Implement support for token based auth

[RICK0707]

Since Database secret are now being deprecated would it be possible to use new token generation. Can it be done on ESP8266 ?
-> Database secrets are currently deprecated and use a legacy Firebase token generator. Update your source code with the Firebase Admin SDK.

[andreask1]

+1 for authentication with Firebase using password-based accounts

[gayanpathirage]

You may find it here http://stackoverflow.com/questions/37418372/firebase-where-is-my-account-secret-in-the-new-console

However, please develop this feature as database secret support is deprecated

[phamtankhai2202]

Hi, i have same issue. I can't use token to connect firebase database... Can i help me?

[atiqsamtia]

Have you any plans to implement Token based Auth ? The issue is open from Last 2.5 Months 👎

[proppy]

Sorry for the late follow-up

It seems that the REST API only support OAuth2.0 based auth, see https://firebase.google.com/docs/reference/rest/database/user-auth

In order to support it in the library we would need to:

• replace ?auth= with ?access_token
• embed client_id, client_secret in the sketch
• use a third-party tool (ex: oauth2playground) to initialily generate the access_token/refresh_token pair
• embed the refresh_token in the sketch
• implement the refresh logic in the library since access_token expire after 1 hour

POST /oauth2/v4/token HTTP/1.1
Host: www.googleapis.com
Content-Type: application/x-www-form-urlencoded

client_id=...&
client_secret=...&
refresh_token=...&
grant_type=refresh_token

[francois1144]

Will the new token based authentication be implemented in the future release?

[proppy]

Just found https://github.com/yutter/ArduinoJWT, which could make it easier implement Service account support directly on the ESP.

[antonclaeys]

Can you please elaborate on how to use this?
I'm new to this authorization thing and its very confusing. I'm afraid that once the database secrets are fully deprecated, my software won't work anymore, so I'd like
to implement token authorization as soon as possible.

Hi there, new to the rep and have been playing around with the library but also running into this authentication issue. Trying to set up a home control system that allows different people in my house to control ESP-based switches, but want to use user-based auth to limit access only to a subset of the database (e.g. those switches they're authorized to access). Seems well documented on the firebase side but this library can't handle authentication beyond the deprecated database secret. Very willing to help out with the issue but not sure where to start. :/ Cheers David