firebase-admin 10.0.2 → 10.1.0

package/lib/app/core.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/core.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app/credential-factory.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/credential-factory.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app/credential-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2020 Google Inc.

package/lib/app/credential-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app/credential.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/credential.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app/firebase-app.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/app/firebase-app.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app/firebase-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/app/firebase-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app/lifecycle.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/lifecycle.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/app-check-api-client-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/app-check-api-client-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/app-check-api.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/app-check-api.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/app-check-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/app-check/app-check-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/app-check/app-check.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/app-check.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/token-generator.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/token-generator.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/token-verifier.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/app-check/token-verifier.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/auth/action-code-settings-builder.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2018 Google Inc.
  *

package/lib/auth/action-code-settings-builder.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2018 Google Inc.

package/lib/auth/auth-api-request.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/auth/auth-api-request.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/auth/auth-config.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2018 Google Inc.
  *

package/lib/auth/auth-config.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2018 Google Inc.

package/lib/auth/auth-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2021 Google Inc.
  *
@@ -22,7 +22,7 @@ import { BaseAuth as TBaseAuth, DeleteUsersResult as TDeleteUsersResult, GetUser
 import { EmailIdentifier as TEmailIdentifier, PhoneIdentifier as TPhoneIdentifier, ProviderIdentifier as TProviderIdentifier, UserIdentifier as TUserIdentifier, UidIdentifier as TUidIdentifier } from './identifier';
 import { CreateTenantRequest as TCreateTenantRequest, Tenant as TTenant, UpdateTenantRequest as TUpdateTenantRequest } from './tenant';
 import { ListTenantsResult as TListTenantsResult, TenantAwareAuth as TTenantAwareAuth, TenantManager as TTenantManager } from './tenant-manager';
-import { DecodedIdToken as TDecodedIdToken } from './token-verifier';
+import { DecodedIdToken as TDecodedIdToken, DecodedAuthBlockingToken as TDecodedAuthBlockingToken } from './token-verifier';
 import { HashAlgorithmType as THashAlgorithmType, UserImportOptions as TUserImportOptions, UserImportRecord as TUserImportRecord, UserImportResult as TUserImportResult, UserMetadataRequest as TUserMetadataRequest, UserProviderRequest as TUserProviderRequest } from './user-import-builder';
 import { MultiFactorInfo as TMultiFactorInfo, MultiFactorSettings as TMultiFactorSettings, PhoneMultiFactorInfo as TPhoneMultiFactorInfo, UserInfo as TUserInfo, UserMetadata as TUserMetadata, UserRecord as TUserRecord } from './user-record';
 /**
@@ -92,6 +92,8 @@ export declare namespace auth {
      * Type alias to {@link firebase-admin.auth#DecodedIdToken}.
      */
     type DecodedIdToken = TDecodedIdToken;
+    /** @alpha */
+    type DecodedAuthBlockingToken = TDecodedAuthBlockingToken;
     /**
      * Type alias to {@link firebase-admin.auth#DeleteUsersResult}.
      */

package/lib/auth/auth-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/auth/auth.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/auth/auth.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/auth/base-auth.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2021 Google Inc.
  *
@@ -15,7 +15,7 @@
  * limitations under the License.
  */
 import { FirebaseArrayIndexError } from '../app';
-import { DecodedIdToken } from './token-verifier';
+import { DecodedIdToken, DecodedAuthBlockingToken } from './token-verifier';
 import { AuthProviderConfig, AuthProviderConfigFilter, ListProviderConfigResults, UpdateAuthProviderRequest, CreateRequest, UpdateRequest } from './auth-config';
 import { UserRecord } from './user-record';
 import { UserIdentifier } from './identifier';
@@ -599,6 +599,8 @@ export declare abstract class BaseAuth {
      * @returns A promise that resolves with the created provider configuration.
      */
     createProviderConfig(config: AuthProviderConfig): Promise<AuthProviderConfig>;
+    /** @alpha */
+    _verifyAuthBlockingToken(token: string, audience?: string): Promise<DecodedAuthBlockingToken>;
     /**
      * Verifies the decoded Firebase issued JWT is not revoked or disabled. Returns a promise that
      * resolves with the decoded claims on success. Rejects the promise with revocation error if revoked

package/lib/auth/base-auth.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.
@@ -66,6 +66,7 @@ var BaseAuth = /** @class */ (function () {
         }
         this.sessionCookieVerifier = token_verifier_1.createSessionCookieVerifier(app);
         this.idTokenVerifier = token_verifier_1.createIdTokenVerifier(app);
+        this.authBlockingTokenVerifier = token_verifier_1.createAuthBlockingTokenVerifier(app);
     }
     /**
      * Creates a new Firebase custom token (JWT) that can be sent back to a client
@@ -914,6 +915,15 @@ var BaseAuth = /** @class */ (function () {
         }
         return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
     };
+    /** @alpha */
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    BaseAuth.prototype._verifyAuthBlockingToken = function (token, audience) {
+        var isEmulator = auth_api_request_1.useEmulator();
+        return this.authBlockingTokenVerifier._verifyAuthBlockingToken(token, isEmulator, audience)
+            .then(function (decodedAuthBlockingToken) {
+            return decodedAuthBlockingToken;
+        });
+    };
     /**
      * Verifies the decoded Firebase issued JWT is not revoked or disabled. Returns a promise that
      * resolves with the decoded claims on success. Rejects the promise with revocation error if revoked

package/lib/auth/identifier.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2020 Google Inc.
  *

package/lib/auth/identifier.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2020 Google Inc.

package/lib/auth/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2020 Google Inc.
  *
@@ -50,6 +50,6 @@ export { BaseAuth, DeleteUsersResult, GetUsersResult, ListUsersResult, SessionCo
 export { EmailIdentifier, PhoneIdentifier, ProviderIdentifier, UidIdentifier, UserIdentifier, } from './identifier';
 export { CreateTenantRequest, Tenant, UpdateTenantRequest, } from './tenant';
 export { ListTenantsResult, TenantAwareAuth, TenantManager, } from './tenant-manager';
-export { DecodedIdToken } from './token-verifier';
+export { DecodedIdToken, DecodedAuthBlockingToken } from './token-verifier';
 export { HashAlgorithmType, UserImportOptions, UserImportRecord, UserImportResult, UserMetadataRequest, UserProviderRequest, } from './user-import-builder';
 export { MultiFactorInfo, MultiFactorSettings, PhoneMultiFactorInfo, UserInfo, UserMetadata, UserRecord, } from './user-record';

package/lib/auth/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2020 Google Inc.

package/lib/auth/tenant-manager.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2019 Google Inc.
  *

package/lib/auth/tenant-manager.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2019 Google Inc.

package/lib/auth/tenant.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2019 Google Inc.
  *

package/lib/auth/tenant.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2019 Google Inc.

package/lib/auth/token-generator.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/auth/token-generator.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * @license

package/lib/auth/token-verifier.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 /*!
  * Copyright 2018 Google Inc.
  *
@@ -148,3 +148,72 @@ export interface DecodedIdToken {
      */
     [key: string]: any;
 }
+/** @alpha */
+export interface DecodedAuthBlockingSharedUserInfo {
+    uid: string;
+    display_name?: string;
+    email?: string;
+    photo_url?: string;
+    phone_number?: string;
+}
+/** @alpha */
+export interface DecodedAuthBlockingMetadata {
+    creation_time?: number;
+    last_sign_in_time?: number;
+}
+/** @alpha */
+export interface DecodedAuthBlockingUserInfo extends DecodedAuthBlockingSharedUserInfo {
+    provider_id: string;
+}
+/** @alpha */
+export interface DecodedAuthBlockingMfaInfo {
+    uid: string;
+    display_name?: string;
+    phone_number?: string;
+    enrollment_time?: string;
+    factor_id?: string;
+}
+/** @alpha */
+export interface DecodedAuthBlockingEnrolledFactors {
+    enrolled_factors?: DecodedAuthBlockingMfaInfo[];
+}
+/** @alpha */
+export interface DecodedAuthBlockingUserRecord extends DecodedAuthBlockingSharedUserInfo {
+    email_verified?: boolean;
+    disabled?: boolean;
+    metadata?: DecodedAuthBlockingMetadata;
+    password_hash?: string;
+    password_salt?: string;
+    provider_data?: DecodedAuthBlockingUserInfo[];
+    multi_factor?: DecodedAuthBlockingEnrolledFactors;
+    custom_claims?: any;
+    tokens_valid_after_time?: number;
+    tenant_id?: string;
+    [key: string]: any;
+}
+/** @alpha */
+export interface DecodedAuthBlockingToken {
+    aud: string;
+    exp: number;
+    iat: number;
+    iss: string;
+    sub: string;
+    event_id: string;
+    event_type: string;
+    ip_address: string;
+    user_agent?: string;
+    locale?: string;
+    sign_in_method?: string;
+    user_record?: DecodedAuthBlockingUserRecord;
+    tenant_id?: string;
+    raw_user_info?: string;
+    sign_in_attributes?: {
+        [key: string]: any;
+    };
+    oauth_id_token?: string;
+    oauth_access_token?: string;
+    oauth_refresh_token?: string;
+    oauth_token_secret?: string;
+    oauth_expires_in?: number;
+    [key: string]: any;
+}

package/lib/auth/token-verifier.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.0.2 */
+/*! firebase-admin v10.1.0 */
 "use strict";
 /*!
  * Copyright 2018 Google Inc.
@@ -16,7 +16,7 @@
  * limitations under the License.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createSessionCookieVerifier = exports.createIdTokenVerifier = exports.FirebaseTokenVerifier = exports.SESSION_COOKIE_INFO = exports.ID_TOKEN_INFO = void 0;
+exports.createSessionCookieVerifier = exports.createAuthBlockingTokenVerifier = exports.createIdTokenVerifier = exports.FirebaseTokenVerifier = exports.SESSION_COOKIE_INFO = exports.AUTH_BLOCKING_TOKEN_INFO = exports.ID_TOKEN_INFO = void 0;
 var error_1 = require("../utils/error");
 var util = require("../utils/index");
 var validator = require("../utils/validator");
@@ -41,6 +41,18 @@ exports.ID_TOKEN_INFO = {
     shortName: 'ID token',
     expiredErrorCode: error_1.AuthClientErrorCode.ID_TOKEN_EXPIRED,
 };
+/**
+ * User facing token information related to the Firebase Auth Blocking token.
+ *
+ * @internal
+ */
+exports.AUTH_BLOCKING_TOKEN_INFO = {
+    url: 'https://cloud.google.com/identity-platform/docs/blocking-functions',
+    verifyApiName: '_verifyAuthBlockingToken()',
+    jwtName: 'Firebase Auth Blocking token',
+    shortName: 'Auth Blocking token',
+    expiredErrorCode: error_1.AuthClientErrorCode.AUTH_BLOCKING_TOKEN_EXPIRED,
+};
 /**
  * User facing token information related to the Firebase session cookie.
  *
@@ -115,6 +127,26 @@ var FirebaseTokenVerifier = /** @class */ (function () {
             return decodedIdToken;
         });
     };
+    /** @alpha */
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    FirebaseTokenVerifier.prototype._verifyAuthBlockingToken = function (jwtToken, isEmulator, audience) {
+        var _this = this;
+        if (!validator.isString(jwtToken)) {
+            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, "First argument to " + this.tokenInfo.verifyApiName + " must be a " + this.tokenInfo.jwtName + " string.");
+        }
+        return this.ensureProjectId()
+            .then(function (projectId) {
+            if (typeof audience === 'undefined') {
+                audience = projectId + ".cloudfunctions.net/";
+            }
+            return _this.decodeAndVerify(jwtToken, projectId, isEmulator, audience);
+        })
+            .then(function (decoded) {
+            var decodedAuthBlockingToken = decoded.payload;
+            decodedAuthBlockingToken.uid = decodedAuthBlockingToken.sub;
+            return decodedAuthBlockingToken;
+        });
+    };
     FirebaseTokenVerifier.prototype.ensureProjectId = function () {
         var _this = this;
         return util.findProjectId(this.app)
@@ -126,11 +158,11 @@ var FirebaseTokenVerifier = /** @class */ (function () {
             return Promise.resolve(projectId);
         });
     };
-    FirebaseTokenVerifier.prototype.decodeAndVerify = function (token, projectId, isEmulator) {
+    FirebaseTokenVerifier.prototype.decodeAndVerify = function (token, projectId, isEmulator, audience) {
         var _this = this;
         return this.safeDecode(token)
             .then(function (decodedToken) {
-            _this.verifyContent(decodedToken, projectId, isEmulator);
+            _this.verifyContent(decodedToken, projectId, isEmulator, audience);
             return _this.verifySignature(token, isEmulator)
                 .then(function () { return decodedToken; });
         });
@@ -157,7 +189,7 @@ var FirebaseTokenVerifier = /** @class */ (function () {
      * @param projectId - The Firebase Project Id.
      * @param isEmulator - Whether the token is an Emulator token.
      */
-    FirebaseTokenVerifier.prototype.verifyContent = function (fullDecodedToken, projectId, isEmulator) {
+    FirebaseTokenVerifier.prototype.verifyContent = function (fullDecodedToken, projectId, isEmulator, audience) {
         var header = fullDecodedToken && fullDecodedToken.header;
         var payload = fullDecodedToken && fullDecodedToken.payload;
         var projectIdMatchMessage = " Make sure the " + this.tokenInfo.shortName + " comes from the same " +
@@ -177,7 +209,7 @@ var FirebaseTokenVerifier = /** @class */ (function () {
                     (this.tokenInfo.shortName + ", but was given a legacy custom token.");
             }
             else {
-                errorMessage = 'Firebase ID token has no "kid" claim.';
+                errorMessage = this.tokenInfo.jwtName + " has no \"kid\" claim.";
             }
             errorMessage += verifyJwtTokenDocsMessage;
         }
@@ -185,7 +217,11 @@ var FirebaseTokenVerifier = /** @class */ (function () {
             errorMessage = this.tokenInfo.jwtName + " has incorrect algorithm. Expected \"" + jwt_1.ALGORITHM_RS256 + '" but got ' +
                 '"' + header.alg + '".' + verifyJwtTokenDocsMessage;
         }
-        else if (payload.aud !== projectId) {
+        else if (typeof audience !== 'undefined' && !payload.aud.includes(audience)) {
+            errorMessage = this.tokenInfo.jwtName + " has incorrect \"aud\" (audience) claim. Expected \"" +
+                audience + '" but got "' + payload.aud + '".' + verifyJwtTokenDocsMessage;
+        }
+        else if (typeof audience === 'undefined' && payload.aud !== projectId) {
             errorMessage = this.tokenInfo.jwtName + " has incorrect \"aud\" (audience) claim. Expected \"" +
                 projectId + '" but got "' + payload.aud + '".' + projectIdMatchMessage +
                 verifyJwtTokenDocsMessage;
@@ -258,6 +294,17 @@ function createIdTokenVerifier(app) {
     return new FirebaseTokenVerifier(CLIENT_CERT_URL, 'https://securetoken.google.com/', exports.ID_TOKEN_INFO, app);
 }
 exports.createIdTokenVerifier = createIdTokenVerifier;
+/**
+ * Creates a new FirebaseTokenVerifier to verify Firebase Auth Blocking tokens.
+ *
+ * @internal
+ * @param app - Firebase app instance.
+ * @returns FirebaseTokenVerifier
+ */
+function createAuthBlockingTokenVerifier(app) {
+    return new FirebaseTokenVerifier(CLIENT_CERT_URL, 'https://securetoken.google.com/', exports.AUTH_BLOCKING_TOKEN_INFO, app);
+}
+exports.createAuthBlockingTokenVerifier = createAuthBlockingTokenVerifier;
 /**
  * Creates a new FirebaseTokenVerifier to verify Firebase session cookies.
  *