README.md

Firebase Auth w/ Chrome Extensions Quickstart

This sample shows how to authorize Firebase in a Chrome extension using a Google account.

Create a Firebase project using the Firebase Console.
Create a new OAuth Client ID in your project's Developers Console, Select Chrome App and enter your Chrome Extension/App ID.
In your project's Firebase Console, enable the Google authentication method in the Auth section > SIGN IN METHOD tab.
Add the Client ID you created to the whitelist using the Whitelist client IDs from external projects (optional)
Edit the credential.js and enter your project's identifiers you get from the Firebase Console Overview > Add Firebase to your web app.
Edit the manifest.json and enter your Client ID and your extension's Public Key. Also make sure you remove all comment lines (starting with //) in the manifest.json file before deploying your extension online.
Install the Extension in your browser and click on the extension's icon once installed. The first time your users will install the extension they will have to authorize Firebase using the login button.

The keys to using Firebase in a Chrome extension are:

Create a Google Client ID that's authorized for your Chrome extension and whitelist it in your Firebase project:
- Create a new OAuth Client ID in your project's Developers Console, Select Chrome App and enter your Chrome Extension/App ID.
- In your project's Firebase Console, enable the Google authentication method in the Auth section > SIGN IN METHOD tab.
- Add the Client ID you created to the whitelist using the Whitelist client IDs from external projects (optional)
Use the chrome.identity API to get a Google OAuth token as described in https://developer.chrome.com/apps/app_identity and then use this token to authorize Firebase using Auth.signInWithCredential():

var credential = firebase.auth.GoogleAuthProvider.credential(null, token);
firebase.auth().signInWithCredential(credential);

Adding the following content security policy to your manifest.json to allow importing the Firebase SDK and accessing the Realtime Database as well as Firebase Storage:

"content_security_policy":"script-src 'self' https://www.gstatic.com/ https://*.firebaseio.com https://www.googleapis.com; object-src 'self'"