firebase-admin-edge 1.0.1 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/cookie-types.d.ts +19 -0
- package/dist/auth/cookie-types.d.ts.map +1 -0
- package/dist/auth/cookie-types.js +2 -0
- package/dist/auth/cookie-types.js.map +1 -0
- package/dist/auth/firebase-admin-auth.d.ts +84 -0
- package/dist/auth/firebase-admin-auth.d.ts.map +1 -0
- package/dist/auth/firebase-admin-auth.js +196 -0
- package/dist/auth/firebase-admin-auth.js.map +1 -0
- package/dist/auth/firebase-admin-auth.test.d.ts +2 -0
- package/dist/auth/firebase-admin-auth.test.d.ts.map +1 -0
- package/dist/auth/firebase-admin-auth.test.js +445 -0
- package/dist/auth/firebase-admin-auth.test.js.map +1 -0
- package/dist/auth/firebase-auth-endpoints.d.ts +101 -0
- package/dist/auth/firebase-auth-endpoints.d.ts.map +1 -0
- package/dist/auth/firebase-auth-endpoints.js +134 -0
- package/dist/auth/firebase-auth-endpoints.js.map +1 -0
- package/dist/auth/firebase-auth-endpoints.test.d.ts +2 -0
- package/dist/auth/firebase-auth-endpoints.test.d.ts.map +1 -0
- package/dist/auth/firebase-auth-endpoints.test.js +259 -0
- package/dist/auth/firebase-auth-endpoints.test.js.map +1 -0
- package/dist/auth/firebase-auth.d.ts +43 -0
- package/dist/auth/firebase-auth.d.ts.map +1 -0
- package/dist/auth/firebase-auth.js +48 -0
- package/dist/auth/firebase-auth.js.map +1 -0
- package/dist/auth/firebase-auth.test.d.ts +2 -0
- package/dist/auth/firebase-auth.test.d.ts.map +1 -0
- package/dist/auth/firebase-auth.test.js +97 -0
- package/dist/auth/firebase-auth.test.js.map +1 -0
- package/dist/auth/firebase-jwt.d.ts +57 -0
- package/dist/auth/firebase-jwt.d.ts.map +1 -0
- package/dist/auth/firebase-jwt.js +275 -0
- package/dist/auth/firebase-jwt.js.map +1 -0
- package/dist/auth/firebase-jwt.test.d.ts +2 -0
- package/dist/auth/firebase-jwt.test.d.ts.map +1 -0
- package/dist/auth/firebase-jwt.test.js +144 -0
- package/dist/auth/firebase-jwt.test.js.map +1 -0
- package/dist/auth/firebase-types.d.ts +152 -0
- package/dist/auth/firebase-types.d.ts.map +1 -0
- package/dist/auth/firebase-types.js +2 -0
- package/dist/auth/firebase-types.js.map +1 -0
- package/dist/auth/google-oauth.d.ts +32 -0
- package/dist/auth/google-oauth.d.ts.map +1 -0
- package/dist/auth/google-oauth.js +93 -0
- package/dist/auth/google-oauth.js.map +1 -0
- package/dist/auth/google-oauth.test.d.ts +2 -0
- package/dist/auth/google-oauth.test.d.ts.map +1 -0
- package/dist/auth/google-oauth.test.js +124 -0
- package/dist/auth/google-oauth.test.js.map +1 -0
- package/dist/firebase-edge-server.d.ts +102 -0
- package/dist/firebase-edge-server.d.ts.map +1 -0
- package/dist/firebase-edge-server.js +184 -0
- package/dist/firebase-edge-server.js.map +1 -0
- package/dist/firebase-edge-server.test.d.ts +2 -0
- package/dist/firebase-edge-server.test.d.ts.map +1 -0
- package/dist/firebase-edge-server.test.js +164 -0
- package/dist/firebase-edge-server.test.js.map +1 -0
- package/dist/index.d.ts +4 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +4 -1
- package/dist/index.js.map +1 -1
- package/dist/rest-fetch.d.ts +18 -0
- package/dist/rest-fetch.d.ts.map +1 -0
- package/dist/rest-fetch.js +57 -0
- package/dist/rest-fetch.js.map +1 -0
- package/dist/rest-fetch.test.d.ts +2 -0
- package/dist/rest-fetch.test.d.ts.map +1 -0
- package/dist/rest-fetch.test.js +152 -0
- package/dist/rest-fetch.test.js.map +1 -0
- package/package.json +6 -2
- package/dist/utils.d.ts +0 -2
- package/dist/utils.d.ts.map +0 -1
- package/dist/utils.js +0 -2
- package/dist/utils.js.map +0 -1
- package/dist/utils.test.d.ts +0 -2
- package/dist/utils.test.d.ts.map +0 -1
- package/dist/utils.test.js +0 -6
- package/dist/utils.test.js.map +0 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"firebase-types.js","sourceRoot":"","sources":["../../src/auth/firebase-types.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
import type { GoogleTokenResponse, ServiceAccount } from './firebase-types.js';
|
|
2
|
+
export declare function createGoogleOAuthLoginUrl(redirect_uri: string, path: string, client_id: string): string;
|
|
3
|
+
export declare function exchangeCodeForGoogleIdToken(code: string, redirect_uri: string, client_id: string, client_secret: string, fetchFn?: typeof globalThis.fetch): Promise<{
|
|
4
|
+
data: GoogleTokenResponse | null;
|
|
5
|
+
error: {
|
|
6
|
+
code: number;
|
|
7
|
+
message: string;
|
|
8
|
+
errors?: {
|
|
9
|
+
message: string;
|
|
10
|
+
domain: string;
|
|
11
|
+
reason: string;
|
|
12
|
+
}[];
|
|
13
|
+
} | null;
|
|
14
|
+
}>;
|
|
15
|
+
export declare function getToken(serviceAccount: ServiceAccount, fetch?: typeof globalThis.fetch): Promise<{
|
|
16
|
+
data: null;
|
|
17
|
+
error: import("jose/errors").JOSEError | Error | {
|
|
18
|
+
message: string;
|
|
19
|
+
};
|
|
20
|
+
} | {
|
|
21
|
+
data: GoogleTokenResponse | null;
|
|
22
|
+
error: {
|
|
23
|
+
code: number;
|
|
24
|
+
message: string;
|
|
25
|
+
errors?: {
|
|
26
|
+
message: string;
|
|
27
|
+
domain: string;
|
|
28
|
+
reason: string;
|
|
29
|
+
}[];
|
|
30
|
+
} | null;
|
|
31
|
+
}>;
|
|
32
|
+
//# sourceMappingURL=google-oauth.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,mBAAmB,EACnB,cAAc,EACjB,MAAM,qBAAqB,CAAC;AAI7B,wBAAgB,yBAAyB,CACrC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,UAgBpB;AAED,wBAAsB,4BAA4B,CAC9C,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;;;;;;GAuBpC;AAED,wBAAsB,QAAQ,CAC1B,cAAc,EAAE,cAAc,EAC9B,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;;;;;;;;;;;GAmElC"}
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
import { restFetch } from '../rest-fetch.js';
|
|
2
|
+
import { signJWT } from './firebase-jwt.js';
|
|
3
|
+
export function createGoogleOAuthLoginUrl(redirect_uri, path, client_id) {
|
|
4
|
+
return new URL('https://accounts.google.com/o/oauth2/v2/auth?' +
|
|
5
|
+
new URLSearchParams({
|
|
6
|
+
client_id,
|
|
7
|
+
redirect_uri,
|
|
8
|
+
response_type: 'code',
|
|
9
|
+
scope: 'openid email profile',
|
|
10
|
+
access_type: 'offline',
|
|
11
|
+
prompt: 'consent',
|
|
12
|
+
state: JSON.stringify({
|
|
13
|
+
next: path,
|
|
14
|
+
}),
|
|
15
|
+
}).toString()).toString();
|
|
16
|
+
}
|
|
17
|
+
export async function exchangeCodeForGoogleIdToken(code, redirect_uri, client_id, client_secret, fetchFn) {
|
|
18
|
+
const url = 'https://oauth2.googleapis.com/token';
|
|
19
|
+
const { data, error } = await restFetch(url, {
|
|
20
|
+
global: { fetch: fetchFn },
|
|
21
|
+
body: {
|
|
22
|
+
code,
|
|
23
|
+
client_id,
|
|
24
|
+
client_secret,
|
|
25
|
+
redirect_uri,
|
|
26
|
+
grant_type: 'authorization_code',
|
|
27
|
+
},
|
|
28
|
+
form: true,
|
|
29
|
+
});
|
|
30
|
+
return {
|
|
31
|
+
data,
|
|
32
|
+
error: error ? error.error : null,
|
|
33
|
+
};
|
|
34
|
+
}
|
|
35
|
+
export async function getToken(serviceAccount, fetch) {
|
|
36
|
+
const url = 'https://oauth2.googleapis.com/token';
|
|
37
|
+
try {
|
|
38
|
+
const { data: jwtData, error: jwtError } = await signJWT(serviceAccount);
|
|
39
|
+
if (jwtError) {
|
|
40
|
+
return {
|
|
41
|
+
data: null,
|
|
42
|
+
error: jwtError,
|
|
43
|
+
};
|
|
44
|
+
}
|
|
45
|
+
if (!jwtData) {
|
|
46
|
+
return {
|
|
47
|
+
data: null,
|
|
48
|
+
error: {
|
|
49
|
+
code: 500,
|
|
50
|
+
message: 'No JWT data returned',
|
|
51
|
+
errors: [],
|
|
52
|
+
},
|
|
53
|
+
};
|
|
54
|
+
}
|
|
55
|
+
const { data, error } = await restFetch(url, {
|
|
56
|
+
global: { fetch },
|
|
57
|
+
body: {
|
|
58
|
+
grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
|
|
59
|
+
assertion: jwtData,
|
|
60
|
+
},
|
|
61
|
+
headers: {
|
|
62
|
+
'Cache-Control': 'no-cache',
|
|
63
|
+
Host: 'oauth2.googleapis.com',
|
|
64
|
+
},
|
|
65
|
+
form: true,
|
|
66
|
+
});
|
|
67
|
+
return {
|
|
68
|
+
data,
|
|
69
|
+
error: error ? error.error : null,
|
|
70
|
+
};
|
|
71
|
+
}
|
|
72
|
+
catch (e) {
|
|
73
|
+
if (e instanceof Error) {
|
|
74
|
+
return {
|
|
75
|
+
data: null,
|
|
76
|
+
error: {
|
|
77
|
+
code: 500,
|
|
78
|
+
message: e.message,
|
|
79
|
+
errors: [],
|
|
80
|
+
},
|
|
81
|
+
};
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
return {
|
|
85
|
+
data: null,
|
|
86
|
+
error: {
|
|
87
|
+
code: 500,
|
|
88
|
+
message: 'Unknown error',
|
|
89
|
+
errors: [],
|
|
90
|
+
},
|
|
91
|
+
};
|
|
92
|
+
}
|
|
93
|
+
//# sourceMappingURL=google-oauth.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-oauth.js","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,UAAU,yBAAyB,CACrC,YAAoB,EACpB,IAAY,EACZ,SAAiB;IAEjB,OAAO,IAAI,GAAG,CACV,+CAA+C;QAC3C,IAAI,eAAe,CAAC;YAChB,SAAS;YACT,YAAY;YACZ,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBAClB,IAAI,EAAE,IAAI;aACb,CAAC;SACL,CAAC,CAAC,QAAQ,EAAE,CACpB,CAAC,QAAQ,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,IAAY,EACZ,YAAoB,EACpB,SAAiB,EACjB,aAAqB,EACrB,OAAiC;IAEjC,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAElD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;QACH,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QAC1B,IAAI,EAAE;YACF,IAAI;YACJ,SAAS;YACT,aAAa;YACb,YAAY;YACZ,UAAU,EAAE,oBAAoB;SACnC;QACD,IAAI,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,OAAO;QACH,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KACpC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC1B,cAA8B,EAC9B,KAA+B;IAE/B,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAElD,IAAI,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GACpC,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;QAElC,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,QAAQ;aAClB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,sBAAsB;oBAC/B,MAAM,EAAE,EAAE;iBACb;aACJ,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;YACH,MAAM,EAAE,EAAE,KAAK,EAAE;YACjB,IAAI,EAAE;gBACF,UAAU,EAAE,6CAA6C;gBACzD,SAAS,EAAE,OAAO;aACrB;YACD,OAAO,EAAE;gBACL,eAAe,EAAE,UAAU;gBAC3B,IAAI,EAAE,uBAAuB;aAChC;YACD,IAAI,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;SACpC,CAAC;IACN,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YACrB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,MAAM,EAAE,EAAE;iBACb;aACJ,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO;QACH,IAAI,EAAE,IAAI;QACV,KAAK,EAAE;YACH,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,EAAE;SACb;KACJ,CAAC;AACN,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-oauth.test.d.ts","sourceRoot":"","sources":["../../src/auth/google-oauth.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,124 @@
|
|
|
1
|
+
import { describe, expect, it, beforeEach, vi } from 'vitest';
|
|
2
|
+
import { createGoogleOAuthLoginUrl, exchangeCodeForGoogleIdToken, getToken, } from './google-oauth.js';
|
|
3
|
+
const restFetchMock = vi.hoisted(() => vi.fn());
|
|
4
|
+
const signJWTMock = vi.hoisted(() => vi.fn());
|
|
5
|
+
vi.mock('../rest-fetch.js', () => ({
|
|
6
|
+
restFetch: restFetchMock,
|
|
7
|
+
}));
|
|
8
|
+
vi.mock('./firebase-jwt.js', () => ({
|
|
9
|
+
signJWT: signJWTMock,
|
|
10
|
+
}));
|
|
11
|
+
beforeEach(() => {
|
|
12
|
+
restFetchMock.mockReset();
|
|
13
|
+
signJWTMock.mockReset();
|
|
14
|
+
});
|
|
15
|
+
describe('createGoogleOAuthLoginUrl', () => {
|
|
16
|
+
it('builds expected consent screen URL', () => {
|
|
17
|
+
const url = createGoogleOAuthLoginUrl('https://example.com/callback', '/next/path', 'client-123');
|
|
18
|
+
const parsed = new URL(url);
|
|
19
|
+
expect(parsed.origin + parsed.pathname).toBe('https://accounts.google.com/o/oauth2/v2/auth');
|
|
20
|
+
expect(parsed.searchParams.get('client_id')).toBe('client-123');
|
|
21
|
+
expect(parsed.searchParams.get('redirect_uri')).toBe('https://example.com/callback');
|
|
22
|
+
expect(parsed.searchParams.get('response_type')).toBe('code');
|
|
23
|
+
expect(parsed.searchParams.get('scope')).toBe('openid email profile');
|
|
24
|
+
expect(parsed.searchParams.get('access_type')).toBe('offline');
|
|
25
|
+
expect(parsed.searchParams.get('prompt')).toBe('consent');
|
|
26
|
+
expect(JSON.parse(parsed.searchParams.get('state') ?? '')).toEqual({
|
|
27
|
+
next: '/next/path',
|
|
28
|
+
});
|
|
29
|
+
});
|
|
30
|
+
});
|
|
31
|
+
describe('exchangeCodeForGoogleIdToken', () => {
|
|
32
|
+
const payload = {
|
|
33
|
+
code: 'auth-code',
|
|
34
|
+
redirect_uri: 'https://example.com/callback',
|
|
35
|
+
client_id: 'client-123',
|
|
36
|
+
client_secret: 'secret-xyz',
|
|
37
|
+
};
|
|
38
|
+
it('returns token data when REST call succeeds', async () => {
|
|
39
|
+
const expectedData = { id_token: 'id', access_token: 'access' };
|
|
40
|
+
restFetchMock.mockResolvedValue({ data: expectedData, error: null });
|
|
41
|
+
const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
|
|
42
|
+
expect(restFetchMock).toHaveBeenCalledWith('https://oauth2.googleapis.com/token', expect.objectContaining({
|
|
43
|
+
body: expect.objectContaining(payload),
|
|
44
|
+
form: true,
|
|
45
|
+
}));
|
|
46
|
+
expect(result).toEqual({ data: expectedData, error: null });
|
|
47
|
+
});
|
|
48
|
+
it('returns upstream error when REST call fails', async () => {
|
|
49
|
+
const apiError = { code: 400, message: 'invalid_grant' };
|
|
50
|
+
restFetchMock.mockResolvedValue({
|
|
51
|
+
data: null,
|
|
52
|
+
error: { error: apiError },
|
|
53
|
+
});
|
|
54
|
+
const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
|
|
55
|
+
expect(result).toEqual({ data: null, error: apiError });
|
|
56
|
+
});
|
|
57
|
+
});
|
|
58
|
+
describe('getToken', () => {
|
|
59
|
+
const serviceAccount = {
|
|
60
|
+
client_email: 'test@project.iam.gserviceaccount.com',
|
|
61
|
+
private_key: '-----BEGIN PRIVATE KEY-----\nABC\n-----END PRIVATE KEY-----\n',
|
|
62
|
+
token_uri: 'https://oauth2.googleapis.com/token',
|
|
63
|
+
};
|
|
64
|
+
it('requests new token with signed JWT', async () => {
|
|
65
|
+
const fakeFetch = vi.fn();
|
|
66
|
+
const tokenData = { access_token: 'ya29', expires_in: 3600 };
|
|
67
|
+
signJWTMock.mockResolvedValue({ data: 'signed-jwt', error: null });
|
|
68
|
+
restFetchMock.mockResolvedValue({ data: tokenData, error: null });
|
|
69
|
+
const result = await getToken(serviceAccount, fakeFetch);
|
|
70
|
+
expect(signJWTMock).toHaveBeenCalledWith(serviceAccount);
|
|
71
|
+
expect(restFetchMock).toHaveBeenCalledWith('https://oauth2.googleapis.com/token', expect.objectContaining({
|
|
72
|
+
global: { fetch: fakeFetch },
|
|
73
|
+
body: {
|
|
74
|
+
grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
|
|
75
|
+
assertion: 'signed-jwt',
|
|
76
|
+
},
|
|
77
|
+
headers: expect.objectContaining({
|
|
78
|
+
'Cache-Control': 'no-cache',
|
|
79
|
+
Host: 'oauth2.googleapis.com',
|
|
80
|
+
}),
|
|
81
|
+
form: true,
|
|
82
|
+
}));
|
|
83
|
+
expect(result).toEqual({ data: tokenData, error: null });
|
|
84
|
+
});
|
|
85
|
+
it('short-circuits when signJWT returns error', async () => {
|
|
86
|
+
const jwtError = { code: 401, message: 'bad cert', errors: [] };
|
|
87
|
+
signJWTMock.mockResolvedValue({ data: null, error: jwtError });
|
|
88
|
+
const result = await getToken(serviceAccount);
|
|
89
|
+
expect(restFetchMock).not.toHaveBeenCalled();
|
|
90
|
+
expect(result).toEqual({ data: null, error: jwtError });
|
|
91
|
+
});
|
|
92
|
+
it('reports missing JWT data', async () => {
|
|
93
|
+
signJWTMock.mockResolvedValue({ data: null, error: null });
|
|
94
|
+
const result = await getToken(serviceAccount);
|
|
95
|
+
expect(result).toEqual({
|
|
96
|
+
data: null,
|
|
97
|
+
error: {
|
|
98
|
+
code: 500,
|
|
99
|
+
message: 'No JWT data returned',
|
|
100
|
+
errors: [],
|
|
101
|
+
},
|
|
102
|
+
});
|
|
103
|
+
});
|
|
104
|
+
it('returns REST error payload from Google', async () => {
|
|
105
|
+
const apiError = { code: 503, message: 'unavailable' };
|
|
106
|
+
signJWTMock.mockResolvedValue({ data: 'signed-jwt', error: null });
|
|
107
|
+
restFetchMock.mockResolvedValue({
|
|
108
|
+
data: null,
|
|
109
|
+
error: { error: apiError },
|
|
110
|
+
});
|
|
111
|
+
const result = await getToken(serviceAccount);
|
|
112
|
+
expect(result).toEqual({ data: null, error: apiError });
|
|
113
|
+
});
|
|
114
|
+
it('handles unexpected exceptions', async () => {
|
|
115
|
+
signJWTMock.mockResolvedValue({ data: 'signed-jwt', error: null });
|
|
116
|
+
restFetchMock.mockRejectedValue(new Error('boom'));
|
|
117
|
+
const result = await getToken(serviceAccount);
|
|
118
|
+
expect(result).toEqual({
|
|
119
|
+
data: null,
|
|
120
|
+
error: { code: 500, message: 'boom', errors: [] },
|
|
121
|
+
});
|
|
122
|
+
});
|
|
123
|
+
});
|
|
124
|
+
//# sourceMappingURL=google-oauth.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-oauth.test.js","sourceRoot":"","sources":["../../src/auth/google-oauth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACH,yBAAyB,EACzB,4BAA4B,EAC5B,QAAQ,GACX,MAAM,mBAAmB,CAAC;AAE3B,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAChD,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAE9C,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,SAAS,EAAE,aAAa;CAC3B,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,OAAO,EAAE,WAAW;CACvB,CAAC,CAAC,CAAC;AAEJ,UAAU,CAAC,GAAG,EAAE;IACZ,aAAa,CAAC,SAAS,EAAE,CAAC;IAC1B,WAAW,CAAC,SAAS,EAAE,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,yBAAyB,CACjC,8BAA8B,EAC9B,YAAY,EACZ,YAAY,CACf,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxC,8CAA8C,CACjD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAChD,8BAA8B,CACjC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,IAAI,EAAE,YAAY;SACrB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC1C,MAAM,OAAO,GAAG;QACZ,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,YAAY;QACvB,aAAa,EAAE,YAAY;KAC9B,CAAC;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,YAAY,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QAChE,aAAa,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACtC,qCAAqC,EACrC,MAAM,CAAC,gBAAgB,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,IAAI;SACb,CAAC,CACL,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QACzD,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACtB,MAAM,cAAc,GAAG;QACnB,YAAY,EAAE,sCAAsC;QACpD,WAAW,EACP,+DAA+D;QACnE,SAAS,EAAE,qCAAqC;KAC5C,CAAC;IAET,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7D,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,aAAa,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAEzD,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACtC,qCAAqC,EACrC,MAAM,CAAC,gBAAgB,CAAC;YACpB,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;YAC5B,IAAI,EAAE;gBACF,UAAU,EAAE,6CAA6C;gBACzD,SAAS,EAAE,YAAY;aAC1B;YACD,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAC7B,eAAe,EAAE,UAAU;gBAC3B,IAAI,EAAE,uBAAuB;aAChC,CAAC;YACF,IAAI,EAAE,IAAI;SACb,CAAC,CACL,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAChE,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACtC,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,IAAI;YACV,KAAK,EAAE;gBACH,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,sBAAsB;gBAC/B,MAAM,EAAE,EAAE;aACb;SACJ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACvD,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC3C,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,aAAa,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;SACpD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,102 @@
|
|
|
1
|
+
import type { GetSession, SetSession } from './auth/cookie-types.js';
|
|
2
|
+
import { FirebaseAdminAuth } from './auth/firebase-admin-auth.js';
|
|
3
|
+
import { FirebaseAuth } from './auth/firebase-auth.js';
|
|
4
|
+
import type { FirebaseConfig, ServiceAccount } from './auth/firebase-types.js';
|
|
5
|
+
export declare const OFFICIAL_FIREBASE_OAUTH_PROVIDERS: readonly ["google", "facebook", "apple", "twitter", "github", "microsoft", "yahoo", "playgames"];
|
|
6
|
+
type ProviderList = (typeof OFFICIAL_FIREBASE_OAUTH_PROVIDERS)[number];
|
|
7
|
+
type ProviderConfig = Partial<Record<ProviderList, {
|
|
8
|
+
client_id: string;
|
|
9
|
+
client_secret: string;
|
|
10
|
+
}>>;
|
|
11
|
+
type CookieConfig = {
|
|
12
|
+
getSession: GetSession;
|
|
13
|
+
saveSession: SetSession;
|
|
14
|
+
sessionName?: string;
|
|
15
|
+
};
|
|
16
|
+
export declare function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, providers, cookies, fetch, }: {
|
|
17
|
+
serviceAccount: ServiceAccount;
|
|
18
|
+
firebaseConfig: FirebaseConfig;
|
|
19
|
+
providers: ProviderConfig;
|
|
20
|
+
cookies: CookieConfig;
|
|
21
|
+
fetch?: typeof globalThis.fetch;
|
|
22
|
+
}): {
|
|
23
|
+
auth: FirebaseAuth;
|
|
24
|
+
adminAuth: FirebaseAdminAuth;
|
|
25
|
+
signOut: () => void;
|
|
26
|
+
getUser: (checkRevoked?: boolean) => Promise<{
|
|
27
|
+
data: null;
|
|
28
|
+
error: null;
|
|
29
|
+
} | {
|
|
30
|
+
data: null;
|
|
31
|
+
error: {
|
|
32
|
+
code: number;
|
|
33
|
+
message: string;
|
|
34
|
+
errors?: {
|
|
35
|
+
message: string;
|
|
36
|
+
domain: string;
|
|
37
|
+
reason: string;
|
|
38
|
+
}[];
|
|
39
|
+
} | import("jose/errors").JOSEError | Error | {
|
|
40
|
+
message: string;
|
|
41
|
+
};
|
|
42
|
+
} | {
|
|
43
|
+
data: import("./auth/firebase-types.js").FirebaseIdTokenPayload;
|
|
44
|
+
error: null;
|
|
45
|
+
}>;
|
|
46
|
+
getGoogleLoginURL: (redirect_uri: string, path: string) => Promise<string | {
|
|
47
|
+
error: Error;
|
|
48
|
+
}>;
|
|
49
|
+
signInWithGoogleWithCode: (code: string, redirect_uri: string) => Promise<{
|
|
50
|
+
data: null;
|
|
51
|
+
error: {
|
|
52
|
+
code: number;
|
|
53
|
+
message: string;
|
|
54
|
+
errors?: {
|
|
55
|
+
message: string;
|
|
56
|
+
domain: string;
|
|
57
|
+
reason: string;
|
|
58
|
+
}[];
|
|
59
|
+
};
|
|
60
|
+
} | {
|
|
61
|
+
data: null;
|
|
62
|
+
error: null;
|
|
63
|
+
} | {
|
|
64
|
+
error: {
|
|
65
|
+
code: number;
|
|
66
|
+
message: string;
|
|
67
|
+
errors?: {
|
|
68
|
+
message: string;
|
|
69
|
+
domain: string;
|
|
70
|
+
reason: string;
|
|
71
|
+
}[];
|
|
72
|
+
} | import("jose/errors").JOSEError | Error | {
|
|
73
|
+
message: string;
|
|
74
|
+
};
|
|
75
|
+
data?: undefined;
|
|
76
|
+
} | {
|
|
77
|
+
error: null;
|
|
78
|
+
data?: undefined;
|
|
79
|
+
}>;
|
|
80
|
+
getToken: () => Promise<{
|
|
81
|
+
data: null;
|
|
82
|
+
error: {
|
|
83
|
+
code: number;
|
|
84
|
+
message: string;
|
|
85
|
+
errors?: {
|
|
86
|
+
message: string;
|
|
87
|
+
domain: string;
|
|
88
|
+
reason: string;
|
|
89
|
+
}[];
|
|
90
|
+
} | import("jose/errors").JOSEError | Error | {
|
|
91
|
+
message: string;
|
|
92
|
+
};
|
|
93
|
+
} | {
|
|
94
|
+
data: null;
|
|
95
|
+
error: null;
|
|
96
|
+
} | {
|
|
97
|
+
data: import("./auth/firebase-types.js").FirebaseIdpSignInResponse;
|
|
98
|
+
error: null;
|
|
99
|
+
}>;
|
|
100
|
+
};
|
|
101
|
+
export {};
|
|
102
|
+
//# sourceMappingURL=firebase-edge-server.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"firebase-edge-server.d.ts","sourceRoot":"","sources":["../src/firebase-edge-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,UAAU,EACV,UAAU,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAgB/E,eAAO,MAAM,iCAAiC,kGASpC,CAAC;AAEX,KAAK,YAAY,GAAG,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,KAAK,cAAc,GAAG,OAAO,CACzB,MAAM,CACF,YAAY,EACZ;IACI,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACzB,CACJ,CACJ,CAAC;AAEF,KAAK,YAAY,GAAG;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,EACrC,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,KAAK,GACR,EAAE;IACC,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACnC;;;;6BAsBwC,OAAO;;;;;;;;;;;;;;;;;;;;sCAqCG,MAAM,QAAQ,MAAM;;;qCAezD,MAAM,gBACE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4I3B"}
|
|
@@ -0,0 +1,184 @@
|
|
|
1
|
+
import { FirebaseAdminAuth } from './auth/firebase-admin-auth.js';
|
|
2
|
+
import { FirebaseAuth } from './auth/firebase-auth.js';
|
|
3
|
+
import { signJWTCustomToken } from './auth/firebase-jwt.js';
|
|
4
|
+
import { createGoogleOAuthLoginUrl, exchangeCodeForGoogleIdToken, } from './auth/google-oauth.js';
|
|
5
|
+
const DEFAULT_SESSION_NAME = '__session';
|
|
6
|
+
const COOKIE_OPTIONS = {
|
|
7
|
+
httpOnly: true,
|
|
8
|
+
secure: true,
|
|
9
|
+
sameSite: 'lax',
|
|
10
|
+
path: '/',
|
|
11
|
+
maxAge: 60 * 60 * 24 * 5 * 1000,
|
|
12
|
+
};
|
|
13
|
+
export const OFFICIAL_FIREBASE_OAUTH_PROVIDERS = [
|
|
14
|
+
'google',
|
|
15
|
+
'facebook',
|
|
16
|
+
'apple',
|
|
17
|
+
'twitter',
|
|
18
|
+
'github',
|
|
19
|
+
'microsoft',
|
|
20
|
+
'yahoo',
|
|
21
|
+
'playgames',
|
|
22
|
+
];
|
|
23
|
+
export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, providers, cookies, fetch, }) {
|
|
24
|
+
const sessionName = cookies.sessionName || DEFAULT_SESSION_NAME;
|
|
25
|
+
const getSession = cookies.getSession;
|
|
26
|
+
const saveSession = cookies.saveSession;
|
|
27
|
+
const fetchImpl = fetch ?? globalThis.fetch;
|
|
28
|
+
const auth = new FirebaseAuth(firebaseConfig, fetchImpl);
|
|
29
|
+
const adminAuth = new FirebaseAdminAuth(serviceAccount, fetchImpl);
|
|
30
|
+
function deleteSession() {
|
|
31
|
+
saveSession(sessionName, '', {
|
|
32
|
+
...COOKIE_OPTIONS,
|
|
33
|
+
maxAge: 0,
|
|
34
|
+
});
|
|
35
|
+
}
|
|
36
|
+
function signOut() {
|
|
37
|
+
deleteSession();
|
|
38
|
+
return;
|
|
39
|
+
}
|
|
40
|
+
async function getUser(checkRevoked = false) {
|
|
41
|
+
const sessionCookie = await getSession(sessionName);
|
|
42
|
+
if (!sessionCookie) {
|
|
43
|
+
return {
|
|
44
|
+
data: null,
|
|
45
|
+
error: null,
|
|
46
|
+
};
|
|
47
|
+
}
|
|
48
|
+
const { data: decodedToken, error: verifyError } = await adminAuth.verifySessionCookie(sessionCookie, checkRevoked);
|
|
49
|
+
if (verifyError) {
|
|
50
|
+
deleteSession();
|
|
51
|
+
return {
|
|
52
|
+
data: null,
|
|
53
|
+
error: verifyError,
|
|
54
|
+
};
|
|
55
|
+
}
|
|
56
|
+
if (!decodedToken) {
|
|
57
|
+
deleteSession();
|
|
58
|
+
return {
|
|
59
|
+
data: null,
|
|
60
|
+
error: null,
|
|
61
|
+
};
|
|
62
|
+
}
|
|
63
|
+
return {
|
|
64
|
+
data: decodedToken,
|
|
65
|
+
error: null,
|
|
66
|
+
};
|
|
67
|
+
}
|
|
68
|
+
async function getGoogleLoginURL(redirect_uri, path) {
|
|
69
|
+
deleteSession();
|
|
70
|
+
if (!providers.google) {
|
|
71
|
+
return {
|
|
72
|
+
error: new Error('Google provider not configured'),
|
|
73
|
+
};
|
|
74
|
+
}
|
|
75
|
+
const { client_id } = providers.google;
|
|
76
|
+
return createGoogleOAuthLoginUrl(redirect_uri, path, client_id);
|
|
77
|
+
}
|
|
78
|
+
async function signInWithGoogleWithCode(code, redirect_uri) {
|
|
79
|
+
if (!providers.google) {
|
|
80
|
+
return {
|
|
81
|
+
error: new Error('Google provider not configured'),
|
|
82
|
+
};
|
|
83
|
+
}
|
|
84
|
+
const { client_id, client_secret } = providers.google;
|
|
85
|
+
const { data: exchangeData, error: exchangeError } = await exchangeCodeForGoogleIdToken(code, redirect_uri, client_id, client_secret, fetchImpl);
|
|
86
|
+
if (exchangeError) {
|
|
87
|
+
return {
|
|
88
|
+
error: exchangeError,
|
|
89
|
+
};
|
|
90
|
+
}
|
|
91
|
+
if (!exchangeData) {
|
|
92
|
+
return {
|
|
93
|
+
error: new Error('No exchange data!'),
|
|
94
|
+
};
|
|
95
|
+
}
|
|
96
|
+
const { data: signInData, error: signInError } = await auth.signInWithProvider(exchangeData.id_token, redirect_uri);
|
|
97
|
+
if (signInError) {
|
|
98
|
+
console.error(JSON.stringify(signInError));
|
|
99
|
+
return {
|
|
100
|
+
data: null,
|
|
101
|
+
error: signInError,
|
|
102
|
+
};
|
|
103
|
+
}
|
|
104
|
+
if (!signInData) {
|
|
105
|
+
return {
|
|
106
|
+
data: null,
|
|
107
|
+
error: null,
|
|
108
|
+
};
|
|
109
|
+
}
|
|
110
|
+
const { data: sessionCookie, error: sessionError } = await adminAuth.createSessionCookie(signInData.idToken, {
|
|
111
|
+
expiresIn: 60 * 60 * 24 * 5 * 1000,
|
|
112
|
+
});
|
|
113
|
+
if (sessionError) {
|
|
114
|
+
return {
|
|
115
|
+
error: sessionError,
|
|
116
|
+
};
|
|
117
|
+
}
|
|
118
|
+
if (!sessionCookie) {
|
|
119
|
+
return {
|
|
120
|
+
error: new Error('No session cookie returned'),
|
|
121
|
+
};
|
|
122
|
+
}
|
|
123
|
+
saveSession(sessionName, sessionCookie, COOKIE_OPTIONS);
|
|
124
|
+
return {
|
|
125
|
+
error: null,
|
|
126
|
+
};
|
|
127
|
+
}
|
|
128
|
+
async function getToken() {
|
|
129
|
+
const { data: verifiedToken, error: verifyError } = await getUser();
|
|
130
|
+
if (verifyError) {
|
|
131
|
+
return {
|
|
132
|
+
data: null,
|
|
133
|
+
error: verifyError,
|
|
134
|
+
};
|
|
135
|
+
}
|
|
136
|
+
if (!verifiedToken) {
|
|
137
|
+
return {
|
|
138
|
+
data: null,
|
|
139
|
+
error: null,
|
|
140
|
+
};
|
|
141
|
+
}
|
|
142
|
+
const { data: signJWTData, error: signJWTError } = await signJWTCustomToken(verifiedToken.sub, serviceAccount);
|
|
143
|
+
if (signJWTError) {
|
|
144
|
+
return {
|
|
145
|
+
data: null,
|
|
146
|
+
error: signJWTError,
|
|
147
|
+
};
|
|
148
|
+
}
|
|
149
|
+
if (!signJWTData) {
|
|
150
|
+
return {
|
|
151
|
+
data: null,
|
|
152
|
+
error: new Error('No custom token signed'),
|
|
153
|
+
};
|
|
154
|
+
}
|
|
155
|
+
const { data: signInData, error: signInError } = await auth.signInWithCustomToken(signJWTData);
|
|
156
|
+
if (signInError) {
|
|
157
|
+
console.error(signInError);
|
|
158
|
+
return {
|
|
159
|
+
data: null,
|
|
160
|
+
error: signInError,
|
|
161
|
+
};
|
|
162
|
+
}
|
|
163
|
+
if (!signInData) {
|
|
164
|
+
return {
|
|
165
|
+
data: null,
|
|
166
|
+
error: null,
|
|
167
|
+
};
|
|
168
|
+
}
|
|
169
|
+
return {
|
|
170
|
+
data: signInData,
|
|
171
|
+
error: null,
|
|
172
|
+
};
|
|
173
|
+
}
|
|
174
|
+
return {
|
|
175
|
+
auth,
|
|
176
|
+
adminAuth,
|
|
177
|
+
signOut,
|
|
178
|
+
getUser,
|
|
179
|
+
getGoogleLoginURL,
|
|
180
|
+
signInWithGoogleWithCode,
|
|
181
|
+
getToken,
|
|
182
|
+
};
|
|
183
|
+
}
|
|
184
|
+
//# sourceMappingURL=firebase-edge-server.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"firebase-edge-server.js","sourceRoot":"","sources":["../src/firebase-edge-server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EACH,yBAAyB,EACzB,4BAA4B,GAC/B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC,MAAM,cAAc,GAAG;IACnB,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI;CACjB,CAAC;AAEnB,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC7C,QAAQ;IACR,UAAU;IACV,OAAO;IACP,SAAS;IACT,QAAQ;IACR,WAAW;IACX,OAAO;IACP,WAAW;CACL,CAAC;AAoBX,MAAM,UAAU,wBAAwB,CAAC,EACrC,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,KAAK,GAOR;IACG,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAExC,MAAM,SAAS,GAAG,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAEnE,SAAS,aAAa;QAClB,WAAW,CAAC,WAAW,EAAE,EAAE,EAAE;YACzB,GAAG,cAAc;YACjB,MAAM,EAAE,CAAC;SACZ,CAAC,CAAC;IACP,CAAC;IAED,SAAS,OAAO;QACZ,aAAa,EAAE,CAAC;QAChB,OAAO;IACX,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,eAAwB,KAAK;QAChD,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,GAC5C,MAAM,SAAS,CAAC,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAErE,IAAI,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,CAAC;YAEhB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAEhB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,UAAU,iBAAiB,CAAC,YAAoB,EAAE,IAAY;QAC/D,aAAa,EAAE,CAAC;QAEhB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACrD,CAAC;QACN,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QAEvC,OAAO,yBAAyB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,UAAU,wBAAwB,CACnC,IAAY,EACZ,YAAoB;QAEpB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACrD,CAAC;QACN,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QAEtD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,GAC9C,MAAM,4BAA4B,CAC9B,IAAI,EACJ,YAAY,EACZ,SAAS,EACT,aAAa,EACb,SAAS,CACZ,CAAC;QAEN,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,KAAK,EAAE,aAAa;aACvB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mBAAmB,CAAC;aACxC,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,GAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;YAC3C,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,GAC9C,MAAM,SAAS,CAAC,mBAAmB,CAAC,UAAU,CAAC,OAAO,EAAE;YACpD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI;SACrC,CAAC,CAAC;QAEP,IAAI,YAAY,EAAE,CAAC;YACf,OAAO;gBACH,KAAK,EAAE,YAAY;aACtB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,4BAA4B,CAAC;aACjD,CAAC;QACN,CAAC;QAED,WAAW,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;QAExD,OAAO;YACH,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,UAAU,QAAQ;QACnB,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAEpE,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,GAC5C,MAAM,kBAAkB,CAAC,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAEhE,IAAI,YAAY,EAAE,CAAC;YACf,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,YAAY;aACtB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,wBAAwB,CAAC;aAC7C,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,GAC1C,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAElD,IAAI,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,OAAO;QACH,IAAI;QACJ,SAAS;QACT,OAAO;QACP,OAAO;QACP,iBAAiB;QACjB,wBAAwB;QACxB,QAAQ;KACX,CAAC;AACN,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"firebase-edge-server.test.d.ts","sourceRoot":"","sources":["../src/firebase-edge-server.test.ts"],"names":[],"mappings":""}
|