@progressive-development/pd-provider-firebase-functions 0.1.0 → 0.3.0

package/dist/auth.d.ts

@@ -5,7 +5,8 @@ import { AuthContext } from './types';
  */
 export declare function requireAuth(request: CallableRequest): AuthContext;
 /**
- * Require specific role claims
+ * Require specific role claims.
+ * Supports Firebase standard format: { admin: true, developer: true }
  */
 export declare function requireClaims(request: CallableRequest, allowedRoles: string[]): AuthContext;
 /**

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CASjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EAAE,GACrB,WAAW,CASb;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAMjF"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CASjE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EAAE,GACrB,WAAW,CAUb;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAMjF"}

package/dist/auth.js

@@ -13,15 +13,14 @@ function requireAuth(request) {
 }
 function requireClaims(request, allowedRoles) {
   const auth = requireAuth(request);
-  const userRoles = auth.claims.roles ?? [];
-  if (!allowedRoles.some((role) => userRoles.includes(role))) {
-    logger.warn("Access denied", { uid: auth.uid, required: allowedRoles });
+  const hasRole = allowedRoles.some((role) => auth.claims[role] === true);
+  if (!hasRole) {
     throw new ForbiddenError();
   }
   return auth;
 }
 function requireOwnership(auth, resourceOwnerId) {
-  const isAdmin = (auth.claims.roles ?? []).includes("admin");
+  const isAdmin = auth.claims.admin === true;
   if (!isAdmin && auth.uid !== resourceOwnerId) {
     logger.warn("Ownership violation", { uid: auth.uid, resourceOwnerId });
     throw new ForbiddenError("Cannot access other user's resources");

package/dist/firestore.d.ts

@@ -1,6 +1,8 @@
 import { Firestore } from 'firebase-admin/firestore';
 /**
  * Get Firestore instance (cached)
+ *
+ * Uses the default Firebase app - consumer must call initializeApp() first.
  * @param databaseId Optional named database
  */
 export declare function getDb(databaseId?: string): Firestore;

package/dist/firestore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firestore.d.ts","sourceRoot":"","sources":["../src/firestore.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAKnE;;;GAGG;AACH,wBAAgB,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAepD"}
+{"version":3,"file":"firestore.d.ts","sourceRoot":"","sources":["../src/firestore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAInE;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAWpD"}

package/dist/firestore.js

@@ -1,15 +1,10 @@
-import { initializeApp } from 'firebase-admin/app';
 import { getFirestore } from 'firebase-admin/firestore';
 
-let app;
 const dbCache = /* @__PURE__ */ new Map();
 function getDb(databaseId) {
   const cacheKey = databaseId ?? "default";
   if (!dbCache.has(cacheKey)) {
-    if (!app) {
-      app = initializeApp();
-    }
-    const db = databaseId ? getFirestore(app, databaseId) : getFirestore(app);
+    const db = databaseId ? getFirestore(databaseId) : getFirestore();
     db.settings({ ignoreUndefinedProperties: true });
     dbCache.set(cacheKey, db);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@progressive-development/pd-provider-firebase-functions",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Firebase Functions v2 utilities for pd-spa-helper backend",
   "author": "PD Progressive Development",
   "license": "SEE LICENSE IN LICENSE",