firebase-admin-edge 1.0.11 → 1.0.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -7
- package/dist/auth/firebase-admin-auth.js +33 -33
- package/dist/auth/firebase-admin-auth.js.map +1 -1
- package/dist/auth/firebase-admin-auth.test.js +71 -71
- package/dist/auth/firebase-admin-auth.test.js.map +1 -1
- package/dist/auth/firebase-auth-endpoints.js +27 -27
- package/dist/auth/firebase-auth-endpoints.test.js +29 -29
- package/dist/auth/firebase-auth-endpoints.test.js.map +1 -1
- package/dist/auth/firebase-auth.js +7 -7
- package/dist/auth/firebase-auth.js.map +1 -1
- package/dist/auth/firebase-auth.test.js +9 -9
- package/dist/auth/firebase-jwt.js +32 -32
- package/dist/auth/firebase-jwt.js.map +1 -1
- package/dist/auth/firebase-jwt.test.js +14 -14
- package/dist/auth/firebase-jwt.test.js.map +1 -1
- package/dist/auth/github-oauth.d.ts +16 -0
- package/dist/auth/github-oauth.d.ts.map +1 -0
- package/dist/auth/github-oauth.js +31 -0
- package/dist/auth/github-oauth.js.map +1 -0
- package/dist/auth/google-oauth.d.ts.map +1 -1
- package/dist/auth/google-oauth.js +16 -15
- package/dist/auth/google-oauth.js.map +1 -1
- package/dist/auth/google-oauth.test.js +15 -14
- package/dist/auth/google-oauth.test.js.map +1 -1
- package/dist/firebase-edge-server.d.ts +14 -74
- package/dist/firebase-edge-server.d.ts.map +1 -1
- package/dist/firebase-edge-server.js +105 -278
- package/dist/firebase-edge-server.js.map +1 -1
- package/dist/firebase-edge-server.test.js +115 -76
- package/dist/firebase-edge-server.test.js.map +1 -1
- package/dist/rest-fetch.d.ts.map +1 -1
- package/dist/rest-fetch.js +7 -6
- package/dist/rest-fetch.js.map +1 -1
- package/dist/rest-fetch.test.js +48 -30
- package/dist/rest-fetch.test.js.map +1 -1
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"firebase-jwt.js","sourceRoot":"","sources":["../../src/auth/firebase-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,EACrB,MAAM,EACN,SAAS,EACT,WAAW,EACX,OAAO,EACP,UAAU,EACV,UAAU,
|
|
1
|
+
{"version":3,"file":"firebase-jwt.js","sourceRoot":"","sources":["../../src/auth/firebase-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,EACrB,MAAM,EACN,SAAS,EACT,WAAW,EACX,OAAO,EACP,UAAU,EACV,UAAU,EAEb,MAAM,MAAM,CAAC;AACd,OAAO,EACH,SAAS,EACT,UAAU,EACV,8BAA8B,EAC9B,wBAAwB,EACxB,UAAU,EACV,UAAU,EACb,MAAM,aAAa,CAAC;AAKrB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAEtE,MAAM,eAAe,GAAG,OAAgB,CAAC;AAEzC,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,MAAM,MAAM,GAAG;IACX,2CAA2C;IAC3C,iDAAiD;IACjD,uDAAuD;IACvD,uDAAuD;CACjD,CAAC;AAEX,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAC;AAE7D,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IAClD,IAAI,SAAS,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACtD,OAAO,UAAU,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,UAAU,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAExC,IAAI,SAAS,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACf,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,aAAqB,EACrB,SAAiB,EACjB,UAAmC,UAAU,CAAC,KAAK;IAEnD,IAAI,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAE9D,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK;aACR,CAAC;QACN,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC;aAC/C,CAAC;QACN,CAAC;QAED,2BAA2B;QAC3B,MAAM,MAAM,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAEpD,IACI,CAAC,MAAM,CAAC,GAAG;YACX,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EACtB,CAAC;YACC,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,sCAAsC,CAAC;gBACxD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,CAAC,eAAe,EAAE,CAAC;YACnB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,uCAAuC,CAAC;gBACzD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,cAAc,GAAG,uCAAuC,SAAS,EAAE,CAAC;QAC1E,MAAM,gBAAgB,GAAG,SAAS,CAAC;QAEnC,iCAAiC;QACjC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAC;QAE5D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;YAC1D,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,gBAAgB;YAC1B,UAAU,EAAE,CAAC,eAAe,CAAC;SAChC,CAAC,CAAC;QAEH,OAAO;YACH,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,OAAiC;SAC1C,CAAC;IACN,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YAC5B,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,iBAAiB,CAAC;gBACnC,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;YAC1C,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC/D,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IACI,GAAG,YAAY,UAAU;YACzB,GAAG,YAAY,8BAA8B,EAC/C,CAAC;YACC,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mCAAmC,CAAC;gBACrD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,OAAO;YACH,KAAK,EAAE,IAAI,KAAK,CACZ,GAAG,YAAY,KAAK;gBAChB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,uCAAuC,CAChD;YACD,IAAI,EAAE,IAAI;SACb,CAAC;IACN,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,OAAe,EACf,SAAiB,EACjB,OAAiC;IAEjC,IAAI,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAE/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;gBAClD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QAE/C,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,KAAK;gBACL,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mBAAmB,CAAC;gBACrC,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAEjE,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC;gBACzD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE;YAC9C,MAAM,EAAE,kCAAkC,SAAS,EAAE;YACrD,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,CAAC,OAAO,CAAC;SACxB,CAAC,CAAC;QAEH,OAAO;YACH,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,OAAiC;SAC1C,CAAC;IACN,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YAC5B,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,iBAAiB,CAAC;gBACnC,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;YAC1C,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC/D,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,IACI,GAAG,YAAY,UAAU;YACzB,GAAG,YAAY,8BAA8B,EAC/C,CAAC;YACC,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mCAAmC,CAAC;gBACrD,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;QAED,OAAO;YACH,KAAK,EAAE,IAAI,KAAK,CACZ,GAAG,YAAY,KAAK;gBAChB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,uCAAuC,CAChD;YACD,IAAI,EAAE,IAAI;SACb,CAAC;IACN,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CACzB,cAA8B;IAE9B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC;IAErD,IAAI,CAAC;QACD,sCAAsC;QACtC,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAExD,IAAI,GAAG,CAAC;QAER,IAAI,CAAC;YACD,2EAA2E;YAC3E,GAAG,GAAG,MAAM,WAAW,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CACZ,qFAAqF,CACxF;aACJ,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAe;YACxB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,eAAe;YACpB,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,SAAS;SAC5B,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;aACnC,kBAAkB,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aACxD,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,OAAO;YACH,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpC,CAAC;QAED,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,KAAK,CAAC,kCAAkC,CAAC;SACvD,CAAC;IACN,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG;IACpB,KAAK;IACL,KAAK;IACL,SAAS;IACT,KAAK;IACL,WAAW;IACX,KAAK;IACL,KAAK;IACL,QAAQ;IACR,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,OAAO;IACP,KAAK;IACL,UAAU;IACV,SAAS;CACZ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,GAAW,EACX,cAA8B,EAC9B,mBAA2B,EAAE;IAE7B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC;IAErD,IACI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CACjE,EACH,CAAC;QACC,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,KAAK,CACZ,oBAAoB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CACvF;SACJ,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,GAAG,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,GAAG,gBAAgB,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GACL,2FAA2F,CAAC;IAEhG,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;aACnC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aAChD,SAAS,CAAC,YAAY,CAAC;aACvB,UAAU,CAAC,YAAY,CAAC;aACxB,WAAW,CAAC,GAAG,CAAC;aAChB,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,OAAO;YACH,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC;YAChC,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,CAAC;aACX,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,CAAU;SACpB,CAAC;IACN,CAAC;AACL,CAAC"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { describe, it, expect, vi, beforeEach } from 'vitest';
|
|
2
|
-
import { verifySessionJWT, verifyJWT, signJWT, signJWTCustomToken
|
|
2
|
+
import { verifySessionJWT, verifyJWT, signJWT, signJWTCustomToken } from './firebase-jwt.js';
|
|
3
3
|
import * as firebaseAuthEndpoints from './firebase-auth-endpoints.js';
|
|
4
4
|
vi.mock('./firebase-auth-endpoints');
|
|
5
5
|
describe('firebase-jwt', () => {
|
|
@@ -14,7 +14,7 @@ describe('firebase-jwt', () => {
|
|
|
14
14
|
auth_uri: 'https://accounts.google.com/o/oauth2/auth',
|
|
15
15
|
token_uri: 'https://oauth2.googleapis.com/token',
|
|
16
16
|
auth_provider_x509_cert_url: 'https://www.googleapis.com/oauth2/v1/certs',
|
|
17
|
-
client_x509_cert_url: 'https://www.googleapis.com/robot/v1/metadata/x509/test%40test-project.iam.gserviceaccount.com'
|
|
17
|
+
client_x509_cert_url: 'https://www.googleapis.com/robot/v1/metadata/x509/test%40test-project.iam.gserviceaccount.com'
|
|
18
18
|
};
|
|
19
19
|
beforeEach(() => {
|
|
20
20
|
vi.clearAllMocks();
|
|
@@ -23,7 +23,7 @@ describe('firebase-jwt', () => {
|
|
|
23
23
|
it('should return error when no public keys retrieved', async () => {
|
|
24
24
|
vi.spyOn(firebaseAuthEndpoints, 'getPublicKeys').mockResolvedValue({
|
|
25
25
|
data: null,
|
|
26
|
-
error: { code: 500, message: 'Failed to fetch keys' }
|
|
26
|
+
error: { code: 500, message: 'Failed to fetch keys' }
|
|
27
27
|
});
|
|
28
28
|
const result = await verifySessionJWT('invalid-token', mockProjectId);
|
|
29
29
|
expect(result.error).toBeDefined();
|
|
@@ -32,7 +32,7 @@ describe('firebase-jwt', () => {
|
|
|
32
32
|
it('should return error when keyData is null', async () => {
|
|
33
33
|
vi.spyOn(firebaseAuthEndpoints, 'getPublicKeys').mockResolvedValue({
|
|
34
34
|
data: null,
|
|
35
|
-
error: null
|
|
35
|
+
error: null
|
|
36
36
|
});
|
|
37
37
|
const result = await verifySessionJWT('invalid-token', mockProjectId);
|
|
38
38
|
expect(result.error).toEqual(new Error('No public keys retrieved'));
|
|
@@ -41,7 +41,7 @@ describe('firebase-jwt', () => {
|
|
|
41
41
|
it('should return error when token has no KID', async () => {
|
|
42
42
|
vi.spyOn(firebaseAuthEndpoints, 'getPublicKeys').mockResolvedValue({
|
|
43
43
|
data: { key1: 'public-key' },
|
|
44
|
-
error: null
|
|
44
|
+
error: null
|
|
45
45
|
});
|
|
46
46
|
const result = await verifySessionJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
|
|
47
47
|
expect(result.error?.message).toContain('Invalid session cookie');
|
|
@@ -50,7 +50,7 @@ describe('firebase-jwt', () => {
|
|
|
50
50
|
it('should return error when public key not found for KID', async () => {
|
|
51
51
|
vi.spyOn(firebaseAuthEndpoints, 'getPublicKeys').mockResolvedValue({
|
|
52
52
|
data: { key1: 'public-key' },
|
|
53
|
-
error: null
|
|
53
|
+
error: null
|
|
54
54
|
});
|
|
55
55
|
const result = await verifySessionJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleTIifQ.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
|
|
56
56
|
expect(result.error?.message).toContain('Invalid session cookie');
|
|
@@ -66,7 +66,7 @@ describe('firebase-jwt', () => {
|
|
|
66
66
|
it('should return error when getJWKs fails', async () => {
|
|
67
67
|
vi.spyOn(firebaseAuthEndpoints, 'getJWKs').mockResolvedValue({
|
|
68
68
|
data: null,
|
|
69
|
-
error: { code: 500, message: 'Network error' }
|
|
69
|
+
error: { code: 500, message: 'Network error' }
|
|
70
70
|
});
|
|
71
71
|
const result = await verifyJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleTEifQ.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
|
|
72
72
|
expect(result.error).toBeDefined();
|
|
@@ -75,7 +75,7 @@ describe('firebase-jwt', () => {
|
|
|
75
75
|
it('should return error when no JWKs retrieved', async () => {
|
|
76
76
|
vi.spyOn(firebaseAuthEndpoints, 'getJWKs').mockResolvedValue({
|
|
77
77
|
data: null,
|
|
78
|
-
error: null
|
|
78
|
+
error: null
|
|
79
79
|
});
|
|
80
80
|
const result = await verifyJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleTEifQ.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
|
|
81
81
|
expect(result.error?.message).toBe('No JWKs retrieved');
|
|
@@ -84,7 +84,7 @@ describe('firebase-jwt', () => {
|
|
|
84
84
|
it('should return error when no matching JWK found', async () => {
|
|
85
85
|
vi.spyOn(firebaseAuthEndpoints, 'getJWKs').mockResolvedValue({
|
|
86
86
|
data: [{ kid: 'different-key', kty: 'RSA' }],
|
|
87
|
-
error: null
|
|
87
|
+
error: null
|
|
88
88
|
});
|
|
89
89
|
const result = await verifyJWT('eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImtleTEifQ.eyJzdWIiOiIxMjM0NTY3ODkwIn0.invalid', mockProjectId);
|
|
90
90
|
expect(result.error?.message).toContain('No matching JWK found');
|
|
@@ -95,7 +95,7 @@ describe('firebase-jwt', () => {
|
|
|
95
95
|
it('should return error when private key is invalid', async () => {
|
|
96
96
|
const invalidServiceAccount = {
|
|
97
97
|
...mockServiceAccount,
|
|
98
|
-
private_key: 'invalid-key'
|
|
98
|
+
private_key: 'invalid-key'
|
|
99
99
|
};
|
|
100
100
|
const result = await signJWT(invalidServiceAccount);
|
|
101
101
|
expect(result.error?.message).toContain('Failed to import private key');
|
|
@@ -104,7 +104,7 @@ describe('firebase-jwt', () => {
|
|
|
104
104
|
it('should handle escaped newlines in private key', async () => {
|
|
105
105
|
const serviceAccountWithEscaped = {
|
|
106
106
|
...mockServiceAccount,
|
|
107
|
-
private_key: mockServiceAccount.private_key.replace(/\n/g, '\\n')
|
|
107
|
+
private_key: mockServiceAccount.private_key.replace(/\n/g, '\\n')
|
|
108
108
|
};
|
|
109
109
|
const result = await signJWT(serviceAccountWithEscaped);
|
|
110
110
|
expect(result.error).toBeDefined();
|
|
@@ -114,14 +114,14 @@ describe('firebase-jwt', () => {
|
|
|
114
114
|
const uid = 'test-uid-123';
|
|
115
115
|
it('should return error when reserved claims are used', async () => {
|
|
116
116
|
const result = await signJWTCustomToken(uid, mockServiceAccount, {
|
|
117
|
-
aud: 'reserved'
|
|
117
|
+
aud: 'reserved'
|
|
118
118
|
});
|
|
119
119
|
expect(result.error?.message).toContain('Reserved claims');
|
|
120
120
|
expect(result.data).toBeNull();
|
|
121
121
|
});
|
|
122
122
|
it('should return error when firebase prefixed claims are used', async () => {
|
|
123
123
|
const result = await signJWTCustomToken(uid, mockServiceAccount, {
|
|
124
|
-
firebase_custom: 'value'
|
|
124
|
+
firebase_custom: 'value'
|
|
125
125
|
});
|
|
126
126
|
expect(result.error?.message).toContain('Reserved claims');
|
|
127
127
|
expect(result.data).toBeNull();
|
|
@@ -129,7 +129,7 @@ describe('firebase-jwt', () => {
|
|
|
129
129
|
it('should return error with invalid private key', async () => {
|
|
130
130
|
const invalidServiceAccount = {
|
|
131
131
|
...mockServiceAccount,
|
|
132
|
-
private_key: 'invalid-key'
|
|
132
|
+
private_key: 'invalid-key'
|
|
133
133
|
};
|
|
134
134
|
const result = await signJWTCustomToken(uid, invalidServiceAccount, {});
|
|
135
135
|
expect(result.error).toBeDefined();
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"firebase-jwt.test.js","sourceRoot":"","sources":["../../src/auth/firebase-jwt.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACH,gBAAgB,EAChB,SAAS,EACT,OAAO,EACP,kBAAkB,
|
|
1
|
+
{"version":3,"file":"firebase-jwt.test.js","sourceRoot":"","sources":["../../src/auth/firebase-jwt.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACH,gBAAgB,EAChB,SAAS,EACT,OAAO,EACP,kBAAkB,EACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,qBAAqB,MAAM,8BAA8B,CAAC;AAEtE,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;AAErC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,MAAM,aAAa,GAAG,iBAAiB,CAAC;IACxC,MAAM,kBAAkB,GAAmB;QACvC,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,aAAa;QACzB,cAAc,EAAE,qBAAqB;QACrC,WAAW,EACP,6GAA6G;QACjH,YAAY,EAAE,2CAA2C;QACzD,SAAS,EAAE,gBAAgB;QAC3B,QAAQ,EAAE,2CAA2C;QACrD,SAAS,EAAE,qCAAqC;QAChD,2BAA2B,EACvB,4CAA4C;QAChD,oBAAoB,EAChB,+FAA+F;KACtG,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YAC/D,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE;aACxD,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACjC,eAAe,EACf,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACtD,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACjC,eAAe,EACf,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACvD,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBAC5B,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACjC,0EAA0E,EAC1E,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACnE,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC;gBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBAC5B,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACjC,4FAA4F,EAC5F,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACvB,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,MAAM,GAAG,MAAM,SAAS,CAC1B,0EAA0E,EAC1E,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CACnC,gCAAgC,CACnC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACpD,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC;gBACzD,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE;aACjD,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC1B,4FAA4F,EAC5F,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YACxD,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC;gBACzD,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC1B,4FAA4F,EAC5F,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC5D,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC;gBACzD,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;gBAC5C,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC1B,4FAA4F,EAC5F,aAAa,CAChB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YACjE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,qBAAqB,GAAmB;gBAC1C,GAAG,kBAAkB;gBACrB,WAAW,EAAE,aAAa;aAC7B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAEpD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CACnC,8BAA8B,CACjC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,yBAAyB,GAAmB;gBAC9C,GAAG,kBAAkB;gBACrB,WAAW,EAAE,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAC/C,KAAK,EACL,KAAK,CACR;aACJ,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC;YAExD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,cAAc,CAAC;QAE3B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,EAAE;gBAC7D,GAAG,EAAE,UAAU;aAClB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,EAAE;gBAC7D,eAAe,EAAE,OAAO;aAC3B,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,qBAAqB,GAAmB;gBAC1C,GAAG,kBAAkB;gBACrB,WAAW,EAAE,aAAa;aAC7B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACnC,GAAG,EACH,qBAAqB,EACrB,EAAE,CACL,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAEjE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
export type GithubTokenResponse = {
|
|
2
|
+
access_token: string;
|
|
3
|
+
token_type: string;
|
|
4
|
+
scope: string;
|
|
5
|
+
};
|
|
6
|
+
export type GithubOAuthError = {
|
|
7
|
+
error: string;
|
|
8
|
+
error_description?: string;
|
|
9
|
+
error_uri?: string;
|
|
10
|
+
};
|
|
11
|
+
export declare function createGitHubOAuthLoginUrl(redirect_uri: string, path: string, client_id: string): string;
|
|
12
|
+
export declare function exchangeCodeForGitHubIdToken(code: string, redirect_uri: string, client_id: string, client_secret: string, fetchFn?: typeof globalThis.fetch): Promise<{
|
|
13
|
+
data: GithubTokenResponse | null;
|
|
14
|
+
error: string | null;
|
|
15
|
+
}>;
|
|
16
|
+
//# sourceMappingURL=github-oauth.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"github-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/github-oauth.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,mBAAmB,GAAG;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,wBAAgB,yBAAyB,CACrC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,UAcpB;AAED,wBAAsB,4BAA4B,CAC9C,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;GAsBpC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
import { restFetch } from '../rest-fetch.js';
|
|
2
|
+
export function createGitHubOAuthLoginUrl(redirect_uri, path, client_id) {
|
|
3
|
+
return new URL('https://github.com/login/oauth/authorize?' +
|
|
4
|
+
new URLSearchParams({
|
|
5
|
+
client_id,
|
|
6
|
+
redirect_uri,
|
|
7
|
+
scope: 'read:user user:email',
|
|
8
|
+
state: JSON.stringify({
|
|
9
|
+
next: path,
|
|
10
|
+
provider: 'github'
|
|
11
|
+
})
|
|
12
|
+
}).toString()).toString();
|
|
13
|
+
}
|
|
14
|
+
export async function exchangeCodeForGitHubIdToken(code, redirect_uri, client_id, client_secret, fetchFn) {
|
|
15
|
+
const url = 'https://github.com/login/oauth/access_token';
|
|
16
|
+
const { data, error } = await restFetch(url, {
|
|
17
|
+
global: { fetch: fetchFn },
|
|
18
|
+
body: {
|
|
19
|
+
code,
|
|
20
|
+
client_id,
|
|
21
|
+
client_secret,
|
|
22
|
+
redirect_uri
|
|
23
|
+
},
|
|
24
|
+
form: true
|
|
25
|
+
});
|
|
26
|
+
return {
|
|
27
|
+
data,
|
|
28
|
+
error: error ? error.error : null
|
|
29
|
+
};
|
|
30
|
+
}
|
|
31
|
+
//# sourceMappingURL=github-oauth.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"github-oauth.js","sourceRoot":"","sources":["../../src/auth/github-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAc7C,MAAM,UAAU,yBAAyB,CACrC,YAAoB,EACpB,IAAY,EACZ,SAAiB;IAEjB,OAAO,IAAI,GAAG,CACV,2CAA2C;QACvC,IAAI,eAAe,CAAC;YAChB,SAAS;YACT,YAAY;YACZ,KAAK,EAAE,sBAAsB;YAC7B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBAClB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,QAAQ;aACrB,CAAC;SACL,CAAC,CAAC,QAAQ,EAAE,CACpB,CAAC,QAAQ,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,IAAY,EACZ,YAAoB,EACpB,SAAiB,EACjB,aAAqB,EACrB,OAAiC;IAEjC,MAAM,GAAG,GAAG,6CAA6C,CAAC;IAE1D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;QACH,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QAC1B,IAAI,EAAE;YACF,IAAI;YACJ,SAAS;YACT,aAAa;YACb,YAAY;SACf;QACD,IAAI,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,OAAO;QACH,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KACpC,CAAC;AACN,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,mBAAmB,EACnB,cAAc,EACjB,MAAM,qBAAqB,CAAC;AAI7B,wBAAgB,yBAAyB,CACrC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,mBAAmB,EACnB,cAAc,EACjB,MAAM,qBAAqB,CAAC;AAI7B,wBAAgB,yBAAyB,CACrC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,UAiBpB;AAED,wBAAsB,4BAA4B,CAC9C,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;;;;;;GAuBpC;AAED,wBAAsB,QAAQ,CAC1B,cAAc,EAAE,cAAc,EAC9B,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;;;;;;;;;;;GAmElC"}
|
|
@@ -11,7 +11,8 @@ export function createGoogleOAuthLoginUrl(redirect_uri, path, client_id) {
|
|
|
11
11
|
prompt: 'consent',
|
|
12
12
|
state: JSON.stringify({
|
|
13
13
|
next: path,
|
|
14
|
-
|
|
14
|
+
provider: 'google'
|
|
15
|
+
})
|
|
15
16
|
}).toString()).toString();
|
|
16
17
|
}
|
|
17
18
|
export async function exchangeCodeForGoogleIdToken(code, redirect_uri, client_id, client_secret, fetchFn) {
|
|
@@ -23,13 +24,13 @@ export async function exchangeCodeForGoogleIdToken(code, redirect_uri, client_id
|
|
|
23
24
|
client_id,
|
|
24
25
|
client_secret,
|
|
25
26
|
redirect_uri,
|
|
26
|
-
grant_type: 'authorization_code'
|
|
27
|
+
grant_type: 'authorization_code'
|
|
27
28
|
},
|
|
28
|
-
form: true
|
|
29
|
+
form: true
|
|
29
30
|
});
|
|
30
31
|
return {
|
|
31
32
|
data,
|
|
32
|
-
error: error ? error.error : null
|
|
33
|
+
error: error ? error.error : null
|
|
33
34
|
};
|
|
34
35
|
}
|
|
35
36
|
export async function getToken(serviceAccount, fetch) {
|
|
@@ -39,7 +40,7 @@ export async function getToken(serviceAccount, fetch) {
|
|
|
39
40
|
if (jwtError) {
|
|
40
41
|
return {
|
|
41
42
|
data: null,
|
|
42
|
-
error: jwtError
|
|
43
|
+
error: jwtError
|
|
43
44
|
};
|
|
44
45
|
}
|
|
45
46
|
if (!jwtData) {
|
|
@@ -48,25 +49,25 @@ export async function getToken(serviceAccount, fetch) {
|
|
|
48
49
|
error: {
|
|
49
50
|
code: 500,
|
|
50
51
|
message: 'No JWT data returned',
|
|
51
|
-
errors: []
|
|
52
|
-
}
|
|
52
|
+
errors: []
|
|
53
|
+
}
|
|
53
54
|
};
|
|
54
55
|
}
|
|
55
56
|
const { data, error } = await restFetch(url, {
|
|
56
57
|
global: { fetch },
|
|
57
58
|
body: {
|
|
58
59
|
grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
|
|
59
|
-
assertion: jwtData
|
|
60
|
+
assertion: jwtData
|
|
60
61
|
},
|
|
61
62
|
headers: {
|
|
62
63
|
'Cache-Control': 'no-cache',
|
|
63
|
-
Host: 'oauth2.googleapis.com'
|
|
64
|
+
Host: 'oauth2.googleapis.com'
|
|
64
65
|
},
|
|
65
|
-
form: true
|
|
66
|
+
form: true
|
|
66
67
|
});
|
|
67
68
|
return {
|
|
68
69
|
data,
|
|
69
|
-
error: error ? error.error : null
|
|
70
|
+
error: error ? error.error : null
|
|
70
71
|
};
|
|
71
72
|
}
|
|
72
73
|
catch (e) {
|
|
@@ -76,8 +77,8 @@ export async function getToken(serviceAccount, fetch) {
|
|
|
76
77
|
error: {
|
|
77
78
|
code: 500,
|
|
78
79
|
message: e.message,
|
|
79
|
-
errors: []
|
|
80
|
-
}
|
|
80
|
+
errors: []
|
|
81
|
+
}
|
|
81
82
|
};
|
|
82
83
|
}
|
|
83
84
|
}
|
|
@@ -86,8 +87,8 @@ export async function getToken(serviceAccount, fetch) {
|
|
|
86
87
|
error: {
|
|
87
88
|
code: 500,
|
|
88
89
|
message: 'Unknown error',
|
|
89
|
-
errors: []
|
|
90
|
-
}
|
|
90
|
+
errors: []
|
|
91
|
+
}
|
|
91
92
|
};
|
|
92
93
|
}
|
|
93
94
|
//# sourceMappingURL=google-oauth.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"google-oauth.js","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,UAAU,yBAAyB,CACrC,YAAoB,EACpB,IAAY,EACZ,SAAiB;IAEjB,OAAO,IAAI,GAAG,CACV,+CAA+C;QAC3C,IAAI,eAAe,CAAC;YAChB,SAAS;YACT,YAAY;YACZ,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBAClB,IAAI,EAAE,IAAI;
|
|
1
|
+
{"version":3,"file":"google-oauth.js","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,UAAU,yBAAyB,CACrC,YAAoB,EACpB,IAAY,EACZ,SAAiB;IAEjB,OAAO,IAAI,GAAG,CACV,+CAA+C;QAC3C,IAAI,eAAe,CAAC;YAChB,SAAS;YACT,YAAY;YACZ,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBAClB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,QAAQ;aACrB,CAAC;SACL,CAAC,CAAC,QAAQ,EAAE,CACpB,CAAC,QAAQ,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,IAAY,EACZ,YAAoB,EACpB,SAAiB,EACjB,aAAqB,EACrB,OAAiC;IAEjC,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAElD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;QACH,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QAC1B,IAAI,EAAE;YACF,IAAI;YACJ,SAAS;YACT,aAAa;YACb,YAAY;YACZ,UAAU,EAAE,oBAAoB;SACnC;QACD,IAAI,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,OAAO;QACH,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KACpC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC1B,cAA8B,EAC9B,KAA+B;IAE/B,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAElD,IAAI,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GACpC,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;QAElC,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,QAAQ;aAClB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,sBAAsB;oBAC/B,MAAM,EAAE,EAAE;iBACb;aACJ,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;YACH,MAAM,EAAE,EAAE,KAAK,EAAE;YACjB,IAAI,EAAE;gBACF,UAAU,EAAE,6CAA6C;gBACzD,SAAS,EAAE,OAAO;aACrB;YACD,OAAO,EAAE;gBACL,eAAe,EAAE,UAAU;gBAC3B,IAAI,EAAE,uBAAuB;aAChC;YACD,IAAI,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;SACpC,CAAC;IACN,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YACrB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE;oBACH,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,MAAM,EAAE,EAAE;iBACb;aACJ,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO;QACH,IAAI,EAAE,IAAI;QACV,KAAK,EAAE;YACH,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,EAAE;SACb;KACJ,CAAC;AACN,CAAC"}
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
import { describe, expect, it, beforeEach, vi } from 'vitest';
|
|
2
|
-
import { createGoogleOAuthLoginUrl, exchangeCodeForGoogleIdToken, getToken
|
|
2
|
+
import { createGoogleOAuthLoginUrl, exchangeCodeForGoogleIdToken, getToken } from './google-oauth.js';
|
|
3
3
|
const restFetchMock = vi.hoisted(() => vi.fn());
|
|
4
4
|
const signJWTMock = vi.hoisted(() => vi.fn());
|
|
5
5
|
vi.mock('../rest-fetch.js', () => ({
|
|
6
|
-
restFetch: restFetchMock
|
|
6
|
+
restFetch: restFetchMock
|
|
7
7
|
}));
|
|
8
8
|
vi.mock('./firebase-jwt.js', () => ({
|
|
9
|
-
signJWT: signJWTMock
|
|
9
|
+
signJWT: signJWTMock
|
|
10
10
|
}));
|
|
11
11
|
beforeEach(() => {
|
|
12
12
|
restFetchMock.mockReset();
|
|
@@ -25,6 +25,7 @@ describe('createGoogleOAuthLoginUrl', () => {
|
|
|
25
25
|
expect(parsed.searchParams.get('prompt')).toBe('consent');
|
|
26
26
|
expect(JSON.parse(parsed.searchParams.get('state') ?? '')).toEqual({
|
|
27
27
|
next: '/next/path',
|
|
28
|
+
provider: 'google'
|
|
28
29
|
});
|
|
29
30
|
});
|
|
30
31
|
});
|
|
@@ -33,7 +34,7 @@ describe('exchangeCodeForGoogleIdToken', () => {
|
|
|
33
34
|
code: 'auth-code',
|
|
34
35
|
redirect_uri: 'https://example.com/callback',
|
|
35
36
|
client_id: 'client-123',
|
|
36
|
-
client_secret: 'secret-xyz'
|
|
37
|
+
client_secret: 'secret-xyz'
|
|
37
38
|
};
|
|
38
39
|
it('returns token data when REST call succeeds', async () => {
|
|
39
40
|
const expectedData = { id_token: 'id', access_token: 'access' };
|
|
@@ -41,7 +42,7 @@ describe('exchangeCodeForGoogleIdToken', () => {
|
|
|
41
42
|
const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
|
|
42
43
|
expect(restFetchMock).toHaveBeenCalledWith('https://oauth2.googleapis.com/token', expect.objectContaining({
|
|
43
44
|
body: expect.objectContaining(payload),
|
|
44
|
-
form: true
|
|
45
|
+
form: true
|
|
45
46
|
}));
|
|
46
47
|
expect(result).toEqual({ data: expectedData, error: null });
|
|
47
48
|
});
|
|
@@ -49,7 +50,7 @@ describe('exchangeCodeForGoogleIdToken', () => {
|
|
|
49
50
|
const apiError = { code: 400, message: 'invalid_grant' };
|
|
50
51
|
restFetchMock.mockResolvedValue({
|
|
51
52
|
data: null,
|
|
52
|
-
error: { error: apiError }
|
|
53
|
+
error: { error: apiError }
|
|
53
54
|
});
|
|
54
55
|
const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
|
|
55
56
|
expect(result).toEqual({ data: null, error: apiError });
|
|
@@ -59,7 +60,7 @@ describe('getToken', () => {
|
|
|
59
60
|
const serviceAccount = {
|
|
60
61
|
client_email: 'test@project.iam.gserviceaccount.com',
|
|
61
62
|
private_key: '-----BEGIN PRIVATE KEY-----\nABC\n-----END PRIVATE KEY-----\n',
|
|
62
|
-
token_uri: 'https://oauth2.googleapis.com/token'
|
|
63
|
+
token_uri: 'https://oauth2.googleapis.com/token'
|
|
63
64
|
};
|
|
64
65
|
it('requests new token with signed JWT', async () => {
|
|
65
66
|
const fakeFetch = vi.fn();
|
|
@@ -72,13 +73,13 @@ describe('getToken', () => {
|
|
|
72
73
|
global: { fetch: fakeFetch },
|
|
73
74
|
body: {
|
|
74
75
|
grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
|
|
75
|
-
assertion: 'signed-jwt'
|
|
76
|
+
assertion: 'signed-jwt'
|
|
76
77
|
},
|
|
77
78
|
headers: expect.objectContaining({
|
|
78
79
|
'Cache-Control': 'no-cache',
|
|
79
|
-
Host: 'oauth2.googleapis.com'
|
|
80
|
+
Host: 'oauth2.googleapis.com'
|
|
80
81
|
}),
|
|
81
|
-
form: true
|
|
82
|
+
form: true
|
|
82
83
|
}));
|
|
83
84
|
expect(result).toEqual({ data: tokenData, error: null });
|
|
84
85
|
});
|
|
@@ -97,8 +98,8 @@ describe('getToken', () => {
|
|
|
97
98
|
error: {
|
|
98
99
|
code: 500,
|
|
99
100
|
message: 'No JWT data returned',
|
|
100
|
-
errors: []
|
|
101
|
-
}
|
|
101
|
+
errors: []
|
|
102
|
+
}
|
|
102
103
|
});
|
|
103
104
|
});
|
|
104
105
|
it('returns REST error payload from Google', async () => {
|
|
@@ -106,7 +107,7 @@ describe('getToken', () => {
|
|
|
106
107
|
signJWTMock.mockResolvedValue({ data: 'signed-jwt', error: null });
|
|
107
108
|
restFetchMock.mockResolvedValue({
|
|
108
109
|
data: null,
|
|
109
|
-
error: { error: apiError }
|
|
110
|
+
error: { error: apiError }
|
|
110
111
|
});
|
|
111
112
|
const result = await getToken(serviceAccount);
|
|
112
113
|
expect(result).toEqual({ data: null, error: apiError });
|
|
@@ -117,7 +118,7 @@ describe('getToken', () => {
|
|
|
117
118
|
const result = await getToken(serviceAccount);
|
|
118
119
|
expect(result).toEqual({
|
|
119
120
|
data: null,
|
|
120
|
-
error: { code: 500, message: 'boom', errors: [] }
|
|
121
|
+
error: { code: 500, message: 'boom', errors: [] }
|
|
121
122
|
});
|
|
122
123
|
});
|
|
123
124
|
});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"google-oauth.test.js","sourceRoot":"","sources":["../../src/auth/google-oauth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACH,yBAAyB,EACzB,4BAA4B,EAC5B,QAAQ,
|
|
1
|
+
{"version":3,"file":"google-oauth.test.js","sourceRoot":"","sources":["../../src/auth/google-oauth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACH,yBAAyB,EACzB,4BAA4B,EAC5B,QAAQ,EACX,MAAM,mBAAmB,CAAC;AAE3B,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAChD,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAE9C,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,SAAS,EAAE,aAAa;CAC3B,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,OAAO,EAAE,WAAW;CACvB,CAAC,CAAC,CAAC;AAEJ,UAAU,CAAC,GAAG,EAAE;IACZ,aAAa,CAAC,SAAS,EAAE,CAAC;IAC1B,WAAW,CAAC,SAAS,EAAE,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,yBAAyB,CACjC,8BAA8B,EAC9B,YAAY,EACZ,YAAY,CACf,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxC,8CAA8C,CACjD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAChD,8BAA8B,CACjC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,QAAQ;SACrB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC1C,MAAM,OAAO,GAAG;QACZ,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,YAAY;QACvB,aAAa,EAAE,YAAY;KAC9B,CAAC;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,YAAY,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QAChE,aAAa,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACtC,qCAAqC,EACrC,MAAM,CAAC,gBAAgB,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,IAAI;SACb,CAAC,CACL,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QACzD,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACtB,MAAM,cAAc,GAAG;QACnB,YAAY,EAAE,sCAAsC;QACpD,WAAW,EACP,+DAA+D;QACnE,SAAS,EAAE,qCAAqC;KAC5C,CAAC;IAET,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7D,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,aAAa,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAEzD,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACtC,qCAAqC,EACrC,MAAM,CAAC,gBAAgB,CAAC;YACpB,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;YAC5B,IAAI,EAAE;gBACF,UAAU,EAAE,6CAA6C;gBACzD,SAAS,EAAE,YAAY;aAC1B;YACD,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAC7B,eAAe,EAAE,UAAU;gBAC3B,IAAI,EAAE,uBAAuB;aAChC,CAAC;YACF,IAAI,EAAE,IAAI;SACb,CAAC,CACL,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAChE,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACtC,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,IAAI;YACV,KAAK,EAAE;gBACH,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,sBAAsB;gBAC/B,MAAM,EAAE,EAAE;aACb;SACJ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACvD,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC3C,WAAW,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,aAAa,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;SACpD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -3,11 +3,9 @@ import { FirebaseAdminAuth } from './auth/firebase-admin-auth.js';
|
|
|
3
3
|
import { FirebaseAuth } from './auth/firebase-auth.js';
|
|
4
4
|
import type { FirebaseConfig, ServiceAccount } from './auth/firebase-types.js';
|
|
5
5
|
/**
|
|
6
|
-
* Official Firebase OAuth providers
|
|
7
|
-
* @constant
|
|
8
|
-
* @type {readonly string[]}
|
|
6
|
+
* Official Firebase OAuth providers
|
|
9
7
|
*/
|
|
10
|
-
export declare const OFFICIAL_FIREBASE_OAUTH_PROVIDERS: readonly
|
|
8
|
+
export declare const OFFICIAL_FIREBASE_OAUTH_PROVIDERS: readonly ["google", "facebook", "apple", "twitter", "github", "microsoft", "yahoo", "playgames"];
|
|
11
9
|
type ProviderList = (typeof OFFICIAL_FIREBASE_OAUTH_PROVIDERS)[number];
|
|
12
10
|
type ProviderConfig = Partial<Record<ProviderList, {
|
|
13
11
|
client_id: string;
|
|
@@ -19,62 +17,17 @@ type CookieConfig = {
|
|
|
19
17
|
sessionName?: string;
|
|
20
18
|
};
|
|
21
19
|
/**
|
|
22
|
-
* Creates a Firebase Edge Server
|
|
20
|
+
* Creates a Firebase Edge Server for authentication and session management in edge environments.
|
|
23
21
|
*
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
27
|
-
* @param config
|
|
28
|
-
* @param config.
|
|
29
|
-
* @param config.
|
|
30
|
-
* @
|
|
31
|
-
* @param config.cookies - Cookie management configuration for session handling
|
|
32
|
-
* @param config.fetch - Optional custom fetch implementation (defaults to globalThis.fetch)
|
|
33
|
-
*
|
|
34
|
-
* @returns Object containing authentication methods and utilities
|
|
35
|
-
*
|
|
36
|
-
* @example
|
|
37
|
-
* ```typescript
|
|
38
|
-
* const server = createFirebaseEdgeServer({
|
|
39
|
-
* serviceAccount: {
|
|
40
|
-
* type: "service_account",
|
|
41
|
-
* project_id: "your-project-id",
|
|
42
|
-
* private_key_id: "...",
|
|
43
|
-
* private_key: "...",
|
|
44
|
-
* client_email: "...",
|
|
45
|
-
* client_id: "...",
|
|
46
|
-
* auth_uri: "...",
|
|
47
|
-
* token_uri: "...",
|
|
48
|
-
* auth_provider_x509_cert_url: "...",
|
|
49
|
-
* client_x509_cert_url: "..."
|
|
50
|
-
* },
|
|
51
|
-
* firebaseConfig: {
|
|
52
|
-
* apiKey: "your-api-key",
|
|
53
|
-
* authDomain: "your-project.firebaseapp.com",
|
|
54
|
-
* projectId: "your-project-id"
|
|
55
|
-
* },
|
|
56
|
-
* providers: {
|
|
57
|
-
* google: {
|
|
58
|
-
* client_id: "your-google-client-id",
|
|
59
|
-
* client_secret: "your-google-client-secret"
|
|
60
|
-
* }
|
|
61
|
-
* },
|
|
62
|
-
* cookies: {
|
|
63
|
-
* getSession: (name) => getCookie(name),
|
|
64
|
-
* saveSession: (name, value, options) => setCookie(name, value, options)
|
|
65
|
-
* }
|
|
66
|
-
* });
|
|
67
|
-
*
|
|
68
|
-
* // Using guard clauses for clean error handling
|
|
69
|
-
* const { data: user, error } = await server.getUser();
|
|
70
|
-
* if (error) return handleError(error);
|
|
71
|
-
* if (!user) return redirectToLogin();
|
|
72
|
-
*
|
|
73
|
-
* // User is authenticated, proceed with protected logic
|
|
74
|
-
* console.log('Authenticated user:', user.email);
|
|
75
|
-
* ```
|
|
22
|
+
* @param config Configuration object
|
|
23
|
+
* @param config.serviceAccount Firebase service account for admin operations
|
|
24
|
+
* @param config.firebaseConfig Firebase client configuration
|
|
25
|
+
* @param config.providers OAuth provider configurations (Google, GitHub, etc.)
|
|
26
|
+
* @param config.cookies Cookie management functions
|
|
27
|
+
* @param config.fetch Optional custom fetch implementation
|
|
28
|
+
* @returns Object with authentication methods
|
|
76
29
|
*/
|
|
77
|
-
export declare function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, providers, cookies, fetch
|
|
30
|
+
export declare function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, providers, cookies, fetch }: {
|
|
78
31
|
serviceAccount: ServiceAccount;
|
|
79
32
|
firebaseConfig: FirebaseConfig;
|
|
80
33
|
providers: ProviderConfig;
|
|
@@ -105,19 +58,10 @@ export declare function createFirebaseEdgeServer({ serviceAccount, firebaseConfi
|
|
|
105
58
|
error: null;
|
|
106
59
|
}>;
|
|
107
60
|
getGoogleLoginURL: (redirect_uri: string, path: string) => Promise<string>;
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
error:
|
|
111
|
-
code: number;
|
|
112
|
-
message: string;
|
|
113
|
-
errors?: {
|
|
114
|
-
message: string;
|
|
115
|
-
domain: string;
|
|
116
|
-
reason: string;
|
|
117
|
-
}[];
|
|
118
|
-
};
|
|
61
|
+
getGitHubLoginURL: (redirect_uri: string, path: string) => Promise<string>;
|
|
62
|
+
signInWithCode: (code: string, redirect_uri: string, state?: string | null) => Promise<{
|
|
63
|
+
error: string;
|
|
119
64
|
} | {
|
|
120
|
-
data: null;
|
|
121
65
|
error: null;
|
|
122
66
|
} | {
|
|
123
67
|
error: {
|
|
@@ -131,10 +75,6 @@ export declare function createFirebaseEdgeServer({ serviceAccount, firebaseConfi
|
|
|
131
75
|
} | import("jose/errors").JOSEError | Error | {
|
|
132
76
|
message: string;
|
|
133
77
|
};
|
|
134
|
-
data?: undefined;
|
|
135
|
-
} | {
|
|
136
|
-
error: null;
|
|
137
|
-
data?: undefined;
|
|
138
78
|
}>;
|
|
139
79
|
getToken: () => Promise<{
|
|
140
80
|
data: null;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"firebase-edge-server.d.ts","sourceRoot":"","sources":["../src/firebase-edge-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,UAAU,EACV,UAAU,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;
|
|
1
|
+
{"version":3,"file":"firebase-edge-server.d.ts","sourceRoot":"","sources":["../src/firebase-edge-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,UAAU,EACV,UAAU,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAoB/E;;GAEG;AACH,eAAO,MAAM,iCAAiC,kGASpC,CAAC;AAEX,KAAK,YAAY,GAAG,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,KAAK,cAAc,GAAG,OAAO,CACzB,MAAM,CACF,YAAY,EACZ;IACI,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACzB,CACJ,CACJ,CAAC;AAEF,KAAK,YAAY,GAAG;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,EACrC,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,KAAK,EACR,EAAE;IACC,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACnC;;;;6BAoCwC,OAAO;;;;;;;;;;;;;;;;;;;;sCA6CG,MAAM,QAAQ,MAAM;sCAoBpB,MAAM,QAAQ,MAAM;2BAqBzD,MAAM,gBACE,MAAM,UACb,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqL3B"}
|