firebase-admin-edge 1.0.5 → 1.0.10

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2025 Jonathan Gamble
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+MIT License
+
+Copyright (c) 2025 Jonathan Gamble
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

package/README.md

@@ -1,4 +1,4 @@
-**firebase-admin-edge**
+# Firebase Admin Edge
 
 Use Firebase Admin on the edge:
 
@@ -10,3 +10,92 @@ Use Firebase Admin on the edge:
 - Node.js
 
 Uses Rest API under the hood and has no side effects.
+
+## Installation
+
+```bash
+npm i -D firebase-admin-edge
+```
+
+## Quick Start
+
+### Basic Setup
+
+```typescript
+import { createFirebaseEdgeServer } from 'firebase-admin-edge';
+import { getCookie, setCookie } from 'your-framework-library';
+
+export const firebaseServer = createFirebaseEdgeServer({
+    serviceAccount: {
+        type: 'service_account',
+        project_id: 'your-project-id',
+        private_key_id: 'your-private-key-id',
+        ...
+    },
+    firebaseConfig: {
+        apiKey: 'your-web-api-key',
+        authDomain: 'your-project.firebaseapp.com',
+        ...
+    },
+    providers: {
+        google: {
+            client_id: 'your-google-oauth-client-id',
+            client_secret: 'your-google-oauth-client-secret',
+        },
+    },
+    cookies: {
+        getSession: (name) => {
+            return getCookie(name);
+        },
+        saveSession: (name, value, options) => {
+            return setCookie(name, value, options);
+        }
+    },
+});
+```
+
+### Get User
+
+```ts
+const { data: user } = await firebaseServer.getUser();
+```
+
+### Login With Google Code
+
+```ts
+// Currently only supports Google Provider, more coming soon!
+
+const { error } = await firebaseServer.signInWithGoogleWithCode(
+    code,
+    redirect_uri,
+);
+```
+
+### Create Google Login URL
+
+```ts
+// Normally you need a browser to do this!
+
+const loginUrl = await firebaseServer.getGoogleLoginURL(redirect_uri, path);
+
+// Your framework redirect method
+redirect(302, loginUrl);
+```
+
+### Logout
+
+```ts
+firebaseServer.signOut();
+
+// Your framework redirect method
+redirect(302, '/');
+```
+
+## Features
+
+- ✅ **Edge Runtime Compatible** - Works in Vercel Edge, Cloudflare Workers, Deno, and Bun
+- ✅ **Zero Dependencies** - Uses only fetch API and jose
+- ✅ **TypeScript Support** - Full type safety and IntelliSense
+- ✅ **Session Management** - Secure HTTP-only cookies
+- ✅ **Google OAuth** - Complete OAuth 2.0 flow
+- ✅ **Token Management** - Generate client tokens from server sessions

package/dist/firebase-edge-server.d.ts

@@ -2,7 +2,12 @@ import type { GetSession, SetSession } from './auth/cookie-types.js';
 import { FirebaseAdminAuth } from './auth/firebase-admin-auth.js';
 import { FirebaseAuth } from './auth/firebase-auth.js';
 import type { FirebaseConfig, ServiceAccount } from './auth/firebase-types.js';
-export declare const OFFICIAL_FIREBASE_OAUTH_PROVIDERS: readonly ["google", "facebook", "apple", "twitter", "github", "microsoft", "yahoo", "playgames"];
+/**
+ * Official Firebase OAuth providers supported by Firebase Auth
+ * @constant
+ * @type {readonly string[]}
+ */
+export declare const OFFICIAL_FIREBASE_OAUTH_PROVIDERS: readonly string[];
 type ProviderList = (typeof OFFICIAL_FIREBASE_OAUTH_PROVIDERS)[number];
 type ProviderConfig = Partial<Record<ProviderList, {
     client_id: string;
@@ -13,6 +18,62 @@ type CookieConfig = {
     saveSession: SetSession;
     sessionName?: string;
 };
+/**
+ * Creates a Firebase Edge Server instance with authentication and session management capabilities.
+ *
+ * This function sets up a complete Firebase authentication system that works in edge environments
+ * like Cloudflare Workers, Vercel Edge Functions, and other serverless platforms.
+ *
+ * @param config - Configuration object for the Firebase Edge Server
+ * @param config.serviceAccount - Firebase service account credentials for admin operations
+ * @param config.firebaseConfig - Firebase project configuration (apiKey, authDomain, etc.)
+ * @param config.providers - OAuth provider configurations (Google, Facebook, etc.)
+ * @param config.cookies - Cookie management configuration for session handling
+ * @param config.fetch - Optional custom fetch implementation (defaults to globalThis.fetch)
+ *
+ * @returns Object containing authentication methods and utilities
+ *
+ * @example
+ * ```typescript
+ * const server = createFirebaseEdgeServer({
+ *   serviceAccount: {
+ *     type: "service_account",
+ *     project_id: "your-project-id",
+ *     private_key_id: "...",
+ *     private_key: "...",
+ *     client_email: "...",
+ *     client_id: "...",
+ *     auth_uri: "...",
+ *     token_uri: "...",
+ *     auth_provider_x509_cert_url: "...",
+ *     client_x509_cert_url: "..."
+ *   },
+ *   firebaseConfig: {
+ *     apiKey: "your-api-key",
+ *     authDomain: "your-project.firebaseapp.com",
+ *     projectId: "your-project-id"
+ *   },
+ *   providers: {
+ *     google: {
+ *       client_id: "your-google-client-id",
+ *       client_secret: "your-google-client-secret"
+ *     }
+ *   },
+ *   cookies: {
+ *     getSession: (name) => getCookie(name),
+ *     saveSession: (name, value, options) => setCookie(name, value, options)
+ *   }
+ * });
+ *
+ * // Using guard clauses for clean error handling
+ * const { data: user, error } = await server.getUser();
+ * if (error) return handleError(error);
+ * if (!user) return redirectToLogin();
+ *
+ * // User is authenticated, proceed with protected logic
+ * console.log('Authenticated user:', user.email);
+ * ```
+ */
 export declare function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, providers, cookies, fetch, }: {
     serviceAccount: ServiceAccount;
     firebaseConfig: FirebaseConfig;

package/dist/firebase-edge-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firebase-edge-server.d.ts","sourceRoot":"","sources":["../src/firebase-edge-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,UAAU,EACV,UAAU,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAgB/E,eAAO,MAAM,iCAAiC,kGASpC,CAAC;AAEX,KAAK,YAAY,GAAG,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,KAAK,cAAc,GAAG,OAAO,CACzB,MAAM,CACF,YAAY,EACZ;IACI,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACzB,CACJ,CACJ,CAAC;AAEF,KAAK,YAAY,GAAG;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,EACrC,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,KAAK,GACR,EAAE;IACC,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACnC;;;;6BAsBwC,OAAO;;;;;;;;;;;;;;;;;;;;sCAqCG,MAAM,QAAQ,MAAM;qCAazD,MAAM,gBACE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4I3B"}
+{"version":3,"file":"firebase-edge-server.d.ts","sourceRoot":"","sources":["../src/firebase-edge-server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,UAAU,EACV,UAAU,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAgB/E;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EASrD,CAAC;AAEX,KAAK,YAAY,GAAG,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,KAAK,cAAc,GAAG,OAAO,CACzB,MAAM,CACF,YAAY,EACZ;IACI,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACzB,CACJ,CACJ,CAAC;AAEF,KAAK,YAAY,GAAG;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,wBAAwB,CAAC,EACrC,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,KAAK,GACR,EAAE;IACC,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACnC;;;;6BA+EwC,OAAO;;;;;;;;;;;;;;;;;;;;sCA8EG,MAAM,QAAQ,MAAM;qCA+DzD,MAAM,gBACE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgM3B"}

package/dist/firebase-edge-server.js

@@ -10,6 +10,11 @@ const COOKIE_OPTIONS = {
     path: '/',
     maxAge: 60 * 60 * 24 * 5 * 1000,
 };
+/**
+ * Official Firebase OAuth providers supported by Firebase Auth
+ * @constant
+ * @type {readonly string[]}
+ */
 export const OFFICIAL_FIREBASE_OAUTH_PROVIDERS = [
     'google',
     'facebook',
@@ -20,6 +25,62 @@ export const OFFICIAL_FIREBASE_OAUTH_PROVIDERS = [
     'yahoo',
     'playgames',
 ];
+/**
+ * Creates a Firebase Edge Server instance with authentication and session management capabilities.
+ *
+ * This function sets up a complete Firebase authentication system that works in edge environments
+ * like Cloudflare Workers, Vercel Edge Functions, and other serverless platforms.
+ *
+ * @param config - Configuration object for the Firebase Edge Server
+ * @param config.serviceAccount - Firebase service account credentials for admin operations
+ * @param config.firebaseConfig - Firebase project configuration (apiKey, authDomain, etc.)
+ * @param config.providers - OAuth provider configurations (Google, Facebook, etc.)
+ * @param config.cookies - Cookie management configuration for session handling
+ * @param config.fetch - Optional custom fetch implementation (defaults to globalThis.fetch)
+ *
+ * @returns Object containing authentication methods and utilities
+ *
+ * @example
+ * ```typescript
+ * const server = createFirebaseEdgeServer({
+ *   serviceAccount: {
+ *     type: "service_account",
+ *     project_id: "your-project-id",
+ *     private_key_id: "...",
+ *     private_key: "...",
+ *     client_email: "...",
+ *     client_id: "...",
+ *     auth_uri: "...",
+ *     token_uri: "...",
+ *     auth_provider_x509_cert_url: "...",
+ *     client_x509_cert_url: "..."
+ *   },
+ *   firebaseConfig: {
+ *     apiKey: "your-api-key",
+ *     authDomain: "your-project.firebaseapp.com",
+ *     projectId: "your-project-id"
+ *   },
+ *   providers: {
+ *     google: {
+ *       client_id: "your-google-client-id",
+ *       client_secret: "your-google-client-secret"
+ *     }
+ *   },
+ *   cookies: {
+ *     getSession: (name) => getCookie(name),
+ *     saveSession: (name, value, options) => setCookie(name, value, options)
+ *   }
+ * });
+ *
+ * // Using guard clauses for clean error handling
+ * const { data: user, error } = await server.getUser();
+ * if (error) return handleError(error);
+ * if (!user) return redirectToLogin();
+ *
+ * // User is authenticated, proceed with protected logic
+ * console.log('Authenticated user:', user.email);
+ * ```
+ */
 export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, providers, cookies, fetch, }) {
     const sessionName = cookies.sessionName || DEFAULT_SESSION_NAME;
     const getSession = cookies.getSession;
@@ -27,16 +88,73 @@ export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, provi
     const fetchImpl = fetch ?? globalThis.fetch;
     const auth = new FirebaseAuth(firebaseConfig, fetchImpl);
     const adminAuth = new FirebaseAdminAuth(serviceAccount, fetchImpl);
+    /**
+     * Deletes the current user session by clearing the session cookie.
+     *
+     * This is an internal helper function used by signOut and error handlers to ensure
+     * clean session management when authentication fails or users sign out.
+     *
+     * @internal
+     */
     function deleteSession() {
         saveSession(sessionName, '', {
             ...COOKIE_OPTIONS,
             maxAge: 0,
         });
     }
+    /**
+     * Signs out the current user by deleting their session cookie.
+     *
+     * This method only removes the local session and does not revoke the user's Firebase tokens.
+     * For complete logout, consider also calling Firebase client-side signOut if needed.
+     *
+     * @example
+     * ```typescript
+     * // Simple sign out
+     * server.signOut();
+     *
+     * // With redirect after sign out
+     * server.signOut();
+     * return redirect('/login');
+     * ```
+     */
     function signOut() {
         deleteSession();
         return;
     }
+    /**
+     * Retrieves the current authenticated user's information from their session.
+     *
+     * Validates the session cookie and returns the decoded user token. If the session
+     * is invalid or expired, automatically cleans up the session cookie.
+     *
+     * @param checkRevoked - Whether to check if the user's token has been revoked (default: false)
+     * @returns Promise resolving to user data and error information
+     *
+     * @example
+     * ```typescript
+     * // Using guard clauses for clean error handling
+     * const { data: user, error } = await server.getUser();
+     * if (error) {
+     *   console.error('Authentication error:', error);
+     *   return redirect('/login');
+     * }
+     *
+     * if (!user) {
+     *   console.log('No user session found');
+     *   return redirect('/login');
+     * }
+     *
+     * // User is authenticated, proceed safely
+     * console.log('User ID:', user.sub);
+     * console.log('Email:', user.email);
+     * console.log('Email verified:', user.email_verified);
+     *
+     * // Check for revoked tokens in sensitive operations
+     * const { data: verifiedUser, error: revokeError } = await server.getUser(true);
+     * if (revokeError) return handleRevokedToken();
+     * ```
+     */
     async function getUser(checkRevoked = false) {
         const sessionCookie = await getSession(sessionName);
         if (!sessionCookie) {
@@ -65,6 +183,47 @@ export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, provi
             error: null,
         };
     }
+    /**
+     * Generates a Google OAuth login URL for user authentication.
+     *
+     * Automatically clears any existing session before generating the URL to ensure
+     * a clean authentication flow. The generated URL will redirect users to Google's
+     * OAuth consent screen.
+     *
+     * @param redirect_uri - The URI to redirect to after Google authentication (must be registered in Google Console)
+     * @param path - Additional path parameter for the OAuth flow state management
+     * @returns Promise resolving to the Google OAuth login URL
+     *
+     * @throws {Error} If Google provider is not configured in the providers config
+     *
+     * @example
+     * ```typescript
+     * // Basic usage with guard clause
+     * try {
+     *   const loginUrl = await server.getGoogleLoginURL(
+     *     'https://yourapp.com/auth/callback',
+     *     '/dashboard'
+     *   );
+     *   return redirect(loginUrl);
+     * } catch (error) {
+     *   console.error('Google OAuth not configured:', error);
+     *   return errorResponse('OAuth unavailable');
+     * }
+     *
+     * // In a route handler
+     * export async function GET(request: Request) {
+     *   const url = new URL(request.url);
+     *   const returnTo = url.searchParams.get('returnTo') || '/dashboard';
+     *
+     *   const loginUrl = await server.getGoogleLoginURL(
+     *     `${url.origin}/auth/callback`,
+     *     returnTo
+     *   );
+     *
+     *   return redirect(loginUrl);
+     * }
+     * ```
+     */
     async function getGoogleLoginURL(redirect_uri, path) {
         deleteSession();
         if (!providers.google) {
@@ -73,6 +232,56 @@ export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, provi
         const { client_id } = providers.google;
         return createGoogleOAuthLoginUrl(redirect_uri, path, client_id);
     }
+    /**
+     * Completes Google OAuth authentication by exchanging an authorization code for a session.
+     *
+     * This method should be called in your OAuth callback handler to complete the authentication
+     * flow initiated by getGoogleLoginURL. It exchanges the authorization code for tokens,
+     * creates a Firebase session, and sets the session cookie.
+     *
+     * @param code - The authorization code received from Google OAuth callback
+     * @param redirect_uri - The redirect URI used in the OAuth flow (must match the one used in getGoogleLoginURL)
+     * @returns Promise resolving to success/error information
+     *
+     * @example
+     * ```typescript
+     * // In your OAuth callback handler with guard clauses
+     * export async function GET(request: Request) {
+     *   const url = new URL(request.url);
+     *   const code = url.searchParams.get('code');
+     *   const state = url.searchParams.get('state');
+     *
+     *   // Guard clauses for validation
+     *   if (!code) {
+     *     console.error('No authorization code received');
+     *     return redirect('/login?error=no_code');
+     *   }
+     *
+     *   const { error } = await server.signInWithGoogleWithCode(
+     *     code,
+     *     `${url.origin}/auth/callback`
+     *   );
+     *
+     *   if (error) {
+     *     console.error('Sign in failed:', error.message);
+     *     return redirect('/login?error=auth_failed');
+     *   }
+     *
+     *   // Success - redirect to protected area
+     *   const redirectTo = state || '/dashboard';
+     *   return redirect(redirectTo);
+     * }
+     *
+     * // Error handling with specific error types
+     * const { error } = await server.signInWithGoogleWithCode(code, redirectUri);
+     * if (error?.message.includes('provider not configured')) {
+     *   return handleConfigError();
+     * }
+     * if (error?.message.includes('invalid_grant')) {
+     *   return handleExpiredCode();
+     * }
+     * ```
+     */
     async function signInWithGoogleWithCode(code, redirect_uri) {
         if (!providers.google) {
             return {
@@ -93,7 +302,6 @@ export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, provi
         }
         const { data: signInData, error: signInError } = await auth.signInWithProvider(exchangeData.id_token, redirect_uri);
         if (signInError) {
-            console.error(JSON.stringify(signInError));
             return {
                 data: null,
                 error: signInError,
@@ -123,6 +331,48 @@ export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, provi
             error: null,
         };
     }
+    /**
+     * Generates a fresh Firebase access token for the currently authenticated user.
+     *
+     * This method creates new Firebase client tokens that can be used for authenticated
+     * requests to Firebase services from the client-side. The tokens are generated using
+     * the user's server-side session.
+     *
+     * @returns Promise resolving to token data (accessToken, refreshToken, etc.) and error information
+     *
+     * @example
+     * ```typescript
+     * // Using guard clauses for clean token handling
+     * const { data: tokenData, error } = await server.getToken();
+     * if (error) {
+     *   console.error('Token generation failed:', error.message);
+     *   return redirect('/login');
+     * }
+     *
+     * if (!tokenData) {
+     *   console.log('No user session for token generation');
+     *   return redirect('/login');
+     * }
+     *
+     * // Tokens are ready for client use
+     * const response = {
+     *   accessToken: tokenData.accessToken,
+     *   refreshToken: tokenData.refreshToken,
+     *   expiresIn: tokenData.expiresIn
+     * };
+     *
+     * return json(response);
+     *
+     * // Using tokens for Firebase client initialization
+     * const auth = getAuth(app);
+     * await signInWithCustomToken(auth, tokenData.accessToken);
+     *
+     * // Guard against token refresh failures
+     * if (tokenData.expiresIn < 300) { // Less than 5 minutes
+     *   console.warn('Token expires soon, consider refreshing');
+     * }
+     * ```
+     */
     async function getToken() {
         const { data: verifiedToken, error: verifyError } = await getUser();
         if (verifyError) {
@@ -152,7 +402,6 @@ export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, provi
         }
         const { data: signInData, error: signInError } = await auth.signInWithCustomToken(signJWTData);
         if (signInError) {
-            console.error(signInError);
             return {
                 data: null,
                 error: signInError,
@@ -169,6 +418,18 @@ export function createFirebaseEdgeServer({ serviceAccount, firebaseConfig, provi
             error: null,
         };
     }
+    /**
+     * Returns the complete Firebase Edge Server API with all authentication methods.
+     *
+     * @returns Object containing:
+     * - `auth`: Firebase Auth instance for client-side operations
+     * - `adminAuth`: Firebase Admin Auth instance for server-side operations
+     * - `signOut`: Function to sign out the current user
+     * - `getUser`: Function to get current user information with optional revocation checking
+     * - `getGoogleLoginURL`: Function to generate Google OAuth login URL
+     * - `signInWithGoogleWithCode`: Function to complete Google OAuth flow
+     * - `getToken`: Function to get fresh Firebase tokens for client-side usage
+     */
     return {
         auth,
         adminAuth,

package/dist/firebase-edge-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"firebase-edge-server.js","sourceRoot":"","sources":["../src/firebase-edge-server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EACH,yBAAyB,EACzB,4BAA4B,GAC/B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC,MAAM,cAAc,GAAG;IACnB,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI;CACjB,CAAC;AAEnB,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC7C,QAAQ;IACR,UAAU;IACV,OAAO;IACP,SAAS;IACT,QAAQ;IACR,WAAW;IACX,OAAO;IACP,WAAW;CACL,CAAC;AAoBX,MAAM,UAAU,wBAAwB,CAAC,EACrC,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,KAAK,GAOR;IACG,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAExC,MAAM,SAAS,GAAG,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAEnE,SAAS,aAAa;QAClB,WAAW,CAAC,WAAW,EAAE,EAAE,EAAE;YACzB,GAAG,cAAc;YACjB,MAAM,EAAE,CAAC;SACZ,CAAC,CAAC;IACP,CAAC;IAED,SAAS,OAAO;QACZ,aAAa,EAAE,CAAC;QAChB,OAAO;IACX,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,eAAwB,KAAK;QAChD,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,GAC5C,MAAM,SAAS,CAAC,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAErE,IAAI,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,CAAC;YAEhB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAEhB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,UAAU,iBAAiB,CAAC,YAAoB,EAAE,IAAY;QAC/D,aAAa,EAAE,CAAC;QAEhB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QAEvC,OAAO,yBAAyB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,UAAU,wBAAwB,CACnC,IAAY,EACZ,YAAoB;QAEpB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACrD,CAAC;QACN,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QAEtD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,GAC9C,MAAM,4BAA4B,CAC9B,IAAI,EACJ,YAAY,EACZ,SAAS,EACT,aAAa,EACb,SAAS,CACZ,CAAC;QAEN,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,KAAK,EAAE,aAAa;aACvB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mBAAmB,CAAC;aACxC,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,GAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;YAC3C,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,GAC9C,MAAM,SAAS,CAAC,mBAAmB,CAAC,UAAU,CAAC,OAAO,EAAE;YACpD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI;SACrC,CAAC,CAAC;QAEP,IAAI,YAAY,EAAE,CAAC;YACf,OAAO;gBACH,KAAK,EAAE,YAAY;aACtB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,4BAA4B,CAAC;aACjD,CAAC;QACN,CAAC;QAED,WAAW,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;QAExD,OAAO;YACH,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,KAAK,UAAU,QAAQ;QACnB,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAEpE,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,GAC5C,MAAM,kBAAkB,CAAC,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAEhE,IAAI,YAAY,EAAE,CAAC;YACf,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,YAAY;aACtB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,wBAAwB,CAAC;aAC7C,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,GAC1C,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAElD,IAAI,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED,OAAO;QACH,IAAI;QACJ,SAAS;QACT,OAAO;QACP,OAAO;QACP,iBAAiB;QACjB,wBAAwB;QACxB,QAAQ;KACX,CAAC;AACN,CAAC"}
+{"version":3,"file":"firebase-edge-server.js","sourceRoot":"","sources":["../src/firebase-edge-server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EACH,yBAAyB,EACzB,4BAA4B,GAC/B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC,MAAM,cAAc,GAAG;IACnB,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI;CACjB,CAAC;AAEnB;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAsB;IAChE,QAAQ;IACR,UAAU;IACV,OAAO;IACP,SAAS;IACT,QAAQ;IACR,WAAW;IACX,OAAO;IACP,WAAW;CACL,CAAC;AAoBX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAM,UAAU,wBAAwB,CAAC,EACrC,cAAc,EACd,cAAc,EACd,SAAS,EACT,OAAO,EACP,KAAK,GAOR;IACG,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAExC,MAAM,SAAS,GAAG,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAEnE;;;;;;;OAOG;IACH,SAAS,aAAa;QAClB,WAAW,CAAC,WAAW,EAAE,EAAE,EAAE;YACzB,GAAG,cAAc;YACjB,MAAM,EAAE,CAAC;SACZ,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,SAAS,OAAO;QACZ,aAAa,EAAE,CAAC;QAChB,OAAO;IACX,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,KAAK,UAAU,OAAO,CAAC,eAAwB,KAAK;QAChD,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,GAC5C,MAAM,SAAS,CAAC,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAErE,IAAI,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,CAAC;YAEhB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAEhB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,KAAK,UAAU,iBAAiB,CAAC,YAAoB,EAAE,IAAY;QAC/D,aAAa,EAAE,CAAC;QAEhB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QAEvC,OAAO,yBAAyB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiDG;IACH,KAAK,UAAU,wBAAwB,CACnC,IAAY,EACZ,YAAoB;QAEpB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACrD,CAAC;QACN,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QAEtD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,GAC9C,MAAM,4BAA4B,CAC9B,IAAI,EACJ,YAAY,EACZ,SAAS,EACT,aAAa,EACb,SAAS,CACZ,CAAC;QAEN,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO;gBACH,KAAK,EAAE,aAAa;aACvB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,mBAAmB,CAAC;aACxC,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,GAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,GAC9C,MAAM,SAAS,CAAC,mBAAmB,CAAC,UAAU,CAAC,OAAO,EAAE;YACpD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI;SACrC,CAAC,CAAC;QAEP,IAAI,YAAY,EAAE,CAAC;YACf,OAAO;gBACH,KAAK,EAAE,YAAY;aACtB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,KAAK,EAAE,IAAI,KAAK,CAAC,4BAA4B,CAAC;aACjD,CAAC;QACN,CAAC;QAED,WAAW,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;QAExD,OAAO;YACH,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACH,KAAK,UAAU,QAAQ;QACnB,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;QAEpE,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,GAC5C,MAAM,kBAAkB,CAAC,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAEhE,IAAI,YAAY,EAAE,CAAC;YACf,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,YAAY;aACtB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,wBAAwB,CAAC;aAC7C,CAAC;QACN,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,GAC1C,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAElD,IAAI,WAAW,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,WAAW;aACrB,CAAC;QACN,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACd,CAAC;QACN,CAAC;QAED,OAAO;YACH,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,CAAC;IAED;;;;;;;;;;;OAWG;IACH,OAAO;QACH,IAAI;QACJ,SAAS;QACT,OAAO;QACP,OAAO;QACP,iBAAiB;QACjB,wBAAwB;QACxB,QAAQ;KACX,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "firebase-admin-edge",
-    "version": "1.0.5",
+    "version": "1.0.10",
     "description": "A demo package for Total TypeScript",
     "keywords": [
         "demo",
@@ -39,6 +39,9 @@
         "dev": "vitest",
         "clean": "rimraf dist",
         "local-release": "npm run format && changeset version && changeset publish",
-        "prepublishOnly": "npm run ci"
+        "prepublishOnly": "npm run ci",
+        "changeset": "changeset",
+        "changeset:version": "changeset version",
+        "changeset:publish": "changeset publish"
     }
 }