@quatrain/auth-firebase 1.1.13 → 1.1.15

package/LICENSE.md

@@ -0,0 +1,15 @@
+# LICENSE UPDATE NOTICE
+
+As of 01/01/2026, Quatrain Core is licensed under the **GNU Affero General Public License v3.0 (AGPL v3)**.
+Previous versions remain under the MIT License.
+
+## Why AGPL?
+
+We believe in open collaboration for the development ecosystem. The AGPL ensures that any modification or deployment of this BaaS stack, including over a network, benefits the entire community.
+
+## Commercial Services & Enterprise Usage
+
+We provide official deployment services, technical training, and certification for Quatrain Core.
+For organizations requiring a non-copyleft license (commercial license) or custom proprietary integrations, please contact the copyright holder: **Quatrain Technologies**.
+
+Copyright © 2024-2026 Quatrain Technologies. All Rights Reserved.

package/README.md

@@ -0,0 +1,94 @@
+# @quatrain/auth-firebase
+
+An authentication adapter for Firebase Authentication. This package integrates Quatrain's auth system with Google's managed authentication service.
+
+## Features
+
+-  Implements the `@quatrain/auth` abstract adapter.
+-  Supports email/password, social logins (Google, Facebook, etc.), and custom tokens.
+-  Integrates with Firebase security rules.
+-  Uses the `firebase-admin` SDK for server-side operations.
+
+## Installation
+
+```bash
+npm install @quatrain/auth-firebase firebase-admin
+```
+
+## Usage
+
+### Setup
+
+```typescript
+import { Auth } from '@quatrain/auth'
+import { FirebaseAuthAdapter } from '@quatrain/auth-firebase'
+
+const adapter = new FirebaseAuthAdapter({
+   config: {
+      projectId: 'your-project-id',
+      // Other Firebase Admin SDK config
+      apiKey: 'your-api-key', // Required for token refresh
+   },
+})
+Auth.addProvider(adapter, 'default', true)
+```
+
+### Register a New User
+
+```typescript
+import { User } from '@quatrain/backend'
+
+const user = new User({
+   uid: 'unique-user-id',
+   _: {
+      name: 'John Doe',
+      email: 'john@example.com',
+      phone: '+1234567890',
+   },
+})
+
+const userId = await adapter.register(user, 'password123')
+console.log('User registered with ID:', userId)
+```
+
+### Verify Auth Token
+
+```typescript
+const decodedToken = await adapter.getAuthToken('firebase-id-token')
+console.log('Token verified for user:', decodedToken.uid)
+```
+
+### Update User Profile
+
+```typescript
+await adapter.update(user, {
+   email: 'newemail@example.com',
+   displayName: 'Jane Doe',
+   phoneNumber: '+0987654321',
+})
+```
+
+### Delete User
+
+```typescript
+await adapter.delete(user)
+console.log('User deleted')
+```
+
+### Refresh Token
+
+```typescript
+const newTokens = await adapter.refreshToken(refreshToken)
+console.log('New access token:', newTokens.access_token)
+```
+
+> [!WARNING] > **Incomplete Implementation**
+>
+> The following methods are currently not implemented (empty stubs):
+>
+> -  `signup()` - Client-side sign in
+> -  `signout()` - Sign out user
+> -  `revokeAuthToken()` - Revoke tokens
+> -  `setCustomUserClaims()` - Set custom claims
+>
+> These methods exist to satisfy the interface but do not perform any operations.

package/lib/FirebaseAuthAdapter.test.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/FirebaseAuthAdapter.test.js

@@ -0,0 +1,303 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const FirebaseAuthAdapter_1 = require("./FirebaseAuthAdapter");
+const auth_1 = require("@quatrain/auth");
+const auth_2 = require("firebase-admin/auth");
+const app_1 = require("firebase-admin/app");
+const nativeFetch = __importStar(require("node-fetch-native"));
+// Mock the dependencies
+jest.mock('firebase-admin/auth');
+jest.mock('firebase-admin/app');
+jest.mock('node-fetch-native');
+describe('FirebaseAuthAdapter', () => {
+    let adapter;
+    let mockAuth;
+    beforeEach(() => {
+        // Clear all mocks before each test
+        jest.clearAllMocks();
+        // Mock Firebase Admin SDK
+        mockAuth = {
+            createUser: jest.fn(),
+            verifyIdToken: jest.fn(),
+            updateUser: jest.fn(),
+            deleteUser: jest.fn(),
+        };
+        auth_2.getAuth.mockReturnValue(mockAuth);
+        app_1.getApps.mockReturnValue([]);
+        // Create adapter instance
+        adapter = new FirebaseAuthAdapter_1.FirebaseAuthAdapter({
+            config: {
+                projectId: 'test-project',
+                apiKey: 'test-api-key',
+            },
+        });
+    });
+    afterEach(() => {
+        jest.restoreAllMocks();
+    });
+    describe('Constructor', () => {
+        it('should initialize Firebase app when no apps exist', () => {
+            expect(app_1.getApps).toHaveBeenCalled();
+            expect(app_1.initializeApp).toHaveBeenCalledWith({
+                projectId: 'test-project',
+                apiKey: 'test-api-key',
+            });
+        });
+        it('should not initialize Firebase app when app already exists', () => {
+            ;
+            app_1.getApps.mockReturnValue([{ name: 'existing-app' }]);
+            new FirebaseAuthAdapter_1.FirebaseAuthAdapter({
+                config: {
+                    projectId: 'test-project',
+                },
+            });
+            // initializeApp should still be called once from the first adapter creation
+            expect(app_1.initializeApp).toHaveBeenCalledTimes(1);
+        });
+    });
+    describe('register()', () => {
+        const mockUser = {
+            uid: 'user-123',
+            _: {
+                name: 'John Doe',
+                email: 'john@example.com',
+                phone: '+1234567890',
+                password: 'hashed-password',
+                disabled: false,
+            },
+        };
+        it('should successfully register a new user', () => __awaiter(void 0, void 0, void 0, function* () {
+            const mockUserRecord = {
+                uid: 'user-123',
+                email: 'john@example.com',
+            };
+            mockAuth.createUser.mockResolvedValue(mockUserRecord);
+            const result = yield adapter.register(mockUser, 'clearPassword123');
+            expect(mockAuth.createUser).toHaveBeenCalledWith({
+                uid: 'user-123',
+                email: 'john@example.com',
+                phoneNumber: '+1234567890',
+                password: 'clearPassword123',
+                disabled: false,
+                displayName: 'John Doe',
+            });
+            expect(result).toBe('user-123');
+        }));
+        it('should use hashed password when clearPassword is not provided', () => __awaiter(void 0, void 0, void 0, function* () {
+            const mockUserRecord = {
+                uid: 'user-123',
+                email: 'john@example.com',
+            };
+            mockAuth.createUser.mockResolvedValue(mockUserRecord);
+            yield adapter.register(mockUser);
+            expect(mockAuth.createUser).toHaveBeenCalledWith({
+                uid: 'user-123',
+                email: 'john@example.com',
+                phoneNumber: '+1234567890',
+                password: 'hashed-password',
+                disabled: false,
+                displayName: 'John Doe',
+            });
+        }));
+        it('should handle user with default disabled value', () => __awaiter(void 0, void 0, void 0, function* () {
+            const userWithoutDisabled = {
+                uid: 'user-456',
+                _: {
+                    name: 'Jane Doe',
+                    email: 'jane@example.com',
+                    phone: '+0987654321',
+                    password: 'password456',
+                },
+            };
+            mockAuth.createUser.mockResolvedValue({ uid: 'user-456' });
+            yield adapter.register(userWithoutDisabled, 'password');
+            const createUserCall = mockAuth.createUser.mock.calls[0][0];
+            expect(createUserCall.disabled).toBe(false);
+        }));
+        it('should throw AuthenticationError on Firebase error', () => __awaiter(void 0, void 0, void 0, function* () {
+            mockAuth.createUser.mockRejectedValue(new Error('Email already exists'));
+            yield expect(adapter.register(mockUser, 'password')).rejects.toThrow(auth_1.AuthenticationError);
+            yield expect(adapter.register(mockUser, 'password')).rejects.toThrow('Email already exists');
+        }));
+    });
+    describe('getAuthToken()', () => {
+        it('should successfully verify auth token', () => __awaiter(void 0, void 0, void 0, function* () {
+            const mockDecodedToken = {
+                uid: 'user-123',
+                email: 'test@example.com',
+                iat: Date.now(),
+            };
+            mockAuth.verifyIdToken.mockResolvedValue(mockDecodedToken);
+            const result = yield adapter.getAuthToken('bearer-token-123');
+            expect(mockAuth.verifyIdToken).toHaveBeenCalledWith('bearer-token-123');
+            expect(result).toEqual(mockDecodedToken);
+        }));
+        it('should throw error when token is invalid', () => __awaiter(void 0, void 0, void 0, function* () {
+            mockAuth.verifyIdToken.mockRejectedValue(new Error('Invalid token'));
+            yield expect(adapter.getAuthToken('invalid-token')).rejects.toThrow('Invalid token');
+        }));
+    });
+    describe('update()', () => {
+        const mockUser = {
+            uid: 'user-123',
+            _: {
+                email: 'test@example.com',
+            },
+        };
+        it('should successfully update user', () => __awaiter(void 0, void 0, void 0, function* () {
+            const updatable = {
+                email: 'newemail@example.com',
+                displayName: 'New Name',
+            };
+            mockAuth.updateUser.mockResolvedValue({});
+            yield adapter.update(mockUser, updatable);
+            expect(mockAuth.updateUser).toHaveBeenCalledWith('user-123', updatable);
+        }));
+        it('should skip update when updatable is empty', () => __awaiter(void 0, void 0, void 0, function* () {
+            yield adapter.update(mockUser, {});
+            expect(mockAuth.updateUser).not.toHaveBeenCalled();
+        }));
+        it('should silently handle errors during update', () => __awaiter(void 0, void 0, void 0, function* () {
+            const updatable = { displayName: 'New Name' };
+            mockAuth.updateUser.mockRejectedValue(new Error('Update failed'));
+            // Should not throw
+            yield expect(adapter.update(mockUser, updatable)).resolves.toBeUndefined();
+            expect(mockAuth.updateUser).toHaveBeenCalledWith('user-123', updatable);
+        }));
+    });
+    describe('delete()', () => {
+        const mockUser = {
+            uid: 'user-123',
+        };
+        it('should successfully delete user', () => __awaiter(void 0, void 0, void 0, function* () {
+            mockAuth.deleteUser.mockResolvedValue(undefined);
+            yield adapter.delete(mockUser);
+            expect(mockAuth.deleteUser).toHaveBeenCalledWith('user-123');
+        }));
+        it('should throw error on deletion failure', () => __awaiter(void 0, void 0, void 0, function* () {
+            mockAuth.deleteUser.mockRejectedValue(new Error('User not found'));
+            yield expect(adapter.delete(mockUser)).rejects.toThrow('User not found');
+        }));
+    });
+    describe('refreshToken()', () => {
+        it('should successfully refresh token', () => __awaiter(void 0, void 0, void 0, function* () {
+            const mockResponse = {
+                access_token: 'new-access-token',
+                refresh_token: 'new-refresh-token',
+                expires_in: 3600,
+            };
+            const mockFetchResponse = {
+                json: jest.fn().mockResolvedValue(mockResponse),
+            };
+            nativeFetch.fetch.mockResolvedValue(mockFetchResponse);
+            const result = yield adapter.refreshToken('old-refresh-token');
+            expect(nativeFetch.fetch).toHaveBeenCalledWith('https://securetoken.googleapis.com/v1/token?key=test-api-key', {
+                method: 'POST',
+                body: JSON.stringify({
+                    grant_type: 'refresh_token',
+                    refresh_token: 'old-refresh-token',
+                }),
+                headers: { 'Content-Type': 'application/json' },
+            });
+            // Note: Implementation doesn't await json(), so result is a promise
+            const resultValue = yield result;
+            expect(resultValue).toEqual(mockResponse);
+        }));
+        it('should return empty object when API key is missing', () => __awaiter(void 0, void 0, void 0, function* () {
+            const adapterWithoutKey = new FirebaseAuthAdapter_1.FirebaseAuthAdapter({
+                config: {
+                    projectId: 'test-project',
+                },
+            });
+            const result = yield adapterWithoutKey.refreshToken('refresh-token');
+            expect(result).toEqual({});
+            expect(nativeFetch.fetch).not.toHaveBeenCalled();
+        }));
+        it('should construct correct URL with API key', () => __awaiter(void 0, void 0, void 0, function* () {
+            const mockFetchResponse = {
+                json: jest.fn().mockResolvedValue({}),
+            };
+            nativeFetch.fetch.mockResolvedValue(mockFetchResponse);
+            yield adapter.refreshToken('refresh-token');
+            const callArgs = nativeFetch.fetch.mock.calls[0];
+            expect(callArgs[0]).toBe('https://securetoken.googleapis.com/v1/token?key=test-api-key');
+        }));
+    });
+    describe('Unimplemented Methods (Stubs)', () => {
+        describe('signup()', () => {
+            it('should have signup method defined', () => {
+                expect(adapter.signup).toBeDefined();
+                expect(typeof adapter.signup).toBe('function');
+            });
+            it('should return undefined (not implemented)', () => __awaiter(void 0, void 0, void 0, function* () {
+                const result = yield adapter.signup('test@example.com', 'password');
+                expect(result).toBeUndefined();
+            }));
+        });
+        describe('signout()', () => {
+            it('should have signout method defined', () => {
+                expect(adapter.signout).toBeDefined();
+                expect(typeof adapter.signout).toBe('function');
+            });
+            it('should return undefined (not implemented)', () => __awaiter(void 0, void 0, void 0, function* () {
+                const mockUser = { uid: 'user-123' };
+                const result = yield adapter.signout(mockUser);
+                expect(result).toBeUndefined();
+            }));
+        });
+        describe('revokeAuthToken()', () => {
+            it('should have revokeAuthToken method defined', () => {
+                expect(adapter.revokeAuthToken).toBeDefined();
+                expect(typeof adapter.revokeAuthToken).toBe('function');
+            });
+            it('should return undefined (not implemented)', () => __awaiter(void 0, void 0, void 0, function* () {
+                const result = yield adapter.revokeAuthToken('token-123');
+                expect(result).toBeUndefined();
+            }));
+        });
+        describe('setCustomUserClaims()', () => {
+            it('should have setCustomUserClaims method defined', () => {
+                expect(adapter.setCustomUserClaims).toBeDefined();
+                expect(typeof adapter.setCustomUserClaims).toBe('function');
+            });
+            it('should return undefined (not implemented)', () => __awaiter(void 0, void 0, void 0, function* () {
+                const result = yield adapter.setCustomUserClaims('user-123', {
+                    role: 'admin',
+                });
+                expect(result).toBeUndefined();
+            }));
+        });
+    });
+});

package/package.json

@@ -1,42 +1,43 @@
 {
-  "name": "@quatrain/auth-firebase",
-  "version": "1.1.13",
-  "license": "MIT",
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "files": [
-    "lib/",
-    "README.md"
-  ],
-  "author": "Quatrain Développement SAS <developers@quatrain.com>",
-  "peerDependencies": {
-    "@quatrain/core": "^1.1.19"
-  },
-  "dependencies": {
-    "@quatrain/auth": "^1.1.17",
-    "firebase-admin": "^13.0.1"
-  },
-  "devDependencies": {
-    "@faker-js/faker": "^7.6.0",
-    "@tsconfig/recommended": "^1.0.1",
-    "@types/jest": "^27.0.3",
-    "@types/node": "^22.10.1",
-    "jest": "^27.4.7",
-    "jest-node-exports-resolver": "^1.1.6",
-    "jest-serial-runner": "^1.2.1",
-    "trace-unhandled": "^2.0.1",
-    "ts-jest": "^27.1.2",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.1.5"
-  },
-  "scripts": {
-    "build": "tsc",
-    "wbuild": "tsc --watch",
-    "bump-to": "yarn version",
-    "hash": "node ../../bin/hashFolder.js",
-    "hash:persist": "yarn hash  > .hash_latest.txt",
-    "hash:compare": "yarn hash > .hash_newest.txt && cmp -s .hash_latest.txt .hash_newest.txt",
-    "publish": "yarn hash:compare || yarn publish:process",
-    "publish:process": "yarn version patch && yarn build && yarn npm publish --access public && yarn hash:persist"
-  }
-}
+   "name": "@quatrain/auth-firebase",
+   "version": "1.1.15",
+   "license": "AGPL-3.0-only",
+   "main": "lib/index.js",
+   "types": "lib/index.d.ts",
+   "bun": "src/index.ts",
+   "files": [
+      "LICENSE.md",
+      "src/",
+      "lib/",
+      "README.md"
+   ],
+   "author": "Quatrain Développement SAS <developers@quatrain.com>",
+   "peerDependencies": {
+      "@quatrain/core": "^1.1.43"
+   },
+   "dependencies": {
+      "@quatrain/auth": "^1.1.20",
+      "@quatrain/backend": "^1.1.26",
+      "@quatrain/core": "^1.1.43",
+      "firebase-admin": "^13.0.1",
+      "node-fetch-native": "^1.6.4"
+   },
+   "devDependencies": {
+      "@tsconfig/recommended": "^1.0.1",
+      "@types/jest": "^30.0.0",
+      "@types/node": "^22.10.1",
+      "jest": "^30.2.0",
+      "jest-node-exports-resolver": "^1.1.6",
+      "jest-serial-runner": "^1.2.1",
+      "trace-unhandled": "^2.0.1",
+      "ts-jest": "^29.4.1",
+      "ts-node": "^10.9.1",
+      "typescript": "^5.2.2"
+   },
+   "scripts": {
+      "test-ci": "jest --runInBand",
+      "build": "tsc",
+      "wbuild": "tsc --watch",
+      "bump-to": "yarn version"
+   }
+}

package/src/FirebaseAuthAdapter.test.ts

@@ -0,0 +1,357 @@
+import { FirebaseAuthAdapter } from './FirebaseAuthAdapter'
+import { User } from '@quatrain/backend'
+import { AuthenticationError } from '@quatrain/auth'
+import { getAuth } from 'firebase-admin/auth'
+import { getApps, initializeApp } from 'firebase-admin/app'
+import * as nativeFetch from 'node-fetch-native'
+
+// Mock the dependencies
+jest.mock('firebase-admin/auth')
+jest.mock('firebase-admin/app')
+jest.mock('node-fetch-native')
+
+describe('FirebaseAuthAdapter', () => {
+   let adapter: FirebaseAuthAdapter
+   let mockAuth: any
+
+   beforeEach(() => {
+      // Clear all mocks before each test
+      jest.clearAllMocks()
+
+      // Mock Firebase Admin SDK
+      mockAuth = {
+         createUser: jest.fn(),
+         verifyIdToken: jest.fn(),
+         updateUser: jest.fn(),
+         deleteUser: jest.fn(),
+      }
+      ;(getAuth as jest.Mock).mockReturnValue(mockAuth)
+      ;(getApps as jest.Mock).mockReturnValue([])
+
+      // Create adapter instance
+      adapter = new FirebaseAuthAdapter({
+         config: {
+            projectId: 'test-project',
+            apiKey: 'test-api-key',
+         },
+      })
+   })
+
+   afterEach(() => {
+      jest.restoreAllMocks()
+   })
+
+   describe('Constructor', () => {
+      it('should initialize Firebase app when no apps exist', () => {
+         expect(getApps).toHaveBeenCalled()
+         expect(initializeApp).toHaveBeenCalledWith({
+            projectId: 'test-project',
+            apiKey: 'test-api-key',
+         })
+      })
+
+      it('should not initialize Firebase app when app already exists', () => {
+         ;(getApps as jest.Mock).mockReturnValue([{ name: 'existing-app' }])
+
+         new FirebaseAuthAdapter({
+            config: {
+               projectId: 'test-project',
+            },
+         })
+
+         // initializeApp should still be called once from the first adapter creation
+         expect(initializeApp).toHaveBeenCalledTimes(1)
+      })
+   })
+
+   describe('register()', () => {
+      const mockUser = {
+         uid: 'user-123',
+         _: {
+            name: 'John Doe',
+            email: 'john@example.com',
+            phone: '+1234567890',
+            password: 'hashed-password',
+            disabled: false,
+         },
+      } as unknown as User
+
+      it('should successfully register a new user', async () => {
+         const mockUserRecord = {
+            uid: 'user-123',
+            email: 'john@example.com',
+         }
+
+         mockAuth.createUser.mockResolvedValue(mockUserRecord)
+
+         const result = await adapter.register(mockUser, 'clearPassword123')
+
+         expect(mockAuth.createUser).toHaveBeenCalledWith({
+            uid: 'user-123',
+            email: 'john@example.com',
+            phoneNumber: '+1234567890',
+            password: 'clearPassword123',
+            disabled: false,
+            displayName: 'John Doe',
+         })
+
+         expect(result).toBe('user-123')
+      })
+
+      it('should use hashed password when clearPassword is not provided', async () => {
+         const mockUserRecord = {
+            uid: 'user-123',
+            email: 'john@example.com',
+         }
+
+         mockAuth.createUser.mockResolvedValue(mockUserRecord)
+
+         await adapter.register(mockUser)
+
+         expect(mockAuth.createUser).toHaveBeenCalledWith({
+            uid: 'user-123',
+            email: 'john@example.com',
+            phoneNumber: '+1234567890',
+            password: 'hashed-password',
+            disabled: false,
+            displayName: 'John Doe',
+         })
+      })
+
+      it('should handle user with default disabled value', async () => {
+         const userWithoutDisabled = {
+            uid: 'user-456',
+            _: {
+               name: 'Jane Doe',
+               email: 'jane@example.com',
+               phone: '+0987654321',
+               password: 'password456',
+            },
+         } as unknown as User
+
+         mockAuth.createUser.mockResolvedValue({ uid: 'user-456' })
+
+         await adapter.register(userWithoutDisabled, 'password')
+
+         const createUserCall = mockAuth.createUser.mock.calls[0][0]
+         expect(createUserCall.disabled).toBe(false)
+      })
+
+      it('should throw AuthenticationError on Firebase error', async () => {
+         mockAuth.createUser.mockRejectedValue(
+            new Error('Email already exists')
+         )
+
+         await expect(adapter.register(mockUser, 'password')).rejects.toThrow(
+            AuthenticationError
+         )
+
+         await expect(adapter.register(mockUser, 'password')).rejects.toThrow(
+            'Email already exists'
+         )
+      })
+   })
+
+   describe('getAuthToken()', () => {
+      it('should successfully verify auth token', async () => {
+         const mockDecodedToken = {
+            uid: 'user-123',
+            email: 'test@example.com',
+            iat: Date.now(),
+         }
+
+         mockAuth.verifyIdToken.mockResolvedValue(mockDecodedToken)
+
+         const result = await adapter.getAuthToken('bearer-token-123')
+
+         expect(mockAuth.verifyIdToken).toHaveBeenCalledWith('bearer-token-123')
+         expect(result).toEqual(mockDecodedToken)
+      })
+
+      it('should throw error when token is invalid', async () => {
+         mockAuth.verifyIdToken.mockRejectedValue(new Error('Invalid token'))
+
+         await expect(adapter.getAuthToken('invalid-token')).rejects.toThrow(
+            'Invalid token'
+         )
+      })
+   })
+
+   describe('update()', () => {
+      const mockUser = {
+         uid: 'user-123',
+         _: {
+            email: 'test@example.com',
+         },
+      } as unknown as User
+
+      it('should successfully update user', async () => {
+         const updatable = {
+            email: 'newemail@example.com',
+            displayName: 'New Name',
+         }
+
+         mockAuth.updateUser.mockResolvedValue({})
+
+         await adapter.update(mockUser, updatable)
+
+         expect(mockAuth.updateUser).toHaveBeenCalledWith('user-123', updatable)
+      })
+
+      it('should skip update when updatable is empty', async () => {
+         await adapter.update(mockUser, {})
+
+         expect(mockAuth.updateUser).not.toHaveBeenCalled()
+      })
+
+      it('should silently handle errors during update', async () => {
+         const updatable = { displayName: 'New Name' }
+
+         mockAuth.updateUser.mockRejectedValue(new Error('Update failed'))
+
+         // Should not throw
+         await expect(
+            adapter.update(mockUser, updatable)
+         ).resolves.toBeUndefined()
+
+         expect(mockAuth.updateUser).toHaveBeenCalledWith('user-123', updatable)
+      })
+   })
+
+   describe('delete()', () => {
+      const mockUser = {
+         uid: 'user-123',
+      } as unknown as User
+
+      it('should successfully delete user', async () => {
+         mockAuth.deleteUser.mockResolvedValue(undefined)
+
+         await adapter.delete(mockUser)
+
+         expect(mockAuth.deleteUser).toHaveBeenCalledWith('user-123')
+      })
+
+      it('should throw error on deletion failure', async () => {
+         mockAuth.deleteUser.mockRejectedValue(new Error('User not found'))
+
+         await expect(adapter.delete(mockUser)).rejects.toThrow(
+            'User not found'
+         )
+      })
+   })
+
+   describe('refreshToken()', () => {
+      it('should successfully refresh token', async () => {
+         const mockResponse = {
+            access_token: 'new-access-token',
+            refresh_token: 'new-refresh-token',
+            expires_in: 3600,
+         }
+
+         const mockFetchResponse = {
+            json: jest.fn().mockResolvedValue(mockResponse),
+         }
+
+         ;(nativeFetch.fetch as jest.Mock).mockResolvedValue(mockFetchResponse)
+
+         const result = await adapter.refreshToken('old-refresh-token')
+
+         expect(nativeFetch.fetch).toHaveBeenCalledWith(
+            'https://securetoken.googleapis.com/v1/token?key=test-api-key',
+            {
+               method: 'POST',
+               body: JSON.stringify({
+                  grant_type: 'refresh_token',
+                  refresh_token: 'old-refresh-token',
+               }),
+               headers: { 'Content-Type': 'application/json' },
+            }
+         )
+
+         // Note: Implementation doesn't await json(), so result is a promise
+         const resultValue = await result
+         expect(resultValue).toEqual(mockResponse)
+      })
+
+      it('should return empty object when API key is missing', async () => {
+         const adapterWithoutKey = new FirebaseAuthAdapter({
+            config: {
+               projectId: 'test-project',
+            },
+         })
+
+         const result = await adapterWithoutKey.refreshToken('refresh-token')
+
+         expect(result).toEqual({})
+         expect(nativeFetch.fetch).not.toHaveBeenCalled()
+      })
+
+      it('should construct correct URL with API key', async () => {
+         const mockFetchResponse = {
+            json: jest.fn().mockResolvedValue({}),
+         }
+
+         ;(nativeFetch.fetch as jest.Mock).mockResolvedValue(mockFetchResponse)
+
+         await adapter.refreshToken('refresh-token')
+
+         const callArgs = (nativeFetch.fetch as jest.Mock).mock.calls[0]
+         expect(callArgs[0]).toBe(
+            'https://securetoken.googleapis.com/v1/token?key=test-api-key'
+         )
+      })
+   })
+
+   describe('Unimplemented Methods (Stubs)', () => {
+      describe('signup()', () => {
+         it('should have signup method defined', () => {
+            expect(adapter.signup).toBeDefined()
+            expect(typeof adapter.signup).toBe('function')
+         })
+
+         it('should return undefined (not implemented)', async () => {
+            const result = await adapter.signup('test@example.com', 'password')
+            expect(result).toBeUndefined()
+         })
+      })
+
+      describe('signout()', () => {
+         it('should have signout method defined', () => {
+            expect(adapter.signout).toBeDefined()
+            expect(typeof adapter.signout).toBe('function')
+         })
+
+         it('should return undefined (not implemented)', async () => {
+            const mockUser = { uid: 'user-123' } as unknown as User
+            const result = await adapter.signout(mockUser)
+            expect(result).toBeUndefined()
+         })
+      })
+
+      describe('revokeAuthToken()', () => {
+         it('should have revokeAuthToken method defined', () => {
+            expect(adapter.revokeAuthToken).toBeDefined()
+            expect(typeof adapter.revokeAuthToken).toBe('function')
+         })
+
+         it('should return undefined (not implemented)', async () => {
+            const result = await adapter.revokeAuthToken('token-123')
+            expect(result).toBeUndefined()
+         })
+      })
+
+      describe('setCustomUserClaims()', () => {
+         it('should have setCustomUserClaims method defined', () => {
+            expect(adapter.setCustomUserClaims).toBeDefined()
+            expect(typeof adapter.setCustomUserClaims).toBe('function')
+         })
+
+         it('should return undefined (not implemented)', async () => {
+            const result = await adapter.setCustomUserClaims('user-123', {
+               role: 'admin',
+            })
+            expect(result).toBeUndefined()
+         })
+      })
+   })
+})

package/src/FirebaseAuthAdapter.ts

@@ -0,0 +1,99 @@
+import { User } from '@quatrain/backend'
+import {
+   Auth,
+   AbstractAuthAdapter,
+   AuthenticationError,
+   AuthParameters,
+} from '@quatrain/auth'
+import { CreateRequest, UpdateRequest, getAuth } from 'firebase-admin/auth'
+import { getApps, initializeApp } from 'firebase-admin/app'
+import * as nativeFetch from 'node-fetch-native'
+
+export class FirebaseAuthAdapter extends AbstractAuthAdapter {
+   constructor(params: AuthParameters = {}) {
+      super(params)
+      if (getApps().length === 0) {
+         initializeApp(params.config)
+      }
+   }
+
+   /**
+    * Register new user in authentication
+    * @param user
+    * @returns user unique id
+    */
+   async register(user: User, clearPassword?: string) {
+      try {
+         const {
+            name: displayName,
+            email,
+            phone: phoneNumber,
+            password,
+            disabled = false,
+         } = user._
+         const authData: CreateRequest = {
+            uid: user.uid,
+            email,
+            phoneNumber,
+            password: clearPassword || password,
+            disabled,
+            displayName,
+         }
+         Auth.log(`[FAA] Adding user '${displayName}'`)
+         const userRecord = await getAuth().createUser(authData)
+
+         return userRecord.uid
+      } catch (err) {
+         throw new AuthenticationError((err as Error).message)
+      }
+   }
+
+   async getAuthToken(bearer: string) {
+      return await getAuth().verifyIdToken(bearer)
+   }
+
+   async signup(login: string, password: string) {}
+
+   async signout(user: User): Promise<any> {}
+
+   async update(user: User, updatable: UpdateRequest): Promise<any> {
+      Auth.log('auth data to update', JSON.stringify(updatable))
+
+      try {
+         if (Object.keys(updatable).length > 0) {
+            Auth.log(`Updating ${updatable.displayName} Auth record`)
+            await getAuth().updateUser(user.uid, updatable)
+         }
+      } catch (e) {}
+   }
+
+   async delete(user: User): Promise<any> {
+      return await getAuth().deleteUser(user.uid)
+   }
+
+   async revokeAuthToken(token: string) {}
+
+   async setCustomUserClaims(id: string, claims: any) {}
+
+   async refreshToken(refreshToken: string): Promise<any> {
+      if (!this._params.config.apiKey) {
+         Auth.warn(`Can't get refresh token, no API key provided`)
+         return {}
+      }
+      const response = await nativeFetch.fetch(
+         `https://securetoken.googleapis.com/v1/token?key=${this._params.config.apiKey}`,
+         {
+            method: 'POST',
+            body: JSON.stringify({
+               grant_type: 'refresh_token',
+               refresh_token: refreshToken,
+            }),
+            headers: { 'Content-Type': 'application/json' }, //, crossdomain: true },
+         }
+      )
+
+      const data = response.json()
+
+      return data
+   }
+}

package/src/index.ts

@@ -0,0 +1,3 @@
+import { FirebaseAuthAdapter } from './FirebaseAuthAdapter'
+
+export { FirebaseAuthAdapter }