firebase
diff --git a/‎.github/dependabot.yml
+6 b/‎.github/dependabot.yml
+6
diff --git a/‎.github/scripts/run_integration_tests.sh
+2 b/‎.github/scripts/run_integration_tests.sh
+2
diff --git a/‎.github/workflows/nightly.yml
+1 b/‎.github/workflows/nightly.yml
+1
diff --git a/‎.github/workflows/release.yml
+1 b/‎.github/workflows/release.yml
+1
diff --git a/‎.gitignore
+1 b/‎.gitignore
+1
diff --git a/‎CONTRIBUTING.md
+1-1 b/‎CONTRIBUTING.md
+1-1
diff --git a/‎README.md
+1-1 b/‎README.md
+1-1
diff --git a/‎etc/firebase-admin.api.md
+33 b/‎etc/firebase-admin.api.md
+33
diff --git a/‎etc/firebase-admin.auth.api.md
+35-16 b/‎etc/firebase-admin.auth.api.md
+35-16
@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
@@ -22,4 +22,6 @@ gpg --quiet --batch --yes --decrypt --passphrase="${FIREBASE_SERVICE_ACCT_KEY}"
 
 echo "${FIREBASE_API_KEY}" > test/resources/apikey.txt
 
+echo "${FIREBASE_APP_ID}" > test/resources/appid.txt
+
 npm run test:integration -- --updateRules --testMultiTenancy
@@ -55,6 +55,7 @@ jobs:
       env:
         FIREBASE_SERVICE_ACCT_KEY: ${{ secrets.FIREBASE_SERVICE_ACCT_KEY }}
         FIREBASE_API_KEY: ${{ secrets.FIREBASE_API_KEY }}
+        FIREBASE_APP_ID: ${{ secrets.FIREBASE_APP_ID }}
 
     - name: Package release artifacts
       run: |
 
@@ -66,6 +66,7 @@ jobs:
       env:
         FIREBASE_SERVICE_ACCT_KEY: ${{ secrets.FIREBASE_SERVICE_ACCT_KEY }}
         FIREBASE_API_KEY: ${{ secrets.FIREBASE_API_KEY }}
+        FIREBASE_APP_ID: ${{ secrets.FIREBASE_APP_ID }}
 
     - name: Package release artifacts
       run: |
 
@@ -14,6 +14,7 @@ node_modules/
 # Real key file should not be checked in
 test/resources/key.json
 test/resources/apikey.txt
+test/resources/appid.txt
 
 # Release tarballs should not be checked in
 firebase-admin-*.tgz
 
@@ -87,7 +87,7 @@ information on using pull requests.
 
 ### Prerequisites
 
-1. Node.js 10.10.0 or higher.
+1. Node.js 10.13.0 or higher.
 2. NPM 5 or higher (NPM 6 recommended).
 3. Google Cloud SDK ([`gcloud`](https://cloud.google.com/sdk/downloads) utility)
 
 
@@ -55,7 +55,7 @@ requests, code review feedback, and also pull requests.
 
 ## Supported Environments
 
-We support Node.js 10.10.0 and higher.
+We support Node.js 10.13.0 and higher.
 
 Please also note that the Admin SDK should only
 be used in server-side/back-end environments controlled by the app developer.
 
@@ -17,6 +17,8 @@ export function app(name?: string): app.App;
 export namespace app {
     // Warning: (ae-forgotten-export) The symbol "App" needs to be exported by the entry point default-namespace.d.ts
     export interface App extends App {
+        // (undocumented)
+        appCheck(): appCheck.AppCheck;
         // (undocumented)
         auth(): auth.Auth;
         // (undocumented)
@@ -41,6 +43,37 @@ export namespace app {
     }
 }
 
+// @public
+export function appCheck(app?: app.App): appCheck.AppCheck;
+
+// @public (undocumented)
+export namespace appCheck {
+    export interface AppCheck {
+        // (undocumented)
+        app: app.App;
+        createToken(appId: string): Promise<AppCheckToken>;
+        verifyToken(appCheckToken: string): Promise<VerifyAppCheckTokenResponse>;
+    }
+    export interface AppCheckToken {
+        token: string;
+        ttlMillis: number;
+    }
+    export interface DecodedAppCheckToken {
+        // (undocumented)
+        [key: string]: any;
+        app_id: string;
+        aud: string[];
+        exp: number;
+        iat: number;
+        iss: string;
+        sub: string;
+    }
+    export interface VerifyAppCheckTokenResponse {
+        appId: string;
+        token: appCheck.DecodedAppCheckToken;
+    }
+}
+
 // @public
 export interface AppOptions {
     // Warning: (ae-forgotten-export) The symbol "Credential" needs to be exported by the entry point default-namespace.d.ts
 
@@ -32,11 +32,7 @@ export class Auth extends BaseAuth {
 export type AuthFactorType = 'phone';
 
 // @public
-export interface AuthProviderConfig {
-    displayName?: string;
-    enabled: boolean;
-    providerId: string;
-}
+export type AuthProviderConfig = SAMLAuthProviderConfig | OIDCAuthProviderConfig;
 
 // @public
 export interface AuthProviderConfigFilter {
@@ -75,13 +71,31 @@ export abstract class BaseAuth {
 }
 
 // @public
-export interface CreateMultiFactorInfoRequest {
+export interface BaseAuthProviderConfig {
+    displayName?: string;
+    enabled: boolean;
+    providerId: string;
+}
+
+// @public
+export interface BaseCreateMultiFactorInfoRequest {
     displayName?: string;
     factorId: string;
 }
 
 // @public
-export interface CreatePhoneMultiFactorInfoRequest extends CreateMultiFactorInfoRequest {
+export interface BaseUpdateMultiFactorInfoRequest {
+    displayName?: string;
+    enrollmentTime?: string;
+    factorId: string;
+    uid?: string;
+}
+
+// @public
+export type CreateMultiFactorInfoRequest = CreatePhoneMultiFactorInfoRequest;
+
+// @public
+export interface CreatePhoneMultiFactorInfoRequest extends BaseCreateMultiFactorInfoRequest {
     phoneNumber: string;
 }
 
@@ -205,17 +219,27 @@ export interface MultiFactorUpdateSettings {
 }
 
 // @public
-export interface OIDCAuthProviderConfig extends AuthProviderConfig {
+export interface OAuthResponseType {
+    code?: boolean;
+    idToken?: boolean;
+}
+
+// @public
+export interface OIDCAuthProviderConfig extends BaseAuthProviderConfig {
     clientId: string;
+    clientSecret?: string;
     issuer: string;
+    responseType?: OAuthResponseType;
 }
 
 // @public
 export interface OIDCUpdateAuthProviderRequest {
     clientId?: string;
+    clientSecret?: string;
     displayName?: string;
     enabled?: boolean;
     issuer?: string;
+    responseType?: OAuthResponseType;
 }
 
 // @public
@@ -239,7 +263,7 @@ export interface ProviderIdentifier {
 }
 
 // @public
-export interface SAMLAuthProviderConfig extends AuthProviderConfig {
+export interface SAMLAuthProviderConfig extends BaseAuthProviderConfig {
     callbackURL?: string;
     idpEntityId: string;
     rpEntityId: string;
@@ -305,15 +329,10 @@ export interface UidIdentifier {
 export type UpdateAuthProviderRequest = SAMLUpdateAuthProviderRequest | OIDCUpdateAuthProviderRequest;
 
 // @public
-export interface UpdateMultiFactorInfoRequest {
-    displayName?: string;
-    enrollmentTime?: string;
-    factorId: string;
-    uid?: string;
-}
+export type UpdateMultiFactorInfoRequest = UpdatePhoneMultiFactorInfoRequest;
 
 // @public
-export interface UpdatePhoneMultiFactorInfoRequest extends UpdateMultiFactorInfoRequest {
+export interface UpdatePhoneMultiFactorInfoRequest extends BaseUpdateMultiFactorInfoRequest {
     phoneNumber: string;
 }