From 293da7fec4270ead3135d897b4f8c849e7712090 Mon Sep 17 00:00:00 2001
From: Pavithra Ramesh <pavithrar@google.com>
Date: Wed, 8 Nov 2023 15:31:46 -0800
Subject: [PATCH] Mark method as deprecated.

---
 docs-devsite/auth.md                       | 2 +-
 packages/auth/demo/src/index.js            | 2 +-
 packages/auth/src/core/strategies/email.ts | 1 +
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/docs-devsite/auth.md b/docs-devsite/auth.md
index 5be4d40b330..93519c81b87 100644
--- a/docs-devsite/auth.md
+++ b/docs-devsite/auth.md
@@ -412,7 +412,7 @@ export declare function fetchSignInMethodsForEmail(auth: Auth, email: string): P
 |  Parameter | Type | Description |
 |  --- | --- | --- |
 |  auth | [Auth](./auth.auth.md#auth_interface) | The [Auth](./auth.auth.md#auth_interface) instance. |
-|  email | string | The user's email address. |
+|  email | string | The user's email address.<!-- -->Deprecated Migrating off of this method is recommended as a security best-practice. |
 
 <b>Returns:</b>
 
diff --git a/packages/auth/demo/src/index.js b/packages/auth/demo/src/index.js
index 1b3450828b9..a053a4a9149 100644
--- a/packages/auth/demo/src/index.js
+++ b/packages/auth/demo/src/index.js
@@ -317,7 +317,7 @@ function onAuthError(error) {
     if (error.code === 'auth/user-token-expired') {
       alertError('Token expired, please reauthenticate.');
     }
-    if (error.code === 'auth/invalid-login-credential') {
+    if (error.code === 'auth/invalid-login-credentials') {
       alertError(
         'login credentials invalid. It is possible that the email/password combination does not exist.'
       );
diff --git a/packages/auth/src/core/strategies/email.ts b/packages/auth/src/core/strategies/email.ts
index af264bf88d5..27c34124f58 100644
--- a/packages/auth/src/core/strategies/email.ts
+++ b/packages/auth/src/core/strategies/email.ts
@@ -46,6 +46,7 @@ import { getModularInstance } from '@firebase/util';
  * @param auth - The {@link Auth} instance.
  * @param email - The user's email address.
  *
+ * Deprecated Migrating off of this method is recommended as a security best-practice.
  * @public
  */
 export async function fetchSignInMethodsForEmail(