strapi-plugin-firebase-authentication 1.2.5 → 1.3.2

package/dist/server/index.js

@@ -29004,6 +29004,29 @@ const firebaseController = {
       }
       throw error2;
     }
+  },
+  /**
+   * Check password - validates a password against the authenticated user's Firebase account
+   * POST /api/firebase-authentication/checkPassword
+   * Authenticated endpoint - requires valid JWT (enforced by is-authenticated policy)
+   *
+   * @param ctx - Koa context with { password } in body
+   * @returns { valid: true } or { valid: false }
+   */
+  async checkPassword(ctx) {
+    strapi.log.debug("checkPassword endpoint called");
+    try {
+      const { password } = ctx.request.body || {};
+      const user = ctx.state.user;
+      if (!password) {
+        throw new ValidationError$1("Password is required");
+      }
+      const result = await strapi.plugin(pluginName).service("firebaseService").checkPassword(user, password);
+      ctx.body = result;
+    } catch (error2) {
+      strapi.log.error("checkPassword controller error:", error2);
+      throw error2;
+    }
   }
 };
 const STRAPI_DESTINATION = "strapi";
@@ -29484,6 +29507,14 @@ const contentApi = {
         // Public endpoint - token provides authentication
         policies: []
       }
+    },
+    {
+      method: "POST",
+      path: "/checkPassword",
+      handler: "firebaseController.checkPassword",
+      config: {
+        policies: ["plugin::firebase-authentication.is-authenticated"]
+      }
     }
   ]
 };
@@ -31311,6 +31342,54 @@ const firebaseService = ({ strapi: strapi2 }) => ({
       }
       throw new ApplicationError$2("Failed to verify email. Please try again.");
     }
+  },
+  /**
+   * Check if a password is valid for the authenticated user
+   * Uses Firebase Identity Toolkit API to verify the password
+   *
+   * @param user - Authenticated user from ctx.state.user
+   * @param password - Password to check
+   * @returns { valid: true } or { valid: false }
+   */
+  async checkPassword(user, password) {
+    if (!user || !user.email) {
+      throw new ValidationError$1("User email is required");
+    }
+    const config2 = await strapi2.plugin("firebase-authentication").service("settingsService").getFirebaseConfigJson();
+    if (!config2 || !config2.firebaseWebApiKey) {
+      throw new ApplicationError$2(
+        "Password verification is not available. Web API Key is not configured.\n\nTo enable password verification:\n1. Go to Firebase Console > Project Settings > General\n2. Copy your Web API Key\n3. Add it in Strapi Admin > Settings > Firebase Authentication > Optional Settings"
+      );
+    }
+    try {
+      const response = await fetch(
+        `https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword?key=${config2.firebaseWebApiKey}`,
+        {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify({
+            email: user.email,
+            password,
+            returnSecureToken: false
+          })
+        }
+      );
+      const data = await response.json();
+      if (!response.ok) {
+        const errorMessage = data.error?.message || "Authentication failed";
+        strapi2.log.debug(`checkPassword: password invalid for user ${user.email}: ${errorMessage}`);
+        if (errorMessage === "INVALID_PASSWORD" || errorMessage === "INVALID_LOGIN_CREDENTIALS" || errorMessage.includes("INVALID")) {
+          return { valid: false };
+        }
+        return { valid: false };
+      }
+      return { valid: true };
+    } catch (error2) {
+      strapi2.log.error("checkPassword error:", error2);
+      throw new ApplicationError$2("Failed to verify password");
+    }
   }
 });
 const passwordResetTemplate = {

package/dist/server/index.mjs

@@ -28972,6 +28972,29 @@ const firebaseController = {
       }
       throw error2;
     }
+  },
+  /**
+   * Check password - validates a password against the authenticated user's Firebase account
+   * POST /api/firebase-authentication/checkPassword
+   * Authenticated endpoint - requires valid JWT (enforced by is-authenticated policy)
+   *
+   * @param ctx - Koa context with { password } in body
+   * @returns { valid: true } or { valid: false }
+   */
+  async checkPassword(ctx) {
+    strapi.log.debug("checkPassword endpoint called");
+    try {
+      const { password } = ctx.request.body || {};
+      const user = ctx.state.user;
+      if (!password) {
+        throw new ValidationError$1("Password is required");
+      }
+      const result = await strapi.plugin(pluginName).service("firebaseService").checkPassword(user, password);
+      ctx.body = result;
+    } catch (error2) {
+      strapi.log.error("checkPassword controller error:", error2);
+      throw error2;
+    }
   }
 };
 const STRAPI_DESTINATION = "strapi";
@@ -29452,6 +29475,14 @@ const contentApi = {
         // Public endpoint - token provides authentication
         policies: []
       }
+    },
+    {
+      method: "POST",
+      path: "/checkPassword",
+      handler: "firebaseController.checkPassword",
+      config: {
+        policies: ["plugin::firebase-authentication.is-authenticated"]
+      }
     }
   ]
 };
@@ -31279,6 +31310,54 @@ const firebaseService = ({ strapi: strapi2 }) => ({
       }
       throw new ApplicationError$2("Failed to verify email. Please try again.");
     }
+  },
+  /**
+   * Check if a password is valid for the authenticated user
+   * Uses Firebase Identity Toolkit API to verify the password
+   *
+   * @param user - Authenticated user from ctx.state.user
+   * @param password - Password to check
+   * @returns { valid: true } or { valid: false }
+   */
+  async checkPassword(user, password) {
+    if (!user || !user.email) {
+      throw new ValidationError$1("User email is required");
+    }
+    const config2 = await strapi2.plugin("firebase-authentication").service("settingsService").getFirebaseConfigJson();
+    if (!config2 || !config2.firebaseWebApiKey) {
+      throw new ApplicationError$2(
+        "Password verification is not available. Web API Key is not configured.\n\nTo enable password verification:\n1. Go to Firebase Console > Project Settings > General\n2. Copy your Web API Key\n3. Add it in Strapi Admin > Settings > Firebase Authentication > Optional Settings"
+      );
+    }
+    try {
+      const response = await fetch(
+        `https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword?key=${config2.firebaseWebApiKey}`,
+        {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify({
+            email: user.email,
+            password,
+            returnSecureToken: false
+          })
+        }
+      );
+      const data = await response.json();
+      if (!response.ok) {
+        const errorMessage = data.error?.message || "Authentication failed";
+        strapi2.log.debug(`checkPassword: password invalid for user ${user.email}: ${errorMessage}`);
+        if (errorMessage === "INVALID_PASSWORD" || errorMessage === "INVALID_LOGIN_CREDENTIALS" || errorMessage.includes("INVALID")) {
+          return { valid: false };
+        }
+        return { valid: false };
+      }
+      return { valid: true };
+    } catch (error2) {
+      strapi2.log.error("checkPassword error:", error2);
+      throw new ApplicationError$2("Failed to verify password");
+    }
   }
 });
 const passwordResetTemplate = {

package/dist/server/src/controllers/firebaseController.d.ts

@@ -58,5 +58,14 @@ declare const firebaseController: {
      * @returns { success: true, message: "Email verified successfully" }
      */
     verifyEmail(ctx: Context): Promise<Context>;
+    /**
+     * Check password - validates a password against the authenticated user's Firebase account
+     * POST /api/firebase-authentication/checkPassword
+     * Authenticated endpoint - requires valid JWT (enforced by is-authenticated policy)
+     *
+     * @param ctx - Koa context with { password } in body
+     * @returns { valid: true } or { valid: false }
+     */
+    checkPassword(ctx: Context): Promise<void>;
 };
 export default firebaseController;

package/dist/server/src/controllers/index.d.ts

@@ -10,6 +10,7 @@ declare const _default: {
         resetPasswordWithToken(ctx: import("koa").Context): Promise<void>;
         sendVerificationEmail(ctx: import("koa").Context): Promise<void>;
         verifyEmail(ctx: import("koa").Context): Promise<import("koa").Context>;
+        checkPassword(ctx: import("koa").Context): Promise<void>;
     };
     userController: {
         list: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;

package/dist/server/src/index.d.ts

@@ -31,6 +31,7 @@ declare const _default: {
             resetPasswordWithToken(ctx: import("koa").Context): Promise<void>;
             sendVerificationEmail(ctx: import("koa").Context): Promise<void>;
             verifyEmail(ctx: import("koa").Context): Promise<import("koa").Context>;
+            checkPassword(ctx: import("koa").Context): Promise<void>;
         };
         userController: {
             list: (ctx: import("koa").Context | import("koa").DefaultContext) => Promise<void>;
@@ -210,6 +211,9 @@ declare const _default: {
                 success: boolean;
                 message: string;
             }>;
+            checkPassword(user: any, password: string): Promise<{
+                valid: boolean;
+            }>;
         };
         templateService: ({ strapi }: {
             strapi: any;

package/dist/server/src/services/firebaseService.d.ts

@@ -131,5 +131,16 @@ declare const _default: ({ strapi }: {
         success: boolean;
         message: string;
     }>;
+    /**
+     * Check if a password is valid for the authenticated user
+     * Uses Firebase Identity Toolkit API to verify the password
+     *
+     * @param user - Authenticated user from ctx.state.user
+     * @param password - Password to check
+     * @returns { valid: true } or { valid: false }
+     */
+    checkPassword(user: any, password: string): Promise<{
+        valid: boolean;
+    }>;
 };
 export default _default;

package/dist/server/src/services/index.d.ts

@@ -121,6 +121,9 @@ declare const _default: {
             success: boolean;
             message: string;
         }>;
+        checkPassword(user: any, password: string): Promise<{
+            valid: boolean;
+        }>;
     };
     templateService: ({ strapi }: {
         strapi: any;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "strapi-plugin-firebase-authentication",
-  "version": "1.2.5",
+  "version": "1.3.2",
   "description": "Allows easy integration between clients utilizing Firebase for authentication and Strapi",
   "license": "MIT",
   "repository": {