feat: Facebook auth reauthentication

Author: russellwheatley

FirebaseSwiftUI/FirebaseAuthSwiftUI/Sources/Services/AccountService.swift

@@ -11,17 +11,17 @@ extension NSError {
   }
 }
 
-enum AuthenticationToken {
+public enum AuthenticationToken {
   case apple(ASAuthorizationAppleIDCredential, String)
   case firebase(String)
 }
 
-protocol AuthenticatedOperation {
+public protocol AuthenticatedOperation {
   func callAsFunction(on user: User) async throws
   func reauthenticate() async throws -> AuthenticationToken
 }
 
-extension AuthenticatedOperation {
+public extension AuthenticatedOperation {
   func callAsFunction(on _: User,
                       _ performOperation: () async throws -> Void) async throws {
     do {

FirebaseSwiftUI/FirebaseAuthSwiftUI/Sources/Services/AuthService.swift

@@ -82,17 +82,28 @@ public final class AuthService {
   public var authenticationFlow: AuthenticationFlow = .login
   public var errorMessage = ""
   public let passwordPrompt: PasswordPromptCoordinator = .init()
-
-  public var googleProvider: (any GoogleProviderAuthUIProtocol)?
-  public var facebookProvider: (any FacebookProviderAuthUIProtocol)?
-  public var phoneAuthProvider: (any PhoneAuthProviderAuthUIProtocol)?
+  private var googleProvider: (any GoogleProviderAuthUIProtocol)?
+  private var facebookProvider: (any FacebookProviderAuthUIProtocol)?
+  private var phoneAuthProvider: (any PhoneAuthProviderAuthUIProtocol)?
 
   private var listenerManager: AuthListenerManager?
   private var signedInCredential: AuthCredential?
 
   private var providers: [ExternalAuthProvider] = []
   public func register(provider: ExternalAuthProvider) {
-    providers.append(provider)
+    switch provider {
+    case let google as GoogleProviderAuthUIProtocol:
+      googleProvider = google
+      providers.append(provider)
+    case let facebook as FacebookProviderAuthUIProtocol:
+      facebookProvider = facebook
+      providers.append(provider)
+    case let phone as PhoneAuthProviderAuthUIProtocol:
+      phoneAuthProvider = phone
+      providers.append(provider)
+    default:
+      break
+    }
   }
 
   public func renderButtons(spacing: CGFloat = 16) -> AnyView {
@@ -119,7 +130,7 @@ public final class AuthService {
     get throws {
       guard let provider = facebookProvider else {
         throw AuthServiceError
-          .notConfiguredProvider("`FacebookProviderSwift` has not been configured")
+          .notConfiguredProvider("`FacebookProviderAuthUI` has not been configured")
       }
       return provider
     }

FirebaseSwiftUI/FirebaseFacebookSwiftUI/Sources/Services/AccountService+Facebook.swift

@@ -0,0 +1,40 @@
+//
+//  AccountService+Facebook.swift
+//  FirebaseUI
+//
+//  Created by Russell Wheatley on 14/05/2025.
+//
+
+@preconcurrency import FirebaseAuth
+import FirebaseAuthSwiftUI
+import Observation
+
+protocol FacebookOperationReauthentication {}
+
+extension FacebookOperationReauthentication {
+  func reauthenticate() async throws -> AuthenticationToken {
+    guard let user = Auth.auth().currentUser else {
+      throw AuthServiceError.reauthenticationRequired("No user currently signed-in")
+    }
+
+    do {
+      let credential = try await FacebookProviderAuthUI.shared
+        .signInWithFacebook(isLimitedLogin: FacebookProviderAuthUI.shared.isLimitedLogin)
+      try await user.reauthenticate(with: credential)
+
+      return .firebase("")
+    } catch {
+      throw AuthServiceError.signInFailed(underlying: error)
+    }
+  }
+}
+
+class FacebookDeleteUserOperation: AuthenticatedOperation, FacebookOperationReauthentication {
+  init() {}
+
+  func callAsFunction(on user: User) async throws {
+    try await callAsFunction(on: user) {
+      try await user.delete()
+    }
+  }
+}

FirebaseSwiftUI/FirebaseFacebookSwiftUI/Sources/Services/AuthService+Facebook.swift

@@ -10,8 +10,8 @@ import FirebaseAuthSwiftUI
 public extension AuthService {
   @discardableResult
   func withFacebookSignIn(scopes scopes: [String]? = nil) -> AuthService {
-    facebookProvider = FacebookProviderAuthUI(scopes: scopes)
-    register(provider: facebookProvider!)
+    FacebookProviderAuthUI.configureSharedInstance(scopes: scopes)
+    register(provider: FacebookProviderAuthUI.shared)
     return self
   }
 }

FirebaseSwiftUI/FirebaseFacebookSwiftUI/Sources/Services/FacebookProviderAuthUI.swift

@@ -9,28 +9,38 @@ let kFacebookEmailScope = "email"
 let kFacebookProfileScope = "public_profile"
 let kDefaultFacebookScopes = [kFacebookEmailScope, kFacebookProfileScope]
 
-public enum FacebookLoginType {
-  case classic
-  case limitedLogin
-}
-
 public enum FacebookProviderError: Error {
   case signInCancelled(String)
   case configurationInvalid(String)
   case accessToken(String)
   case authenticationToken(String)
 }
 
-public class FacebookProviderAuthUI: FacebookProviderAuthUIProtocol {
+public class FacebookProviderAuthUI: FacebookProviderAuthUIProtocol, @unchecked Sendable {
   public let id: String = "facebook"
   let scopes: [String]
   let shortName = "Facebook"
   let providerId = "facebook.com"
   private let loginManager = LoginManager()
   private var rawNonce: String
   private var shaNonce: String
+  // Needed for reauthentication
+  @MainActor public var isLimitedLogin: Bool = true
+
+  @MainActor private static var _shared: FacebookProviderAuthUI?
+
+  @MainActor public static var shared: FacebookProviderAuthUI {
+    guard let instance = _shared else {
+      fatalError("`FacebookProviderAuthUI` has not been configured")
+    }
+    return instance
+  }
+
+  @MainActor public static func configureSharedInstance(scopes: [String]? = nil) {
+    _shared = FacebookProviderAuthUI(scopes: scopes)
+  }
 
-  public init(scopes: [String]? = nil) {
+  private init(scopes: [String]? = nil) {
     self.scopes = scopes ?? kDefaultFacebookScopes
     rawNonce = CommonUtils.randomNonce()
     shaNonce = CommonUtils.sha256Hash(of: rawNonce)
@@ -41,21 +51,20 @@ public class FacebookProviderAuthUI: FacebookProviderAuthUIProtocol {
   }
 
   @MainActor public func signInWithFacebook(isLimitedLogin: Bool) async throws -> AuthCredential {
-    let trackingStatus = ATTrackingManager.trackingAuthorizationStatus
-    let tracking: LoginTracking = trackingStatus != .authorized ? .limited :
-      (isLimitedLogin ? .limited : .enabled)
+    let loginType: LoginTracking = isLimitedLogin ? .limited : .enabled
+    self.isLimitedLogin = isLimitedLogin
 
     guard let configuration: LoginConfiguration = {
-      if tracking == .limited {
+      if loginType == .limited {
         return LoginConfiguration(
           permissions: scopes,
-          tracking: tracking,
+          tracking: loginType,
           nonce: shaNonce
         )
       } else {
         return LoginConfiguration(
           permissions: scopes,
-          tracking: tracking
+          tracking: loginType
         )
       }
     }() else {
@@ -74,10 +83,8 @@ public class FacebookProviderAuthUI: FacebookProviderAuthUIProtocol {
         case .cancelled:
           continuation
             .resume(throwing: FacebookProviderError.signInCancelled("User cancelled sign-in"))
-        //          showCanceledAlert = true
         case let .failed(error):
           continuation.resume(throwing: error)
-        //          errorMessage = authService.string.localizedErrorMessage(for: error)
         case .success:
           continuation.resume()
         }

FirebaseSwiftUI/FirebaseGoogleSwiftUI/Sources/Services/AuthService+Google.swift

@@ -11,8 +11,7 @@ public extension AuthService {
   @discardableResult
   func withGoogleSignIn(scopes scopes: [String]? = nil) -> AuthService {
     let clientID = auth.app?.options.clientID ?? ""
-    googleProvider = GoogleProviderAuthUI(scopes: scopes, clientID: clientID)
-    register(provider: googleProvider!)
+    register(provider: GoogleProviderAuthUI(scopes: scopes, clientID: clientID))
     return self
   }
 }

FirebaseSwiftUI/FirebasePhoneAuthSwiftUI/Sources/Services/AuthService+Phone.swift

@@ -10,8 +10,7 @@ import FirebaseAuthSwiftUI
 public extension AuthService {
   @discardableResult
   func withPhoneSignIn() -> AuthService {
-    phoneAuthProvider = PhoneAuthProviderAuthUI()
-    register(provider: phoneAuthProvider!)
+    register(provider: PhoneAuthProviderAuthUI())
     return self
   }
 }