Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(auth): Add recaptcha and sms toll fraud support for phone auth #2625

Open
wants to merge 11 commits into
base: master
Choose a base branch
from

Conversation

pragatimodi
Copy link
Contributor

No description provided.

@pragatimodi pragatimodi changed the title Enable recaptcha enterprise on phone auth [FR] Add recaptcha and sms toll fraud support for phone auth Jul 29, 2024
@pragatimodi pragatimodi changed the title [FR] Add recaptcha and sms toll fraud support for phone auth feat(auth): Add recaptcha and sms toll fraud support for phone auth Jul 29, 2024
src/auth/auth-config.ts Outdated Show resolved Hide resolved
src/auth/auth-config.ts Outdated Show resolved Hide resolved
*/
export interface RecaptchaTollFraudManagedRule {
/**
* The action will be enforced if the reCAPTCHA score of a request is larger than endScore.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should it be startScore instead of endScore in the doc? Also should we mention the range of values that is allowed and add that into our validation logic?

@pragatimodi pragatimodi marked this pull request as draft August 19, 2024 16:45
@pragatimodi pragatimodi marked this pull request as ready for review September 5, 2024 20:07
Copy link
Contributor

@Xiaoshouzi-gh Xiaoshouzi-gh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

etc/firebase-admin.auth.api.md Outdated Show resolved Hide resolved
useAccountDefender?: boolean;
useSmsBotScore?: boolean;
useSmsTollFraudProtection?: boolean;
tollFraudManagedRules?: RecaptchaTollFraudManagedRule[];
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this a discrepancy between rpc request and response field?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, the rpc request address the field as tollFraudManagedRules and SDK exposes it as smsTollFraudManagedRules

src/auth/auth-config.ts Show resolved Hide resolved
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants