d43b9e1836
* Add cloud function to get custom token from API auth * Use custom token to authenticate Firebase SDK on server * Make sure getcustomtoken cloud function is fast * Make server auth code maximally robust * Refactor cookie code, make set and delete more flexible
34 lines
766 B
TypeScript
34 lines
766 B
TypeScript
import * as admin from 'firebase-admin'
|
|
import {
|
|
APIError,
|
|
EndpointDefinition,
|
|
lookupUser,
|
|
parseCredentials,
|
|
writeResponseError,
|
|
} from './api'
|
|
|
|
const opts = {
|
|
method: 'GET',
|
|
minInstances: 1,
|
|
concurrency: 100,
|
|
memory: '2GiB',
|
|
cpu: 1,
|
|
} as const
|
|
|
|
export const getcustomtoken: EndpointDefinition = {
|
|
opts,
|
|
handler: async (req, res) => {
|
|
try {
|
|
const credentials = await parseCredentials(req)
|
|
if (credentials.kind != 'jwt') {
|
|
throw new APIError(403, 'API keys cannot mint custom tokens.')
|
|
}
|
|
const user = await lookupUser(credentials)
|
|
const token = await admin.auth().createCustomToken(user.uid)
|
|
res.status(200).json({ token: token })
|
|
} catch (e) {
|
|
writeResponseError(e, res)
|
|
}
|
|
},
|
|
}
|