Authentication

Recall our vague framework of building web things:

• Can you do DOM Manipulation?
• Can you do CRUD to a DB?
• Role-Based Access Control
• Usability

OK we're moving from CRUD into RBAC.

So in order to have access control (a HUGE topic in cyber) you first need something that identifies your users.

That's today's topic: how can I authenticate that you are who you say you are.

Passwords?

So I'm happy to babble about the mechanics of passwords a little later in the semester. But they are the most common and cheapest thing on the internet for handling authentication.

But like the rest of web-dev I'll show you the firebase way and then, if you'd like, I'll show you how the rest of the world does it.

OAuth in Firebase

Alright so let's setup Google OAuth together and do a live demo.

Now to the code side:

Here's your daily flag: