@firebase/auth 1.7.9-canary.aa6db78eb → 1.7.9-canary.b942e9e6e

package/dist/esm5/{index-262b3f24.js → index-82b3e33f.js}

@@ -1165,6 +1165,16 @@ var RecaptchaConfig = /** @class */ (function () {
             "ENFORCE" /* EnforcementState.ENFORCE */ ||
             this.getProviderEnforcementState(providerStr) === "AUDIT" /* EnforcementState.AUDIT */);
     };
+    /**
+     * Returns true if reCAPTCHA Enterprise protection is enabled in at least one provider, otherwise
+     * returns false.
+     *
+     * @returns Whether or not reCAPTCHA Enterprise protection is enabled for at least one provider.
+     */
+    RecaptchaConfig.prototype.isAnyProviderEnabled = function () {
+        return (this.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */) ||
+            this.isProviderEnabled("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */));
+    };
     return RecaptchaConfig;
 }());
 
@@ -3834,6 +3844,180 @@ function _generateCallbackName(prefix) {
     return "__".concat(prefix).concat(Math.floor(Math.random() * 1000000));
 }
 
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+var _SOLVE_TIME_MS = 500;
+var _EXPIRATION_TIME_MS = 60000;
+var _WIDGET_ID_START = 1000000000000;
+var MockReCaptcha = /** @class */ (function () {
+    function MockReCaptcha(auth) {
+        this.auth = auth;
+        this.counter = _WIDGET_ID_START;
+        this._widgets = new Map();
+    }
+    MockReCaptcha.prototype.render = function (container, parameters) {
+        var id = this.counter;
+        this._widgets.set(id, new MockWidget(container, this.auth.name, parameters || {}));
+        this.counter++;
+        return id;
+    };
+    MockReCaptcha.prototype.reset = function (optWidgetId) {
+        var _a;
+        var id = optWidgetId || _WIDGET_ID_START;
+        void ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.delete());
+        this._widgets.delete(id);
+    };
+    MockReCaptcha.prototype.getResponse = function (optWidgetId) {
+        var _a;
+        var id = optWidgetId || _WIDGET_ID_START;
+        return ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.getResponse()) || '';
+    };
+    MockReCaptcha.prototype.execute = function (optWidgetId) {
+        var _a;
+        return __awaiter(this, void 0, void 0, function () {
+            var id;
+            return __generator(this, function (_b) {
+                id = optWidgetId || _WIDGET_ID_START;
+                void ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.execute());
+                return [2 /*return*/, ''];
+            });
+        });
+    };
+    return MockReCaptcha;
+}());
+var MockGreCAPTCHATopLevel = /** @class */ (function () {
+    function MockGreCAPTCHATopLevel() {
+        this.enterprise = new MockGreCAPTCHA();
+    }
+    MockGreCAPTCHATopLevel.prototype.ready = function (callback) {
+        callback();
+    };
+    MockGreCAPTCHATopLevel.prototype.execute = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _siteKey, _options) {
+        return Promise.resolve('token');
+    };
+    MockGreCAPTCHATopLevel.prototype.render = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _container, _parameters) {
+        return '';
+    };
+    return MockGreCAPTCHATopLevel;
+}());
+var MockGreCAPTCHA = /** @class */ (function () {
+    function MockGreCAPTCHA() {
+    }
+    MockGreCAPTCHA.prototype.ready = function (callback) {
+        callback();
+    };
+    MockGreCAPTCHA.prototype.execute = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _siteKey, _options) {
+        return Promise.resolve('token');
+    };
+    MockGreCAPTCHA.prototype.render = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _container, _parameters) {
+        return '';
+    };
+    return MockGreCAPTCHA;
+}());
+var MockWidget = /** @class */ (function () {
+    function MockWidget(containerOrId, appName, params) {
+        var _this = this;
+        this.params = params;
+        this.timerId = null;
+        this.deleted = false;
+        this.responseToken = null;
+        this.clickHandler = function () {
+            _this.execute();
+        };
+        var container = typeof containerOrId === 'string'
+            ? document.getElementById(containerOrId)
+            : containerOrId;
+        _assert(container, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */, { appName: appName });
+        this.container = container;
+        this.isVisible = this.params.size !== 'invisible';
+        if (this.isVisible) {
+            this.execute();
+        }
+        else {
+            this.container.addEventListener('click', this.clickHandler);
+        }
+    }
+    MockWidget.prototype.getResponse = function () {
+        this.checkIfDeleted();
+        return this.responseToken;
+    };
+    MockWidget.prototype.delete = function () {
+        this.checkIfDeleted();
+        this.deleted = true;
+        if (this.timerId) {
+            clearTimeout(this.timerId);
+            this.timerId = null;
+        }
+        this.container.removeEventListener('click', this.clickHandler);
+    };
+    MockWidget.prototype.execute = function () {
+        var _this = this;
+        this.checkIfDeleted();
+        if (this.timerId) {
+            return;
+        }
+        this.timerId = window.setTimeout(function () {
+            _this.responseToken = generateRandomAlphaNumericString(50);
+            var _a = _this.params, callback = _a.callback, expiredCallback = _a["expired-callback"];
+            if (callback) {
+                try {
+                    callback(_this.responseToken);
+                }
+                catch (e) { }
+            }
+            _this.timerId = window.setTimeout(function () {
+                _this.timerId = null;
+                _this.responseToken = null;
+                if (expiredCallback) {
+                    try {
+                        expiredCallback();
+                    }
+                    catch (e) { }
+                }
+                if (_this.isVisible) {
+                    _this.execute();
+                }
+            }, _EXPIRATION_TIME_MS);
+        }, _SOLVE_TIME_MS);
+    };
+    MockWidget.prototype.checkIfDeleted = function () {
+        if (this.deleted) {
+            throw new Error('reCAPTCHA mock was already deleted!');
+        }
+    };
+    return MockWidget;
+}());
+function generateRandomAlphaNumericString(len) {
+    var chars = [];
+    var allowedChars = '1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
+    for (var i = 0; i < len; i++) {
+        chars.push(allowedChars.charAt(Math.floor(Math.random() * allowedChars.length)));
+    }
+    return chars.join('');
+}
+
 /* eslint-disable @typescript-eslint/no-require-imports */
 var RECAPTCHA_ENTERPRISE_VERIFIER_TYPE = 'recaptcha-enterprise';
 var FAKE_TOKEN = 'NO_RECAPTCHA';
@@ -3920,8 +4104,14 @@ var RecaptchaEnterpriseVerifier = /** @class */ (function () {
                     reject(Error('No reCAPTCHA enterprise script loaded.'));
                 }
             }
+            var mockRecaptcha;
             var _this = this;
             return __generator(this, function (_a) {
+                // Returns Promise for a mock token when appVerificationDisabledForTesting is true.
+                if (this.auth.settings.appVerificationDisabledForTesting) {
+                    mockRecaptcha = new MockGreCAPTCHATopLevel();
+                    return [2 /*return*/, mockRecaptcha.execute('siteKey', { action: 'verify' })];
+                }
                 return [2 /*return*/, new Promise(function (resolve, reject) {
                         retrieveSiteKey(_this.auth)
                             .then(function (siteKey) {
@@ -3955,15 +4145,18 @@ var RecaptchaEnterpriseVerifier = /** @class */ (function () {
     };
     return RecaptchaEnterpriseVerifier;
 }());
-function injectRecaptchaFields(auth, request, action, captchaResp) {
-    if (captchaResp === void 0) { captchaResp = false; }
+function injectRecaptchaFields(auth, request, action, isCaptchaResp, isFakeToken) {
+    if (isCaptchaResp === void 0) { isCaptchaResp = false; }
+    if (isFakeToken === void 0) { isFakeToken = false; }
     return __awaiter(this, void 0, void 0, function () {
-        var verifier, captchaResponse, newRequest;
+        var verifier, captchaResponse, newRequest, phoneNumber, recaptchaToken, recaptchaToken;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     verifier = new RecaptchaEnterpriseVerifier(auth);
-                    _a.label = 1;
+                    if (!isFakeToken) return [3 /*break*/, 1];
+                    captchaResponse = FAKE_TOKEN;
+                    return [3 /*break*/, 5];
                 case 1:
                     _a.trys.push([1, 3, , 5]);
                     return [4 /*yield*/, verifier.verify(action)];
@@ -3978,7 +4171,35 @@ function injectRecaptchaFields(auth, request, action, captchaResp) {
                     return [3 /*break*/, 5];
                 case 5:
                     newRequest = __assign({}, request);
-                    if (!captchaResp) {
+                    if (action === "mfaSmsEnrollment" /* RecaptchaActionName.MFA_SMS_ENROLLMENT */ ||
+                        action === "mfaSmsSignIn" /* RecaptchaActionName.MFA_SMS_SIGNIN */) {
+                        if ('phoneEnrollmentInfo' in newRequest) {
+                            phoneNumber = newRequest.phoneEnrollmentInfo.phoneNumber;
+                            recaptchaToken = newRequest.phoneEnrollmentInfo.recaptchaToken;
+                            Object.assign(newRequest, {
+                                'phoneEnrollmentInfo': {
+                                    phoneNumber: phoneNumber,
+                                    recaptchaToken: recaptchaToken,
+                                    captchaResponse: captchaResponse,
+                                    'clientType': "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */,
+                                    'recaptchaVersion': "RECAPTCHA_ENTERPRISE" /* RecaptchaVersion.ENTERPRISE */
+                                }
+                            });
+                        }
+                        else if ('phoneSignInInfo' in newRequest) {
+                            recaptchaToken = newRequest.phoneSignInInfo.recaptchaToken;
+                            Object.assign(newRequest, {
+                                'phoneSignInInfo': {
+                                    recaptchaToken: recaptchaToken,
+                                    captchaResponse: captchaResponse,
+                                    'clientType': "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */,
+                                    'recaptchaVersion': "RECAPTCHA_ENTERPRISE" /* RecaptchaVersion.ENTERPRISE */
+                                }
+                            });
+                        }
+                        return [2 /*return*/, newRequest];
+                    }
+                    if (!isCaptchaResp) {
                         Object.assign(newRequest, { captchaResponse: captchaResponse });
                     }
                     else {
@@ -3993,19 +4214,20 @@ function injectRecaptchaFields(auth, request, action, captchaResp) {
         });
     });
 }
-function handleRecaptchaFlow(authInstance, request, actionName, actionMethod) {
-    var _a;
+function handleRecaptchaFlow(authInstance, request, actionName, actionMethod, recaptchaAuthProvider) {
+    var _a, _b;
     return __awaiter(this, void 0, void 0, function () {
-        var requestWithRecaptcha;
+        var requestWithRecaptcha, requestWithRecaptcha, requestWithRecaptchaFields;
         var _this = this;
-        return __generator(this, function (_b) {
-            switch (_b.label) {
+        return __generator(this, function (_c) {
+            switch (_c.label) {
                 case 0:
+                    if (!(recaptchaAuthProvider === "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)) return [3 /*break*/, 4];
                     if (!((_a = authInstance
-                        ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaProvider.EMAIL_PASSWORD_PROVIDER */))) return [3 /*break*/, 2];
+                        ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */))) return [3 /*break*/, 2];
                     return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, actionName === "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */)];
                 case 1:
-                    requestWithRecaptcha = _b.sent();
+                    requestWithRecaptcha = _c.sent();
                     return [2 /*return*/, actionMethod(authInstance, requestWithRecaptcha)];
                 case 2: return [2 /*return*/, actionMethod(authInstance, request).catch(function (error) { return __awaiter(_this, void 0, void 0, function () {
                         var requestWithRecaptcha;
@@ -4022,6 +4244,48 @@ function handleRecaptchaFlow(authInstance, request, actionName, actionMethod) {
                             }
                         });
                     }); })];
+                case 3: return [3 /*break*/, 10];
+                case 4:
+                    if (!(recaptchaAuthProvider === "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */)) return [3 /*break*/, 9];
+                    if (!((_b = authInstance
+                        ._getRecaptchaConfig()) === null || _b === void 0 ? void 0 : _b.isProviderEnabled("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */))) return [3 /*break*/, 6];
+                    return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName)];
+                case 5:
+                    requestWithRecaptcha = _c.sent();
+                    return [2 /*return*/, actionMethod(authInstance, requestWithRecaptcha).catch(function (error) { return __awaiter(_this, void 0, void 0, function () {
+                            var requestWithRecaptchaFields;
+                            var _a;
+                            return __generator(this, function (_b) {
+                                switch (_b.label) {
+                                    case 0:
+                                        if (!(((_a = authInstance
+                                            ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.getProviderEnforcementState("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */)) === "AUDIT" /* EnforcementState.AUDIT */)) return [3 /*break*/, 2];
+                                        if (!(error.code === "auth/".concat("missing-recaptcha-token" /* AuthErrorCode.MISSING_RECAPTCHA_TOKEN */) ||
+                                            error.code === "auth/".concat("invalid-app-credential" /* AuthErrorCode.INVALID_APP_CREDENTIAL */))) return [3 /*break*/, 2];
+                                        console.log("Failed to verify with reCAPTCHA Enterprise. Automatically triggering the reCAPTCHA v2 flow to complete the ".concat(actionName, " flow."));
+                                        return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, false, // isCaptchaResp
+                                            true // isFakeToken
+                                            )];
+                                    case 1:
+                                        requestWithRecaptchaFields = _b.sent();
+                                        // This will call the PhoneApiCaller to fetch and inject reCAPTCHA v2 token.
+                                        return [2 /*return*/, actionMethod(authInstance, requestWithRecaptchaFields)];
+                                    case 2: 
+                                    // ENFORCE mode or AUDIT mode with any other error.
+                                    return [2 /*return*/, Promise.reject(error)];
+                                }
+                            });
+                        }); })];
+                case 6: return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, false, // isCaptchaResp
+                    true // isFakeToken
+                    )];
+                case 7:
+                    requestWithRecaptchaFields = _c.sent();
+                    // This will call the PhoneApiCaller to fetch and inject v2 token.
+                    return [2 /*return*/, actionMethod(authInstance, requestWithRecaptchaFields)];
+                case 8: return [3 /*break*/, 10];
+                case 9: return [2 /*return*/, Promise.reject(recaptchaAuthProvider + ' provider is not supported.')];
+                case 10: return [2 /*return*/];
             }
         });
     });
@@ -4046,7 +4310,7 @@ function _initializeRecaptchaConfig(auth) {
                     else {
                         authInternal._tenantRecaptchaConfigs[authInternal.tenantId] = config;
                     }
-                    if (config.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaProvider.EMAIL_PASSWORD_PROVIDER */)) {
+                    if (config.isAnyProviderEnabled()) {
                         verifier = new RecaptchaEnterpriseVerifier(authInternal);
                         void verifier.verify();
                     }
@@ -4532,7 +4796,7 @@ var EmailAuthCredential = /** @class */ (function (_super) {
                             password: this._password,
                             clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                         };
-                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */, signInWithPassword)];
+                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */, signInWithPassword, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                     case "emailLink" /* SignInMethod.EMAIL_LINK */:
                         return [2 /*return*/, signInWithEmailLink$1(auth, {
                                 email: this._email,
@@ -4559,7 +4823,7 @@ var EmailAuthCredential = /** @class */ (function (_super) {
                             password: this._password,
                             clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                         };
-                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, linkEmailPassword)];
+                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, linkEmailPassword, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                     case "emailLink" /* SignInMethod.EMAIL_LINK */:
                         return [2 /*return*/, signInWithEmailLinkForLinking(auth, {
                                 idToken: idToken,
@@ -6802,7 +7066,7 @@ function sendPasswordResetEmail(auth, email, actionCodeSettings) {
                     if (actionCodeSettings) {
                         _setActionCodeSettingsOnRequest(authInternal, request, actionCodeSettings);
                     }
-                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendPasswordResetEmail$1)];
+                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendPasswordResetEmail$1, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                 case 1:
                     _a.sent();
                     return [2 /*return*/];
@@ -6978,7 +7242,7 @@ function createUserWithEmailAndPassword(auth, email, password) {
                         password: password,
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
-                    signUpResponse = handleRecaptchaFlow(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, signUp);
+                    signUpResponse = handleRecaptchaFlow(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, signUp, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */);
                     return [4 /*yield*/, signUpResponse.catch(function (error) {
                             if (error.code === "auth/".concat("password-does-not-meet-requirements" /* AuthErrorCode.PASSWORD_DOES_NOT_MEET_REQUIREMENTS */)) {
                                 void recachePasswordPolicy(auth);
@@ -7109,7 +7373,7 @@ function sendSignInLinkToEmail(auth, email, actionCodeSettings) {
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
                     setActionCodeSettings(request, actionCodeSettings);
-                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendSignInLinkToEmail$1)];
+                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendSignInLinkToEmail$1, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                 case 1:
                     _a.sent();
                     return [2 /*return*/];
@@ -9494,143 +9758,6 @@ function finalizeSignInTotpMfa(auth, request) {
     return _performApiRequest(auth, "POST" /* HttpMethod.POST */, "/v2/accounts/mfaSignIn:finalize" /* Endpoint.FINALIZE_MFA_SIGN_IN */, _addTidIfNecessary(auth, request));
 }
 
-/**
- * @license
- * Copyright 2020 Google LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-var _SOLVE_TIME_MS = 500;
-var _EXPIRATION_TIME_MS = 60000;
-var _WIDGET_ID_START = 1000000000000;
-var MockReCaptcha = /** @class */ (function () {
-    function MockReCaptcha(auth) {
-        this.auth = auth;
-        this.counter = _WIDGET_ID_START;
-        this._widgets = new Map();
-    }
-    MockReCaptcha.prototype.render = function (container, parameters) {
-        var id = this.counter;
-        this._widgets.set(id, new MockWidget(container, this.auth.name, parameters || {}));
-        this.counter++;
-        return id;
-    };
-    MockReCaptcha.prototype.reset = function (optWidgetId) {
-        var _a;
-        var id = optWidgetId || _WIDGET_ID_START;
-        void ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.delete());
-        this._widgets.delete(id);
-    };
-    MockReCaptcha.prototype.getResponse = function (optWidgetId) {
-        var _a;
-        var id = optWidgetId || _WIDGET_ID_START;
-        return ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.getResponse()) || '';
-    };
-    MockReCaptcha.prototype.execute = function (optWidgetId) {
-        var _a;
-        return __awaiter(this, void 0, void 0, function () {
-            var id;
-            return __generator(this, function (_b) {
-                id = optWidgetId || _WIDGET_ID_START;
-                void ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.execute());
-                return [2 /*return*/, ''];
-            });
-        });
-    };
-    return MockReCaptcha;
-}());
-var MockWidget = /** @class */ (function () {
-    function MockWidget(containerOrId, appName, params) {
-        var _this = this;
-        this.params = params;
-        this.timerId = null;
-        this.deleted = false;
-        this.responseToken = null;
-        this.clickHandler = function () {
-            _this.execute();
-        };
-        var container = typeof containerOrId === 'string'
-            ? document.getElementById(containerOrId)
-            : containerOrId;
-        _assert(container, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */, { appName: appName });
-        this.container = container;
-        this.isVisible = this.params.size !== 'invisible';
-        if (this.isVisible) {
-            this.execute();
-        }
-        else {
-            this.container.addEventListener('click', this.clickHandler);
-        }
-    }
-    MockWidget.prototype.getResponse = function () {
-        this.checkIfDeleted();
-        return this.responseToken;
-    };
-    MockWidget.prototype.delete = function () {
-        this.checkIfDeleted();
-        this.deleted = true;
-        if (this.timerId) {
-            clearTimeout(this.timerId);
-            this.timerId = null;
-        }
-        this.container.removeEventListener('click', this.clickHandler);
-    };
-    MockWidget.prototype.execute = function () {
-        var _this = this;
-        this.checkIfDeleted();
-        if (this.timerId) {
-            return;
-        }
-        this.timerId = window.setTimeout(function () {
-            _this.responseToken = generateRandomAlphaNumericString(50);
-            var _a = _this.params, callback = _a.callback, expiredCallback = _a["expired-callback"];
-            if (callback) {
-                try {
-                    callback(_this.responseToken);
-                }
-                catch (e) { }
-            }
-            _this.timerId = window.setTimeout(function () {
-                _this.timerId = null;
-                _this.responseToken = null;
-                if (expiredCallback) {
-                    try {
-                        expiredCallback();
-                    }
-                    catch (e) { }
-                }
-                if (_this.isVisible) {
-                    _this.execute();
-                }
-            }, _EXPIRATION_TIME_MS);
-        }, _SOLVE_TIME_MS);
-    };
-    MockWidget.prototype.checkIfDeleted = function () {
-        if (this.deleted) {
-            throw new Error('reCAPTCHA mock was already deleted!');
-        }
-    };
-    return MockWidget;
-}());
-function generateRandomAlphaNumericString(len) {
-    var chars = [];
-    var allowedChars = '1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
-    for (var i = 0; i < len; i++) {
-        chars.push(allowedChars.charAt(Math.floor(Math.random() * allowedChars.length)));
-    }
-    return chars.join('');
-}
-
 /**
  * @license
  * Copyright 2020 Google LLC
@@ -10037,12 +10164,15 @@ var ConfirmationResultImpl = /** @class */ (function () {
  * provides the code sent to their phone, call {@link ConfirmationResult.confirm}
  * with the code to sign the user in.
  *
- * For abuse prevention, this method also requires a {@link ApplicationVerifier}.
- * This SDK includes a reCAPTCHA-based implementation, {@link RecaptchaVerifier}.
+ * For abuse prevention, this method requires a {@link ApplicationVerifier}.
+ * This SDK includes an implementation based on reCAPTCHA v2, {@link RecaptchaVerifier}.
  * This function can work on other platforms that do not support the
  * {@link RecaptchaVerifier} (like React Native), but you need to use a
  * third-party {@link ApplicationVerifier} implementation.
  *
+ * If you've enabled project-level reCAPTCHA Enterprise bot protection in
+ * Enforce mode, you can omit the {@link ApplicationVerifier}.
+ *
  * This method does not work in a Node.js environment or with {@link Auth} instances created with a
  * {@link @firebase/app#FirebaseServerApp}.
  *
@@ -10155,17 +10285,29 @@ function reauthenticateWithPhoneNumber(user, phoneNumber, appVerifier) {
 function _verifyPhoneNumber(auth, options, verifier) {
     var _a;
     return __awaiter(this, void 0, void 0, function () {
-        var recaptchaToken, phoneInfoOptions, session, response, mfaEnrollmentId, response, sessionInfo;
+        var phoneInfoOptions, session, startPhoneMfaEnrollmentRequest, startEnrollPhoneMfaActionCallback, startPhoneMfaEnrollmentResponse, response, mfaEnrollmentId, startPhoneMfaSignInRequest, startSignInPhoneMfaActionCallback, startPhoneMfaSignInResponse, response, sendPhoneVerificationCodeRequest, sendPhoneVerificationCodeActionCallback, sendPhoneVerificationCodeResponse, response;
+        var _this = this;
         return __generator(this, function (_b) {
             switch (_b.label) {
-                case 0: return [4 /*yield*/, verifier.verify()];
+                case 0:
+                    if (!!auth._getRecaptchaConfig()) return [3 /*break*/, 4];
+                    _b.label = 1;
                 case 1:
-                    recaptchaToken = _b.sent();
-                    _b.label = 2;
+                    _b.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, _initializeRecaptchaConfig(auth)];
                 case 2:
-                    _b.trys.push([2, , 10, 11]);
-                    _assert(typeof recaptchaToken === 'string', auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
-                    _assert(verifier.type === RECAPTCHA_VERIFIER_TYPE, auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                    _b.sent();
+                    return [3 /*break*/, 4];
+                case 3:
+                    _b.sent();
+                    // If an error occurs while fetching the config, there is no way to know the enablement state
+                    // of Phone provider, so we proceed with recaptcha V2 verification.
+                    // The error is likely "recaptchaKey undefined", as reCAPTCHA Enterprise is not
+                    // enabled for any provider.
+                    console.log('Failed to initialize reCAPTCHA Enterprise config. Triggering the reCAPTCHA v2 verification.');
+                    return [3 /*break*/, 4];
+                case 4:
+                    _b.trys.push([4, , 12, 13]);
                     phoneInfoOptions = void 0;
                     if (typeof options === 'string') {
                         phoneInfoOptions = {
@@ -10175,48 +10317,106 @@ function _verifyPhoneNumber(auth, options, verifier) {
                     else {
                         phoneInfoOptions = options;
                     }
-                    if (!('session' in phoneInfoOptions)) return [3 /*break*/, 7];
+                    if (!('session' in phoneInfoOptions)) return [3 /*break*/, 9];
                     session = phoneInfoOptions.session;
-                    if (!('phoneNumber' in phoneInfoOptions)) return [3 /*break*/, 4];
+                    if (!('phoneNumber' in phoneInfoOptions)) return [3 /*break*/, 6];
                     _assert(session.type === "enroll" /* MultiFactorSessionType.ENROLL */, auth, "internal-error" /* AuthErrorCode.INTERNAL_ERROR */);
-                    return [4 /*yield*/, startEnrollPhoneMfa(auth, {
-                            idToken: session.credential,
-                            phoneEnrollmentInfo: {
-                                phoneNumber: phoneInfoOptions.phoneNumber,
-                                recaptchaToken: recaptchaToken
+                    startPhoneMfaEnrollmentRequest = {
+                        idToken: session.credential,
+                        phoneEnrollmentInfo: {
+                            phoneNumber: phoneInfoOptions.phoneNumber,
+                            clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
+                        }
+                    };
+                    startEnrollPhoneMfaActionCallback = function (authInstance, request) { return __awaiter(_this, void 0, void 0, function () {
+                        var requestWithRecaptchaV2;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    if (!(request.phoneEnrollmentInfo.captchaResponse === FAKE_TOKEN)) return [3 /*break*/, 2];
+                                    _assert((verifier === null || verifier === void 0 ? void 0 : verifier.type) === RECAPTCHA_VERIFIER_TYPE, authInstance, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                                    return [4 /*yield*/, injectRecaptchaV2Token(authInstance, request, verifier)];
+                                case 1:
+                                    requestWithRecaptchaV2 = _a.sent();
+                                    return [2 /*return*/, startEnrollPhoneMfa(authInstance, requestWithRecaptchaV2)];
+                                case 2: return [2 /*return*/, startEnrollPhoneMfa(authInstance, request)];
                             }
+                        });
+                    }); };
+                    startPhoneMfaEnrollmentResponse = handleRecaptchaFlow(auth, startPhoneMfaEnrollmentRequest, "mfaSmsEnrollment" /* RecaptchaActionName.MFA_SMS_ENROLLMENT */, startEnrollPhoneMfaActionCallback, "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */);
+                    return [4 /*yield*/, startPhoneMfaEnrollmentResponse.catch(function (error) {
+                            return Promise.reject(error);
                         })];
-                case 3:
+                case 5:
                     response = _b.sent();
                     return [2 /*return*/, response.phoneSessionInfo.sessionInfo];
-                case 4:
+                case 6:
                     _assert(session.type === "signin" /* MultiFactorSessionType.SIGN_IN */, auth, "internal-error" /* AuthErrorCode.INTERNAL_ERROR */);
                     mfaEnrollmentId = ((_a = phoneInfoOptions.multiFactorHint) === null || _a === void 0 ? void 0 : _a.uid) ||
                         phoneInfoOptions.multiFactorUid;
                     _assert(mfaEnrollmentId, auth, "missing-multi-factor-info" /* AuthErrorCode.MISSING_MFA_INFO */);
-                    return [4 /*yield*/, startSignInPhoneMfa(auth, {
-                            mfaPendingCredential: session.credential,
-                            mfaEnrollmentId: mfaEnrollmentId,
-                            phoneSignInInfo: {
-                                recaptchaToken: recaptchaToken
+                    startPhoneMfaSignInRequest = {
+                        mfaPendingCredential: session.credential,
+                        mfaEnrollmentId: mfaEnrollmentId,
+                        phoneSignInInfo: {
+                            clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
+                        }
+                    };
+                    startSignInPhoneMfaActionCallback = function (authInstance, request) { return __awaiter(_this, void 0, void 0, function () {
+                        var requestWithRecaptchaV2;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    if (!(request.phoneSignInInfo.captchaResponse === FAKE_TOKEN)) return [3 /*break*/, 2];
+                                    _assert((verifier === null || verifier === void 0 ? void 0 : verifier.type) === RECAPTCHA_VERIFIER_TYPE, authInstance, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                                    return [4 /*yield*/, injectRecaptchaV2Token(authInstance, request, verifier)];
+                                case 1:
+                                    requestWithRecaptchaV2 = _a.sent();
+                                    return [2 /*return*/, startSignInPhoneMfa(authInstance, requestWithRecaptchaV2)];
+                                case 2: return [2 /*return*/, startSignInPhoneMfa(authInstance, request)];
                             }
+                        });
+                    }); };
+                    startPhoneMfaSignInResponse = handleRecaptchaFlow(auth, startPhoneMfaSignInRequest, "mfaSmsSignIn" /* RecaptchaActionName.MFA_SMS_SIGNIN */, startSignInPhoneMfaActionCallback, "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */);
+                    return [4 /*yield*/, startPhoneMfaSignInResponse.catch(function (error) {
+                            return Promise.reject(error);
                         })];
-                case 5:
+                case 7:
                     response = _b.sent();
                     return [2 /*return*/, response.phoneResponseInfo.sessionInfo];
-                case 6: return [3 /*break*/, 9];
-                case 7: return [4 /*yield*/, sendPhoneVerificationCode(auth, {
+                case 8: return [3 /*break*/, 11];
+                case 9:
+                    sendPhoneVerificationCodeRequest = {
                         phoneNumber: phoneInfoOptions.phoneNumber,
-                        recaptchaToken: recaptchaToken
-                    })];
-                case 8:
-                    sessionInfo = (_b.sent()).sessionInfo;
-                    return [2 /*return*/, sessionInfo];
-                case 9: return [3 /*break*/, 11];
+                        clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
+                    };
+                    sendPhoneVerificationCodeActionCallback = function (authInstance, request) { return __awaiter(_this, void 0, void 0, function () {
+                        var requestWithRecaptchaV2;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    if (!(request.captchaResponse === FAKE_TOKEN)) return [3 /*break*/, 2];
+                                    _assert((verifier === null || verifier === void 0 ? void 0 : verifier.type) === RECAPTCHA_VERIFIER_TYPE, authInstance, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                                    return [4 /*yield*/, injectRecaptchaV2Token(authInstance, request, verifier)];
+                                case 1:
+                                    requestWithRecaptchaV2 = _a.sent();
+                                    return [2 /*return*/, sendPhoneVerificationCode(authInstance, requestWithRecaptchaV2)];
+                                case 2: return [2 /*return*/, sendPhoneVerificationCode(authInstance, request)];
+                            }
+                        });
+                    }); };
+                    sendPhoneVerificationCodeResponse = handleRecaptchaFlow(auth, sendPhoneVerificationCodeRequest, "sendVerificationCode" /* RecaptchaActionName.SEND_VERIFICATION_CODE */, sendPhoneVerificationCodeActionCallback, "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */);
+                    return [4 /*yield*/, sendPhoneVerificationCodeResponse.catch(function (error) {
+                            return Promise.reject(error);
+                        })];
                 case 10:
-                    verifier._reset();
+                    response = _b.sent();
+                    return [2 /*return*/, response.sessionInfo];
+                case 11: return [3 /*break*/, 13];
+                case 12:
+                    verifier === null || verifier === void 0 ? void 0 : verifier._reset();
                     return [7 /*endfinally*/];
-                case 11: return [2 /*return*/];
+                case 13: return [2 /*return*/];
             }
         });
     });
@@ -10261,6 +10461,59 @@ function updatePhoneNumber(user, credential) {
             }
         });
     });
+}
+// Helper function that fetches and injects a reCAPTCHA v2 token into the request.
+function injectRecaptchaV2Token(auth, request, recaptchaV2Verifier) {
+    return __awaiter(this, void 0, void 0, function () {
+        var recaptchaV2Token, newRequest, phoneNumber, captchaResponse, clientType, recaptchaVersion, captchaResponse, clientType, recaptchaVersion;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    _assert(recaptchaV2Verifier.type === RECAPTCHA_VERIFIER_TYPE, auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                    return [4 /*yield*/, recaptchaV2Verifier.verify()];
+                case 1:
+                    recaptchaV2Token = _a.sent();
+                    _assert(typeof recaptchaV2Token === 'string', auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                    newRequest = __assign({}, request);
+                    if ('phoneEnrollmentInfo' in newRequest) {
+                        phoneNumber = newRequest.phoneEnrollmentInfo.phoneNumber;
+                        captchaResponse = newRequest.phoneEnrollmentInfo.captchaResponse;
+                        clientType = newRequest
+                            .phoneEnrollmentInfo.clientType;
+                        recaptchaVersion = newRequest.phoneEnrollmentInfo.recaptchaVersion;
+                        Object.assign(newRequest, {
+                            'phoneEnrollmentInfo': {
+                                phoneNumber: phoneNumber,
+                                recaptchaToken: recaptchaV2Token,
+                                captchaResponse: captchaResponse,
+                                clientType: clientType,
+                                recaptchaVersion: recaptchaVersion
+                            }
+                        });
+                        return [2 /*return*/, newRequest];
+                    }
+                    else if ('phoneSignInInfo' in newRequest) {
+                        captchaResponse = newRequest.phoneSignInInfo.captchaResponse;
+                        clientType = newRequest
+                            .phoneSignInInfo.clientType;
+                        recaptchaVersion = newRequest.phoneSignInInfo.recaptchaVersion;
+                        Object.assign(newRequest, {
+                            'phoneSignInInfo': {
+                                recaptchaToken: recaptchaV2Token,
+                                captchaResponse: captchaResponse,
+                                clientType: clientType,
+                                recaptchaVersion: recaptchaVersion
+                            }
+                        });
+                        return [2 /*return*/, newRequest];
+                    }
+                    else {
+                        Object.assign(newRequest, { 'recaptchaToken': recaptchaV2Token });
+                        return [2 /*return*/, newRequest];
+                    }
+            }
+        });
+    });
 }
 
 /**
@@ -10332,12 +10585,14 @@ var PhoneAuthProvider = /** @class */ (function () {
      *
      * @param phoneInfoOptions - The user's {@link PhoneInfoOptions}. The phone number should be in
      * E.164 format (e.g. +16505550101).
-     * @param applicationVerifier - For abuse prevention, this method also requires a
-     * {@link ApplicationVerifier}. This SDK includes a reCAPTCHA-based implementation,
-     * {@link RecaptchaVerifier}.
+     * @param applicationVerifier - An {@link ApplicationVerifier}, which prevents
+     * requests from unauthorized clients. This SDK includes an implementation
+     * based on reCAPTCHA v2, {@link RecaptchaVerifier}. If you've enabled
+     * reCAPTCHA Enterprise bot protection in Enforce mode, this parameter is
+     * optional; in all other configurations, the parameter is required.
      *
      * @returns A Promise for a verification ID that can be passed to
-     * {@link PhoneAuthProvider.credential} to identify this flow..
+     * {@link PhoneAuthProvider.credential} to identify this flow.
      */
     PhoneAuthProvider.prototype.verifyPhoneNumber = function (phoneOptions, applicationVerifier) {
         return _verifyPhoneNumber(this.auth, phoneOptions, getModularInstance(applicationVerifier));
@@ -12451,7 +12706,7 @@ function _isEmptyString(input) {
 }
 
 var name = "@firebase/auth";
-var version = "1.7.9-canary.aa6db78eb";
+var version = "1.7.9-canary.b942e9e6e";
 
 /**
  * @license
@@ -12738,4 +12993,4 @@ _setExternalJSProvider({
 registerAuth("Browser" /* ClientPlatform.BROWSER */);
 
 export { TwitterAuthProvider as $, ActionCodeOperation as A, updateCurrentUser as B, signOut as C, revokeAccessToken as D, deleteUser as E, FactorId as F, debugErrorMap as G, prodErrorMap as H, AUTH_ERROR_CODES_MAP_DO_NOT_USE_INTERNALLY as I, initializeAuth as J, connectAuthEmulator as K, AuthCredential as L, EmailAuthCredential as M, OAuthCredential as N, OperationType as O, PhoneAuthProvider as P, PhoneAuthCredential as Q, RecaptchaVerifier as R, SignInMethod as S, TotpMultiFactorGenerator as T, inMemoryPersistence as U, EmailAuthProvider as V, FacebookAuthProvider as W, GoogleAuthProvider as X, GithubAuthProvider as Y, OAuthProvider as Z, SAMLAuthProvider as _, browserSessionPersistence as a, signInAnonymously as a0, signInWithCredential as a1, linkWithCredential as a2, reauthenticateWithCredential as a3, signInWithCustomToken as a4, sendPasswordResetEmail as a5, confirmPasswordReset as a6, applyActionCode as a7, checkActionCode as a8, verifyPasswordResetCode as a9, _isIOS7Or8 as aA, _assert as aB, _createError as aC, AuthEventManager as aD, _getInstance as aE, _persistenceKeyName as aF, _clearRedirectOutcomes as aG, _getRedirectResult as aH, _overrideRedirectResult as aI, _castAuth as aJ, UserImpl as aK, AuthImpl as aL, _getClientVersion as aM, _generateEventId as aN, AuthPopup as aO, FetchProvider as aP, SAMLAuthCredential as aQ, createUserWithEmailAndPassword as aa, signInWithEmailAndPassword as ab, sendSignInLinkToEmail as ac, isSignInWithEmailLink as ad, signInWithEmailLink as ae, fetchSignInMethodsForEmail as af, sendEmailVerification as ag, verifyBeforeUpdateEmail as ah, ActionCodeURL as ai, parseActionCodeURL as aj, updateProfile as ak, updateEmail as al, updatePassword as am, getIdToken as an, getIdTokenResult as ao, unlink as ap, getAdditionalUserInfo as aq, reload as ar, getMultiFactorResolver as as, multiFactor as at, _isIOS as au, _isAndroid as av, _fail as aw, _getRedirectUrl as ax, debugAssert as ay, _getProjectConfig as az, browserLocalPersistence as b, signInWithPopup as c, linkWithPopup as d, reauthenticateWithPopup as e, signInWithRedirect as f, linkWithRedirect as g, reauthenticateWithRedirect as h, indexedDBLocalPersistence as i, getRedirectResult as j, browserPopupRedirectResolver as k, linkWithPhoneNumber as l, PhoneMultiFactorGenerator as m, TotpSecret as n, getAuth as o, ProviderId as p, setPersistence as q, reauthenticateWithPhoneNumber as r, signInWithPhoneNumber as s, initializeRecaptchaConfig as t, updatePhoneNumber as u, validatePassword as v, onIdTokenChanged as w, beforeAuthStateChanged as x, onAuthStateChanged as y, useDeviceLanguage as z };
-//# sourceMappingURL=index-262b3f24.js.map
+//# sourceMappingURL=index-82b3e33f.js.map