Three New Ways to Secure Your App with Firebase Authentication
summary
Three concrete features land: SMS-based MFA for enrolling and verifying phone factors with reCAPTCHA and test numbers, Stackdriver Logging to capture both admin data access and user auth events (turn on Identity Toolkit logs and create metrics), and blocking functions that synchronously approve or reject signups/signins by checking Firestore and adding custom claims. Code examples show Microsoft Google and other IDPs, service-worker token flows, SOC/ISO compliance claims, billions of accounts hosted on Google infra.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 0:20Story
- 4:17Firebase Authentication Overview
- 6:40Firebase Authentication Security
- 15:33Service Workers
- 18:08Email Action Link
- 20:22Cross Account Protection
- 22:45New Ways to Secure Your App
- 23:45MultiFactor Authentication
- 25:03MultiFactor Login
- 26:29Logging In
- 27:43Demo MultiFactor Authentication
- 30:57Demo Data Access Logging
- 35:22Demo Demo Data Access Logging
- 35:41Demo Demo Synchronous Functions
- 38:10Recap
related talks
24mSecure your Flutter Web app using Multi factor authentication
25mFive tips to secure your app
37mBuilding simple and secure account systems on Android
24mSecure your Flutter Web app using Multi factor authentication
14mYour guide to server side authentication with Firebase
17mFirebase Authentication: From fully managed to fully customizable
52mAuthentication, Authorization, and You...
13mSecure your Firebase app from the start