如何从 FCM 令牌获取 Firebase 用户 ID?(在服务器上的管理代码中) [英] How to get Firebase user id from FCM token? (in admin code on server)
问题描述
我已登录的 Android 客户端在我的服务器上注册了他们的令牌.问题是我不确定特定客户端发送的令牌是否真正属于该客户端用户 ID.坏客户端可能会注册其他用户的有效令牌.
My signed-in Android clients register their tokens with my server. The problem is I am not sure whether the token sent by a particular client genuinely belongs to that client user id. A bad client could register valid tokens of other users.
给定 FCM 令牌和用户 ID，我在服务器上的管理代码如何验证令牌确实属于(经过身份验证的)用户 ID?
Given an FCM token and a user id, how can my admin code on the server verify that the token indeed belongs to the (authenticated) user id?
推荐答案
在 Firebase 级别，身份验证 UID 和云消息传递实例 ID 令牌之间没有联系.
On a Firebase level there is no connection between a Authentication UID, and a Cloud Messaging Instance ID token.
Firebase 身份验证 UID 唯一标识用户.如果该用户在其他设备上登录，则他们具有相同的 UID 值.
A Firebase Authentication UID uniquely identifies a user. If that user signs in on a different device, they have the same UID value.
Firebase 身份验证实例 ID 令牌用于标识单个设备上的单个应用.如果其他用户登录该应用，该应用将保留相同的实例 ID 令牌.
A Firebase Authentication Instance ID token identifies a single app on a single device. If a different user signs in to that app, the app will keep the same Instance ID token.
如果要将 UID 与 FCM 令牌相关联，则必须在应用程序代码中执行此操作.例如，当用户退出他们的应用程序时，许多开发人员会清除 FCM 实例 ID 令牌.这可确保在同一设备上登录的新用户将获得新的实例 ID 令牌.
If you want to associate a UID with an FCM tokens, you have to do that in your application code. For example, many developers clear the FCM Instance ID tokens when the user signs out of their app. This ensures that a new user who signs in on the same device will get a new Instance ID token.
另见:
这篇关于如何从 FCM 令牌获取 Firebase 用户 ID?(在服务器上的管理代码中)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
