moai-platform-firebase-auth

Firebase Authentication enables Google Sign-In and social login (Facebook, Twitter/X, GitHub, Apple, Microsoft) by configuring providers in the Firebase Console, then implementing sign-in flows with the Web SDK v9+ or mobile SDKs. Each provider requires credential setup in both Firebase and its respective platform console.

Phone Authentication in Firebase supports SMS-based verification across regions with reCAPTCHA protection to prevent abuse. Configure phone auth in Firebase Console, then use the SDK to handle sign-in and verification flows for cross-region deployments.

Custom claims in Firebase Authentication enable role-based access control by attaching user roles and permissions to ID tokens. Set custom claims server-side, then enforce them in Security Rules for Firestore, Storage, and Realtime Database to restrict data access by role.

Anonymous Authentication in Firebase lets users access your app without credentials, then upgrade to permanent accounts by linking social or phone auth. Implement anonymous sign-in, store guest data with anonymous user IDs, then migrate data when upgrading to authenticated accounts.

Firebase Authentication supports web (SDK v9+), iOS, Android, Flutter, and React Native through native SDKs and cross-platform libraries. Each platform uses provider-specific sign-in flows (popup/credential on web, native flows on mobile) integrated with the same Firebase backend.

Security Rules in Firebase integrate with Authentication to control access to Firestore, Storage, and Realtime Database. Write rules that check user authentication status and custom claims to enforce row-level and collection-level permissions based on authenticated identity.