@firebase/app-check 0.6.4 → 0.6.5-canary.0a27d2fbf

package/dist/esm/index.esm2017.js

@@ -820,6 +820,25 @@ async function getToken$2(appCheck, forceRefresh = false) {
     }
     return interopTokenResult;
 }
+/**
+ * Internal API for limited use tokens. Skips all FAC state and simply calls
+ * the underlying provider.
+ */
+async function getLimitedUseToken$1(appCheck) {
+    const app = appCheck.app;
+    ensureActivated(app);
+    const { provider } = getStateReference(app);
+    if (isDebugMode()) {
+        const debugToken = await getDebugToken();
+        const { token } = await exchangeToken(getExchangeDebugTokenRequest(app, debugToken), appCheck.heartbeatServiceProvider);
+        return { token };
+    }
+    else {
+        // provider is definitely valid since we ensure AppCheck was activated
+        const { token } = await provider.getToken();
+        return { token };
+    }
+}
 function addTokenListener(appCheck, type, listener, onError) {
     const { app } = appCheck;
     const state = getStateReference(app);
@@ -1011,7 +1030,7 @@ function internalFactory(appCheck) {
 }
 
 const name = "@firebase/app-check";
-const version = "0.6.4";
+const version = "0.6.5-canary.0a27d2fbf";
 
 /**
  * @license
@@ -1121,7 +1140,15 @@ async function getToken$1(app) {
 function renderInvisibleWidget(app, siteKey, grecaptcha, container) {
     const widgetId = grecaptcha.render(container, {
         sitekey: siteKey,
-        size: 'invisible'
+        size: 'invisible',
+        // Success callback - set state
+        callback: () => {
+            getStateReference(app).reCAPTCHAState.succeeded = true;
+        },
+        // Failure callback - set state
+        'error-callback': () => {
+            getStateReference(app).reCAPTCHAState.succeeded = false;
+        }
     });
     const state = getStateReference(app);
     state.reCAPTCHAState = Object.assign(Object.assign({}, state.reCAPTCHAState), { // state.reCAPTCHAState is set in the initialize()
@@ -1180,7 +1207,7 @@ class ReCaptchaV3Provider {
      * @internal
      */
     async getToken() {
-        var _a, _b;
+        var _a, _b, _c;
         throwIfThrottled(this._throttleData);
         // Top-level `getToken()` has already checked that App Check is initialized
         // and therefore this._app and this._heartbeatServiceProvider are available.
@@ -1188,13 +1215,17 @@ class ReCaptchaV3Provider {
             // reCaptcha.execute() throws null which is not very descriptive.
             throw ERROR_FACTORY.create("recaptcha-error" /* AppCheckError.RECAPTCHA_ERROR */);
         });
+        // Check if a failure state was set by the recaptcha "error-callback".
+        if (!((_a = getStateReference(this._app).reCAPTCHAState) === null || _a === void 0 ? void 0 : _a.succeeded)) {
+            throw ERROR_FACTORY.create("recaptcha-error" /* AppCheckError.RECAPTCHA_ERROR */);
+        }
         let result;
         try {
             result = await exchangeToken(getExchangeRecaptchaV3TokenRequest(this._app, attestedClaimsToken), this._heartbeatServiceProvider);
         }
         catch (e) {
-            if ((_a = e.code) === null || _a === void 0 ? void 0 : _a.includes("fetch-status-error" /* AppCheckError.FETCH_STATUS_ERROR */)) {
-                this._throttleData = setBackoff(Number((_b = e.customData) === null || _b === void 0 ? void 0 : _b.httpStatus), this._throttleData);
+            if ((_b = e.code) === null || _b === void 0 ? void 0 : _b.includes("fetch-status-error" /* AppCheckError.FETCH_STATUS_ERROR */)) {
+                this._throttleData = setBackoff(Number((_c = e.customData) === null || _c === void 0 ? void 0 : _c.httpStatus), this._throttleData);
                 throw ERROR_FACTORY.create("throttled" /* AppCheckError.THROTTLED */, {
                     time: getDurationString(this._throttleData.allowRequestsAfter - Date.now()),
                     httpStatus: this._throttleData.httpStatus
@@ -1254,7 +1285,7 @@ class ReCaptchaEnterpriseProvider {
      * @internal
      */
     async getToken() {
-        var _a, _b;
+        var _a, _b, _c;
         throwIfThrottled(this._throttleData);
         // Top-level `getToken()` has already checked that App Check is initialized
         // and therefore this._app and this._heartbeatServiceProvider are available.
@@ -1262,13 +1293,17 @@ class ReCaptchaEnterpriseProvider {
             // reCaptcha.execute() throws null which is not very descriptive.
             throw ERROR_FACTORY.create("recaptcha-error" /* AppCheckError.RECAPTCHA_ERROR */);
         });
+        // Check if a failure state was set by the recaptcha "error-callback".
+        if (!((_a = getStateReference(this._app).reCAPTCHAState) === null || _a === void 0 ? void 0 : _a.succeeded)) {
+            throw ERROR_FACTORY.create("recaptcha-error" /* AppCheckError.RECAPTCHA_ERROR */);
+        }
         let result;
         try {
             result = await exchangeToken(getExchangeRecaptchaEnterpriseTokenRequest(this._app, attestedClaimsToken), this._heartbeatServiceProvider);
         }
         catch (e) {
-            if ((_a = e.code) === null || _a === void 0 ? void 0 : _a.includes("fetch-status-error" /* AppCheckError.FETCH_STATUS_ERROR */)) {
-                this._throttleData = setBackoff(Number((_b = e.customData) === null || _b === void 0 ? void 0 : _b.httpStatus), this._throttleData);
+            if ((_b = e.code) === null || _b === void 0 ? void 0 : _b.includes("fetch-status-error" /* AppCheckError.FETCH_STATUS_ERROR */)) {
+                this._throttleData = setBackoff(Number((_c = e.customData) === null || _c === void 0 ? void 0 : _c.httpStatus), this._throttleData);
                 throw ERROR_FACTORY.create("throttled" /* AppCheckError.THROTTLED */, {
                     time: getDurationString(this._throttleData.allowRequestsAfter - Date.now()),
                     httpStatus: this._throttleData.httpStatus
@@ -1541,6 +1576,24 @@ async function getToken(appCheckInstance, forceRefresh) {
     }
     return { token: result.token };
 }
+/**
+ * Requests a Firebase App Check token. This method should be used
+ * only if you need to authorize requests to a non-Firebase backend.
+ *
+ * Returns limited-use tokens that are intended for use with your
+ * non-Firebase backend endpoints that are protected with
+ * <a href="https://firebase.google.com/docs/app-check/custom-resource-backend#replay-protection">
+ * Replay Protection</a>. This method
+ * does not affect the token generation behavior of the
+ * #getAppCheckToken() method.
+ *
+ * @param appCheckInstance - The App Check service instance.
+ * @returns The limited use token.
+ * @public
+ */
+function getLimitedUseToken(appCheckInstance) {
+    return getLimitedUseToken$1(appCheckInstance);
+}
 /**
  * Wraps `addTokenListener`/`removeTokenListener` methods in an `Observer`
  * pattern for public use.
@@ -1604,5 +1657,5 @@ function registerAppCheck() {
 }
 registerAppCheck();
 
-export { CustomProvider, ReCaptchaEnterpriseProvider, ReCaptchaV3Provider, getToken, initializeAppCheck, onTokenChanged, setTokenAutoRefreshEnabled };
+export { CustomProvider, ReCaptchaEnterpriseProvider, ReCaptchaV3Provider, getLimitedUseToken, getToken, initializeAppCheck, onTokenChanged, setTokenAutoRefreshEnabled };
 //# sourceMappingURL=index.esm2017.js.map