1274185 - Use loop-server provided auth token in firebase requests

Status: RESOLVED INCOMPLETE

(Hello (Loop) :: Client, defect, P1)

Description

[Ed Lee :Mardak]

Bug 1274107 adds getting firebase related data from loop-server. This bug is specifically for getting room authentication access so that other users can't access random rooms.

We'll probably want a separate bug for loop-server changes to generate a signed auth token that contains the roomToken.

Additionally, we'll want to make sure there's a firebase rule that does something like:

".read": "$roomToken === auth.roomToken"

where $roomToken is the path variable.

All requests would need need to pass an extra query parameter of "auth" with the signed token from the server.

https://www.firebase.com/docs/rest/guide/user-auth.html

Comment 1

[Mark Banner (:standard8)]

Support for Hello/Loop has been discontinued.

https://support.mozilla.org/kb/hello-status

Hence closing the old bugs. Thank you for your support.