fix: stub requireAuth in spec and enable auth on App Check Client for CI runner

Author: AustinBenoit

PULL_REQUEST_DESCRIPTION.md

@@ -0,0 +1,40 @@
+### Description
+
+Refactors and standardizes the Firebase CLI App Check debug token workflow under the unified `appcheck:debugtoken` namespace, aligning directly with the backend REST API (`projects.apps.debugTokens`).
+
+Key changes:
+- Unified command registration in `src/commands/index.ts` under `client.appcheck.debugtoken`.
+- Refactored `appcheck:debugtoken` interactive wizard to discover project/app context dynamically, prompt for display names, and register tokens directly with the App Check backend.
+- Added `appcheck:debugtoken:create` for headless/non-interactive script execution and CI/CD automation pipelines.
+- Implemented `appcheck:debugtoken:list` to render registered tokens in tabular format (`Display Name`, `Resource Name`, `Update Time`) with full backend pagination.
+- Implemented `appcheck:debugtoken:delete` to permanently revoke tokens by ID or resource path, supporting interactive confirmation and `--force` flag overrides.
+- Cleaned up obsolete unlinked handlers (`appcheck-debugtokens-get` and `appcheck-debugtokens-update`).
+
+### Scenarios Tested
+
+- **Interactive Wizard (`appcheck:debugtoken`)**: Tested running with no arguments to verify automatic app detection and interactive choice selection.
+- **Explicit Arguments (`appcheck:debugtoken <appId> <debugToken>`)**: Tested supplying `appId` and `debugToken` positional arguments to confirm prompt skipping.
+- **Display Name Collisions**: Verified interactive confirmation prompt asking whether to overwrite when a token with the same display name already exists.
+- **Headless Creation (`appcheck:debugtoken:create`)**: Verified execution with `--non-interactive` flag using fallback defaults without blocking prompts.
+- **Token Listing (`appcheck:debugtoken:list`)**: Verified table rendering of returned tokens and multi-page pagination handling.
+- **Token Revocation (`appcheck:debugtoken:delete`)**: Tested interactive deletion confirmation as well as non-interactive `--force` deletion.
+- **Build & Test Suite**: Ran `npm run build` and `npx mocha src/appcheck/index.spec.ts` & `src/commands/appcheck-debug.spec.ts` (12/12 unit tests passing).
+
+### Sample Commands
+
+```bash
+# Interactive wizard: Register a token copied from SDK logs
+firebase appcheck:debugtoken 1:1234567890:ios:0a1b2c3d4e5f6a7b8c9d0e e3d9b1a0-cf48-4389-8d19-482a177ffec8
+
+# Interactive wizard: Auto-detect project & prompt for app selection
+firebase appcheck:debugtoken
+
+# Non-interactive creation for CI/CD pipelines
+firebase appcheck:debugtoken:create 1:1234567890:ios:0a1b2c3d4e5f6a7b8c9d0e e3d9b1a0-cf48-4389-8d19-482a177ffec8 --display-name "CI Runner Token" --non-interactive
+
+# List registered tokens for an app
+firebase appcheck:debugtoken:list 1:1234567890:ios:0a1b2c3d4e5f6a7b8c9d0e
+
+# Delete / revoke a token by ID
+firebase appcheck:debugtoken:delete 1:1234567890:ios:0a1b2c3d4e5f6a7b8c9d0e 7890-abcd --force
+```

src/appcheck/index.ts

@@ -15,7 +15,7 @@ interface ListDebugTokensResponse {
 
 const API_VERSION = "v1";
 
-const client = new Client({ urlPrefix: appCheckOrigin(), apiVersion: API_VERSION });
+const client = new Client({ urlPrefix: appCheckOrigin(), auth: true, apiVersion: API_VERSION });
 
 /**
  * Creates a new DebugToken for the specified app.

src/commands/appcheck-debug.spec.ts

@@ -6,6 +6,7 @@ import { command as debugCmd } from "./appcheck-debug";
 import { command as createCmd } from "./appcheck-debugtokens-create";
 import { command as listCmd } from "./appcheck-debugtokens-list";
 import { command as deleteCmd } from "./appcheck-debugtokens-delete";
+import * as requireAuthModule from "../requireAuth";
 import { appCheckOrigin } from "../api";
 import { DebugToken } from "../appcheck";
 
@@ -26,9 +27,12 @@ describe("appcheck:debugtoken commands", () => {
   };
 
   let sandbox: sinon.SinonSandbox;
+  let requireAuthStub: sinon.SinonStub;
 
   beforeEach(() => {
     sandbox = sinon.createSandbox();
+    requireAuthStub = sandbox.stub(requireAuthModule, "requireAuth");
+    requireAuthStub.resolves("a@b.com");
   });
 
   afterEach(() => {