Why authentication identifies users in Firebase - See It in Action

Why Authentication Identifies Users

📖 Scenario: You are building a simple app that needs to know who is using it. To do this, you will use Firebase Authentication to identify users by their email and password.

🎯 Goal: Learn how to set up Firebase Authentication to identify users by creating a user account, configuring authentication, and signing in users.

📋 What You'll Learn

Create a user object with email and password

Set a configuration variable for Firebase Authentication

Write a function to sign in the user using Firebase Authentication

Complete the Firebase initialization with authentication enabled

💡 Why This Matters

🌍 Real World

Apps need to know who is using them to provide personalized experiences and secure access.

💼 Career

Understanding authentication is essential for cloud developers and engineers working with user management and security.

1

Create a user object with email and password

Create a dictionary called user with these exact entries: 'email': '[e-mail]' and 'password': 'securePass123'.

Firebase

# Create a dictionary called user with email and password
# Your code here

Hint

Use curly braces to create a dictionary with keys 'email' and 'password'.

2

Set a configuration variable for Firebase Authentication

Create a variable called firebase_config and set it to a dictionary with the key 'apiKey' and value 'your-api-key'.

Firebase

user = {'email': '[e-mail]', 'password': 'securePass123'}
# Create firebase_config dictionary with apiKey
# Your code here

Hint

Use a dictionary with the key 'apiKey' and the value 'your-api-key'.

3

Write a function to sign in the user using Firebase Authentication

Write a function called sign_in_user that takes email and password as parameters and calls firebase_auth.sign_in_with_email_and_password(email, password).

Firebase

user = {'email': '[e-mail]', 'password': 'securePass123'}
firebase_config = {'apiKey': 'your-api-key'}
# Define sign_in_user function to sign in with email and password
# Your code here

Hint

Define a function with two parameters and call the Firebase sign-in method inside it.

4

Complete the Firebase initialization with authentication enabled

Initialize Firebase with firebase_config and create a variable called firebase_auth by calling firebase.auth().

Firebase

user = {'email': '[e-mail]', 'password': 'securePass123'}
firebase_config = {'apiKey': 'your-api-key'}

def sign_in_user(email, password):
    firebase_auth.sign_in_with_email_and_password(email, password)
# Initialize Firebase and create firebase_auth
# Your code here

Hint

Call firebase.initialize_app with the config and assign firebase.auth() to firebase_auth.

Practice

1. What is the main purpose of authentication in Firebase?

easy

A. To store user data

B. To confirm the identity of a user

C. To speed up app loading

D. To design the app interface

Solution

1. Step 1: Understand authentication role

   Authentication is the process that confirms who a user is by checking their credentials.

2. Step 2: Differentiate from other functions

   Storing data, speeding up loading, or designing interfaces are not related to identifying users.

3. Final Answer:

   To confirm the identity of a user -> Option B

4. Quick Check:

   Authentication = Confirm identity [OK]

Hint: Authentication means checking who you are [OK]

Common Mistakes:

• Confusing authentication with data storage
• Thinking authentication speeds up apps
• Mixing authentication with design tasks

2. Which Firebase method is used to sign in a user with email and password?

easy

A. firebase.auth().signInWithEmailAndPassword()

B. firebase.auth().createUserWithEmailAndPassword()

C. firebase.auth().signOut()

D. firebase.auth().sendPasswordResetEmail()

Solution

1. Step 1: Identify sign-in method

   The method to sign in a user with email and password is signInWithEmailAndPassword().

2. Step 2: Differentiate from other methods

   createUserWithEmailAndPassword() creates a new user, signOut() logs out, and sendPasswordResetEmail() sends reset instructions.

3. Final Answer:

   firebase.auth().signInWithEmailAndPassword() -> Option A

4. Quick Check:

   Sign in = signInWithEmailAndPassword() [OK]

Hint: Sign in uses signInWithEmailAndPassword() method [OK]

Common Mistakes:

• Using createUserWithEmailAndPassword() to sign in
• Confusing signOut() with sign-in
• Mixing password reset with sign-in

3. What will the following Firebase code output if the user is not signed in?

firebase.auth().onAuthStateChanged(user => { if (user) { console.log('User ID:', user.uid); } else { console.log('No user signed in'); } });

medium

A. No user signed in

B. User ID: null

C. Error: user is null

D. User ID: undefined

Solution

1. Step 1: Understand onAuthStateChanged behavior

   This listener runs when the authentication state changes. If no user is signed in, the user parameter is null.

2. Step 2: Analyze the if-else condition

   If user is null (no signed-in user), the else block runs, printing 'No user signed in'.

3. Final Answer:

   No user signed in -> Option A

4. Quick Check:

   Null user triggers else message [OK]

Hint: Null user means no one signed in [OK]

Common Mistakes:

• Assuming user.uid exists when user is null
• Expecting an error instead of else message
• Confusing null with undefined

4. Identify the error in this Firebase authentication code snippet:

firebase.auth().signInWithEmailAndPassword(email, password).then(user => { console.log('Signed in:', user.uid); }).catch(error => { console.error(error.message); });

medium

A. The then callback receives a user object directly

B. The catch block should be before then

C. signInWithEmailAndPassword requires three arguments

D. The then callback receives a userCredential object, not user

Solution

1. Step 1: Check the promise return type

   signInWithEmailAndPassword returns a promise resolving to a userCredential object, not a user directly.

2. Step 2: Understand how to access user ID

   The user ID is accessed via userCredential.user.uid, so the code should use userCredential in the then callback.

3. Final Answer:

   The then callback receives a userCredential object, not user -> Option D

4. Quick Check:

   Then gets userCredential, not user [OK]

Hint: Then callback gets userCredential, access user inside it [OK]

Common Mistakes:

• Treating then argument as user directly
• Placing catch before then
• Passing wrong number of arguments

5. You want to restrict access to certain app features only to authenticated users. Which Firebase approach best identifies users to enforce this?

hard

A. Use anonymous sign-in without checking user identity

B. Store user data in Firestore without authentication

C. Use Firebase Authentication to sign in users and check their UID before access

D. Allow all users to access features without sign-in

Solution

1. Step 1: Understand access control needs

   Restricting features requires knowing who the user is, which Firebase Authentication provides by signing in users and giving unique IDs.

2. Step 2: Evaluate other options

   Storing data without authentication or allowing anonymous/no sign-in does not identify users, so access cannot be controlled securely.

3. Final Answer:

   Use Firebase Authentication to sign in users and check their UID before access -> Option C

4. Quick Check:

   Authentication + UID check = secure access control [OK]

Hint: Check user UID after sign-in to restrict access [OK]

Common Mistakes:

• Relying on data storage without authentication
• Using anonymous sign-in without identity checks
• Allowing access without sign-in