WP-AUTH-FIREBASE-HYBRID-01

Domain: D-AUTH Surfaces: CON · API Status: IMP (code) · OWNER_REQUIRED (Firebase Console providers + service account + iOS plist thật) Date: 2026-08-07

Done

• Nest: firebase-admin · POST /api/v1/auth/firebase · SocialAccount FIREBASE
• Mobile: firebase SDK · email/password + Google credential + Phone UI bridge
• Env templates · env:check allowlist · app.json googleServicesFile
• Docs: OWNER-FIREBASE-HYBRID.md

OWNER còn lại

1. Bật Email/Google/Phone trên Firebase welife-2412
2. Add iOS app · thay GoogleService-Info.plist stub
3. Service account → api/.env FIREBASE_*
4. Refresh google-services.json khi oauth_client còn []

Smoke (sau OWNER)

npm run env:check
# api unit
cd api && npx jest src/modules/auth/firebase-admin.config.spec.ts
# manual: register Firebase email → JWT → GET /users/me