bleedingdeacons / fellowship

90%

LAST BUILD ON BRANCH main

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• chore/build-quality-parity-with-reach
• chore/declare-php-extensions
• docs/tests-badge
• feat/admin-password-reset
• feat/admin-send-credits-author
• feat/all-gsrs
• feat/audience-own-client
• feat/delivery-receipts
• feat/descriptive-user-agent
• feat/directory-cli
• feat/directory-group-and-gsr
• feat/directory-has-device
• feat/directory-service-position
• feat/drop-logging-route
• feat/firebase-native-sign-in
• feat/guardian-oauth
• feat/identity-broker
• feat/initial-implementation
• feat/microsoft-and-facebook-sign-in
• feat/mixed-audiences
• feat/php-84-wp-711
• feat/remote-logging-config
• feat/reply-sender-id
• feat/say-when-a-handset-can-only-poll
• feature/differentiate-refusal
• feature/reauthenticate-key-rotation
• fix/clear-unregistered-push-token
• fix/device-cap-race
• fix/guardian-own-container-ids
• fix/inbox-walks-forward
• fix/ios-envelope-in-apns-payload
• fix/jwks-refresh-floor
• fix/release-push-retry
• fix/seal-on-read-claims
• fix/triage-semgrep-false-positives
• fix/unslash-the-settings-post
• main
• refactor/remove-provider-registry-alias
• refactor/shared-password-store
• test/apple-sign-in-coverage
• test/coverage-repositories
• test/coverage-to-92
• test/link-load-plan
• test/pest-5

Build # 39513873469

Build Type

push

github

Committed by web-flow

Commit Message

feat: accept a Firebase token from Link's native Google sign-in (#43)

* feat: accept a Firebase token from Link's native Google sign-in

/auth/device/exchange and /auth/device/key take a firebase_token from
Link's native Google sign-in on Android and iOS, verified by Guardian's
FirebaseIdTokenVerifier against the project named by the FCM service
account. It lands in the same enrolment and the same key rotation as
every other credential.

503 fellowship_firebase_unavailable when no service account is set, so
Link falls back to the browser; 401 fellowship_bad_id_token otherwise.

* fix: plain property access inside ?? for PHPStan

* build: move Guardian to v1.1.0 for FirebaseIdTokenVerifier

* test: read Fellowship's in-memory devices as rows

Coverage Stats

3217 of 3557 relevant lines covered (90.44%)

7.58 hits per line