firebase-login-custom 0.5.3 → 0.5.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,19 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.5.5](https://github.com/vergissberlin/firebase-login-custom/compare/v0.5.4...v0.5.5) (2026-03-17)
4
+
5
+
6
+ ### Bug Fixes
7
+
8
+ * update README to deprecate Firebase Secret usage for JWT generation in favor of Service Accounts ([79addb8](https://github.com/vergissberlin/firebase-login-custom/commit/79addb888adf5b62795e6c6eb0a09d0e6f509ee0))
9
+
10
+ ## [0.5.4](https://github.com/vergissberlin/firebase-login-custom/compare/v0.5.3...v0.5.4) (2026-03-17)
11
+
12
+
13
+ ### Bug Fixes
14
+
15
+ * update CI and release workflows with enhanced comments and execution order ([8a268d7](https://github.com/vergissberlin/firebase-login-custom/commit/8a268d7fa3f61b7f71e8fa5017f6f12cf4b452ee))
16
+
3
17
  ## [0.5.3](https://github.com/vergissberlin/firebase-login-custom/compare/v0.5.2...v0.5.3) (2026-03-17)
4
18
 
5
19
 
package/README.md CHANGED
@@ -6,10 +6,13 @@
6
6
 
7
7
  ## Authenticating Users with Email & Password
8
8
 
9
- To authenticate a user using [Custom Login](https://www.firebase.com/docs/web/guide/login/custom.html),
9
+ To authenticate a user using [Custom Login](https://firebase.google.com/docs/auth/web/custom-auth),
10
10
  we must provide each client with a secure JWT that has been generated on a server.
11
11
  We provide several helper libraries for generating JWTs.
12
- Use a Firebase Secret to generate these tokens. Firebase Secrets can be found by logging into the
12
+
13
+ > **Deprecation notice:** The token-based flow using a **Firebase Secret** (Security tab in the Firebase Dashboard) is deprecated. Firebase recommends using [Service Accounts](https://firebase.google.com/docs/auth/admin/create-custom-tokens) and the Firebase Admin SDK to create custom tokens. This package still supports the legacy `secret` option for existing setups.
14
+
15
+ Use a Firebase Secret to generate these tokens (legacy). Firebase Secrets can be found by logging into the
13
16
  Firebase account and clicking on the Security tab in the Firebase Dashboard.
14
17
 
15
18
  **Security:** Never commit your Firebase secret or put it in frontend code. Load it from environment variables or a secure config (e.g. `process.env.FIREBASE_SECRET`) on the server only.
@@ -17,7 +20,7 @@ Firebase account and clicking on the Security tab in the Firebase Dashboard.
17
20
  This package is a wrapper to Firebase custom login including all dependencies
18
21
  with the exception of firebase itself.
19
22
 
20
- More information can be found in the [Firebase custom login documentation](https://www.firebase.com/docs/web/guide/login/custom.html).
23
+ More information can be found in the [Firebase custom login documentation](https://firebase.google.com/docs/auth/web/custom-auth).
21
24
 
22
25
  ## Installation
23
26
 
@@ -74,6 +77,6 @@ const { authData } = await firebaseLoginCustomAsync(firebaseRef, { uid: 'user-1'
74
77
  Please report issues to [ticket system](https://github.com/vergissberlin/firebase-login-custom/issues).
75
78
  Pull requests are welcome here! See [CONTRIBUTING.md](CONTRIBUTING.md) for how to contribute (install locally, test, and releasing).
76
79
 
77
- ## Thanks to {#thanks}
80
+ ## Thanks to
78
81
 
79
82
  1. A special thanks to the developers of **NodeJS** and **Firebase**.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "firebase-login-custom",
3
- "version": "0.5.3",
3
+ "version": "0.5.5",
4
4
  "description": "This package is a wrapper to firebase custom login including all dependencies with the exception of firebase itself.",
5
5
  "engines": {
6
6
  "node": ">=20"