cloudflare-next-intl 0.10.20 → 0.10.21

package/README.md

@@ -516,7 +516,7 @@ Features include:
 - `createForgotPasswordAction(locale, actionCodeSettings?)`: Accepts optional Firebase `AuthActionCodeSettings` (e.g. `url` redirect link).
 - `sendVerificationEmail(actionCodeSettings?)` on `useAuthUser()`: Custom action email settings when resending email verification.
 - `followSameOriginContinueUrl`: Automatically forwards emailed action links with `continueUrl` to the specified path (or external URL) directly from `intlMiddleware` (default `true`; set `false` on `firebaseAuth` config to disable). If `continueUrl` points to home root (`/`), it resolves to `actionLinkPath` (if set) or the mode target path (e.g. `/reset-password`).
-- `appCheck`: Firebase App Check integration supporting reCAPTCHA Enterprise (`recaptchaEnterpriseSiteKey`) and reCAPTCHA v3 (`recaptchaV3SiteKey`). For reCAPTCHA v3, defaults to a `CustomProvider` using an explicit `render=explicit` script tag to avoid iframe/webworker CDN integrity issues in private windows (`useExplicitRecaptchaScript: false` to opt out). When `appCheck` is configured, `getFirebaseAuthClient()` waits for App Check to initialize before returning, so every request made through its `auth` (sign-in included) carries an `X-Firebase-AppCheck` header and passes App Check enforcement. The trade-off: App Check (and, with token auto-refresh on, the reCAPTCHA script) now starts on the first `getFirebaseAuthClient()` call instead of the first token mint. If App Check initialization fails, the client is still returned, just without App Check. Supports server-side token minting via service accounts.
+- `appCheck`: Firebase App Check integration supporting reCAPTCHA Enterprise (`recaptchaEnterpriseSiteKey`) and reCAPTCHA v3 (`recaptchaV3SiteKey`). For reCAPTCHA v3, defaults to a `CustomProvider` using an explicit `render=explicit` script tag to avoid iframe/webworker CDN integrity issues in private windows (`useExplicitRecaptchaScript: false` to opt out). When `appCheck` is configured, `getFirebaseAuthClient()` initializes App Check before it creates `auth`, so every request made through `auth` carries an `X-Firebase-AppCheck` header and passes App Check enforcement. That includes the `accounts:lookup` call Firebase makes on page load to restore a signed-in user, as well as sign-in. The trade-off: App Check (and, with token auto-refresh on, the reCAPTCHA script) now starts on the first `getFirebaseAuthClient()` call instead of the first token mint. If App Check initialization fails, the client is still returned, just without App Check. Supports server-side token minting via service accounts.
 - `resolveOptionalAuthUser()` (`cloudflare-next-intl/resolveOptionalAuthUser`): best-effort variant of `getAuthUser()` for callers that want to *attach* the current user when one happens to be known — error/telemetry reporting, analytics, logging — without failing or changing behavior when no request/session context is available. Swallows every failure and resolves `{ user: null }` instead of throwing. Use `getAuthUser()` (not this) whenever your own output actually depends on who's signed in — `checkDynamicPages` (below) treats `getAuthUser()`/`useAuthUser()`/`withUserDb()` as page-blocking dynamic-API signals but does not follow into this helper, so it's also the way to read "whoever's signed in, if anyone" from a page or a module it imports without forcing that page dynamic.
 - `resolveErrorReportingUser(useAuthUser?)` (same subpath): gated form of `resolveOptionalAuthUser()` for an `onError` sink — pass `ErrorHandlingParams.useAuthUser` straight through. Defaults to `false`: when not `true`, resolves `{ user: null }` immediately without calling `getAuthUser()` at all, so a page reached only through your `onError` sink's default path stays static-eligible. A specific `reportError({ ..., useAuthUser: true })` call site opts in per-call when it actually wants the user on that report.
 

package/dist/src/firebase_auth/client/firebase_client.js

@@ -122,15 +122,10 @@ async function initializeFirebaseAppCheck(app, appCheckConfig) {
 }
 const APP_CHECK_TOKEN_TIMEOUT_MS = 10000;
 let appCheckInitPromise;
-async function ensureAppCheck() {
-    if (appCheckInitPromise)
-        return appCheckInitPromise;
+function initAppCheckFor(app) {
     const appCheckConfig = config.firebaseAuth?.appCheck;
     if (!appCheckConfig || typeof window === 'undefined')
-        return;
-    const { app } = await loadFirebaseAuthClient();
-    if (appCheckInitPromise)
-        return appCheckInitPromise;
+        return undefined;
     appCheckInitPromise = (async () => {
         try {
             cachedAppCheck = await initializeFirebaseAppCheck(app, appCheckConfig);
@@ -141,6 +136,9 @@ async function ensureAppCheck() {
     })();
     return appCheckInitPromise;
 }
+async function ensureAppCheck() {
+    await getFirebaseAuthClient();
+}
 export async function getAppCheckToken() {
     await ensureAppCheck().catch(() => undefined);
     if (!cachedAppCheck)
@@ -160,7 +158,7 @@ export async function getAppCheckToken() {
 }
 let cached;
 let cachedPromise;
-async function loadFirebaseAuthClient() {
+export async function getFirebaseAuthClient() {
     requireFirebaseAuthConfig(config.firebaseAuth);
     if (cached)
         return cached;
@@ -183,6 +181,7 @@ async function loadFirebaseAuthClient() {
                 measurementId: fa.measurementId,
             };
             const app = getApps().length ? getApp() : initializeApp(firebaseConfig);
+            await initAppCheckFor(app);
             if (perfModule) {
                 cachedPerformance = perfModule.initializePerformance(app, { instrumentationEnabled: false });
             }
@@ -204,11 +203,6 @@ async function loadFirebaseAuthClient() {
     }
     return cachedPromise;
 }
-export async function getFirebaseAuthClient() {
-    const client = await loadFirebaseAuthClient();
-    await ensureAppCheck().catch(() => undefined);
-    return client;
-}
 export function getFirebaseAuthClientSync() {
     return cached;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.10.20",
+  "version": "0.10.21",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",