feat(web): support HTTPS local dev for redirect sign-in

Add a `dev:https` script and, when dev runs over https, set authDomain to the
current origin so signInWithRedirect stays same-origin via the /__/auth proxy
(Firebase forces https://<authDomain>/__/auth/handler). Make the proxy target
env-aware so dev proxies to the dev Firebase project. Default http `pnpm dev`
and e2e are unaffected.

Requires https://localhost:3000/__/auth/handler on the dev OAuth client.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: amitsingh-007

apps/web/next.config.ts

@@ -43,7 +43,10 @@ const nextConfig: NextConfig = {
   // flow. Must be a transparent proxy (rewrite), not a 302.
   // https://firebase.google.com/docs/auth/web/redirect-best-practices
   async rewrites() {
-    const authHelper = 'https://bypass-links.firebaseapp.com';
+    // Match the Firebase project that getFirebasePublicConfig selects by env.
+    const authHelper = isDev
+      ? 'https://bypass-links-dev.firebaseapp.com'
+      : 'https://bypass-links.firebaseapp.com';
     return [
       {
         source: '/__/auth/:path*',

apps/web/package.json

@@ -6,6 +6,7 @@
   "scripts": {
     "build": "next build --webpack",
     "dev": "next dev --webpack",
+    "dev:https": "next dev --webpack --experimental-https",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {

apps/web/src/app/helpers/firebase/index.ts

@@ -1,8 +1,21 @@
 import { getFirebasePublicConfig } from '@bypass/configs/firebase.config';
 import { initializeApp } from 'firebase/app';
 
-const firebaseApp = initializeApp(
-  getFirebasePublicConfig(process.env.NODE_ENV === 'production')
-);
+const isProd = process.env.NODE_ENV === 'production';
+const config = getFirebasePublicConfig(isProd);
+
+// In HTTPS local dev (`pnpm dev:https`), point authDomain at our own origin so
+// signInWithRedirect stays same-origin via the /__/auth proxy in next.config —
+// Firebase always builds the handler URL as `https://<authDomain>/__/auth/...`,
+// so this only works over https, not the default http `pnpm dev`.
+if (
+  !isProd &&
+  typeof window !== 'undefined' &&
+  window.location.protocol === 'https:'
+) {
+  config.authDomain = window.location.host;
+}
+
+const firebaseApp = initializeApp(config);
 
 export default firebaseApp;