    "@dereekb/nestjs": "13.12.9",
-    "@dereekb/rxjs": "13.12.9",
-    "@dereekb/util": "13.12.9"
+    "@dereekb/date": "13.13.0",
+    "@dereekb/firebase": "13.13.0",
+    "@dereekb/firebase-server": "13.13.0",
+    "@dereekb/model": "13.13.0",
+    "@dereekb/nestjs": "13.13.0",
+    "@dereekb/rxjs": "13.13.0",
+    "@dereekb/util": "13.13.0"
   },
   "exports": {
     "./package.json": "./package.json",

package/zoho/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@dereekb/firebase-server/zoho",
-  "version": "13.12.9",
+  "version": "13.13.0",
   "peerDependencies": {
-    "@dereekb/analytics": "13.12.9",
-    "@dereekb/date": "13.12.9",
-    "@dereekb/model": "13.12.9",
-    "@dereekb/nestjs": "13.12.9",
-    "@dereekb/rxjs": "13.12.9",
-    "@dereekb/firebase": "13.12.9",
-    "@dereekb/util": "13.12.9",
-    "@dereekb/zoho": "13.12.9"
+    "@dereekb/analytics": "13.13.0",
+    "@dereekb/date": "13.13.0",
+    "@dereekb/model": "13.13.0",
+    "@dereekb/nestjs": "13.13.0",
+    "@dereekb/rxjs": "13.13.0",
+    "@dereekb/firebase": "13.13.0",
+    "@dereekb/util": "13.13.0",
+    "@dereekb/zoho": "13.13.0"
   },
   "exports": {
     "./package.json": "./package.json",