Add origin validation to popup/redirect flows #3730

sam-gc · 2020-09-02T18:29:46Z

(b/166287563)

changeset-bot · 2020-09-02T18:29:49Z

💥 No Changeset

Latest commit: 4f845bd

Merging this PR will not cause any packages to be released. If these changes should not cause updates to packages in this repo, this is fine 🙂

If these changes should be published to npm, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

avolkovi · 2020-09-02T18:35:25Z

packages-exp/auth-exp/src/core/util/validate_origin.ts

+}
+
+function matchDomain(expected: string): boolean {
+  const currentUrl = _getCurrentUrl();


doesn't this already do something funny on non-http? like force localhost?

Nah, you're thinking of something else. This function is defined as:

return (typeof self !== 'undefined' && self.location?.href) || '';

avolkovi · 2020-09-02T18:36:25Z

packages-exp/auth-exp/src/core/util/validate_origin.ts

+    return false;
+  }
+
+  if (IP_ADDRESS_REGEX.test(expected)) {


what about port specification?

Not sure-- this is copied directly from the old SDK fwiw

packages-exp/auth-exp/src/platform_browser/popup_redirect.ts

google-oss-bot · 2020-09-02T18:49:36Z

Size Analysis Report

Affected Products

`@firebase/auth-exp`

ActionCodeURL

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.4 kB 43.4 kB +39 B (+0.1%)

size_with_ext_deps 54.0 kB 54.0 kB +39 B (+0.1%)
AuthCredential

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.7 kB 42.7 kB +39 B (+0.1%)

size_with_ext_deps 53.3 kB 53.3 kB +39 B (+0.1%)
EmailAuthCredential

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 44.4 kB 44.5 kB +39 B (+0.1%)

size_with_ext_deps 55.1 kB 55.1 kB +39 B (+0.1%)
EmailAuthProvider

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.8 kB 45.8 kB +39 B (+0.1%)

size_with_ext_deps 56.4 kB 56.5 kB +39 B (+0.1%)
FacebookAuthProvider

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.8 kB 45.8 kB +39 B (+0.1%)

size_with_ext_deps 56.4 kB 56.5 kB +39 B (+0.1%)
GithubAuthProvider

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.8 kB 45.8 kB +39 B (+0.1%)

size_with_ext_deps 56.4 kB 56.5 kB +39 B (+0.1%)
GoogleAuthProvider

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.8 kB 45.8 kB +39 B (+0.1%)

size_with_ext_deps 56.4 kB 56.5 kB +39 B (+0.1%)
OAuthCredential

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 44.5 kB 44.5 kB +39 B (+0.1%)

size_with_ext_deps 55.1 kB 55.1 kB +39 B (+0.1%)
OAuthProvider

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.2 kB 45.2 kB +39 B (+0.1%)

size_with_ext_deps 55.8 kB 55.8 kB +39 B (+0.1%)
PhoneAuthCredential

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 44.4 kB 44.4 kB +39 B (+0.1%)

size_with_ext_deps 55.0 kB 55.1 kB +39 B (+0.1%)
PhoneAuthProvider

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 46.1 kB 46.1 kB +39 B (+0.1%)

size_with_ext_deps 56.8 kB 56.8 kB +39 B (+0.1%)
PhoneMultiFactorGenerator

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.3 kB 43.4 kB +39 B (+0.1%)

size_with_ext_deps 53.9 kB 54.0 kB +39 B (+0.1%)
RecaptchaVerifier

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 48.7 kB 48.8 kB +39 B (+0.1%)

size_with_ext_deps 59.4 kB 59.4 kB +39 B (+0.1%)
TwitterAuthProvider

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.8 kB 45.8 kB +39 B (+0.1%)

size_with_ext_deps 56.4 kB 56.5 kB +39 B (+0.1%)
applyActionCode

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.5 kB 42.6 kB +39 B (+0.1%)

size_with_ext_deps 53.1 kB 53.2 kB +39 B (+0.1%)
browserLocalPersistence

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.3 kB 45.4 kB +39 B (+0.1%)

size_with_ext_deps 56.0 kB 56.1 kB +39 B (+0.1%)

`browserPopupRedirectResolver`

Size

Type	Base (`80d67c7`)	Head (`1dbb7b4`)	Diff
size	52.1 kB	53.2 kB	+1.03 kB (+2.0%)
size_with_ext_deps	62.9 kB	63.9 kB	+1.04 kB (+1.6%)

Dependencies

Type	Base (`80d67c7`)	Head (`1dbb7b4`)	Diff
functions	Click to show 61 deps `_castAuth` `_generateCallbackName` `_generateEventId` `_getBrowserName` `_getClientVersion` `_getCurrentScheme` `_getCurrentUrl` `_getFinalTarget` `_getInstance` `_getUserLanguage` `_isAndroid` `_isBlackBerry` `_isChromeIOS` `_isFirefox` `_isHttpOrHttps` `_isIEMobile` `_isIOS` `_isIOSStandalone` `_isOnline` `_isSafari` `_isWebOS` `_loadGapi` `_loadJS` `_logError` `_open` `_openIframe` `_parseToken` `_performApiRequest` `_performFetchWithErrorHandling` `_performSignInRequest` `_persistenceKeyName` `_reloadWithoutSaving` `_setWindowLocation` `_window` `assert` `assertStringOrUndefined` `debugAssert` `debugFail` `deleteAccount` `extractProviderData` `fail` `getAccountInfo` `getIdTokenResult` `getIframeUrl` `getRedirectUrl` `getScriptParentElement` `getVersionForPlatform` `isNullRedirectEvent` `isRedirectEvent` `loadGapi` `makeNetworkTimeout` `makeTaggedError` `mergeProviderData` `openAsNewWindowIOS` `registerAuth` `reload` `requestStsToken` `resetUnloadedGapiModules` `secondsStringToMilliseconds` `signInWithIdp` `utcTimestampToDateString`	Click to show 64 deps `_castAuth` `_generateCallbackName` `_generateEventId` `_getBrowserName` `_getClientVersion` `_getCurrentScheme` `_getCurrentUrl` `_getFinalTarget` `_getInstance` `_getProjectConfig` `_getUserLanguage` `_isAndroid` `_isBlackBerry` `_isChromeIOS` `_isFirefox` `_isHttpOrHttps` `_isIEMobile` `_isIOS` `_isIOSStandalone` `_isOnline` `_isSafari` `_isWebOS` `_loadGapi` `_loadJS` `_logError` `_open` `_openIframe` `_parseToken` `_performApiRequest` `_performFetchWithErrorHandling` `_performSignInRequest` `_persistenceKeyName` `_reloadWithoutSaving` `_setWindowLocation` `_validateOrigin` `_window` `assert` `assertStringOrUndefined` `debugAssert` `debugFail` `deleteAccount` `extractProviderData` `fail` `getAccountInfo` `getIdTokenResult` `getIframeUrl` `getRedirectUrl` `getScriptParentElement` `getVersionForPlatform` `isNullRedirectEvent` `isRedirectEvent` `loadGapi` `makeNetworkTimeout` `makeTaggedError` `matchDomain` `mergeProviderData` `openAsNewWindowIOS` `registerAuth` `reload` `requestStsToken` `resetUnloadedGapiModules` `secondsStringToMilliseconds` `signInWithIdp` `utcTimestampToDateString`	`+ _getProjectConfig` `+ _validateOrigin` `+ matchDomain`
variables	Click to show 53 deps `AUTH_ERROR_FACTORY` `BASE_POPUP_OPTIONS` `BrowserName` `CLIENT_IMPLEMENTATION` `ClientFramework` `ClientPlatform` `DEFAULT_API_HOST` `DEFAULT_API_SCHEME` `DEFAULT_API_TIMEOUT_MS` `DEFAULT_HEIGHT` `DEFAULT_TOKEN_API_HOST` `DEFAULT_WIDTH` `ERRORS` `Endpoint` `FIREFOX_EMPTY_URL` `GRANT_TYPE` `HttpHeader` `HttpMethod` `IDP_REQUEST_URI` `IFRAME_ATTRIBUTES` `LOADJS_CALLBACK_PREFIX` `MultiFactorSessionType` `NETWORK_TIMEOUT` `NETWORK_TIMEOUT_DELAY` `PERSISTENCE_NAMESPACE` `PING_TIMEOUT` `PersistenceType` `QueryField` `SERVER_ERROR_MAP` `STORAGE_AVAILABLE_KEY` `ServerError` `TARGET_BLANK` `TOKEN_REFRESH_BUFFER_MS` `VERIFY_PHONE_NUMBER_FOR_EXISTING_ERROR_MAP_` `WIDGET_URL` `_AUTH_COMPONENT_NAME` `_AUTH_INTERNAL_COMPONENT_NAME` `_AUTH_USER_KEY_NAME` `_ENDPOINT` `_OFFLINE_DELAY_MS` `_OFFSET_DURATION` `_PERSISTENCE_KEY_NAME` `_POLL_WINDOW_CLOSE_TIMEOUT` `_REDIRECT_USER_KEY_NAME` `_RETRY_BACKOFF_MAX` `_RETRY_BACKOFF_MIN` `browserPopupRedirectResolver` `browserSessionPersistence` `cachedGApiLoader` `inMemoryPersistence` `instanceCache` `logClient` `version`	Click to show 55 deps `AUTH_ERROR_FACTORY` `BASE_POPUP_OPTIONS` `BrowserName` `CLIENT_IMPLEMENTATION` `ClientFramework` `ClientPlatform` `DEFAULT_API_HOST` `DEFAULT_API_SCHEME` `DEFAULT_API_TIMEOUT_MS` `DEFAULT_HEIGHT` `DEFAULT_TOKEN_API_HOST` `DEFAULT_WIDTH` `ERRORS` `Endpoint` `FIREFOX_EMPTY_URL` `GRANT_TYPE` `HTTP_REGEX` `HttpHeader` `HttpMethod` `IDP_REQUEST_URI` `IFRAME_ATTRIBUTES` `IP_ADDRESS_REGEX` `LOADJS_CALLBACK_PREFIX` `MultiFactorSessionType` `NETWORK_TIMEOUT` `NETWORK_TIMEOUT_DELAY` `PERSISTENCE_NAMESPACE` `PING_TIMEOUT` `PersistenceType` `QueryField` `SERVER_ERROR_MAP` `STORAGE_AVAILABLE_KEY` `ServerError` `TARGET_BLANK` `TOKEN_REFRESH_BUFFER_MS` `VERIFY_PHONE_NUMBER_FOR_EXISTING_ERROR_MAP_` `WIDGET_URL` `_AUTH_COMPONENT_NAME` `_AUTH_INTERNAL_COMPONENT_NAME` `_AUTH_USER_KEY_NAME` `_ENDPOINT` `_OFFLINE_DELAY_MS` `_OFFSET_DURATION` `_PERSISTENCE_KEY_NAME` `_POLL_WINDOW_CLOSE_TIMEOUT` `_REDIRECT_USER_KEY_NAME` `_RETRY_BACKOFF_MAX` `_RETRY_BACKOFF_MIN` `browserPopupRedirectResolver` `browserSessionPersistence` `cachedGApiLoader` `inMemoryPersistence` `instanceCache` `logClient` `version`	`+ HTTP_REGEX` `+ IP_ADDRESS_REGEX`

External Dependencies

Module	Base (`80d67c7`)	Head (`1dbb7b4`)	Diff

browserSessionPersistence

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.1 kB 43.1 kB +39 B (+0.1%)

size_with_ext_deps 53.7 kB 53.7 kB +39 B (+0.1%)
checkActionCode

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.5 kB 43.6 kB +39 B (+0.1%)

size_with_ext_deps 54.1 kB 54.2 kB +39 B (+0.1%)
confirmPasswordReset

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.5 kB 42.6 kB +39 B (+0.1%)

size_with_ext_deps 53.2 kB 53.2 kB +39 B (+0.1%)
createUserWithEmailAndPassword

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.4 kB 43.5 kB +39 B (+0.1%)

size_with_ext_deps 54.1 kB 54.1 kB +39 B (+0.1%)
deleteUser

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.4 kB 42.5 kB +39 B (+0.1%)

size_with_ext_deps 53.1 kB 53.1 kB +39 B (+0.1%)
fetchSignInMethodsForEmail

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.7 kB 42.8 kB +39 B (+0.1%)

size_with_ext_deps 53.4 kB 53.4 kB +39 B (+0.1%)
getAdditionalUserInfo

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.7 kB 43.7 kB +39 B (+0.1%)

size_with_ext_deps 54.3 kB 54.3 kB +39 B (+0.1%)

`getAuth`

Size

Type	Base (`80d67c7`)	Head (`1dbb7b4`)	Diff
size	57.9 kB	59.0 kB	+1.03 kB (+1.8%)
size_with_ext_deps	70.1 kB	71.2 kB	+1.04 kB (+1.5%)

Dependencies

Type	Base (`80d67c7`)	Head (`1dbb7b4`)	Diff
functions	Click to show 74 deps `_castAuth` `_deleteDatabase` `_generateCallbackName` `_generateEventId` `_getBrowserName` `_getClientVersion` `_getCurrentScheme` `_getCurrentUrl` `_getFinalTarget` `_getInstance` `_getUserLanguage` `_iframeCannotSyncWebStorage` `_initializeAuthInstance` `_isAndroid` `_isBlackBerry` `_isChromeIOS` `_isFirefox` `_isHttpOrHttps` `_isIE10` `_isIEMobile` `_isIOS` `_isIOSStandalone` `_isIframe` `_isMobileBrowser` `_isOnline` `_isSafari` `_isWebOS` `_loadGapi` `_loadJS` `_logError` `_open` `_openDatabase` `_openIframe` `_parseToken` `_performApiRequest` `_performFetchWithErrorHandling` `_performSignInRequest` `_persistenceKeyName` `_putObject` `_reloadWithoutSaving` `_setWindowLocation` `_window` `assert` `assertStringOrUndefined` `debugAssert` `debugFail` `deleteAccount` `deleteObject` `extractProviderData` `fail` `getAccountInfo` `getAuth` `getIdTokenResult` `getIframeUrl` `getObject` `getObjectStore` `getRedirectUrl` `getScriptParentElement` `getVersionForPlatform` `initializeAuth` `isNullRedirectEvent` `isRedirectEvent` `loadGapi` `makeNetworkTimeout` `makeTaggedError` `mergeProviderData` `openAsNewWindowIOS` `registerAuth` `reload` `requestStsToken` `resetUnloadedGapiModules` `secondsStringToMilliseconds` `signInWithIdp` `utcTimestampToDateString`	Click to show 77 deps `_castAuth` `_deleteDatabase` `_generateCallbackName` `_generateEventId` `_getBrowserName` `_getClientVersion` `_getCurrentScheme` `_getCurrentUrl` `_getFinalTarget` `_getInstance` `_getProjectConfig` `_getUserLanguage` `_iframeCannotSyncWebStorage` `_initializeAuthInstance` `_isAndroid` `_isBlackBerry` `_isChromeIOS` `_isFirefox` `_isHttpOrHttps` `_isIE10` `_isIEMobile` `_isIOS` `_isIOSStandalone` `_isIframe` `_isMobileBrowser` `_isOnline` `_isSafari` `_isWebOS` `_loadGapi` `_loadJS` `_logError` `_open` `_openDatabase` `_openIframe` `_parseToken` `_performApiRequest` `_performFetchWithErrorHandling` `_performSignInRequest` `_persistenceKeyName` `_putObject` `_reloadWithoutSaving` `_setWindowLocation` `_validateOrigin` `_window` `assert` `assertStringOrUndefined` `debugAssert` `debugFail` `deleteAccount` `deleteObject` `extractProviderData` `fail` `getAccountInfo` `getAuth` `getIdTokenResult` `getIframeUrl` `getObject` `getObjectStore` `getRedirectUrl` `getScriptParentElement` `getVersionForPlatform` `initializeAuth` `isNullRedirectEvent` `isRedirectEvent` `loadGapi` `makeNetworkTimeout` `makeTaggedError` `matchDomain` `mergeProviderData` `openAsNewWindowIOS` `registerAuth` `reload` `requestStsToken` `resetUnloadedGapiModules` `secondsStringToMilliseconds` `signInWithIdp` `utcTimestampToDateString`	`+ _getProjectConfig` `+ _validateOrigin` `+ matchDomain`
variables	Click to show 62 deps `AUTH_ERROR_FACTORY` `BASE_POPUP_OPTIONS` `BrowserName` `CLIENT_IMPLEMENTATION` `ClientFramework` `ClientPlatform` `DB_DATA_KEYPATH` `DB_NAME` `DB_OBJECTSTORE_NAME` `DB_VERSION` `DEFAULT_API_HOST` `DEFAULT_API_SCHEME` `DEFAULT_API_TIMEOUT_MS` `DEFAULT_HEIGHT` `DEFAULT_TOKEN_API_HOST` `DEFAULT_WIDTH` `ERRORS` `Endpoint` `FIREFOX_EMPTY_URL` `GRANT_TYPE` `HttpHeader` `HttpMethod` `IDP_REQUEST_URI` `IE10_LOCAL_STORAGE_SYNC_DELAY` `IFRAME_ATTRIBUTES` `LOADJS_CALLBACK_PREFIX` `MultiFactorSessionType` `NETWORK_TIMEOUT` `NETWORK_TIMEOUT_DELAY` `PERSISTENCE_NAMESPACE` `PING_TIMEOUT` `PersistenceType` `QueryField` `SERVER_ERROR_MAP` `STORAGE_AVAILABLE_KEY` `ServerError` `TARGET_BLANK` `TOKEN_REFRESH_BUFFER_MS` `VERIFY_PHONE_NUMBER_FOR_EXISTING_ERROR_MAP_` `WIDGET_URL` `_AUTH_COMPONENT_NAME` `_AUTH_INTERNAL_COMPONENT_NAME` `_AUTH_USER_KEY_NAME` `_ENDPOINT` `_OFFLINE_DELAY_MS` `_OFFSET_DURATION` `_PERSISTENCE_KEY_NAME` `_POLLING_INTERVAL_MS` `_POLLING_INTERVAL_MS$1` `_POLL_WINDOW_CLOSE_TIMEOUT` `_REDIRECT_USER_KEY_NAME` `_RETRY_BACKOFF_MAX` `_RETRY_BACKOFF_MIN` `browserLocalPersistence` `browserPopupRedirectResolver` `browserSessionPersistence` `cachedGApiLoader` `inMemoryPersistence` `indexedDBLocalPersistence` `instanceCache` `logClient` `version`	Click to show 64 deps `AUTH_ERROR_FACTORY` `BASE_POPUP_OPTIONS` `BrowserName` `CLIENT_IMPLEMENTATION` `ClientFramework` `ClientPlatform` `DB_DATA_KEYPATH` `DB_NAME` `DB_OBJECTSTORE_NAME` `DB_VERSION` `DEFAULT_API_HOST` `DEFAULT_API_SCHEME` `DEFAULT_API_TIMEOUT_MS` `DEFAULT_HEIGHT` `DEFAULT_TOKEN_API_HOST` `DEFAULT_WIDTH` `ERRORS` `Endpoint` `FIREFOX_EMPTY_URL` `GRANT_TYPE` `HTTP_REGEX` `HttpHeader` `HttpMethod` `IDP_REQUEST_URI` `IE10_LOCAL_STORAGE_SYNC_DELAY` `IFRAME_ATTRIBUTES` `IP_ADDRESS_REGEX` `LOADJS_CALLBACK_PREFIX` `MultiFactorSessionType` `NETWORK_TIMEOUT` `NETWORK_TIMEOUT_DELAY` `PERSISTENCE_NAMESPACE` `PING_TIMEOUT` `PersistenceType` `QueryField` `SERVER_ERROR_MAP` `STORAGE_AVAILABLE_KEY` `ServerError` `TARGET_BLANK` `TOKEN_REFRESH_BUFFER_MS` `VERIFY_PHONE_NUMBER_FOR_EXISTING_ERROR_MAP_` `WIDGET_URL` `_AUTH_COMPONENT_NAME` `_AUTH_INTERNAL_COMPONENT_NAME` `_AUTH_USER_KEY_NAME` `_ENDPOINT` `_OFFLINE_DELAY_MS` `_OFFSET_DURATION` `_PERSISTENCE_KEY_NAME` `_POLLING_INTERVAL_MS` `_POLLING_INTERVAL_MS$1` `_POLL_WINDOW_CLOSE_TIMEOUT` `_REDIRECT_USER_KEY_NAME` `_RETRY_BACKOFF_MAX` `_RETRY_BACKOFF_MIN` `browserLocalPersistence` `browserPopupRedirectResolver` `browserSessionPersistence` `cachedGApiLoader` `inMemoryPersistence` `indexedDBLocalPersistence` `instanceCache` `logClient` `version`	`+ HTTP_REGEX` `+ IP_ADDRESS_REGEX`

getIdToken

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.4 kB 42.5 kB +39 B (+0.1%)

size_with_ext_deps 53.1 kB 53.1 kB +39 B (+0.1%)
getIdTokenResult

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.4 kB 42.4 kB +39 B (+0.1%)

size_with_ext_deps 53.0 kB 53.1 kB +39 B (+0.1%)
getMultiFactorResolver

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.3 kB 45.3 kB +39 B (+0.1%)

size_with_ext_deps 55.9 kB 55.9 kB +39 B (+0.1%)
getRedirectResult

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 47.7 kB 47.8 kB +39 B (+0.1%)

size_with_ext_deps 58.4 kB 58.4 kB +39 B (+0.1%)
inMemoryPersistence

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.4 kB 42.4 kB +39 B (+0.1%)

size_with_ext_deps 53.0 kB 53.1 kB +39 B (+0.1%)
indexedDBLocalPersistence

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.5 kB 45.5 kB +39 B (+0.1%)

size_with_ext_deps 56.1 kB 56.1 kB +39 B (+0.1%)
initializeAuth

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.7 kB 42.8 kB +39 B (+0.1%)

size_with_ext_deps 54.7 kB 54.8 kB +39 B (+0.1%)
isSignInWithEmailLink

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.5 kB 43.5 kB +39 B (+0.1%)

size_with_ext_deps 54.1 kB 54.2 kB +39 B (+0.1%)
linkWithCredential

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.4 kB 43.5 kB +39 B (+0.1%)

size_with_ext_deps 54.1 kB 54.1 kB +39 B (+0.1%)
linkWithPhoneNumber

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 46.9 kB 47.0 kB +39 B (+0.1%)

size_with_ext_deps 57.6 kB 57.6 kB +39 B (+0.1%)
linkWithPopup

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 50.6 kB 50.7 kB +39 B (+0.1%)

size_with_ext_deps 61.3 kB 61.3 kB +39 B (+0.1%)
linkWithRedirect

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.8 kB 45.9 kB +39 B (+0.1%)

size_with_ext_deps 56.5 kB 56.5 kB +39 B (+0.1%)
multiFactor

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 44.5 kB 44.5 kB +39 B (+0.1%)

size_with_ext_deps 55.1 kB 55.1 kB +39 B (+0.1%)
onAuthStateChanged

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.5 kB 42.5 kB +39 B (+0.1%)

size_with_ext_deps 53.1 kB 53.1 kB +39 B (+0.1%)
onIdTokenChanged

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.5 kB 42.5 kB +39 B (+0.1%)

size_with_ext_deps 53.1 kB 53.1 kB +39 B (+0.1%)
parseActionCodeURL

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.4 kB 43.5 kB +39 B (+0.1%)

size_with_ext_deps 54.1 kB 54.1 kB +39 B (+0.1%)
reauthenticateWithCredential

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 44.1 kB 44.1 kB +39 B (+0.1%)

size_with_ext_deps 54.7 kB 54.7 kB +39 B (+0.1%)
reauthenticateWithPhoneNumber

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 47.5 kB 47.6 kB +39 B (+0.1%)

size_with_ext_deps 58.2 kB 58.2 kB +39 B (+0.1%)
reauthenticateWithPopup

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 50.6 kB 50.7 kB +39 B (+0.1%)

size_with_ext_deps 61.3 kB 61.3 kB +39 B (+0.1%)
reauthenticateWithRedirect

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.6 kB 45.6 kB +39 B (+0.1%)

size_with_ext_deps 56.2 kB 56.2 kB +39 B (+0.1%)
reload

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.4 kB 42.4 kB +39 B (+0.1%)

size_with_ext_deps 53.0 kB 53.1 kB +39 B (+0.1%)
sendEmailVerification

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.0 kB 43.0 kB +39 B (+0.1%)

size_with_ext_deps 53.6 kB 53.7 kB +39 B (+0.1%)
sendPasswordResetEmail

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.9 kB 43.0 kB +39 B (+0.1%)

size_with_ext_deps 53.5 kB 53.6 kB +39 B (+0.1%)
sendSignInLinkToEmail

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.9 kB 43.0 kB +39 B (+0.1%)

size_with_ext_deps 53.5 kB 53.6 kB +39 B (+0.1%)
setPersistence

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.4 kB 42.5 kB +39 B (+0.1%)

size_with_ext_deps 53.1 kB 53.1 kB +39 B (+0.1%)
signInAnonymously

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.5 kB 43.6 kB +39 B (+0.1%)

size_with_ext_deps 54.2 kB 54.2 kB +39 B (+0.1%)
signInWithCredential

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.8 kB 43.8 kB +39 B (+0.1%)

size_with_ext_deps 54.4 kB 54.4 kB +39 B (+0.1%)
signInWithCustomToken

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.4 kB 43.5 kB +39 B (+0.1%)

size_with_ext_deps 54.0 kB 54.1 kB +39 B (+0.1%)
signInWithEmailAndPassword

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 47.2 kB 47.2 kB +39 B (+0.1%)

size_with_ext_deps 57.8 kB 57.9 kB +39 B (+0.1%)
signInWithEmailLink

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 47.4 kB 47.4 kB +39 B (+0.1%)

size_with_ext_deps 58.0 kB 58.1 kB +39 B (+0.1%)
signInWithPhoneNumber

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 47.2 kB 47.3 kB +39 B (+0.1%)

size_with_ext_deps 57.9 kB 57.9 kB +39 B (+0.1%)
signInWithPopup

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 50.6 kB 50.6 kB +39 B (+0.1%)

size_with_ext_deps 61.3 kB 61.3 kB +39 B (+0.1%)
signInWithRedirect

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 45.3 kB 45.3 kB +39 B (+0.1%)

size_with_ext_deps 55.9 kB 56.0 kB +39 B (+0.1%)
signOut

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.4 kB 42.5 kB +39 B (+0.1%)

size_with_ext_deps 53.0 kB 53.1 kB +39 B (+0.1%)
unlink

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.0 kB 43.0 kB +39 B (+0.1%)

size_with_ext_deps 53.6 kB 53.7 kB +39 B (+0.1%)
updateCurrentUser

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.5 kB 42.5 kB +39 B (+0.1%)

size_with_ext_deps 53.1 kB 53.1 kB +39 B (+0.1%)
updateEmail

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.7 kB 42.7 kB +39 B (+0.1%)

size_with_ext_deps 53.3 kB 53.4 kB +39 B (+0.1%)
updatePassword

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.7 kB 42.7 kB +39 B (+0.1%)

size_with_ext_deps 53.3 kB 53.4 kB +39 B (+0.1%)
updatePhoneNumber

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.2 kB 43.2 kB +39 B (+0.1%)

size_with_ext_deps 53.8 kB 53.8 kB +39 B (+0.1%)
updateProfile

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.9 kB 42.9 kB +39 B (+0.1%)

size_with_ext_deps 53.5 kB 53.5 kB +39 B (+0.1%)
useDeviceLanguage

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 42.4 kB 42.5 kB +39 B (+0.1%)

size_with_ext_deps 53.1 kB 53.1 kB +39 B (+0.1%)
verifyBeforeUpdateEmail

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.0 kB 43.1 kB +39 B (+0.1%)

size_with_ext_deps 53.7 kB 53.7 kB +39 B (+0.1%)
verifyPasswordResetCode

Size

Type Base (80d67c7) Head (1dbb7b4) Diff

size 43.6 kB 43.6 kB +39 B (+0.1%)

size_with_ext_deps 54.2 kB 54.3 kB +39 B (+0.1%)

Test Logs

Base (80d67c78): https://github.com/firebase/firebase-js-sdk/actions/runs/235020588
Head (1dbb7b46): https://github.com/firebase/firebase-js-sdk/actions/runs/236568736

* Add origin validation to the popup/redirect flows * Formatting * Cache the origin validation promise * Formatting * PR feedback * Formatting

* Initial submit of auth-next framework (#2851) Initial package structure--copied from packages/template, but with tests working * Add mock fetch helper (#2878) Add mock fetch library for tests * Add core types & error map to auth-exp (#2890) * Add core types & error map * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: License Headers * User should be an interface for now we can make an implementation class later * Add signUp API method for auth-next (#2892) * User should be an interface for now we can make an implementation class later * Add API call to signUp * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: License Headers * Update tests to test a little more * [AUTOMATED]: Prettier Code Styling * Add initial user object implementation (#2896) * Initial user object implementation * Consolidate mock auth object, add user object (#2906) * Consolidate mock auth / add user test helper * [AUTOMATED]: Prettier Code Styling * Fix tests * Add remaining API methods to auth-next (#2901) * User should be an interface for now we can make an implementation class later * Add API call to signUp * [AUTOMATED]: Prettier Code Styling * Update tests to test a little more * Add remaining API methods to auth-next * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: License Headers * Add more tests to account API methods * Pass in SDK version & correctly send GET request params * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: Prettier Code Styling * Fix import ordering * Minor formatting change * [AUTOMATED]: Prettier Code Styling * Add support for API timeouts to auth-next (#2915) * Add support for API timeouts to auth-next * PR feedback * [AUTOMATED]: Prettier Code Styling * Add version helpers to auth-next (#2910) * Add version helper to auth-next * [AUTOMATED]: Prettier Code Styling * PR feedback * Add persistence layer: index db, in memory, and browser{local, session} (#2908) * Add fetchSignInMethodsForEmail to auth-next (#2924) * Add fetchSignInMethodsForEmail to auth-next * [AUTOMATED]: Prettier Code Styling * PR Feedback * [AUTOMATED]: Prettier Code Styling * Add sendEmailVerification to auth-next (#2926) * Add sendEmailVerification to auth-next * [AUTOMATED]: Prettier Code Styling * Add missing test * Remove GetOobCodeRequestType in favor of Operation * Add a persistence manager class (#2925) * Added react native build target (#2947) * Add password reset methods to auth-next (#2928) * Add sendEmailVerification to auth-next * [AUTOMATED]: Prettier Code Styling * Remove GetOobCodeRequestType in favor of Operation * Add password reset methods to auth-next * [AUTOMATED]: Prettier Code Styling * PR Feedback * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: Prettier Code Styling * Resolve merge conflicts * [AUTOMATED]: Prettier Code Styling * use queryString helper in auth-next (#2936) * Use queryString from firebase/util instead of homebrew one * [AUTOMATED]: Prettier Code Styling * PR Feedback * [AUTOMATED]: Prettier Code Styling * Initial auth object implementation + initializeAuth() (#2932) * use app-exp in the build:deps script * Add conditional delays to auth-next (#2934) * Add conditional delays to auth-next * [AUTOMATED]: Prettier Code Styling * Use typescript asserts keyword for typesafe assertions * [AUTOMATED]: Prettier Code Styling * Rebase conflicts & PR feedback * More PR Feedback * Strip debug asserts from prod builds * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: API Reports * Fix logic in assertion * Revert merge artifacts * PR Feedback * Add sendSignInWithEmail to auth-next (#2960) * Add sendSignInWithEmail links * [AUTOMATED]: Prettier Code Styling * PR Feedback * PR Feedback * Add auth listener implementation, add user.reload() (#2961) * Standardize auth-next style (#2983) * Standardize auth-next style - prefix directory for test blocks - use kebab style for test values to make them visually distinct from keys - use '#' to prefix instance methods and '.' for class methods - prefix all private exported methods with '_' * [AUTOMATED]: Prettier Code Styling * Two more cases I missed * Add refresh token endpoint + implementation to token manager (#2975) * Add react native persistence class (#2955) Added React Native persistence class * Add getIdTokenResult implementation (#3014) * Update internal types to work with external types (#3075) * Update internal types to work with external types * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: License Headers * PR feedback * [AUTOMATED]: Prettier Code Styling * Further refactoring of auth types. Add public exports to src/index.ts (#3078) * Further refactoring of auth types. Add public exports to src/index.ts * Add app-exp to devDependencies * PR feedback * user.delete() implementation (#3072) * user.delete() implementation * [AUTOMATED]: Prettier Code Styling * PR feedback * PR feedback * Use auth impl object instead of mock auth object (#3098) * Add signInWithCredential to auth-next (#2963) * Add signInWithCredential to auth-next * [AUTOMATED]: Prettier Code Styling * Add conditional delays to auth-next (#2934) * Add conditional delays to auth-next * [AUTOMATED]: Prettier Code Styling * Use typescript asserts keyword for typesafe assertions * [AUTOMATED]: Prettier Code Styling * Rebase conflicts & PR feedback * More PR Feedback * Strip debug asserts from prod builds * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: API Reports * Fix logic in assertion * Revert merge artifacts * PR Feedback * Cleanup & PR Feedback * [AUTOMATED]: Prettier Code Styling * [AUTOMATED]: License Headers * Add more tests * [AUTOMATED]: Prettier Code Styling * Rebase conflicts * Cleanup type exports * PR feedback * Declare abstract class abstractly * Refactor so every unit test gets its own Auth object (#3129) * Refactor so every unit test gets its own Auth object * PR feedback * Formatting * Add updateProfile, updateEmail, updatePassword (#3122) * Profile management * Add updateProfile, updateEmail, updatePassword * Fixing up tests * Update tests further * Add re-exports for public functions * Fix up authCredential types to use public versions * Formatting * Code cleanup * Formatting * PR feedback * Formatting * Add recaptcha implementation (#3166) * Add recaptcha * Formatting * Export in index.ts * Address PR feedback, add a test helper for stubbing timeouts * Formatting * Add signInWithPhoneNumber implementation (#3191) * Add signInWithPhoneNumber flow * Formatting * PR feedback * Formatting * Add signInAnonymously to auth-next (#2986) * Add signInWithCredential to auth-next * Add signInAnonymously to auth-next * [AUTOMATED]: Prettier Code Styling * Add more tests * Move these back into providers * One more rebase * Add signInWithCustomToken implementation (#3136) * Add signInWithCustomToken * Add re-export in index.ts * Formatting * Formatting * add signInWithEmailAndPassword & signInWithEmailLink to auth-next (#3209) * Cleanup credential inheritance tree * Add signInWithEmailAndPassword and signInWithEmailLink to auth-next * j/k phone credential/provider are actually public * Add tests * PR feedback * Add linkWithCredential(), linkWithPhoneNumber(), unlink() (#3213) * Add unlink(), linkWithCredential(), linkWithPhoneNumber() * Formatting * Formatting * PR feedback * Formatting * Add export to index.ts * Formatting * Add createUserWithEmailAndPassword to auth-next (#3212) * Add createUserWithEmailAndPassword to auth-next * PR feedback * Cleanup public types in auth-next (#3217) * Cleanup public types in auth-next * PR feedback * Add a demo page to auth-exp using the new modular methods (#3197) * Add basic demo for new SDK * Formatting * Add anonymous auth and custom token * Formatting * Update to include newly-implemented pieces * Formatting * Add custom email flow methods to auth-next (#3223) * Add reauthenticateWithCredential, reauthenticateWithPhoneNumber (#3225) * Add link and reauth implementation to email credential (#3226) * Add linking and reauth to email credential * Formatting * Add tests for new api method * Formatting * Add AdditionalUserInfo class to auth-exp (#2979) Add AdditionalUserInfo * Big refactor of reauth / link + basic idp tasks (#3242) * Big refactor of reauth / link + basic idp tasks * PR feedback * Formatting * Add useDeviceLanguage to auth-next (#3273) * Fix broken build (#3275) * Fix some stuff * Formatting * fixed scott's broken test cases. Stupid scott Co-authored-by: Scott Crossen <[email protected]> * Address (some) of the tree shaking issues w/ ReCaptcha (#3277) * Address (some) of the recaptcha tree-shaking issues * Formatting * Add gapi and iframe loading libraries (#3334) * Add popup util and bare-bones OAuthProvider (#3335) * First pass at adding MFA support to auth-next (#3292) * First pass at adding MFA support to auth-next * Refactor IDP & reauth interfaces a bit to play nicer with MFA * PR feedback * More tests & interface cleanup * One last test * More PR Feedbakc * Tree shakeable persistence (#3288) * Make the persistence objects tree-shakeable * Formatting * Updated to stop using casts everywhere * Formatting * Make the browser impls tree shakeable * Formatting * Fix the react native implementation in auth-compat-exp * Formatting * Make the react native class wrapped in a closure, to avoid the prototype nonsense * Formatting * Fix index.rn.ts * Formatting * PR feedback * Fix ordering in index.ts * Formatting * Fix test * Formatting * Make the _getInstance() instantiator a util for the whole SDK (#3369) * Make the _getInstance() instantiator a util for the whole SDK * PR feedback, added some debugAsserts * Formatting * Add browser popup resolver class, some utils (#3336) * Add auth event manager and popup_redirect browser implementation * Add browser popup implementation, some utils * Formatting * PR feedback * Formatting * Fix failing tests * formatting * Merge conflict * Cleanup demo code & get it working with MFA flows (#3380) - lint the demo - fix some error handling code - fix verifyPhoneNumber when called with MFA context - add to/fromJSON to EmailAuthCredential * Add updatePhoneNumber to auth-next (#3392) * Add verifyBeforeUpdate to auth-next (#3391) * Add verifyBeforeUpdate to auth-next Also add a couple edge cases that I missed first pass around * Export verifyBeforeUpdateEmail * Add popup strategy implementation, (sign in, link, reauth) (#3363) * Popup strategy implementation * Popup strategy + tests * Formatting * Updated comment * Fix IdpTask types * Refactor popup code to have abstract base * WIP * Early feedback * Feedback, tests * Formatting * Formatting * Formatting * Update the auth event manager to handle redirects. Add redirect logic to popupredirectresolver (#3409) * Update event manager and abstract popup redirect operation to handle redirect events * Missing popup_redirect update * Tests * Formatting * PR feedback * Formatting * Populate enrolled factors on reload() (#3406) * Add persistence for redirect users (#3410) * Updates to auth for persistence redirect user * Add tests for persistence * Formatting * Removing erroneous console.logs * Formatting * Updates to the auth init flow * Formatting * Fix typo * Formatting * Rogue console.logwq * Formatting * PR feedback * Formatting * Web worker support for auth-next (#3413) * Web worker support for auth-next * PR feedback * Cleanup build tree a bit * Add redirect strategy (#3416) * Redirect strategy * Redirect strategy updates & test * Formatting * Moving the ts files in demo/ to 'broken' since they cause 'yarn test' to break and Alex is unavailable this week * Add auth isolation for oauth flows (#3420) * Add auth isolation for oauth flows * Formatting * Fix bug * Formatting * PR feedback * Formatting * Move all of our helper files in test/ to a new directory test/helpers/ (#3452) * Move all of our helper files in test/ to a new directory test/helpers/ * Formatting * Foundation for integration tests for auth-exp (#3453) * Add integration test foundation * Formatting * Update to use a describe wrapper instead * Formatting * PR feedback * Removed custom describe * Formatting * Add integration tests for anonymous auth (#3455) * added a suite of anonymous auth integration tests * Updated to use new structure * Formatting * PR feedback * Formatting * Update the integration testing structure to have a new auth every test (#3457) * Fix integration tests to not be so clever * Formatting * Add integration tests for email flow (#3462) * Add email integration tests * Formatting * PR feedback * Formatting * Add integration tests for phone, plus address some issues caught by them (#3478) * Phone integration tests (plus some bugs that it caught) * Formatting * PR feedback * Formatting * Refactor the way UserCredentials work in anticipation of mudularization (#3489) * Refactor the way UserCredentials work in anticipation of mudularization * Formatting * PR feedback * Linter fixes * Formatting * First pass at service workers for auth-next (#3434) * Fix broken integration tests (#3503) * Add a standard OAuthCredential and a GoogleAuthProvider (#3498) * Add a standard OAuthCredential and a GoogleAuthProvider * Formatting * Signature updates * Formatting * Update w/ demo * PR feedback plus a bugfix * Formatting * Add the remaining oauth providers (#3500) * Add the rest of the OAuth providers * Formatting * Add to demo * Handle some edge cases in responses from the server (#3509) * Add error handling for account-exists-with-different-credentials edgecase * Tests * Formatting * First pass at polyfill (#3517) * First pass at polyfill * PR Feedback * Copy demo code over to auth-compat-layer, fix our build scripts (#3563) * Copy demo code over to auth-compat-layer, fix our build scripts * Add more functionality to compat layer * PR Feedback * PR Feedback * Fix more edge cases around auth-compat-exp polyfill (auth-next) (#3567) * Further refactoring of auth types. Add public exports to src/index.ts (#3078) * Further refactoring of auth types. Add public exports to src/index.ts * Add app-exp to devDependencies * PR feedback * Fix more edge cases around auth-compat-exp polyfill * Add uglified polyfill build for size comparison * PR feedback * Set ClientPlatform correctily in auth-exp and auth-compat-exp Co-authored-by: Sam Horlbeck Olsen <[email protected]> * Add platform specific persistence validation to auth-compat-exp (#3593) * Add an assertTypes utility (#3578) * Add assertTypes util * Add assertTypes function * Refactor project structure to support node (#3579) * Expose additionalUserInfo in auth-exp and auth-compat-exp (#3595) * Clean up our to/from JSON implementations (#3606) * Clean up our to/from JSON implementations - Remove anonymous credential/provider since they're not exposed and don't do anything - rename toPlainObject on User to toJSON per API spec - relax restrictions around ProviderId & SignInMethod typing since they can sometimes have values outside of our enum * PR feedback and more cleanup * Rejigger our error type checking to allow app-less errors * PR feedback * Register auth with the app component. Add the getAuth() methods for each platform (#3637) * Register auth with the app component. Add the getAuth() methods for each platform * Add getAuth for webworker build * Formatting * Make firebase auth implement _FirebaseService interface * Formatting * Fix tests * Formatting * PR feedback * Formatting * PR feedback * Formatting * Add the internal auth interface including proactive refresh (#3655) * Proactive refresh and internal SDK * Fix tests for node * Formatting * Remove unused file * PR feedback * Formatting * Implement cross-window browser events for auth-next (#3631) * Implement cross-window browser events for auth-next * Split out local & session storage * Add persistence events to indexed DB * Add some tests & fix a couple issues with local storage events * Add tests for AuthImpl._onStorageEvent and fix getIdToken to trigger correctly * Merge conflicts * PR feedback * Auth next build (#3654) * update package.json * make internal and main share code * remove unused deps and files * point to the right typing file for internal * cast internal Auth to public Auth to make TS happy * yarn.lock * Fix the broken build. (#3717) * Fix the broken build * Formatting * Fix compat build * Re-add demo * Fix build errors * Formatting * Fix linting for auth-compat-exp * Add hooks into auth-next for emulator config (#3716) * Add hooks into emulator for auth-next * Formatting * PR feedback * Fix broken tests * Formatting * Add assertions for type of OAuthProvider in popup/redirect (#3720) * Add assertion for the oauthprovider type in popup/redirect * Formatting * Remove circular dependency issue with AuthCredential (#3718) * Fix circular dependency issue * Formatting * Add origin validation to popup/redirect flows (#3730) * Add origin validation to the popup/redirect flows * Formatting * Cache the origin validation promise * Formatting * PR feedback * Formatting * Put some guardrails around the recaptcha host language param (#3734) * Add some guardrails for recaptcha host language param * Formatting * Prepare auth-next for merging to master (#3740) * suppress eslint error * fix type error * make auth-compat depend on app-compat * add release build for auth-exp * revert auth-compat to depend on app * test * don't abort on error for release builds * apply release build to web worker build * Revert "test" This reverts commit 8be511c. * fix lint error * Finish off the emulator hooks (#3732) * Finish emulator implementation * Formatting * Add appVerificationDisabledForTesting setting and the type to auth-types-exp * Formatting * Add network timeout cancellation to the core network code (#3771) * Add network timeout cancellation to core network code * Formatting * Fix broken test on CI * Formatting * Fix failing auth compat tests (#3783) * Fix the auth compat 'tests' * Formatting * Fix integration test * Formatting * Fix the phone integration test * Clear the redirect user on signout (#3784) * Clear redirect user upon signOut * Formatting * Fix issue in node * Formatting * Add user invalidation handling (#3804) * Add user invalidation handling * Formatting * Add a cache layer to the event manager (#3808) * Add caching of events to event manager * Formatting * Fix tests * Formatting * Handle null auth events from the iframe (#3818) * Add handling of null auth events * Formatting * Add web storage support check to popup actions (#3823) * Add web storage check to popup actions * Formatting * Update package.json * Fix gapi linter issue * Update auth-next deps before merging to master (#3809) * update dep version * update yarn lock * Ignore phone integration test in catch-all yarn:test Co-authored-by: Alex Volkovitsky <[email protected]> Co-authored-by: Feiyang1 <[email protected]> Co-authored-by: Scott Crossen <[email protected]> Co-authored-by: Feiyang <[email protected]>

sam-gc added 2 commits September 2, 2020 11:25

Add origin validation to the popup/redirect flows

a634af3

Formatting

4f845bd

sam-gc requested a review from avolkovi September 2, 2020 18:29

sam-gc requested review from Feiyang1, hiranya911 and hsubox76 as code owners September 2, 2020 18:29

sam-gc assigned avolkovi Sep 2, 2020

avolkovi reviewed Sep 2, 2020

View reviewed changes

packages-exp/auth-exp/src/platform_browser/popup_redirect.ts Outdated Show resolved Hide resolved

avolkovi approved these changes Sep 2, 2020

View reviewed changes

avolkovi assigned sam-gc and unassigned avolkovi Sep 2, 2020

sam-gc added 4 commits September 2, 2020 11:56

Cache the origin validation promise

0c42e49

Formatting

b11054f

PR feedback

36e8ad4

Formatting

1673ee8

sam-gc merged commit 4d9dc69 into auth-next Sep 2, 2020

sam-gc added a commit that referenced this pull request Sep 29, 2020

Add origin validation to popup/redirect flows (#3730)

91745f0

* Add origin validation to the popup/redirect flows * Formatting * Cache the origin validation promise * Formatting * PR feedback * Formatting

avolkovi pushed a commit that referenced this pull request Sep 30, 2020

Add origin validation to popup/redirect flows (#3730)

2fac9ce

* Add origin validation to the popup/redirect flows * Formatting * Cache the origin validation promise * Formatting * PR feedback * Formatting

firebase locked and limited conversation to collaborators Oct 3, 2020

Add origin validation to popup/redirect flows #3730

Add origin validation to popup/redirect flows #3730

Uh oh!

Conversation

sam-gc commented Sep 2, 2020

Uh oh!

changeset-bot bot commented Sep 2, 2020

💥 No Changeset

Uh oh!

avolkovi Sep 2, 2020

Choose a reason for hiding this comment

Uh oh!

sam-gc Sep 2, 2020

Choose a reason for hiding this comment

Uh oh!

avolkovi Sep 2, 2020

Choose a reason for hiding this comment

Uh oh!

sam-gc Sep 2, 2020

Choose a reason for hiding this comment

Uh oh!

Uh oh!

google-oss-bot commented Sep 2, 2020 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Size Analysis Report

Affected Products

@firebase/auth-exp

ActionCodeURL

Size

AuthCredential

Size

EmailAuthCredential

Size

EmailAuthProvider

Size

FacebookAuthProvider

Size

GithubAuthProvider

Size

GoogleAuthProvider

Size

OAuthCredential

Size

OAuthProvider

Size

PhoneAuthCredential

Size

PhoneAuthProvider

Size

PhoneMultiFactorGenerator

Size

RecaptchaVerifier

Size

TwitterAuthProvider

Size

applyActionCode

Size

browserLocalPersistence

Size

browserPopupRedirectResolver

Size

Dependencies

External Dependencies

browserSessionPersistence

Size

checkActionCode

Size

confirmPasswordReset

Size

createUserWithEmailAndPassword

Size

deleteUser

Size

fetchSignInMethodsForEmail

Size

getAdditionalUserInfo

Size

getAuth

Size

Dependencies

google-oss-bot commented Sep 2, 2020 •

edited

Loading

`@firebase/auth-exp`

`ActionCodeURL`

`AuthCredential`

`EmailAuthCredential`

`EmailAuthProvider`

`FacebookAuthProvider`

`GithubAuthProvider`

`GoogleAuthProvider`

`OAuthCredential`

`OAuthProvider`

`PhoneAuthCredential`

`PhoneAuthProvider`

`PhoneMultiFactorGenerator`

`RecaptchaVerifier`

`TwitterAuthProvider`

`applyActionCode`

`browserLocalPersistence`

`browserPopupRedirectResolver`

`browserSessionPersistence`

`checkActionCode`

`confirmPasswordReset`

`createUserWithEmailAndPassword`

`deleteUser`

`fetchSignInMethodsForEmail`

`getAdditionalUserInfo`

`getAuth`

`getIdToken`

`getIdTokenResult`

`getMultiFactorResolver`

`getRedirectResult`

`inMemoryPersistence`

`indexedDBLocalPersistence`

`initializeAuth`

`isSignInWithEmailLink`

`linkWithCredential`

`linkWithPhoneNumber`

`linkWithPopup`

`linkWithRedirect`

`multiFactor`

`onAuthStateChanged`

`onIdTokenChanged`

`parseActionCodeURL`

`reauthenticateWithCredential`

`reauthenticateWithPhoneNumber`

`reauthenticateWithPopup`

`reauthenticateWithRedirect`

`reload`

`sendEmailVerification`

`sendPasswordResetEmail`

`sendSignInLinkToEmail`

`setPersistence`

`signInAnonymously`

`signInWithCredential`

`signInWithCustomToken`

`signInWithEmailAndPassword`

`signInWithEmailLink`

`signInWithPhoneNumber`

`signInWithPopup`