encryption - Misunderstanding in the Firebase's token verification -


i want verify firebase's token on server side using this third party library in c++. have misunderstanding: token validation need provide public , private keys, firebase says that:

must correspond 1 of public keys listed @ https://www.googleapis.com/robot/v1/metadata/x509/securetoken@system.gserviceaccount.com

but when opened link, not find public , private keys should pass token verifying.

so, how can public , private keys token verifying?

you need public key verify firebase id token , jwt in general. link contains public keys json object (let's call publickeysobject). "kid" field in jwt header , public key follows: publickeysobject[kidfromjwt]

check firebase admin node.js sdk open sourced implementation details: https://github.com/firebase/firebase-admin-node/blob/master/src/auth/token-generator.ts


Comments

Popular posts from this blog

node.js - Node js - Trying to send POST request, but it is not loading javascript content -

javascript - Replicate keyboard event with html button -

javascript - Web audio api 5.1 surround example not working in firefox -