strapi-plugin-firebase-authentication 1.1.11 → 1.2.0

package/dist/server/src/config/index.d.ts

@@ -47,7 +47,7 @@ declare const _default: {
         env: any;
     }) => {
         firebaseJsonEncryptionKey: any;
-        emailRequired: boolean;
+        emailRequired: any;
         emailPattern: string;
     };
     validator(config: FirebaseAuthConfig): void;

package/dist/server/src/content-types/index.d.ts

@@ -66,6 +66,15 @@ declare const _default: {
                     maximum: number;
                     description: string;
                 };
+                emailVerificationUrl: {
+                    type: string;
+                    default: string;
+                    description: string;
+                };
+                emailVerificationEmailSubject: {
+                    type: string;
+                    default: string;
+                };
             };
         };
     };
@@ -105,6 +114,20 @@ declare const _default: {
                     type: string;
                     private: boolean;
                 };
+                resetTokenHash: {
+                    type: string;
+                    private: boolean;
+                };
+                resetTokenExpiresAt: {
+                    type: string;
+                };
+                verificationTokenHash: {
+                    type: string;
+                    private: boolean;
+                };
+                verificationTokenExpiresAt: {
+                    type: string;
+                };
             };
         };
     };

package/dist/server/src/controllers/firebaseController.d.ts

@@ -34,5 +34,29 @@ declare const firebaseController: {
      */
     resetPassword(ctx: any): Promise<void>;
     requestMagicLink(ctx: Context): Promise<void>;
+    /**
+     * Reset password using custom JWT token
+     * POST /api/firebase-authentication/resetPasswordWithToken
+     * Public endpoint - token provides authentication
+     *
+     * @param ctx - Koa context with { token, newPassword } in body
+     * @returns { success: true, message: "Password has been reset successfully" }
+     */
+    resetPasswordWithToken(ctx: Context): Promise<void>;
+    /**
+     * Send email verification - public endpoint
+     * POST /api/firebase-authentication/sendVerificationEmail
+     * Public endpoint - no authentication required
+     */
+    sendVerificationEmail(ctx: Context): Promise<void>;
+    /**
+     * Verify email using custom JWT token
+     * POST /api/firebase-authentication/verifyEmail
+     * Public endpoint - token provides authentication
+     *
+     * @param ctx - Koa context with { token } in body
+     * @returns { success: true, message: "Email verified successfully" }
+     */
+    verifyEmail(ctx: Context): Promise<void>;
 };
 export default firebaseController;

package/dist/server/src/controllers/index.d.ts

@@ -7,6 +7,9 @@ declare const _default: {
         forgotPassword(ctx: any): Promise<void>;
         resetPassword(ctx: any): Promise<void>;
         requestMagicLink(ctx: import("koa").Context): Promise<void>;
+        resetPasswordWithToken(ctx: import("koa").Context): Promise<void>;
+        sendVerificationEmail(ctx: import("koa").Context): Promise<void>;
+        verifyEmail(ctx: import("koa").Context): Promise<void>;
     };
     userController: {
         list: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;
@@ -17,6 +20,7 @@ declare const _default: {
         deleteMany: (ctx: any) => Promise<void>;
         resetPassword: (ctx: any) => Promise<void>;
         sendResetEmail: (ctx: any) => Promise<void>;
+        sendVerificationEmail: (ctx: any) => Promise<void>;
     };
     settingsController: {
         setFirebaseConfigJson: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;

package/dist/server/src/controllers/userController.d.ts

@@ -8,5 +8,6 @@ declare const _default: {
     deleteMany: (ctx: any) => Promise<void>;
     resetPassword: (ctx: any) => Promise<void>;
     sendResetEmail: (ctx: any) => Promise<void>;
+    sendVerificationEmail: (ctx: any) => Promise<void>;
 };
 export default _default;

package/dist/server/src/index.d.ts

@@ -14,7 +14,7 @@ declare const _default: {
             env: any;
         }) => {
             firebaseJsonEncryptionKey: any;
-            emailRequired: boolean;
+            emailRequired: any;
             emailPattern: string;
         };
         validator(config: import("./config").FirebaseAuthConfig): void;
@@ -28,6 +28,9 @@ declare const _default: {
             forgotPassword(ctx: any): Promise<void>;
             resetPassword(ctx: any): Promise<void>;
             requestMagicLink(ctx: import("koa").Context): Promise<void>;
+            resetPasswordWithToken(ctx: import("koa").Context): Promise<void>;
+            sendVerificationEmail(ctx: import("koa").Context): Promise<void>;
+            verifyEmail(ctx: import("koa").Context): Promise<void>;
         };
         userController: {
             list: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;
@@ -38,6 +41,7 @@ declare const _default: {
             deleteMany: (ctx: any) => Promise<void>;
             resetPassword: (ctx: any) => Promise<void>;
             sendResetEmail: (ctx: any) => Promise<void>;
+            sendVerificationEmail: (ctx: any) => Promise<void>;
         };
         settingsController: {
             setFirebaseConfigJson: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;
@@ -92,6 +96,8 @@ declare const _default: {
                 magicLinkUrl: any;
                 magicLinkEmailSubject: any;
                 magicLinkExpiryHours: any;
+                emailVerificationUrl: any;
+                emailVerificationEmailSubject: any;
             }>;
             setFirebaseConfigJson(requestBody: any): Promise<any>;
             delFirebaseConfigJson: () => Promise<any>;
@@ -128,7 +134,16 @@ declare const _default: {
             deleteStrapiUser: (entityId: any) => Promise<any>;
             deleteMany: (entityIDs: any) => Promise<any>;
             setSocialMetaData(): Promise<void>;
-            sendPasswordResetEmail: (entityId: any) => Promise<any>;
+            sendPasswordResetEmail: (entityId: string) => Promise<any>;
+            sendPasswordResetEmailByEmail: (email: string) => Promise<{
+                success: boolean;
+                message: string;
+            }>;
+            resetPasswordWithToken: (token: string, newPassword: string) => Promise<{
+                success: boolean;
+                message: string;
+            }>;
+            sendVerificationEmail: (entityId: string) => Promise<any>;
         };
         firebaseService: ({ strapi }: {
             strapi: any;
@@ -178,6 +193,13 @@ declare const _default: {
                 requiresFrontend: boolean;
                 verificationUrl: any;
             }>;
+            sendVerificationEmail(email: string): Promise<{
+                message: string;
+            }>;
+            verifyEmail(token: string): Promise<{
+                success: boolean;
+                message: string;
+            }>;
         };
         templateService: ({ strapi }: {
             strapi: any;
@@ -198,6 +220,14 @@ declare const _default: {
                 success: boolean;
                 message: string;
             }>;
+            sendPasswordChangedEmail(user: any): Promise<{
+                success: boolean;
+                message: string;
+            }>;
+            sendVerificationEmail(user: any, verificationLink: string): Promise<{
+                success: boolean;
+                message: string;
+            }>;
         };
         firebaseUserDataService: ({ strapi }: {
             strapi: any;
@@ -218,6 +248,16 @@ declare const _default: {
             buildUserMap(): Promise<Map<any, any>>;
             linkFirebaseUsers(firebaseUsers: any[], uidToUserMap: Map<string, any>, allStrapiUsers: any[]): any[];
         };
+        tokenService: ({ strapi }: {
+            strapi: any;
+        }) => {
+            generateResetToken(firebaseUserDataDocumentId: string): Promise<string>;
+            validateResetToken(token: string): Promise<import("./services/tokenService").TokenValidationResult>;
+            invalidateResetToken(firebaseUserDataDocumentId: string): Promise<void>;
+            generateVerificationToken(firebaseUserDataDocumentId: string, email: string): Promise<string>;
+            validateVerificationToken(token: string): Promise<import("./services/tokenService").VerificationTokenValidationResult>;
+            invalidateVerificationToken(firebaseUserDataDocumentId: string): Promise<void>;
+        };
     };
     contentTypes: {
         "firebase-authentication-configuration": {
@@ -287,6 +327,15 @@ declare const _default: {
                         maximum: number;
                         description: string;
                     };
+                    emailVerificationUrl: {
+                        type: string;
+                        default: string;
+                        description: string;
+                    };
+                    emailVerificationEmailSubject: {
+                        type: string;
+                        default: string;
+                    };
                 };
             };
         };
@@ -326,6 +375,20 @@ declare const _default: {
                         type: string;
                         private: boolean;
                     };
+                    resetTokenHash: {
+                        type: string;
+                        private: boolean;
+                    };
+                    resetTokenExpiresAt: {
+                        type: string;
+                    };
+                    verificationTokenHash: {
+                        type: string;
+                        private: boolean;
+                    };
+                    verificationTokenExpiresAt: {
+                        type: string;
+                    };
                 };
             };
         };

package/dist/server/src/services/emailService.d.ts

@@ -25,6 +25,25 @@ declare class EmailService {
         success: boolean;
         message: string;
     }>;
+    /**
+     * Send password changed confirmation email
+     * Notifies user that their password was successfully changed
+     * Uses same three-tier fallback system
+     */
+    sendPasswordChangedEmail(user: any): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    /**
+     * Send email verification email with three-tier fallback system
+     * Tier 1: Strapi Email Plugin (if configured)
+     * Tier 2: Custom Hook Function (if provided in config)
+     * Tier 3: Development Console Logging (dev mode only)
+     */
+    sendVerificationEmail(user: any, verificationLink: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
 }
 declare const _default: ({ strapi }: {
     strapi: any;

package/dist/server/src/services/firebaseService.d.ts

@@ -65,8 +65,9 @@ declare const _default: ({ strapi }: {
         jwt: any;
     }>;
     /**
-     * Forgot password flow - sends reset email
-     * Public endpoint that sends a Firebase-hosted password reset email using Firebase's secure hosted UI
+     * Forgot password flow - sends reset email with custom JWT token
+     * Public endpoint that sends a password reset email with a custom token
+     * The token links to your frontend app, not Firebase's hosted UI
      */
     forgotPassword: (email: string) => Promise<{
         message: string;
@@ -110,5 +111,21 @@ declare const _default: ({ strapi }: {
         requiresFrontend: boolean;
         verificationUrl: any;
     }>;
+    /**
+     * Send email verification - public endpoint
+     * Generates a verification token and sends an email to the user
+     * Security: Always returns generic success message to prevent email enumeration
+     */
+    sendVerificationEmail(email: string): Promise<{
+        message: string;
+    }>;
+    /**
+     * Verify email with token - public endpoint
+     * Validates the token and marks the user's email as verified in Firebase
+     */
+    verifyEmail(token: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
 };
 export default _default;

package/dist/server/src/services/index.d.ts

@@ -15,6 +15,8 @@ declare const _default: {
             magicLinkUrl: any;
             magicLinkEmailSubject: any;
             magicLinkExpiryHours: any;
+            emailVerificationUrl: any;
+            emailVerificationEmailSubject: any;
         }>;
         setFirebaseConfigJson(requestBody: any): Promise<any>;
         delFirebaseConfigJson: () => Promise<any>;
@@ -51,7 +53,16 @@ declare const _default: {
         deleteStrapiUser: (entityId: any) => Promise<any>;
         deleteMany: (entityIDs: any) => Promise<any>;
         setSocialMetaData(): Promise<void>;
-        sendPasswordResetEmail: (entityId: any) => Promise<any>;
+        sendPasswordResetEmail: (entityId: string) => Promise<any>;
+        sendPasswordResetEmailByEmail: (email: string) => Promise<{
+            success: boolean;
+            message: string;
+        }>;
+        resetPasswordWithToken: (token: string, newPassword: string) => Promise<{
+            success: boolean;
+            message: string;
+        }>;
+        sendVerificationEmail: (entityId: string) => Promise<any>;
     };
     firebaseService: ({ strapi }: {
         strapi: any;
@@ -101,6 +112,13 @@ declare const _default: {
             requiresFrontend: boolean;
             verificationUrl: any;
         }>;
+        sendVerificationEmail(email: string): Promise<{
+            message: string;
+        }>;
+        verifyEmail(token: string): Promise<{
+            success: boolean;
+            message: string;
+        }>;
     };
     templateService: ({ strapi }: {
         strapi: any;
@@ -121,6 +139,14 @@ declare const _default: {
             success: boolean;
             message: string;
         }>;
+        sendPasswordChangedEmail(user: any): Promise<{
+            success: boolean;
+            message: string;
+        }>;
+        sendVerificationEmail(user: any, verificationLink: string): Promise<{
+            success: boolean;
+            message: string;
+        }>;
     };
     firebaseUserDataService: ({ strapi }: {
         strapi: any;
@@ -141,5 +167,15 @@ declare const _default: {
         buildUserMap(): Promise<Map<any, any>>;
         linkFirebaseUsers(firebaseUsers: any[], uidToUserMap: Map<string, any>, allStrapiUsers: any[]): any[];
     };
+    tokenService: ({ strapi }: {
+        strapi: any;
+    }) => {
+        generateResetToken(firebaseUserDataDocumentId: string): Promise<string>;
+        validateResetToken(token: string): Promise<import("./tokenService").TokenValidationResult>;
+        invalidateResetToken(firebaseUserDataDocumentId: string): Promise<void>;
+        generateVerificationToken(firebaseUserDataDocumentId: string, email: string): Promise<string>;
+        validateVerificationToken(token: string): Promise<import("./tokenService").VerificationTokenValidationResult>;
+        invalidateVerificationToken(firebaseUserDataDocumentId: string): Promise<void>;
+    };
 };
 export default _default;

package/dist/server/src/services/settingsService.d.ts

@@ -29,6 +29,8 @@ declare const _default: ({ strapi }: {
         magicLinkUrl: any;
         magicLinkEmailSubject: any;
         magicLinkExpiryHours: any;
+        emailVerificationUrl: any;
+        emailVerificationEmailSubject: any;
     }>;
     /**
      * Stores and encrypts Firebase configuration including Web API key and password reset settings

package/dist/server/src/services/tokenService.d.ts

@@ -0,0 +1,49 @@
+export interface TokenValidationResult {
+    valid: boolean;
+    firebaseUserDataDocumentId: string;
+    firebaseUID: string;
+    error?: string;
+}
+export interface VerificationTokenValidationResult extends TokenValidationResult {
+    email?: string;
+}
+declare const _default: ({ strapi }: {
+    strapi: any;
+}) => {
+    /**
+     * Generate a password reset token for a user
+     * @param firebaseUserDataDocumentId - The documentId of the firebase-user-data record
+     * @returns The JWT token to include in the reset URL
+     */
+    generateResetToken(firebaseUserDataDocumentId: string): Promise<string>;
+    /**
+     * Validate a password reset token
+     * @param token - The JWT token from the reset URL
+     * @returns Validation result with user info if valid
+     */
+    validateResetToken(token: string): Promise<TokenValidationResult>;
+    /**
+     * Invalidate a reset token after use
+     * @param firebaseUserDataDocumentId - The documentId of the firebase-user-data record
+     */
+    invalidateResetToken(firebaseUserDataDocumentId: string): Promise<void>;
+    /**
+     * Generate an email verification token for a user
+     * @param firebaseUserDataDocumentId - The documentId of the firebase-user-data record
+     * @param email - The email address at time of request (for change detection)
+     * @returns The JWT token to include in the verification URL
+     */
+    generateVerificationToken(firebaseUserDataDocumentId: string, email: string): Promise<string>;
+    /**
+     * Validate an email verification token
+     * @param token - The JWT token from the verification URL
+     * @returns Validation result with user info and email if valid
+     */
+    validateVerificationToken(token: string): Promise<VerificationTokenValidationResult>;
+    /**
+     * Invalidate a verification token after use
+     * @param firebaseUserDataDocumentId - The documentId of the firebase-user-data record
+     */
+    invalidateVerificationToken(firebaseUserDataDocumentId: string): Promise<void>;
+};
+export default _default;

package/dist/server/src/services/userService.d.ts

@@ -21,6 +21,32 @@ declare const _default: ({ strapi }: {
     deleteStrapiUser: (entityId: any) => Promise<any>;
     deleteMany: (entityIDs: any) => Promise<any>;
     setSocialMetaData(): Promise<void>;
-    sendPasswordResetEmail: (entityId: any) => Promise<any>;
+    /**
+     * Send password reset email with custom JWT token
+     * @param entityId - Firebase UID of the user
+     */
+    sendPasswordResetEmail: (entityId: string) => Promise<any>;
+    /**
+     * Send password reset email by email address (for public self-service)
+     * @param email - Email address of the user
+     */
+    sendPasswordResetEmailByEmail: (email: string) => Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    /**
+     * Reset password using a custom JWT token
+     * @param token - The JWT token from the reset URL
+     * @param newPassword - The new password
+     */
+    resetPasswordWithToken: (token: string, newPassword: string) => Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    /**
+     * Send email verification email (admin-initiated)
+     * @param entityId - Firebase UID of the user
+     */
+    sendVerificationEmail: (entityId: string) => Promise<any>;
 };
 export default _default;

package/dist/server/src/templates/defaults/email-verification.d.ts

@@ -0,0 +1,2 @@
+import { EmailTemplate } from "../types";
+export declare const emailVerificationTemplate: EmailTemplate;

package/dist/server/src/templates/defaults/index.d.ts

@@ -1,2 +1,4 @@
 export { passwordResetTemplate } from "./password-reset";
 export { magicLinkTemplate } from "./magic-link";
+export { passwordChangedTemplate } from "./password-changed";
+export { emailVerificationTemplate } from "./email-verification";

package/dist/server/src/templates/defaults/password-changed.d.ts

@@ -0,0 +1,2 @@
+import { EmailTemplate } from "../types";
+export declare const passwordChangedTemplate: EmailTemplate;

package/dist/server/src/templates/types.d.ts

@@ -8,6 +8,8 @@ export interface EmailTemplate {
 export interface EmailTemplateConfig {
     passwordReset?: Partial<EmailTemplate>;
     magicLink?: Partial<EmailTemplate>;
+    passwordChanged?: Partial<EmailTemplate>;
+    emailVerification?: Partial<EmailTemplate>;
 }
 export interface TemplateVariables {
     user: {
@@ -21,10 +23,12 @@ export interface TemplateVariables {
     link?: string;
     resetLink?: string;
     magicLink?: string;
+    verificationLink?: string;
+    changedAt?: string;
     appName: string;
     appUrl: string;
-    expiresIn: string;
+    expiresIn?: string;
     year: number;
     supportEmail?: string;
 }
-export type TemplateType = "passwordReset" | "magicLink";
+export type TemplateType = "passwordReset" | "magicLink" | "passwordChanged" | "emailVerification";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "strapi-plugin-firebase-authentication",
-  "version": "1.1.11",
+  "version": "1.2.0",
   "description": "Allows easy integration between clients utilizing Firebase for authentication and Strapi",
   "license": "MIT",
   "repository": {