@firebase/auth 1.3.2-canary.12ad9f181 → 1.3.2-canary.5c7fa8491

package/dist/auth-public.d.ts

@@ -2941,6 +2941,16 @@ export declare class RecaptchaVerifier implements ApplicationVerifierInternal {
  */
 export declare function reload(user: User): Promise<void>;
 
+/**
+ * Revokes the given access token. Currently only supports Apple OAuth access tokens.
+ *
+ * @param auth - The {@link Auth} instance.
+ * @param token - The Apple OAuth access token.
+ *
+ * @public
+ */
+export declare function revokeAccessToken(auth: Auth, token: string): Promise<void>;
+
 /**
  * An {@link AuthProvider} for SAML.
  *

package/dist/auth.d.ts

@@ -888,6 +888,7 @@ declare interface AuthInternal extends Auth {
     useDeviceLanguage(): void;
     signOut(): Promise<void>;
     validatePassword(password: string): Promise<PasswordValidationStatus>;
+    revokeAccessToken(token: string): Promise<void>;
 }
 
 declare class AuthPopup {
@@ -3413,6 +3414,16 @@ export declare class RecaptchaVerifier implements ApplicationVerifierInternal {
  */
 export declare function reload(user: User): Promise<void>;
 
+/**
+ * Revokes the given access token. Currently only supports Apple OAuth access tokens.
+ *
+ * @param auth - The {@link Auth} instance.
+ * @param token - The Apple OAuth access token.
+ *
+ * @public
+ */
+export declare function revokeAccessToken(auth: Auth, token: string): Promise<void>;
+
 /**
  * An {@link AuthProvider} for SAML.
  *

package/dist/browser-cjs/{index-c9d133f5.js → index-85a92bd1.js}

@@ -1540,6 +1540,9 @@ async function requestStsToken(auth, refreshToken) {
         expiresIn: response.expires_in,
         refreshToken: response.refresh_token
     };
+}
+async function revokeToken(auth, request) {
+    return _performApiRequest(auth, "POST" /* HttpMethod.POST */, "/v2/accounts:revokeToken" /* Endpoint.REVOKE_TOKEN */, _addTidIfNecessary(auth, request));
 }
 
 /**
@@ -2809,6 +2812,25 @@ class AuthImpl {
             }
         });
     }
+    /**
+     * Revokes the given access token. Currently only supports Apple OAuth access tokens.
+     */
+    async revokeAccessToken(token) {
+        if (this.currentUser) {
+            const idToken = await this.currentUser.getIdToken();
+            // Generalize this to accept other providers once supported.
+            const request = {
+                providerId: 'apple.com',
+                tokenType: "ACCESS_TOKEN" /* TokenType.ACCESS_TOKEN */,
+                token,
+                idToken
+            };
+            if (this.tenantId != null) {
+                request.tenantId = this.tenantId;
+            }
+            await revokeToken(this, request);
+        }
+    }
     toJSON() {
         var _a;
         return {
@@ -3499,6 +3521,11 @@ async function resetPassword(auth, request) {
 async function updateEmailPassword(auth, request) {
     return _performApiRequest(auth, "POST" /* HttpMethod.POST */, "/v1/accounts:update" /* Endpoint.SET_ACCOUNT_INFO */, request);
 }
+// Used for linking an email/password account to an existing idToken. Uses the same request/response
+// format as updateEmailPassword.
+async function linkEmailPassword(auth, request) {
+    return _performApiRequest(auth, "POST" /* HttpMethod.POST */, "/v1/accounts:signUp" /* Endpoint.SIGN_UP */, request);
+}
 async function applyActionCode$1(auth, request) {
     return _performApiRequest(auth, "POST" /* HttpMethod.POST */, "/v1/accounts:update" /* Endpoint.SET_ACCOUNT_INFO */, _addTidIfNecessary(auth, request));
 }
@@ -3662,12 +3689,14 @@ class EmailAuthCredential extends AuthCredential {
     async _linkToIdToken(auth, idToken) {
         switch (this.signInMethod) {
             case "password" /* SignInMethod.EMAIL_PASSWORD */:
-                return updateEmailPassword(auth, {
+                const request = {
                     idToken,
                     returnSecureToken: true,
                     email: this._email,
-                    password: this._password
-                });
+                    password: this._password,
+                    clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
+                };
+                return handleRecaptchaFlow(auth, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, linkEmailPassword);
             case "emailLink" /* SignInMethod.EMAIL_LINK */:
                 return signInWithEmailLinkForLinking(auth, {
                     idToken,
@@ -6511,6 +6540,18 @@ function updateCurrentUser(auth, user) {
 function signOut(auth) {
     return util.getModularInstance(auth).signOut();
 }
+/**
+ * Revokes the given access token. Currently only supports Apple OAuth access tokens.
+ *
+ * @param auth - The {@link Auth} instance.
+ * @param token - The Apple OAuth access token.
+ *
+ * @public
+ */
+function revokeAccessToken(auth, token) {
+    const authInternal = _castAuth(auth);
+    return authInternal.revokeAccessToken(token);
+}
 /**
  * Deletes and signs out the user.
  *
@@ -10226,7 +10267,7 @@ function _isEmptyString(input) {
 }
 
 var name = "@firebase/auth";
-var version = "1.3.2-canary.12ad9f181";
+var version = "1.3.2-canary.5c7fa8491";
 
 /**
  * @license
@@ -10529,6 +10570,7 @@ exports.reauthenticateWithPhoneNumber = reauthenticateWithPhoneNumber;
 exports.reauthenticateWithPopup = reauthenticateWithPopup;
 exports.reauthenticateWithRedirect = reauthenticateWithRedirect;
 exports.reload = reload;
+exports.revokeAccessToken = revokeAccessToken;
 exports.sendEmailVerification = sendEmailVerification;
 exports.sendPasswordResetEmail = sendPasswordResetEmail;
 exports.sendSignInLinkToEmail = sendSignInLinkToEmail;
@@ -10552,4 +10594,4 @@ exports.useDeviceLanguage = useDeviceLanguage;
 exports.validatePassword = validatePassword;
 exports.verifyBeforeUpdateEmail = verifyBeforeUpdateEmail;
 exports.verifyPasswordResetCode = verifyPasswordResetCode;
-//# sourceMappingURL=index-c9d133f5.js.map
+//# sourceMappingURL=index-85a92bd1.js.map