How do I setup Firebase auth to protect my .Net Core API

Question

I'm trying to authenticate my back end API (which is currently only local) with Firebase auth according to this blog.

I always get an 401 unauthorized even when I'm passing (I assume) the correct token. I just use the [Authorize] attribute on my controller.

Do I need more setup, allow localhost domain, setup permissions or did I do the setup wrong?

My Firebase console

My Startup.cs

     .AddJwtBearer(options =>
        {
            string projectId = "eisenhower-255ca";
            options.Authority = "https://securetoken.google.com/" + projectId;
            options.TokenValidationParameters = new TokenValidationParameters
            {
                ValidateIssuer = true,
                ValidIssuer = "https://securetoken.google.com/" + projectId,
                ValidateAudience = true,
                ValidAudience = projectId,
                ValidateLifetime = true,
            };
        });

This is the JWT token I send

{
  "name": "My Name",
  "picture": "https://lh4.googleusercontent.com/-5TcxgD5tEPM/AAAAAAAAAAI/AAAAAAAAAAA/AAKWJJNudlhDY8TkE5x1HLlh7hwZFA5dew/photo.jpg",
  "iss": "https://securetoken.google.com/eisenhower-255ca",
  "aud": "eisenhower-255ca",
  "auth_time": 1588413429,
  "user_id": "3Ot95XQyenTvBmdTnGO5HcsihBs2",
  "sub": "3Ot95XQyenTvBmdTnGO5HcsihBs2",
  "iat": 1588413429,
  "exp": 1588417029,
  "email": "[email protected]",
  "email_verified": true,
  "firebase": {
    "identities": {
      "google.com": [
        "110210403554430687155"
      ],
      "email": [
        "[email protected]"
      ]
    },
    "sign_in_provider": "google.com"
  }
}

Thanks

Jones · Accepted Answer · 2020-05-02 15:56:37Z

5

I had middleware in the wrong order:

was

app.UseAuthorization();
app.UseAuthentication();

should be

app.UseAuthentication();
app.UseAuthorization();

answered May 2, 2020 at 15:56

Jones

2171 gold badge4 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How do I setup Firebase auth to protect my .Net Core API

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related