@progressive-development/pd-provider-firebase-functions 0.1.0 → 0.2.0

package/dist/auth.d.ts

@@ -5,7 +5,8 @@ import { AuthContext } from './types';
  */
 export declare function requireAuth(request: CallableRequest): AuthContext;
 /**
- * Require specific role claims
+ * Require specific role claims.
+ * Supports Firebase standard format: { admin: true, developer: true }
  */
 export declare function requireClaims(request: CallableRequest, allowedRoles: string[]): AuthContext;
 /**

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CASjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EAAE,GACrB,WAAW,CASb;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAMjF"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CASjE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EAAE,GACrB,WAAW,CAUb;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAMjF"}

package/dist/auth.js

@@ -13,15 +13,14 @@ function requireAuth(request) {
 }
 function requireClaims(request, allowedRoles) {
   const auth = requireAuth(request);
-  const userRoles = auth.claims.roles ?? [];
-  if (!allowedRoles.some((role) => userRoles.includes(role))) {
-    logger.warn("Access denied", { uid: auth.uid, required: allowedRoles });
+  const hasRole = allowedRoles.some((role) => auth.claims[role] === true);
+  if (!hasRole) {
     throw new ForbiddenError();
   }
   return auth;
 }
 function requireOwnership(auth, resourceOwnerId) {
-  const isAdmin = (auth.claims.roles ?? []).includes("admin");
+  const isAdmin = auth.claims.admin === true;
   if (!isAdmin && auth.uid !== resourceOwnerId) {
     logger.warn("Ownership violation", { uid: auth.uid, resourceOwnerId });
     throw new ForbiddenError("Cannot access other user's resources");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@progressive-development/pd-provider-firebase-functions",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Firebase Functions v2 utilities for pd-spa-helper backend",
   "author": "PD Progressive Development",
   "license": "SEE LICENSE IN LICENSE",