8 Commits
Author SHA1 Message Date
macastelazandGitHub 3b4eccd8d9 test(auth): fix flakiness in browser integration and webdriver tests (#10155)
* test(auth): fix flakiness in browser integration and webdriver tests

* Fix WebDriver email sign-in test flakiness by using robust JS click/fill

* Ensure deleteApp is called even if resetEmulator fails

* test(auth): catch emulator and deleteApp cleanup errors to prevent failing afterEach hook

* build: do not throw on missing deploying token if deployment is not needed

* build: add --include-dependencies to build_changed so dependents compile successfully

* build: workaround glob-stream singular glob Node 22 bug in firestore integration tests

* chore: revert allowEmpty: true
2026-07-17 14:24:32 -05:00
macastelazandGitHub 9825de58e8 Fix ReDoS vulnerability in FirebaseError template replacement (#10146)
* Fix ReDoS vulnerability in FirebaseError template replacement

* chore: add changeset and fix FirebaseError template replacing bug

* chore(auth): update chromedriver to ^150.0.0 to match environment

* ci: skip chromedriver download in firefox and webkit jobs

* style: format packages/util/src/errors.ts

* fix(auth): fix typescript mismatch for `User` type in webdriver tests

* chore(auth): configure custom emulator ports to avoid CI conflicts

* test: add unit test for FirebaseError template replace fallback

* Fix formatting and clean up yarn.lock conflict resolution

* build: workaround glob-stream singular glob Node 22 bug in firestore integration tests

* style: fix prettier formatting for firestore

* chore: address PR feedback (revert formatting & workaround, isolate auth config)

* chore: restore firestore formatting to satisfy prettier and update changeset
2026-07-17 13:55:07 -05:00
ac45220472 Fix querystring to always use apiKey even if a key is specified in the request (#10048)
* Fix querystring to always use apiKey even if a key is specified in the request

* Update packages/auth/src/api/index.ts

* Fix test helper URL generation to match new querystring order

* Run yarn format

---------

Co-authored-by: Hanzo Dev <[email protected]>
2026-06-12 22:06:37 -05:00
macastelazandGitHub 5c366778a1 Support API key referrer restrictions by changing the Auth SDK referrer policy (#10049)
* feat(auth): Update referrer policy to strict-origin-when-cross-origin

* chore: Add changeset tame-yaks-yawn.md
2026-06-12 15:51:46 -05:00
macastelazandGitHub d59d748520 Update CODEOWNERS for auth packages (#10001) 2026-06-02 12:59:08 -07:00
macastelazandGitHub 7848e2e026 fix(auth): retry IndexedDB availability check on startup failure (#9845)
* fix(auth): retry IndexedDB availability check on startup failure

In environments like Chrome Extension Manifest V3 Service Workers, the initial IndexedDB transaction upon a cold start can sometimes drop or timeout. Previously, `_isAvailable()` would immediately catch the error, assume IndexedDB is broken, and silently fall back to `inMemoryPersistence`.

This updates `_isAvailable()` to use the `_withRetries()` helper, ensuring it benefits from the same retry logic as actual storage operations. This prevents the SDK from incorrectly abandoning existing IndexedDB auth state.

Fixes #9732

* style(auth): run yarn format

* chore: add changeset for IndexedDB availability check retry

* fix(auth): robust IndexedDB connection handling and test stability
2026-05-14 23:07:45 -05:00
macastelazandGitHub d64fac935b Update dependencies for Coveralls workflow to point to job IDs not flag names (#9803) 2026-04-02 15:27:34 -05:00
macastelazandGitHub f16431be0c Re-enable coverage reporting for firebase-js-sdk (#9761) 2026-04-01 14:49:58 -07:00