Stop calling GetRecaptchaConfig in phone auth when cached config is e…

[NhienLam]

Purpose: Reduce calls to GetRecaptchaConfig and avoid exceeding its quota

At the start of the phone number verification flow, we check the cached phone rCE enablement state. If the cached config is empty or disabled, we don’t call GetRecaptchaConfig, and proceed with reCAPTCHA v2 token and “NO_RECAPTCHA”.

Developers who enable rCE must call initializeRecaptchaConfig to populate the cached rCE config before initiating phone auth. We recommend calling it when the app starts, ideally. This is also currently recommended for email auth flows.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 8bcdd74

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[google-oss-bot]

Size Report ¹

Affected Products

• @firebase/auth

  Type	Base (42e4814)	Merge (e4f6db7)	Diff
  browser	188 kB	188 kB	-196 B (-0.1%)
  esm5	244 kB	244 kB	-308 B (-0.1%)
  module	188 kB	188 kB	-196 B (-0.1%)
  react-native	207 kB	207 kB	-308 B (-0.1%)

• @firebase/auth-web-extension

  Type	Base (42e4814)	Merge (e4f6db7)	Diff
  main	157 kB	157 kB	-71 B (-0.0%)

• @firebase/auth/internal

  Type	Base (42e4814)	Merge (e4f6db7)	Diff
  browser	199 kB	199 kB	-196 B (-0.1%)
  esm5	258 kB	257 kB	-308 B (-0.1%)
  module	199 kB	199 kB	-196 B (-0.1%)

• bundle

  Type	Base (42e4814)	Merge (e4f6db7)	Diff
  auth (Phone)	93.6 kB	93.2 kB	-453 B (-0.5%)

• firebase

  Type	Base (42e4814)	Merge (e4f6db7)	Diff
  firebase-auth-compat.js	143 kB	142 kB	-432 B (-0.3%)
  firebase-auth.js	154 kB	154 kB	-214 B (-0.1%)
  firebase-compat.js	792 kB	792 kB	-432 B (-0.1%)

Test Logs

• Base (42e4814): https://github.com/firebase/firebase-js-sdk/actions/runs/10864891632
• Merge (e4f6db7): https://github.com/firebase/firebase-js-sdk/actions/runs/10899017087

1. https://storage.googleapis.com/firebase-sdk-metric-reports/n2Boqo74gm.html

[google-oss-bot]

Size Analysis Report ¹

Affected Products

• @firebase/auth

  • PhoneAuthProvider

    Size

    Type	Base (42e4814)	Merge (e4f6db7)	Diff
    size	50.6 kB	50.2 kB	-451 B (-0.9%)
    size-with-ext-deps	72.2 kB	71.8 kB	-453 B (-0.6%)

    Dependency

    Type	Base (42e4814)	Merge (e4f6db7)	Diff
    functions	72 dependencies _addTidIfNecessary _assert _castAuth _createError _emulatorUrl _errorWithCustomMessage _fail _getBrowserName _getClientVersion _getCurrentScheme _getFinalTarget _getInstance _getPasswordPolicy _getUserLanguage _initializeAuthInstance _initializeRecaptchaConfig _isAndroid _isBlackBerry _isChromeIOS _isFirefox _isHttpOrHttps _isIEMobile _isOnline _isSafari _isWebOS _loadJS _logError _logWarn _logoutIfInvalidated _makeTaggedError _parseEnforcementState _parseToken _performApiRequest _performFetchWithErrorHandling _performSignInRequest _persistenceKeyName _prodErrorMap _recaptchaEnterpriseScriptUrl _reloadWithoutSaving _serverAppCurrentUserOperationNotSupportedError _setExternalJSProvider _tokenExpiresIn _verifyPhoneNumber assertStringOrUndefined createErrorInternal debugAssert debugFail deleteAccount extractProviderData getAccountInfo getIdTokenResult getRecaptchaConfig getScriptParentElement getVersionForPlatform handleRecaptchaFlow injectRecaptchaFields injectRecaptchaV2Token isEnterprise isUserInvalidated linkWithPhoneNumber$1 mergeProviderData registerAuth reload requestStsToken revokeToken secondsStringToMilliseconds sendPhoneVerificationCode signInWithPhoneNumber$1 startEnrollPhoneMfa startSignInPhoneMfa utcTimestampToDateString verifyPhoneNumberForExisting	71 dependencies _addTidIfNecessary _assert _castAuth _createError _emulatorUrl _errorWithCustomMessage _fail _getBrowserName _getClientVersion _getCurrentScheme _getFinalTarget _getInstance _getPasswordPolicy _getUserLanguage _initializeAuthInstance _isAndroid _isBlackBerry _isChromeIOS _isFirefox _isHttpOrHttps _isIEMobile _isOnline _isSafari _isWebOS _loadJS _logError _logWarn _logoutIfInvalidated _makeTaggedError _parseEnforcementState _parseToken _performApiRequest _performFetchWithErrorHandling _performSignInRequest _persistenceKeyName _prodErrorMap _recaptchaEnterpriseScriptUrl _reloadWithoutSaving _serverAppCurrentUserOperationNotSupportedError _setExternalJSProvider _tokenExpiresIn _verifyPhoneNumber assertStringOrUndefined createErrorInternal debugAssert debugFail deleteAccount extractProviderData getAccountInfo getIdTokenResult getRecaptchaConfig getScriptParentElement getVersionForPlatform handleRecaptchaFlow injectRecaptchaFields injectRecaptchaV2Token isEnterprise isUserInvalidated linkWithPhoneNumber$1 mergeProviderData registerAuth reload requestStsToken revokeToken secondsStringToMilliseconds sendPhoneVerificationCode signInWithPhoneNumber$1 startEnrollPhoneMfa startSignInPhoneMfa utcTimestampToDateString verifyPhoneNumberForExisting	- _initializeRecaptchaConfig

  • linkWithPhoneNumber

    Size

    Type	Base (42e4814)	Merge (e4f6db7)	Diff
    size	51.4 kB	50.9 kB	-451 B (-0.9%)
    size-with-ext-deps	73.0 kB	72.5 kB	-453 B (-0.6%)

    Dependency

    Type	Base (42e4814)	Merge (e4f6db7)	Diff
    functions	78 dependencies _addTidIfNecessary _assert _assertLinkedStatus _castAuth _createError _emulatorUrl _errorWithCustomMessage _fail _getBrowserName _getClientVersion _getCurrentScheme _getFinalTarget _getInstance _getPasswordPolicy _getUserLanguage _initializeAuthInstance _initializeRecaptchaConfig _isAndroid _isBlackBerry _isChromeIOS _isFirefox _isHttpOrHttps _isIEMobile _isOnline _isSafari _isWebOS _link$1 _loadJS _logError _logWarn _logoutIfInvalidated _makeTaggedError _parseEnforcementState _parseToken _performApiRequest _performFetchWithErrorHandling _performSignInRequest _persistenceKeyName _prodErrorMap _recaptchaEnterpriseScriptUrl _reloadWithoutSaving _serverAppCurrentUserOperationNotSupportedError _setExternalJSProvider _tokenExpiresIn _verifyPhoneNumber assertStringOrUndefined createErrorInternal debugAssert debugFail deleteAccount extractProviderData getAccountInfo getIdTokenResult getRecaptchaConfig getScriptParentElement getVersionForPlatform handleRecaptchaFlow injectRecaptchaFields injectRecaptchaV2Token isEnterprise isUserInvalidated linkWithCredential linkWithPhoneNumber linkWithPhoneNumber$1 mergeProviderData providerDataAsNames providerIdForResponse registerAuth reload requestStsToken revokeToken secondsStringToMilliseconds sendPhoneVerificationCode signInWithPhoneNumber$1 startEnrollPhoneMfa startSignInPhoneMfa utcTimestampToDateString verifyPhoneNumberForExisting	77 dependencies _addTidIfNecessary _assert _assertLinkedStatus _castAuth _createError _emulatorUrl _errorWithCustomMessage _fail _getBrowserName _getClientVersion _getCurrentScheme _getFinalTarget _getInstance _getPasswordPolicy _getUserLanguage _initializeAuthInstance _isAndroid _isBlackBerry _isChromeIOS _isFirefox _isHttpOrHttps _isIEMobile _isOnline _isSafari _isWebOS _link$1 _loadJS _logError _logWarn _logoutIfInvalidated _makeTaggedError _parseEnforcementState _parseToken _performApiRequest _performFetchWithErrorHandling _performSignInRequest _persistenceKeyName _prodErrorMap _recaptchaEnterpriseScriptUrl _reloadWithoutSaving _serverAppCurrentUserOperationNotSupportedError _setExternalJSProvider _tokenExpiresIn _verifyPhoneNumber assertStringOrUndefined createErrorInternal debugAssert debugFail deleteAccount extractProviderData getAccountInfo getIdTokenResult getRecaptchaConfig getScriptParentElement getVersionForPlatform handleRecaptchaFlow injectRecaptchaFields injectRecaptchaV2Token isEnterprise isUserInvalidated linkWithCredential linkWithPhoneNumber linkWithPhoneNumber$1 mergeProviderData providerDataAsNames providerIdForResponse registerAuth reload requestStsToken revokeToken secondsStringToMilliseconds sendPhoneVerificationCode signInWithPhoneNumber$1 startEnrollPhoneMfa startSignInPhoneMfa utcTimestampToDateString verifyPhoneNumberForExisting	- _initializeRecaptchaConfig

  • reauthenticateWithPhoneNumber

    Size

    Type	Base (42e4814)	Merge (e4f6db7)	Diff
    size	52.0 kB	51.6 kB	-451 B (-0.9%)
    size-with-ext-deps	73.6 kB	73.2 kB	-453 B (-0.6%)

    Dependency

    Type	Base (42e4814)	Merge (e4f6db7)	Diff
    functions	77 dependencies _addTidIfNecessary _assert _castAuth _createError _emulatorUrl _errorWithCustomMessage _fail _getBrowserName _getClientVersion _getCurrentScheme _getFinalTarget _getInstance _getPasswordPolicy _getUserLanguage _initializeAuthInstance _initializeRecaptchaConfig _isAndroid _isBlackBerry _isChromeIOS _isFirefox _isHttpOrHttps _isIEMobile _isOnline _isSafari _isWebOS _loadJS _logError _logWarn _logoutIfInvalidated _makeTaggedError _parseEnforcementState _parseToken _performApiRequest _performFetchWithErrorHandling _performSignInRequest _persistenceKeyName _processCredentialSavingMfaContextIfNecessary _prodErrorMap _reauthenticate _recaptchaEnterpriseScriptUrl _reloadWithoutSaving _serverAppCurrentUserOperationNotSupportedError _setExternalJSProvider _tokenExpiresIn _verifyPhoneNumber assertStringOrUndefined createErrorInternal debugAssert debugFail deleteAccount extractProviderData getAccountInfo getIdTokenResult getRecaptchaConfig getScriptParentElement getVersionForPlatform handleRecaptchaFlow injectRecaptchaFields injectRecaptchaV2Token isEnterprise isUserInvalidated linkWithPhoneNumber$1 mergeProviderData providerIdForResponse reauthenticateWithCredential reauthenticateWithPhoneNumber registerAuth reload requestStsToken revokeToken secondsStringToMilliseconds sendPhoneVerificationCode signInWithPhoneNumber$1 startEnrollPhoneMfa startSignInPhoneMfa utcTimestampToDateString verifyPhoneNumberForExisting	76 dependencies _addTidIfNecessary _assert _castAuth _createError _emulatorUrl _errorWithCustomMessage _fail _getBrowserName _getClientVersion _getCurrentScheme _getFinalTarget _getInstance _getPasswordPolicy _getUserLanguage _initializeAuthInstance _isAndroid _isBlackBerry _isChromeIOS _isFirefox _isHttpOrHttps _isIEMobile _isOnline _isSafari _isWebOS _loadJS _logError _logWarn _logoutIfInvalidated _makeTaggedError _parseEnforcementState _parseToken _performApiRequest _performFetchWithErrorHandling _performSignInRequest _persistenceKeyName _processCredentialSavingMfaContextIfNecessary _prodErrorMap _reauthenticate _recaptchaEnterpriseScriptUrl _reloadWithoutSaving _serverAppCurrentUserOperationNotSupportedError _setExternalJSProvider _tokenExpiresIn _verifyPhoneNumber assertStringOrUndefined createErrorInternal debugAssert debugFail deleteAccount extractProviderData getAccountInfo getIdTokenResult getRecaptchaConfig getScriptParentElement getVersionForPlatform handleRecaptchaFlow injectRecaptchaFields injectRecaptchaV2Token isEnterprise isUserInvalidated linkWithPhoneNumber$1 mergeProviderData providerIdForResponse reauthenticateWithCredential reauthenticateWithPhoneNumber registerAuth reload requestStsToken revokeToken secondsStringToMilliseconds sendPhoneVerificationCode signInWithPhoneNumber$1 startEnrollPhoneMfa startSignInPhoneMfa utcTimestampToDateString verifyPhoneNumberForExisting	- _initializeRecaptchaConfig

  • signInWithPhoneNumber

    Size

    Type	Base (42e4814)	Merge (e4f6db7)	Diff
    size	51.8 kB	51.4 kB	-451 B (-0.9%)
    size-with-ext-deps	73.4 kB	73.0 kB	-453 B (-0.6%)

    Dependency

    Type	Base (42e4814)	Merge (e4f6db7)	Diff
    functions	77 dependencies _addTidIfNecessary _assert _castAuth _createError _emulatorUrl _errorWithCustomMessage _fail _getBrowserName _getClientVersion _getCurrentScheme _getFinalTarget _getInstance _getPasswordPolicy _getUserLanguage _initializeAuthInstance _initializeRecaptchaConfig _isAndroid _isBlackBerry _isChromeIOS _isFirefox _isHttpOrHttps _isIEMobile _isOnline _isSafari _isWebOS _loadJS _logError _logWarn _logoutIfInvalidated _makeTaggedError _parseEnforcementState _parseToken _performApiRequest _performFetchWithErrorHandling _performSignInRequest _persistenceKeyName _processCredentialSavingMfaContextIfNecessary _prodErrorMap _recaptchaEnterpriseScriptUrl _reloadWithoutSaving _serverAppCurrentUserOperationNotSupportedError _setExternalJSProvider _signInWithCredential _tokenExpiresIn _verifyPhoneNumber assertStringOrUndefined createErrorInternal debugAssert debugFail deleteAccount extractProviderData getAccountInfo getIdTokenResult getRecaptchaConfig getScriptParentElement getVersionForPlatform handleRecaptchaFlow injectRecaptchaFields injectRecaptchaV2Token isEnterprise isUserInvalidated linkWithPhoneNumber$1 mergeProviderData providerIdForResponse registerAuth reload requestStsToken revokeToken secondsStringToMilliseconds sendPhoneVerificationCode signInWithCredential signInWithPhoneNumber signInWithPhoneNumber$1 startEnrollPhoneMfa startSignInPhoneMfa utcTimestampToDateString verifyPhoneNumberForExisting	76 dependencies _addTidIfNecessary _assert _castAuth _createError _emulatorUrl _errorWithCustomMessage _fail _getBrowserName _getClientVersion _getCurrentScheme _getFinalTarget _getInstance _getPasswordPolicy _getUserLanguage _initializeAuthInstance _isAndroid _isBlackBerry _isChromeIOS _isFirefox _isHttpOrHttps _isIEMobile _isOnline _isSafari _isWebOS _loadJS _logError _logWarn _logoutIfInvalidated _makeTaggedError _parseEnforcementState _parseToken _performApiRequest _performFetchWithErrorHandling _performSignInRequest _persistenceKeyName _processCredentialSavingMfaContextIfNecessary _prodErrorMap _recaptchaEnterpriseScriptUrl _reloadWithoutSaving _serverAppCurrentUserOperationNotSupportedError _setExternalJSProvider _signInWithCredential _tokenExpiresIn _verifyPhoneNumber assertStringOrUndefined createErrorInternal debugAssert debugFail deleteAccount extractProviderData getAccountInfo getIdTokenResult getRecaptchaConfig getScriptParentElement getVersionForPlatform handleRecaptchaFlow injectRecaptchaFields injectRecaptchaV2Token isEnterprise isUserInvalidated linkWithPhoneNumber$1 mergeProviderData providerIdForResponse registerAuth reload requestStsToken revokeToken secondsStringToMilliseconds sendPhoneVerificationCode signInWithCredential signInWithPhoneNumber signInWithPhoneNumber$1 startEnrollPhoneMfa startSignInPhoneMfa utcTimestampToDateString verifyPhoneNumberForExisting	- _initializeRecaptchaConfig

Test Logs

• Base (42e4814): https://github.com/firebase/firebase-js-sdk/actions/runs/10864891632
• Merge (e4f6db7): https://github.com/firebase/firebase-js-sdk/actions/runs/10899017087

1. https://storage.googleapis.com/firebase-sdk-metric-reports/vVD8f1P89R.html