Firebase Auth and Vendure

[rohanrajpal]

Hey, I am using firebase auth with Vendure and was trying to setup session cookies

https://firebase.google.com/docs/auth/admin/manage-cookies#node.js

I am having some trouble creating the cookie from the server side, as from the vendure authentication docs, the authenticate functions only return the user and I couldn't find a way to modify session cookies.

so how do I modify the cookie when I verify the id and csrf token in FirebaseAuthStrategy.tsx?

[michaelbromley]

Hi Rohan,

I'm not familiar with Firebase auth, but in the example I see they set the cookie using res.cookie('session', sessionCookie, options);. In Vendure there is no cookie method on the response object, but looking at this firebase example repo it looks like they are using the cookie-parser middleware to enable this.

So you could try installing that package, adding it to your apiOptions.middleware array, and then in your auth handler, check ctx.req.res to see if there is now a cookie() method.

[rohanrajpal]

Hey @Draykee

Yeah, I just started working on this again. @michaelbromley I had a few doubts

Is this the right way to enable cookie-parser middleware? I'm not able to get the cookie method in the response headers to work

const cookieParser = require("cookie-parser");
export const config: VendureConfig = {
...
    middleware: [
      {
        handler: cookieParser,
        route: "admin",
      },
    ],
...
  },

Also if we set the cookies on ourselves, what would happen the set-cookie that is returned by authenticateUser?

[michaelbromley]

Not sure if you need to call the cookieParser() function - try it and see if that works.

Also if we set the cookies on ourselves, what would happen the set-cookie that is returned by authenticateUser?

I think you can set multiple if you give yours a different name (Vendure uses the name "session" by default).

[rohanrajpal]

the cookieParser() function also does not work :(

Yeah I was thinking multiple cookie names too.

[michaelbromley]

You can also try using the beforeVendureBootstrap plugin lifecycle hook to add the middleware, as it gives you access to the Express app object.

class MyPlugin {
  static beforeVendureBootstrap(app: INestApplication) {
    app.use(cookieParser());
  }
}

[rohanrajpal]

Yeah tried that too. Didn't work :(
Let me try cookie parser in a minimal project and understand how it works. I think I'm using it incorrectly.