package io.invertase.firebase.auth; import android.util.Log; import android.net.Uri; import android.support.annotation.NonNull; import java.util.List; import java.util.regex.Matcher; import java.util.regex.Pattern; import com.facebook.react.bridge.Arguments; import com.facebook.react.bridge.Promise; import com.facebook.react.bridge.ReactApplicationContext; import com.facebook.react.bridge.ReactContextBaseJavaModule; import com.facebook.react.bridge.ReactMethod; import com.facebook.react.bridge.WritableArray; import com.facebook.react.bridge.WritableMap; import com.facebook.react.bridge.ReadableMap; import com.facebook.react.bridge.ReactContext; import com.google.android.gms.tasks.OnCompleteListener; import com.google.android.gms.tasks.OnFailureListener; import com.google.android.gms.tasks.OnSuccessListener; import com.google.android.gms.tasks.Task; import com.google.firebase.auth.ActionCodeResult; import com.google.firebase.auth.AuthCredential; import com.google.firebase.auth.AuthResult; import com.google.firebase.auth.FirebaseAuthInvalidCredentialsException; import com.google.firebase.auth.GithubAuthProvider; import com.google.firebase.auth.ProviderQueryResult; import com.google.firebase.auth.TwitterAuthProvider; import com.google.firebase.auth.UserInfo; import com.google.firebase.auth.UserProfileChangeRequest; import com.google.firebase.auth.FacebookAuthProvider; import com.google.firebase.auth.FirebaseAuth; import com.google.firebase.auth.FirebaseAuthException; import com.google.firebase.auth.FirebaseUser; import com.google.firebase.auth.GetTokenResult; import com.google.firebase.auth.GoogleAuthProvider; import com.google.firebase.auth.EmailAuthProvider; import io.invertase.firebase.Utils; @SuppressWarnings("ThrowableResultOfMethodCallIgnored") public class RNFirebaseAuth extends ReactContextBaseJavaModule { private static final String TAG = "RNFirebaseAuth"; private ReactContext mReactContext; private FirebaseAuth mAuth; private FirebaseAuth.AuthStateListener mAuthListener; public RNFirebaseAuth(ReactApplicationContext reactContext) { super(reactContext); mReactContext = reactContext; mAuth = FirebaseAuth.getInstance(); Log.d(TAG, "RNFirebaseAuth:initialized"); } @Override public String getName() { return TAG; } /** * Add a new auth state listener - if one doesn't exist already */ @ReactMethod public void addAuthStateListener() { Log.d(TAG, "addAuthStateListener"); if (mAuthListener == null) { mAuthListener = new FirebaseAuth.AuthStateListener() { @Override public void onAuthStateChanged(@NonNull FirebaseAuth firebaseAuth) { FirebaseUser user = firebaseAuth.getCurrentUser(); WritableMap msgMap = Arguments.createMap(); if (user != null) { msgMap.putBoolean("authenticated", true); msgMap.putMap("user", firebaseUserToMap(user)); Utils.sendEvent(mReactContext, "onAuthStateChanged", msgMap); } else { msgMap.putBoolean("authenticated", false); Utils.sendEvent(mReactContext, "onAuthStateChanged", msgMap); } } }; mAuth.addAuthStateListener(mAuthListener); } } /** * Removes the current auth state listener */ @ReactMethod public void removeAuthStateListener() { Log.d(TAG, "removeAuthStateListener"); if (mAuthListener != null) { mAuth.removeAuthStateListener(mAuthListener); } } /** * signOut * * @param promise */ @ReactMethod public void signOut(final Promise promise) { Log.d(TAG, "signOut"); if (mAuth == null || mAuth.getCurrentUser() == null) { promiseNoUser(promise, true); } else { mAuth.signOut(); promiseNoUser(promise, false); } } /** * signInAnonymously * * @param promise */ @ReactMethod public void signInAnonymously(final Promise promise) { Log.d(TAG, "signInAnonymously"); mAuth.signInAnonymously() .addOnSuccessListener(new OnSuccessListener() { @Override public void onSuccess(AuthResult authResult) { Log.d(TAG, "signInAnonymously:onComplete:success"); promiseWithUser(authResult.getUser(), promise); } }) .addOnFailureListener(new OnFailureListener() { @Override public void onFailure(@NonNull Exception exception) { Log.e(TAG, "signInAnonymously:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } }); } /** * createUserWithEmailAndPassword * * @param email * @param password * @param promise */ @ReactMethod public void createUserWithEmailAndPassword(final String email, final String password, final Promise promise) { Log.d(TAG, "createUserWithEmailAndPassword"); mAuth.createUserWithEmailAndPassword(email, password) .addOnSuccessListener(new OnSuccessListener() { @Override public void onSuccess(AuthResult authResult) { Log.d(TAG, "createUserWithEmailAndPassword:onComplete:success"); promiseWithUser(authResult.getUser(), promise); } }) .addOnFailureListener(new OnFailureListener() { @Override public void onFailure(@NonNull Exception exception) { Log.e(TAG, "createUserWithEmailAndPassword:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } }); } /** * signInWithEmailAndPassword * * @param email * @param password * @param promise */ @ReactMethod public void signInWithEmailAndPassword(final String email, final String password, final Promise promise) { Log.d(TAG, "signInWithEmailAndPassword"); mAuth.signInWithEmailAndPassword(email, password) .addOnSuccessListener(new OnSuccessListener() { @Override public void onSuccess(AuthResult authResult) { Log.d(TAG, "signInWithEmailAndPassword:onComplete:success"); promiseWithUser(authResult.getUser(), promise); } }) .addOnFailureListener(new OnFailureListener() { @Override public void onFailure(@NonNull Exception exception) { Log.e(TAG, "signInWithEmailAndPassword:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } }); } /** * signInWithCustomToken * * @param token * @param promise */ @ReactMethod public void signInWithCustomToken(final String token, final Promise promise) { Log.d(TAG, "signInWithCustomToken"); mAuth.signInWithCustomToken(token) .addOnSuccessListener(new OnSuccessListener() { @Override public void onSuccess(AuthResult authResult) { Log.d(TAG, "signInWithCustomToken:onComplete:success"); promiseWithUser(authResult.getUser(), promise); } }) .addOnFailureListener(new OnFailureListener() { @Override public void onFailure(@NonNull Exception exception) { Log.e(TAG, "signInWithCustomToken:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } }); } /** * sendPasswordResetEmail * * @param email * @param promise */ @ReactMethod public void sendPasswordResetEmail(final String email, final Promise promise) { Log.d(TAG, "sendPasswordResetEmail"); mAuth.sendPasswordResetEmail(email) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "sendPasswordResetEmail:onComplete:success"); promiseNoUser(promise, false); } else { Exception exception = task.getException(); Log.e(TAG, "sendPasswordResetEmail:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } /** * getCurrentUser - returns the current user, probably no need for this due to * js side already listening for user auth changes * * @param promise */ @ReactMethod public void getCurrentUser(final Promise promise) { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "getCurrentUser"); if (user == null) { promiseNoUser(promise, false); } else { promiseWithUser(user, promise); } } /* ---------------------- * .currentUser methods * ---------------------- */ /** * delete * * @param promise */ @ReactMethod public void delete(final Promise promise) { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "delete"); if (user != null) { user.delete() .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "delete:onComplete:success"); promiseNoUser(promise, false); } else { Exception exception = task.getException(); Log.e(TAG, "delete:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } else { Log.e(TAG, "delete:failure:noCurrentUser"); promiseNoUser(promise, true); } } /** * reload * * @param promise */ @ReactMethod public void reload(final Promise promise) { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "reload"); if (user == null) { promiseNoUser(promise, false); Log.e(TAG, "reload:failure:noCurrentUser"); } else { user.reload() .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "reload:onComplete:success"); promiseWithUser(mAuth.getCurrentUser(), promise); } else { Exception exception = task.getException(); Log.e(TAG, "reload:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } } /** * sendEmailVerification * * @param promise */ @ReactMethod public void sendEmailVerification(final Promise promise) { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "sendEmailVerification"); if (user == null) { promiseNoUser(promise, false); Log.e(TAG, "sendEmailVerification:failure:noCurrentUser"); } else { user.sendEmailVerification() .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "sendEmailVerification:onComplete:success"); promiseWithUser(mAuth.getCurrentUser(), promise); } else { Exception exception = task.getException(); Log.e(TAG, "sendEmailVerification:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } } /** * updateEmail * * @param email * @param promise */ @ReactMethod public void updateEmail(final String email, final Promise promise) { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "updateEmail"); if (user == null) { promiseNoUser(promise, false); Log.e(TAG, "updateEmail:failure:noCurrentUser"); } else { user.updateEmail(email) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "updateEmail:onComplete:success"); promiseWithUser(mAuth.getCurrentUser(), promise); } else { Exception exception = task.getException(); Log.e(TAG, "updateEmail:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } } /** * updatePassword * * @param password * @param promise */ @ReactMethod public void updatePassword(final String password, final Promise promise) { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "updatePassword"); if (user == null) { promiseNoUser(promise, false); Log.e(TAG, "updatePassword:failure:noCurrentUser"); } else { user.updatePassword(password) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "updatePassword:onComplete:success"); promiseWithUser(mAuth.getCurrentUser(), promise); } else { Exception exception = task.getException(); Log.e(TAG, "updatePassword:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } } /** * updateProfile * * @param props * @param promise */ @ReactMethod public void updateProfile(ReadableMap props, final Promise promise) { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "updateProfile"); if (user == null) { promiseNoUser(promise, false); Log.e(TAG, "updateProfile:failure:noCurrentUser"); } else { UserProfileChangeRequest.Builder profileBuilder = new UserProfileChangeRequest.Builder(); if (props.hasKey("displayName")) { String displayName = props.getString("displayName"); profileBuilder.setDisplayName(displayName); } if (props.hasKey("photoURL")) { String photoURLStr = props.getString("photoURL"); Uri uri = Uri.parse(photoURLStr); profileBuilder.setPhotoUri(uri); } UserProfileChangeRequest profileUpdates = profileBuilder.build(); user.updateProfile(profileUpdates) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "updateProfile:onComplete:success"); promiseWithUser(mAuth.getCurrentUser(), promise); } else { Exception exception = task.getException(); Log.e(TAG, "updateProfile:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } } /** * signInWithCredential * * @param provider * @param authToken * @param authSecret * @param promise */ @ReactMethod public void signInWithCredential(final String provider, final String authToken, final String authSecret, final Promise promise) { AuthCredential credential = getCredentialForProvider(provider, authToken, authSecret); if (credential == null) { promise.reject("auth/invalid-credential", "The supplied auth credential is malformed, has expired or is not currently supported."); } else { Log.d(TAG, "signInWithCredential"); mAuth.signInWithCredential(credential) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "signInWithCredential:onComplete:success"); promiseWithUser(task.getResult().getUser(), promise); } else { Exception exception = task.getException(); Log.e(TAG, "signInWithCredential:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } } /** * confirmPasswordReset * * @param code * @param newPassword * @param promise */ @ReactMethod public void confirmPasswordReset(String code, String newPassword, final Promise promise) { Log.d(TAG, "confirmPasswordReset"); mAuth.confirmPasswordReset(code, newPassword) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "confirmPasswordReset:onComplete:success"); promiseNoUser(promise, false); } else { Exception exception = task.getException(); Log.e(TAG, "confirmPasswordReset:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } /** * applyActionCode * * @param code * @param promise */ @ReactMethod public void applyActionCode(String code, final Promise promise) { Log.d(TAG, "applyActionCode"); mAuth.applyActionCode(code).addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "applyActionCode:onComplete:success"); promiseNoUser(promise, false); } else { Exception exception = task.getException(); Log.e(TAG, "applyActionCode:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } /** * @param code * @param promise */ @ReactMethod public void checkActionCode(String code, final Promise promise) { Log.d(TAG, "checkActionCode"); mAuth.checkActionCode(code).addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "checkActionCode:onComplete:success"); ActionCodeResult result = task.getResult(); WritableMap writableMap = Arguments.createMap(); WritableMap dataMap = Arguments.createMap(); dataMap.putString("email", result.getData(ActionCodeResult.EMAIL)); dataMap.putString("fromEmail", result.getData(ActionCodeResult.FROM_EMAIL)); writableMap.putMap("data", dataMap); // TODO figure out if these are required - web sdk only returns the 'email' and nothing else // writableMap.putString("error", result.getData(ActionCodeResult.ERROR)); // writableMap.putString("verifyEmail", result.getData(ActionCodeResult.VERIFY_EMAIL)); // writableMap.putString("recoverEmail", result.getData(ActionCodeResult.RECOVER_EMAIL)); // writableMap.putString("passwordReset", result.getData(ActionCodeResult.PASSWORD_RESET)); promise.resolve(writableMap); } else { Exception exception = task.getException(); Log.e(TAG, "checkActionCode:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } /** * link * * @param provider * @param authToken * @param authSecret * @param promise */ @ReactMethod public void link(final String provider, final String authToken, final String authSecret, final Promise promise) { AuthCredential credential = getCredentialForProvider(provider, authToken, authSecret); if (credential == null) { promise.reject("auth/invalid-credential", "The supplied auth credential is malformed, has expired or is not currently supported."); } else { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "link"); if (user != null) { user.linkWithCredential(credential) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "link:onComplete:success"); promiseWithUser(task.getResult().getUser(), promise); } else { Exception exception = task.getException(); Log.e(TAG, "link:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } else { promiseNoUser(promise, true); } } } /** * reauthenticate * * @param provider * @param authToken * @param authSecret * @param promise */ @ReactMethod public void reauthenticate(final String provider, final String authToken, final String authSecret, final Promise promise) { AuthCredential credential = getCredentialForProvider(provider, authToken, authSecret); if (credential == null) { promise.reject("auth/invalid-credential", "The supplied auth credential is malformed, has expired or is not currently supported."); } else { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "reauthenticate"); if (user != null) { user.reauthenticate(credential) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "reauthenticate:onComplete:success"); promiseWithUser(mAuth.getCurrentUser(), promise); } else { Exception exception = task.getException(); Log.e(TAG, "reauthenticate:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } else { promiseNoUser(promise, true); } } } /** * Returns an instance of AuthCredential for the specified provider * * @param provider * @param authToken * @param authSecret * @return */ public AuthCredential getCredentialForProvider(String provider, String authToken, String authSecret) { switch (provider) { case "facebook": return FacebookAuthProvider.getCredential(authToken); case "google": return GoogleAuthProvider.getCredential(authToken, authSecret); case "twitter": return TwitterAuthProvider.getCredential(authToken, authSecret); case "github": return GithubAuthProvider.getCredential(authToken); case "password": return EmailAuthProvider.getCredential(authToken, authSecret); default: return null; } } /** * getToken * * @param promise */ @ReactMethod public void getToken(final Boolean forceRefresh, final Promise promise) { FirebaseUser user = mAuth.getCurrentUser(); Log.d(TAG, "getToken"); if (user != null) { user.getToken(forceRefresh) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "getToken:onComplete:success"); promise.resolve(task.getResult().getToken()); } else { Exception exception = task.getException(); Log.e(TAG, "getToken:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } else { promiseNoUser(promise, true); } } /** * fetchProvidersForEmail * * @param promise */ @ReactMethod public void fetchProvidersForEmail(final String email, final Promise promise) { Log.d(TAG, "fetchProvidersForEmail"); mAuth.fetchProvidersForEmail(email) .addOnCompleteListener(new OnCompleteListener() { @Override public void onComplete(@NonNull Task task) { if (task.isSuccessful()) { Log.d(TAG, "fetchProvidersForEmail:onComplete:success"); List providers = task.getResult().getProviders(); WritableArray array = Arguments.createArray(); if (providers != null) { for (String provider : providers) { array.pushString(provider); } } promise.resolve(array); } else { Exception exception = task.getException(); Log.d(TAG, "fetchProvidersForEmail:onComplete:failure", exception); promiseRejectAuthException(promise, exception); } } }); } /* ------------------ * INTERNAL HELPERS * ---------------- */ /** * Resolves or rejects an auth method promise without a user (user was missing) * * @param promise * @param isError */ private void promiseNoUser(Promise promise, Boolean isError) { if (isError) { promise.reject("auth/no-current-user", "No user currently signed in."); } else { promise.resolve(null); } } /** * promiseWithUser * * @param user * @param promise */ private void promiseWithUser(final FirebaseUser user, final Promise promise) { if (user != null) { WritableMap userMap = firebaseUserToMap(user); promise.resolve(userMap); } else { promiseNoUser(promise, true); } } /** * promiseRejectAuthException * * @param promise * @param exception */ private void promiseRejectAuthException(Promise promise, Exception exception) { String code = "UNKNOWN"; String message = exception.getMessage(); String invalidEmail = "The email address is badly formatted."; try { FirebaseAuthException authException = (FirebaseAuthException) exception; code = authException.getErrorCode(); message = authException.getMessage(); } catch (Exception e) { Matcher matcher = Pattern.compile("\\[(.*):.*\\]").matcher(message); if (matcher.find()) { code = matcher.group(1).trim(); switch (code) { case "INVALID_CUSTOM_TOKEN": message = "The custom token format is incorrect. Please check the documentation."; break; case "CUSTOM_TOKEN_MISMATCH": message = "The custom token corresponds to a different audience."; break; case "INVALID_CREDENTIAL": message = "The supplied auth credential is malformed or has expired."; break; case "INVALID_EMAIL": message = invalidEmail; break; case "WRONG_PASSWORD": message = "The password is invalid or the user does not have a password."; break; case "USER_MISMATCH": message = "The supplied credentials do not correspond to the previously signed in user."; break; case "REQUIRES_RECENT_LOGIN": message = "This operation is sensitive and requires recent authentication. Log in again before retrying this request."; break; case "ACCOUNT_EXISTS_WITH_DIFFERENT_CREDENTIAL": message = "An account already exists with the same email address but different sign-in credentials. Sign in using a provider associated with this email address."; break; case "EMAIL_ALREADY_IN_USE": message = "The email address is already in use by another account."; break; case "CREDENTIAL_ALREADY_IN_USE": message = "This credential is already associated with a different user account."; break; case "USER_DISABLED": message = "The user account has been disabled by an administrator."; break; case "USER_TOKEN_EXPIRED": message = "The user\'s credential is no longer valid. The user must sign in again."; break; case "USER_NOT_FOUND": message = "There is no user record corresponding to this identifier. The user may have been deleted."; break; case "INVALID_USER_TOKEN": message = "The user\'s credential is no longer valid. The user must sign in again."; break; case "WEAK_PASSWORD": message = "The given password is invalid."; break; case "OPERATION_NOT_ALLOWED": message = "This operation is not allowed. You must enable this service in the console."; break; } } } if (code.equals("UNKNOWN") && exception instanceof FirebaseAuthInvalidCredentialsException) { code = "INVALID_EMAIL"; message = invalidEmail; } code = "auth/" + code.toLowerCase().replace("error_", "").replace('_', '-'); promise.reject(code, message, exception); } /** * Converts a List of UserInfo instances into the correct format to match the web sdk * * @param providerData List user.getProviderData() * @return WritableArray array */ private WritableArray convertProviderData(List providerData) { WritableArray output = Arguments.createArray(); for (UserInfo userInfo : providerData) { WritableMap userInfoMap = Arguments.createMap(); userInfoMap.putString("providerId", userInfo.getProviderId()); userInfoMap.putString("uid", userInfo.getUid()); userInfoMap.putString("displayName", userInfo.getDisplayName()); final Uri photoUrl = userInfo.getPhotoUrl(); if (photoUrl != null) { userInfoMap.putString("photoURL", photoUrl.toString()); } else { userInfoMap.putNull("photoURL"); } userInfoMap.putString("email", userInfo.getEmail()); output.pushMap(userInfoMap); } return output; } /** * firebaseUserToMap * * @param user * @return */ private WritableMap firebaseUserToMap(FirebaseUser user) { WritableMap userMap = Arguments.createMap(); final String email = user.getEmail(); final String uid = user.getUid(); final String provider = user.getProviderId(); final String name = user.getDisplayName(); final Boolean verified = user.isEmailVerified(); final Uri photoUrl = user.getPhotoUrl(); userMap.putString("uid", uid); userMap.putString("providerId", provider); userMap.putBoolean("emailVerified", verified); userMap.putBoolean("isAnonymous", user.isAnonymous()); if (email != null) { userMap.putString("email", email); } else { userMap.putNull("email"); } if (name != null) { userMap.putString("displayName", name); } else { userMap.putNull("displayName"); } if (photoUrl != null) { userMap.putString("photoURL", photoUrl.toString()); } else { userMap.putNull("photoURL"); } userMap.putArray("providerData", convertProviderData(user.getProviderData())); return userMap; } }