@react-native-firebase/app-check 26.3.3 → 27.0.0

package/ios/RNFBAppCheckUnitTests/HostStubs/Firebase/Firebase.h

@@ -0,0 +1,47 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ * Enough of Firebase Core / App Check for compiling RNFBAppCheckHelper.m
+ * and driving token completion branches without linking the SDK.
+ */
+#import <Foundation/Foundation.h>
+
+@interface FIRApp : NSObject
+@property(nonatomic, copy) NSString *name;
+- (instancetype)initWithName:(NSString *)name;
+@end
+
+@interface FIRAppCheckToken : NSObject
+@property(nonatomic, readonly, copy) NSString *token;
+- (instancetype)initWithToken:(NSString *)token;
+@end
+
+@protocol FIRAppCheckProvider <NSObject>
+@end
+
+@protocol FIRAppCheckProviderFactory <NSObject>
+- (nullable id<FIRAppCheckProvider>)createProviderWithApp:(FIRApp *)app;
+@end
+
+typedef void (^FIRAppCheckTokenCompletionBlock)(FIRAppCheckToken *_Nullable token,
+                                                NSError *_Nullable error);
+
+@interface FIRAppCheck : NSObject
+
+@property(nonatomic, assign) BOOL isTokenAutoRefreshEnabled;
+
++ (void)setAppCheckProviderFactory:(nullable id<FIRAppCheckProviderFactory>)factory;
++ (instancetype)appCheckWithApp:(FIRApp *)app;
+
+- (void)tokenForcingRefresh:(BOOL)forceRefresh
+                 completion:(FIRAppCheckTokenCompletionBlock)completion;
+- (void)limitedUseTokenWithCompletion:(FIRAppCheckTokenCompletionBlock)completion;
+
+/** Test seam: when set, invoked instead of a network/token fetch. */
+@property(class, nonatomic, copy, nullable) void (^tokenForcingRefreshHandler)
+    (BOOL forceRefresh, FIRAppCheckTokenCompletionBlock completion);
+@property(class, nonatomic, copy, nullable) void (^limitedUseTokenHandler)
+    (FIRAppCheckTokenCompletionBlock completion);
+
++ (void)resetTestState;
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBApp/RCTConvert+FIRApp.h

@@ -0,0 +1,13 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import <Foundation/Foundation.h>
+
+@class FIRApp;
+
+@interface RCTConvert : NSObject
++ (FIRApp *)firAppFromString:(NSString *)appName;
+/** Test seam: map appName → FIRApp. Cleared via resetTestState. */
++ (void)setFirAppFromStringHandler:(FIRApp * (^)(NSString *appName))handler;
++ (void)resetTestState;
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBApp/RCTConvert+FIRAppHostStub.m

@@ -0,0 +1,27 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import "RNFBApp/RCTConvert+FIRApp.h"
+
+#import <Firebase/Firebase.h>
+
+@implementation RCTConvert
+
+static FIRApp * (^sFirAppFromStringHandler)(NSString *appName);
+
++ (FIRApp *)firAppFromString:(NSString *)appName {
+  if (sFirAppFromStringHandler != nil) {
+    return sFirAppFromStringHandler(appName);
+  }
+  return [[FIRApp alloc] initWithName:appName ?: @"[DEFAULT]"];
+}
+
++ (void)setFirAppFromStringHandler:(FIRApp * (^)(NSString *appName))handler {
+  sFirAppFromStringHandler = [handler copy];
+}
+
++ (void)resetTestState {
+  sFirAppFromStringHandler = nil;
+}
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBApp/RNFBSharedUtils.h

@@ -0,0 +1,18 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import <Foundation/Foundation.h>
+#import <React/RCTBridgeModule.h>
+
+#ifdef DEBUG
+#define DLog(fmt, ...) NSLog((@"%s [Line %d] " fmt), __PRETTY_FUNCTION__, __LINE__, ##__VA_ARGS__);
+#else
+#define DLog(...)
+#endif
+
+@interface RNFBSharedUtils : NSObject
+
++ (void)rejectPromiseWithUserInfo:(RCTPromiseRejectBlock)reject
+                         userInfo:(NSMutableDictionary *)userInfo;
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBApp/RNFBSharedUtilsHostStub.m

@@ -0,0 +1,18 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import "RNFBApp/RNFBSharedUtils.h"
+
+@implementation RNFBSharedUtils
+
++ (void)rejectPromiseWithUserInfo:(RCTPromiseRejectBlock)reject
+                         userInfo:(NSMutableDictionary *)userInfo {
+  if (reject == nil) {
+    return;
+  }
+  NSString *code = userInfo[@"code"] ?: @"unknown";
+  NSString *message = userInfo[@"message"] ?: @"";
+  reject(code, message, nil);
+}
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBAppCheck/RNFBAppCheckProviderHostStub.m

@@ -0,0 +1,48 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ * Replaces production RNFBAppCheckProvider.m (DeviceCheck / App Attest / debug SDK).
+ */
+#import "RNFBAppCheckProvider.h"
+
+NSString *const kRNFBAppCheckProviderNotReadyMessage =
+    @"App Check provider is not ready. Call initializeAppCheck before requesting tokens.";
+
+@interface RNFBAppCheckHostStubDelegateProvider : NSObject <FIRAppCheckProvider>
+@end
+
+@implementation RNFBAppCheckHostStubDelegateProvider
+@end
+
+@implementation RNFBAppCheckProvider
+
+- (id)initWithApp:(FIRApp *)app {
+  self = [super init];
+  if (self) {
+    self.app = app;
+  }
+  return self;
+}
+
+- (void)configure:(FIRApp *)app
+     providerName:(NSString *)providerName
+       debugToken:(NSString *)debugToken {
+  (void)providerName;
+  (void)debugToken;
+  self.app = app;
+  // Mark ready so Helper RejectIfProviderNotReady allows token APIs.
+  self.delegateProvider = [[RNFBAppCheckHostStubDelegateProvider alloc] init];
+}
+
+- (void)getTokenWithCompletion:(nonnull void (^)(FIRAppCheckToken *_Nullable,
+                                                 NSError *_Nullable))handler {
+  if (handler != nil) {
+    handler(nil, [NSError errorWithDomain:@"RNFBAppCheckHostStub"
+                                     code:0
+                                 userInfo:@{
+                                   @"code" : @"provider-not-ready",
+                                   NSLocalizedDescriptionKey : kRNFBAppCheckProviderNotReadyMessage,
+                                 }]);
+  }
+}
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/React/RCTBridgeModule.h

@@ -0,0 +1,10 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import <Foundation/Foundation.h>
+
+typedef void (^RCTPromiseResolveBlock)(id result);
+typedef void (^RCTPromiseRejectBlock)(NSString *code, NSString *message, NSError *error);
+
+@protocol RCTBridgeModule <NSObject>
+@end

package/ios/RNFBAppCheckUnitTests/RNFBAppCheckHelperHostStubTests.m

@@ -0,0 +1,197 @@
+/**
+ * Copyright (c) 2016-present Invertase Limited & Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this library except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#import <XCTest/XCTest.h>
+
+#import <Firebase/Firebase.h>
+#import "RNFBApp/RCTConvert+FIRApp.h"
+#import "RNFBAppCheckHelper.h"
+
+@interface RNFBAppCheckHelperHostStubTests : XCTestCase
+@end
+
+@implementation RNFBAppCheckHelperHostStubTests
+
+- (void)setUp {
+  [super setUp];
+  [FIRAppCheck resetTestState];
+  [RCTConvert resetTestState];
+  [RCTConvert setFirAppFromStringHandler:^FIRApp *(NSString *appName) {
+    return [[FIRApp alloc] initWithName:appName ?: @"[DEFAULT]"];
+  }];
+}
+
+- (void)tearDown {
+  [FIRAppCheck resetTestState];
+  [RCTConvert resetTestState];
+  [super tearDown];
+}
+
+- (void)testActivate_configuresDeviceCheckAndResolves {
+  __block id resolved = @"unset";
+  __block BOOL rejected = NO;
+
+  [RNFBAppCheckHelper activate:@"helper-activate"
+      siteKeyProvider:@"ignored"
+      isTokenAutoRefreshEnabled:YES
+      resolve:^(id result) {
+        resolved = result;
+      }
+      reject:^(NSString *code, NSString *message, NSError *error) {
+        (void)code;
+        (void)message;
+        (void)error;
+        rejected = YES;
+      }];
+
+  XCTAssertFalse(rejected);
+  XCTAssertEqualObjects(resolved, [NSNull null]);
+
+  FIRApp *app = [RCTConvert firAppFromString:@"helper-activate"];
+  FIRAppCheck *appCheck = [FIRAppCheck appCheckWithApp:app];
+  XCTAssertTrue(appCheck.isTokenAutoRefreshEnabled);
+}
+
+- (void)testGetToken_nilToken_rejectsTokenNull {
+  // activate installs a ready provider (HostStub sets delegateProvider).
+  [RNFBAppCheckHelper activate:@"helper-nil-token"
+      siteKeyProvider:nil
+      isTokenAutoRefreshEnabled:NO
+      resolve:^(id result) {
+        (void)result;
+      }
+      reject:^(NSString *code, NSString *message, NSError *error) {
+        (void)code;
+        (void)message;
+        (void)error;
+      }];
+
+  FIRAppCheck.tokenForcingRefreshHandler =
+      ^(BOOL forceRefresh, FIRAppCheckTokenCompletionBlock completion) {
+        (void)forceRefresh;
+        completion(nil, nil);
+      };
+
+  XCTestExpectation *expectation = [self expectationWithDescription:@"getToken nil rejects"];
+  __block NSString *rejectCode = nil;
+  __block NSString *rejectMessage = nil;
+
+  [RNFBAppCheckHelper getToken:@"helper-nil-token"
+      forceRefresh:NO
+      resolve:^(id result) {
+        (void)result;
+        XCTFail(@"expected reject for nil token");
+        [expectation fulfill];
+      }
+      reject:^(NSString *code, NSString *message, NSError *error) {
+        (void)error;
+        rejectCode = code;
+        rejectMessage = message;
+        [expectation fulfill];
+      }];
+
+  [self waitForExpectationsWithTimeout:1.0 handler:nil];
+  XCTAssertEqualObjects(rejectCode, @"token-null");
+  XCTAssertEqualObjects(rejectMessage, @"no token fetched");
+}
+
+- (void)testGetLimitedUseToken_error_rejectsMappedCode {
+  [RNFBAppCheckHelper activate:@"helper-limited-error"
+      siteKeyProvider:nil
+      isTokenAutoRefreshEnabled:NO
+      resolve:^(id result) {
+        (void)result;
+      }
+      reject:^(NSString *code, NSString *message, NSError *error) {
+        (void)code;
+        (void)message;
+        (void)error;
+      }];
+
+  NSError *fetchError = [NSError errorWithDomain:@"io.invertase.firebase.app-check.test"
+                                            code:9
+                                        userInfo:@{
+                                          NSLocalizedDescriptionKey : @"limited use failed",
+                                          @"code" : @"network",
+                                        }];
+  FIRAppCheck.limitedUseTokenHandler = ^(FIRAppCheckTokenCompletionBlock completion) {
+    completion(nil, fetchError);
+  };
+
+  XCTestExpectation *expectation =
+      [self expectationWithDescription:@"getLimitedUseToken error rejects"];
+  __block NSString *rejectCode = nil;
+  __block NSString *rejectMessage = nil;
+
+  [RNFBAppCheckHelper getLimitedUseToken:@"helper-limited-error"
+      resolve:^(id result) {
+        (void)result;
+        XCTFail(@"expected reject for error");
+        [expectation fulfill];
+      }
+      reject:^(NSString *code, NSString *message, NSError *error) {
+        (void)error;
+        rejectCode = code;
+        rejectMessage = message;
+        [expectation fulfill];
+      }];
+
+  [self waitForExpectationsWithTimeout:1.0 handler:nil];
+  XCTAssertEqualObjects(rejectCode, @"token-error");
+  XCTAssertEqualObjects(rejectMessage, @"limited use failed");
+}
+
+- (void)testGetLimitedUseToken_nilToken_rejectsTokenNull {
+  [RNFBAppCheckHelper activate:@"helper-limited-nil"
+      siteKeyProvider:nil
+      isTokenAutoRefreshEnabled:NO
+      resolve:^(id result) {
+        (void)result;
+      }
+      reject:^(NSString *code, NSString *message, NSError *error) {
+        (void)code;
+        (void)message;
+        (void)error;
+      }];
+
+  FIRAppCheck.limitedUseTokenHandler = ^(FIRAppCheckTokenCompletionBlock completion) {
+    completion(nil, nil);
+  };
+
+  XCTestExpectation *expectation =
+      [self expectationWithDescription:@"getLimitedUseToken nil rejects"];
+  __block NSString *rejectCode = nil;
+  __block NSString *rejectMessage = nil;
+
+  [RNFBAppCheckHelper getLimitedUseToken:@"helper-limited-nil"
+      resolve:^(id result) {
+        (void)result;
+        XCTFail(@"expected reject for nil token");
+        [expectation fulfill];
+      }
+      reject:^(NSString *code, NSString *message, NSError *error) {
+        (void)error;
+        rejectCode = code;
+        rejectMessage = message;
+        [expectation fulfill];
+      }];
+
+  [self waitForExpectationsWithTimeout:1.0 handler:nil];
+  XCTAssertEqualObjects(rejectCode, @"token-null");
+  XCTAssertEqualObjects(rejectMessage, @"no token fetched");
+}
+
+@end

package/ios/RNFBAppCheckUnitTests/RNFBAppCheckRejectCodeMapperTests.swift

@@ -0,0 +1,85 @@
+/**
+ * Copyright (c) 2016-present Invertase Limited & Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this library except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import XCTest
+
+final class RNFBAppCheckRejectCodeMapperTests: XCTestCase {
+  private let domain = "io.invertase.firebase.app-check.test"
+
+  private func error(code: Any?, underlying: Error? = nil) -> NSError {
+    var userInfo: [String: Any] = [:]
+    if let code {
+      userInfo["code"] = code
+    }
+    if let underlying {
+      userInfo[NSUnderlyingErrorKey] = underlying
+    }
+    return NSError(domain: domain, code: 1, userInfo: userInfo)
+  }
+
+  func testRejectCode_nilError_returnsTokenError() {
+    XCTAssertEqual(RNFBAppCheckRejectCodeMapper.rejectCode(for: nil), "token-error")
+  }
+
+  func testRejectCode_emptyUserInfo_returnsTokenError() {
+    let err = NSError(domain: domain, code: 1, userInfo: nil)
+    XCTAssertEqual(RNFBAppCheckRejectCodeMapper.rejectCode(for: err), "token-error")
+  }
+
+  func testRejectCode_topLevelProviderNotReady() {
+    let err = error(code: "provider-not-ready")
+    XCTAssertEqual(
+      RNFBAppCheckRejectCodeMapper.rejectCode(for: err), "provider-not-ready")
+  }
+
+  func testRejectCode_otherStringCode_returnsTokenError() {
+    let err = error(code: "token-null")
+    XCTAssertEqual(RNFBAppCheckRejectCodeMapper.rejectCode(for: err), "token-error")
+  }
+
+  func testRejectCode_nonStringCode_returnsTokenError() {
+    let err = error(code: NSNumber(value: 42))
+    XCTAssertEqual(RNFBAppCheckRejectCodeMapper.rejectCode(for: err), "token-error")
+  }
+
+  func testRejectCode_underlyingProviderNotReady() {
+    let inner = error(code: "provider-not-ready")
+    let outer = error(code: "wrapped", underlying: inner)
+    XCTAssertEqual(
+      RNFBAppCheckRejectCodeMapper.rejectCode(for: outer), "provider-not-ready")
+  }
+
+  func testRejectCode_deepChain_providerNotReadyInMiddle() {
+    let leaf = error(code: "other")
+    let middle = error(code: "provider-not-ready", underlying: leaf)
+    let outer = error(code: "sdk-wrap", underlying: middle)
+    XCTAssertEqual(
+      RNFBAppCheckRejectCodeMapper.rejectCode(for: outer), "provider-not-ready")
+  }
+
+  func testRejectCode_nonErrorUnderlying_stopsWalk() {
+    var userInfo: [String: Any] = ["code": "wrapped"]
+    userInfo[NSUnderlyingErrorKey] = "not-an-error"
+    let err = NSError(domain: domain, code: 1, userInfo: userInfo)
+    XCTAssertEqual(RNFBAppCheckRejectCodeMapper.rejectCode(for: err), "token-error")
+  }
+
+  func testRejectCode_underlyingWithoutProviderCode_returnsTokenError() {
+    let inner = error(code: "network")
+    let outer = error(code: nil, underlying: inner)
+    XCTAssertEqual(RNFBAppCheckRejectCodeMapper.rejectCode(for: outer), "token-error")
+  }
+}