@quatrain/auth-firebase 1.2.5 → 1.2.7

package/dist/FirebaseAuthAdapter.d.ts

@@ -74,4 +74,11 @@ export declare class FirebaseAuthAdapter extends AbstractAuthAdapter {
      * @returns The generated token payload.
      */
     refreshToken(refreshToken: string): Promise<any>;
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email: string, redirectTo?: string): Promise<any>;
 }

package/dist/FirebaseAuthAdapter.js

@@ -130,6 +130,7 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
      */
     update(user, updatable) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             auth_1.Auth.log('auth data to update', JSON.stringify(updatable));
             try {
                 if (Object.keys(updatable).length > 0) {
@@ -137,7 +138,13 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
                     yield (0, auth_2.getAuth)().updateUser(user.uid, updatable);
                 }
             }
-            catch (e) { }
+            catch (e) {
+                auth_1.Auth.error(e);
+                if (e.code === 'auth/weak-password' || ((_a = e.message) === null || _a === void 0 ? void 0 : _a.toLowerCase().includes('password'))) {
+                    throw new auth_1.AuthenticationError(auth_1.Auth.ERROR_WEAK_PASSWORD);
+                }
+                throw new auth_1.AuthenticationError(e.message);
+            }
         });
     }
     /**
@@ -191,5 +198,42 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
             return data;
         });
     }
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email, redirectTo) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            if (!this._params.config || !this._params.config.apiKey) {
+                auth_1.Auth.warn(`Can't recover password, no API key provided in Firebase config`);
+                throw new Error('Firebase Auth API key is not configured');
+            }
+            const body = {
+                requestType: 'PASSWORD_RESET',
+                email,
+            };
+            if (redirectTo) {
+                body.actionCodeSettings = {
+                    url: redirectTo,
+                    handleCodeInApp: true,
+                };
+            }
+            const response = yield nativeFetch.fetch(`https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key=${this._params.config.apiKey}`, {
+                method: 'POST',
+                body: JSON.stringify(body),
+                headers: { 'Content-Type': 'application/json' },
+            });
+            if (!response.ok) {
+                const errorData = yield response.json().catch(() => ({}));
+                const message = ((_a = errorData.error) === null || _a === void 0 ? void 0 : _a.message) || response.statusText;
+                throw new Error(message);
+            }
+            const data = yield response.json();
+            return data;
+        });
+    }
 }
 exports.FirebaseAuthAdapter = FirebaseAuthAdapter;

package/dist/FirebaseAuthAdapter.test.js

@@ -199,13 +199,19 @@ describe('FirebaseAuthAdapter', () => {
             yield adapter.update(mockUser, {});
             expect(mockAuth.updateUser).not.toHaveBeenCalled();
         }));
-        it('should silently handle errors during update', () => __awaiter(void 0, void 0, void 0, function* () {
+        it('should throw AuthenticationError on update error', () => __awaiter(void 0, void 0, void 0, function* () {
             const updatable = { displayName: 'New Name' };
             mockAuth.updateUser.mockRejectedValue(new Error('Update failed'));
-            // Should not throw
-            yield expect(adapter.update(mockUser, updatable)).resolves.toBeUndefined();
+            yield expect(adapter.update(mockUser, updatable)).rejects.toThrow(auth_1.AuthenticationError);
             expect(mockAuth.updateUser).toHaveBeenCalledWith('user-123', updatable);
         }));
+        it('should throw Auth.ERROR_WEAK_PASSWORD on weak password error', () => __awaiter(void 0, void 0, void 0, function* () {
+            const updatable = { password: '123' };
+            const weakError = new Error('Password should be stronger');
+            weakError.code = 'auth/weak-password';
+            mockAuth.updateUser.mockRejectedValue(weakError);
+            yield expect(adapter.update(mockUser, updatable)).rejects.toThrow('weak_password');
+        }));
     });
     describe('delete()', () => {
         const mockUser = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatrain/auth-firebase",
-  "version": "1.2.5",
+  "version": "1.2.7",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,13 +19,13 @@
   },
   "author": "Quatrain Développement SAS <developers@quatrain.com>",
   "peerDependencies": {
-    "@quatrain/core": "^1.2.14"
+    "@quatrain/core": "^1.2.16"
   },
   "dependencies": {
-    "@quatrain/api": "^1.1.5",
-    "@quatrain/auth": "^1.2.3",
-    "@quatrain/backend": "^1.2.11",
-    "@quatrain/core": "^1.2.14",
+    "@quatrain/api": "^1.1.6",
+    "@quatrain/auth": "^1.2.5",
+    "@quatrain/backend": "^1.2.14",
+    "@quatrain/core": "^1.2.16",
     "firebase-admin": "^13.0.1",
     "node-fetch-native": "^1.6.4"
   },

package/src/FirebaseAuthAdapter.test.ts

@@ -204,18 +204,29 @@ describe('FirebaseAuthAdapter', () => {
          expect(mockAuth.updateUser).not.toHaveBeenCalled()
       })
 
-      it('should silently handle errors during update', async () => {
+      it('should throw AuthenticationError on update error', async () => {
          const updatable = { displayName: 'New Name' }
 
          mockAuth.updateUser.mockRejectedValue(new Error('Update failed'))
 
-         // Should not throw
          await expect(
             adapter.update(mockUser, updatable)
-         ).resolves.toBeUndefined()
+         ).rejects.toThrow(AuthenticationError)
 
          expect(mockAuth.updateUser).toHaveBeenCalledWith('user-123', updatable)
       })
+
+      it('should throw Auth.ERROR_WEAK_PASSWORD on weak password error', async () => {
+         const updatable = { password: '123' }
+         const weakError = new Error('Password should be stronger')
+         ;(weakError as any).code = 'auth/weak-password'
+
+         mockAuth.updateUser.mockRejectedValue(weakError)
+
+         await expect(
+            adapter.update(mockUser, updatable)
+         ).rejects.toThrow('weak_password')
+      })
    })
 
    describe('delete()', () => {

package/src/FirebaseAuthAdapter.ts

@@ -105,7 +105,13 @@ export class FirebaseAuthAdapter extends AbstractAuthAdapter {
             Auth.log(`Updating ${updatable.displayName} Auth record`)
             await getAuth().updateUser(user.uid, updatable)
          }
-      } catch (e) {}
+      } catch (e: any) {
+         Auth.error(e)
+         if (e.code === 'auth/weak-password' || e.message?.toLowerCase().includes('password')) {
+            throw new AuthenticationError(Auth.ERROR_WEAK_PASSWORD)
+         }
+         throw new AuthenticationError((e as Error).message)
+      }
    }
 
    /**
@@ -159,4 +165,47 @@ export class FirebaseAuthAdapter extends AbstractAuthAdapter {
 
       return data
    }
+
+   /**
+    * Initiates password recovery/reset process for a user.
+    * 
+    * @param email - The user email.
+    * @param redirectTo - Optional redirect destination.
+    */
+   async recoverPassword(email: string, redirectTo?: string): Promise<any> {
+      if (!this._params.config || !this._params.config.apiKey) {
+         Auth.warn(`Can't recover password, no API key provided in Firebase config`)
+         throw new Error('Firebase Auth API key is not configured')
+      }
+
+      const body: any = {
+         requestType: 'PASSWORD_RESET',
+         email,
+      }
+
+      if (redirectTo) {
+         body.actionCodeSettings = {
+            url: redirectTo,
+            handleCodeInApp: true,
+         }
+      }
+
+      const response = await nativeFetch.fetch(
+         `https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key=${this._params.config.apiKey}`,
+         {
+            method: 'POST',
+            body: JSON.stringify(body),
+            headers: { 'Content-Type': 'application/json' },
+         }
+      )
+
+      if (!response.ok) {
+         const errorData = await response.json().catch(() => ({}))
+         const message = errorData.error?.message || response.statusText
+         throw new Error(message)
+      }
+
+      const data = await response.json()
+      return data
+   }
 }