Name Description Size Coverage
GuardianClient.sys.mjs An HTTP Client to talk to the Guardian service. Allows to enroll users to the proxy service, fetch a proxy pass and check if the user is a proxy user. 13585 -
IPPAndroidAuthProvider.sys.mjs Android implementation of IPPFxaActivateAuthProviderSingleton. Uses EventDispatcher to bridge sign-in state and token retrieval to the Android layer. Tokens are requested on demand and never cached in Gecko. 2115 -
IPPAndroidSignInWatcher.sys.mjs Monitors the sign-in state on Android and triggers service state updates. Unlike the FxA desktop counterpart, this watcher does not observe UIState directly. Instead, it receives auth state changes from the Android layer via the EventDispatcher ("GeckoView:IPProtection:AuthStateChanged"), and exposes notifySignInStateChanged() for the mobile bridge to call directly if needed. 2261 -
IPPFxaActivateAuthProvider.sys.mjs FxA implementation of IPPAuthProvider that uses the direct token activation flow by calling Guardian's POST /api/v1/fpn/activate endpoint with the FxA Bearer token. 2538 -
IPPFxaAuthProvider.sys.mjs FxA implementation of IPPAuthProvider. Handles enrollment via Guardian and FxA-specific proxy bypass rules. 9378 -
IPPFxaBaseAuthProvider.sys.mjs Base class for FxA-backed IPPAuthProvider implementations. Provides shared OAuth token retrieval, Guardian proxy methods, sign-in watcher access, and entitlement lifecycle management. 4570 -
IPPSignInWatcher.sys.mjs This class monitors the Sign-In state and triggers the update of the service if needed. 1985 -