Slide 14
Slide 14 text
Use Firebase Auth on the server side
Send a token by an Authorization header with a Bearer
authentication
Run a verification check when
const server = createServer<{
req: NextApiRequest;
res: NextApiResponse;
}>({
authChecker: async ({ root, args, context, info }) => {
const token = context.request.headers.get("authorization");
if (token == null) {
return false;
}
await auth().verifyIdToken(token.replace("Bearer ", ""));
return true;
},