javascript - firebase.auth().createCustomToken is undefined on web app - Stack Overflow

admin管理员组

文章数量:1345288

I'm trying to create a "remember me" function for my web app that uses Firebase.

My goal is that when a user clicks "remember me" and logs in successfully, their authentication token is stored using localStorage and they are logged in automatically on their next visit (I prefer this to storing their raw credentials in localStorage for security purposes).

However, when I tried to call firebase.auth().createCustomToken I got an error saying it does not exist. Is this the wrong approach or the wrong function call for firebase? Thanks!

Here is a sample of my code:

var customToken = firebase.auth().createCustomToken(user.uid);
localStorage.setItem("savedToken", customToken);

then later I plan to use this line to sign back in:

firebase.auth().signInWithCustomToken(localStorage.getItem("savedToken")).then(function() {

I'm trying to create a "remember me" function for my web app that uses Firebase.

My goal is that when a user clicks "remember me" and logs in successfully, their authentication token is stored using localStorage and they are logged in automatically on their next visit (I prefer this to storing their raw credentials in localStorage for security purposes).

However, when I tried to call firebase.auth().createCustomToken I got an error saying it does not exist. Is this the wrong approach or the wrong function call for firebase? Thanks!

Here is a sample of my code:

var customToken = firebase.auth().createCustomToken(user.uid);
localStorage.setItem("savedToken", customToken);

then later I plan to use this line to sign back in:

firebase.auth().signInWithCustomToken(localStorage.getItem("savedToken")).then(function() {

• javascript
• firebase
• firebase-authentication

Share Improve this question Follow edited Aug 29, 2016 at 1:44 Frank van Puffelen 600k8585 gold badges890890 silver badges860860 bronze badges asked Aug 29, 2016 at 1:12 Lior HirschfeldLior Hirschfeld 86111 gold badge77 silver badges1212 bronze badges 1

• 2 Please show your code. It's much easier to debug when we can see what you've tried. – Soviut Commented Aug 29, 2016 at 1:17

Add a ment  | 

2 Answers 2

Sorted by: Reset to default 7

firebase.auth().createCustomToken is only available in the server API.

To authenticate with an email & password and get the token for the session, try this:

firebase.auth().signInWithEmailAndPassword(email, password)
  .then(function(user) {
    user.getToken().then(function(token) {
      localStorage.setItem("savedToken", token); // store the token
    });
  })
  .catch(function(error) {
    // handle error...
  });

This will work with the other authentication methods, too; just use User.getToken. Later, if you have a token (still on the client), and you want to authenticate with it, just do what you are currently doing:

var token = localStorage.getItem("savedToken"); // get stored token
firebase.auth().signInWithCustomToken(token).catch(function(error) {
  // handle error...
});

The above code doesn't work, because signInWithCustomToken only works for tokens minted by your server with createCustomToken. I'm not sure how to auth with an email/password token.

Creating a custom token requires having access to the private key/service account of your Firebase project. This key is the master key to gaining access to a Firebase project, knowing it gives unlimited access.

Since someone knowing the private key has unlimited access to the Firebase project, it makes no sense to ever mint custom tokens on the client. You might as simply remove all security from your Firebase database and storage services.

To authenticate a client using a custom token, mint a custom token on an app server and pass that (securely) to the client. Then use the custom on the client with signInWithCustomToken. This way only your app server has to know the service account/private key.

本文标签： javascriptfirebaseauth()createCustomToken is undefined on web appStack Overflow