firebase / firebase/firebase-admin-node
[FR] Provide more details for SENDER_ID_MISMATCH if I have permission to see across projects
- Lenguaje dominante
- TypeScript
- Estrellas
- 1.7k
- Forks
- 419
- Merge medio
- 3 d 10 h
- PR fusionados (30 d)
- 16
Descripción
**Is your feature request related to a problem? Please describe.**
As a developer, I'd like to be able to verify an ID token across all projects that I have access to in Firebase. There is an existing API to do so today but requires specifying a project ID and providing the correct credentials for each project.
https://firebase.google.com/docs/auth/admin/verify-id-tokens#verify_id_tokens_using_the_firebase_admin_sdk
**Describe the solution you'd like**
During debugging, the SENDER_ID_MISMATCH response tells you that a token is registered against a different project than it's being used for, but does not tell you what project it is. Since the Firebase portal knows which projects I already have access to, it would be helpful to have this built into the Firebase portal where, if I have access to the project, it can tell me the project it is registered to. Often, we will have dev/prod Firebase projects and provide the config during build time; this would help us debug the issue if they got mixed up.
**Describe alternatives you've considered**
It's possible to write a version of this on our own using a script that loads credentials and tests tokens against each project I have access to, but is not very friendly to get the necessary credential files for the script.
**Additional context**
I was forwarded here from the android SDK repo https://github.com/firebase/firebase-android-sdk/issues/5545
Guía de contribución
Línea de trabajo
No se nombran archivos del repositorio ni pruebas. Primero determina si esta solicitud corresponde a firebase-admin-node o al portal de Firebase y, después, revisa la API existente de verify-ID-token y el issue vinculado del Android SDK. Se considerará completado cuando exista un alcance de implementación acordado que pueda identificar el proyecto registrado del token únicamente cuando el usuario tenga acceso a él.
Escrito por el modelo de indexación a partir del texto del issue.
Evaluación
- Stack tecnológico
- node.js, typescript
- Área
- authentication, backend
- Tipo de issue
- Nueva funcionalidad
- Dificultad
- 5/5
- Tiempo estimado
- Más de una semana
- Estado de actividad
- Estancado
- Claridad
- Necesita aclaración
- Aptitud para principiantes
- 20/100