@firebase/app-check 0.6.4 → 0.6.5-canary.0a27d2fbf

package/dist/index.cjs.js

@@ -919,6 +919,35 @@ function getToken$2(appCheck, forceRefresh) {
         });
     });
 }
+/**
+ * Internal API for limited use tokens. Skips all FAC state and simply calls
+ * the underlying provider.
+ */
+function getLimitedUseToken$1(appCheck) {
+    return tslib.__awaiter(this, void 0, void 0, function () {
+        var app, provider, debugToken, token, token;
+        return tslib.__generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app = appCheck.app;
+                    ensureActivated(app);
+                    provider = getStateReference(app).provider;
+                    if (!isDebugMode()) return [3 /*break*/, 3];
+                    return [4 /*yield*/, getDebugToken()];
+                case 1:
+                    debugToken = _a.sent();
+                    return [4 /*yield*/, exchangeToken(getExchangeDebugTokenRequest(app, debugToken), appCheck.heartbeatServiceProvider)];
+                case 2:
+                    token = (_a.sent()).token;
+                    return [2 /*return*/, { token: token }];
+                case 3: return [4 /*yield*/, provider.getToken()];
+                case 4:
+                    token = (_a.sent()).token;
+                    return [2 /*return*/, { token: token }];
+            }
+        });
+    });
+}
 function addTokenListener(appCheck, type, listener, onError) {
     var app = appCheck.app;
     var state = getStateReference(app);
@@ -1124,7 +1153,7 @@ function internalFactory(appCheck) {
 }
 
 var name = "@firebase/app-check";
-var version = "0.6.4";
+var version = "0.6.5-canary.0a27d2fbf";
 
 /**
  * @license
@@ -1243,7 +1272,15 @@ function getToken$1(app) {
 function renderInvisibleWidget(app, siteKey, grecaptcha, container) {
     var widgetId = grecaptcha.render(container, {
         sitekey: siteKey,
-        size: 'invisible'
+        size: 'invisible',
+        // Success callback - set state
+        callback: function () {
+            getStateReference(app).reCAPTCHAState.succeeded = true;
+        },
+        // Failure callback - set state
+        'error-callback': function () {
+            getStateReference(app).reCAPTCHAState.succeeded = false;
+        }
     });
     var state = getStateReference(app);
     state.reCAPTCHAState = tslib.__assign(tslib.__assign({}, state.reCAPTCHAState), { // state.reCAPTCHAState is set in the initialize()
@@ -1302,11 +1339,11 @@ var ReCaptchaV3Provider = /** @class */ (function () {
      * @internal
      */
     ReCaptchaV3Provider.prototype.getToken = function () {
-        var _a, _b;
+        var _a, _b, _c;
         return tslib.__awaiter(this, void 0, void 0, function () {
             var attestedClaimsToken, result, e_1;
-            return tslib.__generator(this, function (_c) {
-                switch (_c.label) {
+            return tslib.__generator(this, function (_d) {
+                switch (_d.label) {
                     case 0:
                         throwIfThrottled(this._throttleData);
                         return [4 /*yield*/, getToken$1(this._app).catch(function (_e) {
@@ -1314,18 +1351,22 @@ var ReCaptchaV3Provider = /** @class */ (function () {
                                 throw ERROR_FACTORY.create("recaptcha-error" /* AppCheckError.RECAPTCHA_ERROR */);
                             })];
                     case 1:
-                        attestedClaimsToken = _c.sent();
-                        _c.label = 2;
+                        attestedClaimsToken = _d.sent();
+                        // Check if a failure state was set by the recaptcha "error-callback".
+                        if (!((_a = getStateReference(this._app).reCAPTCHAState) === null || _a === void 0 ? void 0 : _a.succeeded)) {
+                            throw ERROR_FACTORY.create("recaptcha-error" /* AppCheckError.RECAPTCHA_ERROR */);
+                        }
+                        _d.label = 2;
                     case 2:
-                        _c.trys.push([2, 4, , 5]);
+                        _d.trys.push([2, 4, , 5]);
                         return [4 /*yield*/, exchangeToken(getExchangeRecaptchaV3TokenRequest(this._app, attestedClaimsToken), this._heartbeatServiceProvider)];
                     case 3:
-                        result = _c.sent();
+                        result = _d.sent();
                         return [3 /*break*/, 5];
                     case 4:
-                        e_1 = _c.sent();
-                        if ((_a = e_1.code) === null || _a === void 0 ? void 0 : _a.includes("fetch-status-error" /* AppCheckError.FETCH_STATUS_ERROR */)) {
-                            this._throttleData = setBackoff(Number((_b = e_1.customData) === null || _b === void 0 ? void 0 : _b.httpStatus), this._throttleData);
+                        e_1 = _d.sent();
+                        if ((_b = e_1.code) === null || _b === void 0 ? void 0 : _b.includes("fetch-status-error" /* AppCheckError.FETCH_STATUS_ERROR */)) {
+                            this._throttleData = setBackoff(Number((_c = e_1.customData) === null || _c === void 0 ? void 0 : _c.httpStatus), this._throttleData);
                             throw ERROR_FACTORY.create("throttled" /* AppCheckError.THROTTLED */, {
                                 time: getDurationString(this._throttleData.allowRequestsAfter - Date.now()),
                                 httpStatus: this._throttleData.httpStatus
@@ -1389,11 +1430,11 @@ var ReCaptchaEnterpriseProvider = /** @class */ (function () {
      * @internal
      */
     ReCaptchaEnterpriseProvider.prototype.getToken = function () {
-        var _a, _b;
+        var _a, _b, _c;
         return tslib.__awaiter(this, void 0, void 0, function () {
             var attestedClaimsToken, result, e_2;
-            return tslib.__generator(this, function (_c) {
-                switch (_c.label) {
+            return tslib.__generator(this, function (_d) {
+                switch (_d.label) {
                     case 0:
                         throwIfThrottled(this._throttleData);
                         return [4 /*yield*/, getToken$1(this._app).catch(function (_e) {
@@ -1401,18 +1442,22 @@ var ReCaptchaEnterpriseProvider = /** @class */ (function () {
                                 throw ERROR_FACTORY.create("recaptcha-error" /* AppCheckError.RECAPTCHA_ERROR */);
                             })];
                     case 1:
-                        attestedClaimsToken = _c.sent();
-                        _c.label = 2;
+                        attestedClaimsToken = _d.sent();
+                        // Check if a failure state was set by the recaptcha "error-callback".
+                        if (!((_a = getStateReference(this._app).reCAPTCHAState) === null || _a === void 0 ? void 0 : _a.succeeded)) {
+                            throw ERROR_FACTORY.create("recaptcha-error" /* AppCheckError.RECAPTCHA_ERROR */);
+                        }
+                        _d.label = 2;
                     case 2:
-                        _c.trys.push([2, 4, , 5]);
+                        _d.trys.push([2, 4, , 5]);
                         return [4 /*yield*/, exchangeToken(getExchangeRecaptchaEnterpriseTokenRequest(this._app, attestedClaimsToken), this._heartbeatServiceProvider)];
                     case 3:
-                        result = _c.sent();
+                        result = _d.sent();
                         return [3 /*break*/, 5];
                     case 4:
-                        e_2 = _c.sent();
-                        if ((_a = e_2.code) === null || _a === void 0 ? void 0 : _a.includes("fetch-status-error" /* AppCheckError.FETCH_STATUS_ERROR */)) {
-                            this._throttleData = setBackoff(Number((_b = e_2.customData) === null || _b === void 0 ? void 0 : _b.httpStatus), this._throttleData);
+                        e_2 = _d.sent();
+                        if ((_b = e_2.code) === null || _b === void 0 ? void 0 : _b.includes("fetch-status-error" /* AppCheckError.FETCH_STATUS_ERROR */)) {
+                            this._throttleData = setBackoff(Number((_c = e_2.customData) === null || _c === void 0 ? void 0 : _c.httpStatus), this._throttleData);
                             throw ERROR_FACTORY.create("throttled" /* AppCheckError.THROTTLED */, {
                                 time: getDurationString(this._throttleData.allowRequestsAfter - Date.now()),
                                 httpStatus: this._throttleData.httpStatus
@@ -1705,6 +1750,24 @@ function getToken(appCheckInstance, forceRefresh) {
         });
     });
 }
+/**
+ * Requests a Firebase App Check token. This method should be used
+ * only if you need to authorize requests to a non-Firebase backend.
+ *
+ * Returns limited-use tokens that are intended for use with your
+ * non-Firebase backend endpoints that are protected with
+ * <a href="https://firebase.google.com/docs/app-check/custom-resource-backend#replay-protection">
+ * Replay Protection</a>. This method
+ * does not affect the token generation behavior of the
+ * #getAppCheckToken() method.
+ *
+ * @param appCheckInstance - The App Check service instance.
+ * @returns The limited use token.
+ * @public
+ */
+function getLimitedUseToken(appCheckInstance) {
+    return getLimitedUseToken$1(appCheckInstance);
+}
 /**
  * Wraps `addTokenListener`/`removeTokenListener` methods in an `Observer`
  * pattern for public use.
@@ -1771,6 +1834,7 @@ registerAppCheck();
 exports.CustomProvider = CustomProvider;
 exports.ReCaptchaEnterpriseProvider = ReCaptchaEnterpriseProvider;
 exports.ReCaptchaV3Provider = ReCaptchaV3Provider;
+exports.getLimitedUseToken = getLimitedUseToken;
 exports.getToken = getToken;
 exports.initializeAppCheck = initializeAppCheck;
 exports.onTokenChanged = onTokenChanged;