firebase-admin 10.3.0 → 11.0.0

package/lib/auth/auth-api-request.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v10.3.0 */
+/*! firebase-admin v11.0.0 */
 "use strict";
 /*!
  * @license
@@ -16,48 +16,24 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-var __extends = (this && this.__extends) || (function () {
-    var extendStatics = function (d, b) {
-        extendStatics = Object.setPrototypeOf ||
-            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
-            function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };
-        return extendStatics(d, b);
-    };
-    return function (d, b) {
-        extendStatics(d, b);
-        function __() { this.constructor = d; }
-        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
-    };
-})();
-var __assign = (this && this.__assign) || function () {
-    __assign = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign.apply(this, arguments);
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.useEmulator = exports.TenantAwareAuthRequestHandler = exports.AuthRequestHandler = exports.AbstractAuthRequestHandler = exports.FIREBASE_AUTH_SIGN_UP_NEW_USER = exports.FIREBASE_AUTH_SET_ACCOUNT_INFO = exports.FIREBASE_AUTH_BATCH_DELETE_ACCOUNTS = exports.FIREBASE_AUTH_DELETE_ACCOUNT = exports.FIREBASE_AUTH_GET_ACCOUNTS_INFO = exports.FIREBASE_AUTH_GET_ACCOUNT_INFO = exports.FIREBASE_AUTH_DOWNLOAD_ACCOUNT = exports.FIREBASE_AUTH_UPLOAD_ACCOUNT = exports.FIREBASE_AUTH_CREATE_SESSION_COOKIE = exports.EMAIL_ACTION_REQUEST_TYPES = exports.RESERVED_CLAIMS = void 0;
-var validator = require("../utils/validator");
-var deep_copy_1 = require("../utils/deep-copy");
-var error_1 = require("../utils/error");
-var api_request_1 = require("../utils/api-request");
-var utils = require("../utils/index");
-var user_import_builder_1 = require("./user-import-builder");
-var action_code_settings_builder_1 = require("./action-code-settings-builder");
-var tenant_1 = require("./tenant");
-var identifier_1 = require("./identifier");
-var auth_config_1 = require("./auth-config");
+const validator = require("../utils/validator");
+const deep_copy_1 = require("../utils/deep-copy");
+const error_1 = require("../utils/error");
+const api_request_1 = require("../utils/api-request");
+const utils = require("../utils/index");
+const user_import_builder_1 = require("./user-import-builder");
+const action_code_settings_builder_1 = require("./action-code-settings-builder");
+const tenant_1 = require("./tenant");
+const identifier_1 = require("./identifier");
+const auth_config_1 = require("./auth-config");
 /** Firebase Auth request header. */
-var FIREBASE_AUTH_HEADER = {
-    'X-Client-Version': "Node/Admin/" + utils.getSdkVersion(),
+const FIREBASE_AUTH_HEADER = {
+    'X-Client-Version': `Node/Admin/${utils.getSdkVersion()}`,
 };
 /** Firebase Auth request timeout duration in milliseconds. */
-var FIREBASE_AUTH_TIMEOUT = 25000;
+const FIREBASE_AUTH_TIMEOUT = 25000;
 /** List of reserved claims which cannot be provided when creating a custom token. */
 exports.RESERVED_CLAIMS = [
     'acr', 'amr', 'at_hash', 'aud', 'auth_time', 'azp', 'cnf', 'c_hash', 'exp', 'iat',
@@ -68,31 +44,31 @@ exports.EMAIL_ACTION_REQUEST_TYPES = [
     'PASSWORD_RESET', 'VERIFY_EMAIL', 'EMAIL_SIGNIN', 'VERIFY_AND_CHANGE_EMAIL',
 ];
 /** Maximum allowed number of characters in the custom claims payload. */
-var MAX_CLAIMS_PAYLOAD_SIZE = 1000;
+const MAX_CLAIMS_PAYLOAD_SIZE = 1000;
 /** Maximum allowed number of users to batch download at one time. */
-var MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE = 1000;
+const MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE = 1000;
 /** Maximum allowed number of users to batch upload at one time. */
-var MAX_UPLOAD_ACCOUNT_BATCH_SIZE = 1000;
+const MAX_UPLOAD_ACCOUNT_BATCH_SIZE = 1000;
 /** Maximum allowed number of users to batch get at one time. */
-var MAX_GET_ACCOUNTS_BATCH_SIZE = 100;
+const MAX_GET_ACCOUNTS_BATCH_SIZE = 100;
 /** Maximum allowed number of users to batch delete at one time. */
-var MAX_DELETE_ACCOUNTS_BATCH_SIZE = 1000;
+const MAX_DELETE_ACCOUNTS_BATCH_SIZE = 1000;
 /** Minimum allowed session cookie duration in seconds (5 minutes). */
-var MIN_SESSION_COOKIE_DURATION_SECS = 5 * 60;
+const MIN_SESSION_COOKIE_DURATION_SECS = 5 * 60;
 /** Maximum allowed session cookie duration in seconds (2 weeks). */
-var MAX_SESSION_COOKIE_DURATION_SECS = 14 * 24 * 60 * 60;
+const MAX_SESSION_COOKIE_DURATION_SECS = 14 * 24 * 60 * 60;
 /** Maximum allowed number of provider configurations to batch download at one time. */
-var MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE = 100;
+const MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE = 100;
 /** The Firebase Auth backend base URL format. */
-var FIREBASE_AUTH_BASE_URL_FORMAT = 'https://identitytoolkit.googleapis.com/{version}/projects/{projectId}{api}';
+const FIREBASE_AUTH_BASE_URL_FORMAT = 'https://identitytoolkit.googleapis.com/{version}/projects/{projectId}{api}';
 /** Firebase Auth base URlLformat when using the auth emultor. */
-var FIREBASE_AUTH_EMULATOR_BASE_URL_FORMAT = 'http://{host}/identitytoolkit.googleapis.com/{version}/projects/{projectId}{api}';
+const FIREBASE_AUTH_EMULATOR_BASE_URL_FORMAT = 'http://{host}/identitytoolkit.googleapis.com/{version}/projects/{projectId}{api}';
 /** The Firebase Auth backend multi-tenancy base URL format. */
-var FIREBASE_AUTH_TENANT_URL_FORMAT = FIREBASE_AUTH_BASE_URL_FORMAT.replace('projects/{projectId}', 'projects/{projectId}/tenants/{tenantId}');
+const FIREBASE_AUTH_TENANT_URL_FORMAT = FIREBASE_AUTH_BASE_URL_FORMAT.replace('projects/{projectId}', 'projects/{projectId}/tenants/{tenantId}');
 /** Firebase Auth base URL format when using the auth emultor with multi-tenancy. */
-var FIREBASE_AUTH_EMULATOR_TENANT_URL_FORMAT = FIREBASE_AUTH_EMULATOR_BASE_URL_FORMAT.replace('projects/{projectId}', 'projects/{projectId}/tenants/{tenantId}');
+const FIREBASE_AUTH_EMULATOR_TENANT_URL_FORMAT = FIREBASE_AUTH_EMULATOR_BASE_URL_FORMAT.replace('projects/{projectId}', 'projects/{projectId}/tenants/{tenantId}');
 /** Maximum allowed number of tenants to download at one time. */
-var MAX_LIST_TENANT_PAGE_SIZE = 1000;
+const MAX_LIST_TENANT_PAGE_SIZE = 1000;
 /**
  * Enum for the user write operation type.
  */
@@ -103,7 +79,7 @@ var WriteOperationType;
     WriteOperationType["Upload"] = "upload";
 })(WriteOperationType || (WriteOperationType = {}));
 /** Defines a base utility to help with resource URL construction. */
-var AuthResourceUrlBuilder = /** @class */ (function () {
+class AuthResourceUrlBuilder {
     /**
      * The resource URL builder constructor.
      *
@@ -111,8 +87,7 @@ var AuthResourceUrlBuilder = /** @class */ (function () {
      * @param version - The endpoint API version.
      * @constructor
      */
-    function AuthResourceUrlBuilder(app, version) {
-        if (version === void 0) { version = 'v1'; }
+    constructor(app, version = 'v1') {
         this.app = app;
         this.version = version;
         if (useEmulator()) {
@@ -132,41 +107,37 @@ var AuthResourceUrlBuilder = /** @class */ (function () {
      *     URL path.
      * @returns The corresponding resource URL.
      */
-    AuthResourceUrlBuilder.prototype.getUrl = function (api, params) {
-        var _this = this;
+    getUrl(api, params) {
         return this.getProjectId()
-            .then(function (projectId) {
-            var baseParams = {
-                version: _this.version,
-                projectId: projectId,
+            .then((projectId) => {
+            const baseParams = {
+                version: this.version,
+                projectId,
                 api: api || '',
             };
-            var baseUrl = utils.formatString(_this.urlFormat, baseParams);
+            const baseUrl = utils.formatString(this.urlFormat, baseParams);
             // Substitute additional api related parameters.
             return utils.formatString(baseUrl, params || {});
         });
-    };
-    AuthResourceUrlBuilder.prototype.getProjectId = function () {
-        var _this = this;
+    }
+    getProjectId() {
         if (this.projectId) {
             return Promise.resolve(this.projectId);
         }
         return utils.findProjectId(this.app)
-            .then(function (projectId) {
+            .then((projectId) => {
             if (!validator.isNonEmptyString(projectId)) {
                 throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CREDENTIAL, 'Failed to determine project ID for Auth. Initialize the '
                     + 'SDK with service account credentials or set project ID as an app option. '
                     + 'Alternatively set the GOOGLE_CLOUD_PROJECT environment variable.');
             }
-            _this.projectId = projectId;
+            this.projectId = projectId;
             return projectId;
         });
-    };
-    return AuthResourceUrlBuilder;
-}());
+    }
+}
 /** Tenant aware resource builder utility. */
-var TenantAwareAuthResourceUrlBuilder = /** @class */ (function (_super) {
-    __extends(TenantAwareAuthResourceUrlBuilder, _super);
+class TenantAwareAuthResourceUrlBuilder extends AuthResourceUrlBuilder {
     /**
      * The tenant aware resource URL builder constructor.
      *
@@ -175,20 +146,19 @@ var TenantAwareAuthResourceUrlBuilder = /** @class */ (function (_super) {
      * @param tenantId - The tenant ID.
      * @constructor
      */
-    function TenantAwareAuthResourceUrlBuilder(app, version, tenantId) {
-        var _this = _super.call(this, app, version) || this;
-        _this.app = app;
-        _this.version = version;
-        _this.tenantId = tenantId;
+    constructor(app, version, tenantId) {
+        super(app, version);
+        this.app = app;
+        this.version = version;
+        this.tenantId = tenantId;
         if (useEmulator()) {
-            _this.urlFormat = utils.formatString(FIREBASE_AUTH_EMULATOR_TENANT_URL_FORMAT, {
+            this.urlFormat = utils.formatString(FIREBASE_AUTH_EMULATOR_TENANT_URL_FORMAT, {
                 host: emulatorHost()
             });
         }
         else {
-            _this.urlFormat = FIREBASE_AUTH_TENANT_URL_FORMAT;
+            this.urlFormat = FIREBASE_AUTH_TENANT_URL_FORMAT;
         }
-        return _this;
     }
     /**
      * Returns the resource URL corresponding to the provided parameters.
@@ -198,32 +168,25 @@ var TenantAwareAuthResourceUrlBuilder = /** @class */ (function (_super) {
      *     URL path.
      * @returns The corresponding resource URL.
      */
-    TenantAwareAuthResourceUrlBuilder.prototype.getUrl = function (api, params) {
-        var _this = this;
-        return _super.prototype.getUrl.call(this, api, params)
-            .then(function (url) {
-            return utils.formatString(url, { tenantId: _this.tenantId });
+    getUrl(api, params) {
+        return super.getUrl(api, params)
+            .then((url) => {
+            return utils.formatString(url, { tenantId: this.tenantId });
         });
-    };
-    return TenantAwareAuthResourceUrlBuilder;
-}(AuthResourceUrlBuilder));
+    }
+}
 /**
  * Auth-specific HTTP client which uses the special "owner" token
  * when communicating with the Auth Emulator.
  */
-var AuthHttpClient = /** @class */ (function (_super) {
-    __extends(AuthHttpClient, _super);
-    function AuthHttpClient() {
-        return _super !== null && _super.apply(this, arguments) || this;
-    }
-    AuthHttpClient.prototype.getToken = function () {
+class AuthHttpClient extends api_request_1.AuthorizedHttpClient {
+    getToken() {
         if (useEmulator()) {
             return Promise.resolve('owner');
         }
-        return _super.prototype.getToken.call(this);
-    };
-    return AuthHttpClient;
-}(api_request_1.AuthorizedHttpClient));
+        return super.getToken();
+    }
+}
 /**
  * Validates an AuthFactorInfo object. All unsupported parameters
  * are removed from the original request. If an invalid field is passed
@@ -232,20 +195,20 @@ var AuthHttpClient = /** @class */ (function (_super) {
  * @param request - The AuthFactorInfo request object.
  */
 function validateAuthFactorInfo(request) {
-    var validKeys = {
+    const validKeys = {
         mfaEnrollmentId: true,
         displayName: true,
         phoneInfo: true,
         enrolledAt: true,
     };
     // Remove unsupported keys from the original request.
-    for (var key in request) {
+    for (const key in request) {
         if (!(key in validKeys)) {
             delete request[key];
         }
     }
     // No enrollment ID is available for signupNewUser. Use another identifier.
-    var authFactorInfoIdentifier = request.mfaEnrollmentId || request.phoneInfo || JSON.stringify(request);
+    const authFactorInfoIdentifier = request.mfaEnrollmentId || request.phoneInfo || JSON.stringify(request);
     // Enrollment uid may or may not be specified for update operations.
     if (typeof request.mfaEnrollmentId !== 'undefined' &&
         !validator.isNonEmptyString(request.mfaEnrollmentId)) {
@@ -253,19 +216,19 @@ function validateAuthFactorInfo(request) {
     }
     if (typeof request.displayName !== 'undefined' &&
         !validator.isString(request.displayName)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISPLAY_NAME, "The second factor \"displayName\" for \"" + authFactorInfoIdentifier + "\" must be a valid string.");
+        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISPLAY_NAME, `The second factor "displayName" for "${authFactorInfoIdentifier}" must be a valid string.`);
     }
     // enrolledAt must be a valid UTC date string.
     if (typeof request.enrolledAt !== 'undefined' &&
         !validator.isISODateString(request.enrolledAt)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ENROLLMENT_TIME, "The second factor \"enrollmentTime\" for \"" + authFactorInfoIdentifier + "\" must be a valid " +
+        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ENROLLMENT_TIME, `The second factor "enrollmentTime" for "${authFactorInfoIdentifier}" must be a valid ` +
             'UTC date string.');
     }
     // Validate required fields depending on second factor type.
     if (typeof request.phoneInfo !== 'undefined') {
         // phoneNumber should be a string and a valid phone number.
         if (!validator.isPhoneNumber(request.phoneInfo)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHONE_NUMBER, "The second factor \"phoneNumber\" for \"" + authFactorInfoIdentifier + "\" must be a non-empty " +
+            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHONE_NUMBER, `The second factor "phoneNumber" for "${authFactorInfoIdentifier}" must be a non-empty ` +
                 'E.164 standard compliant identifier string.');
         }
     }
@@ -283,7 +246,7 @@ function validateAuthFactorInfo(request) {
  * @param request - The providerUserInfo request object.
  */
 function validateProviderUserInfo(request) {
-    var validKeys = {
+    const validKeys = {
         rawId: true,
         providerId: true,
         email: true,
@@ -291,7 +254,7 @@ function validateProviderUserInfo(request) {
         photoUrl: true,
     };
     // Remove invalid keys from original request.
-    for (var key in request) {
+    for (const key in request) {
         if (!(key in validKeys)) {
             delete request[key];
         }
@@ -301,23 +264,23 @@ function validateProviderUserInfo(request) {
     }
     if (typeof request.displayName !== 'undefined' &&
         typeof request.displayName !== 'string') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISPLAY_NAME, "The provider \"displayName\" for \"" + request.providerId + "\" must be a valid string.");
+        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISPLAY_NAME, `The provider "displayName" for "${request.providerId}" must be a valid string.`);
     }
     if (!validator.isNonEmptyString(request.rawId)) {
         // This is called localId on the backend but the developer specifies this as
         // uid externally. So the error message should use the client facing name.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID, "The provider \"uid\" for \"" + request.providerId + "\" must be a valid non-empty string.");
+        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID, `The provider "uid" for "${request.providerId}" must be a valid non-empty string.`);
     }
     // email should be a string and a valid email.
     if (typeof request.email !== 'undefined' && !validator.isEmail(request.email)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL, "The provider \"email\" for \"" + request.providerId + "\" must be a valid email string.");
+        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL, `The provider "email" for "${request.providerId}" must be a valid email string.`);
     }
     // photoUrl should be a URL.
     if (typeof request.photoUrl !== 'undefined' &&
         !validator.isURL(request.photoUrl)) {
         // This is called photoUrl on the backend but the developer specifies this as
         // photoURL externally. So the error message should use the client facing name.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHOTO_URL, "The provider \"photoURL\" for \"" + request.providerId + "\" must be a valid URL string.");
+        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHOTO_URL, `The provider "photoURL" for "${request.providerId}" must be a valid URL string.`);
     }
 }
 /**
@@ -329,9 +292,9 @@ function validateProviderUserInfo(request) {
  * @param writeOperationType - The write operation type.
  */
 function validateCreateEditRequest(request, writeOperationType) {
-    var uploadAccountRequest = writeOperationType === WriteOperationType.Upload;
+    const uploadAccountRequest = writeOperationType === WriteOperationType.Upload;
     // Hash set of whitelisted parameters.
-    var validKeys = {
+    const validKeys = {
         displayName: true,
         localId: true,
         email: true,
@@ -361,7 +324,7 @@ function validateCreateEditRequest(request, writeOperationType) {
         mfa: !uploadAccountRequest,
     };
     // Remove invalid keys from original request.
-    for (var key in request) {
+    for (const key in request) {
         if (!(key in validKeys)) {
             delete request[key];
         }
@@ -445,9 +408,9 @@ function validateCreateEditRequest(request, writeOperationType) {
     // customAttributes should be stringified JSON with no blacklisted claims.
     // The payload should not exceed 1KB.
     if (typeof request.customAttributes !== 'undefined') {
-        var developerClaims_1;
+        let developerClaims;
         try {
-            developerClaims_1 = JSON.parse(request.customAttributes);
+            developerClaims = JSON.parse(request.customAttributes);
         }
         catch (error) {
             // JSON parsing error. This should never happen as we stringify the claims internally.
@@ -455,22 +418,22 @@ function validateCreateEditRequest(request, writeOperationType) {
             // this field.
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CLAIMS, error.message);
         }
-        var invalidClaims_1 = [];
+        const invalidClaims = [];
         // Check for any invalid claims.
-        exports.RESERVED_CLAIMS.forEach(function (blacklistedClaim) {
-            if (Object.prototype.hasOwnProperty.call(developerClaims_1, blacklistedClaim)) {
-                invalidClaims_1.push(blacklistedClaim);
+        exports.RESERVED_CLAIMS.forEach((blacklistedClaim) => {
+            if (Object.prototype.hasOwnProperty.call(developerClaims, blacklistedClaim)) {
+                invalidClaims.push(blacklistedClaim);
             }
         });
         // Throw an error if an invalid claim is detected.
-        if (invalidClaims_1.length > 0) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.FORBIDDEN_CLAIM, invalidClaims_1.length > 1 ?
-                "Developer claims \"" + invalidClaims_1.join('", "') + "\" are reserved and cannot be specified." :
-                "Developer claim \"" + invalidClaims_1[0] + "\" is reserved and cannot be specified.");
+        if (invalidClaims.length > 0) {
+            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.FORBIDDEN_CLAIM, invalidClaims.length > 1 ?
+                `Developer claims "${invalidClaims.join('", "')}" are reserved and cannot be specified.` :
+                `Developer claim "${invalidClaims[0]}" is reserved and cannot be specified.`);
         }
         // Check claims payload does not exceed maxmimum size.
         if (request.customAttributes.length > MAX_CLAIMS_PAYLOAD_SIZE) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.CLAIMS_TOO_LARGE, "Developer claims payload should not exceed " + MAX_CLAIMS_PAYLOAD_SIZE + " characters.");
+            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.CLAIMS_TOO_LARGE, `Developer claims payload should not exceed ${MAX_CLAIMS_PAYLOAD_SIZE} characters.`);
         }
     }
     // passwordHash has to be a base64 encoded string.
@@ -489,7 +452,7 @@ function validateCreateEditRequest(request, writeOperationType) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_DATA);
     }
     else if (validator.isArray(request.providerUserInfo)) {
-        request.providerUserInfo.forEach(function (providerUserInfoEntry) {
+        request.providerUserInfo.forEach((providerUserInfoEntry) => {
             validateProviderUserInfo(providerUserInfoEntry);
         });
     }
@@ -500,7 +463,7 @@ function validateCreateEditRequest(request, writeOperationType) {
     // mfaInfo is used for importUsers.
     // mfa.enrollments is used for setAccountInfo.
     // enrollments has to be an array of valid AuthFactorInfo requests.
-    var enrollments = null;
+    let enrollments = null;
     if (request.mfaInfo) {
         enrollments = request.mfaInfo;
     }
@@ -511,7 +474,7 @@ function validateCreateEditRequest(request, writeOperationType) {
         if (!validator.isArray(enrollments)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ENROLLED_FACTORS);
         }
-        enrollments.forEach(function (authFactorInfoEntry) {
+        enrollments.forEach((authFactorInfoEntry) => {
             validateAuthFactorInfo(authFactorInfoEntry);
         });
     }
@@ -523,7 +486,7 @@ function validateCreateEditRequest(request, writeOperationType) {
  */
 exports.FIREBASE_AUTH_CREATE_SESSION_COOKIE = new api_request_1.ApiSettings(':createSessionCookie', 'POST')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     // Validate the ID token is a non-empty string.
     if (!validator.isNonEmptyString(request.idToken)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ID_TOKEN);
@@ -536,7 +499,7 @@ exports.FIREBASE_AUTH_CREATE_SESSION_COOKIE = new api_request_1.ApiSettings(':cr
     }
 })
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain the session cookie.
     if (!validator.isNonEmptyString(response.sessionCookie)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR);
@@ -555,7 +518,7 @@ exports.FIREBASE_AUTH_UPLOAD_ACCOUNT = new api_request_1.ApiSettings('/accounts:
  */
 exports.FIREBASE_AUTH_DOWNLOAD_ACCOUNT = new api_request_1.ApiSettings('/accounts:batchGet', 'GET')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     // Validate next page token.
     if (typeof request.nextPageToken !== 'undefined' &&
         !validator.isNonEmptyString(request.nextPageToken)) {
@@ -566,7 +529,7 @@ exports.FIREBASE_AUTH_DOWNLOAD_ACCOUNT = new api_request_1.ApiSettings('/account
         request.maxResults <= 0 ||
         request.maxResults > MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
-            (MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE + "."));
+            `${MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE}.`);
     }
 });
 /**
@@ -576,13 +539,13 @@ exports.FIREBASE_AUTH_DOWNLOAD_ACCOUNT = new api_request_1.ApiSettings('/account
  */
 exports.FIREBASE_AUTH_GET_ACCOUNT_INFO = new api_request_1.ApiSettings('/accounts:lookup', 'POST')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     if (!request.localId && !request.email && !request.phoneNumber && !request.federatedUserId) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
     }
 })
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     if (!response.users || !response.users.length) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.USER_NOT_FOUND);
     }
@@ -595,7 +558,7 @@ exports.FIREBASE_AUTH_GET_ACCOUNT_INFO = new api_request_1.ApiSettings('/account
  */
 exports.FIREBASE_AUTH_GET_ACCOUNTS_INFO = new api_request_1.ApiSettings('/accounts:lookup', 'POST')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     if (!request.localId && !request.email && !request.phoneNumber && !request.federatedUserId) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
     }
@@ -607,7 +570,7 @@ exports.FIREBASE_AUTH_GET_ACCOUNTS_INFO = new api_request_1.ApiSettings('/accoun
  */
 exports.FIREBASE_AUTH_DELETE_ACCOUNT = new api_request_1.ApiSettings('/accounts:delete', 'POST')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     if (!request.localId) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
     }
@@ -616,7 +579,7 @@ exports.FIREBASE_AUTH_DELETE_ACCOUNT = new api_request_1.ApiSettings('/accounts:
  * @internal
  */
 exports.FIREBASE_AUTH_BATCH_DELETE_ACCOUNTS = new api_request_1.ApiSettings('/accounts:batchDelete', 'POST')
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     if (!request.localIds) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifiers');
     }
@@ -624,9 +587,9 @@ exports.FIREBASE_AUTH_BATCH_DELETE_ACCOUNTS = new api_request_1.ApiSettings('/ac
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing force=true field');
     }
 })
-    .setResponseValidator(function (response) {
-    var errors = response.errors || [];
-    errors.forEach(function (batchDeleteErrorInfo) {
+    .setResponseValidator((response) => {
+    const errors = response.errors || [];
+    errors.forEach((batchDeleteErrorInfo) => {
         if (typeof batchDeleteErrorInfo.index === 'undefined') {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server BatchDeleteAccountResponse is missing an errors.index field');
         }
@@ -643,7 +606,7 @@ exports.FIREBASE_AUTH_BATCH_DELETE_ACCOUNTS = new api_request_1.ApiSettings('/ac
  */
 exports.FIREBASE_AUTH_SET_ACCOUNT_INFO = new api_request_1.ApiSettings('/accounts:update', 'POST')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     // localId is a required parameter.
     if (typeof request.localId === 'undefined') {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
@@ -655,7 +618,7 @@ exports.FIREBASE_AUTH_SET_ACCOUNT_INFO = new api_request_1.ApiSettings('/account
     validateCreateEditRequest(request, WriteOperationType.Update);
 })
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // If the localId is not returned, then the request failed.
     if (!response.localId) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.USER_NOT_FOUND);
@@ -669,7 +632,7 @@ exports.FIREBASE_AUTH_SET_ACCOUNT_INFO = new api_request_1.ApiSettings('/account
  */
 exports.FIREBASE_AUTH_SIGN_UP_NEW_USER = new api_request_1.ApiSettings('/accounts', 'POST')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     // signupNewUser does not support customAttributes.
     if (typeof request.customAttributes !== 'undefined') {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"customAttributes" cannot be set when creating a new user.');
@@ -685,15 +648,15 @@ exports.FIREBASE_AUTH_SIGN_UP_NEW_USER = new api_request_1.ApiSettings('/account
     validateCreateEditRequest(request, WriteOperationType.Create);
 })
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // If the localId is not returned, then the request failed.
     if (!response.localId) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new user');
     }
 });
-var FIREBASE_AUTH_GET_OOB_CODE = new api_request_1.ApiSettings('/accounts:sendOobCode', 'POST')
+const FIREBASE_AUTH_GET_OOB_CODE = new api_request_1.ApiSettings('/accounts:sendOobCode', 'POST')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     if (!validator.isEmail(request.email)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL);
     }
@@ -701,11 +664,11 @@ var FIREBASE_AUTH_GET_OOB_CODE = new api_request_1.ApiSettings('/accounts:sendOo
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_NEW_EMAIL);
     }
     if (exports.EMAIL_ACTION_REQUEST_TYPES.indexOf(request.requestType) === -1) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, "\"" + request.requestType + "\" is not a supported email action request type.");
+        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, `"${request.requestType}" is not a supported email action request type.`);
     }
 })
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // If the oobLink is not returned, then the request failed.
     if (!response.oobLink) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create the email action link');
@@ -716,9 +679,9 @@ var FIREBASE_AUTH_GET_OOB_CODE = new api_request_1.ApiSettings('/accounts:sendOo
  *
  * @internal
  */
-var GET_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{providerId}', 'GET')
+const GET_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{providerId}', 'GET')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain the OIDC provider resource name.
     if (!validator.isNonEmptyString(response.name)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to get OIDC configuration');
@@ -729,15 +692,15 @@ var GET_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{prov
  *
  * @internal
  */
-var DELETE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{providerId}', 'DELETE');
+const DELETE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{providerId}', 'DELETE');
 /**
  * Instantiates the create OIDC configuration endpoint settings.
  *
  * @internal
  */
-var CREATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs?oauthIdpConfigId={providerId}', 'POST')
+const CREATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs?oauthIdpConfigId={providerId}', 'POST')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain the OIDC provider resource name.
     if (!validator.isNonEmptyString(response.name)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new OIDC configuration');
@@ -748,9 +711,9 @@ var CREATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs?oa
  *
  * @internal
  */
-var UPDATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{providerId}?updateMask={updateMask}', 'PATCH')
+const UPDATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{providerId}?updateMask={updateMask}', 'PATCH')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain the configuration resource name.
     if (!validator.isNonEmptyString(response.name)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update OIDC configuration');
@@ -761,9 +724,9 @@ var UPDATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{p
  *
  * @internal
  */
-var LIST_OAUTH_IDP_CONFIGS = new api_request_1.ApiSettings('/oauthIdpConfigs', 'GET')
+const LIST_OAUTH_IDP_CONFIGS = new api_request_1.ApiSettings('/oauthIdpConfigs', 'GET')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     // Validate next page token.
     if (typeof request.pageToken !== 'undefined' &&
         !validator.isNonEmptyString(request.pageToken)) {
@@ -774,7 +737,7 @@ var LIST_OAUTH_IDP_CONFIGS = new api_request_1.ApiSettings('/oauthIdpConfigs', '
         request.pageSize <= 0 ||
         request.pageSize > MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
-            (MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE + "."));
+            `${MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE}.`);
     }
 });
 /**
@@ -782,9 +745,9 @@ var LIST_OAUTH_IDP_CONFIGS = new api_request_1.ApiSettings('/oauthIdpConfigs', '
  *
  * @internal
  */
-var GET_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs/{providerId}', 'GET')
+const GET_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs/{providerId}', 'GET')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain the SAML provider resource name.
     if (!validator.isNonEmptyString(response.name)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to get SAML configuration');
@@ -795,15 +758,15 @@ var GET_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs
  *
  * @internal
  */
-var DELETE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs/{providerId}', 'DELETE');
+const DELETE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs/{providerId}', 'DELETE');
 /**
  * Instantiates the create SAML configuration endpoint settings.
  *
  * @internal
  */
-var CREATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs?inboundSamlConfigId={providerId}', 'POST')
+const CREATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs?inboundSamlConfigId={providerId}', 'POST')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain the SAML provider resource name.
     if (!validator.isNonEmptyString(response.name)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new SAML configuration');
@@ -814,9 +777,9 @@ var CREATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConf
  *
  * @internal
  */
-var UPDATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs/{providerId}?updateMask={updateMask}', 'PATCH')
+const UPDATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs/{providerId}?updateMask={updateMask}', 'PATCH')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain the configuration resource name.
     if (!validator.isNonEmptyString(response.name)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update SAML configuration');
@@ -827,9 +790,9 @@ var UPDATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConf
  *
  * @internal
  */
-var LIST_INBOUND_SAML_CONFIGS = new api_request_1.ApiSettings('/inboundSamlConfigs', 'GET')
+const LIST_INBOUND_SAML_CONFIGS = new api_request_1.ApiSettings('/inboundSamlConfigs', 'GET')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     // Validate next page token.
     if (typeof request.pageToken !== 'undefined' &&
         !validator.isNonEmptyString(request.pageToken)) {
@@ -840,7 +803,7 @@ var LIST_INBOUND_SAML_CONFIGS = new api_request_1.ApiSettings('/inboundSamlConfi
         request.pageSize <= 0 ||
         request.pageSize > MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
-            (MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE + "."));
+            `${MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE}.`);
     }
 });
 /**
@@ -848,12 +811,12 @@ var LIST_INBOUND_SAML_CONFIGS = new api_request_1.ApiSettings('/inboundSamlConfi
  *
  * @internal
  */
-var AbstractAuthRequestHandler = /** @class */ (function () {
+class AbstractAuthRequestHandler {
     /**
      * @param app - The app used to fetch access tokens to sign API requests.
      * @constructor
      */
-    function AbstractAuthRequestHandler(app) {
+    constructor(app) {
         this.app = app;
         if (typeof app !== 'object' || app === null || !('options' in app)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'First argument passed to admin.auth() must be a valid Firebase app instance.');
@@ -864,38 +827,38 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @param response - The response to check for errors.
      * @returns The error code if present; null otherwise.
      */
-    AbstractAuthRequestHandler.getErrorCode = function (response) {
+    static getErrorCode(response) {
         return (validator.isNonNullObject(response) && response.error && response.error.message) || null;
-    };
-    AbstractAuthRequestHandler.addUidToRequest = function (id, request) {
+    }
+    static addUidToRequest(id, request) {
         if (!validator.isUid(id.uid)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID);
         }
         request.localId ? request.localId.push(id.uid) : request.localId = [id.uid];
         return request;
-    };
-    AbstractAuthRequestHandler.addEmailToRequest = function (id, request) {
+    }
+    static addEmailToRequest(id, request) {
         if (!validator.isEmail(id.email)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL);
         }
         request.email ? request.email.push(id.email) : request.email = [id.email];
         return request;
-    };
-    AbstractAuthRequestHandler.addPhoneToRequest = function (id, request) {
+    }
+    static addPhoneToRequest(id, request) {
         if (!validator.isPhoneNumber(id.phoneNumber)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHONE_NUMBER);
         }
         request.phoneNumber ? request.phoneNumber.push(id.phoneNumber) : request.phoneNumber = [id.phoneNumber];
         return request;
-    };
-    AbstractAuthRequestHandler.addProviderToRequest = function (id, request) {
+    }
+    static addProviderToRequest(id, request) {
         if (!validator.isNonEmptyString(id.providerId)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID);
         }
         if (!validator.isNonEmptyString(id.providerUid)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_UID);
         }
-        var federatedUserId = {
+        const federatedUserId = {
             providerId: id.providerId,
             rawId: id.providerUid,
         };
@@ -903,7 +866,7 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             ? request.federatedUserId.push(federatedUserId)
             : request.federatedUserId = [federatedUserId];
         return request;
-    };
+    }
     /**
      * Creates a new Firebase session cookie with the specified duration that can be used for
      * session management (set as a server side session cookie with custom cookie policy).
@@ -914,72 +877,72 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      *
      * @returns A promise that resolves on success with the created session cookie.
      */
-    AbstractAuthRequestHandler.prototype.createSessionCookie = function (idToken, expiresIn) {
-        var request = {
-            idToken: idToken,
+    createSessionCookie(idToken, expiresIn) {
+        const request = {
+            idToken,
             // Convert to seconds.
             validDuration: expiresIn / 1000,
         };
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_CREATE_SESSION_COOKIE, request)
-            .then(function (response) { return response.sessionCookie; });
-    };
+            .then((response) => response.sessionCookie);
+    }
     /**
      * Looks up a user by uid.
      *
      * @param uid - The uid of the user to lookup.
      * @returns A promise that resolves with the user information.
      */
-    AbstractAuthRequestHandler.prototype.getAccountInfoByUid = function (uid) {
+    getAccountInfoByUid(uid) {
         if (!validator.isUid(uid)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
         }
-        var request = {
+        const request = {
             localId: [uid],
         };
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_GET_ACCOUNT_INFO, request);
-    };
+    }
     /**
      * Looks up a user by email.
      *
      * @param email - The email of the user to lookup.
      * @returns A promise that resolves with the user information.
      */
-    AbstractAuthRequestHandler.prototype.getAccountInfoByEmail = function (email) {
+    getAccountInfoByEmail(email) {
         if (!validator.isEmail(email)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL));
         }
-        var request = {
+        const request = {
             email: [email],
         };
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_GET_ACCOUNT_INFO, request);
-    };
+    }
     /**
      * Looks up a user by phone number.
      *
      * @param phoneNumber - The phone number of the user to lookup.
      * @returns A promise that resolves with the user information.
      */
-    AbstractAuthRequestHandler.prototype.getAccountInfoByPhoneNumber = function (phoneNumber) {
+    getAccountInfoByPhoneNumber(phoneNumber) {
         if (!validator.isPhoneNumber(phoneNumber)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHONE_NUMBER));
         }
-        var request = {
+        const request = {
             phoneNumber: [phoneNumber],
         };
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_GET_ACCOUNT_INFO, request);
-    };
-    AbstractAuthRequestHandler.prototype.getAccountInfoByFederatedUid = function (providerId, rawId) {
+    }
+    getAccountInfoByFederatedUid(providerId, rawId) {
         if (!validator.isNonEmptyString(providerId) || !validator.isNonEmptyString(rawId)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID);
         }
-        var request = {
+        const request = {
             federatedUserId: [{
-                    providerId: providerId,
-                    rawId: rawId,
+                    providerId,
+                    rawId,
                 }],
         };
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_GET_ACCOUNT_INFO, request);
-    };
+    }
     /**
      * Looks up multiple users by their identifiers (uid, email, etc).
      *
@@ -988,26 +951,25 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @param A - promise that resolves with the set of successfully
      *     looked up users. Possibly empty if no users were looked up.
      */
-    AbstractAuthRequestHandler.prototype.getAccountInfoByIdentifiers = function (identifiers) {
+    getAccountInfoByIdentifiers(identifiers) {
         if (identifiers.length === 0) {
             return Promise.resolve({ users: [] });
         }
         else if (identifiers.length > MAX_GET_ACCOUNTS_BATCH_SIZE) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, '`identifiers` parameter must have <= ' + MAX_GET_ACCOUNTS_BATCH_SIZE + ' entries.');
         }
-        var request = {};
-        for (var _i = 0, identifiers_1 = identifiers; _i < identifiers_1.length; _i++) {
-            var id = identifiers_1[_i];
-            if (identifier_1.isUidIdentifier(id)) {
+        let request = {};
+        for (const id of identifiers) {
+            if ((0, identifier_1.isUidIdentifier)(id)) {
                 request = AbstractAuthRequestHandler.addUidToRequest(id, request);
             }
-            else if (identifier_1.isEmailIdentifier(id)) {
+            else if ((0, identifier_1.isEmailIdentifier)(id)) {
                 request = AbstractAuthRequestHandler.addEmailToRequest(id, request);
             }
-            else if (identifier_1.isPhoneIdentifier(id)) {
+            else if ((0, identifier_1.isPhoneIdentifier)(id)) {
                 request = AbstractAuthRequestHandler.addPhoneToRequest(id, request);
             }
-            else if (identifier_1.isProviderIdentifier(id)) {
+            else if ((0, identifier_1.isProviderIdentifier)(id)) {
                 request = AbstractAuthRequestHandler.addProviderToRequest(id, request);
             }
             else {
@@ -1015,7 +977,7 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             }
         }
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_GET_ACCOUNTS_INFO, request);
-    };
+    }
     /**
      * Exports the users (single batch only) with a size of maxResults and starting from
      * the offset as specified by pageToken.
@@ -1029,11 +991,10 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      *     users and the next page token if available. For the last page, an empty list of users
      *     and no page token are returned.
      */
-    AbstractAuthRequestHandler.prototype.downloadAccount = function (maxResults, pageToken) {
-        if (maxResults === void 0) { maxResults = MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE; }
+    downloadAccount(maxResults = MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE, pageToken) {
         // Construct request.
-        var request = {
-            maxResults: maxResults,
+        const request = {
+            maxResults,
             nextPageToken: pageToken,
         };
         // Remove next page token if not provided.
@@ -1041,14 +1002,14 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             delete request.nextPageToken;
         }
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_DOWNLOAD_ACCOUNT, request)
-            .then(function (response) {
+            .then((response) => {
             // No more users available.
             if (!response.users) {
                 response.users = [];
             }
             return response;
         });
-    };
+    }
     /**
      * Imports the list of users provided to Firebase Auth. This is useful when
      * migrating from an external authentication system without having to use the Firebase CLI SDK.
@@ -1062,19 +1023,19 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      *     with the result of the import. This includes the number of successful imports, the number
      *     of failed uploads and their corresponding errors.
      */
-    AbstractAuthRequestHandler.prototype.uploadAccount = function (users, options) {
+    uploadAccount(users, options) {
         // This will throw if any error is detected in the hash options.
         // For errors in the list of users, this will not throw and will report the errors and the
         // corresponding user index in the user import generated response below.
         // No need to validate raw request or raw response as this is done in UserImportBuilder.
-        var userImportBuilder = new user_import_builder_1.UserImportBuilder(users, options, function (userRequest) {
+        const userImportBuilder = new user_import_builder_1.UserImportBuilder(users, options, (userRequest) => {
             // Pass true to validate the uploadAccount specific fields.
             validateCreateEditRequest(userRequest, WriteOperationType.Upload);
         });
-        var request = userImportBuilder.buildRequest();
+        const request = userImportBuilder.buildRequest();
         // Fail quickly if more users than allowed are to be imported.
         if (validator.isArray(users) && users.length > MAX_UPLOAD_ACCOUNT_BATCH_SIZE) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, "A maximum of " + MAX_UPLOAD_ACCOUNT_BATCH_SIZE + " users can be imported at once.");
+            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, `A maximum of ${MAX_UPLOAD_ACCOUNT_BATCH_SIZE} users can be imported at once.`);
         }
         // If no remaining user in request after client side processing, there is no need
         // to send the request to the server.
@@ -1082,47 +1043,47 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             return Promise.resolve(userImportBuilder.buildResponse([]));
         }
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_UPLOAD_ACCOUNT, request)
-            .then(function (response) {
+            .then((response) => {
             // No error object is returned if no error encountered.
-            var failedUploads = (response.error || []);
+            const failedUploads = (response.error || []);
             // Rewrite response as UserImportResult and re-insert client previously detected errors.
             return userImportBuilder.buildResponse(failedUploads);
         });
-    };
+    }
     /**
      * Deletes an account identified by a uid.
      *
      * @param uid - The uid of the user to delete.
      * @returns A promise that resolves when the user is deleted.
      */
-    AbstractAuthRequestHandler.prototype.deleteAccount = function (uid) {
+    deleteAccount(uid) {
         if (!validator.isUid(uid)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
         }
-        var request = {
+        const request = {
             localId: uid,
         };
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_DELETE_ACCOUNT, request);
-    };
-    AbstractAuthRequestHandler.prototype.deleteAccounts = function (uids, force) {
+    }
+    deleteAccounts(uids, force) {
         if (uids.length === 0) {
             return Promise.resolve({});
         }
         else if (uids.length > MAX_DELETE_ACCOUNTS_BATCH_SIZE) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, '`uids` parameter must have <= ' + MAX_DELETE_ACCOUNTS_BATCH_SIZE + ' entries.');
         }
-        var request = {
+        const request = {
             localIds: [],
-            force: force,
+            force,
         };
-        uids.forEach(function (uid) {
+        uids.forEach((uid) => {
             if (!validator.isUid(uid)) {
                 throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID);
             }
             request.localIds.push(uid);
         });
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_BATCH_DELETE_ACCOUNTS, request);
-    };
+    }
     /**
      * Sets additional developer claims on an existing user identified by provided UID.
      *
@@ -1131,7 +1092,7 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @returns A promise that resolves when the operation completes
      *     with the user id that was edited.
      */
-    AbstractAuthRequestHandler.prototype.setCustomUserClaims = function (uid, customUserClaims) {
+    setCustomUserClaims(uid, customUserClaims) {
         // Validate user UID.
         if (!validator.isUid(uid)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
@@ -1144,15 +1105,15 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             customUserClaims = {};
         }
         // Construct custom user attribute editting request.
-        var request = {
+        const request = {
             localId: uid,
             customAttributes: JSON.stringify(customUserClaims),
         };
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_SET_ACCOUNT_INFO, request)
-            .then(function (response) {
+            .then((response) => {
             return response.localId;
         });
-    };
+    }
     /**
      * Edits an existing user.
      *
@@ -1161,7 +1122,7 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @returns A promise that resolves when the operation completes
      *     with the user id that was edited.
      */
-    AbstractAuthRequestHandler.prototype.updateExistingAccount = function (uid, properties) {
+    updateExistingAccount(uid, properties) {
         if (!validator.isUid(uid)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
         }
@@ -1182,14 +1143,14 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             if (!validator.isArray(properties.providersToUnlink)) {
                 throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'providersToUnlink of properties argument must be an array of strings.');
             }
-            properties.providersToUnlink.forEach(function (providerId) {
+            properties.providersToUnlink.forEach((providerId) => {
                 if (!validator.isNonEmptyString(providerId)) {
                     throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'providersToUnlink of properties argument must be an array of strings.');
                 }
             });
         }
         // Build the setAccountInfo request.
-        var request = deep_copy_1.deepCopy(properties);
+        const request = (0, deep_copy_1.deepCopy)(properties);
         request.localId = uid;
         // For deleting displayName or photoURL, these values must be passed as null.
         // They will be removed from the backend request and an additional parameter
@@ -1197,13 +1158,13 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
         // with an array of the parameter names to delete will be passed.
         // Parameters that are deletable and their deleteAttribute names.
         // Use client facing names, photoURL instead of photoUrl.
-        var deletableParams = {
+        const deletableParams = {
             displayName: 'DISPLAY_NAME',
             photoURL: 'PHOTO_URL',
         };
         // Properties to delete if available.
         request.deleteAttribute = [];
-        for (var key in deletableParams) {
+        for (const key in deletableParams) {
             if (request[key] === null) {
                 // Add property identifier to list of attributes to delete.
                 request.deleteAttribute.push(deletableParams[key]);
@@ -1223,7 +1184,7 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             delete request.phoneNumber;
         }
         if (typeof (request.providerToLink) !== 'undefined') {
-            request.linkProviderUserInfo = deep_copy_1.deepCopy(request.providerToLink);
+            request.linkProviderUserInfo = (0, deep_copy_1.deepCopy)(request.providerToLink);
             delete request.providerToLink;
             request.linkProviderUserInfo.rawId = request.linkProviderUserInfo.uid;
             delete request.linkProviderUserInfo.uid;
@@ -1256,8 +1217,8 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
                     enrollments: [],
                 };
                 try {
-                    request.multiFactor.enrolledFactors.forEach(function (multiFactorInfo) {
-                        request.mfa.enrollments.push(user_import_builder_1.convertMultiFactorInfoToServerFormat(multiFactorInfo));
+                    request.multiFactor.enrolledFactors.forEach((multiFactorInfo) => {
+                        request.mfa.enrollments.push((0, user_import_builder_1.convertMultiFactorInfoToServerFormat)(multiFactorInfo));
                     });
                 }
                 catch (e) {
@@ -1270,10 +1231,10 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             delete request.multiFactor;
         }
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_SET_ACCOUNT_INFO, request)
-            .then(function (response) {
+            .then((response) => {
             return response.localId;
         });
-    };
+    }
     /**
      * Revokes all refresh tokens for the specified user identified by the uid provided.
      * In addition to revoking all refresh tokens for a user, all ID tokens issued
@@ -1287,21 +1248,21 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @returns A promise that resolves when the operation completes
      *     successfully with the user id of the corresponding user.
      */
-    AbstractAuthRequestHandler.prototype.revokeRefreshTokens = function (uid) {
+    revokeRefreshTokens(uid) {
         // Validate user UID.
         if (!validator.isUid(uid)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
         }
-        var request = {
+        const request = {
             localId: uid,
             // validSince is in UTC seconds.
             validSince: Math.floor(new Date().getTime() / 1000),
         };
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_SET_ACCOUNT_INFO, request)
-            .then(function (response) {
+            .then((response) => {
             return response.localId;
         });
-    };
+    }
     /**
      * Create a new user with the properties supplied.
      *
@@ -1309,11 +1270,11 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @returns A promise that resolves when the operation completes
      *     with the user id that was created.
      */
-    AbstractAuthRequestHandler.prototype.createNewAccount = function (properties) {
+    createNewAccount(properties) {
         if (!validator.isNonNullObject(properties)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Properties argument must be a non-null object.'));
         }
-        var request = deep_copy_1.deepCopy(properties);
+        const request = (0, deep_copy_1.deepCopy)(properties);
         // Rewrite photoURL to photoUrl.
         if (typeof request.photoURL !== 'undefined') {
             request.photoUrl = request.photoURL;
@@ -1327,9 +1288,9 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
         // Construct mfa related user data.
         if (validator.isNonNullObject(request.multiFactor)) {
             if (validator.isNonEmptyArray(request.multiFactor.enrolledFactors)) {
-                var mfaInfo_1 = [];
+                const mfaInfo = [];
                 try {
-                    request.multiFactor.enrolledFactors.forEach(function (multiFactorInfo) {
+                    request.multiFactor.enrolledFactors.forEach((multiFactorInfo) => {
                         // Enrollment time and uid are not allowed for signupNewUser endpoint.
                         // They will automatically be provisioned server side.
                         if ('enrollmentTime' in multiFactorInfo) {
@@ -1338,22 +1299,22 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
                         else if ('uid' in multiFactorInfo) {
                             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"uid" is not supported when adding second factors via "createUser()"');
                         }
-                        mfaInfo_1.push(user_import_builder_1.convertMultiFactorInfoToServerFormat(multiFactorInfo));
+                        mfaInfo.push((0, user_import_builder_1.convertMultiFactorInfoToServerFormat)(multiFactorInfo));
                     });
                 }
                 catch (e) {
                     return Promise.reject(e);
                 }
-                request.mfaInfo = mfaInfo_1;
+                request.mfaInfo = mfaInfo;
             }
             delete request.multiFactor;
         }
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_SIGN_UP_NEW_USER, request)
-            .then(function (response) {
+            .then((response) => {
             // Return the user id.
             return response.localId;
         });
-    };
+    }
     /**
      * Generates the out of band email action link for the email specified using the action code settings provided.
      * Returns a promise that resolves with the generated link.
@@ -1368,9 +1329,13 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      *     Required only for VERIFY_AND_CHANGE_EMAIL requests.
      * @returns A promise that resolves with the email action link.
      */
-    AbstractAuthRequestHandler.prototype.getEmailActionLink = function (requestType, email, actionCodeSettings, newEmail) {
-        var request = __assign({ requestType: requestType,
-            email: email, returnOobLink: true }, (typeof newEmail !== 'undefined') && { newEmail: newEmail });
+    getEmailActionLink(requestType, email, actionCodeSettings, newEmail) {
+        let request = {
+            requestType,
+            email,
+            returnOobLink: true,
+            ...(typeof newEmail !== 'undefined') && { newEmail },
+        };
         // ActionCodeSettings required for email link sign-in to determine the url where the sign-in will
         // be completed.
         if (typeof actionCodeSettings === 'undefined' && requestType === 'EMAIL_SIGNIN') {
@@ -1378,8 +1343,8 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
         }
         if (typeof actionCodeSettings !== 'undefined' || requestType === 'EMAIL_SIGNIN') {
             try {
-                var builder = new action_code_settings_builder_1.ActionCodeSettingsBuilder(actionCodeSettings);
-                request = deep_copy_1.deepExtend(request, builder.buildRequest());
+                const builder = new action_code_settings_builder_1.ActionCodeSettingsBuilder(actionCodeSettings);
+                request = (0, deep_copy_1.deepExtend)(request, builder.buildRequest());
             }
             catch (e) {
                 return Promise.reject(e);
@@ -1389,23 +1354,23 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, "`newEmail` is required when `requestType` === 'VERIFY_AND_CHANGE_EMAIL'"));
         }
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), FIREBASE_AUTH_GET_OOB_CODE, request)
-            .then(function (response) {
+            .then((response) => {
             // Return the link.
             return response.oobLink;
         });
-    };
+    }
     /**
      * Looks up an OIDC provider configuration by provider ID.
      *
      * @param providerId - The provider identifier of the configuration to lookup.
      * @returns A promise that resolves with the provider configuration information.
      */
-    AbstractAuthRequestHandler.prototype.getOAuthIdpConfig = function (providerId) {
+    getOAuthIdpConfig(providerId) {
         if (!auth_config_1.OIDCConfig.isProviderId(providerId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
         }
-        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), GET_OAUTH_IDP_CONFIG, {}, { providerId: providerId });
-    };
+        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), GET_OAUTH_IDP_CONFIG, {}, { providerId });
+    }
     /**
      * Lists the OIDC configurations (single batch only) with a size of maxResults and starting from
      * the offset as specified by pageToken.
@@ -1419,9 +1384,8 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      *     OIDC configurations and the next page token if available. For the last page, an empty list of provider
      *     configuration and no page token are returned.
      */
-    AbstractAuthRequestHandler.prototype.listOAuthIdpConfigs = function (maxResults, pageToken) {
-        if (maxResults === void 0) { maxResults = MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE; }
-        var request = {
+    listOAuthIdpConfigs(maxResults = MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE, pageToken) {
+        const request = {
             pageSize: maxResults,
         };
         // Add next page token if provided.
@@ -1429,29 +1393,29 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             request.pageToken = pageToken;
         }
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), LIST_OAUTH_IDP_CONFIGS, request)
-            .then(function (response) {
+            .then((response) => {
             if (!response.oauthIdpConfigs) {
                 response.oauthIdpConfigs = [];
                 delete response.nextPageToken;
             }
             return response;
         });
-    };
+    }
     /**
      * Deletes an OIDC configuration identified by a providerId.
      *
      * @param providerId - The identifier of the OIDC configuration to delete.
      * @returns A promise that resolves when the OIDC provider is deleted.
      */
-    AbstractAuthRequestHandler.prototype.deleteOAuthIdpConfig = function (providerId) {
+    deleteOAuthIdpConfig(providerId) {
         if (!auth_config_1.OIDCConfig.isProviderId(providerId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
         }
-        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), DELETE_OAUTH_IDP_CONFIG, {}, { providerId: providerId })
-            .then(function () {
+        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), DELETE_OAUTH_IDP_CONFIG, {}, { providerId })
+            .then(() => {
             // Return nothing.
         });
-    };
+    }
     /**
      * Creates a new OIDC provider configuration with the properties provided.
      *
@@ -1459,24 +1423,24 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @returns A promise that resolves with the newly created OIDC
      *     configuration.
      */
-    AbstractAuthRequestHandler.prototype.createOAuthIdpConfig = function (options) {
+    createOAuthIdpConfig(options) {
         // Construct backend request.
-        var request;
+        let request;
         try {
             request = auth_config_1.OIDCConfig.buildServerRequest(options) || {};
         }
         catch (e) {
             return Promise.reject(e);
         }
-        var providerId = options.providerId;
-        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), CREATE_OAUTH_IDP_CONFIG, request, { providerId: providerId })
-            .then(function (response) {
+        const providerId = options.providerId;
+        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), CREATE_OAUTH_IDP_CONFIG, request, { providerId })
+            .then((response) => {
             if (!auth_config_1.OIDCConfig.getProviderIdFromResourceName(response.name)) {
                 throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new OIDC provider configuration');
             }
             return response;
         });
-    };
+    }
     /**
      * Updates an existing OIDC provider configuration with the properties provided.
      *
@@ -1485,39 +1449,39 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @returns A promise that resolves with the modified provider
      *     configuration.
      */
-    AbstractAuthRequestHandler.prototype.updateOAuthIdpConfig = function (providerId, options) {
+    updateOAuthIdpConfig(providerId, options) {
         if (!auth_config_1.OIDCConfig.isProviderId(providerId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
         }
         // Construct backend request.
-        var request;
+        let request;
         try {
             request = auth_config_1.OIDCConfig.buildServerRequest(options, true) || {};
         }
         catch (e) {
             return Promise.reject(e);
         }
-        var updateMask = utils.generateUpdateMask(request);
-        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), UPDATE_OAUTH_IDP_CONFIG, request, { providerId: providerId, updateMask: updateMask.join(',') })
-            .then(function (response) {
+        const updateMask = utils.generateUpdateMask(request);
+        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), UPDATE_OAUTH_IDP_CONFIG, request, { providerId, updateMask: updateMask.join(',') })
+            .then((response) => {
             if (!auth_config_1.OIDCConfig.getProviderIdFromResourceName(response.name)) {
                 throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update OIDC provider configuration');
             }
             return response;
         });
-    };
+    }
     /**
      * Looks up an SAML provider configuration by provider ID.
      *
      * @param providerId - The provider identifier of the configuration to lookup.
      * @returns A promise that resolves with the provider configuration information.
      */
-    AbstractAuthRequestHandler.prototype.getInboundSamlConfig = function (providerId) {
+    getInboundSamlConfig(providerId) {
         if (!auth_config_1.SAMLConfig.isProviderId(providerId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
         }
-        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), GET_INBOUND_SAML_CONFIG, {}, { providerId: providerId });
-    };
+        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), GET_INBOUND_SAML_CONFIG, {}, { providerId });
+    }
     /**
      * Lists the SAML configurations (single batch only) with a size of maxResults and starting from
      * the offset as specified by pageToken.
@@ -1531,9 +1495,8 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      *     SAML configurations and the next page token if available. For the last page, an empty list of provider
      *     configuration and no page token are returned.
      */
-    AbstractAuthRequestHandler.prototype.listInboundSamlConfigs = function (maxResults, pageToken) {
-        if (maxResults === void 0) { maxResults = MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE; }
-        var request = {
+    listInboundSamlConfigs(maxResults = MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE, pageToken) {
+        const request = {
             pageSize: maxResults,
         };
         // Add next page token if provided.
@@ -1541,29 +1504,29 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             request.pageToken = pageToken;
         }
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), LIST_INBOUND_SAML_CONFIGS, request)
-            .then(function (response) {
+            .then((response) => {
             if (!response.inboundSamlConfigs) {
                 response.inboundSamlConfigs = [];
                 delete response.nextPageToken;
             }
             return response;
         });
-    };
+    }
     /**
      * Deletes a SAML configuration identified by a providerId.
      *
      * @param providerId - The identifier of the SAML configuration to delete.
      * @returns A promise that resolves when the SAML provider is deleted.
      */
-    AbstractAuthRequestHandler.prototype.deleteInboundSamlConfig = function (providerId) {
+    deleteInboundSamlConfig(providerId) {
         if (!auth_config_1.SAMLConfig.isProviderId(providerId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
         }
-        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), DELETE_INBOUND_SAML_CONFIG, {}, { providerId: providerId })
-            .then(function () {
+        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), DELETE_INBOUND_SAML_CONFIG, {}, { providerId })
+            .then(() => {
             // Return nothing.
         });
-    };
+    }
     /**
      * Creates a new SAML provider configuration with the properties provided.
      *
@@ -1571,24 +1534,24 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @returns A promise that resolves with the newly created SAML
      *     configuration.
      */
-    AbstractAuthRequestHandler.prototype.createInboundSamlConfig = function (options) {
+    createInboundSamlConfig(options) {
         // Construct backend request.
-        var request;
+        let request;
         try {
             request = auth_config_1.SAMLConfig.buildServerRequest(options) || {};
         }
         catch (e) {
             return Promise.reject(e);
         }
-        var providerId = options.providerId;
-        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), CREATE_INBOUND_SAML_CONFIG, request, { providerId: providerId })
-            .then(function (response) {
+        const providerId = options.providerId;
+        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), CREATE_INBOUND_SAML_CONFIG, request, { providerId })
+            .then((response) => {
             if (!auth_config_1.SAMLConfig.getProviderIdFromResourceName(response.name)) {
                 throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new SAML provider configuration');
             }
             return response;
         });
-    };
+    }
     /**
      * Updates an existing SAML provider configuration with the properties provided.
      *
@@ -1597,27 +1560,27 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @returns A promise that resolves with the modified provider
      *     configuration.
      */
-    AbstractAuthRequestHandler.prototype.updateInboundSamlConfig = function (providerId, options) {
+    updateInboundSamlConfig(providerId, options) {
         if (!auth_config_1.SAMLConfig.isProviderId(providerId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
         }
         // Construct backend request.
-        var request;
+        let request;
         try {
             request = auth_config_1.SAMLConfig.buildServerRequest(options, true) || {};
         }
         catch (e) {
             return Promise.reject(e);
         }
-        var updateMask = utils.generateUpdateMask(request);
-        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), UPDATE_INBOUND_SAML_CONFIG, request, { providerId: providerId, updateMask: updateMask.join(',') })
-            .then(function (response) {
+        const updateMask = utils.generateUpdateMask(request);
+        return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), UPDATE_INBOUND_SAML_CONFIG, request, { providerId, updateMask: updateMask.join(',') })
+            .then((response) => {
             if (!auth_config_1.SAMLConfig.getProviderIdFromResourceName(response.name)) {
                 throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update SAML provider configuration');
             }
             return response;
         });
-    };
+    }
     /**
      * Invokes the request handler based on the API settings object passed.
      *
@@ -1627,36 +1590,35 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
      * @param additionalResourceParams - Additional resource related params if needed.
      * @returns A promise that resolves with the response.
      */
-    AbstractAuthRequestHandler.prototype.invokeRequestHandler = function (urlBuilder, apiSettings, requestData, additionalResourceParams) {
-        var _this = this;
+    invokeRequestHandler(urlBuilder, apiSettings, requestData, additionalResourceParams) {
         return urlBuilder.getUrl(apiSettings.getEndpoint(), additionalResourceParams)
-            .then(function (url) {
+            .then((url) => {
             // Validate request.
             if (requestData) {
-                var requestValidator = apiSettings.getRequestValidator();
+                const requestValidator = apiSettings.getRequestValidator();
                 requestValidator(requestData);
             }
             // Process request.
-            var req = {
+            const req = {
                 method: apiSettings.getHttpMethod(),
-                url: url,
+                url,
                 headers: FIREBASE_AUTH_HEADER,
                 data: requestData,
                 timeout: FIREBASE_AUTH_TIMEOUT,
             };
-            return _this.httpClient.send(req);
+            return this.httpClient.send(req);
         })
-            .then(function (response) {
+            .then((response) => {
             // Validate response.
-            var responseValidator = apiSettings.getResponseValidator();
+            const responseValidator = apiSettings.getResponseValidator();
             responseValidator(response.data);
             // Return entire response.
             return response.data;
         })
-            .catch(function (err) {
+            .catch((err) => {
             if (err instanceof api_request_1.HttpError) {
-                var error = err.response.data;
-                var errorCode = AbstractAuthRequestHandler.getErrorCode(error);
+                const error = err.response.data;
+                const errorCode = AbstractAuthRequestHandler.getErrorCode(error);
                 if (!errorCode) {
                     throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'Error returned from server: ' + error + '. Additionally, an ' +
                         'internal error occurred while attempting to extract the ' +
@@ -1666,43 +1628,42 @@ var AbstractAuthRequestHandler = /** @class */ (function () {
             }
             throw err;
         });
-    };
+    }
     /**
      * @returns The current Auth user management resource URL builder.
      */
-    AbstractAuthRequestHandler.prototype.getAuthUrlBuilder = function () {
+    getAuthUrlBuilder() {
         if (!this.authUrlBuilder) {
             this.authUrlBuilder = this.newAuthUrlBuilder();
         }
         return this.authUrlBuilder;
-    };
+    }
     /**
      * @returns The current project config resource URL builder.
      */
-    AbstractAuthRequestHandler.prototype.getProjectConfigUrlBuilder = function () {
+    getProjectConfigUrlBuilder() {
         if (!this.projectConfigUrlBuilder) {
             this.projectConfigUrlBuilder = this.newProjectConfigUrlBuilder();
         }
         return this.projectConfigUrlBuilder;
-    };
-    return AbstractAuthRequestHandler;
-}());
+    }
+}
 exports.AbstractAuthRequestHandler = AbstractAuthRequestHandler;
 /** Instantiates the getTenant endpoint settings. */
-var GET_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}', 'GET')
+const GET_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}', 'GET')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain at least the tenant name.
     if (!validator.isNonEmptyString(response.name)) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to get tenant');
     }
 });
 /** Instantiates the deleteTenant endpoint settings. */
-var DELETE_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}', 'DELETE');
+const DELETE_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}', 'DELETE');
 /** Instantiates the updateTenant endpoint settings. */
-var UPDATE_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}?updateMask={updateMask}', 'PATCH')
+const UPDATE_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}?updateMask={updateMask}', 'PATCH')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain at least the tenant name.
     if (!validator.isNonEmptyString(response.name) ||
         !tenant_1.Tenant.getTenantIdFromResourceName(response.name)) {
@@ -1710,9 +1671,9 @@ var UPDATE_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}?updateMas
     }
 });
 /** Instantiates the listTenants endpoint settings. */
-var LIST_TENANTS = new api_request_1.ApiSettings('/tenants', 'GET')
+const LIST_TENANTS = new api_request_1.ApiSettings('/tenants', 'GET')
     // Set request validator.
-    .setRequestValidator(function (request) {
+    .setRequestValidator((request) => {
     // Validate next page token.
     if (typeof request.pageToken !== 'undefined' &&
         !validator.isNonEmptyString(request.pageToken)) {
@@ -1723,13 +1684,13 @@ var LIST_TENANTS = new api_request_1.ApiSettings('/tenants', 'GET')
         request.pageSize <= 0 ||
         request.pageSize > MAX_LIST_TENANT_PAGE_SIZE) {
         throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive non-zero number that does not exceed ' +
-            ("the allowed " + MAX_LIST_TENANT_PAGE_SIZE + "."));
+            `the allowed ${MAX_LIST_TENANT_PAGE_SIZE}.`);
     }
 });
 /** Instantiates the createTenant endpoint settings. */
-var CREATE_TENANT = new api_request_1.ApiSettings('/tenants', 'POST')
+const CREATE_TENANT = new api_request_1.ApiSettings('/tenants', 'POST')
     // Set response validator.
-    .setResponseValidator(function (response) {
+    .setResponseValidator((response) => {
     // Response should always contain at least the tenant name.
     if (!validator.isNonEmptyString(response.name) ||
         !tenant_1.Tenant.getTenantIdFromResourceName(response.name)) {
@@ -1741,46 +1702,44 @@ var CREATE_TENANT = new api_request_1.ApiSettings('/tenants', 'POST')
  * tenant management related APIs. This extends the BaseFirebaseAuthRequestHandler class and defines
  * additional tenant management related APIs.
  */
-var AuthRequestHandler = /** @class */ (function (_super) {
-    __extends(AuthRequestHandler, _super);
+class AuthRequestHandler extends AbstractAuthRequestHandler {
     /**
      * The FirebaseAuthRequestHandler constructor used to initialize an instance using a FirebaseApp.
      *
      * @param app - The app used to fetch access tokens to sign API requests.
      * @constructor.
      */
-    function AuthRequestHandler(app) {
-        var _this = _super.call(this, app) || this;
-        _this.tenantMgmtResourceBuilder = new AuthResourceUrlBuilder(app, 'v2');
-        return _this;
+    constructor(app) {
+        super(app);
+        this.tenantMgmtResourceBuilder = new AuthResourceUrlBuilder(app, 'v2');
     }
     /**
      * @returns A new Auth user management resource URL builder instance.
      */
-    AuthRequestHandler.prototype.newAuthUrlBuilder = function () {
+    newAuthUrlBuilder() {
         return new AuthResourceUrlBuilder(this.app, 'v1');
-    };
+    }
     /**
      * @returns A new project config resource URL builder instance.
      */
-    AuthRequestHandler.prototype.newProjectConfigUrlBuilder = function () {
+    newProjectConfigUrlBuilder() {
         return new AuthResourceUrlBuilder(this.app, 'v2');
-    };
+    }
     /**
      * Looks up a tenant by tenant ID.
      *
      * @param tenantId - The tenant identifier of the tenant to lookup.
      * @returns A promise that resolves with the tenant information.
      */
-    AuthRequestHandler.prototype.getTenant = function (tenantId) {
+    getTenant(tenantId) {
         if (!validator.isNonEmptyString(tenantId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_TENANT_ID));
         }
-        return this.invokeRequestHandler(this.tenantMgmtResourceBuilder, GET_TENANT, {}, { tenantId: tenantId })
-            .then(function (response) {
+        return this.invokeRequestHandler(this.tenantMgmtResourceBuilder, GET_TENANT, {}, { tenantId })
+            .then((response) => {
             return response;
         });
-    };
+    }
     /**
      * Exports the tenants (single batch only) with a size of maxResults and starting from
      * the offset as specified by pageToken.
@@ -1794,59 +1753,58 @@ var AuthRequestHandler = /** @class */ (function (_super) {
      *     tenants and the next page token if available. For the last page, an empty list of tenants
      *     and no page token are returned.
      */
-    AuthRequestHandler.prototype.listTenants = function (maxResults, pageToken) {
-        if (maxResults === void 0) { maxResults = MAX_LIST_TENANT_PAGE_SIZE; }
-        var request = {
+    listTenants(maxResults = MAX_LIST_TENANT_PAGE_SIZE, pageToken) {
+        const request = {
             pageSize: maxResults,
-            pageToken: pageToken,
+            pageToken,
         };
         // Remove next page token if not provided.
         if (typeof request.pageToken === 'undefined') {
             delete request.pageToken;
         }
         return this.invokeRequestHandler(this.tenantMgmtResourceBuilder, LIST_TENANTS, request)
-            .then(function (response) {
+            .then((response) => {
             if (!response.tenants) {
                 response.tenants = [];
                 delete response.nextPageToken;
             }
             return response;
         });
-    };
+    }
     /**
      * Deletes a tenant identified by a tenantId.
      *
      * @param tenantId - The identifier of the tenant to delete.
      * @returns A promise that resolves when the tenant is deleted.
      */
-    AuthRequestHandler.prototype.deleteTenant = function (tenantId) {
+    deleteTenant(tenantId) {
         if (!validator.isNonEmptyString(tenantId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_TENANT_ID));
         }
-        return this.invokeRequestHandler(this.tenantMgmtResourceBuilder, DELETE_TENANT, undefined, { tenantId: tenantId })
-            .then(function () {
+        return this.invokeRequestHandler(this.tenantMgmtResourceBuilder, DELETE_TENANT, undefined, { tenantId })
+            .then(() => {
             // Return nothing.
         });
-    };
+    }
     /**
      * Creates a new tenant with the properties provided.
      *
      * @param tenantOptions - The properties to set on the new tenant to be created.
      * @returns A promise that resolves with the newly created tenant object.
      */
-    AuthRequestHandler.prototype.createTenant = function (tenantOptions) {
+    createTenant(tenantOptions) {
         try {
             // Construct backend request.
-            var request = tenant_1.Tenant.buildServerRequest(tenantOptions, true);
+            const request = tenant_1.Tenant.buildServerRequest(tenantOptions, true);
             return this.invokeRequestHandler(this.tenantMgmtResourceBuilder, CREATE_TENANT, request)
-                .then(function (response) {
+                .then((response) => {
                 return response;
             });
         }
         catch (e) {
             return Promise.reject(e);
         }
-    };
+    }
     /**
      * Updates an existing tenant with the properties provided.
      *
@@ -1854,35 +1812,33 @@ var AuthRequestHandler = /** @class */ (function (_super) {
      * @param tenantOptions - The properties to update on the existing tenant.
      * @returns A promise that resolves with the modified tenant object.
      */
-    AuthRequestHandler.prototype.updateTenant = function (tenantId, tenantOptions) {
+    updateTenant(tenantId, tenantOptions) {
         if (!validator.isNonEmptyString(tenantId)) {
             return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_TENANT_ID));
         }
         try {
             // Construct backend request.
-            var request = tenant_1.Tenant.buildServerRequest(tenantOptions, false);
+            const request = tenant_1.Tenant.buildServerRequest(tenantOptions, false);
             // Do not traverse deep into testPhoneNumbers. The entire content should be replaced
             // and not just specific phone numbers.
-            var updateMask = utils.generateUpdateMask(request, ['testPhoneNumbers']);
-            return this.invokeRequestHandler(this.tenantMgmtResourceBuilder, UPDATE_TENANT, request, { tenantId: tenantId, updateMask: updateMask.join(',') })
-                .then(function (response) {
+            const updateMask = utils.generateUpdateMask(request, ['testPhoneNumbers']);
+            return this.invokeRequestHandler(this.tenantMgmtResourceBuilder, UPDATE_TENANT, request, { tenantId, updateMask: updateMask.join(',') })
+                .then((response) => {
                 return response;
             });
         }
         catch (e) {
             return Promise.reject(e);
         }
-    };
-    return AuthRequestHandler;
-}(AbstractAuthRequestHandler));
+    }
+}
 exports.AuthRequestHandler = AuthRequestHandler;
 /**
  * Utility for sending requests to Auth server that are tenant Auth instance related. This includes user
  * management related APIs for specified tenants.
  * This extends the BaseFirebaseAuthRequestHandler class.
  */
-var TenantAwareAuthRequestHandler = /** @class */ (function (_super) {
-    __extends(TenantAwareAuthRequestHandler, _super);
+class TenantAwareAuthRequestHandler extends AbstractAuthRequestHandler {
     /**
      * The FirebaseTenantRequestHandler constructor used to initialize an instance using a
      * FirebaseApp and a tenant ID.
@@ -1891,23 +1847,22 @@ var TenantAwareAuthRequestHandler = /** @class */ (function (_super) {
      * @param tenantId - The request handler's tenant ID.
      * @constructor
      */
-    function TenantAwareAuthRequestHandler(app, tenantId) {
-        var _this = _super.call(this, app) || this;
-        _this.tenantId = tenantId;
-        return _this;
+    constructor(app, tenantId) {
+        super(app);
+        this.tenantId = tenantId;
     }
     /**
      * @returns A new Auth user management resource URL builder instance.
      */
-    TenantAwareAuthRequestHandler.prototype.newAuthUrlBuilder = function () {
+    newAuthUrlBuilder() {
         return new TenantAwareAuthResourceUrlBuilder(this.app, 'v1', this.tenantId);
-    };
+    }
     /**
      * @returns A new project config resource URL builder instance.
      */
-    TenantAwareAuthRequestHandler.prototype.newProjectConfigUrlBuilder = function () {
+    newProjectConfigUrlBuilder() {
         return new TenantAwareAuthResourceUrlBuilder(this.app, 'v2', this.tenantId);
-    };
+    }
     /**
      * Imports the list of users provided to Firebase Auth. This is useful when
      * migrating from an external authentication system without having to use the Firebase CLI SDK.
@@ -1924,19 +1879,17 @@ var TenantAwareAuthRequestHandler = /** @class */ (function (_super) {
      *     with the result of the import. This includes the number of successful imports, the number
      *     of failed uploads and their corresponding errors.
      */
-    TenantAwareAuthRequestHandler.prototype.uploadAccount = function (users, options) {
-        var _this = this;
+    uploadAccount(users, options) {
         // Add additional check to match tenant ID of imported user records.
-        users.forEach(function (user, index) {
+        users.forEach((user, index) => {
             if (validator.isNonEmptyString(user.tenantId) &&
-                user.tenantId !== _this.tenantId) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MISMATCHING_TENANT_ID, "UserRecord of index \"" + index + "\" has mismatching tenant ID \"" + user.tenantId + "\"");
+                user.tenantId !== this.tenantId) {
+                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MISMATCHING_TENANT_ID, `UserRecord of index "${index}" has mismatching tenant ID "${user.tenantId}"`);
             }
         });
-        return _super.prototype.uploadAccount.call(this, users, options);
-    };
-    return TenantAwareAuthRequestHandler;
-}(AbstractAuthRequestHandler));
+        return super.uploadAccount(users, options);
+    }
+}
 exports.TenantAwareAuthRequestHandler = TenantAwareAuthRequestHandler;
 function emulatorHost() {
     return process.env.FIREBASE_AUTH_EMULATOR_HOST;