Name Description Size Coverage
GuardianClient.sys.mjs The subset of AuthError that a Guardian HTTP status maps onto. @typedef {"unauthorized" | "not_entitled" | "quota_exceeded" | "region_unavailable" | "server_error" | "unexpected_status"} GuardianStatusError The subset of AuthError that the Guardian client reports, i.e. the status errors plus the ones raised without a usable response. @typedef {GuardianStatusError | "login_needed" | "invalid_response" | "parse_error"} GuardianError 14728 -
IPPAndroidAuthProvider.sys.mjs Android implementation of IPPFxaActivateAuthProviderSingleton. Uses EventDispatcher to bridge sign-in state and token retrieval to the Android layer. Tokens are requested on demand and never cached in Gecko. 2137 -
IPPAndroidSignInWatcher.sys.mjs Monitors the sign-in state on Android and triggers service state updates. Unlike the FxA desktop counterpart, this watcher does not observe UIState directly. Instead, it receives auth state changes from the Android layer via the EventDispatcher ("GeckoView:IPProtection:AuthStateChanged"), and exposes notifySignInStateChanged() for the mobile bridge to call directly if needed. 2261 -
IPPFxaActivateAuthProvider.sys.mjs FxA implementation of IPPAuthProvider that uses the direct token activation flow by calling Guardian's POST /api/v1/fpn/activate endpoint with the FxA Bearer token. Provides shared OAuth token retrieval, Guardian proxy methods, sign-in watcher access, and entitlement lifecycle management. 7285 -
IPPSignInWatcher.sys.mjs This class monitors the Sign-In state and triggers the update of the service if needed. 2378 -