@react-native-firebase/auth 26.4.0 → 27.0.0

package/lib/version.ts

@@ -1,2 +1,2 @@
 // Generated by genversion.
-export const version = '26.4.0';
+export const version = '27.0.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@react-native-firebase/auth",
-  "version": "26.4.0",
+  "version": "27.0.0",
   "author": "Invertase <oss@invertase.io> (http://invertase.io)",
   "description": "React Native Firebase - The authentication module provides an easy-to-use API to integrate an authentication workflow into new and existing applications. React Native Firebase provides access to all Firebase authentication methods and identity providers.",
   "main": "./dist/module/index.js",
@@ -47,11 +47,11 @@
     "@expo/plist": "^0.8.1"
   },
   "peerDependencies": {
-    "@react-native-firebase/app": "26.4.0",
+    "@react-native-firebase/app": "27.0.0",
     "expo": ">=47.0.0"
   },
   "devDependencies": {
-    "@react-native-firebase/app": "26.4.0",
+    "@react-native-firebase/app": "27.0.0",
     "expo": "^55.0.18",
     "react-native-builder-bob": "^0.40.13"
   },
@@ -102,5 +102,5 @@
     "node_modules/",
     "dist/"
   ],
-  "gitHead": "06701af5fdc19bae9f379567eadb29dfe81953c0"
+  "gitHead": "0c7e942bca361f1765abaf233bf447d795718eff"
 }

package/plugin/build/index.js

@@ -9,7 +9,11 @@ const withRnFirebaseAuth = (config, props) => {
     return (0, config_plugins_1.withPlugins)(config, [
         // iOS
         [ios_1.withIosCaptchaUrlTypes, props],
+        // The two openURL fixes are mutually exclusive and detect which applies at prebuild time:
+        // app-delegate life cycle patches `AppDelegate.swift`, UIScene life cycle (Expo SDK 58+)
+        // patches `SceneDelegate.swift`.
         [ios_1.withIosCaptchaOpenUrlFix, props],
+        [ios_1.withIosCaptchaSceneDelegateFix, props],
     ]);
 };
 const pak = require('@react-native-firebase/auth/package.json');

package/plugin/build/ios/index.d.ts

@@ -1,3 +1,4 @@
 import { withIosCaptchaUrlTypes } from './urlTypes';
 import { withIosCaptchaOpenUrlFix } from './openUrlFix';
-export { withIosCaptchaUrlTypes, withIosCaptchaOpenUrlFix };
+import { withIosCaptchaSceneDelegateFix } from './sceneDelegate';
+export { withIosCaptchaUrlTypes, withIosCaptchaOpenUrlFix, withIosCaptchaSceneDelegateFix };

package/plugin/build/ios/index.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.withIosCaptchaOpenUrlFix = exports.withIosCaptchaUrlTypes = void 0;
+exports.withIosCaptchaSceneDelegateFix = exports.withIosCaptchaOpenUrlFix = exports.withIosCaptchaUrlTypes = void 0;
 const urlTypes_1 = require("./urlTypes");
 Object.defineProperty(exports, "withIosCaptchaUrlTypes", { enumerable: true, get: function () { return urlTypes_1.withIosCaptchaUrlTypes; } });
 const openUrlFix_1 = require("./openUrlFix");
 Object.defineProperty(exports, "withIosCaptchaOpenUrlFix", { enumerable: true, get: function () { return openUrlFix_1.withIosCaptchaOpenUrlFix; } });
+const sceneDelegate_1 = require("./sceneDelegate");
+Object.defineProperty(exports, "withIosCaptchaSceneDelegateFix", { enumerable: true, get: function () { return sceneDelegate_1.withIosCaptchaSceneDelegateFix; } });

package/plugin/build/ios/openUrlFix.js

@@ -10,6 +10,7 @@ exports.isFirebaseSwizzlingDisabled = isFirebaseSwizzlingDisabled;
 exports.ensureFirebaseSwizzlingIsEnabled = ensureFirebaseSwizzlingIsEnabled;
 const config_plugins_1 = require("@expo/config-plugins");
 const generateCode_1 = require("@expo/config-plugins/build/utils/generateCode");
+const sceneLifecycle_1 = require("./sceneLifecycle");
 const withIosCaptchaOpenUrlFix = (config, props) => {
     // check configuration
     if (!shouldApplyIosOpenUrlFix({ config, props })) {
@@ -46,6 +47,17 @@ function withOpenUrlFixForAppDelegate({ config, props, }) {
     const configValue = props?.ios?.captchaOpenUrlFix || 'default';
     const newContents = modifyAppDelegate(contents, language);
     if (newContents === null) {
+        // Under the UIScene life cycle (Xcode 27+) UIKit stops calling `application(_:open:options:)` and the
+        // template drops the method. `withIosCaptchaSceneDelegateFix` patches `SceneDelegate.swift` instead.
+        const platformProjectRoot = config.modRequest.platformProjectRoot;
+        if ((0, sceneLifecycle_1.findSceneDelegateFile)(platformProjectRoot) !== null) {
+            return config;
+        }
+        if ((0, sceneLifecycle_1.infoPlistDeclaresSceneManifest)(platformProjectRoot)) {
+            // Scene life cycle declared but no SceneDelegate.swift to patch: neither plugin can apply the fix.
+            config_plugins_1.WarningAggregator.addWarningIOS('@react-native-firebase/auth', 'Skipping iOS openURL fix because Info.plist declares UIApplicationSceneManifest but no SceneDelegate.swift was found. Firebase Auth reCAPTCHA redirect URLs may be forwarded to your router.');
+            return config;
+        }
         if (configValue === true) {
             throw new Error("Failed to apply iOS openURL fix because no 'openURL' method was found");
         }

package/plugin/build/ios/sceneDelegate.d.ts

@@ -0,0 +1,34 @@
+import { ConfigPlugin } from '@expo/config-plugins';
+import { PluginConfigType } from '../pluginConfig';
+export declare const generatedTag = "@react-native-firebase/auth-openURL";
+/**
+ * Warm-path contract for the SceneDelegate reCAPTCHA patch.
+ *
+ * Firebase Auth presents reCAPTCHA in an in-app `SFSafariViewController` / auth session while the
+ * app is already running, then returns via a custom-scheme URL. Upstream documents and samples
+ * handle that return only in `scene(_:openURLContexts:)` (see Firebase phone-auth appendix and the
+ * Auth quickstart `SceneDelegate`); they do not route Auth reCAPTCHA through
+ * `scene(_:willConnectTo:options:)`. A cold start would also drop Auth's in-memory pending
+ * verification, so this plugin intentionally patches the warm path only.
+ */
+export declare const sceneDelegateWarmPathContract: {
+    readonly handlesOpenURLContexts: true;
+    readonly handlesWillConnectTo: false;
+    readonly evidence: readonly ["https://firebase.google.com/docs/auth/ios/phone-auth#appendix:-using-phone-sign-in-without-swizzling", "https://github.com/firebase/quickstart-ios/blob/main/authentication/AuthenticationExample/SceneDelegate.swift"];
+};
+export declare const sceneDelegateFirebaseAuthImport = "import FirebaseAuth";
+export declare const sceneDelegateOpenUrlBlock: string;
+/**
+ * Add an `openURLContexts` override that lets Firebase Auth handle reCAPTCHA redirects, then
+ * forwards only unhandled contexts to `super` (Expo Router / RCTLinkingManager).
+ *
+ * Returns the modified contents, or null when the patch does not apply (already present, or the
+ * file is not a recognizable `SceneDelegate` subclass).
+ */
+export declare function modifySceneDelegate(contents: string): string | null;
+/**
+ * Applies the reCAPTCHA `openURL` fix to `SceneDelegate.swift` on projects that use the UIScene
+ * life cycle. On projects that still use the app-delegate life cycle this is a no-op, the
+ * `withIosCaptchaOpenUrlFix` plugin handles those.
+ */
+export declare const withIosCaptchaSceneDelegateFix: ConfigPlugin<PluginConfigType>;

package/plugin/build/ios/sceneDelegate.js

@@ -0,0 +1,127 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withIosCaptchaSceneDelegateFix = exports.sceneDelegateOpenUrlBlock = exports.sceneDelegateFirebaseAuthImport = exports.sceneDelegateWarmPathContract = exports.generatedTag = void 0;
+exports.modifySceneDelegate = modifySceneDelegate;
+const config_plugins_1 = require("@expo/config-plugins");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const openUrlFix_1 = require("./openUrlFix");
+const sceneLifecycle_1 = require("./sceneLifecycle");
+exports.generatedTag = '@react-native-firebase/auth-openURL';
+/**
+ * Warm-path contract for the SceneDelegate reCAPTCHA patch.
+ *
+ * Firebase Auth presents reCAPTCHA in an in-app `SFSafariViewController` / auth session while the
+ * app is already running, then returns via a custom-scheme URL. Upstream documents and samples
+ * handle that return only in `scene(_:openURLContexts:)` (see Firebase phone-auth appendix and the
+ * Auth quickstart `SceneDelegate`); they do not route Auth reCAPTCHA through
+ * `scene(_:willConnectTo:options:)`. A cold start would also drop Auth's in-memory pending
+ * verification, so this plugin intentionally patches the warm path only.
+ */
+exports.sceneDelegateWarmPathContract = {
+    handlesOpenURLContexts: true,
+    handlesWillConnectTo: false,
+    evidence: [
+        'https://firebase.google.com/docs/auth/ios/phone-auth#appendix:-using-phone-sign-in-without-swizzling',
+        'https://github.com/firebase/quickstart-ios/blob/main/authentication/AuthenticationExample/SceneDelegate.swift',
+    ],
+};
+exports.sceneDelegateFirebaseAuthImport = 'import FirebaseAuth';
+exports.sceneDelegateOpenUrlBlock = `\
+// @generated begin ${exports.generatedTag} - expo prebuild (DO NOT MODIFY)
+  // Warm path only: Auth reCAPTCHA returns via openURLContexts while the app is running.
+  // Cold-start scene connection is intentionally not patched (see sceneDelegateWarmPathContract).
+  override func scene(_ scene: UIScene, openURLContexts URLContexts: Set<UIOpenURLContext>) {
+    // Let Firebase Auth handle owned URLs (reCAPTCHA); forward the rest to Expo / RCTLinkingManager.
+    let forwardedContexts = Set(URLContexts.filter { !Auth.auth().canHandle($0.url) })
+    guard !forwardedContexts.isEmpty else {
+      return
+    }
+    super.scene(scene, openURLContexts: forwardedContexts)
+  }
+// @generated end ${exports.generatedTag}\
+`;
+// Matches the opening brace of a `SceneDelegate` class declaration so the override can be inserted
+// as the first member.
+const sceneDelegateClassMatcher = /class\s+SceneDelegate\s*:[^\n{]*\{\n/;
+function ensureFirebaseAuthImport(contents) {
+    if (/^\s*import\s+FirebaseAuth\s*$/m.test(contents)) {
+        return contents;
+    }
+    const newline = contents.includes('\r\n') ? '\r\n' : '\n';
+    const expoImport = /^[ \t]*(?:internal\s+)?import\s+Expo[ \t]*$/m.exec(contents);
+    if (expoImport?.index !== undefined) {
+        const insertionPoint = expoImport.index + expoImport[0].length;
+        return `${contents.slice(0, insertionPoint)}${newline}${exports.sceneDelegateFirebaseAuthImport}${contents.slice(insertionPoint)}`;
+    }
+    const firstImport = /^[ \t]*import\b[^\r\n]*$/m.exec(contents);
+    if (firstImport?.index !== undefined) {
+        return `${contents.slice(0, firstImport.index)}${exports.sceneDelegateFirebaseAuthImport}${newline}${contents.slice(firstImport.index)}`;
+    }
+    return `${exports.sceneDelegateFirebaseAuthImport}${newline}${contents}`;
+}
+/**
+ * Add an `openURLContexts` override that lets Firebase Auth handle reCAPTCHA redirects, then
+ * forwards only unhandled contexts to `super` (Expo Router / RCTLinkingManager).
+ *
+ * Returns the modified contents, or null when the patch does not apply (already present, or the
+ * file is not a recognizable `SceneDelegate` subclass).
+ */
+function modifySceneDelegate(contents) {
+    if (contents.includes(exports.generatedTag)) {
+        return null;
+    }
+    const match = contents.match(sceneDelegateClassMatcher);
+    if (!match || match.index === undefined) {
+        return null;
+    }
+    const withImport = ensureFirebaseAuthImport(contents);
+    // Re-match after import insertion — the class body offset can shift.
+    const rematch = withImport.match(sceneDelegateClassMatcher);
+    if (!rematch || rematch.index === undefined) {
+        return null;
+    }
+    const insertionPoint = rematch.index + rematch[0].length;
+    return `${withImport.slice(0, insertionPoint)}${exports.sceneDelegateOpenUrlBlock}\n${withImport.slice(insertionPoint)}`;
+}
+/**
+ * Applies the reCAPTCHA `openURL` fix to `SceneDelegate.swift` on projects that use the UIScene
+ * life cycle. On projects that still use the app-delegate life cycle this is a no-op, the
+ * `withIosCaptchaOpenUrlFix` plugin handles those.
+ */
+const withIosCaptchaSceneDelegateFix = (config, props) => {
+    if (!(0, openUrlFix_1.shouldApplyIosOpenUrlFix)({ config, props })) {
+        return config;
+    }
+    return (0, config_plugins_1.withDangerousMod)(config, [
+        'ios',
+        async (config) => {
+            const resolution = (0, sceneLifecycle_1.resolveSceneDelegateFile)(config.modRequest.platformProjectRoot);
+            if (resolution.kind === 'missing') {
+                return config;
+            }
+            if (resolution.kind === 'ambiguous') {
+                config_plugins_1.WarningAggregator.addWarningIOS('@react-native-firebase/auth', `Skipping iOS openURL fix because multiple SceneDelegate.swift files were found and none is uniquely co-located with AppDelegate (${resolution.candidates
+                    .map(candidate => path_1.default.relative(config.modRequest.platformProjectRoot, candidate))
+                    .join(', ')}). Firebase Auth reCAPTCHA redirect URLs may be forwarded to your router.`);
+                return config;
+            }
+            const sceneDelegatePath = resolution.path;
+            const contents = await fs_1.default.promises.readFile(sceneDelegatePath, 'utf-8');
+            const newContents = modifySceneDelegate(contents);
+            if (newContents === null) {
+                // Already patched is the common case and needs no warning; an unrecognized shape does.
+                if (!contents.includes(exports.generatedTag)) {
+                    config_plugins_1.WarningAggregator.addWarningIOS('@react-native-firebase/auth', `Skipping iOS openURL fix because ${path_1.default.basename(sceneDelegatePath)} is not a recognizable SceneDelegate subclass. Firebase Auth reCAPTCHA redirect URLs may be forwarded to your router.`);
+                }
+                return config;
+            }
+            await fs_1.default.promises.writeFile(sceneDelegatePath, newContents);
+            return config;
+        },
+    ]);
+};
+exports.withIosCaptchaSceneDelegateFix = withIosCaptchaSceneDelegateFix;

package/plugin/build/ios/sceneLifecycle.d.ts

@@ -0,0 +1,32 @@
+export type SceneDelegateResolution = {
+    kind: 'found';
+    path: string;
+} | {
+    kind: 'missing';
+} | {
+    kind: 'ambiguous';
+    candidates: string[];
+};
+/**
+ * Resolve the application target's `SceneDelegate.swift` deterministically.
+ *
+ * - Zero candidates → missing.
+ * - Exactly one candidate → that file (Expo nested layout or bare-expo `ios/` root).
+ * - Multiple candidates → prefer the one co-located with an `AppDelegate.*`; if that is not
+ *   unique, reject as ambiguous rather than patching a distractor (extension / secondary target).
+ */
+export declare function resolveSceneDelegateFile(platformProjectRoot: string): SceneDelegateResolution;
+/**
+ * Locate the app's `SceneDelegate.swift`, or `null` when none exists or resolution is ambiguous.
+ *
+ * Expo SDK 58 writes it next to `AppDelegate.swift` (`ios/<ProjectName>/SceneDelegate.swift`), but
+ * `apps/bare-expo` keeps it at `ios/SceneDelegate.swift`, so search rather than assume a layout.
+ */
+export declare function findSceneDelegateFile(platformProjectRoot: string): string | null;
+/**
+ * Detect a `UIApplicationSceneManifest` entry in the app's `Info.plist`.
+ *
+ * Independent of `findSceneDelegateFile`: a project can declare the scene life cycle without shipping
+ * a `SceneDelegate.swift` the plugin can patch, and callers need to tell the two cases apart.
+ */
+export declare function infoPlistDeclaresSceneManifest(platformProjectRoot: string): boolean;

package/plugin/build/ios/sceneLifecycle.js

@@ -0,0 +1,115 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSceneDelegateFile = resolveSceneDelegateFile;
+exports.findSceneDelegateFile = findSceneDelegateFile;
+exports.infoPlistDeclaresSceneManifest = infoPlistDeclaresSceneManifest;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+// Directories that never contain the app's own scene delegate but are expensive to walk.
+const IGNORED_DIRECTORIES = new Set(['Pods', 'build', 'node_modules', 'DerivedData', '.git']);
+const APP_DELEGATE_NAMES = new Set(['AppDelegate.swift', 'AppDelegate.m', 'AppDelegate.mm']);
+/**
+ * Walk `platformProjectRoot` (typically `ios/`) and collect matching file paths, skipping
+ * CocoaPods / build / Xcode bundle trees.
+ */
+function collectFilesNamed(platformProjectRoot, fileNamePredicate) {
+    if (!platformProjectRoot || !fs_1.default.existsSync(platformProjectRoot)) {
+        return [];
+    }
+    const matches = [];
+    const queue = [platformProjectRoot];
+    while (queue.length > 0) {
+        const directory = queue.shift();
+        let entries;
+        try {
+            entries = fs_1.default.readdirSync(directory, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            const entryPath = path_1.default.join(directory, entry.name);
+            if (entry.isDirectory()) {
+                if (!IGNORED_DIRECTORIES.has(entry.name) &&
+                    !entry.name.endsWith('.xcodeproj') &&
+                    !entry.name.endsWith('.xcworkspace')) {
+                    queue.push(entryPath);
+                }
+            }
+            else if (fileNamePredicate(entry.name)) {
+                matches.push(entryPath);
+            }
+        }
+    }
+    return matches.sort();
+}
+/**
+ * Resolve the application target's `SceneDelegate.swift` deterministically.
+ *
+ * - Zero candidates → missing.
+ * - Exactly one candidate → that file (Expo nested layout or bare-expo `ios/` root).
+ * - Multiple candidates → prefer the one co-located with an `AppDelegate.*`; if that is not
+ *   unique, reject as ambiguous rather than patching a distractor (extension / secondary target).
+ */
+function resolveSceneDelegateFile(platformProjectRoot) {
+    const candidates = collectFilesNamed(platformProjectRoot, name => name === 'SceneDelegate.swift');
+    if (candidates.length === 0) {
+        return { kind: 'missing' };
+    }
+    if (candidates.length === 1) {
+        return { kind: 'found', path: candidates[0] };
+    }
+    const appDelegateDirs = new Set(collectFilesNamed(platformProjectRoot, name => APP_DELEGATE_NAMES.has(name)).map(p => path_1.default.dirname(p)));
+    const coLocated = candidates.filter(candidate => appDelegateDirs.has(path_1.default.dirname(candidate)));
+    if (coLocated.length === 1) {
+        return { kind: 'found', path: coLocated[0] };
+    }
+    return { kind: 'ambiguous', candidates };
+}
+/**
+ * Locate the app's `SceneDelegate.swift`, or `null` when none exists or resolution is ambiguous.
+ *
+ * Expo SDK 58 writes it next to `AppDelegate.swift` (`ios/<ProjectName>/SceneDelegate.swift`), but
+ * `apps/bare-expo` keeps it at `ios/SceneDelegate.swift`, so search rather than assume a layout.
+ */
+function findSceneDelegateFile(platformProjectRoot) {
+    const resolution = resolveSceneDelegateFile(platformProjectRoot);
+    return resolution.kind === 'found' ? resolution.path : null;
+}
+/**
+ * Detect a `UIApplicationSceneManifest` entry in the app's `Info.plist`.
+ *
+ * Independent of `findSceneDelegateFile`: a project can declare the scene life cycle without shipping
+ * a `SceneDelegate.swift` the plugin can patch, and callers need to tell the two cases apart.
+ */
+function infoPlistDeclaresSceneManifest(platformProjectRoot) {
+    if (!platformProjectRoot) {
+        return false;
+    }
+    let entries;
+    try {
+        entries = fs_1.default.readdirSync(platformProjectRoot, { withFileTypes: true });
+    }
+    catch {
+        return false;
+    }
+    for (const entry of entries) {
+        if (!entry.isDirectory() || IGNORED_DIRECTORIES.has(entry.name)) {
+            continue;
+        }
+        const infoPlist = path_1.default.join(platformProjectRoot, entry.name, 'Info.plist');
+        try {
+            if (fs_1.default.existsSync(infoPlist) &&
+                fs_1.default.readFileSync(infoPlist, 'utf-8').includes('UIApplicationSceneManifest')) {
+                return true;
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return false;
+}

package/plugin/src/index.ts

@@ -1,6 +1,10 @@
 import { ConfigPlugin, withPlugins, createRunOncePlugin } from '@expo/config-plugins';
 
-import { withIosCaptchaUrlTypes, withIosCaptchaOpenUrlFix } from './ios';
+import {
+  withIosCaptchaUrlTypes,
+  withIosCaptchaOpenUrlFix,
+  withIosCaptchaSceneDelegateFix,
+} from './ios';
 import { PluginConfigType } from './pluginConfig';
 
 /**
@@ -10,7 +14,11 @@ const withRnFirebaseAuth: ConfigPlugin<PluginConfigType> = (config, props) => {
   return withPlugins(config, [
     // iOS
     [withIosCaptchaUrlTypes, props],
+    // The two openURL fixes are mutually exclusive and detect which applies at prebuild time:
+    // app-delegate life cycle patches `AppDelegate.swift`, UIScene life cycle (Expo SDK 58+)
+    // patches `SceneDelegate.swift`.
     [withIosCaptchaOpenUrlFix, props],
+    [withIosCaptchaSceneDelegateFix, props],
   ]);
 };
 

package/plugin/src/ios/index.ts

@@ -1,4 +1,5 @@
 import { withIosCaptchaUrlTypes } from './urlTypes';
 import { withIosCaptchaOpenUrlFix } from './openUrlFix';
+import { withIosCaptchaSceneDelegateFix } from './sceneDelegate';
 
-export { withIosCaptchaUrlTypes, withIosCaptchaOpenUrlFix };
+export { withIosCaptchaUrlTypes, withIosCaptchaOpenUrlFix, withIosCaptchaSceneDelegateFix };

package/plugin/src/ios/openUrlFix.ts

@@ -10,6 +10,7 @@ import type { AppDelegateProjectFile } from '@expo/config-plugins/build/ios/Path
 import type { InfoPlist } from '@expo/config-plugins/build/ios/IosConfig.types';
 import { mergeContents } from '@expo/config-plugins/build/utils/generateCode';
 import { PluginConfigType } from '../pluginConfig';
+import { findSceneDelegateFile, infoPlistDeclaresSceneManifest } from './sceneLifecycle';
 
 export const withIosCaptchaOpenUrlFix: ConfigPlugin<PluginConfigType> = (
   config: ExpoConfig,
@@ -64,6 +65,20 @@ export function withOpenUrlFixForAppDelegate({
 
   const newContents = modifyAppDelegate(contents, language);
   if (newContents === null) {
+    // Under the UIScene life cycle (Xcode 27+) UIKit stops calling `application(_:open:options:)` and the
+    // template drops the method. `withIosCaptchaSceneDelegateFix` patches `SceneDelegate.swift` instead.
+    const platformProjectRoot = config.modRequest.platformProjectRoot;
+    if (findSceneDelegateFile(platformProjectRoot) !== null) {
+      return config;
+    }
+    if (infoPlistDeclaresSceneManifest(platformProjectRoot)) {
+      // Scene life cycle declared but no SceneDelegate.swift to patch: neither plugin can apply the fix.
+      WarningAggregator.addWarningIOS(
+        '@react-native-firebase/auth',
+        'Skipping iOS openURL fix because Info.plist declares UIApplicationSceneManifest but no SceneDelegate.swift was found. Firebase Auth reCAPTCHA redirect URLs may be forwarded to your router.',
+      );
+      return config;
+    }
     if (configValue === true) {
       throw new Error("Failed to apply iOS openURL fix because no 'openURL' method was found");
     } else {

package/plugin/src/ios/sceneDelegate.ts

@@ -0,0 +1,159 @@
+import { ConfigPlugin, WarningAggregator, withDangerousMod } from '@expo/config-plugins';
+import type { ExpoConfig } from '@expo/config/build/Config.types';
+import fs from 'fs';
+import path from 'path';
+
+import { PluginConfigType } from '../pluginConfig';
+import { shouldApplyIosOpenUrlFix } from './openUrlFix';
+import { resolveSceneDelegateFile } from './sceneLifecycle';
+
+export const generatedTag = '@react-native-firebase/auth-openURL';
+
+/**
+ * Warm-path contract for the SceneDelegate reCAPTCHA patch.
+ *
+ * Firebase Auth presents reCAPTCHA in an in-app `SFSafariViewController` / auth session while the
+ * app is already running, then returns via a custom-scheme URL. Upstream documents and samples
+ * handle that return only in `scene(_:openURLContexts:)` (see Firebase phone-auth appendix and the
+ * Auth quickstart `SceneDelegate`); they do not route Auth reCAPTCHA through
+ * `scene(_:willConnectTo:options:)`. A cold start would also drop Auth's in-memory pending
+ * verification, so this plugin intentionally patches the warm path only.
+ */
+export const sceneDelegateWarmPathContract = {
+  handlesOpenURLContexts: true,
+  handlesWillConnectTo: false,
+  evidence: [
+    'https://firebase.google.com/docs/auth/ios/phone-auth#appendix:-using-phone-sign-in-without-swizzling',
+    'https://github.com/firebase/quickstart-ios/blob/main/authentication/AuthenticationExample/SceneDelegate.swift',
+  ],
+} as const;
+
+export const sceneDelegateFirebaseAuthImport = 'import FirebaseAuth';
+
+export const sceneDelegateOpenUrlBlock: string = `\
+// @generated begin ${generatedTag} - expo prebuild (DO NOT MODIFY)
+  // Warm path only: Auth reCAPTCHA returns via openURLContexts while the app is running.
+  // Cold-start scene connection is intentionally not patched (see sceneDelegateWarmPathContract).
+  override func scene(_ scene: UIScene, openURLContexts URLContexts: Set<UIOpenURLContext>) {
+    // Let Firebase Auth handle owned URLs (reCAPTCHA); forward the rest to Expo / RCTLinkingManager.
+    let forwardedContexts = Set(URLContexts.filter { !Auth.auth().canHandle($0.url) })
+    guard !forwardedContexts.isEmpty else {
+      return
+    }
+    super.scene(scene, openURLContexts: forwardedContexts)
+  }
+// @generated end ${generatedTag}\
+`;
+
+// Matches the opening brace of a `SceneDelegate` class declaration so the override can be inserted
+// as the first member.
+const sceneDelegateClassMatcher = /class\s+SceneDelegate\s*:[^\n{]*\{\n/;
+
+function ensureFirebaseAuthImport(contents: string): string {
+  if (/^\s*import\s+FirebaseAuth\s*$/m.test(contents)) {
+    return contents;
+  }
+
+  const newline = contents.includes('\r\n') ? '\r\n' : '\n';
+  const expoImport = /^[ \t]*(?:internal\s+)?import\s+Expo[ \t]*$/m.exec(contents);
+  if (expoImport?.index !== undefined) {
+    const insertionPoint = expoImport.index + expoImport[0].length;
+    return `${contents.slice(0, insertionPoint)}${newline}${sceneDelegateFirebaseAuthImport}${contents.slice(
+      insertionPoint,
+    )}`;
+  }
+
+  const firstImport = /^[ \t]*import\b[^\r\n]*$/m.exec(contents);
+  if (firstImport?.index !== undefined) {
+    return `${contents.slice(0, firstImport.index)}${sceneDelegateFirebaseAuthImport}${newline}${contents.slice(
+      firstImport.index,
+    )}`;
+  }
+
+  return `${sceneDelegateFirebaseAuthImport}${newline}${contents}`;
+}
+
+/**
+ * Add an `openURLContexts` override that lets Firebase Auth handle reCAPTCHA redirects, then
+ * forwards only unhandled contexts to `super` (Expo Router / RCTLinkingManager).
+ *
+ * Returns the modified contents, or null when the patch does not apply (already present, or the
+ * file is not a recognizable `SceneDelegate` subclass).
+ */
+export function modifySceneDelegate(contents: string): string | null {
+  if (contents.includes(generatedTag)) {
+    return null;
+  }
+
+  const match = contents.match(sceneDelegateClassMatcher);
+  if (!match || match.index === undefined) {
+    return null;
+  }
+
+  const withImport = ensureFirebaseAuthImport(contents);
+  // Re-match after import insertion — the class body offset can shift.
+  const rematch = withImport.match(sceneDelegateClassMatcher);
+  if (!rematch || rematch.index === undefined) {
+    return null;
+  }
+
+  const insertionPoint = rematch.index + rematch[0].length;
+  return `${withImport.slice(0, insertionPoint)}${sceneDelegateOpenUrlBlock}\n${withImport.slice(
+    insertionPoint,
+  )}`;
+}
+
+/**
+ * Applies the reCAPTCHA `openURL` fix to `SceneDelegate.swift` on projects that use the UIScene
+ * life cycle. On projects that still use the app-delegate life cycle this is a no-op, the
+ * `withIosCaptchaOpenUrlFix` plugin handles those.
+ */
+export const withIosCaptchaSceneDelegateFix: ConfigPlugin<PluginConfigType> = (
+  config: ExpoConfig,
+  props?: PluginConfigType,
+) => {
+  if (!shouldApplyIosOpenUrlFix({ config, props })) {
+    return config;
+  }
+
+  return withDangerousMod(config, [
+    'ios',
+    async config => {
+      const resolution = resolveSceneDelegateFile(config.modRequest.platformProjectRoot);
+
+      if (resolution.kind === 'missing') {
+        return config;
+      }
+
+      if (resolution.kind === 'ambiguous') {
+        WarningAggregator.addWarningIOS(
+          '@react-native-firebase/auth',
+          `Skipping iOS openURL fix because multiple SceneDelegate.swift files were found and none is uniquely co-located with AppDelegate (${resolution.candidates
+            .map(candidate => path.relative(config.modRequest.platformProjectRoot, candidate))
+            .join(', ')}). Firebase Auth reCAPTCHA redirect URLs may be forwarded to your router.`,
+        );
+        return config;
+      }
+
+      const sceneDelegatePath = resolution.path;
+      const contents = await fs.promises.readFile(sceneDelegatePath, 'utf-8');
+      const newContents = modifySceneDelegate(contents);
+
+      if (newContents === null) {
+        // Already patched is the common case and needs no warning; an unrecognized shape does.
+        if (!contents.includes(generatedTag)) {
+          WarningAggregator.addWarningIOS(
+            '@react-native-firebase/auth',
+            `Skipping iOS openURL fix because ${path.basename(
+              sceneDelegatePath,
+            )} is not a recognizable SceneDelegate subclass. Firebase Auth reCAPTCHA redirect URLs may be forwarded to your router.`,
+          );
+        }
+        return config;
+      }
+
+      await fs.promises.writeFile(sceneDelegatePath, newContents);
+      return config;
+    },
+  ]);
+};