search

thisbejim / Pyrebase

A simple python wrapper for the Firebase API.
2.07k stars 528 forks source link

Pyrebase storing password in plain text. How can I encrypt it? #423

Open pandyaved98 opened 2 years ago

pandyaved98 commented 2 years ago

Make sure these boxes are checked before submitting your issue:

[x] Check that your version of Python is 3.4+ [x] Check that you are on the newest version of Pyrebase [x] Check that the Email/password provider is enabled in your Firebase dashboard under Auth -> Sign In Method.

Please don't be discouraged if you do not get a response to your issue quickly, I maintain Pyrebase for fun and don't always have as much free time as I'd like.

Thank you for helping make Pyrebase better!

AsifArmanRahman commented 2 years ago

Hi there, are you storing your password in database?

pandyaved98 commented 2 years ago

Yes, I'm using Realtime Database from Firebase.

AsifArmanRahman commented 2 years ago

First of all sorry for asking but why would you like to store password in database, when it is already stored an kept hidden for security in Authentication?

Also to answer your question, realtime database stores the exact info you set/push to store. Now you can choose to store the password using the same hashed code used to by your firebase project in Authentication but you'll have to do it manually yourself. Clicking on the highlighted menu (which appears after clicking the three doted eclipse button) you find the that code.

Screenshot 2022-07-20 133350

AsifArmanRahman commented 2 years ago

First of all sorry for asking but why would you like to store password in database, when it is already stored an kept hidden for security in Authentication?

Also to answer your question, realtime database stores the exact info you set/push to store. Now you can choose to store the password using the same hashed code used to by your firebase project in Authentication but you'll have to do it manually ...

If you find it helpful, please consider using firebase-rest-api available in PyPI, which I recently started maintaining as both pyrebase and pyrebase4 aren't maintained anymore.

Thank you.