Integrating back-end systems with Firebase for better app management
summary
Shows a concrete flow for inviting and vetting moderators: create users with the Admin SDK, attach custom claims, email a one‑time code, exchange it for a custom auth token and sign into Firebase so the session reflects moderator privileges. Demonstrates a live moderator action proxyed through the backend, a spam detector built with Cloud Functions that revokes accounts and adds offenders to a blacklist via security rules, and a Ruby REST client polling realtime stats — all working end to end.
AI-written summary · about
chapters (10)
- 0:00Introduction to challenges
- 1:05Defining user roles
- 2:26Custom authentication system
- 4:44Token exchange process
- 7:15Frontend integration
- 10:01Securing privileged actions
- 12:30Detecting malicious activity
- 15:13Blocking malicious users
- 18:05REST API and monitoring
- 20:56Admin SDK conclusion
related talks
40mThree New Ways to Secure Your App with Firebase Authentication
14mYour guide to server side authentication with Firebase
21mServerless security modeling in Firebase
17mFirebase Authentication: From fully managed to fully customizable
31mThe Power of Cloud Functions
13mSecure your Firebase app from the start
34mBuilding Conversational Apps with Firebase and Google Actions
42mDevelop Mobile Apps without Infrastructure