Function findUsersWithAuthData

src/Auth.js:430–483

(config, authData, beforeFind, currentUserAuthData)

};

const findUsersWithAuthData = async (config, authData, beforeFind, currentUserAuthData) => {
  const providers = Object.keys(authData);

  const queries = await Promise.all(
    providers.map(async provider => {
      const providerAuthData = authData[provider];

      // Skip providers being unlinked (null value)
      if (providerAuthData === null) {
        return null;
      }

      // Skip beforeFind only when incoming data is confirmed unchanged from stored data.
      // This handles echoed-back authData from afterFind (e.g. client sends back { id: 'x' }
      // alongside a provider unlink). On login/signup, currentUserAuthData is undefined so
      // beforeFind always runs, preserving it as the security gate for missing credentials.
      const storedProviderData = currentUserAuthData?.[provider];
      const incomingKeys = Object.keys(providerAuthData || {});
      const isUnchanged = storedProviderData && incomingKeys.length > 0 &&
        !incomingKeys.some(key => !isDeepStrictEqual(providerAuthData[key], storedProviderData[key]));

      const validatorConfig = config.authDataManager.getValidatorForProvider(provider);
      // Skip database query for unconfigured providers to avoid unindexed collection scans;
      // the provider will be rejected later in handleAuthDataValidation with UNSUPPORTED_SERVICE
      if (!validatorConfig?.validator) {
        return null;
      }
      const adapter = validatorConfig.adapter;
      if (beforeFind && typeof adapter?.beforeFind === 'function' && !isUnchanged) {
        await adapter.beforeFind(providerAuthData);
      }

      if (!providerAuthData?.id) {
        return null;
      }

      if (typeof providerAuthData.id !== 'string') {
        throw new Parse.Error(Parse.Error.INVALID_VALUE, `Invalid authData id for provider '${provider}'.`);
      }

      return { [`authData.${provider}.id`]: providerAuthData.id };
    })
  );

  // Filter out null queries
  const validQueries = queries.filter(query => query !== null);

  if (!validQueries.length) {
    return [];
  }

  // Perform database query
  return config.database.find('_User', { $or: validQueries }, { limit: 2 });
};

const hasMutatedAuthData = (authData, userAuthData) => {
  if (!userAuthData) { return { hasMutatedAuthData: true, mutatedAuthData: authData }; }