Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow override support for auth endpoints for proxy abilities #11859

Closed
wants to merge 4 commits into from
Closed

Allow override support for auth endpoints for proxy abilities #11859

wants to merge 4 commits into from

Conversation

jostster
Copy link
Contributor

This PR adds the ability to override the identitytoolkit auth api and securetoken auth api so that organizations can place a proxy behind a firewall for control against attackers. #11858

Copy link

@mTcirulnikov mTcirulnikov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks

FirebaseAuth/CHANGELOG.md Outdated Show resolved Hide resolved
@paulb777
Copy link
Member

Thanks @jostster for the PR and issue description!

@renkelvin Please evaluate if we want to move forward and want to make an API proposal.

@jostster
Copy link
Contributor Author

Thanks @jostster for the PR and issue description!

@renkelvin Please evaluate if we want to move forward and want to make an API proposal.

Thanks @paulb777 . Could you clarify what would be needed for the API Request? There shouldn't need to be any backend api changes as this just routes the client to a proxy behind a firewall that then routes it to the regular firebase api endpoints after appending a firebase key that has access to the identity tool kit and secure token api.

@paulb777
Copy link
Member

@jostster Every public Firebase API needs to go through an internal approval process. We need to sort that out internally and we have everything we need from you. Thanks!

@jostster
Copy link
Contributor Author

jostster commented Oct 3, 2023

@renkelvin if you need any specifics on the need for this, please let me know and I can provide some support tickets with Google that led us to this decision.

@jostster jostster closed this by deleting the head repository Nov 27, 2023
@firebase firebase locked and limited conversation to collaborators Dec 28, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants