@react-native-firebase/auth 23.8.6 → 23.8.8

package/CHANGELOG.md

@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [23.8.8](https://github.com/invertase/react-native-firebase/compare/v23.8.6...v23.8.8) (2026-03-12)
+
+### Bug Fixes
+
+- **auth, web:** avoid react-native-specific methods in web ([cef8fed](https://github.com/invertase/react-native-firebase/commit/cef8fed1bd6099f4b028c85fd70193394ba6328c))
+- **auth:** auto-register encoded app ID URL scheme for phone auth reCAPTCHA ([#8902](https://github.com/invertase/react-native-firebase/issues/8902)) ([b7f8772](https://github.com/invertase/react-native-firebase/commit/b7f8772ccdea706e939c678eeed70c0fae66a33b))
+- **messaging, expo:** retrieve expo-notification config if available, then deprecated notification ([#8663](https://github.com/invertase/react-native-firebase/issues/8663)) ([eb90301](https://github.com/invertase/react-native-firebase/commit/eb90301c49af807c4bd3eecadd9a67364c4a30a4))
+
+## [23.8.7](https://github.com/invertase/react-native-firebase/compare/v23.8.6...v23.8.7) (2026-03-12)
+
+### Bug Fixes
+
+- **auth, web:** avoid react-native-specific methods in web ([cef8fed](https://github.com/invertase/react-native-firebase/commit/cef8fed1bd6099f4b028c85fd70193394ba6328c))
+- **auth:** auto-register encoded app ID URL scheme for phone auth reCAPTCHA ([#8902](https://github.com/invertase/react-native-firebase/issues/8902)) ([b7f8772](https://github.com/invertase/react-native-firebase/commit/b7f8772ccdea706e939c678eeed70c0fae66a33b))
+- **messaging, expo:** retrieve expo-notification config if available, then deprecated notification ([#8663](https://github.com/invertase/react-native-firebase/issues/8663)) ([eb90301](https://github.com/invertase/react-native-firebase/commit/eb90301c49af807c4bd3eecadd9a67364c4a30a4))
+
 ## [23.8.6](https://github.com/invertase/react-native-firebase/compare/v23.8.5...v23.8.6) (2026-02-03)
 
 **Note:** Version bump only for package @react-native-firebase/auth

package/lib/version.js

@@ -1,2 +1,2 @@
 // Generated by genversion.
-module.exports = '23.8.6';
+module.exports = '23.8.8';

package/lib/web/RNFBAuthModule.js

@@ -1,3 +1,4 @@
+import { Platform } from 'react-native';
 import {
   getApp,
   initializeAuth,
@@ -263,9 +264,16 @@ function getCachedAuthInstance(appName) {
           '  await firebase.initializeApp({ ... });\n',
       );
     }
-    instances[appName] = initializeAuth(getApp(appName), {
-      persistence: getReactNativePersistence(getReactNativeAsyncStorageInternal()),
-    });
+
+    const authOptions = {};
+    if (Platform.OS !== 'web') {
+      // Non-web platforms pull the react-native export from package.json and
+      // get a bundle that defines `getReactNativePersistence` etc, but web platforms
+      // do *not* have that method defined. So we only call it for non-web platforms
+      authOptions.persistence = getReactNativePersistence(getReactNativeAsyncStorageInternal());
+    }
+
+    instances[appName] = initializeAuth(getApp(appName), authOptions);
   }
   return instances[appName];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@react-native-firebase/auth",
-  "version": "23.8.6",
+  "version": "23.8.8",
   "author": "Invertase <oss@invertase.io> (http://invertase.io)",
   "description": "React Native Firebase - The authentication module provides an easy-to-use API to integrate an authentication workflow into new and existing applications. React Native Firebase provides access to all Firebase authentication methods and identity providers.",
   "main": "lib/index.js",
@@ -27,12 +27,12 @@
     "plist": "^3.1.0"
   },
   "peerDependencies": {
-    "@react-native-firebase/app": "23.8.6",
+    "@react-native-firebase/app": "23.8.8",
     "expo": ">=47.0.0"
   },
   "devDependencies": {
     "@types/plist": "^3.0.5",
-    "expo": "^54.0.27"
+    "expo": "^55.0.5"
   },
   "peerDependenciesMeta": {
     "expo": {
@@ -43,5 +43,5 @@
     "access": "public",
     "provenance": true
   },
-  "gitHead": "9c71040bb28a0eb93c7f0b7bc9afce8d2c8d3cbb"
+  "gitHead": "d17b898bee0be82259fc1b88f46106a927bf81aa"
 }

package/plugin/build/ios/urlTypes.js

@@ -38,6 +38,21 @@ function reversedClientIDExists(googleServiceFilePath) {
         return false;
     }
 }
+// Derives the Encoded App ID from GOOGLE_APP_ID for reCAPTCHA URL scheme registration.
+// Firebase requires this scheme for phone auth / SMS MFA reCAPTCHA fallback on iOS.
+// See: https://firebase.google.com/docs/auth/ios/multi-factor#using_recaptcha_verification
+// Transformation: "1:123456789012:ios:abc123" -> "app-1-123456789012-ios-abc123"
+function getEncodedAppId(googleServiceFilePath) {
+    try {
+        const googleServicePlist = fs_1.default.readFileSync(googleServiceFilePath, 'utf8');
+        const googleServiceJson = plist_1.default.parse(googleServicePlist);
+        const GOOGLE_APP_ID = googleServiceJson.GOOGLE_APP_ID;
+        return 'app-' + GOOGLE_APP_ID.replace(/:/g, '-');
+    }
+    catch {
+        throw new Error('[@react-native-firebase/auth] Failed to parse your GoogleService-Info.plist. Are you sure it is a valid Info.Plist file with a GOOGLE_APP_ID field?');
+    }
+}
 // add phone auth support by configuring recaptcha
 // https://github.com/invertase/react-native-firebase/pull/6167
 function addUriScheme(config, reversedClientId) {
@@ -70,7 +85,19 @@ function setUrlTypesForCaptcha({ config, }) {
     }
     else {
         // eslint-disable-next-line no-console
-        console.warn('[@react-native-firebase/auth] REVERSED_CLIENT_ID field not found in GoogleServices-Info.plist. Google Sign-In requires this is - if you need Google Sign-In, enable it and re-download your plist file');
+        console.warn('[@react-native-firebase/auth] REVERSED_CLIENT_ID not found in GoogleService-Info.plist. This is required for Google Sign-In — if you need it, enable Google Sign-In in the Firebase console and re-download your plist. Phone auth reCAPTCHA will still work via the Encoded App ID scheme.');
+    }
+    // Always add the Encoded App ID derived from GOOGLE_APP_ID for phone auth reCAPTCHA fallback.
+    // Firebase requires this URL scheme on iOS when APNs is unavailable (e.g. Simulator).
+    // GOOGLE_APP_ID is always present in a valid GoogleService-Info.plist, so no warning needed here.
+    // See: https://firebase.google.com/docs/auth/ios/multi-factor#using_recaptcha_verification
+    try {
+        const encodedAppId = getEncodedAppId(googleServiceFilePath);
+        addUriScheme(config, encodedAppId);
+    }
+    catch {
+        // silently skip — a missing GOOGLE_APP_ID means the plist is malformed;
+        // the file-existence and parse checks above will have already surfaced the real problem.
     }
     return config;
 }

package/plugin/src/ios/urlTypes.ts

@@ -42,6 +42,23 @@ function reversedClientIDExists(googleServiceFilePath: string): boolean {
   }
 }
 
+// Derives the Encoded App ID from GOOGLE_APP_ID for reCAPTCHA URL scheme registration.
+// Firebase requires this scheme for phone auth / SMS MFA reCAPTCHA fallback on iOS.
+// See: https://firebase.google.com/docs/auth/ios/multi-factor#using_recaptcha_verification
+// Transformation: "1:123456789012:ios:abc123" -> "app-1-123456789012-ios-abc123"
+function getEncodedAppId(googleServiceFilePath: string): string {
+  try {
+    const googleServicePlist = fs.readFileSync(googleServiceFilePath, 'utf8');
+    const googleServiceJson = plist.parse(googleServicePlist) as { GOOGLE_APP_ID: string };
+    const GOOGLE_APP_ID = googleServiceJson.GOOGLE_APP_ID;
+    return 'app-' + GOOGLE_APP_ID.replace(/:/g, '-');
+  } catch {
+    throw new Error(
+      '[@react-native-firebase/auth] Failed to parse your GoogleService-Info.plist. Are you sure it is a valid Info.Plist file with a GOOGLE_APP_ID field?',
+    );
+  }
+}
+
 // add phone auth support by configuring recaptcha
 // https://github.com/invertase/react-native-firebase/pull/6167
 function addUriScheme(
@@ -97,9 +114,21 @@ export function setUrlTypesForCaptcha({
   } else {
     // eslint-disable-next-line no-console
     console.warn(
-      '[@react-native-firebase/auth] REVERSED_CLIENT_ID field not found in GoogleServices-Info.plist. Google Sign-In requires this is - if you need Google Sign-In, enable it and re-download your plist file',
+      '[@react-native-firebase/auth] REVERSED_CLIENT_ID not found in GoogleService-Info.plist. This is required for Google Sign-In — if you need it, enable Google Sign-In in the Firebase console and re-download your plist. Phone auth reCAPTCHA will still work via the Encoded App ID scheme.',
     );
   }
 
+  // Always add the Encoded App ID derived from GOOGLE_APP_ID for phone auth reCAPTCHA fallback.
+  // Firebase requires this URL scheme on iOS when APNs is unavailable (e.g. Simulator).
+  // GOOGLE_APP_ID is always present in a valid GoogleService-Info.plist, so no warning needed here.
+  // See: https://firebase.google.com/docs/auth/ios/multi-factor#using_recaptcha_verification
+  try {
+    const encodedAppId = getEncodedAppId(googleServiceFilePath);
+    addUriScheme(config, encodedAppId);
+  } catch {
+    // silently skip — a missing GOOGLE_APP_ID means the plist is malformed;
+    // the file-existence and parse checks above will have already surfaced the real problem.
+  }
+
   return config;
 }