Function requireAuthWrapper

firebase-vscode/src/cli.ts:32–113

(
  showError: boolean = true,
)

 *
 */
export async function requireAuthWrapper(
  showError: boolean = true,
): Promise<User | null> {
  // Try to get global default from configstore
  pluginLogger.debug("requireAuthWrapper");
  let account = getGlobalDefaultAccount();
  // often overwritten when restarting the extension.
  const accounts = getAllAccounts();

  // helper to determine if VSCode options has the same account as global default
  function isUserMatching(account: Account, options: Options) {
    if (!options.user || !options.tokens) {
      return false;
    }

    const optionsUser = options.user as User;
    const optionsTokens = options.tokens as Tokens;
    return (
      account &&
      account.user?.email === optionsUser.email &&
      account.tokens.refresh_token === optionsTokens.refresh_token // Should check refresh token which is consistent, not access_token which is short lived.
    );
  }

  // only add account options when vscode is missing account information
  if (!isUserMatching(account!, currentOptions.value)) {
    currentOptions.value = { ...currentOptions.value, ...account };
  }

  if (!account) {
    // If nothing in configstore top level, grab the first "additionalAccount"
    for (const additionalAccount of accounts) {
      if (additionalAccount.user.email === currentUser.value!.email) {
        account = additionalAccount;
        setGlobalDefaultAccount(account);
      }
    }
  }
  // `requireAuth()` is not just a check, but will also register SERVICE
  // ACCOUNT tokens in memory as a variable in apiv2.ts, which is needed
  // for subsequent API calls. Warning: this variable takes precedence
  // over Google login tokens and must be removed if a Google
  // account is the current user.
  try {
    const optsCopy = currentOptions.value;
    const userEmail = await requireAuth(optsCopy); // client email
    // SetAccessToken is necessary here to ensure that access_tokens are available when:
    // - we are using tokens from configstore (aka those set by firebase login), AND
    // - we are calling CLI code that skips Command (where we normally call this)
    currentOptions.value = optsCopy;
    if (optsCopy.projectId) {
      updateFirebaseRCProject({
        projectAlias: { alias: "default", projectId: optsCopy.projectId },
      });
    }
    setAccessToken(await getAccessToken());
    if (userEmail) {
      pluginLogger.debug("User found: ", userEmail);