@firebase/auth 1.7.9-canary.aa6db78eb → 1.7.9-canary.b942e9e6e

package/dist/node/index.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var totp = require('./totp-617e4db6.js');
+var totp = require('./totp-c9a669c7.js');
 require('tslib');
 require('@firebase/app');
 require('@firebase/util');

package/dist/node/internal.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var totp = require('./totp-617e4db6.js');
+var totp = require('./totp-c9a669c7.js');
 var tslib = require('tslib');
 var util = require('@firebase/util');
 var app = require('@firebase/app');

package/dist/node/src/api/account_management/mfa.d.ts

@@ -14,6 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { RecaptchaClientType, RecaptchaVersion } from '../index';
 import { SignInWithPhoneNumberRequest } from '../authentication/sms';
 import { FinalizeMfaResponse } from '../authentication/mfa';
 import { AuthInternal } from '../../model/auth';
@@ -44,7 +45,10 @@ export interface StartPhoneMfaEnrollmentRequest {
     idToken: string;
     phoneEnrollmentInfo: {
         phoneNumber: string;
-        recaptchaToken: string;
+        recaptchaToken?: string;
+        captchaResponse?: string;
+        clientType?: RecaptchaClientType;
+        recaptchaVersion?: RecaptchaVersion;
     };
     tenantId?: string;
 }

package/dist/node/src/api/authentication/mfa.d.ts

@@ -14,6 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { RecaptchaClientType, RecaptchaVersion } from '../index';
 import { Auth } from '../../model/public_types';
 import { IdTokenResponse } from '../../model/id_token';
 import { MfaEnrollment } from '../account_management/mfa';
@@ -34,7 +35,10 @@ export interface StartPhoneMfaSignInRequest {
     mfaPendingCredential: string;
     mfaEnrollmentId: string;
     phoneSignInInfo: {
-        recaptchaToken: string;
+        recaptchaToken?: string;
+        captchaResponse?: string;
+        clientType?: RecaptchaClientType;
+        recaptchaVersion?: RecaptchaVersion;
     };
     tenantId?: string;
 }

package/dist/node/src/api/authentication/sms.d.ts

@@ -14,12 +14,16 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { RecaptchaClientType, RecaptchaVersion } from '../index';
 import { IdTokenResponse } from '../../model/id_token';
 import { Auth } from '../../model/public_types';
 export interface SendPhoneVerificationCodeRequest {
     phoneNumber: string;
-    recaptchaToken: string;
+    recaptchaToken?: string;
     tenantId?: string;
+    captchaResponse?: string;
+    clientType?: RecaptchaClientType;
+    recaptchaVersion?: RecaptchaVersion;
 }
 export interface SendPhoneVerificationCodeResponse {
     sessionInfo: string;

package/dist/node/src/api/index.d.ts

@@ -69,7 +69,10 @@ export declare const enum RecaptchaVersion {
 export declare const enum RecaptchaActionName {
     SIGN_IN_WITH_PASSWORD = "signInWithPassword",
     GET_OOB_CODE = "getOobCode",
-    SIGN_UP_PASSWORD = "signUpPassword"
+    SIGN_UP_PASSWORD = "signUpPassword",
+    SEND_VERIFICATION_CODE = "sendVerificationCode",
+    MFA_SMS_ENROLLMENT = "mfaSmsEnrollment",
+    MFA_SMS_SIGNIN = "mfaSmsSignIn"
 }
 export declare const enum EnforcementState {
     ENFORCE = "ENFORCE",
@@ -77,8 +80,9 @@ export declare const enum EnforcementState {
     OFF = "OFF",
     ENFORCEMENT_STATE_UNSPECIFIED = "ENFORCEMENT_STATE_UNSPECIFIED"
 }
-export declare const enum RecaptchaProvider {
-    EMAIL_PASSWORD_PROVIDER = "EMAIL_PASSWORD_PROVIDER"
+export declare const enum RecaptchaAuthProvider {
+    EMAIL_PASSWORD_PROVIDER = "EMAIL_PASSWORD_PROVIDER",
+    PHONE_PROVIDER = "PHONE_PROVIDER"
 }
 export declare const DEFAULT_API_TIMEOUT_MS: Delay;
 export declare function _addTidIfNecessary<T extends {

package/dist/node/src/platform_browser/providers/phone.d.ts

@@ -74,14 +74,16 @@ export declare class PhoneAuthProvider {
      *
      * @param phoneInfoOptions - The user's {@link PhoneInfoOptions}. The phone number should be in
      * E.164 format (e.g. +16505550101).
-     * @param applicationVerifier - For abuse prevention, this method also requires a
-     * {@link ApplicationVerifier}. This SDK includes a reCAPTCHA-based implementation,
-     * {@link RecaptchaVerifier}.
+     * @param applicationVerifier - An {@link ApplicationVerifier}, which prevents
+     * requests from unauthorized clients. This SDK includes an implementation
+     * based on reCAPTCHA v2, {@link RecaptchaVerifier}. If you've enabled
+     * reCAPTCHA Enterprise bot protection in Enforce mode, this parameter is
+     * optional; in all other configurations, the parameter is required.
      *
      * @returns A Promise for a verification ID that can be passed to
-     * {@link PhoneAuthProvider.credential} to identify this flow..
+     * {@link PhoneAuthProvider.credential} to identify this flow.
      */
-    verifyPhoneNumber(phoneOptions: PhoneInfoOptions | string, applicationVerifier: ApplicationVerifier): Promise<string>;
+    verifyPhoneNumber(phoneOptions: PhoneInfoOptions | string, applicationVerifier?: ApplicationVerifier): Promise<string>;
     /**
      * Creates a phone auth credential, given the verification ID from
      * {@link PhoneAuthProvider.verifyPhoneNumber} and the code that was sent to the user's

package/dist/node/src/platform_browser/recaptcha/recaptcha.d.ts

@@ -68,4 +68,11 @@ export declare class RecaptchaConfig {
      * @returns Whether or not reCAPTCHA Enterprise protection is enabled for the given provider.
      */
     isProviderEnabled(providerStr: string): boolean;
+    /**
+     * Returns true if reCAPTCHA Enterprise protection is enabled in at least one provider, otherwise
+     * returns false.
+     *
+     * @returns Whether or not reCAPTCHA Enterprise protection is enabled for at least one provider.
+     */
+    isAnyProviderEnabled(): boolean;
 }

package/dist/node/src/platform_browser/recaptcha/recaptcha_enterprise_verifier.d.ts

@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import { RecaptchaActionName } from '../../api';
+import { RecaptchaActionName, RecaptchaAuthProvider } from '../../api';
 import { Auth } from '../../model/public_types';
 import { AuthInternal } from '../../model/auth';
 export declare const RECAPTCHA_ENTERPRISE_VERIFIER_TYPE = "recaptcha-enterprise";
@@ -38,8 +38,8 @@ export declare class RecaptchaEnterpriseVerifier {
      */
     verify(action?: string, forceRefresh?: boolean): Promise<string>;
 }
-export declare function injectRecaptchaFields<T>(auth: AuthInternal, request: T, action: RecaptchaActionName, captchaResp?: boolean): Promise<T>;
-declare type ActionMethod<TRequest, TResponse> = (auth: Auth, request: TRequest) => Promise<TResponse>;
-export declare function handleRecaptchaFlow<TRequest, TResponse>(authInstance: AuthInternal, request: TRequest, actionName: RecaptchaActionName, actionMethod: ActionMethod<TRequest, TResponse>): Promise<TResponse>;
+export declare function injectRecaptchaFields<T>(auth: AuthInternal, request: T, action: RecaptchaActionName, isCaptchaResp?: boolean, isFakeToken?: boolean): Promise<T>;
+declare type ActionMethod<TRequest, TResponse> = (auth: AuthInternal, request: TRequest) => Promise<TResponse>;
+export declare function handleRecaptchaFlow<TRequest, TResponse>(authInstance: AuthInternal, request: TRequest, actionName: RecaptchaActionName, actionMethod: ActionMethod<TRequest, TResponse>, recaptchaAuthProvider: RecaptchaAuthProvider): Promise<TResponse>;
 export declare function _initializeRecaptchaConfig(auth: Auth): Promise<void>;
 export {};

package/dist/node/src/platform_browser/strategies/phone.d.ts

@@ -27,12 +27,15 @@ import { AuthInternal } from '../../model/auth';
  * provides the code sent to their phone, call {@link ConfirmationResult.confirm}
  * with the code to sign the user in.
  *
- * For abuse prevention, this method also requires a {@link ApplicationVerifier}.
- * This SDK includes a reCAPTCHA-based implementation, {@link RecaptchaVerifier}.
+ * For abuse prevention, this method requires a {@link ApplicationVerifier}.
+ * This SDK includes an implementation based on reCAPTCHA v2, {@link RecaptchaVerifier}.
  * This function can work on other platforms that do not support the
  * {@link RecaptchaVerifier} (like React Native), but you need to use a
  * third-party {@link ApplicationVerifier} implementation.
  *
+ * If you've enabled project-level reCAPTCHA Enterprise bot protection in
+ * Enforce mode, you can omit the {@link ApplicationVerifier}.
+ *
  * This method does not work in a Node.js environment or with {@link Auth} instances created with a
  * {@link @firebase/app#FirebaseServerApp}.
  *
@@ -51,7 +54,7 @@ import { AuthInternal } from '../../model/auth';
  *
  * @public
  */
-export declare function signInWithPhoneNumber(auth: Auth, phoneNumber: string, appVerifier: ApplicationVerifier): Promise<ConfirmationResult>;
+export declare function signInWithPhoneNumber(auth: Auth, phoneNumber: string, appVerifier?: ApplicationVerifier): Promise<ConfirmationResult>;
 /**
  * Links the user account with the given phone number.
  *
@@ -64,7 +67,7 @@ export declare function signInWithPhoneNumber(auth: Auth, phoneNumber: string, a
  *
  * @public
  */
-export declare function linkWithPhoneNumber(user: User, phoneNumber: string, appVerifier: ApplicationVerifier): Promise<ConfirmationResult>;
+export declare function linkWithPhoneNumber(user: User, phoneNumber: string, appVerifier?: ApplicationVerifier): Promise<ConfirmationResult>;
 /**
  * Re-authenticates a user using a fresh phone credential.
  *
@@ -80,12 +83,12 @@ export declare function linkWithPhoneNumber(user: User, phoneNumber: string, app
  *
  * @public
  */
-export declare function reauthenticateWithPhoneNumber(user: User, phoneNumber: string, appVerifier: ApplicationVerifier): Promise<ConfirmationResult>;
+export declare function reauthenticateWithPhoneNumber(user: User, phoneNumber: string, appVerifier?: ApplicationVerifier): Promise<ConfirmationResult>;
 /**
  * Returns a verification ID to be used in conjunction with the SMS code that is sent.
  *
  */
-export declare function _verifyPhoneNumber(auth: AuthInternal, options: PhoneInfoOptions | string, verifier: ApplicationVerifierInternal): Promise<string>;
+export declare function _verifyPhoneNumber(auth: AuthInternal, options: PhoneInfoOptions | string, verifier?: ApplicationVerifierInternal): Promise<string>;
 /**
  * Updates the user's phone number.
  *
@@ -110,3 +113,4 @@ export declare function _verifyPhoneNumber(auth: AuthInternal, options: PhoneInf
  * @public
  */
 export declare function updatePhoneNumber(user: User, credential: PhoneAuthCredential): Promise<void>;
+export declare function injectRecaptchaV2Token<T>(auth: AuthInternal, request: T, recaptchaV2Verifier: ApplicationVerifierInternal): Promise<T>;

package/dist/node/test/integration/flows/recaptcha_enterprise.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @license
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export {};

package/dist/node/{totp-617e4db6.js → totp-c9a669c7.js}

@@ -1154,6 +1154,16 @@ var RecaptchaConfig = /** @class */ (function () {
             "ENFORCE" /* EnforcementState.ENFORCE */ ||
             this.getProviderEnforcementState(providerStr) === "AUDIT" /* EnforcementState.AUDIT */);
     };
+    /**
+     * Returns true if reCAPTCHA Enterprise protection is enabled in at least one provider, otherwise
+     * returns false.
+     *
+     * @returns Whether or not reCAPTCHA Enterprise protection is enabled for at least one provider.
+     */
+    RecaptchaConfig.prototype.isAnyProviderEnabled = function () {
+        return (this.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */) ||
+            this.isProviderEnabled("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */));
+    };
     return RecaptchaConfig;
 }());
 
@@ -3796,6 +3806,60 @@ function _recaptchaEnterpriseScriptUrl() {
     return externalJSProvider.recaptchaEnterpriseScript;
 }
 
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+var MockGreCAPTCHATopLevel = /** @class */ (function () {
+    function MockGreCAPTCHATopLevel() {
+        this.enterprise = new MockGreCAPTCHA();
+    }
+    MockGreCAPTCHATopLevel.prototype.ready = function (callback) {
+        callback();
+    };
+    MockGreCAPTCHATopLevel.prototype.execute = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _siteKey, _options) {
+        return Promise.resolve('token');
+    };
+    MockGreCAPTCHATopLevel.prototype.render = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _container, _parameters) {
+        return '';
+    };
+    return MockGreCAPTCHATopLevel;
+}());
+var MockGreCAPTCHA = /** @class */ (function () {
+    function MockGreCAPTCHA() {
+    }
+    MockGreCAPTCHA.prototype.ready = function (callback) {
+        callback();
+    };
+    MockGreCAPTCHA.prototype.execute = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _siteKey, _options) {
+        return Promise.resolve('token');
+    };
+    MockGreCAPTCHA.prototype.render = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _container, _parameters) {
+        return '';
+    };
+    return MockGreCAPTCHA;
+}());
+
 /* eslint-disable @typescript-eslint/no-require-imports */
 var RECAPTCHA_ENTERPRISE_VERIFIER_TYPE = 'recaptcha-enterprise';
 var FAKE_TOKEN = 'NO_RECAPTCHA';
@@ -3882,8 +3946,14 @@ var RecaptchaEnterpriseVerifier = /** @class */ (function () {
                     reject(Error('No reCAPTCHA enterprise script loaded.'));
                 }
             }
+            var mockRecaptcha;
             var _this = this;
             return tslib.__generator(this, function (_a) {
+                // Returns Promise for a mock token when appVerificationDisabledForTesting is true.
+                if (this.auth.settings.appVerificationDisabledForTesting) {
+                    mockRecaptcha = new MockGreCAPTCHATopLevel();
+                    return [2 /*return*/, mockRecaptcha.execute('siteKey', { action: 'verify' })];
+                }
                 return [2 /*return*/, new Promise(function (resolve, reject) {
                         retrieveSiteKey(_this.auth)
                             .then(function (siteKey) {
@@ -3917,15 +3987,18 @@ var RecaptchaEnterpriseVerifier = /** @class */ (function () {
     };
     return RecaptchaEnterpriseVerifier;
 }());
-function injectRecaptchaFields(auth, request, action, captchaResp) {
-    if (captchaResp === void 0) { captchaResp = false; }
+function injectRecaptchaFields(auth, request, action, isCaptchaResp, isFakeToken) {
+    if (isCaptchaResp === void 0) { isCaptchaResp = false; }
+    if (isFakeToken === void 0) { isFakeToken = false; }
     return tslib.__awaiter(this, void 0, void 0, function () {
-        var verifier, captchaResponse, newRequest;
+        var verifier, captchaResponse, newRequest, phoneNumber, recaptchaToken, recaptchaToken;
         return tslib.__generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     verifier = new RecaptchaEnterpriseVerifier(auth);
-                    _a.label = 1;
+                    if (!isFakeToken) return [3 /*break*/, 1];
+                    captchaResponse = FAKE_TOKEN;
+                    return [3 /*break*/, 5];
                 case 1:
                     _a.trys.push([1, 3, , 5]);
                     return [4 /*yield*/, verifier.verify(action)];
@@ -3940,7 +4013,35 @@ function injectRecaptchaFields(auth, request, action, captchaResp) {
                     return [3 /*break*/, 5];
                 case 5:
                     newRequest = tslib.__assign({}, request);
-                    if (!captchaResp) {
+                    if (action === "mfaSmsEnrollment" /* RecaptchaActionName.MFA_SMS_ENROLLMENT */ ||
+                        action === "mfaSmsSignIn" /* RecaptchaActionName.MFA_SMS_SIGNIN */) {
+                        if ('phoneEnrollmentInfo' in newRequest) {
+                            phoneNumber = newRequest.phoneEnrollmentInfo.phoneNumber;
+                            recaptchaToken = newRequest.phoneEnrollmentInfo.recaptchaToken;
+                            Object.assign(newRequest, {
+                                'phoneEnrollmentInfo': {
+                                    phoneNumber: phoneNumber,
+                                    recaptchaToken: recaptchaToken,
+                                    captchaResponse: captchaResponse,
+                                    'clientType': "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */,
+                                    'recaptchaVersion': "RECAPTCHA_ENTERPRISE" /* RecaptchaVersion.ENTERPRISE */
+                                }
+                            });
+                        }
+                        else if ('phoneSignInInfo' in newRequest) {
+                            recaptchaToken = newRequest.phoneSignInInfo.recaptchaToken;
+                            Object.assign(newRequest, {
+                                'phoneSignInInfo': {
+                                    recaptchaToken: recaptchaToken,
+                                    captchaResponse: captchaResponse,
+                                    'clientType': "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */,
+                                    'recaptchaVersion': "RECAPTCHA_ENTERPRISE" /* RecaptchaVersion.ENTERPRISE */
+                                }
+                            });
+                        }
+                        return [2 /*return*/, newRequest];
+                    }
+                    if (!isCaptchaResp) {
                         Object.assign(newRequest, { captchaResponse: captchaResponse });
                     }
                     else {
@@ -3955,19 +4056,20 @@ function injectRecaptchaFields(auth, request, action, captchaResp) {
         });
     });
 }
-function handleRecaptchaFlow(authInstance, request, actionName, actionMethod) {
-    var _a;
+function handleRecaptchaFlow(authInstance, request, actionName, actionMethod, recaptchaAuthProvider) {
+    var _a, _b;
     return tslib.__awaiter(this, void 0, void 0, function () {
-        var requestWithRecaptcha;
+        var requestWithRecaptcha, requestWithRecaptcha, requestWithRecaptchaFields;
         var _this = this;
-        return tslib.__generator(this, function (_b) {
-            switch (_b.label) {
+        return tslib.__generator(this, function (_c) {
+            switch (_c.label) {
                 case 0:
+                    if (!(recaptchaAuthProvider === "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)) return [3 /*break*/, 4];
                     if (!((_a = authInstance
-                        ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaProvider.EMAIL_PASSWORD_PROVIDER */))) return [3 /*break*/, 2];
+                        ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */))) return [3 /*break*/, 2];
                     return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, actionName === "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */)];
                 case 1:
-                    requestWithRecaptcha = _b.sent();
+                    requestWithRecaptcha = _c.sent();
                     return [2 /*return*/, actionMethod(authInstance, requestWithRecaptcha)];
                 case 2: return [2 /*return*/, actionMethod(authInstance, request).catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
                         var requestWithRecaptcha;
@@ -3984,6 +4086,48 @@ function handleRecaptchaFlow(authInstance, request, actionName, actionMethod) {
                             }
                         });
                     }); })];
+                case 3: return [3 /*break*/, 10];
+                case 4:
+                    if (!(recaptchaAuthProvider === "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */)) return [3 /*break*/, 9];
+                    if (!((_b = authInstance
+                        ._getRecaptchaConfig()) === null || _b === void 0 ? void 0 : _b.isProviderEnabled("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */))) return [3 /*break*/, 6];
+                    return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName)];
+                case 5:
+                    requestWithRecaptcha = _c.sent();
+                    return [2 /*return*/, actionMethod(authInstance, requestWithRecaptcha).catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
+                            var requestWithRecaptchaFields;
+                            var _a;
+                            return tslib.__generator(this, function (_b) {
+                                switch (_b.label) {
+                                    case 0:
+                                        if (!(((_a = authInstance
+                                            ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.getProviderEnforcementState("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */)) === "AUDIT" /* EnforcementState.AUDIT */)) return [3 /*break*/, 2];
+                                        if (!(error.code === "auth/".concat("missing-recaptcha-token" /* AuthErrorCode.MISSING_RECAPTCHA_TOKEN */) ||
+                                            error.code === "auth/".concat("invalid-app-credential" /* AuthErrorCode.INVALID_APP_CREDENTIAL */))) return [3 /*break*/, 2];
+                                        console.log("Failed to verify with reCAPTCHA Enterprise. Automatically triggering the reCAPTCHA v2 flow to complete the ".concat(actionName, " flow."));
+                                        return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, false, // isCaptchaResp
+                                            true // isFakeToken
+                                            )];
+                                    case 1:
+                                        requestWithRecaptchaFields = _b.sent();
+                                        // This will call the PhoneApiCaller to fetch and inject reCAPTCHA v2 token.
+                                        return [2 /*return*/, actionMethod(authInstance, requestWithRecaptchaFields)];
+                                    case 2: 
+                                    // ENFORCE mode or AUDIT mode with any other error.
+                                    return [2 /*return*/, Promise.reject(error)];
+                                }
+                            });
+                        }); })];
+                case 6: return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, false, // isCaptchaResp
+                    true // isFakeToken
+                    )];
+                case 7:
+                    requestWithRecaptchaFields = _c.sent();
+                    // This will call the PhoneApiCaller to fetch and inject v2 token.
+                    return [2 /*return*/, actionMethod(authInstance, requestWithRecaptchaFields)];
+                case 8: return [3 /*break*/, 10];
+                case 9: return [2 /*return*/, Promise.reject(recaptchaAuthProvider + ' provider is not supported.')];
+                case 10: return [2 /*return*/];
             }
         });
     });
@@ -4008,7 +4152,7 @@ function _initializeRecaptchaConfig(auth) {
                     else {
                         authInternal._tenantRecaptchaConfigs[authInternal.tenantId] = config;
                     }
-                    if (config.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaProvider.EMAIL_PASSWORD_PROVIDER */)) {
+                    if (config.isAnyProviderEnabled()) {
                         verifier = new RecaptchaEnterpriseVerifier(authInternal);
                         void verifier.verify();
                     }
@@ -4494,7 +4638,7 @@ var EmailAuthCredential = /** @class */ (function (_super) {
                             password: this._password,
                             clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                         };
-                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */, signInWithPassword)];
+                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */, signInWithPassword, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                     case "emailLink" /* SignInMethod.EMAIL_LINK */:
                         return [2 /*return*/, signInWithEmailLink$1(auth, {
                                 email: this._email,
@@ -4521,7 +4665,7 @@ var EmailAuthCredential = /** @class */ (function (_super) {
                             password: this._password,
                             clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                         };
-                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, linkEmailPassword)];
+                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, linkEmailPassword, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                     case "emailLink" /* SignInMethod.EMAIL_LINK */:
                         return [2 /*return*/, signInWithEmailLinkForLinking(auth, {
                                 idToken: idToken,
@@ -6757,7 +6901,7 @@ function sendPasswordResetEmail(auth, email, actionCodeSettings) {
                     if (actionCodeSettings) {
                         _setActionCodeSettingsOnRequest(authInternal, request, actionCodeSettings);
                     }
-                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendPasswordResetEmail$1)];
+                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendPasswordResetEmail$1, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                 case 1:
                     _a.sent();
                     return [2 /*return*/];
@@ -6933,7 +7077,7 @@ function createUserWithEmailAndPassword(auth, email, password) {
                         password: password,
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
-                    signUpResponse = handleRecaptchaFlow(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, signUp);
+                    signUpResponse = handleRecaptchaFlow(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, signUp, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */);
                     return [4 /*yield*/, signUpResponse.catch(function (error) {
                             if (error.code === "auth/".concat("password-does-not-meet-requirements" /* AuthErrorCode.PASSWORD_DOES_NOT_MEET_REQUIREMENTS */)) {
                                 void recachePasswordPolicy(auth);
@@ -7064,7 +7208,7 @@ function sendSignInLinkToEmail(auth, email, actionCodeSettings) {
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
                     setActionCodeSettings(request, actionCodeSettings);
-                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendSignInLinkToEmail$1)];
+                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendSignInLinkToEmail$1, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                 case 1:
                     _a.sent();
                     return [2 /*return*/];
@@ -8186,7 +8330,7 @@ function multiFactor(user) {
 }
 
 var name = "@firebase/auth";
-var version = "1.7.9-canary.aa6db78eb";
+var version = "1.7.9-canary.b942e9e6e";
 
 /**
  * @license
@@ -8759,4 +8903,4 @@ exports.useDeviceLanguage = useDeviceLanguage;
 exports.validatePassword = validatePassword;
 exports.verifyBeforeUpdateEmail = verifyBeforeUpdateEmail;
 exports.verifyPasswordResetCode = verifyPasswordResetCode;
-//# sourceMappingURL=totp-617e4db6.js.map
+//# sourceMappingURL=totp-c9a669c7.js.map