firebase-admin 13.0.2 → 13.2.0

package/lib/auth/token-generator.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/auth/token-generator.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/auth/token-verifier.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2018 Google Inc.
  *

package/lib/auth/token-verifier.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2018 Google Inc.

package/lib/auth/user-import-builder.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2018 Google Inc.
  *

package/lib/auth/user-import-builder.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2018 Google Inc.

package/lib/auth/user-record.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/auth/user-record.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/credential/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2020 Google Inc.
  *

package/lib/credential/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2020 Google Inc.

package/lib/data-connect/data-connect-api-client-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2024 Google Inc.
@@ -16,6 +16,11 @@
  * limitations under the License.
  */
 import { PrefixedFirebaseError } from '../utils/error';
+/**
+ * When true the SDK should communicate with the Data Connect Emulator for all API
+ * calls and also produce unsigned tokens.
+ */
+export declare function useEmulator(): boolean;
 export declare const DATA_CONNECT_ERROR_CODE_MAPPING: {
     [key: string]: DataConnectErrorCode;
 };

package/lib/data-connect/data-connect-api-client-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license
@@ -18,13 +18,16 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FirebaseDataConnectError = exports.DATA_CONNECT_ERROR_CODE_MAPPING = exports.DataConnectApiClient = void 0;
+exports.useEmulator = useEmulator;
 const api_request_1 = require("../utils/api-request");
 const error_1 = require("../utils/error");
 const utils = require("../utils/index");
 const validator = require("../utils/validator");
-// Data Connect backend constants
-const DATA_CONNECT_HOST = 'https://firebasedataconnect.googleapis.com';
-const DATA_CONNECT_API_URL_FORMAT = '{host}/v1alpha/projects/{projectId}/locations/{locationId}/services/{serviceId}:{endpointId}';
+const API_VERSION = 'v1alpha';
+/** The Firebase Data Connect backend base URL format. */
+const FIREBASE_DATA_CONNECT_BASE_URL_FORMAT = 'https://firebasedataconnect.googleapis.com/{version}/projects/{projectId}/locations/{locationId}/services/{serviceId}:{endpointId}';
+/** Firebase Data Connect base URl format when using the Data Connect emultor. */
+const FIREBASE_DATA_CONNECT_EMULATOR_BASE_URL_FORMAT = 'http://{host}/{version}/projects/{projectId}/locations/{locationId}/services/{serviceId}:{endpointId}';
 const EXECUTE_GRAPH_QL_ENDPOINT = 'executeGraphql';
 const EXECUTE_GRAPH_QL_READ_ENDPOINT = 'executeGraphqlRead';
 const DATA_CONNECT_CONFIG_HEADERS = {
@@ -42,7 +45,7 @@ class DataConnectApiClient {
         if (!validator.isNonNullObject(app) || !('options' in app)) {
             throw new FirebaseDataConnectError(exports.DATA_CONNECT_ERROR_CODE_MAPPING.INVALID_ARGUMENT, 'First argument passed to getDataConnect() must be a valid Firebase app instance.');
         }
-        this.httpClient = new api_request_1.AuthorizedHttpClient(app);
+        this.httpClient = new DataConnectHttpClient(app);
     }
     /**
      * Execute arbitrary GraphQL, including both read and write queries
@@ -74,13 +77,13 @@ class DataConnectApiClient {
                 throw new FirebaseDataConnectError(exports.DATA_CONNECT_ERROR_CODE_MAPPING.INVALID_ARGUMENT, 'GraphqlOptions must be a non-null object');
             }
         }
-        const host = (process.env.DATA_CONNECT_EMULATOR_HOST || DATA_CONNECT_HOST);
         const data = {
             query,
             ...(options?.variables && { variables: options?.variables }),
             ...(options?.operationName && { operationName: options?.operationName }),
+            ...(options?.impersonate && { extensions: { impersonate: options?.impersonate } }),
         };
-        return this.getUrl(host, this.connectorConfig.location, this.connectorConfig.serviceId, endpoint)
+        return this.getUrl(API_VERSION, this.connectorConfig.location, this.connectorConfig.serviceId, endpoint)
             .then(async (url) => {
             const request = {
                 method: 'POST',
@@ -104,18 +107,26 @@ class DataConnectApiClient {
             throw this.toFirebaseError(err);
         });
     }
-    async getUrl(host, locationId, serviceId, endpointId) {
+    async getUrl(version, locationId, serviceId, endpointId) {
         return this.getProjectId()
             .then((projectId) => {
             const urlParams = {
-                host,
+                version,
                 projectId,
                 locationId,
                 serviceId,
                 endpointId
             };
-            const baseUrl = utils.formatString(DATA_CONNECT_API_URL_FORMAT, urlParams);
-            return utils.formatString(baseUrl);
+            let urlFormat;
+            if (useEmulator()) {
+                urlFormat = utils.formatString(FIREBASE_DATA_CONNECT_EMULATOR_BASE_URL_FORMAT, {
+                    host: emulatorHost()
+                });
+            }
+            else {
+                urlFormat = FIREBASE_DATA_CONNECT_BASE_URL_FORMAT;
+            }
+            return utils.formatString(urlFormat, urlParams);
         });
     }
     getProjectId() {
@@ -151,6 +162,28 @@ class DataConnectApiClient {
     }
 }
 exports.DataConnectApiClient = DataConnectApiClient;
+/**
+ * Data Connect-specific HTTP client which uses the special "owner" token
+ * when communicating with the Data Connect Emulator.
+ */
+class DataConnectHttpClient extends api_request_1.AuthorizedHttpClient {
+    getToken() {
+        if (useEmulator()) {
+            return Promise.resolve('owner');
+        }
+        return super.getToken();
+    }
+}
+function emulatorHost() {
+    return process.env.DATA_CONNECT_EMULATOR_HOST;
+}
+/**
+ * When true the SDK should communicate with the Data Connect Emulator for all API
+ * calls and also produce unsigned tokens.
+ */
+function useEmulator() {
+    return !!emulatorHost();
+}
 exports.DATA_CONNECT_ERROR_CODE_MAPPING = {
     ABORTED: 'aborted',
     INVALID_ARGUMENT: 'invalid-argument',

package/lib/data-connect/data-connect-api.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2024 Google Inc.
@@ -15,6 +15,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { DecodedIdToken } from '../auth/token-verifier';
 /**
  * Interface representing a Data Connect connector configuration.
  */
@@ -49,4 +50,46 @@ export interface GraphqlOptions<Variables> {
      * The name of the GraphQL operation. Required only if `query` contains multiple operations.
      */
     operationName?: string;
+    /**
+     * If set, impersonate a request with given Firebase Auth context and evaluate the auth
+     * policies on the operation. If omitted, bypass any defined auth policies.
+     */
+    impersonate?: ImpersonateAuthenticated | ImpersonateUnauthenticated;
+}
+/**
+ * Type representing the partial claims of a Firebase Auth token used to evaluate the
+ * Data Connect auth policy.
+ */
+export type AuthClaims = Partial<DecodedIdToken>;
+/**
+ * Interface representing the impersonation of an authenticated user.
+ */
+export interface ImpersonateAuthenticated {
+    /**
+     * Evaluate the auth policy with a customized JWT auth token. Should follow the Firebase Auth token format.
+     * https://firebase.google.com/docs/data-connect/cel-reference#auth-token-contents
+     *
+     * @example A verified user may have the following `authClaims`:
+     * ```json
+     * { "sub": "uid", "email_verified": true }
+     * ```
+     */
+    authClaims: AuthClaims;
+    /**
+     * Both `authClaims` and `unauthenticated` are mutually exclusive fields and should not be both set.
+     */
+    unauthenticated?: never;
+}
+/**
+ * Interface representing the impersonation of an unauthenticated user.
+ */
+export interface ImpersonateUnauthenticated {
+    /**
+     * Both `authClaims` and `unauthenticated` are mutually exclusive fields and should not be both set.
+     */
+    authClaims?: never;
+    /**
+     * Evaluates the auth policy as an unauthenticated request. Can only be set to true.
+     */
+    unauthenticated: true;
 }

package/lib/data-connect/data-connect-api.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/data-connect/data-connect.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2024 Google Inc.

package/lib/data-connect/data-connect.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/data-connect/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2024 Google Inc.
@@ -23,7 +23,7 @@
 import { App } from '../app';
 import { DataConnect } from './data-connect';
 import { ConnectorConfig } from './data-connect-api';
-export { GraphqlOptions, ExecuteGraphqlResponse, ConnectorConfig, } from './data-connect-api';
+export { GraphqlOptions, ExecuteGraphqlResponse, ConnectorConfig, ImpersonateAuthenticated, ImpersonateUnauthenticated, AuthClaims } from './data-connect-api';
 export { DataConnect, } from './data-connect';
 /**
  * Gets the {@link DataConnect} service with the provided connector configuration

package/lib/data-connect/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/database/database-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/database/database-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/database/database.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2020 Google Inc.
  *

package/lib/database/database.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2020 Google Inc.

package/lib/database/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2020 Google Inc.
  *

package/lib/database/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2020 Google Inc.

package/lib/default-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2020 Google Inc.
  *

package/lib/default-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/esm/remote-config/index.js

@@ -3,4 +3,5 @@ import mod from "../../remote-config/index.js";
 export const CustomSignalOperator = mod.CustomSignalOperator;
 export const PercentConditionOperator = mod.PercentConditionOperator;
 export const RemoteConfig = mod.RemoteConfig;
+export const RemoteConfigFetchResponse = mod.RemoteConfigFetchResponse;
 export const getRemoteConfig = mod.getRemoteConfig;

package/lib/eventarc/cloudevent.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2022 Google Inc.

package/lib/eventarc/cloudevent.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/eventarc/eventarc-client-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2022 Google Inc.

package/lib/eventarc/eventarc-client-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/eventarc/eventarc-utils.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2022 Google Inc.

package/lib/eventarc/eventarc-utils.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/eventarc/eventarc.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2022 Google Inc.

package/lib/eventarc/eventarc.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/eventarc/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2022 Google Inc.

package/lib/eventarc/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/extensions/extensions-api-client-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2022 Google Inc.

package/lib/extensions/extensions-api-client-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/extensions/extensions-api.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2022 Google Inc.

package/lib/extensions/extensions-api.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/extensions/extensions.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2022 Google Inc.

package/lib/extensions/extensions.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/extensions/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/extensions/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/firebase-namespace-api.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/firebase-namespace-api.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/firestore/firestore-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2017 Google Inc.

package/lib/firestore/firestore-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/firestore/firestore-namespace.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2021 Google Inc.
  *

package/lib/firestore/firestore-namespace.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2021 Google Inc.

package/lib/firestore/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * Copyright 2020 Google Inc.
  *

package/lib/firestore/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * Copyright 2020 Google Inc.

package/lib/functions/functions-api-client-internal.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/functions/functions-api-client-internal.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license
@@ -43,7 +43,7 @@ class FunctionsApiClient {
         if (!validator.isNonNullObject(app) || !('options' in app)) {
             throw new FirebaseFunctionsError('invalid-argument', 'First argument passed to getFunctions() must be a valid Firebase app instance.');
         }
-        this.httpClient = new api_request_1.AuthorizedHttpClient(app);
+        this.httpClient = new FunctionsHttpClient(app);
     }
     /**
      * Deletes a task from a queue.
@@ -323,6 +323,18 @@ class FunctionsApiClient {
     }
 }
 exports.FunctionsApiClient = FunctionsApiClient;
+/**
+ * Functions-specific HTTP client which uses the special "owner" token
+ * when communicating with the Emulator.
+ */
+class FunctionsHttpClient extends api_request_1.AuthorizedHttpClient {
+    getToken() {
+        if (process.env.CLOUD_TASKS_EMULATOR_HOST) {
+            return Promise.resolve('owner');
+        }
+        return super.getToken();
+    }
+}
 exports.FUNCTIONS_ERROR_CODE_MAPPING = {
     ABORTED: 'aborted',
     INVALID_ARGUMENT: 'invalid-argument',

package/lib/functions/functions-api.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/functions/functions-api.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/functions/functions.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/functions/functions.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license

package/lib/functions/index.d.ts

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 /*!
  * @license
  * Copyright 2021 Google Inc.

package/lib/functions/index.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.0.2 */
+/*! firebase-admin v13.2.0 */
 "use strict";
 /*!
  * @license