@pedwise/next-firebase-auth-edge/src/auth/test/verify-token.integration.test.ts

Next.js 13 Firebase Authentication for Edge and server runtimes. Dedicated for Next 13 server components. Compatible with Next.js middleware.

import {
  customTokenToIdAndRefreshTokens,
  getFirebaseAuth,
  isUserNotFoundError,
} from "../index";
import { v4 } from "uuid";
import { AuthClientErrorCode, FirebaseAuthError } from "../error";

const {
  FIREBASE_API_KEY,
  FIREBASE_PROJECT_ID,
  FIREBASE_ADMIN_CLIENT_EMAIL,
  FIREBASE_ADMIN_PRIVATE_KEY,
} = process.env;

describe("verify token integration test", () => {
  const {
    handleTokenRefresh,
    createCustomToken,
    verifyAndRefreshExpiredIdToken,
    verifyIdToken,
    deleteUser,
  } = getFirebaseAuth(
    {
      clientEmail: FIREBASE_ADMIN_CLIENT_EMAIL!,
      privateKey: FIREBASE_ADMIN_PRIVATE_KEY!.replace(/\\n/g, "\n"),
      projectId: FIREBASE_PROJECT_ID!,
    },
    FIREBASE_API_KEY!
  );

  it("should create and verify custom token", async () => {
    const userId = v4();
    const customToken = await createCustomToken(userId, {
      customClaim: "customClaimValue",
    });

    const { idToken } = await customTokenToIdAndRefreshTokens(
      customToken,
      FIREBASE_API_KEY!
    );
    const tenant = await verifyIdToken(idToken);

    expect(tenant.uid).toEqual(userId);
    expect(tenant.customClaim).toEqual("customClaimValue");
  });

  it("should verify and refresh token", async () => {
    const userId = v4();
    const customToken = await createCustomToken(userId, {
      customClaim: "customClaimValue",
    });

    const { idToken, refreshToken } = await customTokenToIdAndRefreshTokens(
      customToken,
      FIREBASE_API_KEY!
    );
    const tokens = await verifyAndRefreshExpiredIdToken(idToken, refreshToken);

    expect(tokens?.decodedToken.uid).toEqual(userId);
    expect(tokens?.decodedToken.customClaim).toEqual("customClaimValue");
  });

  it("should checked revoked token", async () => {
    const userId = v4();
    const customToken = await createCustomToken(userId, {
      customClaim: "customClaimValue",
    });

    const { idToken } = await customTokenToIdAndRefreshTokens(
      customToken,
      FIREBASE_API_KEY!
    );
    const tenant = await verifyIdToken(idToken, true);

    expect(tenant.uid).toEqual(userId);
    expect(tenant.customClaim).toEqual("customClaimValue");
  });

  it("should refresh token", async () => {
    const userId = v4();
    const customToken = await createCustomToken(userId, {
      customClaim: "customClaimValue",
    });

    const { idToken, refreshToken } = await customTokenToIdAndRefreshTokens(
      customToken,
      FIREBASE_API_KEY!
    );
    const { decodedToken } = await handleTokenRefresh(
      refreshToken,
      FIREBASE_API_KEY!
    );

    expect(decodedToken.uid).toEqual(userId);
    expect(decodedToken.customClaim).toEqual("customClaimValue");
    expect(decodedToken.token).not.toEqual(idToken);
  });

  it("should throw firebase auth error when user is not found during token refresh", async () => {
    const userId = v4();
    const customToken = await createCustomToken(userId, {
      customClaim: "customClaimValue",
    });

    const { refreshToken } = await customTokenToIdAndRefreshTokens(
      customToken,
      FIREBASE_API_KEY!
    );

    await deleteUser(userId);

    return expect(() =>
      handleTokenRefresh(refreshToken, FIREBASE_API_KEY!)
    ).rejects.toEqual(
      new FirebaseAuthError(AuthClientErrorCode.USER_NOT_FOUND)
    );
  });

  it('should be able to catch "user not found" error and return null', async () => {
    const userId = v4();
    const customToken = await createCustomToken(userId, {
      customClaim: "customClaimValue",
    });

    async function customGetToken() {
      try {
        return await handleTokenRefresh(refreshToken, FIREBASE_API_KEY!);
      } catch (e: unknown) {
        if (isUserNotFoundError(e)) {
          return null;
        }

        throw e;
      }
    }

    const { refreshToken } = await customTokenToIdAndRefreshTokens(
      customToken,
      FIREBASE_API_KEY!
    );

    await deleteUser(userId);

    expect(await customGetToken()).toEqual(null);
  });
});