@firebase/auth 1.3.0 → 1.3.1-canary.6e4e475f6

package/dist/rn/{index-1dd41d18.js → index-9dc6fdd2.js}

@@ -6,53 +6,6 @@ var app = require('@firebase/app');
 var component = require('@firebase/component');
 var logger = require('@firebase/logger');
 
-/**
- * @license
- * Copyright 2020 Google LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-function isV2(grecaptcha) {
-    return (grecaptcha !== undefined &&
-        grecaptcha.getResponse !== undefined);
-}
-function isEnterprise(grecaptcha) {
-    return (grecaptcha !== undefined &&
-        grecaptcha.enterprise !== undefined);
-}
-var RecaptchaConfig = /** @class */ (function () {
-    function RecaptchaConfig(response) {
-        /**
-         * The reCAPTCHA site key.
-         */
-        this.siteKey = '';
-        /**
-         * The reCAPTCHA enablement status of the {@link EmailAuthProvider} for the current tenant.
-         */
-        this.emailPasswordEnabled = false;
-        if (response.recaptchaKey === undefined) {
-            throw new Error('recaptchaKey undefined');
-        }
-        // Example response.recaptchaKey: "projects/proj123/keys/sitekey123"
-        this.siteKey = response.recaptchaKey.split('/')[3];
-        this.emailPasswordEnabled = response.recaptchaEnforcementState.some(function (enforcementState) {
-            return enforcementState.provider === 'EMAIL_PASSWORD_PROVIDER' &&
-                enforcementState.enforcementState !== 'OFF';
-        });
-    }
-    return RecaptchaConfig;
-}());
-
 /**
  * @license
  * Copyright 2020 Google LLC
@@ -693,6 +646,12 @@ var FetchProvider = /** @class */ (function () {
         if (typeof self !== 'undefined' && 'fetch' in self) {
             return self.fetch;
         }
+        if (typeof globalThis !== 'undefined' && globalThis.fetch) {
+            return globalThis.fetch;
+        }
+        if (typeof fetch !== 'undefined') {
+            return fetch;
+        }
         debugFail('Could not find fetch implementation, make sure you call FetchProvider.initialize() with an appropriate polyfill');
     };
     FetchProvider.headers = function () {
@@ -702,6 +661,12 @@ var FetchProvider = /** @class */ (function () {
         if (typeof self !== 'undefined' && 'Headers' in self) {
             return self.Headers;
         }
+        if (typeof globalThis !== 'undefined' && globalThis.Headers) {
+            return globalThis.Headers;
+        }
+        if (typeof Headers !== 'undefined') {
+            return Headers;
+        }
         debugFail('Could not find Headers implementation, make sure you call FetchProvider.initialize() with an appropriate polyfill');
     };
     FetchProvider.response = function () {
@@ -711,6 +676,12 @@ var FetchProvider = /** @class */ (function () {
         if (typeof self !== 'undefined' && 'Response' in self) {
             return self.Response;
         }
+        if (typeof globalThis !== 'undefined' && globalThis.Response) {
+            return globalThis.Response;
+        }
+        if (typeof Response !== 'undefined') {
+            return Response;
+        }
         debugFail('Could not find Response implementation, make sure you call FetchProvider.initialize() with an appropriate polyfill');
     };
     return FetchProvider;
@@ -963,6 +934,18 @@ function _getFinalTarget(auth, host, path, query) {
     }
     return _emulatorUrl(auth.config, base);
 }
+function _parseEnforcementState(enforcementStateStr) {
+    switch (enforcementStateStr) {
+        case 'ENFORCE':
+            return "ENFORCE" /* EnforcementState.ENFORCE */;
+        case 'AUDIT':
+            return "AUDIT" /* EnforcementState.AUDIT */;
+        case 'OFF':
+            return "OFF" /* EnforcementState.OFF */;
+        default:
+            return "ENFORCEMENT_STATE_UNSPECIFIED" /* EnforcementState.ENFORCEMENT_STATE_UNSPECIFIED */;
+    }
+}
 var NetworkTimeout = /** @class */ (function () {
     function NetworkTimeout(auth) {
         var _this = this;
@@ -998,6 +981,81 @@ function _makeTaggedError(auth, code, response) {
     return error;
 }
 
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+function isV2(grecaptcha) {
+    return (grecaptcha !== undefined &&
+        grecaptcha.getResponse !== undefined);
+}
+function isEnterprise(grecaptcha) {
+    return (grecaptcha !== undefined &&
+        grecaptcha.enterprise !== undefined);
+}
+var RecaptchaConfig = /** @class */ (function () {
+    function RecaptchaConfig(response) {
+        /**
+         * The reCAPTCHA site key.
+         */
+        this.siteKey = '';
+        /**
+         * The list of providers and their enablement status for reCAPTCHA Enterprise.
+         */
+        this.recaptchaEnforcementState = [];
+        if (response.recaptchaKey === undefined) {
+            throw new Error('recaptchaKey undefined');
+        }
+        // Example response.recaptchaKey: "projects/proj123/keys/sitekey123"
+        this.siteKey = response.recaptchaKey.split('/')[3];
+        this.recaptchaEnforcementState = response.recaptchaEnforcementState;
+    }
+    /**
+     * Returns the reCAPTCHA Enterprise enforcement state for the given provider.
+     *
+     * @param providerStr - The provider whose enforcement state is to be returned.
+     * @returns The reCAPTCHA Enterprise enforcement state for the given provider.
+     */
+    RecaptchaConfig.prototype.getProviderEnforcementState = function (providerStr) {
+        if (!this.recaptchaEnforcementState ||
+            this.recaptchaEnforcementState.length === 0) {
+            return null;
+        }
+        for (var _i = 0, _a = this.recaptchaEnforcementState; _i < _a.length; _i++) {
+            var recaptchaEnforcementState = _a[_i];
+            if (recaptchaEnforcementState.provider &&
+                recaptchaEnforcementState.provider === providerStr) {
+                return _parseEnforcementState(recaptchaEnforcementState.enforcementState);
+            }
+        }
+        return null;
+    };
+    /**
+     * Returns true if the reCAPTCHA Enterprise enforcement state for the provider is set to ENFORCE or AUDIT.
+     *
+     * @param providerStr - The provider whose enablement state is to be returned.
+     * @returns Whether or not reCAPTCHA Enterprise protection is enabled for the given provider.
+     */
+    RecaptchaConfig.prototype.isProviderEnabled = function (providerStr) {
+        return (this.getProviderEnforcementState(providerStr) ===
+            "ENFORCE" /* EnforcementState.ENFORCE */ ||
+            this.getProviderEnforcementState(providerStr) === "AUDIT" /* EnforcementState.AUDIT */);
+    };
+    return RecaptchaConfig;
+}());
+
 /**
  * @license
  * Copyright 2020 Google LLC
@@ -3680,6 +3738,39 @@ function injectRecaptchaFields(auth, request, action, captchaResp) {
         });
     });
 }
+function handleRecaptchaFlow(authInstance, request, actionName, actionMethod) {
+    var _a;
+    return tslib.__awaiter(this, void 0, void 0, function () {
+        var requestWithRecaptcha;
+        var _this = this;
+        return tslib.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    if (!((_a = authInstance
+                        ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaProvider.EMAIL_PASSWORD_PROVIDER */))) return [3 /*break*/, 2];
+                    return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, actionName === "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */)];
+                case 1:
+                    requestWithRecaptcha = _b.sent();
+                    return [2 /*return*/, actionMethod(authInstance, requestWithRecaptcha)];
+                case 2: return [2 /*return*/, actionMethod(authInstance, request).catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
+                        var requestWithRecaptcha;
+                        return tslib.__generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    if (!(error.code === "auth/".concat("missing-recaptcha-token" /* AuthErrorCode.MISSING_RECAPTCHA_TOKEN */))) return [3 /*break*/, 2];
+                                    console.log("".concat(actionName, " is protected by reCAPTCHA Enterprise for this project. Automatically triggering the reCAPTCHA flow and restarting the flow."));
+                                    return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, actionName === "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */)];
+                                case 1:
+                                    requestWithRecaptcha = _a.sent();
+                                    return [2 /*return*/, actionMethod(authInstance, requestWithRecaptcha)];
+                                case 2: return [2 /*return*/, Promise.reject(error)];
+                            }
+                        });
+                    }); })];
+            }
+        });
+    });
+}
 function _initializeRecaptchaConfig(auth) {
     return tslib.__awaiter(this, void 0, void 0, function () {
         var authInternal, response, config, verifier;
@@ -3700,7 +3791,7 @@ function _initializeRecaptchaConfig(auth) {
                     else {
                         authInternal._tenantRecaptchaConfigs[authInternal.tenantId] = config;
                     }
-                    if (config.emailPasswordEnabled) {
+                    if (config.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaProvider.EMAIL_PASSWORD_PROVIDER */)) {
                         verifier = new RecaptchaEnterpriseVerifier(authInternal);
                         void verifier.verify();
                     }
@@ -4166,55 +4257,27 @@ var EmailAuthCredential = /** @class */ (function (_super) {
     };
     /** @internal */
     EmailAuthCredential.prototype._getIdTokenResponse = function (auth) {
-        var _a;
         return tslib.__awaiter(this, void 0, void 0, function () {
-            var _b, request_1, requestWithRecaptcha;
-            var _this = this;
-            return tslib.__generator(this, function (_c) {
-                switch (_c.label) {
-                    case 0:
-                        _b = this.signInMethod;
-                        switch (_b) {
-                            case "password" /* SignInMethod.EMAIL_PASSWORD */: return [3 /*break*/, 1];
-                            case "emailLink" /* SignInMethod.EMAIL_LINK */: return [3 /*break*/, 4];
-                        }
-                        return [3 /*break*/, 5];
-                    case 1:
-                        request_1 = {
+            var request;
+            return tslib.__generator(this, function (_a) {
+                switch (this.signInMethod) {
+                    case "password" /* SignInMethod.EMAIL_PASSWORD */:
+                        request = {
                             returnSecureToken: true,
                             email: this._email,
                             password: this._password,
                             clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                         };
-                        if (!((_a = auth._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.emailPasswordEnabled)) return [3 /*break*/, 3];
-                        return [4 /*yield*/, injectRecaptchaFields(auth, request_1, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */)];
-                    case 2:
-                        requestWithRecaptcha = _c.sent();
-                        return [2 /*return*/, signInWithPassword(auth, requestWithRecaptcha)];
-                    case 3: return [2 /*return*/, signInWithPassword(auth, request_1).catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
-                            var requestWithRecaptcha;
-                            return tslib.__generator(this, function (_a) {
-                                switch (_a.label) {
-                                    case 0:
-                                        if (!(error.code === "auth/".concat("missing-recaptcha-token" /* AuthErrorCode.MISSING_RECAPTCHA_TOKEN */))) return [3 /*break*/, 2];
-                                        console.log('Sign-in with email address and password is protected by reCAPTCHA for this project. Automatically triggering the reCAPTCHA flow and restarting the sign-in flow.');
-                                        return [4 /*yield*/, injectRecaptchaFields(auth, request_1, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */)];
-                                    case 1:
-                                        requestWithRecaptcha = _a.sent();
-                                        return [2 /*return*/, signInWithPassword(auth, requestWithRecaptcha)];
-                                    case 2: return [2 /*return*/, Promise.reject(error)];
-                                }
-                            });
-                        }); })];
-                    case 4: return [2 /*return*/, signInWithEmailLink$1(auth, {
-                            email: this._email,
-                            oobCode: this._password
-                        })];
-                    case 5:
+                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */, signInWithPassword)];
+                    case "emailLink" /* SignInMethod.EMAIL_LINK */:
+                        return [2 /*return*/, signInWithEmailLink$1(auth, {
+                                email: this._email,
+                                oobCode: this._password
+                            })];
+                    default:
                         _fail(auth, "internal-error" /* AuthErrorCode.INTERNAL_ERROR */);
-                        _c.label = 6;
-                    case 6: return [2 /*return*/];
                 }
+                return [2 /*return*/];
             });
         });
     };
@@ -6431,12 +6494,10 @@ function recachePasswordPolicy(auth) {
  * @public
  */
 function sendPasswordResetEmail(auth, email, actionCodeSettings) {
-    var _a;
     return tslib.__awaiter(this, void 0, void 0, function () {
-        var authInternal, request, requestWithRecaptcha;
-        var _this = this;
-        return tslib.__generator(this, function (_b) {
-            switch (_b.label) {
+        var authInternal, request;
+        return tslib.__generator(this, function (_a) {
+            switch (_a.label) {
                 case 0:
                     authInternal = _castAuth(auth);
                     request = {
@@ -6444,48 +6505,13 @@ function sendPasswordResetEmail(auth, email, actionCodeSettings) {
                         email: email,
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
-                    if (!((_a = authInternal._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.emailPasswordEnabled)) return [3 /*break*/, 3];
-                    return [4 /*yield*/, injectRecaptchaFields(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, true)];
-                case 1:
-                    requestWithRecaptcha = _b.sent();
-                    if (actionCodeSettings) {
-                        _setActionCodeSettingsOnRequest(authInternal, requestWithRecaptcha, actionCodeSettings);
-                    }
-                    return [4 /*yield*/, sendPasswordResetEmail$1(authInternal, requestWithRecaptcha)];
-                case 2:
-                    _b.sent();
-                    return [3 /*break*/, 5];
-                case 3:
                     if (actionCodeSettings) {
                         _setActionCodeSettingsOnRequest(authInternal, request, actionCodeSettings);
                     }
-                    return [4 /*yield*/, sendPasswordResetEmail$1(authInternal, request)
-                            .catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
-                            var requestWithRecaptcha;
-                            return tslib.__generator(this, function (_a) {
-                                switch (_a.label) {
-                                    case 0:
-                                        if (!(error.code === "auth/".concat("missing-recaptcha-token" /* AuthErrorCode.MISSING_RECAPTCHA_TOKEN */))) return [3 /*break*/, 3];
-                                        console.log('Password resets are protected by reCAPTCHA for this project. Automatically triggering the reCAPTCHA flow and restarting the password reset flow.');
-                                        return [4 /*yield*/, injectRecaptchaFields(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, true)];
-                                    case 1:
-                                        requestWithRecaptcha = _a.sent();
-                                        if (actionCodeSettings) {
-                                            _setActionCodeSettingsOnRequest(authInternal, requestWithRecaptcha, actionCodeSettings);
-                                        }
-                                        return [4 /*yield*/, sendPasswordResetEmail$1(authInternal, requestWithRecaptcha)];
-                                    case 2:
-                                        _a.sent();
-                                        return [3 /*break*/, 4];
-                                    case 3: return [2 /*return*/, Promise.reject(error)];
-                                    case 4: return [2 /*return*/];
-                                }
-                            });
-                        }); })];
-                case 4:
-                    _b.sent();
-                    _b.label = 5;
-                case 5: return [2 /*return*/];
+                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendPasswordResetEmail$1)];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
             }
         });
     });
@@ -6640,12 +6666,10 @@ function verifyPasswordResetCode(auth, code) {
  * @public
  */
 function createUserWithEmailAndPassword(auth, email, password) {
-    var _a;
     return tslib.__awaiter(this, void 0, void 0, function () {
-        var authInternal, request, signUpResponse, requestWithRecaptcha, response, userCredential;
-        var _this = this;
-        return tslib.__generator(this, function (_b) {
-            switch (_b.label) {
+        var authInternal, request, signUpResponse, response, userCredential;
+        return tslib.__generator(this, function (_a) {
+            switch (_a.label) {
                 case 0:
                     authInternal = _castAuth(auth);
                     request = {
@@ -6654,43 +6678,21 @@ function createUserWithEmailAndPassword(auth, email, password) {
                         password: password,
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
-                    if (!((_a = authInternal._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.emailPasswordEnabled)) return [3 /*break*/, 2];
-                    return [4 /*yield*/, injectRecaptchaFields(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */)];
-                case 1:
-                    requestWithRecaptcha = _b.sent();
-                    signUpResponse = signUp(authInternal, requestWithRecaptcha);
-                    return [3 /*break*/, 3];
-                case 2:
-                    signUpResponse = signUp(authInternal, request).catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
-                        var requestWithRecaptcha;
-                        return tslib.__generator(this, function (_a) {
-                            switch (_a.label) {
-                                case 0:
-                                    if (!(error.code === "auth/".concat("missing-recaptcha-token" /* AuthErrorCode.MISSING_RECAPTCHA_TOKEN */))) return [3 /*break*/, 2];
-                                    console.log('Sign-up is protected by reCAPTCHA for this project. Automatically triggering the reCAPTCHA flow and restarting the sign-up flow.');
-                                    return [4 /*yield*/, injectRecaptchaFields(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */)];
-                                case 1:
-                                    requestWithRecaptcha = _a.sent();
-                                    return [2 /*return*/, signUp(authInternal, requestWithRecaptcha)];
-                                case 2: throw error;
+                    signUpResponse = handleRecaptchaFlow(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, signUp);
+                    return [4 /*yield*/, signUpResponse.catch(function (error) {
+                            if (error.code === "auth/".concat("password-does-not-meet-requirements" /* AuthErrorCode.PASSWORD_DOES_NOT_MEET_REQUIREMENTS */)) {
+                                void recachePasswordPolicy(auth);
                             }
-                        });
-                    }); });
-                    _b.label = 3;
-                case 3: return [4 /*yield*/, signUpResponse.catch(function (error) {
-                        if (error.code === "auth/".concat("password-does-not-meet-requirements" /* AuthErrorCode.PASSWORD_DOES_NOT_MEET_REQUIREMENTS */)) {
-                            void recachePasswordPolicy(auth);
-                        }
-                        throw error;
-                    })];
-                case 4:
-                    response = _b.sent();
+                            throw error;
+                        })];
+                case 1:
+                    response = _a.sent();
                     return [4 /*yield*/, UserCredentialImpl._fromIdTokenResponse(authInternal, "signIn" /* OperationType.SIGN_IN */, response)];
-                case 5:
-                    userCredential = _b.sent();
+                case 2:
+                    userCredential = _a.sent();
                     return [4 /*yield*/, authInternal._updateCurrentUser(userCredential.user)];
-                case 6:
-                    _b.sent();
+                case 3:
+                    _a.sent();
                     return [2 /*return*/, userCredential];
             }
         });
@@ -6779,7 +6781,6 @@ function signInWithEmailAndPassword(auth, email, password) {
  * @public
  */
 function sendSignInLinkToEmail(auth, email, actionCodeSettings) {
-    var _a;
     return tslib.__awaiter(this, void 0, void 0, function () {
         function setActionCodeSettings(request, actionCodeSettings) {
             _assert(actionCodeSettings.handleCodeInApp, authInternal, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
@@ -6787,10 +6788,9 @@ function sendSignInLinkToEmail(auth, email, actionCodeSettings) {
                 _setActionCodeSettingsOnRequest(authInternal, request, actionCodeSettings);
             }
         }
-        var authInternal, request, requestWithRecaptcha;
-        var _this = this;
-        return tslib.__generator(this, function (_b) {
-            switch (_b.label) {
+        var authInternal, request;
+        return tslib.__generator(this, function (_a) {
+            switch (_a.label) {
                 case 0:
                     authInternal = _castAuth(auth);
                     request = {
@@ -6798,42 +6798,11 @@ function sendSignInLinkToEmail(auth, email, actionCodeSettings) {
                         email: email,
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
-                    if (!((_a = authInternal._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.emailPasswordEnabled)) return [3 /*break*/, 3];
-                    return [4 /*yield*/, injectRecaptchaFields(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, true)];
-                case 1:
-                    requestWithRecaptcha = _b.sent();
-                    setActionCodeSettings(requestWithRecaptcha, actionCodeSettings);
-                    return [4 /*yield*/, sendSignInLinkToEmail$1(authInternal, requestWithRecaptcha)];
-                case 2:
-                    _b.sent();
-                    return [3 /*break*/, 5];
-                case 3:
                     setActionCodeSettings(request, actionCodeSettings);
-                    return [4 /*yield*/, sendSignInLinkToEmail$1(authInternal, request)
-                            .catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
-                            var requestWithRecaptcha;
-                            return tslib.__generator(this, function (_a) {
-                                switch (_a.label) {
-                                    case 0:
-                                        if (!(error.code === "auth/".concat("missing-recaptcha-token" /* AuthErrorCode.MISSING_RECAPTCHA_TOKEN */))) return [3 /*break*/, 3];
-                                        console.log('Email link sign-in is protected by reCAPTCHA for this project. Automatically triggering the reCAPTCHA flow and restarting the sign-in flow.');
-                                        return [4 /*yield*/, injectRecaptchaFields(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, true)];
-                                    case 1:
-                                        requestWithRecaptcha = _a.sent();
-                                        setActionCodeSettings(requestWithRecaptcha, actionCodeSettings);
-                                        return [4 /*yield*/, sendSignInLinkToEmail$1(authInternal, requestWithRecaptcha)];
-                                    case 2:
-                                        _a.sent();
-                                        return [3 /*break*/, 4];
-                                    case 3: return [2 /*return*/, Promise.reject(error)];
-                                    case 4: return [2 /*return*/];
-                                }
-                            });
-                        }); })];
-                case 4:
-                    _b.sent();
-                    _b.label = 5;
-                case 5: return [2 /*return*/];
+                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendSignInLinkToEmail$1)];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
             }
         });
     });
@@ -7913,7 +7882,7 @@ function multiFactor(user) {
 }
 
 var name = "@firebase/auth";
-var version = "1.3.0";
+var version = "1.3.1-canary.6e4e475f6";
 
 /**
  * @license
@@ -9278,6 +9247,180 @@ var PhoneMultiFactorGenerator = /** @class */ (function () {
     return PhoneMultiFactorGenerator;
 }());
 
+/**
+ * Provider for generating a {@link TotpMultiFactorAssertion}.
+ *
+ * @public
+ */
+var TotpMultiFactorGenerator = /** @class */ (function () {
+    function TotpMultiFactorGenerator() {
+    }
+    /**
+     * Provides a {@link TotpMultiFactorAssertion} to confirm ownership of
+     * the TOTP (time-based one-time password) second factor.
+     * This assertion is used to complete enrollment in TOTP second factor.
+     *
+     * @param secret A {@link TotpSecret} containing the shared secret key and other TOTP parameters.
+     * @param oneTimePassword One-time password from TOTP App.
+     * @returns A {@link TotpMultiFactorAssertion} which can be used with
+     * {@link MultiFactorUser.enroll}.
+     */
+    TotpMultiFactorGenerator.assertionForEnrollment = function (secret, oneTimePassword) {
+        return TotpMultiFactorAssertionImpl._fromSecret(secret, oneTimePassword);
+    };
+    /**
+     * Provides a {@link TotpMultiFactorAssertion} to confirm ownership of the TOTP second factor.
+     * This assertion is used to complete signIn with TOTP as the second factor.
+     *
+     * @param enrollmentId identifies the enrolled TOTP second factor.
+     * @param oneTimePassword One-time password from TOTP App.
+     * @returns A {@link TotpMultiFactorAssertion} which can be used with
+     * {@link MultiFactorResolver.resolveSignIn}.
+     */
+    TotpMultiFactorGenerator.assertionForSignIn = function (enrollmentId, oneTimePassword) {
+        return TotpMultiFactorAssertionImpl._fromEnrollmentId(enrollmentId, oneTimePassword);
+    };
+    /**
+     * Returns a promise to {@link TotpSecret} which contains the TOTP shared secret key and other parameters.
+     * Creates a TOTP secret as part of enrolling a TOTP second factor.
+     * Used for generating a QR code URL or inputting into a TOTP app.
+     * This method uses the auth instance corresponding to the user in the multiFactorSession.
+     *
+     * @param session The {@link MultiFactorSession} that the user is part of.
+     * @returns A promise to {@link TotpSecret}.
+     */
+    TotpMultiFactorGenerator.generateSecret = function (session) {
+        var _a;
+        return tslib.__awaiter(this, void 0, void 0, function () {
+            var mfaSession, response;
+            return tslib.__generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        mfaSession = session;
+                        _assert(typeof ((_a = mfaSession.user) === null || _a === void 0 ? void 0 : _a.auth) !== 'undefined', "internal-error" /* AuthErrorCode.INTERNAL_ERROR */);
+                        return [4 /*yield*/, startEnrollTotpMfa(mfaSession.user.auth, {
+                                idToken: mfaSession.credential,
+                                totpEnrollmentInfo: {}
+                            })];
+                    case 1:
+                        response = _b.sent();
+                        return [2 /*return*/, TotpSecret._fromStartTotpMfaEnrollmentResponse(response, mfaSession.user.auth)];
+                }
+            });
+        });
+    };
+    /**
+     * The identifier of the TOTP second factor: `totp`.
+     */
+    TotpMultiFactorGenerator.FACTOR_ID = "totp" /* FactorId.TOTP */;
+    return TotpMultiFactorGenerator;
+}());
+var TotpMultiFactorAssertionImpl = /** @class */ (function (_super) {
+    tslib.__extends(TotpMultiFactorAssertionImpl, _super);
+    function TotpMultiFactorAssertionImpl(otp, enrollmentId, secret) {
+        var _this = _super.call(this, "totp" /* FactorId.TOTP */) || this;
+        _this.otp = otp;
+        _this.enrollmentId = enrollmentId;
+        _this.secret = secret;
+        return _this;
+    }
+    /** @internal */
+    TotpMultiFactorAssertionImpl._fromSecret = function (secret, otp) {
+        return new TotpMultiFactorAssertionImpl(otp, undefined, secret);
+    };
+    /** @internal */
+    TotpMultiFactorAssertionImpl._fromEnrollmentId = function (enrollmentId, otp) {
+        return new TotpMultiFactorAssertionImpl(otp, enrollmentId);
+    };
+    /** @internal */
+    TotpMultiFactorAssertionImpl.prototype._finalizeEnroll = function (auth, idToken, displayName) {
+        return tslib.__awaiter(this, void 0, void 0, function () {
+            return tslib.__generator(this, function (_a) {
+                _assert(typeof this.secret !== 'undefined', auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                return [2 /*return*/, finalizeEnrollTotpMfa(auth, {
+                        idToken: idToken,
+                        displayName: displayName,
+                        totpVerificationInfo: this.secret._makeTotpVerificationInfo(this.otp)
+                    })];
+            });
+        });
+    };
+    /** @internal */
+    TotpMultiFactorAssertionImpl.prototype._finalizeSignIn = function (auth, mfaPendingCredential) {
+        return tslib.__awaiter(this, void 0, void 0, function () {
+            var totpVerificationInfo;
+            return tslib.__generator(this, function (_a) {
+                _assert(this.enrollmentId !== undefined && this.otp !== undefined, auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                totpVerificationInfo = { verificationCode: this.otp };
+                return [2 /*return*/, finalizeSignInTotpMfa(auth, {
+                        mfaPendingCredential: mfaPendingCredential,
+                        mfaEnrollmentId: this.enrollmentId,
+                        totpVerificationInfo: totpVerificationInfo
+                    })];
+            });
+        });
+    };
+    return TotpMultiFactorAssertionImpl;
+}(MultiFactorAssertionImpl));
+/**
+ * Provider for generating a {@link TotpMultiFactorAssertion}.
+ *
+ * Stores the shared secret key and other parameters to generate time-based OTPs.
+ * Implements methods to retrieve the shared secret key and generate a QR code URL.
+ * @public
+ */
+var TotpSecret = /** @class */ (function () {
+    // The public members are declared outside the constructor so the docs can be generated.
+    function TotpSecret(secretKey, hashingAlgorithm, codeLength, codeIntervalSeconds, enrollmentCompletionDeadline, sessionInfo, auth) {
+        this.sessionInfo = sessionInfo;
+        this.auth = auth;
+        this.secretKey = secretKey;
+        this.hashingAlgorithm = hashingAlgorithm;
+        this.codeLength = codeLength;
+        this.codeIntervalSeconds = codeIntervalSeconds;
+        this.enrollmentCompletionDeadline = enrollmentCompletionDeadline;
+    }
+    /** @internal */
+    TotpSecret._fromStartTotpMfaEnrollmentResponse = function (response, auth) {
+        return new TotpSecret(response.totpSessionInfo.sharedSecretKey, response.totpSessionInfo.hashingAlgorithm, response.totpSessionInfo.verificationCodeLength, response.totpSessionInfo.periodSec, new Date(response.totpSessionInfo.finalizeEnrollmentTime).toUTCString(), response.totpSessionInfo.sessionInfo, auth);
+    };
+    /** @internal */
+    TotpSecret.prototype._makeTotpVerificationInfo = function (otp) {
+        return { sessionInfo: this.sessionInfo, verificationCode: otp };
+    };
+    /**
+     * Returns a QR code URL as described in
+     * https://github.com/google/google-authenticator/wiki/Key-Uri-Format
+     * This can be displayed to the user as a QR code to be scanned into a TOTP app like Google Authenticator.
+     * If the optional parameters are unspecified, an accountName of <userEmail> and issuer of <firebaseAppName> are used.
+     *
+     * @param accountName the name of the account/app along with a user identifier.
+     * @param issuer issuer of the TOTP (likely the app name).
+     * @returns A QR code URL string.
+     */
+    TotpSecret.prototype.generateQrCodeUrl = function (accountName, issuer) {
+        var _a;
+        var useDefaults = false;
+        if (_isEmptyString(accountName) || _isEmptyString(issuer)) {
+            useDefaults = true;
+        }
+        if (useDefaults) {
+            if (_isEmptyString(accountName)) {
+                accountName = ((_a = this.auth.currentUser) === null || _a === void 0 ? void 0 : _a.email) || 'unknownuser';
+            }
+            if (_isEmptyString(issuer)) {
+                issuer = this.auth.name;
+            }
+        }
+        return "otpauth://totp/".concat(issuer, ":").concat(accountName, "?secret=").concat(this.secretKey, "&issuer=").concat(issuer, "&algorithm=").concat(this.hashingAlgorithm, "&digits=").concat(this.codeLength);
+    };
+    return TotpSecret;
+}());
+/** @internal */
+function _isEmptyString(input) {
+    return typeof input === 'undefined' || (input === null || input === void 0 ? void 0 : input.length) === 0;
+}
+
 var STORAGE_AVAILABLE_KEY = '__sak';
 
 exports.AUTH_ERROR_CODES_MAP_DO_NOT_USE_INTERNALLY = AUTH_ERROR_CODES_MAP_DO_NOT_USE_INTERNALLY;
@@ -9295,7 +9438,6 @@ exports.FederatedAuthProvider = FederatedAuthProvider;
 exports.FetchProvider = FetchProvider;
 exports.GithubAuthProvider = GithubAuthProvider;
 exports.GoogleAuthProvider = GoogleAuthProvider;
-exports.MultiFactorAssertionImpl = MultiFactorAssertionImpl;
 exports.OAuthCredential = OAuthCredential;
 exports.OAuthProvider = OAuthProvider;
 exports.OperationType = OperationType;
@@ -9308,6 +9450,8 @@ exports.SAMLAuthCredential = SAMLAuthCredential;
 exports.SAMLAuthProvider = SAMLAuthProvider;
 exports.STORAGE_AVAILABLE_KEY = STORAGE_AVAILABLE_KEY;
 exports.SignInMethod = SignInMethod;
+exports.TotpMultiFactorGenerator = TotpMultiFactorGenerator;
+exports.TotpSecret = TotpSecret;
 exports.TwitterAuthProvider = TwitterAuthProvider;
 exports.UserImpl = UserImpl;
 exports._assert = _assert;
@@ -9354,8 +9498,6 @@ exports.debugAssert = debugAssert;
 exports.debugErrorMap = debugErrorMap;
 exports.deleteUser = deleteUser;
 exports.fetchSignInMethodsForEmail = fetchSignInMethodsForEmail;
-exports.finalizeEnrollTotpMfa = finalizeEnrollTotpMfa;
-exports.finalizeSignInTotpMfa = finalizeSignInTotpMfa;
 exports.getAdditionalUserInfo = getAdditionalUserInfo;
 exports.getIdToken = getIdToken;
 exports.getIdTokenResult = getIdTokenResult;
@@ -9387,7 +9529,6 @@ exports.signInWithEmailLink = signInWithEmailLink;
 exports.signInWithIdp = signInWithIdp;
 exports.signInWithPhoneNumber = signInWithPhoneNumber;
 exports.signOut = signOut;
-exports.startEnrollTotpMfa = startEnrollTotpMfa;
 exports.unlink = unlink;
 exports.updateCurrentUser = updateCurrentUser;
 exports.updateEmail = updateEmail;
@@ -9398,4 +9539,4 @@ exports.useDeviceLanguage = useDeviceLanguage;
 exports.validatePassword = validatePassword;
 exports.verifyBeforeUpdateEmail = verifyBeforeUpdateEmail;
 exports.verifyPasswordResetCode = verifyPasswordResetCode;
-//# sourceMappingURL=index-1dd41d18.js.map
+//# sourceMappingURL=index-9dc6fdd2.js.map