Use loop-server provided auth token in firebase requests

RESOLVED INCOMPLETE

Status

Hello (Loop)
Client
P1
normal
Rank:
22
RESOLVED INCOMPLETE
2 years ago
2 years ago

People

(Reporter: Mardak, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [akita])

(Reporter)

Description

2 years ago
Bug 1274107 adds getting firebase related data from loop-server. This bug is specifically for getting room authentication access so that other users can't access random rooms.

We'll probably want a separate bug for loop-server changes to generate a signed auth token that contains the roomToken.

Additionally, we'll want to make sure there's a firebase rule that does something like:

".read": "$roomToken === auth.roomToken"

where $roomToken is the path variable.

All requests would need need to pass an extra query parameter of "auth" with the signed token from the server.

https://www.firebase.com/docs/rest/guide/user-auth.html
Rank: 19
Priority: -- → P1
(Reporter)

Updated

2 years ago
Depends on: 1274405

Updated

2 years ago
Rank: 19 → 22
Support for Hello/Loop has been discontinued.

https://support.mozilla.org/kb/hello-status

Hence closing the old bugs. Thank you for your support.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.