/Integrations
v1.2Firebase
Validate Firebase service-account structure and token exchange readiness.
Integration
Firebase
Confirms service account parsing and auth admin access.
Firebase Admin misconfiguration shows up as auth failures in production—invalid JSON, wrong project ID, or a service account pasted into client code. PreFlight parses the service account, initializes a server-side Admin client, and prepares cleanup-safe auth checks without ever exposing credentials to the browser.
Requirements
- Firebase service account JSON from Project Settings → Service accounts
- Project ID matching the service account
- Auth provider enabled in Firebase Authentication for the flows you ship
Server-side only
The service account JSON grants admin access. Store it in server-only secrets. PreFlight's Environment scan flags it if it appears in client bundles—rotate immediately if exposed.
What PreFlight checks
| Probe | What it proves |
|---|---|
| JSON parsing | The service account JSON is valid and contains expected project fields. |
| Admin initialization | A server-side Firebase Admin client initializes successfully. |
| Auth admin access | Admin auth APIs respond for the configured project. |
| Cleanup-safe lifecycle | Phase 2 test-user operations can run without leaving orphan accounts. |
Failure guidance
| Symptom | Fix |
|---|---|
| Invalid JSON | Regenerate service account JSON from Firebase → Project Settings → Service accounts. |
| Project ID mismatch | Confirm the project ID in PreFlight matches the JSON project_id field. |
| Auth provider disabled | Enable the sign-in providers your app uses in Firebase Authentication. |
| Exposed credentials | Rotate the service account if the JSON was ever committed or bundled client-side. |
Dashboard setup
- Go to Integrations → Firebase in your PreFlight project.
- Generate a service account key in Firebase and paste the JSON (stored encrypted server-side).
- Enter the project ID and confirm auth providers are enabled in Firebase Console.
- Run Pre-Flight Check and review admin auth probe results.