2

I am trying to choose between Auth0 and Firebase as my identity provider. I am building a SPA with a Backend API and I would like to use Auth0 or Firebase for all the logic regarding users/passwords/access rights and etc.

Auth0 uses OIDC, which is kinda standard, but IMHO overengineered and very complex. It has separate tokens for identity (ID Token) and for accessing backend resources (access token), whereas firebase uses a single token (if I understand correctly).

So my question here is what authentication mechanism is Firebase using and why a single token is enough in this case?

Improve this question
3
  • Have you read their docs? firebase.google.com/docs/auth – schroeder♦ Jul 25 '18 at 10:33
  • Yes, but it is not elaborate enough, e.g. that is the most detail I could find: You can also use the provided authentication token to verify the identity of users in your own backend services. – eddyP23 Jul 25 '18 at 11:18
  • Which suggests that there is a single token – eddyP23 Jul 25 '18 at 11:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.