fiber-firebase-functions 1.0.1 → 1.0.2

package/lib/middleware/rate_limiter.js

@@ -0,0 +1,156 @@
+"use strict";
+/*
+ * Copyright (C) 2025 Fiber
+ *
+ * All rights reserved. This script, including its code and logic, is the
+ * exclusive property of Fiber. Redistribution, reproduction,
+ * or modification of any part of this script is strictly prohibited
+ * without prior written permission from Fiber.
+ *
+ * Conditions of use:
+ * - The code may not be copied, duplicated, or used, in whole or in part,
+ *   for any purpose without explicit authorization.
+ * - Redistribution of this code, with or without modification, is not
+ *   permitted unless expressly agreed upon by Fiber.
+ * - The name "Fiber" and any associated branding, logos, or
+ *   trademarks may not be used to endorse or promote derived products
+ *   or services without prior written approval.
+ *
+ * Disclaimer:
+ * THIS SCRIPT AND ITS CODE ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL
+ * FIBER BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING BUT NOT LIMITED TO LOSS OF USE,
+ * DATA, PROFITS, OR BUSINESS INTERRUPTION) ARISING OUT OF OR RELATED TO THE USE
+ * OR INABILITY TO USE THIS SCRIPT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ * Unauthorized copying or reproduction of this script, in whole or in part,
+ * is a violation of applicable intellectual property laws and will result
+ * in legal action.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SetRateLimitStatus = exports.RateLimitCheckStatus = void 0;
+exports.isRateLimited = isRateLimited;
+exports.recordRateLimitHit = recordRateLimitHit;
+const admin = __importStar(require("firebase-admin"));
+const realtime_database_1 = require("../common/realtime_database");
+if (!admin.apps.length) {
+    admin.initializeApp();
+}
+var RateLimitCheckStatus;
+(function (RateLimitCheckStatus) {
+    RateLimitCheckStatus["MISSING_IDENTIFIER"] = "MISSING_IDENTIFIER";
+    RateLimitCheckStatus["MISSING_IDENTIFIER_ID"] = "MISSING_IDENTIFIER_ID";
+    RateLimitCheckStatus["MISSING_IDENTIFIER_TARGET"] = "MISSING_IDENTIFIER_TARGET";
+    RateLimitCheckStatus["MISSING_RULE"] = "MISSING_RULE";
+    RateLimitCheckStatus["MISSING_DATABASE_CONFIG"] = "MISSING_DATABASE_CONFIG";
+    RateLimitCheckStatus["LIMIT_EXISTS"] = "LIMIT_EXISTS";
+    RateLimitCheckStatus["LIMIT_NOT_FOUND"] = "LIMIT_NOT_FOUND";
+    RateLimitCheckStatus["INTERNAL_ERROR"] = "INTERNAL_ERROR";
+})(RateLimitCheckStatus || (exports.RateLimitCheckStatus = RateLimitCheckStatus = {}));
+var SetRateLimitStatus;
+(function (SetRateLimitStatus) {
+    SetRateLimitStatus["MISSING_IDENTIFIER"] = "MISSING_IDENTIFIER";
+    SetRateLimitStatus["MISSING_IDENTIFIER_ID"] = "MISSING_IDENTIFIER_ID";
+    SetRateLimitStatus["MISSING_IDENTIFIER_TARGET"] = "MISSING_IDENTIFIER_TARGET";
+    SetRateLimitStatus["MISSING_RULE"] = "MISSING_RULE";
+    SetRateLimitStatus["MISSING_DATABASE_CONFIG"] = "MISSING_DATABASE_CONFIG";
+    SetRateLimitStatus["RATE_LIMITED"] = "RATE_LIMITED";
+    SetRateLimitStatus["ALLOWED"] = "ALLOWED";
+    SetRateLimitStatus["INTERNAL_ERROR"] = "INTERNAL_ERROR";
+})(SetRateLimitStatus || (exports.SetRateLimitStatus = SetRateLimitStatus = {}));
+async function isRateLimited(identifier, rule, databaseConfig) {
+    if (!identifier)
+        return RateLimitCheckStatus.MISSING_IDENTIFIER;
+    if (!identifier.id)
+        return RateLimitCheckStatus.MISSING_IDENTIFIER_ID;
+    if (!identifier.target)
+        return RateLimitCheckStatus.MISSING_IDENTIFIER_TARGET;
+    if (!rule)
+        return RateLimitCheckStatus.MISSING_RULE;
+    if (!databaseConfig)
+        return RateLimitCheckStatus.MISSING_DATABASE_CONFIG;
+    try {
+        const database = (0, realtime_database_1.realtimeDatabase)(databaseConfig);
+        const reference = database.ref(identifier.id).child(identifier.target).child("__fbs__timestamps");
+        const query = await reference.get();
+        if (!query.exists())
+            return RateLimitCheckStatus.LIMIT_NOT_FOUND;
+        const now = Date.now();
+        let timestamps = query.val();
+        timestamps = timestamps.filter((t) => now - t < rule.windowMs);
+        if (timestamps.length === 0) {
+            await reference.remove();
+            return RateLimitCheckStatus.LIMIT_NOT_FOUND;
+        }
+        if (timestamps.length >= rule.maxHits)
+            return RateLimitCheckStatus.LIMIT_EXISTS;
+        return RateLimitCheckStatus.LIMIT_NOT_FOUND;
+    }
+    catch (e) {
+        return RateLimitCheckStatus.INTERNAL_ERROR;
+    }
+}
+async function recordRateLimitHit(identifier, rule, databaseConfig) {
+    if (!identifier)
+        return SetRateLimitStatus.MISSING_IDENTIFIER;
+    if (!identifier.id)
+        return SetRateLimitStatus.MISSING_IDENTIFIER_ID;
+    if (!identifier.target)
+        return SetRateLimitStatus.MISSING_IDENTIFIER_TARGET;
+    if (!rule)
+        return SetRateLimitStatus.MISSING_RULE;
+    if (!databaseConfig)
+        return SetRateLimitStatus.MISSING_DATABASE_CONFIG;
+    try {
+        const database = (0, realtime_database_1.realtimeDatabase)(databaseConfig);
+        const reference = database.ref(identifier.id).child(identifier.target).child("__fbs__timestamps");
+        const query = await reference.get();
+        let timestamps = query.exists() ? query.val() : [];
+        const now = Date.now();
+        timestamps = timestamps.filter((t) => now - t < rule.windowMs);
+        if (timestamps.length >= rule.maxHits)
+            return SetRateLimitStatus.RATE_LIMITED;
+        timestamps.push(now);
+        await reference.set(timestamps);
+        return SetRateLimitStatus.ALLOWED;
+    }
+    catch (e) {
+        return SetRateLimitStatus.INTERNAL_ERROR;
+    }
+}
+//# sourceMappingURL=rate_limiter.js.map

package/lib/middleware/rate_limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate_limiter.js","sourceRoot":"","sources":["../../src/middleware/rate_limiter.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CH,sCAgCC;AAED,gDA4BC;AAtGD,sDAAwC;AACxC,mEAAiF;AAEjF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,aAAa,EAAE,CAAC;AAC1B,CAAC;AAED,IAAY,oBASX;AATD,WAAY,oBAAoB;IAC5B,iEAAyC,CAAA;IACzC,uEAA+C,CAAA;IAC/C,+EAAuD,CAAA;IACvD,qDAA6B,CAAA;IAC7B,2EAAmD,CAAA;IACnD,qDAA6B,CAAA;IAC7B,2DAAmC,CAAA;IACnC,yDAAiC,CAAA;AACrC,CAAC,EATW,oBAAoB,oCAApB,oBAAoB,QAS/B;AAED,IAAY,kBASX;AATD,WAAY,kBAAkB;IAC1B,+DAAyC,CAAA;IACzC,qEAA+C,CAAA;IAC/C,6EAAuD,CAAA;IACvD,mDAA6B,CAAA;IAC7B,yEAAmD,CAAA;IACnD,mDAA6B,CAAA;IAC7B,yCAAmB,CAAA;IACnB,uDAAiC,CAAA;AACrC,CAAC,EATW,kBAAkB,kCAAlB,kBAAkB,QAS7B;AAaM,KAAK,UAAU,aAAa,CAAC,UAA+B,EAAE,IAAmB,EAAE,cAAgC;IACtH,IAAI,CAAC,UAAU;QAAE,OAAO,oBAAoB,CAAC,kBAAkB,CAAC;IAEhE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,oBAAoB,CAAC,qBAAqB,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,oBAAoB,CAAC,yBAAyB,CAAC;IAE9E,IAAI,CAAC,IAAI;QAAE,OAAO,oBAAoB,CAAC,YAAY,CAAC;IACpD,IAAI,CAAC,cAAc;QAAE,OAAO,oBAAoB,CAAC,uBAAuB,CAAC;IAEzE,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,oCAAgB,EAAC,cAAc,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,OAAO,oBAAoB,CAAC,eAAe,CAAC;QAEjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,UAAU,GAAa,KAAK,CAAC,GAAG,EAAE,CAAC;QAEvC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,oBAAoB,CAAC,eAAe,CAAC;QAChD,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,oBAAoB,CAAC,YAAY,CAAC;QAEhF,OAAO,oBAAoB,CAAC,eAAe,CAAC;IAChD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,oBAAoB,CAAC,cAAc,CAAC;IAC/C,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,UAA+B,EAAE,IAAmB,EAAE,cAAgC;IAC3H,IAAI,CAAC,UAAU;QAAE,OAAO,kBAAkB,CAAC,kBAAkB,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,qBAAqB,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,kBAAkB,CAAC,yBAAyB,CAAC;IAE5E,IAAI,CAAC,IAAI;QAAE,OAAO,kBAAkB,CAAC,YAAY,CAAC;IAClD,IAAI,CAAC,cAAc;QAAE,OAAO,kBAAkB,CAAC,uBAAuB,CAAC;IAEvE,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,oCAAgB,EAAC,cAAc,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,UAAU,GAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/D,IAAI,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,kBAAkB,CAAC,YAAY,CAAC;QAE9E,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEhC,OAAO,kBAAkB,CAAC,OAAO,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,kBAAkB,CAAC,cAAc,CAAC;IAC7C,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fiber-firebase-functions",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "A collection of ready-to-use Firebase Cloud Functions utilities and wrappers designed for any application built by Fiber. Provides reusable helpers, common patterns, and production-grade modules to streamline backend development across all Fiber projects.",
   "author": "Fiber",
   "license": "FIBER-PROPRIETARY",

package/src/auth/is_user_disabled.ts

@@ -30,36 +30,63 @@
  */
 
 import * as admin from "firebase-admin";
-import { onCall } from "firebase-functions/v2/https";
 
 if (admin.apps.length === 0) {
     admin.initializeApp();
 }
 
-export enum UserDisabledStatus {
-    MISSING_UUID = "MISSING_UUID",
+export enum UserDisabledByIdStatus {
+    MISSING_USER_ID = "MISSING_USER_ID",
     ENABLED = "ENABLED",
     DISABLED = "DISABLED",
     NOT_FOUND = "NOT_FOUND",
     INTERNAL_ERROR = "INTERNAL_ERROR",
 }
 
-export const isUserDisabled = onCall(async (request) => {
-    const uid: string | undefined = request.data?.uid;
+export enum UserDisabledByEmailStatus {
+    MISSING_USER_ID = "MISSING_USER_ID",
+    ENABLED = "ENABLED",
+    DISABLED = "DISABLED",
+    NOT_FOUND = "NOT_FOUND",
+    INTERNAL_ERROR = "INTERNAL_ERROR",
+}
+
+export async function isUserDisabledById(userId: string): Promise<UserDisabledByIdStatus> {
+    userId = userId.trim();
+
+    if (!userId) return UserDisabledByIdStatus.MISSING_USER_ID;
+
+    try {
+        const user = await admin.auth().getUser(userId);
+        const isUserDisabled = user.disabled;
+
+        return isUserDisabled
+            ? UserDisabledByIdStatus.DISABLED
+            : UserDisabledByIdStatus.ENABLED;
+    } catch (error: any) {
+        if (error.code === "auth/user-not-found") {
+            return UserDisabledByIdStatus.NOT_FOUND;
+        }
+        return UserDisabledByIdStatus.INTERNAL_ERROR;
+    }
+}
+
+export async function isUserDisabledByEmail(email: string): Promise<UserDisabledByEmailStatus> {
+    email = email.trim();
 
-    if (!uid) return UserDisabledStatus.MISSING_UUID;
+    if (!email) return UserDisabledByEmailStatus.MISSING_USER_ID;
 
     try {
-        const user = await admin.auth().getUser(uid);
+        const user = await admin.auth().getUserByEmail(email);
         const isUserDisabled = user.disabled;
 
         return isUserDisabled
-            ? UserDisabledStatus.DISABLED
-            : UserDisabledStatus.ENABLED;
+            ? UserDisabledByEmailStatus.DISABLED
+            : UserDisabledByEmailStatus.ENABLED;
     } catch (error: any) {
         if (error.code === "auth/user-not-found") {
-            return UserDisabledStatus.NOT_FOUND;
+            return UserDisabledByEmailStatus.NOT_FOUND;
         }
-        return UserDisabledStatus.INTERNAL_ERROR;
+        return UserDisabledByEmailStatus.INTERNAL_ERROR;
     }
-});
+}

package/src/auth/is_user_exists.ts

@@ -30,32 +30,55 @@
  */
 
 import * as admin from "firebase-admin";
-import { onCall } from "firebase-functions/v2/https";
 
 if (admin.apps.length === 0) {
     admin.initializeApp();
 }
 
-export enum UserExistsStatus {
-    MISSING_UUID = "MISSING_UUID",
+export enum UserExistsByIdStatus {
+    MISSING_USER_ID = "MISSING_USER_ID",
     EXISTS = "EXISTS",
     NOT_FOUND = "NOT_FOUND",
     INTERNAL_ERROR = "INTERNAL_ERROR",
 }
 
-export const isUserExists = onCall(async (request) => {
-    const uid: string | undefined = request.data?.uid;
+export enum UserExistsByEmailStatus {
+    MISSING_USER_EMAIL = "MISSING_USER_EMAIL",
+    EXISTS = "EXISTS",
+    NOT_FOUND = "NOT_FOUND",
+    INTERNAL_ERROR = "INTERNAL_ERROR",
+}
+
+export async function isUserExistsById(userId: string): Promise<UserExistsByIdStatus> {
+    userId = userId.trim();
+
+    if (!userId || userId === "") return UserExistsByIdStatus.MISSING_USER_ID;
+
+    try {
+        await admin.auth().getUser(userId);
+
+        return UserExistsByIdStatus.EXISTS;
+    } catch (error: any) {
+        if (error.code === "auth/user-not-found") {
+            return UserExistsByIdStatus.NOT_FOUND;
+        }
+        return UserExistsByIdStatus.INTERNAL_ERROR;
+    }
+}
+
+export async function isUserExistsByEmail(email: string): Promise<UserExistsByEmailStatus> {
+    email = email.trim();
 
-    if (!uid) return UserExistsStatus.MISSING_UUID;
+    if (!email || email === "") return UserExistsByEmailStatus.MISSING_USER_EMAIL;
 
     try {
-        await admin.auth().getUser(uid);
+        await admin.auth().getUserByEmail(email);
 
-        return UserExistsStatus.EXISTS;
+        return UserExistsByEmailStatus.EXISTS;
     } catch (error: any) {
         if (error.code === "auth/user-not-found") {
-            return UserExistsStatus.NOT_FOUND;
+            return UserExistsByEmailStatus.NOT_FOUND;
         }
-        return UserExistsStatus.INTERNAL_ERROR;
+        return UserExistsByEmailStatus.INTERNAL_ERROR;
     }
-});
+}

package/src/auth/update_password.ts

@@ -0,0 +1,211 @@
+/*
+ * Copyright (C) 2025 Fiber
+ *
+ * All rights reserved. This script, including its code and logic, is the
+ * exclusive property of Fiber. Redistribution, reproduction,
+ * or modification of any part of this script is strictly prohibited
+ * without prior written permission from Fiber.
+ *
+ * Conditions of use:
+ * - The code may not be copied, duplicated, or used, in whole or in part,
+ *   for any purpose without explicit authorization.
+ * - Redistribution of this code, with or without modification, is not
+ *   permitted unless expressly agreed upon by Fiber.
+ * - The name "Fiber" and any associated branding, logos, or
+ *   trademarks may not be used to endorse or promote derived products
+ *   or services without prior written approval.
+ *
+ * Disclaimer:
+ * THIS SCRIPT AND ITS CODE ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL
+ * FIBER BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING BUT NOT LIMITED TO LOSS OF USE,
+ * DATA, PROFITS, OR BUSINESS INTERRUPTION) ARISING OUT OF OR RELATED TO THE USE
+ * OR INABILITY TO USE THIS SCRIPT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ * Unauthorized copying or reproduction of this script, in whole or in part,
+ * is a violation of applicable intellectual property laws and will result
+ * in legal action.
+ */
+
+import * as admin from "firebase-admin";
+import { RealtimeDatabase } from "../common/realtime_database";
+import { isRateLimited, RateLimitCheckStatus, RateLimitIdentifier, RateLimitRule, recordRateLimitHit } from "../middleware/rate_limiter";
+import { isUserDisabledById } from "./is_user_disabled";
+import { isUserExistsById } from "./is_user_exists";
+import { getUserByEmail, UserByEmailStatus } from "./user";
+
+if (admin.apps.length === 0) {
+    admin.initializeApp();
+}
+
+export enum ResetPasswordByEmailStatus {
+    MISSING_USER_EMAIL = "MISSING_USER_EMAIL",
+    MISSING_NEW_PASSWORD = "MISSING_NEW_PASSWORD",
+    MISSING_CONFIRM_NEW_PASSWORD = "MISSING_CONFIRM_NEW_PASSWORD",
+    MISSING_PASSWORD_POLICY = "MISSING_PASSWORD_POLICY",
+    NOT_IDENTICAL_CONFIRM_PASSWORD = "NOT_IDENTICAL_CONFIRM_PASSWORD",
+    USER_NOT_FOUND = "USER_NOT_FOUND",
+    USER_DISABLED = "USER_DISABLED",
+    WEAK_NEW_PASSWORD = "WEAK_NEW_PASSWORD",
+    MISSING_PASSWORD_UPPERCASE = "MISSING_PASSWORD_UPPERCASE",
+    MISSING_PASSWORD_LOWERCASE = "MISSING_PASSWORD_LOWERCASE",
+    MISSING_PASSWORD_DIGIT = "MISSING_PASSWORD_DIGIT",
+    MISSING_PASSWORD_SPECIAL_CHAR = "MISSING_PASSWORD_SPECIAL_CHAR",
+    TOO_MANY_REQUEST = "TOO_MANY_REQUEST",
+    SUCCESS = "SUCCESS",
+    INTERNAL_ERROR = "INTERNAL_ERROR",
+}
+
+export enum ResetPasswordByIdStatus {
+    MISSING_USER_EMAIL = "MISSING_USER_EMAIL",
+    MISSING_NEW_PASSWORD = "MISSING_NEW_PASSWORD",
+    MISSING_CONFIRM_NEW_PASSWORD = "MISSING_CONFIRM_NEW_PASSWORD",
+    MISSING_PASSWORD_POLICY = "MISSING_PASSWORD_POLICY",
+    NOT_IDENTICAL_CONFIRM_PASSWORD = "NOT_IDENTICAL_CONFIRM_PASSWORD",
+    USER_NOT_FOUND = "USER_NOT_FOUND",
+    USER_DISABLED = "USER_DISABLED",
+    WEAK_NEW_PASSWORD = "WEAK_NEW_PASSWORD",
+    MISSING_PASSWORD_UPPERCASE = "MISSING_PASSWORD_UPPERCASE",
+    MISSING_PASSWORD_LOWERCASE = "MISSING_PASSWORD_LOWERCASE",
+    MISSING_PASSWORD_DIGIT = "MISSING_PASSWORD_DIGIT",
+    MISSING_PASSWORD_SPECIAL_CHAR = "MISSING_PASSWORD_SPECIAL_CHAR",
+    TOO_MANY_REQUEST = "TOO_MANY_REQUEST",
+    SUCCESS = "SUCCESS",
+    INTERNAL_ERROR = "INTERNAL_ERROR",
+}
+
+export interface PasswordPolicy {
+    minLength: number;
+    requireUppercase: boolean;
+    requireLowercase: boolean;
+    requireDigit: boolean;
+    requireSpecial: boolean;
+}
+
+export interface ResetPassword {
+    newPassword: string;
+    confirmNewPassword: string;
+    passwordPolicy: PasswordPolicy;
+}
+
+export async function resetPasswordByEmail(email: string, password: ResetPassword, databaseConfig: RealtimeDatabase): Promise<ResetPasswordByEmailStatus> {
+    email = email.trim();
+
+    if (!email) return ResetPasswordByEmailStatus.MISSING_USER_EMAIL;
+
+    const newPassword = password.newPassword.trim();
+    const confirmNewPassword = password.confirmNewPassword.trim();
+
+    if (!newPassword || newPassword === "") return ResetPasswordByEmailStatus.MISSING_NEW_PASSWORD;
+    if (!confirmNewPassword || confirmNewPassword === "") return ResetPasswordByEmailStatus.MISSING_CONFIRM_NEW_PASSWORD;
+
+    const passwordPolicy = password.passwordPolicy;
+
+    if (!passwordPolicy) return ResetPasswordByEmailStatus.MISSING_PASSWORD_POLICY;
+
+    const userResult = await getUserByEmail(email);
+    const user = userResult.user;
+
+    if (userResult.status !== UserByEmailStatus.FOUND || user === undefined) return ResetPasswordByEmailStatus.USER_NOT_FOUND;
+
+    const identifier: RateLimitIdentifier = {
+        id: user.uid,
+        target: "reset_password"
+    };
+
+    const rule: RateLimitRule = {
+        ttl: 2 * 60 * 1000,
+        windowMs: 3 * 60 * 1000,
+        maxHits: 5,
+    };
+
+    if (await isRateLimited(identifier, rule, databaseConfig) !== RateLimitCheckStatus.LIMIT_NOT_FOUND) {
+        return ResetPasswordByEmailStatus.TOO_MANY_REQUEST;
+    }
+    await recordRateLimitHit(identifier, rule, databaseConfig);
+
+    if (await isUserDisabledById(user.uid)) return ResetPasswordByEmailStatus.USER_DISABLED;
+
+    if (newPassword !== confirmNewPassword) return ResetPasswordByEmailStatus.NOT_IDENTICAL_CONFIRM_PASSWORD;
+
+    const requiredMin = Math.max(6, passwordPolicy.minLength);
+    if (newPassword.length < requiredMin) return ResetPasswordByEmailStatus.WEAK_NEW_PASSWORD;
+
+    const rules = [
+        { enabled: passwordPolicy.requireUppercase, regex: /[A-Z]/, error: ResetPasswordByEmailStatus.MISSING_PASSWORD_UPPERCASE },
+        { enabled: passwordPolicy.requireLowercase, regex: /[a-z]/, error: ResetPasswordByEmailStatus.MISSING_PASSWORD_LOWERCASE },
+        { enabled: passwordPolicy.requireDigit, regex: /[0-9]/, error: ResetPasswordByEmailStatus.MISSING_PASSWORD_DIGIT },
+        { enabled: passwordPolicy.requireSpecial, regex: /[^A-Za-z0-9]/, error: ResetPasswordByEmailStatus.MISSING_PASSWORD_SPECIAL_CHAR },
+    ];
+
+    for (const rule of rules) {
+        if (rule.enabled && !rule.regex.test(newPassword)) return rule.error;
+    }
+
+    try {
+        await admin.auth().updateUser(user.uid, { password: newPassword });
+        return ResetPasswordByEmailStatus.SUCCESS;
+    } catch (error: any) {
+        return ResetPasswordByEmailStatus.INTERNAL_ERROR;
+    }
+}
+
+export async function resetPasswordById(userId: string, password: ResetPassword, databaseConfig: RealtimeDatabase): Promise<ResetPasswordByIdStatus> {
+    userId = userId.trim();
+
+    if (!userId) return ResetPasswordByIdStatus.MISSING_USER_EMAIL;
+
+    const newPassword = password.newPassword.trim();
+    const confirmNewPassword = password.confirmNewPassword.trim();
+
+    if (!newPassword || newPassword === "") return ResetPasswordByIdStatus.MISSING_NEW_PASSWORD;
+    if (!confirmNewPassword || confirmNewPassword === "") return ResetPasswordByIdStatus.MISSING_CONFIRM_NEW_PASSWORD;
+
+    const passwordPolicy = password.passwordPolicy;
+
+    if (!passwordPolicy) return ResetPasswordByIdStatus.MISSING_PASSWORD_POLICY;
+
+    const identifier: RateLimitIdentifier = {
+        id: userId,
+        target: "reset_password"
+    };
+
+    const rule: RateLimitRule = {
+        ttl: 2 * 60 * 1000,
+        windowMs: 3 * 60 * 1000,
+        maxHits: 5,
+    };
+
+    if (await isRateLimited(identifier, rule, databaseConfig) !== RateLimitCheckStatus.LIMIT_NOT_FOUND) {
+        return ResetPasswordByIdStatus.TOO_MANY_REQUEST;
+    }
+    await recordRateLimitHit(identifier, rule, databaseConfig);
+
+    if (await isUserExistsById(userId)) return ResetPasswordByIdStatus.USER_NOT_FOUND;
+    if (await isUserDisabledById(userId)) return ResetPasswordByIdStatus.USER_DISABLED;
+
+    if (newPassword !== confirmNewPassword) return ResetPasswordByIdStatus.NOT_IDENTICAL_CONFIRM_PASSWORD;
+
+    const requiredMin = Math.max(6, passwordPolicy.minLength);
+    if (newPassword.length < requiredMin) return ResetPasswordByIdStatus.WEAK_NEW_PASSWORD;
+
+    const rules = [
+        { enabled: passwordPolicy.requireUppercase, regex: /[A-Z]/, error: ResetPasswordByIdStatus.MISSING_PASSWORD_UPPERCASE },
+        { enabled: passwordPolicy.requireLowercase, regex: /[a-z]/, error: ResetPasswordByIdStatus.MISSING_PASSWORD_LOWERCASE },
+        { enabled: passwordPolicy.requireDigit, regex: /[0-9]/, error: ResetPasswordByIdStatus.MISSING_PASSWORD_DIGIT },
+        { enabled: passwordPolicy.requireSpecial, regex: /[^A-Za-z0-9]/, error: ResetPasswordByIdStatus.MISSING_PASSWORD_SPECIAL_CHAR },
+    ];
+
+    for (const rule of rules) {
+        if (rule.enabled && !rule.regex.test(newPassword)) return rule.error;
+    }
+
+    try {
+        await admin.auth().updateUser(userId, { password: newPassword });
+        return ResetPasswordByIdStatus.SUCCESS;
+    } catch (error: any) {
+        return ResetPasswordByIdStatus.INTERNAL_ERROR;
+    }
+}

package/src/auth/user.ts

@@ -0,0 +1,83 @@
+/*
+ * Copyright (C) 2025 Fiber
+ *
+ * All rights reserved. This script, including its code and logic, is the
+ * exclusive property of Fiber. Redistribution, reproduction,
+ * or modification of any part of this script is strictly prohibited
+ * without prior written permission from Fiber.
+ *
+ * Conditions of use:
+ * - The code may not be copied, duplicated, or used, in whole or in part,
+ *   for any purpose without explicit authorization.
+ * - Redistribution of this code, with or without modification, is not
+ *   permitted unless expressly agreed upon by Fiber.
+ * - The name "Fiber" and any associated branding, logos, or
+ *   trademarks may not be used to endorse or promote derived products
+ *   or services without prior written approval.
+ *
+ * Disclaimer:
+ * THIS SCRIPT AND ITS CODE ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL
+ * FIBER BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING BUT NOT LIMITED TO LOSS OF USE,
+ * DATA, PROFITS, OR BUSINESS INTERRUPTION) ARISING OUT OF OR RELATED TO THE USE
+ * OR INABILITY TO USE THIS SCRIPT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ * Unauthorized copying or reproduction of this script, in whole or in part,
+ * is a violation of applicable intellectual property laws and will result
+ * in legal action.
+ */
+
+import * as admin from "firebase-admin";
+import { isUserExistsByEmail, isUserExistsById } from "./is_user_exists";
+
+if (admin.apps.length === 0) {
+    admin.initializeApp();
+}
+
+export enum UserByIdStatus {
+    MISSING_USER_ID = "MISSING_USER_ID",
+    NOT_FOUND = "NOT_FOUND",
+    FOUND = "FOUND",
+    INTERNAL_ERROR = "INTERNAL_ERROR",
+}
+
+export enum UserByEmailStatus {
+    MISSING_EMAIL = "MISSING_EMAIL",
+    NOT_FOUND = "NOT_FOUND",
+    FOUND = "FOUND",
+    INTERNAL_ERROR = "INTERNAL_ERROR",
+}
+
+export async function getUserById(userId: string): Promise<{ status: UserByIdStatus; user?: admin.auth.UserRecord; }> {
+    userId = userId.trim();
+
+    if (!userId) return { status: UserByIdStatus.MISSING_USER_ID };
+
+    if (!await isUserExistsById(userId)) return { status: UserByIdStatus.NOT_FOUND };
+
+    try {
+        const user = await admin.auth().getUser(userId);
+
+        return { status: UserByIdStatus.FOUND, user: user };
+    } catch (error: any) {
+        return { status: UserByIdStatus.INTERNAL_ERROR };
+    }
+}
+
+export async function getUserByEmail(email: string): Promise<{ status: UserByEmailStatus; user?: admin.auth.UserRecord; }> {
+    email = email.trim();
+
+    if (!email) return { status: UserByEmailStatus.MISSING_EMAIL };
+
+    if (!await isUserExistsByEmail(email)) return { status: UserByEmailStatus.NOT_FOUND };
+
+    try {
+        const user = await admin.auth().getUserByEmail(email);
+
+        return { status: UserByEmailStatus.FOUND, user: user };
+    } catch (error: any) {
+        return { status: UserByEmailStatus.INTERNAL_ERROR };
+    }
+}

package/src/common/realtime_database.ts

@@ -37,31 +37,24 @@ export interface RealtimeDatabase {
     url: string;
 }
 
-export function realtimeDatabase(config: Record<string, RealtimeDatabase>) {
-    return function getRealtimeDatabase(name: string): Database {
-        const entry = config[name];
-        if (!entry) {
-            throw new Error(`Realtime DB config "${name}" not found`);
-        }
-
-        const { appName, url } = entry;
-
-        let app: App;
-
-        try {
-            app = getApps().find((a) => a.name === appName) || initializeApp({ databaseURL: url }, appName);
-        } catch (e) {
-            console.error("[Error:getRealtimeDatabase]", {
-                appName,
-                url,
-                loadedApps: getApps().map((a) => a.name),
-                error: (e as Error).message,
-                stack: (e as Error).stack,
-            });
-
-            throw e;
-        }
-
-        return getDatabase(app);
-    };
-}
+export function realtimeDatabase(config: RealtimeDatabase): Database {
+    const { appName, url } = config;
+
+    let app: App;
+
+    try {
+        app = getApps().find((a) => a.name === appName) || initializeApp({ databaseURL: url }, appName);
+    } catch (e) {
+        console.error("[Error:getRealtimeDatabase]", {
+            appName,
+            url,
+            loadedApps: getApps().map((a) => a.name),
+            error: (e as Error).message,
+            stack: (e as Error).stack,
+        });
+
+        throw e;
+    }
+
+    return getDatabase(app);
+};