Your guide to server side authentication with Firebase

preview_player
Показать описание
Firebase Security Rules are a great way to secure data access from client apps, but what about managing access from trusted environments like the server? Learn a few strategies to secure your callable functions, public https APIs, and NextJS sites to make sure end users can only access the resources and data they're meant to access.

Speaker: Jeff Huleatt

Watch more:

#FirebaseSummit
Рекомендации по теме
Комментарии
Автор

Hey @Firebase, can you please share the source code for server rendered website authentication for NextJS?

fahadahmed
Автор

I love Firebase so much! It made it a lot easier to build a system to track our music video production

DodaGarcia
Автор

Hi, what about the dynamic framework support? I am building server api and would like to test using swagger but I need ID token

mistboost
Автор

Not sure why they had to put the 2-week cookie expiry limitation. The client SDK doesn't log you out after 2 weeks. Now, we need to redirect the user to the login page on the server, then wait for authStateChange on the client, then renew the cookie so that we can redirect the user back to the original URL on the client side. All this while the user is seeing some pages come and go.

benjaminbalazs
Автор

If I use admin sdk, do I need client sdk ?

ThanHtutZaw
Автор

What about CSRF then? Are we supposed to handle it ourselves...

DiiiaZoTe
Автор

How to do server-side sign-in from the client. THAT AIN’T SERVER SIDE BUDDY.

walder