@quatrain/auth-firebase 1.2.6 → 1.2.9-pr25.6628

package/dist/FirebaseAuthAdapter.js

@@ -1,37 +1,4 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -46,7 +13,6 @@ exports.FirebaseAuthAdapter = void 0;
 const auth_1 = require("@quatrain/auth");
 const auth_2 = require("firebase-admin/auth");
 const app_1 = require("firebase-admin/app");
-const nativeFetch = __importStar(require("node-fetch-native"));
 /**
  * Authentication adapter implementing the Google Firebase Auth ecosystem.
  * Handles server-side validation of JWTs and admin functions via `firebase-admin`.
@@ -130,6 +96,7 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
      */
     update(user, updatable) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             auth_1.Auth.log('auth data to update', JSON.stringify(updatable));
             try {
                 if (Object.keys(updatable).length > 0) {
@@ -137,7 +104,13 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
                     yield (0, auth_2.getAuth)().updateUser(user.uid, updatable);
                 }
             }
-            catch (e) { }
+            catch (e) {
+                auth_1.Auth.error(e);
+                if (e.code === 'auth/weak-password' || ((_a = e.message) === null || _a === void 0 ? void 0 : _a.toLowerCase().includes('password'))) {
+                    throw new auth_1.AuthenticationError(auth_1.Auth.ERROR_WEAK_PASSWORD);
+                }
+                throw new auth_1.AuthenticationError(e.message);
+            }
         });
     }
     /**
@@ -179,7 +152,7 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
                 auth_1.Auth.warn(`Can't get refresh token, no API key provided`);
                 return {};
             }
-            const response = yield nativeFetch.fetch(`https://securetoken.googleapis.com/v1/token?key=${this._params.config.apiKey}`, {
+            const response = yield fetch(`https://securetoken.googleapis.com/v1/token?key=${this._params.config.apiKey}`, {
                 method: 'POST',
                 body: JSON.stringify({
                     grant_type: 'refresh_token',
@@ -214,7 +187,7 @@ class FirebaseAuthAdapter extends auth_1.AbstractAuthAdapter {
                     handleCodeInApp: true,
                 };
             }
-            const response = yield nativeFetch.fetch(`https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key=${this._params.config.apiKey}`, {
+            const response = yield fetch(`https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key=${this._params.config.apiKey}`, {
                 method: 'POST',
                 body: JSON.stringify(body),
                 headers: { 'Content-Type': 'application/json' },

package/dist/FirebaseAuthAdapter.test.js

@@ -1,37 +1,4 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -46,17 +13,16 @@ const FirebaseAuthAdapter_1 = require("./FirebaseAuthAdapter");
 const auth_1 = require("@quatrain/auth");
 const auth_2 = require("firebase-admin/auth");
 const app_1 = require("firebase-admin/app");
-const nativeFetch = __importStar(require("node-fetch-native"));
 // Mock the dependencies
 jest.mock('firebase-admin/auth');
 jest.mock('firebase-admin/app');
-jest.mock('node-fetch-native');
 describe('FirebaseAuthAdapter', () => {
     let adapter;
     let mockAuth;
     beforeEach(() => {
         // Clear all mocks before each test
         jest.clearAllMocks();
+        global.fetch = jest.fn();
         // Mock Firebase Admin SDK
         mockAuth = {
             createUser: jest.fn(),
@@ -199,13 +165,19 @@ describe('FirebaseAuthAdapter', () => {
             yield adapter.update(mockUser, {});
             expect(mockAuth.updateUser).not.toHaveBeenCalled();
         }));
-        it('should silently handle errors during update', () => __awaiter(void 0, void 0, void 0, function* () {
+        it('should throw AuthenticationError on update error', () => __awaiter(void 0, void 0, void 0, function* () {
             const updatable = { displayName: 'New Name' };
             mockAuth.updateUser.mockRejectedValue(new Error('Update failed'));
-            // Should not throw
-            yield expect(adapter.update(mockUser, updatable)).resolves.toBeUndefined();
+            yield expect(adapter.update(mockUser, updatable)).rejects.toThrow(auth_1.AuthenticationError);
             expect(mockAuth.updateUser).toHaveBeenCalledWith('user-123', updatable);
         }));
+        it('should throw Auth.ERROR_WEAK_PASSWORD on weak password error', () => __awaiter(void 0, void 0, void 0, function* () {
+            const updatable = { password: '123' };
+            const weakError = new Error('Password should be stronger');
+            weakError.code = 'auth/weak-password';
+            mockAuth.updateUser.mockRejectedValue(weakError);
+            yield expect(adapter.update(mockUser, updatable)).rejects.toThrow('weak_password');
+        }));
     });
     describe('delete()', () => {
         const mockUser = {
@@ -231,9 +203,9 @@ describe('FirebaseAuthAdapter', () => {
             const mockFetchResponse = {
                 json: jest.fn().mockResolvedValue(mockResponse),
             };
-            nativeFetch.fetch.mockResolvedValue(mockFetchResponse);
+            global.fetch.mockResolvedValue(mockFetchResponse);
             const result = yield adapter.refreshToken('old-refresh-token');
-            expect(nativeFetch.fetch).toHaveBeenCalledWith('https://securetoken.googleapis.com/v1/token?key=test-api-key', {
+            expect(global.fetch).toHaveBeenCalledWith('https://securetoken.googleapis.com/v1/token?key=test-api-key', {
                 method: 'POST',
                 body: JSON.stringify({
                     grant_type: 'refresh_token',
@@ -253,15 +225,15 @@ describe('FirebaseAuthAdapter', () => {
             });
             const result = yield adapterWithoutKey.refreshToken('refresh-token');
             expect(result).toEqual({});
-            expect(nativeFetch.fetch).not.toHaveBeenCalled();
+            expect(global.fetch).not.toHaveBeenCalled();
         }));
         it('should construct correct URL with API key', () => __awaiter(void 0, void 0, void 0, function* () {
             const mockFetchResponse = {
                 json: jest.fn().mockResolvedValue({}),
             };
-            nativeFetch.fetch.mockResolvedValue(mockFetchResponse);
+            global.fetch.mockResolvedValue(mockFetchResponse);
             yield adapter.refreshToken('refresh-token');
-            const callArgs = nativeFetch.fetch.mock.calls[0];
+            const callArgs = global.fetch.mock.calls[0];
             expect(callArgs[0]).toBe('https://securetoken.googleapis.com/v1/token?key=test-api-key');
         }));
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatrain/auth-firebase",
-  "version": "1.2.6",
+  "version": "1.2.9-pr25.6628",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,15 +19,14 @@
   },
   "author": "Quatrain Développement SAS <developers@quatrain.com>",
   "peerDependencies": {
-    "@quatrain/core": "^1.2.16"
+    "@quatrain/core": "^1.2.18"
   },
   "dependencies": {
-    "@quatrain/api": "^1.1.6",
-    "@quatrain/auth": "^1.2.4",
-    "@quatrain/backend": "^1.2.13",
-    "@quatrain/core": "^1.2.16",
-    "firebase-admin": "^13.0.1",
-    "node-fetch-native": "^1.6.4"
+    "@quatrain/api": "^1.1.7",
+    "@quatrain/auth": "^1.2.11",
+    "@quatrain/backend": "^1.2.17",
+    "@quatrain/core": "^1.2.18",
+    "firebase-admin": "^13.0.1"
   },
   "devDependencies": {
     "@tsconfig/recommended": "^1.0.1",

package/src/FirebaseAuthAdapter.test.ts

@@ -3,12 +3,10 @@ import { User } from '@quatrain/backend'
 import { AuthenticationError } from '@quatrain/auth'
 import { getAuth } from 'firebase-admin/auth'
 import { getApps, initializeApp } from 'firebase-admin/app'
-import * as nativeFetch from 'node-fetch-native'
 
 // Mock the dependencies
 jest.mock('firebase-admin/auth')
 jest.mock('firebase-admin/app')
-jest.mock('node-fetch-native')
 
 describe('FirebaseAuthAdapter', () => {
    let adapter: FirebaseAuthAdapter
@@ -17,6 +15,7 @@ describe('FirebaseAuthAdapter', () => {
    beforeEach(() => {
       // Clear all mocks before each test
       jest.clearAllMocks()
+      global.fetch = jest.fn()
 
       // Mock Firebase Admin SDK
       mockAuth = {
@@ -204,18 +203,29 @@ describe('FirebaseAuthAdapter', () => {
          expect(mockAuth.updateUser).not.toHaveBeenCalled()
       })
 
-      it('should silently handle errors during update', async () => {
+      it('should throw AuthenticationError on update error', async () => {
          const updatable = { displayName: 'New Name' }
 
          mockAuth.updateUser.mockRejectedValue(new Error('Update failed'))
 
-         // Should not throw
          await expect(
             adapter.update(mockUser, updatable)
-         ).resolves.toBeUndefined()
+         ).rejects.toThrow(AuthenticationError)
 
          expect(mockAuth.updateUser).toHaveBeenCalledWith('user-123', updatable)
       })
+
+      it('should throw Auth.ERROR_WEAK_PASSWORD on weak password error', async () => {
+         const updatable = { password: '123' }
+         const weakError = new Error('Password should be stronger')
+         ;(weakError as any).code = 'auth/weak-password'
+
+         mockAuth.updateUser.mockRejectedValue(weakError)
+
+         await expect(
+            adapter.update(mockUser, updatable)
+         ).rejects.toThrow('weak_password')
+      })
    })
 
    describe('delete()', () => {
@@ -252,11 +262,11 @@ describe('FirebaseAuthAdapter', () => {
             json: jest.fn().mockResolvedValue(mockResponse),
          }
 
-         ;(nativeFetch.fetch as unknown as jest.Mock).mockResolvedValue(mockFetchResponse)
+         ;(global.fetch as unknown as jest.Mock).mockResolvedValue(mockFetchResponse)
 
          const result = await adapter.refreshToken('old-refresh-token')
 
-         expect(nativeFetch.fetch).toHaveBeenCalledWith(
+         expect(global.fetch).toHaveBeenCalledWith(
             'https://securetoken.googleapis.com/v1/token?key=test-api-key',
             {
                method: 'POST',
@@ -283,7 +293,7 @@ describe('FirebaseAuthAdapter', () => {
          const result = await adapterWithoutKey.refreshToken('refresh-token')
 
          expect(result).toEqual({})
-         expect(nativeFetch.fetch).not.toHaveBeenCalled()
+         expect(global.fetch).not.toHaveBeenCalled()
       })
 
       it('should construct correct URL with API key', async () => {
@@ -291,11 +301,11 @@ describe('FirebaseAuthAdapter', () => {
             json: jest.fn().mockResolvedValue({}),
          }
 
-         ;(nativeFetch.fetch as unknown as jest.Mock).mockResolvedValue(mockFetchResponse)
+         ;(global.fetch as unknown as jest.Mock).mockResolvedValue(mockFetchResponse)
 
          await adapter.refreshToken('refresh-token')
 
-         const callArgs = (nativeFetch.fetch as unknown as jest.Mock).mock.calls[0]
+         const callArgs = (global.fetch as unknown as jest.Mock).mock.calls[0]
          expect(callArgs[0]).toBe(
             'https://securetoken.googleapis.com/v1/token?key=test-api-key'
          )

package/src/FirebaseAuthAdapter.ts

@@ -8,7 +8,6 @@ import {
 
 import { CreateRequest, UpdateRequest, getAuth } from 'firebase-admin/auth'
 import { getApps, initializeApp } from 'firebase-admin/app'
-import * as nativeFetch from 'node-fetch-native'
 
 /**
  * Authentication adapter implementing the Google Firebase Auth ecosystem.
@@ -105,7 +104,13 @@ export class FirebaseAuthAdapter extends AbstractAuthAdapter {
             Auth.log(`Updating ${updatable.displayName} Auth record`)
             await getAuth().updateUser(user.uid, updatable)
          }
-      } catch (e) {}
+      } catch (e: any) {
+         Auth.error(e)
+         if (e.code === 'auth/weak-password' || e.message?.toLowerCase().includes('password')) {
+            throw new AuthenticationError(Auth.ERROR_WEAK_PASSWORD)
+         }
+         throw new AuthenticationError((e as Error).message)
+      }
    }
 
    /**
@@ -143,7 +148,7 @@ export class FirebaseAuthAdapter extends AbstractAuthAdapter {
          Auth.warn(`Can't get refresh token, no API key provided`)
          return {}
       }
-      const response = await nativeFetch.fetch(
+      const response = await fetch(
          `https://securetoken.googleapis.com/v1/token?key=${this._params.config.apiKey}`,
          {
             method: 'POST',
@@ -184,7 +189,7 @@ export class FirebaseAuthAdapter extends AbstractAuthAdapter {
          }
       }
 
-      const response = await nativeFetch.fetch(
+      const response = await fetch(
          `https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key=${this._params.config.apiKey}`,
          {
             method: 'POST',