password based authentication in Firebase is secure or not

Asked Jun 20 '17 at 16:13

Active Jun 21 '17 at 03:22

Viewed 19 times

Let me explain first what approach I am using while implementing that web chat When user signup on my website, I create his account on firebase using following things

email: user email password
List item

when User sign in next time I pass user email and own created password to firebase to signin him to firebase too. and then whole process for the chat begins.

Now I have one question that our apiKey, authDomain, databaseURL, storageBucket are already exposed in javascript code and we are again exposing email and password in javacript code for signing the user in firebase. so isn't a loophole?

I hope you got my point so please if I am doing it wrong kindly guide me to how to use it properly.

Thanks in advance.

edited Jun 21 '17 at 03:22

AL.

36,815
10
142
281

asked Jun 20 '17 at 16:13

Saim Abdullah

Doesnt that belong to *Informational Security*? – Jonas Wilms Jun 20 '17 at 16:16
These are just identifiers that are needed to find your project on the Firebase servers. See stackoverflow.com/questions/37482366/is-it-safe-to-expose-firebase-apikey-to-the-public – Frank van Puffelen Jun 20 '17 at 16:25
Yes I found my answer here https://stackoverflow.com/questions/35418143/how-to-restrict-firebase-data-modification. thankyou for your support – Saim Abdullah Jun 20 '17 at 16:41

password based authentication in Firebase is secure or not

0 Answers0