firebase-admin 11.5.0 → 11.6.0

package/lib/app/core.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/core.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app/credential-factory.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/credential-factory.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app/credential-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2020 Google Inc.

package/lib/app/credential-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app/credential.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/credential.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app/firebase-app.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/app/firebase-app.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app/firebase-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/app/firebase-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app/lifecycle.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app/lifecycle.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/app-check-api-client-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/app-check-api-client-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/app-check-api.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/app-check-api.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/app-check-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/app-check/app-check-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/app-check/app-check.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/app-check.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/token-generator.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/app-check/token-generator.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/app-check/token-verifier.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/app-check/token-verifier.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/auth/action-code-settings-builder.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2018 Google Inc.
  *

package/lib/auth/action-code-settings-builder.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * Copyright 2018 Google Inc.

package/lib/auth/auth-api-request.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/auth/auth-api-request.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/auth/auth-config.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2018 Google Inc.
  *
@@ -386,6 +386,7 @@ declare type AuthFactorServerType = 'PHONE_SMS';
 export interface MultiFactorAuthServerConfig {
     state?: MultiFactorConfigState;
     enabledProviders?: AuthFactorServerType[];
+    providerConfigs?: MultiFactorProviderConfig[];
 }
 /**
  * Identifies a second factor type.
@@ -410,22 +411,31 @@ export interface MultiFactorConfig {
      * Currently only ‘phone’ is supported.
      */
     factorIds?: AuthFactorType[];
+    /**
+     * A list of multi-factor provider configurations.
+     * MFA providers (except phone) indicate whether they're enabled through this field.   */
+    providerConfigs?: MultiFactorProviderConfig[];
+}
+/**
+ * Interface representing a multi-factor auth provider configuration.
+ * This interface is used for second factor auth providers other than SMS.
+ * Currently, only TOTP is supported.
+ */ export interface MultiFactorProviderConfig {
+    /**
+     * Indicates whether this multi-factor provider is enabled or disabled.    */
+    state: MultiFactorConfigState;
+    /**
+     * TOTP multi-factor provider config.   */
+    totpProviderConfig?: TotpMultiFactorProviderConfig;
 }
 /**
- * Defines the multi-factor config class used to convert client side MultiFactorConfig
- * to a format that is understood by the Auth server.
+ * Interface representing configuration settings for TOTP second factor auth.
  */
-export declare class MultiFactorAuthConfig implements MultiFactorConfig {
-    readonly state: MultiFactorConfigState;
-    readonly factorIds: AuthFactorType[];
+export interface TotpMultiFactorProviderConfig {
     /**
-     * Validates the MultiFactorConfig options object. Throws an error on failure.
-     *
-     * @param options - The options object to validate.
-     */
-    private static validate;
-    /** @returns The plain object representation of the multi-factor config instance. */
-    toJSON(): object;
+      *  The allowed number of adjacent intervals that will be used for verification
+      *  to compensate for clock skew.   */
+    adjacentIntervals?: number;
 }
 /**
  * Validates the provided map of test phone number / code pairs.

package/lib/auth/auth-config.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * Copyright 2018 Google Inc.
@@ -35,6 +35,8 @@ const AUTH_FACTOR_SERVER_TO_CLIENT_TYPE = Object.keys(AUTH_FACTOR_CLIENT_TO_SERV
 /**
  * Defines the multi-factor config class used to convert client side MultiFactorConfig
  * to a format that is understood by the Auth server.
+ *
+ * @internal
  */
 class MultiFactorAuthConfig {
     /**
@@ -58,6 +60,18 @@ class MultiFactorAuthConfig {
                 this.factorIds.push(AUTH_FACTOR_SERVER_TO_CLIENT_TYPE[enabledProvider]);
             }
         });
+        this.providerConfigs = [];
+        (response.providerConfigs || []).forEach((providerConfig) => {
+            if (typeof providerConfig !== 'undefined') {
+                if (typeof providerConfig.state === 'undefined' ||
+                    typeof providerConfig.totpProviderConfig === 'undefined' ||
+                    (typeof providerConfig.totpProviderConfig.adjacentIntervals !== 'undefined' &&
+                        typeof providerConfig.totpProviderConfig.adjacentIntervals !== 'number')) {
+                    throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Invalid multi-factor configuration response');
+                }
+                this.providerConfigs.push(providerConfig);
+            }
+        });
     }
     /**
      * Static method to convert a client side request to a MultiFactorAuthServerConfig.
@@ -85,6 +99,9 @@ class MultiFactorAuthConfig {
                 request.enabledProviders = [];
             }
         }
+        if (Object.prototype.hasOwnProperty.call(options, 'providerConfigs')) {
+            request.providerConfigs = options.providerConfigs;
+        }
         return request;
     }
     /**
@@ -96,6 +113,7 @@ class MultiFactorAuthConfig {
         const validKeys = {
             state: true,
             factorIds: true,
+            providerConfigs: true,
         };
         if (!validator.isNonNullObject(options)) {
             throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CONFIG, '"MultiFactorConfig" must be a non-null object.');
@@ -123,12 +141,57 @@ class MultiFactorAuthConfig {
                 }
             });
         }
+        if (typeof options.providerConfigs !== 'undefined') {
+            if (!validator.isArray(options.providerConfigs)) {
+                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CONFIG, '"MultiFactorConfig.providerConfigs" must be an array of valid "MultiFactorProviderConfig."');
+            }
+            //Validate content of array.
+            options.providerConfigs.forEach((multiFactorProviderConfig) => {
+                if (typeof multiFactorProviderConfig === 'undefined' || !validator.isObject(multiFactorProviderConfig)) {
+                    throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CONFIG, `"${multiFactorProviderConfig}" is not a valid "MultiFactorProviderConfig" type.`);
+                }
+                const validProviderConfigKeys = {
+                    state: true,
+                    totpProviderConfig: true,
+                };
+                for (const key in multiFactorProviderConfig) {
+                    if (!(key in validProviderConfigKeys)) {
+                        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CONFIG, `"${key}" is not a valid ProviderConfig parameter.`);
+                    }
+                }
+                if (typeof multiFactorProviderConfig.state === 'undefined' ||
+                    (multiFactorProviderConfig.state !== 'ENABLED' &&
+                        multiFactorProviderConfig.state !== 'DISABLED')) {
+                    throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CONFIG, '"MultiFactorConfig.providerConfigs.state" must be either "ENABLED" or "DISABLED".');
+                }
+                // Since TOTP is the only provider config available right now, not defining it will lead into an error
+                if (typeof multiFactorProviderConfig.totpProviderConfig === 'undefined') {
+                    throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CONFIG, '"MultiFactorConfig.providerConfigs.totpProviderConfig" must be defined.');
+                }
+                const validTotpProviderConfigKeys = {
+                    adjacentIntervals: true,
+                };
+                for (const key in multiFactorProviderConfig.totpProviderConfig) {
+                    if (!(key in validTotpProviderConfigKeys)) {
+                        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CONFIG, `"${key}" is not a valid TotpProviderConfig parameter.`);
+                    }
+                }
+                const adjIntervals = multiFactorProviderConfig.totpProviderConfig.adjacentIntervals;
+                if (typeof adjIntervals !== 'undefined' &&
+                    (!Number.isInteger(adjIntervals) || adjIntervals < 0 || adjIntervals > 10)) {
+                    throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"MultiFactorConfig.providerConfigs.totpProviderConfig.adjacentIntervals" must' +
+                        ' be a valid number between 0 and 10 (both inclusive).');
+                }
+            });
+        }
     }
-    /** @returns The plain object representation of the multi-factor config instance. */
+    /** Converts MultiFactorConfig to JSON object
+     * @returns The plain object representation of the multi-factor config instance. */
     toJSON() {
         return {
             state: this.state,
             factorIds: this.factorIds,
+            providerConfigs: this.providerConfigs,
         };
     }
 }

package/lib/auth/auth-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/auth/auth-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/auth/auth.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/auth/auth.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * @license

package/lib/auth/base-auth.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/auth/base-auth.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/auth/identifier.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2020 Google Inc.
  *

package/lib/auth/identifier.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * Copyright 2020 Google Inc.

package/lib/auth/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2020 Google Inc.
  *
@@ -45,7 +45,7 @@ import { Auth } from './auth';
 export declare function getAuth(app?: App): Auth;
 export { ActionCodeSettings } from './action-code-settings-builder';
 export { Auth, } from './auth';
-export { AllowByDefault, AllowByDefaultWrap, AllowlistOnly, AllowlistOnlyWrap, AuthFactorType, AuthProviderConfig, AuthProviderConfigFilter, BaseAuthProviderConfig, BaseCreateMultiFactorInfoRequest, BaseUpdateMultiFactorInfoRequest, CreateMultiFactorInfoRequest, CreatePhoneMultiFactorInfoRequest, CreateRequest, EmailSignInProviderConfig, ListProviderConfigResults, MultiFactorConfig, MultiFactorConfigState, MultiFactorCreateSettings, MultiFactorUpdateSettings, OAuthResponseType, OIDCAuthProviderConfig, OIDCUpdateAuthProviderRequest, SAMLAuthProviderConfig, SAMLUpdateAuthProviderRequest, SmsRegionConfig, UserProvider, UpdateAuthProviderRequest, UpdateMultiFactorInfoRequest, UpdatePhoneMultiFactorInfoRequest, UpdateRequest, } from './auth-config';
+export { AllowByDefault, AllowByDefaultWrap, AllowlistOnly, AllowlistOnlyWrap, AuthFactorType, AuthProviderConfig, AuthProviderConfigFilter, BaseAuthProviderConfig, BaseCreateMultiFactorInfoRequest, BaseUpdateMultiFactorInfoRequest, CreateMultiFactorInfoRequest, CreatePhoneMultiFactorInfoRequest, CreateRequest, EmailSignInProviderConfig, ListProviderConfigResults, MultiFactorConfig, MultiFactorConfigState, MultiFactorCreateSettings, MultiFactorUpdateSettings, MultiFactorProviderConfig, OAuthResponseType, OIDCAuthProviderConfig, OIDCUpdateAuthProviderRequest, SAMLAuthProviderConfig, SAMLUpdateAuthProviderRequest, SmsRegionConfig, UserProvider, UpdateAuthProviderRequest, UpdateMultiFactorInfoRequest, UpdatePhoneMultiFactorInfoRequest, UpdateRequest, TotpMultiFactorProviderConfig, } from './auth-config';
 export { BaseAuth, DeleteUsersResult, GetUsersResult, ListUsersResult, SessionCookieOptions, } from './base-auth';
 export { EmailIdentifier, PhoneIdentifier, ProviderIdentifier, UidIdentifier, UserIdentifier, } from './identifier';
 export { CreateTenantRequest, Tenant, UpdateTenantRequest, } from './tenant';

package/lib/auth/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 /*!
  * Copyright 2020 Google Inc.

package/lib/auth/project-config-manager.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 import { ProjectConfig, UpdateProjectConfigRequest } from './project-config';
 /**
  * Defines the project config manager used to help manage project config related operations.

package/lib/auth/project-config-manager.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProjectConfigManager = void 0;

package/lib/auth/project-config.d.ts

@@ -1,5 +1,5 @@
-/*! firebase-admin v11.5.0 */
-import { SmsRegionConfig } from './auth-config';
+/*! firebase-admin v11.6.0 */
+import { SmsRegionConfig, MultiFactorConfig, MultiFactorAuthServerConfig } from './auth-config';
 /**
  * Interface representing the properties to update on the provided project config.
  */
@@ -8,6 +8,10 @@ export interface UpdateProjectConfigRequest {
      * The SMS configuration to update on the project.
      */
     smsRegionConfig?: SmsRegionConfig;
+    /**
+     * The multi-factor auth configuration to update on the project.
+     */
+    multiFactorConfig?: MultiFactorConfig;
 }
 /**
  * Response received from getting or updating a project config.
@@ -15,6 +19,7 @@ export interface UpdateProjectConfigRequest {
  */
 export interface ProjectConfigServerResponse {
     smsRegionConfig?: SmsRegionConfig;
+    mfa?: MultiFactorAuthServerConfig;
 }
 /**
  * Request sent to update project config.
@@ -22,6 +27,7 @@ export interface ProjectConfigServerResponse {
  */
 export interface ProjectConfigClientRequest {
     smsRegionConfig?: SmsRegionConfig;
+    mfa?: MultiFactorAuthServerConfig;
 }
 /**
 * Represents a project configuration.
@@ -33,6 +39,14 @@ export declare class ProjectConfig {
      * This is based on the calling code of the destination phone number.
      */
     readonly smsRegionConfig?: SmsRegionConfig;
+    /**
+     * The project's multi-factor auth configuration.
+     * Supports only phone and TOTP.
+     */ private readonly multiFactorConfig_?;
+    /**
+     * The multi-factor auth configuration.
+     */
+    get multiFactorConfig(): MultiFactorConfig | undefined;
     /**
      * Validates a project config options object. Throws an error on failure.
      *

package/lib/auth/project-config.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProjectConfig = void 0;
@@ -36,6 +36,17 @@ class ProjectConfig {
         if (typeof response.smsRegionConfig !== 'undefined') {
             this.smsRegionConfig = response.smsRegionConfig;
         }
+        //Backend API returns "mfa" in case of project config and "mfaConfig" in case of tenant config. 
+        //The SDK exposes it as multiFactorConfig always.
+        if (typeof response.mfa !== 'undefined') {
+            this.multiFactorConfig_ = new auth_config_1.MultiFactorAuthConfig(response.mfa);
+        }
+    }
+    /**
+     * The multi-factor auth configuration.
+     */
+    get multiFactorConfig() {
+        return this.multiFactorConfig_;
     }
     /**
      * Validates a project config options object. Throws an error on failure.
@@ -48,6 +59,7 @@ class ProjectConfig {
         }
         const validKeys = {
             smsRegionConfig: true,
+            multiFactorConfig: true,
         };
         // Check for unsupported top level attributes.
         for (const key in request) {
@@ -59,6 +71,10 @@ class ProjectConfig {
         if (typeof request.smsRegionConfig !== 'undefined') {
             auth_config_1.SmsRegionsAuthConfig.validate(request.smsRegionConfig);
         }
+        // Validate Multi Factor Config if provided
+        if (typeof request.multiFactorConfig !== 'undefined') {
+            auth_config_1.MultiFactorAuthConfig.validate(request.multiFactorConfig);
+        }
     }
     /**
      * Build the corresponding server request for a UpdateProjectConfigRequest object.
@@ -69,7 +85,16 @@ class ProjectConfig {
      */
     static buildServerRequest(configOptions) {
         ProjectConfig.validate(configOptions);
-        return configOptions;
+        const request = configOptions;
+        if (configOptions.multiFactorConfig !== undefined) {
+            request.mfa = auth_config_1.MultiFactorAuthConfig.buildServerRequest(configOptions.multiFactorConfig);
+        }
+        // Backend API returns "mfa" in case of project config and "mfaConfig" in case of tenant config.
+        // The SDK exposes it as multiFactorConfig always. 
+        // See https://cloud.google.com/identity-platform/docs/reference/rest/v2/projects.tenants#resource:-tenant 
+        // and https://cloud.google.com/identity-platform/docs/reference/rest/v2/Config
+        delete request.multiFactorConfig;
+        return request;
     }
     /**
      * Returns a JSON-serializable representation of this object.
@@ -80,10 +105,14 @@ class ProjectConfig {
         // JSON serialization
         const json = {
             smsRegionConfig: (0, deep_copy_1.deepCopy)(this.smsRegionConfig),
+            multiFactorConfig: (0, deep_copy_1.deepCopy)(this.multiFactorConfig),
         };
         if (typeof json.smsRegionConfig === 'undefined') {
             delete json.smsRegionConfig;
         }
+        if (typeof json.multiFactorConfig === 'undefined') {
+            delete json.multiFactorConfig;
+        }
         return json;
     }
 }

package/lib/auth/tenant-manager.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v11.5.0 */
+/*! firebase-admin v11.6.0 */
 /*!
  * Copyright 2019 Google Inc.
  *