Scribd
Upload
563 views

Email & Password Authentication - Firebase

Firebase allows authentication of users with email and password. Credentials are securely stored and backed up daily. User accounts can be created, users can be logged in, and passwords, emails, and accounts can be changed or deleted. Security rules can access user authentication information to control access to data.

Uploaded by

Juan C Jocop
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
563 views

Email & Password Authentication - Firebase

Firebase allows authentication of users with email and password. Credentials are securely stored and backed up daily. User accounts can be created, users can be logged in, and passwords, emails, and accounts can be changed or deleted. Security rules can access user authentication information to control access to data.

Uploaded by

Juan C Jocop
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 7

15/3/2016

Email&PasswordAuthenticationFirebase

JAVASCRIPT WEB GUIDE

Email & Password Authenticatio


n

Web Guide

User Authentication

Email & Password Authentication

Authenticating Users with Email & Password


Firebase makes it easy to integrate email and password authentication into your app.
The credentials are not stored in your Firebase database. They are kept in a secure
database behind the Firebase Authentication servers, and stored securely using bcrypt.
This separates sensitive user credentials from your application data, and lets you focus
on the user interface and experience for your app.
Firebase backs this data up daily and exports the credentials to redundant, off-site
backups at a secured location.

Creating User Accounts


Firebase clients expose a number of JavaScript convenience methods for account
creation and management, letting you have full control over the interface for your
application. Create new user accounts with the following snippet:
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.

var ref = new Firebase("https://<YOUR-FIREBASE-APP>.firebaseio.com");


ref.createUser({
email
: "[email protected]",
password : "correcthorsebatterystaple"
}, function(error, userData) {
if (error) {
console.log("Error creating user:", error);
} else {
console.log("Successfully created user account with uid:", userData.uid);
}
});

Creating an account will not log that new account in.


https://www.firebase.com/docs/web/guide/login/password.html

1/7

15/3/2016

Email&PasswordAuthenticationFirebase

Logging Users In
Once an account has been created, you can log a user in with the following snippet:
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.

var ref = new Firebase("https://<YOUR-FIREBASE-APP>.firebaseio.com");


ref.authWithPassword({
email
: "[email protected]",
password : "correcthorsebatterystaple"
}, function(error, authData) {
if (error) {
console.log("Login Failed!", error);
} else {
console.log("Authenticated successfully with payload:", authData);
}
});

Optional Settings
authWithPassword()

takes an optional third parameter which is an object

containing any of the following settings:


Name

Description

Type

If not specified - or set to default - sessions are persisted for


as long as you have configured in the Login & Auth tab of your
remember

App Dashboard. To limit persistence to the lifetime of the current


window, set this to sessionOnly . A value of none will not

String

persist authentication data at all and will end authentication as


soon as the page is closed.

Here is an example of password login where the session will expire upon
browser shutdown:
https://www.firebase.com/docs/web/guide/login/password.html

2/7

15/3/2016

Email&PasswordAuthenticationFirebase

1.
2.
3.
4.
5.
6.
7.

The

var ref = new Firebase("https://<YOUR-FIREBASE-APP>.firebaseio.com");


ref.authWithPassword({
email
: "[email protected]",
password : "correcthorsebatterystaple"
}, function(error, authData) { /* Your Code */ }, {
remember: "sessionOnly"
});

authData

object returned to your callback contains the following fields:


authData Object

Field

uid

provider

token

Description
A unique user ID, intended as the user's unique
key across all providers.

The authentication method used, in this case:


password .

The Firebase authentication token for this session.

Type

String

String

String

The contents of the authentication token, which


auth

will be available as the auth variable within your

Object

Security and Firebase Rules.

expires

A timestamp, in seconds since the UNIX epoch,


indicating when the authentication token expires.

Number

password

An object containing provider-specific data.

Object

password.email

The user's email address.

String

https://www.firebase.com/docs/web/guide/login/password.html

3/7

15/3/2016

Email&PasswordAuthenticationFirebase

password.isTemporaryPassword

Whether or not the user authenticated using a

Boolean

temporary password, as used in password reset


flows.

The URL to the user's Gravatar profile image,


which is retrieved from hashing the user's email. If

password.profileImageURL

the user does not have a Gravatar profile, then a

String

pixelated face is used.

Security and Firebase Rules


Now that the client is logged in, your Security and Firebase Rules have access to their
unique user ID. The

auth

variable contains the following values:


auth Variable

Field

Description

Type

uid

A unique user ID, intended as the user's unique key across all providers.

String

provider

The authentication method used, in this case: password .

String

Here is an example of how to use the

auth

variable in your Security and Firebase

Rules:
1.
2.
3.
4.
5.
6.
7.

"rules": {
"users": {
"$uid": {
// grants write access to the owner of this user account whose uid must exact
".write": "auth !== null && auth.uid === $uid",

https://www.firebase.com/docs/web/guide/login/password.html

4/7

15/3/2016

8.
9.
10.
11.
12.
13.

Email&PasswordAuthenticationFirebase

// grants read access to any user who is logged in with an email and password
".read": "auth !== null && auth.provider === 'password'"
}
}
}
}

See the User Authentication and User Based Security articles for more details.

Changing Emails
You can change the email for a user using the existing email address and password as
shown:
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.

var ref = new Firebase("https://<YOUR-FIREBASE-APP>.firebaseio.com");


ref.changeEmail({
oldEmail : "[email protected]",
newEmail : "[email protected]",
password : "correcthorsebatterystaple"
}, function(error) {
if (error === null) {
console.log("Email changed successfully");
} else {
console.log("Error changing email:", error);
}
});

Changing Passwords
You can change the password for a user using the email address and current password
as shown:
1.
2.
3.
4.
5.

var ref = new Firebase("https://<YOUR-FIREBASE-APP>.firebaseio.com");


ref.changePassword({
email
: "[email protected]",
oldPassword : "correcthorsebatterystaple",
newPassword : "neatsupersecurenewpassword"

https://www.firebase.com/docs/web/guide/login/password.html

5/7

15/3/2016

6.
7.
8.
9.
10.
11.
12.

Email&PasswordAuthenticationFirebase

}, function(error) {
if (error === null) {
console.log("Password changed successfully");
} else {
console.log("Error changing password:", error);
}
});

Sending Password Reset Emails


You can send the user a password reset email using the email address for that account:
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.

var ref = new Firebase("https://<YOUR-FIREBASE-APP>.firebaseio.com");


ref.resetPassword({
email : "[email protected]"
}, function(error) {
if (error === null) {
console.log("Password reset email sent successfully");
} else {
console.log("Error sending password reset email:", error);
}
});

You can edit the content of the password reset email from the Login & Auth tab of your
App Dashboard.

Deleting Users
You can delete a user using their email address and password as shown below:
1.
2.
3.
4.
5.
6.
7.
8.
9.

var ref = new Firebase("https://<YOUR-FIREBASE-APP>.firebaseio.com");


ref.removeUser({
email
: "[email protected]",
password : "correcthorsebatterystaple"
}, function(error) {
if (error === null) {
console.log("User removed successfully");
} else {
console.log("Error removing user:", error);

https://www.firebase.com/docs/web/guide/login/password.html

6/7

15/3/2016

10.
11.

Email&PasswordAuthenticationFirebase

}
});

https://www.firebase.com/docs/web/guide/login/password.html

7/7

You might also like