@rebasepro/client-firebase 0.2.3 → 0.2.5

package/dist/components/RebaseFirebaseApp.d.ts

@@ -16,4 +16,4 @@ import { RebaseFirebaseAppProps } from "./RebaseFirebaseAppProps";
 
  * @category Firebase
  */
-export declare function RebaseFirebaseApp({ name, logo, logoDark, authenticator, collections, views, adminViews, textSearchControllerBuilder, allowSkipLogin, signInOptions, firebaseConfig, onFirebaseInit, appCheckOptions, dateTimeFormat, locale, basePath, baseCollectionPath, onAnalyticsEvent, propertyConfigs: propertyConfigsProp, plugins, autoOpenDrawer, firestoreIndexesBuilder, components, localTextSearchEnabled, userManagement }: RebaseFirebaseAppProps): import("react/jsx-runtime").JSX.Element;
+export declare function RebaseFirebaseApp({ name, logo, logoDark, accessGate, collections, views, adminViews, textSearchControllerBuilder, allowSkipLogin, signInOptions, firebaseConfig, onFirebaseInit, appCheckOptions, dateTimeFormat, locale, basePath, baseCollectionPath, onAnalyticsEvent, propertyConfigs: propertyConfigsProp, plugins, autoOpenDrawer, firestoreIndexesBuilder, components, localTextSearchEnabled, userManagement }: RebaseFirebaseAppProps): import("react/jsx-runtime").JSX.Element;

package/dist/components/RebaseFirebaseAppProps.d.ts

@@ -1,5 +1,6 @@
 import React from "react";
-import { Authenticator, AnalyticsEvent, AppView, AppViewsBuilder, EntityCollection, EntityCollectionsBuilder, RebasePlugin, Locale, PropertyConfig } from "@rebasepro/types";
+import { AnalyticsEvent, AppView, AppViewsBuilder, EntityCollection, EntityCollectionsBuilder, RebasePlugin, Locale, PropertyConfig } from "@rebasepro/types";
+import { FirebaseAccessGate } from "../hooks/useFirebaseAccessGate";
 import { UserManagementDelegate } from "@rebasepro/types";
 import { FirebaseApp } from "@firebase/app";
 import { FirebaseLoginViewProps } from "./FirebaseLoginView";
@@ -48,12 +49,12 @@ export type RebaseFirebaseAppProps = {
     propertyConfigs?: PropertyConfig[];
     /**
      * Do the users need to log in to access the CMS.
-     * You can specify an Authenticator function to discriminate which users can
-     * access the CMS or not.
+     * You can specify a {@link FirebaseAccessGate} function to discriminate
+     * which users can access the CMS or not.
      * If not specified, authentication is enabled but no user restrictions
      * apply
      */
-    authenticator?: boolean | Authenticator<FirebaseUserWrapper>;
+    accessGate?: boolean | FirebaseAccessGate<FirebaseUserWrapper>;
     /**
      * List of sign in options that will be displayed in the login
      * view if `authentication` is enabled. You can pass Firebase providers strings,

package/dist/hooks/index.d.ts

@@ -6,3 +6,4 @@ export * from "./useFirestoreDriver";
 export * from "./useFirebaseRealTimeDBDelegate";
 export * from "./useRecaptcha";
 export * from "./useBuildUserManagement";
+export * from "./useFirebaseAccessGate";

package/dist/hooks/useAppCheck.d.ts

@@ -10,7 +10,7 @@ export interface InitializeAppCheckProps {
 export interface InitializeAppCheckResult {
     loading: boolean;
     appCheckVerified?: boolean;
-    error?: any;
+    error?: unknown;
 }
 /**
  * Function used to initialise Firebase App Check.

package/dist/hooks/useBuildUserManagement.d.ts

@@ -1,5 +1,10 @@
-import { AuthController, DataDriver, Role, User, UserManagementDelegate } from "@rebasepro/types";
-export interface UserManagementDelegateParams<CONTROLLER extends AuthController<any> = AuthController<any>> {
+import { AuthController, DataDriver, User, UserManagementDelegate } from "@rebasepro/types";
+export interface Role {
+    id: string;
+    name: string;
+    isAdmin?: boolean;
+}
+export interface UserManagementDelegateParams<CONTROLLER extends AuthController<User> = AuthController<User>> {
     authController: CONTROLLER;
     /**
      * The delegate in charge of persisting the data.
@@ -27,10 +32,6 @@ export interface UserManagementDelegateParams<CONTROLLER extends AuthController<
      * If there are no roles in the database, provide a button to create the default roles.
      */
     allowDefaultRolesCreation?: boolean;
-    /**
-     * Include the collection config permissions in the user management system.
-     */
-    includeCollectionConfigPermissions?: boolean;
 }
 /**
  * This hook is used to build a user management object that can be used to
@@ -41,6 +42,5 @@ export interface UserManagementDelegateParams<CONTROLLER extends AuthController<
  * @param rolesPath
  * @param roles
  * @param allowDefaultRolesCreation
- * @param includeCollectionConfigPermissions
  */
-export declare function useBuildUserManagement<CONTROLLER extends AuthController<any> = AuthController<any>, USER extends User = CONTROLLER extends AuthController<infer U> ? U : any>({ authController, dataSourceDelegate, roles: rolesProp, usersPath, rolesPath, allowDefaultRolesCreation, includeCollectionConfigPermissions }: UserManagementDelegateParams<CONTROLLER>): UserManagementDelegate<USER> & CONTROLLER;
+export declare function useBuildUserManagement<CONTROLLER extends AuthController<User> = AuthController<User>, USER extends User = CONTROLLER extends AuthController<infer U> ? U : User>({ authController, dataSourceDelegate, roles: rolesProp, usersPath, rolesPath, allowDefaultRolesCreation }: UserManagementDelegateParams<CONTROLLER>): UserManagementDelegate<USER> & CONTROLLER;

package/dist/hooks/useFirebaseAccessGate.d.ts

@@ -0,0 +1,44 @@
+import { AuthController, RebaseData, StorageSource, User } from "@rebasepro/types";
+/**
+ * Client-side gate that decides whether a Firebase-authenticated user
+ * is allowed to access the CMS UI.
+ *
+ * Return `true` to allow access or `false` / throw to deny.
+ * @group Firebase
+ */
+export type FirebaseAccessGate<USER extends User = User> = (props: {
+    /**
+     * Logged-in user or null
+     */
+    user: USER | null;
+    /**
+     * AuthController
+     */
+    authController: AuthController<USER>;
+    /**
+     * Unified data access API
+     */
+    data: RebaseData;
+    /**
+     * Used storage implementation
+     */
+    storageSource: StorageSource;
+}) => boolean | Promise<boolean>;
+/**
+ * Hook that evaluates a {@link FirebaseAccessGate} callback after
+ * the user logs in and gates access to the main CMS view.
+ *
+ * @group Firebase
+ */
+export declare function useFirebaseAccessGate<USER extends User = User>({ disabled, authController, accessGate, storageSource, data }: {
+    disabled?: boolean;
+    authController: AuthController<USER>;
+    accessGate?: boolean | FirebaseAccessGate<USER>;
+    data: RebaseData;
+    storageSource: StorageSource;
+}): {
+    canAccessMainView: boolean;
+    authLoading: boolean;
+    notAllowedError: unknown;
+    authVerified: boolean;
+};

package/dist/hooks/useFirebaseAuthController.d.ts

@@ -1,12 +1,12 @@
 import { FirebaseApp } from "@firebase/app";
 import { FirebaseAuthController, FirebaseSignInOption, FirebaseSignInProvider, FirebaseUserWrapper } from "../types";
-import { Role, User } from "@rebasepro/types";
+import type { User } from "@rebasepro/types";
 export interface FirebaseAuthControllerProps {
     loading?: boolean;
     firebaseApp?: FirebaseApp;
     signInOptions?: Array<FirebaseSignInProvider | FirebaseSignInOption>;
     onSignOut?: () => void;
-    defineRolesFor?: (user: User) => Promise<Role[] | undefined> | Role[] | undefined;
+    defineRolesFor?: (user: User) => Promise<string[] | undefined> | string[] | undefined;
 }
 /**
  * Use this hook to build an {@link AuthController} based on Firebase Auth

package/dist/hooks/useFirestoreDriver.d.ts

@@ -52,5 +52,5 @@ export declare function useFirestoreDriver({ firebaseApp, textSearchControllerBu
  * @param data
  * @group Firestore
  */
-export declare function firestoreToCMSModel(data: any): any;
-export declare function cmsToFirestoreModel(data: any, firestore: Firestore, inArray?: boolean): any;
+export declare function firestoreToCMSModel(data: unknown): unknown;
+export declare function cmsToFirestoreModel(data: unknown, firestore: Firestore, inArray?: boolean): unknown;

package/dist/index.es.js

@@ -13,7 +13,7 @@ import { c } from "react-compiler-runtime";
 import { getDatabase, query as query$1, ref as ref$1, orderByKey, startAt, limitToFirst, get, onValue, push, set, remove, orderByChild } from "@firebase/database";
 import { removeUndefined } from "@rebasepro/utils";
 import { jsx, Fragment, jsxs } from "react/jsx-runtime";
-import { useModeController, ErrorView, useSnackbarController, RebaseLogo, useBrowserTitleAndIcon, useBuildModeController, useBuildAdminModeController, useBuildLocalConfigurationPersistence, useValidateAuthenticator, RebaseRoutes, Rebase, AdminModeControllerProvider, SnackbarProvider, ModeControllerProvider } from "@rebasepro/core";
+import { useModeController, ErrorView, useSnackbarController, RebaseLogo, useBrowserTitleAndIcon, useBuildModeController, useBuildAdminModeController, useBuildLocalConfigurationPersistence, RebaseRoutes, Rebase, AdminModeControllerProvider, SnackbarProvider, ModeControllerProvider } from "@rebasepro/core";
 import { useBuildCollectionRegistryController, useBuildUrlController, useBuildNavigationStateController, NavigationStateContext, UrlContext, CollectionRegistryContext, SideEntityProvider, RebaseRoute, Scaffold, AppBar, Drawer, SideDialogs } from "@rebasepro/admin";
 import { MailIcon, iconSize, PhoneIcon, UserIcon, Button, cls, IconButton, ArrowLeftIcon, Typography, TextField, CircularProgress, LoadingButton, CircularProgressCenter, CenteredView } from "@rebasepro/ui";
 import { Navigate, Route, Outlet } from "react-router-dom";
@@ -34,9 +34,7 @@ const useFirebaseAuthController = ({
   const [userRoles, _setUserRoles] = useState();
   const [extra, setExtra] = useState();
   const setUserRoles = useCallback((roles) => {
-    const currentRoleIds = userRoles?.map((r) => r.id);
-    const newRoleIds = roles?.map((r_0) => r_0.id);
-    if (!deepEqual(currentRoleIds, newRoleIds)) {
+    if (!deepEqual(userRoles, roles)) {
       _setUserRoles(roles);
     }
   }, [userRoles]);
@@ -224,8 +222,7 @@ const useFirebaseAuthController = ({
   }, []);
   const firebaseUserWrapper = loggedUser ? {
     ...loggedUser,
-    roles: userRoles?.map((r_1) => r_1.id),
-    // User.roles is string[], keep Role[] internally only
+    roles: userRoles,
     firebaseUser: loggedUser
   } : null;
   return {
@@ -351,7 +348,7 @@ function useFirebaseStorageSource({
         const blob = await response.blob();
         return new File([blob], path);
       } catch (e) {
-        if (e?.code === "storage/object-not-found") return null;
+        if (typeof e === "object" && e !== null && "code" in e && e.code === "storage/object-not-found") return null;
         throw e;
       }
     },
@@ -383,7 +380,7 @@ function useFirebaseStorageSource({
         urlsCache[storagePathOrUrl] = result;
         return result;
       } catch (e) {
-        if (e?.code === "storage/object-not-found") return {
+        if (typeof e === "object" && e !== null && "code" in e && e.code === "storage/object-not-found") return {
           url: null,
           fileNotFound: true
         };
@@ -442,7 +439,7 @@ function useInitialiseFirebase({
       setFirebaseApp(initialisedFirebaseApp);
     } catch (e) {
       console.error("Error initialising Firebase", e);
-      setConfigError(hostingError + "\n" + (e.message ?? JSON.stringify(e)));
+      setConfigError(hostingError + "\n" + (e instanceof Error ? e.message : JSON.stringify(e)));
     }
   }, [name]);
   useEffect(() => {
@@ -511,7 +508,7 @@ function useAppCheck({
       }
     } catch (e) {
       console.error("App Check error:", e);
-      setError(e.message);
+      setError(e instanceof Error ? e.message : String(e));
     }
   }, [options?.forceRefresh]);
   useEffect(() => {
@@ -867,7 +864,7 @@ function buildRebaseSearchController(options) {
           }
         } catch (error) {
           console.error("Failed to get search config from extension:", error);
-          throw new Error(`Failed to initialize Rebase Search. Make sure the rebase-search extension is installed and configured. Error: ${error.message || error}`);
+          throw new Error(`Failed to initialize Rebase Search. Make sure the rebase-search extension is installed and configured. Error: ${error instanceof Error ? error.message : String(error)}`);
         }
       }
       if (!searchConfig) {
@@ -948,7 +945,7 @@ function buildRebaseSearchController(options) {
         schemaCache.set(collectionName, stringFields);
         return stringFields;
       } catch (error) {
-        if (error.httpStatus === 404) {
+        if (error instanceof Error && "httpStatus" in error && error.httpStatus === 404) {
           throw new Error(`Collection "${collectionName}" not found in Typesense. Make sure the collection has been indexed. Try running the backfill function.`);
         }
         throw error;
@@ -988,7 +985,7 @@ function buildRebaseSearchController(options) {
         const ids = result.hits?.map((hit) => hit.document.id) ?? [];
         return ids;
       } catch (error) {
-        const message = error.message || error.toString();
+        const message = error instanceof Error ? error.message : String(error);
         throw new Error(`Search failed: ${message}`);
       }
     };
@@ -1413,13 +1410,13 @@ const createEntityFromDocument = (docSnap, databaseId) => {
 };
 function firestoreToCMSModel(data) {
   if (data === null || data === void 0) return null;
-  if (deleteField().isEqual(data)) {
+  if (typeof data === "object" && data !== null && "isEqual" in data && typeof data.isEqual === "function" && deleteField().isEqual(data)) {
     return void 0;
   }
-  if (serverTimestamp().isEqual(data)) {
+  if (typeof data === "object" && data !== null && "isEqual" in data && typeof data.isEqual === "function" && serverTimestamp().isEqual(data)) {
     return null;
   }
-  if (data instanceof Timestamp || typeof data.toDate === "function" && data.toDate() instanceof Date) {
+  if (data instanceof Timestamp || typeof data === "object" && data !== null && "toDate" in data && typeof data.toDate === "function" && data.toDate() instanceof Date) {
     return data.toDate();
   }
   if (data instanceof Date) {
@@ -1428,7 +1425,7 @@ function firestoreToCMSModel(data) {
   if (typeof data === "object" && "__type__" in data && data.__type__ === "__vector__") {
     return data;
   }
-  if (data instanceof VectorValue || typeof data === "object" && data !== null && typeof data.toArray === "function" && data.constructor?.name === "VectorValue") {
+  if (data instanceof VectorValue || typeof data === "object" && data !== null && "toArray" in data && typeof data.toArray === "function" && data.constructor?.name === "VectorValue") {
     return {
       __type__: "__vector__",
       value: data.toArray()
@@ -1470,11 +1467,13 @@ function cmsToFirestoreModel(data, firestore, inArray = false) {
     return null;
   } else if (Array.isArray(data)) {
     return data.filter((v) => v !== void 0).map((v) => cmsToFirestoreModel(v, firestore, true));
-  } else if (data.isEntityReference && data.isEntityReference()) {
-    const targetFirestore = data.databaseId ? getFirestore(firestore.app, data.databaseId) : firestore;
-    return doc(targetFirestore, data.path, data.id);
-  } else if (data && typeof data === "object" && data.__type === "relation" && data.path && data.id) {
-    return doc(firestore, data.path, String(data.id));
+  } else if (typeof data === "object" && data !== null && "isEntityReference" in data && typeof data.isEntityReference === "function" && data.isEntityReference()) {
+    const entityRef = data;
+    const targetFirestore = entityRef.databaseId ? getFirestore(firestore.app, entityRef.databaseId) : firestore;
+    return doc(targetFirestore, entityRef.path, entityRef.id);
+  } else if (data && typeof data === "object" && "__type" in data && data.__type === "relation" && "path" in data && "id" in data) {
+    const rel = data;
+    return doc(firestore, rel.path, String(rel.id));
   } else if (data instanceof GeoPoint) {
     return new GeoPoint$1(data.latitude, data.longitude);
   } else if (data instanceof Date) {
@@ -1805,8 +1804,9 @@ function cmsToRTDBModel(data, database) {
     return null;
   } else if (Array.isArray(data)) {
     return data.filter((v) => v !== void 0).map((v) => cmsToRTDBModel(v, database));
-  } else if (data.isEntityReference && data.isEntityReference()) {
-    return ref$1(database, `${data.slug}/${data.id}`);
+  } else if (typeof data === "object" && data !== null && "isEntityReference" in data && typeof data.isEntityReference === "function" && data.isEntityReference()) {
+    const entityRef = data;
+    return ref$1(database, `${entityRef.slug}/${entityRef.id}`);
   } else if (data instanceof Date) {
     return data.toISOString();
   } else if (data && typeof data === "object") {
@@ -1851,8 +1851,7 @@ function useBuildUserManagement({
   roles: rolesProp,
   usersPath = "__FIRECMS/config/users",
   rolesPath = "__FIRECMS/config/roles",
-  allowDefaultRolesCreation,
-  includeCollectionConfigPermissions
+  allowDefaultRolesCreation
 }) {
   if (!authController) {
     throw Error("useBuildUserManagement: You need to provide an authController since version 3.0.0-beta.11. Check https://firecms.co/docs/pro/migrating_from_v3_beta");
@@ -1896,7 +1895,7 @@ function useBuildUserManagement({
       onError(e_0) {
         setRoles([]);
         console.error("Error loading roles", e_0);
-        setRolesError(e_0);
+        setRolesError(e_0 instanceof Error ? e_0 : new Error(String(e_0)));
         setRolesLoading(false);
       }
     });
@@ -1928,7 +1927,7 @@ function useBuildUserManagement({
       onError(e_2) {
         console.error("Error loading users", e_2);
         setUsersWithRoleIds([]);
-        setUsersError(e_2);
+        setUsersError(e_2 instanceof Error ? e_2 : new Error(String(e_2)));
         setUsersLoading(false);
       }
     });
@@ -2022,9 +2021,9 @@ function useBuildUserManagement({
     if (!usersWithRoleIds) throw Error("Users not loaded");
     const mgmtUser = usersWithRoleIds.find((u_1) => u_1.email?.toLowerCase() === user_1?.email?.toLowerCase());
     if (!mgmtUser || !mgmtUser.roles) return void 0;
-    return roles.filter((r) => mgmtUser.roles.includes(r.id));
-  }, [roles, usersWithRoleIds]);
-  const authenticator = useCallback(({
+    return mgmtUser.roles;
+  }, [usersWithRoleIds]);
+  const accessGate = useCallback(({
     user: user_2
   }) => {
     if (loading) {
@@ -2063,8 +2062,8 @@ function useBuildUserManagement({
     throw Error("Could not find a user with the provided email in the user management system.");
   }, [loading, users]);
   const userRoles = authController.user ? defineRolesFor(authController.user) : void 0;
-  const isAdmin = (userRoles ?? []).some((r_0) => r_0.id === "admin");
-  const userRoleIds = userRoles?.map((r_1) => r_1.id);
+  const isAdmin = (userRoles ?? []).some((r) => r === "admin");
+  const userRoleIds = userRoles;
   useEffect(() => {
     console.debug("Setting user roles", {
       userRoles,
@@ -2089,9 +2088,8 @@ function useBuildUserManagement({
     usersError,
     isAdmin,
     allowDefaultRolesCreation: allowDefaultRolesCreation === void 0 ? true : allowDefaultRolesCreation,
-    includeCollectionConfigPermissions: Boolean(includeCollectionConfigPermissions),
     defineRolesFor,
-    authenticator,
+    accessGate,
     ...authController,
     initialLoading: authController.initialLoading || loading,
     userRoles,
@@ -2107,8 +2105,8 @@ const entitiesToUsers = (docs) => {
     const data = doc2.values;
     const record = data;
     const newVar = {
-      uid: doc2.id,
       ...data,
+      uid: doc2.id,
       created_on: record.created_on,
       updated_on: record.updated_on
     };
@@ -2121,6 +2119,128 @@ const entityToRoles = (entities) => {
     ...doc2.values
   }));
 };
+function useFirebaseAccessGate(t0) {
+  const $ = c(17);
+  const {
+    disabled,
+    authController,
+    accessGate,
+    storageSource,
+    data
+  } = t0;
+  const gateEnabled = Boolean(accessGate);
+  const [authLoading, setAuthLoading] = useState(gateEnabled);
+  const [notAllowedError, setNotAllowedError] = useState(false);
+  const [authVerified, setAuthVerified] = useState(!gateEnabled || Boolean(authController.loginSkipped));
+  const canAccessMainView = authVerified && (!gateEnabled || Boolean(authController.user) || Boolean(authController.loginSkipped)) && !notAllowedError;
+  let t1;
+  let t2;
+  if ($[0] !== authController.loginSkipped) {
+    t1 = () => {
+      if (authController.loginSkipped) {
+        setAuthVerified(true);
+      }
+    };
+    t2 = [authController.loginSkipped];
+    $[0] = authController.loginSkipped;
+    $[1] = t1;
+    $[2] = t2;
+  } else {
+    t1 = $[1];
+    t2 = $[2];
+  }
+  useEffect(t1, t2);
+  const checkedUserRef = useRef(void 0);
+  let t3;
+  if ($[3] !== accessGate || $[4] !== authController || $[5] !== data || $[6] !== disabled || $[7] !== storageSource) {
+    t3 = async () => {
+      if (disabled) {
+        return;
+      }
+      if (authController.initialLoading) {
+        return;
+      }
+      if (!authController.user && !authController.loginSkipped) {
+        checkedUserRef.current = void 0;
+        setAuthLoading(false);
+        setAuthVerified(false);
+        return;
+      }
+      const delegateUser = authController.user;
+      if (accessGate instanceof Function && delegateUser && !deepEqual(checkedUserRef.current?.uid, delegateUser.uid)) {
+        setAuthLoading(true);
+        try {
+          const allowed = await accessGate({
+            user: delegateUser,
+            authController,
+            data,
+            storageSource
+          });
+          if (!allowed) {
+            authController.signOut();
+            setNotAllowedError(true);
+          }
+        } catch (t42) {
+          const e = t42;
+          setNotAllowedError(e);
+          authController.signOut();
+        }
+        setAuthLoading(false);
+        setAuthVerified(true);
+        checkedUserRef.current = delegateUser;
+      } else {
+        setAuthLoading(false);
+      }
+      if (!authController.initialLoading && !delegateUser) {
+        setAuthVerified(true);
+      }
+    };
+    $[3] = accessGate;
+    $[4] = authController;
+    $[5] = data;
+    $[6] = disabled;
+    $[7] = storageSource;
+    $[8] = t3;
+  } else {
+    t3 = $[8];
+  }
+  const checkAccess = t3;
+  let t4;
+  let t5;
+  if ($[9] !== checkAccess) {
+    t4 = () => {
+      checkAccess();
+    };
+    t5 = [checkAccess];
+    $[9] = checkAccess;
+    $[10] = t4;
+    $[11] = t5;
+  } else {
+    t4 = $[10];
+    t5 = $[11];
+  }
+  useEffect(t4, t5);
+  let t6;
+  const t7 = gateEnabled && authLoading;
+  let t8;
+  if ($[12] !== authVerified || $[13] !== canAccessMainView || $[14] !== notAllowedError || $[15] !== t7) {
+    t8 = {
+      canAccessMainView,
+      authLoading: t7,
+      notAllowedError,
+      authVerified
+    };
+    $[12] = authVerified;
+    $[13] = canAccessMainView;
+    $[14] = notAllowedError;
+    $[15] = t7;
+    $[16] = t8;
+  } else {
+    t8 = $[16];
+  }
+  t6 = t8;
+  return t6;
+}
 const googleIcon = (mode) => /* @__PURE__ */ jsx(Fragment, { children: /* @__PURE__ */ jsxs("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 64 64", width: 24, height: 24, children: [
   /* @__PURE__ */ jsxs("linearGradient", { id: "95yY7w43Oj6n2vH63j6HJb", x1: "29.401", x2: "29.401", y1: "4.064", y2: "106.734", gradientTransform: "matrix(1 0 0 -1 0 66)", gradientUnits: "userSpaceOnUse", children: [
     /* @__PURE__ */ jsx("stop", { offset: "0", stopColor: "#ff5840" }),
@@ -2252,7 +2372,7 @@ function FirebaseLoginView({
     } else if (notAllowedError instanceof Error) {
       notAllowedMessage = notAllowedError.message;
     } else {
-      notAllowedMessage = "It looks like you don't have access to the CMS, based on the specified Authenticator configuration";
+      notAllowedMessage = "It looks like you don't have access to the CMS, based on the specified access gate configuration";
     }
   }
   const fadeStyle = {
@@ -2639,7 +2759,7 @@ function RebaseFirebaseApp(t0) {
     name,
     logo,
     logoDark,
-    authenticator,
+    accessGate,
     collections,
     views,
     adminViews,
@@ -2767,15 +2887,15 @@ function RebaseFirebaseApp(t0) {
     t10 = $[21];
   }
   let t11;
-  if ($[22] !== authController || $[23] !== authenticator || $[24] !== storageSource || $[25] !== t10) {
+  if ($[22] !== accessGate || $[23] !== authController || $[24] !== storageSource || $[25] !== t10) {
     t11 = {
       authController,
-      authenticator,
+      accessGate,
       data: t10,
       storageSource
     };
-    $[22] = authController;
-    $[23] = authenticator;
+    $[22] = accessGate;
+    $[23] = authController;
     $[24] = storageSource;
     $[25] = t10;
     $[26] = t11;
@@ -2786,7 +2906,7 @@ function RebaseFirebaseApp(t0) {
     authLoading,
     canAccessMainView,
     notAllowedError
-  } = useValidateAuthenticator(t11);
+  } = useFirebaseAccessGate(t11);
   let t12;
   if ($[27] !== userConfigPersistence) {
     t12 = {
@@ -2914,7 +3034,7 @@ function RebaseFirebaseApp(t0) {
         const usedLogo = modeController.mode === "dark" && logoDark ? logoDark : logo;
         if (!canAccessMainView) {
           const LoginViewUsed = components?.LoginView ?? FirebaseLoginView;
-          component = /* @__PURE__ */ jsx(LoginViewUsed, { logo: usedLogo, allowSkipLogin, signInOptions: signInOptions ?? DEFAULT_SIGN_IN_OPTIONS, firebaseApp, authController, notAllowedError });
+          component = /* @__PURE__ */ jsx(LoginViewUsed, { logo: usedLogo, allowSkipLogin, signInOptions: signInOptions ?? DEFAULT_SIGN_IN_OPTIONS, firebaseApp, authController, notAllowedError: notAllowedError instanceof Error ? notAllowedError : typeof notAllowedError === "string" ? notAllowedError : void 0 });
         } else {
           const firstCollectionEntry = navigationStateController.topLevelNavigation?.navigationEntries.find(_temp3);
           const fallbackRoute = firstCollectionEntry ? /* @__PURE__ */ jsx(Navigate, { to: urlController.buildUrlCollectionPath(firstCollectionEntry.id), replace: true }) : /* @__PURE__ */ jsx(CenteredView, { children: "No home page or collections provided." });
@@ -3049,6 +3169,7 @@ export {
   performPineconeTextSearch,
   useAppCheck,
   useBuildUserManagement,
+  useFirebaseAccessGate,
   useFirebaseAuthController,
   useFirebaseRTDBDelegate,
   useFirebaseStorageSource,