Enabling Authentication

You can sign in a user either

anonymously,
by email and password,
by phone verification,
using a custom token,
using Facebook,
using Google.

Each of these login mechanisms need to be enabled in your Firebase console at the 'Login & Auth' tab.

What's returned when logged in?

All login functions below, as well as getCurrentUser return a 'User' object with these properties:

param	optional	description
`uid`	no	The Firebase User ID
`anonymous`	no	Whether or not the user logged in anonymously
`emailVerified`	no	You can send an email with a verification link which this refers to
`providers`	no	An array of {id: value} objects, where value can be 'facebook.com', etc
`email`	yes	Not all providers require an email address
`name`	yes	The name stored at the provider
`profileImageURL`	yes	A string containing a link to a user image on the web
`phoneNumber`	yes	The user's phone number
`refreshToken`	yes	iOS only

Functions

Listening to auth state changes

As stated here:

The recommended way to get the current user is by setting a listener on the Auth object

To listen to auth state changes you can register a listener during init:

  firebase.init({
    onAuthStateChanged: function(data) { // optional but useful to immediately re-logon the user when he re-visits your app
      console.log(data.loggedIn ? "Logged in to firebase" : "Logged out from firebase");
      if (data.loggedIn) {
        console.log("user's email address: " + (data.user.email ? data.user.email : "N/A"));
      }
    }
  });

If - for some reason - you want more control over the listener you can use these methods after you ran init:

  // configure a listener:
  var listener = {
    onAuthStateChanged: function(data) {
      console.log(data.loggedIn ? "Logged in to firebase" : "Logged out from firebase");
      if (data.loggedIn) {
        console.log("User info", data.user);
      }
    },
    thisArg: this
  };

  // add the listener:
  firebase.addAuthStateListener(listener);
  
  // stop listening to auth state changes:
  firebase.removeAuthStateListener(listener);
  
  // check if already listening to auth state changes
  firebase.hasAuthStateListener(listener);

Get Current User

Once the user is logged in you can retrieve the currently logged in user.

JavaScript

  firebase.getCurrentUser().then(
    function (result) {
      console.log(JSON.stringify(result));
    },
    function (errorMessage) {
      console.log(errorMessage);
    }
  );

TypeScript

  firebase.getCurrentUser().then(user => {
      alert("User uid: " + user.uid);
  }, error => {
      alert("Trouble in paradise: " + error);
  });

Fetch providers for email

Want to know which auth providers are associated with an emailaddress?

TypeScript

  const emailAddress = "someone@domain.com";
  firebase.fetchProvidersForEmail(emailAddress).then((providers: Array<string>) => {
    console.log(`Providers for ${emailAddress}: ${JSON.stringify(providers)}`);
  });

Updating a profile

Pass in at least one of displayName and photoURL. The logged in user will be updated, but for getCurrentUser to reflect the change you'll need to do a logout-login.

  firebase.updateProfile({
    displayName: 'Eddy Verbruggen',
    photoURL: 'http://provider.com/profiles/eddyverbruggen.png'
  }).then(
      function () {
        // called when update profile was successful
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

Anonymous login

Don't forget to enable anonymous login in your firebase instance.

JavaScript

  firebase.login({
    type: firebase.LoginType.ANONYMOUS
  }).then(
      function (result) {
        console.log(JSON.stringify(result));
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

TypeScript

  firebase.login({
      type: firebase.LoginType.ANONYMOUS
  }).then(user => {
      alert("User uid: " + user.uid);
  }, error => {
      alert("Trouble in paradise: " + error);
  });

Email-Password login

Don't forget to enable email-password login in your firebase instance.

  firebase.login({
    type: firebase.LoginType.PASSWORD,
    passwordOptions: {
      email: 'useraccount@provider.com',
      password: 'theirpassword'
    }
  }).then(
      function (result) {
        JSON.stringify(result);
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

Managing email-password accounts

Creating a Password account

This may not work on an (Android) simulator. See #463.

  firebase.createUser({
    email: 'eddyverbruggen@gmail.com',
    password: 'firebase'
  }).then(
      function (result) {
        dialogs.alert({
          title: "User created",
          message: "userid: " + result.key,
          okButtonText: "Nice!"
        })
      },
      function (errorMessage) {
        dialogs.alert({
          title: "No user created",
          message: errorMessage,
          okButtonText: "OK, got it"
        })
      }
  );

Resetting a password

  firebase.resetPassword({
    email: 'useraccount@provider.com'
  }).then(
      function () {
        // called when password reset was successful,
        // you could now prompt the user to check his email
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

Changing a password

  firebase.changePassword({
    email: 'useraccount@provider.com',
    oldPassword: 'myOldPassword',
    newPassword: 'myNewPassword'
  }).then(
      function () {
        // called when password change was successful
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

Phone Verification

Don't forget to enable Phone login in your firebase instance.
You can only test this on a real device (not on an emulator/simulator).
Use the phone number of the device you're testing on.
ANDROID: Make sure you've uploaded your SHA1 fingerprint(s) to the Firebase console, then download the latest google-services.json file and add it to app/App_Resources/Android.
iOS: Make sure you have messaging enabled as well, as this uses push notifications on iOS.

  firebase.login({
    type: firebase.LoginType.PHONE,
    phoneOptions: {
      phoneNumber: '+12345678900',
      verificationPrompt: "The received verification code" // default "Verification code"
    }
  }).then(
      function (result) {
        JSON.stringify(result);
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

Custom login

Use this login type to authenticate against firebase using a token generated by your own backend server. See these instructions on how to generate the authentication token.

  var token = "myBackendToken";

  firebase.login({
    type: firebase.LoginType.CUSTOM,
    customOptions: {
      token: token
    }
  }).then(
      function (result) {
        JSON.stringify(result);
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

Facebook login

First, enable Facebook login in your Firebase instance and add the App-ID and App-Secret.

Then add the following lines to your code and check for setup instructions for your platform below.

  firebase.login({
    type: firebase.LoginType.FACEBOOK,
    // Optional
    facebookOptions: {
      // defaults to ['public_profile', 'email']
      scope: ['public_profile', 'email']
    }
  }).then(
      function (result) {
        JSON.stringify(result);
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

For a complete list of the available scope permissions, visit Facebook's documentation: https://developers.facebook.com/docs/facebook-login/permissions.

Post-login Graph API querying

Upon successful authentication, Facebook creates an access token that can be obtained from the login method's result object. This access token can then be used for querying the Facebook Graph API, by feeding it to either Facebook's Javascript SDK or their iOS/Android native SDKs:

"providers": [
         {
             "id": "facebook.com",
             "token": "<FB token>"
         }
     ]

iOS

If you didn't choose this feature during installation you can open the Podfile in the plugin's platforms/ios folder and uncomment the Facebook line.
Add a bit of config to app\App_Resources\iOS\Info.plist as instructed in Step 4 here. Facebook login works perfectly on the demo app, so if you can't get it working, make sure to check out the demo app's config.

Android

If you didn't choose this feature during installation you can uncomment the facebook SDK in node_modules\nativescript-plugin-firebase\platforms\android\include.gradle

Add <meta-data android:name="com.facebook.sdk.ApplicationId" android:value="@string/facebook_app_id"/> to the manifest/application tag in app\App_Resources\Android\AndroidManifest.xml, so it becomes similar to this:

	<application
		android:name="com.tns.NativeScriptApplication"
		..>
		
		<meta-data android:name="com.facebook.sdk.ApplicationId" android:value="@string/facebook_app_id"/>

		<activity
			android:name="com.tns.NativeScriptActivity"
			..>

Create a file app\App_Resources\Android\values\facebooklogin.xml and add this (replace the id):

<?xml version='1.0' encoding='utf-8'?>
<resources>
     <string name="facebook_app_id">126035687816994</string>
</resources>

In your Facebook dev console, go to the Basic settings and add the Android platform if you haven't already. Then set the 'Google Play Packagename' to your applicationId (see your package.json) and set 'Classname' to com.tns.NativeScriptActivity.
Set the Key-Hash as well. If you don't know it you can try Facebook login in your app and observe the adb logcat output for something like Key hash <......> does not match any stored key hashes.

Google Sign-In

First, enable Google Sign-In in your firebase instance and add the Web SDK configuration.

Then add the following lines to your code and check for setup instructions for your platform below.

  firebase.login({
    type: firebase.LoginType.GOOGLE,
    // Optional 
    googleOptions: {
      hostedDomain: "mygsuitedomain.com"
    }
  }).then(
      function (result) {
        JSON.stringify(result);
      },
      function (errorMessage) {
        console.log(errorMessage);
      }
  );

iOS

If you didn't choose this feature during installation you can open the Podfile in the plugin's platforms/ios folder and uncomment the GoogleSignIn line.

Make sure the URL Scheme for REVERSED_CLIENT_ID is in app/App_Resources/iOS/Info.plist:

   <key>CFBundleURLTypes</key>
   <array>
   	<dict>
   		<key>CFBundleTypeRole</key>
   		<string>Editor</string>
   		<key>CFBundleURLName</key>
   		<string>REVERSED_CLIENT_ID</string>
   		<key>CFBundleURLSchemes</key>
   		<array>
   			<string>com.googleusercontent.apps.1052836194035-l81fsjai1u40ocnqjcpnoebnnsltt03b</string>
   		</array>
   	</dict>
   </array>

Android

If you didn't choose this feature during installation you can uncomment google-services-auth in node_modules\nativescript-plugin-firebase\platforms\android\include.gradle
Google Sign-In requires an SHA1 fingerprint: see Authenticating Your Client for details. If you don't do this you will see the account selection popup, but you won't be able to actually sign in.

getAuthToken

If you want to authenticate your user from your backend server you can obtain a Firebase auth token for the currently logged in user.

  firebase.getAuthToken({
    // default false, not recommended to set to true by Firebase but exposed for {N} devs nonetheless :)
    forceRefresh: false
  }).then(
      function (token) {
        console.log("Auth token retrieved: " + token);
      },
      function (errorMessage) {
        console.log("Auth token retrieval error: " + errorMessage);
      }
  );

logout

Shouldn't be more complicated than:

  firebase.logout();

reauthenticate

Some security-sensitive actions (deleting an account, changing a password) require that the user has recently signed in. If you perform one of these actions, and the user signed in too long ago, the action fails. When this happens (or to prevent it from happening), re-authenticate the user.

  firebase.reauthenticate({
    type: firebase.LoginType.PASSWORD, // or GOOGLE / FACEBOOK
    // this is only required in type == PASSWORD
    passwordOptions: {
      email: 'user@domain.com',
      password: 'thePassword'
    }
  }).then(
      function () {
        // you can now safely delete the account / change the password
        dialogs.alert({
          title: "Re-authenticated user",
          okButtonText: "OK"
        });
      },
      function (error) {
        dialogs.alert({
          title: "Re-authenticate error",
          message: error,
          okButtonText: "OK"
        });
      }
  );

sendEmailVerification

Sending an "email confirmation" email can be done after the user logged in:

  firebase.sendEmailVerification().then(
      function () {
        console.log("Email verification sent");
      },
      function (error) {
        console.log("Error sending email verification: " + error);
      }
  );

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

AUTHENTICATION.md

AUTHENTICATION.md

Enabling Authentication

What's returned when logged in?

Functions

Listening to auth state changes

Get Current User

JavaScript

TypeScript

Fetch providers for email

TypeScript

Updating a profile

Anonymous login

JavaScript

TypeScript

Email-Password login

Managing email-password accounts

Creating a Password account

Resetting a password

Changing a password

Phone Verification

Custom login

Facebook login

Post-login Graph API querying

iOS

Android

Google Sign-In

iOS

Android

getAuthToken

logout

reauthenticate

sendEmailVerification

Files

AUTHENTICATION.md

Latest commit

History

AUTHENTICATION.md

File metadata and controls

Enabling Authentication

What's returned when logged in?

Functions

Listening to auth state changes

Get Current User

JavaScript

TypeScript

Fetch providers for email

TypeScript

Updating a profile

Anonymous login

JavaScript

TypeScript

Email-Password login

Managing email-password accounts

Creating a Password account

Resetting a password

Changing a password

Phone Verification

Custom login

Facebook login

Post-login Graph API querying

iOS

Android

Google Sign-In

iOS

Android

getAuthToken

logout

reauthenticate

sendEmailVerification