Create custom firebase auth

[vdias38]

The migration flow should follow steps below:

1. Migrate auth persistence to Firebase custom auth
   • Firebase custom auth
   • mmb.user.on(Create, Update, Delete) sync data w/ fb.user.auth|profile
2. Migrate auth to Firebase authentication
   • Sync fb.users.groups w/ mmb.items.groups
   • fb.users.profile.onCreate send invite (firebase dyn link ?)

Links

We've used custom auth on this post Authentication by URL using Firebase Auth

[danconte72]

Migrate Users

• Migrate meumobi.visitors to firebase.auth.users using firebase admin sdk auth.importUsers() - official docs

  Check Migration

• Auth has a optional message property , we can use it to set if user was migrated
• On MyApp.listenAuthData() - should check if already migrated to firebase
  • if auth.message != 'firebase' should Migrate Auth passing Auth
• After login should call Migrate Auth passing Auth

  Migrate Auth

• It receives an Auth

  {
  "success": true,
  "token": "XXXXX",
  "visitor": {
      "first_name": "Daniel",
      "last_name": "Conte",
      "email": "daniel.conte+katrium@meumobi.com",
      "site": "katrium.meumobi.com"
  }
  }

• Generate a Token
  • The easiest way is with a CF as done here passing a uid and get a token, API does not returns UID, we can add a endpoint who receives current token and returns the uid
  • We can create our Visitor tokens on sitebuilder using https://github.com/firebase/php-jwt (needs php 5.3>) - docs and return it on api/login
• Login on firebase using signInWithToken as done here
  • we can use signInWithToken with users of any provider.
• Set auth.message = "firebase" and save It on Storage ( so far we need this data to fetch items...)
• Use authState observable to show if user is connected or not

  Concerns

• To works UID passed on migration Users must be the same to Generate Token, I recommend use uid from mongo

[danconte72]

Summary

• Old Users
  • Import Users - auth.importUsers()
  • email from visitors and phone from profiles?
  • with Auth data saved on devices will be asked to fill email/phone and will have a time to confirm the login
  • without Auth data saved - will login by email/phone
• New Users
  • Login with email-link/phonenumber on v4
  • Will be created through a cf who observes profiles collection