firebase-admin-edge 1.0.1 → 1.0.2

package/dist/auth/cookie-types.d.ts

@@ -0,0 +1,19 @@
+export interface StringifyOptions {
+    encode?: (str: string) => string;
+}
+export type CookieOptions = Partial<{
+    encode: (value: string) => string;
+    maxAge: number;
+    expires: Date;
+    domain: string;
+    httpOnly: boolean;
+    secure: boolean;
+    partitioned: boolean;
+    priority: 'low' | 'medium' | 'high';
+    sameSite: boolean | 'lax' | 'strict' | 'none';
+}> & {
+    path: string;
+};
+export type GetSession = (name: string) => Promise<string | null | undefined> | string | null | undefined;
+export type SetSession = (name: string, value: string, options: CookieOptions) => Promise<void> | void;
+//# sourceMappingURL=cookie-types.d.ts.map

package/dist/auth/cookie-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-types.d.ts","sourceRoot":"","sources":["../../src/auth/cookie-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC7B,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACpC;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC;IAChC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACjD,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtB,MAAM,MAAM,UAAU,GAAG,CACrB,IAAI,EAAE,MAAM,KACX,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;AAEpE,MAAM,MAAM,UAAU,GAAG,CACrB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,KACrB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC"}

package/dist/auth/cookie-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cookie-types.js.map

package/dist/auth/cookie-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-types.js","sourceRoot":"","sources":["../../src/auth/cookie-types.ts"],"names":[],"mappings":""}

package/dist/auth/firebase-admin-auth.d.ts

@@ -0,0 +1,84 @@
+import type { ServiceAccount } from './firebase-types.js';
+export declare class FirebaseAdminAuth {
+    private serviceAccountKey;
+    private fetch?;
+    constructor(serviceAccountKey: ServiceAccount, fetch?: typeof globalThis.fetch | undefined);
+    getUser(uid: string): Promise<{
+        data: null;
+        error: {
+            code: number;
+            message: string;
+            errors?: {
+                message: string;
+                domain: string;
+                reason: string;
+            }[];
+        } | import("jose/errors").JOSEError | Error | {
+            message: string;
+        };
+    } | {
+        data: import("./firebase-types.js").UserRecord | null | undefined;
+        error: null;
+    }>;
+    verifyIdToken(idToken: string, checkRevoked?: boolean): Promise<{
+        data: import("./firebase-types.js").FirebaseIdTokenPayload;
+        error: null;
+    } | {
+        data: null;
+        error: {
+            code: number;
+            message: string;
+            errors?: {
+                message: string;
+                domain: string;
+                reason: string;
+            }[];
+        } | import("jose/errors").JOSEError | Error | {
+            message: string;
+        };
+    }>;
+    createSessionCookie(idToken: string, { expiresIn }: {
+        expiresIn: number;
+    }): Promise<{
+        data: null;
+        error: {
+            code: number;
+            message: string;
+            errors?: {
+                message: string;
+                domain: string;
+                reason: string;
+            }[];
+        } | import("jose/errors").JOSEError | Error | {
+            message: string;
+        };
+    } | {
+        data: string | null;
+        error: null;
+    }>;
+    verifySessionCookie(sessionCookie: string, checkRevoked?: boolean): Promise<{
+        data: import("./firebase-types.js").FirebaseIdTokenPayload;
+        error: null;
+    } | {
+        data: null;
+        error: {
+            code: number;
+            message: string;
+            errors?: {
+                message: string;
+                domain: string;
+                reason: string;
+            }[];
+        } | import("jose/errors").JOSEError | Error | {
+            message: string;
+        };
+    }>;
+    createCustomToken(uid: string, developerClaims?: object): Promise<{
+        data: null;
+        error: Error;
+    } | {
+        data: string;
+        error: null;
+    }>;
+}
+//# sourceMappingURL=firebase-admin-auth.d.ts.map

package/dist/auth/firebase-admin-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-admin-auth.d.ts","sourceRoot":"","sources":["../../src/auth/firebase-admin-auth.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,qBAAa,iBAAiB;IAEtB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,KAAK,CAAC;gBADN,iBAAiB,EAAE,cAAc,EACjC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,YAAA;IAGrC,OAAO,CAAC,GAAG,EAAE,MAAM;;;;;;;;;;;;;;;;;IA8CnB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,GAAE,OAAe;;;;;;;;;;;;;;;;;IAwF5D,mBAAmB,CACrB,OAAO,EAAE,MAAM,EACf,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;IA8ClC,mBAAmB,CACrB,aAAa,EAAE,MAAM,EACrB,YAAY,GAAE,OAAe;;;;;;;;;;;;;;;;;IA+C3B,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,GAAE,MAAW;;;;;;;CA0BpE"}

package/dist/auth/firebase-admin-auth.js

@@ -0,0 +1,196 @@
+import { createSessionCookie, getAccountInfoByUid, } from './firebase-auth-endpoints.js';
+import { signJWTCustomToken, verifyJWT, verifySessionJWT, } from './firebase-jwt.js';
+import { getToken } from './google-oauth.js';
+export class FirebaseAdminAuth {
+    serviceAccountKey;
+    fetch;
+    constructor(serviceAccountKey, fetch) {
+        this.serviceAccountKey = serviceAccountKey;
+        this.fetch = fetch;
+    }
+    async getUser(uid) {
+        // TODO: cache token and only refresh if expired
+        const { data: token, error: getTokenError } = await getToken(this.serviceAccountKey, this.fetch);
+        if (getTokenError) {
+            return {
+                data: null,
+                error: getTokenError,
+            };
+        }
+        if (!token) {
+            return {
+                data: null,
+                error: {
+                    code: 500,
+                    message: 'No token returned',
+                    errors: [],
+                },
+            };
+        }
+        const { data, error } = await getAccountInfoByUid(uid, token.access_token, this.serviceAccountKey.project_id, this.fetch);
+        if (error) {
+            return {
+                data: null,
+                error,
+            };
+        }
+        return {
+            data,
+            error: null,
+        };
+    }
+    async verifyIdToken(idToken, checkRevoked = false) {
+        const { data: decodedIdToken, error: verifyError } = await verifyJWT(idToken, this.serviceAccountKey.project_id, this.fetch);
+        if (verifyError) {
+            return {
+                data: null,
+                error: verifyError,
+            };
+        }
+        if (!decodedIdToken) {
+            return {
+                data: null,
+                error: {
+                    message: 'Could not decode ID token!',
+                    code: 'ERR_DECODE_ID_TOKEN',
+                },
+            };
+        }
+        if (!checkRevoked) {
+            return {
+                data: decodedIdToken,
+                error: null,
+            };
+        }
+        const { data: user, error: userError } = await this.getUser(decodedIdToken.sub);
+        if (userError) {
+            return {
+                data: null,
+                error: userError,
+            };
+        }
+        if (!user) {
+            return {
+                data: null,
+                error: {
+                    message: 'No user record found!',
+                    code: 'ERR_NO_USER',
+                },
+            };
+        }
+        if (user.disabled) {
+            return {
+                data: null,
+                error: {
+                    message: 'User is disabled!',
+                    code: 'ERR_USER_DISABLED',
+                },
+            };
+        }
+        if (user.tokensValidAfterTime) {
+            // Get the ID token authentication time and convert to milliseconds UTC.
+            const authTimeUtc = decodedIdToken.auth_time * 1000;
+            // Get user tokens valid after time in milliseconds UTC.
+            const validSinceUtc = new Date(user.tokensValidAfterTime).getTime();
+            // Check if authentication time is older than valid since time.
+            if (authTimeUtc < validSinceUtc) {
+                return {
+                    data: null,
+                    error: {
+                        message: 'Token has been revoked!',
+                        code: 'ERR_TOKEN_REVOKED',
+                    },
+                };
+            }
+        }
+        return {
+            data: decodedIdToken,
+            error: null,
+        };
+    }
+    async createSessionCookie(idToken, { expiresIn }) {
+        const { data: token, error: getTokenError } = await getToken(this.serviceAccountKey, this.fetch);
+        if (getTokenError) {
+            return {
+                data: null,
+                error: getTokenError,
+            };
+        }
+        if (!token) {
+            return {
+                data: null,
+                error: {
+                    code: 500,
+                    message: 'No token returned',
+                    errors: [],
+                },
+            };
+        }
+        const { data, error } = await createSessionCookie(idToken, token.access_token, this.serviceAccountKey.project_id, expiresIn, this.fetch);
+        if (error) {
+            return {
+                data: null,
+                error,
+            };
+        }
+        return {
+            data,
+            error: null,
+        };
+    }
+    async verifySessionCookie(sessionCookie, checkRevoked = false) {
+        const { data, error } = await verifySessionJWT(sessionCookie, this.serviceAccountKey.project_id, this.fetch);
+        if (error) {
+            return {
+                data: null,
+                error,
+            };
+        }
+        if (!checkRevoked) {
+            return {
+                data,
+                error: null,
+            };
+        }
+        const { data: user, error: userError } = await this.getUser(data.sub);
+        if (userError) {
+            return {
+                data: null,
+                error: userError,
+            };
+        }
+        if (!user) {
+            return {
+                data: null,
+                error: {
+                    message: 'No user record found!',
+                    code: 'ERR_NO_USER',
+                },
+            };
+        }
+        return {
+            data,
+            error: null,
+        };
+    }
+    async createCustomToken(uid, developerClaims = {}) {
+        const { data, error } = await signJWTCustomToken(uid, this.serviceAccountKey, developerClaims);
+        if (error) {
+            return {
+                data: null,
+                error,
+            };
+        }
+        if (!data) {
+            return {
+                data: null,
+                error: new Error('No custom token returned'),
+            };
+        }
+        return {
+            data,
+            error: null,
+        };
+    }
+}
+//# sourceMappingURL=firebase-admin-auth.js.map

package/dist/auth/firebase-admin-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-admin-auth.js","sourceRoot":"","sources":["../../src/auth/firebase-admin-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,mBAAmB,EACnB,mBAAmB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,SAAS,EACT,gBAAgB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,OAAO,iBAAiB;IAEd;IACA;IAFZ,YACY,iBAAiC,EACjC,KAA+B;QAD/B,sBAAiB,GAAjB,iBAAiB,CAAgB;QACjC,UAAK,GAAL,KAAK,CAA0B;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,GAAW;QACrB,gDAAgD;QAEhD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CACxD,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,aAAa;aACvB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,mBAAmB;oBAC5B,MAAM,EAAE,EAAE;iBACb;aACJ,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAC7C,GAAG,EACH,KAAK,CAAC,YAAY,EAClB,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,eAAwB,KAAK;QAC9D,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,CAChE,OAAO,EACP,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,OAAO,EAAE,4BAA4B;oBACrC,IAAI,EAAE,qBAAqB;iBAC9B;aACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACvD,cAAc,CAAC,GAAG,CACrB,CAAC;QAEF,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,SAAS;aACnB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,OAAO,EAAE,uBAAuB;oBAChC,IAAI,EAAE,aAAa;iBACtB;aACJ,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,OAAO,EAAE,mBAAmB;oBAC5B,IAAI,EAAE,mBAAmB;iBAC5B;aACJ,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,wEAAwE;YACxE,MAAM,WAAW,GAAG,cAAe,CAAC,SAAS,GAAG,IAAI,CAAC;YAErD,wDAAwD;YACxD,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;YAEpE,+DAA+D;YAE/D,IAAI,WAAW,GAAG,aAAa,EAAE,CAAC;gBAC9B,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE;wBACH,OAAO,EAAE,yBAAyB;wBAClC,IAAI,EAAE,mBAAmB;qBAC5B;iBACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO;YACH,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,CAAC,mBAAmB,CACrB,OAAe,EACf,EAAE,SAAS,EAAyB;QAEpC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CACxD,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,aAAa;aACvB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,mBAAmB;oBAC5B,MAAM,EAAE,EAAE;iBACb;aACJ,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAC7C,OAAO,EACP,KAAK,CAAC,YAAY,EAClB,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,SAAS,EACT,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,CAAC,mBAAmB,CACrB,aAAqB,EACrB,eAAwB,KAAK;QAE7B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAC1C,aAAa,EACb,IAAI,CAAC,iBAAiB,CAAC,UAAU,EACjC,IAAI,CAAC,KAAK,CACb,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,IAAI;gBACJ,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAK,CAAC,GAAG,CAAC,CAAC;QAEvE,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,SAAS;aACnB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,OAAO,EAAE,uBAAuB;oBAChC,IAAI,EAAE,aAAa;iBACtB;aACJ,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,kBAA0B,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,kBAAkB,CAC5C,GAAG,EACH,IAAI,CAAC,iBAAiB,EACtB,eAAe,CAClB,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC;aAC/C,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;CACJ"}

package/dist/auth/firebase-admin-auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=firebase-admin-auth.test.d.ts.map

package/dist/auth/firebase-admin-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-admin-auth.test.d.ts","sourceRoot":"","sources":["../../src/auth/firebase-admin-auth.test.ts"],"names":[],"mappings":""}