encryption - Misunderstanding in the Firebase's token verification -
i want verify firebase's token on server side using this third party library in c++. have misunderstanding: token validation need provide public , private keys, firebase says that:
must correspond 1 of public keys listed @ https://www.googleapis.com/robot/v1/metadata/x509/securetoken@system.gserviceaccount.com
but when opened link, not find public , private keys should pass token verifying.
so, how can public , private keys token verifying?
you need public key verify firebase id token , jwt in general. link contains public keys json object (let's call publickeysobject). "kid" field in jwt header , public key follows: publickeysobject[kidfromjwt]
check firebase admin node.js sdk open sourced implementation details: https://github.com/firebase/firebase-admin-node/blob/master/src/auth/token-generator.ts
Comments
Post a Comment