firebase-admin-edge 1.0.18 → 1.0.19

package/dist/auth/github-oauth.test.js

@@ -0,0 +1,202 @@
+import { describe, expect, it, beforeEach, vi } from 'vitest';
+import { exchangeCodeForGitHubIdToken } from './github-oauth.js';
+import { FirebaseEdgeError } from './errors.js';
+import { GitHubErrorInfo } from './auth-error-codes.js';
+const restFetchMock = vi.hoisted(() => vi.fn());
+vi.mock('../rest-fetch.js', () => ({
+    restFetch: restFetchMock
+}));
+beforeEach(() => {
+    restFetchMock.mockReset();
+});
+describe('GitHub OAuth Token Exchange', () => {
+    const payload = {
+        code: 'auth-code',
+        redirect_uri: 'https://example.com/callback',
+        client_id: 'client-123',
+        client_secret: 'secret-xyz'
+    };
+    it('returns token data when REST call succeeds', async () => {
+        const expectedData = {
+            access_token: 'gho_token',
+            token_type: 'bearer',
+            scope: 'read:user,user:email'
+        };
+        restFetchMock.mockResolvedValue({ data: expectedData, error: null });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(restFetchMock).toHaveBeenCalledWith('https://github.com/login/oauth/access_token', expect.objectContaining({
+            body: expect.objectContaining(payload),
+            form: true,
+            acceptJson: true
+        }));
+        expect(result).toEqual({ data: expectedData, error: null });
+    });
+    it('handles incorrect client credentials error', async () => {
+        const githubError = {
+            error: 'incorrect_client_credentials',
+            error_description: 'The client_id and/or client_secret passed are incorrect.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-incorrect-client-credentials');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_INCORRECT_CLIENT_CREDENTIALS.message);
+    });
+    it('handles redirect URI mismatch error', async () => {
+        const githubError = {
+            error: 'redirect_uri_mismatch',
+            error_description: 'The redirect_uri MUST match the registered callback URL for this application.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-redirect-uri-mismatch');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_REDIRECT_URI_MISMATCH.message);
+    });
+    it('handles bad verification code error', async () => {
+        const githubError = {
+            error: 'bad_verification_code',
+            error_description: 'The code passed is incorrect or expired.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-bad-verification-code');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_BAD_VERIFICATION_CODE.message);
+    });
+    it('handles unverified user email error', async () => {
+        const githubError = {
+            error: 'unverified_user_email',
+            error_description: 'The user must have a verified email address.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-unverified-user-email');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_UNVERIFIED_USER_EMAIL.message);
+    });
+    it('handles access denied error', async () => {
+        const githubError = {
+            error: 'access_denied',
+            error_description: 'The user denied the request.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-access-denied');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_ACCESS_DENIED.message);
+    });
+    it('handles invalid client error', async () => {
+        const githubError = {
+            error: 'invalid_client',
+            error_description: 'Client authentication failed.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-invalid-client');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_INVALID_CLIENT.message);
+    });
+    it('handles invalid request error', async () => {
+        const githubError = {
+            error: 'invalid_request',
+            error_description: 'A required parameter was missing or invalid.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-invalid-request');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_INVALID_REQUEST.message);
+    });
+    it('handles unauthorized client error', async () => {
+        const githubError = {
+            error: 'unauthorized_client',
+            error_description: 'The client is not authorized to request an access token.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-unauthorized-client');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_UNAUTHORIZED_CLIENT.message);
+    });
+    it('handles invalid scope error', async () => {
+        const githubError = {
+            error: 'invalid_scope',
+            error_description: 'The requested scope is invalid.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-invalid-scope');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_INVALID_SCOPE.message);
+    });
+    it('handles unrecognized GitHub error', async () => {
+        const githubError = {
+            error: 'unknown_error',
+            error_description: 'Some unknown error occurred.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/github-code-exchange-failed');
+        expect(result.error?.message).toBe(GitHubErrorInfo.GITHUB_CODE_EXCHANGE_FAILED.message);
+    });
+    it('includes error context in FirebaseEdgeError', async () => {
+        const githubError = {
+            error: 'bad_verification_code',
+            error_description: 'The code passed is incorrect or expired.'
+        };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: githubError
+        });
+        const result = await exchangeCodeForGitHubIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        const firebaseError = result.error;
+        expect(firebaseError.context).toEqual({
+            originalError: 'bad_verification_code',
+            description: 'The code passed is incorrect or expired.'
+        });
+    });
+});
+//# sourceMappingURL=github-oauth.test.js.map

package/dist/auth/github-oauth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-oauth.test.js","sourceRoot":"","sources":["../../src/auth/github-oauth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAEhD,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,SAAS,EAAE,aAAa;CAC3B,CAAC,CAAC,CAAC;AAEJ,UAAU,CAAC,GAAG,EAAE;IACZ,aAAa,CAAC,SAAS,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACzC,MAAM,OAAO,GAAG;QACZ,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,YAAY;QACvB,aAAa,EAAE,YAAY;KAC9B,CAAC;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,YAAY,GAAG;YACjB,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,QAAQ;YACpB,KAAK,EAAE,sBAAsB;SAChC,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACtC,6CAA6C,EAC7C,MAAM,CAAC,gBAAgB,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;SACnB,CAAC,CACL,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,8BAA8B;YACrC,iBAAiB,EACb,0DAA0D;SACjE,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAC3B,0CAA0C,CAC7C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,mCAAmC,CAAC,OAAO,CAC9D,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,uBAAuB;YAC9B,iBAAiB,EACb,+EAA+E;SACtF,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,4BAA4B,CAAC,OAAO,CACvD,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,uBAAuB;YAC9B,iBAAiB,EAAE,0CAA0C;SAChE,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,4BAA4B,CAAC,OAAO,CACvD,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,uBAAuB;YAC9B,iBAAiB,EAAE,8CAA8C;SACpE,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,4BAA4B,CAAC,OAAO,CACvD,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,eAAe;YACtB,iBAAiB,EAAE,8BAA8B;SACpD,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,oBAAoB,CAAC,OAAO,CAC/C,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,gBAAgB;YACvB,iBAAiB,EAAE,+BAA+B;SACrD,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,qBAAqB,CAAC,OAAO,CAChD,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,iBAAiB;YACxB,iBAAiB,EAAE,8CAA8C;SACpE,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,sBAAsB,CAAC,OAAO,CACjD,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,qBAAqB;YAC5B,iBAAiB,EACb,0DAA0D;SACjE,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,0BAA0B,CAAC,OAAO,CACrD,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,eAAe;YACtB,iBAAiB,EAAE,iCAAiC;SACvD,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,oBAAoB,CAAC,OAAO,CAC/C,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,eAAe;YACtB,iBAAiB,EAAE,8BAA8B;SACpD,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9B,eAAe,CAAC,2BAA2B,CAAC,OAAO,CACtD,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,WAAW,GAAG;YAChB,KAAK,EAAE,uBAAuB;YAC9B,iBAAiB,EAAE,0CAA0C;SAChE,CAAC;QACF,aAAa,CAAC,iBAAiB,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC7C,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,MAAM,CAAC,KAA0B,CAAC;QACxD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YAClC,aAAa,EAAE,uBAAuB;YACtC,WAAW,EAAE,0CAA0C;SAC1D,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/auth/google-oauth.d.ts

@@ -1,15 +1,15 @@
 import type { GoogleTokenResponse, ServiceAccount } from './firebase-types.js';
-export declare function createGoogleOAuthLoginUrl(redirect_uri: string, path: string, client_id: string): string;
+import { FirebaseEdgeError } from './errors.js';
 export declare function exchangeCodeForGoogleIdToken(code: string, redirect_uri: string, client_id: string, client_secret: string, fetchFn?: typeof globalThis.fetch): Promise<{
     data: null;
-    error: Error;
+    error: FirebaseEdgeError;
 } | {
     data: GoogleTokenResponse | null;
     error: null;
 }>;
 export declare function getToken(serviceAccount: ServiceAccount, fetch?: typeof globalThis.fetch): Promise<{
     data: null;
-    error: Error;
+    error: FirebaseEdgeError;
 } | {
     data: GoogleTokenResponse | null;
     error: null;

package/dist/auth/google-oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,mBAAmB,EACnB,cAAc,EACjB,MAAM,qBAAqB,CAAC;AAM7B,wBAAgB,yBAAyB,CACrC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,UAiBpB;AAED,wBAAsB,4BAA4B,CAC9C,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;GAgCpC;AAED,wBAAsB,QAAQ,CAC1B,cAAc,EAAE,cAAc,EAC9B,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;GA6DlC"}
+{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,mBAAmB,EACnB,cAAc,EACjB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,iBAAiB,EAAe,MAAM,aAAa,CAAC;AAK7D,wBAAsB,4BAA4B,CAC9C,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;GA8GpC;AAED,wBAAsB,QAAQ,CAC1B,cAAc,EAAE,cAAc,EAC9B,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;;;;;;GAyGlC"}

package/dist/auth/google-oauth.js

@@ -1,21 +1,8 @@
 import { restFetch } from '../rest-fetch.js';
 import { signJWT } from './firebase-jwt.js';
+import { FirebaseEdgeError, ensureError } from './errors.js';
+import { GoogleErrorInfo } from './auth-error-codes.js';
 // TODO - allow scope customization
-export function createGoogleOAuthLoginUrl(redirect_uri, path, client_id) {
-    return new URL('https://accounts.google.com/o/oauth2/v2/auth?' +
-        new URLSearchParams({
-            client_id,
-            redirect_uri,
-            response_type: 'code',
-            scope: 'openid email profile',
-            access_type: 'offline',
-            prompt: 'consent',
-            state: JSON.stringify({
-                next: path,
-                provider: 'google'
-            })
-        }).toString()).toString();
-}
 export async function exchangeCodeForGoogleIdToken(code, redirect_uri, client_id, client_secret, fetchFn) {
     const url = 'https://oauth2.googleapis.com/token';
     const { data, error } = await restFetch(url, {
@@ -30,9 +17,61 @@ export async function exchangeCodeForGoogleIdToken(code, redirect_uri, client_id
         form: true
     });
     if (error?.error.message) {
+        const errorMessage = error.error.message.toLowerCase();
+        if (errorMessage.includes('invalid_grant')) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_INVALID_GRANT, {
+                    context: { originalError: error.error.message }
+                })
+            };
+        }
+        if (errorMessage.includes('invalid_client')) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_INVALID_CLIENT, {
+                    context: { originalError: error.error.message }
+                })
+            };
+        }
+        if (errorMessage.includes('invalid_request')) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_INVALID_REQUEST, {
+                    context: { originalError: error.error.message }
+                })
+            };
+        }
+        if (errorMessage.includes('access_denied')) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_ACCESS_DENIED, {
+                    context: { originalError: error.error.message }
+                })
+            };
+        }
+        if (errorMessage.includes('unsupported_response_type')) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_UNSUPPORTED_RESPONSE_TYPE, {
+                    context: { originalError: error.error.message }
+                })
+            };
+        }
+        if (errorMessage.includes('invalid_scope')) {
+            return {
+                data: null,
+                error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_INVALID_SCOPE, {
+                    context: { originalError: error.error.message }
+                })
+            };
+        }
+        // Default case for unrecognized errors
         return {
             data: null,
-            error: new Error(`Failed to exchange code for ID token: ${error.error.message}`)
+            error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_CODE_EXCHANGE_FAILED, {
+                context: { originalError: error.error.message }
+            })
         };
     }
     return {
@@ -47,13 +86,16 @@ export async function getToken(serviceAccount, fetch) {
         if (jwtError) {
             return {
                 data: null,
-                error: new Error(`Failed to sign JWT: ${jwtError.message}`)
+                error: new FirebaseEdgeError(GoogleErrorInfo.JWT_SIGN_FAILED, {
+                    cause: ensureError(jwtError),
+                    context: { originalError: jwtError.message }
+                })
             };
         }
         if (!jwtData) {
             return {
                 data: null,
-                error: new Error('No JWT data returned')
+                error: new FirebaseEdgeError(GoogleErrorInfo.JWT_DATA_MISSING)
             };
         }
         const { data, error } = await restFetch(url, {
@@ -69,9 +111,31 @@ export async function getToken(serviceAccount, fetch) {
             form: true
         });
         if (error?.error.message) {
+            const errorMessage = error.error.message.toLowerCase();
+            if (errorMessage.includes('unavailable') ||
+                errorMessage.includes('503')) {
+                return {
+                    data: null,
+                    error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_TEMPORARILY_UNAVAILABLE, {
+                        context: { originalError: error.error.message }
+                    })
+                };
+            }
+            if (errorMessage.includes('server') ||
+                errorMessage.includes('500')) {
+                return {
+                    data: null,
+                    error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_SERVER_ERROR, {
+                        context: { originalError: error.error.message }
+                    })
+                };
+            }
+            // Default case for other service account token errors
             return {
                 data: null,
-                error: new Error(`Failed to get token: ${error.error.message}`)
+                error: new FirebaseEdgeError(GoogleErrorInfo.SERVICE_ACCOUNT_TOKEN_FAILED, {
+                    context: { originalError: error.error.message }
+                })
             };
         }
         return {
@@ -80,15 +144,14 @@ export async function getToken(serviceAccount, fetch) {
         };
     }
     catch (e) {
-        if (e instanceof Error) {
-            return {
-                data: null,
-                error: new Error(`Failed to get token: ${e.message}`)
-            };
-        }
         return {
             data: null,
-            error: e
+            error: new FirebaseEdgeError(GoogleErrorInfo.GOOGLE_TOKEN_REQUEST_FAILED, {
+                cause: ensureError(e),
+                context: {
+                    originalError: e instanceof Error ? e.message : String(e)
+                }
+            })
         };
     }
 }

package/dist/auth/google-oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"google-oauth.js","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,mCAAmC;AAEnC,MAAM,UAAU,yBAAyB,CACrC,YAAoB,EACpB,IAAY,EACZ,SAAiB;IAEjB,OAAO,IAAI,GAAG,CACV,+CAA+C;QAC3C,IAAI,eAAe,CAAC;YAChB,SAAS;YACT,YAAY;YACZ,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBAClB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,QAAQ;aACrB,CAAC;SACL,CAAC,CAAC,QAAQ,EAAE,CACpB,CAAC,QAAQ,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,IAAY,EACZ,YAAoB,EACpB,SAAiB,EACjB,aAAqB,EACrB,OAAiC;IAEjC,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAElD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;QACH,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QAC1B,IAAI,EAAE;YACF,IAAI;YACJ,SAAS;YACT,aAAa;YACb,YAAY;YACZ,UAAU,EAAE,oBAAoB;SACnC;QACD,IAAI,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,KAAK,CACZ,yCAAyC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CACjE;SACJ,CAAC;IACN,CAAC;IAED,OAAO;QACH,IAAI;QACJ,KAAK,EAAE,IAAI;KACd,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC1B,cAA8B,EAC9B,KAA+B;IAE/B,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAElD,IAAI,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GACpC,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;QAElC,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,OAAO,EAAE,CAAC;aAC9D,CAAC;QACN,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,sBAAsB,CAAC;aAC3C,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;YACH,MAAM,EAAE,EAAE,KAAK,EAAE;YACjB,IAAI,EAAE;gBACF,UAAU,EAAE,6CAA6C;gBACzD,SAAS,EAAE,OAAO;aACrB;YACD,OAAO,EAAE;gBACL,eAAe,EAAE,UAAU;gBAC3B,IAAI,EAAE,uBAAuB;aAChC;YACD,IAAI,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;aAClE,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YACrB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE,CAAC;aACxD,CAAC;QACN,CAAC;QACD,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,CAAU;SACpB,CAAC;IACN,CAAC;AACL,CAAC"}
+{"version":3,"file":"google-oauth.js","sourceRoot":"","sources":["../../src/auth/google-oauth.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,mCAAmC;AAEnC,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,IAAY,EACZ,YAAoB,EACpB,SAAiB,EACjB,aAAqB,EACrB,OAAiC;IAEjC,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAElD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;QACH,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QAC1B,IAAI,EAAE;YACF,IAAI;YACJ,SAAS;YACT,aAAa;YACb,YAAY;YACZ,UAAU,EAAE,oBAAoB;SACnC;QACD,IAAI,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAEvD,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACzC,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,oBAAoB,EACpC;oBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;iBAClD,CACJ;aACJ,CAAC;QACN,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,qBAAqB,EACrC;oBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;iBAClD,CACJ;aACJ,CAAC;QACN,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,sBAAsB,EACtC;oBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;iBAClD,CACJ;aACJ,CAAC;QACN,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACzC,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,oBAAoB,EACpC;oBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;iBAClD,CACJ;aACJ,CAAC;QACN,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;YACrD,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,gCAAgC,EAChD;oBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;iBAClD,CACJ;aACJ,CAAC;QACN,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACzC,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,oBAAoB,EACpC;oBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;iBAClD,CACJ;aACJ,CAAC;QACN,CAAC;QAED,uCAAuC;QACvC,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,2BAA2B,EAC3C;gBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;aAClD,CACJ;SACJ,CAAC;IACN,CAAC;IAED,OAAO;QACH,IAAI;QACJ,KAAK,EAAE,IAAI;KACd,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC1B,cAA8B,EAC9B,KAA+B;IAE/B,MAAM,GAAG,GAAG,qCAAqC,CAAC;IAElD,IAAI,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GACpC,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;QAElC,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CAAC,eAAe,CAAC,eAAe,EAAE;oBAC1D,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC;oBAC5B,OAAO,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE;iBAC/C,CAAC;aACL,CAAC;QACN,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CAAC,eAAe,CAAC,gBAAgB,CAAC;aACjE,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAGrC,GAAG,EAAE;YACH,MAAM,EAAE,EAAE,KAAK,EAAE;YACjB,IAAI,EAAE;gBACF,UAAU,EAAE,6CAA6C;gBACzD,SAAS,EAAE,OAAO;aACrB;YACD,OAAO,EAAE;gBACL,eAAe,EAAE,UAAU;gBAC3B,IAAI,EAAE,uBAAuB;aAChC;YACD,IAAI,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAEvD,IACI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACpC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC9B,CAAC;gBACC,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,8BAA8B,EAC9C;wBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;qBAClD,CACJ;iBACJ,CAAC;YACN,CAAC;YAED,IACI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC/B,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC9B,CAAC;gBACC,OAAO;oBACH,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,mBAAmB,EACnC;wBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;qBAClD,CACJ;iBACJ,CAAC;YACN,CAAC;YAED,sDAAsD;YACtD,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,4BAA4B,EAC5C;oBACI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;iBAClD,CACJ;aACJ,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI;YACJ,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,iBAAiB,CACxB,eAAe,CAAC,2BAA2B,EAC3C;gBACI,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;gBACrB,OAAO,EAAE;oBACL,aAAa,EACT,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;iBACjD;aACJ,CACJ;SACJ,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/auth/google-oauth.test.js

@@ -1,5 +1,7 @@
 import { describe, expect, it, beforeEach, vi } from 'vitest';
-import { createGoogleOAuthLoginUrl, exchangeCodeForGoogleIdToken, getToken } from './google-oauth.js';
+import { exchangeCodeForGoogleIdToken, getToken } from './google-oauth.js';
+import { FirebaseEdgeError } from './errors.js';
+import { GoogleErrorInfo } from './auth-error-codes.js';
 const restFetchMock = vi.hoisted(() => vi.fn());
 const signJWTMock = vi.hoisted(() => vi.fn());
 vi.mock('../rest-fetch.js', () => ({
@@ -12,24 +14,7 @@ beforeEach(() => {
     restFetchMock.mockReset();
     signJWTMock.mockReset();
 });
-describe('createGoogleOAuthLoginUrl', () => {
-    it('builds expected consent screen URL', () => {
-        const url = createGoogleOAuthLoginUrl('https://example.com/callback', '/next/path', 'client-123');
-        const parsed = new URL(url);
-        expect(parsed.origin + parsed.pathname).toBe('https://accounts.google.com/o/oauth2/v2/auth');
-        expect(parsed.searchParams.get('client_id')).toBe('client-123');
-        expect(parsed.searchParams.get('redirect_uri')).toBe('https://example.com/callback');
-        expect(parsed.searchParams.get('response_type')).toBe('code');
-        expect(parsed.searchParams.get('scope')).toBe('openid email profile');
-        expect(parsed.searchParams.get('access_type')).toBe('offline');
-        expect(parsed.searchParams.get('prompt')).toBe('consent');
-        expect(JSON.parse(parsed.searchParams.get('state') ?? '')).toEqual({
-            next: '/next/path',
-            provider: 'google'
-        });
-    });
-});
-describe('exchangeCodeForGoogleIdToken', () => {
+describe('Google OAuth Token Exchange', () => {
     const payload = {
         code: 'auth-code',
         redirect_uri: 'https://example.com/callback',
@@ -53,9 +38,70 @@ describe('exchangeCodeForGoogleIdToken', () => {
             error: { error: apiError }
         });
         const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
-        expect(result).toEqual({
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/google-invalid-grant');
+        expect(result.error?.message).toBe(GoogleErrorInfo.GOOGLE_INVALID_GRANT.message);
+    });
+    it('handles invalid client error', async () => {
+        const apiError = { code: 401, message: 'invalid_client' };
+        restFetchMock.mockResolvedValue({
             data: null,
-            error: new Error('Failed to exchange code for ID token: invalid_grant')
+            error: { error: apiError }
+        });
+        const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/google-invalid-client');
+        expect(result.error?.message).toBe(GoogleErrorInfo.GOOGLE_INVALID_CLIENT.message);
+    });
+    it('handles invalid request error', async () => {
+        const apiError = { code: 400, message: 'invalid_request' };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: { error: apiError }
+        });
+        const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/google-invalid-request');
+        expect(result.error?.message).toBe(GoogleErrorInfo.GOOGLE_INVALID_REQUEST.message);
+    });
+    it('handles access denied error', async () => {
+        const apiError = { code: 403, message: 'access_denied' };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: { error: apiError }
+        });
+        const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/google-access-denied');
+        expect(result.error?.message).toBe(GoogleErrorInfo.GOOGLE_ACCESS_DENIED.message);
+    });
+    it('handles unrecognized error with default fallback', async () => {
+        const apiError = { code: 500, message: 'unknown_error' };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: { error: apiError }
+        });
+        const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/google-code-exchange-failed');
+        expect(result.error?.message).toBe(GoogleErrorInfo.GOOGLE_CODE_EXCHANGE_FAILED.message);
+    });
+    it('includes error context in FirebaseEdgeError', async () => {
+        const apiError = { code: 400, message: 'invalid_grant' };
+        restFetchMock.mockResolvedValue({
+            data: null,
+            error: { error: apiError }
+        });
+        const result = await exchangeCodeForGoogleIdToken(payload.code, payload.redirect_uri, payload.client_id, payload.client_secret);
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        const firebaseError = result.error;
+        expect(firebaseError.context).toEqual({
+            originalError: 'invalid_grant'
         });
     });
 });
@@ -91,18 +137,18 @@ describe('getToken', () => {
         signJWTMock.mockResolvedValue({ data: null, error: jwtError });
         const result = await getToken(serviceAccount);
         expect(restFetchMock).not.toHaveBeenCalled();
-        expect(result).toEqual({
-            data: null,
-            error: new Error('Failed to sign JWT: bad cert')
-        });
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/jwt-sign-failed');
+        expect(result.error?.message).toBe(GoogleErrorInfo.JWT_SIGN_FAILED.message);
     });
     it('reports missing JWT data', async () => {
         signJWTMock.mockResolvedValue({ data: null, error: null });
         const result = await getToken(serviceAccount);
-        expect(result).toEqual({
-            data: null,
-            error: new Error('No JWT data returned')
-        });
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/jwt-data-missing');
+        expect(result.error?.message).toBe(GoogleErrorInfo.JWT_DATA_MISSING.message);
     });
     it('returns REST error payload from Google', async () => {
         const apiError = { code: 503, message: 'unavailable' };
@@ -112,19 +158,43 @@ describe('getToken', () => {
             error: { error: apiError }
         });
         const result = await getToken(serviceAccount);
-        expect(result).toEqual({
-            data: null,
-            error: new Error('Failed to get token: unavailable')
-        });
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/google-temporarily-unavailable');
+        expect(result.error?.message).toBe(GoogleErrorInfo.GOOGLE_TEMPORARILY_UNAVAILABLE.message);
     });
     it('handles unexpected exceptions', async () => {
         signJWTMock.mockResolvedValue({ data: 'signed-jwt', error: null });
         restFetchMock.mockRejectedValue(new Error('boom'));
         const result = await getToken(serviceAccount);
-        expect(result).toEqual({
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/google-token-request-failed');
+        expect(result.error?.message).toBe(GoogleErrorInfo.GOOGLE_TOKEN_REQUEST_FAILED.message);
+    });
+    it('handles server error with appropriate mapping', async () => {
+        const apiError = { code: 500, message: 'Internal server error' };
+        signJWTMock.mockResolvedValue({ data: 'signed-jwt', error: null });
+        restFetchMock.mockResolvedValue({
             data: null,
-            error: new Error('Failed to get token: boom')
+            error: { error: apiError }
+        });
+        const result = await getToken(serviceAccount);
+        expect(result.data).toBeNull();
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        expect(result.error?.code).toBe('auth/google-server-error');
+        expect(result.error?.message).toBe(GoogleErrorInfo.GOOGLE_SERVER_ERROR.message);
+    });
+    it('includes error context in FirebaseEdgeError', async () => {
+        const jwtError = { code: 401, message: 'bad cert', errors: [] };
+        signJWTMock.mockResolvedValue({ data: null, error: jwtError });
+        const result = await getToken(serviceAccount);
+        expect(result.error).toBeInstanceOf(FirebaseEdgeError);
+        const firebaseError = result.error;
+        expect(firebaseError.context).toEqual({
+            originalError: 'bad cert'
         });
+        expect(firebaseError.cause).toBeInstanceOf(Error);
     });
 });
 //# sourceMappingURL=google-oauth.test.js.map