Download the PHP package square1/laravel-passport-firebase-auth without Composer

Let Google Firebase create and authenticate users to your Laravel API (using Laravel Passport)

Create and authenticate users with Firebase Auth providers (Google, Facebook, Apple, email, etc), and let Laravel Passport know and handle your backend secure endpoints!

This is an opinionated way to create Laravel Passport tokens from a Firebase valid token.

Installation

You can install the package via composer:

You will need a firebase_uid column on your users table. You can publish and run the migrations and customize that column with:

Publish the config file with:

This is the contents of the published config file:

Configure Laravel Passport

This package has Laravel Passport as a dependency, if you did not already, please configure Laravel Passport.

Configure Firebase

Create a Firebase project in the console https://console.firebase.google.com/.

If you did not already please generated your Service Account auth file, do it from this url: https://console.firebase.google.com/project/\_/settings/serviceaccounts/adminsdk. You will be asked to select the Firebase Project. After that, the Firebase Admin SDK screen will ask you to pick a language, just leave Node.js selected and click Generate new private key.

Once you have downloaded the Service Account JSON file in your project (ATENTION! please git ignore this file as it has sensible credentials), indicate the path to your file in .env like this:

Configure auth providers

In your firebase project create and configure all providers you want to use: https://firebase.google.com/docs/auth

Usage

This package will expose 2 endpoints under your api prefix (configurable):

1. POST: api/v1/firebase/user/create

In your mobile app or front end, you will allow your users to create an account using the Firebase client SDK of your choice.

Then you will call this endpoint with a valid firebase token using the firebase_token key in the payload posted.

This endpoint will reach firebase database, find and validate the user just created in your front end / mobile app, and it will create a user record in your laravel database saving the firebase_uid in users table you populated previously in the installation step.

Optionaly, you can perform 2 extra user configuration steps here:

1 - a) Conect extra user data from the firebase users payload:

In your config/laravel-passport-firebase-auth.php indicate the keys you want to match against your laravel users table using the "map_user_columns" key in the array.

1 - b) Pass any other custom data you need for the user creation proces in your laravel database:

An example will be if user creation require some mandatory columns (e.g. user_plan, username, role, etc.). For this you will use the instructions on the "extra_user_columns" key in the config array.

For security reasons, we'll validate this data, and we'll ignore any other values not declared in this "extra_user_columns" array.

Example payload posted to api/v1/firebase/user/create:

if in your config/laravel-passport-firebase-auth.php file you have the followin configuration:

The result will be that, the newly created firebase user will be stored in your database with the uid, email, displayName as the full_name column, photoURL as the avatar column, and the rest of the firebase metadata will be discarted.

Also the username and plan will be stored, but the role manipulation attempt will be ignored.

You will receive a success status from the endpoint, along with the backend user ID and valid Laravel Passport access token.

2. POST: api/v1/firebase/user/login

You will need to call this endpoint with only a valid firebase token using the key firebase_token in the payload posted.

In case we find the user in the laravel database, the result will contain a success status along with the passport token to use in furter requests.

Testing

Changelog

Please see CHANGELOG for more information on what has changed recently.

Security

If you discover any security related issues, please email [email protected] instead of using the issue tracker.

Credits

• Emiliano Tisato
• All Contributors

License

The MIT License (MIT). Please see License File for more information.