search

hoanghm / Proact

2 stars 0 forks source link

Add OAuth2 to our Python API #68

Open hoanghm opened 1 week ago

hoanghm commented 1 week ago

Our API is currently public, need to set up an authentication route to generate a bearer token which will be required for all other endpoints. Or does Firebase Auth support this already?

ogallagher commented 1 week ago

Try using firebase id token verification.

  1. frontend includes firebase id token in all internal api requests
  2. internal server uses firebase admin sdk to verify the id token
  3. less frequently, server checks for token revocation/expiration