@firebase/auth 1.6.2 → 1.7.0-canary.42fcdfe4c

package/dist/rn/index.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
 var app = require('@firebase/app');
-var index = require('./index-8ee80bdc.js');
+var index = require('./index-bbdaa838.js');
 var tslib = require('tslib');
 require('@firebase/util');
 require('@firebase/component');

package/dist/rn/internal.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var index = require('./index-8ee80bdc.js');
+var index = require('./index-bbdaa838.js');
 var tslib = require('tslib');
 var util = require('@firebase/util');
 var app = require('@firebase/app');
@@ -1443,7 +1443,8 @@ var _POLL_WINDOW_CLOSE_TIMEOUT = new index.Delay(2000, 10000);
  * If succeeds, returns the signed in user along with the provider's credential. If sign in was
  * unsuccessful, returns an error object containing additional information about the error.
  *
- * This method does not work in a Node.js environment.
+ * This method does not work in a Node.js environment or with {@link Auth} instances created with a
+ * {@link @firebase/app#FirebaseServerApp}.
  *
  * @example
  * ```javascript
@@ -1470,6 +1471,9 @@ function signInWithPopup(auth, provider, resolver) {
     return tslib.__awaiter(this, void 0, void 0, function () {
         var authInternal, resolverInternal, action;
         return tslib.__generator(this, function (_a) {
+            if (app._isFirebaseServerApp(auth.app)) {
+                return [2 /*return*/, Promise.reject(index._createError(auth, "operation-not-supported-in-this-environment" /* AuthErrorCode.OPERATION_NOT_SUPPORTED */))];
+            }
             authInternal = index._castAuth(auth);
             index._assertInstanceOf(auth, provider, index.FederatedAuthProvider);
             resolverInternal = _withDefaultResolver(authInternal, resolver);
@@ -1486,7 +1490,8 @@ function signInWithPopup(auth, provider, resolver) {
  * If the reauthentication is successful, the returned result will contain the user and the
  * provider's credential.
  *
- * This method does not work in a Node.js environment.
+ * This method does not work in a Node.js environment or on any {@link User} signed in by
+ * {@link Auth} instances created with a {@link @firebase/app#FirebaseServerApp}.
  *
  * @example
  * ```javascript
@@ -1510,6 +1515,9 @@ function reauthenticateWithPopup(user, provider, resolver) {
         var userInternal, resolverInternal, action;
         return tslib.__generator(this, function (_a) {
             userInternal = util.getModularInstance(user);
+            if (app._isFirebaseServerApp(userInternal.auth.app)) {
+                return [2 /*return*/, Promise.reject(index._createError(userInternal.auth, "operation-not-supported-in-this-environment" /* AuthErrorCode.OPERATION_NOT_SUPPORTED */))];
+            }
             index._assertInstanceOf(userInternal.auth, provider, index.FederatedAuthProvider);
             resolverInternal = _withDefaultResolver(userInternal.auth, resolver);
             action = new PopupOperation(userInternal.auth, "reauthViaPopup" /* AuthEventType.REAUTH_VIA_POPUP */, provider, resolverInternal, userInternal);
@@ -1859,7 +1867,8 @@ function pendingRedirectKey(auth) {
  * Follow the {@link https://firebase.google.com/docs/auth/web/redirect-best-practices
  * | best practices} when using {@link signInWithRedirect}.
  *
- * This method does not work in a Node.js environment.
+ * This method does not work in a Node.js environment or with {@link Auth} instances created with a
+ * {@link @firebase/app#FirebaseServerApp}.
  *
  * @example
  * ```javascript
@@ -1903,6 +1912,9 @@ function _signInWithRedirect(auth, provider, resolver) {
         return tslib.__generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
+                    if (app._isFirebaseServerApp(auth.app)) {
+                        return [2 /*return*/, Promise.reject(index._serverAppCurrentUserOperationNotSupportedError(auth))];
+                    }
                     authInternal = index._castAuth(auth);
                     index._assertInstanceOf(auth, provider, index.FederatedAuthProvider);
                     // Wait for auth initialization to complete, this will process pending redirects and clear the
@@ -1930,7 +1942,8 @@ function _signInWithRedirect(auth, provider, resolver) {
  * Follow the {@link https://firebase.google.com/docs/auth/web/redirect-best-practices
  * | best practices} when using {@link reauthenticateWithRedirect}.
  *
- * This method does not work in a Node.js environment.
+ * This method does not work in a Node.js environment or with {@link Auth} instances
+ * created with a {@link @firebase/app#FirebaseServerApp}.
  *
  * @example
  * ```javascript
@@ -1968,6 +1981,9 @@ function _reauthenticateWithRedirect(user, provider, resolver) {
                 case 0:
                     userInternal = util.getModularInstance(user);
                     index._assertInstanceOf(userInternal.auth, provider, index.FederatedAuthProvider);
+                    if (app._isFirebaseServerApp(userInternal.auth.app)) {
+                        return [2 /*return*/, Promise.reject(index._serverAppCurrentUserOperationNotSupportedError(userInternal.auth))];
+                    }
                     // Wait for auth initialization to complete, this will process pending redirects and clear the
                     // PENDING_REDIRECT_KEY in persistence. This should be completed before starting a new
                     // redirect and creating a PENDING_REDIRECT_KEY entry.
@@ -1996,7 +2012,8 @@ function _reauthenticateWithRedirect(user, provider, resolver) {
  * Follow the {@link https://firebase.google.com/docs/auth/web/redirect-best-practices
  * | best practices} when using {@link linkWithRedirect}.
  *
- * This method does not work in a Node.js environment.
+ * This method does not work in a Node.js environment or with {@link Auth} instances
+ * created with a {@link @firebase/app#FirebaseServerApp}.
  *
  * @example
  * ```javascript
@@ -2061,7 +2078,8 @@ function _linkWithRedirect(user, provider, resolver) {
  * If sign-in succeeded, returns the signed in user. If sign-in was unsuccessful, fails with an
  * error. If no redirect operation was called, returns `null`.
  *
- * This method does not work in a Node.js environment.
+ * This method does not work in a Node.js environment or with {@link Auth} instances created with a
+ * {@link @firebase/app#FirebaseServerApp}.
  *
  * @example
  * ```javascript
@@ -2113,6 +2131,9 @@ function _getRedirectResult(auth, resolverExtern, bypassAuthState) {
         return tslib.__generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
+                    if (app._isFirebaseServerApp(auth.app)) {
+                        return [2 /*return*/, Promise.reject(index._serverAppCurrentUserOperationNotSupportedError(auth))];
+                    }
                     authInternal = index._castAuth(auth);
                     resolver = _withDefaultResolver(authInternal, resolverExtern);
                     action = new RedirectAction(authInternal, resolver, bypassAuthState);
@@ -3010,14 +3031,19 @@ function getAuth(app$1) {
         ]
     });
     var authTokenSyncPath = util.getExperimentalSetting('authTokenSyncURL');
-    // Don't allow urls (XSS possibility), only paths on the same domain
-    // (starting with a single '/')
-    if (authTokenSyncPath && authTokenSyncPath.match(/^\/[^\/].*/)) {
-        var mintCookie_1 = mintCookieFactory(authTokenSyncPath);
-        index.beforeAuthStateChanged(auth, mintCookie_1, function () {
-            return mintCookie_1(auth.currentUser);
-        });
-        index.onIdTokenChanged(auth, function (user) { return mintCookie_1(user); });
+    // Only do the Cookie exchange in a secure context
+    if (authTokenSyncPath &&
+        typeof isSecureContext === 'boolean' &&
+        isSecureContext) {
+        // Don't allow urls (XSS possibility), only paths on the same domain
+        var authTokenSyncUrl = new URL(authTokenSyncPath, location.origin);
+        if (location.origin === authTokenSyncUrl.origin) {
+            var mintCookie_1 = mintCookieFactory(authTokenSyncUrl.toString());
+            index.beforeAuthStateChanged(auth, mintCookie_1, function () {
+                return mintCookie_1(auth.currentUser);
+            });
+            index.onIdTokenChanged(auth, function (user) { return mintCookie_1(user); });
+        }
     }
     var authEmulatorHost = util.getDefaultEmulatorHost('auth');
     if (authEmulatorHost) {