bcdilan

<p>Fireauth is a plugin that enables Firebase authentication in WordPress. It is an open source plugin.<br />
You can get the source from<br />
Github: <a href="https://github.com/chaturadilan/wp_plugin_fireauth" rel="nofollow ugc">https://github.com/chaturadilan/wp_plugin_fireauth</a></p>
<h4>Features</h4>
<ul>
<li>Facebook Authentication</li>
<li>Google Authentication</li>
</ul>
<h4>Working in Progress</h4>
<ul>
<li>Email Authentication</li>
</ul>
<h4>About the Developers</h4>
<p>Chatura Dilan Perera : <a href="https://www.dilan.me" rel="nofollow ugc">https://www.dilan.me</a></p>


Fireauth – Enable Firebase Authentication

Fireauth is a plugin that enables Firebase authentication in Wordpress

Mithun Biswas

<p>If your Firebase client app communicates with a custom backend server, you might need to identify the currently signed-in user on that server.</p>
<p>This plugin work with Google Firebase tokens. You can use it to verify ID Tokens.</p>
<h3>Namespace and Endpoints</h3>
<p>When the plugin is activated, a new namespace is added</p>
<pre><code>/verify-id-tokens/v1/
</code></pre>
<p>Also, a new endpoint is added to this namespace</p>
<p><em>/verify-id-tokens/v1/token/validate</em> | POST</p>
<h3>PHP HTTP Authorization Header enable</h3>
<p>Most of the shared hosting has disabled the <strong>HTTP Authorization Header</strong> by default.</p>
<p>To enable this option you’ll need to edit your <strong>.htaccess</strong> file adding the follow</p>
<pre><code>RewriteEngine on
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule ^(.*) - [E=HTTP_AUTHORIZATION:%1]
</code></pre>
<h3>WPENGINE</h3>
<p>To enable this option you’ll need to edit your <strong>.htaccess</strong> file adding the follow</p>
<pre><code>SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
</code></pre>
<h3>Configurate the Firebase projectId</h3>
<p>To add the <strong>projectId</strong> edit your wp-config.php file and add a new constant called <strong>BENGAL_STUDIO_VERIFY_ID_TOKENS_FIREBASE_PROJECT_ID</strong></p>
<pre><code>define('BENGAL_STUDIO_VERIFY_ID_TOKENS_FIREBASE_PROJECT_ID', 'projectId');
</code></pre>
<h3>Configurate CORs</h3>
<p>The <strong>Verify ID Tokens | Firebase</strong> plugin has the option to activate <a href="https://en.wikipedia.org/wiki/Cross-origin_resource_sharing" rel="nofollow ugc">CORs</a> response headers.</p>
<p>To enable the CORs edit your wp-config.php file and add a new constant called <strong>BENGAL_STUDIO_VERIFY_ID_TOKENS_ENABLE_CORS</strong></p>
<pre><code>define('BENGAL_STUDIO_VERIFY_ID_TOKENS_ENABLE_CORS', true);
</code></pre>
<h3>Retrieve ID tokens on clients</h3>
<p>To retrieve the ID token from the client, make sure the user is signed in and then get the ID token from the signed-in user:</p>
<pre><code>firebase.auth().currentUser.getIdToken(/* forceRefresh */ true).then(function(idToken) {
  // Send token to your backend via HTTPS
  // ...
}).catch(function(error) {
  // Handle error
});
</code></pre>
<h3>Verify ID Tokens</h3>
<h4>verify-id-tokens/v1/token/validate</h4>
<p>This is a simple helper endpoint to validate a token; you only will need to make a POST request sending the Authorization header.</p>


Fireauth – Enable Firebase Authentication vs Verify ID Tokens | Firebase