具有多因素身份验证的Firebase身份验证
是否可以在Firebase身份验证上实施多因素身份验证?根据我的研究,由于Firebase身份验证具有公共REST api,这似乎是不可能的,假设有人知道API_KEY和用户的电子邮件/密码可以直接使用来登录该用户的帐户
Is there a way to implement multi-factor authentication on Firebase Authentication? From my research it seems impossible since Firebase authentication has public REST api of which, assumingly, someone knowing API_KEY and user's email/pass could directly sign in to that user's account using
https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyPassword?key= [API_KEY]
谢谢
更新:2020年6月
从2020年3月12日开始,现在可以使用SMS作为Firebase的第二要素来设置多要素身份验证,用于本文向您展示如何向您的网络添加SMS多因素身份验证应用程序.
Update: June 2020
From March 12, 2020, It is now possible to set up multi-factor authentication using SMS as 2nd factor with Firebase for Google Cloud Identity Platform projects but this is a paid service. This article shows you how to add SMS multi-factor authentication to your web app.
我引用的是 github firebase存储库..
Firebase身份验证不支持多因素身份验证.FirebaseUI在基础SDK支持之前,该功能不支持此功能.为了2要素身份验证,需要传递2凭证以获得Firebase ID令牌.目前,一个足以获得一个ID令牌.您可以提交正式请求具有 Firebase支持的多因素身份验证.
但是,如果通过 Google设置.
希望它会有所帮助.