From 76401b8a63c79909d99966bc15f683c1447b12d0 Mon Sep 17 00:00:00 2001
From: mansisampat <sammansi@google.com>
Date: Thu, 19 Jun 2025 12:18:27 +0530
Subject: [PATCH 1/3] BYO-CIAM Demo App Changes

---
 packages/auth/demo/public/index.html     | 17 ++++++++
 packages/auth/demo/src/index.js          | 50 +++++++++++++++++++++++-
 packages/auth/src/core/auth/auth_impl.ts |  2 +-
 3 files changed, 67 insertions(+), 2 deletions(-)

diff --git a/packages/auth/demo/public/index.html b/packages/auth/demo/public/index.html
index 78b14b8dd92..5201871271d 100644
--- a/packages/auth/demo/public/index.html
+++ b/packages/auth/demo/public/index.html
@@ -170,6 +170,13 @@
                 Action Code Settings
               </a>
             </li>
+            <li role="presentation">
+              <a href="#tab-byo-ciam-content"
+                 aria-controls="tab-byo-ciam-content"
+                 data-toggle="tab" role="tab">
+                BYO-CIAM methods
+              </a>
+            </li>
             <li role="presentation" class="visible-xs">
               <a href="#logs-section"
                  aria-controls="logs-section"
@@ -844,6 +851,16 @@
                         id="action-code-settings-reset">Reset</button>
               </form>
             </div>
+            <div class="tab-pane" id="tab-byo-ciam-content">
+              <h2>Sign in with your CIAM token</h2>
+              <input type="text" id="byo-ciam-token"
+                     class="form-control" placeholder="Enter CIAM token" />
+              <button class="btn btn-block btn-primary"
+                  id="exchange-token">
+                Exchange Token
+              </button>
+              <pre id="byo-ciam-result"></pre>
+            </div>
             <div class="tab-pane" id="logs-section">
               <pre class="well logs"></pre>
               <button class="btn btn-xs btn-default pull-right clear-logs">
diff --git a/packages/auth/demo/src/index.js b/packages/auth/demo/src/index.js
index 876a345671a..89f14532596 100644
--- a/packages/auth/demo/src/index.js
+++ b/packages/auth/demo/src/index.js
@@ -74,7 +74,8 @@ import {
   connectAuthEmulator,
   initializeRecaptchaConfig,
   validatePassword,
-  revokeAccessToken
+  revokeAccessToken,
+  exchangeToken
 } from '@firebase/auth';
 
 import { config } from './config';
@@ -95,6 +96,7 @@ const AUTH_EMULATOR_URL = 'http://localhost:9099';
 
 let app = null;
 let auth = null;
+let regionalAuth = null;
 let currentTab = null;
 let lastUser = null;
 let applicationVerifier = null;
@@ -1506,6 +1508,32 @@ function onFinalizeSignInWithTotpMultiFactor(event) {
   }, onAuthError);
 }
 
+async function exchangeCIAMToken(token) {
+  const firebaseToken = await exchangeToken(
+    regaionalAuth,
+    idpConfigId = "Bar-e2e-idpconfig-002",
+    token)
+  return firebaseToken;
+}
+
+function onExchangeToken(event) {
+  event.preventDefault();
+  const byoCiamInput = document.getElementById("byo-ciam-token");
+  const byoCiamSubmit = document.getElementById("byo-ciam-submit");
+  const byoCiamResult = document.getElementById("byo-ciam-result");
+
+  byoCiamResult.textContent = "Exchanging token...";
+
+  exchangeCIAMToken(byoCiamInput.value)
+  .then((response) => {
+    byoCiamResult.textContent = response.accessToken;
+    console.log("Token:", response);
+  })
+  .catch((error) => {
+    console.error("Error exchanging token:", error);
+  });
+}
+
 /**
  * Adds a new row to insert an OAuth custom parameter key/value pair.
  * @param {!jQuery.Event} _event The jQuery event object.
@@ -2051,6 +2079,21 @@ function initApp() {
     connectAuthEmulator(auth, AUTH_EMULATOR_URL);
   }
 
+  let tenantConfig = {
+    "location": "global",
+    "tenantId": "Foo-e2e-tenant-001"
+  };
+  const regionalApp = initializeApp(
+    config,
+    `${auth.name}-rgcip`
+  );
+
+  regionalAuth = initializeAuth(regionalApp, {
+    persistence: inMemoryPersistence,
+    popupRedirectResolver: browserPopupRedirectResolver,
+    tenantConfig: tenantConfig
+  });
+
   tempApp = initializeApp(
     {
       apiKey: config.apiKey,
@@ -2391,6 +2434,11 @@ function initApp() {
   $('#enroll-mfa-totp-finalize').click(onFinalizeEnrollWithTotpMultiFactor);
   // Sets tenant for the current auth instance
   $('#set-tenant-btn').click(onSetTenantIdClick);
+
+  // Performs Exchange Token
+  $('#exchange-token').click(
+    onExchangeToken
+  );
 }
 
 $(initApp);
diff --git a/packages/auth/src/core/auth/auth_impl.ts b/packages/auth/src/core/auth/auth_impl.ts
index 2651fe43af9..20df2390774 100644
--- a/packages/auth/src/core/auth/auth_impl.ts
+++ b/packages/auth/src/core/auth/auth_impl.ts
@@ -95,7 +95,7 @@ export const enum DefaultConfig {
   API_HOST = 'identitytoolkit.googleapis.com',
   API_SCHEME = 'https',
   // TODO(sammansi): Update the endpoint before BYO-CIAM Private Preview Release.
-  REGIONAL_API_HOST = 'identityplatform.googleapis.com/v2alpha/'
+  REGIONAL_API_HOST = 'autopush-identityplatform.sandbox.googleapis.com/v2alpha/'
 }
 
 export class AuthImpl implements AuthInternal, _FirebaseService {

From 943b3eb1d0bf2145a3e16063fb4733f4607bbc91 Mon Sep 17 00:00:00 2001
From: mansisampat <sammansi@google.com>
Date: Thu, 19 Jun 2025 12:29:25 +0530
Subject: [PATCH 2/3] Lint

---
 packages/auth/demo/src/index.js | 39 ++++++++++++++-------------------
 1 file changed, 17 insertions(+), 22 deletions(-)

diff --git a/packages/auth/demo/src/index.js b/packages/auth/demo/src/index.js
index 89f14532596..d134d810bff 100644
--- a/packages/auth/demo/src/index.js
+++ b/packages/auth/demo/src/index.js
@@ -1511,27 +1511,27 @@ function onFinalizeSignInWithTotpMultiFactor(event) {
 async function exchangeCIAMToken(token) {
   const firebaseToken = await exchangeToken(
     regaionalAuth,
-    idpConfigId = "Bar-e2e-idpconfig-002",
-    token)
+    (idpConfigId = 'Bar-e2e-idpconfig-002'),
+    token
+  );
   return firebaseToken;
 }
 
 function onExchangeToken(event) {
   event.preventDefault();
-  const byoCiamInput = document.getElementById("byo-ciam-token");
-  const byoCiamSubmit = document.getElementById("byo-ciam-submit");
-  const byoCiamResult = document.getElementById("byo-ciam-result");
+  const byoCiamInput = document.getElementById('byo-ciam-token');
+  const byoCiamResult = document.getElementById('byo-ciam-result');
 
-  byoCiamResult.textContent = "Exchanging token...";
+  byoCiamResult.textContent = 'Exchanging token...';
 
   exchangeCIAMToken(byoCiamInput.value)
-  .then((response) => {
-    byoCiamResult.textContent = response.accessToken;
-    console.log("Token:", response);
-  })
-  .catch((error) => {
-    console.error("Error exchanging token:", error);
-  });
+    .then((response) => {
+      byoCiamResult.textContent = response.accessToken;
+      console.log('Token:', response);
+    })
+    .catch((error) => {
+      console.error('Error exchanging token:', error);
+    });
 }
 
 /**
@@ -2080,13 +2080,10 @@ function initApp() {
   }
 
   let tenantConfig = {
-    "location": "global",
-    "tenantId": "Foo-e2e-tenant-001"
+    'location': 'global',
+    'tenantId': 'Foo-e2e-tenant-001'
   };
-  const regionalApp = initializeApp(
-    config,
-    `${auth.name}-rgcip`
-  );
+  const regionalApp = initializeApp(config, `${auth.name}-rgcip`);
 
   regionalAuth = initializeAuth(regionalApp, {
     persistence: inMemoryPersistence,
@@ -2436,9 +2433,7 @@ function initApp() {
   $('#set-tenant-btn').click(onSetTenantIdClick);
 
   // Performs Exchange Token
-  $('#exchange-token').click(
-    onExchangeToken
-  );
+  $('#exchange-token').click(onExchangeToken);
 }
 
 $(initApp);

From d733256324bdd95d0af1783299b681d8afeb0f34 Mon Sep 17 00:00:00 2001
From: mansisampat <sammansi@google.com>
Date: Thu, 19 Jun 2025 12:32:05 +0530
Subject: [PATCH 3/3] Lint

---
 packages/auth/demo/src/index.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/auth/demo/src/index.js b/packages/auth/demo/src/index.js
index d134d810bff..52b79662fd7 100644
--- a/packages/auth/demo/src/index.js
+++ b/packages/auth/demo/src/index.js
@@ -1525,11 +1525,11 @@ function onExchangeToken(event) {
   byoCiamResult.textContent = 'Exchanging token...';
 
   exchangeCIAMToken(byoCiamInput.value)
-    .then((response) => {
+    .then(response => {
       byoCiamResult.textContent = response.accessToken;
       console.log('Token:', response);
     })
-    .catch((error) => {
+    .catch(error => {
       console.error('Error exchanging token:', error);
     });
 }