具有多重身份验证的 Firebase 身份验证 [英] Firebase Authentication with multi-factor authentication

问题描述

有没有办法在 Firebase 身份验证上实现多因素身份验证?从我的研究来看，这似乎是不可能的，因为 Firebase 身份验证具有公共 REST api，假设知道 API_KEY 和用户的电子邮件/密码的人可以使用

Is there a way to implement multi-factor authentication on Firebase Authentication? From my research it seems impossible since Firebase authentication has public REST api of which, assumingly, someone knowing API_KEY and user's email/pass could directly sign in to that user's account using

https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyPassword?key=[API_KEY]

谢谢

推荐答案

更新:2020 年 6 月

从 2020 年 3 月 12 日起，现在可以使用 SMS 作为第二因素与 Firebase 为 Google Cloud Identity Platform 项目，但这是一项付费服务​​.本文向您展示了如何向您的网络添加短信多重身份验证应用程序.

Update: June 2020

From March 12, 2020, It is now possible to set up multi-factor authentication using SMS as 2nd factor with Firebase for Google Cloud Identity Platform projects but this is a paid service. This article shows you how to add SMS multi-factor authentication to your web app.

我引用了 github firebase repo. 这里.

Firebase 身份验证不支持多因素身份验证.Firebase 界面在底层 SDK 支持之前无法支持此功能.为了2 因素身份验证，需要传递 2 个凭据才能获得 Firebase ID令牌.目前，一个就足以获得一个 ID 令牌.您可以提交一份使用 Firebase 支持的多因素身份验证的官方请求.

Firebase Auth does not support multi-factor authentication. FirebaseUI cannot support this feature until the underlying SDK supports it. For 2-factor auth, 2 credentials need to be passed to get a Firebase ID token. Currently, one is enough to get an ID token. You can submit an official request for multi-factor auth with Firebase support.

但是，如果从 Google 设置.

希望有帮助.

这篇关于具有多重身份验证的 Firebase 身份验证的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！