@firebase/auth 1.7.9-canary.aa6db78eb → 1.7.9-canary.b942e9e6e

package/dist/rn/{index-198b1e87.js → index-dd6cc9b0.js}

@@ -1068,6 +1068,16 @@ var RecaptchaConfig = /** @class */ (function () {
             "ENFORCE" /* EnforcementState.ENFORCE */ ||
             this.getProviderEnforcementState(providerStr) === "AUDIT" /* EnforcementState.AUDIT */);
     };
+    /**
+     * Returns true if reCAPTCHA Enterprise protection is enabled in at least one provider, otherwise
+     * returns false.
+     *
+     * @returns Whether or not reCAPTCHA Enterprise protection is enabled for at least one provider.
+     */
+    RecaptchaConfig.prototype.isAnyProviderEnabled = function () {
+        return (this.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */) ||
+            this.isProviderEnabled("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */));
+    };
     return RecaptchaConfig;
 }());
 
@@ -3737,6 +3747,180 @@ function _generateCallbackName(prefix) {
     return "__".concat(prefix).concat(Math.floor(Math.random() * 1000000));
 }
 
+/**
+ * @license
+ * Copyright 2020 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+var _SOLVE_TIME_MS = 500;
+var _EXPIRATION_TIME_MS = 60000;
+var _WIDGET_ID_START = 1000000000000;
+var MockReCaptcha = /** @class */ (function () {
+    function MockReCaptcha(auth) {
+        this.auth = auth;
+        this.counter = _WIDGET_ID_START;
+        this._widgets = new Map();
+    }
+    MockReCaptcha.prototype.render = function (container, parameters) {
+        var id = this.counter;
+        this._widgets.set(id, new MockWidget(container, this.auth.name, parameters || {}));
+        this.counter++;
+        return id;
+    };
+    MockReCaptcha.prototype.reset = function (optWidgetId) {
+        var _a;
+        var id = optWidgetId || _WIDGET_ID_START;
+        void ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.delete());
+        this._widgets.delete(id);
+    };
+    MockReCaptcha.prototype.getResponse = function (optWidgetId) {
+        var _a;
+        var id = optWidgetId || _WIDGET_ID_START;
+        return ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.getResponse()) || '';
+    };
+    MockReCaptcha.prototype.execute = function (optWidgetId) {
+        var _a;
+        return tslib.__awaiter(this, void 0, void 0, function () {
+            var id;
+            return tslib.__generator(this, function (_b) {
+                id = optWidgetId || _WIDGET_ID_START;
+                void ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.execute());
+                return [2 /*return*/, ''];
+            });
+        });
+    };
+    return MockReCaptcha;
+}());
+var MockGreCAPTCHATopLevel = /** @class */ (function () {
+    function MockGreCAPTCHATopLevel() {
+        this.enterprise = new MockGreCAPTCHA();
+    }
+    MockGreCAPTCHATopLevel.prototype.ready = function (callback) {
+        callback();
+    };
+    MockGreCAPTCHATopLevel.prototype.execute = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _siteKey, _options) {
+        return Promise.resolve('token');
+    };
+    MockGreCAPTCHATopLevel.prototype.render = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _container, _parameters) {
+        return '';
+    };
+    return MockGreCAPTCHATopLevel;
+}());
+var MockGreCAPTCHA = /** @class */ (function () {
+    function MockGreCAPTCHA() {
+    }
+    MockGreCAPTCHA.prototype.ready = function (callback) {
+        callback();
+    };
+    MockGreCAPTCHA.prototype.execute = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _siteKey, _options) {
+        return Promise.resolve('token');
+    };
+    MockGreCAPTCHA.prototype.render = function (
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _container, _parameters) {
+        return '';
+    };
+    return MockGreCAPTCHA;
+}());
+var MockWidget = /** @class */ (function () {
+    function MockWidget(containerOrId, appName, params) {
+        var _this = this;
+        this.params = params;
+        this.timerId = null;
+        this.deleted = false;
+        this.responseToken = null;
+        this.clickHandler = function () {
+            _this.execute();
+        };
+        var container = typeof containerOrId === 'string'
+            ? document.getElementById(containerOrId)
+            : containerOrId;
+        _assert(container, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */, { appName: appName });
+        this.container = container;
+        this.isVisible = this.params.size !== 'invisible';
+        if (this.isVisible) {
+            this.execute();
+        }
+        else {
+            this.container.addEventListener('click', this.clickHandler);
+        }
+    }
+    MockWidget.prototype.getResponse = function () {
+        this.checkIfDeleted();
+        return this.responseToken;
+    };
+    MockWidget.prototype.delete = function () {
+        this.checkIfDeleted();
+        this.deleted = true;
+        if (this.timerId) {
+            clearTimeout(this.timerId);
+            this.timerId = null;
+        }
+        this.container.removeEventListener('click', this.clickHandler);
+    };
+    MockWidget.prototype.execute = function () {
+        var _this = this;
+        this.checkIfDeleted();
+        if (this.timerId) {
+            return;
+        }
+        this.timerId = window.setTimeout(function () {
+            _this.responseToken = generateRandomAlphaNumericString(50);
+            var _a = _this.params, callback = _a.callback, expiredCallback = _a["expired-callback"];
+            if (callback) {
+                try {
+                    callback(_this.responseToken);
+                }
+                catch (e) { }
+            }
+            _this.timerId = window.setTimeout(function () {
+                _this.timerId = null;
+                _this.responseToken = null;
+                if (expiredCallback) {
+                    try {
+                        expiredCallback();
+                    }
+                    catch (e) { }
+                }
+                if (_this.isVisible) {
+                    _this.execute();
+                }
+            }, _EXPIRATION_TIME_MS);
+        }, _SOLVE_TIME_MS);
+    };
+    MockWidget.prototype.checkIfDeleted = function () {
+        if (this.deleted) {
+            throw new Error('reCAPTCHA mock was already deleted!');
+        }
+    };
+    return MockWidget;
+}());
+function generateRandomAlphaNumericString(len) {
+    var chars = [];
+    var allowedChars = '1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
+    for (var i = 0; i < len; i++) {
+        chars.push(allowedChars.charAt(Math.floor(Math.random() * allowedChars.length)));
+    }
+    return chars.join('');
+}
+
 /* eslint-disable @typescript-eslint/no-require-imports */
 var RECAPTCHA_ENTERPRISE_VERIFIER_TYPE = 'recaptcha-enterprise';
 var FAKE_TOKEN = 'NO_RECAPTCHA';
@@ -3823,8 +4007,14 @@ var RecaptchaEnterpriseVerifier = /** @class */ (function () {
                     reject(Error('No reCAPTCHA enterprise script loaded.'));
                 }
             }
+            var mockRecaptcha;
             var _this = this;
             return tslib.__generator(this, function (_a) {
+                // Returns Promise for a mock token when appVerificationDisabledForTesting is true.
+                if (this.auth.settings.appVerificationDisabledForTesting) {
+                    mockRecaptcha = new MockGreCAPTCHATopLevel();
+                    return [2 /*return*/, mockRecaptcha.execute('siteKey', { action: 'verify' })];
+                }
                 return [2 /*return*/, new Promise(function (resolve, reject) {
                         retrieveSiteKey(_this.auth)
                             .then(function (siteKey) {
@@ -3858,15 +4048,18 @@ var RecaptchaEnterpriseVerifier = /** @class */ (function () {
     };
     return RecaptchaEnterpriseVerifier;
 }());
-function injectRecaptchaFields(auth, request, action, captchaResp) {
-    if (captchaResp === void 0) { captchaResp = false; }
+function injectRecaptchaFields(auth, request, action, isCaptchaResp, isFakeToken) {
+    if (isCaptchaResp === void 0) { isCaptchaResp = false; }
+    if (isFakeToken === void 0) { isFakeToken = false; }
     return tslib.__awaiter(this, void 0, void 0, function () {
-        var verifier, captchaResponse, newRequest;
+        var verifier, captchaResponse, newRequest, phoneNumber, recaptchaToken, recaptchaToken;
         return tslib.__generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     verifier = new RecaptchaEnterpriseVerifier(auth);
-                    _a.label = 1;
+                    if (!isFakeToken) return [3 /*break*/, 1];
+                    captchaResponse = FAKE_TOKEN;
+                    return [3 /*break*/, 5];
                 case 1:
                     _a.trys.push([1, 3, , 5]);
                     return [4 /*yield*/, verifier.verify(action)];
@@ -3881,7 +4074,35 @@ function injectRecaptchaFields(auth, request, action, captchaResp) {
                     return [3 /*break*/, 5];
                 case 5:
                     newRequest = tslib.__assign({}, request);
-                    if (!captchaResp) {
+                    if (action === "mfaSmsEnrollment" /* RecaptchaActionName.MFA_SMS_ENROLLMENT */ ||
+                        action === "mfaSmsSignIn" /* RecaptchaActionName.MFA_SMS_SIGNIN */) {
+                        if ('phoneEnrollmentInfo' in newRequest) {
+                            phoneNumber = newRequest.phoneEnrollmentInfo.phoneNumber;
+                            recaptchaToken = newRequest.phoneEnrollmentInfo.recaptchaToken;
+                            Object.assign(newRequest, {
+                                'phoneEnrollmentInfo': {
+                                    phoneNumber: phoneNumber,
+                                    recaptchaToken: recaptchaToken,
+                                    captchaResponse: captchaResponse,
+                                    'clientType': "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */,
+                                    'recaptchaVersion': "RECAPTCHA_ENTERPRISE" /* RecaptchaVersion.ENTERPRISE */
+                                }
+                            });
+                        }
+                        else if ('phoneSignInInfo' in newRequest) {
+                            recaptchaToken = newRequest.phoneSignInInfo.recaptchaToken;
+                            Object.assign(newRequest, {
+                                'phoneSignInInfo': {
+                                    recaptchaToken: recaptchaToken,
+                                    captchaResponse: captchaResponse,
+                                    'clientType': "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */,
+                                    'recaptchaVersion': "RECAPTCHA_ENTERPRISE" /* RecaptchaVersion.ENTERPRISE */
+                                }
+                            });
+                        }
+                        return [2 /*return*/, newRequest];
+                    }
+                    if (!isCaptchaResp) {
                         Object.assign(newRequest, { captchaResponse: captchaResponse });
                     }
                     else {
@@ -3896,19 +4117,20 @@ function injectRecaptchaFields(auth, request, action, captchaResp) {
         });
     });
 }
-function handleRecaptchaFlow(authInstance, request, actionName, actionMethod) {
-    var _a;
+function handleRecaptchaFlow(authInstance, request, actionName, actionMethod, recaptchaAuthProvider) {
+    var _a, _b;
     return tslib.__awaiter(this, void 0, void 0, function () {
-        var requestWithRecaptcha;
+        var requestWithRecaptcha, requestWithRecaptcha, requestWithRecaptchaFields;
         var _this = this;
-        return tslib.__generator(this, function (_b) {
-            switch (_b.label) {
+        return tslib.__generator(this, function (_c) {
+            switch (_c.label) {
                 case 0:
+                    if (!(recaptchaAuthProvider === "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)) return [3 /*break*/, 4];
                     if (!((_a = authInstance
-                        ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaProvider.EMAIL_PASSWORD_PROVIDER */))) return [3 /*break*/, 2];
+                        ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */))) return [3 /*break*/, 2];
                     return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, actionName === "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */)];
                 case 1:
-                    requestWithRecaptcha = _b.sent();
+                    requestWithRecaptcha = _c.sent();
                     return [2 /*return*/, actionMethod(authInstance, requestWithRecaptcha)];
                 case 2: return [2 /*return*/, actionMethod(authInstance, request).catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
                         var requestWithRecaptcha;
@@ -3925,6 +4147,48 @@ function handleRecaptchaFlow(authInstance, request, actionName, actionMethod) {
                             }
                         });
                     }); })];
+                case 3: return [3 /*break*/, 10];
+                case 4:
+                    if (!(recaptchaAuthProvider === "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */)) return [3 /*break*/, 9];
+                    if (!((_b = authInstance
+                        ._getRecaptchaConfig()) === null || _b === void 0 ? void 0 : _b.isProviderEnabled("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */))) return [3 /*break*/, 6];
+                    return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName)];
+                case 5:
+                    requestWithRecaptcha = _c.sent();
+                    return [2 /*return*/, actionMethod(authInstance, requestWithRecaptcha).catch(function (error) { return tslib.__awaiter(_this, void 0, void 0, function () {
+                            var requestWithRecaptchaFields;
+                            var _a;
+                            return tslib.__generator(this, function (_b) {
+                                switch (_b.label) {
+                                    case 0:
+                                        if (!(((_a = authInstance
+                                            ._getRecaptchaConfig()) === null || _a === void 0 ? void 0 : _a.getProviderEnforcementState("PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */)) === "AUDIT" /* EnforcementState.AUDIT */)) return [3 /*break*/, 2];
+                                        if (!(error.code === "auth/".concat("missing-recaptcha-token" /* AuthErrorCode.MISSING_RECAPTCHA_TOKEN */) ||
+                                            error.code === "auth/".concat("invalid-app-credential" /* AuthErrorCode.INVALID_APP_CREDENTIAL */))) return [3 /*break*/, 2];
+                                        console.log("Failed to verify with reCAPTCHA Enterprise. Automatically triggering the reCAPTCHA v2 flow to complete the ".concat(actionName, " flow."));
+                                        return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, false, // isCaptchaResp
+                                            true // isFakeToken
+                                            )];
+                                    case 1:
+                                        requestWithRecaptchaFields = _b.sent();
+                                        // This will call the PhoneApiCaller to fetch and inject reCAPTCHA v2 token.
+                                        return [2 /*return*/, actionMethod(authInstance, requestWithRecaptchaFields)];
+                                    case 2: 
+                                    // ENFORCE mode or AUDIT mode with any other error.
+                                    return [2 /*return*/, Promise.reject(error)];
+                                }
+                            });
+                        }); })];
+                case 6: return [4 /*yield*/, injectRecaptchaFields(authInstance, request, actionName, false, // isCaptchaResp
+                    true // isFakeToken
+                    )];
+                case 7:
+                    requestWithRecaptchaFields = _c.sent();
+                    // This will call the PhoneApiCaller to fetch and inject v2 token.
+                    return [2 /*return*/, actionMethod(authInstance, requestWithRecaptchaFields)];
+                case 8: return [3 /*break*/, 10];
+                case 9: return [2 /*return*/, Promise.reject(recaptchaAuthProvider + ' provider is not supported.')];
+                case 10: return [2 /*return*/];
             }
         });
     });
@@ -3949,7 +4213,7 @@ function _initializeRecaptchaConfig(auth) {
                     else {
                         authInternal._tenantRecaptchaConfigs[authInternal.tenantId] = config;
                     }
-                    if (config.isProviderEnabled("EMAIL_PASSWORD_PROVIDER" /* RecaptchaProvider.EMAIL_PASSWORD_PROVIDER */)) {
+                    if (config.isAnyProviderEnabled()) {
                         verifier = new RecaptchaEnterpriseVerifier(authInternal);
                         void verifier.verify();
                     }
@@ -4435,7 +4699,7 @@ var EmailAuthCredential = /** @class */ (function (_super) {
                             password: this._password,
                             clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                         };
-                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */, signInWithPassword)];
+                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signInWithPassword" /* RecaptchaActionName.SIGN_IN_WITH_PASSWORD */, signInWithPassword, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                     case "emailLink" /* SignInMethod.EMAIL_LINK */:
                         return [2 /*return*/, signInWithEmailLink$1(auth, {
                                 email: this._email,
@@ -4462,7 +4726,7 @@ var EmailAuthCredential = /** @class */ (function (_super) {
                             password: this._password,
                             clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                         };
-                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, linkEmailPassword)];
+                        return [2 /*return*/, handleRecaptchaFlow(auth, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, linkEmailPassword, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                     case "emailLink" /* SignInMethod.EMAIL_LINK */:
                         return [2 /*return*/, signInWithEmailLinkForLinking(auth, {
                                 idToken: idToken,
@@ -6705,7 +6969,7 @@ function sendPasswordResetEmail(auth, email, actionCodeSettings) {
                     if (actionCodeSettings) {
                         _setActionCodeSettingsOnRequest(authInternal, request, actionCodeSettings);
                     }
-                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendPasswordResetEmail$1)];
+                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendPasswordResetEmail$1, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                 case 1:
                     _a.sent();
                     return [2 /*return*/];
@@ -6881,7 +7145,7 @@ function createUserWithEmailAndPassword(auth, email, password) {
                         password: password,
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
-                    signUpResponse = handleRecaptchaFlow(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, signUp);
+                    signUpResponse = handleRecaptchaFlow(authInternal, request, "signUpPassword" /* RecaptchaActionName.SIGN_UP_PASSWORD */, signUp, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */);
                     return [4 /*yield*/, signUpResponse.catch(function (error) {
                             if (error.code === "auth/".concat("password-does-not-meet-requirements" /* AuthErrorCode.PASSWORD_DOES_NOT_MEET_REQUIREMENTS */)) {
                                 void recachePasswordPolicy(auth);
@@ -7012,7 +7276,7 @@ function sendSignInLinkToEmail(auth, email, actionCodeSettings) {
                         clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
                     };
                     setActionCodeSettings(request, actionCodeSettings);
-                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendSignInLinkToEmail$1)];
+                    return [4 /*yield*/, handleRecaptchaFlow(authInternal, request, "getOobCode" /* RecaptchaActionName.GET_OOB_CODE */, sendSignInLinkToEmail$1, "EMAIL_PASSWORD_PROVIDER" /* RecaptchaAuthProvider.EMAIL_PASSWORD_PROVIDER */)];
                 case 1:
                     _a.sent();
                     return [2 /*return*/];
@@ -8140,7 +8404,7 @@ function multiFactor(user) {
 }
 
 var name = "@firebase/auth";
-var version = "1.7.9-canary.aa6db78eb";
+var version = "1.7.9-canary.b942e9e6e";
 
 /**
  * @license
@@ -8504,143 +8768,6 @@ function _getWorkerGlobalScope() {
     return _isWorker() ? self : null;
 }
 
-/**
- * @license
- * Copyright 2020 Google LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-var _SOLVE_TIME_MS = 500;
-var _EXPIRATION_TIME_MS = 60000;
-var _WIDGET_ID_START = 1000000000000;
-var MockReCaptcha = /** @class */ (function () {
-    function MockReCaptcha(auth) {
-        this.auth = auth;
-        this.counter = _WIDGET_ID_START;
-        this._widgets = new Map();
-    }
-    MockReCaptcha.prototype.render = function (container, parameters) {
-        var id = this.counter;
-        this._widgets.set(id, new MockWidget(container, this.auth.name, parameters || {}));
-        this.counter++;
-        return id;
-    };
-    MockReCaptcha.prototype.reset = function (optWidgetId) {
-        var _a;
-        var id = optWidgetId || _WIDGET_ID_START;
-        void ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.delete());
-        this._widgets.delete(id);
-    };
-    MockReCaptcha.prototype.getResponse = function (optWidgetId) {
-        var _a;
-        var id = optWidgetId || _WIDGET_ID_START;
-        return ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.getResponse()) || '';
-    };
-    MockReCaptcha.prototype.execute = function (optWidgetId) {
-        var _a;
-        return tslib.__awaiter(this, void 0, void 0, function () {
-            var id;
-            return tslib.__generator(this, function (_b) {
-                id = optWidgetId || _WIDGET_ID_START;
-                void ((_a = this._widgets.get(id)) === null || _a === void 0 ? void 0 : _a.execute());
-                return [2 /*return*/, ''];
-            });
-        });
-    };
-    return MockReCaptcha;
-}());
-var MockWidget = /** @class */ (function () {
-    function MockWidget(containerOrId, appName, params) {
-        var _this = this;
-        this.params = params;
-        this.timerId = null;
-        this.deleted = false;
-        this.responseToken = null;
-        this.clickHandler = function () {
-            _this.execute();
-        };
-        var container = typeof containerOrId === 'string'
-            ? document.getElementById(containerOrId)
-            : containerOrId;
-        _assert(container, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */, { appName: appName });
-        this.container = container;
-        this.isVisible = this.params.size !== 'invisible';
-        if (this.isVisible) {
-            this.execute();
-        }
-        else {
-            this.container.addEventListener('click', this.clickHandler);
-        }
-    }
-    MockWidget.prototype.getResponse = function () {
-        this.checkIfDeleted();
-        return this.responseToken;
-    };
-    MockWidget.prototype.delete = function () {
-        this.checkIfDeleted();
-        this.deleted = true;
-        if (this.timerId) {
-            clearTimeout(this.timerId);
-            this.timerId = null;
-        }
-        this.container.removeEventListener('click', this.clickHandler);
-    };
-    MockWidget.prototype.execute = function () {
-        var _this = this;
-        this.checkIfDeleted();
-        if (this.timerId) {
-            return;
-        }
-        this.timerId = window.setTimeout(function () {
-            _this.responseToken = generateRandomAlphaNumericString(50);
-            var _a = _this.params, callback = _a.callback, expiredCallback = _a["expired-callback"];
-            if (callback) {
-                try {
-                    callback(_this.responseToken);
-                }
-                catch (e) { }
-            }
-            _this.timerId = window.setTimeout(function () {
-                _this.timerId = null;
-                _this.responseToken = null;
-                if (expiredCallback) {
-                    try {
-                        expiredCallback();
-                    }
-                    catch (e) { }
-                }
-                if (_this.isVisible) {
-                    _this.execute();
-                }
-            }, _EXPIRATION_TIME_MS);
-        }, _SOLVE_TIME_MS);
-    };
-    MockWidget.prototype.checkIfDeleted = function () {
-        if (this.deleted) {
-            throw new Error('reCAPTCHA mock was already deleted!');
-        }
-    };
-    return MockWidget;
-}());
-function generateRandomAlphaNumericString(len) {
-    var chars = [];
-    var allowedChars = '1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
-    for (var i = 0; i < len; i++) {
-        chars.push(allowedChars.charAt(Math.floor(Math.random() * allowedChars.length)));
-    }
-    return chars.join('');
-}
-
 /**
  * @license
  * Copyright 2020 Google LLC
@@ -9047,12 +9174,15 @@ var ConfirmationResultImpl = /** @class */ (function () {
  * provides the code sent to their phone, call {@link ConfirmationResult.confirm}
  * with the code to sign the user in.
  *
- * For abuse prevention, this method also requires a {@link ApplicationVerifier}.
- * This SDK includes a reCAPTCHA-based implementation, {@link RecaptchaVerifier}.
+ * For abuse prevention, this method requires a {@link ApplicationVerifier}.
+ * This SDK includes an implementation based on reCAPTCHA v2, {@link RecaptchaVerifier}.
  * This function can work on other platforms that do not support the
  * {@link RecaptchaVerifier} (like React Native), but you need to use a
  * third-party {@link ApplicationVerifier} implementation.
  *
+ * If you've enabled project-level reCAPTCHA Enterprise bot protection in
+ * Enforce mode, you can omit the {@link ApplicationVerifier}.
+ *
  * This method does not work in a Node.js environment or with {@link Auth} instances created with a
  * {@link @firebase/app#FirebaseServerApp}.
  *
@@ -9165,17 +9295,29 @@ function reauthenticateWithPhoneNumber(user, phoneNumber, appVerifier) {
 function _verifyPhoneNumber(auth, options, verifier) {
     var _a;
     return tslib.__awaiter(this, void 0, void 0, function () {
-        var recaptchaToken, phoneInfoOptions, session, response, mfaEnrollmentId, response, sessionInfo;
+        var phoneInfoOptions, session, startPhoneMfaEnrollmentRequest, startEnrollPhoneMfaActionCallback, startPhoneMfaEnrollmentResponse, response, mfaEnrollmentId, startPhoneMfaSignInRequest, startSignInPhoneMfaActionCallback, startPhoneMfaSignInResponse, response, sendPhoneVerificationCodeRequest, sendPhoneVerificationCodeActionCallback, sendPhoneVerificationCodeResponse, response;
+        var _this = this;
         return tslib.__generator(this, function (_b) {
             switch (_b.label) {
-                case 0: return [4 /*yield*/, verifier.verify()];
+                case 0:
+                    if (!!auth._getRecaptchaConfig()) return [3 /*break*/, 4];
+                    _b.label = 1;
                 case 1:
-                    recaptchaToken = _b.sent();
-                    _b.label = 2;
+                    _b.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, _initializeRecaptchaConfig(auth)];
                 case 2:
-                    _b.trys.push([2, , 10, 11]);
-                    _assert(typeof recaptchaToken === 'string', auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
-                    _assert(verifier.type === RECAPTCHA_VERIFIER_TYPE, auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                    _b.sent();
+                    return [3 /*break*/, 4];
+                case 3:
+                    _b.sent();
+                    // If an error occurs while fetching the config, there is no way to know the enablement state
+                    // of Phone provider, so we proceed with recaptcha V2 verification.
+                    // The error is likely "recaptchaKey undefined", as reCAPTCHA Enterprise is not
+                    // enabled for any provider.
+                    console.log('Failed to initialize reCAPTCHA Enterprise config. Triggering the reCAPTCHA v2 verification.');
+                    return [3 /*break*/, 4];
+                case 4:
+                    _b.trys.push([4, , 12, 13]);
                     phoneInfoOptions = void 0;
                     if (typeof options === 'string') {
                         phoneInfoOptions = {
@@ -9185,48 +9327,106 @@ function _verifyPhoneNumber(auth, options, verifier) {
                     else {
                         phoneInfoOptions = options;
                     }
-                    if (!('session' in phoneInfoOptions)) return [3 /*break*/, 7];
+                    if (!('session' in phoneInfoOptions)) return [3 /*break*/, 9];
                     session = phoneInfoOptions.session;
-                    if (!('phoneNumber' in phoneInfoOptions)) return [3 /*break*/, 4];
+                    if (!('phoneNumber' in phoneInfoOptions)) return [3 /*break*/, 6];
                     _assert(session.type === "enroll" /* MultiFactorSessionType.ENROLL */, auth, "internal-error" /* AuthErrorCode.INTERNAL_ERROR */);
-                    return [4 /*yield*/, startEnrollPhoneMfa(auth, {
-                            idToken: session.credential,
-                            phoneEnrollmentInfo: {
-                                phoneNumber: phoneInfoOptions.phoneNumber,
-                                recaptchaToken: recaptchaToken
+                    startPhoneMfaEnrollmentRequest = {
+                        idToken: session.credential,
+                        phoneEnrollmentInfo: {
+                            phoneNumber: phoneInfoOptions.phoneNumber,
+                            clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
+                        }
+                    };
+                    startEnrollPhoneMfaActionCallback = function (authInstance, request) { return tslib.__awaiter(_this, void 0, void 0, function () {
+                        var requestWithRecaptchaV2;
+                        return tslib.__generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    if (!(request.phoneEnrollmentInfo.captchaResponse === FAKE_TOKEN)) return [3 /*break*/, 2];
+                                    _assert((verifier === null || verifier === void 0 ? void 0 : verifier.type) === RECAPTCHA_VERIFIER_TYPE, authInstance, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                                    return [4 /*yield*/, injectRecaptchaV2Token(authInstance, request, verifier)];
+                                case 1:
+                                    requestWithRecaptchaV2 = _a.sent();
+                                    return [2 /*return*/, startEnrollPhoneMfa(authInstance, requestWithRecaptchaV2)];
+                                case 2: return [2 /*return*/, startEnrollPhoneMfa(authInstance, request)];
                             }
+                        });
+                    }); };
+                    startPhoneMfaEnrollmentResponse = handleRecaptchaFlow(auth, startPhoneMfaEnrollmentRequest, "mfaSmsEnrollment" /* RecaptchaActionName.MFA_SMS_ENROLLMENT */, startEnrollPhoneMfaActionCallback, "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */);
+                    return [4 /*yield*/, startPhoneMfaEnrollmentResponse.catch(function (error) {
+                            return Promise.reject(error);
                         })];
-                case 3:
+                case 5:
                     response = _b.sent();
                     return [2 /*return*/, response.phoneSessionInfo.sessionInfo];
-                case 4:
+                case 6:
                     _assert(session.type === "signin" /* MultiFactorSessionType.SIGN_IN */, auth, "internal-error" /* AuthErrorCode.INTERNAL_ERROR */);
                     mfaEnrollmentId = ((_a = phoneInfoOptions.multiFactorHint) === null || _a === void 0 ? void 0 : _a.uid) ||
                         phoneInfoOptions.multiFactorUid;
                     _assert(mfaEnrollmentId, auth, "missing-multi-factor-info" /* AuthErrorCode.MISSING_MFA_INFO */);
-                    return [4 /*yield*/, startSignInPhoneMfa(auth, {
-                            mfaPendingCredential: session.credential,
-                            mfaEnrollmentId: mfaEnrollmentId,
-                            phoneSignInInfo: {
-                                recaptchaToken: recaptchaToken
+                    startPhoneMfaSignInRequest = {
+                        mfaPendingCredential: session.credential,
+                        mfaEnrollmentId: mfaEnrollmentId,
+                        phoneSignInInfo: {
+                            clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
+                        }
+                    };
+                    startSignInPhoneMfaActionCallback = function (authInstance, request) { return tslib.__awaiter(_this, void 0, void 0, function () {
+                        var requestWithRecaptchaV2;
+                        return tslib.__generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    if (!(request.phoneSignInInfo.captchaResponse === FAKE_TOKEN)) return [3 /*break*/, 2];
+                                    _assert((verifier === null || verifier === void 0 ? void 0 : verifier.type) === RECAPTCHA_VERIFIER_TYPE, authInstance, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                                    return [4 /*yield*/, injectRecaptchaV2Token(authInstance, request, verifier)];
+                                case 1:
+                                    requestWithRecaptchaV2 = _a.sent();
+                                    return [2 /*return*/, startSignInPhoneMfa(authInstance, requestWithRecaptchaV2)];
+                                case 2: return [2 /*return*/, startSignInPhoneMfa(authInstance, request)];
                             }
+                        });
+                    }); };
+                    startPhoneMfaSignInResponse = handleRecaptchaFlow(auth, startPhoneMfaSignInRequest, "mfaSmsSignIn" /* RecaptchaActionName.MFA_SMS_SIGNIN */, startSignInPhoneMfaActionCallback, "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */);
+                    return [4 /*yield*/, startPhoneMfaSignInResponse.catch(function (error) {
+                            return Promise.reject(error);
                         })];
-                case 5:
+                case 7:
                     response = _b.sent();
                     return [2 /*return*/, response.phoneResponseInfo.sessionInfo];
-                case 6: return [3 /*break*/, 9];
-                case 7: return [4 /*yield*/, sendPhoneVerificationCode(auth, {
+                case 8: return [3 /*break*/, 11];
+                case 9:
+                    sendPhoneVerificationCodeRequest = {
                         phoneNumber: phoneInfoOptions.phoneNumber,
-                        recaptchaToken: recaptchaToken
-                    })];
-                case 8:
-                    sessionInfo = (_b.sent()).sessionInfo;
-                    return [2 /*return*/, sessionInfo];
-                case 9: return [3 /*break*/, 11];
+                        clientType: "CLIENT_TYPE_WEB" /* RecaptchaClientType.WEB */
+                    };
+                    sendPhoneVerificationCodeActionCallback = function (authInstance, request) { return tslib.__awaiter(_this, void 0, void 0, function () {
+                        var requestWithRecaptchaV2;
+                        return tslib.__generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    if (!(request.captchaResponse === FAKE_TOKEN)) return [3 /*break*/, 2];
+                                    _assert((verifier === null || verifier === void 0 ? void 0 : verifier.type) === RECAPTCHA_VERIFIER_TYPE, authInstance, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                                    return [4 /*yield*/, injectRecaptchaV2Token(authInstance, request, verifier)];
+                                case 1:
+                                    requestWithRecaptchaV2 = _a.sent();
+                                    return [2 /*return*/, sendPhoneVerificationCode(authInstance, requestWithRecaptchaV2)];
+                                case 2: return [2 /*return*/, sendPhoneVerificationCode(authInstance, request)];
+                            }
+                        });
+                    }); };
+                    sendPhoneVerificationCodeResponse = handleRecaptchaFlow(auth, sendPhoneVerificationCodeRequest, "sendVerificationCode" /* RecaptchaActionName.SEND_VERIFICATION_CODE */, sendPhoneVerificationCodeActionCallback, "PHONE_PROVIDER" /* RecaptchaAuthProvider.PHONE_PROVIDER */);
+                    return [4 /*yield*/, sendPhoneVerificationCodeResponse.catch(function (error) {
+                            return Promise.reject(error);
+                        })];
                 case 10:
-                    verifier._reset();
+                    response = _b.sent();
+                    return [2 /*return*/, response.sessionInfo];
+                case 11: return [3 /*break*/, 13];
+                case 12:
+                    verifier === null || verifier === void 0 ? void 0 : verifier._reset();
                     return [7 /*endfinally*/];
-                case 11: return [2 /*return*/];
+                case 13: return [2 /*return*/];
             }
         });
     });
@@ -9271,6 +9471,59 @@ function updatePhoneNumber(user, credential) {
             }
         });
     });
+}
+// Helper function that fetches and injects a reCAPTCHA v2 token into the request.
+function injectRecaptchaV2Token(auth, request, recaptchaV2Verifier) {
+    return tslib.__awaiter(this, void 0, void 0, function () {
+        var recaptchaV2Token, newRequest, phoneNumber, captchaResponse, clientType, recaptchaVersion, captchaResponse, clientType, recaptchaVersion;
+        return tslib.__generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    _assert(recaptchaV2Verifier.type === RECAPTCHA_VERIFIER_TYPE, auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                    return [4 /*yield*/, recaptchaV2Verifier.verify()];
+                case 1:
+                    recaptchaV2Token = _a.sent();
+                    _assert(typeof recaptchaV2Token === 'string', auth, "argument-error" /* AuthErrorCode.ARGUMENT_ERROR */);
+                    newRequest = tslib.__assign({}, request);
+                    if ('phoneEnrollmentInfo' in newRequest) {
+                        phoneNumber = newRequest.phoneEnrollmentInfo.phoneNumber;
+                        captchaResponse = newRequest.phoneEnrollmentInfo.captchaResponse;
+                        clientType = newRequest
+                            .phoneEnrollmentInfo.clientType;
+                        recaptchaVersion = newRequest.phoneEnrollmentInfo.recaptchaVersion;
+                        Object.assign(newRequest, {
+                            'phoneEnrollmentInfo': {
+                                phoneNumber: phoneNumber,
+                                recaptchaToken: recaptchaV2Token,
+                                captchaResponse: captchaResponse,
+                                clientType: clientType,
+                                recaptchaVersion: recaptchaVersion
+                            }
+                        });
+                        return [2 /*return*/, newRequest];
+                    }
+                    else if ('phoneSignInInfo' in newRequest) {
+                        captchaResponse = newRequest.phoneSignInInfo.captchaResponse;
+                        clientType = newRequest
+                            .phoneSignInInfo.clientType;
+                        recaptchaVersion = newRequest.phoneSignInInfo.recaptchaVersion;
+                        Object.assign(newRequest, {
+                            'phoneSignInInfo': {
+                                recaptchaToken: recaptchaV2Token,
+                                captchaResponse: captchaResponse,
+                                clientType: clientType,
+                                recaptchaVersion: recaptchaVersion
+                            }
+                        });
+                        return [2 /*return*/, newRequest];
+                    }
+                    else {
+                        Object.assign(newRequest, { 'recaptchaToken': recaptchaV2Token });
+                        return [2 /*return*/, newRequest];
+                    }
+            }
+        });
+    });
 }
 
 /**
@@ -9342,12 +9595,14 @@ var PhoneAuthProvider = /** @class */ (function () {
      *
      * @param phoneInfoOptions - The user's {@link PhoneInfoOptions}. The phone number should be in
      * E.164 format (e.g. +16505550101).
-     * @param applicationVerifier - For abuse prevention, this method also requires a
-     * {@link ApplicationVerifier}. This SDK includes a reCAPTCHA-based implementation,
-     * {@link RecaptchaVerifier}.
+     * @param applicationVerifier - An {@link ApplicationVerifier}, which prevents
+     * requests from unauthorized clients. This SDK includes an implementation
+     * based on reCAPTCHA v2, {@link RecaptchaVerifier}. If you've enabled
+     * reCAPTCHA Enterprise bot protection in Enforce mode, this parameter is
+     * optional; in all other configurations, the parameter is required.
      *
      * @returns A Promise for a verification ID that can be passed to
-     * {@link PhoneAuthProvider.credential} to identify this flow..
+     * {@link PhoneAuthProvider.credential} to identify this flow.
      */
     PhoneAuthProvider.prototype.verifyPhoneNumber = function (phoneOptions, applicationVerifier) {
         return _verifyPhoneNumber(this.auth, phoneOptions, util.getModularInstance(applicationVerifier));
@@ -9816,4 +10071,4 @@ exports.useDeviceLanguage = useDeviceLanguage;
 exports.validatePassword = validatePassword;
 exports.verifyBeforeUpdateEmail = verifyBeforeUpdateEmail;
 exports.verifyPasswordResetCode = verifyPasswordResetCode;
-//# sourceMappingURL=index-198b1e87.js.map
+//# sourceMappingURL=index-dd6cc9b0.js.map