firebase-admin 13.9.0 → 14.0.0

package/lib/auth/auth-api-request.js

@@ -1,4 +1,4 @@
-/*! firebase-admin v13.9.0 */
+/*! firebase-admin v14.0.0 */
 "use strict";
 /*!
  * @license
@@ -21,7 +21,8 @@ exports.TenantAwareAuthRequestHandler = exports.AuthRequestHandler = exports.Abs
 exports.useEmulator = useEmulator;
 const validator = require("../utils/validator");
 const deep_copy_1 = require("../utils/deep-copy");
-const error_1 = require("../utils/error");
+const error_1 = require("./error");
+const error_2 = require("../utils/error");
 const api_request_1 = require("../utils/api-request");
 const utils = require("../utils/index");
 const user_import_builder_1 = require("./user-import-builder");
@@ -85,16 +86,17 @@ class AuthResourceUrlBuilder {
     /**
      * The resource URL builder constructor.
      *
-     * @param projectId - The resource project ID.
+     * @param app - The app for this URL builder.
      * @param version - The endpoint API version.
+     * @param emulatorHost - Optional emulator host captured at init time.
      * @constructor
      */
-    constructor(app, version = 'v1') {
+    constructor(app, version = 'v1', emHost) {
         this.app = app;
         this.version = version;
-        if (useEmulator()) {
+        if (emHost) {
             this.urlFormat = utils.formatString(FIREBASE_AUTH_EMULATOR_BASE_URL_FORMAT, {
-                host: emulatorHost()
+                host: emHost
             });
         }
         else {
@@ -129,7 +131,7 @@ class AuthResourceUrlBuilder {
         return utils.findProjectId(this.app)
             .then((projectId) => {
             if (!validator.isNonEmptyString(projectId)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CREDENTIAL, 'Failed to determine project ID for Auth. Initialize the '
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_CREDENTIAL, 'Failed to determine project ID for Auth. Initialize the '
                     + 'SDK with service account credentials or set project ID as an app option. '
                     + 'Alternatively set the GOOGLE_CLOUD_PROJECT environment variable.');
             }
@@ -143,19 +145,20 @@ class TenantAwareAuthResourceUrlBuilder extends AuthResourceUrlBuilder {
     /**
      * The tenant aware resource URL builder constructor.
      *
-     * @param projectId - The resource project ID.
+     * @param app - The app for this URL builder.
      * @param version - The endpoint API version.
      * @param tenantId - The tenant ID.
+     * @param emHost - Optional emulator host captured at init time.
      * @constructor
      */
-    constructor(app, version, tenantId) {
-        super(app, version);
+    constructor(app, version, tenantId, emHost) {
+        super(app, version, emHost);
         this.app = app;
         this.version = version;
         this.tenantId = tenantId;
-        if (useEmulator()) {
+        if (emHost) {
             this.urlFormat = utils.formatString(FIREBASE_AUTH_EMULATOR_TENANT_URL_FORMAT, {
-                host: emulatorHost()
+                host: emHost
             });
         }
         else {
@@ -182,8 +185,12 @@ class TenantAwareAuthResourceUrlBuilder extends AuthResourceUrlBuilder {
  * when communicating with the Auth Emulator.
  */
 class AuthHttpClient extends api_request_1.AuthorizedHttpClient {
+    constructor(app, isEmulator) {
+        super(app);
+        this.isEmulator = isEmulator;
+    }
     getToken() {
-        if (useEmulator()) {
+        if (this.isEmulator) {
             return Promise.resolve('owner');
         }
         return super.getToken();
@@ -214,30 +221,30 @@ function validateAuthFactorInfo(request) {
     // Enrollment uid may or may not be specified for update operations.
     if (typeof request.mfaEnrollmentId !== 'undefined' &&
         !validator.isNonEmptyString(request.mfaEnrollmentId)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID, 'The second factor "uid" must be a valid non-empty string.');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID, 'The second factor "uid" must be a valid non-empty string.');
     }
     if (typeof request.displayName !== 'undefined' &&
         !validator.isString(request.displayName)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISPLAY_NAME, `The second factor "displayName" for "${authFactorInfoIdentifier}" must be a valid string.`);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_DISPLAY_NAME, `The second factor "displayName" for "${authFactorInfoIdentifier}" must be a valid string.`);
     }
     // enrolledAt must be a valid UTC date string.
     if (typeof request.enrolledAt !== 'undefined' &&
         !validator.isISODateString(request.enrolledAt)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ENROLLMENT_TIME, `The second factor "enrollmentTime" for "${authFactorInfoIdentifier}" must be a valid ` +
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ENROLLMENT_TIME, `The second factor "enrollmentTime" for "${authFactorInfoIdentifier}" must be a valid ` +
             'UTC date string.');
     }
     // Validate required fields depending on second factor type.
     if (typeof request.phoneInfo !== 'undefined') {
         // phoneNumber should be a string and a valid phone number.
         if (!validator.isPhoneNumber(request.phoneInfo)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHONE_NUMBER, `The second factor "phoneNumber" for "${authFactorInfoIdentifier}" must be a non-empty ` +
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PHONE_NUMBER, `The second factor "phoneNumber" for "${authFactorInfoIdentifier}" must be a non-empty ` +
                 'E.164 standard compliant identifier string.');
         }
     }
     else {
         // Invalid second factor. For example, a phone second factor may have been provided without
         // a phone number. A TOTP based second factor may require a secret key, etc.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ENROLLED_FACTORS, 'MFAInfo object provided is invalid.');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ENROLLED_FACTORS, 'MFAInfo object provided is invalid.');
     }
 }
 /**
@@ -262,27 +269,27 @@ function validateProviderUserInfo(request) {
         }
     }
     if (!validator.isNonEmptyString(request.providerId)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID);
     }
     if (typeof request.displayName !== 'undefined' &&
         typeof request.displayName !== 'string') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISPLAY_NAME, `The provider "displayName" for "${request.providerId}" must be a valid string.`);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_DISPLAY_NAME, `The provider "displayName" for "${request.providerId}" must be a valid string.`);
     }
     if (!validator.isNonEmptyString(request.rawId)) {
         // This is called localId on the backend but the developer specifies this as
         // uid externally. So the error message should use the client facing name.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID, `The provider "uid" for "${request.providerId}" must be a valid non-empty string.`);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID, `The provider "uid" for "${request.providerId}" must be a valid non-empty string.`);
     }
     // email should be a string and a valid email.
     if (typeof request.email !== 'undefined' && !validator.isEmail(request.email)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL, `The provider "email" for "${request.providerId}" must be a valid email string.`);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_EMAIL, `The provider "email" for "${request.providerId}" must be a valid email string.`);
     }
     // photoUrl should be a URL.
     if (typeof request.photoUrl !== 'undefined' &&
         !validator.isURL(request.photoUrl)) {
         // This is called photoUrl on the backend but the developer specifies this as
         // photoURL externally. So the error message should use the client facing name.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHOTO_URL, `The provider "photoURL" for "${request.providerId}" must be a valid URL string.`);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PHOTO_URL, `The provider "photoURL" for "${request.providerId}" must be a valid URL string.`);
     }
 }
 /**
@@ -333,79 +340,79 @@ function validateCreateEditRequest(request, writeOperationType) {
     }
     if (typeof request.tenantId !== 'undefined' &&
         !validator.isNonEmptyString(request.tenantId)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_TENANT_ID);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_TENANT_ID);
     }
     // For any invalid parameter, use the external key name in the error description.
     // displayName should be a string.
     if (typeof request.displayName !== 'undefined' &&
         !validator.isString(request.displayName)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISPLAY_NAME);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_DISPLAY_NAME);
     }
     if ((typeof request.localId !== 'undefined' || uploadAccountRequest) &&
         !validator.isUid(request.localId)) {
         // This is called localId on the backend but the developer specifies this as
         // uid externally. So the error message should use the client facing name.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID);
     }
     // email should be a string and a valid email.
     if (typeof request.email !== 'undefined' && !validator.isEmail(request.email)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_EMAIL);
     }
     // phoneNumber should be a string and a valid phone number.
     if (typeof request.phoneNumber !== 'undefined' &&
         !validator.isPhoneNumber(request.phoneNumber)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHONE_NUMBER);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PHONE_NUMBER);
     }
     // password should be a string and a minimum of 6 chars.
     if (typeof request.password !== 'undefined' &&
         !validator.isPassword(request.password)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PASSWORD);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PASSWORD);
     }
     // rawPassword should be a string and a minimum of 6 chars.
     if (typeof request.rawPassword !== 'undefined' &&
         !validator.isPassword(request.rawPassword)) {
         // This is called rawPassword on the backend but the developer specifies this as
         // password externally. So the error message should use the client facing name.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PASSWORD);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PASSWORD);
     }
     // emailVerified should be a boolean.
     if (typeof request.emailVerified !== 'undefined' &&
         typeof request.emailVerified !== 'boolean') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL_VERIFIED);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_EMAIL_VERIFIED);
     }
     // photoUrl should be a URL.
     if (typeof request.photoUrl !== 'undefined' &&
         !validator.isURL(request.photoUrl)) {
         // This is called photoUrl on the backend but the developer specifies this as
         // photoURL externally. So the error message should use the client facing name.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHOTO_URL);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PHOTO_URL);
     }
     // disabled should be a boolean.
     if (typeof request.disabled !== 'undefined' &&
         typeof request.disabled !== 'boolean') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISABLED_FIELD);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_DISABLED_FIELD);
     }
     // validSince should be a number.
     if (typeof request.validSince !== 'undefined' &&
         !validator.isNumber(request.validSince)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_TOKENS_VALID_AFTER_TIME);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_TOKENS_VALID_AFTER_TIME);
     }
     // createdAt should be a number.
     if (typeof request.createdAt !== 'undefined' &&
         !validator.isNumber(request.createdAt)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CREATION_TIME);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_CREATION_TIME);
     }
     // lastSignInAt should be a number.
     if (typeof request.lastLoginAt !== 'undefined' &&
         !validator.isNumber(request.lastLoginAt)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_LAST_SIGN_IN_TIME);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_LAST_SIGN_IN_TIME);
     }
     // disableUser should be a boolean.
     if (typeof request.disableUser !== 'undefined' &&
         typeof request.disableUser !== 'boolean') {
         // This is called disableUser on the backend but the developer specifies this as
         // disabled externally. So the error message should use the client facing name.
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_DISABLED_FIELD);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_DISABLED_FIELD);
     }
     // customAttributes should be stringified JSON with no blacklisted claims.
     // The payload should not exceed 1KB.
@@ -418,7 +425,7 @@ function validateCreateEditRequest(request, writeOperationType) {
             // JSON parsing error. This should never happen as we stringify the claims internally.
             // However, we still need to check since setAccountInfo via edit requests could pass
             // this field.
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_CLAIMS, error.message);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_CLAIMS, error.message);
         }
         const invalidClaims = [];
         // Check for any invalid claims.
@@ -429,29 +436,29 @@ function validateCreateEditRequest(request, writeOperationType) {
         });
         // Throw an error if an invalid claim is detected.
         if (invalidClaims.length > 0) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.FORBIDDEN_CLAIM, invalidClaims.length > 1 ?
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.FORBIDDEN_CLAIM, invalidClaims.length > 1 ?
                 `Developer claims "${invalidClaims.join('", "')}" are reserved and cannot be specified.` :
                 `Developer claim "${invalidClaims[0]}" is reserved and cannot be specified.`);
         }
         // Check claims payload does not exceed maxmimum size.
         if (request.customAttributes.length > MAX_CLAIMS_PAYLOAD_SIZE) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.CLAIMS_TOO_LARGE, `Developer claims payload should not exceed ${MAX_CLAIMS_PAYLOAD_SIZE} characters.`);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.CLAIMS_TOO_LARGE, `Developer claims payload should not exceed ${MAX_CLAIMS_PAYLOAD_SIZE} characters.`);
         }
     }
     // passwordHash has to be a base64 encoded string.
     if (typeof request.passwordHash !== 'undefined' &&
         !validator.isString(request.passwordHash)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PASSWORD_HASH);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PASSWORD_HASH);
     }
     // salt has to be a base64 encoded string.
     if (typeof request.salt !== 'undefined' &&
         !validator.isString(request.salt)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PASSWORD_SALT);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PASSWORD_SALT);
     }
     // providerUserInfo has to be an array of valid UserInfo requests.
     if (typeof request.providerUserInfo !== 'undefined' &&
         !validator.isArray(request.providerUserInfo)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_DATA);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_DATA);
     }
     else if (validator.isArray(request.providerUserInfo)) {
         request.providerUserInfo.forEach((providerUserInfoEntry) => {
@@ -474,7 +481,7 @@ function validateCreateEditRequest(request, writeOperationType) {
     }
     if (enrollments) {
         if (!validator.isArray(enrollments)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ENROLLED_FACTORS);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ENROLLED_FACTORS);
         }
         enrollments.forEach((authFactorInfoEntry) => {
             validateAuthFactorInfo(authFactorInfoEntry);
@@ -491,20 +498,23 @@ exports.FIREBASE_AUTH_CREATE_SESSION_COOKIE = new api_request_1.ApiSettings(':cr
     .setRequestValidator((request) => {
     // Validate the ID token is a non-empty string.
     if (!validator.isNonEmptyString(request.idToken)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ID_TOKEN);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ID_TOKEN);
     }
     // Validate the custom session cookie duration.
     if (!validator.isNumber(request.validDuration) ||
         request.validDuration < MIN_SESSION_COOKIE_DURATION_SECS ||
         request.validDuration > MAX_SESSION_COOKIE_DURATION_SECS) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_SESSION_COOKIE_DURATION);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_SESSION_COOKIE_DURATION);
     }
 })
     // Set response validator.
     .setResponseValidator((response) => {
     // Response should always contain the session cookie.
-    if (!validator.isNonEmptyString(response.sessionCookie)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR);
+    if (!validator.isNonEmptyString(response.data?.sessionCookie)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -524,13 +534,13 @@ exports.FIREBASE_AUTH_DOWNLOAD_ACCOUNT = new api_request_1.ApiSettings('/account
     // Validate next page token.
     if (typeof request.nextPageToken !== 'undefined' &&
         !validator.isNonEmptyString(request.nextPageToken)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PAGE_TOKEN);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PAGE_TOKEN);
     }
     // Validate max results.
     if (!validator.isNumber(request.maxResults) ||
         request.maxResults <= 0 ||
         request.maxResults > MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
             `${MAX_DOWNLOAD_ACCOUNT_PAGE_SIZE}.`);
     }
 });
@@ -543,13 +553,17 @@ exports.FIREBASE_AUTH_GET_ACCOUNT_INFO = new api_request_1.ApiSettings('/account
     // Set request validator.
     .setRequestValidator((request) => {
     if (!request.localId && !request.email && !request.phoneNumber && !request.federatedUserId) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
     }
 })
     // Set response validator.
     .setResponseValidator((response) => {
-    if (!response.users || !response.users.length) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.USER_NOT_FOUND);
+    const data = response.data;
+    if (!data.users || !data.users.length) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.USER_NOT_FOUND,
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -562,7 +576,7 @@ exports.FIREBASE_AUTH_GET_ACCOUNTS_INFO = new api_request_1.ApiSettings('/accoun
     // Set request validator.
     .setRequestValidator((request) => {
     if (!request.localId && !request.email && !request.phoneNumber && !request.federatedUserId) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
     }
 });
 /**
@@ -574,7 +588,7 @@ exports.FIREBASE_AUTH_DELETE_ACCOUNT = new api_request_1.ApiSettings('/accounts:
     // Set request validator.
     .setRequestValidator((request) => {
     if (!request.localId) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
     }
 });
 /**
@@ -583,20 +597,29 @@ exports.FIREBASE_AUTH_DELETE_ACCOUNT = new api_request_1.ApiSettings('/accounts:
 exports.FIREBASE_AUTH_BATCH_DELETE_ACCOUNTS = new api_request_1.ApiSettings('/accounts:batchDelete', 'POST')
     .setRequestValidator((request) => {
     if (!request.localIds) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifiers');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifiers');
     }
     if (typeof request.force === 'undefined' || request.force !== true) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing force=true field');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing force=true field');
     }
 })
     .setResponseValidator((response) => {
-    const errors = response.errors || [];
+    const data = response.data;
+    const errors = data.errors || [];
     errors.forEach((batchDeleteErrorInfo) => {
         if (typeof batchDeleteErrorInfo.index === 'undefined') {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server BatchDeleteAccountResponse is missing an errors.index field');
+            throw new error_1.FirebaseAuthError({
+                ...error_1.authClientErrorCode.INTERNAL_ERROR,
+                message: 'INTERNAL ASSERT FAILED: Server BatchDeleteAccountResponse is missing an errors.index field',
+                httpResponse: (0, error_2.toHttpResponse)(response),
+            });
         }
         if (!batchDeleteErrorInfo.localId) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server BatchDeleteAccountResponse is missing an errors.localId field');
+            throw new error_1.FirebaseAuthError({
+                ...error_1.authClientErrorCode.INTERNAL_ERROR,
+                message: 'INTERNAL ASSERT FAILED: Server BatchDeleteAccountResponse is missing an errors.localId field',
+                httpResponse: (0, error_2.toHttpResponse)(response),
+            });
         }
         // Allow the (error) message to be missing/undef.
     });
@@ -611,19 +634,23 @@ exports.FIREBASE_AUTH_SET_ACCOUNT_INFO = new api_request_1.ApiSettings('/account
     .setRequestValidator((request) => {
     // localId is a required parameter.
     if (typeof request.localId === 'undefined') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Server request is missing user identifier');
     }
     // Throw error when tenantId is passed in POST body.
     if (typeof request.tenantId !== 'undefined') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"tenantId" is an invalid "UpdateRequest" property.');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, '"tenantId" is an invalid "UpdateRequest" property.');
     }
     validateCreateEditRequest(request, WriteOperationType.Update);
 })
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // If the localId is not returned, then the request failed.
-    if (!response.localId) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.USER_NOT_FOUND);
+    if (!data?.localId) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.USER_NOT_FOUND,
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -637,43 +664,53 @@ exports.FIREBASE_AUTH_SIGN_UP_NEW_USER = new api_request_1.ApiSettings('/account
     .setRequestValidator((request) => {
     // signupNewUser does not support customAttributes.
     if (typeof request.customAttributes !== 'undefined') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"customAttributes" cannot be set when creating a new user.');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, '"customAttributes" cannot be set when creating a new user.');
     }
     // signupNewUser does not support validSince.
     if (typeof request.validSince !== 'undefined') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"validSince" cannot be set when creating a new user.');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, '"validSince" cannot be set when creating a new user.');
     }
     // Throw error when tenantId is passed in POST body.
     if (typeof request.tenantId !== 'undefined') {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"tenantId" is an invalid "CreateRequest" property.');
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, '"tenantId" is an invalid "CreateRequest" property.');
     }
     validateCreateEditRequest(request, WriteOperationType.Create);
 })
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // If the localId is not returned, then the request failed.
-    if (!response.localId) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new user');
+    if (!data?.localId) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to create new user',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 const FIREBASE_AUTH_GET_OOB_CODE = new api_request_1.ApiSettings('/accounts:sendOobCode', 'POST')
     // Set request validator.
     .setRequestValidator((request) => {
     if (!validator.isEmail(request.email)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_EMAIL);
     }
     if (typeof request.newEmail !== 'undefined' && !validator.isEmail(request.newEmail)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_NEW_EMAIL);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_NEW_EMAIL);
     }
     if (exports.EMAIL_ACTION_REQUEST_TYPES.indexOf(request.requestType) === -1) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, `"${request.requestType}" is not a supported email action request type.`);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, `"${request.requestType}" is not a supported email action request type.`);
     }
 })
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // If the oobLink is not returned, then the request failed.
-    if (!response.oobLink) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create the email action link');
+    if (!data?.oobLink) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to create the email action link',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -684,9 +721,14 @@ const FIREBASE_AUTH_GET_OOB_CODE = new api_request_1.ApiSettings('/accounts:send
 const GET_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{providerId}', 'GET')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain the OIDC provider resource name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to get OIDC configuration');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to get OIDC configuration',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -703,9 +745,14 @@ const DELETE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/
 const CREATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs?oauthIdpConfigId={providerId}', 'POST')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain the OIDC provider resource name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new OIDC configuration');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to create new OIDC configuration',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -716,9 +763,14 @@ const CREATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs?
 const UPDATE_OAUTH_IDP_CONFIG = new api_request_1.ApiSettings('/oauthIdpConfigs/{providerId}?updateMask={updateMask}', 'PATCH')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain the configuration resource name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update OIDC configuration');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to update OIDC configuration',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -732,13 +784,13 @@ const LIST_OAUTH_IDP_CONFIGS = new api_request_1.ApiSettings('/oauthIdpConfigs',
     // Validate next page token.
     if (typeof request.pageToken !== 'undefined' &&
         !validator.isNonEmptyString(request.pageToken)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PAGE_TOKEN);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PAGE_TOKEN);
     }
     // Validate max results.
     if (!validator.isNumber(request.pageSize) ||
         request.pageSize <= 0 ||
         request.pageSize > MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
             `${MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE}.`);
     }
 });
@@ -750,9 +802,14 @@ const LIST_OAUTH_IDP_CONFIGS = new api_request_1.ApiSettings('/oauthIdpConfigs',
 const GET_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs/{providerId}', 'GET')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain the SAML provider resource name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to get SAML configuration');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to get SAML configuration',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -769,9 +826,14 @@ const DELETE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlCo
 const CREATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs?inboundSamlConfigId={providerId}', 'POST')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain the SAML provider resource name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new SAML configuration');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to create new SAML configuration',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -782,9 +844,14 @@ const CREATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlCo
 const UPDATE_INBOUND_SAML_CONFIG = new api_request_1.ApiSettings('/inboundSamlConfigs/{providerId}?updateMask={updateMask}', 'PATCH')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain the configuration resource name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update SAML configuration');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to update SAML configuration',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -798,13 +865,13 @@ const LIST_INBOUND_SAML_CONFIGS = new api_request_1.ApiSettings('/inboundSamlCon
     // Validate next page token.
     if (typeof request.pageToken !== 'undefined' &&
         !validator.isNonEmptyString(request.pageToken)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PAGE_TOKEN);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PAGE_TOKEN);
     }
     // Validate max results.
     if (!validator.isNumber(request.pageSize) ||
         request.pageSize <= 0 ||
         request.pageSize > MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive integer that does not exceed ' +
             `${MAX_LIST_PROVIDER_CONFIGURATION_PAGE_SIZE}.`);
     }
 });
@@ -823,31 +890,31 @@ class AbstractAuthRequestHandler {
     }
     static addUidToRequest(id, request) {
         if (!validator.isUid(id.uid)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID);
         }
         request.localId ? request.localId.push(id.uid) : request.localId = [id.uid];
         return request;
     }
     static addEmailToRequest(id, request) {
         if (!validator.isEmail(id.email)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_EMAIL);
         }
         request.email ? request.email.push(id.email) : request.email = [id.email];
         return request;
     }
     static addPhoneToRequest(id, request) {
         if (!validator.isPhoneNumber(id.phoneNumber)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHONE_NUMBER);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PHONE_NUMBER);
         }
         request.phoneNumber ? request.phoneNumber.push(id.phoneNumber) : request.phoneNumber = [id.phoneNumber];
         return request;
     }
     static addProviderToRequest(id, request) {
         if (!validator.isNonEmptyString(id.providerId)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID);
         }
         if (!validator.isNonEmptyString(id.providerUid)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_UID);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_UID);
         }
         const federatedUserId = {
             providerId: id.providerId,
@@ -860,14 +927,18 @@ class AbstractAuthRequestHandler {
     }
     /**
      * @param app - The app used to fetch access tokens to sign API requests.
+     * @param emHost - Optional emulator host override. When provided (including
+     *     null for explicitly no emulator), this value is used instead of reading
+     *     from the FIREBASE_AUTH_EMULATOR_HOST environment variable.
      * @constructor
      */
-    constructor(app) {
+    constructor(app, emHost) {
         this.app = app;
         if (typeof app !== 'object' || app === null || !('options' in app)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'First argument passed to admin.auth() must be a valid Firebase app instance.');
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'First argument passed to admin.auth() must be a valid Firebase app instance.');
         }
-        this.httpClient = new AuthHttpClient(app);
+        this.emulatorHostValue = emHost !== undefined ? (emHost || undefined) : emulatorHost();
+        this.httpClient = new AuthHttpClient(app, !!this.emulatorHostValue);
     }
     /**
      * Creates a new Firebase session cookie with the specified duration that can be used for
@@ -896,7 +967,7 @@ class AbstractAuthRequestHandler {
      */
     getAccountInfoByUid(uid) {
         if (!validator.isUid(uid)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID));
         }
         const request = {
             localId: [uid],
@@ -911,7 +982,7 @@ class AbstractAuthRequestHandler {
      */
     getAccountInfoByEmail(email) {
         if (!validator.isEmail(email)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_EMAIL));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_EMAIL));
         }
         const request = {
             email: [email],
@@ -926,7 +997,7 @@ class AbstractAuthRequestHandler {
      */
     getAccountInfoByPhoneNumber(phoneNumber) {
         if (!validator.isPhoneNumber(phoneNumber)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PHONE_NUMBER));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PHONE_NUMBER));
         }
         const request = {
             phoneNumber: [phoneNumber],
@@ -935,7 +1006,7 @@ class AbstractAuthRequestHandler {
     }
     getAccountInfoByFederatedUid(providerId, rawId) {
         if (!validator.isNonEmptyString(providerId) || !validator.isNonEmptyString(rawId)) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID);
         }
         const request = {
             federatedUserId: [{
@@ -958,7 +1029,7 @@ class AbstractAuthRequestHandler {
             return Promise.resolve({ users: [] });
         }
         else if (identifiers.length > MAX_GET_ACCOUNTS_BATCH_SIZE) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, '`identifiers` parameter must have <= ' + MAX_GET_ACCOUNTS_BATCH_SIZE + ' entries.');
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, '`identifiers` parameter must have <= ' + MAX_GET_ACCOUNTS_BATCH_SIZE + ' entries.');
         }
         let request = {};
         for (const id of identifiers) {
@@ -975,7 +1046,7 @@ class AbstractAuthRequestHandler {
                 request = AbstractAuthRequestHandler.addProviderToRequest(id, request);
             }
             else {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Unrecognized identifier: ' + id);
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'Unrecognized identifier: ' + id);
             }
         }
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), exports.FIREBASE_AUTH_GET_ACCOUNTS_INFO, request);
@@ -1037,7 +1108,7 @@ class AbstractAuthRequestHandler {
         const request = userImportBuilder.buildRequest();
         // Fail quickly if more users than allowed are to be imported.
         if (validator.isArray(users) && users.length > MAX_UPLOAD_ACCOUNT_BATCH_SIZE) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, `A maximum of ${MAX_UPLOAD_ACCOUNT_BATCH_SIZE} users can be imported at once.`);
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, `A maximum of ${MAX_UPLOAD_ACCOUNT_BATCH_SIZE} users can be imported at once.`);
         }
         // If no remaining user in request after client side processing, there is no need
         // to send the request to the server.
@@ -1060,7 +1131,7 @@ class AbstractAuthRequestHandler {
      */
     deleteAccount(uid) {
         if (!validator.isUid(uid)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID));
         }
         const request = {
             localId: uid,
@@ -1072,7 +1143,7 @@ class AbstractAuthRequestHandler {
             return Promise.resolve({});
         }
         else if (uids.length > MAX_DELETE_ACCOUNTS_BATCH_SIZE) {
-            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, '`uids` parameter must have <= ' + MAX_DELETE_ACCOUNTS_BATCH_SIZE + ' entries.');
+            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.MAXIMUM_USER_COUNT_EXCEEDED, '`uids` parameter must have <= ' + MAX_DELETE_ACCOUNTS_BATCH_SIZE + ' entries.');
         }
         const request = {
             localIds: [],
@@ -1080,7 +1151,7 @@ class AbstractAuthRequestHandler {
         };
         uids.forEach((uid) => {
             if (!validator.isUid(uid)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID);
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID);
             }
             request.localIds.push(uid);
         });
@@ -1097,10 +1168,10 @@ class AbstractAuthRequestHandler {
     setCustomUserClaims(uid, customUserClaims) {
         // Validate user UID.
         if (!validator.isUid(uid)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID));
         }
         else if (!validator.isObject(customUserClaims)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'CustomUserClaims argument must be an object or null.'));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'CustomUserClaims argument must be an object or null.'));
         }
         // Delete operation. Replace null with an empty object.
         if (customUserClaims === null) {
@@ -1126,28 +1197,28 @@ class AbstractAuthRequestHandler {
      */
     updateExistingAccount(uid, properties) {
         if (!validator.isUid(uid)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID));
         }
         else if (!validator.isNonNullObject(properties)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Properties argument must be a non-null object.'));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'Properties argument must be a non-null object.'));
         }
         else if (validator.isNonNullObject(properties.providerToLink)) {
             // TODO(rsgowman): These checks overlap somewhat with
             // validateProviderUserInfo. It may be possible to refactor a bit.
             if (!validator.isNonEmptyString(properties.providerToLink.providerId)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'providerToLink.providerId of properties argument must be a non-empty string.');
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'providerToLink.providerId of properties argument must be a non-empty string.');
             }
             if (!validator.isNonEmptyString(properties.providerToLink.uid)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'providerToLink.uid of properties argument must be a non-empty string.');
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'providerToLink.uid of properties argument must be a non-empty string.');
             }
         }
         else if (typeof properties.providersToUnlink !== 'undefined') {
             if (!validator.isArray(properties.providersToUnlink)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'providersToUnlink of properties argument must be an array of strings.');
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'providersToUnlink of properties argument must be an array of strings.');
             }
             properties.providersToUnlink.forEach((providerId) => {
                 if (!validator.isNonEmptyString(providerId)) {
-                    throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'providersToUnlink of properties argument must be an array of strings.');
+                    throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'providersToUnlink of properties argument must be an array of strings.');
                 }
             });
         }
@@ -1253,7 +1324,7 @@ class AbstractAuthRequestHandler {
     revokeRefreshTokens(uid) {
         // Validate user UID.
         if (!validator.isUid(uid)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_UID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_UID));
         }
         const request = {
             localId: uid,
@@ -1274,7 +1345,7 @@ class AbstractAuthRequestHandler {
      */
     createNewAccount(properties) {
         if (!validator.isNonNullObject(properties)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Properties argument must be a non-null object.'));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'Properties argument must be a non-null object.'));
         }
         const request = (0, deep_copy_1.deepCopy)(properties);
         // Rewrite photoURL to photoUrl.
@@ -1296,10 +1367,10 @@ class AbstractAuthRequestHandler {
                         // Enrollment time and uid are not allowed for signupNewUser endpoint.
                         // They will automatically be provisioned server side.
                         if ('enrollmentTime' in multiFactorInfo) {
-                            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"enrollmentTime" is not supported when adding second factors via "createUser()"');
+                            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, '"enrollmentTime" is not supported when adding second factors via "createUser()"');
                         }
                         else if ('uid' in multiFactorInfo) {
-                            throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, '"uid" is not supported when adding second factors via "createUser()"');
+                            throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, '"uid" is not supported when adding second factors via "createUser()"');
                         }
                         mfaInfo.push((0, user_import_builder_1.convertMultiFactorInfoToServerFormat)(multiFactorInfo));
                     });
@@ -1341,7 +1412,7 @@ class AbstractAuthRequestHandler {
         // ActionCodeSettings required for email link sign-in to determine the url where the sign-in will
         // be completed.
         if (typeof actionCodeSettings === 'undefined' && requestType === 'EMAIL_SIGNIN') {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, "`actionCodeSettings` is required when `requestType` === 'EMAIL_SIGNIN'"));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, "`actionCodeSettings` is required when `requestType` === 'EMAIL_SIGNIN'"));
         }
         if (typeof actionCodeSettings !== 'undefined' || requestType === 'EMAIL_SIGNIN') {
             try {
@@ -1353,7 +1424,7 @@ class AbstractAuthRequestHandler {
             }
         }
         if (requestType === 'VERIFY_AND_CHANGE_EMAIL' && typeof newEmail === 'undefined') {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, "`newEmail` is required when `requestType` === 'VERIFY_AND_CHANGE_EMAIL'"));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, "`newEmail` is required when `requestType` === 'VERIFY_AND_CHANGE_EMAIL'"));
         }
         return this.invokeRequestHandler(this.getAuthUrlBuilder(), FIREBASE_AUTH_GET_OOB_CODE, request)
             .then((response) => {
@@ -1369,7 +1440,7 @@ class AbstractAuthRequestHandler {
      */
     getOAuthIdpConfig(providerId) {
         if (!auth_config_1.OIDCConfig.isProviderId(providerId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID));
         }
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), GET_OAUTH_IDP_CONFIG, {}, { providerId });
     }
@@ -1411,7 +1482,7 @@ class AbstractAuthRequestHandler {
      */
     deleteOAuthIdpConfig(providerId) {
         if (!auth_config_1.OIDCConfig.isProviderId(providerId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID));
         }
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), DELETE_OAUTH_IDP_CONFIG, {}, { providerId })
             .then(() => {
@@ -1438,7 +1509,7 @@ class AbstractAuthRequestHandler {
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), CREATE_OAUTH_IDP_CONFIG, request, { providerId })
             .then((response) => {
             if (!auth_config_1.OIDCConfig.getProviderIdFromResourceName(response.name)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new OIDC provider configuration');
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new OIDC provider configuration');
             }
             return response;
         });
@@ -1453,7 +1524,7 @@ class AbstractAuthRequestHandler {
      */
     updateOAuthIdpConfig(providerId, options) {
         if (!auth_config_1.OIDCConfig.isProviderId(providerId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID));
         }
         // Construct backend request.
         let request;
@@ -1467,7 +1538,7 @@ class AbstractAuthRequestHandler {
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), UPDATE_OAUTH_IDP_CONFIG, request, { providerId, updateMask: updateMask.join(',') })
             .then((response) => {
             if (!auth_config_1.OIDCConfig.getProviderIdFromResourceName(response.name)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update OIDC provider configuration');
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update OIDC provider configuration');
             }
             return response;
         });
@@ -1480,7 +1551,7 @@ class AbstractAuthRequestHandler {
      */
     getInboundSamlConfig(providerId) {
         if (!auth_config_1.SAMLConfig.isProviderId(providerId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID));
         }
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), GET_INBOUND_SAML_CONFIG, {}, { providerId });
     }
@@ -1522,7 +1593,7 @@ class AbstractAuthRequestHandler {
      */
     deleteInboundSamlConfig(providerId) {
         if (!auth_config_1.SAMLConfig.isProviderId(providerId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID));
         }
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), DELETE_INBOUND_SAML_CONFIG, {}, { providerId })
             .then(() => {
@@ -1549,7 +1620,7 @@ class AbstractAuthRequestHandler {
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), CREATE_INBOUND_SAML_CONFIG, request, { providerId })
             .then((response) => {
             if (!auth_config_1.SAMLConfig.getProviderIdFromResourceName(response.name)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new SAML provider configuration');
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new SAML provider configuration');
             }
             return response;
         });
@@ -1564,7 +1635,7 @@ class AbstractAuthRequestHandler {
      */
     updateInboundSamlConfig(providerId, options) {
         if (!auth_config_1.SAMLConfig.isProviderId(providerId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PROVIDER_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PROVIDER_ID));
         }
         // Construct backend request.
         let request;
@@ -1578,7 +1649,7 @@ class AbstractAuthRequestHandler {
         return this.invokeRequestHandler(this.getProjectConfigUrlBuilder(), UPDATE_INBOUND_SAML_CONFIG, request, { providerId, updateMask: updateMask.join(',') })
             .then((response) => {
             if (!auth_config_1.SAMLConfig.getProviderIdFromResourceName(response.name)) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update SAML provider configuration');
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update SAML provider configuration');
             }
             return response;
         });
@@ -1611,22 +1682,26 @@ class AbstractAuthRequestHandler {
             return this.httpClient.send(req);
         })
             .then((response) => {
-            // Validate response.
             const responseValidator = apiSettings.getResponseValidator();
-            responseValidator(response.data);
-            // Return entire response.
+            if (responseValidator) {
+                responseValidator(response);
+            }
+            // Return entire response data.
             return response.data;
         })
             .catch((err) => {
             if (err instanceof api_request_1.RequestResponseError) {
-                const error = err.response.data;
-                const errorCode = AbstractAuthRequestHandler.getErrorCode(error);
+                const errorCode = AbstractAuthRequestHandler.getErrorCode(err.response.data);
                 if (!errorCode) {
-                    throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'Error returned from server: ' + error + '. Additionally, an ' +
-                        'internal error occurred while attempting to extract the ' +
-                        'errorcode from the error.');
+                    // Fallback for unexpected server error responses without a parseable error code.
+                    throw new error_1.FirebaseAuthError({
+                        ...error_1.authClientErrorCode.INTERNAL_ERROR,
+                        message: 'An internal error occurred while attempting to extract the errorcode from the error.',
+                        cause: err,
+                        httpResponse: (0, error_2.toHttpResponse)(err.response),
+                    });
                 }
-                throw error_1.FirebaseAuthError.fromServerError(errorCode, /* message */ undefined, error);
+                throw error_1.FirebaseAuthError.fromServerError(errorCode, /* message */ undefined, err);
             }
             throw err;
         });
@@ -1654,26 +1729,51 @@ exports.AbstractAuthRequestHandler = AbstractAuthRequestHandler;
 /** Instantiates the getConfig endpoint settings. */
 const GET_PROJECT_CONFIG = new api_request_1.ApiSettings('/config', 'GET')
     .setResponseValidator((response) => {
+    // The Auth emulator does not populate the resource `name` field on the
+    // project config response, so skip the assertion when running against it.
+    if (useEmulator()) {
+        return;
+    }
+    const data = response.data;
     // Response should always contain at least the config name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to get project config');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to get project config',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /** Instantiates the updateConfig endpoint settings. */
 const UPDATE_PROJECT_CONFIG = new api_request_1.ApiSettings('/config?updateMask={updateMask}', 'PATCH')
     .setResponseValidator((response) => {
+    // The Auth emulator does not populate the resource `name` field on the
+    // project config response, so skip the assertion when running against it.
+    if (useEmulator()) {
+        return;
+    }
+    const data = response.data;
     // Response should always contain at least the config name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update project config');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to update project config',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /** Instantiates the getTenant endpoint settings. */
 const GET_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}', 'GET')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain at least the tenant name.
-    if (!validator.isNonEmptyString(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to get tenant');
+    if (!validator.isNonEmptyString(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to get tenant',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /** Instantiates the deleteTenant endpoint settings. */
@@ -1682,10 +1782,15 @@ const DELETE_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}', 'DELE
 const UPDATE_TENANT = new api_request_1.ApiSettings('/tenants/{tenantId}?updateMask={updateMask}', 'PATCH')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain at least the tenant name.
-    if (!validator.isNonEmptyString(response.name) ||
-        !tenant_1.Tenant.getTenantIdFromResourceName(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to update tenant');
+    if (!validator.isNonEmptyString(data?.name) ||
+        !tenant_1.Tenant.getTenantIdFromResourceName(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to update tenant',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /** Instantiates the listTenants endpoint settings. */
@@ -1695,13 +1800,13 @@ const LIST_TENANTS = new api_request_1.ApiSettings('/tenants', 'GET')
     // Validate next page token.
     if (typeof request.pageToken !== 'undefined' &&
         !validator.isNonEmptyString(request.pageToken)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_PAGE_TOKEN);
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_PAGE_TOKEN);
     }
     // Validate max results.
     if (!validator.isNumber(request.pageSize) ||
         request.pageSize <= 0 ||
         request.pageSize > MAX_LIST_TENANT_PAGE_SIZE) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive non-zero number that does not exceed ' +
+        throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_ARGUMENT, 'Required "maxResults" must be a positive non-zero number that does not exceed ' +
             `the allowed ${MAX_LIST_TENANT_PAGE_SIZE}.`);
     }
 });
@@ -1709,10 +1814,15 @@ const LIST_TENANTS = new api_request_1.ApiSettings('/tenants', 'GET')
 const CREATE_TENANT = new api_request_1.ApiSettings('/tenants', 'POST')
     // Set response validator.
     .setResponseValidator((response) => {
+    const data = response.data;
     // Response should always contain at least the tenant name.
-    if (!validator.isNonEmptyString(response.name) ||
-        !tenant_1.Tenant.getTenantIdFromResourceName(response.name)) {
-        throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INTERNAL_ERROR, 'INTERNAL ASSERT FAILED: Unable to create new tenant');
+    if (!validator.isNonEmptyString(data?.name) ||
+        !tenant_1.Tenant.getTenantIdFromResourceName(data?.name)) {
+        throw new error_1.FirebaseAuthError({
+            ...error_1.authClientErrorCode.INTERNAL_ERROR,
+            message: 'INTERNAL ASSERT FAILED: Unable to create tenant',
+            httpResponse: (0, error_2.toHttpResponse)(response),
+        });
     }
 });
 /**
@@ -1729,19 +1839,19 @@ class AuthRequestHandler extends AbstractAuthRequestHandler {
      */
     constructor(app) {
         super(app);
-        this.authResourceUrlBuilder = new AuthResourceUrlBuilder(app, 'v2');
+        this.authResourceUrlBuilder = new AuthResourceUrlBuilder(app, 'v2', this.emulatorHostValue);
     }
     /**
      * @returns A new Auth user management resource URL builder instance.
      */
     newAuthUrlBuilder() {
-        return new AuthResourceUrlBuilder(this.app, 'v1');
+        return new AuthResourceUrlBuilder(this.app, 'v1', this.emulatorHostValue);
     }
     /**
      * @returns A new project config resource URL builder instance.
      */
     newProjectConfigUrlBuilder() {
-        return new AuthResourceUrlBuilder(this.app, 'v2');
+        return new AuthResourceUrlBuilder(this.app, 'v2', this.emulatorHostValue);
     }
     /**
      * Get the current project's config
@@ -1778,7 +1888,7 @@ class AuthRequestHandler extends AbstractAuthRequestHandler {
      */
     getTenant(tenantId) {
         if (!validator.isNonEmptyString(tenantId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_TENANT_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_TENANT_ID));
         }
         return this.invokeRequestHandler(this.authResourceUrlBuilder, GET_TENANT, {}, { tenantId })
             .then((response) => {
@@ -1824,7 +1934,7 @@ class AuthRequestHandler extends AbstractAuthRequestHandler {
      */
     deleteTenant(tenantId) {
         if (!validator.isNonEmptyString(tenantId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_TENANT_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_TENANT_ID));
         }
         return this.invokeRequestHandler(this.authResourceUrlBuilder, DELETE_TENANT, undefined, { tenantId })
             .then(() => {
@@ -1859,7 +1969,7 @@ class AuthRequestHandler extends AbstractAuthRequestHandler {
      */
     updateTenant(tenantId, tenantOptions) {
         if (!validator.isNonEmptyString(tenantId)) {
-            return Promise.reject(new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.INVALID_TENANT_ID));
+            return Promise.reject(new error_1.FirebaseAuthError(error_1.authClientErrorCode.INVALID_TENANT_ID));
         }
         try {
             // Construct backend request.
@@ -1890,23 +2000,24 @@ class TenantAwareAuthRequestHandler extends AbstractAuthRequestHandler {
      *
      * @param app - The app used to fetch access tokens to sign API requests.
      * @param tenantId - The request handler's tenant ID.
+     * @param emHost - Optional emulator host override captured at init time.
      * @constructor
      */
-    constructor(app, tenantId) {
-        super(app);
+    constructor(app, tenantId, emHost) {
+        super(app, emHost);
         this.tenantId = tenantId;
     }
     /**
      * @returns A new Auth user management resource URL builder instance.
      */
     newAuthUrlBuilder() {
-        return new TenantAwareAuthResourceUrlBuilder(this.app, 'v1', this.tenantId);
+        return new TenantAwareAuthResourceUrlBuilder(this.app, 'v1', this.tenantId, this.emulatorHostValue);
     }
     /**
      * @returns A new project config resource URL builder instance.
      */
     newProjectConfigUrlBuilder() {
-        return new TenantAwareAuthResourceUrlBuilder(this.app, 'v2', this.tenantId);
+        return new TenantAwareAuthResourceUrlBuilder(this.app, 'v2', this.tenantId, this.emulatorHostValue);
     }
     /**
      * Imports the list of users provided to Firebase Auth. This is useful when
@@ -1929,7 +2040,7 @@ class TenantAwareAuthRequestHandler extends AbstractAuthRequestHandler {
         users.forEach((user, index) => {
             if (validator.isNonEmptyString(user.tenantId) &&
                 user.tenantId !== this.tenantId) {
-                throw new error_1.FirebaseAuthError(error_1.AuthClientErrorCode.MISMATCHING_TENANT_ID, `UserRecord of index "${index}" has mismatching tenant ID "${user.tenantId}"`);
+                throw new error_1.FirebaseAuthError(error_1.authClientErrorCode.MISMATCHING_TENANT_ID, `UserRecord of index "${index}" has mismatching tenant ID "${user.tenantId}"`);
             }
         });
         return super.uploadAccount(users, options);