cloudfire-auth

import { CloudFireAuth } from "cloudfire-auth"; interface Env { YOUR_KV_NAMESPACE?: KVNamespace; FIREBASE_PRIVATE_KEY: string; FIREBASE_CLIENT_EMAIL: string; // ... other service account fields as environment variables } export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { // It is best practice to store your service account key separately and // load it from a secure source, e.g., environment variables. const serviceAccountKey = { private_key: env.FIREBASE_PRIVATE_KEY.replace(/\\n/g, '\n'), // Handle newline characters if from env client_email: env.FIREBASE_CLIENT_EMAIL, // Add other necessary fields from your Firebase service account key // For example, project_id, type, private_key_id, etc. // Ensure the structure matches ServiceAccountKey type. }; // Initialize with your Firebase project credentials const auth = new CloudFireAuth( serviceAccountKey, env.YOUR_KV_NAMESPACE // Optional: KV namespace for token caching ); const idToken = request.headers.get('Authorization')?.split('Bearer ')[1]; if (!idToken) { return new Response('No ID token provided', { status: 401 }); } // Verify an ID token try { const decodedToken = await auth.verifyIdToken(idToken); console.log("User ID:", decodedToken.uid); return new Response(`Verified user: ${decodedToken.uid}`, { status: 200 }); } catch (error: any) { console.error("Token verification failed:", error.message); return new Response(`Token verification failed: ${error.message}`, { status: 401 }); } }, };