firebase-admin-edge 1.0.25 → 1.1.1

package/dist/auth/user-batch.test.js

@@ -0,0 +1,73 @@
+import { describe, expect, it } from 'vitest';
+import { createBatchUserResult, validateDeleteUsers } from './user-batch.js';
+import { FirebaseEdgeError } from './errors.js';
+describe('validateDeleteUsers', () => {
+    it('accepts empty and maximum-size batches including duplicates', () => {
+        expect(validateDeleteUsers([])).toBeNull();
+        expect(validateDeleteUsers(Array(1000).fill('uid'))).toBeNull();
+    });
+    it.each([
+        null,
+        'uid',
+        {},
+        Array(1001).fill('uid'),
+        [''],
+        ['a'.repeat(129)],
+        [1]
+    ])('rejects invalid batch %j', (uids) => {
+        expect(validateDeleteUsers(uids)).toBeInstanceOf(FirebaseEdgeError);
+    });
+});
+describe('createBatchUserResult', () => {
+    it('counts missing users as successes when no API failures are returned', () => {
+        expect(createBatchUserResult([0, 1])).toEqual({
+            successCount: 2,
+            failureCount: 0,
+            errors: []
+        });
+        expect(createBatchUserResult([])).toEqual({
+            successCount: 0,
+            failureCount: 0,
+            errors: []
+        });
+    });
+    it('maps import failures back to the original indices and sorts local and remote errors', () => {
+        const error = new FirebaseEdgeError({ message: 'Invalid email' });
+        const result = createBatchUserResult([0, 2, 3], [{ index: 2, message: 'DUPLICATE_LOCAL_ID' }], [{ index: 1, error }], 'import');
+        expect(result).toMatchObject({
+            successCount: 2,
+            failureCount: 2,
+            errors: [
+                { index: 1, error },
+                {
+                    index: 3,
+                    error: {
+                        code: 'auth/admin-invalid-user-import',
+                        message: 'DUPLICATE_LOCAL_ID'
+                    }
+                }
+            ]
+        });
+    });
+    it('returns a structured error for a failed deletion', () => {
+        expect(createBatchUserResult([0], [{ index: 0 }])).toMatchObject({
+            successCount: 0,
+            failureCount: 1,
+            errors: [
+                { index: 0, error: { code: 'auth/admin-delete-user-failed' } }
+            ]
+        });
+    });
+    it.each([
+        null,
+        {},
+        [{ index: -1 }],
+        [{ index: 2 }],
+        [{ index: 0.5 }],
+        [{}],
+        [{ index: 0 }, { index: 0 }]
+    ])('rejects corrupt error indices %j', (failures) => {
+        expect(() => createBatchUserResult([0, 1], failures)).toThrow();
+    });
+});
+//# sourceMappingURL=user-batch.test.js.map

package/dist/auth/user-batch.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-batch.test.js","sourceRoot":"","sources":["../../src/auth/user-batch.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACH,qBAAqB,EACrB,mBAAmB,EAEtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC;QACJ,IAAI;QACJ,KAAK;QACL,EAAE;QACF,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACvB,CAAC,EAAE,CAAC;QACJ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;KACN,CAAC,CAAC,0BAA0B,EAAE,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,CAAC,mBAAmB,CAAC,IAAgB,CAAC,CAAC,CAAC,cAAc,CACxD,iBAAiB,CACpB,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AACH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,EAAE;SACb,CAAC,CAAC;QACH,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,EAAE;SACb,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC3F,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,qBAAqB,CAChC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EACT,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,EAC7C,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EACrB,QAAQ,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YACzB,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,MAAM,EAAE;gBACJ,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE;gBACnB;oBACI,KAAK,EAAE,CAAC;oBACR,KAAK,EAAE;wBACH,IAAI,EAAE,gCAAgC;wBACtC,OAAO,EAAE,oBAAoB;qBAChC;iBACJ;aACJ;SACJ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC7D,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,MAAM,EAAE;gBACJ,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE;aACjE;SACJ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC;QACJ,IAAI;QACJ,EAAE;QACF,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;QACf,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACd,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAChB,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;KAC/B,CAAC,CAAC,kCAAkC,EAAE,CAAC,QAAQ,EAAE,EAAE;QAChD,MAAM,CAAC,GAAG,EAAE,CACR,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAA4B,CAAC,CAC9D,CAAC,OAAO,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/auth/user-import.d.ts

@@ -0,0 +1,55 @@
+import { FirebaseEdgeError } from './errors.js';
+import { type CreateRequest, type UpdateRequest, type UserProvider } from './user-request.js';
+import type { FirebaseArrayIndexError } from './user-batch.js';
+export type HashAlgorithmType = 'SCRYPT' | 'STANDARD_SCRYPT' | 'HMAC_SHA512' | 'HMAC_SHA256' | 'HMAC_SHA1' | 'HMAC_MD5' | 'MD5' | 'PBKDF_SHA1' | 'BCRYPT' | 'PBKDF2_SHA256' | 'SHA512' | 'SHA256' | 'SHA1';
+export interface UserImportOptions {
+    hash: {
+        algorithm: HashAlgorithmType;
+        key?: Uint8Array;
+        saltSeparator?: Uint8Array;
+        rounds?: number;
+        memoryCost?: number;
+        parallelization?: number;
+        blockSize?: number;
+        derivedKeyLength?: number;
+    };
+}
+export interface UserMetadataRequest {
+    creationTime?: string;
+    lastSignInTime?: string;
+}
+export interface UserProviderRequest extends UserProvider {
+    uid: string;
+    providerId: string;
+}
+export interface UserImportRecord extends Omit<CreateRequest, 'password' | 'multiFactor'> {
+    uid: string;
+    metadata?: UserMetadataRequest;
+    providerData?: UserProviderRequest[];
+    customClaims?: Record<string, unknown>;
+    passwordHash?: Uint8Array;
+    passwordSalt?: Uint8Array;
+    tenantId?: string;
+    multiFactor?: UpdateRequest['multiFactor'];
+}
+export interface PreparedUserImport {
+    body: {
+        users: Record<string, unknown>[];
+        [key: string]: unknown;
+    };
+    indices: number[];
+    errors: FirebaseArrayIndexError[];
+}
+/** Translate the supported Firebase Admin hash options without hashing on the edge. */
+export declare function buildImportHashOptions(options?: UserImportOptions): Record<string, unknown>;
+/** Convert one imported record, reusing the existing profile and MFA validation. */
+export declare function buildImportUser(user: UserImportRecord, tenantId?: string): Record<string, unknown>;
+/** Prepare valid records while collecting per-user errors and preserving original indices. */
+export declare function prepareUserImport(users: UserImportRecord[], options?: UserImportOptions, tenantId?: string): {
+    data: PreparedUserImport;
+    error: null;
+} | {
+    data: null;
+    error: FirebaseEdgeError;
+};
+//# sourceMappingURL=user-import.d.ts.map

package/dist/auth/user-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-import.d.ts","sourceRoot":"","sources":["../../src/auth/user-import.ts"],"names":[],"mappings":"AACA,OAAO,EACH,iBAAiB,EAGpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIH,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,MAAM,iBAAiB,GACvB,QAAQ,GACR,iBAAiB,GACjB,aAAa,GACb,aAAa,GACb,WAAW,GACX,UAAU,GACV,KAAK,GACL,YAAY,GACZ,QAAQ,GACR,eAAe,GACf,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AACb,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE;QACF,SAAS,EAAE,iBAAiB,CAAC;QAC7B,GAAG,CAAC,EAAE,UAAU,CAAC;QACjB,aAAa,CAAC,EAAE,UAAU,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;CACL;AACD,MAAM,WAAW,mBAAmB;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,WAAW,mBAAoB,SAAQ,YAAY;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,gBACb,SAAQ,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,aAAa,CAAC;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CAC9C;AACD,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACnE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,uBAAuB,EAAE,CAAC;CACrC;AAYD,uFAAuF;AACvF,wBAAgB,sBAAsB,CAClC,OAAO,CAAC,EAAE,iBAAiB,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkEzB;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAC3B,IAAI,EAAE,gBAAgB,EACtB,QAAQ,CAAC,EAAE,MAAM,GAClB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8FzB;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAC7B,KAAK,EAAE,gBAAgB,EAAE,EACzB,OAAO,CAAC,EAAE,iBAAiB,EAC3B,QAAQ,CAAC,EAAE,MAAM,GAEf;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,CAuD7C"}

package/dist/auth/user-import.js

@@ -0,0 +1,208 @@
+import { base64url } from 'jose';
+import { FirebaseEdgeError, FirebaseAdminAuthErrorInfo, ensureError } from './errors.js';
+import { buildUserRequest, buildCustomClaimsRequest, validateUserUid } from './user-request.js';
+/** Encode byte buffers with the API's URL-safe base64 alphabet (including padding). */
+function encodeBytes(value) {
+    if (!(value instanceof Uint8Array))
+        throw new Error('Password and hash values must be Uint8Array byte buffers.');
+    const encoded = base64url.encode(value);
+    return encoded.padEnd(Math.ceil(encoded.length / 4) * 4, '=');
+}
+/** Translate the supported Firebase Admin hash options without hashing on the edge. */
+export function buildImportHashOptions(options) {
+    if (!options?.hash || typeof options.hash !== 'object')
+        throw new Error('Hash options are required when importing password hashes.');
+    const hash = options.hash;
+    const algorithm = hash.algorithm;
+    if (algorithm === 'BCRYPT')
+        return { hashAlgorithm: algorithm };
+    if (['HMAC_SHA512', 'HMAC_SHA256', 'HMAC_SHA1', 'HMAC_MD5'].includes(algorithm)) {
+        return { hashAlgorithm: algorithm, signerKey: encodeBytes(hash.key) };
+    }
+    if (algorithm === 'STANDARD_SCRYPT') {
+        for (const field of [
+            'memoryCost',
+            'parallelization',
+            'blockSize',
+            'derivedKeyLength'
+        ]) {
+            if (!Number.isInteger(hash[field]) || hash[field] <= 0)
+                throw new Error(`hash.${field} must be a positive integer.`);
+        }
+        return {
+            hashAlgorithm: algorithm,
+            cpuMemCost: hash.memoryCost,
+            parallelization: hash.parallelization,
+            blockSize: hash.blockSize,
+            dkLen: hash.derivedKeyLength
+        };
+    }
+    if (algorithm === 'SCRYPT') {
+        if (!Number.isInteger(hash.rounds) ||
+            hash.rounds < 1 ||
+            hash.rounds > 8)
+            throw new Error('SCRYPT rounds must be from 1 to 8.');
+        if (!Number.isInteger(hash.memoryCost) ||
+            hash.memoryCost < 1 ||
+            hash.memoryCost > 14)
+            throw new Error('SCRYPT memoryCost must be from 1 to 14.');
+        return {
+            hashAlgorithm: algorithm,
+            signerKey: encodeBytes(hash.key),
+            saltSeparator: encodeBytes(hash.saltSeparator ?? new Uint8Array()),
+            rounds: hash.rounds,
+            memoryCost: hash.memoryCost
+        };
+    }
+    const isPbkdf = algorithm === 'PBKDF_SHA1' || algorithm === 'PBKDF2_SHA256';
+    if (!isPbkdf && !['MD5', 'SHA1', 'SHA256', 'SHA512'].includes(algorithm))
+        throw new Error('Unsupported hash algorithm.');
+    const min = isPbkdf || algorithm === 'MD5' ? 0 : 1;
+    const max = isPbkdf ? 120000 : 8192;
+    if (!Number.isInteger(hash.rounds) ||
+        hash.rounds < min ||
+        hash.rounds > max)
+        throw new Error(`Hash rounds must be from ${min} to ${max}.`);
+    return { hashAlgorithm: algorithm, rounds: hash.rounds };
+}
+/** Convert one imported record, reusing the existing profile and MFA validation. */
+export function buildImportUser(user, tenantId) {
+    if (!user || typeof user !== 'object' || Array.isArray(user))
+        throw new Error('An imported user must be an object.');
+    const uidError = validateUserUid(user.uid);
+    if (uidError)
+        throw uidError;
+    if (user.tenantId !== undefined &&
+        (typeof user.tenantId !== 'string' ||
+            !user.tenantId ||
+            (tenantId !== undefined && user.tenantId !== tenantId)))
+        throw new Error('Invalid or mismatched import tenantId.');
+    const base = buildUserRequest({
+        email: user.email,
+        emailVerified: user.emailVerified,
+        displayName: user.displayName,
+        photoURL: user.photoURL,
+        phoneNumber: user.phoneNumber,
+        disabled: user.disabled
+    }, 'create');
+    if (base.error)
+        throw base.error;
+    const body = { ...base.data, localId: user.uid };
+    if (user.tenantId !== undefined)
+        body.tenantId = user.tenantId;
+    if (user.passwordHash !== undefined)
+        body.passwordHash = encodeBytes(user.passwordHash);
+    if (user.passwordSalt !== undefined)
+        body.salt = encodeBytes(user.passwordSalt);
+    if (user.metadata !== undefined) {
+        if (!user.metadata || typeof user.metadata !== 'object')
+            throw new Error('metadata must be an object.');
+        for (const [field, target] of [
+            ['creationTime', 'createdAt'],
+            ['lastSignInTime', 'lastLoginAt']
+        ]) {
+            const value = user.metadata[field];
+            if (value === undefined)
+                continue;
+            if (typeof value !== 'string' || Number.isNaN(Date.parse(value)))
+                throw new Error(`Invalid metadata.${field}.`);
+            body[target] = Date.parse(value);
+        }
+    }
+    if (user.customClaims !== undefined) {
+        if (!user.customClaims ||
+            typeof user.customClaims !== 'object' ||
+            Array.isArray(user.customClaims))
+            throw new Error('customClaims must be an object.');
+        const claims = buildCustomClaimsRequest(user.customClaims);
+        if (claims.error)
+            throw claims.error;
+        body.customAttributes = claims.data.customAttributes;
+    }
+    if (user.providerData !== undefined) {
+        if (!Array.isArray(user.providerData))
+            throw new Error('providerData must be an array.');
+        const providers = user.providerData.map((provider) => {
+            const converted = buildUserRequest({ providerToLink: provider }, 'update');
+            if (converted.error)
+                throw converted.error;
+            if (!provider || !converted.data.linkProviderUserInfo)
+                throw new Error('Invalid provider record.');
+            const profile = buildUserRequest({
+                email: provider.email,
+                displayName: provider.displayName,
+                photoURL: provider.photoURL,
+                phoneNumber: provider.phoneNumber
+            }, 'create');
+            if (profile.error)
+                throw profile.error;
+            return {
+                ...profile.data,
+                rawId: provider.uid,
+                providerId: provider.providerId
+            };
+        });
+        if (providers.length)
+            body.providerUserInfo = providers;
+    }
+    if (user.multiFactor !== undefined) {
+        const converted = buildUserRequest({ multiFactor: user.multiFactor }, 'update');
+        if (converted.error)
+            throw converted.error;
+        const mfa = converted.data.mfa;
+        if (mfa.enrollments?.length)
+            body.mfaInfo = mfa.enrollments;
+    }
+    return body;
+}
+/** Prepare valid records while collecting per-user errors and preserving original indices. */
+export function prepareUserImport(users, options, tenantId) {
+    if (!Array.isArray(users) || users.length > 1000)
+        return {
+            data: null,
+            error: new FirebaseEdgeError({
+                ...FirebaseAdminAuthErrorInfo.ADMIN_API_INVALID_ARGUMENT,
+                message: 'users must be an array of at most 1000 records.'
+            })
+        };
+    const records = [];
+    const indices = [];
+    const errors = [];
+    for (let index = 0; index < users.length; index++) {
+        try {
+            const record = buildImportUser(users[index], tenantId);
+            records.push(record);
+            indices.push(index);
+        }
+        catch (cause) {
+            errors.push({
+                index,
+                error: cause instanceof FirebaseEdgeError
+                    ? cause
+                    : new FirebaseEdgeError({
+                        code: 'auth/admin-invalid-user-import',
+                        message: ensureError(cause).message
+                    }, { cause: ensureError(cause) })
+            });
+        }
+    }
+    try {
+        const hashOptions = records.some((user) => user.passwordHash !== undefined)
+            ? buildImportHashOptions(options)
+            : {};
+        return {
+            data: { body: { users: records, ...hashOptions }, indices, errors },
+            error: null
+        };
+    }
+    catch (cause) {
+        return {
+            data: null,
+            error: new FirebaseEdgeError({
+                ...FirebaseAdminAuthErrorInfo.ADMIN_API_INVALID_ARGUMENT,
+                message: ensureError(cause).message
+            }, { cause: ensureError(cause) })
+        };
+    }
+}
+//# sourceMappingURL=user-import.js.map

package/dist/auth/user-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-import.js","sourceRoot":"","sources":["../../src/auth/user-import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EACH,iBAAiB,EACjB,0BAA0B,EAC1B,WAAW,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACH,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EAIlB,MAAM,mBAAmB,CAAC;AAsD3B,uFAAuF;AACvF,SAAS,WAAW,CAAC,KAAiB;IAClC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAC9B,MAAM,IAAI,KAAK,CACX,2DAA2D,CAC9D,CAAC;IACN,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,sBAAsB,CAClC,OAA2B;IAE3B,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAClD,MAAM,IAAI,KAAK,CACX,2DAA2D,CAC9D,CAAC;IACN,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IAChE,IACI,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAC5D,SAAS,CACZ,EACH,CAAC;QACC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,GAAI,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI;YAChB,YAAY;YACZ,iBAAiB;YACjB,WAAW;YACX,kBAAkB;SACZ,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAE,IAAI,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,8BAA8B,CAAC,CAAC;QACrE,CAAC;QACD,OAAO;YACH,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,gBAAgB;SAC/B,CAAC;IACN,CAAC;IACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACzB,IACI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,MAAO,GAAG,CAAC;YAChB,IAAI,CAAC,MAAO,GAAG,CAAC;YAEhB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1D,IACI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;YAClC,IAAI,CAAC,UAAW,GAAG,CAAC;YACpB,IAAI,CAAC,UAAW,GAAG,EAAE;YAErB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC/D,OAAO;YACH,aAAa,EAAE,SAAS;YACxB,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,GAAI,CAAC;YACjC,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,UAAU,EAAE,CAAC;YAClE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC9B,CAAC;IACN,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,eAAe,CAAC;IAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,OAAO,IAAI,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,IACI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAO,GAAG,GAAG;QAClB,IAAI,CAAC,MAAO,GAAG,GAAG;QAElB,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;IAClE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAC3B,IAAsB,EACtB,QAAiB;IAEjB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,QAAQ;QAAE,MAAM,QAAQ,CAAC;IAC7B,IACI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAC3B,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAC,IAAI,CAAC,QAAQ;YACd,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAE3D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,gBAAgB,CACzB;QACI,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KAC1B,EACD,QAAQ,CACX,CAAC;IACF,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC;IACjC,MAAM,IAAI,GAA4B,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/D,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAC/B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAC/B,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACnD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI;YAC1B,CAAC,cAAc,EAAE,WAAW,CAAC;YAC7B,CAAC,gBAAgB,EAAE,aAAa,CAAC;SAC3B,EAAE,CAAC;YACT,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC5D,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAClC,IACI,CAAC,IAAI,CAAC,YAAY;YAClB,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;YAEhC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC;QACrC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjD,MAAM,SAAS,GAAG,gBAAgB,CAC9B,EAAE,cAAc,EAAE,QAAQ,EAAE,EAC5B,QAAQ,CACX,CAAC;YACF,IAAI,SAAS,CAAC,KAAK;gBAAE,MAAM,SAAS,CAAC,KAAK,CAAC;YAC3C,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB;gBACjD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,gBAAgB,CAC5B;gBACI,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;aACpC,EACD,QAAQ,CACX,CAAC;YACF,IAAI,OAAO,CAAC,KAAK;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAC;YACvC,OAAO;gBACH,GAAG,OAAO,CAAC,IAAI;gBACf,KAAK,EAAE,QAAQ,CAAC,GAAG;gBACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAClC,CAAC;QACN,CAAC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,MAAM;YAAE,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,gBAAgB,CAC9B,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EACjC,QAAQ,CACX,CAAC;QACF,IAAI,SAAS,CAAC,KAAK;YAAE,MAAM,SAAS,CAAC,KAAK,CAAC;QAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAkC,CAAC;QAC9D,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM;YAAE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAC7B,KAAyB,EACzB,OAA2B,EAC3B,QAAiB;IAIjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAC5C,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,iBAAiB,CAAC;gBACzB,GAAG,0BAA0B,CAAC,0BAA0B;gBACxD,OAAO,EAAE,iDAAiD;aAC7D,CAAC;SACL,CAAC;IACN,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,QAAQ,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACR,KAAK;gBACL,KAAK,EACD,KAAK,YAAY,iBAAiB;oBAC9B,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,IAAI,iBAAiB,CACjB;wBACI,IAAI,EAAE,gCAAgC;wBACtC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO;qBACtC,EACD,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC;aACd,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAC5C;YACG,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC;YACjC,CAAC,CAAC,EAAE,CAAC;QACT,OAAO;YACH,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;YACnE,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO;YACH,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI,iBAAiB,CACxB;gBACI,GAAG,0BAA0B,CAAC,0BAA0B;gBACxD,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO;aACtC,EACD,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAChC;SACJ,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/auth/user-import.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=user-import.test.d.ts.map

package/dist/auth/user-import.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-import.test.d.ts","sourceRoot":"","sources":["../../src/auth/user-import.test.ts"],"names":[],"mappings":""}

package/dist/auth/user-import.test.js

@@ -0,0 +1,217 @@
+import { describe, expect, it } from 'vitest';
+import { buildImportHashOptions, buildImportUser, prepareUserImport } from './user-import.js';
+describe('buildImportHashOptions', () => {
+    it('supports bcrypt and all HMAC variants', () => {
+        expect(buildImportHashOptions({ hash: { algorithm: 'BCRYPT' } })).toEqual({ hashAlgorithm: 'BCRYPT' });
+        for (const algorithm of [
+            'HMAC_SHA512',
+            'HMAC_SHA256',
+            'HMAC_SHA1',
+            'HMAC_MD5'
+        ]) {
+            expect(buildImportHashOptions({
+                hash: { algorithm, key: new Uint8Array([251, 255]) }
+            })).toEqual({ hashAlgorithm: algorithm, signerKey: '-_8=' });
+        }
+    });
+    it.each(['MD5', 'SHA1', 'SHA256', 'SHA512', 'PBKDF_SHA1', 'PBKDF2_SHA256'])('maps rounds for %s', (algorithm) => {
+        expect(buildImportHashOptions({
+            hash: {
+                algorithm: algorithm,
+                rounds: 2
+            }
+        })).toEqual({ hashAlgorithm: algorithm, rounds: 2 });
+    });
+    it('maps Firebase SCRYPT parameters with default or explicit salt separators', () => {
+        const hash = {
+            algorithm: 'SCRYPT',
+            key: new Uint8Array([1]),
+            rounds: 8,
+            memoryCost: 14
+        };
+        expect(buildImportHashOptions({ hash })).toEqual({
+            hashAlgorithm: 'SCRYPT',
+            signerKey: 'AQ==',
+            rounds: 8,
+            memoryCost: 14,
+            saltSeparator: ''
+        });
+        expect(buildImportHashOptions({
+            hash: { ...hash, saltSeparator: new Uint8Array([2]) }
+        }).saltSeparator).toBe('Ag==');
+    });
+    it('maps standard scrypt fields', () => {
+        expect(buildImportHashOptions({
+            hash: {
+                algorithm: 'STANDARD_SCRYPT',
+                memoryCost: 16384,
+                parallelization: 1,
+                blockSize: 8,
+                derivedKeyLength: 64
+            }
+        })).toEqual({
+            hashAlgorithm: 'STANDARD_SCRYPT',
+            cpuMemCost: 16384,
+            parallelization: 1,
+            blockSize: 8,
+            dkLen: 64
+        });
+    });
+    it.each([
+        undefined,
+        {},
+        { hash: {} },
+        { hash: { algorithm: 'UNKNOWN' } },
+        { hash: { algorithm: 'HMAC_SHA1' } },
+        { hash: { algorithm: 'HMAC_SHA1', key: 'secret' } },
+        { hash: { algorithm: 'MD5', rounds: -1 } },
+        { hash: { algorithm: 'SHA1', rounds: 0 } },
+        { hash: { algorithm: 'SHA256', rounds: 8193 } },
+        { hash: { algorithm: 'PBKDF_SHA1', rounds: 120001 } },
+        { hash: { algorithm: 'SHA512', rounds: 1.5 } },
+        { hash: { algorithm: 'SCRYPT', rounds: 9 } },
+        { hash: { algorithm: 'SCRYPT', rounds: 8, memoryCost: 15 } },
+        { hash: { algorithm: 'SCRYPT', rounds: 8, memoryCost: 14 } },
+        { hash: { algorithm: 'STANDARD_SCRYPT' } }
+    ])('rejects invalid hash settings %j', (options) => {
+        expect(() => buildImportHashOptions(options)).toThrow();
+    });
+});
+describe('buildImportUser', () => {
+    it('translates profile, dates, claims, providers, bytes, and MFA without mutation', () => {
+        const user = {
+            uid: 'uid',
+            email: 'user@example.com',
+            emailVerified: true,
+            disabled: false,
+            photoURL: 'https://example.com/photo',
+            phoneNumber: '+15555550100',
+            tenantId: 'tenant',
+            metadata: {
+                creationTime: 'Wed, 01 Jan 2025 00:00:00 GMT',
+                lastSignInTime: 'Thu, 02 Jan 2025 00:00:00 GMT'
+            },
+            customClaims: { role: 'editor' },
+            passwordHash: new Uint8Array([251, 255]),
+            passwordSalt: new Uint8Array([1]),
+            providerData: [
+                {
+                    uid: 'external',
+                    providerId: 'google.com',
+                    email: 'user@example.com'
+                }
+            ],
+            multiFactor: {
+                enrolledFactors: [
+                    {
+                        factorId: 'phone',
+                        phoneNumber: '+15555550101',
+                        uid: 'factor'
+                    }
+                ]
+            }
+        };
+        const snapshot = structuredClone(user);
+        expect(buildImportUser(user, 'tenant')).toMatchObject({
+            localId: 'uid',
+            email: user.email,
+            emailVerified: true,
+            disabled: false,
+            photoUrl: user.photoURL,
+            tenantId: 'tenant',
+            createdAt: 1735689600000,
+            lastLoginAt: 1735776000000,
+            customAttributes: '{"role":"editor"}',
+            passwordHash: '-_8=',
+            salt: 'AQ==',
+            providerUserInfo: [
+                {
+                    rawId: 'external',
+                    providerId: 'google.com',
+                    email: user.email
+                }
+            ],
+            mfaInfo: [{ phoneInfo: '+15555550101', mfaEnrollmentId: 'factor' }]
+        });
+        expect(user).toEqual(snapshot);
+    });
+    it('accepts Node Buffer as well as Uint8Array and handles empty bytes', () => {
+        expect(buildImportUser({
+            uid: 'uid',
+            passwordHash: Buffer.from([1]),
+            passwordSalt: new Uint8Array()
+        })).toMatchObject({ passwordHash: 'AQ==', salt: '' });
+    });
+    it('omits empty optional collections', () => {
+        expect(buildImportUser({
+            uid: 'uid',
+            providerData: [],
+            multiFactor: { enrolledFactors: [] }
+        })).toEqual({ localId: 'uid' });
+    });
+    it.each([
+        null,
+        {},
+        { uid: '' },
+        { uid: 'uid', email: 'invalid' },
+        { uid: 'uid', passwordHash: 'not bytes' },
+        { uid: 'uid', passwordSalt: 'not bytes' },
+        { uid: 'uid', metadata: null },
+        { uid: 'uid', metadata: { creationTime: 'invalid' } },
+        { uid: 'uid', customClaims: [] },
+        { uid: 'uid', customClaims: { sub: 'reserved' } },
+        { uid: 'uid', customClaims: { claim: 'x'.repeat(1001) } },
+        { uid: 'uid', providerData: 'invalid' },
+        { uid: 'uid', providerData: [{}] },
+        { uid: 'uid', multiFactor: { enrolledFactors: [{}] } },
+        { uid: 'uid', tenantId: '' }
+    ])('rejects invalid user %j', (user) => {
+        expect(() => buildImportUser(user)).toThrow();
+    });
+    it('rejects mismatched tenants and circular claims', () => {
+        expect(() => buildImportUser({ uid: 'uid', tenantId: 'other' }, 'tenant')).toThrow();
+        const claims = {};
+        claims.self = claims;
+        expect(() => buildImportUser({ uid: 'uid', customClaims: claims })).toThrow();
+    });
+});
+describe('prepareUserImport', () => {
+    it('skips invalid users and preserves original indices for valid records', () => {
+        const result = prepareUserImport([
+            { uid: 'one' },
+            { uid: '' },
+            { uid: 'three' }
+        ]);
+        expect(result.error).toBeNull();
+        expect(result.data?.indices).toEqual([0, 2]);
+        expect(result.data?.body.users).toEqual([
+            { localId: 'one' },
+            { localId: 'three' }
+        ]);
+        expect(result.data?.errors).toMatchObject([{ index: 1 }]);
+    });
+    it('requires hash settings only when a valid record has a password hash', () => {
+        expect(prepareUserImport([
+            { uid: 'uid', passwordHash: new Uint8Array([1]) }
+        ]).error).not.toBeNull();
+        expect(prepareUserImport([{ uid: '', passwordHash: new Uint8Array([1]) }])
+            .error).toBeNull();
+        expect(prepareUserImport([{ uid: 'uid' }], {}).data
+            ?.body).toEqual({ users: [{ localId: 'uid' }] });
+        expect(prepareUserImport([{ uid: 'uid', passwordHash: new Uint8Array([1]) }], { hash: { algorithm: 'BCRYPT' } }).data?.body.hashAlgorithm).toBe('BCRYPT');
+    });
+    it('handles empty input and all-invalid records locally', () => {
+        expect(prepareUserImport([]).data).toEqual({
+            body: { users: [] },
+            indices: [],
+            errors: []
+        });
+        expect(prepareUserImport([{ uid: '' }]).data?.indices).toEqual([]);
+    });
+    it('accepts 1000 records and rejects oversized or non-array input', () => {
+        expect(prepareUserImport(Array(1000).fill({ uid: 'uid' })).error).toBeNull();
+        expect(prepareUserImport(Array(1001).fill({ uid: 'uid' })).error).not.toBeNull();
+        expect(prepareUserImport(null).error).not.toBeNull();
+    });
+});
+//# sourceMappingURL=user-import.test.js.map

package/dist/auth/user-import.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-import.test.js","sourceRoot":"","sources":["../../src/auth/user-import.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACH,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EAIpB,MAAM,kBAAkB,CAAC;AAE1B,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC7C,MAAM,CACF,sBAAsB,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAC5D,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvC,KAAK,MAAM,SAAS,IAAI;YACpB,aAAa;YACb,aAAa;YACb,WAAW;YACX,UAAU;SACJ,EAAE,CAAC;YACT,MAAM,CACF,sBAAsB,CAAC;gBACnB,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE;aACvD,CAAC,CACL,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CACvE,oBAAoB,EACpB,CAAC,SAAS,EAAE,EAAE;QACV,MAAM,CACF,sBAAsB,CAAC;YACnB,IAAI,EAAE;gBACF,SAAS,EAAE,SAA8B;gBACzC,MAAM,EAAE,CAAC;aACZ;SACJ,CAAC,CACL,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC,CACJ,CAAC;IACF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAChF,MAAM,IAAI,GAA8B;YACpC,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,CAAC;YACT,UAAU,EAAE,EAAE;SACjB,CAAC;QACF,MAAM,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,CAAC;YACT,UAAU,EAAE,EAAE;YACd,aAAa,EAAE,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,CACF,sBAAsB,CAAC;YACnB,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SACxD,CAAC,CAAC,aAAa,CACnB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACnC,MAAM,CACF,sBAAsB,CAAC;YACnB,IAAI,EAAE;gBACF,SAAS,EAAE,iBAAiB;gBAC5B,UAAU,EAAE,KAAK;gBACjB,eAAe,EAAE,CAAC;gBAClB,SAAS,EAAE,CAAC;gBACZ,gBAAgB,EAAE,EAAE;aACvB;SACJ,CAAC,CACL,CAAC,OAAO,CAAC;YACN,aAAa,EAAE,iBAAiB;YAChC,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,CAAC;YAClB,SAAS,EAAE,CAAC;YACZ,KAAK,EAAE,EAAE;SACZ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC;QACJ,SAAS;QACT,EAAE;QACF,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;QAClC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;QACpC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;QACnD,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1C,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;QAC1C,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC/C,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACrD,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;QAC5C,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;QAC5D,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;QAC5D,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE;KAC7C,CAAC,CAAC,kCAAkC,EAAE,CAAC,OAAO,EAAE,EAAE;QAC/C,MAAM,CAAC,GAAG,EAAE,CACR,sBAAsB,CAAC,OAA4B,CAAC,CACvD,CAAC,OAAO,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACrF,MAAM,IAAI,GAAqB;YAC3B,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,kBAAkB;YACzB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,2BAA2B;YACrC,WAAW,EAAE,cAAc;YAC3B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE;gBACN,YAAY,EAAE,+BAA+B;gBAC7C,cAAc,EAAE,+BAA+B;aAClD;YACD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,YAAY,EAAE;gBACV;oBACI,GAAG,EAAE,UAAU;oBACf,UAAU,EAAE,YAAY;oBACxB,KAAK,EAAE,kBAAkB;iBAC5B;aACJ;YACD,WAAW,EAAE;gBACT,eAAe,EAAE;oBACb;wBACI,QAAQ,EAAE,OAAO;wBACjB,WAAW,EAAE,cAAc;wBAC3B,GAAG,EAAE,QAAQ;qBAChB;iBACJ;aACJ;SACJ,CAAC;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC;YAClD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,aAAa;YACxB,WAAW,EAAE,aAAa;YAC1B,gBAAgB,EAAE,mBAAmB;YACrC,YAAY,EAAE,MAAM;YACpB,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE;gBACd;oBACI,KAAK,EAAE,UAAU;oBACjB,UAAU,EAAE,YAAY;oBACxB,KAAK,EAAE,IAAI,CAAC,KAAK;iBACpB;aACJ;YACD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QACzE,MAAM,CACF,eAAe,CAAC;YACZ,GAAG,EAAE,KAAK;YACV,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,YAAY,EAAE,IAAI,UAAU,EAAE;SACjC,CAAC,CACL,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QACxC,MAAM,CACF,eAAe,CAAC;YACZ,GAAG,EAAE,KAAK;YACV,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;SACvC,CAAC,CACL,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC;QACJ,IAAI;QACJ,EAAE;QACF,EAAE,GAAG,EAAE,EAAE,EAAE;QACX,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE;QAChC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE;QACzC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE;QACzC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9B,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE;QACrD,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE;QAChC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE;QACjD,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;QACzD,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE;QACvC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,EAAE;QAClC,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;QACtD,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;KAC/B,CAAC,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,EAAE;QACnC,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAwB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CACR,eAAe,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,CAAC,CAC/D,CAAC,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,GAAG,EAAE,CACR,eAAe,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CACxD,CAAC,OAAO,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC7B,EAAE,GAAG,EAAE,KAAK,EAAE;YACd,EAAE,GAAG,EAAE,EAAE,EAAE;YACX,EAAE,GAAG,EAAE,OAAO,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpC,EAAE,OAAO,EAAE,KAAK,EAAE;YAClB,EAAE,OAAO,EAAE,OAAO,EAAE;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC3E,MAAM,CACF,iBAAiB,CAAC;YACd,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SACpD,CAAC,CAAC,KAAK,CACX,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,CACF,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC9D,KAAK,CACb,CAAC,QAAQ,EAAE,CAAC;QACb,MAAM,CACF,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAuB,CAAC,CAAC,IAAI;YAC7D,EAAE,IAAI,CACb,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,CACF,iBAAiB,CACb,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EACnD,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CACpC,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAC7B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YACvC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YACnB,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;SACb,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACrE,MAAM,CACF,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAC5D,CAAC,QAAQ,EAAE,CAAC;QACb,MAAM,CACF,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAC5D,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,CACF,iBAAiB,CAAC,IAAqC,CAAC,CAAC,KAAK,CACjE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}