Closed cch5ng closed 3 years ago
resc
https://firebase.google.com/docs/auth/web/firebaseui?authuser=0
https://firebase.google.com/docs/auth/web/start?authuser=0
https://firebase.google.com/docs/auth/web/custom-auth?authuser=0
https://firebase.google.com/docs/web/setup?authuser=0
https://firebase.google.com/docs/auth/admin/verify-id-tokens
https://firebase.google.com/docs/auth/admin/manage-sessions?authuser=0#detect_id_token_revocation
https://firebase.google.com/docs/auth/web/auth-state-persistence?authuser=0
http://web.science.mq.edu.au/~mattr/courses/web_applications/9_Authentication/notes.html
https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html
ref to hackathon proj for links to docs
prefer email + google auth
only tricky item might be using the refresh token on BE auth in case of time out