Change8

firebase@11.3.0

📦 firebase-authView on GitHub →
4 features🐛 3 fixes1 deprecations🔧 6 symbols

Summary

This release introduces SSR compatibility improvements for App Check initialization and adds support for collecting Web Vitals metrics. It also deprecates ActionCodeSettings.dynamicLinkDomain in favor of ActionCodeSettings.linkDomain.

Migration Steps

  1. If you rely on ActionCodeSettings.dynamicLinkDomain, migrate to using ActionCodeSettings.linkDomain instead.

✨ New Features

  • FirebaseServerApp can now be initialized with an App Check token instead of invoking getToken, unblocking App Check enforced products in SSR environments (@firebase/app, @firebase/auth, @firebase/data-connect, @firebase/firebase, @firebase/database).
  • Added ActionCodeSettings.linkDomain to customize the Firebase Hosting link domain used in mobile out-of-band email action flows (@firebase/auth, @firebase/auth-types, @firebase/firebase).
  • Web vital metrics (INP, CLS, LCP) are now collected as part of the page load event (@firebase/performance, @firebase/firebase).
  • Added custom request headers based on the invoking SDK type (JS/TS, React, Angular, etc.) for Data Connect requests (@firebase/data-connect, @firebase/firebase).

🐛 Bug Fixes

  • Discard the earliest heartbeat once a limit of 30 heartbeats in storage has been hit (@firebase/app).
  • Fixed a potential for a negative offset when calculating last reconnect times, which could cause lengthy reconnect delays (Fixes #8718) (@firebase/database, @firebase/firebase).
  • Fixed a server and SDK mismatch in unicode string sorting (@firebase/database, @firebase/firebase).

🔧 Affected Symbols

FirebaseServerAppActionCodeSettings.linkDomainActionCodeSettings.dynamicLinkDomainINPCLSLCP

⚡ Deprecations

  • ActionCodeSettings.dynamicLinkDomain is deprecated in @firebase/auth and @firebase/auth-types.