@dereekb/firebase-server 13.30.0 → 13.32.0

package/test/index.cjs.js

@@ -74,7 +74,7 @@ function _create_class$6(Constructor, protoProps, staticProps) {
     if (protoProps) _defineProperties$6(Constructor.prototype, protoProps);
     return Constructor;
 }
-function _define_property$8(obj, key, value) {
+function _define_property$9(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -106,7 +106,7 @@ function _inherits$9(subClass, superClass) {
     });
     if (superClass) _set_prototype_of$9(subClass, superClass);
 }
-function _object_spread$5(target) {
+function _object_spread$6(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -116,7 +116,7 @@ function _object_spread$5(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$8(target, key, source[key]);
+            _define_property$9(target, key, source[key]);
         });
     }
     return target;
@@ -371,8 +371,8 @@ function _ts_generator$a(thisArg, body) {
  */ var AuthorizedUserTestContextInstance = /*#__PURE__*/ function() {
     function AuthorizedUserTestContextInstance(uid, testContext) {
         _class_call_check$9(this, AuthorizedUserTestContextInstance);
-        _define_property$8(this, "uid", void 0);
-        _define_property$8(this, "testContext", void 0);
+        _define_property$9(this, "uid", void 0);
+        _define_property$9(this, "testContext", void 0);
         this.uid = uid;
         this.testContext = testContext;
     }
@@ -496,7 +496,7 @@ function _ts_generator$a(thisArg, body) {
             value: function callAuthBlockingFunction(input) {
                 var fn = input.fn, userRecord = input.userRecord, eventType = input.eventType, eventOverride = input.eventOverride, _input_skipJsonConversion = input.skipJsonConversion, skipJsonConversion = _input_skipJsonConversion === void 0 ? false : _input_skipJsonConversion;
                 var timestamp = new Date().toISOString();
-                var event = _object_spread_props$3(_object_spread$5({
+                var event = _object_spread_props$3(_object_spread$6({
                     ipAddress: '127.0.0.1',
                     userAgent: 'testing',
                     eventId: '0',
@@ -528,7 +528,7 @@ function _ts_generator$a(thisArg, body) {
                 var skipJsonConversion = arguments.length > 3 && arguments[3] !== void 0 ? arguments[3] : false;
                 var parsedParams = params == null || skipJsonConversion ? params : convertParamsToParsedJsonObjectAndBack(params);
                 return this.makeContextOptions().then(function(options) {
-                    return fn(parsedParams, contextOptions ? _object_spread$5({}, contextOptions, options) : options);
+                    return fn(parsedParams, contextOptions ? _object_spread$6({}, contextOptions, options) : options);
                 });
             }
         }
@@ -603,7 +603,7 @@ function _ts_generator$a(thisArg, body) {
                                 inputUser = _state.sent();
                                 inputTemplate = templateGetter();
                                 uid = (inputUser === null || inputUser === void 0 ? void 0 : inputUser.uid) || makeUid();
-                                _$_object_spread = _object_spread$5({}, makeUserDetails(uid, params), inputTemplate), details = _$_object_spread.details, claims = _$_object_spread.claims, userDetailsAddContactInfo = _$_object_spread.addContactInfo;
+                                _$_object_spread = _object_spread$6({}, makeUserDetails(uid, params), inputTemplate), details = _$_object_spread.details, claims = _$_object_spread.claims, userDetailsAddContactInfo = _$_object_spread.addContactInfo;
                                 _ref = details !== null && details !== void 0 ? details : {}, detailsPhoneNumber = _ref.phoneNumber, detailsEmail = _ref.email; // keep details if provided
                                 addContactInfo = inputAddContactInfo || userDetailsAddContactInfo;
                                 auth = f.instance.auth;
@@ -616,7 +616,7 @@ function _ts_generator$a(thisArg, body) {
                                 }
                                 return [
                                     4,
-                                    auth.createUser(_object_spread$5(_object_spread_props$3(_object_spread$5({
+                                    auth.createUser(_object_spread$6(_object_spread_props$3(_object_spread$6({
                                         uid: uid,
                                         displayName: 'Test Person'
                                     }, details), {
@@ -808,7 +808,7 @@ function _ts_generator$a(thisArg, body) {
     var _ref;
     var _decoded_claims;
     var decoded = jsonwebtoken.decode(token);
-    var decodedToken = _object_spread_props$3(_object_spread$5({}, decoded, decoded.claims), {
+    var decodedToken = _object_spread_props$3(_object_spread$6({}, decoded, decoded.claims), {
         auth_time: decoded.iat,
         firebase: (_ref = (_decoded_claims = decoded.claims) === null || _decoded_claims === void 0 ? void 0 : _decoded_claims.firebase) !== null && _ref !== void 0 ? _ref : {}
     });
@@ -839,7 +839,7 @@ function _ts_generator$a(thisArg, body) {
         }
     };
     var customClaims = userRecord.customClaims;
-    return _object_spread$5({}, customClaims, baseClaims);
+    return _object_spread$6({}, customClaims, baseClaims);
 }
 
 function _assert_this_initialized$8(self) {
@@ -899,7 +899,7 @@ function _create_class$5(Constructor, protoProps, staticProps) {
     if (protoProps) _defineProperties$5(Constructor.prototype, protoProps);
     return Constructor;
 }
-function _define_property$7(obj, key, value) {
+function _define_property$8(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -1120,9 +1120,9 @@ function _ts_generator$9(thisArg, body) {
  */ var ModelTestContextInstance = /*#__PURE__*/ function() {
     function ModelTestContextInstance(collection, ref, testContext) {
         _class_call_check$8(this, ModelTestContextInstance);
-        _define_property$7(this, "collection", void 0);
-        _define_property$7(this, "ref", void 0);
-        _define_property$7(this, "testContext", void 0);
+        _define_property$8(this, "collection", void 0);
+        _define_property$8(this, "ref", void 0);
+        _define_property$8(this, "testContext", void 0);
         this.collection = collection;
         this.ref = ref;
         this.testContext = testContext;
@@ -2009,7 +2009,7 @@ function _create_class$4(Constructor, protoProps, staticProps) {
     if (protoProps) _defineProperties$4(Constructor.prototype, protoProps);
     return Constructor;
 }
-function _define_property$6(obj, key, value) {
+function _define_property$7(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2041,7 +2041,7 @@ function _inherits$5(subClass, superClass) {
     });
     if (superClass) _set_prototype_of$5(subClass, superClass);
 }
-function _object_spread$4(target) {
+function _object_spread$5(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2051,7 +2051,7 @@ function _object_spread$4(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$6(target, key, source[key]);
+            _define_property$7(target, key, source[key]);
         });
     }
     return target;
@@ -2266,12 +2266,12 @@ function _ts_generator$6(thisArg, body) {
     function FirebaseAdminTestContextInstance(app) {
         var _this = this;
         _class_call_check$5(this, FirebaseAdminTestContextInstance);
-        _define_property$6(this, "app", void 0);
-        _define_property$6(this, "getTestFirestoreInstance", util.cachedGetter(function() {
+        _define_property$7(this, "app", void 0);
+        _define_property$7(this, "getTestFirestoreInstance", util.cachedGetter(function() {
             var drivers = test$1.makeTestingFirestoreDrivers(firebaseServer.googleCloudFirestoreDrivers());
             return new GoogleCloudTestFirestoreInstance(drivers, _this.firestore);
         }));
-        _define_property$6(this, "getTestFirebaseStorageInstance", util.cachedGetter(function() {
+        _define_property$7(this, "getTestFirebaseStorageInstance", util.cachedGetter(function() {
             var drivers = test$1.makeTestingFirebaseStorageDrivers(firebaseServer.googleCloudFirebaseStorageDrivers());
             var defaultBucketId = _this.app.options.storageBucket;
             return new GoogleCloudTestFirebaseStorageInstance(drivers, _this.storage, defaultBucketId);
@@ -2341,7 +2341,7 @@ function _ts_generator$6(thisArg, body) {
  */ var AbstractFirebaseAdminTestContextInstanceChild = /*#__PURE__*/ function() {
     function AbstractFirebaseAdminTestContextInstanceChild(parent) {
         _class_call_check$5(this, AbstractFirebaseAdminTestContextInstanceChild);
-        _define_property$6(this, "parent", void 0);
+        _define_property$7(this, "parent", void 0);
         this.parent = parent;
     }
     _create_class$4(AbstractFirebaseAdminTestContextInstanceChild, [
@@ -2409,7 +2409,7 @@ function _ts_generator$6(thisArg, body) {
  * This can be used to easily build a testing context that sets up RulesTestEnvironment for tests that sets itself up and tears itself down.
  */ var firebaseAdminTestBuilder = test.testContextBuilder({
     buildConfig: function buildConfig(input) {
-        var config = _object_spread$4({}, input);
+        var config = _object_spread$5({}, input);
         return config;
     },
     buildFixture: function buildFixture() {
@@ -2536,7 +2536,7 @@ function _async_to_generator$5(fn) {
         });
     };
 }
-function _define_property$5(obj, key, value) {
+function _define_property$6(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2549,7 +2549,7 @@ function _define_property$5(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$3(target) {
+function _object_spread$4(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2559,7 +2559,7 @@ function _object_spread$3(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$5(target, key, source[key]);
+            _define_property$6(target, key, source[key]);
         });
     }
     return target;
@@ -2710,7 +2710,7 @@ function _ts_generator$5(thisArg, body) {
             return _async_to_generator$5(function() {
                 var _ref, request;
                 return _ts_generator$5(this, function(_state) {
-                    request = _object_spread_props$2(_object_spread$3({}, context), {
+                    request = _object_spread_props$2(_object_spread$4({}, context), {
                         data: data,
                         // NOTE: These will typically not be used/available as they are express.js properties that are not available or useful to the handlers
                         rawRequest: (_ref = context === null || context === void 0 ? void 0 : context.rawRequest) !== null && _ref !== void 0 ? _ref : {},
@@ -2843,7 +2843,7 @@ function _create_class$3(Constructor, protoProps, staticProps) {
     if (protoProps) _defineProperties$3(Constructor.prototype, protoProps);
     return Constructor;
 }
-function _define_property$4(obj, key, value) {
+function _define_property$5(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2883,7 +2883,7 @@ function _instanceof$1(left, right) {
         return left instanceof right;
     }
 }
-function _object_spread$2(target) {
+function _object_spread$3(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2893,7 +2893,7 @@ function _object_spread$2(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$4(target, key, source[key]);
+            _define_property$5(target, key, source[key]);
         });
     }
     return target;
@@ -3172,7 +3172,7 @@ var functionsInitialized = false;
         var _this;
         _this = _call_super$4(this, FirebaseAdminFunctionTestContextInstance, [
             app
-        ]), _define_property$4(_this, "instance", void 0), _define_property$4(_this, "_fnWrapper", util.cachedGetter(function() {
+        ]), _define_property$5(_this, "instance", void 0), _define_property$5(_this, "_fnWrapper", util.cachedGetter(function() {
             return firebaseAdminCloudFunctionWrapper(_this.instance);
         }));
         _this.instance = instance;
@@ -3215,7 +3215,7 @@ var functionsInitialized = false;
  */ var firebaseAdminFunctionTestBuilder = test.testContextBuilder({
     buildConfig: function buildConfig(input) {
         var _ref;
-        var config = _object_spread_props$1(_object_spread$2({}, input), {
+        var config = _object_spread_props$1(_object_spread$3({}, input), {
             useFunctionSingletonContext: (_ref = input === null || input === void 0 ? void 0 : input.useFunctionSingletonContext) !== null && _ref !== void 0 ? _ref : exports.DEFAULT_FIREBASE_ADMIN_FUNCTION_TEST_USE_FUNCTION_SINGLETON_CONTEXT
         });
         return config;
@@ -3422,7 +3422,7 @@ function _create_class$2(Constructor, protoProps, staticProps) {
     if (protoProps) _defineProperties$2(Constructor.prototype, protoProps);
     return Constructor;
 }
-function _define_property$3(obj, key, value) {
+function _define_property$4(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -3460,7 +3460,7 @@ function _iterable_to_array$1(iter) {
 function _non_iterable_spread$1() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$1(target) {
+function _object_spread$2(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -3470,7 +3470,7 @@ function _object_spread$1(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$3(target, key, source[key]);
+            _define_property$4(target, key, source[key]);
         });
     }
     return target;
@@ -3697,9 +3697,9 @@ function _ts_generator$3(thisArg, body) {
         var _this1;
         _this = _call_super$3(this, FirebaseAdminNestTestContextInstance, [
             parent
-        ]), _this1 = _this, _define_property$3(_this, "nest", void 0), _define_property$3(_this, "nestAppPromiseGetter", function() {
+        ]), _this1 = _this, _define_property$4(_this, "nest", void 0), _define_property$4(_this, "nestAppPromiseGetter", function() {
             return Promise.resolve(_this.nest);
-        }), _define_property$3(_this, "_loadInitializedNestApplication", util.cachedGetter(function() {
+        }), _define_property$4(_this, "_loadInitializedNestApplication", util.cachedGetter(function() {
             return _async_to_generator$3(function() {
                 var app;
                 return _ts_generator$3(this, function(_state) {
@@ -3812,7 +3812,7 @@ function _ts_generator$3(thisArg, body) {
                     switch(_state.label){
                         case 0:
                             additionalProviders = (_makeProviders = makeProviders(f.instance)) !== null && _makeProviders !== void 0 ? _makeProviders : [];
-                            rootModule = firebaseServer.buildNestServerRootModule(_object_spread_props(_object_spread$1({}, serverInstanceConfig), {
+                            rootModule = firebaseServer.buildNestServerRootModule(_object_spread_props(_object_spread$2({}, serverInstanceConfig), {
                                 modules: _to_consumable_array$1(util.asArray(nestModules)).concat(_to_consumable_array$1(util.asArray(serverInstanceConfig === null || serverInstanceConfig === void 0 ? void 0 : serverInstanceConfig.modules))),
                                 firebaseAppGetter: config.injectFirebaseServerAppTokenProvider ? util.asGetter(f.instance.app) : undefined,
                                 providers: additionalProviders,
@@ -3960,7 +3960,7 @@ function _create_class$1(Constructor, protoProps, staticProps) {
     if (protoProps) _defineProperties$1(Constructor.prototype, protoProps);
     return Constructor;
 }
-function _define_property$2(obj, key, value) {
+function _define_property$3(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -3992,7 +3992,7 @@ function _inherits$2(subClass, superClass) {
     });
     if (superClass) _set_prototype_of$2(subClass, superClass);
 }
-function _object_spread(target) {
+function _object_spread$1(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -4002,7 +4002,7 @@ function _object_spread(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$2(target, key, source[key]);
+            _define_property$3(target, key, source[key]);
         });
     }
     return target;
@@ -4161,7 +4161,7 @@ function _is_native_reflect_construct$2() {
  * @param buildTests - Callback that receives the child fixture and registers test cases.
  * @returns Whatever {@link firebaseAdminNestContextWithFixture} returns after registering the merged child fixture (typically `void`).
  */ function firebaseAdminFunctionNestContextWithFixture(config, f, buildTests) {
-    var mergedConfig = _object_spread({
+    var mergedConfig = _object_spread$1({
         makeFixture: function makeFixture(parent) {
             return new FirebaseAdminFunctionNestTestContextFixture(parent);
         },
@@ -4503,7 +4503,7 @@ function _class_call_check$1(instance, Constructor) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _define_property$1(obj, key, value) {
+function _define_property$2(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -4578,7 +4578,7 @@ function _is_native_reflect_construct$1() {
         var code = httpError.details.code;
         _this = _call_super$1(this, ExpectedHttpErrorWithSpecificServerErrorCode, [
             'Expected HttpError with an error code of "'.concat(expectedErrorCode, '", but recieved "').concat(code, '" instead.')
-        ]), _define_property$1(_this, "httpError", void 0), _define_property$1(_this, "expectedErrorCode", void 0);
+        ]), _define_property$2(_this, "httpError", void 0), _define_property$2(_this, "expectedErrorCode", void 0);
         _this.httpError = httpError;
         _this.expectedErrorCode = expectedErrorCode;
         return _this;
@@ -4675,6 +4675,19 @@ function _async_to_generator$1(fn) {
         });
     };
 }
+function _define_property$1(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
 function _iterable_to_array(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
 }
@@ -4708,6 +4721,21 @@ function _non_iterable_rest() {
 function _non_iterable_spread() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$1(target, key, source[key]);
+        });
+    }
+    return target;
+}
 function _sliced_to_array(arr, i) {
     return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
 }
@@ -4927,27 +4955,32 @@ function _ts_generator$1(thisArg, body) {
  * Admin-only scopes (e.g. `token.service`) are dropped from the default "all scopes" request because
  * the provider hard-rejects them for non-admin users, and this default flow logs in an arbitrary
  * (often non-admin) user. Tests that need an admin-only scope pass it explicitly via `config.scopes`.
+ * Both sources of the gate are excluded: the provider config's `adminOnlyScopes` and the scopes of any
+ * profile marked `adminOnly`.
  *
- * Provider-profile-gated scopes (e.g. `lms`, `reports`) are dropped for the same reason: they are
- * unlocked only for a client an admin has assigned the corresponding profile to, and this flow creates
- * a fresh client with no profiles — so the consent unlock gate hard-rejects them (finishing the
+ * Assignment-only profile-gated scopes (e.g. `lms`, `reports`) are dropped for the same reason: they
+ * are unlocked only for a client an admin has assigned the corresponding profile to, and this flow
+ * creates a fresh client with no profiles — so the consent unlock gate hard-rejects them (finishing the
  * interaction with `access_denied` and no `code`). Tests that need a gated scope create a client with
- * the profile and pass the scope explicitly via `config.scopes`.
+ * the profile and pass the scope explicitly via `config.scopes`. A scope unlocked by a DEFAULT profile
+ * is deliberately kept: a client with no profiles assigned resolves to the default profiles, so it can
+ * obtain that scope.
  *
  * @param nestApp - Initialized NestJS application used to resolve {@link OidcAccountService} when no scopes override is given.
  * @param config - Optional flow config; when `config.scopes` is set, it is returned verbatim.
  * @returns The space-separated scope string to pass to the `/oidc/auth` endpoint.
  */ function resolveScopes(nestApp, config) {
     return _async_to_generator$1(function() {
-        var result, _providerConfig_adminOnlyScopes, _providerConfig_providerProfiles, accountService, providerConfig, adminOnlyScopes, profileGatedScopes;
+        var result, _providerConfig_providerProfiles, _providerConfig_adminOnlyScopes, accountService, providerConfig, providerProfiles, adminOnlyScopes, profileGatedScopes;
         return _ts_generator$1(this, function(_state) {
             if (config === null || config === void 0 ? void 0 : config.scopes) {
                 result = config.scopes;
             } else {
                 accountService = nestApp.get(oidc.OidcAccountService);
                 providerConfig = accountService.providerConfig;
-                adminOnlyScopes = new Set((_providerConfig_adminOnlyScopes = providerConfig.adminOnlyScopes) !== null && _providerConfig_adminOnlyScopes !== void 0 ? _providerConfig_adminOnlyScopes : []);
-                profileGatedScopes = firebase.scopesForOidcProviderProfiles((_providerConfig_providerProfiles = providerConfig.providerProfiles) !== null && _providerConfig_providerProfiles !== void 0 ? _providerConfig_providerProfiles : []);
+                providerProfiles = (_providerConfig_providerProfiles = providerConfig.providerProfiles) !== null && _providerConfig_providerProfiles !== void 0 ? _providerConfig_providerProfiles : [];
+                adminOnlyScopes = new Set(_to_consumable_array((_providerConfig_adminOnlyScopes = providerConfig.adminOnlyScopes) !== null && _providerConfig_adminOnlyScopes !== void 0 ? _providerConfig_adminOnlyScopes : []).concat(_to_consumable_array(firebase.adminOnlyScopesForOidcProviderProfiles(providerProfiles))));
+                profileGatedScopes = firebase.assignmentOnlyScopesForOidcProviderProfiles(providerProfiles);
                 result = Object.keys(providerConfig.claims).filter(function(scope) {
                     return !adminOnlyScopes.has(scope) && !profileGatedScopes.has(scope);
                 }).join(' ');
@@ -4969,12 +5002,12 @@ function _ts_generator$1(thisArg, body) {
  * @param input.oidcClientService - Service used to create the OAuth client whose credentials drive the flow.
  * @param input.nestApp - Initialized NestJS application; used to resolve {@link OidcAccountService} for project-id-derived ID tokens and default scopes.
  * @param input.uid - Firebase user ID for whom the test ID token is minted and the OAuth flow is authorized.
- * @param input.config - Optional flow overrides (scopes, redirect URI, client name, token endpoint auth method).
+ * @param input.config - Optional flow overrides (scopes, redirect URI, client name, token endpoint auth method, provider profiles).
  * @returns The exchanged access token and ID token from the OIDC `/token` endpoint.
  * @throws {Error} When the token exchange step fails (the response body and status are included in the message).
  */ function performFullOAuthFlow(input) {
     return _async_to_generator$1(function() {
-        var _ref, _ref1, _ref2, server, oidcClientService, nestApp, uid, config, _createCookieJar, collectCookies, cookieHeader, redirectUri, clientName, tokenEndpointAuthMethod, scopes, _ref3, client_id, client_secret, codeVerifier, codeChallenge, authRes, loginUid, idToken, loginRes, resumeAfterLoginPath, consentRedirectRes, consentUid, consentRes, resumeAfterConsentPath, callbackRedirectRes, callbackUrl, authorizationCode, tokenRes;
+        var _ref, _ref1, _ref2, server, oidcClientService, nestApp, uid, config, _createCookieJar, collectCookies, cookieHeader, redirectUri, clientName, tokenEndpointAuthMethod, providerProfiles, scopes, _ref3, client_id, client_secret, codeVerifier, codeChallenge, authRes, loginUid, idToken, loginRes, resumeAfterLoginPath, consentRedirectRes, consentUid, consentRes, resumeAfterConsentPath, callbackRedirectRes, callbackUrl, authorizationCode, tokenRes;
         return _ts_generator$1(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -4983,6 +5016,7 @@ function _ts_generator$1(thisArg, body) {
                     redirectUri = (_ref = config === null || config === void 0 ? void 0 : config.redirectUri) !== null && _ref !== void 0 ? _ref : 'https://example.com/callback';
                     clientName = (_ref1 = config === null || config === void 0 ? void 0 : config.clientName) !== null && _ref1 !== void 0 ? _ref1 : 'test-oauth-context';
                     tokenEndpointAuthMethod = (_ref2 = config === null || config === void 0 ? void 0 : config.tokenEndpointAuthMethod) !== null && _ref2 !== void 0 ? _ref2 : 'client_secret_post';
+                    providerProfiles = config === null || config === void 0 ? void 0 : config.providerProfiles;
                     return [
                         4,
                         resolveScopes(nestApp, config)
@@ -4991,13 +5025,15 @@ function _ts_generator$1(thisArg, body) {
                     scopes = _state.sent();
                     return [
                         4,
-                        oidcClientService.createClient({
+                        oidcClientService.createClient(_object_spread({
                             client_name: clientName,
                             redirect_uris: [
                                 redirectUri
                             ],
                             token_endpoint_auth_method: tokenEndpointAuthMethod
-                        })
+                        }, providerProfiles == null ? {} : {
+                            dbx_provider_profiles: _to_consumable_array(providerProfiles)
+                        }))
                     ];
                 case 2:
                     _ref3 = _state.sent(), client_id = _ref3.client_id, client_secret = _ref3.client_secret;
@@ -5100,7 +5136,7 @@ function _ts_generator$1(thisArg, body) {
  *
  * @param nestApp - Initialized NestJS application from which {@link JwksService} and {@link OidcClientService} are resolved.
  * @param uid - Firebase user ID for whom the OAuth flow is authorized.
- * @param config - Optional flow overrides (scopes, redirect URI, client name, token endpoint auth method).
+ * @param config - Optional flow overrides (scopes, redirect URI, client name, token endpoint auth method, provider profiles).
  * @returns The exchanged access token and ID token from {@link performFullOAuthFlow}.
  */ function setupAndPerformFullOAuthFlow(nestApp, uid, config) {
     return _async_to_generator$1(function() {
@@ -5505,7 +5541,7 @@ function _ts_generator(thisArg, body) {
  * The returned factory function performs a full OAuth authorization code flow
  * and provides an authenticated supertest agent and helper methods.
  *
- * @param config - Optional flow overrides (scopes, redirect URI, client name, timeout) and custom fixture/instance constructors.
+ * @param config - Optional flow overrides (scopes, redirect URI, client name, provider profiles, timeout) and custom fixture/instance constructors.
  * @returns Function that, given parent fixtures and a `buildTests` callback, registers a `describe('(oauth)', ...)` block which performs the full OAuth flow and exposes the authenticated supertest fixture.
  *
  * @example
@@ -5534,7 +5570,7 @@ function _ts_generator(thisArg, body) {
         "makeFixture",
         "makeInstance"
     ]);
-    var flowConfig = flowConfigOverrides.scopes || flowConfigOverrides.redirectUri || flowConfigOverrides.clientName ? flowConfigOverrides : undefined;
+    var flowConfig = flowConfigOverrides.scopes || flowConfigOverrides.redirectUri || flowConfigOverrides.clientName || flowConfigOverrides.providerProfiles ? flowConfigOverrides : undefined;
     return function(params, buildTests) {
         var f = params.f, u = params.u;
         describe('(oauth)', function() {