firebase-admin-edge 1.0.1 → 1.0.4

package/dist/auth/firebase-jwt.d.ts

@@ -0,0 +1,57 @@
+import { JOSEError } from 'jose/errors';
+import type { FirebaseIdTokenPayload, ServiceAccount } from './firebase-types.js';
+type SignJwtResult = {
+    data: string;
+    error: null;
+} | {
+    data: null;
+    error: JOSEError | Error | {
+        message: string;
+    };
+};
+export declare function verifySessionJWT(sessionCookie: string, projectId: string, fetchFn?: typeof globalThis.fetch): Promise<{
+    data: null;
+    error: {
+        code: number;
+        message: string;
+        errors?: {
+            message: string;
+            domain: string;
+            reason: string;
+        }[];
+    };
+} | {
+    data: null;
+    error: Error;
+} | {
+    error: null;
+    data: FirebaseIdTokenPayload;
+}>;
+export declare function verifyJWT(idToken: string, projectId: string, fetchFn?: typeof globalThis.fetch): Promise<{
+    error: Error;
+    data: null;
+} | {
+    error: {
+        code: number;
+        message: string;
+        errors?: {
+            message: string;
+            domain: string;
+            reason: string;
+        }[];
+    };
+    data: null;
+} | {
+    error: null;
+    data: FirebaseIdTokenPayload;
+}>;
+export declare function signJWT(serviceAccount: ServiceAccount): Promise<SignJwtResult>;
+export declare function signJWTCustomToken(uid: string, serviceAccount: ServiceAccount, additionalClaims?: object): Promise<{
+    data: null;
+    error: Error;
+} | {
+    data: string;
+    error: null;
+}>;
+export {};
+//# sourceMappingURL=firebase-jwt.d.ts.map

package/dist/auth/firebase-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-jwt.d.ts","sourceRoot":"","sources":["../../src/auth/firebase-jwt.ts"],"names":[],"mappings":"AAUA,OAAO,EACH,SAAS,EAMZ,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACR,sBAAsB,EACtB,cAAc,EACjB,MAAM,qBAAqB,CAAC;AAoC7B,KAAK,aAAa,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GAC7B;IACI,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,SAAS,GAAG,KAAK,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD,CAAC;AAER,wBAAsB,gBAAgB,CAClC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,OAAO,UAAU,CAAC,KAAwB;;;;;;;;;;;;;;;;UAwD1B,sBAAsB;GAoClD;AAED,wBAAsB,SAAS,CAC3B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;;;;;;;;;;;UA6CR,sBAAsB;GAoClD;AAED,wBAAsB,OAAO,CACzB,cAAc,EAAE,cAAc,GAC/B,OAAO,CAAC,aAAa,CAAC,CAsDxB;AAsBD,wBAAsB,kBAAkB,CACpC,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,cAAc,EAC9B,gBAAgB,GAAE,MAAW;;;;;;GAsDhC"}

package/dist/auth/firebase-jwt.js

@@ -0,0 +1,275 @@
+import { decodeProtectedHeader, errors, jwtVerify, importPKCS8, SignJWT, importX509, importSPKI, } from 'jose';
+import { JOSEError, JWSInvalid, JWSSignatureVerificationFailed, JWTClaimValidationFailed, JWTExpired, JWTInvalid, } from 'jose/errors';
+import { getJWKs, getPublicKeys } from './firebase-auth-endpoints.js';
+const ALGORITHM_RS256 = 'RS256';
+const OAUTH_TOKEN_URL = 'https://oauth2.googleapis.com/token';
+const SCOPES = [
+    'https://www.googleapis.com/auth/datastore',
+    'https://www.googleapis.com/auth/identitytoolkit',
+    'https://www.googleapis.com/auth/devstorage.read_write',
+    'https://www.googleapis.com/auth/devstorage.read_write',
+];
+const keyMap = new Map();
+async function importPublicCryptoKey(publicKey) {
+    if (publicKey.startsWith('-----BEGIN CERTIFICATE-----')) {
+        return importX509(publicKey, ALGORITHM_RS256);
+    }
+    return importSPKI(publicKey, ALGORITHM_RS256);
+}
+async function getPublicCryptoKey(publicKey) {
+    const cachedKey = keyMap.get(publicKey);
+    if (cachedKey) {
+        return cachedKey;
+    }
+    const key = await importPublicCryptoKey(publicKey);
+    keyMap.set(publicKey, key);
+    return key;
+}
+export async function verifySessionJWT(sessionCookie, projectId, fetchFn = globalThis.fetch) {
+    try {
+        const { data: keyData, error } = await getPublicKeys(fetchFn);
+        if (error) {
+            return {
+                data: null,
+                error,
+            };
+        }
+        if (!keyData) {
+            return {
+                data: null,
+                error: new Error('No public keys retrieved'),
+            };
+        }
+        // Decode header to get kid
+        const header = decodeProtectedHeader(sessionCookie);
+        if (!header.kid ||
+            typeof header.kid !== 'string' ||
+            !keyData[header.kid]) {
+            return {
+                error: new Error('Invalid session cookie: no KID found'),
+                data: null,
+            };
+        }
+        const publicKeyString = keyData[header.kid];
+        if (!publicKeyString) {
+            return {
+                error: new Error('No public key found for the given KID'),
+                data: null,
+            };
+        }
+        const expectedIssuer = `https://session.firebase.google.com/${projectId}`;
+        const expectedAudience = projectId;
+        // Non-emulator: verify with jose
+        const publicKey = await getPublicCryptoKey(publicKeyString);
+        const { payload } = await jwtVerify(sessionCookie, publicKey, {
+            issuer: expectedIssuer,
+            audience: expectedAudience,
+            algorithms: [ALGORITHM_RS256],
+        });
+        return {
+            error: null,
+            data: payload,
+        };
+    }
+    catch (err) {
+        if (err instanceof JWTExpired) {
+            return {
+                error: new Error('JWT has expired'),
+                data: null,
+            };
+        }
+        if (err instanceof JWTClaimValidationFailed) {
+            return {
+                error: new Error(`JWT claim validation failed: ${err.message}`),
+                data: null,
+            };
+        }
+        if (err instanceof JWSInvalid ||
+            err instanceof JWSSignatureVerificationFailed) {
+            return {
+                error: new Error('JWT signature verification failed'),
+                data: null,
+            };
+        }
+        return {
+            error: new Error(err instanceof Error
+                ? err.message
+                : 'Unknown error during JWT verification'),
+            data: null,
+        };
+    }
+}
+export async function verifyJWT(idToken, projectId, fetchFn) {
+    try {
+        const { kid } = decodeProtectedHeader(idToken);
+        if (!kid) {
+            return {
+                error: new Error('Invalid ID token: no KID found'),
+                data: null,
+            };
+        }
+        const { data, error } = await getJWKs(fetchFn);
+        if (error) {
+            return {
+                error,
+                data: null,
+            };
+        }
+        if (!data || !data.length) {
+            return {
+                error: new Error('No JWKs retrieved'),
+                data: null,
+            };
+        }
+        const jwk = data.find((key) => key.kid === kid);
+        if (!jwk) {
+            return {
+                error: new Error(`No matching JWK found for KID: ${kid}`),
+                data: null,
+            };
+        }
+        const { payload } = await jwtVerify(idToken, jwk, {
+            issuer: `https://securetoken.google.com/${projectId}`,
+            audience: projectId,
+            algorithms: ['RS256'],
+        });
+        return {
+            error: null,
+            data: payload,
+        };
+    }
+    catch (err) {
+        if (err instanceof JWTExpired) {
+            return {
+                error: new Error('JWT has expired'),
+                data: null,
+            };
+        }
+        if (err instanceof JWTClaimValidationFailed) {
+            return {
+                error: new Error(`JWT claim validation failed: ${err.message}`),
+                data: null,
+            };
+        }
+        if (err instanceof JWTInvalid ||
+            err instanceof JWSSignatureVerificationFailed) {
+            return {
+                error: new Error('JWT signature verification failed'),
+                data: null,
+            };
+        }
+        return {
+            error: new Error(err instanceof Error
+                ? err.message
+                : 'Unknown error during JWT verification'),
+            data: null,
+        };
+    }
+}
+export async function signJWT(serviceAccount) {
+    const { private_key, client_email } = serviceAccount;
+    try {
+        // Normalize Firebase JSON private key
+        const normalizedKey = private_key.replace(/\\n/g, '\n');
+        let key;
+        try {
+            // NOTE: we don't type this as KeyLike, just let jose's type defs handle it
+            key = await importPKCS8(normalizedKey, ALGORITHM_RS256);
+        }
+        catch (e) {
+            return {
+                data: null,
+                error: new Error('Failed to import private key. Please ensure the private key is correctly formatted.'),
+            };
+        }
+        const now = Math.floor(Date.now() / 1000);
+        const payload = {
+            scope: SCOPES.join(' '),
+            iss: client_email,
+            sub: client_email,
+            aud: OAUTH_TOKEN_URL,
+            iat: now,
+            exp: now + 3600, // 1 hour
+        };
+        const token = await new SignJWT(payload)
+            .setProtectedHeader({ alg: ALGORITHM_RS256, typ: 'JWT' })
+            .sign(key);
+        return {
+            data: token,
+            error: null,
+        };
+    }
+    catch (e) {
+        if (e instanceof JOSEError) {
+            return { data: null, error: e };
+        }
+        if (e instanceof Error) {
+            return { data: null, error: e };
+        }
+        return {
+            data: null,
+            error: new Error('Unknown error during JWT signing'),
+        };
+    }
+}
+const RESERVED_CLAIMS = [
+    'acr',
+    'amr',
+    'at_hash',
+    'aud',
+    'auth_time',
+    'azp',
+    'cnf',
+    'c_hash',
+    'exp',
+    'iat',
+    'iss',
+    'jti',
+    'nbf',
+    'nonce',
+    'sub',
+    'firebase',
+    'user_id',
+];
+export async function signJWTCustomToken(uid, serviceAccount, additionalClaims = {}) {
+    const { private_key, client_email } = serviceAccount;
+    if (Object.keys(additionalClaims).some((k) => RESERVED_CLAIMS.includes(k) || k.startsWith('firebase'))) {
+        return {
+            data: null,
+            error: new Error(`Reserved claims (${RESERVED_CLAIMS.join(', ')}) cannot be used in additionalClaims`),
+        };
+    }
+    const payload = { uid };
+    if (Object.keys(additionalClaims).length) {
+        payload.claims = additionalClaims;
+    }
+    const url = 'https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit';
+    try {
+        const key = await importPKCS8(private_key, 'RS256');
+        const token = await new SignJWT(payload)
+            .setProtectedHeader({ alg: 'RS256', typ: 'JWT' })
+            .setIssuer(client_email)
+            .setSubject(client_email)
+            .setAudience(url)
+            .setIssuedAt()
+            .setExpirationTime('1h')
+            .sign(key);
+        return {
+            data: token,
+            error: null,
+        };
+    }
+    catch (e) {
+        if (e instanceof errors.JOSEError) {
+            return {
+                data: null,
+                error: e,
+            };
+        }
+        return {
+            data: null,
+            error: e,
+        };
+    }
+}
+//# sourceMappingURL=firebase-jwt.js.map

package/dist/auth/firebase-jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-jwt.js","sourceRoot":"","sources":["../../src/auth/firebase-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,EACrB,MAAM,EACN,SAAS,EACT,WAAW,EACX,OAAO,EACP,UAAU,EACV,UAAU,GAEb,MAAM,MAAM,CAAC;AACd,OAAO,EACH,SAAS,EACT,UAAU,EACV,8BAA8B,EAC9B,wBAAwB,EACxB,UAAU,EACV,UAAU,GACb,MAAM,aAAa,CAAC;AAKrB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAEtE,MAAM,eAAe,GAAG,OAAgB,CAAC;AAEzC,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,MAAM,MAAM,GAAG;IACX,2CAA2C;IAC3C,iDAAiD;IACjD,uDAAuD;IACvD,uDAAuD;CACjD,CAAC;AAEX,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAC;AAE7D,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IAClD,IAAI,SAAS,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACtD,OAAO,UAAU,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,UAAU,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAExC,IAAI,SAAS,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACf,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,aAAqB,EACrB,SAAiB,EACjB,UAAmC,UAAU,CAAC,KAAK;IAEnD,IAAI,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAE9D,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC;aAC/C,CAAC;QACN,CAAC;QAED,2BAA2B;QAC3B,MAAM,MAAM,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAEpD,IACI,CAAC,MAAM,CAAC,GAAG;YACX,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EACtB,CAAC;YACC,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,sCAAsC,CAAC;gBACxD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,CAAC,eAAe,EAAE,CAAC;YACnB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,uCAAuC,CAAC;gBACzD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,cAAc,GAAG,uCAAuC,SAAS,EAAE,CAAC;QAC1E,MAAM,gBAAgB,GAAG,SAAS,CAAC;QAEnC,iCAAiC;QACjC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;YAC1D,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,gBAAgB;YAC1B,UAAU,EAAE,CAAC,eAAe,CAAC;SAChC,CAAC,CAAC;QAEH,OAAO;YACH,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,OAAiC;SAC1C,CAAC;IACN,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YAC5B,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,iBAAiB,CAAC;gBACnC,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;YAC1C,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC/D,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IACI,GAAG,YAAY,UAAU;YACzB,GAAG,YAAY,8BAA8B,EAC/C,CAAC;YACC,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mCAAmC,CAAC;gBACrD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,OAAO;YACH,KAAK,EAAE,IAAI,KAAK,CACZ,GAAG,YAAY,KAAK;gBAChB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,uCAAuC,CAChD;YACD,IAAI,EAAE,IAAI;SACb,CAAC;IACN,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,OAAe,EACf,SAAiB,EACjB,OAAiC;IAEjC,IAAI,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAE/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;gBAClD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QAE/C,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,KAAK;gBACL,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mBAAmB,CAAC;gBACrC,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAEjE,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC;gBACzD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE;YAC9C,MAAM,EAAE,kCAAkC,SAAS,EAAE;YACrD,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,CAAC,OAAO,CAAC;SACxB,CAAC,CAAC;QAEH,OAAO;YACH,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,OAAiC;SAC1C,CAAC;IACN,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YAC5B,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,iBAAiB,CAAC;gBACnC,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;YAC1C,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC/D,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IACI,GAAG,YAAY,UAAU;YACzB,GAAG,YAAY,8BAA8B,EAC/C,CAAC;YACC,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mCAAmC,CAAC;gBACrD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,OAAO;YACH,KAAK,EAAE,IAAI,KAAK,CACZ,GAAG,YAAY,KAAK;gBAChB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,uCAAuC,CAChD;YACD,IAAI,EAAE,IAAI;SACb,CAAC;IACN,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CACzB,cAA8B;IAE9B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC;IAErD,IAAI,CAAC;QACD,sCAAsC;QACtC,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAExD,IAAI,GAAG,CAAC;QAER,IAAI,CAAC;YACD,2EAA2E;YAC3E,GAAG,GAAG,MAAM,WAAW,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CACZ,qFAAqF,CACxF;aACJ,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAe;YACxB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,eAAe;YACpB,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI,EAAE,SAAS;SAC7B,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;aACnC,kBAAkB,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aACxD,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,OAAO;YACH,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpC,CAAC;QAED,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,KAAK,CAAC,kCAAkC,CAAC;SACvD,CAAC;IACN,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG;IACpB,KAAK;IACL,KAAK;IACL,SAAS;IACT,KAAK;IACL,WAAW;IACX,KAAK;IACL,KAAK;IACL,QAAQ;IACR,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,OAAO;IACP,KAAK;IACL,UAAU;IACV,SAAS;CACZ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,GAAW,EACX,cAA8B,EAC9B,mBAA2B,EAAE;IAE7B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC;IAErD,IACI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CACjE,EACH,CAAC;QACC,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,KAAK,CACZ,oBAAoB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CACvF;SACJ,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,GAAG,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,GAAG,gBAAgB,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GACL,2FAA2F,CAAC;IAEhG,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;aACnC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aAChD,SAAS,CAAC,YAAY,CAAC;aACvB,UAAU,CAAC,YAAY,CAAC;aACxB,WAAW,CAAC,GAAG,CAAC;aAChB,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,OAAO;YACH,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC;YAChC,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,CAAC;aACX,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,CAAU;SACpB,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/auth/firebase-jwt.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=firebase-jwt.test.d.ts.map

package/dist/auth/firebase-jwt.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-jwt.test.d.ts","sourceRoot":"","sources":["../../src/auth/firebase-jwt.test.ts"],"names":[],"mappings":""}

package/dist/auth/firebase-jwt.test.js

@@ -0,0 +1,144 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { verifySessionJWT, verifyJWT, signJWT, signJWTCustomToken, } from './firebase-jwt.js';
+import * as firebaseAuthEndpoints from './firebase-auth-endpoints.js';
+vi.mock('./firebase-auth-endpoints');
+describe('firebase-jwt', () => {
+    const mockProjectId = 'test-project-id';
+    const mockServiceAccount = {
+        type: 'service_account',
+        project_id: mockProjectId,
+        private_key_id: 'mock-private-key-id',
+        private_key: '-----BEGIN PRIVATE KEY-----\nMIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC\n-----END PRIVATE KEY-----',
+        client_email: 'test@test-project.iam.gserviceaccount.com',
+        client_id: 'mock-client-id',
+        auth_uri: 'https://accounts.google.com/o/oauth2/auth',
+        token_uri: 'https://oauth2.googleapis.com/token',
+        auth_provider_x509_cert_url: 'https://www.googleapis.com/oauth2/v1/certs',
+        client_x509_cert_url: 'https://www.googleapis.com/robot/v1/metadata/x509/test%40test-project.iam.gserviceaccount.com',
+    };
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    describe('verifySessionJWT', () => {
+        it('should return error when no public keys retrieved', async () => {
+            vi.spyOn(firebaseAuthEndpoints, 'getPublicKeys').mockResolvedValue({
+                data: null,
+                error: { code: 500, message: 'Failed to fetch keys' },
+            });
+            const result = await verifySessionJWT('invalid-token', mockProjectId);
+            expect(result.error).toBeDefined();
+            expect(result.data).toBeNull();
+        });
+        it('should return error when keyData is null', async () => {
+            vi.spyOn(firebaseAuthEndpoints, 'getPublicKeys').mockResolvedValue({
+                data: null,
+                error: null,
+            });
+            const result = await verifySessionJWT('invalid-token', mockProjectId);
+            expect(result.error).toEqual(new Error('No public keys retrieved'));
+            expect(result.data).toBeNull();
+        });
+        it('should return error when token has no KID', async () => {
+            vi.spyOn(firebaseAuthEndpoints, 'getPublicKeys').mockResolvedValue({
+                data: { key1: 'public-key' },
+                error: null,
+            });
+            const result = await verifySessionJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
+            expect(result.error?.message).toContain('Invalid session cookie');
+            expect(result.data).toBeNull();
+        });
+        it('should return error when public key not found for KID', async () => {
+            vi.spyOn(firebaseAuthEndpoints, 'getPublicKeys').mockResolvedValue({
+                data: { key1: 'public-key' },
+                error: null,
+            });
+            const result = await verifySessionJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleTIifQ.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
+            expect(result.error?.message).toContain('Invalid session cookie');
+            expect(result.data).toBeNull();
+        });
+    });
+    describe('verifyJWT', () => {
+        it('should return error when token has no KID', async () => {
+            const result = await verifyJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
+            expect(result.error?.message).toContain('Invalid ID token: no KID found');
+            expect(result.data).toBeNull();
+        });
+        it('should return error when getJWKs fails', async () => {
+            vi.spyOn(firebaseAuthEndpoints, 'getJWKs').mockResolvedValue({
+                data: null,
+                error: { code: 500, message: 'Network error' },
+            });
+            const result = await verifyJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleTEifQ.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
+            expect(result.error).toBeDefined();
+            expect(result.data).toBeNull();
+        });
+        it('should return error when no JWKs retrieved', async () => {
+            vi.spyOn(firebaseAuthEndpoints, 'getJWKs').mockResolvedValue({
+                data: null,
+                error: null,
+            });
+            const result = await verifyJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleTEifQ.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
+            expect(result.error?.message).toBe('No JWKs retrieved');
+            expect(result.data).toBeNull();
+        });
+        it('should return error when no matching JWK found', async () => {
+            vi.spyOn(firebaseAuthEndpoints, 'getJWKs').mockResolvedValue({
+                data: [{ kid: 'different-key', kty: 'RSA' }],
+                error: null,
+            });
+            const result = await verifyJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleTEifQ.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
+            expect(result.error?.message).toContain('No matching JWK found');
+            expect(result.data).toBeNull();
+        });
+    });
+    describe('signJWT', () => {
+        it('should return error when private key is invalid', async () => {
+            const invalidServiceAccount = {
+                ...mockServiceAccount,
+                private_key: 'invalid-key',
+            };
+            const result = await signJWT(invalidServiceAccount);
+            expect(result.error?.message).toContain('Failed to import private key');
+            expect(result.data).toBeNull();
+        });
+        it('should handle escaped newlines in private key', async () => {
+            const serviceAccountWithEscaped = {
+                ...mockServiceAccount,
+                private_key: mockServiceAccount.private_key.replace(/\n/g, '\\n'),
+            };
+            const result = await signJWT(serviceAccountWithEscaped);
+            expect(result.error).toBeDefined();
+        });
+    });
+    describe('signJWTCustomToken', () => {
+        const uid = 'test-uid-123';
+        it('should return error when reserved claims are used', async () => {
+            const result = await signJWTCustomToken(uid, mockServiceAccount, {
+                aud: 'reserved',
+            });
+            expect(result.error?.message).toContain('Reserved claims');
+            expect(result.data).toBeNull();
+        });
+        it('should return error when firebase prefixed claims are used', async () => {
+            const result = await signJWTCustomToken(uid, mockServiceAccount, {
+                firebase_custom: 'value',
+            });
+            expect(result.error?.message).toContain('Reserved claims');
+            expect(result.data).toBeNull();
+        });
+        it('should return error with invalid private key', async () => {
+            const invalidServiceAccount = {
+                ...mockServiceAccount,
+                private_key: 'invalid-key',
+            };
+            const result = await signJWTCustomToken(uid, invalidServiceAccount, {});
+            expect(result.error).toBeDefined();
+            expect(result.data).toBeNull();
+        });
+        it('should accept empty additional claims', async () => {
+            const result = await signJWTCustomToken(uid, mockServiceAccount);
+            expect(result.error).toBeDefined();
+        });
+    });
+});
+//# sourceMappingURL=firebase-jwt.test.js.map

package/dist/auth/firebase-jwt.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-jwt.test.js","sourceRoot":"","sources":["../../src/auth/firebase-jwt.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACH,gBAAgB,EAChB,SAAS,EACT,OAAO,EACP,kBAAkB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,qBAAqB,MAAM,8BAA8B,CAAC;AAEtE,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;AAErC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,MAAM,aAAa,GAAG,iBAAiB,CAAC;IACxC,MAAM,kBAAkB,GAAmB;QACvC,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,aAAa;QACzB,cAAc,EAAE,qBAAqB;QACrC,WAAW,EACP,6GAA6G;QACjH,YAAY,EAAE,2CAA2C;QACzD,SAAS,EAAE,gBAAgB;QAC3B,QAAQ,EAAE,2CAA2C;QACrD,SAAS,EAAE,qCAAqC;QAChD,2BAA2B,EACvB,4CAA4C;QAChD,oBAAoB,EAChB,+FAA+F;KACtG,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YAC/D,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE;aACxD,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACjC,eAAe,EACf,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACtD,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACjC,eAAe,EACf,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACvD,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBAC5B,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACjC,0EAA0E,EAC1E,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACnE,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBAC5B,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACjC,4FAA4F,EAC5F,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACvB,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,MAAM,GAAG,MAAM,SAAS,CAC1B,0EAA0E,EAC1E,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CACnC,gCAAgC,CACnC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACpD,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC;gBACzD,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE;aACjD,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC1B,4FAA4F,EAC5F,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YACxD,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC;gBACzD,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC1B,4FAA4F,EAC5F,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC;gBACzD,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;gBAC5C,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC1B,4FAA4F,EAC5F,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YACjE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,qBAAqB,GAAmB;gBAC1C,GAAG,kBAAkB;gBACrB,WAAW,EAAE,aAAa;aAC7B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAEpD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CACnC,8BAA8B,CACjC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,yBAAyB,GAAmB;gBAC9C,GAAG,kBAAkB;gBACrB,WAAW,EAAE,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAC/C,KAAK,EACL,KAAK,CACR;aACJ,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC;YAExD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,cAAc,CAAC;QAE3B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,EAAE;gBAC7D,GAAG,EAAE,UAAU;aAClB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,EAAE;gBAC7D,eAAe,EAAE,OAAO;aAC3B,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,qBAAqB,GAAmB;gBAC1C,GAAG,kBAAkB;gBACrB,WAAW,EAAE,aAAa;aAC7B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACnC,GAAG,EACH,qBAAqB,EACrB,EAAE,CACL,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAEjE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/auth/firebase-types.d.ts

@@ -0,0 +1,152 @@
+export type FirebaseRestError = {
+    error: {
+        code: number;
+        message: string;
+        errors?: {
+            message: string;
+            domain: string;
+            reason: string;
+        }[];
+    };
+};
+export type FirebaseConfig = {
+    apiKey: string;
+    authDomain: string;
+    projectId: string;
+    storageBucket?: string;
+    messagingSenderId?: string;
+    appId?: string;
+    measurementId?: string;
+};
+export type FirebaseCreateAuthUriResponse = {
+    authUri: string;
+    registered?: boolean;
+    providerId?: string;
+    allProviders?: string[];
+    signinMethods?: string[];
+    sessionId?: string;
+};
+export type FirebaseIdpSignInResponse = {
+    idToken: string;
+    refreshToken: string;
+    expiresIn: string;
+    localId: string;
+    email?: string;
+    emailVerified?: boolean;
+    providerId: string;
+    federatedId: string;
+    oauthIdToken?: string;
+    rawUserInfo?: string;
+};
+export type GoogleTokenResponse = {
+    access_token: string;
+    expires_in: number;
+    refresh_token?: string;
+    scope: string;
+    token_type: 'Bearer';
+    id_token: string;
+};
+export type FirebaseRefreshTokenResponse = {
+    access_token: string;
+    expires_in: string;
+    token_type: 'Bearer';
+    refresh_token: string;
+    id_token: string;
+    user_id: string;
+    project_id: string;
+};
+export type FirebaseIdTokenPayload = {
+    iss: string;
+    aud: string;
+    auth_time: number;
+    user_id: string;
+    sub: string;
+    iat: number;
+    exp: number;
+    email?: string;
+    email_verified?: boolean;
+    firebase: {
+        identities: {
+            email?: string[];
+            'google.com'?: string[];
+            [provider: string]: string[] | undefined;
+        };
+        sign_in_provider: string;
+        tenant?: string;
+    };
+    uid?: string;
+    name?: string;
+    picture?: string;
+};
+export interface UserMetadata {
+    creationTime: string;
+    lastSignInTime: string;
+    lastRefreshTime?: string;
+}
+export interface UserInfo {
+    uid: string;
+    displayName?: string;
+    email?: string;
+    photoURL?: string;
+    phoneNumber?: string;
+    providerId: string;
+}
+export type CustomClaims = Record<string, string | number | boolean | null>;
+export interface UserRecord {
+    uid: string;
+    email?: string;
+    emailVerified: boolean;
+    displayName?: string;
+    photoURL?: string;
+    phoneNumber?: string;
+    disabled: boolean;
+    metadata: UserMetadata;
+    providerData: UserInfo[];
+    tokensValidAfterTime?: string;
+    tenantId?: string;
+    customClaims?: {
+        [key: string]: CustomClaims;
+    };
+}
+export interface ServiceAccount {
+    type: 'service_account';
+    project_id: string;
+    private_key_id: string;
+    private_key: string;
+    client_email: string;
+    client_id: string;
+    auth_uri: string;
+    token_uri: string;
+    auth_provider_x509_cert_url: string;
+    client_x509_cert_url: string;
+    universe_domain?: string;
+}
+export interface AccountsQueryResponse {
+    recordsCount: string;
+    userInfo: UserInfo[];
+}
+export interface UserInfo {
+    localId: string;
+    email?: string;
+    displayName?: string;
+    photoUrl?: string;
+    emailVerified?: boolean;
+    providerUserInfo?: ProviderUserInfo[];
+    validSince?: string;
+    lastLoginAt?: string;
+    createdAt?: string;
+    customAttributes?: string;
+    emailLinkSignin?: boolean;
+    initialEmail?: string;
+    lastRefreshAt?: string;
+    disabled?: boolean;
+}
+export interface ProviderUserInfo {
+    providerId: string;
+    rawId?: string;
+    email?: string;
+    displayName?: string;
+    photoUrl?: string;
+    federatedId?: string;
+}
+//# sourceMappingURL=firebase-types.d.ts.map

package/dist/auth/firebase-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-types.d.ts","sourceRoot":"","sources":["../../src/auth/firebase-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG;IAC5B,KAAK,EAAE;QACH,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE;YACL,OAAO,EAAE,MAAM,CAAC;YAChB,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;SAClB,EAAE,CAAC;KACP,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,QAAQ,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,QAAQ,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE;QACN,UAAU,EAAE;YACR,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YACxB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;SAC5C,CAAC;QACF,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,YAAY;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;AAE5E,MAAM,WAAW,UAAU;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,YAAY,CAAC;IACvB,YAAY,EAAE,QAAQ,EAAE,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,iBAAiB,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B,EAAE,MAAM,CAAC;IACpC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,QAAQ,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB"}