Why Firebase Authentication in Flutter? - Purpose & Use Cases

The Big Idea

What if you could add secure user login without writing complex security code yourself?

The Scenario

Imagine building a mobile app where users must create accounts and log in. You try to handle usernames, passwords, and security all by yourself.

You store passwords in your app or database without strong protection, and you have to write code to check if the user is who they say they are.

The Problem

This manual way is slow and risky. You might forget to encrypt passwords properly or miss security checks. Users could get frustrated if login fails or their data is unsafe.

Also, managing password resets, email verification, and social logins by hand is complicated and error-prone.

The Solution

Firebase Authentication handles all this hard work for you. It provides ready-made, secure login methods like email/password, Google, Facebook, and more.

It keeps user data safe, manages sessions, and lets you focus on building your app's features instead of security details.

Before vs After

✗ Before

bool checkUser(String email, String password) {
  // manually compare with stored data
  return storedEmail == email && storedPassword == password;
}

✓ After

await FirebaseAuth.instance.signInWithEmailAndPassword(email: email, password: password);

What It Enables

With Firebase Authentication, you can quickly add secure and reliable user login to your app, making it trustworthy and easy to use.

Real Life Example

Think of a shopping app where users can save their favorite items and orders. Firebase Authentication lets users log in safely without you worrying about password security or account management.

Key Takeaways

Manual user login is risky and complex.

Firebase Authentication provides secure, ready-to-use login methods.

It saves time and improves app trustworthiness.

Practice

1. What is the main purpose of Firebase Authentication in a Flutter app?

easy

A. To send push notifications to users

B. To securely manage user sign-up and login

C. To design the app's user interface

D. To store user data in a database

Solution

1. Step 1: Understand Firebase Authentication role

   Firebase Authentication helps apps manage user accounts securely.

2. Step 2: Differentiate from other Firebase services

   It does not store user data or handle UI or notifications.

3. Final Answer:

   To securely manage user sign-up and login -> Option B

4. Quick Check:

   Authentication = Secure login [OK]

Hint: Authentication means managing user login securely [OK]

Common Mistakes:

• Confusing authentication with database storage
• Thinking it handles UI design
• Assuming it sends notifications

2. Which Flutter Firebase method is used to sign up a new user with email and password?

easy

A. createUserWithEmailAndPassword

B. signOut

C. signInWithEmailAndPassword

D. sendPasswordResetEmail

Solution

1. Step 1: Identify sign-up method

   The method to create a new user is createUserWithEmailAndPassword.

2. Step 2: Differentiate from sign-in and other methods

   signInWithEmailAndPassword is for login, not sign-up.

3. Final Answer:

   createUserWithEmailAndPassword -> Option A

4. Quick Check:

   Sign-up method = createUserWithEmailAndPassword [OK]

Hint: Sign-up uses createUserWithEmailAndPassword [OK]

Common Mistakes:

• Using signInWithEmailAndPassword for sign-up
• Confusing signOut with sign-up
• Mixing reset email with sign-up

3. What will the following Flutter code print if the user enters correct email and password?

try {
  await FirebaseAuth.instance.signInWithEmailAndPassword(email: '[e-mail]', password: 'pass123');
  print('Login successful');
} catch (e) {
  print('Login failed');
}

medium

A. No output

B. Login failed

C. Syntax error

D. Login successful

Solution

1. Step 1: Analyze try block with correct credentials

   Since email and password are correct, signInWithEmailAndPassword succeeds.

2. Step 2: Check catch block execution

   No error occurs, so catch block is skipped and 'Login successful' prints.

3. Final Answer:

   Login successful -> Option D

4. Quick Check:

   Correct login prints success [OK]

Hint: Correct login prints success message [OK]

Common Mistakes:

• Assuming catch block runs on success
• Thinking syntax error occurs
• Ignoring async/await behavior

4. Identify the error in this Flutter Firebase Authentication code snippet:

final user = await FirebaseAuth.instance.createUserWithEmailAndPassword(email: email, password: password);
print(user.email);

medium

A. createUserWithEmailAndPassword returns UserCredential, not User

B. Email and password parameters are missing

C. print statement syntax is incorrect

D. Await keyword cannot be used here

Solution

1. Step 1: Check return type of createUserWithEmailAndPassword

   This method returns a UserCredential object, not a User directly.

2. Step 2: Access user email correctly

   The email is inside user.user.email, so printing user.email causes error.

3. Final Answer:

   createUserWithEmailAndPassword returns UserCredential, not User -> Option A

4. Quick Check:

   Return type is UserCredential [OK]

Hint: Remember createUserWithEmailAndPassword returns UserCredential [OK]

Common Mistakes:

• Treating UserCredential as User
• Forgetting to access .user property
• Misusing await keyword

5. You want to show a friendly error message when login fails due to wrong password. Which Flutter Firebase Authentication code snippet correctly handles this?

try {
  await FirebaseAuth.instance.signInWithEmailAndPassword(email: email, password: password);
} catch (e) {
  if (e.code == 'wrong-password') {
    print('Incorrect password. Please try again.');
  } else {
    print('Login error: ' + e.message);
  }
}

hard

A. Correctly checks error code and shows message

B. e.code is not available on exception object

C. Should use on FirebaseAuthException catch instead of generic catch

D. print statements should be replaced with throw

Solution

1. Step 1: Understand error handling in Firebase Auth

   FirebaseAuthException provides the code property; generic catch (e) may not.

2. Step 2: Use specific catch for FirebaseAuthException

   Using on FirebaseAuthException catch (e) allows access to e.code safely.

3. Step 3: Evaluate given code

   Given code uses generic catch, so e.code may cause runtime error.

4. Final Answer:

   Should use on FirebaseAuthException catch instead of generic catch -> Option C

5. Quick Check:

   Use FirebaseAuthException catch for error codes [OK]

Hint: Catch FirebaseAuthException to access error codes safely [OK]

Common Mistakes:

• Using generic catch without exception type
• Assuming all exceptions have code property
• Replacing print with throw unnecessarily