All posts by Philipp Kast

Verify ID Tokens

Verify ID Tokens  |  Firebase

If your Firebase client app communicates with a custom backend server, you might need to identify the currently signed-in user on that server. To do so securely, after a successful sign-in, send the user’s ID token to your server using HTTPS. Then, on the server, verify the integrity and authenticity of the ID token and retrieve the uid from it. You can use the uid transmitted in this way to securely identify the currently signed-in user on your server.

Source: firebase.google.com/docs/auth/admin/verify-id-tokens