strapi-plugin-firebase-authentication 1.1.12 → 1.2.1

package/dist/server/src/config/index.d.ts

@@ -47,7 +47,7 @@ declare const _default: {
         env: any;
     }) => {
         firebaseJsonEncryptionKey: any;
-        emailRequired: boolean;
+        emailRequired: any;
         emailPattern: string;
     };
     validator(config: FirebaseAuthConfig): void;

package/dist/server/src/content-types/index.d.ts

@@ -66,6 +66,15 @@ declare const _default: {
                     maximum: number;
                     description: string;
                 };
+                emailVerificationUrl: {
+                    type: string;
+                    default: string;
+                    description: string;
+                };
+                emailVerificationEmailSubject: {
+                    type: string;
+                    default: string;
+                };
             };
         };
     };
@@ -112,6 +121,13 @@ declare const _default: {
                 resetTokenExpiresAt: {
                     type: string;
                 };
+                verificationTokenHash: {
+                    type: string;
+                    private: boolean;
+                };
+                verificationTokenExpiresAt: {
+                    type: string;
+                };
             };
         };
     };

package/dist/server/src/controllers/firebaseController.d.ts

@@ -28,7 +28,7 @@ declare const firebaseController: {
     /**
      * Reset password - authenticated password change
      * POST /api/firebase-authentication/resetPassword
-     * Public endpoint - requires valid JWT in Authorization header
+     * Authenticated endpoint - requires valid JWT (enforced by is-authenticated policy)
      * Used for admin-initiated resets or user self-service password changes
      * NOT used for forgot password email flow (which uses Firebase's hosted UI)
      */
@@ -43,5 +43,20 @@ declare const firebaseController: {
      * @returns { success: true, message: "Password has been reset successfully" }
      */
     resetPasswordWithToken(ctx: Context): Promise<void>;
+    /**
+     * Send email verification - public endpoint
+     * POST /api/firebase-authentication/sendVerificationEmail
+     * Authenticated endpoint - sends verification email to the logged-in user's email
+     */
+    sendVerificationEmail(ctx: Context): Promise<void>;
+    /**
+     * Verify email using custom JWT token
+     * POST /api/firebase-authentication/verifyEmail
+     * Public endpoint - token provides authentication
+     *
+     * @param ctx - Koa context with { token } in body
+     * @returns { success: true, message: "Email verified successfully" }
+     */
+    verifyEmail(ctx: Context): Promise<void>;
 };
 export default firebaseController;

package/dist/server/src/controllers/index.d.ts

@@ -8,6 +8,8 @@ declare const _default: {
         resetPassword(ctx: any): Promise<void>;
         requestMagicLink(ctx: import("koa").Context): Promise<void>;
         resetPasswordWithToken(ctx: import("koa").Context): Promise<void>;
+        sendVerificationEmail(ctx: import("koa").Context): Promise<void>;
+        verifyEmail(ctx: import("koa").Context): Promise<void>;
     };
     userController: {
         list: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;
@@ -18,6 +20,7 @@ declare const _default: {
         deleteMany: (ctx: any) => Promise<void>;
         resetPassword: (ctx: any) => Promise<void>;
         sendResetEmail: (ctx: any) => Promise<void>;
+        sendVerificationEmail: (ctx: any) => Promise<void>;
     };
     settingsController: {
         setFirebaseConfigJson: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;

package/dist/server/src/controllers/userController.d.ts

@@ -8,5 +8,6 @@ declare const _default: {
     deleteMany: (ctx: any) => Promise<void>;
     resetPassword: (ctx: any) => Promise<void>;
     sendResetEmail: (ctx: any) => Promise<void>;
+    sendVerificationEmail: (ctx: any) => Promise<void>;
 };
 export default _default;

package/dist/server/src/index.d.ts

@@ -14,7 +14,7 @@ declare const _default: {
             env: any;
         }) => {
             firebaseJsonEncryptionKey: any;
-            emailRequired: boolean;
+            emailRequired: any;
             emailPattern: string;
         };
         validator(config: import("./config").FirebaseAuthConfig): void;
@@ -29,6 +29,8 @@ declare const _default: {
             resetPassword(ctx: any): Promise<void>;
             requestMagicLink(ctx: import("koa").Context): Promise<void>;
             resetPasswordWithToken(ctx: import("koa").Context): Promise<void>;
+            sendVerificationEmail(ctx: import("koa").Context): Promise<void>;
+            verifyEmail(ctx: import("koa").Context): Promise<void>;
         };
         userController: {
             list: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;
@@ -39,6 +41,7 @@ declare const _default: {
             deleteMany: (ctx: any) => Promise<void>;
             resetPassword: (ctx: any) => Promise<void>;
             sendResetEmail: (ctx: any) => Promise<void>;
+            sendVerificationEmail: (ctx: any) => Promise<void>;
         };
         settingsController: {
             setFirebaseConfigJson: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;
@@ -66,7 +69,7 @@ declare const _default: {
         };
         "content-api": {
             type: string;
-            routes: {
+            routes: ({
                 method: string;
                 path: string;
                 handler: string;
@@ -74,7 +77,15 @@ declare const _default: {
                     auth: boolean;
                     policies: any[];
                 };
-            }[];
+            } | {
+                method: string;
+                path: string;
+                handler: string;
+                config: {
+                    policies: string[];
+                    auth?: undefined;
+                };
+            })[];
         };
     };
     services: {
@@ -93,6 +104,8 @@ declare const _default: {
                 magicLinkUrl: any;
                 magicLinkEmailSubject: any;
                 magicLinkExpiryHours: any;
+                emailVerificationUrl: any;
+                emailVerificationEmailSubject: any;
             }>;
             setFirebaseConfigJson(requestBody: any): Promise<any>;
             delFirebaseConfigJson: () => Promise<any>;
@@ -138,6 +151,7 @@ declare const _default: {
                 success: boolean;
                 message: string;
             }>;
+            sendVerificationEmail: (entityId: string) => Promise<any>;
         };
         firebaseService: ({ strapi }: {
             strapi: any;
@@ -167,7 +181,7 @@ declare const _default: {
             forgotPassword: (email: string) => Promise<{
                 message: string;
             }>;
-            resetPassword: (password: string, token: string, populate: any[]) => Promise<{
+            resetPassword: (password: string, user: any, populate: any[]) => Promise<{
                 user: any;
                 jwt: any;
             }>;
@@ -187,6 +201,13 @@ declare const _default: {
                 requiresFrontend: boolean;
                 verificationUrl: any;
             }>;
+            sendVerificationEmail(email: string): Promise<{
+                message: string;
+            }>;
+            verifyEmail(token: string): Promise<{
+                success: boolean;
+                message: string;
+            }>;
         };
         templateService: ({ strapi }: {
             strapi: any;
@@ -211,6 +232,10 @@ declare const _default: {
                 success: boolean;
                 message: string;
             }>;
+            sendVerificationEmail(user: any, verificationLink: string): Promise<{
+                success: boolean;
+                message: string;
+            }>;
         };
         firebaseUserDataService: ({ strapi }: {
             strapi: any;
@@ -237,6 +262,9 @@ declare const _default: {
             generateResetToken(firebaseUserDataDocumentId: string): Promise<string>;
             validateResetToken(token: string): Promise<import("./services/tokenService").TokenValidationResult>;
             invalidateResetToken(firebaseUserDataDocumentId: string): Promise<void>;
+            generateVerificationToken(firebaseUserDataDocumentId: string, email: string): Promise<string>;
+            validateVerificationToken(token: string): Promise<import("./services/tokenService").VerificationTokenValidationResult>;
+            invalidateVerificationToken(firebaseUserDataDocumentId: string): Promise<void>;
         };
     };
     contentTypes: {
@@ -307,6 +335,15 @@ declare const _default: {
                         maximum: number;
                         description: string;
                     };
+                    emailVerificationUrl: {
+                        type: string;
+                        default: string;
+                        description: string;
+                    };
+                    emailVerificationEmailSubject: {
+                        type: string;
+                        default: string;
+                    };
                 };
             };
         };
@@ -353,11 +390,20 @@ declare const _default: {
                     resetTokenExpiresAt: {
                         type: string;
                     };
+                    verificationTokenHash: {
+                        type: string;
+                        private: boolean;
+                    };
+                    verificationTokenExpiresAt: {
+                        type: string;
+                    };
                 };
             };
         };
     };
-    policies: {};
+    policies: {
+        "is-authenticated": (policyContext: any) => Promise<boolean>;
+    };
     middlewares: {};
 };
 export default _default;

package/dist/server/src/policies/index.d.ts

@@ -1,2 +1,4 @@
-declare const _default: {};
+declare const _default: {
+    "is-authenticated": (policyContext: any) => Promise<boolean>;
+};
 export default _default;

package/dist/server/src/policies/is-authenticated.d.ts

@@ -0,0 +1,6 @@
+/**
+ * is-authenticated policy
+ * Requires a valid JWT token - returns 401 Unauthorized if not authenticated
+ */
+declare const _default: (policyContext: any) => Promise<boolean>;
+export default _default;

package/dist/server/src/routes/content-api.d.ts

@@ -1,6 +1,6 @@
 declare const _default: {
     type: string;
-    routes: {
+    routes: ({
         method: string;
         path: string;
         handler: string;
@@ -8,6 +8,14 @@ declare const _default: {
             auth: boolean;
             policies: any[];
         };
-    }[];
+    } | {
+        method: string;
+        path: string;
+        handler: string;
+        config: {
+            policies: string[];
+            auth?: undefined;
+        };
+    })[];
 };
 export default _default;

package/dist/server/src/routes/index.d.ts

@@ -12,7 +12,7 @@ declare const _default: {
     };
     "content-api": {
         type: string;
-        routes: {
+        routes: ({
             method: string;
             path: string;
             handler: string;
@@ -20,7 +20,15 @@ declare const _default: {
                 auth: boolean;
                 policies: any[];
             };
-        }[];
+        } | {
+            method: string;
+            path: string;
+            handler: string;
+            config: {
+                policies: string[];
+                auth?: undefined;
+            };
+        })[];
     };
 };
 export default _default;

package/dist/server/src/services/emailService.d.ts

@@ -34,6 +34,16 @@ declare class EmailService {
         success: boolean;
         message: string;
     }>;
+    /**
+     * Send email verification email with three-tier fallback system
+     * Tier 1: Strapi Email Plugin (if configured)
+     * Tier 2: Custom Hook Function (if provided in config)
+     * Tier 3: Development Console Logging (dev mode only)
+     */
+    sendVerificationEmail(user: any, verificationLink: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
 }
 declare const _default: ({ strapi }: {
     strapi: any;

package/dist/server/src/services/firebaseService.d.ts

@@ -85,8 +85,12 @@ declare const _default: ({ strapi }: {
      * 2. User-initiated password change (when already authenticated)
      *
      * NOT used for forgot password email flow - that now uses Firebase's hosted UI
+     *
+     * @param password - New password to set
+     * @param user - Authenticated user from ctx.state.user (populated by is-authenticated policy)
+     * @param populate - Fields to populate in response
      */
-    resetPassword: (password: string, token: string, populate: any[]) => Promise<{
+    resetPassword: (password: string, user: any, populate: any[]) => Promise<{
         user: any;
         jwt: any;
     }>;
@@ -111,5 +115,21 @@ declare const _default: ({ strapi }: {
         requiresFrontend: boolean;
         verificationUrl: any;
     }>;
+    /**
+     * Send email verification - public endpoint
+     * Generates a verification token and sends an email to the user
+     * Security: Always returns generic success message to prevent email enumeration
+     */
+    sendVerificationEmail(email: string): Promise<{
+        message: string;
+    }>;
+    /**
+     * Verify email with token - public endpoint
+     * Validates the token and marks the user's email as verified in Firebase
+     */
+    verifyEmail(token: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
 };
 export default _default;

package/dist/server/src/services/index.d.ts

@@ -15,6 +15,8 @@ declare const _default: {
             magicLinkUrl: any;
             magicLinkEmailSubject: any;
             magicLinkExpiryHours: any;
+            emailVerificationUrl: any;
+            emailVerificationEmailSubject: any;
         }>;
         setFirebaseConfigJson(requestBody: any): Promise<any>;
         delFirebaseConfigJson: () => Promise<any>;
@@ -60,6 +62,7 @@ declare const _default: {
             success: boolean;
             message: string;
         }>;
+        sendVerificationEmail: (entityId: string) => Promise<any>;
     };
     firebaseService: ({ strapi }: {
         strapi: any;
@@ -89,7 +92,7 @@ declare const _default: {
         forgotPassword: (email: string) => Promise<{
             message: string;
         }>;
-        resetPassword: (password: string, token: string, populate: any[]) => Promise<{
+        resetPassword: (password: string, user: any, populate: any[]) => Promise<{
             user: any;
             jwt: any;
         }>;
@@ -109,6 +112,13 @@ declare const _default: {
             requiresFrontend: boolean;
             verificationUrl: any;
         }>;
+        sendVerificationEmail(email: string): Promise<{
+            message: string;
+        }>;
+        verifyEmail(token: string): Promise<{
+            success: boolean;
+            message: string;
+        }>;
     };
     templateService: ({ strapi }: {
         strapi: any;
@@ -133,6 +143,10 @@ declare const _default: {
             success: boolean;
             message: string;
         }>;
+        sendVerificationEmail(user: any, verificationLink: string): Promise<{
+            success: boolean;
+            message: string;
+        }>;
     };
     firebaseUserDataService: ({ strapi }: {
         strapi: any;
@@ -159,6 +173,9 @@ declare const _default: {
         generateResetToken(firebaseUserDataDocumentId: string): Promise<string>;
         validateResetToken(token: string): Promise<import("./tokenService").TokenValidationResult>;
         invalidateResetToken(firebaseUserDataDocumentId: string): Promise<void>;
+        generateVerificationToken(firebaseUserDataDocumentId: string, email: string): Promise<string>;
+        validateVerificationToken(token: string): Promise<import("./tokenService").VerificationTokenValidationResult>;
+        invalidateVerificationToken(firebaseUserDataDocumentId: string): Promise<void>;
     };
 };
 export default _default;

package/dist/server/src/services/settingsService.d.ts

@@ -29,6 +29,8 @@ declare const _default: ({ strapi }: {
         magicLinkUrl: any;
         magicLinkEmailSubject: any;
         magicLinkExpiryHours: any;
+        emailVerificationUrl: any;
+        emailVerificationEmailSubject: any;
     }>;
     /**
      * Stores and encrypts Firebase configuration including Web API key and password reset settings

package/dist/server/src/services/tokenService.d.ts

@@ -4,6 +4,9 @@ export interface TokenValidationResult {
     firebaseUID: string;
     error?: string;
 }
+export interface VerificationTokenValidationResult extends TokenValidationResult {
+    email?: string;
+}
 declare const _default: ({ strapi }: {
     strapi: any;
 }) => {
@@ -24,5 +27,23 @@ declare const _default: ({ strapi }: {
      * @param firebaseUserDataDocumentId - The documentId of the firebase-user-data record
      */
     invalidateResetToken(firebaseUserDataDocumentId: string): Promise<void>;
+    /**
+     * Generate an email verification token for a user
+     * @param firebaseUserDataDocumentId - The documentId of the firebase-user-data record
+     * @param email - The email address at time of request (for change detection)
+     * @returns The JWT token to include in the verification URL
+     */
+    generateVerificationToken(firebaseUserDataDocumentId: string, email: string): Promise<string>;
+    /**
+     * Validate an email verification token
+     * @param token - The JWT token from the verification URL
+     * @returns Validation result with user info and email if valid
+     */
+    validateVerificationToken(token: string): Promise<VerificationTokenValidationResult>;
+    /**
+     * Invalidate a verification token after use
+     * @param firebaseUserDataDocumentId - The documentId of the firebase-user-data record
+     */
+    invalidateVerificationToken(firebaseUserDataDocumentId: string): Promise<void>;
 };
 export default _default;

package/dist/server/src/services/userService.d.ts

@@ -43,5 +43,10 @@ declare const _default: ({ strapi }: {
         success: boolean;
         message: string;
     }>;
+    /**
+     * Send email verification email (admin-initiated)
+     * @param entityId - Firebase UID of the user
+     */
+    sendVerificationEmail: (entityId: string) => Promise<any>;
 };
 export default _default;

package/dist/server/src/templates/defaults/email-verification.d.ts

@@ -0,0 +1,2 @@
+import { EmailTemplate } from "../types";
+export declare const emailVerificationTemplate: EmailTemplate;

package/dist/server/src/templates/defaults/index.d.ts

@@ -1,3 +1,4 @@
 export { passwordResetTemplate } from "./password-reset";
 export { magicLinkTemplate } from "./magic-link";
 export { passwordChangedTemplate } from "./password-changed";
+export { emailVerificationTemplate } from "./email-verification";

package/dist/server/src/templates/types.d.ts

@@ -9,6 +9,7 @@ export interface EmailTemplateConfig {
     passwordReset?: Partial<EmailTemplate>;
     magicLink?: Partial<EmailTemplate>;
     passwordChanged?: Partial<EmailTemplate>;
+    emailVerification?: Partial<EmailTemplate>;
 }
 export interface TemplateVariables {
     user: {
@@ -22,6 +23,7 @@ export interface TemplateVariables {
     link?: string;
     resetLink?: string;
     magicLink?: string;
+    verificationLink?: string;
     changedAt?: string;
     appName: string;
     appUrl: string;
@@ -29,4 +31,4 @@ export interface TemplateVariables {
     year: number;
     supportEmail?: string;
 }
-export type TemplateType = "passwordReset" | "magicLink" | "passwordChanged";
+export type TemplateType = "passwordReset" | "magicLink" | "passwordChanged" | "emailVerification";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "strapi-plugin-firebase-authentication",
-  "version": "1.1.12",
+  "version": "1.2.1",
   "description": "Allows easy integration between clients utilizing Firebase for authentication and Strapi",
   "license": "MIT",
   "repository": {
@@ -66,25 +66,25 @@
   },
   "devDependencies": {
     "@strapi/sdk-plugin": "^5.3.2",
+    "@strapi/strapi": "^5.0.0",
     "@strapi/typescript-utils": "^5.23.3",
     "@strapi/design-system": "^2.0.0-rc.16",
     "@strapi/icons": "^2.0.0-rc.25",
-    "@types/react": "^19.2.2",
-    "@types/react-dom": "^19.2.1",
+    "@types/koa": "^2.15.0",
+    "@types/react": "^18.3.0",
+    "@types/react-dom": "^18.3.0",
     "@types/react-syntax-highlighter": "^15.5.13",
     "@types/validator": "^13.15.3",
     "changelogen": "^0.6.1",
     "prettier": "^3.6.2",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0",
-    "react-router-dom": "^7.9.3",
+    "react": "^18.3.0",
+    "react-dom": "^18.3.0",
+    "react-router-dom": "^6.28.0",
     "styled-components": "^6.1.19",
     "typescript": "^5.7.3"
   },
   "peerDependencies": {
     "@strapi/strapi": "^5.0.0",
-    "@strapi/design-system": "^2.0.0-rc.0",
-    "@strapi/icons": "^2.0.0-rc.0",
     "react": "^18.0.0",
     "react-dom": "^18.0.0",
     "react-router-dom": "^6.0.0",

package/dist/_chunks/api-DQCdqlCd.js

@@ -1,35 +0,0 @@
-"use strict";
-const admin = require("@strapi/strapi/admin");
-const index = require("./index-DlPxMuSK.js");
-const saveFirebaseConfig = async (json, firebaseWebApiKey, passwordConfig) => {
-  const url = `/${index.PLUGIN_ID}/settings/firebase-config`;
-  const { post } = admin.getFetchClient();
-  const { data } = await post(url, {
-    firebaseConfigJson: json,
-    firebaseWebApiKey,
-    ...passwordConfig
-  });
-  return data;
-};
-const getFirebaseConfig = async () => {
-  const url = `/${index.PLUGIN_ID}/settings/firebase-config`;
-  const { get } = admin.getFetchClient();
-  const { data } = await get(url);
-  return data;
-};
-const delFirebaseConfig = async () => {
-  const url = `/${index.PLUGIN_ID}/settings/firebase-config`;
-  const { del } = admin.getFetchClient();
-  const { data } = await del(url);
-  return data;
-};
-const savePasswordSettings = async (passwordConfig) => {
-  const url = `/${index.PLUGIN_ID}/settings/password-config`;
-  const { post } = admin.getFetchClient();
-  const { data } = await post(url, passwordConfig);
-  return data;
-};
-exports.delFirebaseConfig = delFirebaseConfig;
-exports.getFirebaseConfig = getFirebaseConfig;
-exports.saveFirebaseConfig = saveFirebaseConfig;
-exports.savePasswordSettings = savePasswordSettings;

package/dist/_chunks/api-D_4cdJU5.mjs

@@ -1,36 +0,0 @@
-import { getFetchClient } from "@strapi/strapi/admin";
-import { P as PLUGIN_ID } from "./index-DtGfwf9S.mjs";
-const saveFirebaseConfig = async (json, firebaseWebApiKey, passwordConfig) => {
-  const url = `/${PLUGIN_ID}/settings/firebase-config`;
-  const { post } = getFetchClient();
-  const { data } = await post(url, {
-    firebaseConfigJson: json,
-    firebaseWebApiKey,
-    ...passwordConfig
-  });
-  return data;
-};
-const getFirebaseConfig = async () => {
-  const url = `/${PLUGIN_ID}/settings/firebase-config`;
-  const { get } = getFetchClient();
-  const { data } = await get(url);
-  return data;
-};
-const delFirebaseConfig = async () => {
-  const url = `/${PLUGIN_ID}/settings/firebase-config`;
-  const { del } = getFetchClient();
-  const { data } = await del(url);
-  return data;
-};
-const savePasswordSettings = async (passwordConfig) => {
-  const url = `/${PLUGIN_ID}/settings/password-config`;
-  const { post } = getFetchClient();
-  const { data } = await post(url, passwordConfig);
-  return data;
-};
-export {
-  savePasswordSettings as a,
-  delFirebaseConfig as d,
-  getFirebaseConfig as g,
-  saveFirebaseConfig as s
-};