firebase-functions 3.17.2 → 3.18.0

package/lib/cloud-functions.d.ts

@@ -199,6 +199,7 @@ export interface TriggerAnnotated {
         vpcConnectorEgressSettings?: string;
         serviceAccountEmail?: string;
         ingressSettings?: string;
+        secrets?: string[];
     };
 }
 /**

package/lib/cloud-functions.js

@@ -252,7 +252,7 @@ function _detectAuthType(event) {
 /** @hidden */
 function optionsToTrigger(options) {
     const trigger = {};
-    (0, encoding_1.copyIfPresent)(trigger, options, 'regions', 'schedule', 'minInstances', 'maxInstances', 'ingressSettings', 'vpcConnectorEgressSettings', 'vpcConnector', 'labels');
+    (0, encoding_1.copyIfPresent)(trigger, options, 'regions', 'schedule', 'minInstances', 'maxInstances', 'ingressSettings', 'vpcConnectorEgressSettings', 'vpcConnector', 'labels', 'secrets');
     (0, encoding_1.convertIfPresent)(trigger, options, 'failurePolicy', 'failurePolicy', (policy) => {
         if (policy === false) {
             return undefined;
@@ -286,6 +286,7 @@ function optionsToEndpoint(options) {
     (0, encoding_1.copyIfPresent)(endpoint, options, 'minInstances', 'maxInstances', 'ingressSettings', 'labels', 'timeoutSeconds');
     (0, encoding_1.convertIfPresent)(endpoint, options, 'region', 'regions');
     (0, encoding_1.convertIfPresent)(endpoint, options, 'serviceAccountEmail', 'serviceAccount', (sa) => sa);
+    (0, encoding_1.convertIfPresent)(endpoint, options, 'secretEnvironmentVariables', 'secrets', (secrets) => secrets.map((secret) => ({ secret, key: secret })));
     if (options === null || options === void 0 ? void 0 : options.vpcConnector) {
         endpoint.vpc = { connector: options.vpcConnector };
         (0, encoding_1.convertIfPresent)(endpoint.vpc, options, 'egressSettings', 'vpcConnectorEgressSettings');

package/lib/function-builder.js

@@ -125,6 +125,13 @@ function assertRuntimeOptionsValid(runtimeOptions) {
             }
         }
     }
+    if (runtimeOptions.secrets !== undefined) {
+        const invalidSecrets = runtimeOptions.secrets.filter((s) => !/^[A-Za-z\d\-_]+$/.test(s));
+        if (invalidSecrets.length > 0) {
+            throw new Error(`Invalid secrets: ${invalidSecrets.join(',')}. ` +
+                'Secret must be configured using the resource id (e.g. API_KEY)');
+        }
+    }
     return true;
 }
 /**

package/lib/function-configuration.d.ts

@@ -99,6 +99,7 @@ export interface RuntimeOptions {
      */
     invoker?: 'public' | 'private' | string | string[];
     allowInvalidAppCheckToken?: boolean;
+    secrets?: string[];
 }
 export interface DeploymentOptions extends RuntimeOptions {
     regions?: Array<typeof SUPPORTED_REGIONS[number] | string>;

package/lib/runtime/manifest.d.ts

@@ -18,6 +18,10 @@ export interface ManifestEndpoint {
     labels?: Record<string, string>;
     ingressSettings?: string;
     environmentVariables?: Record<string, string>;
+    secretEnvironmentVariables?: {
+        key: string;
+        secret?: string;
+    }[];
     httpsTrigger?: {
         invoker?: string[];
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "firebase-functions",
-  "version": "3.17.2",
+  "version": "3.18.0",
   "description": "Firebase SDK for Cloud Functions",
   "keywords": [
     "firebase",