firebase-functions 3.21.1 → 3.23.0

package/lib/common/providers/identity.js

@@ -110,7 +110,11 @@ function userRecordConstructor(wireData) {
         };
         json.metadata = record.metadata.toJSON();
         json.customClaims = JSON.parse(JSON.stringify(record.customClaims));
-        json.providerData = record.providerData.map((entry) => entry.toJSON());
+        json.providerData = record.providerData.map((entry) => {
+            const newEntry = { ...entry };
+            newEntry.toJSON = () => entry;
+            return newEntry;
+        });
         return json;
     };
     return record;
@@ -397,9 +401,6 @@ function getUpdateMask(authResponse) {
     }
     const updateMask = [];
     for (const key in authResponse) {
-        if (key === 'customClaims' || key === 'sessionClaims') {
-            continue;
-        }
         if (authResponse.hasOwnProperty(key) &&
             typeof authResponse[key] !== 'undefined') {
             updateMask.push(key);
@@ -422,9 +423,13 @@ function wrapHandler(eventType, handler) {
             }
             const decodedPayload = (0, debug_1.isDebugFeatureEnabled)('skipTokenVerification')
                 ? unsafeDecodeAuthBlockingToken(req.body.data.jwt)
-                : await (0, apps_1.apps)()
-                    .admin.auth()
-                    ._verifyAuthBlockingToken(req.body.data.jwt);
+                : handler.length === 2
+                    ? await (0, apps_1.apps)()
+                        .admin.auth()
+                        ._verifyAuthBlockingToken(req.body.data.jwt)
+                    : await (0, apps_1.apps)()
+                        .admin.auth()
+                        ._verifyAuthBlockingToken(req.body.data.jwt, 'run.app');
             const authUserRecord = parseAuthUserRecord(decodedPayload.user_record);
             const authEventContext = parseAuthEventContext(decodedPayload, projectId);
             let authResponse;

package/lib/common/providers/tasks.d.ts

@@ -1,31 +1,32 @@
 import * as firebase from 'firebase-admin';
+import { Expression } from '../../v2/params';
 /** How a task should be retried in the event of a non-2xx return. */
 export interface RetryConfig {
     /**
      * Maximum number of times a request should be attempted.
      * If left unspecified, will default to 3.
      */
-    maxAttempts?: number;
+    maxAttempts?: number | Expression<number> | null;
     /**
      * Maximum amount of time for retrying failed task.
      * If left unspecified will retry indefinitely.
      */
-    maxRetrySeconds?: number;
+    maxRetrySeconds?: number | Expression<number> | null;
     /**
      * The maximum amount of time to wait between attempts.
      * If left unspecified will default to 1hr.
      */
-    maxBackoffSeconds?: number;
+    maxBackoffSeconds?: number | Expression<number> | null;
     /**
      * The maximum number of times to double the backoff between
      * retries. If left unspecified will default to 16.
      */
-    maxDoublings?: number;
+    maxDoublings?: number | Expression<number> | null;
     /**
      * The minimum time to wait between attempts. If left unspecified
      * will default to 100ms.
      */
-    minBackoffSeconds?: number;
+    minBackoffSeconds?: number | Expression<number> | null;
 }
 /** How congestion control should be applied to the function. */
 export interface RateLimits {
@@ -33,12 +34,12 @@ export interface RateLimits {
      * The maximum number of requests that can be outstanding at a time.
      * If left unspecified, will default to 1000.
      */
-    maxConcurrentDispatches?: number;
+    maxConcurrentDispatches?: number | Expression<number> | null;
     /**
      * The maximum number of requests that can be invoked per second.
      * If left unspecified, will default to 500.
      */
-    maxDispatchesPerSecond?: number;
+    maxDispatchesPerSecond?: number | Expression<number> | null;
 }
 /** Metadata about the authorization used to invoke a function. */
 export interface AuthData {

package/lib/common/providers/tasks.js

@@ -33,20 +33,21 @@ function onDispatchHandler(handler) {
                 logger.error('Invalid request, unable to process.');
                 throw new https.HttpsError('invalid-argument', 'Bad Request');
             }
-            const authHeader = req.header('Authorization') || '';
-            const token = (_a = authHeader.match(/^Bearer (.*)$/)) === null || _a === void 0 ? void 0 : _a[1];
-            // Note: this should never happen since task queue functions are guarded by IAM.
-            if (!token) {
-                throw new https.HttpsError('unauthenticated', 'Unauthenticated');
-            }
-            // We skip authenticating the token since tq functions are guarded by IAM.
-            const authToken = await https.unsafeDecodeIdToken(token);
-            const context = {
-                auth: {
+            const context = {};
+            if (!process.env.FUNCTIONS_EMULATOR) {
+                const authHeader = req.header('Authorization') || '';
+                const token = (_a = authHeader.match(/^Bearer (.*)$/)) === null || _a === void 0 ? void 0 : _a[1];
+                // Note: this should never happen since task queue functions are guarded by IAM.
+                if (!token) {
+                    throw new https.HttpsError('unauthenticated', 'Unauthenticated');
+                }
+                // We skip authenticating the token since tq functions are guarded by IAM.
+                const authToken = await https.unsafeDecodeIdToken(token);
+                context.auth = {
                     uid: authToken.uid,
                     token: authToken,
-                },
-            };
+                };
+            }
             const data = https.decode(req.body.data);
             if (handler.length === 2) {
                 await handler(data, context);

package/lib/common/timezone.d.ts

@@ -0,0 +1,2 @@
+export declare const tzDatabase: Record<string, string>;
+export declare type timezone = keyof typeof tzDatabase;