backend-manager 5.0.187 → 5.0.189

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-manager",
-  "version": "5.0.187",
+  "version": "5.0.189",
   "description": "Quick tools for developing Firebase functions",
   "main": "src/manager/index.js",
   "bin": {

package/scripts/update-disposable-domains.js

@@ -39,6 +39,6 @@ async function main() {
 }
 
 main().catch((e) => {
-  console.error('Failed to update disposable domains:', e.message);
-  process.exit(1);
+  console.warn('Warning: Failed to update disposable domains:', e.message);
+  console.warn('Using existing list. Run manually later: node scripts/update-disposable-domains.js');
 });

package/src/manager/events/auth/before-create.js

@@ -12,13 +12,30 @@ const MAX_SIGNUPS_PER_DAY = 2;
  * Why not create user doc here?
  * - Admin SDK (used for tests) does NOT trigger beforeUserCreated
  * - on-create fires for ALL user creations, making it more reliable
+ *
+ * Available parameters (1st gen):
+ *
+ * user (AuthUserRecord):
+ *   uid, email, emailVerified, displayName, photoURL, phoneNumber, disabled,
+ *   metadata: { creationTime, lastSignInTime },
+ *   providerData: [{ uid, displayName, email, photoURL, providerId, phoneNumber }],
+ *   passwordHash, passwordSalt, customClaims, tenantId, tokensValidAfterTime, multiFactor
+ *
+ * context (AuthEventContext):
+ *   ipAddress, userAgent, locale, eventId, eventType, authType, resource, timestamp,
+ *   additionalUserInfo: { providerId, profile, username, isNewUser, recaptchaScore, email, phoneNumber },
+ *   credential: { providerId, signInMethod, claims, idToken, accessToken, refreshToken, expirationTime, secret } | null,
+ *   emailType, smsType, params
+ *
+ * Note: recaptchaScore requires reCAPTCHA Enterprise (Google Cloud level), NOT the Firebase SMS fraud toggle.
+ * Note: credential tokens (idToken, accessToken, refreshToken) require opt-in via BlockingOptions.
  */
 module.exports = async ({ Manager, assistant, user, context, libraries }) => {
   const startTime = Date.now();
   const { functions } = libraries;
   const ipAddress = context.ipAddress || '';
 
-  assistant.log(`beforeCreate: ${user.uid}`, { email: user.email, ip: ipAddress });
+  assistant.log(`beforeCreate: ${user.uid} (${user.email})`, user, context);
 
   // Block disposable email domains
   if (isDisposable(user.email)) {
@@ -54,8 +71,5 @@ module.exports = async ({ Manager, assistant, user, context, libraries }) => {
   usage.increment('signups');
   await usage.update();
 
-  assistant.log(`beforeCreate: Rate limit passed for ${ipAddress}, allowing user creation (${Date.now() - startTime}ms)`);
-
-  // Allow user creation to proceed
-  // User doc will be created by on-create.js
+  assistant.log(`beforeCreate: Completed for ${user.uid} (${Date.now() - startTime}ms)`);
 };

package/src/manager/events/auth/before-signin.js

@@ -6,12 +6,29 @@
  *
  * TODO: Add mailer.sync(uid) here with 1x/day rate limit to keep marketing
  * contact data (name, country, subscription fields) fresh between sessions.
+ *
+ * Available parameters (1st gen):
+ *
+ * user (AuthUserRecord):
+ *   uid, email, emailVerified, displayName, photoURL, phoneNumber, disabled,
+ *   metadata: { creationTime, lastSignInTime },
+ *   providerData: [{ uid, displayName, email, photoURL, providerId, phoneNumber }],
+ *   passwordHash, passwordSalt, customClaims, tenantId, tokensValidAfterTime, multiFactor
+ *
+ * context (AuthEventContext):
+ *   ipAddress, userAgent, locale, eventId, eventType, authType, resource, timestamp,
+ *   additionalUserInfo: { providerId, profile, username, isNewUser, recaptchaScore, email, phoneNumber },
+ *   credential: { providerId, signInMethod, claims, idToken, accessToken, refreshToken, expirationTime, secret } | null,
+ *   emailType, smsType, params
+ *
+ * Note: recaptchaScore requires reCAPTCHA Enterprise (Google Cloud level), NOT the Firebase SMS fraud toggle.
+ * Note: credential tokens (idToken, accessToken, refreshToken) require opt-in via BlockingOptions.
  */
 module.exports = async ({ Manager, assistant, user, context, libraries }) => {
   const startTime = Date.now();
   const { admin } = libraries;
 
-  assistant.log(`beforeSignIn: ${user.uid}`, { email: user.email, ip: context.ipAddress });
+  assistant.log(`beforeSignIn: ${user.uid} (${user.email})`, user, context);
 
   const now = new Date();
 

package/src/manager/events/auth/on-create.js

@@ -1,5 +1,4 @@
-const MAX_RETRIES = 3;
-const RETRY_DELAY_MS = 1000;
+const { retryWrite, MAX_RETRIES } = require('./utils.js');
 
 /**
  * onCreate - Create user doc
@@ -16,12 +15,23 @@ const RETRY_DELAY_MS = 1000;
  *
  * Non-critical work (welcome emails, marketing contact) is handled
  * by the user/signup endpoint, which the frontend calls after account creation.
+ *
+ * Available parameters (1st gen):
+ *
+ * user (UserRecord — firebase-admin):
+ *   uid, email, emailVerified, displayName, photoURL, phoneNumber, disabled,
+ *   metadata: { creationTime, lastSignInTime, lastRefreshTime },
+ *   providerData: [{ uid, displayName, email, photoURL, providerId, phoneNumber }],
+ *   passwordHash, passwordSalt, customClaims, tenantId, tokensValidAfterTime, multiFactor
+ *
+ * context (EventContext — NOT AuthEventContext, no ipAddress/userAgent/locale):
+ *   eventId, eventType, timestamp, resource: { service, name }, params
  */
 module.exports = async ({ Manager, assistant, user, context, libraries }) => {
   const startTime = Date.now();
   const { admin } = libraries;
 
-  assistant.log(`onCreate: ${user.uid}`, { email: user.email });
+  assistant.log(`onCreate: ${user.uid} (${user.email})`, user, context);
 
   // Skip anonymous users
   if (user.providerData?.every(p => p.providerId === 'anonymous')) {
@@ -66,9 +76,9 @@ module.exports = async ({ Manager, assistant, user, context, libraries }) => {
 
   // Write user doc with retry
   try {
-    await retryWrite(assistant, async () => {
+    await retryWrite(assistant, 'onCreate', async () => {
       await admin.firestore().doc(`users/${user.uid}`).set(userRecord);
-    }, MAX_RETRIES, RETRY_DELAY_MS);
+    });
 
     assistant.log(`onCreate: Successfully created user doc for ${user.uid} (${Date.now() - startTime}ms)`);
   } catch (error) {
@@ -102,28 +112,3 @@ function extractProviderName(user) {
     last: parts.slice(1).join(' ') || null,
   };
 }
-
-/**
- * Retry a function up to maxRetries times with exponential backoff
- */
-async function retryWrite(assistant, fn, maxRetries, delayMs) {
-  let lastError;
-
-  for (let attempt = 1; attempt <= maxRetries; attempt++) {
-    try {
-      await fn();
-      return; // Success
-    } catch (error) {
-      lastError = error;
-      assistant.error(`onCreate: Write attempt ${attempt}/${maxRetries} failed:`, error);
-
-      if (attempt < maxRetries) {
-        const delay = delayMs * Math.pow(2, attempt - 1); // Exponential backoff: 1s, 2s, 4s
-        assistant.log(`onCreate: Retrying in ${delay}ms...`);
-        await new Promise(resolve => setTimeout(resolve, delay));
-      }
-    }
-  }
-
-  throw lastError; // All retries failed
-}

package/src/manager/events/auth/on-delete.js

@@ -1,5 +1,4 @@
-const MAX_RETRIES = 3;
-const RETRY_DELAY_MS = 1000;
+const { retryWrite, MAX_RETRIES } = require('./utils.js');
 
 /**
  * onDelete - Delete user doc
@@ -11,12 +10,23 @@ const RETRY_DELAY_MS = 1000;
  * - Checks if user doc exists before attempting delete
  * - Retries up to 3 times with exponential backoff on failure
  * - Logs timing for performance monitoring
+ *
+ * Available parameters (1st gen):
+ *
+ * user (UserRecord — firebase-admin):
+ *   uid, email, emailVerified, displayName, photoURL, phoneNumber, disabled,
+ *   metadata: { creationTime, lastSignInTime, lastRefreshTime },
+ *   providerData: [{ uid, displayName, email, photoURL, providerId, phoneNumber }],
+ *   passwordHash, passwordSalt, customClaims, tenantId, tokensValidAfterTime, multiFactor
+ *
+ * context (EventContext — NOT AuthEventContext, no ipAddress/userAgent/locale):
+ *   eventId, eventType, timestamp, resource: { service, name }, params
  */
 module.exports = async ({ Manager, assistant, user, context, libraries }) => {
   const startTime = Date.now();
   const { admin } = libraries;
 
-  assistant.log(`onDelete: ${user.uid}`, { email: user.email });
+  assistant.log(`onDelete: ${user.uid} (${user.email})`, user, context);
 
   // Check if user doc exists before attempting delete
   const existingDoc = await admin.firestore().doc(`users/${user.uid}`)
@@ -33,9 +43,9 @@ module.exports = async ({ Manager, assistant, user, context, libraries }) => {
 
   // Delete user doc with retry
   try {
-    await retryWrite(assistant, async () => {
+    await retryWrite(assistant, 'onDelete', async () => {
       await admin.firestore().doc(`users/${user.uid}`).delete();
-    }, MAX_RETRIES, RETRY_DELAY_MS);
+    });
 
     assistant.log(`onDelete: Successfully deleted user doc for ${user.uid}`);
   } catch (error) {
@@ -62,28 +72,3 @@ module.exports = async ({ Manager, assistant, user, context, libraries }) => {
 
   assistant.log(`onDelete: Completed for ${user.uid} (${Date.now() - startTime}ms)`);
 };
-
-/**
- * Retry a function up to maxRetries times with exponential backoff
- */
-async function retryWrite(assistant, fn, maxRetries, delayMs) {
-  let lastError;
-
-  for (let attempt = 1; attempt <= maxRetries; attempt++) {
-    try {
-      await fn();
-      return; // Success
-    } catch (error) {
-      lastError = error;
-      assistant.error(`onDelete: Write attempt ${attempt}/${maxRetries} failed:`, error);
-
-      if (attempt < maxRetries) {
-        const delay = delayMs * Math.pow(2, attempt - 1); // Exponential backoff: 1s, 2s, 4s
-        assistant.log(`onDelete: Retrying in ${delay}ms...`);
-        await new Promise(resolve => setTimeout(resolve, delay));
-      }
-    }
-  }
-
-  throw lastError; // All retries failed
-}

package/src/manager/events/auth/utils.js

@@ -0,0 +1,29 @@
+const MAX_RETRIES = 3;
+const RETRY_DELAY_MS = 1000;
+
+/**
+ * Retry a function up to maxRetries times with exponential backoff
+ */
+async function retryWrite(assistant, tag, fn) {
+  let lastError;
+
+  for (let attempt = 1; attempt <= MAX_RETRIES; attempt++) {
+    try {
+      await fn();
+      return; // Success
+    } catch (error) {
+      lastError = error;
+      assistant.error(`${tag}: Write attempt ${attempt}/${MAX_RETRIES} failed:`, error);
+
+      if (attempt < MAX_RETRIES) {
+        const delay = RETRY_DELAY_MS * Math.pow(2, attempt - 1); // Exponential backoff: 1s, 2s, 4s
+        assistant.log(`${tag}: Retrying in ${delay}ms...`);
+        await new Promise(resolve => setTimeout(resolve, delay));
+      }
+    }
+  }
+
+  throw lastError; // All retries failed
+}
+
+module.exports = { retryWrite, MAX_RETRIES };