@quatrain/auth-firebase 1.2.4 → 1.2.6

package/dist/FirebaseAuthAdapter.d.ts

@@ -1,6 +1,5 @@
 import { User } from '@quatrain/backend';
 import { AbstractAuthAdapter, AuthParameters } from '@quatrain/auth';
-import { ApiMiddleware } from '@quatrain/api';
 import { UpdateRequest } from 'firebase-admin/auth';
 /**
  * Authentication adapter implementing the Google Firebase Auth ecosystem.
@@ -14,12 +13,6 @@ export declare class FirebaseAuthAdapter extends AbstractAuthAdapter {
      * @returns The adapter instance.
      */
     static factory(config: any): FirebaseAuthAdapter;
-    /**
-     * Express middleware that intercepts and verifies incoming Firebase JWT Bearer tokens.
-     *
-     * @returns The validation middleware function.
-     */
-    middleware(): ApiMiddleware;
     constructor(params?: AuthParameters);
     /**
      * Register new user in authentication
@@ -81,4 +74,11 @@ export declare class FirebaseAuthAdapter extends AbstractAuthAdapter {
      * @returns The generated token payload.
      */
     refreshToken(refreshToken: string): Promise<any>;
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email: string, redirectTo?: string): Promise<any>;
 }

package/dist/FirebaseAuthAdapter.js

@@ -61,31 +61,6 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
     static factory(config) {
         return new FirebaseAuthAdapter({ config });
     }
-    /**
-     * Express middleware that intercepts and verifies incoming Firebase JWT Bearer tokens.
-     *
-     * @returns The validation middleware function.
-     */
-    middleware() {
-        return (req, res) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const bearer = (((_a = req.headers) === null || _a === void 0 ? void 0 : _a.authorization) || '').split(' ')[1] || '';
-            if (bearer) {
-                try {
-                    const user = yield this.getAuthToken(bearer);
-                    if (user) {
-                        return true; // Authorized
-                    }
-                }
-                catch (e) {
-                    auth_1.Auth.error(`[FirebaseAuthAdapter] Middleware token verification failed: ${e.message}`);
-                }
-            }
-            res.setHeader('WWW-Authenticate', 'Bearer realm="Core API"');
-            res.status(401).send('Authentication required.');
-            return false;
-        });
-    }
     constructor(params = {}) {
         super(params);
         if ((0, app_1.getApps)().length === 0 && params.config) {
@@ -216,5 +191,42 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
             return data;
         });
     }
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email, redirectTo) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            if (!this._params.config || !this._params.config.apiKey) {
+                auth_1.Auth.warn(`Can't recover password, no API key provided in Firebase config`);
+                throw new Error('Firebase Auth API key is not configured');
+            }
+            const body = {
+                requestType: 'PASSWORD_RESET',
+                email,
+            };
+            if (redirectTo) {
+                body.actionCodeSettings = {
+                    url: redirectTo,
+                    handleCodeInApp: true,
+                };
+            }
+            const response = yield nativeFetch.fetch(`https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key=${this._params.config.apiKey}`, {
+                method: 'POST',
+                body: JSON.stringify(body),
+                headers: { 'Content-Type': 'application/json' },
+            });
+            if (!response.ok) {
+                const errorData = yield response.json().catch(() => ({}));
+                const message = ((_a = errorData.error) === null || _a === void 0 ? void 0 : _a.message) || response.statusText;
+                throw new Error(message);
+            }
+            const data = yield response.json();
+            return data;
+        });
+    }
 }
 exports.FirebaseAuthAdapter = FirebaseAuthAdapter;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatrain/auth-firebase",
-  "version": "1.2.4",
+  "version": "1.2.6",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,13 +19,13 @@
   },
   "author": "Quatrain Développement SAS <developers@quatrain.com>",
   "peerDependencies": {
-    "@quatrain/core": "^1.2.5"
+    "@quatrain/core": "^1.2.16"
   },
   "dependencies": {
-    "@quatrain/api": "^1.1.5",
-    "@quatrain/auth": "^1.2.2",
-    "@quatrain/backend": "^1.2.6",
-    "@quatrain/core": "^1.2.5",
+    "@quatrain/api": "^1.1.6",
+    "@quatrain/auth": "^1.2.4",
+    "@quatrain/backend": "^1.2.13",
+    "@quatrain/core": "^1.2.16",
     "firebase-admin": "^13.0.1",
     "node-fetch-native": "^1.6.4"
   },

package/src/FirebaseAuthAdapter.ts

@@ -5,7 +5,7 @@ import {
    AuthenticationError,
    AuthParameters,
 } from '@quatrain/auth'
-import { ApiMiddleware, ApiRequest, ApiResponse } from '@quatrain/api'
+
 import { CreateRequest, UpdateRequest, getAuth } from 'firebase-admin/auth'
 import { getApps, initializeApp } from 'firebase-admin/app'
 import * as nativeFetch from 'node-fetch-native'
@@ -25,31 +25,7 @@ export class FirebaseAuthAdapter extends AbstractAuthAdapter {
       return new FirebaseAuthAdapter({ config })
    }
 
-   /**
-    * Express middleware that intercepts and verifies incoming Firebase JWT Bearer tokens.
-    * 
-    * @returns The validation middleware function.
-    */
-   public middleware(): ApiMiddleware {
-      return async (req: ApiRequest, res: ApiResponse): Promise<boolean> => {
-         const bearer = ((req.headers?.authorization as string) || '').split(' ')[1] || ''
-         
-         if (bearer) {
-            try {
-               const user = await this.getAuthToken(bearer)
-               if (user) {
-                  return true // Authorized
-               }
-            } catch(e) {
-               Auth.error(`[FirebaseAuthAdapter] Middleware token verification failed: ${(e as Error).message}`)
-            }
-         }
 
-         res.setHeader('WWW-Authenticate', 'Bearer realm="Core API"')
-         res.status(401).send('Authentication required.')
-         return false
-      }
-   }
 
    constructor(params: AuthParameters = {}) {
       super(params)
@@ -183,4 +159,47 @@ export class FirebaseAuthAdapter extends AbstractAuthAdapter {
 
       return data
    }
+
+   /**
+    * Initiates password recovery/reset process for a user.
+    * 
+    * @param email - The user email.
+    * @param redirectTo - Optional redirect destination.
+    */
+   async recoverPassword(email: string, redirectTo?: string): Promise<any> {
+      if (!this._params.config || !this._params.config.apiKey) {
+         Auth.warn(`Can't recover password, no API key provided in Firebase config`)
+         throw new Error('Firebase Auth API key is not configured')
+      }
+
+      const body: any = {
+         requestType: 'PASSWORD_RESET',
+         email,
+      }
+
+      if (redirectTo) {
+         body.actionCodeSettings = {
+            url: redirectTo,
+            handleCodeInApp: true,
+         }
+      }
+
+      const response = await nativeFetch.fetch(
+         `https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key=${this._params.config.apiKey}`,
+         {
+            method: 'POST',
+            body: JSON.stringify(body),
+            headers: { 'Content-Type': 'application/json' },
+         }
+      )
+
+      if (!response.ok) {
+         const errorData = await response.json().catch(() => ({}))
+         const message = errorData.error?.message || response.statusText
+         throw new Error(message)
+      }
+
+      const data = await response.json()
+      return data
+   }
 }